@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/pack/hook-codex-pre-tool-use.js

@@ -1,474 +0,0 @@
-// Phase 6 #6 — `harness pack hook codex-pre-tool-use` runtime verb.
-//
-// Codex variant of the Claude Code blocker (`hook-pre-tool-use.ts`).
-// Same approval logic (signed marker only; report + ledger are evidence,
-// task 7402301d), but a different I/O contract:
-//
-//   stdin  : JSON envelope shaped as `{ session_id, tool_name,
-//            raw_input, event }` — harness's published wire format that
-//            the Codex CLI integration is wrapped to emit. The
-//            integration is documented in
-//            `docs/policy-packs/understanding-before-execution.md`
-//            "Adapter notes / Codex".
-//   stdout : block reason on stderr; allow path is silent on stdout.
-//   exit   : 0 on allow, 2 on block. Codex's blocking convention is
-//            non-zero exit (the JSON-decision shape Claude Code reads
-//            is not part of Codex's hook contract today).
-//
-// Failure mode mirrors the Claude blocker: any error in load / parse /
-// ledger / report scan resolves to ALLOW (exit 0, silent diagnostic on
-// stderr). The package's optional standalone blocker remains a safety
-// net for solo users; the harness blocker is strictly more powerful.
-import * as path from "node:path";
-import { queryLedgerByTag } from "../../policies/index.js";
-import { checkOperatorApprovalMarkers, checkPersistedReport, MAX_HOOK_LISTING_ENTRIES, defaultReportsDir, describeMarkerTtlExpiry, matchLedgerEntries, noApprovalMarkerReason, verifyMatchedMarkerReport, } from "../../policy-packs/builtin/understanding-before-execution-runtime.js";
-import { findLatestParseError, renderMalformedSectionsNotice } from "../approve/understanding.js";
-import { CODEX_HARNESS } from "../../policy-packs/builtin/understanding-before-execution/auto-approve.js";
-import { attemptAutoApproval, AUTO_APPROVE_LEDGER_SOURCE_CODEX, } from "./auto-approve-path.js";
-import { resolveGeneratedDir, writePendingApproval, } from "../../runtime/pending-approval.js";
-import { resolveManifestLedgerWriter } from "../../runtime/ledger-writer.js";
-import { extractShellCommand } from "../../runtime/tool-name-aliases.js";
-import { renderAgentFacing } from "../../runtime/agent-facing.js";
-import { isReadOnlyBashPipeline } from "../../runtime/read-only-bash.js";
-import { isRecoveryGitCommit } from "../../runtime/recovery-git-commit.js";
-import { renderReportSchemaHint } from "./understanding-report-schema-hint.js";
-import { checkHookPause, loadManifestOrInjected, parseConfigUx, pickString, readStdin, runGateWithStdinRefusal, } from "./hook-bootstrap.js";
-const PACK_NAME = "understanding-before-execution";
-const EXIT_BLOCK = 2;
-function findGroundingMcp(manifest) {
-    return manifest.tools.mcp.find((m) => m.name === "grounding-mcp") ?? null;
-}
-// Exported so sibling Codex hooks (e.g. hook-codex-post-tool-use.ts) that
-// need the same "is this tool call shell-equivalent" test share one
-// definition instead of re-declaring the alias list (task a1348c89).
-export const CODEX_SHELL_TOOLS = new Set([
-    "Bash",
-    "shell",
-    "exec_command",
-    "functions.exec_command",
-]);
-function extractCodexShellCommand(rawInput) {
-    if (rawInput && typeof rawInput === "object") {
-        const args = rawInput;
-        if (typeof args.command === "string" &&
-            typeof args.cmd === "string" &&
-            args.command.trim() !== args.cmd.trim()) {
-            return null;
-        }
-    }
-    const command = extractShellCommand({ raw_input: rawInput });
-    if (command !== null)
-        return command;
-    return typeof rawInput === "string" ? rawInput : null;
-}
-/**
- * The command the two EXEMPTIONS below (read-only Bash, recovery
- * `git commit`) are allowed to act on, or `null` when the payload does
- * not pin one down. Deliberately stricter than the shared
- * `resolveToolInput` (hook-bootstrap.ts), which stays as it is: its
- * other callers are PostToolUse observers whose worst case is a missed
- * observation, whereas here the classified command decides whether a
- * gated call is exempted (reviewer round-1 finding on slice 2). Two
- * differences, both fail-closed:
- *
- *   - `tool_input: null` is treated as ABSENT and falls back to
- *     `raw_input`, instead of shadowing it. `resolveToolInput` tests
- *     `!== undefined`, so a payload carrying an explicit null
- *     `tool_input` plus a real `raw_input` would otherwise classify to
- *     nothing.
- *   - When BOTH fields carry a command and they DISAGREE, this returns
- *     `null` rather than picking one. Otherwise a payload could pair a
- *     read-only `ls` in the preferred field with `rm -rf ...` in the
- *     other and be exempted on the harmless one while the runtime runs
- *     whichever field it itself reads.
- *
- * `null` is never an allow: both call sites fall through to the block
- * path, and the auto-approval attempt below does not read this at all.
- */
-function resolveCodexExemptionCommand(event) {
-    const toolInput = event.tool_input ?? undefined;
-    const rawInput = event.raw_input ?? undefined;
-    if (toolInput !== undefined && rawInput !== undefined) {
-        const fromToolInput = extractCodexShellCommand(toolInput);
-        const fromRawInput = extractCodexShellCommand(rawInput);
-        if (fromToolInput === null || fromRawInput === null)
-            return null;
-        if (fromToolInput.trim() !== fromRawInput.trim())
-            return null;
-        return fromToolInput;
-    }
-    if (toolInput !== undefined)
-        return extractCodexShellCommand(toolInput);
-    if (rawInput !== undefined)
-        return extractCodexShellCommand(rawInput);
-    return null;
-}
-async function checkLedger(manifest, sessionId, opts) {
-    if (opts.ledgerQuery) {
-        const result = await opts.ledgerQuery(sessionId);
-        if ("degraded" in result) {
-            return { matched: false, detail: `ledger degraded (${result.degraded})` };
-        }
-        return matchLedgerEntries(result, sessionId);
-    }
-    const server = findGroundingMcp(manifest);
-    if (!server) {
-        return { matched: false, detail: "grounding-mcp not declared in manifest" };
-    }
-    const command = Array.isArray(server.command)
-        ? server.command
-        : server.command.trim().split(/\s+/);
-    const env = server.env ?? undefined;
-    const timeoutMs = opts.ledgerTimeoutMs ?? server.health?.timeout_ms ?? 5_000;
-    const result = await queryLedgerByTag({
-        mcpCommand: command,
-        ...(env && { mcpEnv: env }),
-        sessionId,
-        timeoutMs,
-    });
-    if (result.kind === "degraded") {
-        return { matched: false, detail: `ledger degraded (${result.reason})` };
-    }
-    return matchLedgerEntries(result.entries, sessionId);
-}
-function allowResult(detail, source, stderr) {
-    const diagnostic = `harness pack hook codex: ${detail}, allowing.`;
-    stderr.write(`${diagnostic}\n`);
-    return {
-        exitCode: 0,
-        blocked: false,
-        approvalCheck: { approved: true, source, detail },
-        diagnostic,
-    };
-}
-async function runPackHookCodexPreToolUseCliInner(opts = {}) {
-    const stdin = opts.stdin ?? process.stdin;
-    const stderr = opts.stderr ?? process.stderr;
-    const packName = opts.pack ?? PACK_NAME;
-    // Read stdin defensively. Bad JSON falls through to allow (matches
-    // Claude blocker's failure mode) but emits a stderr diagnostic so
-    // the degradation is loud — a silently-allowing gate manufactures
-    // false confidence, which is the worst direction for a governance
-    // hook to fail in.
-    const raw = await readStdin(stdin);
-    let event = {};
-    try {
-        event = JSON.parse(raw.trim() || "{}");
-    }
-    catch (err) {
-        stderr.write(`harness pack hook (codex): malformed event JSON on stdin (${err.message}), allowing.\n`);
-    }
-    const sessionId = pickString(event.session_id) ??
-        process.env["CODEX_SESSION_ID"] ??
-        process.env["CLAUDE_CODE_SESSION_ID"] ??
-        process.env["CLAUDE_SESSION_ID"] ??
-        "";
-    const toolName = pickString(event.tool_name, event.tool) ?? "(unknown)";
-    // Pause sentinel — honoured BEFORE manifest load so the lockout-recovery
-    // flow (broken install) still respects an active pause.
-    if (checkHookPause("codex-pre-tool-use", stderr, opts, opts.generatedDir).paused) {
-        return allowResult("harness paused", "none", stderr);
-    }
-    // Load manifest (or use injection). Bail to allow on any failure so a
-    // missing harness install never bricks the session.
-    let manifest;
-    let manifestPath;
-    try {
-        ({ manifest, manifestPath } = loadManifestOrInjected(opts, opts.manifest));
-    }
-    catch (err) {
-        return allowResult(`manifest load failed (${err.message})`, "none", stderr);
-    }
-    // Confirm the pack is enabled.
-    const declared = manifest.policy_packs.find((p) => p.name === packName);
-    if (!declared) {
-        return allowResult(`pack "${packName}" not declared in manifest`, "none", stderr);
-    }
-    if (!declared.enabled) {
-        return allowResult(`pack "${packName}" is enabled:false`, "none", stderr);
-    }
-    if (sessionId === "") {
-        return allowResult("no session_id resolvable from input or $CODEX_SESSION_ID/$CLAUDE_CODE_SESSION_ID/$CLAUDE_SESSION_ID", "none", stderr);
-    }
-    // Resolve generatedDir up-front for the marker check.
-    const generatedDir = opts.generatedDir ??
-        (manifestPath !== undefined
-            ? resolveGeneratedDir({
-                ...(opts.homeDir !== undefined ? { homeDir: opts.homeDir } : {}),
-                manifestPath,
-            })
-            : undefined);
-    // Source 1: filesystem marker (agent-tasks/88ca4bb3). Same boundary
-    // as the Claude blocker: operator-authored marker beats ledger
-    // self-approval. Falls through to ledger-as-audit when generatedDir
-    // is unresolvable (test injection without a manifest path).
-    // Task-scoped (active-claim) marker first, session marker second,
-    // both under the `approval_lifecycle` TTL — shared with the Claude
-    // hook via `checkOperatorApprovalMarkers` (task e7c2ec3c; the bare
-    // `checkApprovalMarker` call here previously ignored `max_age` and
-    // task-scoping, so those knobs silently applied only to Claude).
-    // `markerExpired` is hoisted so the recovery-git-commit exception
-    // (task 6e888423) below can see it: true only when a REAL marker
-    // existed for this session/task and aged past
-    // `approval_lifecycle.max_age`, not when one was simply never written
-    // or was cleared by a task-completion boundary tool. Mirrors the
-    // Claude hook (hook-pre-tool-use.ts) so the two runtimes stay in
-    // lockstep, same rationale as `checkOperatorApprovalMarkers` itself.
-    // Session marker refused only for its task binding (task 5018c0c4),
-    // mirroring the Claude hook: blocks like a missing marker, with its
-    // own reason text.
-    let sessionBindingRefusedDetail;
-    let markerExpired = false;
-    // The max_age sentence for the block reason (wording only, never read by a
-    // gate decision); set when the marker check reported a TTL expiry.
-    let markerTtlExpiry;
-    // True when checkOperatorApprovalMarkers found a marker FILE that failed
-    // signature verification (harness/f9485cc7), mirroring the Claude hook.
-    let markerForged = false;
-    // Set when a marker matched but no persisted report file hashes to the
-    // content that marker was signed for any more (task fa423e9b),
-    // mirroring the Claude hook: the call falls through to the ordinary block
-    // path (read-only shell commands keep their exemption) with this reason.
-    let reportHashMismatchDetail;
-    const reportsDir = opts.reportsDir ?? defaultReportsDir();
-    if (generatedDir !== undefined) {
-        const markers = checkOperatorApprovalMarkers(generatedDir, sessionId, declared.config, stderr);
-        markerExpired = markers.expired;
-        markerTtlExpiry = describeMarkerTtlExpiry(markers);
-        markerForged = markers.forged;
-        if (markers.source !== "task") {
-            // Trace the task-marker miss, mirroring the Claude hook, so an
-            // operator debugging a Codex session sees the active-claim vs
-            // marker mismatch rather than only the generic session miss.
-            stderr.write(`harness pack hook codex: task-scoped check: ${markers.taskCheckDetail}\n`);
-        }
-        sessionBindingRefusedDetail = markers.sessionBindingRefused ? markers.detail : undefined;
-        if (markers.matched) {
-            // Cross-check the matched marker's signed report hash against the
-            // persisted reports (task fa423e9b): the task marker first, the
-            // session marker as fallback.
-            const reportHash = verifyMatchedMarkerReport(reportsDir, markers);
-            if (reportHash.ok) {
-                return allowResult(reportHash.detail, "marker", stderr);
-            }
-            reportHashMismatchDetail = reportHash.detail;
-        }
-    }
-    // Persisted-report EVIDENCE probe (task 7402301d), mirroring the Claude
-    // hook: no longer an approval source. `report.detail` feeds the block
-    // reason (with the distinct `unsigned persisted-report approval
-    // rejected` phrase when the on-disk status says approved) and
-    // `report.report === null` gates the parse-error lookup below. The
-    // signed marker is the only APPROVAL source that opens the gate in
-    // this hook too. The read-only-Bash and recovery-git-commit carve-outs
-    // below are separate, independently-argued exemptions, not a second
-    // approval source.
-    const report = checkPersistedReport(reportsDir, sessionId);
-    // Audit-only ledger probe.
-    const ledger = await checkLedger(manifest, sessionId, opts);
-    // Exception: read-only shell commands. Real Codex carries tool args in
-    // `tool_input`, harness's older published envelope in `raw_input`;
-    // `resolveCodexExemptionCommand` reads both (before this, a real Codex
-    // payload's command was invisible here and every read-only `ls` hit
-    // the block). If neither field carries a classifiable command — a
-    // conflicting `command`/`cmd` pair, or two fields naming DIFFERENT
-    // commands — this stays `null` and the call falls through to the block
-    // path (fail-closed); see that function for the full argument.
-    const commandStr = resolveCodexExemptionCommand(event);
-    if (commandStr !== null &&
-        CODEX_SHELL_TOOLS.has(toolName) &&
-        isReadOnlyBashPipeline(commandStr)) {
-        const diagnostic = `harness pack hook codex: read-only Bash command, allowing without an approved report (\`${commandStr.trim()}\`)`;
-        stderr.write(`${diagnostic}\n`);
-        return {
-            exitCode: 0,
-            blocked: false,
-            approvalCheck: { approved: true, source: "none", detail: diagnostic },
-            diagnostic,
-        };
-    }
-    // Exception: the narrow recovery-git-commit shape (task 6e888423).
-    // Mirrors the Claude hook's exemption exactly (see hook-pre-tool-use.ts
-    // for the full safety argument): gated on BOTH `markerExpired` (a real
-    // operator approval existed for this session/task and merely aged out
-    // — not "never approved", not "cleared by a task-completion boundary")
-    // and `isRecoveryGitCommit` (a bare, unchained `git commit` that
-    // cannot smuggle other work or new file content).
-    if (commandStr !== null &&
-        CODEX_SHELL_TOOLS.has(toolName) &&
-        markerExpired &&
-        isRecoveryGitCommit(commandStr)) {
-        const diagnostic = `harness pack hook codex: recovery-commit exemption — approval for session ${sessionId} had expired, but this session/task WAS previously approved; allowing the bare \`git commit\` to record already-approved work (\`${commandStr.trim()}\`). A fresh Understanding Report is still required for any new Edit/Write/Bash.`;
-        stderr.write(`${diagnostic}\n`);
-        return {
-            exitCode: 0,
-            blocked: false,
-            approvalCheck: { approved: true, source: "recovery-commit", detail: diagnostic },
-            diagnostic,
-        };
-    }
-    // Step 9: the operator-opt-in auto-approval attempt (slice 2 of
-    // docs/decisions/2026-08-27-ug-auto-mode-approval.md, agent-tasks/
-    // 57058364). The SAME `attemptAutoApproval` the Claude hook calls, at
-    // the same place in the decision order: last, on a call that the
-    // marker check (source 1) and both exemptions above have already
-    // declined — i.e. exactly a call that would otherwise reach the final
-    // block. So a read-only `ls` or a recovery `git commit` mints nothing,
-    // and `max_age` starts counting from the call that actually needed an
-    // approval. Arguments carry everything that is Codex-specific:
-    // `harness: CODEX_HARNESS` (the minted `approvedBy` reads
-    // `auto-mode:codex:<mode>`, so an audit can tell the runtimes apart),
-    // the transcript-path session-consistency check (a Codex hook process
-    // carries no session-id environment variable for the Claude variant to
-    // compare against), and this hook's own ledger `source` and stderr
-    // label.
-    //
-    // Sharing the body does NOT share the opt-in: the attempt declines
-    // unless the operator listed `codex` in `auto_approve.harnesses`,
-    // which an `auto_approve` block written before this hook existed does
-    // not (an absent key means Claude Code only).
-    //
-    // It never returns an allow of its own: the allow below comes from the
-    // auto path's own re-run of `checkOperatorApprovalMarkers`, the same
-    // authority source 1 consults, and is reported through this hook's
-    // ordinary `allowResult` with `source: "marker"`. Any failure falls
-    // through to the block with `markerExpired` / `markerForged` intact.
-    //
-    // Placed BEFORE the `.pending-approval` staging write below on
-    // purpose: a successful auto-approval must not leave this session id
-    // staged for a later arg-less `harness approve understanding` to
-    // resolve to.
-    //
-    // The ledger writer resolves lazily, exactly like the Claude hook: the
-    // thunk runs only after the auto path's own opt-in and `when` checks
-    // both pass, so an ordinary gated Codex call never resolves one.
-    const resolveAutoLedger = () => {
-        if (opts.writeLedger)
-            return { write: opts.writeLedger };
-        const resolved = resolveManifestLedgerWriter(manifest, {
-            ...(opts.ledgerTimeoutMs !== undefined ? { ledgerTimeoutMs: opts.ledgerTimeoutMs } : {}),
-        });
-        return resolved.ok ? { write: resolved.write } : { write: null, reason: resolved.reason };
-    };
-    const auto = await attemptAutoApproval({
-        generatedDir,
-        sessionId,
-        payloadSessionId: event.session_id,
-        permissionMode: event.permission_mode,
-        harness: CODEX_HARNESS,
-        // This hook's own verb on the audit-only ledger fact and its own
-        // stderr prefix, so neither an audit row nor a diagnostic line
-        // attributes a Codex decision to the Claude Code hook.
-        ledgerSource: AUTO_APPROVE_LEDGER_SOURCE_CODEX,
-        label: "harness pack hook codex",
-        sessionConsistency: { kind: "transcript-path", transcriptPath: event.transcript_path },
-        packConfig: declared.config,
-        reportsDir,
-        markerForged,
-        stderr,
-        resolveLedger: resolveAutoLedger,
-    });
-    if (auto.approved) {
-        return allowResult(auto.detail, "marker", stderr);
-    }
-    // Stage the session id so `harness approve understanding`, run from
-    // the operator's shell where none of $CODEX_SESSION_ID,
-    // $CLAUDE_CODE_SESSION_ID or $CLAUDE_SESSION_ID is set, can resolve it without scraping logs or
-    // grepping transcript dirs. Mirrors the Claude blocker's symmetric
-    // staging (hook-pre-tool-use.ts) so arg-less approval after a Codex
-    // PreToolUse block has the same shape. Best-effort: a staging-write
-    // failure must not escalate a gate block into a hook error.
-    if (generatedDir !== undefined) {
-        try {
-            writePendingApproval(generatedDir, sessionId);
-        }
-        catch {
-            /* best-effort; the block below proceeds regardless */
-        }
-    }
-    // Neither operator source approved. Codex blocks via non-zero exit
-    // + stderr reason; there is no JSON-decision wire to write to stdout.
-    // Mirrors the Claude hook's distinct forged-marker reason (harness/f9485cc7).
-    const unapprovedReason = generatedDir !== undefined
-        ? markerForged
-            ? `forged/unsigned marker rejected for session ${sessionId}; ${report.detail}; ${ledger.detail}`
-            : sessionBindingRefusedDetail !== undefined
-                ? `${sessionBindingRefusedDetail}; ${report.detail}; ${ledger.detail}`
-                : noApprovalMarkerReason(sessionId, markerTtlExpiry, report.detail, ledger.detail)
-        : `generatedDir not resolvable (test/injection path); ${report.detail}; ${ledger.detail}`;
-    // A marker that matched but whose signed report content is gone (the
-    // approved report was edited or removed after approval, task fa423e9b)
-    // gets its own reason, naming the marker kind and the one-command fix; no
-    // "no approval marker" wording applies to it.
-    const reason = reportHashMismatchDetail !== undefined
-        ? `${reportHashMismatchDetail}; ${ledger.detail}`
-        : unapprovedReason;
-    // When the pack config declares `ux:`, the agent-facing block becomes
-    // the plain-language shape and the legacy schemaHint text is
-    // suppressed. The engine-vocabulary `reason` still lands in stderr
-    // (operator audit surface, not agent surface) so a flapping gate
-    // remains diagnosable.
-    const configUx = parseConfigUx(declared.config["ux"], stderr, "harness pack hook codex");
-    let agentFacing = configUx
-        ? renderAgentFacing(configUx, { SESSION_ID: sessionId, TOOL_NAME: toolName })
-        : `Run \`harness approve understanding\` once you have produced and confirmed an Understanding Report.\n${renderReportSchemaHint()}`;
-    // Best-effort lookup of the session's latest parse-error log (task
-    // 823837fd, follow-up gate task 823837fd review), mirroring the Claude
-    // hook (hook-pre-tool-use.ts): the standalone Stop hook / `harness
-    // approve understanding` stdin-report path writes one to
-    // `<reports-parent>/parse-errors/` when the agent's report failed to
-    // parse. Gated on `report.report === null` (no persisted report at
-    // all for this session): a report that WAS persisted but is merely
-    // pending approval must not surface a stale parse-error from an
-    // earlier, already-fixed attempt; mirrors the CLI's own gate (`if
-    // (!latest)`, approve/understanding.ts). Moved here, right before the
-    // block render and after every exemption early-return above, so the
-    // lookup only runs on the path that actually renders it (pure code
-    // motion from its previous location right after `checkPersistedReport`).
-    const latestParseError = report.report === null
-        ? findLatestParseError(path.join(path.dirname(reportsDir), "parse-errors"), sessionId, {
-            maxEntries: MAX_HOOK_LISTING_ENTRIES,
-        })
-        : null;
-    // Name the malformed sections from that log, when it carries any:
-    // shared with the Claude hook's identical append via
-    // `renderMalformedSectionsNotice` (approve/understanding.ts) so the two
-    // runtimes cannot drift apart byte-for-byte.
-    const malformedNotice = renderMalformedSectionsNotice(latestParseError?.malformedSections ?? []);
-    if (malformedNotice) {
-        agentFacing = `${agentFacing}\n\n${malformedNotice}`;
-    }
-    // No separate expiry sentence is appended here (the Claude hook does append
-    // one): the Codex agent reads the whole stderr diagnostic, and the engine
-    // reason on its BLOCK line already carries `approval expired because ...`
-    // (see `noApprovalMarkerReason`), so a second copy would say it twice.
-    const diagnostic = configUx
-        ? `harness pack hook codex: BLOCK: ${reason}.\n${agentFacing}`
-        : `harness pack hook codex: BLOCK: ${reason}. Tool: ${toolName}. ${agentFacing}`;
-    stderr.write(`${diagnostic}\n`);
-    return {
-        exitCode: EXIT_BLOCK,
-        blocked: true,
-        approvalCheck: { approved: false, source: "none", detail: reason },
-        diagnostic,
-    };
-}
-/**
- * `harness pack hook codex-pre-tool-use`. A timed-out stdin read exits 2 with
- * the reason on stderr (the runtime's deny form) instead of running the gate on
- * an empty or truncated event it would allow (task 7dfdcaaf). The operator
- * pause still wins; every other input runs the gate unchanged.
- */
-export function runPackHookCodexPreToolUseCli(opts = {}) {
-    return runGateWithStdinRefusal(opts, (stderr) => checkHookPause("codex-pre-tool-use", stderr, opts, opts.generatedDir).paused, (reason, _stdout, stderr) => {
-        const diagnostic = `harness pack hook codex: BLOCK: ${reason}`;
-        stderr.write(`${diagnostic}\n`);
-        return {
-            exitCode: EXIT_BLOCK,
-            blocked: true,
-            approvalCheck: { approved: false, source: "none", detail: reason },
-            diagnostic,
-        };
-    }, runPackHookCodexPreToolUseCliInner);
-}
-//# sourceMappingURL=hook-codex-pre-tool-use.js.map

package/dist/cli/pack/hook-codex-pre-tool-use.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-codex-pre-tool-use.js","sourceRoot":"","sources":["../../../src/cli/pack/hook-codex-pre-tool-use.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,qEAAqE;AACrE,yEAAyE;AACzE,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,wEAAwE;AACxE,+DAA+D;AAC/D,0CAA0C;AAC1C,mEAAmE;AACnE,sCAAsC;AACtC,qEAAqE;AACrE,oEAAoE;AACpE,sEAAsE;AACtE,0DAA0D;AAC1D,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AAErE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAoB,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,sEAAsE,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,2EAA2E,CAAC;AAC1G,OAAO,EACL,mBAAmB,EACnB,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,2BAA2B,EAAsB,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGlE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,aAAa,EACb,UAAU,EACV,SAAS,EAAE,uBAAuB,GACnC,MAAM,qBAAqB,CAAC;AAE7B,MAAM,SAAS,GAAG,gCAAgC,CAAC;AACnD,MAAM,UAAU,GAAG,CAAC,CAAC;AAmErB,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,0EAA0E;AAC1E,oEAAoE;AACpE,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,MAAM;IACN,OAAO;IACP,cAAc;IACd,wBAAwB;CACzB,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,QAAiB;IACjD,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,QAAgD,CAAC;QAC9D,IACE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EACvC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,4BAA4B,CAAC,KAAyB;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,aAAa,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,YAAY,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,QAAkB,EAClB,SAAiB,EACjB,IAAoC;IAEpC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,UAAU,EAAE,OAAO;QACnB,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC3B,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAClB,MAAc,EACd,MAAqC,EACrC,MAA6B;IAE7B,MAAM,UAAU,GAAG,4BAA4B,MAAM,aAAa,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;QACjD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,OAAuC,EAAE;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IAExC,mEAAmE;IACnE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,mBAAmB;IACnB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,GAAuB,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAuB,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CACV,6DACG,GAAa,CAAC,OACjB,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GACb,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAChC,EAAE,CAAC;IACL,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC;IAExE,yEAAyE;IACzE,wDAAwD;IACxD,IAAI,cAAc,CAAC,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;QACjF,OAAO,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,sEAAsE;IACtE,oDAAoD;IACpD,IAAI,QAAkB,CAAC;IACvB,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAChB,yBAA0B,GAAa,CAAC,OAAO,GAAG,EAClD,MAAM,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,WAAW,CAAC,SAAS,QAAQ,4BAA4B,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,SAAS,QAAQ,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,WAAW,CAChB,qGAAqG,EACrG,MAAM,EACN,MAAM,CACP,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY;QACjB,CAAC,YAAY,KAAK,SAAS;YACzB,CAAC,CAAC,mBAAmB,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,YAAY;aACb,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,oEAAoE;IACpE,+DAA+D;IAC/D,oEAAoE;IACpE,4DAA4D;IAC5D,kEAAkE;IAClE,mEAAmE;IACnE,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,kEAAkE;IAClE,iEAAiE;IACjE,8CAA8C;IAC9C,sEAAsE;IACtE,iEAAiE;IACjE,iEAAiE;IACjE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,mBAAmB;IACnB,IAAI,2BAA+C,CAAC;IACpD,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,eAAmC,CAAC;IACxC,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,uEAAuE;IACvE,+DAA+D;IAC/D,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,wBAA4C,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IAC1D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,4BAA4B,CAC1C,YAAY,EACZ,SAAS,EACT,QAAQ,CAAC,MAAM,EACf,MAAM,CACP,CAAC;QACF,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,eAAe,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnD,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,+DAA+D;YAC/D,8DAA8D;YAC9D,6DAA6D;YAC7D,MAAM,CAAC,KAAK,CACV,+CAA+C,OAAO,CAAC,eAAe,IAAI,CAC3E,CAAC;QACJ,CAAC;QACD,2BAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,kEAAkE;YAClE,gEAAgE;YAChE,8BAA8B;YAC9B,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClE,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,CAAC;YACD,wBAAwB,GAAG,UAAU,CAAC,MAAM,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,gEAAgE;IAChE,8DAA8D;IAC9D,mEAAmE;IACnE,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,mBAAmB;IACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE3D,2BAA2B;IAC3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAE5D,uEAAuE;IACvE,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,mEAAmE;IACnE,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACvD,IACE,UAAU,KAAK,IAAI;QACnB,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,sBAAsB,CAAC,UAAU,CAAC,EAClC,CAAC;QACD,MAAM,UAAU,GAAG,2FAA2F,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;QACrI,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE;YACrE,UAAU;SACX,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,iEAAiE;IACjE,kDAAkD;IAClD,IACE,UAAU,KAAK,IAAI;QACnB,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,aAAa;QACb,mBAAmB,CAAC,UAAU,CAAC,EAC/B,CAAC;QACD,MAAM,UAAU,GAAG,6EAA6E,SAAS,oIAAoI,UAAU,CAAC,IAAI,EAAE,kFAAkF,CAAC;QACjV,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE;YAChF,UAAU;SACX,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,iEAAiE;IACjE,sEAAsE;IACtE,uEAAuE;IACvE,sEAAsE;IACtE,+DAA+D;IAC/D,0DAA0D;IAC1D,sEAAsE;IACtE,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,SAAS;IACT,EAAE;IACF,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,8CAA8C;IAC9C,EAAE;IACF,uEAAuE;IACvE,qEAAqE;IACrE,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,EAAE;IACF,+DAA+D;IAC/D,qEAAqE;IACrE,iEAAiE;IACjE,cAAc;IACd,EAAE;IACF,uEAAuE;IACvE,qEAAqE;IACrE,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,GAAqD,EAAE;QAC/E,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,QAAQ,EAAE;YACrD,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5F,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC;QACrC,YAAY;QACZ,SAAS;QACT,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,cAAc,EAAE,KAAK,CAAC,eAAe;QACrC,OAAO,EAAE,aAAa;QACtB,iEAAiE;QACjE,+DAA+D;QAC/D,uDAAuD;QACvD,YAAY,EAAE,gCAAgC;QAC9C,KAAK,EAAE,yBAAyB;QAChC,kBAAkB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE;QACtF,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,UAAU;QACV,YAAY;QACZ,MAAM;QACN,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,oEAAoE;IACpE,wDAAwD;IACxD,gGAAgG;IAChG,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,4DAA4D;IAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,sEAAsE;IACtE,8EAA8E;IAC9E,MAAM,gBAAgB,GAAG,YAAY,KAAK,SAAS;QACjD,CAAC,CAAC,YAAY;YACZ,CAAC,CAAC,+CAA+C,SAAS,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE;YAChG,CAAC,CAAC,2BAA2B,KAAK,SAAS;gBACzC,CAAC,CAAC,GAAG,2BAA2B,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE;gBACtE,CAAC,CAAC,sBAAsB,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACtF,CAAC,CAAC,sDAAsD,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5F,qEAAqE;IACrE,uEAAuE;IACvE,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,MAAM,GACV,wBAAwB,KAAK,SAAS;QACpC,CAAC,CAAC,GAAG,wBAAwB,KAAK,MAAM,CAAC,MAAM,EAAE;QACjD,CAAC,CAAC,gBAAgB,CAAC;IACvB,sEAAsE;IACtE,6DAA6D;IAC7D,mEAAmE;IACnE,iEAAiE;IACjE,uBAAuB;IACvB,MAAM,QAAQ,GAAG,aAAa,CAC3B,QAAQ,CAAC,MAAkC,CAAC,IAAI,CAAC,EAClD,MAAM,EACN,yBAAyB,CAC1B,CAAC;IACF,IAAI,WAAW,GAAG,QAAQ;QACxB,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC7E,CAAC,CAAC,wGAAwG,sBAAsB,EAAE,EAAE,CAAC;IACvI,mEAAmE;IACnE,uEAAuE;IACvE,mEAAmE;IACnE,yDAAyD;IACzD,qEAAqE;IACrE,mEAAmE;IACnE,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,sEAAsE;IACtE,oEAAoE;IACpE,mEAAmE;IACnE,yEAAyE;IACzE,MAAM,gBAAgB,GACpB,MAAM,CAAC,MAAM,KAAK,IAAI;QACpB,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE;YACnF,UAAU,EAAE,wBAAwB;SACrC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACX,kEAAkE;IAClE,qDAAqD;IACrD,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,eAAe,GAAG,6BAA6B,CACnD,gBAAgB,EAAE,iBAAiB,IAAI,EAAE,CAC1C,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QACpB,WAAW,GAAG,GAAG,WAAW,OAAO,eAAe,EAAE,CAAC;IACvD,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,UAAU,GAAG,QAAQ;QACzB,CAAC,CAAC,mCAAmC,MAAM,MAAM,WAAW,EAAE;QAC9D,CAAC,CAAC,mCAAmC,MAAM,WAAW,QAAQ,KAAK,WAAW,EAAE,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAClE,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAuC,EAAE;IAEzC,OAAO,uBAAuB,CAC5B,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EACxF,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,UAAU,GAAG,mCAAmC,MAAM,EAAE,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAClE,UAAU;SACX,CAAC;IACJ,CAAC,EACD,kCAAkC,CACnC,CAAC;AACJ,CAAC"}

package/dist/cli/pack/hook-codex-stop.d.ts

@@ -1,35 +0,0 @@
-import type { Manifest } from "../../schema/index.js";
-import { type LoaderOptions } from "../loader.js";
-export interface PackHookCodexStopOptions extends LoaderOptions {
-    pack?: string;
-    reportsDir?: string;
-    stdin?: NodeJS.ReadableStream;
-    stdout?: NodeJS.WritableStream;
-    stderr?: NodeJS.WritableStream;
-    manifest?: Manifest;
-    /** Test-injectable clock; defaults to new Date(). */
-    now?: Date;
-    /** Test-injected generatedDir for the pause-sentinel check; bypasses
-     *  path resolution when supplied (mirrors `hook-codex-pre-tool-use.ts`
-     *  / `hook-codex-post-tool-use.ts`). */
-    generatedDir?: string;
-}
-export interface ParsedReport {
-    interpretation: string;
-    assumptions: string[];
-    openQuestions: string[];
-    outOfScope: string[];
-    risks: string[];
-    verificationPlan: string;
-}
-export interface PackHookCodexStopResult {
-    exitCode: number;
-    /** Path of the persisted report; null when no file was written. */
-    reportPath: string | null;
-    /** True when at least one Understanding Report field was extracted. */
-    parsed: boolean;
-    diagnostic: string;
-}
-export declare function parseUnderstandingReport(text: string): ParsedReport;
-export declare function reportHasContent(r: ParsedReport): boolean;
-export declare function runPackHookCodexStopCli(opts?: PackHookCodexStopOptions): Promise<PackHookCodexStopResult>;