@hasna/hooks 0.11.2 → 0.11.4

package/README.md

@@ -46,7 +46,12 @@ hooks safety startup check --target codex
 
 The binding schema is `hasna.hooks.trash-readiness/v1`. It contains the exact
 provider and home, `runtime:{path,sha256}`, `trash:{root,version,cliSha256}`,
-`plan:{path,sha256}`, and `timeoutMs` (1000–15000). Paths are absolute; the
+`plan:{path,sha256}`, and `timeoutMs` (1000–60000). Use 45000 for a normal
+whole-startup budget, configurable within those bounds. Existing bindings retain
+their explicit budget until a guarded update. Claude and Codex registrations
+allow 65 seconds for the observer's 60-second maximum plus runner overhead.
+Authentication, station identity, source/hash checks and terminal timeout remain
+mandatory; the separate removal guard's deadlines are unchanged. Paths are absolute; the
 package and plan must be inside that home. The installed binding lives at
 `~/.hasna/hooks/native/trash-readiness/<provider>.json`. Updating it requires its
 current digest; the writer preserves an immutable predecessor, intent and

package/bin/hooks-mcp.js

@@ -2690,13 +2690,75 @@ import { fileURLToPath as fileURLToPath3 } from "url";
 
 // src/lib/installer.ts
 init_registry();
-init_resolve();
-init_manifest();
 import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync7, readdirSync as readdirSync4, realpathSync as realpathSync5, rmdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync5 } from "fs";
 import { join as join10, dirname as dirname7, basename as basename3, resolve as resolve7 } from "path";
 import { homedir as homedir6 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
+// src/lib/readiness-process.ts
+var supervisor = String.raw`
+  const {spawn}=require("node:child_process");
+  const spec=JSON.parse(process.argv.at(-1));
+  // This runtime was created detached and is its group's live leader. Its
+  // independent timer and parent pipe remain effective if the observer exits
+  // or its event loop stops responding. Only this freshly created tree is hit.
+  const cleanup=()=>{try{process.kill(-process.pid,"SIGKILL")}catch{process.exit(1)}};
+  setTimeout(cleanup,spec.timeout);
+  process.stdin.once("end",cleanup);
+  process.stdin.once("error",cleanup);
+  process.stdin.on("data",cleanup);
+  process.stdin.resume();
+  for(const signal of ["SIGTERM","SIGINT","SIGHUP"])process.once(signal,cleanup);
+  let done=false, out=Buffer.alloc(0), err=Buffer.alloc(0);
+  function report(status,error){
+    if(done)return; done=true;
+    process.stdout.write(JSON.stringify({status,error,stdout:out.toString("utf8"),stderr:err.toString("utf8")})+"\n");
+  }
+  const child=spawn(spec.command,spec.args,{stdio:["ignore","pipe","pipe"],env:process.env});
+  for(const [stream,name] of [[child.stdout,"stdout"],[child.stderr,"stderr"]]){
+    stream.on("data",bytes=>{
+      if(done)return;
+      const before=name==="stdout"?out:err;
+      if(before.length+bytes.length>spec.maxBuffer){report(null,{code:"ENOBUFS"});return}
+      if(name==="stdout")out=Buffer.concat([out,bytes]);else err=Buffer.concat([err,bytes]);
+    });
+    stream.on("error",()=>report(null,{code:"ECHILD"}));
+  }
+  child.on("error",()=>report(null,{code:"ECHILD"}));
+  // A successful observation includes complete streams. A nested client that
+  // keeps them open after its parent exits is a failure requiring group cleanup.
+  child.on("exit",()=>setTimeout(()=>report(null,{code:"ECHILD"}),100));
+  child.on("close",(status,signal)=>report(status,signal?{code:"ECHILD"}:undefined));
+`;
+
+// src/native-readiness.ts
+var TRASH_READINESS_MAX_TIMEOUT_MS = 60000;
+var TRASH_READINESS_NATIVE_TIMEOUT_SECONDS = TRASH_READINESS_MAX_TIMEOUT_MS / 1000 + 5;
+function isReadinessProvider(value) {
+  return value === "claude" || value === "codex" || value === "sumi";
+}
+var safeFailureCodes = new Set([
+  "unsupported_platform",
+  "station_detection_failed",
+  "station_mismatch",
+  "hosted_unavailable",
+  "authentication_refused",
+  "station_setup_required",
+  "invalid_status",
+  "deadline_exceeded",
+  "retention_mismatch",
+  "managed_instructions_refused",
+  "removal_instruction_missing",
+  "instructions_changed",
+  "native_config_changed",
+  "guard_refused",
+  "owner_refused"
+]);
+
+// src/lib/installer.ts
+init_resolve();
+init_manifest();
+
 // src/lib/native-safety.ts
 import { createHash } from "crypto";
 import { closeSync, constants, existsSync as existsSync4, fstatSync, lstatSync, openSync, readFileSync as readFileSync2, realpathSync as realpathSync2 } from "fs";
@@ -2836,66 +2898,6 @@ import { createHash as createHash2 } from "crypto";
 import { constants as constants2, closeSync as closeSync2, existsSync as existsSync5, fstatSync as fstatSync2, lstatSync as lstatSync2, openSync as openSync2, readFileSync as readFileSync3, realpathSync as realpathSync3 } from "fs";
 import { dirname as dirname4, isAbsolute as isAbsolute3, join as join6 } from "path";
 import { homedir as homedir3 } from "os";
-
-// src/lib/readiness-process.ts
-var supervisor = String.raw`
-  const {spawn}=require("node:child_process");
-  const spec=JSON.parse(process.argv.at(-1));
-  // This runtime was created detached and is its group's live leader. Its
-  // independent timer and parent pipe remain effective if the observer exits
-  // or its event loop stops responding. Only this freshly created tree is hit.
-  const cleanup=()=>{try{process.kill(-process.pid,"SIGKILL")}catch{process.exit(1)}};
-  setTimeout(cleanup,spec.timeout);
-  process.stdin.once("end",cleanup);
-  process.stdin.once("error",cleanup);
-  process.stdin.on("data",cleanup);
-  process.stdin.resume();
-  for(const signal of ["SIGTERM","SIGINT","SIGHUP"])process.once(signal,cleanup);
-  let done=false, out=Buffer.alloc(0), err=Buffer.alloc(0);
-  function report(status,error){
-    if(done)return; done=true;
-    process.stdout.write(JSON.stringify({status,error,stdout:out.toString("utf8"),stderr:err.toString("utf8")})+"\n");
-  }
-  const child=spawn(spec.command,spec.args,{stdio:["ignore","pipe","pipe"],env:process.env});
-  for(const [stream,name] of [[child.stdout,"stdout"],[child.stderr,"stderr"]]){
-    stream.on("data",bytes=>{
-      if(done)return;
-      const before=name==="stdout"?out:err;
-      if(before.length+bytes.length>spec.maxBuffer){report(null,{code:"ENOBUFS"});return}
-      if(name==="stdout")out=Buffer.concat([out,bytes]);else err=Buffer.concat([err,bytes]);
-    });
-    stream.on("error",()=>report(null,{code:"ECHILD"}));
-  }
-  child.on("error",()=>report(null,{code:"ECHILD"}));
-  // A successful observation includes complete streams. A nested client that
-  // keeps them open after its parent exits is a failure requiring group cleanup.
-  child.on("exit",()=>setTimeout(()=>report(null,{code:"ECHILD"}),100));
-  child.on("close",(status,signal)=>report(status,signal?{code:"ECHILD"}:undefined));
-`;
-
-// src/native-readiness.ts
-function isReadinessProvider(value) {
-  return value === "claude" || value === "codex" || value === "sumi";
-}
-var safeFailureCodes = new Set([
-  "unsupported_platform",
-  "station_detection_failed",
-  "station_mismatch",
-  "hosted_unavailable",
-  "authentication_refused",
-  "station_setup_required",
-  "invalid_status",
-  "deadline_exceeded",
-  "retention_mismatch",
-  "managed_instructions_refused",
-  "removal_instruction_missing",
-  "instructions_changed",
-  "native_config_changed",
-  "guard_refused",
-  "owner_refused"
-]);
-
-// src/lib/native-readiness-command.ts
 var quote2 = (value) => "'" + value.replaceAll("'", "'\\''") + "'";
 var bootstrap = String.raw`/* hasna-native-readiness-v1 */ (() => {
   const fs = require("node:fs"), path = require("node:path"), crypto = require("node:crypto");
@@ -34967,7 +34969,7 @@ function registerHook(name, scope = "global", target = "claude", profile, mement
     name,
     event: "SessionStart",
     matcher: "^(startup|resume|clear|fork)$",
-    timeoutSeconds: 20,
+    timeoutSeconds: TRASH_READINESS_NATIVE_TIMEOUT_SECONDS,
     displayName: "Trash Readiness",
     description: "Read-only native startup readiness",
     version: "0.1.0",