@misaka-net/misakanet-setup 0.7.1 → 0.8.1

package/hook/checkpoint_reminder.mjs

@@ -20,10 +20,11 @@
  * Manual test:
  *   echo '{"session_id":"demo"}' | node checkpoint_reminder.mjs prompt
  */
-import { writeFileSync, mkdirSync, renameSync, readFileSync } from 'node:fs';
+import { writeFileSync, mkdirSync, renameSync, readFileSync, realpathSync } from 'node:fs';
 import { createHash } from 'node:crypto';
 import { homedir } from 'node:os';
 import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 // NOTE: JavaScript does not concatenate adjacent string literals the way Python does.
 // Writing these as three consecutive strings silently keeps only the first one, so the
@@ -418,14 +419,49 @@ async function failureMode(payload) {
   process.stdout.write(`${lines.join('\n')}\n`);
 }
 
-const mode = process.argv[2] || 'prompt';
-try {
-  const payload = parsePayload(await readStdin());
-  if (!payload) debug('no usable payload - nothing to do');
-  else if (mode === 'prompt') promptMode(payload);
-  else if (mode === 'failure') await failureMode(payload);
-  else debug(`unknown mode ${mode}`);
-} catch (err) {
-  debug(`hook error: ${err}`);      // never break the user's session
+/**
+ * Is this file the process's entry point?
+ *
+ * `import.meta.url` is the module's *resolved* URL: Node's ESM loader resolves symlinks, so a
+ * script started through a symlink gets the real path there while `process.argv[1]` still holds
+ * the symlinked one. Comparing the two strings directly then never matches, and the hook does
+ * nothing at all — silently, with exit 0, which is the shape of a tool that looks installed and
+ * is not.
+ *
+ * macOS is where that bites: `/var` is a symlink to `/private/var`, every temporary directory
+ * lives under it, and the packaged e2e installs the hook into such a directory. On 2026-10-26
+ * all three macOS legs went red with `exit=0 stdout=""` — the hook ran, and did nothing.
+ *
+ * So compare the real paths. The direct comparison is kept for a loader started with
+ * `--preserve-symlinks`, where the symlink survives in `import.meta.url` as well.
+ */
+function isEntryPoint() {
+  const invoked = process.argv[1];
+  if (!invoked) return false;
+  const here = fileURLToPath(import.meta.url);
+  if (here === invoked) return true;
+  try {
+    return realpathSync(invoked) === realpathSync(here);
+  } catch {
+    return false;
+  }
 }
-process.exit(0);
+
+// Run only when this file is the entry point (`node checkpoint_reminder.mjs …`). Importing it must
+// not read stdin or exit the process: the inner `search()` is the gate that redacts the query on
+// the way out, and #3719 wants a test that can drive it with *raw* text and see the payload.
+if (isEntryPoint()) {
+  const mode = process.argv[2] || 'prompt';
+  try {
+    const payload = parsePayload(await readStdin());
+    if (!payload) debug('no usable payload - nothing to do');
+    else if (mode === 'prompt') promptMode(payload);
+    else if (mode === 'failure') await failureMode(payload);
+    else debug(`unknown mode ${mode}`);
+  } catch (err) {
+    debug(`hook error: ${err}`);      // never break the user's session
+  }
+  process.exit(0);
+}
+
+export { search };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misaka-net/misakanet-setup",
-  "version": "0.7.1",
+  "version": "0.8.1",
   "description": "MisakaNet failure lessons for your agents: writes an MCP endpoint into each agent config, rules blocks where the client takes one, and a Claude Code hook. At most one anonymous request leaves this machine at install; then only the agent's calls — unless MISAKANET_HOOK_FETCH=1 (off by default) the hook sends the failed call's error text or command.",
   "bin": {
     "misakanet-setup": "bin/misakanet-setup.mjs"