@h-rig/hook-kit 0.0.6-alpha.0

package/README.md

@@ -0,0 +1 @@
+# @h-rig/hook-kit

package/dist/src/context.js

@@ -0,0 +1,240 @@
+// @bun
+// packages/hook-kit/src/context.ts
+import { existsSync, readFileSync } from "fs";
+import { resolve } from "path";
+var RIG_DEFINITION_DIRNAME = "rig";
+var RIG_STATE_DIRNAME = ".rig";
+function normalizeBuildConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function readBuildConfigForKit() {
+  if (typeof __RIG_BUILD_CONFIG__ !== "undefined") {
+    return normalizeBuildConfig(__RIG_BUILD_CONFIG__);
+  }
+  const raw = process.env.RIG_BUILD_CONFIG_JSON?.trim();
+  if (!raw) {
+    return {};
+  }
+  try {
+    return normalizeBuildConfig(JSON.parse(raw));
+  } catch {
+    return {};
+  }
+}
+var BUILD_CONFIG = readBuildConfigForKit();
+var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
+var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
+var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
+var RUNTIME_CONTEXT_ENV = "RIG_RUNTIME_CONTEXT_FILE";
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function loadHookContextFromEnv() {
+  const contextFile = process.env[RUNTIME_CONTEXT_ENV]?.trim();
+  let filePath = contextFile || "";
+  if (!filePath) {
+    let current = resolve(process.cwd());
+    while (true) {
+      const candidate = resolve(current, "runtime-context.json");
+      if (existsSync(candidate)) {
+        filePath = candidate;
+        break;
+      }
+      const parent = resolve(current, "..");
+      if (parent === current) {
+        break;
+      }
+      current = parent;
+    }
+  }
+  if (!filePath || !existsSync(filePath)) {
+    return null;
+  }
+  try {
+    const raw = JSON.parse(readFileSync(filePath, "utf-8"));
+    if (!isPlainObject(raw)) {
+      return null;
+    }
+    const taskId = typeof raw.taskId === "string" ? raw.taskId : "";
+    const role = typeof raw.role === "string" ? raw.role : "";
+    const scopes = isStringArray(raw.scopes) ? raw.scopes : [];
+    const validation = isStringArray(raw.validation) ? raw.validation : [];
+    const hostProjectRoot = typeof raw.hostProjectRoot === "string" ? raw.hostProjectRoot : undefined;
+    const monorepoMainRoot = typeof raw.monorepoMainRoot === "string" ? raw.monorepoMainRoot : undefined;
+    const stateDir = typeof raw.stateDir === "string" ? raw.stateDir : "";
+    const policyFile = typeof raw.policyFile === "string" ? raw.policyFile : "";
+    if (!taskId || !stateDir) {
+      return null;
+    }
+    return {
+      taskId,
+      role,
+      scopes,
+      validation,
+      hostProjectRoot,
+      monorepoMainRoot,
+      stateDir,
+      policyFile
+    };
+  } catch {
+    return null;
+  }
+}
+var cachedContext;
+function getContext() {
+  if (cachedContext !== undefined) {
+    return cachedContext;
+  }
+  cachedContext = loadHookContextFromEnv();
+  return cachedContext;
+}
+function resolveProjectRoot() {
+  const ctx = getContext();
+  if (ctx?.hostProjectRoot)
+    return ctx.hostProjectRoot;
+  if (BAKED_PROJECT_ROOT) {
+    return BAKED_PROJECT_ROOT;
+  }
+  if (process.env.PROJECT_RIG_ROOT) {
+    return process.env.PROJECT_RIG_ROOT;
+  }
+  const candidates = [process.cwd(), resolve(import.meta.dirname, "../..")];
+  for (const candidate of candidates) {
+    if (existsSync(resolve(candidate, RIG_DEFINITION_DIRNAME)) || existsSync(resolve(candidate, RIG_STATE_DIRNAME))) {
+      return candidate;
+    }
+  }
+  return resolve(import.meta.dirname, "../..");
+}
+function resolveTaskIdForHook(_projectRoot) {
+  const ctx = getContext();
+  if (ctx)
+    return ctx.taskId;
+  if (BAKED_TASK_ID) {
+    return BAKED_TASK_ID;
+  }
+  const fromEnv = (process.env.RIG_TASK_ID || "").trim();
+  if (fromEnv) {
+    return fromEnv;
+  }
+  const runtimeId = (process.env.RIG_TASK_RUNTIME_ID || "").trim();
+  if (runtimeId.startsWith("task-") && runtimeId.length > "task-".length) {
+    return runtimeId.slice("task-".length);
+  }
+  return "";
+}
+function isTaskConfigEntry(value) {
+  if (!isPlainObject(value)) {
+    return false;
+  }
+  if ("role" in value && value.role !== undefined && typeof value.role !== "string") {
+    return false;
+  }
+  if ("scope" in value && value.scope !== undefined && !isStringArray(value.scope)) {
+    return false;
+  }
+  if ("validation" in value && value.validation !== undefined && !isStringArray(value.validation)) {
+    return false;
+  }
+  return true;
+}
+async function readTaskConfigFromDisk(configPath) {
+  if (!existsSync(configPath)) {
+    return null;
+  }
+  try {
+    const content = typeof Bun !== "undefined" ? await Bun.file(configPath).json() : JSON.parse(readFileSync(configPath, "utf-8"));
+    return isPlainObject(content) ? content : null;
+  } catch {
+    return null;
+  }
+}
+function taskConfigCandidates(ctx) {
+  const taskWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  return [
+    ctx?.monorepoMainRoot ? resolve(ctx.monorepoMainRoot, ".rig", "task-config.json") : "",
+    process.env.MONOREPO_MAIN_ROOT?.trim() ? resolve(process.env.MONOREPO_MAIN_ROOT.trim(), ".rig", "task-config.json") : "",
+    taskWorkspace ? resolve(taskWorkspace, ".rig", "task-config.json") : ""
+  ].filter(Boolean);
+}
+async function resolveTaskConfig(_projectRoot, _taskId) {
+  const ctx = getContext();
+  if (ctx) {
+    return {
+      scope: ctx.scopes,
+      validation: ctx.validation,
+      role: ctx.role
+    };
+  }
+  if (BAKED_TASK_CONFIG) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_CONFIG);
+      if (isTaskConfigEntry(parsed) && Object.keys(parsed).length > 0) {
+        return parsed;
+      }
+    } catch {}
+  }
+  for (const configPath of taskConfigCandidates(ctx)) {
+    const config = await readTaskConfigFromDisk(configPath);
+    if (!config) {
+      continue;
+    }
+    const taskEntry = config[_taskId];
+    if (isTaskConfigEntry(taskEntry)) {
+      return taskEntry;
+    }
+  }
+  return {};
+}
+async function resolveTaskScopes(projectRoot, taskId) {
+  const ctx = getContext();
+  if (ctx && ctx.scopes.length > 0)
+    return ctx.scopes;
+  if (BAKED_TASK_SCOPES) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_SCOPES);
+      if (Array.isArray(parsed) && parsed.length > 0 && parsed.every((item) => typeof item === "string")) {
+        return parsed;
+      }
+    } catch {}
+  }
+  return (await resolveTaskConfig(projectRoot, taskId)).scope || [];
+}
+function resolvePolicyContent(projectRoot) {
+  const ctx = getContext();
+  if (ctx?.policyFile && existsSync(ctx.policyFile)) {
+    return readFileSync(ctx.policyFile, "utf-8");
+  }
+  if (BAKED_POLICY_CONTENT)
+    return BAKED_POLICY_CONTENT;
+  const policyPath = resolve(projectRoot, "rig/policy/policy.json");
+  if (existsSync(policyPath))
+    return readFileSync(policyPath, "utf-8");
+  return "{}";
+}
+export {
+  resolveTaskScopes,
+  resolveTaskIdForHook,
+  resolveTaskConfig,
+  resolveProjectRoot,
+  resolvePolicyContent,
+  readBuildConfigForKit,
+  loadHookContextFromEnv,
+  BAKED_TASK_SCOPES,
+  BAKED_TASK_ID,
+  BAKED_TASK_CONFIG,
+  BAKED_STATE_DIR,
+  BAKED_PROJECT_ROOT,
+  BAKED_POLICY_CONTENT,
+  BAKED_BUN_PATH
+};

package/dist/src/guard.js

@@ -0,0 +1,79 @@
+// @bun
+// packages/hook-kit/src/guard.ts
+import {
+  appendFileSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  writeSync
+} from "fs";
+import { resolve } from "path";
+
+// packages/hook-kit/src/utils.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// packages/hook-kit/src/context.ts
+function normalizeBuildConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function readBuildConfigForKit() {
+  if (typeof __RIG_BUILD_CONFIG__ !== "undefined") {
+    return normalizeBuildConfig(__RIG_BUILD_CONFIG__);
+  }
+  const raw = process.env.RIG_BUILD_CONFIG_JSON?.trim();
+  if (!raw) {
+    return {};
+  }
+  try {
+    return normalizeBuildConfig(JSON.parse(raw));
+  } catch {
+    return {};
+  }
+}
+var BUILD_CONFIG = readBuildConfigForKit();
+var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
+var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
+var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
+
+// packages/hook-kit/src/guard.ts
+function block(hookName, message, projectRoot) {
+  const runtimeWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  const stateDir = BAKED_STATE_DIR || (runtimeWorkspace ? resolve(runtimeWorkspace, ".rig", "state") : resolve(projectRoot, ".rig", "state"));
+  mkdirSync(stateDir, { recursive: true });
+  const tripLog = resolve(stateDir, "hook_trips.log");
+  let count = 0;
+  if (existsSync(tripLog)) {
+    const content = readFileSync(tripLog, "utf-8");
+    count = (content.match(new RegExp(`^${escapeRegExp(hookName)}\\s`, "gm")) || []).length;
+  }
+  appendFileSync(tripLog, `${hookName} ${new Date().toISOString()}
+`, "utf-8");
+  count += 1;
+  const lines = [
+    `BLOCKED: ${message}`,
+    "",
+    "Re-read CLAUDE.md safety rules before your next action."
+  ];
+  if (count >= 3) {
+    lines.push("");
+    lines.push(`REPEATED VIOLATION (${count}x ${hookName}).`);
+    lines.push("STOP. Read the FULL CLAUDE.md from top to bottom.");
+    lines.push("If stuck, write the problem to .rig/state/failed_approaches.md and request help.");
+  }
+  writeSync(1, `${lines.join(`
+`)}
+`);
+  process.exit(1);
+}
+export {
+  block
+};

package/dist/src/index.js

@@ -0,0 +1,423 @@
+// @bun
+// packages/hook-kit/src/io.ts
+import { readFileSync } from "fs";
+async function readHookInput() {
+  let text = "";
+  const inputFile = process.env.RIG_HOOK_INPUT_FILE?.trim();
+  if (inputFile) {
+    text = readFileSync(inputFile, "utf-8");
+  } else {
+    try {
+      text = readFileSync("/dev/stdin", "utf-8");
+    } catch {
+      text = readFileSync(0, "utf-8");
+    }
+  }
+  if (!text.trim()) {
+    return { input: {}, valid: true, hadPayload: false };
+  }
+  try {
+    return {
+      input: JSON.parse(text),
+      valid: true,
+      hadPayload: true
+    };
+  } catch {
+    return { input: {}, valid: false, hadPayload: true };
+  }
+}
+// packages/hook-kit/src/context.ts
+import { existsSync, readFileSync as readFileSync2 } from "fs";
+import { resolve } from "path";
+var RIG_DEFINITION_DIRNAME = "rig";
+var RIG_STATE_DIRNAME = ".rig";
+function normalizeBuildConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function readBuildConfigForKit() {
+  if (typeof __RIG_BUILD_CONFIG__ !== "undefined") {
+    return normalizeBuildConfig(__RIG_BUILD_CONFIG__);
+  }
+  const raw = process.env.RIG_BUILD_CONFIG_JSON?.trim();
+  if (!raw) {
+    return {};
+  }
+  try {
+    return normalizeBuildConfig(JSON.parse(raw));
+  } catch {
+    return {};
+  }
+}
+var BUILD_CONFIG = readBuildConfigForKit();
+var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
+var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
+var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
+var RUNTIME_CONTEXT_ENV = "RIG_RUNTIME_CONTEXT_FILE";
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function loadHookContextFromEnv() {
+  const contextFile = process.env[RUNTIME_CONTEXT_ENV]?.trim();
+  let filePath = contextFile || "";
+  if (!filePath) {
+    let current = resolve(process.cwd());
+    while (true) {
+      const candidate = resolve(current, "runtime-context.json");
+      if (existsSync(candidate)) {
+        filePath = candidate;
+        break;
+      }
+      const parent = resolve(current, "..");
+      if (parent === current) {
+        break;
+      }
+      current = parent;
+    }
+  }
+  if (!filePath || !existsSync(filePath)) {
+    return null;
+  }
+  try {
+    const raw = JSON.parse(readFileSync2(filePath, "utf-8"));
+    if (!isPlainObject(raw)) {
+      return null;
+    }
+    const taskId = typeof raw.taskId === "string" ? raw.taskId : "";
+    const role = typeof raw.role === "string" ? raw.role : "";
+    const scopes = isStringArray(raw.scopes) ? raw.scopes : [];
+    const validation = isStringArray(raw.validation) ? raw.validation : [];
+    const hostProjectRoot = typeof raw.hostProjectRoot === "string" ? raw.hostProjectRoot : undefined;
+    const monorepoMainRoot = typeof raw.monorepoMainRoot === "string" ? raw.monorepoMainRoot : undefined;
+    const stateDir = typeof raw.stateDir === "string" ? raw.stateDir : "";
+    const policyFile = typeof raw.policyFile === "string" ? raw.policyFile : "";
+    if (!taskId || !stateDir) {
+      return null;
+    }
+    return {
+      taskId,
+      role,
+      scopes,
+      validation,
+      hostProjectRoot,
+      monorepoMainRoot,
+      stateDir,
+      policyFile
+    };
+  } catch {
+    return null;
+  }
+}
+var cachedContext;
+function getContext() {
+  if (cachedContext !== undefined) {
+    return cachedContext;
+  }
+  cachedContext = loadHookContextFromEnv();
+  return cachedContext;
+}
+function resolveProjectRoot() {
+  const ctx = getContext();
+  if (ctx?.hostProjectRoot)
+    return ctx.hostProjectRoot;
+  if (BAKED_PROJECT_ROOT) {
+    return BAKED_PROJECT_ROOT;
+  }
+  if (process.env.PROJECT_RIG_ROOT) {
+    return process.env.PROJECT_RIG_ROOT;
+  }
+  const candidates = [process.cwd(), resolve(import.meta.dirname, "../..")];
+  for (const candidate of candidates) {
+    if (existsSync(resolve(candidate, RIG_DEFINITION_DIRNAME)) || existsSync(resolve(candidate, RIG_STATE_DIRNAME))) {
+      return candidate;
+    }
+  }
+  return resolve(import.meta.dirname, "../..");
+}
+function resolveTaskIdForHook(_projectRoot) {
+  const ctx = getContext();
+  if (ctx)
+    return ctx.taskId;
+  if (BAKED_TASK_ID) {
+    return BAKED_TASK_ID;
+  }
+  const fromEnv = (process.env.RIG_TASK_ID || "").trim();
+  if (fromEnv) {
+    return fromEnv;
+  }
+  const runtimeId = (process.env.RIG_TASK_RUNTIME_ID || "").trim();
+  if (runtimeId.startsWith("task-") && runtimeId.length > "task-".length) {
+    return runtimeId.slice("task-".length);
+  }
+  return "";
+}
+function isTaskConfigEntry(value) {
+  if (!isPlainObject(value)) {
+    return false;
+  }
+  if ("role" in value && value.role !== undefined && typeof value.role !== "string") {
+    return false;
+  }
+  if ("scope" in value && value.scope !== undefined && !isStringArray(value.scope)) {
+    return false;
+  }
+  if ("validation" in value && value.validation !== undefined && !isStringArray(value.validation)) {
+    return false;
+  }
+  return true;
+}
+async function readTaskConfigFromDisk(configPath) {
+  if (!existsSync(configPath)) {
+    return null;
+  }
+  try {
+    const content = typeof Bun !== "undefined" ? await Bun.file(configPath).json() : JSON.parse(readFileSync2(configPath, "utf-8"));
+    return isPlainObject(content) ? content : null;
+  } catch {
+    return null;
+  }
+}
+function taskConfigCandidates(ctx) {
+  const taskWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  return [
+    ctx?.monorepoMainRoot ? resolve(ctx.monorepoMainRoot, ".rig", "task-config.json") : "",
+    process.env.MONOREPO_MAIN_ROOT?.trim() ? resolve(process.env.MONOREPO_MAIN_ROOT.trim(), ".rig", "task-config.json") : "",
+    taskWorkspace ? resolve(taskWorkspace, ".rig", "task-config.json") : ""
+  ].filter(Boolean);
+}
+async function resolveTaskConfig(_projectRoot, _taskId) {
+  const ctx = getContext();
+  if (ctx) {
+    return {
+      scope: ctx.scopes,
+      validation: ctx.validation,
+      role: ctx.role
+    };
+  }
+  if (BAKED_TASK_CONFIG) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_CONFIG);
+      if (isTaskConfigEntry(parsed) && Object.keys(parsed).length > 0) {
+        return parsed;
+      }
+    } catch {}
+  }
+  for (const configPath of taskConfigCandidates(ctx)) {
+    const config = await readTaskConfigFromDisk(configPath);
+    if (!config) {
+      continue;
+    }
+    const taskEntry = config[_taskId];
+    if (isTaskConfigEntry(taskEntry)) {
+      return taskEntry;
+    }
+  }
+  return {};
+}
+async function resolveTaskScopes(projectRoot, taskId) {
+  const ctx = getContext();
+  if (ctx && ctx.scopes.length > 0)
+    return ctx.scopes;
+  if (BAKED_TASK_SCOPES) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_SCOPES);
+      if (Array.isArray(parsed) && parsed.length > 0 && parsed.every((item) => typeof item === "string")) {
+        return parsed;
+      }
+    } catch {}
+  }
+  return (await resolveTaskConfig(projectRoot, taskId)).scope || [];
+}
+function resolvePolicyContent(projectRoot) {
+  const ctx = getContext();
+  if (ctx?.policyFile && existsSync(ctx.policyFile)) {
+    return readFileSync2(ctx.policyFile, "utf-8");
+  }
+  if (BAKED_POLICY_CONTENT)
+    return BAKED_POLICY_CONTENT;
+  const policyPath = resolve(projectRoot, "rig/policy/policy.json");
+  if (existsSync(policyPath))
+    return readFileSync2(policyPath, "utf-8");
+  return "{}";
+}
+// packages/hook-kit/src/guard.ts
+import {
+  appendFileSync,
+  existsSync as existsSync2,
+  mkdirSync,
+  readFileSync as readFileSync3,
+  writeSync
+} from "fs";
+import { resolve as resolve2 } from "path";
+
+// packages/hook-kit/src/utils.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// packages/hook-kit/src/guard.ts
+function block(hookName, message, projectRoot) {
+  const runtimeWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  const stateDir = BAKED_STATE_DIR || (runtimeWorkspace ? resolve2(runtimeWorkspace, ".rig", "state") : resolve2(projectRoot, ".rig", "state"));
+  mkdirSync(stateDir, { recursive: true });
+  const tripLog = resolve2(stateDir, "hook_trips.log");
+  let count = 0;
+  if (existsSync2(tripLog)) {
+    const content = readFileSync3(tripLog, "utf-8");
+    count = (content.match(new RegExp(`^${escapeRegExp(hookName)}\\s`, "gm")) || []).length;
+  }
+  appendFileSync(tripLog, `${hookName} ${new Date().toISOString()}
+`, "utf-8");
+  count += 1;
+  const lines = [
+    `BLOCKED: ${message}`,
+    "",
+    "Re-read CLAUDE.md safety rules before your next action."
+  ];
+  if (count >= 3) {
+    lines.push("");
+    lines.push(`REPEATED VIOLATION (${count}x ${hookName}).`);
+    lines.push("STOP. Read the FULL CLAUDE.md from top to bottom.");
+    lines.push("If stuck, write the problem to .rig/state/failed_approaches.md and request help.");
+  }
+  writeSync(1, `${lines.join(`
+`)}
+`);
+  process.exit(1);
+}
+// packages/hook-kit/src/tools.ts
+function extractToolFilePaths(toolName, input) {
+  const paths = [];
+  const add = (value) => {
+    if (typeof value === "string" && value.trim()) {
+      paths.push(value.trim());
+    }
+  };
+  if (toolName === "Read" || toolName === "Write" || toolName === "Edit" || toolName === "MultiEdit") {
+    add(input.file_path);
+    add(input.path);
+  } else if (toolName === "Glob") {
+    add(input.path);
+  } else if (toolName === "Grep") {
+    add(input.path);
+  } else {
+    add(input.file_path);
+    add(input.path);
+  }
+  return paths;
+}
+function isTestFilePath(path) {
+  return /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(path) || /\/(__tests__|tests|test)\//.test(path);
+}
+// packages/hook-kit/src/runtime.ts
+import { existsSync as existsSync3, realpathSync } from "fs";
+import { resolve as resolve3 } from "path";
+function normalizeExecutablePath(candidate) {
+  if (!candidate) {
+    return "";
+  }
+  const normalized = resolve3(candidate);
+  if (!existsSync3(normalized)) {
+    return "";
+  }
+  try {
+    return realpathSync(normalized);
+  } catch {
+    return normalized;
+  }
+}
+function looksLikeRuntimeGateway(candidate) {
+  const normalized = resolve3(candidate).replace(/\\/g, "/");
+  return normalized.includes("/.rig/bin/") || normalized.endsWith("/rig-shell") || normalized.endsWith("/rig-agent");
+}
+function resolveBunBinaryPath() {
+  const explicit = normalizeExecutablePath(process.env.RIG_BUN_PATH?.trim());
+  if (explicit) {
+    return explicit;
+  }
+  const bunWhich = typeof Bun !== "undefined" ? Bun.which?.("bun") : undefined;
+  const pathBun = normalizeExecutablePath(bunWhich?.trim());
+  if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
+    return pathBun;
+  }
+  const home = process.env.HOME?.trim();
+  const fallbackCandidates = [
+    home ? resolve3(home, ".bun/bin/bun") : "",
+    "/opt/homebrew/bin/bun",
+    "/usr/local/bin/bun",
+    "/usr/bin/bun"
+  ];
+  for (const candidate of fallbackCandidates) {
+    const normalized = normalizeExecutablePath(candidate);
+    if (normalized) {
+      return normalized;
+    }
+  }
+  const execPath = normalizeExecutablePath(process.execPath?.trim());
+  if (execPath && !looksLikeRuntimeGateway(execPath)) {
+    return execPath;
+  }
+  throw new Error("bun not found in PATH");
+}
+function resolveBunCli() {
+  return resolveBunCliInvocation().command;
+}
+function resolveBunCliInvocation() {
+  const bakedBunPath = readBuildConfigForKit().AGENT_BUN_PATH ?? "";
+  if (bakedBunPath) {
+    return {
+      command: bakedBunPath,
+      env: {}
+    };
+  }
+  if (process.env.RIG_BUN_PATH?.trim()) {
+    return {
+      command: process.env.RIG_BUN_PATH.trim(),
+      env: {}
+    };
+  }
+  try {
+    const systemBun = resolveBunBinaryPath();
+    return {
+      command: systemBun,
+      env: {}
+    };
+  } catch {}
+  if (process.execPath?.trim()) {
+    return {
+      command: process.execPath,
+      env: { BUN_BE_BUN: "1" }
+    };
+  }
+  return { command: "bun", env: {} };
+}
+export {
+  resolveTaskScopes,
+  resolveTaskIdForHook,
+  resolveTaskConfig,
+  resolveProjectRoot,
+  resolvePolicyContent,
+  resolveBunCliInvocation,
+  resolveBunCli,
+  readHookInput,
+  isTestFilePath,
+  extractToolFilePaths,
+  escapeRegExp,
+  block,
+  BAKED_TASK_SCOPES,
+  BAKED_TASK_ID,
+  BAKED_TASK_CONFIG,
+  BAKED_STATE_DIR,
+  BAKED_PROJECT_ROOT,
+  BAKED_POLICY_CONTENT,
+  BAKED_BUN_PATH
+};

package/dist/src/io.js

@@ -0,0 +1,31 @@
+// @bun
+// packages/hook-kit/src/io.ts
+import { readFileSync } from "fs";
+async function readHookInput() {
+  let text = "";
+  const inputFile = process.env.RIG_HOOK_INPUT_FILE?.trim();
+  if (inputFile) {
+    text = readFileSync(inputFile, "utf-8");
+  } else {
+    try {
+      text = readFileSync("/dev/stdin", "utf-8");
+    } catch {
+      text = readFileSync(0, "utf-8");
+    }
+  }
+  if (!text.trim()) {
+    return { input: {}, valid: true, hadPayload: false };
+  }
+  try {
+    return {
+      input: JSON.parse(text),
+      valid: true,
+      hadPayload: true
+    };
+  } catch {
+    return { input: {}, valid: false, hadPayload: true };
+  }
+}
+export {
+  readHookInput
+};

package/dist/src/runtime.js

@@ -0,0 +1,119 @@
+// @bun
+// packages/hook-kit/src/runtime.ts
+import { existsSync, realpathSync } from "fs";
+import { resolve } from "path";
+
+// packages/hook-kit/src/context.ts
+function normalizeBuildConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function readBuildConfigForKit() {
+  if (typeof __RIG_BUILD_CONFIG__ !== "undefined") {
+    return normalizeBuildConfig(__RIG_BUILD_CONFIG__);
+  }
+  const raw = process.env.RIG_BUILD_CONFIG_JSON?.trim();
+  if (!raw) {
+    return {};
+  }
+  try {
+    return normalizeBuildConfig(JSON.parse(raw));
+  } catch {
+    return {};
+  }
+}
+var BUILD_CONFIG = readBuildConfigForKit();
+var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
+var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
+var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
+
+// packages/hook-kit/src/runtime.ts
+function normalizeExecutablePath(candidate) {
+  if (!candidate) {
+    return "";
+  }
+  const normalized = resolve(candidate);
+  if (!existsSync(normalized)) {
+    return "";
+  }
+  try {
+    return realpathSync(normalized);
+  } catch {
+    return normalized;
+  }
+}
+function looksLikeRuntimeGateway(candidate) {
+  const normalized = resolve(candidate).replace(/\\/g, "/");
+  return normalized.includes("/.rig/bin/") || normalized.endsWith("/rig-shell") || normalized.endsWith("/rig-agent");
+}
+function resolveBunBinaryPath() {
+  const explicit = normalizeExecutablePath(process.env.RIG_BUN_PATH?.trim());
+  if (explicit) {
+    return explicit;
+  }
+  const bunWhich = typeof Bun !== "undefined" ? Bun.which?.("bun") : undefined;
+  const pathBun = normalizeExecutablePath(bunWhich?.trim());
+  if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
+    return pathBun;
+  }
+  const home = process.env.HOME?.trim();
+  const fallbackCandidates = [
+    home ? resolve(home, ".bun/bin/bun") : "",
+    "/opt/homebrew/bin/bun",
+    "/usr/local/bin/bun",
+    "/usr/bin/bun"
+  ];
+  for (const candidate of fallbackCandidates) {
+    const normalized = normalizeExecutablePath(candidate);
+    if (normalized) {
+      return normalized;
+    }
+  }
+  const execPath = normalizeExecutablePath(process.execPath?.trim());
+  if (execPath && !looksLikeRuntimeGateway(execPath)) {
+    return execPath;
+  }
+  throw new Error("bun not found in PATH");
+}
+function resolveBunCli() {
+  return resolveBunCliInvocation().command;
+}
+function resolveBunCliInvocation() {
+  const bakedBunPath = readBuildConfigForKit().AGENT_BUN_PATH ?? "";
+  if (bakedBunPath) {
+    return {
+      command: bakedBunPath,
+      env: {}
+    };
+  }
+  if (process.env.RIG_BUN_PATH?.trim()) {
+    return {
+      command: process.env.RIG_BUN_PATH.trim(),
+      env: {}
+    };
+  }
+  try {
+    const systemBun = resolveBunBinaryPath();
+    return {
+      command: systemBun,
+      env: {}
+    };
+  } catch {}
+  if (process.execPath?.trim()) {
+    return {
+      command: process.execPath,
+      env: { BUN_BE_BUN: "1" }
+    };
+  }
+  return { command: "bun", env: {} };
+}
+export {
+  resolveBunCliInvocation,
+  resolveBunCli
+};

package/dist/src/tools.js

@@ -0,0 +1,29 @@
+// @bun
+// packages/hook-kit/src/tools.ts
+function extractToolFilePaths(toolName, input) {
+  const paths = [];
+  const add = (value) => {
+    if (typeof value === "string" && value.trim()) {
+      paths.push(value.trim());
+    }
+  };
+  if (toolName === "Read" || toolName === "Write" || toolName === "Edit" || toolName === "MultiEdit") {
+    add(input.file_path);
+    add(input.path);
+  } else if (toolName === "Glob") {
+    add(input.path);
+  } else if (toolName === "Grep") {
+    add(input.path);
+  } else {
+    add(input.file_path);
+    add(input.path);
+  }
+  return paths;
+}
+function isTestFilePath(path) {
+  return /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(path) || /\/(__tests__|tests|test)\//.test(path);
+}
+export {
+  isTestFilePath,
+  extractToolFilePaths
+};

package/dist/src/utils.js

@@ -0,0 +1,8 @@
+// @bun
+// packages/hook-kit/src/utils.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+export {
+  escapeRegExp
+};

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@h-rig/hook-kit",
+  "version": "0.0.6-alpha.0",
+  "type": "module",
+  "description": "Rig package",
+  "license": "UNLICENSED",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "import": "./dist/src/index.js"
+    }
+  },
+  "engines": {
+    "bun": ">=1.3.11"
+  },
+  "main": "./dist/src/index.js",
+  "module": "./dist/src/index.js",
+  "dependencies": {
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.0",
+    "effect": "4.0.0-beta.78"
+  }
+}