@mmnto/cli 1.35.0 → 1.36.0

package/dist/hook/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/hook/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;GAUG;AAEH,QAAA,MAAM,mBAAmB,sDAAoD,CAAC;AAE9E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AA4EhE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOzB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBxB,CAAC;AAEL,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/hook/schema.js

@@ -0,0 +1,164 @@
+import { z } from 'zod';
+import { isRegexSafe } from '@mmnto/totem';
+/**
+ * Hook rule schemas for the bot-pack wiring engine (ADR-104).
+ *
+ * Two surfaces:
+ * - `HooksYamlSchema` describes a pack's `hooks.yaml` (authoring surface).
+ * - `CompiledHooksManifestSchema` describes `.totem/compiled-hooks.json`
+ *   (runtime surface produced by `totem sync` from installed packs).
+ *
+ * The compiled manifest carries the staleness metadata required by
+ * ADR-104 § Decision 3: schemaVersion + compiledAt + sourcePackVersions.
+ */
+const HookCheckTypeSchema = z.enum(['reject-if-match', 'reject-if-no-match']);
+/**
+ * Generous upper bound on pack-supplied regex pattern length. Real rules in
+ * the existing corpus run well under 200 chars; 512 leaves headroom while
+ * capping the attack surface against deliberately-bloated inputs. Bounding
+ * length at the schema layer also makes ReDoS-style worst-case payloads
+ * easier to reason about (the engine never compiles 10KB patterns).
+ */
+const MAX_PATTERN_LENGTH = 512;
+/**
+ * Validate that a regex pattern is well-formed AND safe from catastrophic
+ * backtracking. Runs at parse time (Tenet 4: don't fail open silently on
+ * invalid input). Three layers, gated in order with `fatal: true` so an
+ * earlier failure short-circuits — otherwise Zod would run `isRegexSafe`
+ * against an unbounded-length or syntactically-invalid input:
+ *
+ * 1. Bounded length (`MAX_PATTERN_LENGTH`) — caps the attack surface against
+ *    deliberately-bloated patterns.
+ * 2. Syntactically valid (compiles via `new RegExp`).
+ * 3. Free of nested unbounded-quantifier shapes via `safe-regex2`
+ *    (re-exported from core as `isRegexSafe`). Without this, a pack
+ *    publishing a pattern like `(a+)+$` would hang `evaluateHook` on
+ *    crafted tool-call payloads. Pack-supplied patterns come from
+ *    third-party npm, so ReDoS rejection at parse time is load-bearing
+ *    for the engine's availability guarantee.
+ */
+const RegexPatternSchema = z.string().superRefine((p, ctx) => {
+    if (p.length < 1) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'pattern must not be empty',
+            fatal: true,
+        });
+        return z.NEVER;
+    }
+    if (p.length > MAX_PATTERN_LENGTH) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: `pattern exceeds ${MAX_PATTERN_LENGTH}-char limit`,
+            fatal: true,
+        });
+        return z.NEVER;
+    }
+    try {
+        new RegExp(p);
+        // totem-context: intentional — catch below is throw-as-control-flow for regex validation
+    }
+    catch {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'pattern is not a valid regular expression',
+            fatal: true,
+        });
+        return z.NEVER;
+    }
+    if (!isRegexSafe(p)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'pattern has catastrophic-backtracking risk (ReDoS); reshape to bounded quantifiers',
+            fatal: true,
+        });
+        return z.NEVER;
+    }
+});
+const HookTriggerSchema = z.object({
+    tool: z.string().min(1),
+    pattern: RegexPatternSchema,
+});
+const HookCheckSchema = z.object({
+    pattern: RegexPatternSchema,
+    type: HookCheckTypeSchema,
+});
+/**
+ * Authoring-surface schema for a single hook rule in a pack's `hooks.yaml`.
+ *
+ * The optional `recoveryHint` field (ADR-104 § Decision 1) gives agents the
+ * WHAT-INSTEAD on a block — recommended but not required in V1. Adoption
+ * tracked toward a V2 upgrade-to-required trigger (>80% of published rules
+ * carry it, OR an empirically-observed retry-loop incident).
+ *
+ * The `verification_shadow` field is reserved for the Spine Rule
+ * classification path (ADR-104 § Convergence + Q1 binding). In V1 the engine
+ * MUST warn-and-ignore any verification_shadow on a hook rule (hooks are
+ * Interpretive Rule class — no formal verification obligation). Schema
+ * accepts it permissively so future Spine-Rule promotion does not require
+ * a schema break.
+ */
+export const HookRuleSchema = z.object({
+    id: z.string().min(1),
+    trigger: HookTriggerSchema,
+    check: HookCheckSchema,
+    message: z.string().min(1),
+    recoveryHint: z.string().optional(),
+    verification_shadow: z.unknown().optional(),
+});
+export const HOOKS_YAML_SCHEMA_VERSION = 1;
+/**
+ * Per-pack `hooks.yaml` file shape. The `version` field is the contract
+ * for forward-compat: when `totem sync` parses an unknown version (higher
+ * than the runner supports), it warns-and-skips that pack entirely
+ * (ADR-104 § Decision 4).
+ */
+export const HooksYamlSchema = z
+    .object({
+    version: z.number().int().positive(),
+    hooks: z.array(HookRuleSchema),
+})
+    .superRefine((data, ctx) => {
+    // Duplicate hook ids within a single pack would make the
+    // `<packId>/<ruleId>` provenance in rejection messages (ADR-104 § Decision 1)
+    // ambiguous. Enforce uniqueness at parse time so a misauthored pack fails
+    // on load rather than producing non-deterministic rejection trails.
+    const seen = new Set();
+    data.hooks.forEach((hook, i) => {
+        if (seen.has(hook.id)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: `Duplicate hook id within pack: ${hook.id}`,
+                path: ['hooks', i, 'id'],
+            });
+        }
+        seen.add(hook.id);
+    });
+});
+export const COMPILED_HOOKS_SCHEMA_VERSION = 1;
+/**
+ * A compiled hook rule carries provenance (`packId`) so rejection messages
+ * can name `<packId>/<ruleId>` (ADR-104 § Decision 1) and so staleness
+ * checks can scope per-pack.
+ */
+export const CompiledHookRuleSchema = HookRuleSchema.extend({
+    packId: z.string().min(1),
+});
+/**
+ * Runtime-surface manifest produced by `totem sync` and read on every
+ * `totem hook run` invocation. The metadata fields are load-bearing for
+ * ADR-104 § Decision 3 (staleness detection):
+ *
+ * - `schemaVersion`: bumps on breaking structural change to this manifest
+ * - `compiledAt`: ISO 8601 timestamp of last compile
+ * - `sourcePackVersions`: pack name → version at compile time; compared
+ *   against package.json resolutions to emit `[totem:hook-stale]` warnings
+ *   when packs have updated since last compile
+ */
+export const CompiledHooksManifestSchema = z.object({
+    schemaVersion: z.literal(COMPILED_HOOKS_SCHEMA_VERSION),
+    compiledAt: z.string().datetime(),
+    sourcePackVersions: z.record(z.string(), z.string()),
+    hooks: z.array(CompiledHookRuleSchema),
+});
+//# sourceMappingURL=schema.js.map

package/dist/hook/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/hook/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;;;;;GAUG;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAI9E;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IAC3D,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,2BAA2B;YACpC,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,mBAAmB,kBAAkB,aAAa;YAC3D,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACd,yFAAyF;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,2CAA2C;YACpD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,oFAAoF;YAC7F,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,kBAAkB;CAC5B,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,kBAAkB;IAC3B,IAAI,EAAE,mBAAmB;CAC1B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,iBAAiB;IAC1B,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC/B,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,yDAAyD;IACzD,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,kCAAkC,IAAI,CAAC,EAAE,EAAE;gBACpD,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC;aACzB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAIL,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAIH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACvC,CAAC,CAAC"}

package/dist/hook/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/hook/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../src/hook/schema.test.ts"],"names":[],"mappings":""}

package/dist/hook/schema.test.js

@@ -0,0 +1,233 @@
+import { describe, expect, it } from 'vitest';
+import { COMPILED_HOOKS_SCHEMA_VERSION, CompiledHooksManifestSchema, HookRuleSchema, HOOKS_YAML_SCHEMA_VERSION, HooksYamlSchema, } from './schema.js';
+describe('hook schema', () => {
+    describe('HookRuleSchema', () => {
+        it('accepts a minimal rule with required fields only', () => {
+            const minimal = {
+                id: 'gca-tag-xor-command',
+                trigger: { tool: 'bash', pattern: 'gh\\s+(pr|issue)\\s+comment.*' },
+                check: {
+                    pattern: '(?=.*@gemini-code-assist)(?=.*\\/gemini review)',
+                    type: 'reject-if-match',
+                },
+                message: 'GCA tag XOR — never both.',
+            };
+            const parsed = HookRuleSchema.parse(minimal);
+            expect(parsed.recoveryHint).toBeUndefined();
+            expect(parsed.verification_shadow).toBeUndefined();
+        });
+        it('accepts a rule with the optional recoveryHint field', () => {
+            const withHint = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: '.*' },
+                check: { pattern: 'x', type: 'reject-if-match' },
+                message: 'm',
+                recoveryHint: 'try y instead',
+            };
+            const parsed = HookRuleSchema.parse(withHint);
+            expect(parsed.recoveryHint).toBe('try y instead');
+        });
+        it('accepts verification_shadow permissively (V1 warn-and-ignore at runtime)', () => {
+            const withShadow = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: '.*' },
+                check: { pattern: 'x', type: 'reject-if-match' },
+                message: 'm',
+                verification_shadow: { rego: 'package x' },
+            };
+            // V1 contract: schema accepts the block so a future Spine-Rule
+            // promotion doesn't break the parser. Runtime drops/warns on it.
+            expect(() => HookRuleSchema.parse(withShadow)).not.toThrow();
+        });
+        it('rejects rules with empty required strings', () => {
+            const empty = {
+                id: '',
+                trigger: { tool: 'bash', pattern: '.*' },
+                check: { pattern: 'x', type: 'reject-if-match' },
+                message: 'm',
+            };
+            expect(() => HookRuleSchema.parse(empty)).toThrow();
+        });
+        it('rejects an unknown check.type value', () => {
+            const badType = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: '.*' },
+                check: { pattern: 'x', type: 'maybe-reject' },
+                message: 'm',
+            };
+            expect(() => HookRuleSchema.parse(badType)).toThrow();
+        });
+        it('rejects rules whose trigger.pattern is not a valid regex (parse-time)', () => {
+            // Unterminated character class — `new RegExp('[')` throws SyntaxError.
+            // Schema must catch this before any `evaluateHook` invocation so a
+            // malformed pack rule surfaces at parse time rather than at first-fire.
+            const badRegex = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: '[' },
+                check: { pattern: 'x', type: 'reject-if-match' },
+                message: 'm',
+            };
+            expect(() => HookRuleSchema.parse(badRegex)).toThrow();
+        });
+        it('rejects rules whose check.pattern is not a valid regex (parse-time)', () => {
+            const badRegex = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: '.*' },
+                check: { pattern: '*invalid', type: 'reject-if-match' },
+                message: 'm',
+            };
+            expect(() => HookRuleSchema.parse(badRegex)).toThrow();
+        });
+        it('rejects rules whose check.pattern has ReDoS risk (parse-time)', () => {
+            // `(a+)+$` is the canonical exponential-backtracking ReDoS shape — runs
+            // exponentially in the input length on near-matches. Pack-supplied
+            // patterns get a parse-time safety check via safe-regex2 to keep the
+            // engine's availability guarantee independent of pack quality.
+            const redosRule = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: '.*' },
+                check: { pattern: '(a+)+$', type: 'reject-if-match' },
+                message: 'm',
+            };
+            const result = HookRuleSchema.safeParse(redosRule);
+            expect(result.success).toBe(false);
+            if (!result.success) {
+                const issue = result.error.issues.find((i) => i.message.includes('catastrophic-backtracking'));
+                expect(issue).toBeDefined();
+            }
+        });
+        it('rejects rules whose pattern exceeds the length cap', () => {
+            const oversized = {
+                id: 'r1',
+                trigger: { tool: 'bash', pattern: 'a'.repeat(600) },
+                check: { pattern: 'x', type: 'reject-if-match' },
+                message: 'm',
+            };
+            const result = HookRuleSchema.safeParse(oversized);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('HooksYamlSchema', () => {
+        it('accepts a pack-level hooks.yaml with version 1 and an empty hooks array', () => {
+            const empty = { version: HOOKS_YAML_SCHEMA_VERSION, hooks: [] };
+            expect(() => HooksYamlSchema.parse(empty)).not.toThrow();
+        });
+        it('accepts version 2 — forward-compat path (runtime warn-and-skip per Decision 4)', () => {
+            // Schema accepts any positive integer version. The warn-and-skip on
+            // unknown-version is enforced at the load layer, not the schema layer,
+            // so a future bot-pack publishing version 2 doesn't crash the parser.
+            const future = { version: 2, hooks: [] };
+            expect(() => HooksYamlSchema.parse(future)).not.toThrow();
+        });
+        it('rejects non-positive version values', () => {
+            expect(() => HooksYamlSchema.parse({ version: 0, hooks: [] })).toThrow();
+            expect(() => HooksYamlSchema.parse({ version: -1, hooks: [] })).toThrow();
+        });
+        it('accepts hooks with distinct ids', () => {
+            const distinct = {
+                version: HOOKS_YAML_SCHEMA_VERSION,
+                hooks: [
+                    {
+                        id: 'r1',
+                        trigger: { tool: 'bash', pattern: '.*' },
+                        check: { pattern: 'x', type: 'reject-if-match' },
+                        message: 'm1',
+                    },
+                    {
+                        id: 'r2',
+                        trigger: { tool: 'bash', pattern: '.*' },
+                        check: { pattern: 'y', type: 'reject-if-match' },
+                        message: 'm2',
+                    },
+                ],
+            };
+            expect(() => HooksYamlSchema.parse(distinct)).not.toThrow();
+        });
+        it('rejects duplicate hook ids within a pack (provenance must stay deterministic)', () => {
+            // Two rules with the same id within one pack would make
+            // `<packId>/<ruleId>` rejection trails ambiguous (ADR-104 § Decision 1).
+            const dup = {
+                version: HOOKS_YAML_SCHEMA_VERSION,
+                hooks: [
+                    {
+                        id: 'r1',
+                        trigger: { tool: 'bash', pattern: '.*' },
+                        check: { pattern: 'x', type: 'reject-if-match' },
+                        message: 'first',
+                    },
+                    {
+                        id: 'r1',
+                        trigger: { tool: 'bash', pattern: '.*' },
+                        check: { pattern: 'y', type: 'reject-if-match' },
+                        message: 'second',
+                    },
+                ],
+            };
+            const result = HooksYamlSchema.safeParse(dup);
+            expect(result.success).toBe(false);
+            if (!result.success) {
+                const issue = result.error.issues.find((i) => i.message === 'Duplicate hook id within pack: r1');
+                expect(issue).toBeDefined();
+                expect(issue?.path).toEqual(['hooks', 1, 'id']);
+            }
+        });
+    });
+    describe('CompiledHooksManifestSchema', () => {
+        it('accepts a manifest with the required staleness metadata fields', () => {
+            const manifest = {
+                schemaVersion: COMPILED_HOOKS_SCHEMA_VERSION,
+                compiledAt: '2026-05-11T18:43:00Z',
+                sourcePackVersions: {
+                    '@mmnto/pack-bot-coderabbit': '1.0.0',
+                },
+                hooks: [],
+            };
+            expect(() => CompiledHooksManifestSchema.parse(manifest)).not.toThrow();
+        });
+        it('rejects a manifest missing sourcePackVersions (staleness check requires it)', () => {
+            const bad = {
+                schemaVersion: COMPILED_HOOKS_SCHEMA_VERSION,
+                compiledAt: '2026-05-11T18:43:00Z',
+                hooks: [],
+            };
+            expect(() => CompiledHooksManifestSchema.parse(bad)).toThrow();
+        });
+        it('rejects a non-ISO compiledAt string', () => {
+            const bad = {
+                schemaVersion: COMPILED_HOOKS_SCHEMA_VERSION,
+                compiledAt: 'yesterday',
+                sourcePackVersions: {},
+                hooks: [],
+            };
+            expect(() => CompiledHooksManifestSchema.parse(bad)).toThrow();
+        });
+        it('rejects a future schemaVersion (uses z.literal — caller must handle upgrades)', () => {
+            const future = {
+                schemaVersion: 2,
+                compiledAt: '2026-05-11T18:43:00Z',
+                sourcePackVersions: {},
+                hooks: [],
+            };
+            expect(() => CompiledHooksManifestSchema.parse(future)).toThrow();
+        });
+        it('preserves provenance via packId on each compiled rule', () => {
+            const manifest = {
+                schemaVersion: COMPILED_HOOKS_SCHEMA_VERSION,
+                compiledAt: '2026-05-11T18:43:00Z',
+                sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+                hooks: [
+                    {
+                        id: 'r1',
+                        packId: '@mmnto/pack-bot-coderabbit',
+                        trigger: { tool: 'bash', pattern: '.*' },
+                        check: { pattern: 'x', type: 'reject-if-match' },
+                        message: 'm',
+                    },
+                ],
+            };
+            const parsed = CompiledHooksManifestSchema.parse(manifest);
+            expect(parsed.hooks[0].packId).toBe('@mmnto/pack-bot-coderabbit');
+        });
+    });
+});
+//# sourceMappingURL=schema.test.js.map

package/dist/hook/schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.js","sourceRoot":"","sources":["../../src/hook/schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,cAAc,EACd,yBAAyB,EACzB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,qBAAqB;gBACzB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE;gBACnE,KAAK,EAAE;oBACL,OAAO,EAAE,iDAAiD;oBAC1D,IAAI,EAAE,iBAAiB;iBACxB;gBACD,OAAO,EAAE,2BAA2B;aACrC,CAAC;YACF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAChD,OAAO,EAAE,GAAG;gBACZ,YAAY,EAAE,eAAe;aAC9B,CAAC;YACF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;YAClF,MAAM,UAAU,GAAG;gBACjB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAChD,OAAO,EAAE,GAAG;gBACZ,mBAAmB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;aAC3C,CAAC;YACF,+DAA+D;YAC/D,iEAAiE;YACjE,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,KAAK,GAAG;gBACZ,EAAE,EAAE,EAAE;gBACN,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAChD,OAAO,EAAE,GAAG;aACb,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;gBAC7C,OAAO,EAAE,GAAG;aACb,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,uEAAuE;YACvE,mEAAmE;YACnE,wEAAwE;YACxE,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;gBACvC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAChD,OAAO,EAAE,GAAG;aACb,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACvD,OAAO,EAAE,GAAG;aACb,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,wEAAwE;YACxE,mEAAmE;YACnE,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,SAAS,GAAG;gBAChB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACrD,OAAO,EAAE,GAAG;aACb,CAAC;YACF,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAChD,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,SAAS,GAAG;gBAChB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACnD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAChD,OAAO,EAAE,GAAG;aACb,CAAC;YACF,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;YACxF,oEAAoE;YACpE,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACzE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,yBAAyB;gBAClC,KAAK,EAAE;oBACL;wBACE,EAAE,EAAE,IAAI;wBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;wBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;wBAChD,OAAO,EAAE,IAAI;qBACd;oBACD;wBACE,EAAE,EAAE,IAAI;wBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;wBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;wBAChD,OAAO,EAAE,IAAI;qBACd;iBACF;aACF,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;YACvF,wDAAwD;YACxD,yEAAyE;YACzE,MAAM,GAAG,GAAG;gBACV,OAAO,EAAE,yBAAyB;gBAClC,KAAK,EAAE;oBACL;wBACE,EAAE,EAAE,IAAI;wBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;wBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;wBAChD,OAAO,EAAE,OAAO;qBACjB;oBACD;wBACE,EAAE,EAAE,IAAI;wBACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;wBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;wBAChD,OAAO,EAAE,QAAQ;qBAClB;iBACF;aACF,CAAC;YACF,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,mCAAmC,CACzD,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5B,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,QAAQ,GAAG;gBACf,aAAa,EAAE,6BAA6B;gBAC5C,UAAU,EAAE,sBAAsB;gBAClC,kBAAkB,EAAE;oBAClB,4BAA4B,EAAE,OAAO;iBACtC;gBACD,KAAK,EAAE,EAAE;aACV,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;YACrF,MAAM,GAAG,GAAG;gBACV,aAAa,EAAE,6BAA6B;gBAC5C,UAAU,EAAE,sBAAsB;gBAClC,KAAK,EAAE,EAAE;aACV,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,GAAG,GAAG;gBACV,aAAa,EAAE,6BAA6B;gBAC5C,UAAU,EAAE,WAAW;gBACvB,kBAAkB,EAAE,EAAE;gBACtB,KAAK,EAAE,EAAE;aACV,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;YACvF,MAAM,MAAM,GAAG;gBACb,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,sBAAsB;gBAClC,kBAAkB,EAAE,EAAE;gBACtB,KAAK,EAAE,EAAE;aACV,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,QAAQ,GAAG;gBACf,aAAa,EAAE,6BAA6B;gBAC5C,UAAU,EAAE,sBAAsB;gBAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;gBAC7D,KAAK,EAAE;oBACL;wBACE,EAAE,EAAE,IAAI;wBACR,MAAM,EAAE,4BAA4B;wBACpC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;wBACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;wBAChD,OAAO,EAAE,GAAG;qBACb;iBACF;aACF,CAAC;YACF,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hook/test-runner.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Hooks-surface fixture test runner (ADR-104 § Convergence).
+ *
+ * Walks fixtures with `surface: hooks` from `.totem/tests/`, looks up the
+ * matching compiled hook by id, and evaluates each fixture line against
+ * the hook. Failures are reported per-line so authors can iterate on
+ * specific examples.
+ *
+ * Fixture semantics for hooks (corpus-driven):
+ * - `corpus: fail` (or `## Should fail` block) — each line is a tool-call
+ *   payload that MUST cause the hook to reject; lines that allow are
+ *   `missedFails`.
+ * - `corpus: pass` (or `## Should pass` block) — each line is a tool-call
+ *   payload that MUST allow; lines that reject are `falsePositives`.
+ *
+ * Both blocks may appear in a single fixture (matches the rules-surface
+ * dual-section pattern). The corpus frontmatter field is informational
+ * for hooks fixtures — the section names carry the same intent and the
+ * runner exercises both.
+ *
+ * The tool for each payload is sourced from the matched hook's
+ * `trigger.tool`. Fixtures do not encode the tool explicitly; the hook
+ * declares which tool it gates, so the fixture body is just the args
+ * payload the hook would see at runtime.
+ *
+ * The runner is deterministic Node.js — no LLM calls — mirroring the
+ * `totem hook run` contract. Loader warnings and structured errors flow
+ * through to the summary so the CLI surface can echo them to stderr.
+ */
+export interface HookTestFailure {
+    line: string;
+    expected: 'allow' | 'reject';
+    actual: 'allow' | 'reject';
+}
+export interface HookTestResult {
+    hookId: string;
+    packId: string;
+    fixturePath: string;
+    failures: HookTestFailure[];
+    passed: boolean;
+}
+export interface HookTestSummary {
+    total: number;
+    passed: number;
+    failed: number;
+    /** Fixtures referencing a hook id not present in the loaded manifest. */
+    unknownHooks: {
+        fixturePath: string;
+        hookId: string;
+    }[];
+    results: HookTestResult[];
+    loadWarnings: string[];
+    loadErrors: {
+        code: string;
+        message: string;
+    }[];
+}
+export interface RunHookTestsOptions {
+    manifestPath: string;
+    testsDir: string;
+    installedPackVersions: Record<string, string>;
+}
+export declare function runHookTests(options: RunHookTestsOptions): HookTestSummary;
+//# sourceMappingURL=test-runner.d.ts.map

package/dist/hook/test-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-runner.d.ts","sourceRoot":"","sources":["../../src/hook/test-runner.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC7B,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,YAAY,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxD,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,eAAe,CA+B1E"}

package/dist/hook/test-runner.js

@@ -0,0 +1,57 @@
+import { loadFixtures } from '@mmnto/totem';
+import { loadCompiledHooks } from './loader.js';
+import { evaluateHook } from './runtime.js';
+export function runHookTests(options) {
+    const { hooks, warnings, errors } = loadCompiledHooks({
+        manifestPath: options.manifestPath,
+        installedPackVersions: options.installedPackVersions,
+    });
+    const fixtures = loadFixtures(options.testsDir).filter((f) => f.surface === 'hooks');
+    const hooksById = new Map(hooks.map((h) => [h.id, h]));
+    const results = [];
+    const unknownHooks = [];
+    for (const fixture of fixtures) {
+        const hook = hooksById.get(fixture.ruleHash);
+        if (!hook) {
+            unknownHooks.push({ fixturePath: fixture.fixturePath, hookId: fixture.ruleHash });
+            continue;
+        }
+        results.push(testHook(hook, fixture));
+    }
+    const passed = results.filter((r) => r.passed).length;
+    return {
+        total: results.length,
+        passed,
+        failed: results.length - passed,
+        unknownHooks,
+        results,
+        loadWarnings: warnings,
+        loadErrors: errors.map((e) => ({ code: e.code, message: e.message })),
+    };
+}
+function testHook(hook, fixture) {
+    const failures = [];
+    const tool = hook.trigger.tool;
+    for (const args of fixture.failLines) {
+        const payload = { tool, args };
+        const decision = evaluateHook(hook, payload).decision;
+        if (decision !== 'reject') {
+            failures.push({ line: args, expected: 'reject', actual: decision });
+        }
+    }
+    for (const args of fixture.passLines) {
+        const payload = { tool, args };
+        const decision = evaluateHook(hook, payload).decision;
+        if (decision !== 'allow') {
+            failures.push({ line: args, expected: 'allow', actual: decision });
+        }
+    }
+    return {
+        hookId: hook.id,
+        packId: hook.packId,
+        fixturePath: fixture.fixturePath,
+        failures,
+        passed: failures.length === 0,
+    };
+}
+//# sourceMappingURL=test-runner.js.map

package/dist/hook/test-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-runner.js","sourceRoot":"","sources":["../../src/hook/test-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAwB,MAAM,cAAc,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,YAAY,EAAwB,MAAM,cAAc,CAAC;AAgElE,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;KACrD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAErF,MAAM,SAAS,GAAG,IAAI,GAAG,CAA2B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,YAAY,GAA8C,EAAE,CAAC;IAEnE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM;QAC/B,YAAY;QACZ,OAAO;QACP,YAAY,EAAE,QAAQ;QACtB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAsB,EAAE,OAAwB;IAChE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;QACtD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;QACtD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/hook/test-runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=test-runner.test.d.ts.map

package/dist/hook/test-runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-runner.test.d.ts","sourceRoot":"","sources":["../../src/hook/test-runner.test.ts"],"names":[],"mappings":""}