@mmnto/cli 1.35.0 → 1.36.0

package/dist/commands/hook-test.js

@@ -0,0 +1,132 @@
+import path from 'node:path';
+import { sanitize, TotemError } from '@mmnto/totem';
+// Static `TotemError` import is intentional: `applyFilter` below is a pure
+// synchronous helper that throws TEST_FAILED on a typoed `--filter`, and an
+// async wrapper would defeat the testability win of extracting it. The
+// per-codebase guideline against top-level heavy internal value imports is
+// applied to `runHookTests` and `resolveInstalledPackVersions` (lazy-loaded
+// inside the command handler below) instead.
+const TAG = 'HookTest';
+/**
+ * Apply `--filter` to a hook-test summary, failing loud when the filter
+ * matches nothing despite fixtures being present. Pure helper extracted
+ * from `hookTestCommand` so the filter contract is unit-testable without
+ * driving the command end-to-end through `process.cwd()` + `loadConfig`.
+ *
+ * Returns the filtered result slice when the filter matches (or is absent).
+ * Throws TEST_FAILED when `--filter` is set, `summary.total > 0`, and the
+ * filter matches no fixtures — a typoed filter must never look like a
+ * successful zero-test run.
+ */
+export function applyFilter(summary, filter) {
+    if (!filter)
+        return summary.results;
+    const term = filter.toLowerCase();
+    const filtered = summary.results.filter((r) => r.hookId.toLowerCase().includes(term));
+    if (filtered.length === 0 && summary.total > 0) {
+        throw new TotemError('TEST_FAILED', `No hook tests matched --filter "${sanitize(filter)}".`, 'Use an existing hook id substring or omit --filter to run all hook tests.');
+    }
+    return filtered;
+}
+export async function hookTestCommand(opts) {
+    const { log, bold, errorColor, success: successColor } = await import('../ui.js');
+    const { loadConfig, loadEnv, resolveConfigPath } = await import('../utils.js');
+    const { runHookTests } = await import('../hook/test-runner.js');
+    const { resolveInstalledPackVersions } = await import('./hook-run.js');
+    const cwd = process.cwd();
+    loadEnv(cwd);
+    const configPath = resolveConfigPath(cwd);
+    const config = await loadConfig(configPath);
+    const configRoot = path.dirname(configPath);
+    const manifestPath = path.join(configRoot, config.totemDir, 'compiled-hooks.json');
+    const testsDir = path.join(configRoot, config.totemDir, 'tests');
+    const installedPackVersions = resolveInstalledPackVersions(configRoot);
+    log.info(TAG, 'Running hook tests...');
+    const summary = runHookTests({ manifestPath, testsDir, installedPackVersions });
+    // Sanitize every value that flows in from pack-supplied data (manifest
+    // contents, fixture paths) before it reaches the terminal — third-party
+    // packs are an untrusted boundary and identifiers like `hookId`/`packId`
+    // could carry ANSI control sequences that would mangle the operator's
+    // shell. The loader-emitted warnings/errors carry our own message text
+    // but may interpolate user-controlled paths, so they get sanitized too.
+    for (const w of summary.loadWarnings) {
+        log.warn(TAG, sanitize(w));
+    }
+    for (const e of summary.loadErrors) {
+        log.error('Totem Error', `${sanitize(e.code)}: ${sanitize(e.message)}`);
+    }
+    for (const unknown of summary.unknownHooks) {
+        const safeFixture = sanitize(path.basename(unknown.fixturePath));
+        const safeHookId = sanitize(unknown.hookId);
+        log.warn(TAG, `Fixture ${safeFixture} references hook id "${safeHookId}" not present in compiled manifest`);
+    }
+    const results = applyFilter(summary, opts.filter);
+    // "No fixtures" only fires when no fixtures exist at all — neither
+    // evaluatable results nor orphans referencing an absent hook. A directory
+    // containing only orphan fixtures must fail loud below, not show the
+    // "create a fixture" placeholder.
+    if (results.length === 0 &&
+        summary.total === 0 &&
+        summary.unknownHooks.length === 0 &&
+        summary.loadErrors.length === 0) {
+        log.dim(TAG, `No hook fixtures (surface: hooks) found in ${sanitize(config.totemDir)}/tests/`);
+        log.dim(TAG, 'Create a fixture with:');
+        log.dim(TAG, '');
+        log.dim(TAG, '  ---');
+        log.dim(TAG, '  rule: <hook-id>');
+        log.dim(TAG, '  surface: hooks');
+        log.dim(TAG, '  corpus: fail');
+        log.dim(TAG, '  ---');
+        log.dim(TAG, '');
+        log.dim(TAG, '  ## Should fail');
+        log.dim(TAG, '  ```text');
+        log.dim(TAG, '  <args payload that should be rejected>');
+        log.dim(TAG, '  ```');
+        return;
+    }
+    for (const result of results) {
+        const label = `${sanitize(result.packId)}/${sanitize(result.hookId)}`;
+        if (result.passed) {
+            log.success(TAG, `${label} — PASS`);
+            continue;
+        }
+        log.error('Totem Error', `${label} — FAIL`);
+        for (const failure of result.failures) {
+            const direction = failure.expected === 'reject' ? 'missed reject' : 'false positive';
+            console.error(`    [${direction}] expected ${failure.expected}, got ${failure.actual}`);
+            console.error(`      payload: ${sanitize(failure.line.trim())}`);
+        }
+    }
+    const passedCount = results.filter((r) => r.passed).length;
+    const failedCount = results.length - passedCount;
+    console.error('');
+    // Tenet 4: load errors or orphan fixtures must fail loud — they are
+    // never "success" states. A corrupt manifest or a fixture pointing at a
+    // typoed hook id silently passing would mask broken pack wiring.
+    const hasOrphans = summary.unknownHooks.length > 0;
+    const hasLoadErrors = summary.loadErrors.length > 0;
+    if (failedCount === 0 && !hasOrphans && !hasLoadErrors) {
+        const label = successColor(bold('PASS'));
+        log.info(TAG, `${label} — ${passedCount} hook test(s) passed`);
+        return;
+    }
+    const label = errorColor(bold('FAIL'));
+    const parts = [];
+    if (failedCount > 0)
+        parts.push(`${failedCount} failed`);
+    if (hasOrphans)
+        parts.push(`${summary.unknownHooks.length} unknown-hook reference(s)`);
+    if (hasLoadErrors)
+        parts.push(`${summary.loadErrors.length} manifest load error(s)`);
+    parts.push(`${passedCount} passed`);
+    log.info(TAG, `${label} — ${parts.join(', ')}`);
+    const reasons = [];
+    if (failedCount > 0)
+        reasons.push(`${failedCount} hook test(s) failed`);
+    if (hasOrphans)
+        reasons.push(`${summary.unknownHooks.length} fixture(s) reference unknown hook id`);
+    if (hasLoadErrors)
+        reasons.push(`${summary.loadErrors.length} compiled-hooks manifest load error(s)`);
+    throw new TotemError('TEST_FAILED', reasons.join('; ') + '.', 'Fix failing patterns, orphan fixtures, or manifest issues, then re-run `totem hook test`.');
+}
+//# sourceMappingURL=hook-test.js.map

package/dist/commands/hook-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-test.js","sourceRoot":"","sources":["../../src/commands/hook-test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAIpD,2EAA2E;AAC3E,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,4EAA4E;AAC5E,6CAA6C;AAE7C,MAAM,GAAG,GAAG,UAAU,CAAC;AAkBvB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,OAAwB,EACxB,MAA0B;IAE1B,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAClB,aAAa,EACb,mCAAmC,QAAQ,CAAC,MAAM,CAAC,IAAI,EACvD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAClF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAChE,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAEvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,qBAAqB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAEvE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAEhF,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CACN,GAAG,EACH,WAAW,WAAW,wBAAwB,UAAU,oCAAoC,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAElD,mEAAmE;IACnE,0EAA0E;IAC1E,qEAAqE;IACrE,kCAAkC;IAClC,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,KAAK,KAAK,CAAC;QACnB,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACjC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,8CAA8C,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/F,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAClC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACrF,OAAO,CAAC,KAAK,CAAC,QAAQ,SAAS,cAAc,OAAO,CAAC,QAAQ,SAAS,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxF,OAAO,CAAC,KAAK,CAAC,kBAAkB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;IAEjD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,oEAAoE;IACpE,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAEpD,IAAI,WAAW,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,WAAW,sBAAsB,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IACzD,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,4BAA4B,CAAC,CAAC;IACvF,IAAI,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IACpC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,WAAW,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,sBAAsB,CAAC,CAAC;IACxE,IAAI,UAAU;QACZ,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,uCAAuC,CAAC,CAAC;IACtF,IAAI,aAAa;QACf,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,wCAAwC,CAAC,CAAC;IAErF,MAAM,IAAI,UAAU,CAClB,aAAa,EACb,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,EACxB,2FAA2F,CAC5F,CAAC;AACJ,CAAC"}

package/dist/hook/classification.d.ts

@@ -0,0 +1,45 @@
+import type { HookRule } from './schema.js';
+/**
+ * Rule classification per ADR-104 § Convergence + § Target-aware dispatch
+ * (strategy-Gemini Q1 binding synthesis, T1930Z 2026-05-11).
+ *
+ * Two classes:
+ * - `spine`: has Rego-shadow representation; formally verified by SMT;
+ *   eligible for the top ~30 invariant set. Ships in ADR-103's lint-rule
+ *   pipeline. Not produced by this V1 hook engine.
+ * - `interpretive`: ast-grep / regex only; no formal verification obligation;
+ *   ships outside the core invariant set. All bot-pack hooks in V1 fall here.
+ *
+ * The hook runtime treats every rule as `interpretive`. The class is named
+ * explicitly so the loader's warn-and-ignore signal on a future Spine-Rule
+ * promotion attempt (`verification_shadow:` on a hook rule) carries the
+ * dispatch contract in its error message rather than relying on prose docs.
+ *
+ * V2 may promote bot-pack hooks to `spine` via a follow-on ADR; this seam
+ * is where that promotion lands.
+ */
+export type RuleClassification = 'spine' | 'interpretive';
+export interface ClassificationResult {
+    classification: RuleClassification;
+    /**
+     * When set, the loader SHOULD emit this string to stderr but continue
+     * loading the rule. Empty when no warn-and-ignore signal applies.
+     */
+    warning?: string;
+}
+/**
+ * Classify a hook rule for V1 dispatch.
+ *
+ * Always returns `interpretive` per ADR-104 § Target-aware dispatch (hooks
+ * are Interpretive Rule class — no formal-verification obligation; PreToolUse
+ * payloads are not source code, so the Rego/OPA value proposition is weaker
+ * than for lint rules).
+ *
+ * If the rule carries a `verification_shadow:` block (forward-compat schema
+ * permits this for future Spine promotion), the returned result includes a
+ * structured warning. Per ADR-104 § Convergence: "the engine MUST
+ * warn-and-ignore the block (the rule itself still executes as
+ * Interpretive)."
+ */
+export declare function classifyHookRule(rule: HookRule): ClassificationResult;
+//# sourceMappingURL=classification.d.ts.map

package/dist/hook/classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.d.ts","sourceRoot":"","sources":["../../src/hook/classification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,cAAc,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,kBAAkB,CAAC;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAQrE"}

package/dist/hook/classification.js

@@ -0,0 +1,24 @@
+/**
+ * Classify a hook rule for V1 dispatch.
+ *
+ * Always returns `interpretive` per ADR-104 § Target-aware dispatch (hooks
+ * are Interpretive Rule class — no formal-verification obligation; PreToolUse
+ * payloads are not source code, so the Rego/OPA value proposition is weaker
+ * than for lint rules).
+ *
+ * If the rule carries a `verification_shadow:` block (forward-compat schema
+ * permits this for future Spine promotion), the returned result includes a
+ * structured warning. Per ADR-104 § Convergence: "the engine MUST
+ * warn-and-ignore the block (the rule itself still executes as
+ * Interpretive)."
+ */
+export function classifyHookRule(rule) {
+    if (rule.verification_shadow !== undefined) {
+        return {
+            classification: 'interpretive',
+            warning: `[totem:hook-shadow-ignored] ${rule.id}: verification_shadow block ignored in V1 (hooks are Interpretive Rule class); rule still executes`,
+        };
+    }
+    return { classification: 'interpretive' };
+}
+//# sourceMappingURL=classification.js.map

package/dist/hook/classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.js","sourceRoot":"","sources":["../../src/hook/classification.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACL,cAAc,EAAE,cAAc;YAC9B,OAAO,EAAE,+BAA+B,IAAI,CAAC,EAAE,oGAAoG;SACpJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAC5C,CAAC"}

package/dist/hook/classification.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=classification.test.d.ts.map

package/dist/hook/classification.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.test.d.ts","sourceRoot":"","sources":["../../src/hook/classification.test.ts"],"names":[],"mappings":""}

package/dist/hook/classification.test.js

@@ -0,0 +1,40 @@
+import { describe, expect, it } from 'vitest';
+import { classifyHookRule } from './classification.js';
+const baseRule = {
+    id: 'r1',
+    trigger: { tool: 'bash', pattern: '.*' },
+    check: { pattern: 'x', type: 'reject-if-match' },
+    message: 'm',
+};
+describe('classifyHookRule', () => {
+    it('returns interpretive with no warning for a plain hook rule', () => {
+        const result = classifyHookRule(baseRule);
+        expect(result.classification).toBe('interpretive');
+        expect(result.warning).toBeUndefined();
+    });
+    it('returns interpretive but emits a warn-and-ignore signal when verification_shadow is present', () => {
+        const withShadow = {
+            ...baseRule,
+            verification_shadow: { rego: 'package x' },
+        };
+        const result = classifyHookRule(withShadow);
+        expect(result.classification).toBe('interpretive');
+        expect(result.warning).toBeDefined();
+        expect(result.warning).toContain('[totem:hook-shadow-ignored]');
+        expect(result.warning).toContain('r1');
+    });
+    it('treats verification_shadow: null as present (warns and continues)', () => {
+        // null is a JS-truthy distinct from undefined; if the schema admits it the
+        // classification helper should still emit the warn-and-ignore signal so
+        // the dispatch contract holds for any non-undefined value.
+        const withNullShadow = {
+            ...baseRule,
+            id: 'r-null',
+            verification_shadow: null,
+        };
+        const result = classifyHookRule(withNullShadow);
+        expect(result.classification).toBe('interpretive');
+        expect(result.warning).toBeDefined();
+    });
+});
+//# sourceMappingURL=classification.test.js.map

package/dist/hook/classification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.test.js","sourceRoot":"","sources":["../../src/hook/classification.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,MAAM,QAAQ,GAAa;IACzB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAChD,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,UAAU,GAAa;YAC3B,GAAG,QAAQ;YACX,mBAAmB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SAC3C,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,cAAc,GAAa;YAC/B,GAAG,QAAQ;YACX,EAAE,EAAE,QAAQ;YACZ,mBAAmB,EAAE,IAAI;SAC1B,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hook/loader.d.ts

@@ -0,0 +1,47 @@
+import { TotemError } from '@mmnto/totem';
+import { type CompiledHookRule } from './schema.js';
+/**
+ * Compiled-hooks manifest loader (ADR-104 § Decision 3 staleness check + a
+ * forward-compat warn-and-skip path for an evolving manifest schema).
+ *
+ * The loader is a pure function over `(manifestPath, installedPackVersions)`.
+ * It does NOT read `package.json` itself — callers (typically a
+ * bootstrap helper) resolve installed pack versions once and pass them in.
+ * Keeps the loader testable in isolation; mirrors the substrate-wiring
+ * pattern from `bootstrapEngine` (1.25.0 wiring lesson).
+ *
+ * Three failure modes are surfaced via the `warnings` array, not by
+ * throwing:
+ *
+ * 1. Manifest file missing — empty result, no warnings (a fresh repo without
+ *    installed pack hooks is a valid state).
+ * 2. Manifest schemaVersion is not the runner's expected version — warn and
+ *    skip the entire manifest (no hooks loaded). Composes with ADR-104
+ *    § Decision 4's forward-compat ethos.
+ * 3. Pack version drift — for each pack whose installed version differs from
+ *    the compiled-against version, emit a `[totem:hook-stale]` warning per
+ *    the format in ADR-104 § Decision 3. Hooks still load (Tenet 4 carve-out:
+ *    hooks are best-effort; staleness is signal, not a fail-closed condition).
+ *
+ * Structural errors (corrupt JSON, schema-validation failure on a manifest
+ * claiming the supported schemaVersion) populate `errors` and yield an empty
+ * hooks array — distinct from a missing manifest.
+ */
+export interface LoadCompiledHooksOptions {
+    manifestPath: string;
+    installedPackVersions: Record<string, string>;
+}
+export interface LoadCompiledHooksResult {
+    hooks: CompiledHookRule[];
+    warnings: string[];
+    /**
+     * Errors carry the original cause via `Error.cause` so debug consumers
+     * can traverse the chain (per the codebase styleguide rule against
+     * concatenating `err.message` into new strings — destroys the stack).
+     * Callers that just need to log can use `err.message`; debug tooling
+     * walks `err.cause` recursively.
+     */
+    errors: TotemError[];
+}
+export declare function loadCompiledHooks(options: LoadCompiledHooksOptions): LoadCompiledHooksResult;
+//# sourceMappingURL=loader.d.ts.map

package/dist/hook/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/hook/loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;;OAMG;IACH,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB,CA+F5F"}

package/dist/hook/loader.js

@@ -0,0 +1,66 @@
+import fs from 'node:fs';
+import { TotemError } from '@mmnto/totem';
+import { COMPILED_HOOKS_SCHEMA_VERSION, CompiledHooksManifestSchema, } from './schema.js';
+export function loadCompiledHooks(options) {
+    const warnings = [];
+    const errors = [];
+    // No `fs.existsSync` pre-check: that returns false for any filesystem
+    // error (permission denied, symlink loops, EBUSY, etc.), not just ENOENT.
+    // Treating those as "missing manifest" would silently swallow real
+    // diagnostics. Catch ENOENT explicitly inside the read; everything else
+    // surfaces as a HOOKS_LOAD_FAILED entry.
+    let raw;
+    try {
+        raw = fs.readFileSync(options.manifestPath, 'utf8');
+        // totem-context: intentional — error captured into diagnostics array (the loader's contract is diagnostics-not-throws per Tenet 4 carve-out for hooks being best-effort)
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            // Fresh repo without installed pack hooks is a valid state, not a fault.
+            return { hooks: [], warnings, errors };
+        }
+        errors.push(new TotemError('HOOKS_LOAD_FAILED', `failed to read compiled-hooks manifest at ${options.manifestPath}`, 'verify the file is readable and re-run `totem sync` to regenerate', err));
+        return { hooks: [], warnings, errors };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+        // totem-context: intentional — error captured into diagnostics array (the loader's contract is diagnostics-not-throws per Tenet 4 carve-out for hooks being best-effort)
+    }
+    catch (err) {
+        errors.push(new TotemError('HOOKS_LOAD_FAILED', `compiled-hooks manifest at ${options.manifestPath} is not valid JSON`, 're-run `totem sync` to regenerate the manifest', err));
+        return { hooks: [], warnings, errors };
+    }
+    // Forward-compat: peek at schemaVersion BEFORE invoking the strict z.literal
+    // schema validator, so an unknown version surfaces as a warn-and-skip
+    // rather than a thrown ZodError. Mirrors the per-pack warn-and-skip pattern
+    // for `hooks.yaml :: version` from ADR-104 § Decision 4.
+    const peekedVersion = typeof parsed === 'object' && parsed !== null
+        ? parsed.schemaVersion
+        : undefined;
+    if (peekedVersion !== COMPILED_HOOKS_SCHEMA_VERSION) {
+        warnings.push(`[totem:hook-schema] compiled-hooks manifest schemaVersion ${JSON.stringify(peekedVersion)} unsupported by this runner (expected ${COMPILED_HOOKS_SCHEMA_VERSION})\n  → upgrade totem CLI or re-run \`totem sync\` to regenerate`);
+        return { hooks: [], warnings, errors };
+    }
+    const validation = CompiledHooksManifestSchema.safeParse(parsed);
+    if (!validation.success) {
+        const summary = validation.error.issues
+            .map((i) => `${i.path.join('.')}: ${i.message}`)
+            .join('; ');
+        errors.push(new TotemError('HOOKS_LOAD_FAILED', `compiled-hooks manifest at ${options.manifestPath} failed schema validation: ${summary}`, 're-run `totem sync` to regenerate the manifest, or upgrade totem CLI if the manifest was authored by a newer version', validation.error));
+        return { hooks: [], warnings, errors };
+    }
+    const manifest = validation.data;
+    for (const [packId, compiledVersion] of Object.entries(manifest.sourcePackVersions)) {
+        const installedVersion = options.installedPackVersions[packId];
+        if (installedVersion === undefined) {
+            warnings.push(`[totem:hook-stale] ${packId}: compiled against ${compiledVersion}, not currently installed\n  → run \`totem sync\` to refresh .totem/compiled-hooks.json`);
+            continue;
+        }
+        if (installedVersion !== compiledVersion) {
+            warnings.push(`[totem:hook-stale] ${packId}: compiled against ${compiledVersion}, installed ${installedVersion}\n  → run \`totem sync\` to refresh .totem/compiled-hooks.json`);
+        }
+    }
+    return { hooks: manifest.hooks, warnings, errors };
+}
+//# sourceMappingURL=loader.js.map

package/dist/hook/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/hook/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAE7B,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAgDrB,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,sEAAsE;IACtE,0EAA0E;IAC1E,mEAAmE;IACnE,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,yKAAyK;IAC3K,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,yEAAyE;YACzE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,IAAI,UAAU,CACZ,mBAAmB,EACnB,6CAA6C,OAAO,CAAC,YAAY,EAAE,EACnE,mEAAmE,EACnE,GAAG,CACJ,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,yKAAyK;IAC3K,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,IAAI,UAAU,CACZ,mBAAmB,EACnB,8BAA8B,OAAO,CAAC,YAAY,oBAAoB,EACtE,gDAAgD,EAChD,GAAG,CACJ,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GACjB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAAsC,CAAC,aAAa;QACvD,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,aAAa,KAAK,6BAA6B,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CACX,6DAA6D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,yCAAyC,6BAA6B,iEAAiE,CAClO,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,UAAU,GAAG,2BAA2B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CACT,IAAI,UAAU,CACZ,mBAAmB,EACnB,8BAA8B,OAAO,CAAC,YAAY,8BAA8B,OAAO,EAAE,EACzF,sHAAsH,EACtH,UAAU,CAAC,KAAK,CACjB,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;IAEjC,KAAK,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,sBAAsB,eAAe,yFAAyF,CAC3J,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,sBAAsB,eAAe,eAAe,gBAAgB,gEAAgE,CACjK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/hook/loader.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=loader.test.d.ts.map

package/dist/hook/loader.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.test.d.ts","sourceRoot":"","sources":["../../src/hook/loader.test.ts"],"names":[],"mappings":""}

package/dist/hook/loader.test.js

@@ -0,0 +1,205 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { loadCompiledHooks } from './loader.js';
+let workDir;
+beforeEach(() => {
+    workDir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-hook-loader-'));
+});
+afterEach(() => {
+    fs.rmSync(workDir, { recursive: true, force: true });
+});
+function writeManifest(content) {
+    const manifestPath = path.join(workDir, 'compiled-hooks.json');
+    fs.writeFileSync(manifestPath, JSON.stringify(content), 'utf8');
+    return manifestPath;
+}
+const validRule = {
+    id: 'r1',
+    packId: '@mmnto/pack-bot-coderabbit',
+    trigger: { tool: 'bash', pattern: '.*' },
+    check: { pattern: 'x', type: 'reject-if-match' },
+    message: 'm',
+};
+describe('loadCompiledHooks', () => {
+    it('returns an empty result when the manifest file does not exist (fresh repo, ENOENT)', () => {
+        const result = loadCompiledHooks({
+            manifestPath: path.join(workDir, 'missing.json'),
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.warnings).toEqual([]);
+        expect(result.errors).toEqual([]);
+    });
+    it('surfaces non-ENOENT read errors as HOOKS_LOAD_FAILED (does not pretend the file is missing)', () => {
+        // Reading a directory as a file produces EISDIR on POSIX / EBADF or
+        // ENOTSUP-flavoured failures on Windows. Whatever the platform-specific
+        // errno, it is NOT ENOENT — so the loader must surface it, not silently
+        // return the "manifest absent" result that the prior existsSync pre-check
+        // would have masked.
+        const dirAsManifest = path.join(workDir, 'a-directory');
+        fs.mkdirSync(dirAsManifest);
+        const result = loadCompiledHooks({
+            manifestPath: dirAsManifest,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors.length).toBe(1);
+        const err = result.errors[0];
+        expect(err.code).toBe('HOOKS_LOAD_FAILED');
+        expect(err.message).toContain('failed to read compiled-hooks manifest');
+        expect(err.cause).toBeDefined();
+    });
+    it('records a structural error on invalid JSON and preserves the original SyntaxError via cause', () => {
+        const manifestPath = path.join(workDir, 'compiled-hooks.json');
+        fs.writeFileSync(manifestPath, '{ not valid json', 'utf8');
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors.length).toBe(1);
+        const err = result.errors[0];
+        expect(err.message).toContain('not valid JSON');
+        expect(err.code).toBe('HOOKS_LOAD_FAILED');
+        // Original parse error preserved on `.cause` so debug consumers can
+        // walk the chain without the stack being collapsed into a string.
+        expect(err.cause).toBeInstanceOf(SyntaxError);
+    });
+    it('warns and skips when schemaVersion is higher than the runner supports', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 2,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: {},
+            hooks: [],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors).toEqual([]);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('[totem:hook-schema]');
+        expect(result.warnings[0]).toContain('schemaVersion 2');
+    });
+    it('warns and skips when schemaVersion is missing', () => {
+        const manifestPath = writeManifest({
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: {},
+            hooks: [],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('[totem:hook-schema]');
+    });
+    it('records a structural error when the supported-version manifest fails schema validation', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: 'not-a-real-date',
+            sourcePackVersions: {},
+            hooks: [],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors.length).toBe(1);
+        const err = result.errors[0];
+        expect(err.message).toContain('schema validation');
+        expect(err.code).toBe('HOOKS_LOAD_FAILED');
+        // Zod's ZodError preserved as the cause for debug-mode chain traversal.
+        expect(err.cause).toBeDefined();
+    });
+    it('returns hooks with no warnings when installed pack versions match compiled versions', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+        });
+        expect(result.hooks).toHaveLength(1);
+        expect(result.warnings).toEqual([]);
+        expect(result.errors).toEqual([]);
+    });
+    it('emits a staleness warning when the installed pack version differs from compiled', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-coderabbit': '1.1.0' },
+        });
+        expect(result.hooks).toHaveLength(1);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('[totem:hook-stale]');
+        expect(result.warnings[0]).toContain('@mmnto/pack-bot-coderabbit');
+        expect(result.warnings[0]).toContain('compiled against 1.0.0, installed 1.1.0');
+    });
+    it('emits a staleness warning when a compiled-against pack is not installed at all', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toHaveLength(1);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('not currently installed');
+    });
+    it('ignores extra installed packs not in sourcePackVersions (no warning)', () => {
+        // A pack installed after the last `totem sync` is benign — its hooks
+        // are not yet active, but that is not staleness in the compiled set.
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {
+                '@mmnto/pack-bot-coderabbit': '1.0.0',
+                '@mmnto/pack-bot-gemini-code-assist': '1.0.0',
+            },
+        });
+        expect(result.warnings).toEqual([]);
+    });
+    it('emits one staleness warning per drifting pack', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: {
+                '@mmnto/pack-bot-coderabbit': '1.0.0',
+                '@mmnto/pack-bot-gemini-code-assist': '2.0.0',
+            },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {
+                '@mmnto/pack-bot-coderabbit': '1.1.0',
+                '@mmnto/pack-bot-gemini-code-assist': '2.0.1',
+            },
+        });
+        expect(result.warnings.length).toBe(2);
+    });
+});
+//# sourceMappingURL=loader.test.js.map

package/dist/hook/loader.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.test.js","sourceRoot":"","sources":["../../src/hook/loader.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,IAAI,OAAe,CAAC;AAEpB,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,4BAA4B;IACpC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAChD,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;YAChD,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,qBAAqB;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACxD,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY,EAAE,aAAa;YAC3B,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,iBAAiB;YAC7B,kBAAkB,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,wEAAwE;QACxE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE;gBACrB,4BAA4B,EAAE,OAAO;gBACrC,oCAAoC,EAAE,OAAO;aAC9C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE;gBAClB,4BAA4B,EAAE,OAAO;gBACrC,oCAAoC,EAAE,OAAO;aAC9C;YACD,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE;gBACrB,4BAA4B,EAAE,OAAO;gBACrC,oCAAoC,EAAE,OAAO;aAC9C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}