@mmnto/cli 1.35.0 → 1.37.0

package/dist/hook/classification.d.ts

@@ -0,0 +1,45 @@
+import type { HookRule } from './schema.js';
+/**
+ * Rule classification per ADR-104 § Convergence + § Target-aware dispatch
+ * (strategy-Gemini Q1 binding synthesis, T1930Z 2026-05-11).
+ *
+ * Two classes:
+ * - `spine`: has Rego-shadow representation; formally verified by SMT;
+ *   eligible for the top ~30 invariant set. Ships in ADR-103's lint-rule
+ *   pipeline. Not produced by this V1 hook engine.
+ * - `interpretive`: ast-grep / regex only; no formal verification obligation;
+ *   ships outside the core invariant set. All bot-pack hooks in V1 fall here.
+ *
+ * The hook runtime treats every rule as `interpretive`. The class is named
+ * explicitly so the loader's warn-and-ignore signal on a future Spine-Rule
+ * promotion attempt (`verification_shadow:` on a hook rule) carries the
+ * dispatch contract in its error message rather than relying on prose docs.
+ *
+ * V2 may promote bot-pack hooks to `spine` via a follow-on ADR; this seam
+ * is where that promotion lands.
+ */
+export type RuleClassification = 'spine' | 'interpretive';
+export interface ClassificationResult {
+    classification: RuleClassification;
+    /**
+     * When set, the loader SHOULD emit this string to stderr but continue
+     * loading the rule. Empty when no warn-and-ignore signal applies.
+     */
+    warning?: string;
+}
+/**
+ * Classify a hook rule for V1 dispatch.
+ *
+ * Always returns `interpretive` per ADR-104 § Target-aware dispatch (hooks
+ * are Interpretive Rule class — no formal-verification obligation; PreToolUse
+ * payloads are not source code, so the Rego/OPA value proposition is weaker
+ * than for lint rules).
+ *
+ * If the rule carries a `verification_shadow:` block (forward-compat schema
+ * permits this for future Spine promotion), the returned result includes a
+ * structured warning. Per ADR-104 § Convergence: "the engine MUST
+ * warn-and-ignore the block (the rule itself still executes as
+ * Interpretive)."
+ */
+export declare function classifyHookRule(rule: HookRule): ClassificationResult;
+//# sourceMappingURL=classification.d.ts.map

package/dist/hook/classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.d.ts","sourceRoot":"","sources":["../../src/hook/classification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,cAAc,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,kBAAkB,CAAC;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAQrE"}

package/dist/hook/classification.js

@@ -0,0 +1,24 @@
+/**
+ * Classify a hook rule for V1 dispatch.
+ *
+ * Always returns `interpretive` per ADR-104 § Target-aware dispatch (hooks
+ * are Interpretive Rule class — no formal-verification obligation; PreToolUse
+ * payloads are not source code, so the Rego/OPA value proposition is weaker
+ * than for lint rules).
+ *
+ * If the rule carries a `verification_shadow:` block (forward-compat schema
+ * permits this for future Spine promotion), the returned result includes a
+ * structured warning. Per ADR-104 § Convergence: "the engine MUST
+ * warn-and-ignore the block (the rule itself still executes as
+ * Interpretive)."
+ */
+export function classifyHookRule(rule) {
+    if (rule.verification_shadow !== undefined) {
+        return {
+            classification: 'interpretive',
+            warning: `[totem:hook-shadow-ignored] ${rule.id}: verification_shadow block ignored in V1 (hooks are Interpretive Rule class); rule still executes`,
+        };
+    }
+    return { classification: 'interpretive' };
+}
+//# sourceMappingURL=classification.js.map

package/dist/hook/classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.js","sourceRoot":"","sources":["../../src/hook/classification.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACL,cAAc,EAAE,cAAc;YAC9B,OAAO,EAAE,+BAA+B,IAAI,CAAC,EAAE,oGAAoG;SACpJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAC5C,CAAC"}

package/dist/hook/classification.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=classification.test.d.ts.map

package/dist/hook/classification.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.test.d.ts","sourceRoot":"","sources":["../../src/hook/classification.test.ts"],"names":[],"mappings":""}

package/dist/hook/classification.test.js

@@ -0,0 +1,40 @@
+import { describe, expect, it } from 'vitest';
+import { classifyHookRule } from './classification.js';
+const baseRule = {
+    id: 'r1',
+    trigger: { tool: 'bash', pattern: '.*' },
+    check: { pattern: 'x', type: 'reject-if-match' },
+    message: 'm',
+};
+describe('classifyHookRule', () => {
+    it('returns interpretive with no warning for a plain hook rule', () => {
+        const result = classifyHookRule(baseRule);
+        expect(result.classification).toBe('interpretive');
+        expect(result.warning).toBeUndefined();
+    });
+    it('returns interpretive but emits a warn-and-ignore signal when verification_shadow is present', () => {
+        const withShadow = {
+            ...baseRule,
+            verification_shadow: { rego: 'package x' },
+        };
+        const result = classifyHookRule(withShadow);
+        expect(result.classification).toBe('interpretive');
+        expect(result.warning).toBeDefined();
+        expect(result.warning).toContain('[totem:hook-shadow-ignored]');
+        expect(result.warning).toContain('r1');
+    });
+    it('treats verification_shadow: null as present (warns and continues)', () => {
+        // null is a JS-truthy distinct from undefined; if the schema admits it the
+        // classification helper should still emit the warn-and-ignore signal so
+        // the dispatch contract holds for any non-undefined value.
+        const withNullShadow = {
+            ...baseRule,
+            id: 'r-null',
+            verification_shadow: null,
+        };
+        const result = classifyHookRule(withNullShadow);
+        expect(result.classification).toBe('interpretive');
+        expect(result.warning).toBeDefined();
+    });
+});
+//# sourceMappingURL=classification.test.js.map

package/dist/hook/classification.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.test.js","sourceRoot":"","sources":["../../src/hook/classification.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,MAAM,QAAQ,GAAa;IACzB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAChD,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,UAAU,GAAa;YAC3B,GAAG,QAAQ;YACX,mBAAmB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SAC3C,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,cAAc,GAAa;YAC/B,GAAG,QAAQ;YACX,EAAE,EAAE,QAAQ;YACZ,mBAAmB,EAAE,IAAI;SAC1B,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hook/loader.d.ts

@@ -0,0 +1,47 @@
+import { TotemError } from '@mmnto/totem';
+import { type CompiledHookRule } from './schema.js';
+/**
+ * Compiled-hooks manifest loader (ADR-104 § Decision 3 staleness check + a
+ * forward-compat warn-and-skip path for an evolving manifest schema).
+ *
+ * The loader is a pure function over `(manifestPath, installedPackVersions)`.
+ * It does NOT read `package.json` itself — callers (typically a
+ * bootstrap helper) resolve installed pack versions once and pass them in.
+ * Keeps the loader testable in isolation; mirrors the substrate-wiring
+ * pattern from `bootstrapEngine` (1.25.0 wiring lesson).
+ *
+ * Three failure modes are surfaced via the `warnings` array, not by
+ * throwing:
+ *
+ * 1. Manifest file missing — empty result, no warnings (a fresh repo without
+ *    installed pack hooks is a valid state).
+ * 2. Manifest schemaVersion is not the runner's expected version — warn and
+ *    skip the entire manifest (no hooks loaded). Composes with ADR-104
+ *    § Decision 4's forward-compat ethos.
+ * 3. Pack version drift — for each pack whose installed version differs from
+ *    the compiled-against version, emit a `[totem:hook-stale]` warning per
+ *    the format in ADR-104 § Decision 3. Hooks still load (Tenet 4 carve-out:
+ *    hooks are best-effort; staleness is signal, not a fail-closed condition).
+ *
+ * Structural errors (corrupt JSON, schema-validation failure on a manifest
+ * claiming the supported schemaVersion) populate `errors` and yield an empty
+ * hooks array — distinct from a missing manifest.
+ */
+export interface LoadCompiledHooksOptions {
+    manifestPath: string;
+    installedPackVersions: Record<string, string>;
+}
+export interface LoadCompiledHooksResult {
+    hooks: CompiledHookRule[];
+    warnings: string[];
+    /**
+     * Errors carry the original cause via `Error.cause` so debug consumers
+     * can traverse the chain (per the codebase styleguide rule against
+     * concatenating `err.message` into new strings — destroys the stack).
+     * Callers that just need to log can use `err.message`; debug tooling
+     * walks `err.cause` recursively.
+     */
+    errors: TotemError[];
+}
+export declare function loadCompiledHooks(options: LoadCompiledHooksOptions): LoadCompiledHooksResult;
+//# sourceMappingURL=loader.d.ts.map

package/dist/hook/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/hook/loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAEL,KAAK,gBAAgB,EAEtB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;;OAMG;IACH,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB,CA+F5F"}

package/dist/hook/loader.js

@@ -0,0 +1,66 @@
+import fs from 'node:fs';
+import { TotemError } from '@mmnto/totem';
+import { COMPILED_HOOKS_SCHEMA_VERSION, CompiledHooksManifestSchema, } from './schema.js';
+export function loadCompiledHooks(options) {
+    const warnings = [];
+    const errors = [];
+    // No `fs.existsSync` pre-check: that returns false for any filesystem
+    // error (permission denied, symlink loops, EBUSY, etc.), not just ENOENT.
+    // Treating those as "missing manifest" would silently swallow real
+    // diagnostics. Catch ENOENT explicitly inside the read; everything else
+    // surfaces as a HOOKS_LOAD_FAILED entry.
+    let raw;
+    try {
+        raw = fs.readFileSync(options.manifestPath, 'utf8');
+        // totem-context: intentional — error captured into diagnostics array (the loader's contract is diagnostics-not-throws per Tenet 4 carve-out for hooks being best-effort)
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            // Fresh repo without installed pack hooks is a valid state, not a fault.
+            return { hooks: [], warnings, errors };
+        }
+        errors.push(new TotemError('HOOKS_LOAD_FAILED', `failed to read compiled-hooks manifest at ${options.manifestPath}`, 'verify the file is readable and re-run `totem sync` to regenerate', err));
+        return { hooks: [], warnings, errors };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+        // totem-context: intentional — error captured into diagnostics array (the loader's contract is diagnostics-not-throws per Tenet 4 carve-out for hooks being best-effort)
+    }
+    catch (err) {
+        errors.push(new TotemError('HOOKS_LOAD_FAILED', `compiled-hooks manifest at ${options.manifestPath} is not valid JSON`, 're-run `totem sync` to regenerate the manifest', err));
+        return { hooks: [], warnings, errors };
+    }
+    // Forward-compat: peek at schemaVersion BEFORE invoking the strict z.literal
+    // schema validator, so an unknown version surfaces as a warn-and-skip
+    // rather than a thrown ZodError. Mirrors the per-pack warn-and-skip pattern
+    // for `hooks.yaml :: version` from ADR-104 § Decision 4.
+    const peekedVersion = typeof parsed === 'object' && parsed !== null
+        ? parsed.schemaVersion
+        : undefined;
+    if (peekedVersion !== COMPILED_HOOKS_SCHEMA_VERSION) {
+        warnings.push(`[totem:hook-schema] compiled-hooks manifest schemaVersion ${JSON.stringify(peekedVersion)} unsupported by this runner (expected ${COMPILED_HOOKS_SCHEMA_VERSION})\n  → upgrade totem CLI or re-run \`totem sync\` to regenerate`);
+        return { hooks: [], warnings, errors };
+    }
+    const validation = CompiledHooksManifestSchema.safeParse(parsed);
+    if (!validation.success) {
+        const summary = validation.error.issues
+            .map((i) => `${i.path.join('.')}: ${i.message}`)
+            .join('; ');
+        errors.push(new TotemError('HOOKS_LOAD_FAILED', `compiled-hooks manifest at ${options.manifestPath} failed schema validation: ${summary}`, 're-run `totem sync` to regenerate the manifest, or upgrade totem CLI if the manifest was authored by a newer version', validation.error));
+        return { hooks: [], warnings, errors };
+    }
+    const manifest = validation.data;
+    for (const [packId, compiledVersion] of Object.entries(manifest.sourcePackVersions)) {
+        const installedVersion = options.installedPackVersions[packId];
+        if (installedVersion === undefined) {
+            warnings.push(`[totem:hook-stale] ${packId}: compiled against ${compiledVersion}, not currently installed\n  → run \`totem sync\` to refresh .totem/compiled-hooks.json`);
+            continue;
+        }
+        if (installedVersion !== compiledVersion) {
+            warnings.push(`[totem:hook-stale] ${packId}: compiled against ${compiledVersion}, installed ${installedVersion}\n  → run \`totem sync\` to refresh .totem/compiled-hooks.json`);
+        }
+    }
+    return { hooks: manifest.hooks, warnings, errors };
+}
+//# sourceMappingURL=loader.js.map

package/dist/hook/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/hook/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAE7B,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAgDrB,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,sEAAsE;IACtE,0EAA0E;IAC1E,mEAAmE;IACnE,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,yKAAyK;IAC3K,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,yEAAyE;YACzE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,IAAI,UAAU,CACZ,mBAAmB,EACnB,6CAA6C,OAAO,CAAC,YAAY,EAAE,EACnE,mEAAmE,EACnE,GAAG,CACJ,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,yKAAyK;IAC3K,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,IAAI,UAAU,CACZ,mBAAmB,EACnB,8BAA8B,OAAO,CAAC,YAAY,oBAAoB,EACtE,gDAAgD,EAChD,GAAG,CACJ,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IACtE,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GACjB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAAsC,CAAC,aAAa;QACvD,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,aAAa,KAAK,6BAA6B,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CACX,6DAA6D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,yCAAyC,6BAA6B,iEAAiE,CAClO,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,UAAU,GAAG,2BAA2B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CACT,IAAI,UAAU,CACZ,mBAAmB,EACnB,8BAA8B,OAAO,CAAC,YAAY,8BAA8B,OAAO,EAAE,EACzF,sHAAsH,EACtH,UAAU,CAAC,KAAK,CACjB,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;IAEjC,KAAK,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,sBAAsB,eAAe,yFAAyF,CAC3J,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,sBAAsB,eAAe,eAAe,gBAAgB,gEAAgE,CACjK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/hook/loader.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=loader.test.d.ts.map

package/dist/hook/loader.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.test.d.ts","sourceRoot":"","sources":["../../src/hook/loader.test.ts"],"names":[],"mappings":""}

package/dist/hook/loader.test.js

@@ -0,0 +1,205 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { loadCompiledHooks } from './loader.js';
+let workDir;
+beforeEach(() => {
+    workDir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-hook-loader-'));
+});
+afterEach(() => {
+    fs.rmSync(workDir, { recursive: true, force: true });
+});
+function writeManifest(content) {
+    const manifestPath = path.join(workDir, 'compiled-hooks.json');
+    fs.writeFileSync(manifestPath, JSON.stringify(content), 'utf8');
+    return manifestPath;
+}
+const validRule = {
+    id: 'r1',
+    packId: '@mmnto/pack-bot-coderabbit',
+    trigger: { tool: 'bash', pattern: '.*' },
+    check: { pattern: 'x', type: 'reject-if-match' },
+    message: 'm',
+};
+describe('loadCompiledHooks', () => {
+    it('returns an empty result when the manifest file does not exist (fresh repo, ENOENT)', () => {
+        const result = loadCompiledHooks({
+            manifestPath: path.join(workDir, 'missing.json'),
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.warnings).toEqual([]);
+        expect(result.errors).toEqual([]);
+    });
+    it('surfaces non-ENOENT read errors as HOOKS_LOAD_FAILED (does not pretend the file is missing)', () => {
+        // Reading a directory as a file produces EISDIR on POSIX / EBADF or
+        // ENOTSUP-flavoured failures on Windows. Whatever the platform-specific
+        // errno, it is NOT ENOENT — so the loader must surface it, not silently
+        // return the "manifest absent" result that the prior existsSync pre-check
+        // would have masked.
+        const dirAsManifest = path.join(workDir, 'a-directory');
+        fs.mkdirSync(dirAsManifest);
+        const result = loadCompiledHooks({
+            manifestPath: dirAsManifest,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors.length).toBe(1);
+        const err = result.errors[0];
+        expect(err.code).toBe('HOOKS_LOAD_FAILED');
+        expect(err.message).toContain('failed to read compiled-hooks manifest');
+        expect(err.cause).toBeDefined();
+    });
+    it('records a structural error on invalid JSON and preserves the original SyntaxError via cause', () => {
+        const manifestPath = path.join(workDir, 'compiled-hooks.json');
+        fs.writeFileSync(manifestPath, '{ not valid json', 'utf8');
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors.length).toBe(1);
+        const err = result.errors[0];
+        expect(err.message).toContain('not valid JSON');
+        expect(err.code).toBe('HOOKS_LOAD_FAILED');
+        // Original parse error preserved on `.cause` so debug consumers can
+        // walk the chain without the stack being collapsed into a string.
+        expect(err.cause).toBeInstanceOf(SyntaxError);
+    });
+    it('warns and skips when schemaVersion is higher than the runner supports', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 2,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: {},
+            hooks: [],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors).toEqual([]);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('[totem:hook-schema]');
+        expect(result.warnings[0]).toContain('schemaVersion 2');
+    });
+    it('warns and skips when schemaVersion is missing', () => {
+        const manifestPath = writeManifest({
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: {},
+            hooks: [],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('[totem:hook-schema]');
+    });
+    it('records a structural error when the supported-version manifest fails schema validation', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: 'not-a-real-date',
+            sourcePackVersions: {},
+            hooks: [],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toEqual([]);
+        expect(result.errors.length).toBe(1);
+        const err = result.errors[0];
+        expect(err.message).toContain('schema validation');
+        expect(err.code).toBe('HOOKS_LOAD_FAILED');
+        // Zod's ZodError preserved as the cause for debug-mode chain traversal.
+        expect(err.cause).toBeDefined();
+    });
+    it('returns hooks with no warnings when installed pack versions match compiled versions', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+        });
+        expect(result.hooks).toHaveLength(1);
+        expect(result.warnings).toEqual([]);
+        expect(result.errors).toEqual([]);
+    });
+    it('emits a staleness warning when the installed pack version differs from compiled', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: { '@mmnto/pack-bot-coderabbit': '1.1.0' },
+        });
+        expect(result.hooks).toHaveLength(1);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('[totem:hook-stale]');
+        expect(result.warnings[0]).toContain('@mmnto/pack-bot-coderabbit');
+        expect(result.warnings[0]).toContain('compiled against 1.0.0, installed 1.1.0');
+    });
+    it('emits a staleness warning when a compiled-against pack is not installed at all', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {},
+        });
+        expect(result.hooks).toHaveLength(1);
+        expect(result.warnings.length).toBe(1);
+        expect(result.warnings[0]).toContain('not currently installed');
+    });
+    it('ignores extra installed packs not in sourcePackVersions (no warning)', () => {
+        // A pack installed after the last `totem sync` is benign — its hooks
+        // are not yet active, but that is not staleness in the compiled set.
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: { '@mmnto/pack-bot-coderabbit': '1.0.0' },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {
+                '@mmnto/pack-bot-coderabbit': '1.0.0',
+                '@mmnto/pack-bot-gemini-code-assist': '1.0.0',
+            },
+        });
+        expect(result.warnings).toEqual([]);
+    });
+    it('emits one staleness warning per drifting pack', () => {
+        const manifestPath = writeManifest({
+            schemaVersion: 1,
+            compiledAt: '2026-05-11T18:43:00Z',
+            sourcePackVersions: {
+                '@mmnto/pack-bot-coderabbit': '1.0.0',
+                '@mmnto/pack-bot-gemini-code-assist': '2.0.0',
+            },
+            hooks: [validRule],
+        });
+        const result = loadCompiledHooks({
+            manifestPath,
+            installedPackVersions: {
+                '@mmnto/pack-bot-coderabbit': '1.1.0',
+                '@mmnto/pack-bot-gemini-code-assist': '2.0.1',
+            },
+        });
+        expect(result.warnings.length).toBe(2);
+    });
+});
+//# sourceMappingURL=loader.test.js.map

package/dist/hook/loader.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.test.js","sourceRoot":"","sources":["../../src/hook/loader.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,IAAI,OAAe,CAAC;AAEpB,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,4BAA4B;IACpC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;IACxC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAChD,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;YAChD,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,qBAAqB;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACxD,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY,EAAE,aAAa;YAC3B,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,iBAAiB;YAC7B,kBAAkB,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,wEAAwE;QACxE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE,EAAE,4BAA4B,EAAE,OAAO,EAAE;YAC7D,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE;gBACrB,4BAA4B,EAAE,OAAO;gBACrC,oCAAoC,EAAE,OAAO;aAC9C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,sBAAsB;YAClC,kBAAkB,EAAE;gBAClB,4BAA4B,EAAE,OAAO;gBACrC,oCAAoC,EAAE,OAAO;aAC9C;YACD,KAAK,EAAE,CAAC,SAAS,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,YAAY;YACZ,qBAAqB,EAAE;gBACrB,4BAA4B,EAAE,OAAO;gBACrC,oCAAoC,EAAE,OAAO;aAC9C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hook/runtime.d.ts

@@ -0,0 +1,47 @@
+import type { CompiledHookRule } from './schema.js';
+/**
+ * Hook runtime evaluator (ADR-104 § Decisions 1, 2 + § Convergence).
+ *
+ * Takes a single hook rule plus a tool-call payload (tool name + tool args
+ * as a single string) and returns a structured allow/reject decision. The
+ * runtime is deterministic Node.js — no LLM calls in this path (Tenet 15
+ * corollary, ADR-103 § 8).
+ *
+ * V1 matcher class is regex-only per execution plan § 4. ast-grep and
+ * other matcher classes are deferred to V2; the schema permits future
+ * `verification_shadow` blocks but the V1 runtime ignores them.
+ */
+export interface ToolCallPayload {
+    /** The tool the agent is attempting to invoke (e.g. "bash"). */
+    tool: string;
+    /** Serialized tool arguments. For bash this is the command string;
+     *  for structured tools, callers serialize to a stable string form. */
+    args: string;
+}
+export type AllowDecision = {
+    decision: 'allow';
+};
+export type RejectDecision = {
+    decision: 'reject';
+    message: string;
+    packId: string;
+    ruleId: string;
+    recoveryHint?: string;
+};
+export type HookDecision = AllowDecision | RejectDecision;
+/**
+ * Build the structured rejection message per ADR-104 § Decision 1:
+ *
+ *     [totem:hook-block] <packId>/<ruleId>: <message>
+ *       → <recoveryHint>
+ *
+ * The `→ <recoveryHint>` line is omitted when no recoveryHint is provided.
+ * Agents and operators grep for the `[totem:hook-block]` prefix; the
+ * `<packId>/<ruleId>` carries provenance.
+ *
+ * Parameter is narrowed to `RejectDecision` so the type system prevents
+ * passing an allow decision — no runtime guard needed.
+ */
+export declare function formatRejection(decision: RejectDecision): string;
+export declare function evaluateHook(rule: CompiledHookRule, payload: ToolCallPayload): HookDecision;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/hook/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/hook/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb;2EACuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC;AAElD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,cAAc,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAMhE;AA4CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,GAAG,YAAY,CA4B3F"}

package/dist/hook/runtime.js

@@ -0,0 +1,85 @@
+/**
+ * Build the structured rejection message per ADR-104 § Decision 1:
+ *
+ *     [totem:hook-block] <packId>/<ruleId>: <message>
+ *       → <recoveryHint>
+ *
+ * The `→ <recoveryHint>` line is omitted when no recoveryHint is provided.
+ * Agents and operators grep for the `[totem:hook-block]` prefix; the
+ * `<packId>/<ruleId>` carries provenance.
+ *
+ * Parameter is narrowed to `RejectDecision` so the type system prevents
+ * passing an allow decision — no runtime guard needed.
+ */
+export function formatRejection(decision) {
+    const header = `[totem:hook-block] ${decision.packId}/${decision.ruleId}: ${decision.message}`;
+    if (decision.recoveryHint) {
+        return `${header}\n  → ${decision.recoveryHint}`;
+    }
+    return header;
+}
+/**
+ * Evaluate a single compiled hook rule against a tool-call payload.
+ *
+ * Two-stage gate:
+ * 1. Trigger gate: does this rule apply to this tool + args?
+ *    Rule applies when `rule.trigger.tool` equals `payload.tool` AND
+ *    `rule.trigger.pattern` matches `payload.args`.
+ * 2. Check gate: when the trigger matches, apply `rule.check.pattern` to
+ *    args. `reject-if-match` rejects on match; `reject-if-no-match`
+ *    rejects on non-match.
+ *
+ * Returns `{ decision: 'allow' }` when either gate passes the call through.
+ *
+ * V1 invariant: regex matching only. Future matcher classes (ast-grep,
+ * Rego-shadow) ship in V2 follow-on ADRs.
+ *
+ * Per ADR-104 § Convergence, any `verification_shadow` block on the rule
+ * is silently ignored at the runtime layer (V1 hooks are Interpretive
+ * Rule class — no formal-verification obligation). Warn-and-ignore of
+ * verification_shadow happens at the load layer when compiling pack
+ * hooks.yaml, not on every hook-run invocation.
+ */
+/**
+ * Memoizes compiled RegExp instances keyed by pattern string. Pack rule
+ * patterns are stable for the lifetime of a CLI process (the manifest is
+ * loaded once at startup), so a string-keyed cache is sufficient — there
+ * is no unbounded-growth concern in the single-shot CLI use case.
+ *
+ * Safe to memoize because the patterns are compiled with no flags, so the
+ * returned RegExp has no stateful `lastIndex` carry-over between `.test()`
+ * calls.
+ */
+const regexCache = new Map();
+function getCompiledRegex(pattern) {
+    const cached = regexCache.get(pattern);
+    if (cached)
+        return cached;
+    const compiled = new RegExp(pattern);
+    regexCache.set(pattern, compiled);
+    return compiled;
+}
+export function evaluateHook(rule, payload) {
+    if (rule.trigger.tool !== payload.tool) {
+        return { decision: 'allow' };
+    }
+    const triggerRegex = getCompiledRegex(rule.trigger.pattern);
+    if (!triggerRegex.test(payload.args)) {
+        return { decision: 'allow' };
+    }
+    const checkRegex = getCompiledRegex(rule.check.pattern);
+    const matched = checkRegex.test(payload.args);
+    const shouldReject = (rule.check.type === 'reject-if-match' && matched) ||
+        (rule.check.type === 'reject-if-no-match' && !matched);
+    if (!shouldReject) {
+        return { decision: 'allow' };
+    }
+    return {
+        decision: 'reject',
+        message: rule.message,
+        packId: rule.packId,
+        ruleId: rule.id,
+        recoveryHint: rule.recoveryHint,
+    };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/hook/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/hook/runtime.ts"],"names":[],"mappings":"AAmCA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,QAAwB;IACtD,MAAM,MAAM,GAAG,sBAAsB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC/F,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,OAAO,GAAG,MAAM,SAAS,QAAQ,CAAC,YAAY,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH;;;;;;;;;GASG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB,EAAE,OAAwB;IAC3E,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C,MAAM,YAAY,GAChB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC;QAClD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC;AACJ,CAAC"}

package/dist/hook/runtime.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtime.test.d.ts.map

package/dist/hook/runtime.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.test.d.ts","sourceRoot":"","sources":["../../src/hook/runtime.test.ts"],"names":[],"mappings":""}