@hasna/hooks 0.11.2 → 0.11.4

package/bin/native-readiness-entry.js

@@ -143,6 +143,8 @@ function runReadinessProcess(command, args, options) {
 var import_node_fs = require("node:fs");
 var import_node_os = require("node:os");
 var import_node_path = require("node:path");
+var TRASH_READINESS_MAX_TIMEOUT_MS = 60000;
+var TRASH_READINESS_NATIVE_TIMEOUT_SECONDS = TRASH_READINESS_MAX_TIMEOUT_MS / 1000 + 5;
 
 class ReadinessError extends Error {
   code;
@@ -171,7 +173,7 @@ function inside(home, path) {
 function parseTrashReadinessBinding(input, provider, home) {
   const b = input;
   need(isReadinessProvider(provider) && absolute(home), "binding_invalid");
-  need(keys(b, ["schema", "provider", "home", "runtime", "trash", "plan", "timeoutMs"]) && b.schema === "hasna.hooks.trash-readiness/v1" && b.provider === provider && b.home === home && pin(b.runtime) && pin(b.plan) && keys(b.trash, ["root", "version", "cliSha256"]) && absolute(b.trash.root) && typeof b.trash.version === "string" && b.trash.version.length <= 128 && /^\d+\.\d+\.\d+$/.test(b.trash.version) && digest(b.trash.cliSha256) && Number.isInteger(b.timeoutMs) && b.timeoutMs >= 1000 && b.timeoutMs <= 15000 && inside(home, b.plan.path) && inside(home, b.trash.root), "binding_invalid");
+  need(keys(b, ["schema", "provider", "home", "runtime", "trash", "plan", "timeoutMs"]) && b.schema === "hasna.hooks.trash-readiness/v1" && b.provider === provider && b.home === home && pin(b.runtime) && pin(b.plan) && keys(b.trash, ["root", "version", "cliSha256"]) && absolute(b.trash.root) && typeof b.trash.version === "string" && b.trash.version.length <= 128 && /^\d+\.\d+\.\d+$/.test(b.trash.version) && digest(b.trash.cliSha256) && Number.isInteger(b.timeoutMs) && b.timeoutMs >= 1000 && b.timeoutMs <= TRASH_READINESS_MAX_TIMEOUT_MS && inside(home, b.plan.path) && inside(home, b.trash.root), "binding_invalid");
   return structuredClone(b);
 }
 function trashReadinessBindingPath(provider, home = import_node_os.homedir()) {

package/dist/index.js

@@ -7547,6 +7547,66 @@ import { join as join10, dirname as dirname7, basename as basename3, resolve as
 import { homedir as homedir6 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
+// src/lib/readiness-process.ts
+var supervisor = String.raw`
+  const {spawn}=require("node:child_process");
+  const spec=JSON.parse(process.argv.at(-1));
+  // This runtime was created detached and is its group's live leader. Its
+  // independent timer and parent pipe remain effective if the observer exits
+  // or its event loop stops responding. Only this freshly created tree is hit.
+  const cleanup=()=>{try{process.kill(-process.pid,"SIGKILL")}catch{process.exit(1)}};
+  setTimeout(cleanup,spec.timeout);
+  process.stdin.once("end",cleanup);
+  process.stdin.once("error",cleanup);
+  process.stdin.on("data",cleanup);
+  process.stdin.resume();
+  for(const signal of ["SIGTERM","SIGINT","SIGHUP"])process.once(signal,cleanup);
+  let done=false, out=Buffer.alloc(0), err=Buffer.alloc(0);
+  function report(status,error){
+    if(done)return; done=true;
+    process.stdout.write(JSON.stringify({status,error,stdout:out.toString("utf8"),stderr:err.toString("utf8")})+"\n");
+  }
+  const child=spawn(spec.command,spec.args,{stdio:["ignore","pipe","pipe"],env:process.env});
+  for(const [stream,name] of [[child.stdout,"stdout"],[child.stderr,"stderr"]]){
+    stream.on("data",bytes=>{
+      if(done)return;
+      const before=name==="stdout"?out:err;
+      if(before.length+bytes.length>spec.maxBuffer){report(null,{code:"ENOBUFS"});return}
+      if(name==="stdout")out=Buffer.concat([out,bytes]);else err=Buffer.concat([err,bytes]);
+    });
+    stream.on("error",()=>report(null,{code:"ECHILD"}));
+  }
+  child.on("error",()=>report(null,{code:"ECHILD"}));
+  // A successful observation includes complete streams. A nested client that
+  // keeps them open after its parent exits is a failure requiring group cleanup.
+  child.on("exit",()=>setTimeout(()=>report(null,{code:"ECHILD"}),100));
+  child.on("close",(status,signal)=>report(status,signal?{code:"ECHILD"}:undefined));
+`;
+
+// src/native-readiness.ts
+var TRASH_READINESS_MAX_TIMEOUT_MS = 60000;
+var TRASH_READINESS_NATIVE_TIMEOUT_SECONDS = TRASH_READINESS_MAX_TIMEOUT_MS / 1000 + 5;
+function isReadinessProvider(value) {
+  return value === "claude" || value === "codex" || value === "sumi";
+}
+var safeFailureCodes = new Set([
+  "unsupported_platform",
+  "station_detection_failed",
+  "station_mismatch",
+  "hosted_unavailable",
+  "authentication_refused",
+  "station_setup_required",
+  "invalid_status",
+  "deadline_exceeded",
+  "retention_mismatch",
+  "managed_instructions_refused",
+  "removal_instruction_missing",
+  "instructions_changed",
+  "native_config_changed",
+  "guard_refused",
+  "owner_refused"
+]);
+
 // src/lib/resolve.ts
 import { dirname as dirname2, join as join6 } from "path";
 import { existsSync as existsSync5 } from "fs";
@@ -7774,66 +7834,6 @@ import { createHash as createHash2 } from "crypto";
 import { constants as constants2, closeSync as closeSync2, existsSync as existsSync7, fstatSync as fstatSync2, lstatSync as lstatSync2, openSync as openSync2, readFileSync as readFileSync4, realpathSync as realpathSync3 } from "fs";
 import { dirname as dirname4, isAbsolute as isAbsolute3, join as join8 } from "path";
 import { homedir as homedir4 } from "os";
-
-// src/lib/readiness-process.ts
-var supervisor = String.raw`
-  const {spawn}=require("node:child_process");
-  const spec=JSON.parse(process.argv.at(-1));
-  // This runtime was created detached and is its group's live leader. Its
-  // independent timer and parent pipe remain effective if the observer exits
-  // or its event loop stops responding. Only this freshly created tree is hit.
-  const cleanup=()=>{try{process.kill(-process.pid,"SIGKILL")}catch{process.exit(1)}};
-  setTimeout(cleanup,spec.timeout);
-  process.stdin.once("end",cleanup);
-  process.stdin.once("error",cleanup);
-  process.stdin.on("data",cleanup);
-  process.stdin.resume();
-  for(const signal of ["SIGTERM","SIGINT","SIGHUP"])process.once(signal,cleanup);
-  let done=false, out=Buffer.alloc(0), err=Buffer.alloc(0);
-  function report(status,error){
-    if(done)return; done=true;
-    process.stdout.write(JSON.stringify({status,error,stdout:out.toString("utf8"),stderr:err.toString("utf8")})+"\n");
-  }
-  const child=spawn(spec.command,spec.args,{stdio:["ignore","pipe","pipe"],env:process.env});
-  for(const [stream,name] of [[child.stdout,"stdout"],[child.stderr,"stderr"]]){
-    stream.on("data",bytes=>{
-      if(done)return;
-      const before=name==="stdout"?out:err;
-      if(before.length+bytes.length>spec.maxBuffer){report(null,{code:"ENOBUFS"});return}
-      if(name==="stdout")out=Buffer.concat([out,bytes]);else err=Buffer.concat([err,bytes]);
-    });
-    stream.on("error",()=>report(null,{code:"ECHILD"}));
-  }
-  child.on("error",()=>report(null,{code:"ECHILD"}));
-  // A successful observation includes complete streams. A nested client that
-  // keeps them open after its parent exits is a failure requiring group cleanup.
-  child.on("exit",()=>setTimeout(()=>report(null,{code:"ECHILD"}),100));
-  child.on("close",(status,signal)=>report(status,signal?{code:"ECHILD"}:undefined));
-`;
-
-// src/native-readiness.ts
-function isReadinessProvider(value) {
-  return value === "claude" || value === "codex" || value === "sumi";
-}
-var safeFailureCodes = new Set([
-  "unsupported_platform",
-  "station_detection_failed",
-  "station_mismatch",
-  "hosted_unavailable",
-  "authentication_refused",
-  "station_setup_required",
-  "invalid_status",
-  "deadline_exceeded",
-  "retention_mismatch",
-  "managed_instructions_refused",
-  "removal_instruction_missing",
-  "instructions_changed",
-  "native_config_changed",
-  "guard_refused",
-  "owner_refused"
-]);
-
-// src/lib/native-readiness-command.ts
 var quote2 = (value) => "'" + value.replaceAll("'", "'\\''") + "'";
 var bootstrap = String.raw`/* hasna-native-readiness-v1 */ (() => {
   const fs = require("node:fs"), path = require("node:path"), crypto = require("node:crypto");
@@ -39769,7 +39769,7 @@ function registerHook(name, scope = "global", target = "claude", profile, mement
     name,
     event: "SessionStart",
     matcher: "^(startup|resume|clear|fork)$",
-    timeoutSeconds: 20,
+    timeoutSeconds: TRASH_READINESS_NATIVE_TIMEOUT_SECONDS,
     displayName: "Trash Readiness",
     description: "Read-only native startup readiness",
     version: "0.1.0",
@@ -41351,7 +41351,7 @@ async function verifyNativeSafetyCommand(command, home = homedir7()) {
 }
 
 // src/lib/codex-safety-check.ts
-var versions = new Set(["codex-cli 0.153.0", "codex-cli 0.154.0", "codex-cli 0.155.0", "codex-cli 0.155.1", "codex-cli 0.156.1", "codex-cli 0.157.0", "codex-cli 0.157.1"]);
+var versions = new Set(["codex-cli 0.153.0", "codex-cli 0.154.0", "codex-cli 0.154.0-alpha.6.1", "codex-cli 0.155.0", "codex-cli 0.155.1", "codex-cli 0.156.1", "codex-cli 0.157.0", "codex-cli 0.157.1"]);
 var matcher = "^(Bash|apply_patch|ApplyPatch|functions\\.apply_patch)$";
 
 class CodexSafetyError extends Error {
@@ -41563,7 +41563,7 @@ function selectCodexSafety(discovery, configuration, home, cwd, featureEnabled,
   need5(selected.length !== 0, "guard_missing");
   need5(selected.length === 1, "guard_ambiguous");
   const hook = selected[0], binding = readiness ? nativeReadinessCommandBinding(hook.command) : nativeSafetyCommandBinding(hook.command);
-  need5(binding.home === home && (!readiness || binding?.provider === "codex") && hook.eventName === (readiness ? "sessionStart" : "preToolUse") && hook.handlerType === "command" && hook.matcher === (readiness ? "^(startup|resume|clear|fork)$" : matcher) && hook.timeoutSec === (readiness ? 20 : 10) && hook.async === false && hook.statusMessage === null && hook.additionalContextLimit === null && typeof hook.key === "string" && hook.key.length <= 4096 && typeof hook.sourcePath === "string" && isAbsolute17(hook.sourcePath) && hook.pluginId === null && hook.isManaged === false && ["user", "project"].includes(hook.source) && typeof hook.currentHash === "string" && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash), "guard_definition_invalid");
+  need5(binding.home === home && (!readiness || binding?.provider === "codex") && hook.eventName === (readiness ? "sessionStart" : "preToolUse") && hook.handlerType === "command" && hook.matcher === (readiness ? "^(startup|resume|clear|fork)$" : matcher) && hook.timeoutSec === (readiness ? TRASH_READINESS_NATIVE_TIMEOUT_SECONDS : 10) && hook.async === false && hook.statusMessage === null && hook.additionalContextLimit === null && typeof hook.key === "string" && hook.key.length <= 4096 && typeof hook.sourcePath === "string" && isAbsolute17(hook.sourcePath) && hook.pluginId === null && hook.isManaged === false && ["user", "project"].includes(hook.source) && typeof hook.currentHash === "string" && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash), "guard_definition_invalid");
   need5(typeof hook.enabled === "boolean" && ["trusted", "untrusted", "modified"].includes(hook.trustStatus), "guard_definition_invalid");
   if (requireReady) {
     need5(hook.enabled === true, "guard_disabled");

package/dist/native-readiness.d.ts

@@ -1,5 +1,8 @@
 import { type ReadinessChildResult, type ReadinessProcessOptions } from "./lib/readiness-process";
 export type ReadinessProvider = "claude" | "codex" | "sumi";
+export declare const TRASH_READINESS_DEFAULT_TIMEOUT_MS = 45000;
+export declare const TRASH_READINESS_MAX_TIMEOUT_MS = 60000;
+export declare const TRASH_READINESS_NATIVE_TIMEOUT_SECONDS: number;
 type Pin = {
     path: string;
     sha256: string;

package/dist/native-readiness.js

@@ -144,6 +144,9 @@ function runReadinessProcess(command, args, options) {
 import { closeSync, constants, fstatSync, lstatSync, openSync, readSync, realpathSync } from "fs";
 import { homedir } from "os";
 import { dirname, isAbsolute, join, relative, resolve } from "path";
+var TRASH_READINESS_DEFAULT_TIMEOUT_MS = 45000;
+var TRASH_READINESS_MAX_TIMEOUT_MS = 60000;
+var TRASH_READINESS_NATIVE_TIMEOUT_SECONDS = TRASH_READINESS_MAX_TIMEOUT_MS / 1000 + 5;
 
 class ReadinessError extends Error {
   code;
@@ -172,7 +175,7 @@ function inside(home, path) {
 function parseTrashReadinessBinding(input, provider, home) {
   const b = input;
   need(isReadinessProvider(provider) && absolute(home), "binding_invalid");
-  need(keys(b, ["schema", "provider", "home", "runtime", "trash", "plan", "timeoutMs"]) && b.schema === "hasna.hooks.trash-readiness/v1" && b.provider === provider && b.home === home && pin(b.runtime) && pin(b.plan) && keys(b.trash, ["root", "version", "cliSha256"]) && absolute(b.trash.root) && typeof b.trash.version === "string" && b.trash.version.length <= 128 && /^\d+\.\d+\.\d+$/.test(b.trash.version) && digest(b.trash.cliSha256) && Number.isInteger(b.timeoutMs) && b.timeoutMs >= 1000 && b.timeoutMs <= 15000 && inside(home, b.plan.path) && inside(home, b.trash.root), "binding_invalid");
+  need(keys(b, ["schema", "provider", "home", "runtime", "trash", "plan", "timeoutMs"]) && b.schema === "hasna.hooks.trash-readiness/v1" && b.provider === provider && b.home === home && pin(b.runtime) && pin(b.plan) && keys(b.trash, ["root", "version", "cliSha256"]) && absolute(b.trash.root) && typeof b.trash.version === "string" && b.trash.version.length <= 128 && /^\d+\.\d+\.\d+$/.test(b.trash.version) && digest(b.trash.cliSha256) && Number.isInteger(b.timeoutMs) && b.timeoutMs >= 1000 && b.timeoutMs <= TRASH_READINESS_MAX_TIMEOUT_MS && inside(home, b.plan.path) && inside(home, b.trash.root), "binding_invalid");
   return structuredClone(b);
 }
 function trashReadinessBindingPath(provider, home = homedir()) {
@@ -324,5 +327,8 @@ export {
   parseTrashReadinessBinding,
   isReadinessProvider,
   handleReadinessSessionStart,
-  checkTrashReadinessBinding
+  checkTrashReadinessBinding,
+  TRASH_READINESS_NATIVE_TIMEOUT_SECONDS,
+  TRASH_READINESS_MAX_TIMEOUT_MS,
+  TRASH_READINESS_DEFAULT_TIMEOUT_MS
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/hooks",
-  "version": "0.11.2",
+  "version": "0.11.4",
   "description": "Open source hooks library for AI coding agents - Install safety, quality, and automation hooks with a single command",
   "type": "module",
   "bin": {