@deftai/directive-core 0.107.0 → 0.108.0

package/dist/hooks/dispatcher.d.ts

@@ -24,7 +24,15 @@ export type HookDecisionCode = "session-start" | "session-start-disabled" | "ses
 /** Host closed stdin with zero bytes — integration failure, not a policy gate (#2864). */
  | "stdin-empty" | "ritual-not-ready"
 /** Product-path write while another live session occupies this worktree (#3433). */
- | "occupancy-occupied" | "scope-not-ready" | "write-propose-ready"
+ | "occupancy-occupied"
+/** A supported host omitted or malformed its cooperative payload owner (#3611). */
+ | "occupancy-identity-unavailable"
+/** Host payload identity conflicts with explicit/environment identity (#3611). */
+ | "occupancy-identity-conflict"
+/** Live lease and exact verified ritual state name different owners (#3611). */
+ | "occupancy-ritual-mismatch"
+/** Write target resolved to a Git repository that does not share git-common-dir (#3794). */
+ | "foreign-repository-deny" | "scope-not-ready" | "write-propose-ready"
 /** Allowlisted assist/scratch write without active xBRIEF (#1802). */
  | "write-assist-scratch-ready" | "write-ready" | "read-only-deny" | "spawn-explore-ready"
 /** Non-lifecycle assist/docs spawn allowed without active xBRIEF (#3080). */
@@ -46,6 +54,8 @@ export interface HookDecision {
     readonly projectRoot: string;
     readonly message: string;
     readonly scopePath: string | null;
+    /** Complete host tool input replacement for an exact lifecycle command (#3611). */
+    readonly updatedInput?: Readonly<Record<string, unknown>>;
 }
 export interface HookDispatchInput {
     readonly host: HookHost;
@@ -106,6 +116,12 @@ export interface HookPolicySeams {
     readonly loadAuthzGrants?: (projectRoot: string, state: AuthzState) => readonly HumanOriginGrant[];
     /** When false, skip writing `.deft/authz/audit.jsonl` (tests). Default true. */
     readonly authzAudit?: boolean;
+    /** Test seam for restricting Task lifecycle rewrites to the Directive source repo. */
+    readonly runningInsideDeftRepo?: (projectRoot: string) => boolean;
+    /** Test seam for execution-root realpath binding in lifecycle rewrites. */
+    readonly realpathLifecycleExecutionRoot?: (path: string) => string;
+    /** Test seam for Windows drive-only execution-root payloads (#2787). */
+    readonly lifecycleExecutionPlatform?: NodeJS.Platform;
 }
 /** POSIX-ish project-relative path for lifecycle matching. */
 export declare function toProjectRelativePosix(projectRoot: string, targetPath: string): string;
@@ -153,6 +169,41 @@ export declare function isAssistScratchWrite(projectRoot: string, targetPath: st
 /** Normalize hook project-root resolution on Windows (doubled drive + MSYS `/c/...`). */
 export declare function normalizeHookProjectRoot(path: string): string;
 export declare function projectRootFromHookPayload(payload: unknown, fallback: string): string;
+/** Interpolate both roots so a deny names the tree that was judged (#3794). */
+export declare function formatHookRootNote(payloadRoot: string, effectiveRoot: string): string;
+/** Why a mutation target was refused, so the deny message can be specific (#3794). */
+export type EffectiveHookRootRefusal = 
+/** Both common-dirs resolved and differ: a proven separate repository. */
+"foreign-repository"
+/** `payloadRoot` is a repository but the target's identity could not be read. */
+ | "unproven-identity"
+/** Members of one mutation resolved to two admitted worktrees. */
+ | "worktree-span";
+export interface EffectiveHookRootAdmission {
+    readonly root: string;
+    /** True when the target was refused and the dispatcher must deny (#3794). */
+    readonly foreign: boolean;
+    readonly candidate: string | null;
+    readonly refusal: EffectiveHookRootRefusal | null;
+}
+/**
+ * Admit the Git toplevel of the write target only when it shares
+ * `--git-common-dir` with `payloadRoot`.
+ *
+ * Identity resolves to one of three outcomes, not two. A `payloadRoot` that is
+ * not a Git repository never posed a containment question, so it keeps today's
+ * payloadRoot gating. A `payloadRoot` that *is* a repository, paired with a
+ * target that resolved to some other toplevel whose identity cannot be read, is
+ * a question asked and left unanswered — that fails closed rather than
+ * inheriting payloadRoot's occupancy and ritual state (#3794).
+ */
+export declare function admitEffectiveHookRoot(payloadRoot: string, writeTarget: string | null, runGit: GitRunner): EffectiveHookRootAdmission;
+/**
+ * Admit every mutation target and require one effectiveRoot. A refused member
+ * short-circuits; a span of two admitted worktrees is also refused so
+ * occupancy/ritual cannot follow only the declared ApplyPatch path (#3794).
+ */
+export declare function admitMutationTargetSet(payloadRoot: string, targets: readonly string[], runGit: GitRunner): EffectiveHookRootAdmission;
 export declare function isHookHost(value: string): value is HookHost;
 export declare function isHookEvent(value: string): value is HookEvent;
 /** Decide a normalized event using only the P0 direct-write policy. */