@crewx/sdk 0.8.0-rc.79 → 0.8.0-rc.82

package/dist/hooks/define.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.definePlugin = definePlugin;
-const observer_1 = require("./observer");
-function definePlugin(def) {
-    return new (class extends observer_1.ToolObserverPlugin {
-        name = def.name;
-        version = def.version;
-        on = def.on;
-        run = def.run;
-    })();
-}
-//# sourceMappingURL=define.js.map

package/dist/hooks/dispatch.js

@@ -1,147 +0,0 @@
-"use strict";
-/**
- * Security notes:
- *
- * (M1) Codex `systemMessage` is merged into the agent's system prompt directly.
- *      Guide messages MUST NOT contain dynamic external input (tool_input,
- *      external API results, etc.) to prevent prompt injection via hook inject.
- *
- * Provider matching: When `provider` is not specified in a hook definition,
- * it applies to ALL providers (§4.1.1 2-Layer Selector design).
- * This is intentional — allows catch-all safety rules.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.sanitizeDenyReason = sanitizeDenyReason;
-exports.sanitizeInjectMessage = sanitizeInjectMessage;
-exports.isPathSafe = isPathSafe;
-exports.formatInjectOutput = formatInjectOutput;
-exports.formatDenyOutput = formatDenyOutput;
-exports.buildHookContext = buildHookContext;
-exports.evaluateHook = evaluateHook;
-const path_1 = require("path");
-const tool_normalize_1 = require("./tool-normalize");
-const MAX_REASON_LENGTH = 200;
-const MAX_INJECT_LENGTH = 2000;
-function sanitizeDenyReason(reason) {
-    const cleaned = reason.replace(/[\x00-\x1f\x7f\u2028\u2029]/g, '');
-    if (cleaned.length <= MAX_REASON_LENGTH) {
-        return cleaned;
-    }
-    return cleaned.slice(0, MAX_REASON_LENGTH - 11) + ' [redacted]';
-}
-function sanitizeInjectMessage(message) {
-    const cleaned = message.replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f\u2028\u2029]/g, '');
-    if (cleaned.length <= MAX_INJECT_LENGTH) {
-        return cleaned;
-    }
-    return cleaned.slice(0, MAX_INJECT_LENGTH - 11) + ' [redacted]';
-}
-function isPathSafe(pluginPath, projectRoot) {
-    const resolved = (0, path_1.resolve)(pluginPath);
-    const root = (0, path_1.resolve)(projectRoot);
-    const rel = (0, path_1.relative)(root, resolved);
-    if (rel.startsWith('..') || (0, path_1.resolve)(resolved).startsWith('/etc/') || (0, path_1.resolve)(resolved).startsWith('/usr/')) {
-        return false;
-    }
-    if (resolved.includes('node_modules')) {
-        return false;
-    }
-    return true;
-}
-function toProvider(provider) {
-    if (provider === 'codex')
-        return 'codex';
-    return 'claude';
-}
-function formatInjectOutput(provider, hookEventName, message) {
-    switch (provider) {
-        case 'codex':
-            return {
-                hookSpecificOutput: {
-                    hookEventName,
-                    permissionDecision: 'allow',
-                    systemMessage: message,
-                },
-            };
-        default:
-            return {
-                hookSpecificOutput: {
-                    hookEventName,
-                    permissionDecision: 'allow',
-                    additionalContext: message,
-                },
-            };
-    }
-}
-function formatDenyOutput(_provider, hookEventName, reason) {
-    return {
-        hookSpecificOutput: {
-            hookEventName,
-            permissionDecision: 'deny',
-            permissionDecisionReason: reason,
-        },
-    };
-}
-function buildHookContext(input, cwd, provider = 'cli/claude') {
-    const resolvedProvider = provider || process.env.CREWX_PROVIDER || 'cli/claude';
-    return {
-        event: 'beforeTool',
-        traceId: input.tool_use_id || '',
-        agent: {
-            id: process.env.CREWX_AGENT_ID || '',
-            role: process.env.CREWX_AGENT_ROLE || '',
-            team: process.env.CREWX_AGENT_TEAM || '',
-        },
-        provider: resolvedProvider,
-        thread: { id: process.env.CREWX_THREAD_ID || '' },
-        tool: {
-            name: (0, tool_normalize_1.normalizeToolName)(input.tool_name, resolvedProvider),
-            rawName: input.tool_name,
-            input: input.tool_input,
-        },
-        cwd: cwd || input.cwd,
-        sessionId: input.session_id || process.env.CREWX_SESSION_ID || '',
-        pass: () => ({ type: 'pass' }),
-        deny: (r) => ({ type: 'deny', reason: r }),
-        inject: (m) => ({ type: 'inject', message: m }),
-        modify: (p) => ({ type: 'modify', patch: p }),
-    };
-}
-async function evaluateHook(plugin, input, cwd, provider = 'cli/claude') {
-    const ctx = buildHookContext(input, cwd, provider);
-    const result = await plugin.run(ctx);
-    const simpleProvider = toProvider(provider);
-    const baseOutput = {
-        hookSpecificOutput: {
-            hookEventName: input.hook_event_name,
-            permissionDecision: 'allow',
-        },
-    };
-    switch (result.type) {
-        case 'pass':
-            return { exitCode: 0, stdout: baseOutput, injected: false };
-        case 'deny': {
-            const sanitizedReason = sanitizeDenyReason(result.reason);
-            return {
-                exitCode: 2,
-                stdout: formatDenyOutput(simpleProvider, input.hook_event_name, sanitizedReason),
-                injected: false,
-            };
-        }
-        case 'inject': {
-            const sanitizedMessage = sanitizeInjectMessage(result.message);
-            return {
-                exitCode: 0,
-                stdout: formatInjectOutput(simpleProvider, input.hook_event_name, sanitizedMessage),
-                injected: true,
-            };
-        }
-        case 'modify':
-            console.error(`[crewx] Hook result type '${result.type}' is not supported in Phase 0. ` +
-                `Plugin: ${plugin.name}. Treating as pass.`);
-            return { exitCode: 0, stdout: baseOutput, injected: false };
-        default:
-            return { exitCode: 0, stdout: baseOutput, injected: false };
-    }
-}
-//# sourceMappingURL=dispatch.js.map

package/dist/hooks/observer.js

@@ -1,60 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ToolObserverPlugin = void 0;
-const plugin_1 = require("../plugin");
-class ToolObserverPlugin extends plugin_1.CrewxPlugin {
-    unsubs = [];
-    attach(crewx) {
-        if (this.on.beforeTool) {
-            const unsub = crewx.on('tool:observed:before', async (e) => {
-                if (!this.matchesTool(this.on.beforeTool, e.tool.name))
-                    return;
-                const ctx = this.buildContext('beforeTool', e);
-                await this.run(ctx);
-            });
-            this.unsubs.push(unsub);
-        }
-        if (this.on.afterTool) {
-            const unsub = crewx.on('tool:observed:after', async (e) => {
-                if (!this.matchesTool(this.on.afterTool, e.tool.name))
-                    return;
-                const ctx = this.buildContext('afterTool', e);
-                await this.run(ctx);
-            });
-            this.unsubs.push(unsub);
-        }
-    }
-    async detach(_crewx) {
-        for (const unsub of this.unsubs)
-            unsub();
-        this.unsubs = [];
-    }
-    matchesTool(filter, toolName) {
-        if (filter === true)
-            return true;
-        return filter.includes(toolName);
-    }
-    buildContext(event, e) {
-        return {
-            event,
-            traceId: e.traceId,
-            agent: {
-                id: e.agentId || e.agentRef,
-                role: '',
-                team: '',
-            },
-            provider: e.provider,
-            thread: { id: e.threadId || '' },
-            tool: {
-                name: e.tool.name,
-                rawName: e.tool.rawName,
-                input: 'input' in e.tool ? e.tool.input : undefined,
-            },
-            cwd: process.cwd(),
-            sessionId: e.sessionId || '',
-            pass: () => ({ type: 'pass' }),
-        };
-    }
-}
-exports.ToolObserverPlugin = ToolObserverPlugin;
-//# sourceMappingURL=observer.js.map

package/dist/hooks/plugin.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HookPlugin = void 0;
-exports.defineHookPlugin = defineHookPlugin;
-class HookPlugin {
-    capabilities = { required: [] };
-}
-exports.HookPlugin = HookPlugin;
-function defineHookPlugin(def) {
-    return new (class extends HookPlugin {
-        name = def.name;
-        version = def.version;
-        capabilities = def.capabilities ?? { required: [] };
-        run = def.run;
-    })();
-}
-//# sourceMappingURL=plugin.js.map

package/dist/hooks/tool-normalize.js

@@ -1,110 +0,0 @@
-"use strict";
-/**
- * Tool name normalization — 5-provider raw tool names → Tools.* enum.
- *
- * Design: docs/hook-설계서.md §8.1 Tools.* 정규화 enum.
- *
- * Raw tool names come from each provider's PreToolUse stdin payload:
- *  - Claude:   "Read" / "Write" / "Edit" / "Bash" / "Grep" / "Glob" / ...
- *  - Codex:    everything routed through "Bash" (shell command) — parsing optional
- *  - Gemini:   "read_file" / "write_file" / "replace" / "run_shell_command" / ...
- *  - Copilot:  "read" / "write" / "shell" / ...
- *  - OpenCode: "file.read" / "file.write" / "file.edit" / "bash" / ...
- *
- * Unknown tools fall through to Tools.Other (still usable via `rawName` in rules).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeToolName = normalizeToolName;
-const types_1 = require("./types");
-const CLAUDE = {
-    Read: types_1.Tools.FileRead,
-    Write: types_1.Tools.FileWrite,
-    Edit: types_1.Tools.FileEdit,
-    MultiEdit: types_1.Tools.FileEdit,
-    NotebookEdit: types_1.Tools.FileEdit,
-    Bash: types_1.Tools.Shell,
-    Grep: types_1.Tools.Search,
-    Glob: types_1.Tools.Search,
-};
-const GEMINI = {
-    read_file: types_1.Tools.FileRead,
-    write_file: types_1.Tools.FileWrite,
-    replace: types_1.Tools.FileEdit,
-    edit: types_1.Tools.FileEdit,
-    run_shell_command: types_1.Tools.Shell,
-    search_file_content: types_1.Tools.Search,
-    glob: types_1.Tools.Search,
-};
-const COPILOT = {
-    read: types_1.Tools.FileRead,
-    write: types_1.Tools.FileWrite,
-    edit: types_1.Tools.FileEdit,
-    shell: types_1.Tools.Shell,
-    bash: types_1.Tools.Shell,
-    search: types_1.Tools.Search,
-    grep: types_1.Tools.Search,
-};
-const OPENCODE = {
-    'file.read': types_1.Tools.FileRead,
-    'file.write': types_1.Tools.FileWrite,
-    'file.edit': types_1.Tools.FileEdit,
-    read: types_1.Tools.FileRead,
-    write: types_1.Tools.FileWrite,
-    edit: types_1.Tools.FileEdit,
-    bash: types_1.Tools.Shell,
-    shell: types_1.Tools.Shell,
-    grep: types_1.Tools.Search,
-    glob: types_1.Tools.Search,
-};
-// Codex routes file ops through Bash — no direct file tools to map.
-// Users can still match on Tools.Shell or use `pattern`/`regex` against ctx.tool.input.command.
-const CODEX = {
-    Bash: types_1.Tools.Shell,
-    bash: types_1.Tools.Shell,
-};
-const TABLES = {
-    claude: CLAUDE,
-    codex: CODEX,
-    gemini: GEMINI,
-    copilot: COPILOT,
-    opencode: OPENCODE,
-};
-/**
- * Normalize a provider's raw tool name to the Tools.* enum.
- *
- * Matching priority:
- *  1. Exact key lookup in the provider's table.
- *  2. Fallback: if rawName already looks like a Tools.* value (contains a dot), accept it.
- *  3. Otherwise → Tools.Other.
- *
- * @param rawName  provider-specific tool name (e.g. "Read", "read_file")
- * @param provider provider key; accepts 'cli/claude' style prefix too.
- */
-function normalizeToolName(rawName, provider) {
-    const key = resolveProviderKey(provider);
-    if (key) {
-        const mapped = TABLES[key][rawName];
-        if (mapped)
-            return mapped;
-    }
-    // Already-normalized form passes through (e.g. OpenCode "file.read").
-    if (Object.values(types_1.Tools).includes(rawName)) {
-        return rawName;
-    }
-    return types_1.Tools.Other;
-}
-function resolveProviderKey(provider) {
-    const lower = provider.toLowerCase();
-    if (lower.includes('claude'))
-        return 'claude';
-    if (lower.includes('codex'))
-        return 'codex';
-    if (lower.includes('gemini'))
-        return 'gemini';
-    if (lower.includes('copilot'))
-        return 'copilot';
-    if (lower.includes('opencode'))
-        return 'opencode';
-    return null;
-}
-//# sourceMappingURL=tool-normalize.js.map

package/dist/hooks/types.js

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Tools = void 0;
-exports.Tools = {
-    FileRead: 'file.read',
-    FileWrite: 'file.write',
-    FileEdit: 'file.edit',
-    Shell: 'shell',
-    Search: 'search',
-    Other: 'other',
-};
-//# sourceMappingURL=types.js.map