@nodii/dev 0.6.26 → 0.6.27

package/dist/cli.js

@@ -766,10 +766,6 @@ export async function main(argv = process.argv.slice(2)) {
       return;
     }
     if (["claude-figma-pre", "figma-pre"].includes(action)) {
-      // Fail closed: Claude Code only blocks a tool call on exit code 2, and
-      // treats any other non-zero exit as a non-blocking error that lets the
-      // write through. Every failure here (bad stdin, missing config, Dev
-      // error, lock denied) must therefore exit 2.
       let payload;
       try {
         payload = JSON.parse(await stdinText());
@@ -778,6 +774,9 @@ export async function main(argv = process.argv.slice(2)) {
         if (hookRuntime(payload) !== "codex") return emit(result, json, "allowed");
         return;
       } catch (error) {
+        // A known policy denial still blocks. Hook/runtime failures fail open
+        // and stay silent so a broken environment cannot stop the session.
+        if (!["FIGMA_FILE_KEY_MISSING", "FIGMA_LOCK_DENIED"].includes(error?.code)) return;
         if (payload && hookRuntime(payload) === "codex") {
           console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: `Blocked Figma write: ${error?.message ?? String(error)}` } }));
           return;
@@ -791,7 +790,6 @@ export async function main(argv = process.argv.slice(2)) {
       }
     }
     if (action === "safety-pre") {
-      // A malformed or unavailable safety check must not turn into permission.
       let payload;
       try {
         payload = JSON.parse(await stdinText());
@@ -803,6 +801,9 @@ export async function main(argv = process.argv.slice(2)) {
         else for (const nudge of nudges) console.log(nudge);
         return;
       } catch (error) {
+        // Only an evaluated safety rule may deny. Discovery, parsing, git,
+        // config and Dev errors fail open and produce no output.
+        if (!String(error?.code ?? "").startsWith("SAFETY_")) return;
         if (payload && hookRuntime(payload) === "codex") {
           console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: error?.message ?? String(error) } }));
           return;
@@ -821,14 +822,7 @@ export async function main(argv = process.argv.slice(2)) {
         payload = JSON.parse(await stdinText());
         await recordHookFire(payload).catch(() => {});
         await safetyPostHook(payload);
-      } catch (error) {
-        // A post-hook cannot undo a completed command; report state-tracking
-        // failure without making Claude treat the completed command as failed.
-        const message = `nodii-dev safety post hook: ${error?.code ?? "ERROR"}: ${error?.message ?? String(error)}`;
-        if (payload && hookRuntime(payload) === "codex")
-          console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: "PostToolUse", additionalContext: message } }));
-        else console.error(message);
-      }
+      } catch {}
       return;
     }
     if (action === "lane-heartbeat") {
@@ -854,6 +848,7 @@ export async function main(argv = process.argv.slice(2)) {
         return emit(await postHook(payload), json, "logged");
       } catch (error) {
         const outcome = postHookFailure(error);
+        if (!outcome.exitCode) return;
         if (hookRuntime(payload) === "codex")
           console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: "PostToolUse", additionalContext: outcome.message } }));
         else {

package/dist/core.js

@@ -4,7 +4,7 @@ import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir, platform } from "node:os";
 import { dirname, join } from "node:path";
 
-export const VERSION = "0.6.26";
+export const VERSION = "0.6.27";
 export const configPath = () =>
   process.env.NODII_DEV_CONFIG_PATH ??
   join(homedir(), ".config/nodii-dev/config.json");

package/dist/managed-hooks.js

@@ -11,7 +11,7 @@ export const CODEX_HOOK_EVENTS = [
 ];
 
 export const managedHooksDir = (home = homedir()) => join(home, ".config", "nodii-dev", "codex-managed-hooks");
-export const MANAGED_DISPATCH_MIN_VERSION = "0.6.26";
+export const MANAGED_DISPATCH_MIN_VERSION = "0.6.27";
 
 /** Only a single nodii-dev invocation is allowed; shell composition is never accepted. */
 export function nodiiCommandArgs(command) {
@@ -110,33 +110,36 @@ function responseOf(stdout) {
 
 /** Execute the current generated hook set behind the stable managed dispatcher. */
 export async function dispatchManagedHook(event, payloadText, deps = {}) {
-  if (!CODEX_HOOK_EVENTS.includes(event)) throw new CliError("USAGE", `Unknown managed Codex hook event: ${event}`, 2);
-  const env = deps.env ?? process.env;
-  if (!laneConfig(env)) return emptyResponse(event);
-  const dir = deps.dir ?? env.NODII_DEV_MANAGED_HOOKS_DIR ?? managedHooksDir();
-  let config;
-  try { config = JSON.parse(await (deps.read ?? readFile)(join(dir, "hooks.json"), "utf8")); }
-  catch (error) { throw new CliError("HARNESS_SETTINGS_INVALID", `Cannot read managed Codex hooks: ${error.message}`, 2); }
-  validateManagedHooks(config.hooks ?? {});
-  const payload = JSON.parse(payloadText);
-  const target = matchTarget(event, payload);
-  const handlers = (config.hooks?.[event] ?? []).filter((entry) => {
-    try { return new RegExp(entry.matcher || ".*").test(target); } catch { return false; }
-  }).flatMap((entry) => entry.hooks ?? []);
-  const results = await Promise.all(handlers.map((handler) => (deps.run ?? runHandler)(nodiiCommandArgs(handler.command), payloadText, deps)));
-  const messages = results.map((result) => responseOf(result.stdout)).filter(Boolean);
-  const errors = results.filter((result) => result.status !== 0).map((result) => result.stderr.trim() || result.stdout.trim()).filter(Boolean);
-  if (["PreToolUse", "PermissionRequest"].includes(event)) {
-    const denied = messages.find((message) => message.hookSpecificOutput?.permissionDecision === "deny");
-    if (denied) return `${JSON.stringify(denied)}\n`;
-    if (errors.length) return `${JSON.stringify({ hookSpecificOutput: { hookEventName: event, permissionDecision: "deny", permissionDecisionReason: errors.join("\n") } })}\n`;
-    const contexts = messages.map((message) => message.hookSpecificOutput?.additionalContext).filter(Boolean);
-    return contexts.length ? `${JSON.stringify({ hookSpecificOutput: { hookEventName: event, additionalContext: contexts.join("\n") } })}\n` : "";
+  try {
+    if (!CODEX_HOOK_EVENTS.includes(event)) return emptyResponse(event);
+    const env = deps.env ?? process.env;
+    if (!laneConfig(env)) return emptyResponse(event);
+    const dir = deps.dir ?? env.NODII_DEV_MANAGED_HOOKS_DIR ?? managedHooksDir();
+    const config = JSON.parse(await (deps.read ?? readFile)(join(dir, "hooks.json"), "utf8"));
+    validateManagedHooks(config.hooks ?? {});
+    const payload = JSON.parse(payloadText);
+    const target = matchTarget(event, payload);
+    const handlers = (config.hooks?.[event] ?? []).filter((entry) => {
+      try { return new RegExp(entry.matcher || ".*").test(target); } catch { return false; }
+    }).flatMap((entry) => entry.hooks ?? []);
+    const results = await Promise.all(handlers.map((handler) => (deps.run ?? runHandler)(nodiiCommandArgs(handler.command), payloadText, deps)));
+    // A failed handler is unavailable policy, not a denial. Ignore both its
+    // output and stderr; doctor is where hook health remains visible.
+    const successful = results.filter((result) => result.status === 0);
+    const messages = successful.map((result) => responseOf(result.stdout)).filter(Boolean);
+    if (["PreToolUse", "PermissionRequest"].includes(event)) {
+      const denied = messages.find((message) => message.hookSpecificOutput?.permissionDecision === "deny");
+      if (denied) return `${JSON.stringify(denied)}\n`;
+      const contexts = messages.map((message) => message.hookSpecificOutput?.additionalContext).filter(Boolean);
+      return contexts.length ? `${JSON.stringify({ hookSpecificOutput: { hookEventName: event, additionalContext: contexts.join("\n") } })}\n` : "";
+    }
+    const structured = messages.map((message) => message.hookSpecificOutput?.additionalContext).filter(Boolean);
+    const plain = successful.map((result) => responseOf(result.stdout) ? "" : result.stdout.trim()).filter(Boolean);
+    if (["Stop", "SubagentStop"].includes(event)) return "{}\n";
+    return [...structured, ...plain].join("\n") + ([...structured, ...plain].length ? "\n" : "");
+  } catch {
+    return emptyResponse(event);
   }
-  const structured = messages.map((message) => message.hookSpecificOutput?.additionalContext).filter(Boolean);
-  const plain = results.map((result) => responseOf(result.stdout) ? "" : result.stdout.trim()).filter(Boolean);
-  if (["Stop", "SubagentStop"].includes(event)) return "{}\n";
-  return [...structured, ...plain, ...errors].join("\n") + ([...structured, ...plain, ...errors].length ? "\n" : "");
 }
 
 const versionParts = (value) => String(value ?? "").split(".").map((part) => Number.parseInt(part, 10));

package/dist/nodii-dev.js

@@ -1,4 +1,16 @@
 #!/usr/bin/env node
 import { fail, main } from "./cli.js";
 
-main().catch(fail);
+// Hooks run in the agent's environment, which may be incomplete or may not be
+// a git worktree. An unavailable hook must never turn into a refused tool call.
+// Intentional policy denials are handled inside the hook command before they
+// reach this boundary.
+main().catch((error) => {
+  const denial = String(error?.code ?? "").startsWith("SAFETY_") ||
+    ["FIGMA_FILE_KEY_MISSING", "FIGMA_LOCK_DENIED", "WRITE_OUT_OF_SCOPE"].includes(error?.code);
+  if (process.argv[2] === "hook" && !denial) {
+    process.exitCode = 0;
+    return;
+  }
+  fail(error);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nodii/dev",
-  "version": "0.6.26",
+  "version": "0.6.27",
   "description": "Agent CLI for Nodii Dev, reached through the platform edge",
   "type": "module",
   "bin": {