@halyard/cli 0.1.2 → 0.2.0

package/dist/lib/hook-discovery.js

@@ -0,0 +1,90 @@
+import { readdirSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { isDirectory, isNonEmptyFile, pathSlug, } from './hook-input.js';
+function listFiles(dir, depth, predicate, out = []) {
+    if (depth < 0 || !isDirectory(dir))
+        return out;
+    let entries = [];
+    try {
+        entries = readdirSync(dir).sort();
+    }
+    catch {
+        return out;
+    }
+    for (const name of entries) {
+        const full = join(dir, name);
+        if (isDirectory(full))
+            listFiles(full, depth - 1, predicate, out);
+        else if (predicate(name) && isNonEmptyFile(full))
+            out.push(full);
+    }
+    return out;
+}
+/** Claude keeps subagent transcripts beside the main one:
+ *  <dir>/<session>.jsonl + <dir>/<session>/subagents/agent-*.jsonl */
+export function claudeSessionFiles(transcript) {
+    const dir = dirname(transcript);
+    const sessionId = basename(transcript, '.jsonl');
+    const files = [transcript];
+    const subagents = join(dir, sessionId, 'subagents');
+    if (isDirectory(subagents)) {
+        for (const name of readdirSync(subagents).sort()) {
+            if (name.endsWith('.jsonl'))
+                files.push(join(subagents, name));
+        }
+    }
+    return files.filter(isNonEmptyFile);
+}
+/** Rollout files end in the thread id: rollout-<timestamp>-<id>.jsonl */
+export function findCodexRollout(homeDir, sessionId) {
+    if (!sessionId)
+        return null;
+    const suffix = `-${sessionId}.jsonl`;
+    const rollouts = listFiles(join(homeDir, '.codex', 'sessions'), 6, (name) => name.startsWith('rollout-') && name.endsWith(suffix));
+    return rollouts[0] ?? null;
+}
+/** ~/.cursor/projects/<path-slug>/agent-transcripts/<conversation>/<conversation>.jsonl */
+export function sweepCursor(ctx) {
+    const slug = pathSlug(ctx.projectRoot).replace(/^-/, '');
+    const dir = join(ctx.homeDir, '.cursor', 'projects', slug, 'agent-transcripts');
+    return listFiles(dir, 1, (name) => name.endsWith('.jsonl')).map((file) => ({
+        file,
+        provider: 'cursor',
+    }));
+}
+/** Grok Build keeps sessions under ~/.grok/sessions; the payload carries only
+ *  the session id, so match on it. Layout is undocumented — best effort. */
+export function sweepGrok(ctx) {
+    if (!ctx.sessionId)
+        return [];
+    const dir = join(ctx.homeDir, '.grok', 'sessions');
+    return listFiles(dir, 4, (name) => name.includes(ctx.sessionId) && (name.endsWith('.json') || name.endsWith('.jsonl'))).map((file) => ({ file, provider: 'other' }));
+}
+/** Amp caches threads as T-<id>.json under ~/.local/share/amp (or AMP_DATA_DIR). */
+export function sweepAmp(ctx) {
+    if (!ctx.sessionId)
+        return [];
+    const dir = ctx.env['AMP_DATA_DIR'] ?? join(ctx.homeDir, '.local', 'share', 'amp');
+    const wanted = `${ctx.sessionId}.json`;
+    return listFiles(dir, 6, (name) => name === wanted).map((file) => ({
+        file,
+        provider: 'other',
+    }));
+}
+export function sweepForClient(client, ctx) {
+    switch (client) {
+        case 'claude':
+        case 'codex':
+            return { kind: 'sync', provider: client, scoped: true };
+        case 'cursor':
+            return { kind: 'files', targets: sweepCursor(ctx) };
+        case 'grok':
+            return { kind: 'files', targets: sweepGrok(ctx) };
+        case 'amp':
+            return { kind: 'files', targets: sweepAmp(ctx) };
+        default:
+            // Gemini / OpenCode / Copilot logs carry no cwd: machine-wide sync.
+            return { kind: 'sync', provider: client, scoped: false };
+    }
+}
+//# sourceMappingURL=hook-discovery.js.map

package/dist/lib/hook-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-discovery.js","sourceRoot":"","sources":["../../src/lib/hook-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,WAAW,EACX,cAAc,EACd,QAAQ,GAGT,MAAM,iBAAiB,CAAA;AAiCxB,SAAS,SAAS,CAChB,GAAW,EACX,KAAa,EACb,SAAoC,EACpC,MAAgB,EAAE;IAElB,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAC9C,IAAI,OAAO,GAAa,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;aAC5D,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;IACnD,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;AACrC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,MAAM,GAAG,IAAI,SAAS,QAAQ,CAAA;IACpC,MAAM,QAAQ,GAAG,SAAS,CACxB,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,EACnC,CAAC,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/D,CAAA;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AAC5B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,GAAiB;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAA;IAC/E,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI;QACJ,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC,CAAA;AACL,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,SAAS,CAAC,GAAiB;IACzC,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;IAClD,OAAO,SAAS,CACd,GAAG,EACH,CAAC,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAC9F,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,QAAQ,CAAC,GAAiB;IACxC,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;IAClF,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,OAAO,CAAA;IACtC,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI;QACJ,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC,CAAA;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB,EAAE,GAAiB;IAClE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QACzD,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAA;QACrD,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAA;QACnD,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAA;QAClD;YACE,oEAAoE;YACpE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC5D,CAAC;AACH,CAAC"}

package/dist/lib/hook-input.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Parsing and normalisation for `halyard hook`: the JSON every client pipes to
+ * a lifecycle hook, the event names they use, and where the repo root is.
+ */
+export type HookClient = 'claude' | 'codex' | 'cursor' | 'gemini' | 'copilot' | 'opencode' | 'grok' | 'amp';
+/** `start` sweeps missed transcripts, `end` uploads the one that just finished. */
+export type HookEvent = 'start' | 'end' | 'sweep';
+export declare const HOOK_CLIENTS: readonly HookClient[];
+export declare function isHookClient(value: string): value is HookClient;
+export interface HookInput {
+    event: string;
+    sessionId: string;
+    transcriptPath: string;
+    cwd: string;
+}
+/**
+ * Field names differ per client (Claude/Codex/Gemini: snake_case, Copilot:
+ * camelCase, Cursor: conversation_id + workspace_roots[]), so pick from lists.
+ */
+export declare function parseHookInput(raw: string): HookInput;
+export declare function normalizeEvent(name: string): HookEvent | null;
+/** Transcript path first, then the host's environment. Cursor also exports
+ *  CLAUDE_PROJECT_DIR as a compatibility alias, so it is tested before Claude. */
+export declare function detectClient(transcriptPath: string, env: NodeJS.ProcessEnv): HookClient;
+/** Ingest provider for a client. Clients without a Halyard parser upload as
+ *  `other`: the raw log is kept and re-processed once a parser lands. */
+export declare function providerForClient(client: HookClient): string;
+export declare function isDirectory(path: string): boolean;
+export declare function isNonEmptyFile(path: string): boolean;
+/** First existing directory among the candidates, promoted to its git root. */
+export declare function resolveProjectRoot(candidates: ReadonlyArray<string | undefined>, fallback: string): string;
+/** Last `KEY=value` line of a dotenv file (quotes stripped), or ''. */
+export declare function readDotenvVar(file: string, key: string): string;
+/** Claude and Cursor name project dirs by the path with `/` and `.` → `-`. */
+export declare function pathSlug(path: string): string;
+//# sourceMappingURL=hook-input.d.ts.map

package/dist/lib/hook-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-input.d.ts","sourceRoot":"","sources":["../../src/lib/hook-input.ts"],"names":[],"mappings":"AAGA;;;GAGG;AAEH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,UAAU,GACV,MAAM,GACN,KAAK,CAAA;AAET,mFAAmF;AACnF,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,CAAA;AAEjD,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAS7C,CAAA;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE,MAAM,CAAA;CACZ;AAgBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAqBrD;AAeD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAK7D;AAUD;kFACkF;AAClF,wBAAgB,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAQvF;AAED;yEACyE;AACzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAE5D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMjD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOpD;AAWD,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAC,EAC7C,QAAQ,EAAE,MAAM,GACf,MAAM,CAMR;AAUD,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/lib/hook-input.js

@@ -0,0 +1,161 @@
+import { spawnSync } from 'node:child_process';
+import { existsSync, readFileSync, statSync } from 'node:fs';
+export const HOOK_CLIENTS = [
+    'claude',
+    'codex',
+    'cursor',
+    'gemini',
+    'copilot',
+    'opencode',
+    'grok',
+    'amp',
+];
+export function isHookClient(value) {
+    return HOOK_CLIENTS.includes(value);
+}
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+}
+function pickString(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return '';
+}
+/**
+ * Field names differ per client (Claude/Codex/Gemini: snake_case, Copilot:
+ * camelCase, Cursor: conversation_id + workspace_roots[]), so pick from lists.
+ */
+export function parseHookInput(raw) {
+    let record = {};
+    try {
+        record = asRecord(JSON.parse(raw));
+    }
+    catch {
+        record = {};
+    }
+    const roots = Array.isArray(record['workspace_roots']) ? record['workspace_roots'] : [];
+    const firstRoot = typeof roots[0] === 'string' ? roots[0] : '';
+    return {
+        event: pickString(record, ['hook_event_name', 'hookEventName', 'event', 'type']),
+        sessionId: pickString(record, [
+            'session_id',
+            'sessionId',
+            'conversation_id',
+            'thread_id',
+            'threadId',
+        ]),
+        transcriptPath: pickString(record, ['transcript_path', 'transcriptPath']),
+        cwd: pickString(record, ['cwd', 'workspace_root', 'workspaceRoot', 'project_dir']) || firstRoot,
+    };
+}
+const START_EVENTS = new Set(['SessionStart', 'sessionStart', 'session_start', 'session.start']);
+const END_EVENTS = new Set([
+    'SessionEnd',
+    'sessionEnd',
+    'session_end',
+    'session.end',
+    'Stop',
+    'stop',
+    'session.idle',
+    'agent-turn-complete',
+    'agent.end',
+]);
+export function normalizeEvent(name) {
+    if (name === 'sweep')
+        return 'sweep';
+    if (START_EVENTS.has(name))
+        return 'start';
+    if (END_EVENTS.has(name))
+        return 'end';
+    return null;
+}
+const CLIENT_BY_PATH = [
+    ['/.claude/', 'claude'],
+    ['/.codex/', 'codex'],
+    ['/.cursor/', 'cursor'],
+    ['/.gemini/', 'gemini'],
+    ['/.copilot/', 'copilot'],
+];
+/** Transcript path first, then the host's environment. Cursor also exports
+ *  CLAUDE_PROJECT_DIR as a compatibility alias, so it is tested before Claude. */
+export function detectClient(transcriptPath, env) {
+    for (const [needle, client] of CLIENT_BY_PATH) {
+        if (transcriptPath.includes(needle))
+            return client;
+    }
+    if (env['CURSOR_PROJECT_DIR'] || env['CURSOR_VERSION'])
+        return 'cursor';
+    if (env['GEMINI_PROJECT_DIR'])
+        return 'gemini';
+    if (env['CODEX_CWD'] || env['CODEX_HOME'])
+        return 'codex';
+    return 'claude';
+}
+/** Ingest provider for a client. Clients without a Halyard parser upload as
+ *  `other`: the raw log is kept and re-processed once a parser lands. */
+export function providerForClient(client) {
+    return client === 'grok' || client === 'amp' ? 'other' : client;
+}
+export function isDirectory(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+export function isNonEmptyFile(path) {
+    try {
+        const stat = statSync(path);
+        return stat.isFile() && stat.size > 0;
+    }
+    catch {
+        return false;
+    }
+}
+function gitToplevel(dir) {
+    const result = spawnSync('git', ['-C', dir, 'rev-parse', '--show-toplevel'], {
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'ignore'],
+    });
+    const out = result.status === 0 ? result.stdout.trim() : '';
+    return out.length > 0 ? out : null;
+}
+/** First existing directory among the candidates, promoted to its git root. */
+export function resolveProjectRoot(candidates, fallback) {
+    for (const candidate of candidates) {
+        if (!candidate || !isDirectory(candidate))
+            continue;
+        return gitToplevel(candidate) ?? candidate;
+    }
+    return fallback;
+}
+function unquote(value) {
+    const trimmed = value.trim();
+    const quoted = (trimmed.startsWith('"') && trimmed.endsWith('"')) ||
+        (trimmed.startsWith("'") && trimmed.endsWith("'"));
+    return quoted && trimmed.length >= 2 ? trimmed.slice(1, -1) : trimmed;
+}
+/** Last `KEY=value` line of a dotenv file (quotes stripped), or ''. */
+export function readDotenvVar(file, key) {
+    if (!existsSync(file))
+        return '';
+    const pattern = new RegExp(`^\\s*(?:export\\s+)?${key}=(.*)$`);
+    let found = '';
+    for (const line of readFileSync(file, 'utf8').split('\n')) {
+        const match = pattern.exec(line.replace(/\r$/, ''));
+        if (match)
+            found = unquote(match[1] ?? '');
+    }
+    return found;
+}
+/** Claude and Cursor name project dirs by the path with `/` and `.` → `-`. */
+export function pathSlug(path) {
+    return path.replace(/[/.]/g, '-');
+}
+//# sourceMappingURL=hook-input.js.map

package/dist/lib/hook-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-input.js","sourceRoot":"","sources":["../../src/lib/hook-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAoB5D,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,MAAM;IACN,KAAK;CACN,CAAA;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAQ,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC5D,CAAC;AASD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,SAAS,UAAU,CAAC,MAA+B,EAAE,IAAc;IACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;IACjE,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,MAAM,GAA4B,EAAE,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,CAAA;IACb,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACvF,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAChF,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE;YAC5B,YAAY;YACZ,WAAW;YACX,iBAAiB;YACjB,WAAW;YACX,UAAU;SACX,CAAC;QACF,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QACzE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,IAAI,SAAS;KAChG,CAAA;AACH,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAA;AAChG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,aAAa;IACb,MAAM;IACN,MAAM;IACN,cAAc;IACd,qBAAqB;IACrB,WAAW;CACZ,CAAC,CAAA;AAEF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAA;IACpC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IAC1C,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,cAAc,GAAiD;IACnE,CAAC,WAAW,EAAE,QAAQ,CAAC;IACvB,CAAC,UAAU,EAAE,OAAO,CAAC;IACrB,CAAC,WAAW,EAAE,QAAQ,CAAC;IACvB,CAAC,WAAW,EAAE,QAAQ,CAAC;IACvB,CAAC,YAAY,EAAE,SAAS,CAAC;CAC1B,CAAA;AAED;kFACkF;AAClF,MAAM,UAAU,YAAY,CAAC,cAAsB,EAAE,GAAsB;IACzE,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC9C,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IACpD,CAAC;IACD,IAAI,GAAG,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,QAAQ,CAAA;IACvE,IAAI,GAAG,CAAC,oBAAoB,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC9C,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,OAAO,CAAA;IACzD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3B,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE;QAC3E,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3D,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AACpC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAChC,UAA6C,EAC7C,QAAgB;IAEhB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;YAAE,SAAQ;QACnD,OAAO,WAAW,CAAC,SAAS,CAAC,IAAI,SAAS,CAAA;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,MAAM,GACV,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,OAAO,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AACvE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW;IACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,uBAAuB,GAAG,QAAQ,CAAC,CAAA;IAC9D,IAAI,KAAK,GAAG,EAAE,CAAA;IACd,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;QACnD,IAAI,KAAK;YAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC5C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AACnC,CAAC"}

package/dist/lib/hook-runner.d.ts

@@ -0,0 +1,48 @@
+import { type HookClient, type HookEvent } from './hook-input.js';
+import { type TargetOrg } from './preflight.js';
+/**
+ * `halyard hook`: the uploader every client's lifecycle hook calls.
+ *
+ *  - `end`   uploads the transcript that just finished (Claude: plus its
+ *            subagent transcripts; Codex: the rollout matched by thread id).
+ *  - `sweep` uploads this repo's earlier transcripts that never made it up
+ *            (run detached from a `start` event by the command layer).
+ *
+ * Org binding: a repo's `.halyard.json` decides which org its sessions
+ * belong to. The hook resolves credentials the same way `sync` and `push`
+ * do (HALYARD_TOKEN → per-org login for the bound org → default login) and
+ * refuses login credentials for another org.
+ *
+ * Why session end and not every turn: the ingest endpoint keeps the FIRST
+ * upload it sees for a session id, so a growing transcript uploaded per turn
+ * would freeze at turn one.
+ *
+ * Never throws for expected conditions — every skip reason goes to
+ * ~/.halyard/hooks.log — and never writes to stdout (clients parse it).
+ */
+export interface HookRunOptions {
+    /** Raw JSON the client piped to the hook; may be empty. */
+    input: string;
+    client?: HookClient;
+    event?: HookEvent;
+    root?: string;
+    transcript?: string;
+    dryRun: boolean;
+    apiUrl: string;
+    halyardDir: string;
+    homeDir: string;
+    /** Should be process.env in production: HALYARD_TOKEN found in the repo .env is exported into it. */
+    env: NodeJS.ProcessEnv;
+    cwd: string;
+    /** Injectable for tests (defaults to the shared upload preflight). */
+    resolveTarget?: (apiUrl: string) => Promise<TargetOrg>;
+}
+export declare class HookLogger {
+    private readonly file;
+    private readonly tag;
+    constructor(file: string, tag: string);
+    log(message: string): void;
+    private rotate;
+}
+export declare function runHook(opts: HookRunOptions): Promise<void>;
+//# sourceMappingURL=hook-runner.d.ts.map

package/dist/lib/hook-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-runner.d.ts","sourceRoot":"","sources":["../../src/lib/hook-runner.ts"],"names":[],"mappings":"AAsBA,OAAO,EAQL,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAYjE;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,qGAAqG;IACrG,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,GAAG,EAAE,MAAM,CAAA;IACX,sEAAsE;IACtE,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;CACvD;AAMD,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM;IAG9B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAW1B,OAAO,CAAC,MAAM;CAWf;AAeD,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDjE"}

package/dist/lib/hook-runner.js

@@ -0,0 +1,306 @@
+import { createHash } from 'node:crypto';
+import { appendFileSync, mkdirSync, readFileSync, rmdirSync, statSync, writeFileSync, } from 'node:fs';
+import { basename, dirname, extname, join } from 'node:path';
+import { uploadSession } from './api-client.js';
+import { getAuthHeaders, getCredentials } from './auth.js';
+import { formatError } from './config-files.js';
+import { claudeSessionFiles, findCodexRollout, sweepForClient, } from './hook-discovery.js';
+import { detectClient, isNonEmptyFile, normalizeEvent, parseHookInput, providerForClient, readDotenvVar, resolveProjectRoot, } from './hook-input.js';
+import { resolveTargetOrg } from './preflight.js';
+import { findRepoBinding, gitToplevel } from './repo-binding.js';
+import { runSkillsSync } from './skills-sync.js';
+import { runSync } from './sync-runner.js';
+import { hashFileContents, isUploaded, markUploaded, readSyncState, writeSyncState, } from './sync-state.js';
+const LOG_MAX_BYTES = 1_048_576;
+const LOG_KEEP_BYTES = 262_144;
+const LOCK_STALE_MS = 10 * 60 * 1000;
+export class HookLogger {
+    file;
+    tag;
+    constructor(file, tag) {
+        this.file = file;
+        this.tag = tag;
+    }
+    log(message) {
+        try {
+            mkdirSync(dirname(this.file), { recursive: true });
+            this.rotate();
+            const stamp = new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
+            appendFileSync(this.file, `${stamp} [${this.tag}] ${message}\n`);
+        }
+        catch {
+            // Logging must never fail the hook.
+        }
+    }
+    rotate() {
+        let size = 0;
+        try {
+            size = statSync(this.file).size;
+        }
+        catch {
+            return;
+        }
+        if (size <= LOG_MAX_BYTES)
+            return;
+        const content = readFileSync(this.file);
+        writeFileSync(this.file, content.subarray(content.length - LOG_KEEP_BYTES));
+    }
+}
+export async function runHook(opts) {
+    if (opts.env['HALYARD_SESSION_UPLOAD'] === '0')
+        return;
+    const parsed = parseHookInput(opts.input);
+    const event = opts.event ?? normalizeEvent(parsed.event);
+    if (!event)
+        return;
+    const transcript = opts.transcript || parsed.transcriptPath || opts.env['CURSOR_TRANSCRIPT_PATH'] || '';
+    const client = opts.client ?? detectClient(transcript, opts.env);
+    const logger = new HookLogger(join(opts.halyardDir, 'hooks.log'), `${client}/${event}`);
+    const projectRoot = resolveProjectRoot([
+        opts.root,
+        opts.env['HALYARD_PROJECT_ROOT'],
+        opts.env['CLAUDE_PROJECT_DIR'],
+        opts.env['CURSOR_PROJECT_DIR'],
+        opts.env['GEMINI_PROJECT_DIR'],
+        opts.env['CODEX_CWD'],
+        parsed.cwd,
+        opts.cwd,
+    ], opts.cwd);
+    const ctx = {
+        opts,
+        client,
+        event,
+        projectRoot,
+        binding: findRepoBinding(projectRoot),
+        sessionId: parsed.sessionId,
+        transcript,
+        logger,
+    };
+    if (!ensureToken(ctx))
+        return;
+    const target = await resolveTarget(ctx);
+    if (!target)
+        return;
+    let authHeaders;
+    try {
+        authHeaders = await getAuthHeaders(opts.apiUrl, ctx.binding);
+    }
+    catch (err) {
+        logger.log(`skip: ${formatError(err)}`);
+        return;
+    }
+    const upload = { ...ctx, authHeaders, stateKey: target.stateKey };
+    logger.log(`root=${projectRoot} org=${target.label} transcript=${transcript || '<none>'} session=${parsed.sessionId || '<none>'}`);
+    const plan = event === 'end' ? endPlan(upload) : sweepForClient(client, sweepContext(upload));
+    await executePlan(upload, plan);
+    if (event === 'sweep')
+        await sweepSkills(upload);
+    logger.log(`${event} finished`);
+}
+/**
+ * Session start also lifts this repo's committed skills (`.claude/skills`,
+ * `.agents/skills`, ...) into the bound org. Project scope only: personal
+ * `~/.claude/skills` are synced by `halyard skills sync`, never by a hook
+ * firing inside whichever org's repo happens to be open. The ledger makes
+ * this a no-op when nothing changed. HALYARD_SKILLS_SYNC=0 disables it.
+ */
+async function sweepSkills(ctx) {
+    if (ctx.opts.env['HALYARD_SKILLS_SYNC'] === '0')
+        return;
+    const tag = 'skills[project]';
+    // Only a real repository is a project root. The hook's project dir falls
+    // back to the raw cwd, and scanning `~` as a "project" would upload the
+    // user's personal skill directories as repo skills.
+    const projectRoot = ctx.binding?.rootDir ?? gitToplevel(ctx.projectRoot);
+    if (!projectRoot) {
+        ctx.logger.log(`${tag} skip: ${ctx.projectRoot} is not a git repository`);
+        return;
+    }
+    try {
+        const summary = await runSkillsSync({
+            homeDir: ctx.opts.homeDir,
+            projectRoot,
+            scope: 'project',
+            stateKey: ctx.stateKey,
+            authHeaders: ctx.authHeaders,
+            apiUrl: ctx.opts.apiUrl,
+            dryRun: ctx.opts.dryRun,
+            force: false,
+            log: (line) => ctx.logger.log(`${tag} ${line.trim()}`),
+        });
+        ctx.logger.log(`${tag} found=${summary.found} created=${summary.created} updated=${summary.updated} unchanged=${summary.unchanged} skipped=${summary.skipped} failed=${summary.failed}`);
+    }
+    catch (err) {
+        ctx.logger.log(`${tag} failed: ${formatError(err)}`);
+    }
+}
+/** Token resolution: environment → repo .env → `halyard login` credentials. */
+function ensureToken(ctx) {
+    const env = ctx.opts.env;
+    if (!env['HALYARD_TOKEN']) {
+        const fromRepo = readDotenvVar(join(ctx.projectRoot, '.env'), 'HALYARD_TOKEN');
+        if (fromRepo)
+            env['HALYARD_TOKEN'] = fromRepo;
+    }
+    if (env['HALYARD_TOKEN'] || getCredentials(ctx.binding))
+        return true;
+    ctx.logger.log(`skip: not authenticated (run \`halyard login\` in ${ctx.projectRoot}, or set HALYARD_TOKEN in the environment or ${ctx.projectRoot}/.env)`);
+    return false;
+}
+/**
+ * Where uploads will land, and whether that agrees with the repo binding.
+ * Mirrors `runPreflight` for sync/push, except that a mismatch skips instead
+ * of failing: a hook must never break the agent.
+ */
+async function resolveTarget(ctx) {
+    let target;
+    try {
+        target = await (ctx.opts.resolveTarget ?? resolveTargetOrg)(ctx.opts.apiUrl);
+    }
+    catch (err) {
+        ctx.logger.log(`skip: could not resolve the destination org (${formatError(err)})`);
+        return null;
+    }
+    if (!ctx.binding)
+        return target;
+    if (target.slug === null) {
+        ctx.logger.log(`note: repo is bound to '${ctx.binding.org}' but an API key's org cannot be verified; uploading to the key's org`);
+        return target;
+    }
+    if (target.slug === ctx.binding.org)
+        return target;
+    ctx.logger.log(`skip: credentials are for org '${target.slug}' but this repo is bound to '${ctx.binding.org}' (${ctx.binding.rootDir}/.halyard.json). Run \`halyard login\` inside the repo, or set HALYARD_TOKEN to a ${ctx.binding.org} API key in ${ctx.projectRoot}/.env`);
+    return null;
+}
+function sweepContext(ctx) {
+    return {
+        homeDir: ctx.opts.homeDir,
+        projectRoot: ctx.projectRoot,
+        sessionId: ctx.sessionId,
+        transcriptPath: ctx.transcript,
+        event: ctx.event,
+        env: ctx.opts.env,
+    };
+}
+function endPlan(ctx) {
+    if (ctx.transcript && isNonEmptyFile(ctx.transcript)) {
+        const files = ctx.client === 'claude' ? claudeSessionFiles(ctx.transcript) : [ctx.transcript];
+        const provider = providerForClient(ctx.client);
+        return { kind: 'files', targets: files.map((file) => ({ file, provider })) };
+    }
+    if (ctx.client === 'codex') {
+        const rollout = findCodexRollout(ctx.opts.homeDir, ctx.sessionId);
+        if (rollout)
+            return { kind: 'files', targets: [{ file: rollout, provider: 'codex' }] };
+    }
+    return sweepForClient(ctx.client, sweepContext(ctx));
+}
+/** The live session is uploaded at its own end (first upload wins server-side). */
+function isLiveSession(ctx, session) {
+    if (!ctx.sessionId)
+        return false;
+    if (ctx.client === 'codex')
+        return session.filePath.endsWith(`-${ctx.sessionId}.jsonl`);
+    return session.sessionId === ctx.sessionId || session.filePath.includes(`/${ctx.sessionId}/`);
+}
+async function executePlan(ctx, plan) {
+    if (plan.kind === 'sync') {
+        const tag = `sync[${plan.provider}${plan.scoped ? ', repo-scoped' : ''}]`;
+        const summary = await runSync({
+            providerFilter: plan.provider,
+            scopeRootDir: plan.scoped ? (ctx.binding?.rootDir ?? ctx.projectRoot) : undefined,
+            exclude: (session) => isLiveSession(ctx, session),
+            stateKey: ctx.stateKey,
+            apiUrl: ctx.opts.apiUrl,
+            authHeaders: ctx.authHeaders,
+            dryRun: ctx.opts.dryRun,
+            log: (line) => ctx.logger.log(`${tag} ${line.trim()}`),
+        });
+        ctx.logger.log(`${tag} found=${summary.found} matched=${summary.matched} unresolved=${summary.unresolved} uploaded=${summary.uploaded} skipped=${summary.skipped} failed=${summary.failed}`);
+        return;
+    }
+    if (plan.targets.length === 0) {
+        ctx.logger.log('nothing to upload');
+        return;
+    }
+    for (const target of plan.targets) {
+        await pushFile(ctx, target);
+    }
+}
+function lockPath(halyardDir, file) {
+    const key = createHash('sha1').update(file).digest('hex').slice(0, 16);
+    return join(halyardDir, 'locks', key);
+}
+/** A per-file directory lock: safe for two hooks (repo + plugin) to race. A
+ *  stale lock (crashed hook) is reclaimed after ten minutes. */
+function acquireLock(halyardDir, file) {
+    const lock = lockPath(halyardDir, file);
+    mkdirSync(dirname(lock), { recursive: true });
+    try {
+        mkdirSync(lock);
+        return lock;
+    }
+    catch {
+        // fall through to the stale check
+    }
+    try {
+        if (Date.now() - statSync(lock).mtimeMs < LOCK_STALE_MS)
+            return null;
+        rmdirSync(lock);
+        mkdirSync(lock);
+        return lock;
+    }
+    catch {
+        return null;
+    }
+}
+function releaseLock(lock) {
+    try {
+        rmdirSync(lock);
+    }
+    catch {
+        // already gone
+    }
+}
+/** The session id is the file name without extension — the same rule
+ *  `halyard sync` uses, so hook uploads and later manual syncs dedupe together. */
+async function pushFile(ctx, target) {
+    const { file, provider } = target;
+    if (!isNonEmptyFile(file))
+        return;
+    const content = readFileSync(file);
+    const hash = hashFileContents(content);
+    const state = readSyncState();
+    if (isUploaded(state, ctx.stateKey, file, hash)) {
+        ctx.logger.log(`skip (already uploaded): ${file}`);
+        return;
+    }
+    const lock = acquireLock(ctx.opts.halyardDir, file);
+    if (!lock) {
+        ctx.logger.log(`skip (another hook is uploading): ${file}`);
+        return;
+    }
+    try {
+        if (ctx.opts.dryRun) {
+            ctx.logger.log(`dry-run: would push [${provider}] ${file} (${content.length} bytes)`);
+            return;
+        }
+        const sessionId = basename(file, extname(file));
+        const result = await uploadSession(content, basename(file), provider, sessionId, ctx.authHeaders, ctx.opts.apiUrl);
+        markUploaded(state, ctx.stateKey, file, {
+            sessionId: result.sessionId,
+            uploadedAt: new Date().toISOString(),
+            size: content.length,
+            hash,
+        });
+        writeSyncState(state);
+        ctx.logger.log(`push[${provider}] ${result.status}: ${file} (${content.length} bytes)`);
+    }
+    catch (err) {
+        ctx.logger.log(`push[${provider}] failed: ${file} :: ${formatError(err)}`);
+    }
+    finally {
+        releaseLock(lock);
+    }
+}
+//# sourceMappingURL=hook-runner.js.map