@dv.nghiem/flowdeck 0.1.0

package/dist/hooks/guard-rails.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Safe Execution Mode — three tiers of AI edit safety.
+ * auto:         AI can apply edits without confirmation (default, low-risk changes)
+ * guarded:      AI applies with inline patch-trust warnings; requires human ACK for high-risk
+ * review-only:  AI proposes diffs but cannot write files; human applies manually
+ */
+export type ExecutionMode = "auto" | "guarded" | "review-only";
+/**
+ * Derive execution mode from config and risk signals.
+ * Priority: explicit config.execution_mode → volatility/trust override → plan_confirmed fallback.
+ */
+export declare function resolveExecutionMode(configPath: string, trustScore: number | null, // 0–100, null = unknown
+volatility?: string): ExecutionMode;
+export type Severity = "warn" | "block" | null;
+/**
+ * HOOK-03: Guard rails enforcement
+ * Warns on write/edit tools during setup phase (plan_confirmed=false).
+ * Blocks on write/edit tools during execution phase (plan_confirmed=true).
+ * Checks .codebase/ existence per proposal spec line 412.
+ * Detects bash build/deploy commands per proposal spec line 416.
+ * Respects guard_enforcement override in config.json.
+ */
+export declare function guardRailsHook(ctx: {
+    directory: string;
+}, input: {
+    tool: string;
+}, _output: any): Promise<void>;
+/**
+ * Determine effective severity based on config.json override or STATE.md plan_confirmed.
+ */
+export declare function effectiveSeverity(configPath: string, statePath: string): Severity;
+export declare function getPlanConfirmed(statePath: string): boolean;
+//# sourceMappingURL=guard-rails.d.ts.map

package/dist/hooks/guard-rails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-rails.d.ts","sourceRoot":"","sources":["../../src/hooks/guard-rails.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,aAAa,CAAA;AAE9D;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GAAG,IAAI,EAAG,wBAAwB;AACpD,UAAU,CAAC,EAAE,MAAM,GAClB,aAAa,CAkBf;AAgBD,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;AAE9C;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC1B,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACvB,OAAO,EAAE,GAAG,GACX,OAAO,CAAC,IAAI,CAAC,CAkEf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,CAWjF;AAMD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAS3D"}

package/dist/hooks/index.d.ts

@@ -0,0 +1,5 @@
+export { sessionStartHook } from "./session-start";
+export { sessionEventsHook } from "./session-events";
+export { guardRailsHook } from "./guard-rails";
+export { toolGuardHook } from "./tool-guard";
+//# sourceMappingURL=index.d.ts.map

package/dist/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/hooks/notifications.d.ts

@@ -0,0 +1,21 @@
+type NotifyLevel = "info" | "critical";
+/**
+ * Fire a desktop notification without blocking the caller.
+ * Silently ignores failures — notification is best-effort only.
+ */
+export declare function notify(title: string, body: string, level?: NotifyLevel): void;
+/**
+ * Fires a notification when a command that needs user interaction starts.
+ * Call this from command.execute.before after the command result is generated.
+ */
+export declare function notifyCommandInteraction(command: string): void;
+/**
+ * Fires a notification when the session becomes idle (task complete).
+ */
+export declare function notifySessionIdle(): void;
+/**
+ * Fires a notification when a permission is requested.
+ */
+export declare function notifyPermissionNeeded(tool: string): void;
+export {};
+//# sourceMappingURL=notifications.d.ts.map

package/dist/hooks/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../src/hooks/notifications.ts"],"names":[],"mappings":"AAmBA,KAAK,WAAW,GAAG,MAAM,GAAG,UAAU,CAAA;AAEtC;;;GAGG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,WAAoB,GAAG,IAAI,CAoCrF;AAUD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAgB9D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAMxC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMzD"}

package/dist/hooks/patch-trust.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Patch Trust Score Hook
+ * Assigns a confidence and risk rating to every AI-generated write/edit.
+ * Scores: 0–100 (higher = more trustworthy)
+ * Verdicts: safe (≥80), review-required (40–79), high-risk (<40)
+ *
+ * Risk signals checked:
+ * - Writing to volatile/critical paths (from VOLATILITY.json)
+ * - Edit contains auth/crypto/payment keywords
+ * - File has recent failure history (FAILURES.json)
+ * - File is in arch-constrained paths (CONSTRAINTS.md)
+ */
+export type TrustVerdict = "safe" | "review-required" | "high-risk";
+export interface TrustScore {
+    score: number;
+    verdict: TrustVerdict;
+    signals: string[];
+}
+export declare function scorePatch(directory: string, filePath: string, content?: string): TrustScore;
+export declare function patchTrustHook(ctx: {
+    directory: string;
+}, input: {
+    tool: string;
+}, output: {
+    args: any;
+}): Promise<void>;
+//# sourceMappingURL=patch-trust.d.ts.map

package/dist/hooks/patch-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-trust.d.ts","sourceRoot":"","sources":["../../src/hooks/patch-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,CAAA;AAEnE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AA0BD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,CA4B5F;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC1B,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACvB,MAAM,EAAE;IAAE,IAAI,EAAE,GAAG,CAAA;CAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/hooks/patch-trust.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=patch-trust.test.d.ts.map

package/dist/hooks/patch-trust.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-trust.test.d.ts","sourceRoot":"","sources":["../../src/hooks/patch-trust.test.ts"],"names":[],"mappings":""}

package/dist/hooks/session-events.d.ts

@@ -0,0 +1,8 @@
+/**
+ * HOOK-02: Idle and error session notifications
+ * Writes JSON Lines entries to .opencode/flowdeck.log and outputs to terminal.
+ */
+export declare function sessionEventsHook(ctx: {
+    directory: string;
+}, eventType: "idle" | "error"): Promise<void>;
+//# sourceMappingURL=session-events.d.ts.map

package/dist/hooks/session-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-events.d.ts","sourceRoot":"","sources":["../../src/hooks/session-events.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC1B,SAAS,EAAE,MAAM,GAAG,OAAO,GAC1B,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/hooks/session-idle-hook.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Session Idle Hook
+ * Fires when OpenCode's session becomes idle (task completed).
+ * 1. Sends a desktop notification (if notify() succeeds)
+ * 2. Logs a summary of edited files via client.app.log
+ *
+ * Inspired by oh-my-openagent's session notification + ECC's session.idle handler.
+ */
+import type { SessionFileTracker } from "./file-tracker";
+export declare function createSessionIdleHook(client: {
+    app: {
+        log: (args: {
+            body: {
+                service: string;
+                level: "info" | "warn" | "error" | "debug";
+                message: string;
+            };
+        }) => Promise<any>;
+    };
+}, tracker: SessionFileTracker): () => Promise<void>;
+//# sourceMappingURL=session-idle-hook.d.ts.map

package/dist/hooks/session-idle-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-idle-hook.d.ts","sourceRoot":"","sources":["../../src/hooks/session-idle-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAExD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE;IAAE,GAAG,EAAE;QAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,EAC5I,OAAO,EAAE,kBAAkB,uBA2B5B"}

package/dist/hooks/session-start.d.ts

@@ -0,0 +1,10 @@
+/**
+ * HOOK-01: Session start state injection
+ * Called on session.created event. Reads .planning/STATE.md and injects
+ * phase/status/steps/last_action into context via return object.
+ * Also checks .codebase/ existence per proposal spec line 397.
+ */
+export declare function sessionStartHook(ctx: {
+    directory: string;
+}): Promise<Record<string, unknown>>;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/hooks/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../src/hooks/session-start.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkElC"}

package/dist/hooks/shell-env-hook.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shell Environment Hook
+ * Injects project-aware environment variables into every bash tool execution.
+ *
+ * Injects:
+ *   FLOWDECK_VERSION   — plugin version
+ *   PROJECT_ROOT       — resolved worktree / directory
+ *   PACKAGE_MANAGER    — detected from lockfiles
+ *   DETECTED_LANGUAGES — comma-separated list detected from marker files
+ *   PRIMARY_LANGUAGE   — first detected language
+ *   FLOWDECK_PHASE     — current planning phase (if .planning/STATE.md exists)
+ *
+ * Inspired by ECC's shell.env hook.
+ */
+export declare function createShellEnvHook(ctx: {
+    directory: string;
+    worktree?: string;
+}): (_input: unknown, output: {
+    env: Record<string, string>;
+}) => Promise<void>;
+//# sourceMappingURL=shell-env-hook.d.ts.map

package/dist/hooks/shell-env-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-env-hook.d.ts","sourceRoot":"","sources":["../../src/hooks/shell-env-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAwEH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,IAGhE,QAAQ,OAAO,EAAE,QAAQ;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,mBAiBvE"}

package/dist/hooks/telemetry-hook.d.ts

@@ -0,0 +1,25 @@
+export declare function telemetryHook(context: {
+    directory?: string;
+}, toolInput: {
+    name?: string;
+    tool?: string;
+    parameters?: Record<string, unknown>;
+}, _output: {
+    parts?: Array<{
+        type: string;
+        text: string;
+    }>;
+}): Promise<void>;
+export declare function telemetryAfterHook(context: {
+    directory?: string;
+}, toolInput: {
+    name?: string;
+    tool?: string;
+}, _output: {
+    parts?: Array<{
+        type: string;
+        text: string;
+    }>;
+    error?: string;
+}): Promise<void>;
+//# sourceMappingURL=telemetry-hook.d.ts.map

package/dist/hooks/telemetry-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-hook.d.ts","sourceRoot":"","sources":["../../src/hooks/telemetry-hook.ts"],"names":[],"mappings":"AASA,wBAAsB,aAAa,CACjC,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC/B,SAAS,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACjF,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GACzD,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC/B,SAAS,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3C,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/hooks/todo-hook.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Todo Hook
+ * Logs FlowDeck planning progress whenever OpenCode's todo list is updated.
+ * Ported from ECC's todo.updated handler.
+ */
+type Todo = {
+    text: string;
+    done: boolean;
+    status?: string;
+};
+export declare function createTodoHook(client: {
+    app: {
+        log: (args: {
+            body: {
+                service: string;
+                level: "info" | "warn" | "error" | "debug";
+                message: string;
+            };
+        }) => Promise<any>;
+    };
+}): (event: {
+    todos: Todo[];
+}) => Promise<void>;
+export {};
+//# sourceMappingURL=todo-hook.d.ts.map

package/dist/hooks/todo-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"todo-hook.d.ts","sourceRoot":"","sources":["../../src/hooks/todo-hook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,KAAK,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,wBAAgB,cAAc,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE;QAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,IAG3J,OAAO;IAAE,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,mBAavC"}

package/dist/hooks/tool-guard.d.ts

@@ -0,0 +1,41 @@
+/**
+ * HOOK-04: Tool guard — blocks dangerous operations
+ * Pattern matching on tool arguments to prevent destructive commands.
+ * D-04: pure string.includes() matching, no path filtering, no regex/glob.
+ * Also enforces architectural constraints from .codebase/CONSTRAINTS.md.
+ */
+export type BlockReason = string | null;
+/**
+ * Check if a tool operation should be blocked.
+ * Returns error message if blocked, null if allowed.
+ */
+export declare function isBlocked(tool: string, args: any): BlockReason;
+/**
+ * Architectural Constraint Guard.
+ * Reads .codebase/CONSTRAINTS.md for forbidden path patterns and boundary rules.
+ * Returns a block reason if the write/edit violates a constraint, null otherwise.
+ *
+ * CONSTRAINTS.md format (simple list of patterns in a ## Forbidden Paths section):
+ *   ## Forbidden Paths
+ *   - src/core/       # do not modify core directly
+ *   - generated/      # auto-generated, do not edit manually
+ */
+export declare function checkArchConstraint(directory: string, filePath: string): BlockReason;
+/**
+ * Phase Enforcement Guard.
+ * Prevents writing to the codebase during planning phases.
+ */
+export declare function checkPhaseEnforcement(directory: string): BlockReason;
+/**
+ * HOOK-04: Tool guard hook
+ * Called on tool.execute.before for all tools.
+ * Blocks dangerous read/write/bash/edit operations, arch-constraint violations, and premature implementation.
+ */
+export declare function toolGuardHook(ctx: {
+    directory: string;
+}, input: {
+    tool: string;
+}, output: {
+    args: any;
+}): Promise<void>;
+//# sourceMappingURL=tool-guard.d.ts.map

package/dist/hooks/tool-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../src/hooks/tool-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;AAEvC;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,WAAW,CAsC9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAepF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAYpE;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC1B,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACvB,MAAM,EAAE;IAAE,IAAI,EAAE,GAAG,CAAA;CAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/hooks/tool-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tool-guard.test.d.ts.map

package/dist/hooks/tool-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.test.d.ts","sourceRoot":"","sources":["../../src/hooks/tool-guard.test.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+import type { PluginModule } from "@opencode-ai/plugin";
+declare const plugin: PluginModule;
+export default plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAuN/D,QAAA,MAAM,MAAM,EAAE,YAGb,CAAA;AAED,eAAe,MAAM,CAAA"}