@schoolai/shipyard 3.7.0 → 3.8.0-rc.20260529.0

package/dist/cursor-hook-shim.js

@@ -0,0 +1,316 @@
+#!/usr/bin/env node
+
+// src/cursor-hook-shim/index.ts
+import { createHmac, randomUUID } from "crypto";
+import { readFileSync } from "fs";
+import net from "net";
+var DEFAULT_TIMEOUT_MS = 55e3;
+function applyArg(flag, value, result) {
+  switch (flag) {
+    case "--task-id":
+      if (value === void 0) return { error: `missing value for ${flag}` };
+      result.taskId = value;
+      return null;
+    case "--socket-path":
+      if (value === void 0) return { error: `missing value for ${flag}` };
+      result.socketPath = value;
+      return null;
+    case "--hmac-keyfile":
+      if (value === void 0) return { error: `missing value for ${flag}` };
+      result.hmacKeyfile = value;
+      return null;
+    case "--policy":
+      return applyPolicy(value, result);
+    case "--timeout-ms":
+      return applyTimeoutMs(value, result);
+    case "--auto-allow-list":
+      if (value === void 0) return { error: `missing value for ${flag}` };
+      result.autoAllowList = value.split(",").filter((s) => s.length > 0);
+      return null;
+    default:
+      return null;
+  }
+}
+function applyPolicy(value, result) {
+  if (value === void 0) return { error: "missing value for --policy" };
+  if (value !== "prompt" && value !== "allow" && value !== "deny") {
+    return { error: `invalid --policy: ${value}` };
+  }
+  result.policy = value;
+  return null;
+}
+function applyTimeoutMs(value, result) {
+  if (value === void 0) return { error: "missing value for --timeout-ms" };
+  const n = Number.parseInt(value, 10);
+  if (!Number.isFinite(n) || n <= 0) return { error: `invalid --timeout-ms: ${value}` };
+  result.timeoutMs = n;
+  return null;
+}
+var FLAG_TAKES_VALUE = /* @__PURE__ */ new Set([
+  "--task-id",
+  "--socket-path",
+  "--hmac-keyfile",
+  "--policy",
+  "--timeout-ms",
+  "--auto-allow-list"
+]);
+function parseArgv(argv) {
+  const result = {
+    timeoutMs: DEFAULT_TIMEOUT_MS,
+    autoAllowList: []
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const flag = argv[i];
+    if (flag === void 0) continue;
+    const value = argv[i + 1];
+    const err = applyArg(flag, value, result);
+    if (err !== null) return err;
+    if (FLAG_TAKES_VALUE.has(flag)) i++;
+  }
+  return finalizeArgv(result);
+}
+function finalizeArgv(result) {
+  const policy = result.policy;
+  if (policy === void 0) return { error: "missing --policy" };
+  if (policy === "prompt") {
+    if (result.taskId === void 0) return { error: "missing --task-id" };
+    if (result.socketPath === void 0) return { error: "missing --socket-path" };
+    if (result.hmacKeyfile === void 0) return { error: "missing --hmac-keyfile" };
+  }
+  return {
+    taskId: result.taskId ?? "",
+    socketPath: result.socketPath ?? "",
+    hmacKeyfile: result.hmacKeyfile ?? "",
+    policy,
+    timeoutMs: result.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+    autoAllowList: result.autoAllowList ?? []
+  };
+}
+async function readAllStdin(maxWaitMs) {
+  return new Promise((resolve) => {
+    const chunks = [];
+    let settled = false;
+    const finalize = () => {
+      if (settled) return;
+      settled = true;
+      resolve(Buffer.concat(chunks).toString("utf8"));
+    };
+    const timer = setTimeout(finalize, maxWaitMs);
+    process.stdin.on("data", (chunk) => {
+      chunks.push(chunk);
+    });
+    process.stdin.on("end", () => {
+      clearTimeout(timer);
+      finalize();
+    });
+    process.stdin.on("error", () => {
+      clearTimeout(timer);
+      finalize();
+    });
+  });
+}
+function isHookInput(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const hookEventName = Reflect.get(value, "hook_event_name");
+  if (hookEventName !== void 0 && typeof hookEventName !== "string") return false;
+  const toolName = Reflect.get(value, "tool_name");
+  if (toolName !== void 0 && typeof toolName !== "string") return false;
+  const requestId = Reflect.get(value, "request_id");
+  if (requestId !== void 0 && typeof requestId !== "string") return false;
+  return true;
+}
+async function readHookInput() {
+  const stdinBytes = await readAllStdin(150);
+  if (stdinBytes.length > 0) {
+    try {
+      const parsed = JSON.parse(stdinBytes);
+      if (isHookInput(parsed)) return parsed;
+    } catch {
+    }
+  }
+  const fromEnv = process.env.CURSOR_HOOK_INPUT;
+  if (fromEnv) {
+    try {
+      const parsed = JSON.parse(fromEnv);
+      if (isHookInput(parsed)) return parsed;
+    } catch {
+    }
+  }
+  return {};
+}
+function errnoCode(err) {
+  if (err !== null && typeof err === "object" && "code" in err) {
+    const code = Reflect.get(err, "code");
+    if (typeof code === "string") return code;
+  }
+  return "UNKNOWN";
+}
+function toHookOutput(value) {
+  if (typeof value !== "object" || value === null) return null;
+  const permission = Reflect.get(value, "permission");
+  if (permission !== "allow" && permission !== "deny" && permission !== "ask") {
+    return null;
+  }
+  const out = { permission };
+  const am = Reflect.get(value, "agent_message");
+  if (typeof am === "string") out.agent_message = am;
+  const um = Reflect.get(value, "user_message");
+  if (typeof um === "string") out.user_message = um;
+  const ui = Reflect.get(value, "updated_input");
+  if (typeof ui === "object" && ui !== null) {
+    const dest = {};
+    for (const k of Object.keys(ui)) {
+      dest[k] = Reflect.get(ui, k);
+    }
+    out.updated_input = dest;
+  }
+  return out;
+}
+function daemonRoundtrip(socketPath, framedRequest, timeoutMs) {
+  return new Promise((resolve) => {
+    let buf = "";
+    let settled = false;
+    const settle = (output) => {
+      if (settled) return;
+      settled = true;
+      resolve({ output });
+    };
+    const sock = net.connect(socketPath);
+    const timer = setTimeout(() => {
+      sock.destroy();
+      settle({
+        permission: "deny",
+        agent_message: "Permission request timed out before the user could respond.",
+        user_message: "Permission request timed out."
+      });
+    }, timeoutMs);
+    sock.on("connect", () => {
+      sock.write(framedRequest);
+    });
+    sock.on("error", (err) => {
+      clearTimeout(timer);
+      const code = errnoCode(err);
+      settle({
+        permission: "deny",
+        agent_message: `Could not reach Shipyard daemon (${code}). Refusing tool call.`,
+        user_message: `Shipyard daemon socket unreachable: ${code}.`
+      });
+    });
+    sock.on("data", (chunk) => {
+      buf += chunk.toString("utf8");
+      const newlineIdx = buf.indexOf("\n");
+      if (newlineIdx >= 0) {
+        clearTimeout(timer);
+        const line = buf.slice(0, newlineIdx).trim();
+        sock.destroy();
+        try {
+          const parsed = JSON.parse(line);
+          const reply = toHookOutput(parsed);
+          if (reply !== null) {
+            settle(reply);
+            return;
+          }
+          settle({
+            permission: "deny",
+            agent_message: "Malformed daemon response.",
+            user_message: "Internal error talking to Shipyard daemon."
+          });
+        } catch {
+          settle({
+            permission: "deny",
+            agent_message: "Malformed daemon response (not JSON).",
+            user_message: "Internal error talking to Shipyard daemon."
+          });
+        }
+      }
+    });
+    sock.on("end", () => {
+      if (settled) return;
+      clearTimeout(timer);
+      sock.destroy();
+      settle({
+        permission: "deny",
+        agent_message: "Shipyard daemon disconnected before responding.",
+        user_message: "Shipyard daemon disconnected."
+      });
+    });
+  });
+}
+function readKeyfile(path) {
+  try {
+    return readFileSync(path, "utf8").trim();
+  } catch {
+    return null;
+  }
+}
+function emit(output) {
+  process.stdout.write(`${JSON.stringify(output)}
+`);
+  process.exit(0);
+}
+async function main() {
+  const parsedArgv = parseArgv(process.argv.slice(2));
+  if ("error" in parsedArgv) {
+    return emit({
+      permission: "deny",
+      agent_message: `Shipyard hook shim misconfigured: ${parsedArgv.error}`,
+      user_message: "Shipyard hook shim misconfigured \u2014 denying tool call."
+    });
+  }
+  if (parsedArgv.policy === "deny") {
+    return emit({
+      permission: "deny",
+      agent_message: "Plan mode active \u2014 file edits and shell commands are blocked.",
+      user_message: "Plan mode active."
+    });
+  }
+  if (parsedArgv.policy === "allow") {
+    return emit({
+      permission: "allow",
+      agent_message: "Bypass mode active \u2014 auto-approved."
+    });
+  }
+  const input = await readHookInput();
+  if (input.tool_name !== void 0 && parsedArgv.autoAllowList.includes(input.tool_name)) {
+    return emit({
+      permission: "allow",
+      agent_message: `Pre-approved (session) for ${input.tool_name}.`
+    });
+  }
+  const secret = readKeyfile(parsedArgv.hmacKeyfile);
+  if (secret === null) {
+    return emit({
+      permission: "deny",
+      agent_message: "Shipyard HMAC keyfile missing \u2014 refusing tool call.",
+      user_message: "Shipyard daemon configuration error."
+    });
+  }
+  const requestId = input.request_id ?? randomUUID();
+  const nonce = randomUUID();
+  const payload = JSON.stringify({
+    taskId: parsedArgv.taskId,
+    requestId,
+    nonce,
+    hookEvent: input.hook_event_name ?? "unknown",
+    toolName: input.tool_name ?? null,
+    toolInput: input.tool_input ?? null
+  });
+  const hmac = createHmac("sha256", secret).update(payload).digest("hex");
+  const framed = `${JSON.stringify({ payload, hmac })}
+`;
+  const { output } = await daemonRoundtrip(parsedArgv.socketPath, framed, parsedArgv.timeoutMs);
+  return emit(output);
+}
+main().catch((err) => {
+  const detail = err instanceof Error ? err.message : String(err);
+  process.stdout.write(
+    `${JSON.stringify({
+      permission: "deny",
+      agent_message: `Shipyard hook shim error: ${detail}`,
+      user_message: "Shipyard hook shim error \u2014 denied."
+    })}
+`
+  );
+  process.exit(0);
+});
+//# sourceMappingURL=cursor-hook-shim.js.map

package/dist/cursor-hook-shim.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cursor-hook-shim/index.ts"],"sourcesContent":["/**\n * Cursor Hook Shim — leaf binary the Cursor SDK invokes per tool call.\n *\n * Spawned by `cursor-agent` (the native binary inside `@cursor/sdk`) when\n * its `.cursor/hooks.json` matches a `preToolUse`/`beforeShellExecution`/\n * other configured event. The shim:\n *\n *   1. Parses argv for the policy bits (`--policy`, `--socket-path`, `--hmac-keyfile`, etc).\n *   2. Reads the SDK's hook input from stdin (preferred) or `CURSOR_HOOK_INPUT` env.\n *   3. Fast-paths for `--policy deny` / `--policy allow` / `--auto-allow-list`.\n *   4. Otherwise opens the daemon's per-task Unix socket, sends an HMAC-signed\n *      request payload, blocks until the daemon writes a JSON reply.\n *   5. Prints the reply to stdout and exits 0.\n *\n * The Cursor SDK distinguishes \"exit 0 with JSON\" (gating decision) from\n * non-zero exits (hard-error). We ALWAYS exit 0 with a structured payload\n * so the user sees a meaningful deny message — never the generic SDK\n * \"hook exec failed\" surface.\n *\n * Trust posture: spawned by the Cursor SDK (in turn spawned by the\n * cursor-runner the daemon owns). Argv flows in at hook-config-write time\n * via `cursor-skill-writer.ts`. The HMAC keyfile lives in the same\n * task-scoped 0600 dir as the hooks.json. See `docs/cursor-implementation-specs/r2-permission-bridge.md` §6.3 for the threat model.\n *\n * The shim deliberately has zero daemon-internal imports — it is a leaf\n * binary, ~250 LOC. Bundled into `dist/cursor-hook-shim.js` by tsup as a\n * separate entry; chmod 755 in postbuild so the SDK can exec it directly.\n */\n\nimport { createHmac, randomUUID } from 'node:crypto';\nimport { readFileSync } from 'node:fs';\nimport net from 'node:net';\n\n/**\n * Hook output shape the Cursor SDK expects to read from the shim's stdout.\n * `permission: null` means \"fall through\" (the SDK runs the tool); we never\n * emit null in practice. `agent_message` is shown to the agent in the\n * tool-result envelope; `user_message` is shown to the user (e.g. in a\n * notification).\n */\ninterface HookOutput {\n  permission: 'allow' | 'deny' | 'ask';\n  agent_message?: string;\n  user_message?: string;\n  updated_input?: Record<string, unknown>;\n}\n\n/**\n * The SDK delivers hook input either via stdin (newline-terminated JSON) or\n * via `CURSOR_HOOK_INPUT` env. The shim prefers stdin and falls back to env.\n * The schema we care about is a subset of what the SDK actually sends.\n */\ninterface HookInput {\n  hook_event_name?: string;\n  tool_name?: string;\n  tool_input?: unknown;\n  request_id?: string;\n}\n\ninterface ParsedArgv {\n  taskId: string;\n  socketPath: string;\n  hmacKeyfile: string;\n  policy: 'prompt' | 'allow' | 'deny';\n  timeoutMs: number;\n  autoAllowList: string[];\n}\n\nconst DEFAULT_TIMEOUT_MS = 55_000;\n\n/**\n * Pure: parse a single flag/value pair onto the accumulator. Returns the\n * error result (truthy) when the value is invalid; returns null when\n * the flag was applied successfully or was an unknown flag. Extracting\n * each flag into its own branch keeps `parseArgv` under the cognitive\n * complexity budget.\n */\nfunction applyArg(\n  flag: string,\n  value: string | undefined,\n  result: Partial<ParsedArgv>\n): { error: string } | null {\n  switch (flag) {\n    case '--task-id':\n      if (value === undefined) return { error: `missing value for ${flag}` };\n      result.taskId = value;\n      return null;\n    case '--socket-path':\n      if (value === undefined) return { error: `missing value for ${flag}` };\n      result.socketPath = value;\n      return null;\n    case '--hmac-keyfile':\n      if (value === undefined) return { error: `missing value for ${flag}` };\n      result.hmacKeyfile = value;\n      return null;\n    case '--policy':\n      return applyPolicy(value, result);\n    case '--timeout-ms':\n      return applyTimeoutMs(value, result);\n    case '--auto-allow-list':\n      if (value === undefined) return { error: `missing value for ${flag}` };\n      result.autoAllowList = value.split(',').filter((s) => s.length > 0);\n      return null;\n    default:\n      /** Forward-compat: ignore unknown flags so a future hooks.json with new flags works on old shims. */\n      return null;\n  }\n}\n\nfunction applyPolicy(\n  value: string | undefined,\n  result: Partial<ParsedArgv>\n): { error: string } | null {\n  if (value === undefined) return { error: 'missing value for --policy' };\n  if (value !== 'prompt' && value !== 'allow' && value !== 'deny') {\n    return { error: `invalid --policy: ${value}` };\n  }\n  result.policy = value;\n  return null;\n}\n\nfunction applyTimeoutMs(\n  value: string | undefined,\n  result: Partial<ParsedArgv>\n): { error: string } | null {\n  if (value === undefined) return { error: 'missing value for --timeout-ms' };\n  const n = Number.parseInt(value, 10);\n  if (!Number.isFinite(n) || n <= 0) return { error: `invalid --timeout-ms: ${value}` };\n  result.timeoutMs = n;\n  return null;\n}\n\n/** Flags that take a value advance the loop index by two. */\nconst FLAG_TAKES_VALUE = new Set([\n  '--task-id',\n  '--socket-path',\n  '--hmac-keyfile',\n  '--policy',\n  '--timeout-ms',\n  '--auto-allow-list',\n]);\n\nfunction parseArgv(argv: readonly string[]): ParsedArgv | { error: string } {\n  const result: Partial<ParsedArgv> = {\n    timeoutMs: DEFAULT_TIMEOUT_MS,\n    autoAllowList: [],\n  };\n  for (let i = 0; i < argv.length; i++) {\n    const flag = argv[i];\n    if (flag === undefined) continue;\n    const value = argv[i + 1];\n    const err = applyArg(flag, value, result);\n    if (err !== null) return err;\n    if (FLAG_TAKES_VALUE.has(flag)) i++;\n  }\n  return finalizeArgv(result);\n}\n\nfunction finalizeArgv(result: Partial<ParsedArgv>): ParsedArgv | { error: string } {\n  const policy = result.policy;\n  if (policy === undefined) return { error: 'missing --policy' };\n  /**\n   * `policy === 'prompt'` requires socket bits; the immediate-decision\n   * policies (allow/deny) need none — we only spawn them in plan mode /\n   * bypass and never round-trip through the daemon.\n   */\n  if (policy === 'prompt') {\n    if (result.taskId === undefined) return { error: 'missing --task-id' };\n    if (result.socketPath === undefined) return { error: 'missing --socket-path' };\n    if (result.hmacKeyfile === undefined) return { error: 'missing --hmac-keyfile' };\n  }\n  return {\n    taskId: result.taskId ?? '',\n    socketPath: result.socketPath ?? '',\n    hmacKeyfile: result.hmacKeyfile ?? '',\n    policy,\n    timeoutMs: result.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    autoAllowList: result.autoAllowList ?? [],\n  };\n}\n\nasync function readAllStdin(maxWaitMs: number): Promise<string> {\n  return new Promise((resolve) => {\n    const chunks: Buffer[] = [];\n    let settled = false;\n    const finalize = (): void => {\n      if (settled) return;\n      settled = true;\n      resolve(Buffer.concat(chunks).toString('utf8'));\n    };\n    /**\n     * Cap how long we wait. The Cursor SDK delivers input synchronously\n     * on stdin pre-spawn, so the bytes are already in the pipe buffer; if\n     * they're not, falling back to env after the cap is correct.\n     */\n    const timer = setTimeout(finalize, maxWaitMs);\n    process.stdin.on('data', (chunk: Buffer) => {\n      chunks.push(chunk);\n    });\n    process.stdin.on('end', () => {\n      clearTimeout(timer);\n      finalize();\n    });\n    process.stdin.on('error', () => {\n      clearTimeout(timer);\n      finalize();\n    });\n  });\n}\n\n/** Pure: type guard for the HookInput JSON-from-stdin shape. */\nfunction isHookInput(value: unknown): value is HookInput {\n  if (typeof value !== 'object' || value === null) return false;\n  const hookEventName: unknown = Reflect.get(value, 'hook_event_name');\n  if (hookEventName !== undefined && typeof hookEventName !== 'string') return false;\n  const toolName: unknown = Reflect.get(value, 'tool_name');\n  if (toolName !== undefined && typeof toolName !== 'string') return false;\n  const requestId: unknown = Reflect.get(value, 'request_id');\n  if (requestId !== undefined && typeof requestId !== 'string') return false;\n  return true;\n}\n\nasync function readHookInput(): Promise<HookInput> {\n  const stdinBytes = await readAllStdin(150);\n  if (stdinBytes.length > 0) {\n    try {\n      const parsed: unknown = JSON.parse(stdinBytes);\n      if (isHookInput(parsed)) return parsed;\n    } catch {\n      /** Fall through to env. */\n    }\n  }\n  const fromEnv = process.env.CURSOR_HOOK_INPUT;\n  if (fromEnv) {\n    try {\n      const parsed: unknown = JSON.parse(fromEnv);\n      if (isHookInput(parsed)) return parsed;\n    } catch {\n      /** Fall through to empty. */\n    }\n  }\n  return {};\n}\n\ninterface DaemonRoundtripResult {\n  output: HookOutput;\n}\n\n/** Pure: extract the `code` field from an Error without a type assertion. */\nfunction errnoCode(err: unknown): string {\n  if (err !== null && typeof err === 'object' && 'code' in err) {\n    const code: unknown = Reflect.get(err, 'code');\n    if (typeof code === 'string') return code;\n  }\n  return 'UNKNOWN';\n}\n\n/**\n * Pure: validate a parsed JSON value matches the HookOutput shape. Returns\n * the typed object or null if invalid. Avoids the `as HookOutput` assertion.\n */\nfunction toHookOutput(value: unknown): HookOutput | null {\n  if (typeof value !== 'object' || value === null) return null;\n  const permission: unknown = Reflect.get(value, 'permission');\n  if (permission !== 'allow' && permission !== 'deny' && permission !== 'ask') {\n    return null;\n  }\n  const out: HookOutput = { permission };\n  const am: unknown = Reflect.get(value, 'agent_message');\n  if (typeof am === 'string') out.agent_message = am;\n  const um: unknown = Reflect.get(value, 'user_message');\n  if (typeof um === 'string') out.user_message = um;\n  const ui: unknown = Reflect.get(value, 'updated_input');\n  if (typeof ui === 'object' && ui !== null) {\n    /**\n     * `updated_input` is forwarded verbatim to the SDK; build a fresh\n     * Record from its enumerable own keys via Reflect to avoid an `as`.\n     */\n    const dest: Record<string, unknown> = {};\n    for (const k of Object.keys(ui)) {\n      dest[k] = Reflect.get(ui, k);\n    }\n    out.updated_input = dest;\n  }\n  return out;\n}\n\nfunction daemonRoundtrip(\n  socketPath: string,\n  framedRequest: string,\n  timeoutMs: number\n): Promise<DaemonRoundtripResult> {\n  return new Promise((resolve) => {\n    let buf = '';\n    let settled = false;\n    const settle = (output: HookOutput): void => {\n      if (settled) return;\n      settled = true;\n      resolve({ output });\n    };\n    const sock = net.connect(socketPath);\n    const timer = setTimeout(() => {\n      sock.destroy();\n      settle({\n        permission: 'deny',\n        agent_message: 'Permission request timed out before the user could respond.',\n        user_message: 'Permission request timed out.',\n      });\n    }, timeoutMs);\n    sock.on('connect', () => {\n      sock.write(framedRequest);\n    });\n    sock.on('error', (err) => {\n      clearTimeout(timer);\n      const code = errnoCode(err);\n      settle({\n        permission: 'deny',\n        agent_message: `Could not reach Shipyard daemon (${code}). Refusing tool call.`,\n        user_message: `Shipyard daemon socket unreachable: ${code}.`,\n      });\n    });\n    sock.on('data', (chunk: Buffer) => {\n      buf += chunk.toString('utf8');\n      const newlineIdx = buf.indexOf('\\n');\n      if (newlineIdx >= 0) {\n        clearTimeout(timer);\n        const line = buf.slice(0, newlineIdx).trim();\n        sock.destroy();\n        try {\n          const parsed: unknown = JSON.parse(line);\n          const reply = toHookOutput(parsed);\n          if (reply !== null) {\n            settle(reply);\n            return;\n          }\n          settle({\n            permission: 'deny',\n            agent_message: 'Malformed daemon response.',\n            user_message: 'Internal error talking to Shipyard daemon.',\n          });\n        } catch {\n          settle({\n            permission: 'deny',\n            agent_message: 'Malformed daemon response (not JSON).',\n            user_message: 'Internal error talking to Shipyard daemon.',\n          });\n        }\n      }\n    });\n    sock.on('end', () => {\n      if (settled) return;\n      clearTimeout(timer);\n      sock.destroy();\n      settle({\n        permission: 'deny',\n        agent_message: 'Shipyard daemon disconnected before responding.',\n        user_message: 'Shipyard daemon disconnected.',\n      });\n    });\n  });\n}\n\nfunction readKeyfile(path: string): string | null {\n  try {\n    return readFileSync(path, 'utf8').trim();\n  } catch {\n    return null;\n  }\n}\n\nfunction emit(output: HookOutput): never {\n  process.stdout.write(`${JSON.stringify(output)}\\n`);\n  process.exit(0);\n}\n\nasync function main(): Promise<never> {\n  const parsedArgv = parseArgv(process.argv.slice(2));\n  if ('error' in parsedArgv) {\n    return emit({\n      permission: 'deny',\n      agent_message: `Shipyard hook shim misconfigured: ${parsedArgv.error}`,\n      user_message: 'Shipyard hook shim misconfigured — denying tool call.',\n    });\n  }\n\n  if (parsedArgv.policy === 'deny') {\n    return emit({\n      permission: 'deny',\n      agent_message: 'Plan mode active — file edits and shell commands are blocked.',\n      user_message: 'Plan mode active.',\n    });\n  }\n  if (parsedArgv.policy === 'allow') {\n    return emit({\n      permission: 'allow',\n      agent_message: 'Bypass mode active — auto-approved.',\n    });\n  }\n\n  const input = await readHookInput();\n\n  if (input.tool_name !== undefined && parsedArgv.autoAllowList.includes(input.tool_name)) {\n    return emit({\n      permission: 'allow',\n      agent_message: `Pre-approved (session) for ${input.tool_name}.`,\n    });\n  }\n\n  const secret = readKeyfile(parsedArgv.hmacKeyfile);\n  if (secret === null) {\n    return emit({\n      permission: 'deny',\n      agent_message: 'Shipyard HMAC keyfile missing — refusing tool call.',\n      user_message: 'Shipyard daemon configuration error.',\n    });\n  }\n\n  /**\n   * `request_id` correlates the SDK breadcrumb with the daemon-side\n   * pending entry. If the SDK didn't send one (older variants), mint a\n   * UUID so the daemon can still key its pending map; correlation back\n   * to the SDK turn is best-effort.\n   */\n  const requestId = input.request_id ?? randomUUID();\n  const nonce = randomUUID();\n\n  const payload = JSON.stringify({\n    taskId: parsedArgv.taskId,\n    requestId,\n    nonce,\n    hookEvent: input.hook_event_name ?? 'unknown',\n    toolName: input.tool_name ?? null,\n    toolInput: input.tool_input ?? null,\n  });\n  const hmac = createHmac('sha256', secret).update(payload).digest('hex');\n\n  const framed = `${JSON.stringify({ payload, hmac })}\\n`;\n  const { output } = await daemonRoundtrip(parsedArgv.socketPath, framed, parsedArgv.timeoutMs);\n  return emit(output);\n}\n\nmain().catch((err: unknown) => {\n  /** Any uncaught path = deny. Safer default. */\n  const detail = err instanceof Error ? err.message : String(err);\n  process.stdout.write(\n    `${JSON.stringify({\n      permission: 'deny',\n      agent_message: `Shipyard hook shim error: ${detail}`,\n      user_message: 'Shipyard hook shim error — denied.',\n    })}\\n`\n  );\n  process.exit(0);\n});\n"],"mappings":";;;AA6BA,SAAS,YAAY,kBAAkB;AACvC,SAAS,oBAAoB;AAC7B,OAAO,SAAS;AAqChB,IAAM,qBAAqB;AAS3B,SAAS,SACP,MACA,OACA,QAC0B;AAC1B,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,UAAI,UAAU,OAAW,QAAO,EAAE,OAAO,qBAAqB,IAAI,GAAG;AACrE,aAAO,SAAS;AAChB,aAAO;AAAA,IACT,KAAK;AACH,UAAI,UAAU,OAAW,QAAO,EAAE,OAAO,qBAAqB,IAAI,GAAG;AACrE,aAAO,aAAa;AACpB,aAAO;AAAA,IACT,KAAK;AACH,UAAI,UAAU,OAAW,QAAO,EAAE,OAAO,qBAAqB,IAAI,GAAG;AACrE,aAAO,cAAc;AACrB,aAAO;AAAA,IACT,KAAK;AACH,aAAO,YAAY,OAAO,MAAM;AAAA,IAClC,KAAK;AACH,aAAO,eAAe,OAAO,MAAM;AAAA,IACrC,KAAK;AACH,UAAI,UAAU,OAAW,QAAO,EAAE,OAAO,qBAAqB,IAAI,GAAG;AACrE,aAAO,gBAAgB,MAAM,MAAM,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAClE,aAAO;AAAA,IACT;AAEE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,YACP,OACA,QAC0B;AAC1B,MAAI,UAAU,OAAW,QAAO,EAAE,OAAO,6BAA6B;AACtE,MAAI,UAAU,YAAY,UAAU,WAAW,UAAU,QAAQ;AAC/D,WAAO,EAAE,OAAO,qBAAqB,KAAK,GAAG;AAAA,EAC/C;AACA,SAAO,SAAS;AAChB,SAAO;AACT;AAEA,SAAS,eACP,OACA,QAC0B;AAC1B,MAAI,UAAU,OAAW,QAAO,EAAE,OAAO,iCAAiC;AAC1E,QAAM,IAAI,OAAO,SAAS,OAAO,EAAE;AACnC,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,EAAG,QAAO,EAAE,OAAO,yBAAyB,KAAK,GAAG;AACpF,SAAO,YAAY;AACnB,SAAO;AACT;AAGA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,UAAU,MAAyD;AAC1E,QAAM,SAA8B;AAAA,IAClC,WAAW;AAAA,IACX,eAAe,CAAC;AAAA,EAClB;AACA,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,SAAS,OAAW;AACxB,UAAM,QAAQ,KAAK,IAAI,CAAC;AACxB,UAAM,MAAM,SAAS,MAAM,OAAO,MAAM;AACxC,QAAI,QAAQ,KAAM,QAAO;AACzB,QAAI,iBAAiB,IAAI,IAAI,EAAG;AAAA,EAClC;AACA,SAAO,aAAa,MAAM;AAC5B;AAEA,SAAS,aAAa,QAA6D;AACjF,QAAM,SAAS,OAAO;AACtB,MAAI,WAAW,OAAW,QAAO,EAAE,OAAO,mBAAmB;AAM7D,MAAI,WAAW,UAAU;AACvB,QAAI,OAAO,WAAW,OAAW,QAAO,EAAE,OAAO,oBAAoB;AACrE,QAAI,OAAO,eAAe,OAAW,QAAO,EAAE,OAAO,wBAAwB;AAC7E,QAAI,OAAO,gBAAgB,OAAW,QAAO,EAAE,OAAO,yBAAyB;AAAA,EACjF;AACA,SAAO;AAAA,IACL,QAAQ,OAAO,UAAU;AAAA,IACzB,YAAY,OAAO,cAAc;AAAA,IACjC,aAAa,OAAO,eAAe;AAAA,IACnC;AAAA,IACA,WAAW,OAAO,aAAa;AAAA,IAC/B,eAAe,OAAO,iBAAiB,CAAC;AAAA,EAC1C;AACF;AAEA,eAAe,aAAa,WAAoC;AAC9D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,SAAmB,CAAC;AAC1B,QAAI,UAAU;AACd,UAAM,WAAW,MAAY;AAC3B,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM,CAAC;AAAA,IAChD;AAMA,UAAM,QAAQ,WAAW,UAAU,SAAS;AAC5C,YAAQ,MAAM,GAAG,QAAQ,CAAC,UAAkB;AAC1C,aAAO,KAAK,KAAK;AAAA,IACnB,CAAC;AACD,YAAQ,MAAM,GAAG,OAAO,MAAM;AAC5B,mBAAa,KAAK;AAClB,eAAS;AAAA,IACX,CAAC;AACD,YAAQ,MAAM,GAAG,SAAS,MAAM;AAC9B,mBAAa,KAAK;AAClB,eAAS;AAAA,IACX,CAAC;AAAA,EACH,CAAC;AACH;AAGA,SAAS,YAAY,OAAoC;AACvD,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,gBAAyB,QAAQ,IAAI,OAAO,iBAAiB;AACnE,MAAI,kBAAkB,UAAa,OAAO,kBAAkB,SAAU,QAAO;AAC7E,QAAM,WAAoB,QAAQ,IAAI,OAAO,WAAW;AACxD,MAAI,aAAa,UAAa,OAAO,aAAa,SAAU,QAAO;AACnE,QAAM,YAAqB,QAAQ,IAAI,OAAO,YAAY;AAC1D,MAAI,cAAc,UAAa,OAAO,cAAc,SAAU,QAAO;AACrE,SAAO;AACT;AAEA,eAAe,gBAAoC;AACjD,QAAM,aAAa,MAAM,aAAa,GAAG;AACzC,MAAI,WAAW,SAAS,GAAG;AACzB,QAAI;AACF,YAAM,SAAkB,KAAK,MAAM,UAAU;AAC7C,UAAI,YAAY,MAAM,EAAG,QAAO;AAAA,IAClC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,IAAI;AAC5B,MAAI,SAAS;AACX,QAAI;AACF,YAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,UAAI,YAAY,MAAM,EAAG,QAAO;AAAA,IAClC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAOA,SAAS,UAAU,KAAsB;AACvC,MAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,UAAU,KAAK;AAC5D,UAAM,OAAgB,QAAQ,IAAI,KAAK,MAAM;AAC7C,QAAI,OAAO,SAAS,SAAU,QAAO;AAAA,EACvC;AACA,SAAO;AACT;AAMA,SAAS,aAAa,OAAmC;AACvD,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,aAAsB,QAAQ,IAAI,OAAO,YAAY;AAC3D,MAAI,eAAe,WAAW,eAAe,UAAU,eAAe,OAAO;AAC3E,WAAO;AAAA,EACT;AACA,QAAM,MAAkB,EAAE,WAAW;AACrC,QAAM,KAAc,QAAQ,IAAI,OAAO,eAAe;AACtD,MAAI,OAAO,OAAO,SAAU,KAAI,gBAAgB;AAChD,QAAM,KAAc,QAAQ,IAAI,OAAO,cAAc;AACrD,MAAI,OAAO,OAAO,SAAU,KAAI,eAAe;AAC/C,QAAM,KAAc,QAAQ,IAAI,OAAO,eAAe;AACtD,MAAI,OAAO,OAAO,YAAY,OAAO,MAAM;AAKzC,UAAM,OAAgC,CAAC;AACvC,eAAW,KAAK,OAAO,KAAK,EAAE,GAAG;AAC/B,WAAK,CAAC,IAAI,QAAQ,IAAI,IAAI,CAAC;AAAA,IAC7B;AACA,QAAI,gBAAgB;AAAA,EACtB;AACA,SAAO;AACT;AAEA,SAAS,gBACP,YACA,eACA,WACgC;AAChC,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,MAAM;AACV,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,WAA6B;AAC3C,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ,EAAE,OAAO,CAAC;AAAA,IACpB;AACA,UAAM,OAAO,IAAI,QAAQ,UAAU;AACnC,UAAM,QAAQ,WAAW,MAAM;AAC7B,WAAK,QAAQ;AACb,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,cAAc;AAAA,MAChB,CAAC;AAAA,IACH,GAAG,SAAS;AACZ,SAAK,GAAG,WAAW,MAAM;AACvB,WAAK,MAAM,aAAa;AAAA,IAC1B,CAAC;AACD,SAAK,GAAG,SAAS,CAAC,QAAQ;AACxB,mBAAa,KAAK;AAClB,YAAM,OAAO,UAAU,GAAG;AAC1B,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,eAAe,oCAAoC,IAAI;AAAA,QACvD,cAAc,uCAAuC,IAAI;AAAA,MAC3D,CAAC;AAAA,IACH,CAAC;AACD,SAAK,GAAG,QAAQ,CAAC,UAAkB;AACjC,aAAO,MAAM,SAAS,MAAM;AAC5B,YAAM,aAAa,IAAI,QAAQ,IAAI;AACnC,UAAI,cAAc,GAAG;AACnB,qBAAa,KAAK;AAClB,cAAM,OAAO,IAAI,MAAM,GAAG,UAAU,EAAE,KAAK;AAC3C,aAAK,QAAQ;AACb,YAAI;AACF,gBAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,gBAAM,QAAQ,aAAa,MAAM;AACjC,cAAI,UAAU,MAAM;AAClB,mBAAO,KAAK;AACZ;AAAA,UACF;AACA,iBAAO;AAAA,YACL,YAAY;AAAA,YACZ,eAAe;AAAA,YACf,cAAc;AAAA,UAChB,CAAC;AAAA,QACH,QAAQ;AACN,iBAAO;AAAA,YACL,YAAY;AAAA,YACZ,eAAe;AAAA,YACf,cAAc;AAAA,UAChB,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,CAAC;AACD,SAAK,GAAG,OAAO,MAAM;AACnB,UAAI,QAAS;AACb,mBAAa,KAAK;AAClB,WAAK,QAAQ;AACb,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,cAAc;AAAA,MAChB,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,YAAY,MAA6B;AAChD,MAAI;AACF,WAAO,aAAa,MAAM,MAAM,EAAE,KAAK;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,KAAK,QAA2B;AACvC,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,CAAC;AAAA,CAAI;AAClD,UAAQ,KAAK,CAAC;AAChB;AAEA,eAAe,OAAuB;AACpC,QAAM,aAAa,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC;AAClD,MAAI,WAAW,YAAY;AACzB,WAAO,KAAK;AAAA,MACV,YAAY;AAAA,MACZ,eAAe,qCAAqC,WAAW,KAAK;AAAA,MACpE,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,MAAI,WAAW,WAAW,QAAQ;AAChC,WAAO,KAAK;AAAA,MACV,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AACA,MAAI,WAAW,WAAW,SAAS;AACjC,WAAO,KAAK;AAAA,MACV,YAAY;AAAA,MACZ,eAAe;AAAA,IACjB,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,MAAM,cAAc;AAElC,MAAI,MAAM,cAAc,UAAa,WAAW,cAAc,SAAS,MAAM,SAAS,GAAG;AACvF,WAAO,KAAK;AAAA,MACV,YAAY;AAAA,MACZ,eAAe,8BAA8B,MAAM,SAAS;AAAA,IAC9D,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,YAAY,WAAW,WAAW;AACjD,MAAI,WAAW,MAAM;AACnB,WAAO,KAAK;AAAA,MACV,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAQA,QAAM,YAAY,MAAM,cAAc,WAAW;AACjD,QAAM,QAAQ,WAAW;AAEzB,QAAM,UAAU,KAAK,UAAU;AAAA,IAC7B,QAAQ,WAAW;AAAA,IACnB;AAAA,IACA;AAAA,IACA,WAAW,MAAM,mBAAmB;AAAA,IACpC,UAAU,MAAM,aAAa;AAAA,IAC7B,WAAW,MAAM,cAAc;AAAA,EACjC,CAAC;AACD,QAAM,OAAO,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAEtE,QAAM,SAAS,GAAG,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAAA;AACnD,QAAM,EAAE,OAAO,IAAI,MAAM,gBAAgB,WAAW,YAAY,QAAQ,WAAW,SAAS;AAC5F,SAAO,KAAK,MAAM;AACpB;AAEA,KAAK,EAAE,MAAM,CAAC,QAAiB;AAE7B,QAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,UAAQ,OAAO;AAAA,IACb,GAAG,KAAK,UAAU;AAAA,MAChB,YAAY;AAAA,MACZ,eAAe,6BAA6B,MAAM;AAAA,MAClD,cAAc;AAAA,IAChB,CAAC,CAAC;AAAA;AAAA,EACJ;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}