@nanonets/graft 0.24.0 → 0.25.0

package/dist/claude/pre-bash.js

@@ -0,0 +1,245 @@
+const DECISIONS = new Set(['allow', 'ask', 'deny']);
+/**
+ * The decision for one Bash call, or null to let it run untouched. Phase 0:
+ * always null. Never throws.
+ */
+export function preBash(_input, _dir) {
+    return null;
+}
+/** trace/host.ts's Cursor and Antigravity keys, which it checks before Codex's (a test holds the two checks together). */
+const NOT_CODEX_KEYS = ['conversation_id', 'generation_id', 'cursor_version', 'workspace_roots', 'conversationId', 'artifactDirectoryPath', 'workspacePaths'];
+/**
+ * detectHost(input).host === 'codex', without loading trace/host.ts (the fast path loads nothing it needn't). Read
+ * only for a decision about to be sent.
+ */
+export function codexPayload(input) {
+    try {
+        if (!input || typeof input !== 'object' || Array.isArray(input))
+            return false;
+        const p = input;
+        const has = (k) => Object.prototype.hasOwnProperty.call(p, k) && p[k] !== undefined && p[k] !== null;
+        const raw = has('transcript_path') ? p.transcript_path : p.transcriptPath;
+        const path = typeof raw === 'string' ? raw.replace(/\\/g, '/') : '';
+        const file = path.slice(path.lastIndexOf('/') + 1);
+        if (NOT_CODEX_KEYS.some(has) || path.includes('/.cursor/') || path.includes('/agent-transcripts/') || path.includes('/.gemini/antigravity'))
+            return false;
+        return has('turn_id') || /^rollout-.*\.jsonl(\.zst)?$/.test(file) || path.includes('/.codex/sessions/');
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The hook's stdout for `input`: the decision in Claude Code's PreToolUse
+ * shape, or '' when there is none, `decide` throws, or what it returns isn't
+ * a decision the host understands.
+ *
+ * Codex (P37, P38): its hooks can't ask (an `ask` fails the hook run and the
+ * command runs, D17), so an ask goes out as a deny with the same reason; and
+ * an `allow` without `updatedInput` drops the hook's whole output there, so
+ * Trail never sends one. The deny is the whole output.
+ */
+export function preBashOutput(input, dir, decide = preBash) {
+    try {
+        const d = decide(input, dir);
+        if (!d || typeof d !== 'object' || !DECISIONS.has(d.permissionDecision) || typeof d.reason !== 'string' || !d.reason)
+            return '';
+        let decision = d.permissionDecision;
+        if (decision !== 'deny' && codexPayload(input)) {
+            if (decision === 'allow')
+                return '';
+            decision = 'deny';
+        }
+        return JSON.stringify({ hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: decision, permissionDecisionReason: d.reason } });
+    }
+    catch {
+        return '';
+    }
+}
+/** Shell tools by host: Claude Code's Bash (and PowerShell), Cursor's Shell, Copilot CLI's bash. */
+const SHELL_TOOLS = new Set(['bash', 'shell', 'powershell']);
+/**
+ * The command of a shell call, in Claude Code's and Cursor's shape
+ * (`tool_name`, `tool_input.command`) or Copilot CLI's (`toolName`,
+ * `toolArgs` as JSON text or an object), or null when the payload isn't a
+ * shell call. Copilot may run this hook for every tool whatever the matcher
+ * says, so the hook checks for itself.
+ */
+export function shellCommand(input) {
+    try {
+        if (!input || typeof input !== 'object' || Array.isArray(input))
+            return null;
+        const p = input;
+        const name = typeof p.tool_name === 'string' ? p.tool_name : typeof p.toolName === 'string' ? p.toolName : '';
+        if (!SHELL_TOOLS.has(name.toLowerCase()))
+            return null;
+        let args = p.tool_input ?? p.toolArgs;
+        if (typeof args === 'string')
+            args = JSON.parse(args);
+        const command = args && typeof args === 'object' ? args.command : undefined;
+        return typeof command === 'string' && command ? command : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** node:fs without an ESM import of it: Node 20.16 and later hand it over for free. */
+async function nodeFs() {
+    return typeof process.getBuiltinModule === 'function' ? process.getBuiltinModule('node:fs') : await import('node:fs');
+}
+/** The longest the payload may take to arrive. Hosts write it at once and close stdin; this bounds one that doesn't, well inside the 5 s the hook is given. */
+export const STDIN_WAIT_MS = 2000;
+/** A payload over this is read to its end and dropped: no shell command worth checking is this long. */
+export const STDIN_MAX_BYTES = 2 * 1024 * 1024;
+/**
+ * stdin to its end, or null for a terminal (a person, not a host), an
+ * oversized payload or a read error. A read that is still waiting after
+ * STDIN_WAIT_MS sits in a thread Node joins before exiting, so no timer or
+ * exit() gets past it: the process ends outright instead, and the command's
+ * `|| exit 0` (settings-merge.ts failOpen) makes that a clean exit.
+ */
+function readStdin(fs) {
+    try {
+        if (fs.fstatSync(0).isCharacterDevice())
+            return Promise.resolve(null);
+    }
+    catch {
+        return Promise.resolve(null);
+    }
+    return new Promise((done) => {
+        const chunks = [];
+        const buf = Buffer.alloc(64 * 1024);
+        let size = 0;
+        const timer = setTimeout(() => process.kill(process.pid, 'SIGKILL'), STDIN_WAIT_MS);
+        const finish = (text) => {
+            clearTimeout(timer);
+            done(text);
+        };
+        const next = () => {
+            fs.read(0, buf, 0, buf.length, null, (err, n) => {
+                const code = err?.code;
+                if (code === 'EAGAIN')
+                    return void setTimeout(next, 5);
+                if (err && code !== 'EOF')
+                    return finish(null);
+                if (err || !n)
+                    return finish(size > STDIN_MAX_BYTES ? null : Buffer.concat(chunks).toString('utf8'));
+                size += n;
+                if (size <= STDIN_MAX_BYTES)
+                    chunks.push(Buffer.from(buf.subarray(0, n)));
+                else
+                    chunks.length = 0;
+                next();
+            });
+        };
+        next();
+    });
+}
+/** The hook payload on stdin as an object, or null for anything else. */
+async function readInput() {
+    try {
+        const seam = process.env.GRAFT_TEST_STDIN;
+        const text = seam !== undefined ? seam : await readStdin(await nodeFs());
+        if (text === null)
+            return null;
+        const input = JSON.parse(text);
+        return input && typeof input === 'object' && !Array.isArray(input) ? input : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * `trail keep` waits for the person's answer (init/keep-gate.ts). Its check
+ * is loaded only for a command that says `keep`, so no other shell command
+ * pays for it, and only in the copy that answers: it writes the receipt.
+ */
+async function keepReply(input, dir, standsDown) {
+    const command = shellCommand(input);
+    if (command === null || !/\bkeep\b/.test(command))
+        return '';
+    // 1b (R11): the check writes the keep receipt, so the copy that stands down does so before it runs (1a rule 15).
+    if (await standsDown())
+        return '';
+    const [{ keepDecision }, { isTestHome }] = await Promise.all([import('../init/keep-gate.js'), import('../skills/host-facts.js')]);
+    // b7: the receipt's time is Trail's clock (TRAIL_TEST_NOW in a test home only, 0 rule 10), the one `trail keep` reads it with.
+    const fixed = process.env.TRAIL_TEST_NOW ? new Date(process.env.TRAIL_TEST_NOW) : null;
+    const now = fixed && !Number.isNaN(fixed.getTime()) && isTestHome(process.env) ? fixed : new Date();
+    return preBashOutput(input, dir, (i, d) => keepDecision(i, d, process.env, now));
+}
+/**
+ * What the agent guard reads as a Trail hook script (risk.ts HOOK_SCRIPT), widened: a shim by name or glob, a
+ * path under `.claude/helpers/`, a `claude/<module>.js` of the package. Every command the guard denies passes this
+ * (a test holds them together). Bounded quantifiers only: the command can be 2 MB.
+ */
+const HOOK_SCRIPT = /(?:trail|graft)-hooks?|hooks?[*?[\]]{0,8}\.cjs|\.claude\/helpers\/|claude\/[\w-]{1,64}\.js/i;
+/**
+ * 1b (3.3): `timeout` with a duration, for the sure-fail guardrail. Design 3.3's `\btimeout\s+(-\S+\s+)*\d`, widened
+ * so a signal name after `-s` (`timeout -s KILL 5m x`) reaches the guard too. Bounded: the command can be 2 MB.
+ */
+const TIMEOUT_RUN = /\btimeout\s+(?:-\S{1,40}\s+(?:[A-Za-z]{2,10}\s+)?){0,8}\d/;
+/** gate-file.ts gateFilePath without loading it: the same file name for the same id (a test holds them equal). */
+export function gateFilePathFast(input, env) {
+    const raw = [input.session_id, input.sessionId, input.conversation_id].find((v) => typeof v === 'string' && v !== '');
+    if (raw === undefined)
+        return null;
+    const path = process.getBuiltinModule('node:path');
+    const os = process.getBuiltinModule('node:os');
+    const crypto = process.getBuiltinModule('node:crypto');
+    const id = /^[A-Za-z0-9_-][A-Za-z0-9._-]{0,127}$/.test(raw) ? raw : `h-${crypto.createHash('sha256').update(raw).digest('hex').slice(0, 16)}`;
+    const home = env.TRAIL_HOME ? path.resolve(env.TRAIL_HOME) : path.join(os.homedir(), '.trail');
+    return path.join(home, 'sessions', `${id}.gate.json`);
+}
+/**
+ * Design 1.7: whether the skills part has anything to look at, decided without loading it. The command
+ * (read as the agent guard reads it: quotes and backslashes don't change the words) says `skills` or names a
+ * Trail hook script, or this session has a gate file (a run block with a step that can't be undone is live).
+ * Every other shell command pays one regex and one stat.
+ */
+export function skillsPrefilter(input, command, env = process.env) {
+    try {
+        const words = command.replace(/\\\n/g, '').replace(/["'\\]/g, '');
+        if (/\bskills\b/i.test(words) || HOOK_SCRIPT.test(words) || TIMEOUT_RUN.test(words))
+            return true;
+        const gate = typeof process.getBuiltinModule === 'function' ? gateFilePathFast(input, env) : null;
+        return gate !== null && process.getBuiltinModule('node:fs').existsSync(gate);
+    }
+    catch {
+        return false;
+    }
+}
+/** The shim's entry: `node trail-hooks.cjs pre-bash`. Never rejects. `decide` is preBash; tests pass their own. */
+export async function main(event = 'pre-bash', decide = preBash) {
+    try {
+        // trail's own headless Claude calls run with this set, like every hook.
+        if (process.env.TRAIL_NO_HOOKS === '1')
+            return;
+        const input = await readInput();
+        const command = input ? shellCommand(input) : null;
+        if (!input || command === null)
+            return;
+        const cwd = typeof input.cwd === 'string' ? input.cwd : '';
+        const dir = process.env.CLAUDE_PROJECT_DIR || cwd || process.cwd();
+        // Registered in the repo and in ~/.claude, Claude Code runs both: one
+        // answers. Copilot CLI runs only the repo's, so the payload decides first.
+        const standsDown = async () => (await import('./hook-layers.js')).globalCopyCovers(event, process.argv[1], undefined, undefined, input);
+        if (skillsPrefilter(input, command)) {
+            // The skills part writes (receipts, asked marks): only the copy that answers runs it.
+            if (await standsDown())
+                return;
+            const { preBashSkills } = await import('./pre-bash-skills.js');
+            const decision = await preBashSkills(input, dir, process.env, command);
+            const reply = preBashOutput(input, dir, () => decision);
+            if (reply)
+                return void process.stdout.write(reply);
+        }
+        const reply = preBashOutput(input, dir, decide) || (await keepReply(input, cwd, standsDown));
+        if (!reply || (await standsDown()))
+            return;
+        process.stdout.write(reply);
+    }
+    catch {
+        // Never stand in the way of a command over our own failure.
+    }
+}
+//# sourceMappingURL=pre-bash.js.map

package/dist/claude/pre-bash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-bash.js","sourceRoot":"","sources":["../../src/claude/pre-bash.ts"],"names":[],"mappings":"AAkCA,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,MAAe,EAAE,IAAY;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0HAA0H;AAC1H,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;AAE9J;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9E,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC7G,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;QAC1E,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1J,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAW,EAAE,SAAkE,OAAO;IAClI,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAChI,IAAI,QAAQ,GAAG,CAAC,CAAC,kBAAkB,CAAC;QACpC,IAAI,QAAQ,KAAK,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,IAAI,QAAQ,KAAK,OAAO;gBAAE,OAAO,EAAE,CAAC;YACpC,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,IAAI,GAAY,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA8B,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,MAAM;IACnB,OAAO,OAAO,OAAO,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;AACxH,CAAC;AAED,+JAA+J;AAC/J,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAClC,wGAAwG;AACxG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,EAAa;IAC9B,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;YACrC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC9C,MAAM,IAAI,GAAI,GAAoC,EAAE,IAAI,CAAC;gBACzD,IAAI,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvD,IAAI,GAAG,IAAI,IAAI,KAAK,KAAK;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,GAAG,IAAI,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrG,IAAI,IAAI,CAAC,CAAC;gBACV,IAAI,IAAI,IAAI,eAAe;oBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;;oBACrE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gBACvB,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,KAA8B,EAAE,GAAW,EAAE,UAAkC;IACtG,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,iHAAiH;IACjH,IAAI,MAAM,UAAU,EAAE;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAClI,+HAA+H;IAC/H,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACpG,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,WAAW,GAAG,6FAA6F,CAAC;AAElH;;;GAGG;AACH,MAAM,WAAW,GAAG,2DAA2D,CAAC;AAEhF,kHAAkH;AAClH,MAAM,UAAU,gBAAgB,CAAC,KAA8B,EAAE,GAAsB;IACrF,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAgB,CAAC;IAClE,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAc,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAkB,CAAC;IACxE,MAAM,EAAE,GAAG,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9I,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAA8B,EAAE,OAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACnH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjG,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,OAAO,IAAI,KAAK,IAAI,IAAK,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,GAAG,UAAU,EAAE,SAAkE,OAAO;IACtH,IAAI,CAAC;QACH,wEAAwE;QACxE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG;YAAE,OAAO;QAC/C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QACvC,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACnE,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxI,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,sFAAsF;YACtF,IAAI,MAAM,UAAU,EAAE;gBAAE,OAAO;YAC/B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,KAAK;gBAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,UAAU,EAAE,CAAC;YAAE,OAAO;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC"}

package/dist/claude/prompt-consent.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The prompt hook's one door to consent (g5; design 1.5, 3.2 steps 4 and
+ * 6.4): what an answer to a pending offer leaves in the session, and what a
+ * save request leaves. g5 owns both: `captureAnswer` is the only place a
+ * `yes` is recorded and `noteSaveRequest` the only place a save request is.
+ * The prompt hook only calls them, inside its locked session, with the fold
+ * from the same catch-up (Claude Code may write the typed line before the
+ * hook runs, and then only that catch-up has its offset).
+ *
+ * An object, so the prompt tests can drive each answer class directly.
+ */
+import { captureAnswer, noteSaveRequest, type Captured } from '../skills/offer-moment.js';
+export type { Captured };
+export interface Consent {
+    captureAnswer: typeof captureAnswer;
+    noteSaveRequest: typeof noteSaveRequest;
+}
+export declare const consent: Consent;
+//# sourceMappingURL=prompt-consent.d.ts.map

package/dist/claude/prompt-consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-consent.d.ts","sourceRoot":"","sources":["../../src/claude/prompt-consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE1F,YAAY,EAAE,QAAQ,EAAE,CAAC;AAEzB,MAAM,WAAW,OAAO;IACtB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,eAAe,EAAE,OAAO,eAAe,CAAC;CACzC;AAED,eAAO,MAAM,OAAO,EAAE,OAA4C,CAAC"}

package/dist/claude/prompt-consent.js

@@ -0,0 +1,14 @@
+/**
+ * The prompt hook's one door to consent (g5; design 1.5, 3.2 steps 4 and
+ * 6.4): what an answer to a pending offer leaves in the session, and what a
+ * save request leaves. g5 owns both: `captureAnswer` is the only place a
+ * `yes` is recorded and `noteSaveRequest` the only place a save request is.
+ * The prompt hook only calls them, inside its locked session, with the fold
+ * from the same catch-up (Claude Code may write the typed line before the
+ * hook runs, and then only that catch-up has its offset).
+ *
+ * An object, so the prompt tests can drive each answer class directly.
+ */
+import { captureAnswer, noteSaveRequest } from '../skills/offer-moment.js';
+export const consent = { captureAnswer, noteSaveRequest };
+//# sourceMappingURL=prompt-consent.js.map

package/dist/claude/prompt-consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-consent.js","sourceRoot":"","sources":["../../src/claude/prompt-consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAiB,MAAM,2BAA2B,CAAC;AAS1F,MAAM,CAAC,MAAM,OAAO,GAAY,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC"}

package/dist/claude/prompt-hook.d.ts

@@ -0,0 +1,76 @@
+import { type NoteHit } from '../notes/notes.js';
+import { type AskJson } from './format.js';
+/** Prompts shorter than this never trigger the graph ask — they are almost always
+ * conversational ("yes go ahead", "thanks") and the coverage gate can't judge
+ * them reliably with so few terms. */
+export declare const MIN_PROMPT_CHARS = 12;
+/** Prompts shorter than this match nothing at all, learnings included: no
+ * word in them is long enough to look up. "ff to prod" (10) and "ship it" (7)
+ * clear it. */
+export declare const MIN_CUE_CHARS = 3;
+/**
+ * The most the prompt hook takes in all, graph ask included: the person's
+ * prompt waits on it before the agent starts. The learnings are matched first
+ * and never wait on the ask; the ask gets only what is left. A large repo's
+ * ask took 13 s at p95 before this (the lab, on main).
+ */
+export declare const PROMPT_BUDGET_MS = 4000;
+/**
+ * How long the prompt hook may let `graft ask` run, from the timeout that is
+ * *actually installed* (repo and user settings), not from what the current
+ * `settings-merge.ts` would install: an upgrade doesn't rewrite settings until
+ * the next init or upkeep, and a child that outlives the installed timeout
+ * gets the whole hook killed (no learnings, no session write).
+ *
+ * Claude Code reads `timeout` in seconds, which Trail writes from 0.23 on. A
+ * number of 1000 or more is an install from before, meant as milliseconds,
+ * and read that way. 0 means no room for an ask at all. The hook's own total
+ * budget (PROMPT_BUDGET_MS) cuts this further.
+ */
+export declare function promptAskTimeout(dir: string): number;
+/**
+ * The "you're working in backend/, weight it" hint: on a multi-scope repo,
+ * narrow the prompt hook's `ask` call to whatever scope the last-edited file
+ * (`stats.lastFile`, captured at {@link handlePostEdit}) sits in.
+ *
+ * `lastFile` is only a basename (not a repo-relative path — see
+ * `handlePostEdit`), so this is a best-effort lookup against the CURRENT
+ * graph: any file node whose path ends in `/<lastFile>` (or equals it, for a
+ * repo-root file). Fails soft in every direction a hook must never crash on —
+ * no graph, a single-scope graph, a lastFile no longer in the graph (moved,
+ * deleted, or edited before the first build), or a basename that lands in
+ * more than one scope (ambiguous: could be either sub-project) all skip the
+ * hint silently, logging one line to stderr so the miss is visible without
+ * ever failing the hook.
+ */
+export declare function lastFileScopeHint(dir: string, lastFile: string | null | undefined): string | null;
+/**
+ * The learnings that bear on `prompt`, best first: the ones whose title or
+ * text share its words, matched here with no graph ask needed, joined by the
+ * ones the ask matched on the files its hits point into when it answered. One
+ * learning is one entry, at its better score. Empty for a repo that keeps no
+ * learnings on this machine, and on any read failure: a missing learning costs
+ * one prompt, a broken hook costs the turn.
+ */
+export declare function promptLearnings(dir: string, prompt: string, ask: AskJson | null, byWords?: NoteHit[]): NoteHit[];
+/**
+ * The person's own words in the prompt slot, the shared filter's way: IDE
+ * context and reminders stripped, a pasted block left out, and '' when what
+ * arrived is harness text (a task notice, a command wrapper, a hand-back).
+ */
+export declare function promptWords(raw: unknown): string;
+/**
+ * UserPromptSubmit. Ends inside `budgetMs` (PROMPT_BUDGET_MS by default): the
+ * learned-skills part first (its own 400 ms deadline), then the learnings
+ * matched by their words, then the graph ask in what is left; whatever was
+ * found goes out in one object even when the ask is cut. A skills block (a
+ * bare "no" where the host shows it) is the whole answer, with no ask.
+ *
+ * The skills part comes before the 3-character floor: an answer to an offer
+ * can be shorter than that ("no", "y", "ok"), and it only matches what the
+ * person typed.
+ */
+export declare function handlePrompt(input: any, dir: string, opts?: {
+    budgetMs?: number;
+}): Promise<void>;
+//# sourceMappingURL=prompt-hook.d.ts.map

package/dist/claude/prompt-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-hook.d.ts","sourceRoot":"","sources":["../../src/claude/prompt-hook.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAwB,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAA4D,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAQrG;;sCAEsC;AACtC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;eAEe;AACf,eAAO,MAAM,aAAa,IAAI,CAAC;AAE/B;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAcrC;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMpD;AAiED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAyBjG;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,GAAE,OAAO,EAAkC,GAAG,OAAO,EAAE,CAW/I;AAqCD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEhD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC3G"}