@ra3orblade/swarm 0.14.0 → 0.15.0

package/dist/swarm.js

@@ -196,10 +196,13 @@ var init_adapters = __esm(() => {
   init_updates();
   init_db();
 });
+// packages/core/src/prompt.ts
+var init_prompt = () => {};
 
 // packages/core/src/adapters/claude-code/hooks.ts
-var HOOK_EVENTS;
+var HOOK_EVENTS, OWN_SUMMARY;
 var init_hooks = __esm(() => {
+  init_prompt();
   HOOK_EVENTS = [
     "SessionStart",
     "UserPromptSubmit",
@@ -211,8 +214,71 @@ var init_hooks = __esm(() => {
     "SessionEnd",
     "Notification",
     "PreCompact",
-    "PermissionRequest"
+    "PermissionRequest",
+    "PostToolUseFailure"
   ];
+  OWN_SUMMARY = new Set([
+    "Bash",
+    "Read",
+    "Edit",
+    "Write",
+    "MultiEdit",
+    "NotebookEdit",
+    "Glob",
+    "Grep",
+    "Agent",
+    "Task",
+    "WebFetch",
+    "WebSearch",
+    "AskUserQuestion"
+  ]);
+});
+
+// packages/core/src/guards.ts
+var FETCHER, INTERP;
+var init_guards = __esm(() => {
+  FETCHER = String.raw`\b(curl|wget|fetch|http|xh)\b`;
+  INTERP = String.raw`(sudo\s+(-\S+\s+)*)?(env\s+(\w+=\S+\s+)*)?(ba|z|k|da|fi)?sh|python[0-9.]*|node|perl|ruby|php|iex`;
+});
+
+// packages/core/src/rules.ts
+var LIVE_WINDOW_MS, customRe, WRITE_TOOLS;
+var init_rules = __esm(() => {
+  init_guards();
+  LIVE_WINDOW_MS = 10 * 60000;
+  customRe = new WeakMap;
+  WRITE_TOOLS = new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
+});
+
+// packages/core/src/policy.ts
+function hookCoverage(settings) {
+  const hooks = settings && typeof settings === "object" && !Array.isArray(settings) ? settings.hooks : undefined;
+  const missing = [];
+  const short = [];
+  for (const ev of HOOK_EVENTS) {
+    const groups = Array.isArray(hooks?.[ev]) ? hooks?.[ev] : [];
+    const ours = groups.flatMap((g) => {
+      const list = g?.hooks;
+      return Array.isArray(list) ? list.filter((h) => hookIsOurs(h)) : [];
+    });
+    if (!ours.length)
+      missing.push(ev);
+    else if (ours.every((h) => typeof h.timeout === "number" && h.timeout < MIN_HOOK_TIMEOUT_S))
+      short.push(ev);
+  }
+  return { missing, short, complete: !missing.length && !short.length };
+}
+var HOOK_MARK = "swarm-hook", hookIsOurs = (h) => typeof h.command === "string" && (h.command.includes(HOOK_MARK) || h.command.includes("/packages/hook/src/bin.ts")), MIN_HOOK_TIMEOUT_S = 5;
+var init_policy = __esm(() => {
+  init_hooks();
+  init_rules();
+});
+
+// packages/core/src/agenthooks.ts
+var CAN_ASK;
+var init_agenthooks = __esm(() => {
+  init_policy();
+  CAN_ASK = new Set(["claude-code"]);
 });
 
 // packages/core/src/art.ts
@@ -562,6 +628,19 @@ function validate(c) {
         return typeof w === "string" && /^https?:\/\//.test(w.trim()) ? w.trim() : null;
       })()
     },
+    otel: (() => {
+      const o = c.otel ?? {};
+      const e = typeof o.endpoint === "string" ? o.endpoint.trim().replace(/\/+$/, "") : "";
+      const h = o.headers && typeof o.headers === "object" ? o.headers : {};
+      const n = Number(o.interval);
+      return {
+        endpoint: /^https?:\/\//.test(e) ? e : null,
+        headers: Object.fromEntries(Object.entries(h).filter((kv) => typeof kv[1] === "string")),
+        compat: o.compat === "claude-code" ? "claude-code" : "genai",
+        include_content: o.include_content === true,
+        interval: Number.isFinite(n) && n >= 5 && n <= 3600 ? Math.round(n) : 30
+      };
+    })(),
     messages: {
       wake: c.messages?.wake !== false
     },
@@ -628,6 +707,11 @@ function validate(c) {
       no_verify: rewriteMode(c.rules?.no_verify, "off"),
       dry_run_first: rewriteMode(c.rules?.dry_run_first, "off"),
       custom: parseCustomRules(c.rules?.custom),
+      destructive_fs: mode(c.rules?.destructive_fs, "off"),
+      destructive_infra: mode(c.rules?.destructive_infra, "off"),
+      pipe_to_shell: mode(c.rules?.pipe_to_shell, "off"),
+      secrets: mode(c.rules?.secrets, "off"),
+      config_tamper: mode(c.rules?.config_tamper, "off"),
       collision_context: c.rules?.collision_context !== false,
       collision_window: (() => {
         const n = Number(c.rules?.collision_window);
@@ -737,6 +821,7 @@ var init_config = __esm(() => {
     budget: { daily: null, weekly: null, warn_at: 0.8, on_exceed: "warn", window_warn_at: 0.8 },
     models: { allow: [] },
     notify: { webhook: null },
+    otel: { endpoint: null, headers: {}, compat: "genai", include_content: false, interval: 30 },
     messages: { wake: true },
     codify: { target: "both" },
     broker: { interactive_wait: 30 },
@@ -763,6 +848,11 @@ var init_config = __esm(() => {
       no_verify: "off",
       dry_run_first: "off",
       custom: [],
+      destructive_fs: "off",
+      destructive_infra: "off",
+      pipe_to_shell: "off",
+      secrets: "off",
+      config_tamper: "off",
       collision_context: true,
       collision_window: 15,
       protected: { ports: [] }
@@ -777,14 +867,6 @@ var init_context = () => {};
 
 // packages/core/src/dag.ts
 var init_dag = () => {};
-// packages/core/src/rules.ts
-var LIVE_WINDOW_MS, customRe, WRITE_TOOLS;
-var init_rules = __esm(() => {
-  LIVE_WINDOW_MS = 10 * 60000;
-  customRe = new WeakMap;
-  WRITE_TOOLS = new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
-});
-
 // packages/core/src/dryrun.ts
 var init_dryrun = __esm(() => {
   init_rules();
@@ -825,6 +907,7 @@ var init_hygiene = __esm(() => {
 // packages/core/src/ledger.ts
 var EDIT_TOOLS;
 var init_ledger = __esm(() => {
+  init_prompt();
   EDIT_TOOLS = new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
 });
 // packages/core/src/lessons-apply.ts
@@ -839,49 +922,31 @@ var init_lineage = __esm(() => {
 var init_mcphealth = __esm(() => {
   init_gatehealth();
 });
-
 // packages/core/src/memory.ts
 var init_memory = () => {};
+// packages/core/src/otel.ts
+var init_otel = () => {};
+
 // packages/core/src/outcomes.ts
 var DEFAULT_BRANCHES;
 var init_outcomes = __esm(() => {
   DEFAULT_BRANCHES = new Set(["main", "master", "develop", "trunk"]);
 });
-// packages/core/src/policy.ts
-function hookCoverage(settings) {
-  const hooks = settings && typeof settings === "object" && !Array.isArray(settings) ? settings.hooks : undefined;
-  const missing = [];
-  const short = [];
-  for (const ev of HOOK_EVENTS) {
-    const groups = Array.isArray(hooks?.[ev]) ? hooks?.[ev] : [];
-    const ours = groups.flatMap((g) => {
-      const list = g?.hooks;
-      return Array.isArray(list) ? list.filter((h) => hookIsOurs(h)) : [];
-    });
-    if (!ours.length)
-      missing.push(ev);
-    else if (ours.every((h) => typeof h.timeout === "number" && h.timeout < MIN_HOOK_TIMEOUT_S))
-      short.push(ev);
-  }
-  return { missing, short, complete: !missing.length && !short.length };
-}
-var HOOK_MARK = "swarm-hook", hookIsOurs = (h) => typeof h.command === "string" && (h.command.includes(HOOK_MARK) || h.command.includes("/packages/hook/src/bin.ts")), MIN_HOOK_TIMEOUT_S = 5;
-var init_policy = __esm(() => {
-  init_hooks();
-  init_rules();
-});
 
 // packages/core/src/pricing.ts
 var init_pricing = () => {};
 // packages/core/src/provenance.ts
 var init_provenance = () => {};
 // packages/core/src/quota.ts
-var BURN_MIN_SPAN_MS;
+var BURN_MIN_SPAN_MS, BURN_LOOKBACK_MS;
 var init_quota = __esm(() => {
   BURN_MIN_SPAN_MS = 10 * 60000;
+  BURN_LOOKBACK_MS = 60 * 60000;
 });
 // packages/core/src/security.ts
-var init_security = () => {};
+var init_security = __esm(() => {
+  init_rules();
+});
 
 // packages/core/src/stall.ts
 var init_stall = () => {};
@@ -986,6 +1051,7 @@ var init_src2 = __esm(() => {
   init_actor();
   init_adapters();
   init_hooks();
+  init_agenthooks();
   init_art();
   init_audit();
   init_budget();
@@ -1003,9 +1069,11 @@ var init_src2 = __esm(() => {
   init_lineage();
   init_mcphealth();
   init_memory();
+  init_otel();
   init_outcomes();
   init_policy();
   init_pricing();
+  init_prompt();
   init_provenance();
   init_quota();
   init_rules();
@@ -1202,12 +1270,79 @@ function unregisterGemini() {
     return false;
   }
 }
+var codexHooksPath = () => process.env.CODEX_HOOKS ?? join3(codexConfigPath(), "..", "hooks.json");
+var oursIn = (g) => g.hooks.some((h) => typeof h.command === "string" && isOurs(h));
+function readShared(p) {
+  try {
+    return existsSync4(p) ? JSON.parse(readFileSync3(p, "utf8")) : {};
+  } catch {
+    return null;
+  }
+}
+function putHook(p, event, group) {
+  const c = readShared(p);
+  if (!c)
+    return false;
+  const hooks = c.hooks ?? {};
+  const kept = (hooks[event] ?? []).filter((g) => !oursIn(g));
+  const had = kept.length !== (hooks[event] ?? []).length;
+  if (group)
+    kept.push(group);
+  else if (!had)
+    return false;
+  if (kept.length)
+    hooks[event] = kept;
+  else
+    delete hooks[event];
+  if (Object.keys(hooks).length)
+    c.hooks = hooks;
+  else
+    delete c.hooks;
+  writeFileSync2(p, `${JSON.stringify(c, null, 2)}
+`);
+  return true;
+}
+function guardCodex(on) {
+  const p = codexHooksPath();
+  if (!existsSync4(join3(p, "..")))
+    return false;
+  return putHook(p, "PreToolUse", on ? {
+    matcher: "Bash|apply_patch",
+    hooks: [{ type: "command", command: hookCommand("PreToolUse"), timeout: 5 }]
+  } : null);
+}
+function guardGemini(on) {
+  const p = geminiSettingsPath();
+  if (!existsSync4(join3(p, "..")))
+    return false;
+  return putHook(p, "BeforeTool", on ? {
+    matcher: "run_shell_command|write_file|replace|read_file",
+    hooks: [
+      { name: "swarm", type: "command", command: hookCommand("BeforeTool"), timeout: 5000 }
+    ]
+  } : null);
+}
+function guardedAgents() {
+  const out = [];
+  const has = (p, event) => {
+    const c = readShared(p);
+    const groups = c?.hooks?.[event] ?? [];
+    return groups.some(oursIn);
+  };
+  if (existsSync4(codexHooksPath()) && has(codexHooksPath(), "PreToolUse"))
+    out.push("codex");
+  if (existsSync4(geminiSettingsPath()) && has(geminiSettingsPath(), "BeforeTool"))
+    out.push("gemini");
+  return out;
+}
 function registerOtherAgents() {
   const out = [];
   if (registerCodex())
     out.push("codex");
   if (registerGemini())
     out.push("gemini");
+  guardCodex(true);
+  guardGemini(true);
   return out;
 }
 function unregisterOtherAgents() {
@@ -1216,6 +1351,8 @@ function unregisterOtherAgents() {
     out.push("codex");
   if (unregisterGemini())
     out.push("gemini");
+  guardCodex(false);
+  guardGemini(false);
   return out;
 }
 var hookCommand = (event) => `${binCommand("swarm-hook")} ${event}`;
@@ -1343,7 +1480,8 @@ function status() {
     path: settingsPath(),
     shim: shimPath(),
     otherAgents,
-    statusline: statuslineStatus(s)
+    statusline: statuslineStatus(s),
+    guarded: guardedAgents()
   };
 }
 function setTeamUrl(home, url) {
@@ -1649,6 +1787,9 @@ Open the dashboard: ${base}`);
         console.log(st.statusline === "other" ? "\xB7 statusLine: another status line is set (swarm install --statusline would leave it alone)" : "\xB7 statusLine not set \u2014 swarm install --statusline puts task, lease, budget and plan windows in Claude Code's footer");
       if (st.otherAgents.length)
         console.log(`\u2713 MCP server also registered for ${st.otherAgents.join(", ")} (swarm_* tools in those CLIs too)`);
+      if (st.guarded.length)
+        console.log(`\u2713 rules also hold on ${st.guarded.join(", ")}${st.guarded.includes("codex") ? " (Codex runs a new hook only after you trust it once: /hooks)" : ""}`);
+      console.log("\xB7 Cursor runs the Claude Code hooks above itself (Settings \u2192 Agents \u2192 Third-Party Imports, on by default); an `ask` rule refuses there, since Cursor's preToolUse cannot ask");
       const forge = (bin, auth) => {
         const path = Bun.which(bin);
         if (!path)
@@ -1664,6 +1805,9 @@ Open the dashboard: ${base}`);
           const lag = t.pending ? `${t.pending} pending${t.oldest ? ` since ${t.oldest}` : ""}` : "in sync";
           line(!t.lastError, `team forwarding \u2192 ${t.url} (${lag})`, `last error: ${t.lastError} \u2014 check the team daemon and [team].url`);
         }
+        const o = await api("/v1/otel").catch(() => null);
+        if (o?.configured)
+          line(!o.lastError, `OTLP export \u2192 ${o.endpoint} (${o.compat}${o.lastOkAt ? `, last sent ${o.lastOkAt}` : ", nothing sent yet"})`, `last error: ${o.lastError} \u2014 check the collector and [otel].endpoint`);
       }
       if (process.env.GITLAB_TOKEN)
         console.log("\xB7 glab uses GITLAB_TOKEN from this shell \u2014 a daemon started by the desktop app won't see it; run `glab auth login` to store it instead");