@north-light/crouter 0.3.318 → 0.3.320

package/dist/core/command-hooks/report.js

@@ -1,28 +1 @@
-export const HOOK_TRUST_WARNING = 'Command hooks receive normalized inputs and may block or replace declared targets. Lifecycle hooks run unprompted at every declared event before node launch. Both run local executables with runtime authority and may transmit received data.';
-export function hasDeclaredHooks(manifest) {
-    return manifest.hooks !== undefined || manifest.hookExecutable !== undefined;
-}
-export function hookReport(validation, issues = validation.issues) {
-    return Object.freeze({
-        ...(validation.manifestPath === undefined ? {} : { manifestPath: validation.manifestPath }),
-        ...(validation.executablePath === undefined ? {} : { executablePath: validation.executablePath }),
-        declarations: Object.freeze((validation.manifest?.hooks ?? []).map((hook) => Object.freeze({
-            target: hook.target,
-            phase: hook.phase,
-            op: hook.op,
-            description: hook.description,
-            effects: Object.freeze([...hook.effects]),
-        }))),
-        ...(validation.manifest?.schemaVersion === 2 ? {
-            lifecycle: Object.freeze(validation.manifest.lifecycle.map((hook) => Object.freeze({
-                event: hook.event,
-                phase: hook.phase,
-                op: hook.op,
-                description: hook.description,
-                effects: Object.freeze([...hook.effects]),
-            }))),
-        } : {}),
-        issues: Object.freeze([...issues]),
-        trust: HOOK_TRUST_WARNING,
-    });
-}
+var s=Object.defineProperty;var c=(e,r)=>s(e,"name",{value:r,configurable:!0});const n="Command hooks receive normalized inputs and may block or replace declared targets. Lifecycle hooks run unprompted at every declared event before node launch. Both run local executables with runtime authority and may transmit received data.";function f(e){return e.hooks!==void 0||e.hookExecutable!==void 0}c(f,"hasDeclaredHooks");function u(e,r=e.issues){return Object.freeze({...e.manifestPath===void 0?{}:{manifestPath:e.manifestPath},...e.executablePath===void 0?{}:{executablePath:e.executablePath},declarations:Object.freeze((e.manifest?.hooks??[]).map(t=>Object.freeze({target:t.target,phase:t.phase,op:t.op,description:t.description,effects:Object.freeze([...t.effects])}))),...e.manifest?.schemaVersion===2?{lifecycle:Object.freeze(e.manifest.lifecycle.map(t=>Object.freeze({event:t.event,phase:t.phase,op:t.op,description:t.description,effects:Object.freeze([...t.effects])})))}:{},issues:Object.freeze([...r]),trust:n})}c(u,"hookReport");export{n as HOOK_TRUST_WARNING,f as hasDeclaredHooks,u as hookReport};

package/dist/core/command-hooks/schema.js

@@ -1,157 +1 @@
-import { isRecord } from '../../shared/predicates.js';
-import { LIFECYCLE_CATALOG, LIFECYCLE_EVENTS, isLifecycleEvent } from './lifecycle-catalog.js';
-function typeName(value) {
-    if (value === null)
-        return 'null';
-    if (Array.isArray(value))
-        return 'array';
-    return typeof value;
-}
-function validateCommandDeclaration(value, index, issue) {
-    const path = `hooks[${index}]`;
-    if (!isRecord(value)) {
-        issue('hook_manifest_invalid', 'hook must be an object', typeName(value), '{ target, phase, op, description, effects }', 'Fix the hook declaration.', path);
-        return undefined;
-    }
-    const keys = Object.keys(value).filter((key) => !['target', 'phase', 'op', 'description', 'effects'].includes(key));
-    if (keys.length > 0) {
-        issue('hook_manifest_invalid', 'unknown hook keys', keys.join(', '), 'only: target, phase, op, description, effects', 'Remove the unknown keys.', path);
-        return undefined;
-    }
-    for (const field of ['target', 'op', 'description']) {
-        if (typeof value[field] !== 'string' || value[field].length === 0) {
-            issue('hook_manifest_invalid', `${field} must be a non-empty string`, typeName(value[field]), 'a non-empty string', `Set ${field}.`, `${path}.${field}`);
-            return undefined;
-        }
-    }
-    if (value['phase'] !== 'before' && value['phase'] !== 'after' && value['phase'] !== 'replace') {
-        issue('hook_manifest_invalid', 'phase must be before|after|replace', String(value['phase']), 'before | after | replace', 'Set phase to a supported hook phase.', `${path}.phase`);
-        return undefined;
-    }
-    if (!isEffects(value['effects'])) {
-        issue('hook_manifest_invalid', 'effects must be a non-empty string array', typeName(value['effects']), 'a non-empty array of non-empty strings', 'Declare every persistent effect.', `${path}.effects`);
-        return undefined;
-    }
-    return {
-        target: value['target'],
-        phase: value['phase'],
-        op: value['op'],
-        description: value['description'],
-        effects: value['effects'],
-    };
-}
-function validateLifecycleDeclaration(value, index, issue) {
-    const path = `lifecycle[${index}]`;
-    if (!isRecord(value)) {
-        issue('hook_manifest_invalid', 'lifecycle hook must be an object', typeName(value), '{ event, phase, op, description, effects }', 'Fix the lifecycle declaration.', path);
-        return undefined;
-    }
-    const keys = Object.keys(value).filter((key) => !['event', 'phase', 'op', 'description', 'effects'].includes(key));
-    if (keys.length > 0) {
-        issue('hook_manifest_invalid', 'unknown lifecycle hook keys', keys.join(', '), 'only: event, phase, op, description, effects', 'Remove the unknown keys.', path);
-        return undefined;
-    }
-    for (const field of ['event', 'op', 'description']) {
-        if (typeof value[field] !== 'string' || value[field].length === 0) {
-            issue('hook_manifest_invalid', `${field} must be a non-empty string`, typeName(value[field]), 'a non-empty string', `Set ${field}.`, `${path}.${field}`);
-            return undefined;
-        }
-    }
-    if (!isLifecycleEvent(value['event'])) {
-        issue('hook_manifest_invalid', 'event must name a supported lifecycle event', String(value['event']), LIFECYCLE_EVENTS.join(' | '), `Set event to one of: ${LIFECYCLE_EVENTS.join(', ')}.`, `${path}.event`);
-        return undefined;
-    }
-    const phase = LIFECYCLE_CATALOG[value['event']].phase;
-    if (value['phase'] !== phase) {
-        issue('hook_manifest_invalid', `phase must be ${phase}`, String(value['phase']), phase, `Set phase to ${phase}.`, `${path}.phase`);
-        return undefined;
-    }
-    if (!isEffects(value['effects'])) {
-        issue('hook_manifest_invalid', 'effects must be a non-empty string array', typeName(value['effects']), 'a non-empty array of non-empty strings', 'Declare every persistent effect.', `${path}.effects`);
-        return undefined;
-    }
-    return {
-        event: value['event'],
-        phase,
-        op: value['op'],
-        description: value['description'],
-        effects: value['effects'],
-    };
-}
-function isEffects(value) {
-    return Array.isArray(value) && value.length > 0 && value.every((effect) => typeof effect === 'string' && effect.length > 0);
-}
-function validateV1(raw, issue) {
-    const unknown = Object.keys(raw).filter((key) => key !== 'schemaVersion' && key !== 'hooks');
-    if (unknown.length > 0) {
-        issue('hook_manifest_invalid', 'unknown top-level keys', unknown.join(', '), 'only: schemaVersion, hooks', 'Remove the unknown keys.');
-        return { issues: [] };
-    }
-    if (!Array.isArray(raw['hooks']) || raw['hooks'].length === 0) {
-        issue('hook_manifest_invalid', 'hooks must be a non-empty array', typeName(raw['hooks']), 'a non-empty array of hook declarations', 'Declare at least one hook.', 'hooks');
-        return { issues: [] };
-    }
-    const hooks = [];
-    for (let index = 0; index < raw['hooks'].length; index++) {
-        const hook = validateCommandDeclaration(raw['hooks'][index], index, issue);
-        if (hook === undefined)
-            return { issues: [] };
-        hooks.push(hook);
-    }
-    return { manifest: { schemaVersion: 1, hooks }, issues: [] };
-}
-/** Validates the declarative hooks.json payload without filesystem access. */
-export function validateHookManifest(raw) {
-    const issues = [];
-    const issue = (code, message, received, expected, next, path) => {
-        issues.push({ code, message, received, expected, next, ...(path === undefined ? {} : { path }) });
-    };
-    if (!isRecord(raw)) {
-        issue('hook_manifest_invalid', 'manifest must be an object', typeName(raw), '{ schemaVersion, hooks }', 'Provide a valid hooks.json manifest.');
-        return { issues };
-    }
-    if (raw['schemaVersion'] === 1) {
-        const validation = validateV1(raw, issue);
-        return { ...(validation.manifest === undefined ? {} : { manifest: validation.manifest }), issues };
-    }
-    if (raw['schemaVersion'] !== 2) {
-        issue('hook_schema_version', 'schemaVersion must be exactly 1 or 2', String(raw['schemaVersion']), '1 | 2', 'Update the manifest schema version to 1 or 2.', 'schemaVersion');
-        return { issues };
-    }
-    const unknown = Object.keys(raw).filter((key) => key !== 'schemaVersion' && key !== 'hooks' && key !== 'lifecycle');
-    if (unknown.length > 0) {
-        issue('hook_manifest_invalid', 'unknown top-level keys', unknown.join(', '), 'only: schemaVersion, hooks, lifecycle', 'Remove the unknown keys.');
-        return { issues };
-    }
-    const rawHooks = raw['hooks'];
-    const rawLifecycle = raw['lifecycle'];
-    if (rawHooks !== undefined && !Array.isArray(rawHooks)) {
-        issue('hook_manifest_invalid', 'hooks must be an array when present', typeName(rawHooks), 'an array of hook declarations', 'Fix hooks.', 'hooks');
-        return { issues };
-    }
-    if (rawLifecycle !== undefined && !Array.isArray(rawLifecycle)) {
-        issue('hook_manifest_invalid', 'lifecycle must be an array when present', typeName(rawLifecycle), 'an array of lifecycle hook declarations', 'Fix lifecycle.', 'lifecycle');
-        return { issues };
-    }
-    const hooks = rawHooks ?? [];
-    const lifecycle = rawLifecycle ?? [];
-    if (hooks.length === 0 && lifecycle.length === 0) {
-        issue('hook_manifest_invalid', 'hooks or lifecycle must be a non-empty array', 'both arrays were empty or absent', 'at least one command or lifecycle hook declaration', 'Declare at least one hook.', 'hooks');
-        return { issues };
-    }
-    const declaredHooks = [];
-    for (let index = 0; index < hooks.length; index++) {
-        const hook = validateCommandDeclaration(hooks[index], index, issue);
-        if (hook === undefined)
-            return { issues };
-        declaredHooks.push(hook);
-    }
-    const declaredLifecycle = [];
-    for (let index = 0; index < lifecycle.length; index++) {
-        const hook = validateLifecycleDeclaration(lifecycle[index], index, issue);
-        if (hook === undefined)
-            return { issues };
-        declaredLifecycle.push(hook);
-    }
-    return { manifest: { schemaVersion: 2, hooks: declaredHooks, lifecycle: declaredLifecycle }, issues };
-}
+var j=Object.defineProperty;var c=(e,o)=>j(e,"name",{value:o,configurable:!0});import{isRecord as p}from"../../shared/predicates.js";import{LIFECYCLE_CATALOG as v,LIFECYCLE_EVENTS as y,isLifecycleEvent as V}from"./lifecycle-catalog.js";function a(e){return e===null?"null":Array.isArray(e)?"array":typeof e}c(a,"typeName");function u(e,o,n){const i=`hooks[${o}]`;if(!p(e)){n("hook_manifest_invalid","hook must be an object",a(e),"{ target, phase, op, description, effects }","Fix the hook declaration.",i);return}const s=Object.keys(e).filter(t=>!["target","phase","op","description","effects"].includes(t));if(s.length>0){n("hook_manifest_invalid","unknown hook keys",s.join(", "),"only: target, phase, op, description, effects","Remove the unknown keys.",i);return}for(const t of["target","op","description"])if(typeof e[t]!="string"||e[t].length===0){n("hook_manifest_invalid",`${t} must be a non-empty string`,a(e[t]),"a non-empty string",`Set ${t}.`,`${i}.${t}`);return}if(e.phase!=="before"&&e.phase!=="after"&&e.phase!=="replace"){n("hook_manifest_invalid","phase must be before|after|replace",String(e.phase),"before | after | replace","Set phase to a supported hook phase.",`${i}.phase`);return}if(!_(e.effects)){n("hook_manifest_invalid","effects must be a non-empty string array",a(e.effects),"a non-empty array of non-empty strings","Declare every persistent effect.",`${i}.effects`);return}return{target:e.target,phase:e.phase,op:e.op,description:e.description,effects:e.effects}}c(u,"validateCommandDeclaration");function A(e,o,n){const i=`lifecycle[${o}]`;if(!p(e)){n("hook_manifest_invalid","lifecycle hook must be an object",a(e),"{ event, phase, op, description, effects }","Fix the lifecycle declaration.",i);return}const s=Object.keys(e).filter(f=>!["event","phase","op","description","effects"].includes(f));if(s.length>0){n("hook_manifest_invalid","unknown lifecycle hook keys",s.join(", "),"only: event, phase, op, description, effects","Remove the unknown keys.",i);return}for(const f of["event","op","description"])if(typeof e[f]!="string"||e[f].length===0){n("hook_manifest_invalid",`${f} must be a non-empty string`,a(e[f]),"a non-empty string",`Set ${f}.`,`${i}.${f}`);return}if(!V(e.event)){n("hook_manifest_invalid","event must name a supported lifecycle event",String(e.event),y.join(" | "),`Set event to one of: ${y.join(", ")}.`,`${i}.event`);return}const t=v[e.event].phase;if(e.phase!==t){n("hook_manifest_invalid",`phase must be ${t}`,String(e.phase),t,`Set phase to ${t}.`,`${i}.phase`);return}if(!_(e.effects)){n("hook_manifest_invalid","effects must be a non-empty string array",a(e.effects),"a non-empty array of non-empty strings","Declare every persistent effect.",`${i}.effects`);return}return{event:e.event,phase:t,op:e.op,description:e.description,effects:e.effects}}c(A,"validateLifecycleDeclaration");function _(e){return Array.isArray(e)&&e.length>0&&e.every(o=>typeof o=="string"&&o.length>0)}c(_,"isEffects");function S(e,o){const n=Object.keys(e).filter(s=>s!=="schemaVersion"&&s!=="hooks");if(n.length>0)return o("hook_manifest_invalid","unknown top-level keys",n.join(", "),"only: schemaVersion, hooks","Remove the unknown keys."),{issues:[]};if(!Array.isArray(e.hooks)||e.hooks.length===0)return o("hook_manifest_invalid","hooks must be a non-empty array",a(e.hooks),"a non-empty array of hook declarations","Declare at least one hook.","hooks"),{issues:[]};const i=[];for(let s=0;s<e.hooks.length;s++){const t=u(e.hooks[s],s,o);if(t===void 0)return{issues:[]};i.push(t)}return{manifest:{schemaVersion:1,hooks:i},issues:[]}}c(S,"validateV1");function C(e){const o=[],n=c((r,h,g,b,$,k)=>{o.push({code:r,message:h,received:g,expected:b,next:$,...k===void 0?{}:{path:k}})},"issue");if(!p(e))return n("hook_manifest_invalid","manifest must be an object",a(e),"{ schemaVersion, hooks }","Provide a valid hooks.json manifest."),{issues:o};if(e.schemaVersion===1){const r=S(e,n);return{...r.manifest===void 0?{}:{manifest:r.manifest},issues:o}}if(e.schemaVersion!==2)return n("hook_schema_version","schemaVersion must be exactly 1 or 2",String(e.schemaVersion),"1 | 2","Update the manifest schema version to 1 or 2.","schemaVersion"),{issues:o};const i=Object.keys(e).filter(r=>r!=="schemaVersion"&&r!=="hooks"&&r!=="lifecycle");if(i.length>0)return n("hook_manifest_invalid","unknown top-level keys",i.join(", "),"only: schemaVersion, hooks, lifecycle","Remove the unknown keys."),{issues:o};const s=e.hooks,t=e.lifecycle;if(s!==void 0&&!Array.isArray(s))return n("hook_manifest_invalid","hooks must be an array when present",a(s),"an array of hook declarations","Fix hooks.","hooks"),{issues:o};if(t!==void 0&&!Array.isArray(t))return n("hook_manifest_invalid","lifecycle must be an array when present",a(t),"an array of lifecycle hook declarations","Fix lifecycle.","lifecycle"),{issues:o};const f=s??[],d=t??[];if(f.length===0&&d.length===0)return n("hook_manifest_invalid","hooks or lifecycle must be a non-empty array","both arrays were empty or absent","at least one command or lifecycle hook declaration","Declare at least one hook.","hooks"),{issues:o};const m=[];for(let r=0;r<f.length;r++){const h=u(f[r],r,n);if(h===void 0)return{issues:o};m.push(h)}const l=[];for(let r=0;r<d.length;r++){const h=A(d[r],r,n);if(h===void 0)return{issues:o};l.push(h)}return{manifest:{schemaVersion:2,hooks:m,lifecycle:l},issues:o}}c(C,"validateHookManifest");export{C as validateHookManifest};

package/dist/core/command-hooks/transport/exec-invoke.js

@@ -1,276 +1 @@
-import { spawn } from 'node:child_process';
-import { posixProcessGroupSpawnOptions, terminateProcessGroup } from '../../../hook-process.js';
-import { ExitCode } from '../../../types.js';
-import { isRecord } from '../../../shared/predicates.js';
-import { validateCoreDeclaredResult } from '../../command-plugins/transport/exec-invoke.js';
-import { CrtrError } from '../../errors.js';
-import { diag } from '../../io.js';
-const MAX_STDOUT = 10 * 1024 * 1024;
-export const EXEC_HOOK_TIMEOUT_MS = 15_000;
-const RESERVED_CODES = new Set([
-    'internal',
-    'unknown_path',
-    'command_collision',
-    'command_hook_collision',
-    'plugin_protocol_error',
-    'hook_protocol_error',
-]);
-const SNAKE = /^[a-z][a-z0-9]*(_[a-z0-9]+)*$/;
-const OPERATION_ID = /^[0-9a-f]{32}$/;
-const NEXT = 'Run `crtr pkg plugin show` or `crtr sys doctor` to inspect the plugin.';
-/** Invoke one hook executable; after failures retain the completed primary result. */
-export async function invokeExecHook(spec, invocation) {
-    const cwd = process.cwd();
-    const request = buildRequest(spec, invocation, cwd);
-    const res = await runHookProcess(spec, invocation, JSON.stringify(request), cwd);
-    if (res.signal !== null) {
-        throw protocolError(spec, invocation, `executable was killed by signal ${res.signal}`, 'a clean exit with one JSON envelope on stdout');
-    }
-    const envelope = parseEnvelope(spec, invocation, res.stdout);
-    if (envelope.ok && res.status !== 0) {
-        diag(`crtr: ${label(spec)} returned ok:true but exited ${res.status} (honoring the envelope)`);
-    }
-    else if (!envelope.ok && res.status === 0) {
-        diag(`crtr: ${label(spec)} returned ok:false but exited 0 (honoring the envelope)`);
-    }
-    if (!envelope.ok)
-        throwHookFailure(spec, invocation, envelope);
-    if (spec.phase !== 'replace')
-        return;
-    const result = envelope.result;
-    if (!isRecord(result)) {
-        throw protocolError(spec, invocation, 'replacement success result was not an object', 'result: an object matching the target output declaration');
-    }
-    const output = spec.output;
-    if (output === undefined) {
-        throw protocolError(spec, invocation, 'replacement target output declaration was missing', 'the target leaf output declaration');
-    }
-    const issue = validateCoreDeclaredResult(output, result);
-    if (issue !== null) {
-        const field = output.find((candidate) => candidate.name === issue.field);
-        if (issue.receivedType !== undefined) {
-            throw protocolError(spec, invocation, `replacement output field "${issue.field}" has the wrong type`, `${issue.field}: ${field?.type ?? 'unknown'}`);
-        }
-        throw protocolError(spec, invocation, `replacement result is missing required output field "${issue.field}"`, `a "${issue.field}" field of type ${field?.type ?? 'unknown'}`);
-    }
-    return result;
-}
-async function runHookProcess(spec, invocation, input, cwd) {
-    let child;
-    try {
-        child = spawn(spec.executable, ['--crtr-hook-protocol', '1'], {
-            cwd,
-            env: process.env,
-            stdio: ['pipe', 'pipe', 'inherit'],
-            ...posixProcessGroupSpawnOptions(),
-        });
-    }
-    catch (error) {
-        throw protocolError(spec, invocation, `executable could not be run (${describeError(error)})`, 'a runnable hook executable');
-    }
-    return new Promise((resolve, reject) => {
-        let stdoutBytes = 0;
-        const stdout = [];
-        let failure;
-        let closed = false;
-        let cleaned = false;
-        let status = null;
-        let signal = null;
-        let timeout;
-        const finish = () => {
-            if (!closed || (failure !== undefined && !cleaned))
-                return;
-            if (timeout !== undefined)
-                clearTimeout(timeout);
-            if (failure?.kind === 'timeout') {
-                reject(protocolError(spec, invocation, `executable timed out after ${EXEC_HOOK_TIMEOUT_MS}ms`, 'one JSON envelope before the execution timeout'));
-                return;
-            }
-            if (failure?.kind === 'output_limit') {
-                reject(protocolError(spec, invocation, 'stdout exceeded the 10 MiB cap', 'one JSON envelope under 10 MiB on stdout'));
-                return;
-            }
-            if (failure?.kind === 'spawn') {
-                reject(protocolError(spec, invocation, `executable could not be run (${describeError(failure.error)})`, 'a runnable hook executable'));
-                return;
-            }
-            if (failure?.kind === 'cleanup') {
-                reject(protocolError(spec, invocation, `executable cleanup failed (${describeError(failure.error)})`, 'a hook executable whose process group can be terminated'));
-                return;
-            }
-            resolve({ stdout: Buffer.concat(stdout).toString('utf8'), status, signal });
-        };
-        const terminate = (reason) => {
-            if (failure !== undefined)
-                return;
-            failure = reason;
-            if (timeout !== undefined)
-                clearTimeout(timeout);
-            void terminateProcessGroup(child).then(() => {
-                cleaned = true;
-                finish();
-            }, (error) => {
-                failure = { kind: 'cleanup', error };
-                cleaned = true;
-                finish();
-            });
-        };
-        child.stdout.on('data', (chunk) => {
-            stdoutBytes += chunk.byteLength;
-            if (stdoutBytes > MAX_STDOUT) {
-                terminate({ kind: 'output_limit' });
-                return;
-            }
-            stdout.push(chunk);
-        });
-        child.once('error', (error) => {
-            if (child.pid === undefined) {
-                failure = { kind: 'spawn', error };
-                closed = true;
-                cleaned = true;
-                finish();
-                return;
-            }
-            terminate({ kind: 'spawn', error });
-        });
-        child.once('close', (nextStatus, nextSignal) => {
-            status = nextStatus;
-            signal = nextSignal;
-            closed = true;
-            finish();
-        });
-        timeout = setTimeout(() => terminate({ kind: 'timeout' }), EXEC_HOOK_TIMEOUT_MS);
-        child.stdin.end(input);
-    });
-}
-function buildRequest(spec, invocation, cwd) {
-    if (!OPERATION_ID.test(invocation.operationId)) {
-        throw protocolError(spec, invocation, 'operationId was not a 32-character lowercase hexadecimal string', 'a valid crouter operation identity');
-    }
-    if (!isJson(invocation.input)) {
-        throw protocolError(spec, invocation, 'input was not JSON-compatible', 'a JSON object');
-    }
-    if (!invocation.providedParams.every((param) => typeof param === 'string')) {
-        throw protocolError(spec, invocation, 'providedParams contained a non-string value', 'an array of parameter names');
-    }
-    const base = {
-        protocolVersion: 1,
-        op: spec.op,
-        command: [...spec.commandPath],
-        operationId: invocation.operationId,
-        input: invocation.input,
-        context: { cwd, providedParams: [...invocation.providedParams] },
-    };
-    if (spec.phase === 'after') {
-        if (invocation.result === undefined || !isJson(invocation.result)) {
-            throw protocolError(spec, invocation, 'after hook result was missing or not JSON-compatible', 'the completed primary result');
-        }
-        return { ...base, phase: 'after', result: invocation.result };
-    }
-    if (invocation.result !== undefined) {
-        throw protocolError(spec, invocation, `${spec.phase} hook invocation included a result`, 'result only for after hooks');
-    }
-    if (spec.phase === 'before')
-        return { ...base, phase: 'before' };
-    return { ...base, phase: 'replace' };
-}
-function parseEnvelope(spec, invocation, stdout) {
-    let value;
-    try {
-        value = JSON.parse(stdout.trim());
-    }
-    catch {
-        throw protocolError(spec, invocation, 'stdout was not a single JSON envelope', 'exactly one JSON envelope on stdout');
-    }
-    if (!isRecord(value)) {
-        throw protocolError(spec, invocation, 'stdout was not a JSON object', 'a { protocolVersion: 1, ok: boolean, ... } envelope');
-    }
-    if (value['protocolVersion'] !== 1) {
-        throw protocolError(spec, invocation, `unsupported protocolVersion ${String(value['protocolVersion'])}`, 'protocolVersion exactly 1');
-    }
-    if (value['ok'] === true) {
-        const expectedKeys = spec.phase === 'replace' ? ['protocolVersion', 'ok', 'result'] : ['protocolVersion', 'ok'];
-        if (!hasExactKeys(value, expectedKeys)) {
-            throw protocolError(spec, invocation, 'success envelope had missing or extra fields', `{ ${expectedKeys.join(', ')} } only`);
-        }
-        if (spec.phase === 'replace') {
-            if (!isJson(value['result'])) {
-                throw protocolError(spec, invocation, 'replacement result was not JSON-compatible', 'a JSON result');
-            }
-            return { protocolVersion: 1, ok: true, result: value['result'] };
-        }
-        return { protocolVersion: 1, ok: true };
-    }
-    if (value['ok'] !== false || !hasExactKeys(value, ['protocolVersion', 'ok', 'error'])) {
-        throw protocolError(spec, invocation, 'failure envelope had missing or extra fields', '{ protocolVersion, ok, error } only');
-    }
-    const error = value['error'];
-    if (!isRecord(error) || !hasExactKeys(error, ['code', 'message'], ['field', 'next'])) {
-        throw protocolError(spec, invocation, 'error envelope was missing fields or contained extra fields', 'error: { code, message, field?, next? }');
-    }
-    if (typeof error['code'] !== 'string' || error['code'] === '' || typeof error['message'] !== 'string' || error['message'] === '') {
-        throw protocolError(spec, invocation, 'error envelope had an empty or non-string code/message', 'non-empty error code and message strings');
-    }
-    if ((error['field'] !== undefined && typeof error['field'] !== 'string') || (error['next'] !== undefined && typeof error['next'] !== 'string')) {
-        throw protocolError(spec, invocation, 'error envelope had a non-string field/next', 'string field and next values when present');
-    }
-    return {
-        protocolVersion: 1,
-        ok: false,
-        error: {
-            code: error['code'],
-            message: error['message'],
-            ...(error['field'] === undefined ? {} : { field: error['field'] }),
-            ...(error['next'] === undefined ? {} : { next: error['next'] }),
-        },
-    };
-}
-function throwHookFailure(spec, invocation, failure) {
-    const { code, message, field, next } = failure.error;
-    if (!SNAKE.test(code) || RESERVED_CODES.has(code)) {
-        throw protocolError(spec, invocation, `error code "${code}" was invalid or reserved`, 'a non-reserved lowercase snake_case code');
-    }
-    throw new CrtrError(code, `${label(spec)}: ${message}`, ExitCode.GENERAL, failureDetails(spec, invocation, field, next));
-}
-function protocolError(spec, invocation, received, expected) {
-    return new CrtrError('hook_protocol_error', `${label(spec)}: ${received}. Expected ${expected}.`, ExitCode.GENERAL, failureDetails(spec, invocation, undefined, NEXT, received));
-}
-function failureDetails(spec, invocation, field, next, received) {
-    const identity = {
-        plugin: spec.plugin,
-        op: spec.op,
-        phase: spec.phase,
-        command: [...spec.commandPath],
-        ...(received === undefined ? {} : { received }),
-        ...(field === undefined ? {} : { field }),
-    };
-    if (spec.phase !== 'after')
-        return { ...identity, next: next ?? NEXT };
-    const guidance = 'Do not retry the original command; its primary action completed. Inspect and reconcile the failed after hook.';
-    return {
-        ...identity,
-        primaryCompleted: true,
-        result: invocation.result,
-        next: next === undefined || next === NEXT ? guidance : `${next} ${guidance}`,
-    };
-}
-function label(spec) {
-    return `plugin "${spec.plugin}" ${spec.phase} hook "${spec.op}" for \`${spec.commandPath.join(' ')}\``;
-}
-function hasExactKeys(value, required, optional = []) {
-    const keys = Object.keys(value);
-    return required.every((key) => Object.hasOwn(value, key))
-        && keys.every((key) => required.includes(key) || optional.includes(key));
-}
-function isJson(value) {
-    if (value === null || typeof value === 'boolean' || typeof value === 'string')
-        return true;
-    if (typeof value === 'number')
-        return Number.isFinite(value);
-    if (Array.isArray(value))
-        return value.every(isJson);
-    return isRecord(value) && Object.values(value).every(isJson);
-}
-function describeError(error) {
-    return error instanceof Error ? error.message : String(error);
-}
+var R=Object.defineProperty;var l=(e,t)=>R(e,"name",{value:t,configurable:!0});import{spawn as I}from"node:child_process";import{posixProcessGroupSpawnOptions as A,terminateProcessGroup as D}from"../../../hook-process.js";import{ExitCode as N}from"../../../types.js";import{isRecord as k}from"../../../shared/predicates.js";import{validateCoreDeclaredResult as j}from"../../command-plugins/transport/exec-invoke.js";import{CrtrError as J}from"../../errors.js";import{diag as V}from"../../io.js";const C=10*1024*1024,P=15e3,M=new Set(["internal","unknown_path","command_collision","command_hook_collision","plugin_protocol_error","hook_protocol_error"]),B=/^[a-z][a-z0-9]*(_[a-z0-9]+)*$/,G=/^[0-9a-f]{32}$/,$="Run `crtr pkg plugin show` or `crtr sys doctor` to inspect the plugin.";async function v(e,t){const s=process.cwd(),o=K(e,t,s),r=await H(e,t,JSON.stringify(o),s);if(r.signal!==null)throw n(e,t,`executable was killed by signal ${r.signal}`,"a clean exit with one JSON envelope on stdout");const i=z(e,t,r.stdout);if(i.ok&&r.status!==0?V(`crtr: ${y(e)} returned ok:true but exited ${r.status} (honoring the envelope)`):!i.ok&&r.status===0&&V(`crtr: ${y(e)} returned ok:false but exited 0 (honoring the envelope)`),i.ok||L(e,t,i),e.phase!=="replace")return;const a=i.result;if(!k(a))throw n(e,t,"replacement success result was not an object","result: an object matching the target output declaration");const p=e.output;if(p===void 0)throw n(e,t,"replacement target output declaration was missing","the target leaf output declaration");const d=j(p,a);if(d!==null){const u=p.find(c=>c.name===d.field);throw d.receivedType!==void 0?n(e,t,`replacement output field "${d.field}" has the wrong type`,`${d.field}: ${u?.type??"unknown"}`):n(e,t,`replacement result is missing required output field "${d.field}"`,`a "${d.field}" field of type ${u?.type??"unknown"}`)}return a}l(v,"invokeExecHook");async function H(e,t,s,o){let r;try{r=I(e.executable,["--crtr-hook-protocol","1"],{cwd:o,env:process.env,stdio:["pipe","pipe","inherit"],...A()})}catch(i){throw n(e,t,`executable could not be run (${E(i)})`,"a runnable hook executable")}return new Promise((i,a)=>{let p=0;const d=[];let u,c=!1,g=!1,S=null,_=null,m;const w=l(()=>{if(!(!c||u!==void 0&&!g)){if(m!==void 0&&clearTimeout(m),u?.kind==="timeout"){a(n(e,t,`executable timed out after ${P}ms`,"one JSON envelope before the execution timeout"));return}if(u?.kind==="output_limit"){a(n(e,t,"stdout exceeded the 10 MiB cap","one JSON envelope under 10 MiB on stdout"));return}if(u?.kind==="spawn"){a(n(e,t,`executable could not be run (${E(u.error)})`,"a runnable hook executable"));return}if(u?.kind==="cleanup"){a(n(e,t,`executable cleanup failed (${E(u.error)})`,"a hook executable whose process group can be terminated"));return}i({stdout:Buffer.concat(d).toString("utf8"),status:S,signal:_})}},"finish"),b=l(f=>{u===void 0&&(u=f,m!==void 0&&clearTimeout(m),D(r).then(()=>{g=!0,w()},x=>{u={kind:"cleanup",error:x},g=!0,w()}))},"terminate");r.stdout.on("data",f=>{if(p+=f.byteLength,p>C){b({kind:"output_limit"});return}d.push(f)}),r.once("error",f=>{if(r.pid===void 0){u={kind:"spawn",error:f},c=!0,g=!0,w();return}b({kind:"spawn",error:f})}),r.once("close",(f,x)=>{S=f,_=x,c=!0,w()}),m=setTimeout(()=>b({kind:"timeout"}),P),r.stdin.end(s)})}l(H,"runHookProcess");function K(e,t,s){if(!G.test(t.operationId))throw n(e,t,"operationId was not a 32-character lowercase hexadecimal string","a valid crouter operation identity");if(!h(t.input))throw n(e,t,"input was not JSON-compatible","a JSON object");if(!t.providedParams.every(r=>typeof r=="string"))throw n(e,t,"providedParams contained a non-string value","an array of parameter names");const o={protocolVersion:1,op:e.op,command:[...e.commandPath],operationId:t.operationId,input:t.input,context:{cwd:s,providedParams:[...t.providedParams]}};if(e.phase==="after"){if(t.result===void 0||!h(t.result))throw n(e,t,"after hook result was missing or not JSON-compatible","the completed primary result");return{...o,phase:"after",result:t.result}}if(t.result!==void 0)throw n(e,t,`${e.phase} hook invocation included a result`,"result only for after hooks");return e.phase==="before"?{...o,phase:"before"}:{...o,phase:"replace"}}l(K,"buildRequest");function z(e,t,s){let o;try{o=JSON.parse(s.trim())}catch{throw n(e,t,"stdout was not a single JSON envelope","exactly one JSON envelope on stdout")}if(!k(o))throw n(e,t,"stdout was not a JSON object","a { protocolVersion: 1, ok: boolean, ... } envelope");if(o.protocolVersion!==1)throw n(e,t,`unsupported protocolVersion ${String(o.protocolVersion)}`,"protocolVersion exactly 1");if(o.ok===!0){const i=e.phase==="replace"?["protocolVersion","ok","result"]:["protocolVersion","ok"];if(!O(o,i))throw n(e,t,"success envelope had missing or extra fields",`{ ${i.join(", ")} } only`);if(e.phase==="replace"){if(!h(o.result))throw n(e,t,"replacement result was not JSON-compatible","a JSON result");return{protocolVersion:1,ok:!0,result:o.result}}return{protocolVersion:1,ok:!0}}if(o.ok!==!1||!O(o,["protocolVersion","ok","error"]))throw n(e,t,"failure envelope had missing or extra fields","{ protocolVersion, ok, error } only");const r=o.error;if(!k(r)||!O(r,["code","message"],["field","next"]))throw n(e,t,"error envelope was missing fields or contained extra fields","error: { code, message, field?, next? }");if(typeof r.code!="string"||r.code===""||typeof r.message!="string"||r.message==="")throw n(e,t,"error envelope had an empty or non-string code/message","non-empty error code and message strings");if(r.field!==void 0&&typeof r.field!="string"||r.next!==void 0&&typeof r.next!="string")throw n(e,t,"error envelope had a non-string field/next","string field and next values when present");return{protocolVersion:1,ok:!1,error:{code:r.code,message:r.message,...r.field===void 0?{}:{field:r.field},...r.next===void 0?{}:{next:r.next}}}}l(z,"parseEnvelope");function L(e,t,s){const{code:o,message:r,field:i,next:a}=s.error;throw!B.test(o)||M.has(o)?n(e,t,`error code "${o}" was invalid or reserved`,"a non-reserved lowercase snake_case code"):new J(o,`${y(e)}: ${r}`,N.GENERAL,T(e,t,i,a))}l(L,"throwHookFailure");function n(e,t,s,o){return new J("hook_protocol_error",`${y(e)}: ${s}. Expected ${o}.`,N.GENERAL,T(e,t,void 0,$,s))}l(n,"protocolError");function T(e,t,s,o,r){const i={plugin:e.plugin,op:e.op,phase:e.phase,command:[...e.commandPath],...r===void 0?{}:{received:r},...s===void 0?{}:{field:s}};if(e.phase!=="after")return{...i,next:o??$};const a="Do not retry the original command; its primary action completed. Inspect and reconcile the failed after hook.";return{...i,primaryCompleted:!0,result:t.result,next:o===void 0||o===$?a:`${o} ${a}`}}l(T,"failureDetails");function y(e){return`plugin "${e.plugin}" ${e.phase} hook "${e.op}" for \`${e.commandPath.join(" ")}\``}l(y,"label");function O(e,t,s=[]){const o=Object.keys(e);return t.every(r=>Object.hasOwn(e,r))&&o.every(r=>t.includes(r)||s.includes(r))}l(O,"hasExactKeys");function h(e){return e===null||typeof e=="boolean"||typeof e=="string"?!0:typeof e=="number"?Number.isFinite(e):Array.isArray(e)?e.every(h):k(e)&&Object.values(e).every(h)}l(h,"isJson");function E(e){return e instanceof Error?e.message:String(e)}l(E,"describeError");export{P as EXEC_HOOK_TIMEOUT_MS,v as invokeExecHook};