@electric-agent/agent 1.0.0

package/dist/git/index.js

@@ -0,0 +1,434 @@
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function execGit(cwd, args, env) {
+    try {
+        return execFileSync("git", args, {
+            cwd,
+            encoding: "utf-8",
+            timeout: 30_000,
+            env: { ...process.env, ...env },
+            stdio: ["pipe", "pipe", "pipe"],
+        }).trim();
+    }
+    catch (e) {
+        const stderr = e?.stderr || "";
+        const stdout = e?.stdout || "";
+        const detail = stderr || stdout || (e instanceof Error ? e.message : "git command failed");
+        throw new Error(`git ${args.join(" ")}: ${detail}`);
+    }
+}
+function execGh(args, opts) {
+    try {
+        return execFileSync("gh", args, {
+            cwd: opts?.cwd,
+            encoding: "utf-8",
+            timeout: 30_000,
+            env: { ...process.env, ...opts?.env },
+            stdio: ["pipe", "pipe", "pipe"],
+        }).trim();
+    }
+    catch (e) {
+        const stderr = e?.stderr || "";
+        const stdout = e?.stdout || "";
+        const detail = stderr || stdout || (e instanceof Error ? e.message : "gh command failed");
+        throw new Error(`gh ${args.join(" ")}: ${detail}`);
+    }
+}
+function parseRepoName(remoteUrl) {
+    if (!remoteUrl)
+        return null;
+    // Handle SSH: git@github.com:owner/repo.git
+    const ssh = remoteUrl.match(/github\.com[:/](.+?)(?:\.git)?$/);
+    if (ssh)
+        return ssh[1];
+    // Handle HTTPS: https://github.com/owner/repo.git
+    const https = remoteUrl.match(/github\.com\/(.+?)(?:\.git)?$/);
+    if (https)
+        return https[1];
+    return null;
+}
+function generateCommitMessage(cwd) {
+    const status = execGit(cwd, ["status", "--porcelain"]);
+    const lines = status.split("\n").filter(Boolean);
+    const added = lines.filter((l) => l.startsWith("A") || l.startsWith("?")).length;
+    const modified = lines.filter((l) => l.startsWith(" M") || l.startsWith("M")).length;
+    const deleted = lines.filter((l) => l.startsWith(" D") || l.startsWith("D")).length;
+    const parts = [];
+    if (added)
+        parts.push(`+${added}`);
+    if (modified)
+        parts.push(`~${modified}`);
+    if (deleted)
+        parts.push(`-${deleted}`);
+    const summary = parts.length > 0 ? `${parts.join(" ")} files` : "no changes";
+    return `checkpoint: ${summary} [${new Date().toISOString().slice(0, 10)}]`;
+}
+function ensureGitIdentity(cwd) {
+    try {
+        execGit(cwd, ["config", "user.email"]);
+    }
+    catch {
+        execGit(cwd, ["config", "user.email", "electric-agent@local"]);
+        execGit(cwd, ["config", "user.name", "Electric Agent"]);
+    }
+}
+// ---------------------------------------------------------------------------
+// Public API — Local Git
+// ---------------------------------------------------------------------------
+/**
+ * Initialize a git repo with an initial commit.
+ * Called by scaffold after project setup.
+ */
+export function gitInit(projectDir, projectName) {
+    execGit(projectDir, ["init", "-b", "main"]);
+    ensureGitIdentity(projectDir);
+    execGit(projectDir, ["add", "-A"]);
+    return execGit(projectDir, ["commit", "-m", `chore: scaffold ${projectName ?? "project"}`]);
+}
+/**
+ * Checkout an existing branch or create a new one.
+ */
+export function gitCheckoutBranch(projectDir, branch) {
+    try {
+        // Try checking out existing branch
+        execGit(projectDir, ["checkout", branch]);
+    }
+    catch {
+        // Branch doesn't exist locally — create it
+        execGit(projectDir, ["checkout", "-b", branch]);
+    }
+}
+/**
+ * Get the current git status of a project directory.
+ */
+export function gitStatus(projectDir) {
+    const gitDir = path.join(projectDir, ".git");
+    if (!fs.existsSync(gitDir)) {
+        return {
+            initialized: false,
+            branch: null,
+            remoteUrl: null,
+            hasUncommitted: false,
+            lastCommit: null,
+            repoName: null,
+        };
+    }
+    let branch = null;
+    try {
+        branch = execGit(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    }
+    catch {
+        // detached HEAD or empty repo
+    }
+    let remoteUrl = null;
+    try {
+        remoteUrl = execGit(projectDir, ["remote", "get-url", "origin"]);
+    }
+    catch {
+        // no remote configured
+    }
+    let hasUncommitted = false;
+    try {
+        const status = execGit(projectDir, ["status", "--porcelain"]);
+        hasUncommitted = status.length > 0;
+    }
+    catch {
+        // ignore
+    }
+    let lastCommit = null;
+    try {
+        const log = execGit(projectDir, ["log", "-1", "--format=%H%n%s%n%aI"]);
+        const [hash, message, ts] = log.split("\n");
+        if (hash && message && ts) {
+            lastCommit = { hash, message, ts };
+        }
+    }
+    catch {
+        // empty repo
+    }
+    return {
+        initialized: true,
+        branch,
+        remoteUrl,
+        hasUncommitted,
+        lastCommit,
+        repoName: parseRepoName(remoteUrl),
+    };
+}
+/**
+ * Create a checkpoint commit with all current changes.
+ */
+export function gitCheckpoint(projectDir, message) {
+    const status = gitStatus(projectDir);
+    if (!status.initialized) {
+        return { success: false, commitHash: null, message: "", error: "Not a git repository" };
+    }
+    if (!status.hasUncommitted) {
+        return {
+            success: true,
+            commitHash: status.lastCommit?.hash ?? null,
+            message: "No changes to commit",
+        };
+    }
+    const commitMsg = message || generateCommitMessage(projectDir);
+    try {
+        ensureGitIdentity(projectDir);
+        execGit(projectDir, ["add", "-A"]);
+        execGit(projectDir, ["commit", "-m", commitMsg]);
+        const hash = execGit(projectDir, ["rev-parse", "HEAD"]);
+        return { success: true, commitHash: hash, message: commitMsg };
+    }
+    catch (e) {
+        return {
+            success: false,
+            commitHash: null,
+            message: commitMsg,
+            error: e instanceof Error ? e.message : "Commit failed",
+        };
+    }
+}
+// ---------------------------------------------------------------------------
+// Public API — GitHub (via gh CLI)
+// ---------------------------------------------------------------------------
+/**
+ * Validate a GitHub PAT by logging in and checking auth status.
+ * Required scopes: repo, read:user
+ */
+export function validateGhToken(token) {
+    try {
+        // Login with the token via stdin
+        execFileSync("gh", ["auth", "login", "--with-token"], {
+            input: token,
+            encoding: "utf-8",
+            timeout: 15_000,
+            env: { ...process.env, GH_TOKEN: undefined },
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+        // Check auth status
+        const statusOutput = execGh(["auth", "status"]);
+        // Extract username from status output
+        const userMatch = statusOutput.match(/Logged in to github\.com account (\S+)/) ||
+            statusOutput.match(/Logged in to github\.com as (\S+)/);
+        const username = userMatch?.[1] ?? "unknown";
+        return { valid: true, username };
+    }
+    catch (e) {
+        // Clean up on failure
+        try {
+            execGh(["auth", "logout", "--hostname", "github.com"]);
+        }
+        catch {
+            // ignore cleanup failures
+        }
+        return {
+            valid: false,
+            error: e instanceof Error ? e.message : "Token validation failed",
+        };
+    }
+}
+/**
+ * Publish a local project to a new GitHub repo.
+ * Creates a feature branch and pushes.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function ghPublish(projectDir, repoName, opts) {
+    const visibility = opts?.visibility ?? "private";
+    const ghOpts = { cwd: projectDir };
+    if (opts?.token)
+        ghOpts.env = { GH_TOKEN: opts.token };
+    try {
+        // Checkpoint any uncommitted changes first
+        const status = gitStatus(projectDir);
+        if (status.hasUncommitted) {
+            gitCheckpoint(projectDir, "checkpoint before publish");
+        }
+        // Create feature branch if on main
+        const currentBranch = execGit(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+        let targetBranch = currentBranch;
+        if (currentBranch === "main") {
+            const branchName = `electric-agent/${path.basename(projectDir)}`;
+            execGit(projectDir, ["checkout", "-b", branchName]);
+            targetBranch = branchName;
+        }
+        // Create repo and push
+        const output = execGh([
+            "repo",
+            "create",
+            repoName,
+            `--${visibility}`,
+            "--source",
+            ".",
+            "--remote",
+            "origin",
+            "--push",
+        ], ghOpts);
+        // Extract repo URL from output
+        const urlMatch = output.match(/(https:\/\/github\.com\/\S+)/);
+        const repoUrl = urlMatch?.[1] ?? `https://github.com/${repoName}`;
+        return { success: true, repoUrl, branch: targetBranch };
+    }
+    catch (e) {
+        return {
+            success: false,
+            repoUrl: null,
+            branch: null,
+            error: e instanceof Error ? e.message : "Publish failed",
+        };
+    }
+}
+/**
+ * Create a PR from the current branch to the default branch.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function ghPrCreate(projectDir, title, body, token) {
+    const ghOpts = { cwd: projectDir };
+    if (token)
+        ghOpts.env = { GH_TOKEN: token };
+    try {
+        const branch = execGit(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+        const prTitle = title || `[electric-agent] ${branch}`;
+        const prBody = body || "Generated by electric-agent.\n\nReview the changes and merge when ready.";
+        // Push current branch first
+        execGit(projectDir, ["push", "-u", "origin", branch]);
+        const output = execGh(["pr", "create", "--title", prTitle, "--body", prBody], ghOpts);
+        // Extract PR URL from output
+        const urlMatch = output.match(/(https:\/\/github\.com\/\S+\/pull\/\d+)/);
+        return { prUrl: urlMatch?.[1] ?? output };
+    }
+    catch (e) {
+        return {
+            prUrl: null,
+            error: e instanceof Error ? e.message : "PR creation failed",
+        };
+    }
+}
+/**
+ * List the authenticated user's personal account + organizations.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function ghListAccounts(token) {
+    const ghOpts = token ? { env: { GH_TOKEN: token } } : undefined;
+    const accounts = [];
+    try {
+        // Get the authenticated user's login
+        const username = execGh(["api", "/user", "--jq", ".login"], ghOpts);
+        if (username) {
+            accounts.push({ login: username, type: "user" });
+        }
+    }
+    catch {
+        // ignore
+    }
+    try {
+        // Get organizations the user belongs to
+        const output = execGh(["api", "/user/orgs", "--jq", "[.[] | .login]"], ghOpts);
+        const orgs = JSON.parse(output);
+        for (const org of orgs) {
+            accounts.push({ login: org, type: "org" });
+        }
+    }
+    catch {
+        // ignore
+    }
+    return accounts;
+}
+/**
+ * List the authenticated user's GitHub repos.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function ghListRepos(limit = 50, token) {
+    const ghOpts = token ? { env: { GH_TOKEN: token } } : undefined;
+    try {
+        // Use /user/repos API to get ALL repos the token has access to
+        // (owned, collaborator, and org member), not just owned repos.
+        const output = execGh([
+            "api",
+            `/user/repos?sort=updated&per_page=${limit}&affiliation=owner,collaborator,organization_member`,
+            "--jq",
+            `[.[] | {nameWithOwner: .full_name, url: .html_url, updatedAt: .updated_at}]`,
+        ], ghOpts);
+        return JSON.parse(output);
+    }
+    catch {
+        // Fallback to gh repo list (only owned repos)
+        try {
+            const output = execGh([
+                "repo",
+                "list",
+                "--json",
+                "nameWithOwner,url,updatedAt",
+                "--limit",
+                String(limit),
+                "--sort",
+                "updated",
+            ], ghOpts);
+            return JSON.parse(output);
+        }
+        catch {
+            return [];
+        }
+    }
+}
+/**
+ * List branches for a GitHub repo.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function ghListBranches(repoFullName, token) {
+    const ghOpts = token ? { env: { GH_TOKEN: token } } : undefined;
+    try {
+        // Get the default branch name
+        const defaultBranch = execGh(["api", `/repos/${repoFullName}`, "--jq", ".default_branch"], ghOpts);
+        // Get all branches
+        const output = execGh(["api", `/repos/${repoFullName}/branches?per_page=100`, "--jq", `[.[] | {name: .name}]`], ghOpts);
+        const branches = JSON.parse(output);
+        return branches.map((b) => ({
+            name: b.name,
+            isDefault: b.name === defaultBranch,
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Clone a GitHub repo into a target directory.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function ghClone(repoUrl, targetDir, branch, token) {
+    const args = ["repo", "clone", repoUrl, targetDir];
+    if (branch) {
+        args.push("--", "-b", branch);
+    }
+    execGh(args, token ? { env: { GH_TOKEN: token } } : undefined);
+}
+/**
+ * Check if gh CLI is available and authenticated.
+ * If a token is provided, it is used instead of the ambient GH_TOKEN.
+ */
+export function isGhAuthenticated(token) {
+    try {
+        execGh(["auth", "status"], token ? { env: { GH_TOKEN: token } } : undefined);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Push the current branch to origin.
+ */
+export function gitPush(projectDir) {
+    try {
+        const branch = execGit(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+        execGit(projectDir, ["push", "-u", "origin", branch]);
+        return { success: true };
+    }
+    catch (e) {
+        return { success: false, error: e instanceof Error ? e.message : "Push failed" };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/git/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/git/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAmD5B,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,GAA4B;IACzE,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YAChC,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE;YAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAC/B,CAAC,CAAC,IAAI,EAAE,CAAA;IACV,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACrB,MAAM,MAAM,GAAI,CAA4B,EAAE,MAAM,IAAI,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAI,CAA4B,EAAE,MAAM,IAAI,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;QAC1F,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;IACpD,CAAC;AACF,CAAC;AAED,SAAS,MAAM,CAAC,IAAc,EAAE,IAAqD;IACpF,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,IAAI,EAAE,GAAG;YACd,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE;YACrC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAC/B,CAAC,CAAC,IAAI,EAAE,CAAA;IACV,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACrB,MAAM,MAAM,GAAI,CAA4B,EAAE,MAAM,IAAI,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAI,CAA4B,EAAE,MAAM,IAAI,EAAE,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;QACzF,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;IACnD,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,SAAwB;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,4CAA4C;IAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAC9D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;IACtB,kDAAkD;IAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC9D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IAC1B,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;IAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;IACpF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;IACnF,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;IAClC,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAA;IACxC,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAA;IAC5E,OAAO,eAAe,OAAO,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAA;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACrC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACxD,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,UAAkB,EAAE,WAAoB;IAC/D,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3C,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC7B,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IAClC,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,mBAAmB,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,MAAc;IACnE,IAAI,CAAC;QACJ,mCAAmC;QACnC,OAAO,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,2CAA2C;QAC3C,OAAO,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO;YACN,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,KAAK;YACrB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;SACd,CAAA;IACF,CAAC;IAED,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,IAAI,CAAC;QACJ,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACR,8BAA8B;IAC/B,CAAC;IAED,IAAI,SAAS,GAAkB,IAAI,CAAA;IACnC,IAAI,CAAC;QACJ,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,uBAAuB;IACxB,CAAC;IAED,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;QAC7D,cAAc,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACR,SAAS;IACV,CAAC;IAED,IAAI,UAAU,GAA4B,IAAI,CAAA;IAC9C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,IAAI,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YAC3B,UAAU,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACnC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,aAAa;IACd,CAAC;IAED,OAAO;QACN,WAAW,EAAE,IAAI;QACjB,MAAM;QACN,SAAS;QACT,cAAc;QACd,UAAU;QACV,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC;KAClC,CAAA;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,OAAgB;IACjE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;IACxF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO;YACN,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,IAAI;YAC3C,OAAO,EAAE,sBAAsB;SAC/B,CAAA;IACF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAE9D,IAAI,CAAC;QACJ,iBAAiB,CAAC,UAAU,CAAC,CAAA;QAC7B,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;QACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC/D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO;YACN,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACvD,CAAA;IACF,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC5C,IAAI,CAAC;QACJ,iCAAiC;QACjC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE;YACrD,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC5C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAC/B,CAAC,CAAA;QAEF,oBAAoB;QACpB,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QAE/C,sCAAsC;QACtC,MAAM,SAAS,GACd,YAAY,CAAC,KAAK,CAAC,wCAAwC,CAAC;YAC5D,YAAY,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;QAE5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,sBAAsB;QACtB,IAAI,CAAC;YACJ,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACR,0BAA0B;QAC3B,CAAC;QACD,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SACjE,CAAA;IACF,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACxB,UAAkB,EAClB,QAAgB,EAChB,IAA4D;IAE5D,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,SAAS,CAAA;IAChD,MAAM,MAAM,GAAkD,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IACjF,IAAI,IAAI,EAAE,KAAK;QAAE,MAAM,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;IAEtD,IAAI,CAAC;QACJ,2CAA2C;QAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACpC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,aAAa,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAA;QACvD,CAAC;QAED,mCAAmC;QACnC,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAA;QAChF,IAAI,YAAY,GAAG,aAAa,CAAA;QAChC,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,kBAAkB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAA;YAChE,OAAO,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAA;YACnD,YAAY,GAAG,UAAU,CAAA;QAC1B,CAAC;QAED,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,CACpB;YACC,MAAM;YACN,QAAQ;YACR,QAAQ;YACR,KAAK,UAAU,EAAE;YACjB,UAAU;YACV,GAAG;YACH,UAAU;YACV,QAAQ;YACR,QAAQ;SACR,EACD,MAAM,CACN,CAAA;QAED,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,sBAAsB,QAAQ,EAAE,CAAA;QAEjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO;YACN,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;SACxD,CAAA;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CACzB,UAAkB,EAClB,KAAc,EACd,IAAa,EACb,KAAc;IAEd,MAAM,MAAM,GAAkD,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IACjF,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IAE3C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,KAAK,IAAI,oBAAoB,MAAM,EAAE,CAAA;QACrD,MAAM,MAAM,GACX,IAAI,IAAI,0EAA0E,CAAA;QAEnF,4BAA4B;QAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;QAErD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QAErF,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;QACxE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAA;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO;YACN,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;SAC5D,CAAA;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,MAAM,QAAQ,GAAgB,EAAE,CAAA;IAChC,IAAI,CAAC;QACJ,qCAAqC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QACnE,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QACjD,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,SAAS;IACV,CAAC;IACD,IAAI,CAAC;QACJ,wCAAwC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAA;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAa,CAAA;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3C,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,SAAS;IACV,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAK,GAAG,EAAE,EAAE,KAAc;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,IAAI,CAAC;QACJ,+DAA+D;QAC/D,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,CACpB;YACC,KAAK;YACL,qCAAqC,KAAK,qDAAqD;YAC/F,MAAM;YACN,6EAA6E;SAC7E,EACD,MAAM,CACN,CAAA;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAa,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,8CAA8C;QAC9C,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,CACpB;gBACC,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,6BAA6B;gBAC7B,SAAS;gBACT,MAAM,CAAC,KAAK,CAAC;gBACb,QAAQ;gBACR,SAAS;aACT,EACD,MAAM,CACN,CAAA;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAa,CAAA;QACtC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAA;QACV,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,KAAc;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,IAAI,CAAC;QACJ,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,CAC3B,CAAC,KAAK,EAAE,UAAU,YAAY,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAC5D,MAAM,CACN,CAAA;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,CACpB,CAAC,KAAK,EAAE,UAAU,YAAY,wBAAwB,EAAE,MAAM,EAAE,uBAAuB,CAAC,EACxF,MAAM,CACN,CAAA;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAA;QACzD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa;SACnC,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAe,EAAE,KAAc;IAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IAClD,IAAI,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC/C,IAAI,CAAC;QACJ,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,UAAkB;IACzC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAA;QACzE,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IACjF,CAAC;AACF,CAAC"}

package/dist/hooks/block-bash.d.ts

@@ -0,0 +1,7 @@
+import type { HookCallback } from "@anthropic-ai/claude-agent-sdk";
+/**
+ * PreToolUse hook: Block all Bash tool usage.
+ * Used by the planner agent which should only read playbooks, not explore the filesystem.
+ */
+export declare const blockBash: HookCallback;
+//# sourceMappingURL=block-bash.d.ts.map

package/dist/hooks/block-bash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-bash.d.ts","sourceRoot":"","sources":["../../src/hooks/block-bash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAElE;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,YAUvB,CAAA"}

package/dist/hooks/block-bash.js

@@ -0,0 +1,15 @@
+/**
+ * PreToolUse hook: Block all Bash tool usage.
+ * Used by the planner agent which should only read playbooks, not explore the filesystem.
+ */
+export const blockBash = async () => {
+    return {
+        suppressOutput: true,
+        hookSpecificOutput: {
+            hookEventName: "PreToolUse",
+            permissionDecision: "deny",
+            permissionDecisionReason: "Bash is not allowed. Use read_playbook and list_playbooks tools instead. Produce the plan from playbook knowledge.",
+        },
+    };
+};
+//# sourceMappingURL=block-bash.js.map

package/dist/hooks/block-bash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-bash.js","sourceRoot":"","sources":["../../src/hooks/block-bash.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAiB,KAAK,IAAI,EAAE;IACjD,OAAO;QACN,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAAE;YACnB,aAAa,EAAE,YAAqB;YACpC,kBAAkB,EAAE,MAAe;YACnC,wBAAwB,EACvB,oHAAoH;SACrH;KACD,CAAA;AACF,CAAC,CAAA"}

package/dist/hooks/dependency-guard.d.ts

@@ -0,0 +1,7 @@
+import type { HookCallback } from "@anthropic-ai/claude-agent-sdk";
+/**
+ * PreToolUse hook: Prevent removal of existing dependencies from package.json.
+ * Allows additions, blocks removals.
+ */
+export declare const dependencyGuard: HookCallback;
+//# sourceMappingURL=dependency-guard.d.ts.map

package/dist/hooks/dependency-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-guard.d.ts","sourceRoot":"","sources":["../../src/hooks/dependency-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,gCAAgC,CAAA;AAEvF;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,YAgC7B,CAAA"}

package/dist/hooks/dependency-guard.js

@@ -0,0 +1,43 @@
+/**
+ * PreToolUse hook: Prevent removal of existing dependencies from package.json.
+ * Allows additions, blocks removals.
+ */
+export const dependencyGuard = async (input, _toolUseID, _opts) => {
+    const preInput = input;
+    const toolInput = preInput.tool_input;
+    const filePath = (toolInput?.file_path || "");
+    if (!filePath.endsWith("package.json"))
+        return {};
+    // For Write tool, compare new content against what exists
+    const newContent = toolInput?.content;
+    if (!newContent)
+        return {};
+    // For Edit tool, we get old_string and new_string
+    const oldString = toolInput?.old_string;
+    if (oldString) {
+        // Check if the edit removes dependency lines
+        const oldDeps = extractDependencyNames(oldString);
+        const newString = (toolInput?.new_string || "");
+        const newDeps = extractDependencyNames(newString);
+        const removed = oldDeps.filter((d) => !newDeps.includes(d));
+        if (removed.length > 0) {
+            return {
+                hookSpecificOutput: {
+                    hookEventName: "PreToolUse",
+                    permissionDecision: "deny",
+                    permissionDecisionReason: `Cannot remove existing dependencies: ${removed.join(", ")}. Only additions are allowed.`,
+                },
+            };
+        }
+    }
+    return {};
+};
+function extractDependencyNames(content) {
+    const deps = [];
+    const depRegex = /"([^"]+)":\s*"/g;
+    for (const match of content.matchAll(depRegex)) {
+        deps.push(match[1]);
+    }
+    return deps;
+}
+//# sourceMappingURL=dependency-guard.js.map

package/dist/hooks/dependency-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-guard.js","sourceRoot":"","sources":["../../src/hooks/dependency-guard.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAiB,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;IAC/E,MAAM,QAAQ,GAAG,KAA4B,CAAA;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAiD,CAAA;IAE5E,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAW,CAAA;IACvD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAA;IAEjD,0DAA0D;IAC1D,MAAM,UAAU,GAAG,SAAS,EAAE,OAA6B,CAAA;IAC3D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAA;IAE1B,kDAAkD;IAClD,MAAM,SAAS,GAAG,SAAS,EAAE,UAAgC,CAAA;IAC7D,IAAI,SAAS,EAAE,CAAC;QACf,6CAA6C;QAC7C,MAAM,OAAO,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,UAAU,IAAI,EAAE,CAAW,CAAA;QACzD,MAAM,OAAO,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAA;QAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACN,kBAAkB,EAAE;oBACnB,aAAa,EAAE,YAAqB;oBACpC,kBAAkB,EAAE,MAAe;oBACnC,wBAAwB,EAAE,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B;iBACnH;aACD,CAAA;QACF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,CAAA;AACV,CAAC,CAAA;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,QAAQ,GAAG,iBAAiB,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/hooks/guardrail-inject.d.ts

@@ -0,0 +1,17 @@
+import type { HookCallback } from "@anthropic-ai/claude-agent-sdk";
+/**
+ * SessionStart hook: Auto-inject the electric-app-guardrails playbook content
+ * as additional context at the start of every coder session.
+ *
+ * This ensures the agent always has critical guardrail rules in context,
+ * regardless of whether the PLAN.md tells it to read the playbook or
+ * whether it skips Phase 0.
+ */
+export declare const guardrailInject: HookCallback;
+/**
+ * Create a SessionStart hook that injects both guardrails AND ARCHITECTURE.md.
+ * ARCHITECTURE.md provides the coder with immediate structural knowledge of the app,
+ * saving 3-5 turns of file scanning on iterations.
+ */
+export declare function createSessionStartHook(projectDir: string): HookCallback;
+//# sourceMappingURL=guardrail-inject.d.ts.map

package/dist/hooks/guardrail-inject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-inject.d.ts","sourceRoot":"","sources":["../../src/hooks/guardrail-inject.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAyBlE;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,YAU7B,CAAA;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,CAuBvE"}

package/dist/hooks/guardrail-inject.js

@@ -0,0 +1,69 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+/**
+ * Resolve the bundled guardrails SKILL.md that ships with electric-agent.
+ * Returns the file content stripped of YAML frontmatter.
+ */
+function loadGuardrails() {
+    const dirs = [
+        path.resolve(__dirname, "../../playbooks/electric-app-guardrails/SKILL.md"),
+        path.resolve(__dirname, "../playbooks/electric-app-guardrails/SKILL.md"),
+    ];
+    for (const filePath of dirs) {
+        if (fs.existsSync(filePath)) {
+            const raw = fs.readFileSync(filePath, "utf-8");
+            // Strip YAML frontmatter
+            return raw.replace(/^---\n[\s\S]*?\n---\n*/, "");
+        }
+    }
+    return null;
+}
+/**
+ * SessionStart hook: Auto-inject the electric-app-guardrails playbook content
+ * as additional context at the start of every coder session.
+ *
+ * This ensures the agent always has critical guardrail rules in context,
+ * regardless of whether the PLAN.md tells it to read the playbook or
+ * whether it skips Phase 0.
+ */
+export const guardrailInject = async () => {
+    const content = loadGuardrails();
+    if (!content)
+        return {};
+    return {
+        hookSpecificOutput: {
+            hookEventName: "SessionStart",
+            additionalContext: `<electric-app-guardrails>\n${content}\n</electric-app-guardrails>`,
+        },
+    };
+};
+/**
+ * Create a SessionStart hook that injects both guardrails AND ARCHITECTURE.md.
+ * ARCHITECTURE.md provides the coder with immediate structural knowledge of the app,
+ * saving 3-5 turns of file scanning on iterations.
+ */
+export function createSessionStartHook(projectDir) {
+    return async () => {
+        const parts = [];
+        const guardrails = loadGuardrails();
+        if (guardrails) {
+            parts.push(`<electric-app-guardrails>\n${guardrails}\n</electric-app-guardrails>`);
+        }
+        const archPath = path.join(projectDir, "ARCHITECTURE.md");
+        if (fs.existsSync(archPath)) {
+            const arch = fs.readFileSync(archPath, "utf-8");
+            parts.push(`<app-architecture>\n${arch}\n</app-architecture>`);
+        }
+        if (parts.length === 0)
+            return {};
+        return {
+            hookSpecificOutput: {
+                hookEventName: "SessionStart",
+                additionalContext: parts.join("\n\n"),
+            },
+        };
+    };
+}
+//# sourceMappingURL=guardrail-inject.js.map

package/dist/hooks/guardrail-inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-inject.js","sourceRoot":"","sources":["../../src/hooks/guardrail-inject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAE9D;;;GAGG;AACH,SAAS,cAAc;IACtB,MAAM,IAAI,GAAG;QACZ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,+CAA+C,CAAC;KACxE,CAAA;IAED,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC9C,yBAAyB;YACzB,OAAO,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAA;QACjD,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAiB,KAAK,IAAI,EAAE;IACvD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAEvB,OAAO;QACN,kBAAkB,EAAE;YACnB,aAAa,EAAE,cAAuB;YACtC,iBAAiB,EAAE,8BAA8B,OAAO,8BAA8B;SACtF;KACD,CAAA;AACF,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACxD,OAAO,KAAK,IAAI,EAAE;QACjB,MAAM,KAAK,GAAa,EAAE,CAAA;QAE1B,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;QACnC,IAAI,UAAU,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,8BAA8B,UAAU,8BAA8B,CAAC,CAAA;QACnF,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;QACzD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC/C,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,uBAAuB,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACjC,OAAO;YACN,kBAAkB,EAAE;gBACnB,aAAa,EAAE,cAAuB;gBACtC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aACrC;SACD,CAAA;IACF,CAAC,CAAA;AACF,CAAC"}

package/dist/hooks/import-validation.d.ts

@@ -0,0 +1,7 @@
+import type { HookCallback } from "@anthropic-ai/claude-agent-sdk";
+/**
+ * PreToolUse hook: Validate imports in file content against known-correct table.
+ * Denies writes that contain hallucinated or incorrect imports.
+ */
+export declare const importValidation: HookCallback;
+//# sourceMappingURL=import-validation.d.ts.map

package/dist/hooks/import-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-validation.d.ts","sourceRoot":"","sources":["../../src/hooks/import-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAuB,MAAM,gCAAgC,CAAA;AAsJvF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAmD9B,CAAA"}