@promptvet/hook 0.1.0

package/README.md

@@ -0,0 +1,214 @@
+<div align="center">
+
+# PromptVet Hook
+
+### Every prompt scored in the background. Nothing blocked, nothing slowed down.
+
+A Claude Code hook (`PreToolUse` and `UserPromptSubmit`) that gives you a local, queryable prompt history and audit trail — observability for your AI agent, backed by SQLite, without touching enforcement.
+
+[![npm](https://img.shields.io/npm/v/%40promptvet%2Fhook?color=cb3837)](https://www.npmjs.com/package/@promptvet/hook)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](../../LICENSE)
+[![Node](https://img.shields.io/badge/node-22-339933?logo=node.js&logoColor=white)](https://nodejs.org)
+[![Diary mode](https://img.shields.io/badge/mode-diary%2C%20not%20a%20gate-blue)](#what-it-is)
+[![TDD Built](https://img.shields.io/badge/built%20with-TDD-blueviolet)](CLAUDE.md)
+
+*Wires [`promptvet-core`](../core/README.md)'s `scan` into Claude Code's hook system, so every prompt you (or Claude) submit gets scored automatically — and you can look back at the history any time.*
+
+</div>
+
+---
+
+## What It Is
+
+`@promptvet/hook` is a **diary, not a gate.** It listens on Claude Code's hook events, scans each prompt in the background with `promptvet-core`, and records the result to a local history database. It never blocks, never denies, never adds latency to what you were doing — `check` always exits `0`, no matter what it finds.
+
+If you want prompt quality *enforcement* (deny on critical issues before a tool fires), that's a separate, not-yet-built mode — see [promptvet-core's roadmap](../core/README.md#️-roadmap). This package is the observability half: **know what you've been sending, after the fact, without lifting a finger.**
+
+---
+
+## Quick Start
+
+```bash
+npm install --save-dev @promptvet/hook
+```
+
+Register it in `.claude/settings.local.json` for both hook events it supports:
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node /path/to/node_modules/@promptvet/hook/dist/cli/index.js check --adapter claude-code --store-raw-prompt"
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node /path/to/node_modules/@promptvet/hook/dist/cli/index.js check --adapter claude-code --store-raw-prompt"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+That's it — every prompt you type, and every prompt Claude hands to a subagent, now gets scanned and recorded automatically.
+
+```bash
+promptvet-hook report
+```
+
+---
+
+## How It Works
+
+```
+┌──────────────────────────────────────────────────────────────┐
+│  UserPromptSubmit  →  your own typed prompt, before Claude    │
+│  PreToolUse        →  Claude's own Task/Agent subagent calls  │
+└───────────────────────────┬────────────────────────────────────┘
+                             │  stdin: hook event JSON
+                             ▼
+┌──────────────────────────────────────────────────────────────┐
+│  check --adapter claude-code                                  │
+│  Extracts the real prompt text, spawns a detached background  │
+│  worker, and exits 0 immediately — the calling hook never     │
+│  waits on a scan.                                              │
+└───────────────────────────┬────────────────────────────────────┘
+                             │  (background, detached)
+                             ▼
+┌──────────────────────────────────────────────────────────────┐
+│  worker.js → scans with promptvet-core, writes one row to     │
+│  ~/.promptvet/history.db (SQLite, created on first use)        │
+└──────────────────────────────────────────────────────────────┘
+```
+
+**Two event types, one adapter.** `UserPromptSubmit` fires on *your own* typed prompts — its payload carries `prompt` at the top level. `PreToolUse` fires on Claude's own outgoing tool calls — it only carries a genuine natural-language prompt when Claude is dispatching a Task/Agent subagent (`tool_input.prompt`); every other tool call (`Bash`, `Read`, `Write`, …) is correctly ignored, since a shell command or file path isn't a prompt to critique. Both shapes are handled by the same `claude-code` adapter, branching on `hook_event_name`.
+
+**Not using Claude Code?** A generic `--field-path` adapter pulls the prompt from any dotted path in arbitrary JSON — useful for wiring in another tool's hook system once you've confirmed its payload shape. (Don't guess the shape — capture a real payload first, the same way this package's own Claude Code fixtures were built.)
+
+---
+
+## Commands
+
+### `check` — fired by the hook, not run by hand
+
+```bash
+promptvet-hook check --adapter claude-code [--store-raw-prompt]
+promptvet-hook check --field-path payload.text [--store-raw-prompt]
+```
+
+| Flag | Meaning |
+|---|---|
+| `--adapter claude-code` | Handles both `PreToolUse` and `UserPromptSubmit` Claude Code payload shapes |
+| `--field-path <path>` | Generic dotted-path extraction for other JSON payloads |
+| `--store-raw-prompt` | Store the actual prompt text, not just its hash (see `report --verbose` below) |
+
+Without `--store-raw-prompt`, only a hash of the prompt is stored — the history still tracks scores/verdicts/issues over time, just without the original text.
+
+### `report` — the aggregate summary (default)
+
+```bash
+promptvet-hook report
+promptvet-hook report --json
+```
+
+```
+PromptVet Hook Report
+─────────────────────
+Total checks: 42
+
+Verdicts:
+  Pass:  35
+  Fail:  5
+  Error: 2
+
+Average score: 81.4
+
+Top issue categories:
+  1. HEDGE_DETECTED           12
+  2. MISSING_FRAMEWORK        8
+  3. NO_ACTIONABLE_INTENT     5
+```
+
+### `report --verbose` — individual rows
+
+```bash
+promptvet-hook report --verbose
+promptvet-hook report --verbose --recent 20
+promptvet-hook report --verbose --json
+```
+
+Lists each check individually — timestamp, score, verdict, issue categories, and the prompt text itself — instead of the aggregate summary:
+
+```
+PromptVet Hook Report (verbose)
+────────────────────────────────
+
+1. 2026-07-04T12:05:00.000Z  score: 90.0  verdict: pass
+   issues: (none)
+   prompt: Write Vitest tests for the tax calculator in src/tax.ts
+
+2. 2026-07-04T12:00:00.000Z  score: 40.0  verdict: fail
+   issues: NO_ACTIONABLE_INTENT
+   prompt: fix it
+```
+
+| Flag | Meaning |
+|---|---|
+| `--recent N` | Cap output to the N most recent checks (ignored without `--verbose`) |
+| `--json` | Full, untruncated row data as a JSON array — for scripts/tooling |
+
+**Two display rules worth knowing:**
+
+- **No stored prompt?** If `--store-raw-prompt` wasn't set for a row, the prompt column shows `[hash-only, no raw prompt stored]` — never the hash itself, since a hash isn't human-readable and would just be noise.
+- **Giant or multi-line prompt?** The human-readable view truncates to the first line / first 200 characters, with a `[truncated, N chars total]` marker — so pasting a full terminal transcript as a prompt doesn't dump the whole thing back at you on every `report` call. `--json` is never truncated; it always returns the full text, for anything that needs to process it programmatically.
+
+---
+
+## History Storage
+
+A local SQLite database at `~/.promptvet/history.db`, created automatically on first `check`. Nothing leaves your machine — same zero-network philosophy as `promptvet-core`'s `scan`.
+
+| Column | Notes |
+|---|---|
+| `timestamp`, `source`, `cwd` | When, via which adapter, and from where |
+| `prompt_hash` | Always recorded |
+| `raw_prompt` | Only when `--store-raw-prompt` was passed; `NULL` otherwise |
+| `score`, `verdict`, `issue_categories` | From `promptvet-core`'s `scan` |
+
+---
+
+## Architecture
+
+| | |
+|---|---|
+| 🗒️ **Diary, not a gate** | `check` always exits `0` — a bad prompt is recorded, never blocked |
+| 🚫 **Never blocks the calling hook** | The scan + write happen in a detached background process; the hook returns instantly |
+| 🔒 **Local-first** | SQLite on disk, `promptvet-core`'s `scan` runs locally — nothing leaves your machine |
+| 🧪 **TDD-built** | Adapter fixtures are real captured payloads, not guessed shapes |
+| 📘 **TypeScript strict**, Node 22, ESM only | |
+
+---
+
+## Contributing
+
+Read [`CLAUDE.md`](../../CLAUDE.md) first — same TDD contract as `promptvet-core`, plus this package's own rules (the diary-safety guarantee, the `system`-role/role-capture rule doesn't apply here but the "verify real payloads, don't guess" discipline very much does).
+
+---
+
+<div align="center">
+
+**MIT Licensed** · Part of the [PromptVet](../core/README.md) family.
+
+</div>

package/dist/adapters/claudeCode.d.ts

@@ -0,0 +1,2 @@
+export declare function extractClaudeCodePrompt(data: unknown): string | undefined;
+//# sourceMappingURL=claudeCode.d.ts.map

package/dist/adapters/claudeCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCode.d.ts","sourceRoot":"","sources":["../../src/adapters/claudeCode.ts"],"names":[],"mappings":"AAcA,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAmBzE"}

package/dist/adapters/claudeCode.js

@@ -0,0 +1,31 @@
+// Two event shapes share this one adapter, branched on hook_event_name:
+//
+// - UserPromptSubmit: the actual hook point for the user's own typed prompts, fired
+//   before Claude processes them. `prompt` sits at the payload's top level (verified
+//   against a real captured payload, see claudeCode.test.ts fixtures) — PreToolUse
+//   never sees these at all, it only sees Claude's own outgoing tool calls.
+// - PreToolUse: scoped to tool_input.prompt only (Task/Agent-style subagent calls) —
+//   the one case there that's genuinely a natural-language prompt, empirically
+//   confirmed against a real captured payload. Earlier versions also fell back to
+//   tool_input.command/description for other tools (e.g. Bash), but those are the
+//   agent's own terse action summaries, not prompts — scanning them with
+//   promptvet-core's dev-prompt heuristics produced false failures (e.g.
+//   NO_ACTIONABLE_INTENT on a plain `echo "hello world"` call), confirmed via a live
+//   end-to-end test. Non-prompt tool calls now correctly yield undefined (no scan).
+export function extractClaudeCodePrompt(data) {
+    if (data === null || typeof data !== 'object') {
+        return undefined;
+    }
+    const record = data;
+    if (record['hook_event_name'] === 'UserPromptSubmit') {
+        const prompt = record['prompt'];
+        return typeof prompt === 'string' && prompt.length > 0 ? prompt : undefined;
+    }
+    const toolInput = record['tool_input'];
+    if (toolInput === null || typeof toolInput !== 'object') {
+        return undefined;
+    }
+    const prompt = toolInput['prompt'];
+    return typeof prompt === 'string' && prompt.length > 0 ? prompt : undefined;
+}
+//# sourceMappingURL=claudeCode.js.map

package/dist/adapters/claudeCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCode.js","sourceRoot":"","sources":["../../src/adapters/claudeCode.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,oFAAoF;AACpF,qFAAqF;AACrF,mFAAmF;AACnF,4EAA4E;AAC5E,qFAAqF;AACrF,+EAA+E;AAC/E,kFAAkF;AAClF,kFAAkF;AAClF,yEAAyE;AACzE,yEAAyE;AACzE,qFAAqF;AACrF,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACnD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAA;IAE9C,IAAI,MAAM,CAAC,iBAAiB,CAAC,KAAK,kBAAkB,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7E,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,MAAM,GAAI,SAAqC,CAAC,QAAQ,CAAC,CAAA;IAC/D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7E,CAAC"}

package/dist/adapters/fieldPath.d.ts

@@ -0,0 +1,2 @@
+export declare function extractByFieldPath(data: unknown, path: string): string | undefined;
+//# sourceMappingURL=fieldPath.d.ts.map

package/dist/adapters/fieldPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPath.d.ts","sourceRoot":"","sources":["../../src/adapters/fieldPath.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAelF"}

package/dist/adapters/fieldPath.js

@@ -0,0 +1,15 @@
+export function extractByFieldPath(data, path) {
+    const segments = path
+        .replace(/\[(\d+)\]/g, '.$1')
+        .split('.')
+        .filter((segment) => segment.length > 0);
+    let current = data;
+    for (const segment of segments) {
+        if (current === null || typeof current !== 'object') {
+            return undefined;
+        }
+        current = current[segment];
+    }
+    return typeof current === 'string' ? current : undefined;
+}
+//# sourceMappingURL=fieldPath.js.map

package/dist/adapters/fieldPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPath.js","sourceRoot":"","sources":["../../src/adapters/fieldPath.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,IAAY;IAC5D,MAAM,QAAQ,GAAG,IAAI;SAClB,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAE1C,IAAI,OAAO,GAAY,IAAI,CAAA;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAA;IACzD,CAAC;IAED,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC"}

package/dist/cli/check.d.ts

@@ -0,0 +1,7 @@
+export interface CheckOptions {
+    adapter?: string;
+    fieldPath?: string;
+    storeRawPrompt?: boolean;
+}
+export declare function handleCheck(stdinInput: string, options: CheckOptions): number;
+//# sourceMappingURL=check.d.ts.map

package/dist/cli/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/cli/check.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAID,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,CA6B7E"}

package/dist/cli/check.js

@@ -0,0 +1,49 @@
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { extractClaudeCodePrompt } from '../adapters/claudeCode.js';
+import { extractByFieldPath } from '../adapters/fieldPath.js';
+const WORKER_PATH = fileURLToPath(new URL('../worker.js', import.meta.url));
+export function handleCheck(stdinInput, options) {
+    let data;
+    try {
+        data = JSON.parse(stdinInput);
+    }
+    catch {
+        return 0;
+    }
+    const prompt = extractPrompt(data, options);
+    if (prompt === undefined || prompt.length === 0) {
+        return 0;
+    }
+    const cwd = extractCwd(data) ?? process.cwd();
+    const source = options.adapter === 'claude-code' ? 'claude-code' : 'field-path';
+    const payload = {
+        prompt,
+        source,
+        cwd,
+        storeRawPrompt: options.storeRawPrompt ?? false,
+    };
+    const child = spawn(process.execPath, [WORKER_PATH, JSON.stringify(payload)], {
+        detached: true,
+        stdio: 'ignore',
+    });
+    child.unref();
+    return 0;
+}
+function extractPrompt(data, options) {
+    if (options.adapter === 'claude-code') {
+        return extractClaudeCodePrompt(data);
+    }
+    if (options.fieldPath) {
+        return extractByFieldPath(data, options.fieldPath);
+    }
+    return undefined;
+}
+function extractCwd(data) {
+    if (data === null || typeof data !== 'object') {
+        return undefined;
+    }
+    const cwd = data['cwd'];
+    return typeof cwd === 'string' ? cwd : undefined;
+}
+//# sourceMappingURL=check.js.map

package/dist/cli/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/cli/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAQ7D,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAE3E,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,OAAqB;IACnE,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAA;IAC/E,MAAM,OAAO,GAAG;QACd,MAAM;QACN,MAAM;QACN,GAAG;QACH,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;KAChD,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE;QAC5E,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,aAAa,CAAC,IAAa,EAAE,OAAqB;IACzD,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACtC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,GAAG,GAAI,IAAgC,CAAC,KAAK,CAAC,CAAA;IACpD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { type CheckOptions } from './check.js';
+export declare function parseArgs(argv: string[]): CheckOptions;
+export declare function readStdin(stream?: NodeJS.ReadableStream): Promise<string>;
+export declare function runCheckCommand(argv: string[], stream?: NodeJS.ReadableStream): Promise<number>;
+export interface ReportCommandResult {
+    exitCode: number;
+    output: string;
+}
+export declare function runReportCommand(argv: string[], dbPath: string): ReportCommandResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAO3D,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAetD;AAED,wBAAgB,SAAS,CAAC,MAAM,GAAE,MAAM,CAAC,cAA8B,GAAG,OAAO,CAAC,MAAM,CAAC,CAYxF;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,GAAE,MAAM,CAAC,cAA8B,GAAG,OAAO,CAAC,MAAM,CAAC,CAQpH;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;CACf;AAYD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAiBpF"}

package/dist/cli/index.js

@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+import { pathToFileURL } from 'node:url';
+import { handleCheck } from './check.js';
+import { summarizeHistory } from '../report/summarize.js';
+import { formatReport } from '../report/formatReport.js';
+import { getVerboseHistory } from '../report/verboseHistory.js';
+import { formatVerboseReport } from '../report/formatVerboseReport.js';
+import { DEFAULT_DB_PATH } from '../history/dbPath.js';
+export function parseArgs(argv) {
+    const options = {};
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === '--adapter') {
+            const value = argv[++i];
+            if (value !== undefined)
+                options.adapter = value;
+        }
+        else if (arg === '--field-path') {
+            const value = argv[++i];
+            if (value !== undefined)
+                options.fieldPath = value;
+        }
+        else if (arg === '--store-raw-prompt') {
+            options.storeRawPrompt = true;
+        }
+    }
+    return options;
+}
+export function readStdin(stream = process.stdin) {
+    return new Promise((resolve) => {
+        let data = '';
+        stream.setEncoding('utf-8');
+        stream.on('data', (chunk) => {
+            data += chunk;
+        });
+        stream.on('end', () => resolve(data));
+        // Never let a stdin stream error propagate as a failure — check's diary
+        // guarantee is that it always exits 0, no matter what goes wrong internally.
+        stream.on('error', () => resolve(data));
+    });
+}
+export async function runCheckCommand(argv, stream = process.stdin) {
+    try {
+        const options = parseArgs(argv);
+        const stdin = await readStdin(stream);
+        return handleCheck(stdin, options);
+    }
+    catch {
+        return 0;
+    }
+}
+function parseRecentLimit(argv) {
+    const index = argv.indexOf('--recent');
+    if (index === -1)
+        return undefined;
+    const parsed = Number.parseInt(argv[index + 1] ?? '', 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
+}
+// Unlike check, report is not covered by the diary-safety guarantee — it's a normal
+// informational command, so a genuine failure (e.g. a corrupted db) fails loud with
+// exit 1 rather than being swallowed.
+export function runReportCommand(argv, dbPath) {
+    try {
+        const json = argv.includes('--json');
+        if (argv.includes('--verbose')) {
+            const entries = getVerboseHistory(dbPath, parseRecentLimit(argv));
+            const output = json ? JSON.stringify(entries) + '\n' : formatVerboseReport(entries);
+            return { exitCode: 0, output };
+        }
+        const summary = summarizeHistory(dbPath);
+        const output = json ? JSON.stringify(summary) + '\n' : formatReport(summary);
+        return { exitCode: 0, output };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { exitCode: 1, output: `Failed to read history: ${message}\n` };
+    }
+}
+const USAGE = 'Usage: promptvet-hook check [--adapter <name>] [--field-path <path>] [--store-raw-prompt]\n' +
+    '       promptvet-hook report [--json] [--verbose [--recent <N>]]\n';
+async function main() {
+    const [command, ...rest] = process.argv.slice(2);
+    if (command === 'check') {
+        const exitCode = await runCheckCommand(rest);
+        process.exit(exitCode);
+    }
+    if (command === 'report') {
+        const { exitCode, output } = runReportCommand(rest, DEFAULT_DB_PATH);
+        if (exitCode === 0) {
+            process.stdout.write(output);
+        }
+        else {
+            process.stderr.write(output);
+        }
+        process.exit(exitCode);
+    }
+    process.stderr.write(USAGE);
+    process.exit(1);
+}
+// Guard so importing this module (e.g. index.test.ts importing parseArgs) never
+// triggers process.exit() — main() only runs when this file is the entry point.
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    await main();
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAA;QAClD,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAA;QACpD,CAAC;aAAM,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;YACxC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAA;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,SAAgC,OAAO,CAAC,KAAK;IACrE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAA;QACf,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACrC,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc,EAAE,SAAgC,OAAO,CAAC,KAAK;IACjG,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAA;QACrC,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAOD,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IACzD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACnE,CAAC;AAED,oFAAoF;AACpF,oFAAoF;AACpF,sCAAsC;AACtC,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,MAAc;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEpC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;YACjE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;YACnF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;QAChC,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAC5E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,OAAO,IAAI,EAAE,CAAA;IACxE,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GACT,6FAA6F;IAC7F,oEAAoE,CAAA;AAEtE,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEhD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QACpE,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,MAAM,IAAI,EAAE,CAAA;AACd,CAAC"}

package/dist/history/db.d.ts

@@ -0,0 +1,14 @@
+import Database from 'better-sqlite3';
+export interface HistoryEntry {
+    timestamp: string;
+    source: string;
+    cwd: string;
+    promptHash: string;
+    rawPrompt: string | null;
+    score: number | null;
+    verdict: 'pass' | 'fail' | 'error';
+    issueCategories: string[];
+}
+export declare function openHistoryDb(dbPath: string): Database.Database;
+export declare function insertHistoryEntry(db: Database.Database, entry: HistoryEntry): void;
+//# sourceMappingURL=db.d.ts.map

package/dist/history/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/history/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAIrC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAClC,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAiB/D;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAcnF"}

package/dist/history/db.js

@@ -0,0 +1,35 @@
+import Database from 'better-sqlite3';
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+export function openHistoryDb(dbPath) {
+    mkdirSync(dirname(dbPath), { recursive: true });
+    const db = new Database(dbPath);
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS history (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      timestamp TEXT NOT NULL,
+      source TEXT NOT NULL,
+      cwd TEXT NOT NULL,
+      prompt_hash TEXT NOT NULL,
+      raw_prompt TEXT,
+      score REAL,
+      verdict TEXT NOT NULL,
+      issue_categories TEXT NOT NULL
+    )
+  `);
+    return db;
+}
+export function insertHistoryEntry(db, entry) {
+    db.prepare(`INSERT INTO history (timestamp, source, cwd, prompt_hash, raw_prompt, score, verdict, issue_categories)
+     VALUES (@timestamp, @source, @cwd, @promptHash, @rawPrompt, @score, @verdict, @issueCategories)`).run({
+        timestamp: entry.timestamp,
+        source: entry.source,
+        cwd: entry.cwd,
+        promptHash: entry.promptHash,
+        rawPrompt: entry.rawPrompt,
+        score: entry.score,
+        verdict: entry.verdict,
+        issueCategories: JSON.stringify(entry.issueCategories),
+    });
+}
+//# sourceMappingURL=db.js.map

package/dist/history/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/history/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAanC,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;GAYP,CAAC,CAAA;IACF,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAqB,EAAE,KAAmB;IAC3E,EAAE,CAAC,OAAO,CACR;qGACiG,CAClG,CAAC,GAAG,CAAC;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC;KACvD,CAAC,CAAA;AACJ,CAAC"}

package/dist/history/dbPath.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_DB_PATH: string;
+//# sourceMappingURL=dbPath.d.ts.map

package/dist/history/dbPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dbPath.d.ts","sourceRoot":"","sources":["../../src/history/dbPath.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,eAAe,QAA8C,CAAA"}

package/dist/history/dbPath.js

@@ -0,0 +1,4 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export const DEFAULT_DB_PATH = join(homedir(), '.promptvet', 'history.db');
+//# sourceMappingURL=dbPath.js.map

package/dist/history/dbPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dbPath.js","sourceRoot":"","sources":["../../src/history/dbPath.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAA"}

package/dist/history/hashPrompt.d.ts

@@ -0,0 +1,2 @@
+export declare function hashPrompt(prompt: string): string;
+//# sourceMappingURL=hashPrompt.d.ts.map

package/dist/history/hashPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashPrompt.d.ts","sourceRoot":"","sources":["../../src/history/hashPrompt.ts"],"names":[],"mappings":"AAEA,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/history/hashPrompt.js

@@ -0,0 +1,5 @@
+import { createHash } from 'node:crypto';
+export function hashPrompt(prompt) {
+    return createHash('sha256').update(prompt).digest('hex');
+}
+//# sourceMappingURL=hashPrompt.js.map

package/dist/history/hashPrompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashPrompt.js","sourceRoot":"","sources":["../../src/history/hashPrompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1D,CAAC"}

package/dist/report/formatReport.d.ts

@@ -0,0 +1,3 @@
+import type { ReportSummary } from './summarize.js';
+export declare function formatReport(summary: ReportSummary): string;
+//# sourceMappingURL=formatReport.d.ts.map

package/dist/report/formatReport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatReport.d.ts","sourceRoot":"","sources":["../../src/report/formatReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEnD,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CA0B3D"}

package/dist/report/formatReport.js

@@ -0,0 +1,25 @@
+export function formatReport(summary) {
+    if (summary.totalChecks === 0) {
+        return 'PromptVet Hook Report\n─────────────────────\nNo history recorded yet.\n';
+    }
+    const lines = [];
+    lines.push('PromptVet Hook Report');
+    lines.push('─────────────────────');
+    lines.push(`Total checks: ${summary.totalChecks}`);
+    lines.push('');
+    lines.push('Verdicts:');
+    lines.push(`  Pass:  ${summary.verdictCounts.pass}`);
+    lines.push(`  Fail:  ${summary.verdictCounts.fail}`);
+    lines.push(`  Error: ${summary.verdictCounts.error}`);
+    lines.push('');
+    lines.push(`Average score: ${summary.averageScore !== null ? summary.averageScore.toFixed(1) : 'N/A'}`);
+    if (summary.topIssueCategories.length > 0) {
+        lines.push('');
+        lines.push('Top issue categories:');
+        summary.topIssueCategories.slice(0, 5).forEach((issue, index) => {
+            lines.push(`  ${index + 1}. ${issue.code.padEnd(24)} ${issue.count}`);
+        });
+    }
+    return lines.join('\n') + '\n';
+}
+//# sourceMappingURL=formatReport.js.map

package/dist/report/formatReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatReport.js","sourceRoot":"","sources":["../../src/report/formatReport.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,IAAI,OAAO,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,0EAA0E,CAAA;IACnF,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACnC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACnC,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACvB,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAA;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IAEvG,IAAI,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QACnC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9D,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC"}

package/dist/report/formatVerboseReport.d.ts

@@ -0,0 +1,3 @@
+import type { VerboseHistoryEntry } from './verboseHistory.js';
+export declare function formatVerboseReport(entries: VerboseHistoryEntry[]): string;
+//# sourceMappingURL=formatVerboseReport.d.ts.map

package/dist/report/formatVerboseReport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatVerboseReport.d.ts","sourceRoot":"","sources":["../../src/report/formatVerboseReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAmB9D,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAoB1E"}

package/dist/report/formatVerboseReport.js

@@ -0,0 +1,31 @@
+// Display-only cap — a pasted terminal transcript or other giant paste otherwise
+// gets echoed back in full every time the report is checked. JSON output is
+// unaffected: --verbose --json always returns the full, untruncated promptText.
+const MAX_PROMPT_DISPLAY_LENGTH = 200;
+function truncatePromptForDisplay(promptText) {
+    const firstLine = promptText.split('\n')[0] ?? '';
+    const isMultiLine = promptText.includes('\n');
+    const truncatedLine = firstLine.length > MAX_PROMPT_DISPLAY_LENGTH ? firstLine.slice(0, MAX_PROMPT_DISPLAY_LENGTH) : firstLine;
+    if (!isMultiLine && truncatedLine === promptText) {
+        return promptText;
+    }
+    return `${truncatedLine}… [truncated, ${promptText.length} chars total]`;
+}
+export function formatVerboseReport(entries) {
+    if (entries.length === 0) {
+        return 'PromptVet Hook Report (verbose)\n────────────────────────────────\nNo history recorded yet.\n';
+    }
+    const lines = [];
+    lines.push('PromptVet Hook Report (verbose)');
+    lines.push('────────────────────────────────');
+    entries.forEach((entry, index) => {
+        const score = entry.score !== null ? entry.score.toFixed(1) : 'N/A';
+        const issues = entry.issueCategories.length > 0 ? entry.issueCategories.join(', ') : '(none)';
+        lines.push('');
+        lines.push(`${index + 1}. ${entry.timestamp}  score: ${score}  verdict: ${entry.verdict}`);
+        lines.push(`   issues: ${issues}`);
+        lines.push(`   prompt: ${truncatePromptForDisplay(entry.promptText)}`);
+    });
+    return lines.join('\n') + '\n';
+}
+//# sourceMappingURL=formatVerboseReport.js.map

package/dist/report/formatVerboseReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatVerboseReport.js","sourceRoot":"","sources":["../../src/report/formatVerboseReport.ts"],"names":[],"mappings":"AAEA,iFAAiF;AACjF,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,yBAAyB,GAAG,GAAG,CAAA;AAErC,SAAS,wBAAwB,CAAC,UAAkB;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAE9H,IAAI,CAAC,WAAW,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,OAAO,GAAG,aAAa,iBAAiB,UAAU,CAAC,MAAM,eAAe,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,+FAA+F,CAAA;IACxG,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC7C,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAE9C,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACnE,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;QAE7F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,SAAS,YAAY,KAAK,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC1F,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,EAAE,CAAC,CAAA;QAClC,KAAK,CAAC,IAAI,CAAC,cAAc,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC"}

package/dist/report/summarize.d.ts

@@ -0,0 +1,15 @@
+export interface ReportSummary {
+    totalChecks: number;
+    verdictCounts: {
+        pass: number;
+        fail: number;
+        error: number;
+    };
+    averageScore: number | null;
+    topIssueCategories: Array<{
+        code: string;
+        count: number;
+    }>;
+}
+export declare function summarizeHistory(dbPath: string): ReportSummary;
+//# sourceMappingURL=summarize.d.ts.map

package/dist/report/summarize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summarize.d.ts","sourceRoot":"","sources":["../../src/report/summarize.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,kBAAkB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC3D;AAQD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAqC9D"}

package/dist/report/summarize.js

@@ -0,0 +1,36 @@
+import { openHistoryDb } from '../history/db.js';
+export function summarizeHistory(dbPath) {
+    const db = openHistoryDb(dbPath);
+    try {
+        const rows = db.prepare('SELECT score, verdict, issue_categories FROM history').all();
+        const verdictCounts = { pass: 0, fail: 0, error: 0 };
+        const scores = [];
+        const issueCounts = new Map();
+        for (const row of rows) {
+            if (row.verdict === 'pass' || row.verdict === 'fail' || row.verdict === 'error') {
+                verdictCounts[row.verdict]++;
+            }
+            if (row.score !== null) {
+                scores.push(row.score);
+            }
+            const categories = JSON.parse(row.issue_categories);
+            for (const code of categories) {
+                issueCounts.set(code, (issueCounts.get(code) ?? 0) + 1);
+            }
+        }
+        const averageScore = scores.length > 0 ? scores.reduce((a, b) => a + b, 0) / scores.length : null;
+        const topIssueCategories = [...issueCounts.entries()]
+            .map(([code, count]) => ({ code, count }))
+            .sort((a, b) => b.count - a.count || a.code.localeCompare(b.code));
+        return {
+            totalChecks: rows.length,
+            verdictCounts,
+            averageScore,
+            topIssueCategories,
+        };
+    }
+    finally {
+        db.close();
+    }
+}
+//# sourceMappingURL=summarize.js.map

package/dist/report/summarize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summarize.js","sourceRoot":"","sources":["../../src/report/summarize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAehD,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,EAAkB,CAAA;QAErG,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;QACpD,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;QAE7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAChF,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAA;YAC9B,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACxB,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa,CAAA;YAC/D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;QAEjG,MAAM,kBAAkB,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAEpE,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,aAAa;YACb,YAAY;YACZ,kBAAkB;SACnB,CAAA;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC"}

package/dist/report/verboseHistory.d.ts

@@ -0,0 +1,9 @@
+export interface VerboseHistoryEntry {
+    timestamp: string;
+    score: number | null;
+    verdict: 'pass' | 'fail' | 'error';
+    issueCategories: string[];
+    promptText: string;
+}
+export declare function getVerboseHistory(dbPath: string, limit?: number): VerboseHistoryEntry[];
+//# sourceMappingURL=verboseHistory.d.ts.map

package/dist/report/verboseHistory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verboseHistory.d.ts","sourceRoot":"","sources":["../../src/report/verboseHistory.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAClC,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAYD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAkBvF"}

package/dist/report/verboseHistory.js

@@ -0,0 +1,21 @@
+import { openHistoryDb } from '../history/db.js';
+const NO_RAW_PROMPT_PLACEHOLDER = '[hash-only, no raw prompt stored]';
+export function getVerboseHistory(dbPath, limit) {
+    const db = openHistoryDb(dbPath);
+    try {
+        const query = 'SELECT timestamp, raw_prompt, score, verdict, issue_categories FROM history ORDER BY id DESC' +
+            (limit !== undefined ? ' LIMIT @limit' : '');
+        const rows = (limit !== undefined ? db.prepare(query).all({ limit }) : db.prepare(query).all());
+        return rows.map((row) => ({
+            timestamp: row.timestamp,
+            score: row.score,
+            verdict: row.verdict,
+            issueCategories: JSON.parse(row.issue_categories),
+            promptText: row.raw_prompt ?? NO_RAW_PROMPT_PLACEHOLDER,
+        }));
+    }
+    finally {
+        db.close();
+    }
+}
+//# sourceMappingURL=verboseHistory.js.map

package/dist/report/verboseHistory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verboseHistory.js","sourceRoot":"","sources":["../../src/report/verboseHistory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAUhD,MAAM,yBAAyB,GAAG,mCAAmC,CAAA;AAUrE,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,KAAc;IAC9D,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GACT,8FAA8F;YAC9F,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAiB,CAAA;QAE/G,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,OAAoC;YACjD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;YAC7D,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,yBAAyB;SACxD,CAAC,CAAC,CAAA;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,8 @@
+export interface WorkerPayload {
+    prompt: string;
+    source: string;
+    cwd: string;
+    storeRawPrompt: boolean;
+}
+export declare function runWorker(payload: WorkerPayload, dbPath: string): Promise<void>;
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,OAAO,CAAA;CACxB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCrF"}

package/dist/worker.js

@@ -0,0 +1,43 @@
+import { scan } from 'promptvet-core';
+import { pathToFileURL } from 'node:url';
+import { hashPrompt } from './history/hashPrompt.js';
+import { openHistoryDb, insertHistoryEntry } from './history/db.js';
+import { DEFAULT_DB_PATH } from './history/dbPath.js';
+export async function runWorker(payload, dbPath) {
+    const result = await scan(payload.prompt);
+    const rawPrompt = payload.storeRawPrompt ? payload.prompt : null;
+    const promptHash = hashPrompt(payload.prompt);
+    const entry = 'error' in result
+        ? {
+            timestamp: new Date().toISOString(),
+            source: payload.source,
+            cwd: payload.cwd,
+            promptHash,
+            rawPrompt,
+            score: null,
+            verdict: 'error',
+            issueCategories: [result.code],
+        }
+        : {
+            timestamp: new Date().toISOString(),
+            source: payload.source,
+            cwd: payload.cwd,
+            promptHash,
+            rawPrompt,
+            score: result.overall,
+            verdict: result.issues.some((issue) => issue.severity === 'critical') ? 'fail' : 'pass',
+            issueCategories: result.issues.map((issue) => issue.code),
+        };
+    const db = openHistoryDb(dbPath);
+    try {
+        insertHistoryEntry(db, entry);
+    }
+    finally {
+        db.close();
+    }
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    const payload = JSON.parse(process.argv[2] ?? '{}');
+    await runWorker(payload, DEFAULT_DB_PATH);
+}
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAqB,MAAM,iBAAiB,CAAA;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AASrD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE,MAAc;IACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IAChE,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,KAAK,GACT,OAAO,IAAI,MAAM;QACf,CAAC,CAAC;YACE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU;YACV,SAAS;YACT,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;SAC/B;QACH,CAAC,CAAC;YACE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU;YACV,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACvF,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1D,CAAA;IAEP,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC;QACH,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAkB,CAAA;IACpE,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;AAC3C,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@promptvet/hook",
+  "version": "0.1.0",
+  "description": "Diary-mode hook: scans prompts with promptvet-core in the background and records results to local history. Not a gate.",
+  "keywords": [
+    "claude-code",
+    "claude-code-hook",
+    "pretooluse",
+    "userpromptsubmit",
+    "prompt-history",
+    "prompt-audit-trail",
+    "observability",
+    "background-scan",
+    "llm",
+    "ai-agent",
+    "sqlite",
+    "cli"
+  ],
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "promptvet-hook": "dist/cli/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "better-sqlite3": "^12.11.1",
+    "promptvet-core": "^1.0.8"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^25.9.3",
+    "@vitest/coverage-v8": "^2.1.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.1.0"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}