@made-by-moonlight/athene-core 0.9.1

package/dist/agent-workspace-hooks.d.ts

@@ -0,0 +1,74 @@
+/** Preferred gh binary path for wrapper scripts */
+export declare const PREFERRED_GH_PATH = "/usr/local/bin/gh";
+/**
+ * Build a PATH string with ~/.ao/bin prepended for wrapper interception.
+ * Deduplicates entries and ensures /usr/local/bin is early for gh resolution.
+ */
+export declare function buildAgentPath(basePath: string | undefined): string;
+/**
+ * Helper script sourced by both gh and git wrappers.
+ * Provides:
+ *   update_ao_metadata <key> <value>   — write key=value to session metadata
+ *   read_ao_metadata <key>             — read a value from session metadata
+ *   ao_cache_dir                       — print the per-session gh cache directory
+ *   ao_cache_fresh <key> <max_age>     — test if a cache entry is fresh (0 = infinite)
+ *   ao_cache_read <key>                — print cached stdout
+ *   ao_cache_write <key>               — write stdin to cache atomically
+ */
+export declare const AO_METADATA_HELPER = "#!/usr/bin/env bash\n# ao-metadata-helper \u2014 shared by gh/git wrappers\n# Provides: update_ao_metadata, read_ao_metadata, ao_cache_*\n\n# \u2500\u2500 Shared validation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n_ao_validate_env() {\n  local ao_dir=\"${AO_DATA_DIR:-}\"\n  local ao_session=\"${AO_SESSION:-}\"\n  [[ -z \"$ao_dir\" || -z \"$ao_session\" ]] && return 1\n  case \"$ao_session\" in */* | *..*) return 1 ;; esac\n  case \"$ao_dir\" in\n    \"$HOME\"/.ao/* | \"$HOME\"/.agent-orchestrator/* | /tmp/*) ;;\n    *) return 1 ;;\n  esac\n  return 0\n}\n\n# \u2500\u2500 Metadata write \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nupdate_ao_metadata() {\n  local key=\"$1\" value=\"$2\"\n  local ao_dir=\"${AO_DATA_DIR:-}\"\n  local ao_session=\"${AO_SESSION:-}\"\n\n  [[ -z \"$ao_dir\" || -z \"$ao_session\" ]] && return 0\n\n  # Validate: session name must not contain path separators or traversal\n  case \"$ao_session\" in\n    */* | *..*) return 0 ;;\n  esac\n\n  # Validate: ao_dir must be an absolute path under known ao directories or /tmp\n  case \"$ao_dir\" in\n    \"$HOME\"/.ao/* | \"$HOME\"/.agent-orchestrator/* | /tmp/*) ;;\n    *) return 0 ;;\n  esac\n\n  # V2 storage uses .json extension; fallback to bare filename for pre-migration layouts\n  local metadata_file=\"$ao_dir/${ao_session}.json\"\n  if [[ ! -f \"$metadata_file\" ]]; then\n    metadata_file=\"$ao_dir/$ao_session\"\n  fi\n\n  # Resolve symlinks and verify canonicalized paths are still within trusted roots\n  local real_dir real_ao_dir\n  real_ao_dir=\"$(cd \"$ao_dir\" 2>/dev/null && pwd -P)\" || return 0\n  real_dir=\"$(cd \"$(dirname \"$metadata_file\")\" 2>/dev/null && pwd -P)\" || return 0\n\n  # Re-validate real_ao_dir against trusted roots after canonicalization\n  # (prevents /tmp/../../home/user from escaping the allowlist)\n  case \"$real_ao_dir\" in\n    \"$HOME\"/.ao/* | \"$HOME\"/.ao | \"$HOME\"/.agent-orchestrator/* | \"$HOME\"/.agent-orchestrator | /tmp/*) ;;\n    *) return 0 ;;\n  esac\n\n  [[ \"$real_dir\" == \"$real_ao_dir\"* ]] || return 0\n\n  [[ -f \"$metadata_file\" ]] || return 0\n\n  # Validate key \u2014 only allow alphanumeric, underscore, hyphen (prevents sed/jq injection)\n  [[ \"$key\" =~ ^[a-zA-Z0-9_-]+$ ]] || return 0\n\n  local temp_file=\"${metadata_file}.tmp.$$\"\n\n  # Strip newlines from value to prevent injection\n  local clean_value=\"$(printf '%s' \"$value\" | tr -d '\\n')\"\n\n  # Detect JSON vs key=value format\n  local first_char\n  first_char=\"$(head -c1 \"$metadata_file\" 2>/dev/null)\"\n\n  if [[ \"$first_char\" == \"{\" ]]; then\n    # JSON format\n    if command -v jq &>/dev/null; then\n      jq --arg k \"$key\" --arg v \"$clean_value\" '.[$k] = $v' \"$metadata_file\" > \"$temp_file\"\n      mv \"$temp_file\" \"$metadata_file\"\n    else\n      # jq unavailable \u2014 use node (hard dep) for safe nested JSON update\n      node -e \"\n        const fs = require('fs');\n        const d = JSON.parse(fs.readFileSync(process.argv[1], 'utf8'));\n        d[process.argv[2]] = process.argv[3];\n        fs.writeFileSync(process.argv[4], JSON.stringify(d, null, 2));\n      \" \"$metadata_file\" \"$key\" \"$clean_value\" \"$temp_file\"\n      mv \"$temp_file\" \"$metadata_file\"\n    fi\n  else\n    # Key=value format (legacy)\n    local escaped_value=\"$(printf '%s' \"$clean_value\" | sed 's/[&|\\\\]/\\\\&/g')\"\n    if grep -q \"^${key}=\" \"$metadata_file\" 2>/dev/null; then\n      sed \"s|^${key}=.*|${key}=${escaped_value}|\" \"$metadata_file\" > \"$temp_file\"\n    else\n      cp \"$metadata_file\" \"$temp_file\"\n      printf '%s=%s\\n' \"$key\" \"$clean_value\" >> \"$temp_file\"\n    fi\n    mv \"$temp_file\" \"$metadata_file\"\n  fi\n}\n\n# \u2500\u2500 Metadata read \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nread_ao_metadata() {\n  local key=\"$1\"\n  _ao_validate_env || return 1\n  local metadata_file=\"${AO_DATA_DIR}/${AO_SESSION}\"\n  [[ -f \"$metadata_file\" ]] || return 1\n  [[ \"$key\" =~ ^[a-zA-Z0-9_-]+$ ]] || return 1\n  local line\n  line=$(grep \"^${key}=\" \"$metadata_file\" 2>/dev/null | head -1) || return 1\n  printf '%s' \"${line#*=}\"\n}\n\n# \u2500\u2500 Cache helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nao_cache_dir() {\n  _ao_validate_env || return 1\n  local d=\"${AO_DATA_DIR}/.ghcache/${AO_SESSION}\"\n  mkdir -p \"$d\" 2>/dev/null || return 1\n  printf '%s' \"$d\"\n}\n\nao_cache_fresh() {\n  local cache_key=\"$1\" max_age=\"$2\"\n  [[ \"$cache_key\" =~ ^[a-zA-Z0-9_.-]+$ ]] || return 1\n  local cache_dir\n  cache_dir=\"$(ao_cache_dir)\" || return 1\n  local ts_file=\"$cache_dir/${cache_key}.ts\"\n  local stdout_file=\"$cache_dir/${cache_key}.stdout\"\n  [[ -f \"$stdout_file\" && -f \"$ts_file\" ]] || return 1\n  local cached_ts now\n  cached_ts=$(cat \"$ts_file\" 2>/dev/null) || return 1\n  # Sanity check: cached_ts must be a positive integer (epoch seconds)\n  [[ \"$cached_ts\" =~ ^[0-9]+$ && \"$cached_ts\" -gt 0 ]] || return 1\n  # max_age=0 means infinite TTL\n  [[ \"$max_age\" -eq 0 ]] 2>/dev/null && return 0\n  now=$(date +%s)\n  (( now - cached_ts < max_age ))\n}\n\nao_cache_read() {\n  local cache_key=\"$1\"\n  [[ \"$cache_key\" =~ ^[a-zA-Z0-9_.-]+$ ]] || return 1\n  local cache_dir\n  cache_dir=\"$(ao_cache_dir)\" || return 1\n  cat \"$cache_dir/${cache_key}.stdout\"\n}\n\nao_cache_write() {\n  local cache_key=\"$1\"\n  [[ \"$cache_key\" =~ ^[a-zA-Z0-9_.-]+$ ]] || return 1\n  local cache_dir\n  cache_dir=\"$(ao_cache_dir)\" || return 1\n  local tmp=\"$cache_dir/${cache_key}.stdout.tmp.$$\"\n  cat > \"$tmp\" && mv \"$tmp\" \"$cache_dir/${cache_key}.stdout\"\n  date +%s > \"$cache_dir/${cache_key}.ts\"\n}\n";
+/**
+ * gh wrapper — intercepts agent-side gh calls for:
+ * 1. Caching repeated read-only commands (PR discovery, issue context)
+ * 2. Auto-updating session metadata on PR creation
+ *
+ * Cache storage: $AO_DATA_DIR/.ghcache/$AO_SESSION/{key}.stdout + {key}.ts
+ * See D4-wrapper-cache-plan.md for full design rationale.
+ */
+export declare const GH_WRAPPER = "#!/usr/bin/env bash\n# ao gh wrapper \u2014 caches reads + auto-updates metadata on writes\n\n# Find real gh by removing our wrapper directory from PATH\nao_bin_dir=\"$(cd \"$(dirname \"$0\")\" && pwd)\"\nclean_path=\"$(echo \"$PATH\" | tr ':' '\\n' | grep -Fxv \"$ao_bin_dir\" | grep . | tr '\\n' ':')\"\nclean_path=\"${clean_path%:}\"\nreal_gh=\"\"\n\n# Prefer explicit gh path when provided by AO environment.\n# Guard against recursive self-reference to the wrapper in ~/.ao/bin.\nif [[ -n \"${GH_PATH:-}\" && -x \"$GH_PATH\" ]]; then\n  gh_dir=\"$(cd \"$(dirname \"$GH_PATH\")\" 2>/dev/null && pwd)\"\n  if [[ \"$gh_dir\" != \"$ao_bin_dir\" ]]; then\n    real_gh=\"$GH_PATH\"\n  fi\nfi\n\nif [[ -z \"$real_gh\" ]]; then\n  real_gh=\"$(PATH=\"$clean_path\" command -v gh 2>/dev/null)\"\nfi\n\nif [[ -z \"$real_gh\" ]]; then\n  echo \"ao-wrapper: gh not found in PATH\" >&2\n  exit 127\nfi\n\n# Source the metadata helper (provides update/read_ao_metadata, ao_cache_*)\nsource \"$ao_bin_dir/ao-metadata-helper.sh\" 2>/dev/null || true\n\n# Redact sensitive values from args before tracing.\n# Handles: -H \"Authorization: ...\", token=..., password=..., secret=...\n_ao_redact_args() {\n  local prev=\"\"\n  local out=()\n  for arg in \"$@\"; do\n    if [[ \"$prev\" == \"-H\" || \"$prev\" == \"--header\" ]] && [[ \"$arg\" =~ ^[Aa]uthorization: ]]; then\n      out+=(\"Authorization: [REDACTED]\")\n    elif [[ \"$arg\" =~ ^-H[Aa]uthorization: ]]; then\n      out+=(\"-HAuthorization: [REDACTED]\")\n    elif [[ \"$arg\" =~ ^[Tt]oken= ]]; then\n      out+=(\"token=[REDACTED]\")\n    elif [[ \"$arg\" =~ ^[Pp]assword= ]]; then\n      out+=(\"password=[REDACTED]\")\n    elif [[ \"$arg\" =~ ^[Ss]ecret= ]]; then\n      out+=(\"secret=[REDACTED]\")\n    else\n      out+=(\"$arg\")\n    fi\n    prev=\"$arg\"\n  done\n  printf '%s\n' \"${out[@]}\"\n}\n\n# Best-effort JSONL tracing for agent-side gh invocations.\nlog_gh_invocation() {\n  local trace_file=\"${AO_AGENT_GH_TRACE:-}\"\n  [[ -z \"$trace_file\" ]] && return 0\n  command -v jq >/dev/null 2>&1 || return 0\n\n  mkdir -p \"$(dirname \"$trace_file\")\" 2>/dev/null || return 0\n\n  local args_json\n  args_json=\"$(_ao_redact_args \"$@\" | jq -Rsc 'split(\"\n\")[:-1]')\" || return 0\n\n  # Compute operation: gh.{arg1}.{arg2} (mirrors AO-side extractOperation)\n  local _ao_op=\"gh\"\n  [[ $# -ge 1 ]] && _ao_op=\"gh.$1\"\n  [[ $# -ge 2 && \"$2\" != -* ]] && _ao_op=\"gh.$1.$2\"\n\n  jq -nc     --arg timestamp \"$(date -u +\"%Y-%m-%dT%H:%M:%SZ\")\"     --arg cwd \"$PWD\"     --arg operation \"$_ao_op\"     --arg aoSession \"${AO_SESSION:-}\"     --arg aoSessionName \"${AO_SESSION_NAME:-}\"     --arg aoProjectId \"${AO_PROJECT_ID:-}\"     --arg aoIssueId \"${AO_ISSUE_ID:-}\"     --arg aoCallerType \"${AO_CALLER_TYPE:-}\"     --arg pid \"$$\"     --arg wrapperVersion \"0.8.0\"     --argjson args \"$args_json\"     '{\n      timestamp: $timestamp,\n      cwd: $cwd,\n      args: $args,\n      operation: $operation,\n      aoSession: (if $aoSession == \"\" then null else $aoSession end),\n      aoSessionName: (if $aoSessionName == \"\" then null else $aoSessionName end),\n      aoProjectId: (if $aoProjectId == \"\" then null else $aoProjectId end),\n      aoIssueId: (if $aoIssueId == \"\" then null else $aoIssueId end),\n      aoCallerType: (if $aoCallerType == \"\" then null else $aoCallerType end),\n      pid: ($pid | tonumber),\n      wrapperVersion: $wrapperVersion\n    }' >> \"$trace_file\" 2>/dev/null || true\n}\n\nlog_gh_invocation \"$@\"\n\n# Best-effort cache-outcome tracing (appends to same JSONL trace file).\n# result: hit | miss-stored | miss-write-failed | miss-negative | miss-error | passthrough\nlog_ao_cache() {\n  local result=\"$1\" cache_key=\"$2\" duration_ms=\"${3:-0}\" exit_code=\"${4:-0}\" ok=\"${5:-true}\"\n  local trace_file=\"${AO_AGENT_GH_TRACE:-}\"\n  [[ -z \"$trace_file\" ]] && return 0\n  printf '{\"timestamp\":\"%s\",\"cacheResult\":\"%s\",\"cacheKey\":\"%s\",\"pid\":%s,\"durationMs\":%s,\"exitCode\":%s,\"ok\":%s}\\n'     \"$(date -u +\"%Y-%m-%dT%H:%M:%SZ\")\" \"$result\" \"$cache_key\" \"$$\"     \"$duration_ms\" \"$exit_code\" \"$ok\"     >> \"$trace_file\" 2>/dev/null || true\n}\n\n# =============================================================================\n# Cacheable reads\n# =============================================================================\n\n# \u2500\u2500 1. PR discovery: gh pr list --head <B> --limit 1 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# 120s TTL for positive results (non-empty array). Never caches [].\nif [[ \"$1\" == \"pr\" && \"$2\" == \"list\" ]]; then\n  _ao_head=\"\" _ao_limit=\"\" _ao_json=\"\" _ao_repo=\"\" _ao_cacheable=true\n  _ao_saved_args=(\"$@\")\n  shift 2\n  while [[ $# -gt 0 ]]; do\n    case \"$1\" in\n      --head)     _ao_head=\"$2\"; shift 2 ;;\n      --head=*)   _ao_head=\"${1#--head=}\"; shift ;;\n      --limit)    _ao_limit=\"$2\"; shift 2 ;;\n      --limit=*)  _ao_limit=\"${1#--limit=}\"; shift ;;\n      --json)     _ao_json=\"$2\"; shift 2 ;;\n      --json=*)   _ao_json=\"${1#--json=}\"; shift ;;\n      --repo)     _ao_repo=\"$2\"; shift 2 ;;\n      --repo=*)   _ao_repo=\"${1#--repo=}\"; shift ;;\n      --search|--state|--assignee|--label|--jq|--template)\n        _ao_cacheable=false; break ;;\n      --search=*|--state=*|--assignee=*|--label=*|--jq=*|--template=*)\n        _ao_cacheable=false; break ;;\n      -*)         shift ;;  # skip unknown flags\n      *)          shift ;;  # skip positional\n    esac\n  done\n  set -- \"${_ao_saved_args[@]}\"\n\n  if [[ \"$_ao_cacheable\" == true && \"$_ao_limit\" == \"1\" && -n \"$_ao_head\" ]]; then\n    # Use sha256 hash suffix to avoid collisions from tr-based sanitization\n    # (e.g. feat/foo, feat-foo, feat_foo would otherwise map to the same key)\n    _ao_raw_key=\"pr-discovery-${_ao_repo}-${_ao_head}\"\n    if [[ -n \"$_ao_json\" ]]; then\n      _ao_raw_key=\"${_ao_raw_key}-j-${_ao_json}\"\n    fi\n    _ao_cache_key=$(printf '%s' \"$_ao_raw_key\" | shasum -a 256 | cut -c1-16)\n    _ao_cache_key=\"pr-disc-${_ao_cache_key}\"\n\n    if ao_cache_fresh \"$_ao_cache_key\" 120 2>/dev/null; then\n      log_ao_cache \"hit\" \"$_ao_cache_key\" 0 0 true\n      ao_cache_read \"$_ao_cache_key\"\n      exit 0\n    fi\n\n    # Cache miss \u2014 call real gh, cache positive results (stderr passes through)\n    _ao_tmpout=\"$(mktemp)\"\n    trap 'rm -f \"$_ao_tmpout\"' EXIT\n    _ao_start_s=$(date +%s)\n    \"$real_gh\" \"$@\" > \"$_ao_tmpout\"\n    _ao_exit=$?\n    _ao_duration_ms=$(( ($(date +%s) - _ao_start_s) * 1000 ))\n    _ao_ok=true; [[ $_ao_exit -ne 0 ]] && _ao_ok=false\n    cat \"$_ao_tmpout\"\n    if [[ $_ao_exit -eq 0 ]]; then\n      _ao_trimmed=$(tr -d '[:space:]' < \"$_ao_tmpout\")\n      # Only cache non-empty positive results\n      if [[ -n \"$_ao_trimmed\" && \"$_ao_trimmed\" != \"[]\" ]]; then\n        if ao_cache_write \"$_ao_cache_key\" < \"$_ao_tmpout\" 2>/dev/null; then\n          log_ao_cache \"miss-stored\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n        else\n          log_ao_cache \"miss-write-failed\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n        fi\n      else\n        log_ao_cache \"miss-negative\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n      fi\n    else\n      log_ao_cache \"miss-error\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n    fi\n    exit $_ao_exit\n  fi\nfi\n\n# \u2500\u2500 2. Issue context: gh issue view <N> \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# 300-second TTL. Caches any successful response.\nif [[ \"$1\" == \"issue\" && \"$2\" == \"view\" ]]; then\n  _ao_issue_id=\"\" _ao_json=\"\" _ao_repo=\"\" _ao_cacheable=true\n  _ao_saved_args=(\"$@\")\n  shift 2\n  # First non-flag arg is the issue identifier\n  while [[ $# -gt 0 ]]; do\n    case \"$1\" in\n      --web|--comments|--jq|--template)\n        _ao_cacheable=false; break ;;\n      --jq=*|--template=*)\n        _ao_cacheable=false; break ;;\n      --json)     _ao_json=\"$2\"; shift 2 ;;\n      --json=*)   _ao_json=\"${1#--json=}\"; shift ;;\n      --repo)     _ao_repo=\"$2\"; shift 2 ;;\n      --repo=*)   _ao_repo=\"${1#--repo=}\"; shift ;;\n      -*)         shift ;;\n      *)\n        if [[ -z \"$_ao_issue_id\" && \"$1\" =~ ^[0-9]+$ ]]; then\n          _ao_issue_id=\"$1\"\n        fi\n        shift ;;\n    esac\n  done\n  set -- \"${_ao_saved_args[@]}\"\n\n  if [[ \"$_ao_cacheable\" == true && -n \"$_ao_issue_id\" ]]; then\n    _ao_raw_key=\"issue-ctx-${_ao_repo}-${_ao_issue_id}\"\n    if [[ -n \"$_ao_json\" ]]; then\n      _ao_raw_key=\"${_ao_raw_key}-j-${_ao_json}\"\n    fi\n    _ao_cache_key=$(printf '%s' \"$_ao_raw_key\" | shasum -a 256 | cut -c1-16)\n    _ao_cache_key=\"issue-${_ao_cache_key}\"\n\n    if ao_cache_fresh \"$_ao_cache_key\" 300 2>/dev/null; then\n      log_ao_cache \"hit\" \"$_ao_cache_key\" 0 0 true\n      ao_cache_read \"$_ao_cache_key\"\n      exit 0\n    fi\n\n    _ao_tmpout=\"$(mktemp)\"\n    trap 'rm -f \"$_ao_tmpout\"' EXIT\n    _ao_start_s=$(date +%s)\n    \"$real_gh\" \"$@\" > \"$_ao_tmpout\"\n    _ao_exit=$?\n    _ao_duration_ms=$(( ($(date +%s) - _ao_start_s) * 1000 ))\n    _ao_ok=true; [[ $_ao_exit -ne 0 ]] && _ao_ok=false\n    cat \"$_ao_tmpout\"\n    if [[ $_ao_exit -eq 0 ]]; then\n      if ao_cache_write \"$_ao_cache_key\" < \"$_ao_tmpout\" 2>/dev/null; then\n        log_ao_cache \"miss-stored\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n      else\n        log_ao_cache \"miss-write-failed\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n      fi\n    else\n      log_ao_cache \"miss-error\" \"$_ao_cache_key\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n    fi\n    exit $_ao_exit\n  fi\nfi\n\n# =============================================================================\n# Write intercepts\n# =============================================================================\n\ncase \"$1/$2\" in\n  pr/create)\n    tmpout=\"$(mktemp)\"\n    trap 'rm -f \"$tmpout\"' EXIT\n\n    _ao_start_s=$(date +%s)\n    \"$real_gh\" \"$@\" 2>&1 | tee \"$tmpout\"\n    exit_code=${PIPESTATUS[0]}\n    _ao_duration_ms=$(( ($(date +%s) - _ao_start_s) * 1000 ))\n    _ao_ok=true; [[ $exit_code -ne 0 ]] && _ao_ok=false\n\n    if [[ $exit_code -eq 0 ]]; then\n      output=\"$(cat \"$tmpout\")\"\n      pr_url=\"$(echo \"$output\" | grep -Eo 'https?://[^/]+/[^/]+/[^/]+/pull/[0-9]+' | head -1)\"\n      report_state=\"pr_created\"\n      report_draft=\"false\"\n      for arg in \"$@\"; do\n        if [[ \"$arg\" == \"--draft\" || \"$arg\" == \"-d\" ]]; then\n          report_state=\"draft_pr_created\"\n          report_draft=\"true\"\n          break\n        fi\n      done\n      if [[ -n \"$pr_url\" ]]; then\n        update_ao_metadata pr \"$pr_url\"\n        update_ao_metadata agentReportedPrUrl \"$pr_url\"\n        # Append to prs field (comma-separated list of all PR URLs for this session).\n        # Supports multiple PRs per session \u2014 same repo or different repos.\n        _ao_meta_f=\"${AO_DATA_DIR}/${AO_SESSION}.json\"\n        [[ -f \"$_ao_meta_f\" ]] || _ao_meta_f=\"${AO_DATA_DIR}/${AO_SESSION}\"\n        if head -c1 \"$_ao_meta_f\" 2>/dev/null | grep -q '{'; then\n          existing_prs=\"$(jq -r '.prs // empty' \"$_ao_meta_f\" 2>/dev/null || echo \"\")\"\n        else\n          existing_prs=\"$(grep '^prs=' \"$_ao_meta_f\" 2>/dev/null | cut -d'=' -f2- || echo \"\")\"\n        fi\n        if [[ -z \"$existing_prs\" ]]; then\n          new_prs=\"$pr_url\"\n        else\n          if ! echo \",$existing_prs,\" | grep -qF \",$pr_url,\"; then\n            new_prs=\"$existing_prs,$pr_url\"\n          else\n            new_prs=\"$existing_prs\"\n          fi\n        fi\n        update_ao_metadata prs \"$new_prs\"\n      fi\n      pr_number=\"$(printf '%s' \"$pr_url\" | grep -Eo '[0-9]+$' | head -1)\"\n      if [[ -n \"$pr_number\" ]]; then\n        update_ao_metadata agentReportedPrNumber \"$pr_number\"\n      fi\n      update_ao_metadata agentReportedState \"$report_state\"\n      update_ao_metadata agentReportedAt \"$(date -u +%Y-%m-%dT%H:%M:%SZ)\"\n      update_ao_metadata agentReportedPrIsDraft \"$report_draft\"\n    fi\n\n    log_ao_cache \"passthrough\" \"\" \"$_ao_duration_ms\" \"$exit_code\" \"$_ao_ok\"\n    exit $exit_code\n    ;;\n  *)\n    _ao_start_s=$(date +%s)\n    \"$real_gh\" \"$@\"\n    _ao_exit=$?\n    _ao_duration_ms=$(( ($(date +%s) - _ao_start_s) * 1000 ))\n    _ao_ok=true; [[ $_ao_exit -ne 0 ]] && _ao_ok=false\n    log_ao_cache \"passthrough\" \"\" \"$_ao_duration_ms\" \"$_ao_exit\" \"$_ao_ok\"\n    exit $_ao_exit\n    ;;\nesac\n";
+/**
+ * git wrapper — intercepts branch operations to auto-update metadata.
+ * All other commands pass through transparently.
+ *
+ * Detects:
+ * - git checkout -b <branch> / git switch -c <branch>  (new branch)
+ * - git checkout <branch> / git switch <branch>         (existing feature branch)
+ *
+ * For existing branch switches, only updates if the branch name looks like a
+ * feature branch (contains / or -) to avoid noise from checkout of commits/tags.
+ * Matches the same heuristic as Claude Code's PostToolUse hook.
+ */
+export declare const GIT_WRAPPER = "#!/usr/bin/env bash\n# ao git wrapper \u2014 auto-updates session metadata on branch operations\n\n# Find real git by removing our wrapper directory from PATH\nao_bin_dir=\"$(cd \"$(dirname \"$0\")\" && pwd)\"\nclean_path=\"$(echo \"$PATH\" | tr ':' '\\n' | grep -Fxv \"$ao_bin_dir\" | grep . | tr '\\n' ':')\"\nclean_path=\"${clean_path%:}\"\nreal_git=\"$(PATH=\"$clean_path\" command -v git 2>/dev/null)\"\n\nif [[ -z \"$real_git\" ]]; then\n  echo \"ao-wrapper: git not found in PATH\" >&2\n  exit 127\nfi\n\n# Source the metadata helper\nsource \"$ao_bin_dir/ao-metadata-helper.sh\" 2>/dev/null || true\n\n# Run real git\n\"$real_git\" \"$@\"\nexit_code=$?\n\n# Only update metadata on success\nif [[ $exit_code -eq 0 ]]; then\n  case \"$1/$2\" in\n    checkout/-b)\n      update_ao_metadata branch \"$3\"\n      ;;\n    switch/-c)\n      update_ao_metadata branch \"$3\"\n      ;;\n    checkout/*|switch/*)\n      # Existing branch switch \u2014 only track feature-looking branches (contain / or -)\n      # Skip flags (e.g. -B), HEAD, tags, commit hashes, and simple names like \"main\"\n      branch=\"$2\"\n      # If $2 is a flag, the actual branch name is in $3\n      if [[ \"$branch\" == -* ]]; then branch=\"$3\"; fi\n      if [[ -n \"$branch\" && \"$branch\" != \"HEAD\" && \"$branch\" != -* && \"$branch\" == *[/-]* ]]; then\n        update_ao_metadata branch \"$branch\"\n      fi\n      ;;\n  esac\nfi\n\nexit $exit_code\n";
+/**
+ * Build a Node.js wrapper script for a given binary (gh or git).
+ *
+ * On Windows, bash scripts cannot be executed directly, so we generate:
+ *  - <name>.cjs — the actual interception logic (Node.js, forced CJS mode)
+ *  - <name>.cmd — a tiny CMD shim: @node "%~dp0<name>.cjs" %*
+ *
+ * The .js script replicates what the bash wrapper does:
+ *  - gh:  intercepts `gh pr create` and `gh pr merge`
+ *  - git: intercepts `git checkout -b` and `git switch -c`
+ *
+ * @param name           - "gh" or "git"
+ * @param realBinaryPath - Absolute path to the real binary, or empty string to
+ *                         resolve at runtime via PATH (excluding the wrapper dir).
+ */
+export declare function buildNodeWrapper(name: "gh" | "git", realBinaryPath: string): string;
+/**
+ * Section appended to AGENTS.md as a secondary signal. The PATH-based wrappers
+ * handle metadata updates automatically, but AGENTS.md reinforces the intent
+ * and helps if the wrappers are bypassed.
+ */
+export declare const AO_AGENTS_MD_SECTION = "\n## Athene (ao) Session\n\nYou are running inside an Athene managed workspace.\nSession metadata is updated automatically via shell wrappers.\n\nIf automatic updates fail, you can manually update metadata:\n```bash\n~/.ao/bin/ao-metadata-helper.sh  # sourced automatically\n# Then call: update_ao_metadata <key> <value>\n```\n";
+/**
+ * Install PATH-based shell wrappers and append an AO section to AGENTS.md.
+ *
+ * This is the standard workspace setup for agents that don't have native hook
+ * systems (Codex, Aider, OpenCode). Call this from both `setupWorkspaceHooks`
+ * and `postLaunchSetup`.
+ *
+ * 1. Creates ~/.ao/bin/ with gh/git wrappers and metadata helper script
+ * 2. Appends an "Athene" section to the workspace AGENTS.md
+ */
+export declare function setupPathWrapperWorkspace(workspacePath: string): Promise<void>;
+//# sourceMappingURL=agent-workspace-hooks.d.ts.map

package/dist/agent-workspace-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-workspace-hooks.d.ts","sourceRoot":"","sources":["../src/agent-workspace-hooks.ts"],"names":[],"mappings":"AAwBA,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,sBAA+B,CAAC;AAkB9D;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAsBnE;AAQD;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,+vNA6J9B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,wrZA+TtB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,o6CA4CvB,CAAC;AAMF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAKnF;AAkQD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,4UAWhC,CAAC;AAkBF;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDpF"}