@flyingrobots/graft 0.4.0 → 0.6.0

package/dist/hooks/read-governor.js

@@ -0,0 +1,76 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { detectLang } from "../parser/lang.js";
+import { evaluatePolicy } from "../policy/evaluate.js";
+import { loadGraftignore } from "../policy/graftignore.js";
+import { HookInput, safeRelativePath } from "./shared.js";
+export class HookReadInspection {
+    absolutePath;
+    relativePath;
+    rawContent;
+    lines;
+    bytes;
+    lang;
+    policy;
+    constructor(opts) {
+        if (opts.absolutePath.length === 0) {
+            throw new Error("HookReadInspection: absolutePath must be non-empty");
+        }
+        if (opts.relativePath.length === 0) {
+            throw new Error("HookReadInspection: relativePath must be non-empty");
+        }
+        if (opts.lines < 0) {
+            throw new Error("HookReadInspection: lines must be non-negative");
+        }
+        if (opts.bytes < 0) {
+            throw new Error("HookReadInspection: bytes must be non-negative");
+        }
+        this.absolutePath = opts.absolutePath;
+        this.relativePath = opts.relativePath;
+        this.rawContent = opts.rawContent;
+        this.lines = opts.lines;
+        this.bytes = opts.bytes;
+        this.lang = opts.lang;
+        this.policy = opts.policy;
+        Object.freeze(this);
+    }
+    isGovernedCodeRead() {
+        return this.lang !== null && this.policy.projection === "outline";
+    }
+}
+function loadGraftignorePatterns(cwd) {
+    try {
+        const ignoreFile = fs.readFileSync(path.join(cwd, ".graftignore"), "utf-8");
+        return loadGraftignore(ignoreFile);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function inspectHookRead(input) {
+    const absolutePath = input.tool_input.file_path;
+    const relativePath = safeRelativePath(input.cwd, absolutePath);
+    if (relativePath === null) {
+        return null;
+    }
+    let rawContent;
+    try {
+        rawContent = fs.readFileSync(absolutePath, "utf-8");
+    }
+    catch {
+        return null;
+    }
+    const lines = rawContent.split("\n").length;
+    const bytes = Buffer.byteLength(rawContent, "utf-8");
+    const policy = evaluatePolicy({ path: relativePath, lines, bytes }, { graftignorePatterns: loadGraftignorePatterns(input.cwd) });
+    return new HookReadInspection({
+        absolutePath,
+        relativePath,
+        rawContent,
+        lines,
+        bytes,
+        lang: detectLang(absolutePath),
+        policy,
+    });
+}
+//# sourceMappingURL=read-governor.js.map

package/dist/hooks/read-governor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-governor.js","sourceRoot":"","sources":["../../src/hooks/read-governor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,OAAO,kBAAkB;IACpB,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,UAAU,CAAS;IACnB,KAAK,CAAS;IACd,KAAK,CAAS;IACd,IAAI,CAAuB;IAC3B,MAAM,CAAe;IAE9B,YAAY,IAQX;QACC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC;IACpE,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;IAChD,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,cAAc,CAC3B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EACpC,EAAE,mBAAmB,EAAE,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAC5D,CAAC;IAEF,OAAO,IAAI,kBAAkB,CAAC;QAC5B,YAAY;QACZ,YAAY;QACZ,UAAU;QACV,KAAK;QACL,KAAK;QACL,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC;QAC9B,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/hooks/read-messages.d.ts

@@ -0,0 +1,6 @@
+import { RefusedResult } from "../policy/types.js";
+import { HookReadInspection } from "./read-governor.js";
+export declare function renderRefusedReadMessage(policy: RefusedResult): string;
+export declare function renderGovernedReadRedirect(inspection: HookReadInspection): string;
+export declare function renderOversizedReadEducation(inspection: HookReadInspection, outlineBytes: number): string;
+//# sourceMappingURL=read-messages.d.ts.map

package/dist/hooks/read-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-messages.d.ts","sourceRoot":"","sources":["../../src/hooks/read-messages.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAMxD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAYtE;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,kBAAkB,GAC7B,MAAM,CAaR;AAED,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,kBAAkB,EAC9B,YAAY,EAAE,MAAM,GACnB,MAAM,CAUR"}

package/dist/hooks/read-messages.js

@@ -0,0 +1,45 @@
+import { STATIC_THRESHOLDS } from "../policy/evaluate.js";
+import { RefusedResult } from "../policy/types.js";
+import { HookReadInspection } from "./read-governor.js";
+function formatKilobytes(bytes) {
+    return (bytes / 1024).toFixed(1);
+}
+export function renderRefusedReadMessage(policy) {
+    const nextSteps = policy.next.map((step) => `  - ${step}`).join("\n");
+    return [
+        `[graft] Refused: ${policy.reason}`,
+        policy.reasonDetail,
+        "",
+        "Next steps:",
+        nextSteps,
+        "",
+        "Graft tools: use file_outline to see the file's structure,",
+        "or safe_read for a policy-aware read with caching.",
+    ].join("\n");
+}
+export function renderGovernedReadRedirect(inspection) {
+    return [
+        `[graft] Governed read: ${inspection.relativePath}`,
+        `Native Read would dump ${String(inspection.lines)} lines (${formatKilobytes(inspection.bytes)}KB) into context.`,
+        "This large JS/TS file should go through graft's bounded-read path instead.",
+        "",
+        "Next steps:",
+        `  - Call safe_read on ${inspection.relativePath}`,
+        "  - Use read_range with jump table entries for the exact region you need",
+        "  - Use file_outline if you only need symbol structure",
+        "",
+        `Threshold: ${String(STATIC_THRESHOLDS.lines)} lines / ${String(STATIC_THRESHOLDS.bytes / 1024)}KB.`,
+    ].join("\n");
+}
+export function renderOversizedReadEducation(inspection, outlineBytes) {
+    const savedBytes = inspection.bytes - outlineBytes;
+    return [
+        `[graft] This large code read bypassed graft's governed path for ${inspection.relativePath}.`,
+        `safe_read would have returned a structural outline (${String(outlineBytes)} bytes) instead of ${String(inspection.lines)} lines (${formatKilobytes(inspection.bytes)}KB),`,
+        `saving ${formatKilobytes(savedBytes)}KB of context. Threshold: ${String(STATIC_THRESHOLDS.lines)} lines / ${String(STATIC_THRESHOLDS.bytes / 1024)}KB.`,
+        "",
+        "If this was unexpected, verify the Claude PreToolUse hook is installed and active.",
+        "Use read_range with jump table entries after safe_read for targeted follow-up.",
+    ].join("\n");
+}
+//# sourceMappingURL=read-messages.js.map

package/dist/hooks/read-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-messages.js","sourceRoot":"","sources":["../../src/hooks/read-messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAqB;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,oBAAoB,MAAM,CAAC,MAAM,EAAE;QACnC,MAAM,CAAC,YAAY;QACnB,EAAE;QACF,aAAa;QACb,SAAS;QACT,EAAE;QACF,4DAA4D;QAC5D,oDAAoD;KACrD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAA8B;IAE9B,OAAO;QACL,0BAA0B,UAAU,CAAC,YAAY,EAAE;QACnD,0BAA0B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,mBAAmB;QACjH,4EAA4E;QAC5E,EAAE;QACF,aAAa;QACb,yBAAyB,UAAU,CAAC,YAAY,EAAE;QAClD,0EAA0E;QAC1E,wDAAwD;QACxD,EAAE;QACF,cAAc,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,iBAAiB,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;KACrG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAA8B,EAC9B,YAAoB;IAEpB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,GAAG,YAAY,CAAC;IACnD,OAAO;QACL,mEAAmE,UAAU,CAAC,YAAY,GAAG;QAC7F,uDAAuD,MAAM,CAAC,YAAY,CAAC,sBAAsB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM;QAC3K,UAAU,eAAe,CAAC,UAAU,CAAC,6BAA6B,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,iBAAiB,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;QACxJ,EAAE;QACF,oFAAoF;QACpF,gFAAgF;KACjF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/hooks/shared.d.ts

@@ -0,0 +1,52 @@
+export declare class HookInput {
+    readonly session_id: string;
+    readonly cwd: string;
+    readonly hook_event_name: string;
+    readonly tool_name: string;
+    readonly tool_input: {
+        readonly file_path: string;
+        readonly offset?: number;
+        readonly limit?: number;
+    };
+    readonly tool_result?: string;
+    constructor(opts: {
+        session_id: string;
+        cwd: string;
+        hook_event_name: string;
+        tool_name: string;
+        tool_input: {
+            file_path: string;
+            offset?: number;
+            limit?: number;
+        };
+        tool_result?: string;
+    });
+}
+export declare class HookOutput {
+    readonly exitCode: number;
+    readonly stderr: string;
+    constructor(exitCode: number, stderr: string);
+}
+/**
+ * Reads stdin with a size guard. Throws if input exceeds MAX_STDIN_BYTES.
+ * Accumulates raw buffers to avoid corrupting multi-byte UTF-8 characters
+ * that may be split across chunk boundaries.
+ */
+export declare function readStdin(): Promise<string>;
+/**
+ * Parses and validates hook input from a raw JSON string.
+ * Returns a frozen HookInput instance.
+ */
+export declare function parseHookInput(raw: string): HookInput;
+/**
+ * Returns a cwd-relative path, or null if the path is outside the cwd.
+ * Prevents path traversal attacks and handles the path.relative() edge case
+ * where paths outside cwd produce absolute or '../' prefixed results.
+ */
+export declare function safeRelativePath(cwd: string, filePath: string): string | null;
+/**
+ * Wraps a hook's main function with stdin reading, input parsing,
+ * and error handling. Logs full stack traces on failure.
+ */
+export declare function runHook(handler: (input: HookInput) => HookOutput | Promise<HookOutput>, failExitCode: number): void;
+//# sourceMappingURL=shared.d.ts.map

package/dist/hooks/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/hooks/shared.ts"],"names":[],"mappings":"AASA,qBAAa,SAAS;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,IAAI,EAAE;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB;CAkBF;AAED,qBAAa,UAAU;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK7C;AAED;;;;GAIG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAcjD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CA+CrD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM7E;AAED;;;GAGG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,EAC/D,YAAY,EAAE,MAAM,GACnB,IAAI,CAcN"}

package/dist/hooks/shared.js

@@ -0,0 +1,137 @@
+// ---------------------------------------------------------------------------
+// Shared utilities for Claude Code hooks
+// ---------------------------------------------------------------------------
+import * as path from "node:path";
+/** Maximum stdin bytes before rejecting (1 MB — generous for JSON). */
+const MAX_STDIN_BYTES = 1_048_576;
+export class HookInput {
+    session_id;
+    cwd;
+    hook_event_name;
+    tool_name;
+    tool_input;
+    tool_result;
+    constructor(opts) {
+        if (opts.session_id.length === 0) {
+            throw new Error("HookInput: session_id must be non-empty");
+        }
+        if (opts.cwd.length === 0) {
+            throw new Error("HookInput: cwd must be non-empty");
+        }
+        if (opts.tool_input.file_path.length === 0) {
+            throw new Error("HookInput: tool_input.file_path must be non-empty");
+        }
+        this.session_id = opts.session_id;
+        this.cwd = opts.cwd;
+        this.hook_event_name = opts.hook_event_name;
+        this.tool_name = opts.tool_name;
+        this.tool_input = Object.freeze({ ...opts.tool_input });
+        if (opts.tool_result !== undefined)
+            this.tool_result = opts.tool_result;
+        Object.freeze(this);
+    }
+}
+export class HookOutput {
+    exitCode;
+    stderr;
+    constructor(exitCode, stderr) {
+        this.exitCode = exitCode;
+        this.stderr = stderr;
+        Object.freeze(this);
+    }
+}
+/**
+ * Reads stdin with a size guard. Throws if input exceeds MAX_STDIN_BYTES.
+ * Accumulates raw buffers to avoid corrupting multi-byte UTF-8 characters
+ * that may be split across chunk boundaries.
+ */
+export async function readStdin() {
+    const chunks = [];
+    let totalBytes = 0;
+    for await (const chunk of process.stdin) {
+        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk), "utf-8");
+        totalBytes += buf.length;
+        if (totalBytes > MAX_STDIN_BYTES) {
+            throw new Error(`stdin exceeded ${String(MAX_STDIN_BYTES)} bytes — aborting`);
+        }
+        chunks.push(buf);
+    }
+    return Buffer.concat(chunks).toString("utf-8");
+}
+/**
+ * Parses and validates hook input from a raw JSON string.
+ * Returns a frozen HookInput instance.
+ */
+export function parseHookInput(raw) {
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null) {
+        throw new Error("Hook input must be a JSON object");
+    }
+    const obj = parsed;
+    const sessionId = obj["session_id"];
+    if (typeof sessionId !== "string") {
+        throw new Error("Hook input missing session_id");
+    }
+    const cwd = obj["cwd"];
+    if (typeof cwd !== "string") {
+        throw new Error("Hook input missing cwd");
+    }
+    const rawToolInput = obj["tool_input"];
+    if (typeof rawToolInput !== "object" || rawToolInput === null) {
+        throw new Error("Hook input missing tool_input");
+    }
+    const toolInput = rawToolInput;
+    const filePath = toolInput["file_path"];
+    if (typeof filePath !== "string") {
+        throw new Error("Hook input missing tool_input.file_path");
+    }
+    const hookEventName = obj["hook_event_name"];
+    const toolName = obj["tool_name"];
+    const toolResult = obj["tool_result"];
+    const offset = toolInput["offset"];
+    const limit = toolInput["limit"];
+    return new HookInput({
+        session_id: sessionId,
+        cwd,
+        hook_event_name: typeof hookEventName === "string" ? hookEventName : "",
+        tool_name: typeof toolName === "string" ? toolName : "",
+        tool_input: {
+            file_path: filePath,
+            ...(typeof offset === "number" ? { offset } : {}),
+            ...(typeof limit === "number" ? { limit } : {}),
+        },
+        ...(typeof toolResult === "string" ? { tool_result: toolResult } : {}),
+    });
+}
+/**
+ * Returns a cwd-relative path, or null if the path is outside the cwd.
+ * Prevents path traversal attacks and handles the path.relative() edge case
+ * where paths outside cwd produce absolute or '../' prefixed results.
+ */
+export function safeRelativePath(cwd, filePath) {
+    const rel = path.relative(cwd, filePath);
+    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+        return null;
+    }
+    return rel;
+}
+/**
+ * Wraps a hook's main function with stdin reading, input parsing,
+ * and error handling. Logs full stack traces on failure.
+ */
+export function runHook(handler, failExitCode) {
+    const run = async () => {
+        const raw = await readStdin();
+        const input = parseHookInput(raw);
+        const output = await handler(input);
+        if (output.stderr.length > 0)
+            process.stderr.write(output.stderr);
+        process.exit(output.exitCode);
+    };
+    run().catch((err) => {
+        const detail = err instanceof Error ? (err.stack ?? err.message) : String(err);
+        process.stderr.write(`[graft] Hook error: ${detail}`);
+        process.exit(failExitCode);
+    });
+}
+//# sourceMappingURL=shared.js.map

package/dist/hooks/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/hooks/shared.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,uEAAuE;AACvE,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC,MAAM,OAAO,SAAS;IACX,UAAU,CAAS;IACnB,GAAG,CAAS;IACZ,eAAe,CAAS;IACxB,SAAS,CAAS;IAClB,UAAU,CAIjB;IACO,WAAW,CAAU;IAE9B,YAAY,IAOX;QACC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;CACF;AAED,MAAM,OAAO,UAAU;IACZ,QAAQ,CAAS;IACjB,MAAM,CAAS;IAExB,YAAY,QAAgB,EAAE,MAAc;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;QACzB,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,CAAC,eAAe,CAAC,mBAAmB,CAC7D,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,SAAS,GAAG,YAAuC,CAAC;IAE1D,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEjC,OAAO,IAAI,SAAS,CAAC;QACnB,UAAU,EAAE,SAAS;QACrB,GAAG;QACH,eAAe,EAAE,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;QACvE,SAAS,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QACvD,UAAU,EAAE;YACV,SAAS,EAAE,QAAQ;YACnB,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD;QACD,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,QAAgB;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CACrB,OAA+D,EAC/D,YAAoB;IAEpB,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./api/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export * from "./api/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/mcp/burden.d.ts

@@ -0,0 +1,21 @@
+import type { McpToolName } from "../contracts/output-schemas.js";
+export declare const BURDEN_KINDS: readonly ["read", "search", "shell", "state", "diagnostic"];
+export type BurdenKind = typeof BURDEN_KINDS[number];
+export interface BurdenBucket {
+    readonly calls: number;
+    readonly bytesReturned: number;
+}
+export type BurdenByKind = Record<BurdenKind, BurdenBucket>;
+export declare function emptyBurdenByKind(): BurdenByKind;
+export declare function cloneBurdenByKind(source: Readonly<BurdenByKind>): BurdenByKind;
+export declare function freezeBurdenByKind(source: BurdenByKind): Readonly<BurdenByKind>;
+export declare function burdenKindForTool(tool: McpToolName): BurdenKind;
+export declare function isNonReadBurdenKind(kind: BurdenKind): boolean;
+export declare function projectBurdenByKind(source: Readonly<BurdenByKind>, tool: McpToolName, returnedBytes: number): Readonly<BurdenByKind>;
+export declare function totalNonReadBytesReturned(source: Readonly<BurdenByKind>): number;
+export declare function topBurdenKind(source: Readonly<BurdenByKind>): {
+    kind: BurdenKind;
+    calls: number;
+    bytesReturned: number;
+} | null;
+//# sourceMappingURL=burden.d.ts.map

package/dist/mcp/burden.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"burden.d.ts","sourceRoot":"","sources":["../../src/mcp/burden.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAElE,eAAO,MAAM,YAAY,6DAA8D,CAAC;AAExF,MAAM,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAyC5D,wBAAgB,iBAAiB,IAAI,YAAY,CAQhD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,YAAY,CAQ9E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,CAK/E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAE/D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAE7D;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC9B,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,MAAM,GACpB,QAAQ,CAAC,YAAY,CAAC,CASxB;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,MAAM,CAIhF;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,GAC7B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAYnE"}

package/dist/mcp/burden.js

@@ -0,0 +1,96 @@
+export const BURDEN_KINDS = ["read", "search", "shell", "state", "diagnostic"];
+const ZERO_BUCKET = Object.freeze({ calls: 0, bytesReturned: 0 });
+const TOOL_BURDEN_KIND = {
+    safe_read: "read",
+    file_outline: "read",
+    read_range: "read",
+    changed_since: "read",
+    graft_diff: "search",
+    graft_since: "search",
+    graft_map: "search",
+    code_show: "search",
+    code_find: "search",
+    code_refs: "search",
+    daemon_repos: "diagnostic",
+    daemon_status: "diagnostic",
+    daemon_sessions: "diagnostic",
+    daemon_monitors: "diagnostic",
+    monitor_start: "diagnostic",
+    monitor_pause: "diagnostic",
+    monitor_resume: "diagnostic",
+    monitor_stop: "diagnostic",
+    workspace_authorize: "diagnostic",
+    workspace_authorizations: "diagnostic",
+    workspace_revoke: "diagnostic",
+    workspace_bind: "diagnostic",
+    workspace_status: "diagnostic",
+    causal_status: "diagnostic",
+    causal_attach: "diagnostic",
+    activity_view: "diagnostic",
+    workspace_rebind: "diagnostic",
+    run_capture: "shell",
+    state_save: "state",
+    state_load: "state",
+    set_budget: "diagnostic",
+    explain: "diagnostic",
+    doctor: "diagnostic",
+    stats: "diagnostic",
+};
+export function emptyBurdenByKind() {
+    return {
+        read: ZERO_BUCKET,
+        search: ZERO_BUCKET,
+        shell: ZERO_BUCKET,
+        state: ZERO_BUCKET,
+        diagnostic: ZERO_BUCKET,
+    };
+}
+export function cloneBurdenByKind(source) {
+    return {
+        read: { ...source.read },
+        search: { ...source.search },
+        shell: { ...source.shell },
+        state: { ...source.state },
+        diagnostic: { ...source.diagnostic },
+    };
+}
+export function freezeBurdenByKind(source) {
+    for (const kind of BURDEN_KINDS) {
+        Object.freeze(source[kind]);
+    }
+    return Object.freeze(source);
+}
+export function burdenKindForTool(tool) {
+    return TOOL_BURDEN_KIND[tool];
+}
+export function isNonReadBurdenKind(kind) {
+    return kind !== "read";
+}
+export function projectBurdenByKind(source, tool, returnedBytes) {
+    const next = cloneBurdenByKind(source);
+    const kind = burdenKindForTool(tool);
+    const current = next[kind];
+    next[kind] = {
+        calls: current.calls + 1,
+        bytesReturned: current.bytesReturned + returnedBytes,
+    };
+    return freezeBurdenByKind(next);
+}
+export function totalNonReadBytesReturned(source) {
+    return BURDEN_KINDS
+        .filter((kind) => isNonReadBurdenKind(kind))
+        .reduce((sum, kind) => sum + source[kind].bytesReturned, 0);
+}
+export function topBurdenKind(source) {
+    let best = null;
+    for (const kind of BURDEN_KINDS) {
+        const bucket = source[kind];
+        if (bucket.bytesReturned === 0)
+            continue;
+        if (best === null || bucket.bytesReturned > best.bytesReturned) {
+            best = { kind, calls: bucket.calls, bytesReturned: bucket.bytesReturned };
+        }
+    }
+    return best;
+}
+//# sourceMappingURL=burden.js.map

package/dist/mcp/burden.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"burden.js","sourceRoot":"","sources":["../../src/mcp/burden.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAU,CAAC;AAWxF,MAAM,WAAW,GAAiB,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;AAEhF,MAAM,gBAAgB,GAAoC;IACxD,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,aAAa,EAAE,MAAM;IACrB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,YAAY,EAAE,YAAY;IAC1B,aAAa,EAAE,YAAY;IAC3B,eAAe,EAAE,YAAY;IAC7B,eAAe,EAAE,YAAY;IAC7B,aAAa,EAAE,YAAY;IAC3B,aAAa,EAAE,YAAY;IAC3B,cAAc,EAAE,YAAY;IAC5B,YAAY,EAAE,YAAY;IAC1B,mBAAmB,EAAE,YAAY;IACjC,wBAAwB,EAAE,YAAY;IACtC,gBAAgB,EAAE,YAAY;IAC9B,cAAc,EAAE,YAAY;IAC5B,gBAAgB,EAAE,YAAY;IAC9B,aAAa,EAAE,YAAY;IAC3B,aAAa,EAAE,YAAY;IAC3B,aAAa,EAAE,YAAY;IAC3B,gBAAgB,EAAE,YAAY;IAC9B,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,OAAO;IACnB,UAAU,EAAE,OAAO;IACnB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;CACpB,CAAC;AAEF,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,WAAW;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,OAAO;QACL,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;QAC5B,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;QAC1B,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;QAC1B,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAiB;IACjD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAgB;IAClD,OAAO,IAAI,KAAK,MAAM,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAA8B,EAC9B,IAAiB,EACjB,aAAqB;IAErB,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,GAAG;QACX,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa,GAAG,aAAa;KACrD,CAAC;IACF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAA8B;IACtE,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;SAC3C,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAA8B;IAE9B,IAAI,IAAI,GAAsE,IAAI,CAAC;IAEnF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;YAAE,SAAS;QACzC,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/D,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/mcp/cache.d.ts

@@ -0,0 +1,2 @@
+export { hashContent, Observation, ObservationCache, type CacheResult, type ObservationSnapshot, } from "../operations/observation-cache.js";
+//# sourceMappingURL=cache.d.ts.map

package/dist/mcp/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/mcp/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,GACzB,MAAM,oCAAoC,CAAC"}

package/dist/mcp/cache.js

@@ -0,0 +1,2 @@
+export { hashContent, Observation, ObservationCache, } from "../operations/observation-cache.js";
+//# sourceMappingURL=cache.js.map

package/dist/mcp/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/mcp/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,WAAW,EACX,gBAAgB,GAGjB,MAAM,oCAAoC,CAAC"}

package/dist/mcp/cached-file.d.ts

@@ -0,0 +1,2 @@
+export { CachedFile } from "../operations/cached-file.js";
+//# sourceMappingURL=cached-file.d.ts.map

package/dist/mcp/cached-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached-file.d.ts","sourceRoot":"","sources":["../../src/mcp/cached-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/mcp/cached-file.js

@@ -0,0 +1,2 @@
+export { CachedFile } from "../operations/cached-file.js";
+//# sourceMappingURL=cached-file.js.map

package/dist/mcp/cached-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached-file.js","sourceRoot":"","sources":["../../src/mcp/cached-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/mcp/context.d.ts

@@ -0,0 +1,84 @@
+import type { ObservationCache } from "./cache.js";
+import type { Metrics } from "./metrics.js";
+import type { GovernorTracker } from "../session/tracker.js";
+import type { McpToolResult } from "./receipt.js";
+import type { FileSystem } from "../ports/filesystem.js";
+import type { JsonCodec } from "../ports/codec.js";
+import type { ProcessRunner } from "../ports/process-runner.js";
+import type { GitClient } from "../ports/git.js";
+import type { WarpHandle } from "../ports/warp.js";
+import type { RepoObservation } from "./repo-state.js";
+import type { RunCaptureConfig } from "./run-capture-config.js";
+import type { RuntimeObservabilityState, ToolCallFootprintRegion } from "./runtime-observability.js";
+import type { RuntimeCausalContext } from "./runtime-causal-context.js";
+import type { RuntimeWorkspaceOverlayFooting } from "./runtime-workspace-overlay.js";
+import type { PersistedLocalActivityWindow, PersistedLocalHistoryAttachDeclaration, RepoConcurrencySummary, PersistedLocalHistorySummary } from "./persisted-local-history.js";
+import type { McpToolName } from "../contracts/output-schemas.js";
+import type { DaemonSessionView, DaemonStatusView, AuthorizedWorkspaceView, WorkspaceAuthorizeRequest, WorkspaceAuthorizeResult, WorkspaceRevokeResult } from "./daemon-control-plane.js";
+import type { DaemonRepoFilter, DaemonRepoListView } from "./daemon-repos.js";
+import type { MonitorActionResult, MonitorStartRequest, MonitorStatusView } from "./persistent-monitor-runtime.js";
+import type { WorkspaceActionResult, CausalAttachResult, WorkspaceBindRequest, WorkspaceStatus } from "./workspace-router.js";
+import type { z } from "zod";
+export type ToolHandler = (args: Record<string, unknown>, ctx: ToolContext) => McpToolResult | Promise<McpToolResult>;
+export interface ToolDefinition {
+    readonly name: McpToolName;
+    readonly description: string;
+    readonly schema?: Record<string, z.ZodType>;
+    readonly policyCheck?: boolean;
+    readonly createHandler: () => ToolHandler;
+}
+export interface ToolContext {
+    readonly projectRoot: string;
+    readonly graftDir: string;
+    readonly graftignorePatterns: readonly string[];
+    readonly governor: GovernorTracker;
+    readonly cache: ObservationCache;
+    readonly metrics: Metrics;
+    readonly fs: FileSystem;
+    readonly codec: JsonCodec;
+    readonly process: ProcessRunner;
+    readonly git: GitClient;
+    readonly runCapture: RunCaptureConfig;
+    readonly observability: RuntimeObservabilityState;
+    respond(tool: McpToolName, data: Record<string, unknown>): McpToolResult;
+    recordFootprint(entry: {
+        readonly paths?: readonly string[];
+        readonly symbols?: readonly string[];
+        readonly regions?: readonly ToolCallFootprintRegion[];
+    }): void;
+    resolvePath(relative: string): string;
+    getWarp(): Promise<WarpHandle>;
+    getRepoState(): RepoObservation;
+    getCausalContext(): RuntimeCausalContext;
+    getWorkspaceOverlayFooting(): Promise<RuntimeWorkspaceOverlayFooting | null>;
+    getPersistedLocalHistorySummary(): Promise<PersistedLocalHistorySummary>;
+    getPersistedLocalActivityWindow(limit: number): Promise<PersistedLocalActivityWindow>;
+    getRepoConcurrencySummary(): Promise<RepoConcurrencySummary | null>;
+    declareCausalAttach(request: PersistedLocalHistoryAttachDeclaration): Promise<CausalAttachResult>;
+    getWorkspaceStatus(): WorkspaceStatus;
+    bindWorkspace(request: WorkspaceBindRequest, actionName: string): Promise<WorkspaceActionResult>;
+    rebindWorkspace(request: WorkspaceBindRequest, actionName: string): Promise<WorkspaceActionResult>;
+    getDaemonStatus(): Promise<DaemonStatusView>;
+    listDaemonRepos(filter: DaemonRepoFilter): Promise<DaemonRepoListView>;
+    listDaemonSessions(): Promise<readonly DaemonSessionView[]>;
+    listDaemonMonitors(): Promise<readonly MonitorStatusView[]>;
+    startMonitor(request: MonitorStartRequest): Promise<MonitorActionResult>;
+    pauseMonitor(request: WorkspaceBindRequest): Promise<MonitorActionResult>;
+    resumeMonitor(request: WorkspaceBindRequest): Promise<MonitorActionResult>;
+    stopMonitor(request: WorkspaceBindRequest): Promise<MonitorActionResult>;
+    listWorkspaceAuthorizations(): Promise<readonly AuthorizedWorkspaceView[]>;
+    authorizeWorkspace(request: WorkspaceAuthorizeRequest): Promise<WorkspaceAuthorizeResult>;
+    revokeWorkspace(request: WorkspaceBindRequest): Promise<WorkspaceRevokeResult>;
+}
+/**
+ * Resolve a user-provided path against projectRoot with traversal guard.
+ * Both absolute and relative paths are confined to the project root.
+ * Symlinks are resolved before the confinement check to prevent escapes.
+ */
+export declare function createPathResolver(projectRoot: string): (input: string) => string;
+/**
+ * Runtime guard: asserts that the supplied value satisfies the ToolContext
+ * shape.  Used at composition-root boundaries to catch wiring errors early.
+ */
+export declare function assertToolContext(value: unknown): asserts value is ToolContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/mcp/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/mcp/context.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,KAAK,EACV,4BAA4B,EAC5B,sCAAsC,EACtC,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAEtH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,WAAW,CAAC;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC;IACzE,eAAe,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;KACvD,GAAG,IAAI,CAAC;IACT,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/B,YAAY,IAAI,eAAe,CAAC;IAChC,gBAAgB,IAAI,oBAAoB,CAAC;IACzC,0BAA0B,IAAI,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC,CAAC;IAC7E,+BAA+B,IAAI,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACzE,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACtF,yBAAyB,IAAI,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IACpE,mBAAmB,CAAC,OAAO,EAAE,sCAAsC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClG,kBAAkB,IAAI,eAAe,CAAC;IACtC,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjG,eAAe,CAAC,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnG,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,kBAAkB,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAC5D,kBAAkB,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAC5D,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1E,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3E,WAAW,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzE,2BAA2B,IAAI,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAC;IAC3E,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC1F,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAChF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAuCjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CA6B9E"}