@crewx/sdk 0.8.0-rc.80 → 0.8.0-rc.82

package/dist/__tests__/adapter/context-builder.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/adapter/plugin-helper.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/adapter/registration-integration.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/adapter/scoped-store.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/plugins/conversation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/testing/createMockContext.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/adapter/context-builder.d.ts

@@ -1,11 +1,3 @@
-/**
- * createAdapterContext — builds an AdapterContext for an adapter instance.
- *
- * M1: respondSync uses AsyncLocalStorage to bind the current HTTP response.
- * When called inside a registerRoute handler (sync window), respondSync writes
- * to the HTTP res. When called outside the sync window, it performs graceful
- * degradation: logs a warning instead of throwing (PoC correction #3).
- */
 import { AsyncLocalStorage } from 'async_hooks';
 import type { AdapterContext, AdapterCapability, AdapterStore, AgentRunner, AuditSink, BlobStorage, EventResolution, HttpRouter, InboundEvent, InboundMessage, Logger, OutboundMessage, RawResponse, ResolvedUser, RouteResolution } from './types';
 export interface SyncWindow {
@@ -32,4 +24,3 @@ export interface AdapterContextOptions<TConfig = unknown> {
     logger?: Logger;
 }
 export declare function createAdapterContext<TConfig = unknown>(opts: AdapterContextOptions<TConfig>): AdapterContext<TConfig>;
-//# sourceMappingURL=context-builder.d.ts.map

package/dist/adapter/index.d.ts

@@ -2,4 +2,3 @@ export * from './types';
 export * from './plugin-helper';
 export * from './scoped-store';
 export * from './context-builder';
-//# sourceMappingURL=index.d.ts.map

package/dist/adapter/plugin-helper.d.ts

@@ -1,9 +1,3 @@
-/**
- * Plugin helpers for defining channel adapters.
- *
- * defineChannelAdapter — type-safe identity function for IChannelAdapter.
- * defineChannelAdapterPlugin — wraps an adapter as a CrewxPlugin (§3.3).
- */
 import type { IChannelAdapter } from './types';
 import type { CrewxPlugin } from '../plugin';
 export declare function defineChannelAdapter<TConfig = unknown>(spec: IChannelAdapter<TConfig>): IChannelAdapter<TConfig>;
@@ -16,4 +10,3 @@ export interface ChannelAdapterPluginSpec<TConfig = unknown> {
     readonly onDetach?: (crewx: unknown) => void | Promise<void>;
 }
 export declare function defineChannelAdapterPlugin<TConfig = unknown>(spec: ChannelAdapterPluginSpec<TConfig>): CrewxPlugin;
-//# sourceMappingURL=plugin-helper.d.ts.map

package/dist/adapter/scoped-store.d.ts

@@ -1,12 +1,2 @@
-/**
- * ScopedAdapterStore — adapter key-value store with mandatory instanceId prefix.
- *
- * Security: Uses Map closure pattern (RT-1 defense).
- * The internal Map is captured in a function closure — no public or private
- * property on the returned AdapterStore object holds the raw Map reference.
- * Reflect / Object.getPrototypeOf / (ctx.db as any)['_rawStore'] all fail
- * because the Map only exists in the createScopedAdapterStore function scope.
- */
 import type { AdapterStore } from './types';
 export declare function createScopedAdapterStore(instanceId: string): AdapterStore;
-//# sourceMappingURL=scoped-store.d.ts.map

package/dist/adapter/types.d.ts

@@ -1,9 +1,3 @@
-/**
- * Adapter Platform v0.4 — core types.
- * PoC corrections applied:
- *   1. AdapterError: class only (interface removed)
- *   2. kind: added 'config' for configuration errors
- */
 export type AdapterCapability = 'send' | 'receive' | 'threads' | 'attachments' | 'interactive' | 'markdown' | 'edit' | 'delete' | 'reaction' | 'mention' | 'rich_cards' | 'sync_reply' | 'typing' | 'ephemeral' | 'proactive' | 'commands' | 'presence';
 export interface AdapterManifest {
     readonly id: string;
@@ -261,4 +255,3 @@ export interface ChannelAdapterRegistration<TConfig = unknown> {
     readonly defaultAgent?: string;
     readonly onInbound?: (msg: InboundMessage) => Promise<RouteResolution>;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/agent/resolver.d.ts

@@ -1,18 +1,5 @@
-/**
- * Agent resolver: looks up an agent from a list by ref.
- * Supports both bare id ('claude') and @mention format ('@claude').
- * Falls back to built-in provider shorthands (claude, gemini, copilot, codex).
- */
 import type { AgentConfig } from '../types';
 export declare class AgentNotFoundError extends Error {
     constructor(agentRef: string, availableIds: string[]);
 }
-/**
- * Resolve an agent by reference.
- * @param agentRef - Agent reference: '@claude', 'claude', '@my_agent', etc.
- * @param agents   - List of available agent configs.
- * @returns The matching AgentConfig.
- * @throws AgentNotFoundError when no match is found.
- */
 export declare function resolveAgent(agentRef: string, agents: AgentConfig[]): AgentConfig;
-//# sourceMappingURL=resolver.d.ts.map

package/dist/boxing/box-storage.interface.d.ts

@@ -1,6 +1,3 @@
-/**
- * Box storage interfaces — used by SdkBoxService and buildContext.
- */
 import type { BoxRow, InsertBoxData, ThreadMessage } from './box.types';
 export interface IBoxStorage {
     listBoxes(threadId: string): BoxRow[];
@@ -22,4 +19,3 @@ export interface IBoxServiceReader {
     };
     getBox(threadId: string, boxId: string): BoxResponse | null;
 }
-//# sourceMappingURL=box-storage.interface.d.ts.map

package/dist/boxing/box.service.d.ts

@@ -1,6 +1,3 @@
-/**
- * SdkBoxService — manages box creation, retrieval, and listing.
- */
 import type { IBoxStorage } from './box-storage.interface';
 import type { BoxResponse, CreateBoxParams } from './box.types';
 export declare class SdkBoxService {
@@ -16,4 +13,3 @@ export declare class SdkBoxService {
     private validateId;
     private generateBoxId;
 }
-//# sourceMappingURL=box.service.d.ts.map

package/dist/boxing/box.types.d.ts

@@ -1,6 +1,3 @@
-/**
- * Boxing domain types — Box/Thread/Context types for SDK boxing module.
- */
 export interface BoxRow {
     id: string;
     thread_id: string;
@@ -87,4 +84,3 @@ export interface CreateBoxParams {
     sourceTokens: number;
     summaryTokens?: number | null;
 }
-//# sourceMappingURL=box.types.d.ts.map

package/dist/boxing/context-builder.d.ts

@@ -1,7 +1,3 @@
-/**
- * buildContext() — builds hot/warm context windows from thread messages and box summaries.
- */
 import type { IBoxServiceReader, ITaskReader, ITokenizer } from './box-storage.interface';
 import type { ContextBuildParams, ContextBuildResponse } from './box.types';
 export declare function buildContext(threadId: string, taskReader: ITaskReader, boxService: IBoxServiceReader, params: ContextBuildParams, tokenizer: ITokenizer): ContextBuildResponse;
-//# sourceMappingURL=context-builder.d.ts.map

package/dist/client/CrewxClient.d.ts

@@ -1,30 +1,9 @@
-/**
- * CrewxClient — Browser client for CrewX SDK.
- *
- * Communicates with a server running CrewX SDK via HTTP.
- * Handles the Client-Intercept pattern automatically:
- *   registerTool() + query() — that's it.
- *
- * @example
- * ```ts
- * import { CrewxClient } from '@crewx/sdk/client';
- *
- * const crewx = new CrewxClient('http://localhost:3000');
- * crewx.registerTool('browser_storage_read', {
- *   execute: async ({ key }) => localStorage.getItem(key),
- * });
- *
- * const result = await crewx.query('assistant', 'read my settings');
- * console.log(result.data);
- * ```
- */
 export interface ClientToolDefinition {
     description?: string;
     parameters?: Record<string, unknown>;
     execute: (args: Record<string, unknown>) => Promise<unknown>;
 }
 export interface QueryCallbacks {
-    /** Called when the agent invokes a client tool. */
     onToolCall?: (call: {
         toolCallId: string;
         toolName: string;
@@ -48,18 +27,7 @@ export declare class CrewxClient {
     private readonly baseUrl;
     private readonly tools;
     constructor(baseUrl: string);
-    /**
-     * Register a browser-side tool.
-     * When the server agent calls a tool with this name (and no server-side execute),
-     * CrewxClient automatically runs it locally and sends the result back.
-     */
     registerTool(name: string, definition: ClientToolDefinition): void;
-    /**
-     * Send a message to an agent.
-     * The requires_action loop is handled automatically — if the agent calls a
-     * client tool, CrewxClient executes it locally and continues the conversation.
-     */
     query(agent: string, message: string, callbacks?: QueryCallbacks): Promise<QueryResponse>;
     private _post;
 }
-//# sourceMappingURL=CrewxClient.d.ts.map

package/dist/client/index.d.ts

@@ -1,3 +1,2 @@
 export { CrewxClient } from './CrewxClient.js';
 export type { ClientToolDefinition, QueryCallbacks, QueryResponse } from './CrewxClient.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/client/index.js

@@ -1,6 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CrewxClient = void 0;
-var CrewxClient_js_1 = require("./CrewxClient.js");
-Object.defineProperty(exports, "CrewxClient", { enumerable: true, get: function () { return CrewxClient_js_1.CrewxClient; } });
-//# sourceMappingURL=index.js.map
+'use strict';var a=class{baseUrl;tools=new Map;constructor(t){this.baseUrl=t.replace(/\/$/,"");}registerTool(t,r){this.tools.set(t,r);}async query(t,r,o){let n=await this._post("/api/chat",{agent:t,message:r});for(;n.status==="requires_action";){let{toolCall:e,threadId:c}=n;if(!e)break;let l=this.tools.get(e.toolName);o?.onToolCall&&o.onToolCall(e);let i;if(l?.execute)try{let s=await l.execute(e.args);i=typeof s=="string"?s:JSON.stringify(s);}catch(s){i=`Error: ${s.message}`;}else i=`Error: No client handler for tool "${e.toolName}"`;n=await this._post("/api/chat/continue",{threadId:c,toolCallId:e.toolCallId,result:i});}return n}async _post(t,r){let o=await fetch(`${this.baseUrl}${t}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(r)});if(!o.ok)throw new Error(`HTTP ${o.status}`);return o.json()}};exports.CrewxClient=a;

package/dist/config/loader.browser.d.ts

@@ -1,14 +1,6 @@
-/**
- * Browser-safe YAML config loader.
- * Only parseYamlContent — no file I/O.
- */
 import type { CrewxProjectConfig } from '../types/index.js';
 export declare class ConfigLoadError extends Error {
     readonly cause?: unknown | undefined;
     constructor(message: string, cause?: unknown | undefined);
 }
-/**
- * Parse YAML string into a validated CrewxProjectConfig.
- */
 export declare function parseYamlContent(yamlString: string): CrewxProjectConfig;
-//# sourceMappingURL=loader.browser.d.ts.map

package/dist/config/loader.d.ts

@@ -1,19 +1,7 @@
-/**
- * YAML configuration loader for CrewX projects.
- * Reads crewx.yaml and validates it with Zod schema.
- */
 import type { CrewxProjectConfig } from '../types';
 export declare class ConfigLoadError extends Error {
     readonly cause?: unknown | undefined;
     constructor(message: string, cause?: unknown | undefined);
 }
-/**
- * Parse YAML string into a validated CrewxProjectConfig.
- * Converts the agents record (keyed by id) into an array.
- */
 export declare function parseYamlContent(yamlString: string): CrewxProjectConfig;
-/**
- * Load and parse crewx.yaml from a file path.
- */
 export declare function loadYamlFile(filePath: string): CrewxProjectConfig;
-//# sourceMappingURL=loader.d.ts.map

package/dist/conversation/__tests__/sqlite-provider.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/conversation/__tests__/to-task-reader.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/conversation/index.d.ts

@@ -2,4 +2,3 @@ export * from './types.js';
 export { SqliteConversationProvider } from './sqlite-provider.js';
 export { toTaskReader } from './to-task-reader.js';
 export { toTemplateMessages } from './to-template-messages.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/conversation/sqlite-provider.d.ts

@@ -1,11 +1,3 @@
-/**
- * SqliteConversationProvider — reads/writes conversation history from ~/.crewx/crewx.db.
- *
- * Security:
- * - SEC-1: SELECT columns are explicitly whitelisted (no rendered_prompt, command, logs, metadata).
- * - SEC-2: All queries use parameterized bindings (? placeholders).
- * - Writes target `threads` table ONLY — `tasks` table writes are owned by SqliteTracingPlugin.
- */
 import type { ConversationThread, FetchHistoryOptions, IConversationHistoryProvider, Platform } from './types';
 export declare class SqliteConversationProvider implements IConversationHistoryProvider {
     private db;
@@ -18,4 +10,3 @@ export declare class SqliteConversationProvider implements IConversationHistoryP
     close(): void;
     private rowsToMessages;
 }
-//# sourceMappingURL=sqlite-provider.d.ts.map

package/dist/conversation/to-task-reader.d.ts

@@ -1,14 +1,3 @@
-/**
- * toTaskReader — adapter from ConversationThread to boxing ITaskReader.
- *
- * SQ3 invariant:
- *   The returned ThreadMessage[] is structured as [user, assistant, user, assistant, ...]
- *   where each task produces exactly 2 consecutive elements (user first, then assistant).
- *   context-builder.ts:31~42 pairs messages as [i, i+1], so violating this invariant
- *   would corrupt context. Tasks without assistants (failed/running) are already
- *   filtered by fetchHistory — this adapter performs no additional filtering.
- */
 import type { ConversationThread } from './types';
 import type { ITaskReader } from '../boxing/box-storage.interface';
 export declare function toTaskReader(thread: ConversationThread): ITaskReader;
-//# sourceMappingURL=to-task-reader.d.ts.map

package/dist/conversation/to-template-messages.d.ts

@@ -1,15 +1,2 @@
-/**
- * toTemplateMessages — maps ConversationThread messages to TemplateMessage[]
- * for consumption by the formatConversation block helper.
- *
- * Includes SEC-M1 sanitization at the provider boundary:
- * <, > are entity-escaped to prevent XML structure tag injection in the
- * <conversation_history> block.
- */
 import type { ConversationThread, TemplateMessage } from './types';
-/**
- * Convert a ConversationThread to a TemplateMessage array suitable for
- * formatConversation block helper consumption.
- */
 export declare function toTemplateMessages(thread: ConversationThread): TemplateMessage[];
-//# sourceMappingURL=to-template-messages.d.ts.map

package/dist/conversation/types.d.ts

@@ -1,10 +1,3 @@
-/**
- * Conversation history types — SDK public API for reading/writing thread history.
- *
- * **Security (SEC-3):** history content is untrusted user input.
- * Consumers (e.g. Phase 2 CLI wiring) MUST delimit history from system prompts
- * using structured blocks (e.g. `[HISTORY START]...[HISTORY END]`).
- */
 export interface ConversationMessage {
     id: string;
     userId?: string;
@@ -16,7 +9,6 @@ export interface ConversationMessage {
 export type Platform = 'cli' | 'web' | 'api' | `channel/${string}`;
 export interface ConversationThread {
     threadId: string;
-    /** Immutable after ensureThread — reusing a 'cli' thread as 'channel/slack' is forbidden (P1-6). */
     platform: Platform;
     messages: ConversationMessage[];
     metadata?: {
@@ -27,10 +19,6 @@ export interface ConversationThread {
         updatedAt?: number;
     };
 }
-/**
- * Template-friendly message shape consumed by formatConversation block helper.
- * Matches default.yaml L292~303 expected structure.
- */
 export interface TemplateMessage {
     text: string;
     isAssistant: boolean;
@@ -44,58 +32,12 @@ export interface TemplateMessage {
 export interface FetchHistoryOptions {
     limit?: number;
     maxContextLength?: number;
-    /**
-     * Trace ID of the currently running task — excluded from history
-     * to avoid including in-progress turns (SQ2).
-     */
     currentTraceId?: string;
 }
-/**
- * Provider interface for reading/writing conversation history.
- *
- * **Security (SEC-3):** history content is untrusted user input.
- * Consumers (Phase 2 CLI wiring) MUST delimit history from system prompts
- * using structured blocks (e.g. `[HISTORY START]...[HISTORY END]`).
- */
 export interface IConversationHistoryProvider {
-    /**
-     * Ensure a thread row exists in the threads table.
-     * @param threadId - Recommended: unguessable value (UUID/nanoid).
-     *   WI-C2 Slack environments MUST enforce userId/channelId-based namespace
-     *   isolation in threadId generation policy.
-     */
     ensureThread(threadId: string, platform: Platform, workspaceId?: string): Promise<void>;
-    /**
-     * Fetch conversation history from the tasks table.
-     *
-     * Filter rules (SQ2, aligned with server thread.service.ts:373):
-     *  - WHERE thread_id = ?
-     *  - AND parent_task_id IS NULL            (exclude chain child tasks)
-     *  - AND (status IN ('done','completed') OR status IS NULL)  (exclude failed/running)
-     *  - AND (if options.currentTraceId) trace_id != currentTraceId
-     *  - ORDER BY started_at ASC
-     *  - LIMIT options.limit ?? 100
-     */
     fetchHistory(threadId: string, options?: FetchHistoryOptions): Promise<ConversationThread>;
-    /**
-     * Phase 1: update threads metadata only (updated_at, last_message, message_count).
-     * User content is written by SqliteTracingPlugin to tasks.prompt.
-     * userId parameter is a WI-C2 (Slack) extension point.
-     *
-     * **⛔ (SEC-5)** Do NOT pass credentials, env vars, or API keys in metadata —
-     * this data is persisted as JSON in the threads table.
-     */
     saveUserMessage(threadId: string, text: string, userId?: string, metadata?: Record<string, unknown>): Promise<void>;
-    /**
-     * Phase 1: update threads metadata only.
-     * Assistant content is written by SqliteTracingPlugin to tasks.result.
-     * agentId parameter enriches threads metadata only.
-     *
-     * **⛔ (SEC-5)** Do NOT pass credentials, env vars, or API keys in metadata —
-     * this data is persisted as JSON in the threads table.
-     */
     saveAssistantMessage(threadId: string, text: string, agentId: string, metadata?: Record<string, unknown>): Promise<void>;
-    /** Optional — prevent connection leaks in long-running server/test environments. */
     close?(): void;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/esm/client/index.js

@@ -0,0 +1 @@
+var a=class{baseUrl;tools=new Map;constructor(t){this.baseUrl=t.replace(/\/$/,"");}registerTool(t,r){this.tools.set(t,r);}async query(t,r,o){let n=await this._post("/api/chat",{agent:t,message:r});for(;n.status==="requires_action";){let{toolCall:e,threadId:c}=n;if(!e)break;let l=this.tools.get(e.toolName);o?.onToolCall&&o.onToolCall(e);let i;if(l?.execute)try{let s=await l.execute(e.args);i=typeof s=="string"?s:JSON.stringify(s);}catch(s){i=`Error: ${s.message}`;}else i=`Error: No client handler for tool "${e.toolName}"`;n=await this._post("/api/chat/continue",{threadId:c,toolCallId:e.toolCallId,result:i});}return n}async _post(t,r){let o=await fetch(`${this.baseUrl}${t}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(r)});if(!o.ok)throw new Error(`HTTP ${o.status}`);return o.json()}};export{a as CrewxClient};

package/dist/esm/hooks/index.js

@@ -0,0 +1,7 @@
+import {createHash}from'crypto';import {resolve,relative,dirname,join}from'path';import {homedir}from'os';import {appendFileSync,existsSync,readFileSync,mkdirSync,writeFileSync,statSync}from'fs';var D=(n=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(n,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):n)(function(n){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+n+'" is not supported')});var g=class{detach(e){}};var f=class extends g{unsubs=[];attach(e){if(this.on.beforeTool){let t=e.on("tool:observed:before",async o=>{if(!this.matchesTool(this.on.beforeTool,o.tool.name))return;let r=this.buildContext("beforeTool",o);await this.run(r);});this.unsubs.push(t);}if(this.on.afterTool){let t=e.on("tool:observed:after",async o=>{if(!this.matchesTool(this.on.afterTool,o.tool.name))return;let r=this.buildContext("afterTool",o);await this.run(r);});this.unsubs.push(t);}}async detach(e){for(let t of this.unsubs)t();this.unsubs=[];}matchesTool(e,t){return e===true?true:e.includes(t)}buildContext(e,t){return {event:e,traceId:t.traceId,agent:{id:t.agentId||t.agentRef,role:"",team:""},provider:t.provider,thread:{id:t.threadId||""},tool:{name:t.tool.name,rawName:t.tool.rawName,input:"input"in t.tool?t.tool.input:void 0},cwd:process.cwd(),sessionId:t.sessionId||"",pass:()=>({type:"pass"})}}};var d=class{capabilities={required:[]}};function j(n){return new class extends d{name=n.name;version=n.version;capabilities=n.capabilities??{required:[]};run=n.run}}function M(n){return new class extends f{name=n.name;version=n.version;on=n.on;run=n.run}}function A(n){let e=r=>r.replace(/[.+^${}()|[\]\\]/g,"\\$&"),o=n.split("/").map(r=>r==="**"?".*":r.split("*").map(e).join("[^/]*"));return new RegExp(`^${o.join("\\/")}$`)}function y(n,e){try{return A(e).test(n)}catch{return  false}}var i={FileRead:"file.read",FileWrite:"file.write",FileEdit:"file.edit",Shell:"shell",Search:"search",Other:"other"};var z={Read:i.FileRead,Write:i.FileWrite,Edit:i.FileEdit,MultiEdit:i.FileEdit,NotebookEdit:i.FileEdit,Bash:i.Shell,Grep:i.Search,Glob:i.Search},W={read_file:i.FileRead,write_file:i.FileWrite,replace:i.FileEdit,edit:i.FileEdit,run_shell_command:i.Shell,search_file_content:i.Search,glob:i.Search},L={read:i.FileRead,write:i.FileWrite,edit:i.FileEdit,shell:i.Shell,bash:i.Shell,search:i.Search,grep:i.Search},$={"file.read":i.FileRead,"file.write":i.FileWrite,"file.edit":i.FileEdit,read:i.FileRead,write:i.FileWrite,edit:i.FileEdit,bash:i.Shell,shell:i.Shell,grep:i.Search,glob:i.Search},G={Bash:i.Shell,bash:i.Shell},X={claude:z,codex:G,gemini:W,copilot:L,opencode:$};function x(n,e){let t=B(e);if(t){let o=X[t][n];if(o)return o}return Object.values(i).includes(n)?n:i.Other}function B(n){let e=n.toLowerCase();return e.includes("claude")?"claude":e.includes("codex")?"codex":e.includes("gemini")?"gemini":e.includes("copilot")?"copilot":e.includes("opencode")?"opencode":null}var H=200,R=2e3;function w(n){let e=n.replace(/[\x00-\x1f\x7f\u2028\u2029]/g,"");return e.length<=H?e:e.slice(0,H-11)+" [redacted]"}function h(n){let e=n.replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f\u2028\u2029]/g,"");return e.length<=R?e:e.slice(0,R-11)+" [redacted]"}function q(n,e){let t=resolve(n),o=resolve(e);return !(relative(o,t).startsWith("..")||resolve(t).startsWith("/etc/")||resolve(t).startsWith("/usr/")||t.includes("node_modules"))}function J(n){return n==="codex"?"codex":"claude"}function C(n,e,t){return n==="codex"?{hookSpecificOutput:{hookEventName:e,permissionDecision:"allow",systemMessage:t}}:{hookSpecificOutput:{hookEventName:e,permissionDecision:"allow",additionalContext:t}}}function O(n,e,t){return {hookSpecificOutput:{hookEventName:e,permissionDecision:"deny",permissionDecisionReason:t}}}function S(n,e,t="cli/claude"){let o=t||process.env.CREWX_PROVIDER||"cli/claude";return {event:"beforeTool",traceId:n.tool_use_id||"",agent:{id:process.env.CREWX_AGENT_ID||"",role:process.env.CREWX_AGENT_ROLE||"",team:process.env.CREWX_AGENT_TEAM||""},provider:o,thread:{id:process.env.CREWX_THREAD_ID||""},tool:{name:x(n.tool_name,o),rawName:n.tool_name,input:n.tool_input},cwd:e||n.cwd,sessionId:n.session_id||process.env.CREWX_SESSION_ID||"",pass:()=>({type:"pass"}),deny:r=>({type:"deny",reason:r}),inject:r=>({type:"inject",message:r}),modify:r=>({type:"modify",patch:r})}}async function K(n,e,t,o="cli/claude"){let r=S(e,t,o),s=await n.run(r),c=J(o),a={hookSpecificOutput:{hookEventName:e.hook_event_name,permissionDecision:"allow"}};switch(s.type){case "pass":return {exitCode:0,stdout:a,injected:false};case "deny":{let p=w(s.reason);return {exitCode:2,stdout:O(c,e.hook_event_name,p),injected:false}}case "inject":{let p=h(s.message);return {exitCode:0,stdout:C(c,e.hook_event_name,p),injected:true}}case "modify":return console.error(`[crewx] Hook result type '${s.type}' is not supported in Phase 0. Plugin: ${n.name}. Treating as pass.`),{exitCode:0,stdout:a,injected:false};default:return {exitCode:0,stdout:a,injected:false}}}var oe=10*1024*1024,re={b:1,kb:1024,mb:1024*1024,gb:1024*1024*1024};function b(n,e){return n===void 0?true:Array.isArray(n)?n.includes(e):n===e}function ie(n,e){return n===void 0?true:Array.isArray(n)?n.some(t=>e.includes(t)):e.includes(n)}function P(n){if(typeof n=="number")return n;let e=n.match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb)?$/i);if(!e)return 0;let t=parseFloat(e[1]),o=(e[2]??"b").toLowerCase();return Math.floor(t*(re[o]??1))}function T(n){return typeof n=="string"}function _(n){try{let e=statSync(n);return e.size>oe?(process.stderr.write(`[YamlHookPlugin] File too large for line count: ${n} (${e.size} bytes)
+`),null):readFileSync(n,"utf8").split(`
+`).length}catch{return null}}function N(n){try{return statSync(n).size}catch{return null}}function se(n,e,t){if(!n)return  true;let o=e,r=o?.path??o?.file_path??o?.filePath??o?.filename;if(typeof r!="string")return  false;if(y(r,n))return  true;if(t&&r.startsWith("/")){let{relative:s,isAbsolute:c}=D("path");if(c(r)){let a=s(t,r);if(a&&!a.startsWith("..")&&y(a,n))return  true}}return  false}function ae(n,e){return n?JSON.stringify(e).includes(n):true}function ue(n,e){if(!n)return  true;try{let t=new RegExp(n),o=JSON.stringify(e);return t.test(o)}catch{return  false}}function le(n,e){if(!n)return  true;try{let t=new RegExp(n),o=JSON.stringify(e);return t.test(o)}catch{return  false}}function ce(n,e){if(n.pathSizeMin===void 0&&n.pathSizeMax===void 0)return  true;let t=e,o=t?.path??t?.file_path??t?.filePath??t?.filename;if(typeof o!="string")return  false;if(n.pathSizeMin!==void 0)if(T(n.pathSizeMin)){let r=N(o);if(r===null||r<P(n.pathSizeMin))return  false}else {let r=_(o);if(r===null||r<n.pathSizeMin)return  false}if(n.pathSizeMax!==void 0)if(T(n.pathSizeMax)){let r=N(o);if(r===null||r>P(n.pathSizeMax))return  false}else {let r=_(o);if(r===null||r>n.pathSizeMax)return  false}return  true}function de(n){let e=[],t=[];for(let o=0;o<n.length;o++){let r=n[o];if(!r||typeof r!="object"){t.push(`Hook at index ${o}: not an object, skipping`);continue}let s=r;if(typeof s.name!="string"||!s.name){t.push(`Hook at index ${o}: missing or invalid "name", skipping`);continue}let c=s.guide&&typeof s.guide=="object",a=s.deny&&typeof s.deny=="object",p=typeof s.plugin=="string";if(!c&&!a&&!p){t.push(`Hook "${s.name}": missing guide/deny/plugin, skipping`);continue}if(c&&typeof s.guide.say!="string"){t.push(`Hook "${s.name}": guide.say is required and must be string, skipping`);continue}if(a&&typeof s.deny.reason!="string"){t.push(`Hook "${s.name}": deny.reason is required and must be string, skipping`);continue}e.push(s);}return {valid:e,warnings:t}}var v=class extends d{name="@crewx/yaml-hook-plugin";version="0.1.0";capabilities={required:["inject"]};hooks;agentMap;constructor(e){super(),this.hooks=e.hooks,this.agentMap=new Map((e.agents??[]).map(t=>[t.id,t]));}async run(e){let t=[],o=process.env.CREWX_TASK_LOG_PATH,r=process.env.CREWX_HOOK_LOG_VERBOSE==="1";for(let s of this.hooks)if(this.matchEntryLevel(s,e)&&s.guide){if(!this.matchRuleLevel(s.guide,e)){r&&o&&this.appendHookLog(o,{rule:s.name,action:"pass",once:s.guide.once??false,ctx:e,matched:false});continue}s.guide.once&&this.hasFired(e.sessionId,s.name)||(s.guide.once&&this.markFired(e.sessionId,s.name),t.push(s.guide.say),o&&this.appendHookLog(o,{rule:s.name,action:"inject",once:s.guide.once??false,ctx:e,matched:true,message:s.guide.say}));}return t.length?e.inject(t.join(`
+
+`)):e.pass()}appendHookLog(e,t){try{let o={rule:t.rule,action:t.action,once:t.once,sessionId:t.ctx.sessionId,provider:t.ctx.provider,agent:t.ctx.agent.id,toolName:t.ctx.tool.name,rawToolName:t.ctx.tool.rawName};t.message&&(o.chars=t.message.length,process.env.CREWX_HOOK_LOG_VERBOSE==="1"&&(o.message=h(t.message).slice(0,500)));let r=`[${new Date().toISOString()}] HOOK: ${JSON.stringify(o)}
+`;appendFileSync(e,r,{encoding:"utf8",mode:384});}catch{}}matchEntryLevel(e,t){if(e.provider!==void 0){let o=t.provider.replace(/^cli\//,"");if(!b(e.provider,o))return  false}if(e.team!==void 0){let r=this.agentMap.get(t.agent.id)?.team??t.agent.team;if(!b(e.team,r))return  false}if(e.role!==void 0){let r=this.agentMap.get(t.agent.id)?.role??t.agent.role;if(!b(e.role,r))return  false}if(e.tag!==void 0){let r=this.agentMap.get(t.agent.id)?.tags??[];if(!ie(e.tag,r))return  false}return !(e.agents!==void 0&&!e.agents.includes(t.agent.id))}matchRuleLevel(e,t){return !(e.when!==void 0&&e.when.length>0&&!e.when.includes(t.tool.name)&&!e.when.includes(t.tool.rawName)||!ae(e.pattern,t.tool.input)||!ue(e.regex,t.tool.input)||!se(e.pathPattern,t.tool.input,t.cwd)||!ce(e,t.tool.input)||!le(e.whenInputRegex,t.tool.input))}hasFired(e,t){try{let o=this.firedFilePath(e);if(!existsSync(o))return !1;let r=JSON.parse(readFileSync(o,"utf8"));return Array.isArray(r.fired)&&r.fired.includes(t)}catch{return  false}}markFired(e,t){try{let o=this.firedFilePath(e);mkdirSync(dirname(o),{recursive:!0,mode:448});let r=existsSync(o)?JSON.parse(readFileSync(o,"utf8")):{fired:[]};Array.isArray(r.fired)||(r.fired=[]),r.fired.includes(t)||(r.fired.push(t),writeFileSync(o,JSON.stringify(r),{mode:384}));}catch(o){process.stderr.write(`[YamlHookPlugin] once state write failed: ${o}
+`);}}firedFilePath(e){let t=createHash("sha1").update(e).digest("hex");return join(homedir(),".crewx","sessions",t,"fired-rules.json")}};export{d as HookPlugin,f as ToolObserverPlugin,i as Tools,v as YamlHookPlugin,S as buildHookContext,j as defineHookPlugin,M as definePlugin,K as evaluateHook,O as formatDenyOutput,C as formatInjectOutput,q as isPathSafe,w as sanitizeDenyReason,h as sanitizeInjectMessage,de as validateHooksSchema};