@mmnto/cli 1.35.0 → 1.36.0

package/dist/commands/hook-run.d.ts

@@ -0,0 +1,91 @@
+import { type ToolCallPayload } from '../hook/runtime.js';
+/**
+ * `totem hook run --tool <name> --args <args>` — the PreToolUse runtime
+ * entrypoint (ADR-104 § Decisions 1, 2, 3 + § Convergence).
+ *
+ * Loads `.totem/compiled-hooks.json`, evaluates each compiled hook against
+ * the tool-call payload, and emits a structured `[totem:hook-block]`
+ * rejection to stderr (exit code 2) on the first match. Allow path is exit
+ * code 0 with no output.
+ *
+ * The runtime is deterministic Node.js — no LLM calls in this path
+ * (Tenet 15 corollary, ADR-103 § 8). The engine bootstrap (AST/language
+ * registration via `loadInstalledPacks`) is intentionally NOT invoked here
+ * because hook evaluation is regex-only in V1 and the bootstrap pulls
+ * heavy runtime deps that we cannot afford on every tool call.
+ *
+ * Failure modes are best-effort per ADR-104 § Decision 3 + Tenet 4 carve-out:
+ * - Missing manifest (fresh repo, no installed pack hooks): exit 0 silently.
+ * - Stale pack versions, schemaVersion mismatch, corrupt JSON: emit
+ *   structured warnings/errors to stderr, allow the tool call.
+ * - Only an explicit `reject` decision from `evaluateHook` blocks.
+ */
+export interface HookRunCommandOptions {
+    tool: string;
+    args: string;
+}
+/**
+ * Side-effect-free result for the command driver. Returns the exit code
+ * the CLI wrapper should propagate, plus the stderr lines that should
+ * accompany it. Keeps `executeHookRun` testable without spying on
+ * `process.exit` or `console.error`.
+ */
+export interface HookRunResult {
+    exitCode: 0 | 2;
+    stderr: string[];
+}
+/**
+ * Injectable inputs for `executeHookRun`. The CLI wrapper resolves these
+ * from the working directory; tests construct them directly to avoid
+ * touching the real filesystem or `process.cwd()`.
+ */
+export interface HookRunInputs {
+    manifestPath: string;
+    installedPackVersions: Record<string, string>;
+    payload: ToolCallPayload;
+}
+/**
+ * The exit code Claude Code's PreToolUse hook convention treats as "block
+ * the tool call." Exported so test suites assert against the same constant
+ * rather than against a magic number that could drift.
+ */
+export declare const EXIT_ALLOW: 0;
+export declare const PRE_TOOL_USE_BLOCK_EXIT_CODE: 2;
+export declare function hookRunCommand(opts: HookRunCommandOptions): Promise<void>;
+/**
+ * Pure synchronous core. Given resolved inputs, returns the exit code and
+ * stderr lines the wrapper should emit. No process state is touched.
+ *
+ * Two-phase contract:
+ * 1. Load + emit diagnostics (warnings, structured errors) regardless of
+ *    whether any hooks loaded successfully.
+ * 2. Walk loaded hooks until the first reject; allow when none reject.
+ *
+ * Order in `stderr` is preserved: load-time diagnostics come before any
+ * rejection line, so an operator inspecting stderr sees the staleness or
+ * schema-mismatch context that may explain why a rejection fired.
+ */
+export declare function executeHookRun(inputs: HookRunInputs): HookRunResult;
+/**
+ * Scan `<projectRoot>/node_modules/@mmnto/pack-*` and read each pack's
+ * `package.json` version field. Returns a `packName → version` map for
+ * the compiled-hooks loader's staleness check.
+ *
+ * Bounded cost: one `readdirSync` plus N `readFileSync` calls (N = number
+ * of installed `@mmnto/pack-*` packages, typically <5). Expected per-pack
+ * read/parse failures (ENOENT/ENOTDIR/EPERM/EACCES on the package.json,
+ * SyntaxError on malformed JSON) are skipped so the loader can emit
+ * `[totem:hook-stale]` warnings for missing/invalid packs — the correct
+ * signal for an operator who has uninstalled a pack but not re-run
+ * `totem sync`. Unexpected exceptions (IO timeout, OOM, etc.) are
+ * rethrown to surface real faults. The outer `readdirSync` on the
+ * `@mmnto` scope dir applies the same discipline: ENOENT returns empty;
+ * any other errno surfaces as a thrown error.
+ *
+ * Workspace setups (pnpm workspace, yarn workspaces) symlink the pack
+ * directory into `node_modules/@mmnto/`, so the `readdirSync` + JSON
+ * read traverses the symlink transparently and reads the source-of-truth
+ * `package.json`. No special case needed.
+ */
+export declare function resolveInstalledPackVersions(projectRoot: string): Record<string, string>;
+//# sourceMappingURL=hook-run.d.ts.map

package/dist/commands/hook-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-run.d.ts","sourceRoot":"","sources":["../../src/commands/hook-run.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiC,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEzF;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAG,CAAU,CAAC;AACrC,eAAO,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAEvD,wBAAsB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkC/E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAmBnE;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmDxF"}

package/dist/commands/hook-run.js

@@ -0,0 +1,149 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { loadCompiledHooks } from '../hook/loader.js';
+import { evaluateHook, formatRejection } from '../hook/runtime.js';
+/**
+ * The exit code Claude Code's PreToolUse hook convention treats as "block
+ * the tool call." Exported so test suites assert against the same constant
+ * rather than against a magic number that could drift.
+ */
+export const EXIT_ALLOW = 0;
+export const PRE_TOOL_USE_BLOCK_EXIT_CODE = 2;
+export async function hookRunCommand(opts) {
+    const { loadConfig, resolveConfigPath } = await import('../utils.js');
+    const { sanitize } = await import('@mmnto/totem');
+    const cwd = process.cwd();
+    const configPath = resolveConfigPath(cwd);
+    const config = await loadConfig(configPath);
+    const configRoot = path.dirname(configPath);
+    const manifestPath = path.join(configRoot, config.totemDir, 'compiled-hooks.json');
+    const installedPackVersions = resolveInstalledPackVersions(configRoot);
+    const result = executeHookRun({
+        manifestPath,
+        installedPackVersions,
+        payload: { tool: opts.tool, args: opts.args },
+    });
+    // Sanitize every stderr line at the terminal boundary — the lines flow
+    // through `executeHookRun` carrying pack-supplied content (rejection
+    // messages, recovery hints, hook ids, loader warnings interpolating pack
+    // names). Sanitizing once at the wrapper is simpler than instrumenting
+    // every emitter, and the pure-function tests already assert structural
+    // shape on the unsanitized form.
+    for (const line of result.stderr) {
+        console.error(sanitize(line));
+    }
+    if (result.exitCode !== 0) {
+        // Set process.exitCode rather than calling process.exit() so the top-level
+        // handler stays in control of shutdown ordering (per the codebase guideline
+        // against process.exit() inside command bodies). PreToolUse semantics are
+        // preserved — Node exits with the assigned code once the event loop drains.
+        process.exitCode = result.exitCode;
+        return;
+    }
+}
+/**
+ * Pure synchronous core. Given resolved inputs, returns the exit code and
+ * stderr lines the wrapper should emit. No process state is touched.
+ *
+ * Two-phase contract:
+ * 1. Load + emit diagnostics (warnings, structured errors) regardless of
+ *    whether any hooks loaded successfully.
+ * 2. Walk loaded hooks until the first reject; allow when none reject.
+ *
+ * Order in `stderr` is preserved: load-time diagnostics come before any
+ * rejection line, so an operator inspecting stderr sees the staleness or
+ * schema-mismatch context that may explain why a rejection fired.
+ */
+export function executeHookRun(inputs) {
+    const { hooks, warnings, errors } = loadCompiledHooks({
+        manifestPath: inputs.manifestPath,
+        installedPackVersions: inputs.installedPackVersions,
+    });
+    const stderr = [];
+    for (const w of warnings)
+        stderr.push(w);
+    for (const e of errors)
+        stderr.push(`[totem:hook-error] ${e.message}`);
+    for (const rule of hooks) {
+        const decision = evaluateHook(rule, inputs.payload);
+        if (decision.decision === 'reject') {
+            stderr.push(formatRejection(decision));
+            return { exitCode: PRE_TOOL_USE_BLOCK_EXIT_CODE, stderr };
+        }
+    }
+    return { exitCode: 0, stderr };
+}
+/**
+ * Scan `<projectRoot>/node_modules/@mmnto/pack-*` and read each pack's
+ * `package.json` version field. Returns a `packName → version` map for
+ * the compiled-hooks loader's staleness check.
+ *
+ * Bounded cost: one `readdirSync` plus N `readFileSync` calls (N = number
+ * of installed `@mmnto/pack-*` packages, typically <5). Expected per-pack
+ * read/parse failures (ENOENT/ENOTDIR/EPERM/EACCES on the package.json,
+ * SyntaxError on malformed JSON) are skipped so the loader can emit
+ * `[totem:hook-stale]` warnings for missing/invalid packs — the correct
+ * signal for an operator who has uninstalled a pack but not re-run
+ * `totem sync`. Unexpected exceptions (IO timeout, OOM, etc.) are
+ * rethrown to surface real faults. The outer `readdirSync` on the
+ * `@mmnto` scope dir applies the same discipline: ENOENT returns empty;
+ * any other errno surfaces as a thrown error.
+ *
+ * Workspace setups (pnpm workspace, yarn workspaces) symlink the pack
+ * directory into `node_modules/@mmnto/`, so the `readdirSync` + JSON
+ * read traverses the symlink transparently and reads the source-of-truth
+ * `package.json`. No special case needed.
+ */
+export function resolveInstalledPackVersions(projectRoot) {
+    const result = {};
+    const scopeDir = path.join(projectRoot, 'node_modules', '@mmnto');
+    let entries;
+    try {
+        entries = fs.readdirSync(scopeDir, { withFileTypes: true });
+        // totem-context: intentional — ENOENT on the scope dir is the valid
+        // fresh-repo state (no `@mmnto` packs installed). Any other errno
+        // (EACCES, permission denied, etc.) is a real fault that should surface.
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return result;
+        }
+        throw err;
+    }
+    for (const entry of entries) {
+        // Don't pre-filter on `entry.isDirectory()`: in pnpm/yarn workspaces a
+        // pack is symlinked into `node_modules/@mmnto/`, and a Dirent for a
+        // symlink reports `isDirectory()` false even when the target is a
+        // directory. The `readFileSync` below transparently traverses the
+        // symlink and the surrounding `try/catch` discards any path that does
+        // not resolve to a readable package.json.
+        if (!entry.name.startsWith('pack-'))
+            continue;
+        const packName = `@mmnto/${entry.name}`;
+        try {
+            const pkgRaw = fs.readFileSync(path.join(scopeDir, entry.name, 'package.json'), 'utf8');
+            const pkg = JSON.parse(pkgRaw);
+            if (typeof pkg.version === 'string') {
+                result[packName] = pkg.version;
+            }
+            // totem-context: intentional — the expected per-pack failure modes
+            // (missing/corrupt package.json, permission-quirk on individual pack
+            // dirs) are non-fatal; the loader emits a stale warning for any pack
+            // referenced in the manifest but missing from this map. Unusual
+            // errors (IO timeout, OOM, etc.) are not in the expected set and
+            // surface as a real fault so debug consumers can find them.
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === 'ENOENT' || code === 'ENOTDIR' || code === 'EPERM' || code === 'EACCES') {
+                continue;
+            }
+            if (err instanceof SyntaxError) {
+                continue;
+            }
+            throw err;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=hook-run.js.map

package/dist/commands/hook-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-run.js","sourceRoot":"","sources":["../../src/commands/hook-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAwB,MAAM,oBAAoB,CAAC;AAmDzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAU,CAAC;AACrC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA2B;IAC9D,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACtE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnF,MAAM,qBAAqB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,YAAY;QACZ,qBAAqB;QACrB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAC9C,CAAC,CAAC;IAEH,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,iCAAiC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnC,OAAO;IACT,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC;QACpD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;KACpD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAEvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAAmB;IAC9D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAElE,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,oEAAoE;QACpE,kEAAkE;QAClE,yEAAyE;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,sEAAsE;QACtE,0CAA0C;QAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9C,MAAM,QAAQ,GAAG,UAAU,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA0B,CAAC;YACxD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;YACjC,CAAC;YACD,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,gEAAgE;YAChE,iEAAiE;YACjE,4DAA4D;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commands/hook-run.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hook-run.test.d.ts.map

package/dist/commands/hook-run.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-run.test.d.ts","sourceRoot":"","sources":["../../src/commands/hook-run.test.ts"],"names":[],"mappings":""}

package/dist/commands/hook-run.test.js

@@ -0,0 +1,264 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { executeHookRun, EXIT_ALLOW, PRE_TOOL_USE_BLOCK_EXIT_CODE as EXIT_BLOCK, resolveInstalledPackVersions, } from './hook-run.js';
+/** Schema version no live runner supports — used to assert warn-and-skip on unknown manifest versions. */
+const UNSUPPORTED_SCHEMA_VERSION = 999;
+let workDir;
+beforeEach(() => {
+    workDir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-hook-run-'));
+});
+afterEach(() => {
+    fs.rmSync(workDir, { recursive: true, force: true });
+});
+function writeManifest(content) {
+    const manifestPath = path.join(workDir, 'compiled-hooks.json');
+    fs.writeFileSync(manifestPath, JSON.stringify(content), 'utf8');
+    return manifestPath;
+}
+const baseRule = {
+    id: 'gca-tag-xor-command',
+    packId: '@mmnto/pack-bot-gemini-code-assist',
+    trigger: { tool: 'bash', pattern: 'gh\\s+(pr|issue)\\s+comment' },
+    check: {
+        pattern: '(?=.*@gemini-code-assist)(?=.*\\/gemini review)',
+        type: 'reject-if-match',
+    },
+    message: 'GCA tag XOR command — never both; doubling wastes GCA quota.',
+    recoveryHint: 'Choose one: @-mention to comment, /gemini review for fresh review.',
+};
+function baseManifest(hooks = [baseRule]) {
+    return {
+        schemaVersion: 1,
+        compiledAt: '2026-05-11T18:43:00Z',
+        sourcePackVersions: {
+            '@mmnto/pack-bot-gemini-code-assist': '1.0.0',
+        },
+        hooks,
+    };
+}
+describe('executeHookRun — allow path', () => {
+    it('returns exit 0 with no stderr when the manifest file is absent (fresh repo)', () => {
+        const result = executeHookRun({
+            manifestPath: path.join(workDir, 'missing.json'),
+            installedPackVersions: {},
+            payload: { tool: 'bash', args: 'whatever' },
+        });
+        expect(result.exitCode).toBe(EXIT_ALLOW);
+        expect(result.stderr).toEqual([]);
+    });
+    it('returns exit 0 when no hook trigger matches the payload', () => {
+        const manifestPath = writeManifest(baseManifest());
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-gemini-code-assist': '1.0.0' },
+            payload: { tool: 'write', args: 'console.log("hi")' },
+        });
+        expect(result.exitCode).toBe(EXIT_ALLOW);
+        expect(result.stderr).toEqual([]);
+    });
+    it('returns exit 0 when the trigger matches but the check does not (reject-if-match)', () => {
+        const manifestPath = writeManifest(baseManifest());
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-gemini-code-assist': '1.0.0' },
+            payload: {
+                tool: 'bash',
+                args: 'gh pr comment 1 --body "@gemini-code-assist take a look"',
+            },
+        });
+        expect(result.exitCode).toBe(EXIT_ALLOW);
+        expect(result.stderr).toEqual([]);
+    });
+});
+describe('executeHookRun — reject path (ADR-104 § Decision 1)', () => {
+    it('exits 2 with the structured [totem:hook-block] line on the first matching hook', () => {
+        const manifestPath = writeManifest(baseManifest());
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-gemini-code-assist': '1.0.0' },
+            payload: {
+                tool: 'bash',
+                args: 'gh pr comment 1 --body "@gemini-code-assist /gemini review please"',
+            },
+        });
+        expect(result.exitCode).toBe(EXIT_BLOCK);
+        const rejectLine = result.stderr[result.stderr.length - 1];
+        expect(rejectLine).toContain('[totem:hook-block]');
+        expect(rejectLine).toContain('@mmnto/pack-bot-gemini-code-assist/gca-tag-xor-command');
+        expect(rejectLine).toContain('GCA tag XOR command');
+        expect(rejectLine).toContain('→ Choose one');
+    });
+    it('first-match-wins: a later hook that also matches is not evaluated', () => {
+        const second = {
+            ...baseRule,
+            id: 'never-reached',
+            message: 'should not appear in stderr',
+        };
+        const manifestPath = writeManifest(baseManifest([baseRule, second]));
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-gemini-code-assist': '1.0.0' },
+            payload: {
+                tool: 'bash',
+                args: 'gh pr comment 1 --body "@gemini-code-assist /gemini review"',
+            },
+        });
+        expect(result.exitCode).toBe(EXIT_BLOCK);
+        expect(result.stderr.some((l) => l.includes('never-reached'))).toBe(false);
+        expect(result.stderr.some((l) => l.includes('should not appear'))).toBe(false);
+    });
+    it('omits the recoveryHint line when the rule has no recoveryHint', () => {
+        const ruleWithoutHint = { ...baseRule, recoveryHint: undefined };
+        const manifestPath = writeManifest(baseManifest([ruleWithoutHint]));
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-gemini-code-assist': '1.0.0' },
+            payload: {
+                tool: 'bash',
+                args: 'gh pr comment 1 --body "@gemini-code-assist /gemini review"',
+            },
+        });
+        expect(result.exitCode).toBe(EXIT_BLOCK);
+        const rejectLine = result.stderr[result.stderr.length - 1];
+        expect(rejectLine).not.toContain('→');
+    });
+});
+describe('executeHookRun — diagnostics ordering', () => {
+    it('emits [totem:hook-stale] warnings before evaluating hooks (operator sees context for any rejection)', () => {
+        const manifestPath = writeManifest(baseManifest());
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-gemini-code-assist': '1.1.0' },
+            payload: {
+                tool: 'bash',
+                args: 'gh pr comment 1 --body "@gemini-code-assist /gemini review"',
+            },
+        });
+        expect(result.exitCode).toBe(EXIT_BLOCK);
+        const staleIdx = result.stderr.findIndex((l) => l.includes('[totem:hook-stale]'));
+        const rejectIdx = result.stderr.findIndex((l) => l.includes('[totem:hook-block]'));
+        expect(staleIdx).toBeGreaterThanOrEqual(0);
+        expect(rejectIdx).toBeGreaterThan(staleIdx);
+    });
+    it('emits [totem:hook-schema] warning and returns allow when manifest schemaVersion is unsupported', () => {
+        const manifestPath = writeManifest({
+            ...baseManifest(),
+            schemaVersion: UNSUPPORTED_SCHEMA_VERSION,
+        });
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: {},
+            payload: { tool: 'bash', args: 'whatever' },
+        });
+        expect(result.exitCode).toBe(EXIT_ALLOW);
+        expect(result.stderr.some((l) => l.includes('[totem:hook-schema]'))).toBe(true);
+    });
+    it('emits [totem:hook-error] prefix on structural manifest errors (corrupt JSON)', () => {
+        const manifestPath = path.join(workDir, 'compiled-hooks.json');
+        fs.writeFileSync(manifestPath, '{ not valid json', 'utf8');
+        const result = executeHookRun({
+            manifestPath,
+            installedPackVersions: {},
+            payload: { tool: 'bash', args: 'whatever' },
+        });
+        expect(result.exitCode).toBe(EXIT_ALLOW);
+        expect(result.stderr.some((l) => l.startsWith('[totem:hook-error]'))).toBe(true);
+    });
+});
+describe('resolveInstalledPackVersions', () => {
+    it('returns an empty map when no @mmnto scope directory exists', () => {
+        const result = resolveInstalledPackVersions(workDir);
+        expect(result).toEqual({});
+    });
+    it('reads version from each @mmnto/pack-* package.json under node_modules', () => {
+        const scopeDir = path.join(workDir, 'node_modules', '@mmnto');
+        const packDir = path.join(scopeDir, 'pack-bot-coderabbit');
+        fs.mkdirSync(packDir, { recursive: true });
+        fs.writeFileSync(path.join(packDir, 'package.json'), JSON.stringify({ name: '@mmnto/pack-bot-coderabbit', version: '1.2.3' }), 'utf8');
+        const result = resolveInstalledPackVersions(workDir);
+        expect(result).toEqual({ '@mmnto/pack-bot-coderabbit': '1.2.3' });
+    });
+    it('skips non-pack-* @mmnto packages (e.g. @mmnto/totem itself)', () => {
+        const scopeDir = path.join(workDir, 'node_modules', '@mmnto');
+        const corePkg = path.join(scopeDir, 'totem');
+        fs.mkdirSync(corePkg, { recursive: true });
+        fs.writeFileSync(path.join(corePkg, 'package.json'), JSON.stringify({ name: '@mmnto/totem', version: '1.36.0' }), 'utf8');
+        const result = resolveInstalledPackVersions(workDir);
+        expect(result).toEqual({});
+    });
+    it('rethrows non-ENOENT readdirSync errors (e.g. scope-dir-is-a-file)', () => {
+        // Make `<projectRoot>/node_modules/@mmnto` a regular file so readdirSync
+        // fails with a non-ENOENT errno (ENOTDIR on POSIX, varies on Windows but
+        // never ENOENT). The function must surface that fault rather than mask
+        // it as "no packs installed."
+        const scopePath = path.join(workDir, 'node_modules', '@mmnto');
+        fs.mkdirSync(path.dirname(scopePath), { recursive: true });
+        fs.writeFileSync(scopePath, 'not a directory', 'utf8');
+        expect(() => resolveInstalledPackVersions(workDir)).toThrow();
+    });
+    it('reads from symlinked pack directories (pnpm/yarn workspaces case)', () => {
+        // Regression: Dirent.isDirectory() returns false for symlinks even when
+        // the target is a directory. Workspace setups symlink packs into
+        // `node_modules/@mmnto/`, so a pre-filter on `entry.isDirectory()` would
+        // have silently skipped every workspace-linked pack. The function now
+        // drops the type pre-filter and lets the `readFileSync` traversal +
+        // try/catch handle it.
+        const scopeDir = path.join(workDir, 'node_modules', '@mmnto');
+        fs.mkdirSync(scopeDir, { recursive: true });
+        // Target directory (the "source" of the pack).
+        const sourceDir = path.join(workDir, 'workspace-pack-source');
+        fs.mkdirSync(sourceDir);
+        fs.writeFileSync(path.join(sourceDir, 'package.json'), JSON.stringify({ name: '@mmnto/pack-workspace', version: '2.0.0' }), 'utf8');
+        // Symlink it into node_modules/@mmnto/pack-workspace. Skip the test on
+        // platforms that do not grant the calling process permission to create
+        // directory symlinks (Windows without developer mode / admin).
+        try {
+            fs.symlinkSync(sourceDir, path.join(scopeDir, 'pack-workspace'), 'dir');
+        }
+        catch (err) {
+            if (err.code === 'EPERM')
+                return;
+            throw err;
+        }
+        const result = resolveInstalledPackVersions(workDir);
+        expect(result).toEqual({ '@mmnto/pack-workspace': '2.0.0' });
+    });
+    it('rethrows unusual per-pack errors (not in the expected errno set, not SyntaxError)', () => {
+        // The per-pack catch suppresses ENOENT/ENOTDIR/EPERM/EACCES (expected
+        // dir/permission quirks) and SyntaxError (malformed package.json), but
+        // any other exception class is treated as a real fault that surfaces.
+        // Mock readFileSync to throw a synthetic non-errno error and assert the
+        // function propagates it rather than silently skipping the pack.
+        const scopeDir = path.join(workDir, 'node_modules', '@mmnto');
+        const packDir = path.join(scopeDir, 'pack-unusual');
+        fs.mkdirSync(packDir, { recursive: true });
+        fs.writeFileSync(path.join(packDir, 'package.json'), JSON.stringify({ name: '@mmnto/pack-unusual', version: '1.0.0' }), 'utf8');
+        // `resolveInstalledPackVersions` only calls `readFileSync` for pack
+        // package.json files, so a blanket-throw mock exercises the inner catch
+        // without affecting other code paths.
+        const unusual = new Error('synthetic IO timeout');
+        const spy = vi.spyOn(fs, 'readFileSync').mockImplementation(() => {
+            throw unusual;
+        });
+        try {
+            expect(() => resolveInstalledPackVersions(workDir)).toThrow(unusual);
+        }
+        finally {
+            spy.mockRestore();
+        }
+    });
+    it('skips directory entries with unreadable or malformed package.json without failing the whole scan', () => {
+        const scopeDir = path.join(workDir, 'node_modules', '@mmnto');
+        const broken = path.join(scopeDir, 'pack-broken');
+        fs.mkdirSync(broken, { recursive: true });
+        fs.writeFileSync(path.join(broken, 'package.json'), '{ not json', 'utf8');
+        const good = path.join(scopeDir, 'pack-good');
+        fs.mkdirSync(good, { recursive: true });
+        fs.writeFileSync(path.join(good, 'package.json'), JSON.stringify({ name: '@mmnto/pack-good', version: '1.0.0' }), 'utf8');
+        const result = resolveInstalledPackVersions(workDir);
+        expect(result).toEqual({ '@mmnto/pack-good': '1.0.0' });
+    });
+});
+//# sourceMappingURL=hook-run.test.js.map

package/dist/commands/hook-run.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-run.test.js","sourceRoot":"","sources":["../../src/commands/hook-run.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EACL,cAAc,EACd,UAAU,EACV,4BAA4B,IAAI,UAAU,EAC1C,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AAEvB,0GAA0G;AAC1G,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,IAAI,OAAe,CAAC;AAEpB,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,qBAAqB;IACzB,MAAM,EAAE,oCAAoC;IAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6BAA6B,EAAE;IACjE,KAAK,EAAE;QACL,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,iBAA0B;KACjC;IACD,OAAO,EAAE,8DAA8D;IACvE,YAAY,EAAE,oEAAoE;CACnF,CAAC;AAEF,SAAS,YAAY,CAAC,QAAmB,CAAC,QAAQ,CAAC;IACjD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,sBAAsB;QAClC,kBAAkB,EAAE;YAClB,oCAAoC,EAAE,OAAO;SAC9C;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;YAChD,qBAAqB,EAAE,EAAE;YACzB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE;YACxE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE;SACtD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,0DAA0D;aACjE;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,oEAAoE;aAC3E;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,wDAAwD,CAAC,CAAC;QACvF,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG;YACb,GAAG,QAAQ;YACX,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,6BAA6B;SACvC,CAAC;QACF,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,6DAA6D;aACpE;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,eAAe,GAAG,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;QACjE,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,6DAA6D;aACpE;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,qGAAqG,EAAE,GAAG,EAAE;QAC7G,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE,oCAAoC,EAAE,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,6DAA6D;aACpE;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,GAAI,YAAY,EAAa;YAC7B,aAAa,EAAE,0BAA0B;SAC1C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE;YACzB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,YAAY;YACZ,qBAAqB,EAAE,EAAE;YACzB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QAC3D,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EACxE,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAC3D,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,8BAA8B;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAEvD,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,wEAAwE;QACxE,iEAAiE;QACjE,yEAAyE;QACzE,sEAAsE;QACtE,oEAAoE;QACpE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9D,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAC9D,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EACnE,MAAM,CACP,CAAC;QAEF,uEAAuE;QACvE,uEAAuE;QACvE,+DAA+D;QAC/D,IAAI,CAAC;YACH,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO;YAC5D,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACpD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EACjE,MAAM,CACP,CAAC;QAEF,oEAAoE;QACpE,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAC/D,MAAM,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAClD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAC9D,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/hook-test.d.ts

@@ -0,0 +1,29 @@
+import type { HookTestResult, HookTestSummary } from '../hook/test-runner.js';
+/**
+ * `totem hook test [--filter <term>]` — run fixture-based verification for
+ * compiled bot-pack hooks (ADR-104 § Convergence).
+ *
+ * Loads `surface: hooks` fixtures from `.totem/tests/`, evaluates each
+ * against the matching compiled hook, and reports per-line failures so
+ * authors can iterate on specific payloads. The runner is deterministic
+ * Node.js — no LLM calls — mirroring the `totem hook run` contract.
+ *
+ * `--filter <term>` matches against hook id (case-insensitive substring).
+ */
+export interface HookTestCommandOptions {
+    filter?: string;
+}
+/**
+ * Apply `--filter` to a hook-test summary, failing loud when the filter
+ * matches nothing despite fixtures being present. Pure helper extracted
+ * from `hookTestCommand` so the filter contract is unit-testable without
+ * driving the command end-to-end through `process.cwd()` + `loadConfig`.
+ *
+ * Returns the filtered result slice when the filter matches (or is absent).
+ * Throws TEST_FAILED when `--filter` is set, `summary.total > 0`, and the
+ * filter matches no fixtures — a typoed filter must never look like a
+ * successful zero-test run.
+ */
+export declare function applyFilter(summary: HookTestSummary, filter: string | undefined): HookTestResult[];
+export declare function hookTestCommand(opts: HookTestCommandOptions): Promise<void>;
+//# sourceMappingURL=hook-test.d.ts.map

package/dist/commands/hook-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-test.d.ts","sourceRoot":"","sources":["../../src/commands/hook-test.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAW9E;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,cAAc,EAAE,CAYlB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwHjF"}