@gatebolt/cli 0.8.0 → 0.9.0

package/dist/agents/claude-code.js

@@ -5,10 +5,12 @@ const CLAUDE_DIR = ".claude";
 const SETTINGS_FILE = "settings.json";
 const PRE_TOOL_USE = "PreToolUse";
 const STOP = "Stop";
+const USER_PROMPT_SUBMIT = "UserPromptSubmit";
 const EDIT_TOOLS_MATCHER = "Edit|Write|NotebookEdit";
 const COMMAND_TYPE = "command";
 const GUARD_SUB = "guard";
 const POST_TURN_SUB = "post-turn";
+const PROMPT_SUB = "prompt";
 const ENFORCE_STRICT = "strict";
 const ENFORCE_LENIENT = "lenient";
 const DENY_DECISION = "deny";
@@ -28,8 +30,8 @@ function guardCommand(cli) {
         `{ echo "${MISSING_CLI_MESSAGE}" >&2; ` +
         `printf '%s\\n' '${missingCliDenyPayload()}'; }; exit 0; }`);
 }
-function postTurnCommand(cli) {
-    return (`command -v ${cli} >/dev/null 2>&1 && exec ${cli} hook ${POST_TURN_SUB} || ` +
+function advisoryCommand(cli, sub) {
+    return (`command -v ${cli} >/dev/null 2>&1 && exec ${cli} hook ${sub} || ` +
         `echo "${MISSING_CLI_MESSAGE}" >&2`);
 }
 export function mergeSettings(existing, opts) {
@@ -43,10 +45,15 @@ export function mergeSettings(existing, opts) {
     }
     hooks[PRE_TOOL_USE] = preToolUse;
     const stop = arrayField(hooks[STOP], `hooks.${STOP}`);
-    if (ensureHookCommand(stop, `hook ${POST_TURN_SUB}`, postTurnCommand(opts.command))) {
+    if (ensureHookCommand(stop, `hook ${POST_TURN_SUB}`, advisoryCommand(opts.command, POST_TURN_SUB))) {
         changed = true;
     }
     hooks[STOP] = stop;
+    const userPrompt = arrayField(hooks[USER_PROMPT_SUBMIT], `hooks.${USER_PROMPT_SUBMIT}`);
+    if (ensureHookCommand(userPrompt, `hook ${PROMPT_SUB}`, advisoryCommand(opts.command, PROMPT_SUB))) {
+        changed = true;
+    }
+    hooks[USER_PROMPT_SUBMIT] = userPrompt;
     if (opts.enforce === ENFORCE_STRICT) {
         const env = plainObject(settings.env, "env");
         settings.env = env;

package/dist/commands/declare.js

@@ -109,6 +109,7 @@ export async function runDeclare(argv) {
         baseSha,
         branch,
         profile: connection.profileName,
+        sessionId: process.env.CLAUDE_CODE_SESSION_ID,
     });
     process.stdout.write(`Declared change ${result.changeId} (${declaredFiles.length} file(s)).\n`);
 }

package/dist/commands/hook.js

@@ -1,7 +1,7 @@
 import { existsSync } from "node:fs";
 import { dirname } from "node:path";
 import { formatError } from "../errors.js";
-import { hasCommits, repoContext } from "../git.js";
+import { hasCommits, repoContext, worktreePaths } from "../git.js";
 import { isRecord } from "../json.js";
 import { readSession } from "../session.js";
 import { RequestError } from "../transport.js";
@@ -23,17 +23,31 @@ task — specific repo-relative paths, not broad globs like src/** :
 The GateBolt CLI is already configured for this repository. Once it
 prints "Declared change …", retry the edit.`;
 }
+function promptReminder(cli) {
+    return `This repository uses GateBolt strict mode. Before editing any file, declare
+the files you plan to touch — run this in Bash first, listing EVERY file you will
+create or modify for this task:
+
+  ${cli} declare \\
+    --task "<one line describing the task>" \\
+    --vendor claude_code --name "Claude Code" --model <your-model-id> \\
+    --file <path> [--file <path> ...]
+
+Then make your edits. Editing before declaring will be blocked.`;
+}
 export async function runHook(argv, input = {}) {
     const sub = argv[0] ?? "";
     switch (sub) {
         case "guard":
             return runGuard(input);
+        case "prompt":
+            return runPrompt(input);
         case "post-turn":
             return runPostTurn(input);
         case "pre-push":
             return runPrePush(input);
         default:
-            throw new Error(`Unknown hook '${sub}'. Expected one of: guard, post-turn, pre-push.`);
+            throw new Error(`Unknown hook '${sub}'. Expected one of: guard, prompt, post-turn, pre-push.`);
     }
 }
 async function resolveRepo(input) {
@@ -63,6 +77,7 @@ export async function readHookPayload() {
         filePath: toolInput && typeof toolInput.file_path === "string"
             ? toolInput.file_path
             : undefined,
+        sessionId: typeof data.session_id === "string" ? data.session_id : undefined,
     };
 }
 function safeJsonParse(raw) {
@@ -108,12 +123,36 @@ async function runGuard(input) {
     const cli = process.env.GATEBOLT_CLI ?? DEFAULT_CLI;
     process.stdout.write(denyPayload(declareInstructions(cli)));
 }
+// Proactively remind the agent to declare before its first edit, so it doesn't
+// discover strict mode by tripping the guard. Silent once a declaration is open.
+async function runPrompt(input) {
+    if (process.env.GATEBOLT_ENFORCE !== ENFORCE_STRICT)
+        return;
+    const repo = await resolveRepo(input);
+    if (!repo || !(await hasCommits()))
+        return;
+    if (await readSession(repo.gitDir))
+        return;
+    process.stdout.write(promptReminder(process.env.GATEBOLT_CLI ?? DEFAULT_CLI));
+}
 async function runPostTurn(input) {
     const repo = await resolveRepo(input);
     if (!repo)
         return;
-    if (!(await readSession(repo.gitDir)))
-        return;
+    if (await readSession(repo.gitDir))
+        return observeHere();
+    for (const { path, session } of await worktreeSessions()) {
+        if (session.sessionId === undefined) {
+            process.stderr.write(`GateBolt: ${path} has an open declaration from outside this session; leaving it open.\n`);
+            continue;
+        }
+        if (session.sessionId !== input.sessionId)
+            continue;
+        if (chdirTo(path))
+            await observeHere();
+    }
+}
+async function observeHere() {
     try {
         await runObserve([]);
     }
@@ -121,6 +160,29 @@ async function runPostTurn(input) {
         process.stderr.write(`${formatError(error)}\n`);
     }
 }
+async function worktreeSessions() {
+    const found = [];
+    for (const path of await worktreePaths().catch(() => [])) {
+        if (!chdirTo(path))
+            continue;
+        const repo = await hookRepoContext();
+        const session = repo ? await readSession(repo.gitDir) : null;
+        if (session)
+            found.push({ path, session });
+    }
+    return found;
+}
+// `git worktree list` keeps reporting a worktree whose directory was deleted
+// without a `git worktree prune`.
+function chdirTo(path) {
+    try {
+        process.chdir(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 // Backstop for the interrupt case the Stop hook misses: an open, un-observed
 // declaration.
 async function runPrePush(input) {

package/dist/git.js

@@ -34,6 +34,13 @@ export async function hooksPath() {
     const output = await git(["rev-parse", "--git-path", "hooks"]);
     return resolve(output.trim());
 }
+export async function worktreePaths() {
+    const output = await git(["worktree", "list", "--porcelain"]);
+    return output
+        .split("\n")
+        .filter((line) => line.startsWith("worktree "))
+        .map((line) => line.replace(/^worktree /, "").trim());
+}
 export async function isPathIgnored(path) {
     try {
         await git(["check-ignore", "--quiet", path]);

package/dist/session.js

@@ -26,12 +26,13 @@ export function writeSession(gitDir, session) {
     return writeJson(gitDir, SESSION_FILE, session);
 }
 export function readSession(gitDir) {
-    return readJson(gitDir, SESSION_FILE, ({ changeId, baseSha, branch, profile }) => typeof changeId === "string" && typeof baseSha === "string"
+    return readJson(gitDir, SESSION_FILE, ({ changeId, baseSha, branch, profile, sessionId }) => typeof changeId === "string" && typeof baseSha === "string"
         ? {
             changeId,
             baseSha,
             branch: typeof branch === "string" ? branch : undefined,
             profile: typeof profile === "string" ? profile : undefined,
+            sessionId: typeof sessionId === "string" ? sessionId : undefined,
         }
         : null);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gatebolt/cli",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Declare-then-observe agent client for GateBolt — records the files an AI agent intends to touch, then reconciles the actual git diff.",
   "keywords": [
     "gatebolt",