@h-rig/core 0.0.6-alpha.18 → 0.0.6-alpha.180

package/dist/src/hook-protocol.js

@@ -0,0 +1,432 @@
+// @bun
+// packages/core/src/hook-runtime.ts
+import { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, writeSync } from "fs";
+import { resolve } from "path";
+import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME } from "@rig/contracts";
+function bunRuntime() {
+  const runtime = globalThis;
+  return runtime.Bun;
+}
+function normalizeBuildConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function readBuildConfigForCoreHooks() {
+  if (typeof __RIG_BUILD_CONFIG__ !== "undefined") {
+    return normalizeBuildConfig(__RIG_BUILD_CONFIG__);
+  }
+  const raw = process.env.RIG_BUILD_CONFIG_JSON?.trim();
+  if (!raw) {
+    return {};
+  }
+  try {
+    return normalizeBuildConfig(JSON.parse(raw));
+  } catch {
+    return {};
+  }
+}
+var BUILD_CONFIG = readBuildConfigForCoreHooks();
+var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
+var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
+var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
+var RUNTIME_CONTEXT_ENV = "RIG_RUNTIME_CONTEXT_FILE";
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function loadHookContextFromEnv() {
+  const contextFile = process.env[RUNTIME_CONTEXT_ENV]?.trim();
+  let filePath = contextFile || "";
+  if (!filePath) {
+    let current = resolve(process.cwd());
+    while (true) {
+      const candidate = resolve(current, "runtime-context.json");
+      if (existsSync(candidate)) {
+        filePath = candidate;
+        break;
+      }
+      const parent = resolve(current, "..");
+      if (parent === current) {
+        break;
+      }
+      current = parent;
+    }
+  }
+  if (!filePath || !existsSync(filePath)) {
+    return null;
+  }
+  try {
+    const raw = JSON.parse(readFileSync(filePath, "utf-8"));
+    if (!isPlainObject(raw)) {
+      return null;
+    }
+    const taskId = typeof raw.taskId === "string" ? raw.taskId : "";
+    const role = typeof raw.role === "string" ? raw.role : "";
+    const scopes = isStringArray(raw.scopes) ? raw.scopes : [];
+    const validation = isStringArray(raw.validation) ? raw.validation : [];
+    const hostProjectRoot = typeof raw.hostProjectRoot === "string" ? raw.hostProjectRoot : undefined;
+    const monorepoMainRoot = typeof raw.monorepoMainRoot === "string" ? raw.monorepoMainRoot : undefined;
+    const stateDir = typeof raw.stateDir === "string" ? raw.stateDir : "";
+    const policyFile = typeof raw.policyFile === "string" ? raw.policyFile : "";
+    if (!taskId || !stateDir) {
+      return null;
+    }
+    return {
+      taskId,
+      role,
+      scopes,
+      validation,
+      hostProjectRoot,
+      monorepoMainRoot,
+      stateDir,
+      policyFile
+    };
+  } catch {
+    return null;
+  }
+}
+var cachedContext;
+function getContext() {
+  if (cachedContext !== undefined) {
+    return cachedContext;
+  }
+  cachedContext = loadHookContextFromEnv();
+  return cachedContext;
+}
+function resolveProjectRoot() {
+  const ctx = getContext();
+  if (ctx?.hostProjectRoot)
+    return ctx.hostProjectRoot;
+  if (BAKED_PROJECT_ROOT) {
+    return BAKED_PROJECT_ROOT;
+  }
+  if (process.env.PROJECT_RIG_ROOT) {
+    return process.env.PROJECT_RIG_ROOT;
+  }
+  const candidates = [process.cwd(), resolve(import.meta.dirname, "../..")];
+  for (const candidate of candidates) {
+    if (existsSync(resolve(candidate, RIG_DEFINITION_DIRNAME)) || existsSync(resolve(candidate, RIG_STATE_DIRNAME))) {
+      return candidate;
+    }
+  }
+  return resolve(import.meta.dirname, "../..");
+}
+function resolveTaskIdForHook(_projectRoot) {
+  const ctx = getContext();
+  if (ctx)
+    return ctx.taskId;
+  if (BAKED_TASK_ID) {
+    return BAKED_TASK_ID;
+  }
+  const fromEnv = (process.env.RIG_TASK_ID || "").trim();
+  if (fromEnv) {
+    return fromEnv;
+  }
+  const runtimeId = (process.env.RIG_TASK_RUNTIME_ID || "").trim();
+  if (runtimeId.startsWith("task-") && runtimeId.length > "task-".length) {
+    return runtimeId.slice("task-".length);
+  }
+  return "";
+}
+function isTaskConfigEntry(value) {
+  if (!isPlainObject(value)) {
+    return false;
+  }
+  if ("role" in value && value.role !== undefined && typeof value.role !== "string") {
+    return false;
+  }
+  if ("scope" in value && value.scope !== undefined && !isStringArray(value.scope)) {
+    return false;
+  }
+  if ("validation" in value && value.validation !== undefined && !isStringArray(value.validation)) {
+    return false;
+  }
+  return true;
+}
+async function resolveTaskConfig(_projectRoot, _taskId) {
+  const ctx = getContext();
+  if (ctx) {
+    return {
+      scope: ctx.scopes,
+      validation: ctx.validation,
+      role: ctx.role
+    };
+  }
+  if (BAKED_TASK_CONFIG) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_CONFIG);
+      if (isTaskConfigEntry(parsed) && Object.keys(parsed).length > 0) {
+        return parsed;
+      }
+    } catch {}
+  }
+  return {};
+}
+async function resolveTaskScopes(projectRoot, taskId) {
+  const ctx = getContext();
+  if (ctx && ctx.scopes.length > 0)
+    return ctx.scopes;
+  if (BAKED_TASK_SCOPES) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_SCOPES);
+      if (Array.isArray(parsed) && parsed.length > 0 && parsed.every((item) => typeof item === "string")) {
+        return parsed;
+      }
+    } catch {}
+  }
+  return (await resolveTaskConfig(projectRoot, taskId)).scope || [];
+}
+function resolvePolicyContent(projectRoot) {
+  const ctx = getContext();
+  if (ctx?.policyFile && existsSync(ctx.policyFile)) {
+    return readFileSync(ctx.policyFile, "utf-8");
+  }
+  if (BAKED_POLICY_CONTENT)
+    return BAKED_POLICY_CONTENT;
+  const policyPath = resolve(projectRoot, "rig/policy/policy.json");
+  if (existsSync(policyPath))
+    return readFileSync(policyPath, "utf-8");
+  return "{}";
+}
+async function readHookInput() {
+  let text = "";
+  const inputFile = process.env.RIG_HOOK_INPUT_FILE?.trim();
+  if (inputFile) {
+    text = readFileSync(inputFile, "utf-8");
+  } else {
+    try {
+      text = readFileSync("/dev/stdin", "utf-8");
+    } catch {
+      text = readFileSync(0, "utf-8");
+    }
+  }
+  if (!text.trim()) {
+    return { input: {}, valid: true, hadPayload: false };
+  }
+  try {
+    return {
+      input: JSON.parse(text),
+      valid: true,
+      hadPayload: true
+    };
+  } catch {
+    return { input: {}, valid: false, hadPayload: true };
+  }
+}
+function extractToolFilePaths(toolName, input) {
+  const paths = [];
+  const add = (value) => {
+    if (typeof value === "string" && value.trim()) {
+      paths.push(value.trim());
+    }
+  };
+  if (toolName === "Read" || toolName === "Write" || toolName === "Edit" || toolName === "MultiEdit") {
+    add(input.file_path);
+    add(input.path);
+  } else if (toolName === "Glob") {
+    add(input.path);
+  } else if (toolName === "Grep") {
+    add(input.path);
+  } else {
+    add(input.file_path);
+    add(input.path);
+  }
+  return paths;
+}
+function isTestFilePath(path) {
+  return /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(path) || /\/(__tests__|tests|test)\//.test(path);
+}
+function buildPluginHookContext(parsed, opts) {
+  const toolName = parsed.input.tool_name;
+  const toolInput = parsed.input.tool_input ?? {};
+  return {
+    event: opts.event,
+    toolName,
+    toolInput,
+    filePaths: toolName ? extractToolFilePaths(toolName, toolInput) : [],
+    projectRoot: opts.projectRoot,
+    taskId: opts.taskId
+  };
+}
+function hookResultToProtocol(result) {
+  if (result.decision === "block") {
+    const lines = [`BLOCKED: ${result.reason ?? "blocked by plugin hook"}`];
+    if (result.systemMessage) {
+      lines.push(result.systemMessage);
+    }
+    return { exitCode: 1, stdout: `${lines.join(`
+`)}
+` };
+  }
+  return {
+    exitCode: 0,
+    stdout: result.systemMessage ? `${result.systemMessage}
+` : ""
+  };
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function block(hookName, message, projectRoot) {
+  const runtimeWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  const stateDir = BAKED_STATE_DIR || (runtimeWorkspace ? resolve(runtimeWorkspace, ".rig", "state") : resolve(projectRoot, ".rig", "state"));
+  mkdirSync(stateDir, { recursive: true });
+  const tripLog = resolve(stateDir, "hook_trips.log");
+  let count = 0;
+  if (existsSync(tripLog)) {
+    const content = readFileSync(tripLog, "utf-8");
+    count = (content.match(new RegExp(`^${escapeRegExp(hookName)}\\s`, "gm")) || []).length;
+  }
+  appendFileSync(tripLog, `${hookName} ${new Date().toISOString()}
+`, "utf-8");
+  count += 1;
+  const lines = [
+    `BLOCKED: ${message}`,
+    "",
+    "Re-read CLAUDE.md safety rules before your next action."
+  ];
+  if (count >= 3) {
+    lines.push("");
+    lines.push(`REPEATED VIOLATION (${count}x ${hookName}).`);
+    lines.push("STOP. Read the FULL CLAUDE.md from top to bottom.");
+    lines.push("If stuck, record the failed approach in the task-state failure log and request help.");
+  }
+  writeSync(1, `${lines.join(`
+`)}
+`);
+  process.exit(1);
+}
+function normalizeExecutablePath(candidate) {
+  if (!candidate) {
+    return "";
+  }
+  const normalized = resolve(candidate);
+  if (!existsSync(normalized)) {
+    return "";
+  }
+  try {
+    return realpathSync(normalized);
+  } catch {
+    return normalized;
+  }
+}
+function looksLikeRuntimeGateway(candidate) {
+  const normalized = resolve(candidate).replace(/\\/g, "/");
+  return normalized.includes("/.rig/bin/") || normalized.endsWith("/rig-shell") || normalized.endsWith("/rig-agent");
+}
+function resolveBunBinaryPath() {
+  const explicit = normalizeExecutablePath(process.env.RIG_BUN_PATH?.trim());
+  if (explicit) {
+    return explicit;
+  }
+  const bunWhich = bunRuntime()?.which?.("bun");
+  const pathBun = normalizeExecutablePath(bunWhich?.trim());
+  if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
+    return pathBun;
+  }
+  const home = process.env.HOME?.trim();
+  const fallbackCandidates = [
+    home ? resolve(home, ".bun/bin/bun") : "",
+    "/opt/homebrew/bin/bun",
+    "/usr/local/bin/bun",
+    "/usr/bin/bun"
+  ];
+  for (const candidate of fallbackCandidates) {
+    const normalized = normalizeExecutablePath(candidate);
+    if (normalized) {
+      return normalized;
+    }
+  }
+  const execPath = normalizeExecutablePath(process.execPath?.trim());
+  if (execPath && !looksLikeRuntimeGateway(execPath)) {
+    return execPath;
+  }
+  throw new Error("bun not found in PATH");
+}
+function resolveBunCli() {
+  return resolveBunCliInvocation().command;
+}
+function resolveBunCliInvocation() {
+  if (BAKED_BUN_PATH) {
+    return {
+      command: BAKED_BUN_PATH,
+      env: {}
+    };
+  }
+  if (process.env.RIG_BUN_PATH?.trim()) {
+    return {
+      command: process.env.RIG_BUN_PATH.trim(),
+      env: {}
+    };
+  }
+  try {
+    const systemBun = resolveBunBinaryPath();
+    return {
+      command: systemBun,
+      env: {}
+    };
+  } catch {}
+  if (process.execPath?.trim()) {
+    return {
+      command: process.execPath,
+      env: { BUN_BE_BUN: "1" }
+    };
+  }
+  return { command: "bun", env: {} };
+}
+async function runTypedHook(fn, opts) {
+  const parsed = await readHookInput();
+  const projectRoot = opts.projectRoot ?? resolveProjectRoot();
+  const taskId = opts.taskId ?? resolveTaskIdForHook(projectRoot);
+  const ctx = buildPluginHookContext(parsed, {
+    event: opts.event,
+    projectRoot,
+    taskId
+  });
+  let result;
+  try {
+    result = await fn(ctx);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    writeSync(2, `[rig hook] typed hook threw: ${message}
+`);
+    process.exit(0);
+  }
+  const { exitCode, stdout } = hookResultToProtocol(result);
+  if (stdout) {
+    writeSync(1, stdout);
+  }
+  process.exit(exitCode);
+}
+export {
+  runTypedHook,
+  resolveTaskScopes,
+  resolveTaskIdForHook,
+  resolveTaskConfig,
+  resolveProjectRoot,
+  resolvePolicyContent,
+  resolveBunCliInvocation,
+  resolveBunCli,
+  readHookInput,
+  isTestFilePath,
+  hookResultToProtocol,
+  extractToolFilePaths,
+  escapeRegExp,
+  buildPluginHookContext,
+  block,
+  BAKED_TASK_SCOPES,
+  BAKED_TASK_ID,
+  BAKED_TASK_CONFIG,
+  BAKED_STATE_DIR,
+  BAKED_PROJECT_ROOT,
+  BAKED_POLICY_CONTENT,
+  BAKED_BUN_PATH
+};

package/dist/src/hook-runner.d.ts

@@ -0,0 +1,48 @@
+/**
+ * hook-runner.ts — entrypoint for typed plugin hooks.
+ *
+ * The provider-owned session-hook materializer writes a shim command into
+ * the active session host for every plugin hook that ships a typed
+ * implementation instead of a raw command string:
+ *
+ *   <bun> <this file> --plugin <name> --hook <id> [--event <event>] [--project-root <dir>]
+ *
+ * When Claude Code fires the hook, this process:
+ *   1. loads the project's rig config via @rig/core's loadConfig
+ *      (which preserves each explicit plugin object),
+ *   2. finds the typed implementation `hooks[<id>]` on the named
+ *      plugin,
+ *   3. hands it to the local typed-hook protocol bridge, which parses the hook
+ *      stdin payload into a HookContext, calls the function, and serializes the
+ *      HookResult to the Claude Code stdout/exit-code protocol.
+ *
+ * Failure policy: configuration problems (missing config, missing plugin,
+ * missing implementation) warn on stderr and exit 0. A misconfigured hook
+ * must never block every tool call; blocking is reserved for an explicit
+ * `{ decision: "block" }` from a resolved implementation.
+ */
+import type { HookImplementation, HookRegistration } from "@rig/contracts";
+import type { RigPlugin } from "./plugin-runtime";
+export interface HookRunnerArgs {
+    plugin?: string;
+    hook?: string;
+    event?: string;
+    projectRoot?: string;
+}
+/** Parse the shim's argv (everything after the script path). */
+export declare function parseHookRunnerArgs(argv: readonly string[]): HookRunnerArgs;
+export interface ResolvedTypedHook {
+    implementation: HookImplementation;
+    registration: HookRegistration;
+}
+/**
+ * Find the typed implementation + metadata registration for a hook id on a
+ * named plugin. Returns null (with a reason) instead of throwing so the
+ * caller can apply the fail-open policy uniformly.
+ */
+export declare function findTypedHook(plugins: readonly RigPlugin[], pluginName: string, hookId: string): {
+    hook: ResolvedTypedHook | null;
+    reason?: string;
+};
+/** Run the typed hook described by argv. Exits the process; never returns. */
+export declare function main(argv: readonly string[]): Promise<never>;