@fml-inc/fml 0.8.0-rc.1 → 0.8.0-rc.3

package/dist/{chunk-DEMVOVVY.js → chunk-KBT5RMAU.js}

@@ -1,6 +1,6 @@
 import {
   FML_HOOK_INBOX_DIR
-} from "./chunk-7DR5X7XI.js";
+} from "./chunk-A6HAEVJX.js";
 
 // ../../packages/panopticon/src/observer/auth.ts
 import crypto from "crypto";
@@ -71,7 +71,8 @@ var HOOK_TARGETS = Object.freeze([
   "claude",
   "codex",
   "gemini",
-  "grok"
+  "grok",
+  "pi"
 ]);
 function isHookTarget(value) {
   return typeof value === "string" && HOOK_TARGETS.some((targetId) => targetId === value);
@@ -137,6 +138,20 @@ var hook_events_default = {
     "PreCompact",
     "PostCompact",
     "SessionEnd"
+  ],
+  pi: [
+    "SessionStart",
+    "UserPromptSubmit",
+    "TurnStart",
+    "PreToolUse",
+    "PostToolUse",
+    "PostToolUseFailure",
+    "Stop",
+    "Notification",
+    "ConfigChange",
+    "PreCompact",
+    "PostCompact",
+    "SessionEnd"
   ]
 };
 
@@ -153,6 +168,221 @@ var GEMINI_HOOK_EVENTS = Object.freeze([
 var GROK_HOOK_EVENTS = Object.freeze([
   ...hook_events_default.grok
 ]);
+var PI_HOOK_EVENTS = Object.freeze([...hook_events_default.pi]);
+
+// ../../packages/agent-targets/src/hooks/read-command.ts
+import path2 from "path";
+var SHELL_TOOL_NAMES = /* @__PURE__ */ new Set([
+  "bash",
+  "exec_command",
+  "shell"
+]);
+var COMMAND_SEPARATORS = /* @__PURE__ */ new Set([
+  ";",
+  "&",
+  "&&",
+  "|",
+  "||",
+  "<",
+  "<<",
+  ">",
+  ">>",
+  ">&1",
+  ">&2",
+  "1>",
+  "1>>",
+  "1>&1",
+  "1>&2",
+  "2>",
+  "2>>",
+  "2>&1",
+  "2>&2"
+]);
+function tokenizeShellLikeCommand(command) {
+  const tokens = [];
+  let current = "";
+  let quote = null;
+  let escaping = false;
+  for (let index = 0; index < command.length; index += 1) {
+    const character = command[index];
+    if (escaping) {
+      current += character;
+      escaping = false;
+      continue;
+    }
+    if (character === "\\") {
+      escaping = true;
+      continue;
+    }
+    if (quote) {
+      if (character === quote) quote = null;
+      else current += character;
+      continue;
+    }
+    if (character === "'" || character === '"') {
+      quote = character;
+      continue;
+    }
+    if (current === "" && (character === "1" || character === "2") && command[index + 1] === ">") {
+      if (command[index + 2] === ">") {
+        tokens.push(`${character}>>`);
+        index += 2;
+      } else if (command[index + 2] === "&" && (command[index + 3] === "1" || command[index + 3] === "2")) {
+        tokens.push(`${character}>&${command[index + 3]}`);
+        index += 3;
+      } else {
+        tokens.push(`${character}>`);
+        index += 1;
+      }
+      continue;
+    }
+    if (/[;&|<>]/.test(character)) {
+      if (current) {
+        tokens.push(current);
+        current = "";
+      }
+      const next = command[index + 1];
+      if (character === ">" && next === "&" && (command[index + 2] === "1" || command[index + 2] === "2")) {
+        tokens.push(`>&${command[index + 2]}`);
+        index += 2;
+        continue;
+      }
+      if (character === "&" && next === "&" || character === "|" && next === "|" || character === "<" && next === "<" || character === ">" && next === ">") {
+        tokens.push(`${character}${next}`);
+        index += 1;
+        continue;
+      }
+      tokens.push(character);
+      continue;
+    }
+    if (/\s/.test(character)) {
+      if (current) {
+        tokens.push(current);
+        current = "";
+      }
+      continue;
+    }
+    current += character;
+  }
+  if (quote || escaping) return [];
+  if (current) tokens.push(current);
+  return tokens;
+}
+function splitCommandSegments(tokens) {
+  const segments = [];
+  let current = [];
+  for (let index = 0; index < tokens.length; index += 1) {
+    const token = tokens[index];
+    if (COMMAND_SEPARATORS.has(token)) {
+      if (current.length > 0) {
+        segments.push(current);
+        current = [];
+      }
+      if (token === "<" || token === "<<") index += 1;
+      continue;
+    }
+    current.push(token);
+  }
+  if (current.length > 0) segments.push(current);
+  return segments;
+}
+function stripSimpleOptions(args, flagsWithValues = /* @__PURE__ */ new Set(), patternFlags = /* @__PURE__ */ new Set()) {
+  const remaining = [];
+  let consumedPatternFlag = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const argument = args[index];
+    if (argument === "--") {
+      remaining.push(...args.slice(index + 1));
+      break;
+    }
+    if (argument.startsWith("-") && argument.length > 1) {
+      if (flagsWithValues.has(argument)) {
+        if (patternFlags.has(argument)) consumedPatternFlag = true;
+        if (!argument.includes("=")) index += 1;
+      }
+      continue;
+    }
+    remaining.push(argument);
+  }
+  return { args: remaining, consumedPatternFlag };
+}
+function readCommandFileArgs(args, flagsWithValues, patternFlags = flagsWithValues) {
+  const stripped = stripSimpleOptions(args, flagsWithValues, patternFlags);
+  return stripped.consumedPatternFlag ? stripped.args : stripped.args.slice(1);
+}
+function isPlausibleReadPath(argument) {
+  if (!argument || argument === "-" || argument.startsWith("-")) return false;
+  if (COMMAND_SEPARATORS.has(argument)) return false;
+  if (/[\0*?[{}`$]/.test(argument)) return false;
+  if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(argument)) return false;
+  return path2.posix.isAbsolute(argument) || path2.win32.isAbsolute(argument) || argument.startsWith("~/") || argument.startsWith("./") || argument.startsWith("../") || argument.includes("/") || /\.[A-Za-z0-9][A-Za-z0-9_-]*$/.test(argument) || /^[A-Z][A-Za-z0-9_.-]*$/.test(argument);
+}
+function filePathFromSegment(tokens) {
+  const commandTokens = [...tokens];
+  while (commandTokens[0]?.includes("=") && /^[A-Za-z_][A-Za-z0-9_]*=/.test(commandTokens[0])) {
+    commandTokens.shift();
+  }
+  const commandName = commandTokens.shift()?.split("/").pop();
+  if (!commandName) return null;
+  let args;
+  switch (commandName) {
+    case "bat":
+    case "batcat":
+    case "cat":
+    case "file":
+    case "less":
+    case "more":
+    case "nl":
+    case "stat":
+    case "wc":
+      args = stripSimpleOptions(commandTokens).args;
+      break;
+    case "head":
+    case "tail":
+      args = stripSimpleOptions(commandTokens, /* @__PURE__ */ new Set(["-n", "-c"])).args;
+      break;
+    case "sed":
+      if (commandTokens.some(
+        (argument) => argument.startsWith("-i") || argument === "--in-place" || argument.startsWith("--in-place=")
+      )) {
+        return null;
+      }
+      args = readCommandFileArgs(commandTokens, /* @__PURE__ */ new Set(["-e", "-f"]));
+      break;
+    case "awk":
+      args = readCommandFileArgs(
+        commandTokens,
+        /* @__PURE__ */ new Set(["-f", "-v"]),
+        /* @__PURE__ */ new Set(["-f"])
+      );
+      break;
+    case "grep":
+    case "rg":
+      args = readCommandFileArgs(
+        commandTokens,
+        /* @__PURE__ */ new Set(["-A", "-B", "-C", "-e", "-f", "-g", "-m", "-t"]),
+        /* @__PURE__ */ new Set(["-e", "-f"])
+      );
+      break;
+    default:
+      return null;
+  }
+  return args.find(isPlausibleReadPath) ?? null;
+}
+function extractReadFilePathFromCommand(command) {
+  const tokens = tokenizeShellLikeCommand(command);
+  if (tokens.length === 0) return null;
+  for (let index = 0; index < tokens.length - 1; index += 1) {
+    if (tokens[index] === "<" && isPlausibleReadPath(tokens[index + 1])) {
+      return tokens[index + 1];
+    }
+  }
+  for (const segment of splitCommandSegments(tokens)) {
+    const filePath = filePathFromSegment(segment);
+    if (filePath) return filePath;
+  }
+  return null;
+}
 
 // ../../packages/agent-targets/src/hooks/normalize.ts
 var MAX_EXTRACTED_TEXT_BYTES = 64 * 1024;
@@ -309,12 +539,12 @@ function normalizedEvent(target, payload, context) {
     "workingDirectory",
     "workspaceRoot"
   ]) ?? context.cwd;
-  const filePath = firstString(payload, ["file_path", "filePath", "path"]) ?? (toolInput ? firstString(toolInput, ["file_path", "filePath", "path"]) : void 0);
   const command = boundedExtractedText(
     firstText(payload, ["command"]) ?? (toolInput ? firstText(toolInput, ["command", "cmd"]) : void 0),
     "command"
   );
   const toolName = firstString(payload, ["tool_name", "toolName", "name"]);
+  const filePath = firstString(payload, ["file_path", "filePath", "path"]) ?? (toolInput ? firstString(toolInput, ["file_path", "filePath", "path"]) : void 0) ?? (command && toolName && SHELL_TOOL_NAMES.has(toolName.toLowerCase()) ? extractReadFilePathFromCommand(command) ?? void 0 : void 0);
   const userPrompt = boundedExtractedText(
     firstText(payload, ["prompt", "user_prompt", "userPrompt"]) ?? (target === "gemini" ? geminiUserPrompt(payload) : void 0),
     "user_prompt"
@@ -371,7 +601,8 @@ var HOOK_NORMALIZATION_CAPABILITIES = Object.freeze([
   capability("claude", CLAUDE_HOOK_EVENTS),
   capability("codex", CODEX_HOOK_EVENTS),
   capability("gemini", GEMINI_HOOK_EVENTS),
-  capability("grok", GROK_HOOK_EVENTS)
+  capability("grok", GROK_HOOK_EVENTS),
+  capability("pi", PI_HOOK_EVENTS)
 ]);
 function parseHookCaptureRequest(value) {
   if (!isRecord(value) || !isHookTarget(value.target)) return null;
@@ -434,7 +665,7 @@ function normalizeObserverHookCapture(request, options = {}) {
 // ../../packages/panopticon/src/observer/database.ts
 import crypto2 from "crypto";
 import fs2 from "fs";
-import path2 from "path";
+import path3 from "path";
 var ObserverHookSpoolEntryTooLargeError = class extends Error {
   constructor(logicalBytes, maxBytes) {
     super(
@@ -789,7 +1020,7 @@ function openObserverDatabase(databaseFile, options = {}) {
   if (!sqlite?.DatabaseSync) {
     throw new Error("FML observer requires the Node.js built-in SQLite module");
   }
-  const databaseDirectory = path2.dirname(databaseFile);
+  const databaseDirectory = path3.dirname(databaseFile);
   fs2.mkdirSync(databaseDirectory, { recursive: true, mode: 448 });
   if (options.restrictDatabaseDirectory !== false) {
     enforceOwnerOnlyMode(databaseDirectory, 448);
@@ -3068,7 +3299,7 @@ function createObserverHttpServer(opts) {
 // src/hooks/inbox.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import fs3 from "fs";
-import path3 from "path";
+import path4 from "path";
 
 // src/hooks/inbox-config.ts
 var BYTE_SUFFIXES = {
@@ -3210,7 +3441,7 @@ function entryFileName(id) {
   return `${id}.json`;
 }
 function entryPath(inboxDir, id) {
-  return path3.join(inboxDir, entryFileName(id));
+  return path4.join(inboxDir, entryFileName(id));
 }
 function enforceOwnerOnlyDirectory(inboxDir) {
   fs3.mkdirSync(inboxDir, { recursive: true, mode: 448 });
@@ -3320,7 +3551,7 @@ function parseCapacityState(value) {
   };
 }
 function capacityStatePath(inboxDir) {
-  return path3.join(inboxDir, CAPACITY_STATE_FILE);
+  return path4.join(inboxDir, CAPACITY_STATE_FILE);
 }
 function readCapacityStateFile(inboxDir) {
   try {
@@ -3348,7 +3579,7 @@ function writeCapacityState(inboxDir, state, capacityLock) {
   enforceOwnerOnlyDirectory(inboxDir);
   capacityLock.assertOwned();
   const destination = capacityStatePath(inboxDir);
-  const temporary = path3.join(
+  const temporary = path4.join(
     inboxDir,
     `${CAPACITY_STATE_FILE}.${process.pid}.${randomUUID2()}.tmp`
   );
@@ -3457,7 +3688,7 @@ function recoverStaleCapacityLock(lockPath, nowMs) {
       return;
     }
     fs3.rmSync(abandoned, { force: true });
-    fsyncDirectory(path3.dirname(lockPath));
+    fsyncDirectory(path4.dirname(lockPath));
   } catch (error) {
     if (!capacityLockRaceError(error)) throw error;
   }
@@ -3468,7 +3699,7 @@ function sleepSync(milliseconds) {
 }
 function acquireCapacityLock(inboxDir, waitMs = CAPACITY_LOCK_WAIT_MS) {
   enforceOwnerOnlyDirectory(inboxDir);
-  const lockPath = path3.join(inboxDir, CAPACITY_LOCK_FILE);
+  const lockPath = path4.join(inboxDir, CAPACITY_LOCK_FILE);
   const deadlineMs = Date.now() + Math.max(0, waitMs);
   while (true) {
     let descriptor;
@@ -3541,19 +3772,19 @@ function capacityMutationEvidence(inboxDir, pending, includeTemporary) {
   const prefix = `.${id}.`;
   const candidates = [];
   if (includeTemporary && pending.temporaryFileName) {
-    candidates.push(path3.join(inboxDir, pending.temporaryFileName));
+    candidates.push(path4.join(inboxDir, pending.temporaryFileName));
   } else if (includeTemporary) {
     try {
       for (const name of fs3.readdirSync(inboxDir)) {
         if (name.startsWith(prefix) && name.endsWith(".tmp")) {
-          candidates.push(path3.join(inboxDir, name));
+          candidates.push(path4.join(inboxDir, name));
         }
       }
     } catch (error) {
       return error.code === "ENOENT" ? { kind: "missing" } : { kind: "unavailable" };
     }
   }
-  candidates.push(path3.join(inboxDir, fileName));
+  candidates.push(path4.join(inboxDir, fileName));
   let presentBytes;
   for (const candidate of candidates) {
     try {
@@ -3665,7 +3896,7 @@ function removeCapacityTrackedEntry(filePath, inboxDir, expectedBytes, missingIs
     }
     if (bytes === void 0) return false;
     const pendingRemoval = {
-      fileName: path3.basename(filePath),
+      fileName: path4.basename(filePath),
       bytes,
       startedAtMs: Date.now()
     };
@@ -3746,7 +3977,7 @@ function readRetirementState(inboxDir) {
   try {
     return parseRetirementState(
       JSON.parse(
-        fs3.readFileSync(path3.join(inboxDir, RETIREMENT_STATE_FILE), "utf8")
+        fs3.readFileSync(path4.join(inboxDir, RETIREMENT_STATE_FILE), "utf8")
       )
     ) ?? defaultRetirementState();
   } catch {
@@ -3755,8 +3986,8 @@ function readRetirementState(inboxDir) {
 }
 function writeRetirementState(inboxDir, state) {
   enforceOwnerOnlyDirectory(inboxDir);
-  const destination = path3.join(inboxDir, RETIREMENT_STATE_FILE);
-  const temporary = path3.join(
+  const destination = path4.join(inboxDir, RETIREMENT_STATE_FILE);
+  const temporary = path4.join(
     inboxDir,
     `${RETIREMENT_STATE_FILE}.${process.pid}.${randomUUID2()}.tmp`
   );
@@ -3783,7 +4014,7 @@ function completePendingRetirement(inboxDir, state) {
   const pending = state.pending;
   if (!pending) return state;
   if (!removeCapacityTrackedEntry(
-    path3.join(inboxDir, pending.fileName),
+    path4.join(inboxDir, pending.fileName),
     inboxDir,
     pending.bytes,
     true
@@ -3819,7 +4050,7 @@ function retireEntry(filePath, reason, inboxDir) {
   const pending = {
     ...current,
     pending: {
-      fileName: path3.basename(filePath),
+      fileName: path4.basename(filePath),
       bytes,
       reason,
       retiredAtMs: Date.now()
@@ -3870,7 +4101,7 @@ function persistHookInboxEntry(entry, inboxDir = FML_HOOK_INBOX_DIR, limits = ho
     throw new Error("FML hook inbox admission is busy");
   }
   const destination = entryPath(inboxDir, entry.id);
-  const temporary = path3.join(
+  const temporary = path4.join(
     inboxDir,
     `.${entry.id}.${process.pid}.${randomUUID2()}.tmp`
   );
@@ -3900,8 +4131,8 @@ function persistHookInboxEntry(entry, inboxDir = FML_HOOK_INBOX_DIR, limits = ho
   }
   try {
     const pendingPersist = {
-      fileName: path3.basename(destination),
-      temporaryFileName: path3.basename(temporary),
+      fileName: path4.basename(destination),
+      temporaryFileName: path4.basename(temporary),
       bytes: serializedBytes,
       startedAtMs: Date.now()
     };
@@ -4059,7 +4290,7 @@ async function scanDrainEntryNames(inboxDir, maximumEntries, skipThrough, exclud
       const abandonedLockMatch = ABANDONED_CAPACITY_LOCK_PATTERN.exec(name);
       if (INBOX_STATE_TEMP_PATTERN.test(name) || abandonedLockMatch !== null) {
         try {
-          const orphanPath = path3.join(inboxDir, name);
+          const orphanPath = path4.join(inboxDir, name);
           const stat = await fs3.promises.lstat(orphanPath);
           const abandonedAtMs = abandonedLockMatch ? Number(abandonedLockMatch[1]) : void 0;
           const isStale = abandonedLockMatch ? validTimestamp(abandonedAtMs) && abandonedAtMs <= cutoffMs : stat.mtimeMs <= cutoffMs;
@@ -4082,8 +4313,8 @@ async function scanDrainEntryNames(inboxDir, maximumEntries, skipThrough, exclud
       const id = match?.[1];
       if (!id) continue;
       const destination = entryPath(inboxDir, id);
-      const destinationName = path3.basename(destination);
-      const temporary = path3.join(inboxDir, name);
+      const destinationName = path4.basename(destination);
+      const temporary = path4.join(inboxDir, name);
       try {
         const stat = await fs3.promises.lstat(temporary);
         if (!stat.isFile()) continue;
@@ -4136,7 +4367,7 @@ async function scanDrainEntryNames(inboxDir, maximumEntries, skipThrough, exclud
   return { names, failed, resetCursor, blockCursorAdvance };
 }
 function drainCursor(inboxDir) {
-  const key = path3.resolve(inboxDir);
+  const key = path4.resolve(inboxDir);
   const existing = HOOK_INBOX_DRAIN_CURSORS.get(key);
   if (existing) {
     HOOK_INBOX_DRAIN_CURSORS.delete(key);
@@ -4173,7 +4404,7 @@ async function pendingInboxSizeAsync(inboxDir) {
     for (let dirent = await directory.read(); dirent !== null; dirent = await directory.read()) {
       if (!isPendingEntryName(dirent.name)) continue;
       try {
-        const stat = await fs3.promises.lstat(path3.join(inboxDir, dirent.name));
+        const stat = await fs3.promises.lstat(path4.join(inboxDir, dirent.name));
         if (stat.isFile()) {
           pendingEntries += 1;
           pendingBytes += stat.size;
@@ -4197,7 +4428,7 @@ function pendingInboxSize(inboxDir, includeTemporary = false) {
         continue;
       }
       try {
-        const stat = fs3.lstatSync(path3.join(inboxDir, dirent.name));
+        const stat = fs3.lstatSync(path4.join(inboxDir, dirent.name));
         if (stat.isFile()) {
           pendingEntries += 1;
           pendingBytes += stat.size;
@@ -4352,7 +4583,7 @@ async function drainHookInbox(capture, inboxDir = FML_HOOK_INBOX_DIR) {
     safeThrough = name;
   };
   for (const name of names) {
-    const filePath = path3.join(inboxDir, name);
+    const filePath = path4.join(inboxDir, name);
     const readResult = readEntryResult(filePath);
     if (readResult.kind === "missing") {
       markResolved(name, false);
@@ -4418,10 +4649,10 @@ async function drainHookInbox(capture, inboxDir = FML_HOOK_INBOX_DIR) {
 export {
   readObserverAuthToken,
   getOrCreateObserverAuthToken,
-  HOOK_TARGETS,
   CODEX_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   GROK_HOOK_EVENTS,
+  SHELL_TOOL_NAMES,
   parseHookCaptureRequest,
   normalizeObserverHookCapture,
   ObserverHookSpoolEntryTooLargeError,

package/dist/{chunk-P3QLARXE.js → chunk-R45CWWZO.js}

@@ -1,13 +1,13 @@
 import {
   resolveRepoFromCwd
-} from "./chunk-T5YVLSUC.js";
+} from "./chunk-7V7G7NVF.js";
 import {
   CONVEX_URL,
   getActiveEnv,
   getSelectedOrg,
   getSiteUrlForConvexUrl,
   getValidToken
-} from "./chunk-7DR5X7XI.js";
+} from "./chunk-A6HAEVJX.js";
 
 // src/fml-client.ts
 var LOGIN_EXPIRED_MESSAGE = "Authentication expired. Run `fml login` to sign in again, then restart Claude Code.";
@@ -79,7 +79,7 @@ function createFmlClient(token, options = {}) {
         const repo = resolveRepoFromCwd(process.cwd());
         if (repo) body.repo = repo.repo;
         if (isServiceToken) {
-          const { readTokens, SERVICE_TOKEN_LOGIN_USER_ID } = await import("./token-store-R7WXEPLI.js");
+          const { readTokens, SERVICE_TOKEN_LOGIN_USER_ID } = await import("./token-store-BT5THIAJ.js");
           const stored = readTokens(options.envName);
           const storedUserExternalId = stored?.tokenType === "service" && stored.user.id !== SERVICE_TOKEN_LOGIN_USER_ID ? stored.user.id : void 0;
           const userExternalId = process.env.FML_USER_EXTERNAL_ID ?? storedUserExternalId;

package/dist/{chunk-JXSSPQ5B.js → chunk-YSU5CS2V.js}

@@ -6,7 +6,7 @@ import {
   getSiteUrlForConvexUrl,
   getSyncDestinationIdentity,
   getValidToken
-} from "./chunk-7DR5X7XI.js";
+} from "./chunk-A6HAEVJX.js";
 
 // ../../packages/panopticon/src/artifact.ts
 import {