@scopebond/hook 0.2.1 → 0.3.0

package/dist/shell.js

@@ -0,0 +1,331 @@
+// Shell decomposition for the hook mapper. A single Bash tool call can carry many
+// commands — `a && b`, `a; b`, `a | b`, `$(c)`, `` `c` ``, `bash -c '…'`, `( c )` —
+// so mapping only the first token lets a denied program ride in behind an allowed
+// one. This module splits a command line into the simple commands it will actually
+// run, so the mapper can emit an intent for each and the runtime can deny if any
+// one of them is out of policy.
+//
+// It is best-effort and fail-safe: anything it cannot parse with confidence is
+// returned as a single `opaque` command, which the caller denies (strict) or
+// observes (non-strict) rather than trusting. Every scan is linear in the input
+// length with no backtracking, so a hostile command cannot stall the hot path.
+const SHELLS = new Set(["sh", "bash", "zsh", "dash", "ksh", "ash", "busybox"]);
+const MAX_DEPTH = 6;
+/** Split a command line into top-level simple-command strings at unquoted
+ *  separators (`;`, newline, `&&`, `||`, `|`, `&`), leaving quotes, `$( )`,
+ *  backticks and `( )` groups intact inside each piece. */
+function splitTopLevel(src) {
+    const segments = [];
+    let cur = "";
+    let quote = null;
+    let paren = 0; // depth of $( ) and ( )
+    let backtick = false;
+    const flush = () => { const t = cur.trim(); if (t)
+        segments.push(t); cur = ""; };
+    for (let i = 0; i < src.length; i++) {
+        const c = src[i];
+        const n = src[i + 1];
+        if (quote) {
+            cur += c;
+            if (quote === "'") {
+                if (c === "'")
+                    quote = null;
+            }
+            else if (c === "\\" && n !== undefined)
+                cur += src[++i];
+            else if (c === '"')
+                quote = null;
+            continue;
+        }
+        if (c === "'" || c === '"') {
+            quote = c;
+            cur += c;
+            continue;
+        }
+        if (c === "`") {
+            backtick = !backtick;
+            cur += c;
+            continue;
+        }
+        if (backtick) {
+            cur += c;
+            continue;
+        }
+        if (c === "\\" && n !== undefined) {
+            cur += c + src[++i];
+            continue;
+        }
+        if (c === "$" && n === "(") {
+            paren++;
+            cur += "$(";
+            i++;
+            continue;
+        }
+        if (c === "(") {
+            paren++;
+            cur += c;
+            continue;
+        }
+        if (c === ")") {
+            if (paren > 0)
+                paren--;
+            cur += c;
+            continue;
+        }
+        if (paren > 0) {
+            cur += c;
+            continue;
+        }
+        if (c === ";" || c === "\n") {
+            flush();
+            continue;
+        }
+        if (c === "&" && n === "&") {
+            flush();
+            i++;
+            continue;
+        }
+        if (c === "|" && n === "|") {
+            flush();
+            i++;
+            continue;
+        }
+        if (c === "&" || c === "|") {
+            flush();
+            continue;
+        }
+        cur += c;
+    }
+    flush();
+    return { segments, unbalanced: quote !== null || paren !== 0 || backtick };
+}
+/** Pull the contents of command substitutions and subshell groups out of one
+ *  segment — `$( … )`, `` ` … ` ``, and a leading `( … )` — for recursion, and
+ *  return the segment with those regions blanked so the outer command tokenizes
+ *  cleanly. */
+function extractSubstitutions(seg) {
+    const inner = [];
+    let outer = "";
+    let quote = null;
+    for (let i = 0; i < seg.length; i++) {
+        const c = seg[i];
+        const n = seg[i + 1];
+        if (quote) {
+            outer += c;
+            if (quote === "'") {
+                if (c === "'")
+                    quote = null;
+            }
+            else if (c === "\\" && n !== undefined)
+                outer += seg[++i];
+            else if (c === '"')
+                quote = null;
+            continue;
+        }
+        if (c === "'" || c === '"') {
+            quote = c;
+            outer += c;
+            continue;
+        }
+        if (c === "`") {
+            const end = seg.indexOf("`", i + 1);
+            if (end === -1) {
+                outer += c;
+                continue;
+            }
+            inner.push(seg.slice(i + 1, end));
+            i = end;
+            continue;
+        }
+        if ((c === "$" && n === "(") || c === "(") {
+            const start = c === "(" ? i + 1 : i + 2;
+            let depth = 1;
+            let j = start;
+            for (; j < seg.length && depth > 0; j++) {
+                if (seg[j] === "(")
+                    depth++;
+                else if (seg[j] === ")")
+                    depth--;
+            }
+            inner.push(seg.slice(start, depth === 0 ? j - 1 : j));
+            i = j - 1;
+            continue;
+        }
+        outer += c;
+    }
+    return { outer, inner };
+}
+/** Tokenize a simple command into words, honoring single and double quotes. */
+function tokenize(s) {
+    const out = [];
+    let cur = "";
+    let has = false;
+    let quote = null;
+    for (let i = 0; i < s.length; i++) {
+        const c = s[i];
+        const n = s[i + 1];
+        if (quote === "'") {
+            if (c === "'")
+                quote = null;
+            else
+                cur += c;
+            has = true;
+            continue;
+        }
+        if (quote === '"') {
+            if (c === '"')
+                quote = null;
+            else if (c === "\\" && n !== undefined)
+                cur += s[++i];
+            else
+                cur += c;
+            has = true;
+            continue;
+        }
+        if (c === "'" || c === '"') {
+            quote = c;
+            has = true;
+            continue;
+        }
+        if (c === "\\" && n !== undefined) {
+            cur += s[++i];
+            has = true;
+            continue;
+        }
+        if (/\s/.test(c)) {
+            if (has) {
+                out.push(cur);
+                cur = "";
+                has = false;
+            }
+            continue;
+        }
+        cur += c;
+        has = true;
+    }
+    if (has)
+        out.push(cur);
+    return out;
+}
+const basename = (t) => t.replace(/^.*[\\/]/, "");
+const isAssignment = (t) => /^[A-Za-z_][A-Za-z0-9_]*=/.test(t);
+/** Strip a leading run of `sudo`, `env`, `command`, `nohup`, `nice`, `time`,
+ *  `xargs`, `exec` wrappers and `NAME=value` assignments, so the program is the
+ *  real one about to run. `env`/`xargs` consume their own following words as the
+ *  command, which is handled by simply dropping the wrapper token. */
+function stripPrefixes(tokens) {
+    const wrappers = new Set(["sudo", "env", "command", "nohup", "nice", "time", "exec", "stdbuf", "setsid", "xargs"]);
+    let i = 0;
+    while (i < tokens.length) {
+        const t = tokens[i];
+        if (isAssignment(t)) {
+            i++;
+            continue;
+        }
+        if (wrappers.has(basename(t))) {
+            i++;
+            // `sudo -u user`, `nice -n 10`, `env -i` … skip option words and their args.
+            while (i < tokens.length && tokens[i].startsWith("-")) {
+                const opt = tokens[i];
+                i++;
+                if (/^-[unC]$/.test(opt) && i < tokens.length && !tokens[i].startsWith("-"))
+                    i++;
+            }
+            continue;
+        }
+        break;
+    }
+    return tokens.slice(i);
+}
+/** Find the script argument of a shell invoked with `-c`, including combined short
+ *  flags where `c` is last (`-lc`, `-xec`). The script is the next non-option word. */
+function shellScriptArg(argv) {
+    for (let i = 0; i < argv.length; i++) {
+        if (argv[i] === "-c" || /^-[A-Za-z]*c$/.test(argv[i])) {
+            for (let j = i + 1; j < argv.length; j++)
+                if (!argv[j].startsWith("-"))
+                    return argv[j];
+        }
+    }
+    return null;
+}
+/** Decompose a command line into the simple commands it will run. Recurses into
+ *  `-c` scripts and command substitutions up to a bounded depth. */
+export function decomposeShell(command, depth = 0) {
+    const src = command.trim();
+    if (!src)
+        return [];
+    const opaque = () => [{ program: "", programRaw: "", argv: [], raw: src, opaque: true }];
+    if (depth > MAX_DEPTH)
+        return opaque();
+    const { segments, unbalanced } = splitTopLevel(src);
+    if (unbalanced)
+        return opaque();
+    const out = [];
+    for (const seg of segments) {
+        const { outer, inner } = extractSubstitutions(seg);
+        for (const sub of inner)
+            out.push(...decomposeShell(sub, depth + 1));
+        const tokens = stripPrefixes(tokenize(outer));
+        if (tokens.length === 0)
+            continue; // pure substitution/subshell — inner already handled
+        const program = basename(tokens[0]);
+        const argv = tokens.slice(1);
+        out.push({ program, programRaw: tokens[0], argv, raw: seg, opaque: false });
+        if (SHELLS.has(program)) {
+            const script = shellScriptArg(argv);
+            if (script)
+                out.push(...decomposeShell(script, depth + 1));
+        }
+    }
+    return out.length ? out : opaque();
+}
+/** Parse a `git … push …` simple command into git.push params, or null if it is
+ *  not a push. Handles global options that take an argument (`-C dir`, `-c k=v`),
+ *  `--force`/`-f`/`--force-with-lease`, and a leading `+` force refspec. */
+export function parseGitPush(cmd) {
+    if (cmd.program !== "git")
+        return null;
+    const a = cmd.argv;
+    let i = 0;
+    while (i < a.length) {
+        const t = a[i];
+        if (t === "-C" || t === "-c" || t === "--git-dir" || t === "--work-tree" || t === "--namespace") {
+            i += 2;
+            continue;
+        }
+        if (t.startsWith("-")) {
+            i++;
+            continue;
+        }
+        break;
+    }
+    if (a[i] !== "push")
+        return null;
+    const rest = a.slice(i + 1);
+    let force = false;
+    const positional = [];
+    for (const t of rest) {
+        if (t === "--force" || t === "-f" || t === "--force-with-lease" || t.startsWith("--force-with-lease=")) {
+            force = true;
+            continue;
+        }
+        if (t.startsWith("-"))
+            continue;
+        positional.push(t);
+    }
+    const params = { force };
+    if (positional[0])
+        params.remote = positional[0];
+    if (positional[1]) {
+        let refspec = positional[1];
+        if (refspec.startsWith("+")) {
+            force = true;
+            params.force = true;
+            refspec = refspec.slice(1);
+        }
+        params.ref = refspec.replace(/^[^:]*:\+?/, ""); // src:dst → dst
+    }
+    return params;
+}
+//# sourceMappingURL=shell.js.map

package/dist/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../src/shell.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,oFAAoF;AACpF,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,gCAAgC;AAChC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAiB/E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAC/E,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;2DAE2D;AAC3D,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,wBAAwB;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,IAAI,CAAC,CAAC;YACT,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,GAAG;oBAAE,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;iBAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;iBACnD,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5D,IAAI,QAAQ,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACrE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,GAAG,IAAI,IAAI,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACpE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;AAC7E,CAAC;AAED;;;eAGe;AACf,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,GAAG;oBAAE,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;iBAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;iBACrD,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,KAAK,CAAC;YACd,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;qBACvB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;YACnC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBAAM,GAAG,IAAI,CAAC,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACxF,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;iBACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;gBACjD,GAAG,IAAI,CAAC,CAAC;YACd,GAAG,GAAG,IAAI,CAAC;YAAC,SAAS;QACvB,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,GAAG,GAAG,EAAE,CAAC;gBAAC,GAAG,GAAG,KAAK,CAAC;YAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClF,GAAG,IAAI,CAAC,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEhF;;;sEAGsE;AACtE,SAAS,aAAa,CAAC,MAAgB;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACnH,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,CAAC,EAAE,CAAC;YACJ,6EAA6E;YAC7E,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACtB,CAAC,EAAE,CAAC;gBACJ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,CAAC,EAAE,CAAC;YACnF,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM;IACR,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;uFACuF;AACvF,SAAS,cAAc,CAAC,IAAc;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAK,GAAG,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,GAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,MAAM,EAAE,CAAC;IAEvC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,UAAU;QAAE,OAAO,MAAM,EAAE,CAAC;IAEhC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,qDAAqD;QACxF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC;AAED;;4EAE4E;AAC5E,MAAM,UAAU,YAAY,CAAC,GAAkB;IAC7C,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtH,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACzC,MAAM;IACR,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,oBAAoB,IAAI,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACnI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAsD,EAAE,KAAK,EAAE,CAAC;IAC5E,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,IAAI,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;YAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// Shell decomposition for the hook mapper. A single Bash tool call can carry many\n// commands — `a && b`, `a; b`, `a | b`, `$(c)`, `` `c` ``, `bash -c '…'`, `( c )` —\n// so mapping only the first token lets a denied program ride in behind an allowed\n// one. This module splits a command line into the simple commands it will actually\n// run, so the mapper can emit an intent for each and the runtime can deny if any\n// one of them is out of policy.\n//\n// It is best-effort and fail-safe: anything it cannot parse with confidence is\n// returned as a single `opaque` command, which the caller denies (strict) or\n// observes (non-strict) rather than trusting. Every scan is linear in the input\n// length with no backtracking, so a hostile command cannot stall the hot path.\n\nexport interface SimpleCommand {\n  /** The invoked program's basename, after stripping sudo/env/assignment prefixes.\n   *  Empty when it cannot be determined. */\n  program: string;\n  /** The first token whole (pre-basename), so a caller can scrub it before splitting\n   *  on \"/\": a bare-secret command must not leak a path-fragment as the program. */\n  programRaw: string;\n  /** Remaining argv (quotes removed), best-effort — used to parse git push. */\n  argv: string[];\n  /** The raw simple-command text, for the redacted command digest. */\n  raw: string;\n  /** True when parsing was not confident; the caller must fail closed. */\n  opaque: boolean;\n}\n\nconst SHELLS = new Set([\"sh\", \"bash\", \"zsh\", \"dash\", \"ksh\", \"ash\", \"busybox\"]);\nconst MAX_DEPTH = 6;\n\n/** Split a command line into top-level simple-command strings at unquoted\n *  separators (`;`, newline, `&&`, `||`, `|`, `&`), leaving quotes, `$( )`,\n *  backticks and `( )` groups intact inside each piece. */\nfunction splitTopLevel(src: string): { segments: string[]; unbalanced: boolean } {\n  const segments: string[] = [];\n  let cur = \"\";\n  let quote: '\"' | \"'\" | null = null;\n  let paren = 0; // depth of $( ) and ( )\n  let backtick = false;\n  const flush = () => { const t = cur.trim(); if (t) segments.push(t); cur = \"\"; };\n\n  for (let i = 0; i < src.length; i++) {\n    const c = src[i];\n    const n = src[i + 1];\n    if (quote) {\n      cur += c;\n      if (quote === \"'\") { if (c === \"'\") quote = null; }\n      else if (c === \"\\\\\" && n !== undefined) cur += src[++i];\n      else if (c === '\"') quote = null;\n      continue;\n    }\n    if (c === \"'\" || c === '\"') { quote = c; cur += c; continue; }\n    if (c === \"`\") { backtick = !backtick; cur += c; continue; }\n    if (backtick) { cur += c; continue; }\n    if (c === \"\\\\\" && n !== undefined) { cur += c + src[++i]; continue; }\n    if (c === \"$\" && n === \"(\") { paren++; cur += \"$(\"; i++; continue; }\n    if (c === \"(\") { paren++; cur += c; continue; }\n    if (c === \")\") { if (paren > 0) paren--; cur += c; continue; }\n    if (paren > 0) { cur += c; continue; }\n    if (c === \";\" || c === \"\\n\") { flush(); continue; }\n    if (c === \"&\" && n === \"&\") { flush(); i++; continue; }\n    if (c === \"|\" && n === \"|\") { flush(); i++; continue; }\n    if (c === \"&\" || c === \"|\") { flush(); continue; }\n    cur += c;\n  }\n  flush();\n  return { segments, unbalanced: quote !== null || paren !== 0 || backtick };\n}\n\n/** Pull the contents of command substitutions and subshell groups out of one\n *  segment — `$( … )`, `` ` … ` ``, and a leading `( … )` — for recursion, and\n *  return the segment with those regions blanked so the outer command tokenizes\n *  cleanly. */\nfunction extractSubstitutions(seg: string): { outer: string; inner: string[] } {\n  const inner: string[] = [];\n  let outer = \"\";\n  let quote: '\"' | \"'\" | null = null;\n  for (let i = 0; i < seg.length; i++) {\n    const c = seg[i];\n    const n = seg[i + 1];\n    if (quote) {\n      outer += c;\n      if (quote === \"'\") { if (c === \"'\") quote = null; }\n      else if (c === \"\\\\\" && n !== undefined) outer += seg[++i];\n      else if (c === '\"') quote = null;\n      continue;\n    }\n    if (c === \"'\" || c === '\"') { quote = c; outer += c; continue; }\n    if (c === \"`\") {\n      const end = seg.indexOf(\"`\", i + 1);\n      if (end === -1) { outer += c; continue; }\n      inner.push(seg.slice(i + 1, end));\n      i = end;\n      continue;\n    }\n    if ((c === \"$\" && n === \"(\") || c === \"(\") {\n      const start = c === \"(\" ? i + 1 : i + 2;\n      let depth = 1;\n      let j = start;\n      for (; j < seg.length && depth > 0; j++) {\n        if (seg[j] === \"(\") depth++;\n        else if (seg[j] === \")\") depth--;\n      }\n      inner.push(seg.slice(start, depth === 0 ? j - 1 : j));\n      i = j - 1;\n      continue;\n    }\n    outer += c;\n  }\n  return { outer, inner };\n}\n\n/** Tokenize a simple command into words, honoring single and double quotes. */\nfunction tokenize(s: string): string[] {\n  const out: string[] = [];\n  let cur = \"\";\n  let has = false;\n  let quote: '\"' | \"'\" | null = null;\n  for (let i = 0; i < s.length; i++) {\n    const c = s[i];\n    const n = s[i + 1];\n    if (quote === \"'\") { if (c === \"'\") quote = null; else cur += c; has = true; continue; }\n    if (quote === '\"') {\n      if (c === '\"') quote = null;\n      else if (c === \"\\\\\" && n !== undefined) cur += s[++i];\n      else cur += c;\n      has = true; continue;\n    }\n    if (c === \"'\" || c === '\"') { quote = c; has = true; continue; }\n    if (c === \"\\\\\" && n !== undefined) { cur += s[++i]; has = true; continue; }\n    if (/\\s/.test(c)) { if (has) { out.push(cur); cur = \"\"; has = false; } continue; }\n    cur += c; has = true;\n  }\n  if (has) out.push(cur);\n  return out;\n}\n\nconst basename = (t: string): string => t.replace(/^.*[\\\\/]/, \"\");\nconst isAssignment = (t: string): boolean => /^[A-Za-z_][A-Za-z0-9_]*=/.test(t);\n\n/** Strip a leading run of `sudo`, `env`, `command`, `nohup`, `nice`, `time`,\n *  `xargs`, `exec` wrappers and `NAME=value` assignments, so the program is the\n *  real one about to run. `env`/`xargs` consume their own following words as the\n *  command, which is handled by simply dropping the wrapper token. */\nfunction stripPrefixes(tokens: string[]): string[] {\n  const wrappers = new Set([\"sudo\", \"env\", \"command\", \"nohup\", \"nice\", \"time\", \"exec\", \"stdbuf\", \"setsid\", \"xargs\"]);\n  let i = 0;\n  while (i < tokens.length) {\n    const t = tokens[i];\n    if (isAssignment(t)) { i++; continue; }\n    if (wrappers.has(basename(t))) {\n      i++;\n      // `sudo -u user`, `nice -n 10`, `env -i` … skip option words and their args.\n      while (i < tokens.length && tokens[i].startsWith(\"-\")) {\n        const opt = tokens[i];\n        i++;\n        if (/^-[unC]$/.test(opt) && i < tokens.length && !tokens[i].startsWith(\"-\")) i++;\n      }\n      continue;\n    }\n    break;\n  }\n  return tokens.slice(i);\n}\n\n/** Find the script argument of a shell invoked with `-c`, including combined short\n *  flags where `c` is last (`-lc`, `-xec`). The script is the next non-option word. */\nfunction shellScriptArg(argv: string[]): string | null {\n  for (let i = 0; i < argv.length; i++) {\n    if (argv[i] === \"-c\" || /^-[A-Za-z]*c$/.test(argv[i])) {\n      for (let j = i + 1; j < argv.length; j++) if (!argv[j].startsWith(\"-\")) return argv[j];\n    }\n  }\n  return null;\n}\n\n/** Decompose a command line into the simple commands it will run. Recurses into\n *  `-c` scripts and command substitutions up to a bounded depth. */\nexport function decomposeShell(command: string, depth = 0): SimpleCommand[] {\n  const src = command.trim();\n  if (!src) return [];\n  const opaque = (): SimpleCommand[] => [{ program: \"\", programRaw: \"\", argv: [], raw: src, opaque: true }];\n  if (depth > MAX_DEPTH) return opaque();\n\n  const { segments, unbalanced } = splitTopLevel(src);\n  if (unbalanced) return opaque();\n\n  const out: SimpleCommand[] = [];\n  for (const seg of segments) {\n    const { outer, inner } = extractSubstitutions(seg);\n    for (const sub of inner) out.push(...decomposeShell(sub, depth + 1));\n\n    const tokens = stripPrefixes(tokenize(outer));\n    if (tokens.length === 0) continue; // pure substitution/subshell — inner already handled\n    const program = basename(tokens[0]);\n    const argv = tokens.slice(1);\n    out.push({ program, programRaw: tokens[0], argv, raw: seg, opaque: false });\n\n    if (SHELLS.has(program)) {\n      const script = shellScriptArg(argv);\n      if (script) out.push(...decomposeShell(script, depth + 1));\n    }\n  }\n  return out.length ? out : opaque();\n}\n\n/** Parse a `git … push …` simple command into git.push params, or null if it is\n *  not a push. Handles global options that take an argument (`-C dir`, `-c k=v`),\n *  `--force`/`-f`/`--force-with-lease`, and a leading `+` force refspec. */\nexport function parseGitPush(cmd: SimpleCommand): { force: boolean; remote?: string; ref?: string } | null {\n  if (cmd.program !== \"git\") return null;\n  const a = cmd.argv;\n  let i = 0;\n  while (i < a.length) {\n    const t = a[i];\n    if (t === \"-C\" || t === \"-c\" || t === \"--git-dir\" || t === \"--work-tree\" || t === \"--namespace\") { i += 2; continue; }\n    if (t.startsWith(\"-\")) { i++; continue; }\n    break;\n  }\n  if (a[i] !== \"push\") return null;\n  const rest = a.slice(i + 1);\n  let force = false;\n  const positional: string[] = [];\n  for (const t of rest) {\n    if (t === \"--force\" || t === \"-f\" || t === \"--force-with-lease\" || t.startsWith(\"--force-with-lease=\")) { force = true; continue; }\n    if (t.startsWith(\"-\")) continue;\n    positional.push(t);\n  }\n  const params: { force: boolean; remote?: string; ref?: string } = { force };\n  if (positional[0]) params.remote = positional[0];\n  if (positional[1]) {\n    let refspec = positional[1];\n    if (refspec.startsWith(\"+\")) { force = true; params.force = true; refspec = refspec.slice(1); }\n    params.ref = refspec.replace(/^[^:]*:\\+?/, \"\"); // src:dst → dst\n  }\n  return params;\n}\n"]}

package/dist/version.d.ts

@@ -0,0 +1,6 @@
+export declare function hookVersion(): string;
+/** The command the agent harness runs for each tool call: a version-pinned npx
+ *  invocation so a missing global binary is fetched rather than silently skipped
+ *  (which a harness can treat as "no hook" and fail open). */
+export declare function hookCommand(harness: "claude" | "cursor"): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAOA,wBAAgB,WAAW,IAAI,MAAM,CASpC;AAED;;8DAE8D;AAC9D,wBAAgB,WAAW,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAEhE"}

package/dist/version.js

@@ -0,0 +1,23 @@
+// The installed package version, read from the package's own package.json at
+// runtime. Used to pin the `npx` command the hook installs into the agent config,
+// so the harness always runs the exact version the user set up rather than a
+// floating latest.
+import { readFileSync } from "node:fs";
+export function hookVersion() {
+    try {
+        // dist/version.js → ../package.json is the package root in both the source
+        // tree and the published tarball.
+        const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+        return typeof pkg.version === "string" ? pkg.version : "latest";
+    }
+    catch {
+        return "latest";
+    }
+}
+/** The command the agent harness runs for each tool call: a version-pinned npx
+ *  invocation so a missing global binary is fetched rather than silently skipped
+ *  (which a harness can treat as "no hook" and fail open). */
+export function hookCommand(harness) {
+    return `npx -y @scopebond/hook@${hookVersion()} ${harness}`;
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,kFAAkF;AAClF,6EAA6E;AAC7E,mBAAmB;AAEnB,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1F,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;8DAE8D;AAC9D,MAAM,UAAU,WAAW,CAAC,OAA4B;IACtD,OAAO,0BAA0B,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;AAC9D,CAAC","sourcesContent":["// The installed package version, read from the package's own package.json at\n// runtime. Used to pin the `npx` command the hook installs into the agent config,\n// so the harness always runs the exact version the user set up rather than a\n// floating latest.\n\nimport { readFileSync } from \"node:fs\";\n\nexport function hookVersion(): string {\n  try {\n    // dist/version.js → ../package.json is the package root in both the source\n    // tree and the published tarball.\n    const pkg = JSON.parse(readFileSync(new URL(\"../package.json\", import.meta.url), \"utf8\"));\n    return typeof pkg.version === \"string\" ? pkg.version : \"latest\";\n  } catch {\n    return \"latest\";\n  }\n}\n\n/** The command the agent harness runs for each tool call: a version-pinned npx\n *  invocation so a missing global binary is fetched rather than silently skipped\n *  (which a harness can treat as \"no hook\" and fail open). */\nexport function hookCommand(harness: \"claude\" | \"cursor\"): string {\n  return `npx -y @scopebond/hook@${hookVersion()} ${harness}`;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scopebond/hook",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Scopebond hook for Claude Code and Cursor — checks each coding-agent tool call against policy before it runs (in-path, cooperative M0) and records a signed receipt, locally.",
   "license": "Apache-2.0",
   "author": "Avouro LLC",
@@ -41,8 +41,8 @@
   ],
   "dependencies": {
     "@scopebond/policy-schema": "^0.3.0",
-    "@scopebond/gateway": "^0.5.0",
-    "@scopebond/sdk": "^0.1.1"
+    "@scopebond/sdk": "^0.1.1",
+    "@scopebond/gateway": "^0.6.0"
   },
   "publishConfig": {
     "access": "public"