@hasna/hooks 0.11.7 → 0.12.1

package/scripts/validate-package.ts

@@ -224,6 +224,12 @@ console.log("packed credential-file reference, rotation and terminal failure pas
  * a runtime SDK import, and one bundled-hook run with an isolated data dir.
  */
 async function validatePackedNativeSafety(packageDir: string, smokeDir: string): Promise<void> {
+  const worker = join(packageDir, "bin/native-safety-entry.js");
+  const bytes = await readFile(worker);
+  // The supervisor passes the worker as one `--eval` argument; Linux refuses a
+  // single argument over 32 pages (131,072 bytes with 4 KiB pages), and every
+  // command would then fail to launch. Check it before the launch smoke tests.
+  if (bytes.length >= 131_072) throw new Error(`Packed native worker is ${bytes.length} bytes; one exec argument holds at most 131072`);
   const home = join(smokeDir, "native-safety-home");
   await mkdir(home, { mode: 0o700 });
   const settings = join(home, ".codex", "hooks.json");
@@ -250,12 +256,16 @@ async function validatePackedNativeSafety(packageDir: string, smokeDir: string):
   if (benign.status !== 0 || benign.stdout !== "" || benign.stderr !== "") throw new Error("Packed native benign verdict failed");
   const refused = invoke(`rm -- ${join(home, "owned-fixture")}`);
   if (refused.status !== 0 || JSON.parse(refused.stdout).hookSpecificOutput.permissionDecision !== "deny") throw new Error("Packed native missing-Trash refusal failed");
+  // The packed worker carries the signed-link guard for every Bash command.
+  const composite = invoke("gh pr view 1175 --json body");
+  if (composite.status !== 0 || JSON.parse(composite.stdout).hookSpecificOutput.permissionDecisionReason
+    !== "composite output withheld: signed-link shape; use bounded scalar projections per class disposition 799310") throw new Error("Packed native signed-link refusal failed");
+  const scalar = invoke("gh pr view 1175 --json headRefOid,headRefName");
+  if (scalar.status !== 0 || scalar.stdout !== "" || scalar.stderr !== "") throw new Error("Packed native scalar gh read was not allowed");
   const probe = join(smokeDir, "native-registration.ts");
   await writeFile(probe, `import { getRegisteredHooksForTarget } from "@hasna/hooks"; console.log(JSON.stringify(getRegisteredHooksForTarget("global", "codex")));`);
   const listed = spawnSync(runtime, [probe], { cwd: smokeDir, env, encoding: "utf8", timeout: 15_000 });
   if (listed.status !== 0 || JSON.stringify(JSON.parse(listed.stdout)) !== '["trash-guard"]') throw new Error("Packed SDK cannot recognize the compiled CLI safety registration");
-  const worker = join(packageDir, "bin/native-safety-entry.js");
-  const bytes = await readFile(worker);
   try {
     await writeFile(worker, Buffer.concat([bytes, Buffer.from("\n// changed fixture\n")]));
     const changed = invoke("rm -- owned-fixture");