@rryando/arcs 4.2.1 → 5.1.0

package/dist/cli/commands/hooks.js

@@ -1,436 +0,0 @@
-// ---------------------------------------------------------------------------
-// hooks install-claude-code / status — Claude Code session-bridge hook
-// ---------------------------------------------------------------------------
-import { randomUUID } from "node:crypto";
-import { readFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { resolve } from "node:path";
-import { claudeSettingsLocalPath, installClaudeCodeHook, } from "../../utils/claude-code-hook-install.js";
-import { readRootMeta } from "../../utils/dag.js";
-import { DEFAULT_SERVER_URL, HOOK_EVENTS } from "../../utils/hook-contract.js";
-import { writeHookToken } from "../../utils/hook-token-store.js";
-import { getDataDir, PACKAGE_ROOT } from "../../utils/paths.js";
-import { resolveProject } from "../../utils/project-resolver.js";
-import { defineCommand, } from "../command-registry.js";
-import { failure, success } from "../output-envelope.js";
-/**
- * Re-exported from the bridge contract, which is where the event list and the
- * default URL are defined once for the server, this installer, and the parity
- * test that pins the standalone hook script to them. Kept exported here because
- * `utils/claude-code-hook-install.ts` sources them from this module.
- */
-export { DEFAULT_SERVER_URL, HOOK_EVENTS };
-/**
- * Rotates the project's hook token and builds the `command` string a
- * settings.json hook entry must run.
- *
- * Shared by this command (which prints the snippet for manual pasting) and by
- * `utils/claude-code-hook-install.ts` (which writes it into a workspace's
- * `.claude/settings.local.json` after an explicit confirm). One source of truth
- * for the command string: a drift between the two would produce hooks that
- * authenticate against a token nobody stored.
- */
-export async function provisionHookCommand(options) {
-    const serverUrl = (options.serverUrl ?? DEFAULT_SERVER_URL).replace(/\/+$/, "");
-    const token = randomUUID();
-    await writeHookToken(options.projectDir, token);
-    const scriptPath = hookScriptPath();
-    const command = buildHookCommand({
-        token,
-        slug: options.slug,
-        serverUrl,
-        hookScriptPath: scriptPath,
-    });
-    return { token, hookScriptPath: scriptPath, serverUrl, command };
-}
-/**
- * The literal `command` string a settings.json hook entry runs.
- *
- * Env assignments are prefixed to the command: a settings.json `command` is just
- * a shell string, which is how the per-project token reaches the script without
- * baking secrets into the script itself.
- *
- * Split out from `provisionHookCommand()` so the `--write` path can render the
- * snippet for a hook `installClaudeCodeHook()` already provisioned, without
- * provisioning a second time (which would rotate the token and leave the
- * printed snippet authenticating against a token nobody stored).
- */
-function buildHookCommand(hook) {
-    return (`ARCS_HOOK_TOKEN=${hook.token} ARCS_HOOK_SLUG=${hook.slug} ` +
-        `ARCS_HOOK_URL=${hook.serverUrl} node ${hook.hookScriptPath}`);
-}
-const hooksInstallParams = {
-    slug: {
-        type: "string",
-        positional: 0,
-        description: "Project slug or path",
-    },
-    url: {
-        type: "string",
-        default: DEFAULT_SERVER_URL,
-        description: `ARCS web server URL the hook posts to (default ${DEFAULT_SERVER_URL})`,
-    },
-    write: {
-        type: "boolean",
-        default: false,
-        description: "Merge the hook into the workspace's .claude/settings.local.json instead of only printing the snippet",
-    },
-};
-defineCommand({
-    path: "hooks install-claude-code",
-    description: "Provision the Claude Code session-bridge hook (prints the settings.json snippet; --write installs it)",
-    params: hooksInstallParams,
-    mutation: true,
-    handler: handleHooksInstallClaudeCode,
-});
-// ---------------------------------------------------------------------------
-function settingsSnippet(command) {
-    return JSON.stringify({
-        hooks: Object.fromEntries(HOOK_EVENTS.map((event) => [event, [{ hooks: [{ type: "command", command }] }]])),
-    }, null, 2);
-}
-/**
- * Generates a fresh hook token and prints the settings.json snippet that uses
- * it. Without `--write` it deliberately does not touch `~/.claude/settings.json`
- * or any `.claude/settings.local.json`: ARCS writes inside `$ARCS_DATA` only,
- * and editing a user's agent configuration behind their back is not consent.
- * The snippet is the deliverable; pasting it is the user's call.
- *
- * `--write` is that consent, given explicitly on the command line: it delegates
- * to `installClaudeCodeHook()`, the same merge the `arcs project init` prompt
- * uses, which aborts rather than clobber a malformed settings file.
- *
- * Rerunning rotates the token — the previously installed snippet stops working
- * until it is replaced, which is the intended way to revoke a stale hook.
- */
-async function handleHooksInstallClaudeCode(params, _flags) {
-    const resolved = await resolveProject(params.slug);
-    if (!resolved.ok)
-        return resolved.result;
-    const { slug, projectDir, workspacePath } = resolved;
-    try {
-        if (params.write) {
-            // No workspace path means no legitimate write target. Falling back to
-            // `process.cwd()` would drop agent config into whatever directory the CLI
-            // ran from, so refuse and leave the user with the snippet path instead.
-            if (!workspacePath) {
-                return failure("no_workspace_paths", `Project "${slug}" has no workspace path configured — rerun without --write and paste the snippet yourself.`);
-            }
-            const installed = await installClaudeCodeHook({
-                workspacePath,
-                projectDir,
-                slug,
-                serverUrl: params.url,
-            });
-            return success({
-                project: slug,
-                token: installed.token,
-                hookScriptPath: installed.hookScriptPath,
-                serverUrl: installed.serverUrl,
-                events: installed.events,
-                settingsPath: installed.settingsPath,
-                settingsSnippet: settingsSnippet(buildHookCommand({
-                    token: installed.token,
-                    slug,
-                    serverUrl: installed.serverUrl,
-                    hookScriptPath: installed.hookScriptPath,
-                })),
-                notes: [
-                    `Hook merged into ${installed.settingsPath} — no other file was touched.`,
-                    "Start a NEW Claude Code session to pick it up — sessions already running won't.",
-                    `serverUrl must match the port \`arcs web\` actually listens on — pass --url if you run it somewhere other than ${DEFAULT_SERVER_URL}.`,
-                    "The token is a secret: settings.local.json is the git-ignored variant, keep it that way.",
-                    "Rerunning this command rotates the token and replaces the entry it wrote.",
-                ],
-            });
-        }
-        const { token, hookScriptPath, serverUrl, command } = await provisionHookCommand({
-            projectDir,
-            slug,
-            serverUrl: params.url,
-        });
-        return success({
-            project: slug,
-            token,
-            hookScriptPath,
-            serverUrl,
-            events: [...HOOK_EVENTS],
-            settingsSnippet: settingsSnippet(command),
-            notes: [
-                "Paste settingsSnippet into ~/.claude/settings.json, .claude/settings.json, " +
-                    "or .claude/settings.local.json (merge into an existing `hooks` object). " +
-                    "ARCS never edits those files for you.",
-                `serverUrl must match the port \`arcs web\` actually listens on — pass --url if you run it somewhere other than ${DEFAULT_SERVER_URL}.`,
-                "The token is a secret: prefer settings.local.json if your .claude directory is committed.",
-                "Rerunning this command rotates the token and invalidates the previously installed snippet.",
-            ],
-        });
-    }
-    catch (err) {
-        return failure("hook_install_error", err instanceof Error ? err.message : String(err));
-    }
-}
-// ---------------------------------------------------------------------------
-// hooks status
-// ---------------------------------------------------------------------------
-const hooksStatusParams = {
-    slug: {
-        type: "string",
-        required: true,
-        positional: 0,
-        description: "Project slug or path",
-    },
-};
-defineCommand({
-    path: "hooks status",
-    description: "Report whether the Claude Code session-bridge hook is installed for a workspace",
-    params: hooksStatusParams,
-    mutation: false,
-    handler: handleHooksStatus,
-});
-/** `ARCS_HOOK_SLUG=<slug>` as prefixed onto a settings.json hook `command`. */
-const HOOK_SLUG_PATTERN = /ARCS_HOOK_SLUG=(\S+)/;
-/** `ARCS_HOOK_URL=<url>` as prefixed onto a settings.json hook `command`. */
-const HOOK_URL_PATTERN = /ARCS_HOOK_URL=(\S+)/;
-/** Fresh (never shared) empty result — every degradation path returns this. */
-function noHooks() {
-    return { installed: false, matchedSlugs: [], hookUrls: [] };
-}
-/**
- * Configured workspace paths for a project, in order, mirroring how
- * `resolveProject()` sources them. Returns `[]` when the project has none (or
- * its meta is unreadable) — a status check reports "not installed" rather than
- * guessing at `process.cwd()`, since inspecting whatever directory the CLI
- * happens to run from would be a lie about the project.
- */
-async function workspacePathsFor(projectDir) {
-    let meta;
-    try {
-        meta = JSON.parse(await readFile(resolve(projectDir, "meta.json"), "utf-8"));
-    }
-    catch {
-        return [];
-    }
-    const configured = Array.isArray(meta.workspacePaths) ? meta.workspacePaths : [];
-    const paths = [];
-    for (const entry of configured) {
-        if (typeof entry !== "string" || entry.length === 0)
-            continue;
-        paths.push(entry.startsWith("~") ? resolve(homedir(), entry.slice(2)) : resolve(entry));
-    }
-    return paths;
-}
-/**
- * Read-only inspection of a workspace's `.claude/settings.local.json`.
- *
- * Matches entries the same way `mergeHookIntoSettings()` replaces them — on the
- * absolute `hookScriptPath` appearing in the `command` string — so status and
- * install can never disagree about what "installed" means.
- *
- * `installed` requires every hook event to be registered: a partial
- * registration is a broken bridge that should be repaired, so reporting it as
- * installed would suppress the fix. `matchedSlugs`/`hookUrls` are still
- * populated in that case, which is also how a caller sees a hook wired to a
- * *different* project or a *different* port.
- */
-function inspectSettings(settings, hookScriptPath) {
-    const hooks = settings.hooks ?? {};
-    const matchedSlugs = [];
-    const hookUrls = [];
-    let eventsWithHook = 0;
-    for (const event of HOOK_EVENTS) {
-        const entries = Array.isArray(hooks[event]) ? hooks[event] : [];
-        let found = false;
-        for (const entry of entries) {
-            if (!entry || typeof entry !== "object" || !Array.isArray(entry.hooks))
-                continue;
-            for (const h of entry.hooks) {
-                if (typeof h?.command !== "string" || !h.command.includes(hookScriptPath))
-                    continue;
-                found = true;
-                const slug = HOOK_SLUG_PATTERN.exec(h.command)?.[1];
-                if (slug && !matchedSlugs.includes(slug))
-                    matchedSlugs.push(slug);
-                const url = HOOK_URL_PATTERN.exec(h.command)?.[1];
-                if (url && !hookUrls.includes(url))
-                    hookUrls.push(url);
-            }
-        }
-        if (found)
-            eventsWithHook++;
-    }
-    return { installed: eventsWithHook === HOOK_EVENTS.length, matchedSlugs, hookUrls };
-}
-/**
- * The one read path for an installed hook: locate the workspace's
- * `.claude/settings.local.json`, parse it, and hand it to `inspectSettings()`.
- *
- * Every failure — missing file, empty file, invalid JSON, a JSON array or
- * scalar where an object belongs — degrades to `noHooks()` instead of throwing.
- * That is deliberately the mirror image of `installClaudeCodeHook()`, which
- * aborts on the same malformed input: the writer must never clobber a
- * hand-edited settings file, but a reader risks nothing, and callers here
- * include a server startup path that must not be killable by a stray comma in
- * someone else's config.
- */
-async function inspectWorkspaceHooks(workspacePath, hookScriptPath) {
-    let raw;
-    try {
-        raw = await readFile(claudeSettingsLocalPath(workspacePath), "utf-8");
-    }
-    catch {
-        return noHooks();
-    }
-    if (raw.trim().length === 0)
-        return noHooks();
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return noHooks();
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        return noHooks();
-    }
-    return inspectSettings(parsed, hookScriptPath);
-}
-/** Absolute path of the standalone hook script a settings entry must run. */
-function hookScriptPath() {
-    return resolve(PACKAGE_ROOT, "scripts", "claude-code-session-hook.mjs");
-}
-/**
- * Reports whether the session-bridge hook is registered in the project's
- * workspace, without any side effect.
- *
- * Deliberately does not call `provisionHookCommand()`: that rotates the hook
- * token, so a status check built on it would break the very hook it was asked
- * to inspect. Only `hookScriptPath()` is shared with the install path.
- *
- * A malformed or non-object settings file reports `installed: false` rather
- * than throwing: unlike the install path (which must abort before writing so a
- * hand-edited file is never clobbered), nothing is at risk from a read.
- */
-async function handleHooksStatus(params, _flags) {
-    const resolved = await resolveProject(params.slug);
-    if (!resolved.ok)
-        return resolved.result;
-    const { slug, projectDir } = resolved;
-    const scriptPath = hookScriptPath();
-    // First workspace only, matching `resolveProject()` — status answers for the
-    // workspace a hook install would have targeted.
-    const workspacePath = (await workspacePathsFor(projectDir))[0];
-    const { installed, matchedSlugs, hookUrls } = workspacePath
-        ? await inspectWorkspaceHooks(workspacePath, scriptPath)
-        : noHooks();
-    return success({
-        installed,
-        matchesCurrentSlug: matchedSlugs.includes(slug),
-        matchedSlugs,
-        hookUrls,
-        hookScriptPath: scriptPath,
-    });
-}
-/** `http://host:port`, bracketing an IPv6 host so the printed URL is valid. */
-function boundUrlOf(bound) {
-    const host = bound.host.includes(":") && !bound.host.startsWith("[") ? `[${bound.host}]` : bound.host;
-    return `http://${host}:${bound.port}`;
-}
-/**
- * Port a baked `ARCS_HOOK_URL` actually posts to, or undefined when the value
- * is not a URL we can read. Undefined means "unknown", and unknown must stay
- * silent — a warning we cannot substantiate is worse than none.
- */
-function portOfUrl(url) {
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        return undefined;
-    }
-    if (parsed.port.length > 0) {
-        const port = Number(parsed.port);
-        return Number.isInteger(port) ? port : undefined;
-    }
-    if (parsed.protocol === "https:")
-        return 443;
-    if (parsed.protocol === "http:")
-        return 80;
-    return undefined;
-}
-/**
- * The single warning block `arcs web` prints when the address it actually bound
- * disagrees with the URL baked into an installed hook — or `null` when there is
- * nothing to say. Plain text: the caller owns the colouring.
- *
- * Why this exists: `ARCS_HOOK_URL` is written into settings.json at install
- * time, so `arcs web --port N` leaves every already-installed hook posting to
- * the old port. The hook exits 0 on a failed POST by design (a broken bridge
- * must be inert, never fatal to the user's Claude Code session), so the bridge
- * dies with no output anywhere and looks exactly like an idle session. This is
- * the only place that difference becomes visible.
- *
- * Compares PORTS, not full origins: `arcs web` refuses anything but loopback,
- * and 127.0.0.1 / localhost / ::1 are the same listener often enough that
- * warning on a host spelling difference would be noise that trains the warning
- * away. The port is the difference that reliably breaks the bridge.
- *
- * Never throws and never blocks — it runs after the server is already
- * listening, and every read inside it degrades to silence: no data dir, no
- * root meta, no project, no workspace, no settings file, malformed settings,
- * or an `ARCS_HOOK_URL` that is not a parsable URL all produce `null`.
- */
-export async function hookUrlMismatchWarning(bound) {
-    try {
-        return await buildHookUrlMismatchWarning(bound);
-    }
-    catch {
-        return null;
-    }
-}
-async function buildHookUrlMismatchWarning(bound) {
-    const dataDir = getDataDir();
-    let projects;
-    try {
-        projects = (await readRootMeta(dataDir)).projects;
-    }
-    catch {
-        return null;
-    }
-    const scriptPath = hookScriptPath();
-    const mismatches = [];
-    const seen = new Set();
-    // Every project is scanned: `arcs web` serves all of them from one listener,
-    // so any project's hook can be the one pointing somewhere else. Workspaces
-    // that disagree with each other are all reported rather than reconciled.
-    for (const project of projects) {
-        const projectDir = resolve(dataDir, "projects", project.id);
-        for (const workspacePath of await workspacePathsFor(projectDir)) {
-            const { hookUrls } = await inspectWorkspaceHooks(workspacePath, scriptPath);
-            for (const url of hookUrls) {
-                const port = portOfUrl(url);
-                if (port === undefined || port === bound.port)
-                    continue;
-                const key = `${project.id}\x00${url}`;
-                if (seen.has(key))
-                    continue;
-                seen.add(key);
-                mismatches.push({ slug: project.id, url });
-            }
-        }
-    }
-    if (mismatches.length === 0)
-        return null;
-    const boundUrl = boundUrlOf(bound);
-    return [
-        "⚠ Claude Code session bridge: the installed hook posts to a different port.",
-        `    arcs web is listening on   ${boundUrl}`,
-        ...mismatches.map((m) => `    installed hook posts to    ${m.url}   (project ${m.slug})`),
-        "    Every hook POST will be refused, and the hook exits 0 by design — the",
-        "    session bridge will stay silent instead of failing loudly.",
-        "    Fix: restart on the hook's port, or re-point the hook:",
-        `      arcs hooks install-claude-code ${mismatches[0].slug} --url ${boundUrl} --write`,
-    ].join("\n");
-}
-//# sourceMappingURL=hooks.js.map

package/dist/cli/commands/hooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/cli/commands/hooks.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAEL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAsB,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAGL,aAAa,GAGd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;;;;GAKG;AACH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;AAW3C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAI1C;IACC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,KAAK;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS;QACT,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,IAKzB;IACC,OAAO,CACL,mBAAmB,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,IAAI,GAAG;QAC5D,iBAAiB,IAAI,CAAC,SAAS,SAAS,IAAI,CAAC,cAAc,EAAE,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,sBAAsB;KACpC;IACD,GAAG,EAAE;QACH,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,kDAAkD,kBAAkB,GAAG;KACrF;IACD,KAAK,EAAE;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EACT,sGAAsG;KACzG;CAC0C,CAAC;AAE9C,aAAa,CAAC;IACZ,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,uGAAuG;IACzG,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,4BAA4B;CACtC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CACjF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,4BAA4B,CACzC,MAA+C,EAC/C,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC;IAErD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,sEAAsE;YACtE,0EAA0E;YAC1E,wEAAwE;YACxE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,OAAO,CACZ,oBAAoB,EACpB,YAAY,IAAI,4FAA4F,CAC7G,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,aAAa;gBACb,UAAU;gBACV,IAAI;gBACJ,SAAS,EAAE,MAAM,CAAC,GAAG;aACtB,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,eAAe,EAAE,eAAe,CAC9B,gBAAgB,CAAC;oBACf,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,IAAI;oBACJ,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,cAAc,EAAE,SAAS,CAAC,cAAc;iBACzC,CAAC,CACH;gBACD,KAAK,EAAE;oBACL,oBAAoB,SAAS,CAAC,YAAY,+BAA+B;oBACzE,iFAAiF;oBACjF,kHAAkH,kBAAkB,GAAG;oBACvI,0FAA0F;oBAC1F,2EAA2E;iBAC5E;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,CAAC;YAC/E,UAAU;YACV,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,GAAG;SACtB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;YACb,OAAO,EAAE,IAAI;YACb,KAAK;YACL,cAAc;YACd,SAAS;YACT,MAAM,EAAE,CAAC,GAAG,WAAW,CAAC;YACxB,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC;YACzC,KAAK,EAAE;gBACL,6EAA6E;oBAC3E,0EAA0E;oBAC1E,uCAAuC;gBACzC,kHAAkH,kBAAkB,GAAG;gBACvI,2FAA2F;gBAC3F,4FAA4F;aAC7F;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,sBAAsB;KACpC;CAC0C,CAAC;AAE9C,aAAa,CAAC;IACZ,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,iFAAiF;IAC9F,MAAM,EAAE,iBAAiB;IACzB,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,iBAAiB;CAC3B,CAAC,CAAC;AAqBH,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAQ/C,+EAA+E;AAC/E,SAAS,OAAO;IACd,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,IAAkC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CACtB,QAAwB,EACxB,cAAsB;IAEtB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,KAAK,GAAG,KAAK,CAAC;QAElB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAS;YACjF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAAE,SAAS;gBACpF,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpD,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClE,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAClD,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,IAAI,KAAK;YAAE,cAAc,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,cAAc,KAAK,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,qBAAqB,CAClC,aAAqB,EACrB,cAAsB;IAEtB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAE9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,OAAO,eAAe,CAAC,MAAwB,EAAE,cAAc,CAAC,CAAC;AACnE,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,8BAA8B,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAA8C,EAC9C,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IAEpC,6EAA6E;IAC7E,gDAAgD;IAChD,MAAM,aAAa,GAAG,CAAC,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,aAAa;QACzD,CAAC,CAAC,MAAM,qBAAqB,CAAC,aAAa,EAAE,UAAU,CAAC;QACxD,CAAC,CAAC,OAAO,EAAE,CAAC;IAEd,OAAO,OAAO,CAAC;QACb,SAAS;QACT,kBAAkB,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/C,YAAY;QACZ,QAAQ;QACR,cAAc,EAAE,UAAU;KACN,CAAC,CAAC;AAC1B,CAAC;AAgBD,+EAA+E;AAC/E,SAAS,UAAU,CAAC,KAAmB;IACrC,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3F,OAAO,UAAU,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAmB;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAAmB;IAC5D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,aAAa,IAAI,MAAM,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAC5E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;gBACxD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,6EAA6E;QAC7E,kCAAkC,QAAQ,EAAE;QAC5C,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,GAAG,CAAC;QACzF,2EAA2E;QAC3E,gEAAgE;QAChE,4DAA4D;QAC5D,wCAAwC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,QAAQ,UAAU;KACvF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/utils/claude-code-hook-install.d.ts

@@ -1,80 +0,0 @@
-/**
- * Consent-gated writer for the Claude Code session-bridge hook.
- *
- * `arcs hooks install-claude-code` deliberately never edits agent configuration
- * — it prints a snippet. This module is the opt-in counterpart: when the user
- * explicitly confirms during `arcs project init`, it merges the same hook entry
- * into the workspace's `.claude/settings.local.json` (local-only: the token is a
- * secret and `settings.local.json` is the git-ignored variant).
- *
- * Two rules the merge must never break:
- *   1. A malformed existing file ABORTS the write. Silently coalescing an
- *      unparseable settings file to `{}` would destroy a user's `permissions`
- *      block over a stray comma, so parse errors are surfaced, not swallowed.
- *   2. Replacement is keyed on the absolute hook script path, not the project
- *      slug. A workspace can be reassigned between ARCS projects, so matching on
- *      the script path leaves exactly one current ARCS entry per event instead
- *      of accumulating stale ones. Entries belonging to other tools are kept
- *      untouched, in place.
- */
-interface HookCommandEntry {
-    type?: string;
-    command?: string;
-    [key: string]: unknown;
-}
-interface HookMatcherEntry {
-    hooks?: HookCommandEntry[];
-    [key: string]: unknown;
-}
-export interface ClaudeSettings {
-    hooks?: Record<string, HookMatcherEntry[]>;
-    [key: string]: unknown;
-}
-export interface ClaudeCodeHookInstallResult {
-    settingsPath: string;
-    token: string;
-    hookScriptPath: string;
-    serverUrl: string;
-    events: string[];
-}
-/** The only file this module ever writes — never `~/.claude/settings.json`. */
-export declare function claudeSettingsLocalPath(workspacePath: string): string;
-/**
- * Returns a copy of `settings` with the ARCS hook entry registered under every
- * hook event, replacing any prior entry that runs the same `hookScriptPath`.
- * Pure — no I/O, so the merge rules are directly testable.
- */
-export declare function mergeHookIntoSettings(settings: ClaudeSettings, hook: {
-    command: string;
-    hookScriptPath: string;
-}): ClaudeSettings;
-/**
- * Reads the workspace's `.claude/settings.local.json` (if any), merges in a
- * freshly provisioned hook, and writes it back owner-only.
- *
- * Throws when the existing file is present but unparseable — nothing is written
- * in that case, so a hand-edited settings file is never clobbered.
- */
-export declare function installClaudeCodeHook(options: {
-    workspacePath: string;
-    projectDir: string;
-    slug: string;
-    serverUrl?: string;
-}): Promise<ClaudeCodeHookInstallResult>;
-/**
- * Interactively offers the hook install during `arcs project init`.
- *
- * Mirrors `promptAndInstallCodegraph`: a note explaining the offer, a confirm
- * defaulting to "no", and a manual-fallback hint when declined. Returns the
- * install result only when a write actually happened; returns `null` on
- * decline, cancel, or failure. Never throws — `arcs project init` succeeding
- * matters more than this offer succeeding.
- */
-export declare function promptAndInstallClaudeCodeHook(options: {
-    workspacePath: string;
-    projectDir: string;
-    slug: string;
-    serverUrl?: string;
-}): Promise<ClaudeCodeHookInstallResult | null>;
-export {};
-//# sourceMappingURL=claude-code-hook-install.d.ts.map

package/dist/utils/claude-code-hook-install.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claude-code-hook-install.d.ts","sourceRoot":"","sources":["../../src/utils/claude-code-hook-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,UAAU,gBAAgB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,gBAAgB;IACxB,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAErE;AAoBD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChD,cAAc,CA2BhB;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA8FvC;AAED;;;;;;;;GAQG;AACH,wBAAsB,8BAA8B,CAAC,OAAO,EAAE;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CA0C9C"}