@hasna/hooks 0.11.3 → 0.11.4

package/bin/index.js

@@ -732,19 +732,350 @@ var init_registry = __esm(() => {
   ];
 });
 
+// src/lib/readiness-process.ts
+import { spawn } from "child_process";
+function runReadinessProcess(command, args, options) {
+  if (!["darwin", "linux"].includes(process.platform)) {
+    return Promise.resolve({ status: null, error: { code: "ENOTSUP" }, stdout: "", stderr: "" });
+  }
+  if (options.signal?.aborted) {
+    return Promise.resolve({ status: null, error: { code: "ABORT_ERR" }, stdout: "", stderr: "" });
+  }
+  return new Promise((resolve2) => {
+    const child = spawn(command, ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install", "--eval", supervisor, "--", JSON.stringify({ command, args, maxBuffer: options.maxBuffer, timeout: options.timeout })], {
+      cwd: options.cwd,
+      env: options.env,
+      detached: true,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let status = null, error;
+    let stopping = false, exited = false, finished = false;
+    let stdout = "", stderr = "", control = "";
+    const maximumEnvelope = options.maxBuffer * 12 + 1024;
+    let cleanup;
+    const finish = () => {
+      if (finished)
+        return;
+      finished = true;
+      clearTimeout(deadline);
+      clearTimeout(cleanup);
+      options.signal?.removeEventListener("abort", abort);
+      child.stdin?.destroy();
+      child.stdout?.destroy();
+      child.stderr?.destroy();
+      resolve2({ status, error, stdout, stderr });
+    };
+    const stop = (code) => {
+      if (code && !finished)
+        error ??= { code };
+      if (finished || stopping)
+        return;
+      stopping = true;
+      if (exited || !child.pid) {
+        error ??= { code: "ECHILD" };
+      } else {
+        try {
+          child.stdin.end();
+        } catch {
+          error = { code: "ECHILD" };
+        }
+      }
+      cleanup = setTimeout(() => {
+        error = { code: "ECHILD" };
+        finish();
+      }, 1000);
+    };
+    const abort = () => stop("ABORT_ERR");
+    const deadline = setTimeout(() => stop("ETIMEDOUT"), options.timeout);
+    options.signal?.addEventListener("abort", abort, { once: true });
+    if (options.signal?.aborted)
+      abort();
+    child.stdin?.on("error", () => {
+      if (!stopping)
+        stop("ECHILD");
+    });
+    child.stdout?.on("data", (bytes) => {
+      if (stopping)
+        return;
+      control += bytes.toString("utf8");
+      if (Buffer.byteLength(control) > maximumEnvelope)
+        return stop("ENOBUFS");
+      if (!control.endsWith(`
+`))
+        return;
+      try {
+        const value = JSON.parse(control);
+        if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => !["status", "error", "stdout", "stderr"].includes(key)) || !(value.status === null || Number.isInteger(value.status) && value.status >= 0 && value.status <= 255) || typeof value.stdout !== "string" || typeof value.stderr !== "string" || Buffer.byteLength(value.stdout) > options.maxBuffer || Buffer.byteLength(value.stderr) > options.maxBuffer || value.error !== undefined && (Object.keys(value.error).join() !== "code" || !["ENOBUFS", "ECHILD"].includes(value.error.code))) {
+          return stop("EPROTO");
+        }
+        status = value.status;
+        stdout = value.stdout;
+        stderr = value.stderr;
+        stop(value.error?.code);
+      } catch {
+        stop("EPROTO");
+      }
+    });
+    child.stdout?.on("error", () => stop("EPROTO"));
+    child.stderr?.on("data", () => stop("ECHILD"));
+    child.stderr?.on("error", () => stop("ECHILD"));
+    child.on("error", () => {
+      error = { code: "ECHILD" };
+      stop();
+    });
+    child.on("exit", () => {
+      exited = true;
+      if (!stopping)
+        stop("ECHILD");
+    });
+    child.on("close", () => {
+      if (!stopping)
+        error = { code: "ECHILD" };
+      finish();
+    });
+  });
+}
+var supervisor;
+var init_readiness_process = __esm(() => {
+  supervisor = String.raw`
+  const {spawn}=require("node:child_process");
+  const spec=JSON.parse(process.argv.at(-1));
+  // This runtime was created detached and is its group's live leader. Its
+  // independent timer and parent pipe remain effective if the observer exits
+  // or its event loop stops responding. Only this freshly created tree is hit.
+  const cleanup=()=>{try{process.kill(-process.pid,"SIGKILL")}catch{process.exit(1)}};
+  setTimeout(cleanup,spec.timeout);
+  process.stdin.once("end",cleanup);
+  process.stdin.once("error",cleanup);
+  process.stdin.on("data",cleanup);
+  process.stdin.resume();
+  for(const signal of ["SIGTERM","SIGINT","SIGHUP"])process.once(signal,cleanup);
+  let done=false, out=Buffer.alloc(0), err=Buffer.alloc(0);
+  function report(status,error){
+    if(done)return; done=true;
+    process.stdout.write(JSON.stringify({status,error,stdout:out.toString("utf8"),stderr:err.toString("utf8")})+"\n");
+  }
+  const child=spawn(spec.command,spec.args,{stdio:["ignore","pipe","pipe"],env:process.env});
+  for(const [stream,name] of [[child.stdout,"stdout"],[child.stderr,"stderr"]]){
+    stream.on("data",bytes=>{
+      if(done)return;
+      const before=name==="stdout"?out:err;
+      if(before.length+bytes.length>spec.maxBuffer){report(null,{code:"ENOBUFS"});return}
+      if(name==="stdout")out=Buffer.concat([out,bytes]);else err=Buffer.concat([err,bytes]);
+    });
+    stream.on("error",()=>report(null,{code:"ECHILD"}));
+  }
+  child.on("error",()=>report(null,{code:"ECHILD"}));
+  // A successful observation includes complete streams. A nested client that
+  // keeps them open after its parent exits is a failure requiring group cleanup.
+  child.on("exit",()=>setTimeout(()=>report(null,{code:"ECHILD"}),100));
+  child.on("close",(status,signal)=>report(status,signal?{code:"ECHILD"}:undefined));
+`;
+});
+
+// src/native-readiness.ts
+var exports_native_readiness = {};
+__export(exports_native_readiness, {
+  trashReadinessBindingPath: () => trashReadinessBindingPath,
+  runTrashReadiness: () => runTrashReadiness,
+  readinessSessionStartOutput: () => readinessSessionStartOutput,
+  readinessContext: () => readinessContext,
+  readTrashReadinessBindingFile: () => readTrashReadinessBindingFile,
+  parseTrashReadinessBinding: () => parseTrashReadinessBinding,
+  isReadinessProvider: () => isReadinessProvider,
+  handleReadinessSessionStart: () => handleReadinessSessionStart,
+  checkTrashReadinessBinding: () => checkTrashReadinessBinding,
+  TRASH_READINESS_NATIVE_TIMEOUT_SECONDS: () => TRASH_READINESS_NATIVE_TIMEOUT_SECONDS,
+  TRASH_READINESS_MAX_TIMEOUT_MS: () => TRASH_READINESS_MAX_TIMEOUT_MS,
+  TRASH_READINESS_DEFAULT_TIMEOUT_MS: () => TRASH_READINESS_DEFAULT_TIMEOUT_MS
+});
+import { createHash } from "crypto";
+import { closeSync, constants, fstatSync, lstatSync, openSync, readSync, realpathSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname, isAbsolute, join as join2, relative, resolve as resolve2 } from "path";
+function need(value, code) {
+  if (!value)
+    throw new ReadinessError(code);
+}
+function isReadinessProvider(value) {
+  return value === "claude" || value === "codex" || value === "sumi";
+}
+function inside(home, path) {
+  const part = relative(home, path);
+  return part !== "" && part !== ".." && !part.startsWith("../") && !isAbsolute(part);
+}
+function parseTrashReadinessBinding(input, provider, home) {
+  const b = input;
+  need(isReadinessProvider(provider) && absolute(home), "binding_invalid");
+  need(keys(b, ["schema", "provider", "home", "runtime", "trash", "plan", "timeoutMs"]) && b.schema === "hasna.hooks.trash-readiness/v1" && b.provider === provider && b.home === home && pin(b.runtime) && pin(b.plan) && keys(b.trash, ["root", "version", "cliSha256"]) && absolute(b.trash.root) && typeof b.trash.version === "string" && b.trash.version.length <= 128 && /^\d+\.\d+\.\d+$/.test(b.trash.version) && digest(b.trash.cliSha256) && Number.isInteger(b.timeoutMs) && b.timeoutMs >= 1000 && b.timeoutMs <= TRASH_READINESS_MAX_TIMEOUT_MS && inside(home, b.plan.path) && inside(home, b.trash.root), "binding_invalid");
+  return structuredClone(b);
+}
+function trashReadinessBindingPath(provider, home = homedir2()) {
+  need(isReadinessProvider(provider) && absolute(home), "binding_invalid");
+  return join2(home, ".hasna", "hooks", "native", "trash-readiness", provider + ".json");
+}
+function readSafe(path, maximum, executable = false) {
+  need(absolute(path) && realpathSync(path) === path, "unsafe_path");
+  for (let parent = dirname(path);; parent = dirname(parent)) {
+    const stat = lstatSync(parent);
+    need(stat.isDirectory() && [0, process.getuid?.()].includes(stat.uid) && !(stat.mode & 18), "unsafe_path");
+    if (parent === dirname(parent))
+      break;
+  }
+  const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+  try {
+    const stat = fstatSync(fd);
+    need(stat.isFile() && [0, process.getuid?.()].includes(stat.uid) && !(stat.mode & 18) && stat.size <= maximum && (!executable || !!(stat.mode & 64)), "unsafe_path");
+    const bytes = Buffer.alloc(stat.size + 1);
+    let length = 0;
+    while (length < bytes.length) {
+      const count = readSync(fd, bytes, length, bytes.length - length, null);
+      if (!count)
+        break;
+      length += count;
+    }
+    const after = fstatSync(fd);
+    need(length === stat.size && after.size === stat.size && after.mtimeMs === stat.mtimeMs && after.ctimeMs === stat.ctimeMs, "file_changed");
+    return bytes.subarray(0, length);
+  } finally {
+    closeSync(fd);
+  }
+}
+function readTrashReadinessBindingFile(path, provider, home = realpathSync(homedir2())) {
+  const raw = readSafe(path, 65536);
+  return { binding: parseTrashReadinessBinding(JSON.parse(raw.toString("utf8")), provider, home), raw, sha256: sha(raw) };
+}
+async function runTrashReadiness(provider, d = {}) {
+  const started = performance.now();
+  const result = (code, extra = {}) => ({
+    schema: "hasna.hooks.trash-readiness-result/v1",
+    provider,
+    ready: code === "ready",
+    code,
+    nativeAdoptionVerified: false,
+    ...extra
+  });
+  let phase = "binding";
+  try {
+    const home = d.home ?? realpathSync(homedir2()), read = d.read ?? readSafe;
+    need(isReadinessProvider(provider), "binding_invalid");
+    const bindingPath = trashReadinessBindingPath(provider, home), bindingBytes = read(bindingPath, 65536);
+    const b = parseTrashReadinessBinding(JSON.parse(bindingBytes.toString("utf8")), provider, home);
+    phase = "consumer";
+    const checkPin = (p, maximum, executable = false) => {
+      const bytes = read(p.path, maximum, executable);
+      need(sha(bytes) === p.sha256, "file_changed");
+      return bytes;
+    };
+    checkPin(b.runtime, 200000000, true);
+    const manifestPath = join2(b.trash.root, "package.json"), manifestBytes = read(manifestPath, 65536);
+    const manifest = JSON.parse(manifestBytes.toString("utf8"));
+    need(manifest.name === "@hasna/trash" && manifest.version === b.trash.version && manifest.bin?.trash === "dist/cli/index.js", "package_mismatch");
+    const cli = join2(b.trash.root, "dist", "cli", "index.js");
+    checkPin({ path: cli, sha256: b.trash.cliSha256 }, 64 * 1024 * 1024, true);
+    const plan = JSON.parse(checkPin(b.plan, 65536).toString("utf8"));
+    need(plan?.schema === "hasna.trash.station-setup-plan/v1" && plan.stage === "ready" && plan.configurationReady === true && plan.nativeAdoptionVerified === false && digest(plan.planDigest) && plan.spec?.provider === provider && plan.spec.home === home && typeof plan.spec.station === "string" && /^[a-z0-9][a-z0-9-]{0,62}$/.test(plan.spec.station) && plan.spec.runtime?.path === b.runtime.path && plan.spec.runtime?.sha256 === b.runtime.sha256 && absolute(plan.spec.cwd) && (plan.spec.cwd === home || inside(home, plan.spec.cwd)) && typeof plan.spec.path === "string" && plan.spec.path.length <= 8192 && plan.spec.path.split(":").every(absolute), "plan_invalid");
+    const args = ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install", cli, "station", "check", "--plan", b.plan.path];
+    const remaining = () => Math.floor(b.timeoutMs - (performance.now() - started));
+    const timeout = remaining();
+    need(timeout > 0, "deadline_exceeded");
+    const child = await (d.spawn ?? runReadinessProcess)(b.runtime.path, args, {
+      cwd: home,
+      env: { HOME: home, PATH: plan.spec.path, LANG: "C", NO_COLOR: "1" },
+      timeout,
+      maxBuffer: 16384,
+      signal: d.signal
+    });
+    need(remaining() > 0, "deadline_exceeded");
+    if (child.error && "code" in child.error && child.error.code === "ETIMEDOUT")
+      return result("deadline_exceeded");
+    if (child.error || child.signal || child.status === null)
+      return result("execution_failed");
+    need(typeof child.stdout === "string" && typeof child.stderr === "string" && Buffer.byteLength(child.stdout) <= 16384 && Buffer.byteLength(child.stderr) <= 16384, "output_invalid");
+    let value;
+    try {
+      value = JSON.parse(child.stdout);
+    } catch {
+      return result("output_invalid");
+    }
+    if (child.status !== 0 || value?.configurationReady !== true) {
+      return result(safeFailureCodes.has(value?.code) ? value.code : "check_failed");
+    }
+    need(value.schema === "hasna.trash.station-setup-result/v1" && value.station === plan.spec.station && value.provider === provider && value.planDigest === plan.planDigest && value.serviceReady === true && value.guardVerified === true && value.managedInstructionsVerified === true && value.mcpConfigurationVerified === true && value.mcpExecutionVerified === false && value.nativeAdoptionVerified === false && child.stderr.length === 0, "output_invalid");
+    checkPin(b.plan, 65536);
+    checkPin({ path: cli, sha256: b.trash.cliSha256 }, 64 * 1024 * 1024, true);
+    checkPin(b.runtime, 200000000, true);
+    need(read(bindingPath, 65536).equals(bindingBytes) && read(manifestPath, 65536).equals(manifestBytes), "file_changed");
+    need(remaining() > 0, "deadline_exceeded");
+    return result("ready", { station: value.station, planDigest: value.planDigest });
+  } catch (error) {
+    return result(error instanceof ReadinessError ? error.code : phase === "binding" && error?.code === "ENOENT" ? "binding_missing" : "binding_invalid");
+  }
+}
+function checkTrashReadinessBinding(input) {
+  const home = realpathSync(homedir2()), b = parseTrashReadinessBinding(input, input?.provider, home);
+  const path = trashReadinessBindingPath(b.provider, home), raw = Buffer.from(JSON.stringify(b) + `
+`);
+  return runTrashReadiness(b.provider, { home, read: (selected, maximum, executable) => selected === path ? raw : readSafe(selected, maximum, executable) });
+}
+function readinessContext(result) {
+  return result.ready ? `Trash readiness verified for ${result.station} (${result.provider}). Use Trash for recoverable file removal.` : `Trash readiness needs attention (${result.provider}: ${result.code}). Preserve files; do not fall back to direct deletion. Refresh the station setup before removal.`;
+}
+function readinessSessionStartOutput(result) {
+  return { hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: readinessContext(result) } };
+}
+async function handleReadinessSessionStart(provider, event, dependencies = {}) {
+  const input = event;
+  if (!object(input) || input.hook_event_name !== "SessionStart" || !["startup", "resume", "clear", "fork", "compact"].includes(input.source)) {
+    return readinessSessionStartOutput({ schema: "hasna.hooks.trash-readiness-result/v1", provider, ready: false, code: "input_invalid", nativeAdoptionVerified: false });
+  }
+  if (input.source === "compact")
+    return {};
+  return readinessSessionStartOutput(await runTrashReadiness(provider, dependencies));
+}
+var TRASH_READINESS_DEFAULT_TIMEOUT_MS = 45000, TRASH_READINESS_MAX_TIMEOUT_MS = 60000, TRASH_READINESS_NATIVE_TIMEOUT_SECONDS, ReadinessError, sha = (value) => createHash("sha256").update(value).digest("hex"), digest = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), absolute = (v) => typeof v === "string" && v.length <= 4096 && isAbsolute(v) && resolve2(v) === v && !/[\0\r\n]/.test(v), object = (v) => v !== null && typeof v === "object" && !Array.isArray(v), keys = (v, expected) => object(v) && Object.keys(v).sort().join() === expected.sort().join(), pin = (v) => keys(v, ["path", "sha256"]) && absolute(v.path) && digest(v.sha256), safeFailureCodes;
+var init_native_readiness = __esm(() => {
+  init_readiness_process();
+  TRASH_READINESS_NATIVE_TIMEOUT_SECONDS = TRASH_READINESS_MAX_TIMEOUT_MS / 1000 + 5;
+  ReadinessError = class ReadinessError extends Error {
+    code;
+    constructor(code) {
+      super(code);
+      this.code = code;
+    }
+  };
+  safeFailureCodes = new Set([
+    "unsupported_platform",
+    "station_detection_failed",
+    "station_mismatch",
+    "hosted_unavailable",
+    "authentication_refused",
+    "station_setup_required",
+    "invalid_status",
+    "deadline_exceeded",
+    "retention_mismatch",
+    "managed_instructions_refused",
+    "removal_instruction_missing",
+    "instructions_changed",
+    "native_config_changed",
+    "guard_refused",
+    "owner_refused"
+  ]);
+});
+
 // src/config.ts
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 function getHooksDataDir() {
   return getEffectiveDataRoot();
 }
 function getCustomHooksDir() {
-  return join2(getHooksDataDir(), "hooks");
+  return join3(getHooksDataDir(), "hooks");
 }
 function getLockPath() {
   const explicit = process.env.HASNA_HOOKS_LOCK_PATH ?? process.env.HOOKS_LOCK_PATH;
   if (explicit)
     return explicit;
-  return join2(getHooksDataDir(), "hooks.lock");
+  return join3(getHooksDataDir(), "hooks.lock");
 }
 var init_config = __esm(() => {
   init_app_home();
@@ -774,8 +1105,8 @@ __export(exports_manifest, {
   ScriptContainmentError: () => ScriptContainmentError,
   HOOK_NAME_RE: () => HOOK_NAME_RE
 });
-import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from "fs";
-import { basename, dirname, isAbsolute, join as join3, normalize, resolve as resolve2, sep } from "path";
+import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, realpathSync as realpathSync2, writeFileSync } from "fs";
+import { basename, dirname as dirname2, isAbsolute as isAbsolute2, join as join4, normalize, resolve as resolve3, sep } from "path";
 import { z } from "zod";
 function parseManifest(json) {
   const parsed = JSON.parse(json);
@@ -791,8 +1122,8 @@ function isWithin(child, parent) {
   return child === parent || child.startsWith(parent + sep);
 }
 function assertContainedLexical(target, root, raw) {
-  const lexical = resolve2(target);
-  const rootLexical = resolve2(root);
+  const lexical = resolve3(target);
+  const rootLexical = resolve3(root);
   if (!isWithin(lexical, rootLexical)) {
     throw new ScriptContainmentError(target, root, raw);
   }
@@ -802,16 +1133,16 @@ function realpathNearest(path) {
   const tail = [];
   let cur = path;
   while (!existsSync2(cur)) {
-    const parent = dirname(cur);
+    const parent = dirname2(cur);
     if (parent === cur)
       break;
     tail.unshift(basename(cur));
     cur = parent;
   }
-  return join3(realpathSync(cur), ...tail);
+  return join4(realpathSync2(cur), ...tail);
 }
 function assertContainedReal(root, target, raw) {
-  const rootReal = realpathSync(root);
+  const rootReal = realpathSync2(root);
   const targetReal = realpathNearest(target);
   if (!isWithin(targetReal, rootReal)) {
     throw new ScriptContainmentError(target, root, raw);
@@ -832,7 +1163,7 @@ function scriptRelFor(manifest) {
     return `script${ext}`;
   }
   const rel = normalize(manifest.script);
-  if (isAbsolute(rel)) {
+  if (isAbsolute2(rel)) {
     throw new Error(`manifest script must be relative or inline, got absolute path '${manifest.script}'`);
   }
   return rel;
@@ -841,25 +1172,25 @@ function resolveScript(manifest, manifestDir) {
   if (isInlineScript(manifest))
     return { path: scriptRelFor(manifest), content: manifest.script };
   const rel = scriptRelFor(manifest);
-  const resolved = assertContained(join3(manifestDir, rel), manifestDir, manifest.script);
+  const resolved = assertContained(join4(manifestDir, rel), manifestDir, manifest.script);
   if (!existsSync2(resolved)) {
     throw new Error(`manifest script file not found: ${resolved}`);
   }
   return { path: rel, content: readFileSync(resolved, "utf-8") };
 }
 function customHookDir(name) {
-  return join3(getCustomHooksDir(), shortManifestName(name));
+  return join4(getCustomHooksDir(), shortManifestName(name));
 }
 function readCustomManifest(name) {
   const dir = customHookDir(name);
-  const manifestPath = join3(dir, "manifest.json");
+  const manifestPath = join4(dir, "manifest.json");
   if (!existsSync2(manifestPath))
     return;
   try {
     const manifest = parseManifest(readFileSync(manifestPath, "utf-8"));
     const script = resolveScript(manifest, dir);
     const scriptIsInline = isInlineScript(manifest);
-    return { manifest, scriptPath: join3(dir, script.path), scriptContent: script.content, scriptIsInline };
+    return { manifest, scriptPath: join4(dir, script.path), scriptContent: script.content, scriptIsInline };
   } catch (err) {
     if (err instanceof ScriptContainmentError)
       throw err;
@@ -880,18 +1211,18 @@ function listCustomHooks() {
 }
 function writeCustomHook(name, manifest, scriptContent, scriptRelPath) {
   const dir = customHookDir(name);
-  if (isAbsolute(scriptRelPath)) {
+  if (isAbsolute2(scriptRelPath)) {
     throw new ScriptContainmentError(scriptRelPath, dir);
   }
-  const scriptPath = scriptRelPath.includes("/") ? join3(dir, scriptRelPath) : join3(dir, scriptRelPath);
+  const scriptPath = scriptRelPath.includes("/") ? join4(dir, scriptRelPath) : join4(dir, scriptRelPath);
   assertContainedLexical(scriptPath, dir, scriptRelPath);
   mkdirSync(dir, { recursive: true });
   assertContainedReal(dir, scriptPath, scriptRelPath);
-  const scriptDir = dirname(scriptPath);
+  const scriptDir = dirname2(scriptPath);
   if (scriptDir !== dir)
     mkdirSync(scriptDir, { recursive: true });
   writeFileSync(scriptPath, scriptContent, "utf-8");
-  writeFileSync(join3(dir, "manifest.json"), JSON.stringify(manifest, null, 2) + `
+  writeFileSync(join4(dir, "manifest.json"), JSON.stringify(manifest, null, 2) + `
 `, "utf-8");
   return { dir, scriptPath };
 }
@@ -935,14 +1266,14 @@ __export(exports_resolve, {
   resolveHook: () => resolveHook,
   resolveBundledHooksDir: () => resolveBundledHooksDir
 });
-import { dirname as dirname2, join as join4 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 import { existsSync as existsSync3 } from "fs";
 import { fileURLToPath } from "url";
-function resolveBundledHooksDir(moduleDir = dirname2(fileURLToPath(import.meta.url))) {
-  const sourceLayout = join4(moduleDir, "..", "..", "hooks");
-  if (existsSync3(join4(sourceLayout, "hook-gitguard")))
+function resolveBundledHooksDir(moduleDir = dirname3(fileURLToPath(import.meta.url))) {
+  const sourceLayout = join5(moduleDir, "..", "..", "hooks");
+  if (existsSync3(join5(sourceLayout, "hook-gitguard")))
     return sourceLayout;
-  return join4(moduleDir, "..", "hooks");
+  return join5(moduleDir, "..", "hooks");
 }
 function resolveHookDir(name) {
   const custom = readCustomManifest(name);
@@ -953,10 +1284,10 @@ function resolveHookDir(name) {
     return;
   const short = shortManifestName(name);
   const bundledBase = resolveBundledHooksDir();
-  const direct = join4(bundledBase, short);
+  const direct = join5(bundledBase, short);
   if (existsSync3(direct))
     return direct;
-  const prefixed = join4(bundledBase, `hook-${short}`);
+  const prefixed = join5(bundledBase, `hook-${short}`);
   return existsSync3(prefixed) ? prefixed : undefined;
 }
 function resolveScriptPath(name) {
@@ -966,7 +1297,7 @@ function resolveScriptPath(name) {
   const dir = resolveHookDir(name);
   if (!dir)
     return;
-  const script = join4(dir, "src", "hook.ts");
+  const script = join5(dir, "src", "hook.ts");
   return existsSync3(script) ? script : undefined;
 }
 function resolveHookMeta(name) {
@@ -1023,15 +1354,15 @@ var init_resolve = __esm(() => {
 });
 
 // src/lib/native-safety.ts
-import { createHash } from "crypto";
-import { closeSync, constants, existsSync as existsSync4, fstatSync, lstatSync, openSync, readFileSync as readFileSync2, realpathSync as realpathSync2 } from "fs";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join5 } from "path";
-import { homedir as homedir2 } from "os";
+import { createHash as createHash2 } from "crypto";
+import { closeSync as closeSync2, constants as constants2, existsSync as existsSync4, fstatSync as fstatSync2, lstatSync as lstatSync2, openSync as openSync2, readFileSync as readFileSync2, realpathSync as realpathSync3 } from "fs";
+import { dirname as dirname4, isAbsolute as isAbsolute3, join as join6 } from "path";
+import { homedir as homedir3 } from "os";
 function isNativeSafetyName(name) {
   return name === "trash-guard" || name === "workspace-repos-guard";
 }
 function validateBinding(b) {
-  if (!b || !isNativeSafetyName(b.name) || ![b.runtime, b.worker, b.home].every((p) => typeof p === "string" && isAbsolute2(p) && !/[\0\r\n]/.test(p)) || ![b.runtimeSHA256, b.workerSHA256].every((h) => /^[0-9a-f]{64}$/.test(h)) || typeof b.path !== "string" || b.path.split(":").some((p) => !isAbsolute2(p) || /[\0\r\n]/.test(p)))
+  if (!b || !isNativeSafetyName(b.name) || ![b.runtime, b.worker, b.home].every((p) => typeof p === "string" && isAbsolute3(p) && !/[\0\r\n]/.test(p)) || ![b.runtimeSHA256, b.workerSHA256].every((h) => /^[0-9a-f]{64}$/.test(h)) || typeof b.path !== "string" || b.path.split(":").some((p) => !isAbsolute3(p) || /[\0\r\n]/.test(p)))
     throw new Error("Invalid native safety binding");
 }
 function buildNativeSafetyCommand(binding) {
@@ -1056,27 +1387,27 @@ function nativeSafetyCommandBinding(command) {
   }
 }
 function pinEligibleFile(file, maximum, executable = false) {
-  if (!isAbsolute2(file) || realpathSync2(file) !== file)
+  if (!isAbsolute3(file) || realpathSync3(file) !== file)
     throw new Error("Native safety requires canonical files");
-  for (let parent = dirname3(file);; ) {
-    const s = lstatSync(parent);
+  for (let parent = dirname4(file);; ) {
+    const s = lstatSync2(parent);
     if (!s.isDirectory() || ![0, process.getuid()].includes(s.uid) || s.mode & 18)
       throw new Error("Native safety requires trusted, non-writable file ancestry");
-    if (parent === dirname3(parent))
+    if (parent === dirname4(parent))
       break;
-    parent = dirname3(parent);
+    parent = dirname4(parent);
   }
-  const fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+  const fd = openSync2(file, constants2.O_RDONLY | constants2.O_NOFOLLOW);
   try {
-    const s = fstatSync(fd);
+    const s = fstatSync2(fd);
     if (!s.isFile() || ![0, process.getuid()].includes(s.uid) || s.mode & 18 || s.size > maximum || executable && !(s.mode & 64))
       throw new Error("Native safety requires an eligible installed file");
     const bytes = readFileSync2(fd);
     if (bytes.length > maximum)
       throw new Error("Native safety file exceeds its bound");
-    return createHash("sha256").update(bytes).digest("hex");
+    return createHash2("sha256").update(bytes).digest("hex");
   } finally {
-    closeSync(fd);
+    closeSync2(fd);
   }
 }
 function pinVerified(file, expected, maximum, executable = false) {
@@ -1093,14 +1424,14 @@ function nativeSafetyBindingVerified(command) {
   return pinVerified(binding.runtime, binding.runtimeSHA256, 200000000, true) && pinVerified(binding.worker, binding.workerSHA256, 256000);
 }
 function installedNativeSafetyCommand(name) {
-  const home = realpathSync2(homedir2());
-  const runtime = realpathSync2(process.execPath);
-  const candidates = [join5(import.meta.dir, "../../bin/native-safety-entry.js"), join5(import.meta.dir, "../bin/native-safety-entry.js"), join5(import.meta.dir, "native-safety-entry.js")];
+  const home = realpathSync3(homedir3());
+  const runtime = realpathSync3(process.execPath);
+  const candidates = [join6(import.meta.dir, "../../bin/native-safety-entry.js"), join6(import.meta.dir, "../bin/native-safety-entry.js"), join6(import.meta.dir, "native-safety-entry.js")];
   const worker = candidates.find(existsSync4);
   if (!worker)
     throw new Error("Bundled native safety runner is missing; build or reinstall @hasna/hooks before installing its guards.");
-  const canonicalWorker = realpathSync2(worker);
-  return buildNativeSafetyCommand({ name, runtime, runtimeSHA256: pinEligibleFile(runtime, 200000000, true), worker: canonicalWorker, workerSHA256: pinEligibleFile(canonicalWorker, 256000), home, path: `${dirname3(runtime)}:${join5(home, ".bun/bin")}:/usr/local/bin:/usr/bin:/bin` });
+  const canonicalWorker = realpathSync3(worker);
+  return buildNativeSafetyCommand({ name, runtime, runtimeSHA256: pinEligibleFile(runtime, 200000000, true), worker: canonicalWorker, workerSHA256: pinEligibleFile(canonicalWorker, 256000), home, path: `${dirname4(runtime)}:${join6(home, ".bun/bin")}:/usr/local/bin:/usr/bin:/bin` });
 }
 var supervisorSource, quote = (value) => "'" + value.replaceAll("'", "'\\''") + "'", program, shell, prefix;
 var init_native_safety = __esm(() => {
@@ -1171,333 +1502,6 @@ if [ "$result" -ne 0 ]; then printf '%s\\n' 'Native safety guard refused: verifi
   prefix = `/usr/bin/env -i /bin/sh -c ${quote(shell)} hasna-native-safety-v1 `;
 });
 
-// src/lib/readiness-process.ts
-import { spawn } from "child_process";
-function runReadinessProcess(command, args, options) {
-  if (!["darwin", "linux"].includes(process.platform)) {
-    return Promise.resolve({ status: null, error: { code: "ENOTSUP" }, stdout: "", stderr: "" });
-  }
-  if (options.signal?.aborted) {
-    return Promise.resolve({ status: null, error: { code: "ABORT_ERR" }, stdout: "", stderr: "" });
-  }
-  return new Promise((resolve3) => {
-    const child = spawn(command, ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install", "--eval", supervisor, "--", JSON.stringify({ command, args, maxBuffer: options.maxBuffer, timeout: options.timeout })], {
-      cwd: options.cwd,
-      env: options.env,
-      detached: true,
-      stdio: ["pipe", "pipe", "pipe"]
-    });
-    let status = null, error;
-    let stopping = false, exited = false, finished = false;
-    let stdout = "", stderr = "", control = "";
-    const maximumEnvelope = options.maxBuffer * 12 + 1024;
-    let cleanup;
-    const finish = () => {
-      if (finished)
-        return;
-      finished = true;
-      clearTimeout(deadline);
-      clearTimeout(cleanup);
-      options.signal?.removeEventListener("abort", abort);
-      child.stdin?.destroy();
-      child.stdout?.destroy();
-      child.stderr?.destroy();
-      resolve3({ status, error, stdout, stderr });
-    };
-    const stop = (code) => {
-      if (code && !finished)
-        error ??= { code };
-      if (finished || stopping)
-        return;
-      stopping = true;
-      if (exited || !child.pid) {
-        error ??= { code: "ECHILD" };
-      } else {
-        try {
-          child.stdin.end();
-        } catch {
-          error = { code: "ECHILD" };
-        }
-      }
-      cleanup = setTimeout(() => {
-        error = { code: "ECHILD" };
-        finish();
-      }, 1000);
-    };
-    const abort = () => stop("ABORT_ERR");
-    const deadline = setTimeout(() => stop("ETIMEDOUT"), options.timeout);
-    options.signal?.addEventListener("abort", abort, { once: true });
-    if (options.signal?.aborted)
-      abort();
-    child.stdin?.on("error", () => {
-      if (!stopping)
-        stop("ECHILD");
-    });
-    child.stdout?.on("data", (bytes) => {
-      if (stopping)
-        return;
-      control += bytes.toString("utf8");
-      if (Buffer.byteLength(control) > maximumEnvelope)
-        return stop("ENOBUFS");
-      if (!control.endsWith(`
-`))
-        return;
-      try {
-        const value = JSON.parse(control);
-        if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => !["status", "error", "stdout", "stderr"].includes(key)) || !(value.status === null || Number.isInteger(value.status) && value.status >= 0 && value.status <= 255) || typeof value.stdout !== "string" || typeof value.stderr !== "string" || Buffer.byteLength(value.stdout) > options.maxBuffer || Buffer.byteLength(value.stderr) > options.maxBuffer || value.error !== undefined && (Object.keys(value.error).join() !== "code" || !["ENOBUFS", "ECHILD"].includes(value.error.code))) {
-          return stop("EPROTO");
-        }
-        status = value.status;
-        stdout = value.stdout;
-        stderr = value.stderr;
-        stop(value.error?.code);
-      } catch {
-        stop("EPROTO");
-      }
-    });
-    child.stdout?.on("error", () => stop("EPROTO"));
-    child.stderr?.on("data", () => stop("ECHILD"));
-    child.stderr?.on("error", () => stop("ECHILD"));
-    child.on("error", () => {
-      error = { code: "ECHILD" };
-      stop();
-    });
-    child.on("exit", () => {
-      exited = true;
-      if (!stopping)
-        stop("ECHILD");
-    });
-    child.on("close", () => {
-      if (!stopping)
-        error = { code: "ECHILD" };
-      finish();
-    });
-  });
-}
-var supervisor;
-var init_readiness_process = __esm(() => {
-  supervisor = String.raw`
-  const {spawn}=require("node:child_process");
-  const spec=JSON.parse(process.argv.at(-1));
-  // This runtime was created detached and is its group's live leader. Its
-  // independent timer and parent pipe remain effective if the observer exits
-  // or its event loop stops responding. Only this freshly created tree is hit.
-  const cleanup=()=>{try{process.kill(-process.pid,"SIGKILL")}catch{process.exit(1)}};
-  setTimeout(cleanup,spec.timeout);
-  process.stdin.once("end",cleanup);
-  process.stdin.once("error",cleanup);
-  process.stdin.on("data",cleanup);
-  process.stdin.resume();
-  for(const signal of ["SIGTERM","SIGINT","SIGHUP"])process.once(signal,cleanup);
-  let done=false, out=Buffer.alloc(0), err=Buffer.alloc(0);
-  function report(status,error){
-    if(done)return; done=true;
-    process.stdout.write(JSON.stringify({status,error,stdout:out.toString("utf8"),stderr:err.toString("utf8")})+"\n");
-  }
-  const child=spawn(spec.command,spec.args,{stdio:["ignore","pipe","pipe"],env:process.env});
-  for(const [stream,name] of [[child.stdout,"stdout"],[child.stderr,"stderr"]]){
-    stream.on("data",bytes=>{
-      if(done)return;
-      const before=name==="stdout"?out:err;
-      if(before.length+bytes.length>spec.maxBuffer){report(null,{code:"ENOBUFS"});return}
-      if(name==="stdout")out=Buffer.concat([out,bytes]);else err=Buffer.concat([err,bytes]);
-    });
-    stream.on("error",()=>report(null,{code:"ECHILD"}));
-  }
-  child.on("error",()=>report(null,{code:"ECHILD"}));
-  // A successful observation includes complete streams. A nested client that
-  // keeps them open after its parent exits is a failure requiring group cleanup.
-  child.on("exit",()=>setTimeout(()=>report(null,{code:"ECHILD"}),100));
-  child.on("close",(status,signal)=>report(status,signal?{code:"ECHILD"}:undefined));
-`;
-});
-
-// src/native-readiness.ts
-var exports_native_readiness = {};
-__export(exports_native_readiness, {
-  trashReadinessBindingPath: () => trashReadinessBindingPath,
-  runTrashReadiness: () => runTrashReadiness,
-  readinessSessionStartOutput: () => readinessSessionStartOutput,
-  readinessContext: () => readinessContext,
-  readTrashReadinessBindingFile: () => readTrashReadinessBindingFile,
-  parseTrashReadinessBinding: () => parseTrashReadinessBinding,
-  isReadinessProvider: () => isReadinessProvider,
-  handleReadinessSessionStart: () => handleReadinessSessionStart,
-  checkTrashReadinessBinding: () => checkTrashReadinessBinding
-});
-import { createHash as createHash2 } from "crypto";
-import { closeSync as closeSync2, constants as constants2, fstatSync as fstatSync2, lstatSync as lstatSync2, openSync as openSync2, readSync, realpathSync as realpathSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { dirname as dirname4, isAbsolute as isAbsolute3, join as join6, relative, resolve as resolve3 } from "path";
-function need(value, code) {
-  if (!value)
-    throw new ReadinessError(code);
-}
-function isReadinessProvider(value) {
-  return value === "claude" || value === "codex" || value === "sumi";
-}
-function inside(home, path) {
-  const part = relative(home, path);
-  return part !== "" && part !== ".." && !part.startsWith("../") && !isAbsolute3(part);
-}
-function parseTrashReadinessBinding(input, provider, home) {
-  const b = input;
-  need(isReadinessProvider(provider) && absolute(home), "binding_invalid");
-  need(keys(b, ["schema", "provider", "home", "runtime", "trash", "plan", "timeoutMs"]) && b.schema === "hasna.hooks.trash-readiness/v1" && b.provider === provider && b.home === home && pin(b.runtime) && pin(b.plan) && keys(b.trash, ["root", "version", "cliSha256"]) && absolute(b.trash.root) && typeof b.trash.version === "string" && b.trash.version.length <= 128 && /^\d+\.\d+\.\d+$/.test(b.trash.version) && digest(b.trash.cliSha256) && Number.isInteger(b.timeoutMs) && b.timeoutMs >= 1000 && b.timeoutMs <= 15000 && inside(home, b.plan.path) && inside(home, b.trash.root), "binding_invalid");
-  return structuredClone(b);
-}
-function trashReadinessBindingPath(provider, home = homedir3()) {
-  need(isReadinessProvider(provider) && absolute(home), "binding_invalid");
-  return join6(home, ".hasna", "hooks", "native", "trash-readiness", provider + ".json");
-}
-function readSafe(path, maximum, executable = false) {
-  need(absolute(path) && realpathSync3(path) === path, "unsafe_path");
-  for (let parent = dirname4(path);; parent = dirname4(parent)) {
-    const stat = lstatSync2(parent);
-    need(stat.isDirectory() && [0, process.getuid?.()].includes(stat.uid) && !(stat.mode & 18), "unsafe_path");
-    if (parent === dirname4(parent))
-      break;
-  }
-  const fd = openSync2(path, constants2.O_RDONLY | constants2.O_NOFOLLOW | constants2.O_NONBLOCK);
-  try {
-    const stat = fstatSync2(fd);
-    need(stat.isFile() && [0, process.getuid?.()].includes(stat.uid) && !(stat.mode & 18) && stat.size <= maximum && (!executable || !!(stat.mode & 64)), "unsafe_path");
-    const bytes = Buffer.alloc(stat.size + 1);
-    let length = 0;
-    while (length < bytes.length) {
-      const count = readSync(fd, bytes, length, bytes.length - length, null);
-      if (!count)
-        break;
-      length += count;
-    }
-    const after = fstatSync2(fd);
-    need(length === stat.size && after.size === stat.size && after.mtimeMs === stat.mtimeMs && after.ctimeMs === stat.ctimeMs, "file_changed");
-    return bytes.subarray(0, length);
-  } finally {
-    closeSync2(fd);
-  }
-}
-function readTrashReadinessBindingFile(path, provider, home = realpathSync3(homedir3())) {
-  const raw = readSafe(path, 65536);
-  return { binding: parseTrashReadinessBinding(JSON.parse(raw.toString("utf8")), provider, home), raw, sha256: sha(raw) };
-}
-async function runTrashReadiness(provider, d = {}) {
-  const started = performance.now();
-  const result = (code, extra = {}) => ({
-    schema: "hasna.hooks.trash-readiness-result/v1",
-    provider,
-    ready: code === "ready",
-    code,
-    nativeAdoptionVerified: false,
-    ...extra
-  });
-  let phase = "binding";
-  try {
-    const home = d.home ?? realpathSync3(homedir3()), read = d.read ?? readSafe;
-    need(isReadinessProvider(provider), "binding_invalid");
-    const bindingPath = trashReadinessBindingPath(provider, home), bindingBytes = read(bindingPath, 65536);
-    const b = parseTrashReadinessBinding(JSON.parse(bindingBytes.toString("utf8")), provider, home);
-    phase = "consumer";
-    const checkPin = (p, maximum, executable = false) => {
-      const bytes = read(p.path, maximum, executable);
-      need(sha(bytes) === p.sha256, "file_changed");
-      return bytes;
-    };
-    checkPin(b.runtime, 200000000, true);
-    const manifestPath = join6(b.trash.root, "package.json"), manifestBytes = read(manifestPath, 65536);
-    const manifest = JSON.parse(manifestBytes.toString("utf8"));
-    need(manifest.name === "@hasna/trash" && manifest.version === b.trash.version && manifest.bin?.trash === "dist/cli/index.js", "package_mismatch");
-    const cli = join6(b.trash.root, "dist", "cli", "index.js");
-    checkPin({ path: cli, sha256: b.trash.cliSha256 }, 64 * 1024 * 1024, true);
-    const plan = JSON.parse(checkPin(b.plan, 65536).toString("utf8"));
-    need(plan?.schema === "hasna.trash.station-setup-plan/v1" && plan.stage === "ready" && plan.configurationReady === true && plan.nativeAdoptionVerified === false && digest(plan.planDigest) && plan.spec?.provider === provider && plan.spec.home === home && typeof plan.spec.station === "string" && /^[a-z0-9][a-z0-9-]{0,62}$/.test(plan.spec.station) && plan.spec.runtime?.path === b.runtime.path && plan.spec.runtime?.sha256 === b.runtime.sha256 && absolute(plan.spec.cwd) && (plan.spec.cwd === home || inside(home, plan.spec.cwd)) && typeof plan.spec.path === "string" && plan.spec.path.length <= 8192 && plan.spec.path.split(":").every(absolute), "plan_invalid");
-    const args = ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install", cli, "station", "check", "--plan", b.plan.path];
-    const remaining = () => Math.floor(b.timeoutMs - (performance.now() - started));
-    const timeout = remaining();
-    need(timeout > 0, "deadline_exceeded");
-    const child = await (d.spawn ?? runReadinessProcess)(b.runtime.path, args, {
-      cwd: home,
-      env: { HOME: home, PATH: plan.spec.path, LANG: "C", NO_COLOR: "1" },
-      timeout,
-      maxBuffer: 16384,
-      signal: d.signal
-    });
-    need(remaining() > 0, "deadline_exceeded");
-    if (child.error && "code" in child.error && child.error.code === "ETIMEDOUT")
-      return result("deadline_exceeded");
-    if (child.error || child.signal || child.status === null)
-      return result("execution_failed");
-    need(typeof child.stdout === "string" && typeof child.stderr === "string" && Buffer.byteLength(child.stdout) <= 16384 && Buffer.byteLength(child.stderr) <= 16384, "output_invalid");
-    let value;
-    try {
-      value = JSON.parse(child.stdout);
-    } catch {
-      return result("output_invalid");
-    }
-    if (child.status !== 0 || value?.configurationReady !== true) {
-      return result(safeFailureCodes.has(value?.code) ? value.code : "check_failed");
-    }
-    need(value.schema === "hasna.trash.station-setup-result/v1" && value.station === plan.spec.station && value.provider === provider && value.planDigest === plan.planDigest && value.serviceReady === true && value.guardVerified === true && value.managedInstructionsVerified === true && value.mcpConfigurationVerified === true && value.mcpExecutionVerified === false && value.nativeAdoptionVerified === false && child.stderr.length === 0, "output_invalid");
-    checkPin(b.plan, 65536);
-    checkPin({ path: cli, sha256: b.trash.cliSha256 }, 64 * 1024 * 1024, true);
-    checkPin(b.runtime, 200000000, true);
-    need(read(bindingPath, 65536).equals(bindingBytes) && read(manifestPath, 65536).equals(manifestBytes), "file_changed");
-    need(remaining() > 0, "deadline_exceeded");
-    return result("ready", { station: value.station, planDigest: value.planDigest });
-  } catch (error) {
-    return result(error instanceof ReadinessError ? error.code : phase === "binding" && error?.code === "ENOENT" ? "binding_missing" : "binding_invalid");
-  }
-}
-function checkTrashReadinessBinding(input) {
-  const home = realpathSync3(homedir3()), b = parseTrashReadinessBinding(input, input?.provider, home);
-  const path = trashReadinessBindingPath(b.provider, home), raw = Buffer.from(JSON.stringify(b) + `
-`);
-  return runTrashReadiness(b.provider, { home, read: (selected, maximum, executable) => selected === path ? raw : readSafe(selected, maximum, executable) });
-}
-function readinessContext(result) {
-  return result.ready ? `Trash readiness verified for ${result.station} (${result.provider}). Use Trash for recoverable file removal.` : `Trash readiness needs attention (${result.provider}: ${result.code}). Preserve files; do not fall back to direct deletion. Refresh the station setup before removal.`;
-}
-function readinessSessionStartOutput(result) {
-  return { hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: readinessContext(result) } };
-}
-async function handleReadinessSessionStart(provider, event, dependencies = {}) {
-  const input = event;
-  if (!object(input) || input.hook_event_name !== "SessionStart" || !["startup", "resume", "clear", "fork", "compact"].includes(input.source)) {
-    return readinessSessionStartOutput({ schema: "hasna.hooks.trash-readiness-result/v1", provider, ready: false, code: "input_invalid", nativeAdoptionVerified: false });
-  }
-  if (input.source === "compact")
-    return {};
-  return readinessSessionStartOutput(await runTrashReadiness(provider, dependencies));
-}
-var ReadinessError, sha = (value) => createHash2("sha256").update(value).digest("hex"), digest = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), absolute = (v) => typeof v === "string" && v.length <= 4096 && isAbsolute3(v) && resolve3(v) === v && !/[\0\r\n]/.test(v), object = (v) => v !== null && typeof v === "object" && !Array.isArray(v), keys = (v, expected) => object(v) && Object.keys(v).sort().join() === expected.sort().join(), pin = (v) => keys(v, ["path", "sha256"]) && absolute(v.path) && digest(v.sha256), safeFailureCodes;
-var init_native_readiness = __esm(() => {
-  init_readiness_process();
-  ReadinessError = class ReadinessError extends Error {
-    code;
-    constructor(code) {
-      super(code);
-      this.code = code;
-    }
-  };
-  safeFailureCodes = new Set([
-    "unsupported_platform",
-    "station_detection_failed",
-    "station_mismatch",
-    "hosted_unavailable",
-    "authentication_refused",
-    "station_setup_required",
-    "invalid_status",
-    "deadline_exceeded",
-    "retention_mismatch",
-    "managed_instructions_refused",
-    "removal_instruction_missing",
-    "instructions_changed",
-    "native_config_changed",
-    "guard_refused",
-    "owner_refused"
-  ]);
-});
-
 // src/lib/native-readiness-command.ts
 import { createHash as createHash3 } from "crypto";
 import { constants as constants3, closeSync as closeSync3, existsSync as existsSync5, fstatSync as fstatSync3, lstatSync as lstatSync3, openSync as openSync3, readFileSync as readFileSync3, realpathSync as realpathSync4 } from "fs";
@@ -33965,7 +33969,7 @@ function registerHook(name, scope = "global", target = "claude", profile, mement
     name,
     event: "SessionStart",
     matcher: "^(startup|resume|clear|fork)$",
-    timeoutSeconds: 20,
+    timeoutSeconds: TRASH_READINESS_NATIVE_TIMEOUT_SECONDS,
     displayName: "Trash Readiness",
     description: "Read-only native startup readiness",
     version: "0.1.0",
@@ -34351,6 +34355,7 @@ function uninstallHook(name, scope = "global", target = "claude") {
 var __dirname2, HOOKS_DIR, EVENT_MAP, settingsPreimages, getInstalledHooks, JSON_SETTINGS_TARGETS;
 var init_installer = __esm(() => {
   init_registry();
+  init_native_readiness();
   init_resolve();
   init_manifest();
   init_registration();
@@ -35177,7 +35182,7 @@ function selectCodexSafety(discovery, configuration, home, cwd, featureEnabled,
   need8(selected.length !== 0, "guard_missing");
   need8(selected.length === 1, "guard_ambiguous");
   const hook = selected[0], binding = readiness ? nativeReadinessCommandBinding(hook.command) : nativeSafetyCommandBinding(hook.command);
-  need8(binding.home === home && (!readiness || binding?.provider === "codex") && hook.eventName === (readiness ? "sessionStart" : "preToolUse") && hook.handlerType === "command" && hook.matcher === (readiness ? "^(startup|resume|clear|fork)$" : matcher) && hook.timeoutSec === (readiness ? 20 : 10) && hook.async === false && hook.statusMessage === null && hook.additionalContextLimit === null && typeof hook.key === "string" && hook.key.length <= 4096 && typeof hook.sourcePath === "string" && isAbsolute18(hook.sourcePath) && hook.pluginId === null && hook.isManaged === false && ["user", "project"].includes(hook.source) && typeof hook.currentHash === "string" && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash), "guard_definition_invalid");
+  need8(binding.home === home && (!readiness || binding?.provider === "codex") && hook.eventName === (readiness ? "sessionStart" : "preToolUse") && hook.handlerType === "command" && hook.matcher === (readiness ? "^(startup|resume|clear|fork)$" : matcher) && hook.timeoutSec === (readiness ? TRASH_READINESS_NATIVE_TIMEOUT_SECONDS : 10) && hook.async === false && hook.statusMessage === null && hook.additionalContextLimit === null && typeof hook.key === "string" && hook.key.length <= 4096 && typeof hook.sourcePath === "string" && isAbsolute18(hook.sourcePath) && hook.pluginId === null && hook.isManaged === false && ["user", "project"].includes(hook.source) && typeof hook.currentHash === "string" && /^sha256:[a-f0-9]{64}$/.test(hook.currentHash), "guard_definition_invalid");
   need8(typeof hook.enabled === "boolean" && ["trusted", "untrusted", "modified"].includes(hook.trustStatus), "guard_definition_invalid");
   if (requireReady) {
     need8(hook.enabled === true, "guard_disabled");
@@ -35248,6 +35253,7 @@ var init_codex_safety_check = __esm(() => {
   init_native_safety();
   init_native_readiness_command();
   init_native_safety2();
+  init_native_readiness();
   versions = new Set(["codex-cli 0.153.0", "codex-cli 0.154.0", "codex-cli 0.154.0-alpha.6.1", "codex-cli 0.155.0", "codex-cli 0.155.1", "codex-cli 0.156.1", "codex-cli 0.157.0", "codex-cli 0.157.1"]);
   CodexSafetyError = class CodexSafetyError extends Error {
     code;