@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/pack/hook-bootstrap.js

@@ -1,66 +1,22 @@
 // Shared bootstrap helpers for Claude Code pack hooks.
 //
-// Extracts the boilerplate pieces that all (or most) pack hooks
-// reimplemented independently:
+// Extracts the boilerplate pieces that the pack hooks reimplemented
+// independently:
 //
 //   1. stdin envelope read (the common event-stream pattern).
-//   2. pause-sentinel check with announcement (wrapping checkPauseFromLoader
-//      so callers skip the conditional-opts-building block).
-//   3. manifest load with injection support (the common if-injected / else
+//   2. manifest load with injection support (the common if-injected / else
 //      loadManifest pattern; callers wrap the call in their own try/catch
 //      because error semantics differ per hook).
-//   4. pack `config.ux` parsing (label-parameterized; formerly four
+//   3. pack `config.ux` parsing (label-parameterized; formerly four
 //      byte-identical copies, task 19e293c6).
-//   5. `pickString` — first-defined-string-wins candidate picker (was three
-//      byte-identical copies across the Codex hook trio — pre-tool-use,
-//      stop, post-tool-use — before task a1348c89 extracted it here).
-//   6. `resolveToolInput` — tool_input-with-raw_input-fallback resolver
-//      (task cf4cdc93 review finding: track-active-claim and
-//      stay-in-scope read ONLY `tool_input`, silently no-op-ing on a
-//      Codex shim that sends `raw_input` instead — the exact shape
-//      `hook-codex-post-tool-use.ts`'s own private `resolveToolInput`
-//      already handles).
-//   7. `resolveHookPackContext` — the declared-pack-lookup / enabled-check /
-//      generatedDir-resolution trio that follows manifest load in nearly
-//      every hook. Its shape is closely mirrored by hook-post-tool-use.ts,
-//      hook-track-active-claim.ts, hook-pre-tool-use.ts and the Codex
-//      siblings, which were deliberately left calling their own inline
-//      copies rather than switched over here (out of scope for the task
-//      that added this helper); it was extracted for the
-//      subagent-start/subagent-stop pair, which would otherwise have
-//      re-duplicated it a further two times.
-//   8. `resolveSessionAndAgentIds` — session_id + agent_id parse and
-//      validation shared by subagent-start/subagent-stop. Pack-agnostic
-//      by construction: the agent-id validator is injected by the caller
-//      rather than imported here, so this module stays free of any
-//      understanding-before-execution-specific dependency.
-//   9. `resolveSubagentHookContext` — the pause-check / id-resolution /
-//      pack-context preamble shared verbatim by subagent-start and
-//      subagent-stop, up to the point where their bodies diverge (write
-//      vs. clear). Composes 2, 7, and 8 above.
-//
-// Not used by:
-//   - hook-runtime-reality.ts: it keeps an `isTTY` guard in front of the
-//     same shared idle-bounded reader (`src/cli/bounded-stdin.ts`) and
-//     composes the read itself, which is a legitimately different contract.
-//   - hook-solution-acceptance-writeguard.ts: loads no manifest.
-//   - hook-stay-in-scope.ts: loads the current manifest so a generated hook
-//     can no-op after an operator changes its optional configuration.
-//
-// hook-codex-stop.ts and hook-codex-user-prompt-submit.ts now also call
-// the pause check (2, `checkHookPause`), on top of the stdin reader (1) and
-// manifest loader (3) they already used (tasks 63fefe3a, 1432e053); they
-// used to be listed here as "no pause check" exceptions. Neither one pulls
-// in 4-6, so "use all of the above" would overstate it.
+//   4. `pickString` — first-defined-string-wins candidate picker (was three
+//      byte-identical copies across hook modules before task
+//      a1348c89 extracted it here).
 //
 // Per-hook decision logic, error envelopes, and early-return shapes stay local
 // to each hook. This module covers structural boilerplate only, not semantics.
-import { PassThrough } from "node:stream";
-import { readStdinBounded, STDIN_IDLE_TIMEOUT_MS, stdinTimeoutNote, stdinTimeoutBlockJson, stdinTimeoutBlockReason } from "../bounded-stdin.js";
-import { checkPauseFromLoader } from "../pause-check.js";
+import { readStdinBounded, STDIN_IDLE_TIMEOUT_MS } from "../bounded-stdin.js";
 import { loadManifest } from "../loader.js";
-import { resolveGeneratedDir } from "../../runtime/pending-approval.js";
-import { rejectMalformedSessionId } from "../../runtime/reject-malformed-session-id.js";
 import { PolicyUxSchema } from "../../schema/index.js";
 /**
  * Idle-bounded stdin read that tells the caller whether it timed out and
@@ -75,76 +31,6 @@ export async function readStdinChecked(stream, opts = {}) {
     const read = await readStdinBounded(stream, idleTimeoutMs);
     return { text: read.text, timedOut: read.timedOut, idleTimeoutMs };
 }
-/**
- * Promise-based stdin reader for the pack hooks that are NOT PreToolUse gates
- * (PostToolUse, Stop, SubagentStart/Stop, UserPromptSubmit and the like).
- * Resolves to the UTF-8 string read from the stream, ending at `end` or, when
- * no chunk has arrived for the idle bound, at the idle timeout (task 7dfdcaaf;
- * the shared reader is `src/cli/bounded-stdin.ts`). Rejects on stream error.
- *
- * Claude Code pipes the event and closes stdin, so a real hook never reaches
- * the bound; it only bites on an open, never-closed stdin, where an end-only
- * read held the hook until the host's own hook timeout. On a timeout the text
- * read so far is returned and one stderr note names the bound, so the caller
- * continues exactly as it does for an empty or truncated event it was handed
- * on a closed stdin. A PreToolUse gate must not use this: it calls
- * `readStdinChecked` and blocks on `timedOut`.
- */
-export async function readStdin(stream, opts = {}) {
-    const read = await readStdinChecked(stream, opts);
-    if (read.timedOut) {
-        (opts.stderr ?? process.stderr).write(`harness pack hook: ${stdinTimeoutNote({ text: read.text, timedOut: true }, read.idleTimeoutMs, "continuing as an empty event")}\n`);
-    }
-    return read.text;
-}
-/**
- * Run a PreToolUse gate entry behind a stdin-timeout refusal without editing
- * the entry's body: read stdin with the idle bound first, and when the read
- * timed out (and the operator pause does not apply) hand `refuse` the reason
- * instead of running the gate. Otherwise the text read is replayed to `run` on
- * a closed stream, so the gate sees exactly what it would have read itself.
- * Used by the two large gate entries whose line numbers other docs cite.
- */
-export async function runGateWithStdinRefusal(opts, isPaused, refuse, run) {
-    const read = await readStdinChecked(opts.stdin ?? process.stdin);
-    const stderr = opts.stderr ?? process.stderr;
-    if (read.timedOut && !isPaused(stderr)) {
-        return refuse(stdinTimeoutBlockReason(read.idleTimeoutMs), opts.stdout ?? process.stdout, stderr);
-    }
-    const replay = new PassThrough();
-    replay.end(read.text);
-    return run({ ...opts, stdin: replay });
-}
-/**
- * The refusal the Claude Code gates that write a block envelope to stdout hand
- * to `runGateWithStdinRefusal`: one `harness pack hook <label>: BLOCK: ...`
- * stderr line, the block envelope on stdout, and the blocked result (exit 0).
- */
-export function stdoutBlockRefusal(label) {
-    return (reason, stdout, stderr) => {
-        const diagnostic = `BLOCK: ${reason}`;
-        stderr.write(`harness pack hook ${label}: ${diagnostic}\n`);
-        stdout.write(`${stdinTimeoutBlockJson(reason)}\n`);
-        return { exitCode: 0, blocked: true, diagnostic };
-    };
-}
-// ---------------------------------------------------------------------------
-// 2. Pause-sentinel check helper
-// ---------------------------------------------------------------------------
-/**
- * Thin wrapper around `checkPauseFromLoader` that removes the
- * conditional-opts-building block each hook previously duplicated. Callers
- * can express the pause check in a single expression:
- *
- *   if (checkHookPause("my-hook", stderr, opts, opts.generatedDir).paused) { ... }
- *
- * Pass `undefined` for `loaderOpts`, `generatedDir`, or `now` when the hook
- * does not supply them — the underlying `checkPauseFromLoader` already handles
- * `undefined` for all optional fields.
- */
-export function checkHookPause(hookLabel, stderr, loaderOpts, generatedDir, now) {
-    return checkPauseFromLoader({ hookLabel, stderr, loaderOpts, generatedDir, now });
-}
 /**
  * Load the manifest, using `injected` directly when it is provided (test
  * injection path). Throws on disk-load failure so callers can wrap the call
@@ -170,14 +56,14 @@ export function loadManifestOrInjected(loaderOpts, injected) {
     return { manifest: loaded.manifest, manifestPath: loaded.resolved.base };
 }
 // ---------------------------------------------------------------------------
-// 4. First-defined-string-wins candidate picker
+// 3. First-defined-string-wins candidate picker
 // ---------------------------------------------------------------------------
 /**
  * Return the first candidate that is a non-empty string, else `undefined`.
  * Used to resolve a field that may arrive under one of several tolerated
  * synonyms (e.g. Codex's `tool_name` vs `tool`, or `last_assistant_message`
- * as a direct shortcut). Was three byte-identical private copies (the Codex
- * pre-tool-use / stop / post-tool-use hooks) before task a1348c89.
+ * as a direct shortcut). Consumed by `hook-branch-protection.ts`; was three
+ * byte-identical private copies before task a1348c89.
  */
 export function pickString(...candidates) {
     for (const c of candidates) {
@@ -187,33 +73,13 @@ export function pickString(...candidates) {
     return undefined;
 }
 // ---------------------------------------------------------------------------
-// 5. tool_input-with-raw_input-fallback resolver
-// ---------------------------------------------------------------------------
-/**
- * Resolve a PostToolUse-style event's tool arguments: prefer `tool_input`
- * (the field name real Codex sends, matching Claude Code's own
- * convention — `hook-codex-post-tool-use.ts`'s own doc comment) and fall
- * back to `raw_input` (harness's originally-published portable wire
- * format, still accepted for any shim built against harness's earlier
- * Codex adapter). Mirrors that hook's private `resolveToolInput`
- * (task a1348c89); extracted here so the agent-tasks-specific
- * PostToolUse hooks added later for Codex parity (track-active-claim,
- * stay-in-scope — task cf4cdc93) share the identical resolution instead
- * of hand-copying it a second and third time.
- */
-export function resolveToolInput(event) {
-    if (event.tool_input !== undefined)
-        return event.tool_input;
-    return event.raw_input;
-}
-// ---------------------------------------------------------------------------
-// 6. Pack `config.ux` parser
+// 4. Pack `config.ux` parser
 // ---------------------------------------------------------------------------
 /**
  * Parse the optional `ux:` block from a pack config (task 19e293c6). This
- * body existed as four byte-identical copies (hook-pre-tool-use,
- * hook-codex-pre-tool-use, hook-branch-protection, hook-solution-acceptance)
- * whose only difference was the stderr prefix — the exact drift the
+ * body existed as four byte-identical copies (hook-branch-protection was
+ * the only survivor of the removals; the others named their own stderr
+ * prefix) whose only difference was that prefix — the exact drift the
  * CHANGELOG had flagged at copy #3 and that landed a 4th time anyway.
  * `hookLabel` carries that prefix so the per-hook stderr warnings stay
  * byte-identical to the pre-extraction output (pinned by a test).
@@ -233,146 +99,4 @@ export function parseConfigUx(raw, stderr, hookLabel) {
     }
     return result.data;
 }
-/**
- * Load the manifest (or use injection), confirm `packName` is declared and
- * enabled, and resolve `generatedDir` — the fixed sequence that follows
- * `loadManifestOrInjected` in nearly every pack hook. Returns a single
- * failure shape with a ready-to-emit `${hookLabel}: ...` diagnostic instead
- * of three separate early-return blocks, so a caller wires it as:
- *
- *   const ctx = resolveHookPackContext(hookLabel, packName, opts);
- *   if (!ctx.ok) return noop(ctx.diagnostic, stderr, ...);
- */
-export function resolveHookPackContext(hookLabel, packName, opts) {
-    let manifest;
-    let manifestPath;
-    try {
-        ({ manifest, manifestPath } = loadManifestOrInjected(opts, opts.manifest));
-    }
-    catch (err) {
-        return {
-            ok: false,
-            diagnostic: `${hookLabel}: manifest load failed (${err.message}), skipping`,
-        };
-    }
-    const declared = manifest.policy_packs.find((p) => p.name === packName);
-    if (!declared) {
-        return {
-            ok: false,
-            diagnostic: `${hookLabel}: pack "${packName}" not declared in manifest, skipping`,
-        };
-    }
-    if (!declared.enabled) {
-        return {
-            ok: false,
-            diagnostic: `${hookLabel}: pack "${packName}" is enabled:false, skipping`,
-        };
-    }
-    const generatedDir = opts.generatedDir ??
-        (manifestPath !== undefined
-            ? resolveGeneratedDir({
-                ...(opts.homeDir !== undefined ? { homeDir: opts.homeDir } : {}),
-                manifestPath,
-            })
-            : undefined);
-    if (generatedDir === undefined) {
-        return {
-            ok: false,
-            diagnostic: `${hookLabel}: generatedDir unresolvable, skipping`,
-        };
-    }
-    return { ok: true, context: { manifest, declared, generatedDir } };
-}
-/**
- * Parse and validate `session_id` + `agent_id` off an event body (the
- * subagent-start/subagent-stop shared shape). `validateAgentId` is
- * injected rather than imported here — the agent-id allowlist lives with
- * the understanding-before-execution pack's in-flight records
- * (`rejectMalformedAgentId`), and this module stays pack-agnostic on
- * purpose (see the module header).
- */
-export function resolveSessionAndAgentIds(hookLabel, event, validateAgentId) {
-    const sessionId = pickString(event.session_id) ?? "";
-    const agentId = pickString(event.agent_id) ?? "";
-    if (sessionId === "") {
-        return { ok: false, diagnostic: `${hookLabel}: missing session_id, skipping`, sessionId: null };
-    }
-    // Validate sessionId right after the emptiness check, before any other
-    // early return, so every ok:false path below carries an already-rejected
-    // (never a raw, unvalidated) sessionId — a caller that echoes `sessionId`
-    // into a diagnostic or a path.join can never see an unvalidated value.
-    try {
-        rejectMalformedSessionId(sessionId);
-    }
-    catch (err) {
-        return {
-            ok: false,
-            diagnostic: `${hookLabel}: malformed session_id (${err.message}), skipping`,
-            sessionId: null,
-        };
-    }
-    if (agentId === "") {
-        return { ok: false, diagnostic: `${hookLabel}: missing agent_id, skipping`, sessionId };
-    }
-    try {
-        validateAgentId(agentId);
-    }
-    catch (err) {
-        return {
-            ok: false,
-            diagnostic: `${hookLabel}: malformed agent_id (${err.message}), skipping`,
-            sessionId,
-        };
-    }
-    return { ok: true, ids: { sessionId, agentId } };
-}
-/**
- * The three-step preamble subagent-start and subagent-stop both ran
- * verbatim before the point where their bodies diverge (write vs. clear):
- * pause-sentinel check, session_id/agent_id resolution, then pack-context
- * resolution. Extracted to close the residual clone between the two hook
- * files (review finding, subagent-gate). `verb` names the hook for both
- * the pause check's own stderr label and the caller-facing "paused,
- * skipping" diagnostic (e.g. "subagent-start"); `hookLabel` is the fuller
- * `harness pack hook: <verb>` prefix used in every other diagnostic.
- *
- * Each ok:false case reports a `sessionId`/`agentId` pair matching exactly
- * what the pre-extraction call sites passed to their own `noop()`: both
- * null on a pause, `sessionId` non-null (once past validation) on a
- * missing/malformed agent_id, and both non-null once ids resolved but the
- * pack context failed.
- */
-export function resolveSubagentHookContext(hookLabel, verb, packName, event, validateAgentId, opts) {
-    if (checkHookPause(verb, opts.stderr, opts, opts.generatedDir).paused) {
-        return {
-            ok: false,
-            diagnostic: `harness paused; ${verb} skipping without evaluating.`,
-            sessionId: null,
-            agentId: null,
-        };
-    }
-    const idsResult = resolveSessionAndAgentIds(hookLabel, event, validateAgentId);
-    if (!idsResult.ok) {
-        return {
-            ok: false,
-            diagnostic: idsResult.diagnostic,
-            sessionId: idsResult.sessionId,
-            agentId: null,
-        };
-    }
-    const { sessionId, agentId } = idsResult.ids;
-    const ctx = resolveHookPackContext(hookLabel, packName, opts);
-    if (!ctx.ok) {
-        return { ok: false, diagnostic: ctx.diagnostic, sessionId, agentId };
-    }
-    return {
-        ok: true,
-        context: {
-            sessionId,
-            agentId,
-            declared: ctx.context.declared,
-            generatedDir: ctx.context.generatedDir,
-        },
-    };
-}
 //# sourceMappingURL=hook-bootstrap.js.map

package/dist/cli/pack/hook-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-bootstrap.js","sourceRoot":"","sources":["../../../src/cli/pack/hook-bootstrap.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,gEAAgE;AAChE,+BAA+B;AAC/B,EAAE;AACF,8DAA8D;AAC9D,6EAA6E;AAC7E,6DAA6D;AAC7D,2EAA2E;AAC3E,0EAA0E;AAC1E,iDAAiD;AACjD,oEAAoE;AACpE,8CAA8C;AAC9C,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,6DAA6D;AAC7D,qEAAqE;AACrE,mEAAmE;AACnE,sEAAsE;AACtE,yBAAyB;AACzB,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,sEAAsE;AACtE,uEAAuE;AACvE,wEAAwE;AACxE,yDAAyD;AACzD,qEAAqE;AACrE,6CAA6C;AAC7C,qEAAqE;AACrE,wEAAwE;AACxE,yEAAyE;AACzE,mEAAmE;AACnE,2DAA2D;AAC3D,wEAAwE;AACxE,mEAAmE;AACnE,wEAAwE;AACxE,+CAA+C;AAC/C,EAAE;AACF,eAAe;AACf,yEAAyE;AACzE,uEAAuE;AACvE,4EAA4E;AAC5E,iEAAiE;AACjE,4EAA4E;AAC5E,sEAAsE;AACtE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,wDAAwD;AACxD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,cAAc,EAAgC,MAAM,uBAAuB,CAAC;AAsBrF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA6B,EAC7B,OAAgD,EAAE;IAElD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAA6B,EAC7B,OAAyB,EAAE;IAE3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CACnC,sBAAsB,gBAAgB,CACpC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EACnC,IAAI,CAAC,aAAa,EAClB,8BAA8B,CAC/B,IAAI,CACN,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAI3C,IAAO,EACP,QAAoD,EACpD,MAA2F,EAC3F,GAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa;IAMb,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QAChC,MAAM,UAAU,GAAG,UAAU,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAiB,EACjB,MAA6B,EAC7B,UAA0B,EAC1B,YAAqB,EACrB,GAAU;IAEV,OAAO,oBAAoB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;AACpF,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAyB,EACzB,QAA8B;IAE9B,4EAA4E;IAC5E,8EAA8E;IAC9E,sDAAsD;IACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,GAAG,UAAqB;IACjD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAGhC;IACC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC;IAC5D,OAAO,KAAK,CAAC,SAAS,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,MAA6B,EAC7B,SAAiB;IAEjB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CACV,GAAG,SAAS,wBAAwB,MAAM,CAAC,KAAK,CAAC,MAAM;aACpD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAsBD;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,QAAgB,EAChB,IAAmC;IAEnC,IAAI,QAAkB,CAAC;IACvB,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACH,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG,SAAS,2BAA4B,GAAa,CAAC,OAAO,aAAa;SACvF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG,SAAS,WAAW,QAAQ,sCAAsC;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG,SAAS,WAAW,QAAQ,8BAA8B;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY;QACjB,CAAC,YAAY,KAAK,SAAS;YACzB,CAAC,CAAC,mBAAmB,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,YAAY;aACb,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG,SAAS,uCAAuC;SAChE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC;AACrE,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,KAAmD,EACnD,eAA0C;IAE1C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEjD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,gCAAgC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;IACD,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,CAAC;QACH,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG,SAAS,2BAA4B,GAAa,CAAC,OAAO,aAAa;YACtF,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,8BAA8B,EAAE,SAAS,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,GAAG,SAAS,yBAA0B,GAAa,CAAC,OAAO,aAAa;YACpF,SAAS;SACV,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;AACnD,CAAC;AAsBD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAiB,EACjB,IAAY,EACZ,QAAgB,EAChB,KAAmD,EACnD,eAA0C,EAC1C,IAAuC;IAEvC,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,mBAAmB,IAAI,+BAA+B;YAClE,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC;IAE7C,MAAM,GAAG,GAAG,sBAAsB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACP,SAAS;YACT,OAAO;YACP,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;YAC9B,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY;SACvC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"hook-bootstrap.js","sourceRoot":"","sources":["../../../src/cli/pack/hook-bootstrap.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,oEAAoE;AACpE,iBAAiB;AACjB,EAAE;AACF,8DAA8D;AAC9D,2EAA2E;AAC3E,0EAA0E;AAC1E,iDAAiD;AACjD,oEAAoE;AACpE,8CAA8C;AAC9C,4EAA4E;AAC5E,6DAA6D;AAC7D,oCAAoC;AACpC,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,cAAc,EAAgC,MAAM,uBAAuB,CAAC;AAsBrF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA6B,EAC7B,OAAgD,EAAE;IAElD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrE,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAyB,EACzB,QAA8B;IAE9B,4EAA4E;IAC5E,8EAA8E;IAC9E,sDAAsD;IACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,GAAG,UAAqB;IACjD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,MAA6B,EAC7B,SAAiB;IAEjB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CACV,GAAG,SAAS,wBAAwB,MAAM,CAAC,KAAK,CAAC,MAAM;aACpD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/cli/pack/hook-branch-protection.d.ts

@@ -1,6 +1,15 @@
-import { type LedgerEntry } from "../../policies/index.js";
+import { type GitHeadReader } from "../../runtime/git-branch.js";
 import { type Manifest } from "../../schema/index.js";
 import { type LoaderOptions } from "../loader.js";
+/**
+ * Bound on resolving the paths and on all git calls of one event together,
+ * in ms, counted from the moment the hook starts (the stdin read and the
+ * manifest load included), so neither a slow stdin nor a large event can
+ * push the hook past its budget.
+ */
+export declare const GIT_READ_DEADLINE_MS = 3000;
+/** The runtimes whose block contract this hook speaks. */
+export declare const BRANCH_PROTECTION_RUNTIMES: readonly ["claude-code", "codex"];
 export interface PackHookBranchProtectionOptions extends LoaderOptions {
     /** Defaults to process.stdin. */
     stdin?: NodeJS.ReadableStream;
@@ -8,26 +17,20 @@ export interface PackHookBranchProtectionOptions extends LoaderOptions {
     stdout?: NodeJS.WritableStream;
     /** Defaults to process.stderr. */
     stderr?: NodeJS.WritableStream;
-    /** Override "now" for deterministic freshness-window tests. */
-    now?: Date;
     /** Override the cwd resolution (test injection). */
     cwd?: string;
-    /** Per-call ledger timeout in ms. */
-    ledgerTimeoutMs?: number;
     /** Inject a manifest (test). */
     manifest?: Manifest;
-    /**
-     * Override the `harness.generated/` directory used to resolve the
-     * operator-only override marker (test injection). When the real binary
-     * loads the manifest from disk this is derived from the resolved
-     * manifest path; an injected `manifest` has no on-disk path, so tests
-     * that exercise the marker override path supply this directly.
-     */
-    generatedDir?: string;
-    /** Inject a fake ledger query (test). */
-    ledgerQuery?: (sessionId: string) => Promise<LedgerEntry[] | {
-        degraded: string;
-    }>;
+    /** Block contract: `claude-code` (default) or `codex`. */
+    runtime?: string;
+    /** Inject the git runner (test). */
+    gitReader?: GitHeadReader;
+    /** Bound on one git call in ms (test). */
+    gitTimeoutMs?: number;
+    /** Bound on the path resolution and all git calls of one event, from the hook's start, in ms (test). */
+    gitDeadlineMs?: number;
+    /** Inject the clock the bound is measured with, in ms (test). Defaults to Date.now. */
+    now?: () => number;
 }
 export interface PackHookBranchProtectionResult {
     exitCode: number;
@@ -36,9 +39,13 @@ export interface PackHookBranchProtectionResult {
     diagnostic: string;
 }
 /**
- * `harness pack hook branch-protection`. A stdin read that times out is refused here
- * instead of being handed to the gate as an empty or truncated event it would
- * treat as malformed input (task 7dfdcaaf). The operator pause still wins;
- * every other input runs the gate unchanged.
+ * Every path an `apply_patch` call names in a file header line, read from
+ * every string of `value` (the whole event, or any part of it), each once.
+ */
+export declare function patchTargetPaths(value: unknown): string[];
+/**
+ * `harness pack hook branch-protection`. `opts.runtime` selects the block
+ * contract; an unknown value refuses with exit 2, which both runtimes read as
+ * a block.
  */
 export declare function runPackHookBranchProtectionCli(opts?: PackHookBranchProtectionOptions): Promise<PackHookBranchProtectionResult>;