@hasna/hooks 0.10.8 → 0.11.0

package/hooks/hook-workspace-repos-guard/src/hook.ts

@@ -365,13 +365,13 @@ function segmentOperation(segment: string): Operation {
   const trimmed = segment.trim();
   if (!trimmed) return "read";
 
-  if (/(?:^|\s)(?:rm|rmdir|unlink|shred|trash|rmtree|del)(?:\s|$)/.test(trimmed)) return "delete";
+  if (/(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:rm|rmdir|unlink|shred|trash|rmtree|del)(?:\s|$)/.test(trimmed)) return "delete";
   if (/\bgit\b/.test(trimmed)) {
     if (/\bgit\b[^;&|]*\b(?:clean|rm)\b/.test(trimmed)) return "delete";
     if (/\bgit\b[^;&|]*\b(?:clone|init)\b/.test(trimmed)) return "write";
     return "read";
   }
-  if (/(?:^|\s)(?:mkdir|mkfile|touch|mv|cp|ln|tee|install|dd)(?:\s|$)/.test(trimmed)) return "write";
+  if (/(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:mkdir|mkfile|touch|mv|cp|ln|tee|install|dd)(?:\s|$)/.test(trimmed)) return "write";
   if (/\b(?:curl|wget)\b/.test(trimmed)) {
     if (WRITE_FLAGS.test(trimmed)) return "write";
     return "read";
@@ -586,8 +586,17 @@ export function bashTargets(command: string, home: string, cwd: string): PathTar
       // Operands after the command word. Options end at `--` or, as BSD
       // getopt does, at the first operand: every later word is an operand
       // even when it starts with `-`.
+      // A delete tool's subcommand word is not an operand: `trash put <path>`
+      // and `git [-C dir] rm|clean ...` act on the words after it.
+      let operandStart = 1;
+      const tool = (words[0]?.text ?? "").split("/").pop();
+      if (tool === "trash" && ["put", "rm", "delete", "remove"].includes(words[1]?.text ?? "")) operandStart = 2;
+      if (tool === "git") {
+        const sub = words.findIndex((word, index) => index > 0 && (word.text === "rm" || word.text === "clean"));
+        if (sub > 0) operandStart = sub + 1;
+      }
       let endOfOptions = false;
-      const nonFlag = words.slice(1).flatMap((word) => {
+      const nonFlag = words.slice(operandStart).flatMap((word) => {
         if (!endOfOptions && word.text === "--") {
           endOfOptions = true;
           return [];
@@ -599,7 +608,7 @@ export function bashTargets(command: string, home: string, cwd: string): PathTar
       // mv changes its sources too, so every mv operand counts as a write.
       const everyOperand =
         stage.op === "delete" ||
-        /(?:^|\s)(?:mkdir|mkfile|touch|tee|truncate|install|mv)(?:\s|$)/.test(stage.commandPart) ||
+        /(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:mkdir|mkfile|touch|tee|truncate|install|mv)(?:\s|$)/.test(stage.commandPart) ||
         (/(?:^|\s)sed(?:\s|$)/.test(stage.commandPart) && /(?:^|\s)(?:-i\S*|--in-place\S*)(?:\s|$)/.test(stage.commandPart));
       const operandTargets: Array<{ operand: string; op: Operation }> = [];
       if (everyOperand) {

package/hooks/native-readiness-entry.ts

@@ -0,0 +1,31 @@
+import { handleReadinessSessionStart, isReadinessProvider, readinessSessionStartOutput } from "../src/native-readiness";
+
+// This dedicated bundle never loads the generic Hooks registry or credentials.
+// The native command verifies its bytes before evaluating this CommonJS entry.
+async function main() {
+  const provider = process.argv[2];
+  if (!isReadinessProvider(provider)) {
+    process.stderr.write("Trash readiness needs attention (unsupported provider).\n");
+    process.exitCode = 1; return;
+  }
+  const invalid = () => readinessSessionStartOutput({ schema: "hasna.hooks.trash-readiness-result/v1",
+    provider, ready: false, code: "input_invalid", nativeAdoptionVerified: false });
+  try {
+    const input = await new Promise<Buffer>((accept, reject) => {
+      const chunks: Buffer[] = []; let size = 0;
+      const finish = (error?: Error) => {
+        clearTimeout(timer); process.stdin.pause(); process.stdin.removeAllListeners("data");
+        process.stdin.removeAllListeners("end"); process.stdin.removeAllListeners("error");
+        error ? reject(error) : accept(Buffer.concat(chunks));
+      };
+      const timer = setTimeout(() => finish(new Error()), 1000);
+      process.stdin.on("data", chunk => {
+        const bytes = Buffer.from(chunk); size += bytes.length;
+        if (size > 65_536) finish(new Error()); else chunks.push(bytes);
+      });
+      process.stdin.once("end", () => finish()); process.stdin.once("error", () => finish(new Error()));
+    });
+    process.stdout.write(JSON.stringify(await handleReadinessSessionStart(provider, JSON.parse(input.toString("utf8")))) + "\n");
+  } catch { process.stdout.write(JSON.stringify(invalid()) + "\n"); }
+}
+void main();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/hooks",
-  "version": "0.10.8",
+  "version": "0.11.0",
   "description": "Open source hooks library for AI coding agents - Install safety, quality, and automation hooks with a single command",
   "type": "module",
   "bin": {
@@ -24,6 +24,10 @@
     "./native-safety": {
       "types": "./dist/native-safety.d.ts",
       "import": "./dist/native-safety.js"
+    },
+    "./native-readiness": {
+      "types": "./dist/native-readiness.d.ts",
+      "import": "./dist/native-readiness.js"
     }
   },
   "main": "./dist/index.js",
@@ -41,7 +45,8 @@
     "postinstall": "node scripts/ensure-profiles-dir.mjs",
     "scan:artifact": "bun scripts/artifact-scan.ts",
     "prepack": "bun run build && bun run scan:artifact",
-    "build:native-safety": "bun build ./hooks/native-safety-entry.ts --outdir ./bin --target bun --define import.meta.main=false && bun build ./src/native-safety.ts --outdir ./dist --target bun"
+    "build:native-safety": "bun build ./hooks/native-safety-entry.ts --outdir ./bin --target bun --define import.meta.main=false && bun build ./src/native-safety.ts --outdir ./dist --target bun && bun run build:native-readiness",
+    "build:native-readiness": "bun build ./hooks/native-readiness-entry.ts --outdir ./bin --target node --format=cjs && bun build ./src/native-readiness.ts --outdir ./dist --target bun"
   },
   "keywords": [
     "claude-code",