@ory/continue 0.10.0

package/dist/settings.js

@@ -0,0 +1,78 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateSettings = generateSettings;
+exports.generateInstalledSettings = generateInstalledSettings;
+exports.generateDevSettings = generateDevSettings;
+const path = __importStar(require("node:path"));
+const argus_1 = require("@ory/argus");
+/**
+ * Generate the .continue/settings.json hooks section that configures Ory hooks.
+ *
+ * Continue's hook block is Claude-Code-compatible: a top-level `hooks` object
+ * mapping each event name to an array of matcher entries, each carrying
+ * command-type hooks. Verified against @continuedev/cli.
+ */
+function generateSettings(hookScriptPath) {
+    const cmd = `node ${hookScriptPath}`;
+    return {
+        hooks: {
+            SessionStart: (0, argus_1.matcherHookEntry)(cmd),
+            PreToolUse: (0, argus_1.matcherHookEntry)(cmd),
+            PostToolUse: (0, argus_1.matcherHookEntry)(cmd),
+            PostToolUseFailure: (0, argus_1.matcherHookEntry)(cmd),
+            PermissionRequest: (0, argus_1.matcherHookEntry)(cmd),
+            UserPromptSubmit: (0, argus_1.matcherHookEntry)(cmd),
+            SubagentStart: (0, argus_1.matcherHookEntry)(cmd),
+            SubagentStop: (0, argus_1.matcherHookEntry)(cmd),
+            Stop: (0, argus_1.matcherHookEntry)(cmd),
+            SessionEnd: (0, argus_1.matcherHookEntry)(cmd),
+            PreCompact: (0, argus_1.matcherHookEntry)(cmd),
+        },
+    };
+}
+/**
+ * Generate settings assuming the plugin is installed via npm/pnpm.
+ */
+function generateInstalledSettings() {
+    return generateSettings("ory-continue-hook");
+}
+/**
+ * Generate settings pointing to a local dev build.
+ */
+function generateDevSettings(packageDir) {
+    const hookPath = path.resolve(packageDir, "dist", "hook.js");
+    return generateSettings(hookPath);
+}

package/dist/types.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Continue CLI (`cn`) hook event payload delivered on stdin.
+ *
+ * Continue invokes hooks as shell commands, passing JSON on stdin and reading
+ * JSON from stdout. Exit code 2 blocks the action. Continue's hook contract is
+ * explicitly Claude-Code-compatible, so these shapes mirror Claude Code's.
+ *
+ * Events: SessionStart, PreToolUse, PostToolUse, PostToolUseFailure,
+ * PermissionRequest, UserPromptSubmit, SubagentStart, SubagentStop, Stop,
+ * SessionEnd, PreCompact, ConfigChange.
+ *
+ * Verified against @continuedev/cli.
+ */
+export interface ContinueHookInput {
+    session_id: string;
+    transcript_path?: string;
+    cwd: string;
+    hook_event_name: string;
+    timestamp?: string;
+    source?: string;
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+    tool_response?: Record<string, unknown>;
+    tool_use_id?: string;
+    /** PostToolUseFailure — tool error message. */
+    error?: string;
+    model?: string;
+    prompt?: string;
+    subagent_type?: string;
+    subagent_prompt?: string;
+    subagent_response?: string;
+    agent_id?: string;
+    agent_type?: string;
+    reason?: string;
+    stop_hook_active?: boolean;
+    last_assistant_message?: string;
+    trigger?: "auto" | "manual";
+}
+/**
+ * Continue CLI hook output written to stdout. Claude-Code-compatible.
+ *
+ * Top-level `decision: "block"` is honored on blocking-capable events
+ * (PreToolUse, etc.) and is paired with exit code 2 by the hook entry point.
+ * PreToolUse uses the structured `hookSpecificOutput.permissionDecision` shape;
+ * PermissionRequest uses the nested `hookSpecificOutput.decision.{behavior}`.
+ */
+export interface ContinueHookOutput {
+    continue?: boolean;
+    decision?: "block";
+    reason?: string;
+    stopReason?: string;
+    suppressOutput?: boolean;
+    systemMessage?: string;
+    updatedInput?: Record<string, unknown>;
+    hookSpecificOutput?: ContinueHookSpecificOutput;
+}
+/**
+ * Per-event structured output. Field shape depends on `hookEventName`:
+ *   - PreToolUse: `permissionDecision` ("allow" | "deny" | "ask") +
+ *     `permissionDecisionReason`.
+ *   - PermissionRequest: nested `decision: { behavior }`. Omit `decision`
+ *     entirely to fall through to Continue's normal user prompt.
+ *   - SessionStart / UserPromptSubmit: `additionalContext` for context
+ *     injection.
+ */
+export interface ContinueHookSpecificOutput {
+    hookEventName?: string;
+    permissionDecision?: "allow" | "deny" | "ask";
+    permissionDecisionReason?: string;
+    decision?: {
+        behavior: "allow" | "deny";
+        updatedInput?: Record<string, unknown>;
+    };
+    additionalContext?: string;
+    message?: string;
+    [key: string]: unknown;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,83 @@
+{
+  "name": "@ory/continue",
+  "version": "0.10.0",
+  "description": "Ory plugin for Continue CLI (cn): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
+  "license": "Apache-2.0",
+  "homepage": "https://ory.com",
+  "keywords": [
+    "ory",
+    "continue",
+    "continuedev",
+    "cn",
+    "hooks",
+    "plugin",
+    "extension",
+    "identity",
+    "identity-management",
+    "iam",
+    "authentication",
+    "authorization",
+    "access-control",
+    "permissions",
+    "rbac",
+    "zanzibar",
+    "oauth",
+    "oauth2",
+    "openid-connect",
+    "oidc",
+    "session",
+    "mfa",
+    "sso",
+    "audit",
+    "audit-log",
+    "compliance",
+    "agent",
+    "ai-agent",
+    "agent-security",
+    "guardrails",
+    "llm",
+    "tracing",
+    "distributed-tracing",
+    "observability",
+    "kratos",
+    "keto",
+    "hydra"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "ory-continue": "dist/cli/main.js",
+    "ory-continue-hook": "dist/hook.js",
+    "ory-continue-setup": "dist/cli/setup.js"
+  },
+  "files": [
+    "dist",
+    "!dist/dev",
+    "!dist/**/*.tsbuildinfo"
+  ],
+  "dependencies": {
+    "@ory/argus": "0.10.0"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "dev": "node dist/dev/launcher.js"
+  }
+}