@sigmashake/ssg 0.29.28 → 0.29.30

package/bin/ssg.cjs

@@ -44,6 +44,40 @@ if (!binaryPath) {
   if (fs.existsSync(devBin)) binaryPath = devBin;
 }
 
+// 2.5 Hook-eval fast-path short-circuit (perf):
+// `ssg hook eval` is invoked by Claude Code / Cursor on EVERY tool call.
+// The bun-compiled `ssg` binary takes ~1s just to boot on macOS without
+// notarization (no dyld closure caching). The Zig `ssg-hook-fast` binary
+// does the same eval in ~40ms. When called as `hook eval` and the fast
+// bin exists, exec it directly and skip bun entirely.
+//
+// Exit status 99 is the Zig binary's "fall through to JS" sentinel
+// (ask-mode / TTY prompts that need the full Bun runtime). Anything
+// else — allow (0), redirect (non-zero), deny (non-zero) — the Zig
+// binary handles natively.
+//
+// Without this short-circuit, every Claude Code Bash command pays the
+// full bun-startup cost on macOS (~1.3 s), even though the actual eval
+// only takes ~40 ms.
+if (
+  hookBinPath &&
+  process.env['SSG_HOOK_NO_FAST'] !== '1' &&
+  process.argv.length === 4 &&
+  process.argv[2] === 'hook' &&
+  process.argv[3] === 'eval'
+) {
+  const env = { ...process.env, SSG_PUBLIC_DIR: path.resolve(__dirname, '..', 'public') };
+  if (evalServerBinPath) env['SSG_EVAL_SERVER_BIN'] = evalServerBinPath;
+  const r = spawnSync(hookBinPath, [], { stdio: 'inherit', env, windowsHide: true });
+  // status 99 = sentinel for "needs JS path" (ask mode, TTY) — fall through.
+  // null/undefined status with error → fall through and let bun ssg handle.
+  if (r.status !== 99 && r.status !== null && r.status !== undefined && !r.error) {
+    process.exit(r.status);
+  }
+  // Otherwise fall through to the bun ssg below (handles ask mode, TTY,
+  // and surface any error diagnostics consistently with the rest of the CLI).
+}
+
 // 3. Run binary if found
 if (binaryPath) {
   const env = { ...process.env, SSG_PUBLIC_DIR: path.resolve(__dirname, '..', 'public') };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sigmashake/ssg",
-  "version": "0.29.28",
+  "version": "0.29.30",
   "description": "AI Agent Governance CLI — evaluate tool calls against rules, block dangerous operations, and surface blocked commands",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -14,8 +14,8 @@
     "README.md"
   ],
   "optionalDependencies": {
-    "@sigmashake/ssg-linux-x64": "0.29.28",
-    "@sigmashake/ssg-linux-arm64": "0.29.28",
+    "@sigmashake/ssg-linux-x64": "0.29.30",
+    "@sigmashake/ssg-linux-arm64": "0.29.30",
     "@sigmashake/ssg-darwin-arm64": "0.29.27",
     "@sigmashake/ssg-darwin-x64": "0.29.27",
     "@sigmashake/ssg-win32-x64": "0.29.21"