@massu/core 1.10.8 → 1.12.1

package/src/hooks/pre-delete-check.ts

@@ -1,243 +0,0 @@
-#!/usr/bin/env node
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-// ============================================================
-// PreToolUse Hook: Pre-Deletion Feature Impact Check
-// Detects file deletion patterns (rm, git rm, Write with empty content)
-// and runs sentinel impact analysis. Blocks if critical features orphaned.
-// Also protects knowledge system files from accidental deletion (P7-005).
-// Must complete in <500ms.
-// ============================================================
-
-import Database from 'better-sqlite3';
-import { resolve } from 'path';
-import { existsSync } from 'fs';
-import { getFeatureImpact } from '../sentinel-db.ts';
-import { getProjectRoot, getResolvedPaths } from '../config.ts';
-import { t } from '../lib/sql-table-names.ts';
-
-interface HookInput {
-  session_id: string;
-  tool_name: string;
-  tool_input: {
-    command?: string;
-    file_path?: string;
-    content?: string;
-  };
-}
-
-const PROJECT_ROOT = getProjectRoot();
-
-// Knowledge system files that must never be silently deleted.
-// These files underpin knowledge indexing and memory retrieval.
-const KNOWLEDGE_PROTECTED_FILES = [
-  'knowledge-db.ts',
-  'knowledge-indexer.ts',
-  'knowledge-tools.ts',
-];
-
-function getDataDb(): Database.Database | null {
-  const dbPath = getResolvedPaths().dataDbPath;
-  if (!existsSync(dbPath)) return null;
-  try {
-    const db = new Database(dbPath, { readonly: true });
-    db.pragma('journal_mode = WAL');
-    return db;
-  } catch {
-    return null;
-  }
-}
-
-/**
- * P7-005: Check if the tool call targets a protected knowledge system file.
- * Returns a warning message if a protected file would be deleted/emptied.
- */
-function checkKnowledgeFileProtection(input: HookInput): string | null {
-  const candidateFiles: string[] = [];
-
-  if (input.tool_name === 'Bash' && input.tool_input.command) {
-    const cmd = input.tool_input.command;
-    const rmMatch = cmd.match(/(?:rm|git\s+rm)\s+(?:-[rf]*\s+)*(.+)/);
-    if (rmMatch) {
-      const parts = rmMatch[1].split(/\s+/).filter(p => !p.startsWith('-'));
-      candidateFiles.push(...parts);
-    }
-  }
-
-  if (input.tool_name === 'Write' && input.tool_input.file_path) {
-    const content = input.tool_input.content || '';
-    if (content.trim().length === 0) {
-      candidateFiles.push(input.tool_input.file_path);
-    }
-  }
-
-  for (const f of candidateFiles) {
-    const basename = f.split('/').pop() ?? f;
-    if (KNOWLEDGE_PROTECTED_FILES.includes(basename)) {
-      return (
-        `KNOWLEDGE SYSTEM PROTECTION: "${basename}" is a core knowledge system file. ` +
-        `Deleting it will break knowledge indexing and memory retrieval. ` +
-        `Create a replacement before removing.`
-      );
-    }
-  }
-
-  return null;
-}
-
-function extractDeletedFiles(input: HookInput): string[] {
-  const files: string[] = [];
-
-  if (input.tool_name === 'Bash' && input.tool_input.command) {
-    const cmd = input.tool_input.command;
-
-    // Detect rm commands
-    const rmMatch = cmd.match(/(?:rm|git\s+rm)\s+(?:-[rf]*\s+)*(.+)/);
-    if (rmMatch) {
-      const paths = rmMatch[1].split(/\s+/).filter(p => !p.startsWith('-'));
-      for (const p of paths) {
-        const relPath = p.startsWith('src/') ? p : p.replace(PROJECT_ROOT + '/', '');
-        if (relPath.startsWith('src/') || relPath.endsWith('.py')) {
-          files.push(relPath);
-        }
-      }
-    }
-  }
-
-  // Detect Write tool with empty content (file replacement that empties)
-  if (input.tool_name === 'Write' && input.tool_input.file_path) {
-    const content = input.tool_input.content || '';
-    if (content.trim().length === 0) {
-      const relPath = input.tool_input.file_path.replace(PROJECT_ROOT + '/', '');
-      if (relPath.startsWith('src/') || relPath.endsWith('.py')) {
-        files.push(relPath);
-      }
-    }
-  }
-
-  return files;
-}
-
-async function main(): Promise<void> {
-  try {
-    const input = await readStdin();
-    const hookInput = JSON.parse(input) as HookInput;
-
-    // P7-005: Check knowledge file protection before anything else
-    const knowledgeWarning = checkKnowledgeFileProtection(hookInput);
-    if (knowledgeWarning) {
-      process.stdout.write(JSON.stringify({ message: knowledgeWarning }));
-      process.exit(0);
-      return;
-    }
-
-    const deletedFiles = extractDeletedFiles(hookInput);
-    if (deletedFiles.length === 0) {
-      process.exit(0);
-      return;
-    }
-
-    const db = getDataDb();
-    if (!db) {
-      // No database available - can't check
-      process.exit(0);
-      return;
-    }
-
-    // The sentinel registry table name (defined by sentinel-db schema).
-    // P-H032: now config-driven via t() helper from lib/sql-table-names.ts.
-    const SENTINEL_TABLE = t('sentinel');
-
-    try {
-      // Check if any sentinel tables exist
-      const tableExists = db.prepare(
-        `SELECT name FROM sqlite_master WHERE type='table' AND name=?`
-      ).get(SENTINEL_TABLE);
-
-      if (!tableExists) {
-        process.exit(0);
-        return;
-      }
-
-      const impact = getFeatureImpact(db, deletedFiles);
-
-      if (impact.blocked) {
-        const msg = [
-          `SENTINEL IMPACT WARNING: Deleting ${deletedFiles.length} file(s) would affect features:`,
-          '',
-        ];
-
-        if (impact.orphaned.length > 0) {
-          msg.push(`ORPHANED (${impact.orphaned.length} features - no primary components left):`);
-          for (const item of impact.orphaned) {
-            msg.push(`  - ${item.feature.feature_key} [${item.feature.priority}]: ${item.feature.title}`);
-          }
-        }
-
-        if (impact.degraded.length > 0) {
-          msg.push(`DEGRADED (${impact.degraded.length} features - some components removed):`);
-          for (const item of impact.degraded) {
-            msg.push(`  - ${item.feature.feature_key}: ${item.feature.title}`);
-          }
-        }
-
-        msg.push('');
-        msg.push('Create a migration plan before deleting these files.');
-
-        // Output warning but don't block (user can proceed)
-        process.stdout.write(JSON.stringify({ message: msg.join('\n') }));
-      }
-      // Check Python import graph for deleted .py files
-      const pyFiles = deletedFiles.filter(f => f.endsWith('.py'));
-      if (pyFiles.length > 0) {
-        try {
-          for (const pyFile of pyFiles) {
-            const importers = db.prepare(
-              `SELECT source_file FROM ${t('py_imports')} WHERE target_file = ?`
-            ).all(pyFile) as { source_file: string }[];
-
-            const routes = db.prepare(
-              `SELECT method, path FROM ${t('py_routes')} WHERE file = ?`
-            ).all(pyFile) as { method: string; path: string }[];
-
-            const models = db.prepare(
-              `SELECT class_name FROM ${t('py_models')} WHERE file = ?`
-            ).all(pyFile) as { class_name: string }[];
-
-            if (importers.length > 0 || routes.length > 0 || models.length > 0) {
-              const parts: string[] = [];
-              if (importers.length > 0) parts.push(`imported by ${importers.length} files`);
-              if (routes.length > 0) parts.push(`defines ${routes.length} routes`);
-              if (models.length > 0) parts.push(`defines ${models.length} models`);
-
-              const msg = `PYTHON IMPACT: "${pyFile}" ${parts.join(', ')}. Check dependents before deleting.`;
-              process.stdout.write(JSON.stringify({ message: msg }));
-            }
-          }
-        } catch {
-          // Python tables may not exist yet
-        }
-      }
-    } finally {
-      db.close();
-    }
-  } catch {
-    // Hooks must never crash
-  }
-
-  process.exit(0);
-}
-
-function readStdin(): Promise<string> {
-  return new Promise((resolve) => {
-    let data = '';
-    process.stdin.setEncoding('utf-8');
-    process.stdin.on('data', (chunk) => { data += chunk; });
-    process.stdin.on('end', () => resolve(data));
-    // Timeout to prevent hanging
-    setTimeout(() => resolve(data), 400);
-  });
-}
-
-main();

package/src/hooks/quality-event.ts

@@ -1,127 +0,0 @@
-#!/usr/bin/env node
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-// ============================================================
-// PostToolUse Hook: Quality Event Recorder
-// Parses tool responses for quality signals (test failures,
-// type errors, build failures) and records them for analytics.
-// Must complete in <500ms.
-// ============================================================
-
-import { getMemoryDb } from '../memory-db.ts';
-
-interface HookInput {
-  session_id: string;
-  transcript_path: string;
-  cwd: string;
-  hook_event_name: string;
-  tool_name: string;
-  tool_input: Record<string, unknown>;
-  tool_response: string;
-}
-
-interface QualitySignal {
-  event_type: string;
-  details: string;
-}
-
-const TEST_FAILURE_PATTERNS: RegExp[] = [
-  /\bFAIL\b/,
-  /✗/,
-  /\bfailed\b/i,
-  /\bError:/,
-];
-
-const TYPE_ERROR_PATTERNS: RegExp[] = [
-  /error TS\d+/,
-  /\btsc\b.*error/i,
-];
-
-const BUILD_FAILURE_PATTERNS: RegExp[] = [
-  /Build failed/i,
-  /\besbuild\b.*error/i,
-  /\besbuild\b.*failed/i,
-];
-
-function detectQualitySignals(toolResponse: string): QualitySignal[] {
-  const signals: QualitySignal[] = [];
-  const response = toolResponse ?? '';
-
-  for (const pattern of TEST_FAILURE_PATTERNS) {
-    if (pattern.test(response)) {
-      const match = response.match(pattern);
-      signals.push({
-        event_type: 'test_failure',
-        details: match ? match[0].slice(0, 500) : 'Test failure detected',
-      });
-      break; // One signal per category
-    }
-  }
-
-  for (const pattern of TYPE_ERROR_PATTERNS) {
-    if (pattern.test(response)) {
-      const match = response.match(pattern);
-      signals.push({
-        event_type: 'type_error',
-        details: match ? match[0].slice(0, 500) : 'TypeScript error detected',
-      });
-      break;
-    }
-  }
-
-  for (const pattern of BUILD_FAILURE_PATTERNS) {
-    if (pattern.test(response)) {
-      const match = response.match(pattern);
-      signals.push({
-        event_type: 'build_failure',
-        details: match ? match[0].slice(0, 500) : 'Build failure detected',
-      });
-      break;
-    }
-  }
-
-  return signals;
-}
-
-async function main(): Promise<void> {
-  try {
-    const input = await readStdin();
-    const hookInput = JSON.parse(input) as HookInput;
-    const { session_id, tool_name, tool_response } = hookInput;
-
-    const signals = detectQualitySignals(tool_response);
-    if (signals.length === 0) {
-      process.exit(0);
-      return;
-    }
-
-    const db = getMemoryDb();
-    try {
-      const stmt = db.prepare(`
-        INSERT INTO quality_events (session_id, event_type, tool_name, details)
-        VALUES (?, ?, ?, ?)
-      `);
-      for (const signal of signals) {
-        stmt.run(session_id, signal.event_type, tool_name, signal.details);
-      }
-    } finally {
-      db.close();
-    }
-  } catch (_e) {
-    // Best-effort: never block Claude Code
-  }
-  process.exit(0);
-}
-
-function readStdin(): Promise<string> {
-  return new Promise((resolve) => {
-    let data = '';
-    process.stdin.setEncoding('utf-8');
-    process.stdin.on('data', (chunk: string) => { data += chunk; });
-    process.stdin.on('end', () => resolve(data));
-    setTimeout(() => resolve(data), 3000);
-  });
-}
-
-main();

package/src/hooks/rule-enforcement-pipeline.ts

@@ -1,159 +0,0 @@
-#!/usr/bin/env node
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-// ============================================================
-// PostToolUse Hook: Rule-to-Enforcement Pipeline
-// When a new prevention rule (feedback_*.md) is written,
-// automatically triggers the final step: enforcement placement.
-//
-// Part of the Auto-Learning Pipeline:
-//   Fix Detected → Incident Report → Rule Derived → [ENFORCEMENT]
-//
-// Triggers on: Write to memory/feedback_*.md (configurable)
-// Must complete in <500ms.
-// ============================================================
-
-import { existsSync, readFileSync, readdirSync } from 'fs';
-import { basename, resolve } from 'path';
-import { getProjectRoot, getConfig } from '../config.ts';
-
-interface HookInput {
-  session_id: string;
-  tool_name: string;
-  tool_input: { file_path?: string; content?: string };
-}
-
-async function main(): Promise<void> {
-  try {
-    const input = await readStdin();
-    const hookInput = JSON.parse(input) as HookInput;
-    const filePath = hookInput.tool_input?.file_path;
-
-    if (!filePath) {
-      process.exit(0);
-      return;
-    }
-
-    const config = getConfig();
-    if (config.autoLearning?.enabled === false) {
-      process.exit(0);
-      return;
-    }
-
-    const root = getProjectRoot();
-    const memoryDir = config.autoLearning?.memoryDir ?? 'memory';
-    const enforcementDir = config.autoLearning?.enforcementHooksDir ?? 'scripts/hooks';
-    // Only trigger on feedback rule files
-    const relPath = filePath.startsWith(root + '/') ? filePath.slice(root.length + 1) : filePath;
-    const fileName = basename(filePath);
-
-    // Match feedback_*.md in either relative or absolute memory paths
-    if (!fileName.startsWith('feedback_') || !fileName.endsWith('.md')) {
-      process.exit(0);
-      return;
-    }
-
-    // Must be in a memory-like directory
-    const claudeDir = config.conventions?.claudeDirName ?? '.claude';
-    if (!relPath.includes(memoryDir) && !relPath.includes('memory/') && !relPath.includes(claudeDir + '/')) {
-      process.exit(0);
-      return;
-    }
-
-    if (!existsSync(filePath)) {
-      process.exit(0);
-      return;
-    }
-
-    if (config.autoLearning?.pipeline?.requireEnforcement === false) {
-      process.exit(0);
-      return;
-    }
-
-    // Extract rule details from the file
-    const content = readFileSync(filePath, 'utf-8');
-    const nameMatch = content.match(/^name:\s*(.+)/m);
-    const descMatch = content.match(/^description:\s*(.+)/m);
-    const ruleName = nameMatch?.[1]?.trim() ?? fileName;
-    const ruleDesc = descMatch?.[1]?.trim() ?? '';
-
-    // Check if this rule already has enforcement in any hook file
-    const enforcementDirAbs = resolve(root, enforcementDir);
-    let hasEnforcement = false;
-    if (existsSync(enforcementDirAbs)) {
-      const hookFiles = readdirSync(enforcementDirAbs).filter(f => f.endsWith('.sh') || f.endsWith('.ts') || f.endsWith('.js'));
-      for (const hookFile of hookFiles) {
-        try {
-          const hookContent = readFileSync(resolve(enforcementDirAbs, hookFile), 'utf-8');
-          if (hookContent.includes(fileName)) {
-            hasEnforcement = true;
-            break;
-          }
-        } catch { /* ignore read errors */ }
-      }
-    }
-
-    if (hasEnforcement) {
-      // Already has enforcement — no action needed
-      process.exit(0);
-      return;
-    }
-
-    // Output enforcement placement instructions
-    const lines: string[] = [];
-    lines.push('');
-    lines.push('============================================================================');
-    lines.push(' AUTO-LEARNING: New Rule Created — Enforcement Placement Required');
-    lines.push('============================================================================');
-    lines.push('');
-    lines.push(`  Rule: ${ruleName}`);
-    lines.push(`  File: ${filePath}`);
-    if (ruleDesc) {
-      lines.push(`  Description: ${ruleDesc}`);
-    }
-    lines.push('');
-    lines.push('  This rule has NO automated enforcement yet. Add it now.');
-    lines.push('');
-    lines.push('  ANALYZE the rule and determine enforcement layer(s):');
-    lines.push('');
-    lines.push('  1. STATICALLY DETECTABLE? (grep/regex can find violations in code)');
-    lines.push(`     → Add check to: ${enforcementDir}/pattern-feedback hook`);
-    lines.push(`     → Also add to pre-commit hook if critical`);
-    lines.push('');
-    lines.push('  2. ABOUT EDITING CERTAIN FILES? (auth, infra, routers, etc.)');
-    lines.push(`     → Add warning to: ${enforcementDir}/blast-radius hook`);
-    lines.push('');
-    lines.push('  3. ABOUT DANGEROUS COMMANDS? (kill, rm, destructive ops)');
-    lines.push(`     → Add block to: ${enforcementDir}/dangerous-command hook`);
-    lines.push('');
-    lines.push('  4. NEEDS RUNTIME MONITORING? (can only be detected at runtime)');
-    lines.push('     → Create a monitoring/audit producer');
-    lines.push('');
-    lines.push('  5. AI-GUIDANCE ONLY? (philosophy, process, judgment calls)');
-    lines.push('     → Memory rule is sufficient (already created)');
-    lines.push('');
-    lines.push('  AFTER adding enforcement, test the hook to verify it detects violations.');
-    lines.push('');
-    lines.push('  This step is MANDATORY per the auto-learning pipeline.');
-    lines.push('============================================================================');
-    lines.push('');
-
-    console.log(lines.join('\n'));
-  } catch {
-    // Best-effort: never block Claude Code
-  }
-  process.exit(0);
-}
-
-function readStdin(): Promise<string> {
-  return new Promise((resolve) => {
-    let data = '';
-    process.stdin.setEncoding('utf-8');
-    process.stdin.on('data', (chunk: string) => { data += chunk; });
-    process.stdin.on('end', () => resolve(data));
-    setTimeout(() => resolve(data), 3000);
-  });
-}
-
-main();

package/src/hooks/security-gate.ts

@@ -1,153 +0,0 @@
-#!/usr/bin/env node
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-// ============================================================
-// PreToolUse Hook: Security Gate
-// Validates tool calls against security policies.
-// Checks Bash commands for dangerous patterns and Write/Edit
-// tool calls for protected file paths.
-// Must complete in <500ms.
-// ============================================================
-
-// Force module mode for TypeScript (no external deps needed)
-export {};
-
-interface HookInput {
-  session_id: string;
-  tool_name: string;
-  tool_input: {
-    command?: string;
-    file_path?: string;
-    content?: string;
-    new_string?: string;
-  };
-}
-
-const DANGEROUS_BASH_PATTERNS: Array<{ pattern: RegExp; label: string }> = [
-  { pattern: /rm\s+-[a-z]*r[a-z]*f[a-z]*\s+\/(?:\s|$)/, label: 'rm -rf /' },
-  { pattern: /rm\s+-[a-z]*f[a-z]*r[a-z]*\s+\/(?:\s|$)/, label: 'rm -rf /' },
-  { pattern: /curl\s+.*\|\s*(?:bash|sh|zsh)/, label: 'curl | bash (remote code execution)' },
-  { pattern: /wget\s+.*\|\s*(?:bash|sh|zsh)/, label: 'wget | bash (remote code execution)' },
-  { pattern: /chmod\s+777/, label: 'chmod 777 (world-writable permissions)' },
-  { pattern: /chmod\s+-R\s+777/, label: 'chmod -R 777 (world-writable permissions)' },
-  { pattern: />\s*\/etc\/passwd/, label: 'write to /etc/passwd' },
-  { pattern: />\s*\/etc\/shadow/, label: 'write to /etc/shadow' },
-  { pattern: />\s*\/etc\/sudoers/, label: 'write to /etc/sudoers' },
-  { pattern: /dd\s+if=.*of=\/dev\/(?:sda|sdb|hda|hdb|nvme)/, label: 'dd to raw device' },
-  { pattern: /mkfs\s+\/dev\//, label: 'format disk device' },
-  { pattern: /:\(\)\s*\{\s*:\|:\s*&\s*\}/, label: 'fork bomb' },
-  { pattern: /eval\s+.*\$\(.*curl/, label: 'eval with remote curl' },
-  { pattern: /base64\s+-d\s+.*\|\s*(?:bash|sh|zsh)/, label: 'base64 decoded shell exec' },
-];
-
-const PROTECTED_FILE_PATTERNS: Array<{ pattern: RegExp; label: string }> = [
-  { pattern: /\.env$/, label: '.env file' },
-  { pattern: /\.env\./, label: '.env.* file' },
-  { pattern: /credentials(?:\.json)?$/, label: 'credentials file' },
-  { pattern: /\.pem$/, label: '.pem certificate/key file' },
-  { pattern: /\.key$/, label: '.key file' },
-  { pattern: /\.p12$/, label: '.p12 keystore file' },
-  { pattern: /\.pfx$/, label: '.pfx keystore file' },
-  { pattern: /id_rsa$/, label: 'RSA private key' },
-  { pattern: /id_ed25519$/, label: 'Ed25519 private key' },
-  { pattern: /id_ecdsa$/, label: 'ECDSA private key' },
-  { pattern: /\.ssh\/config$/, label: 'SSH config file' },
-  { pattern: /secrets\.yaml$/, label: 'secrets.yaml file' },
-  { pattern: /secrets\.yml$/, label: 'secrets.yml file' },
-  { pattern: /\.netrc$/, label: '.netrc credentials file' },
-  { pattern: /aws\/credentials$/, label: 'AWS credentials file' },
-  { pattern: /kubeconfig$/, label: 'Kubernetes config file' },
-];
-
-function checkBashCommand(command: string): string | null {
-  for (const { pattern, label } of DANGEROUS_BASH_PATTERNS) {
-    if (pattern.test(command)) {
-      return label;
-    }
-  }
-  return null;
-}
-
-function checkFilePath(filePath: string): string | null {
-  for (const { pattern, label } of PROTECTED_FILE_PATTERNS) {
-    if (pattern.test(filePath)) {
-      return label;
-    }
-  }
-  return null;
-}
-
-const DANGEROUS_PYTHON_PATTERNS: Array<{ pattern: RegExp; label: string }> = [
-  { pattern: /\beval\s*\(/, label: 'Python eval() — arbitrary code execution' },
-  { pattern: /\bexec\s*\(/, label: 'Python exec() — arbitrary code execution' },
-  { pattern: /\b__import__\s*\(/, label: 'Python __import__() — dynamic import (potential code injection)' },
-  { pattern: /subprocess\.call\([^)]*shell\s*=\s*True/, label: 'subprocess.call(shell=True) — shell injection risk' },
-  { pattern: /subprocess\.Popen\([^)]*shell\s*=\s*True/, label: 'subprocess.Popen(shell=True) — shell injection risk' },
-  { pattern: /os\.system\s*\(/, label: 'os.system() — shell injection risk' },
-  { pattern: /\bf['"].*\{.*\}.*['"].*(?:execute|cursor|query)/, label: 'f-string in SQL — SQL injection risk' },
-  { pattern: /['"].*%s.*['"].*%.*(?:execute|cursor|query)/, label: 'String formatting in SQL — SQL injection risk' },
-];
-
-function checkPythonContent(content: string): string | null {
-  for (const { pattern, label } of DANGEROUS_PYTHON_PATTERNS) {
-    if (pattern.test(content)) {
-      return label;
-    }
-  }
-  return null;
-}
-
-async function main(): Promise<void> {
-  try {
-    const input = await readStdin();
-    const hookInput = JSON.parse(input) as HookInput;
-    const { tool_name, tool_input } = hookInput;
-
-    if (tool_name === 'Bash' && tool_input.command) {
-      const violation = checkBashCommand(tool_input.command);
-      if (violation) {
-        process.stdout.write(JSON.stringify({
-          message: `SECURITY GATE: Dangerous command pattern detected: ${violation}\nCommand: ${tool_input.command.slice(0, 200)}\nReview carefully before proceeding.`,
-        }));
-      }
-    }
-
-    if ((tool_name === 'Write' || tool_name === 'Edit') && tool_input.file_path) {
-      const violation = checkFilePath(tool_input.file_path);
-      if (violation) {
-        process.stdout.write(JSON.stringify({
-          message: `SECURITY GATE: Attempt to write to protected file: ${violation}\nPath: ${tool_input.file_path}\nEnsure this is intentional and no secrets will be exposed.`,
-        }));
-      }
-    }
-
-    // Check Python file content for dangerous patterns (Write uses content, Edit uses new_string)
-    const pyContent = tool_input.content || tool_input.new_string;
-    if ((tool_name === 'Write' || tool_name === 'Edit') && tool_input.file_path?.endsWith('.py') && pyContent) {
-      const pyViolation = checkPythonContent(pyContent);
-      if (pyViolation) {
-        process.stdout.write(JSON.stringify({
-          message: `SECURITY GATE: Dangerous Python pattern detected: ${pyViolation}\nFile: ${tool_input.file_path}\nReview carefully before proceeding.`,
-        }));
-      }
-    }
-  } catch {
-    // Hooks must never crash
-  }
-
-  process.exit(0);
-}
-
-function readStdin(): Promise<string> {
-  return new Promise((resolve) => {
-    let data = '';
-    process.stdin.setEncoding('utf-8');
-    process.stdin.on('data', (chunk) => { data += chunk; });
-    process.stdin.on('end', () => resolve(data));
-    // Timeout to prevent hanging
-    setTimeout(() => resolve(data), 400);
-  });
-}
-
-main();