@kylecheng3146/agent-ops 0.1.2 → 0.1.3

package/dist/runtime/src/security/permissions.js

@@ -241,7 +241,9 @@ async function readWindowsProcessIdentity(processId) {
         ], {
             encoding: "utf8",
             maxBuffer: 4096,
-            timeout: 2000,
+            // ponytail: cold PowerShell start on a loaded machine routinely
+            // passes two seconds; the lock budget above still bounds the wait.
+            timeout: 10_000,
             windowsHide: true
         });
         const startedAt = result.stdout.trim();
@@ -251,10 +253,27 @@ async function readWindowsProcessIdentity(processId) {
         return null;
     }
 }
+/**
+ * A live process cannot change its own start time, so a successful self
+ * lookup never expires. Every other entry keeps the short TTL: foreign
+ * process IDs get recycled, and a failed self lookup must stay retryable
+ * instead of pinning the fallback identity for the whole run.
+ */
+export function reuseCachedProcessIdentity(entry, processId, selfProcessId, now) {
+    if (entry === undefined) {
+        return false;
+    }
+    if (processId === selfProcessId &&
+        entry.identity !== null &&
+        !entry.identity.startsWith("runtime:")) {
+        return true;
+    }
+    return now - entry.checkedAt <= PROCESS_IDENTITY_CACHE_MS;
+}
 async function readProcessIdentity(processId) {
     const cached = processIdentityCache.get(processId);
-    if (cached !== undefined &&
-        Date.now() - cached.checkedAt <= PROCESS_IDENTITY_CACHE_MS) {
+    if (reuseCachedProcessIdentity(cached, processId, process.pid, Date.now()) &&
+        cached !== undefined) {
         return cached.identity;
     }
     let identity;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kylecheng3146/agent-ops",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Evidence-driven development loops for Codex and Claude Code",
   "type": "module",
   "license": "MIT",

package/schemas/manifest.schema.json

@@ -26,6 +26,12 @@
       "items": {
         "$ref": "#/$defs/managedMarker"
       }
+    },
+    "hooks": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/managedHook"
+      }
     }
   },
   "$defs": {
@@ -104,6 +110,33 @@
         }
       }
     },
+    "managedHook": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "path", "harness", "events", "owner"],
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/id"
+        },
+        "path": {
+          "$ref": "#/$defs/relativePath"
+        },
+        "harness": {
+          "enum": ["codex", "claude"]
+        },
+        "events": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "enum": ["SessionStart", "PreToolUse", "Stop"]
+          }
+        },
+        "owner": {
+          "const": "agent-ops"
+        }
+      }
+    },
     "nonEmptyString": {
       "type": "string",
       "pattern": "[^\\s\\u0000]",