@smeltjs/core 0.1.0 → 0.3.0

package/dist/cli/config.js

@@ -1,8 +1,9 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { CliUsageError } from '../errors.js';
+import { ENFORCEMENT_MODES } from '../hooks/guard-core.js';
 import { isStrategy, STRATEGIES } from '../plan/planners.js';
-import { CLI_NAME } from './args.js';
+import { CLI_NAME } from './shell.js';
 /**
  * `smelt.config.json` — CLI defaults, and nothing more.
  *
@@ -84,7 +85,7 @@ export function parseConfig(text, path) {
             `${String(CONFIG_VERSION)}. The schema is versioned so a mismatch is visible ` +
             `instead of half-understood.`);
     }
-    const known = ['smeltConfig', 'defaultBudgetBytes', 'strategy', 'store'];
+    const known = ['smeltConfig', 'defaultBudgetBytes', 'strategy', 'store', 'hooks'];
     const unknown = Object.keys(fields).filter((key) => !known.includes(key));
     if (unknown.length > 0) {
         throw bad(`unknown key${unknown.length === 1 ? '' : 's'} ${unknown.map((k) => `"${k}"`).join(', ')}. ` +
@@ -104,11 +105,53 @@ export function parseConfig(text, path) {
             `got ${JSON.stringify(strategy)}.`);
     }
     const store = parseStore(fields['store'], bad);
+    const hooks = parseHooks(fields['hooks'], bad);
     return {
         smeltConfig: CONFIG_VERSION,
         ...(budget === undefined ? {} : { defaultBudgetBytes: budget }),
         ...(strategy === undefined ? {} : { strategy }),
         ...(store === undefined ? {} : { store }),
+        ...(hooks === undefined ? {} : { hooks }),
+    };
+}
+/**
+ * Serialize a config back to the bytes of a `smelt.config.json` — {@link parseConfig}'s
+ * inverse, and the **only** writer of this file.
+ *
+ * The module that owns the schema owns both directions. It used to own only the read:
+ * two modules hand-built a config object and stringified it — the `init` wizard and
+ * `hooks install` — and they had already drifted, one always emitting `strategy` and
+ * the other only when it was carried. A sixth key would have been written by whichever
+ * module its author was editing and silently dropped by the other, which is the
+ * "setting the user believed was in force" failure this file refuses everywhere else.
+ *
+ * Key order is fixed here — the reader's own key order, top level and inside `store`
+ * and `hooks` — so a re-run diffs cleanly no matter which verb wrote the file, and two
+ * writers can never disagree about shape. What goes *into* the config stays each
+ * verb's policy: the wizard's choices, and `hooks install`'s directory-store injection.
+ * Absent keys are omitted rather than written as `null`, so
+ * `parseConfig(renderConfig(c))` returns `c` field for field —
+ * `test/guards/config-writer.test.ts` pins that round trip.
+ */
+export function renderConfig(config) {
+    const ordered = {
+        smeltConfig: CONFIG_VERSION,
+        ...(config.defaultBudgetBytes === undefined
+            ? {}
+            : { defaultBudgetBytes: config.defaultBudgetBytes }),
+        ...(config.strategy === undefined ? {} : { strategy: config.strategy }),
+        ...(config.store === undefined ? {} : { store: renderStore(config.store) }),
+        ...(config.hooks === undefined ? {} : { hooks: renderHooks(config.hooks) }),
+    };
+    return `${JSON.stringify(ordered, null, 2)}\n`;
+}
+function renderStore(store) {
+    return store.kind === 'memory' ? { kind: 'memory' } : { kind: 'directory', path: store.path };
+}
+function renderHooks(hooks) {
+    return {
+        ...(hooks.thresholdBytes === undefined ? {} : { thresholdBytes: hooks.thresholdBytes }),
+        ...(hooks.enforcement === undefined ? {} : { enforcement: hooks.enforcement }),
     };
 }
 function parseStore(value, bad) {
@@ -137,8 +180,50 @@ function parseStore(value, bad) {
     }
     throw bad(`"store".kind must be "memory" or "directory", got ${JSON.stringify(kind)}.`);
 }
+function parseHooks(value, bad) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw bad(`"hooks" must be an object like {"thresholdBytes":8192,"enforcement":"deny"}.`);
+    }
+    const fields = value;
+    const extra = Object.keys(fields).filter((key) => key !== 'thresholdBytes' && key !== 'enforcement');
+    if (extra.length > 0) {
+        throw bad(`"hooks" takes only "thresholdBytes" and "enforcement", ` +
+            `got ${extra.map((k) => `"${k}"`).join(', ')}.`);
+    }
+    const threshold = fields['thresholdBytes'];
+    if (threshold !== undefined &&
+        (typeof threshold !== 'number' || !Number.isInteger(threshold) || threshold <= 0)) {
+        throw bad(`"hooks".thresholdBytes must be a whole number of bytes greater than zero.`);
+    }
+    const enforcement = fields['enforcement'];
+    if (enforcement !== undefined &&
+        !ENFORCEMENT_MODES.includes(enforcement)) {
+        throw bad(`"hooks".enforcement must be ${ENFORCEMENT_MODES.map((m) => `"${m}"`).join(' or ')}, ` +
+            `got ${JSON.stringify(enforcement)}.`);
+    }
+    return {
+        ...(threshold === undefined ? {} : { thresholdBytes: threshold }),
+        ...(enforcement === undefined ? {} : { enforcement: enforcement }),
+    };
+}
 /** `store.path` is relative to the config file, so the config works from any cwd. */
 export function resolveStorePath(loaded, path) {
     return resolve(dirname(loaded.path), path);
 }
+/**
+ * The store leg of every merge, read once here rather than in each verb that needs it.
+ *
+ * There is no store flag, so this leg is config-or-built-in only — which is exactly
+ * why it belongs to the config module and not to a verb: `smelt` builds a store from
+ * it, and `retrieve`/`stats` refuse when it is not a directory (see `resolveStoreRun`
+ * in `subcommands/retrieve.ts`). Three verbs, one reading of the same key.
+ */
+export function configuredStore(config) {
+    if (config?.config.store === undefined || config.config.store.kind === 'memory') {
+        return { kind: 'memory' };
+    }
+    return { kind: 'directory', path: resolveStorePath(config, config.config.store.path) };
+}
 //# sourceMappingURL=config.js.map

package/dist/cli/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAG7D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC;;;;;;;;;;;;;;;GAeG;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AA4BhC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAiB,EAAE,CACzC,IAAI,aAAa,CACf,GAAG,QAAQ,eAAe,gBAAgB,OAAO,IAAI,KAAK,GAAG,IAAI;QAC/D,8EAA8E;QAC9E,KAAK,QAAQ,yBAAyB,CACzC,CAAC;IAEJ,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,CAAC,aAAa,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAEhD,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,cAAc,EAAE,CAAC;QAC7C,MAAM,GAAG,CACP,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,6BAA6B;YACpF,GAAG,MAAM,CAAC,cAAc,CAAC,qDAAqD;YAC9E,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,oBAAoB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,CACP,cAAc,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC1F,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD;YAChF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,CAAC,uDAAuD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,GAAG,CACP,sBAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;YACpE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAE/C,OAAO;QACL,WAAW,EAAE,cAAc;QAC3B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,GAAmC;IAEnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,IAAY;IACjE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAG7D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC;;;;;;;;;;;;;;;GAeG;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAkDhC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAiB,EAAE,CACzC,IAAI,aAAa,CACf,GAAG,QAAQ,eAAe,gBAAgB,OAAO,IAAI,KAAK,GAAG,IAAI;QAC/D,8EAA8E;QAC9E,KAAK,QAAQ,yBAAyB,CACzC,CAAC;IAEJ,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,CAAC,aAAa,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAEhD,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,cAAc,EAAE,CAAC;QAC7C,MAAM,GAAG,CACP,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,6BAA6B;YACpF,GAAG,MAAM,CAAC,cAAc,CAAC,qDAAqD;YAC9E,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,oBAAoB,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,CACP,cAAc,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC1F,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD;YAChF,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,CAAC,uDAAuD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,GAAG,CACP,sBAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;YACpE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAE/C,OAAO;QACL,WAAW,EAAE,cAAc;QAC3B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC9C,MAAM,OAAO,GAAgB;QAC3B,WAAW,EAAE,cAAc;QAC3B,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;KAC5E,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,GAAmC;IAEnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,GAAmC;IAEnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,aAAa,CAC3D,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,CACP,yDAAyD;YACvD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,EACjF,CAAC;QACD,MAAM,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1C,IACE,WAAW,KAAK,SAAS;QACzB,CAAE,iBAAwC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAChE,CAAC;QACD,MAAM,GAAG,CACP,+BAA+B,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;YACpF,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CACxC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAmB,EAAE,CAAC;QAC3E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAA8B,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,IAAY;IACjE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAgC;IAC9D,IAAI,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACzF,CAAC","sourcesContent":["import { existsSync, readFileSync } from 'node:fs';\nimport { dirname, join, resolve } from 'node:path';\n\nimport { CliUsageError } from '../errors.ts';\nimport { ENFORCEMENT_MODES } from '../hooks/guard-core.ts';\nimport type { EnforcementMode } from '../hooks/guard-core.ts';\nimport { isStrategy, STRATEGIES } from '../plan/planners.ts';\nimport type { Strategy } from '../plan/planners.ts';\n\nimport { CLI_NAME } from './shell.ts';\n\n/**\n * `smelt.config.json` — CLI defaults, and nothing more.\n *\n * This file exists so `smelt` can be run without retyping the same flags, and it is\n * deliberately a *CLI* concern: the programmatic API never reads it. A library that\n * reads config files off the caller's disk is a library whose behaviour depends on\n * where it was invoked from, which is exactly the class of invisible input smelt\n * refuses. `createSmelter()` takes explicit arguments; the CLI translates this file\n * into those arguments, and explicit flags always win over it.\n *\n * The schema is versioned (`\"smeltConfig\": 1`) for the same reason the marker and the\n * `--json` envelope are: files outlive the binaries that wrote them, and a mismatch\n * must be identifiable rather than half-understood. Parsing is strict — an unknown\n * key, a wrong type, or an unknown version is a {@link CliUsageError}, never a shrug.\n * A config the CLI silently ignored would be a budget the user *thought* they set.\n */\n\n/** The file name looked for, from the working directory upward. */\nexport const CONFIG_FILE_NAME = 'smelt.config.json';\n\n/** The schema version this build reads and writes. */\nexport const CONFIG_VERSION = 1;\n\n/** Where the CLI's elision store lives between runs. */\nexport type SmeltConfigStore =\n  | { readonly kind: 'memory' }\n  | {\n      readonly kind: 'directory';\n      /** Resolved relative to the directory holding the config file, not the cwd. */\n      readonly path: string;\n    };\n\n/**\n * The `hooks` block — settings for the harness guard (`smelt hooks install`).\n *\n * Parsed strictly here, like every other key: the CLI refuses a malformed config.\n * The guard core (`src/hooks/guard-core.ts`) reads the same file with its own\n * *tolerant* reader — a guard running inside somebody's session fails open where the\n * CLI correctly refuses — and `test/hooks-guard-core.test.ts` pins the two readers to\n * the same key names and defaults so they cannot drift apart.\n */\nexport interface SmeltConfigHooks {\n  /** Reads at or under this many bytes pass the guard untouched. Default 8192. */\n  readonly thresholdBytes?: number;\n  /**\n   * `'deny'` (default): oversized raw reads are refused with a reason naming the\n   * exact replacement command. `'rewrite'`: on harnesses whose hooks can modify tool\n   * input, the command is substituted instead (never silently — the reason says so).\n   */\n  readonly enforcement?: EnforcementMode;\n}\n\n/** The parsed shape of `smelt.config.json`. Every field beyond the version is optional. */\nexport interface SmeltConfig {\n  readonly smeltConfig: typeof CONFIG_VERSION;\n  /** Used when a `smelt` run omits `--budget`. UTF-8 bytes, like every smelt budget. */\n  readonly defaultBudgetBytes?: number;\n  /** Used when a run omits `--strategy`. Validated against the {@link PLANNERS} registry. */\n  readonly strategy?: Strategy;\n  /** Used for every run; there is no store flag. Defaults to memory when absent. */\n  readonly store?: SmeltConfigStore;\n  /** Settings for the harness guard. See {@link SmeltConfigHooks}. */\n  readonly hooks?: SmeltConfigHooks;\n}\n\n/** A config plus where it was found — the path matters for resolving `store.path`. */\nexport interface LoadedConfig {\n  readonly path: string;\n  readonly config: SmeltConfig;\n}\n\n/**\n * The nearest `smelt.config.json`, walking up from `cwd` to the filesystem root —\n * the same discovery shape as `package.json`, so a config at a repo root covers the\n * whole tree. `undefined` when there is none, which is not an error: flags alone are\n * a complete interface.\n */\nexport function findConfigFile(cwd: string): string | undefined {\n  let dir = resolve(cwd);\n  for (;;) {\n    const candidate = join(dir, CONFIG_FILE_NAME);\n    if (existsSync(candidate)) return candidate;\n    const parent = dirname(dir);\n    if (parent === dir) return undefined;\n    dir = parent;\n  }\n}\n\n/**\n * Find and parse the nearest config. `undefined` when no file exists; a file that\n * exists but is malformed **throws** — see {@link parseConfig}. The distinction is the\n * point: \"no config\" is a fine state, \"a config you cannot have meant\" is not.\n *\n * @throws {CliUsageError} when a config file exists and is malformed.\n */\nexport function loadNearestConfig(cwd: string): LoadedConfig | undefined {\n  const path = findConfigFile(cwd);\n  if (path === undefined) return undefined;\n  return { path, config: parseConfig(readFileSync(path, 'utf8'), path) };\n}\n\n/**\n * Parse and validate one config file, strictly.\n *\n * Strict means: unknown keys are refused, not skipped. A typo'd `defaultBudgetByte`\n * that parsed cleanly would leave the user believing a default was set while every\n * run ignored it — a config error whose failure mode is *silence*, which is the one\n * failure shape this project refuses everywhere else too.\n *\n * @throws {CliUsageError} naming the file and the exact problem.\n */\nexport function parseConfig(text: string, path: string): SmeltConfig {\n  const bad = (why: string): CliUsageError =>\n    new CliUsageError(\n      `${CLI_NAME}: malformed ${CONFIG_FILE_NAME} at ${path}: ${why}\\n` +\n        `Fix it or delete it — a config smelt cannot read is never silently ignored. ` +\n        `\\`${CLI_NAME} init\\` can rewrite it.`,\n    );\n\n  let value: unknown;\n  try {\n    value = JSON.parse(text);\n  } catch (cause) {\n    throw bad(`not JSON (${cause instanceof Error ? cause.message : String(cause)}).`);\n  }\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw bad('expected a JSON object at the top level.');\n  }\n  const fields = value as Record<string, unknown>;\n\n  if (fields['smeltConfig'] !== CONFIG_VERSION) {\n    throw bad(\n      `\"smeltConfig\" is ${JSON.stringify(fields['smeltConfig'])}; this build reads version ` +\n        `${String(CONFIG_VERSION)}. The schema is versioned so a mismatch is visible ` +\n        `instead of half-understood.`,\n    );\n  }\n\n  const known = ['smeltConfig', 'defaultBudgetBytes', 'strategy', 'store', 'hooks'];\n  const unknown = Object.keys(fields).filter((key) => !known.includes(key));\n  if (unknown.length > 0) {\n    throw bad(\n      `unknown key${unknown.length === 1 ? '' : 's'} ${unknown.map((k) => `\"${k}\"`).join(', ')}. ` +\n        `Known keys: ${known.join(', ')}. Unknown keys are refused because a typo that ` +\n        `parsed cleanly would be a setting you believed was set.`,\n    );\n  }\n\n  const budget = fields['defaultBudgetBytes'];\n  if (budget !== undefined && (typeof budget !== 'number' || !Number.isInteger(budget))) {\n    throw bad(`\"defaultBudgetBytes\" must be a whole number of UTF-8 bytes.`);\n  }\n  if (typeof budget === 'number' && budget <= 0) {\n    throw bad(`\"defaultBudgetBytes\" must be greater than zero, got ${String(budget)}.`);\n  }\n\n  const strategy = fields['strategy'];\n  if (strategy !== undefined && (typeof strategy !== 'string' || !isStrategy(strategy))) {\n    throw bad(\n      `\"strategy\" must be ${STRATEGIES.map((s) => `\"${s}\"`).join(' or ')}, ` +\n        `got ${JSON.stringify(strategy)}.`,\n    );\n  }\n\n  const store = parseStore(fields['store'], bad);\n  const hooks = parseHooks(fields['hooks'], bad);\n\n  return {\n    smeltConfig: CONFIG_VERSION,\n    ...(budget === undefined ? {} : { defaultBudgetBytes: budget }),\n    ...(strategy === undefined ? {} : { strategy }),\n    ...(store === undefined ? {} : { store }),\n    ...(hooks === undefined ? {} : { hooks }),\n  };\n}\n\n/**\n * Serialize a config back to the bytes of a `smelt.config.json` — {@link parseConfig}'s\n * inverse, and the **only** writer of this file.\n *\n * The module that owns the schema owns both directions. It used to own only the read:\n * two modules hand-built a config object and stringified it — the `init` wizard and\n * `hooks install` — and they had already drifted, one always emitting `strategy` and\n * the other only when it was carried. A sixth key would have been written by whichever\n * module its author was editing and silently dropped by the other, which is the\n * \"setting the user believed was in force\" failure this file refuses everywhere else.\n *\n * Key order is fixed here — the reader's own key order, top level and inside `store`\n * and `hooks` — so a re-run diffs cleanly no matter which verb wrote the file, and two\n * writers can never disagree about shape. What goes *into* the config stays each\n * verb's policy: the wizard's choices, and `hooks install`'s directory-store injection.\n * Absent keys are omitted rather than written as `null`, so\n * `parseConfig(renderConfig(c))` returns `c` field for field —\n * `test/guards/config-writer.test.ts` pins that round trip.\n */\nexport function renderConfig(config: SmeltConfig): string {\n  const ordered: SmeltConfig = {\n    smeltConfig: CONFIG_VERSION,\n    ...(config.defaultBudgetBytes === undefined\n      ? {}\n      : { defaultBudgetBytes: config.defaultBudgetBytes }),\n    ...(config.strategy === undefined ? {} : { strategy: config.strategy }),\n    ...(config.store === undefined ? {} : { store: renderStore(config.store) }),\n    ...(config.hooks === undefined ? {} : { hooks: renderHooks(config.hooks) }),\n  };\n  return `${JSON.stringify(ordered, null, 2)}\\n`;\n}\n\nfunction renderStore(store: SmeltConfigStore): SmeltConfigStore {\n  return store.kind === 'memory' ? { kind: 'memory' } : { kind: 'directory', path: store.path };\n}\n\nfunction renderHooks(hooks: SmeltConfigHooks): SmeltConfigHooks {\n  return {\n    ...(hooks.thresholdBytes === undefined ? {} : { thresholdBytes: hooks.thresholdBytes }),\n    ...(hooks.enforcement === undefined ? {} : { enforcement: hooks.enforcement }),\n  };\n}\n\nfunction parseStore(\n  value: unknown,\n  bad: (why: string) => CliUsageError,\n): SmeltConfigStore | undefined {\n  if (value === undefined) return undefined;\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw bad(`\"store\" must be an object like {\"kind\":\"memory\"} or {\"kind\":\"directory\",\"path\":…}.`);\n  }\n  const fields = value as Record<string, unknown>;\n  const kind = fields['kind'];\n  if (kind === 'memory') {\n    const extra = Object.keys(fields).filter((key) => key !== 'kind');\n    if (extra.length > 0) throw bad(`\"store\" of kind \"memory\" takes no other keys.`);\n    return { kind: 'memory' };\n  }\n  if (kind === 'directory') {\n    const path = fields['path'];\n    if (typeof path !== 'string' || path === '') {\n      throw bad(`\"store\" of kind \"directory\" needs a non-empty \"path\".`);\n    }\n    const extra = Object.keys(fields).filter((key) => key !== 'kind' && key !== 'path');\n    if (extra.length > 0) throw bad(`\"store\" of kind \"directory\" takes only \"kind\" and \"path\".`);\n    return { kind: 'directory', path };\n  }\n  throw bad(`\"store\".kind must be \"memory\" or \"directory\", got ${JSON.stringify(kind)}.`);\n}\n\nfunction parseHooks(\n  value: unknown,\n  bad: (why: string) => CliUsageError,\n): SmeltConfigHooks | undefined {\n  if (value === undefined) return undefined;\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n    throw bad(`\"hooks\" must be an object like {\"thresholdBytes\":8192,\"enforcement\":\"deny\"}.`);\n  }\n  const fields = value as Record<string, unknown>;\n  const extra = Object.keys(fields).filter(\n    (key) => key !== 'thresholdBytes' && key !== 'enforcement',\n  );\n  if (extra.length > 0) {\n    throw bad(\n      `\"hooks\" takes only \"thresholdBytes\" and \"enforcement\", ` +\n        `got ${extra.map((k) => `\"${k}\"`).join(', ')}.`,\n    );\n  }\n  const threshold = fields['thresholdBytes'];\n  if (\n    threshold !== undefined &&\n    (typeof threshold !== 'number' || !Number.isInteger(threshold) || threshold <= 0)\n  ) {\n    throw bad(`\"hooks\".thresholdBytes must be a whole number of bytes greater than zero.`);\n  }\n  const enforcement = fields['enforcement'];\n  if (\n    enforcement !== undefined &&\n    !(ENFORCEMENT_MODES as readonly unknown[]).includes(enforcement)\n  ) {\n    throw bad(\n      `\"hooks\".enforcement must be ${ENFORCEMENT_MODES.map((m) => `\"${m}\"`).join(' or ')}, ` +\n        `got ${JSON.stringify(enforcement)}.`,\n    );\n  }\n  return {\n    ...(threshold === undefined ? {} : { thresholdBytes: threshold as number }),\n    ...(enforcement === undefined ? {} : { enforcement: enforcement as EnforcementMode }),\n  };\n}\n\n/** `store.path` is relative to the config file, so the config works from any cwd. */\nexport function resolveStorePath(loaded: LoadedConfig, path: string): string {\n  return resolve(dirname(loaded.path), path);\n}\n\n/**\n * The store decision a config carries, with `path` already resolved against the config\n * file's directory — one config serves every subdirectory it covers without scattering\n * store roots. `'memory'` is the built-in default: a fresh in-memory store per run.\n */\nexport type ConfiguredStore =\n  { readonly kind: 'memory' } | { readonly kind: 'directory'; readonly path: string };\n\n/**\n * The store leg of every merge, read once here rather than in each verb that needs it.\n *\n * There is no store flag, so this leg is config-or-built-in only — which is exactly\n * why it belongs to the config module and not to a verb: `smelt` builds a store from\n * it, and `retrieve`/`stats` refuse when it is not a directory (see `resolveStoreRun`\n * in `subcommands/retrieve.ts`). Three verbs, one reading of the same key.\n */\nexport function configuredStore(config: LoadedConfig | undefined): ConfiguredStore {\n  if (config?.config.store === undefined || config.config.store.kind === 'memory') {\n    return { kind: 'memory' };\n  }\n  return { kind: 'directory', path: resolveStorePath(config, config.config.store.path) };\n}\n"]}

package/dist/cli/hooks.d.ts

@@ -0,0 +1,148 @@
+import type { HarnessProfile } from '../harness/profile.ts';
+import { instructionSnippet, SNIPPET_END_MD, SNIPPET_START_MD } from '../harness/snippet.ts';
+import type { EnforcementMode } from '../hooks/guard-core.ts';
+import type { AnswerStream } from './shell.ts';
+import type { SmeltConfig, SmeltConfigHooks } from './config.ts';
+/**
+ * `smelt hooks install` / `smelt hooks remove` — the multi-harness guard preset.
+ *
+ * The design: one zero-dependency guard core
+ * (`src/hooks/guard-core.ts`), thin per-harness shims mapping each harness's native
+ * hook schema onto it, and this installer, which writes the harness config that wires
+ * a shim in — plus an instruction-file snippet as belt and braces, because the
+ * snippet is also what teaches the model to run `smelt retrieve` after a deny.
+ *
+ * Every per-harness fact lives in that harness's {@link HarnessProfile}
+ * (`src/harness/<id>.ts`), including what to write and how to take it back out. This
+ * module owns only what is the *same* for every harness: the byte-faithful JSON merge,
+ * the marker-block upsert, the wizard, and the two plans below — folds over
+ * `profile.install`, with no case list of its own.
+ *
+ * Harnesses come in three honesty tiers (docs/research/2026-09-02-harness-capability-matrix.md):
+ *
+ *  - **verified** — Claude Code, Codex: schemas verified against primary docs and
+ *    exercised against recorded fixtures; first-class targets.
+ *  - **experimental** — Gemini, Grok, Hermes, Cursor, opencode, Cline: hook schemas
+ *    mapped from the capability matrix but not yet smoke-tested green against the
+ *    real binary. Labelled as such in code, docs, and this installer's output.
+ *  - **advisory** — KiloCode, Aider: no usable hook API, so what ships is
+ *    instructions (and, for KiloCode, a permissions/MCP sketch). Nothing enforces
+ *    them, and the output says so rather than implying a guard exists.
+ *
+ * The wizard discipline is `smelt init`'s, verbatim: every step accepts `back`,
+ * nothing is written until a final confirm that lists every file, and an existing
+ * file is never overwritten without an explicit per-file `yes` — guarded by
+ * `test/guards/hooks-preset.test.ts`, with mutation `hooks-install-overwrite-without-consent`
+ * proving the guard goes red.
+ */
+/** Where the wizard's bytes come from and go. Injected so `runHooks` tests in-process. */
+export interface HooksIo {
+    /**
+     * Scripted answers in, one line at a time. Structural on purpose; see
+     * {@link AnswerStream}.
+     */
+    readonly input: AnswerStream;
+    readonly output: (text: string) => void;
+    /** Project directory: detection, config discovery, and every write are relative to it. */
+    readonly cwd: string;
+    /** Home directory for detection only. Tests point it at a temp dir; nothing writes here. */
+    readonly home?: string;
+}
+export { instructionSnippet, SNIPPET_END_MD, SNIPPET_START_MD };
+/** A harness whose config directory exists in the project or the home directory. */
+export declare function detectedHarnesses(cwd: string, home: string): readonly HarnessProfile[];
+/**
+ * Merge our hook entries into a JSON settings file, preserving everything foreign
+ * **byte-faithfully**: the merged `hooks` value is spliced into the original text, so
+ * unknown top-level keys, string escapes, number spellings, indentation and key order
+ * outside the `hooks` property ride through verbatim (an installer
+ * that reformats somebody's settings file has edited what it was never asked to).
+ * Inside `hooks`, unmanaged events and other people's entries under managed events
+ * are preserved; our previous entries are replaced (that is what makes a re-run edit
+ * toggles), and events left with no entries disappear. A semantic no-op returns the
+ * input text unchanged. Returns `undefined` when the existing file is not a JSON
+ * object — the caller skips the file rather than clobbering something it cannot
+ * understand.
+ */
+export declare function mergeJsonHooks(existingText: string | undefined, events: Record<string, readonly unknown[]>, shape?: {
+    readonly version?: number;
+}): string | undefined;
+/** Replace this installer's marker block in `existingText`, or append it. */
+export declare function upsertMarkerBlock(existingText: string | undefined, block: string, start: string, end: string): string;
+/** Remove the marker block. `undefined` when nothing (or only whitespace) remains. */
+export declare function stripMarkerBlock(existingText: string, start: string, end: string): string | undefined;
+interface PlannedFile {
+    /** Display path, relative to the project. */
+    readonly name: string;
+    readonly path: string;
+    readonly content: string;
+    readonly exists: boolean;
+    readonly unchanged: boolean;
+    /** chmod after writing (the cline hook must be executable). */
+    readonly mode?: number;
+}
+interface SkippedFile {
+    readonly name: string;
+    readonly why: string;
+}
+interface PlannedRemoval {
+    readonly name: string;
+    readonly path: string;
+    /** `'delete'` removes the file; `'modify'` writes `content` (ours stripped out). */
+    readonly action: 'delete' | 'modify';
+    readonly content?: string;
+}
+export interface HooksChoices {
+    harnesses: HarnessProfile[];
+    guard: boolean;
+    statsOnStop: boolean;
+    mapOnStart: boolean;
+    enforcement: EnforcementMode;
+    thresholdBytes: number;
+}
+interface InstallPlan {
+    readonly files: readonly PlannedFile[];
+    readonly skipped: readonly SkippedFile[];
+    readonly notes: readonly string[];
+}
+/**
+ * Every file `install` would write, computed against the current disk state — pure
+ * planning, nothing written. A fold over each chosen profile's `install` list and its
+ * instruction layer; all per-harness knowledge is in the profiles. Shared instruction
+ * files (several harnesses read AGENTS.md) are planned once.
+ *
+ * @throws {CliUsageError} when an existing `smelt.config.json` is malformed — the
+ *   same refusal every other subcommand makes; an installer that guessed around a
+ *   broken config would write settings the guard then ignores.
+ */
+export declare function planInstall(cwd: string, choices: HooksChoices): InstallPlan;
+/** Where the installed config points the persistent store, relative to the config file. */
+export declare const DEFAULT_STORE_DIR = ".smelt/store";
+/**
+ * Existing config re-rendered with the hooks block, other fields carried verbatim —
+ * except that a config with **no** store block gains a directory store. The deny
+ * reasons and the instruction snippet teach `smelt retrieve <hash>`, and retrieval
+ * across processes needs a persistent store (`smelt retrieve` refuses a memory
+ * store, exit 2) — an install whose own guard promises a command the installed
+ * config cannot run would be the exact silent-failure shape this project refuses.
+ * An *explicit* `{"kind":"memory"}` is respected; the guard then conditions its
+ * retrieve promise on the store kind instead (`retrieveSentence` in guard-core).
+ *
+ * That store injection is this verb's **policy**, which is why it lives here; the
+ * bytes are written by `renderConfig` in `config.ts`, the one writer, so a key added
+ * to the schema reaches this file and `init`'s together or not at all.
+ */
+export declare function renderConfigWithHooks(existing: SmeltConfig | undefined, hooks: SmeltConfigHooks): string;
+/**
+ * Everything `remove` would delete or strip, computed against the current disk state.
+ * The mirror image of {@link planInstall}, over the same data: each install step's
+ * kind is also how it comes back out — a JSON hook file is strip-merged, a marker
+ * block is stripped, a file that is entirely ours is deleted.
+ */
+export declare function planRemove(cwd: string, harnesses: readonly HarnessProfile[]): readonly PlannedRemoval[];
+/**
+ * `smelt hooks <install|remove>`, start to finish. The same testability pattern as
+ * `runInit`: a pure function over an input/output pair, exit code returned.
+ */
+export declare function runHooks(action: 'install' | 'remove', harnessFlag: string | undefined, io: HooksIo): Promise<number>;
+//# sourceMappingURL=hooks.d.ts.map

package/dist/cli/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/cli/hooks.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGV,cAAc,EACf,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EACL,kBAAkB,EAElB,cAAc,EACd,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAQ/C,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,0FAA0F;AAC1F,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,0FAA0F;IAC1F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AAEhE,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAMtF;AA8ED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC,EAC1C,KAAK,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,MAAM,GAAG,SAAS,CA2EpB;AA4ID,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,MAAM,CAUR;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,SAAS,CAQpB;AAMD,UAAU,WAAW;IACnB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,eAAe,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAaD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,WAAW,CA+G3E;AAED,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,cAAc,EAAE,GACnC,SAAS,cAAc,EAAE,CAiE3B;AAQD;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,SAAS,GAAG,QAAQ,EAC5B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,MAAM,CAAC,CAsBjB","sourcesContent":["import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\n\nimport { CliUsageError } from '../errors.ts';\nimport { nodeCommand, portablePath, shimScriptPath, smeltBinPath } from '../harness/paths.ts';\nimport { hasShim, TIER_HONESTY } from '../harness/profile.ts';\nimport type {\n  HarnessInstallContext,\n  HarnessJsonHooks,\n  HarnessProfile,\n} from '../harness/profile.ts';\nimport {\n  GUARD_EVENTS,\n  GUARD_ONLY_FILES,\n  HARNESSES,\n  harnessById,\n  JSON_HOOK_FILES,\n  LIFECYCLE_EVENTS,\n  MANAGED_EVENTS,\n} from '../harness/registry.ts';\nimport {\n  instructionSnippet,\n  OURS_TOKEN,\n  SNIPPET_END_MD,\n  SNIPPET_START_MD,\n} from '../harness/snippet.ts';\nimport { DEFAULT_SUGGESTION_BUDGET_BYTES, DEFAULT_THRESHOLD_BYTES } from '../hooks/guard-core.ts';\nimport type { EnforcementMode } from '../hooks/guard-core.ts';\n\nimport { answerReader, CLI_NAME } from './shell.ts';\nimport type { AnswerStream } from './shell.ts';\nimport {\n  CONFIG_FILE_NAME,\n  CONFIG_VERSION,\n  findConfigFile,\n  parseConfig,\n  renderConfig,\n} from './config.ts';\nimport type { SmeltConfig, SmeltConfigHooks } from './config.ts';\n\n/**\n * `smelt hooks install` / `smelt hooks remove` — the multi-harness guard preset.\n *\n * The design: one zero-dependency guard core\n * (`src/hooks/guard-core.ts`), thin per-harness shims mapping each harness's native\n * hook schema onto it, and this installer, which writes the harness config that wires\n * a shim in — plus an instruction-file snippet as belt and braces, because the\n * snippet is also what teaches the model to run `smelt retrieve` after a deny.\n *\n * Every per-harness fact lives in that harness's {@link HarnessProfile}\n * (`src/harness/<id>.ts`), including what to write and how to take it back out. This\n * module owns only what is the *same* for every harness: the byte-faithful JSON merge,\n * the marker-block upsert, the wizard, and the two plans below — folds over\n * `profile.install`, with no case list of its own.\n *\n * Harnesses come in three honesty tiers (docs/research/2026-09-02-harness-capability-matrix.md):\n *\n *  - **verified** — Claude Code, Codex: schemas verified against primary docs and\n *    exercised against recorded fixtures; first-class targets.\n *  - **experimental** — Gemini, Grok, Hermes, Cursor, opencode, Cline: hook schemas\n *    mapped from the capability matrix but not yet smoke-tested green against the\n *    real binary. Labelled as such in code, docs, and this installer's output.\n *  - **advisory** — KiloCode, Aider: no usable hook API, so what ships is\n *    instructions (and, for KiloCode, a permissions/MCP sketch). Nothing enforces\n *    them, and the output says so rather than implying a guard exists.\n *\n * The wizard discipline is `smelt init`'s, verbatim: every step accepts `back`,\n * nothing is written until a final confirm that lists every file, and an existing\n * file is never overwritten without an explicit per-file `yes` — guarded by\n * `test/guards/hooks-preset.test.ts`, with mutation `hooks-install-overwrite-without-consent`\n * proving the guard goes red.\n */\n\n/** Where the wizard's bytes come from and go. Injected so `runHooks` tests in-process. */\nexport interface HooksIo {\n  /**\n   * Scripted answers in, one line at a time. Structural on purpose; see\n   * {@link AnswerStream}.\n   */\n  readonly input: AnswerStream;\n  readonly output: (text: string) => void;\n  /** Project directory: detection, config discovery, and every write are relative to it. */\n  readonly cwd: string;\n  /** Home directory for detection only. Tests point it at a temp dir; nothing writes here. */\n  readonly home?: string;\n}\n\nexport { instructionSnippet, SNIPPET_END_MD, SNIPPET_START_MD };\n\n/** A harness whose config directory exists in the project or the home directory. */\nexport function detectedHarnesses(cwd: string, home: string): readonly HarnessProfile[] {\n  return HARNESSES.filter(\n    (profile) =>\n      profile.detect.some((path) => existsSync(join(cwd, path))) ||\n      profile.detectHome.some((path) => existsSync(join(home, path))),\n  );\n}\n\n/* ------------------------------------------------------------------------------------\n * Generated content\n * ---------------------------------------------------------------------------------- */\n\n/** Claude-style hook entry: one command under an optional matcher. */\nfunction commandEntry(matcher: string | undefined, command: string): unknown {\n  return {\n    ...(matcher === undefined ? {} : { matcher }),\n    hooks: [{ type: 'command', command }],\n  };\n}\n\n/**\n * The hook command a harness's entries run: its own shim script, through node.\n *\n * @throws {Error} when a profile declares a JSON hook file but ships no shim — a\n *   registry bug, pinned by `test/guards/harness-registry.test.ts`, not a user error.\n */\nfunction shimCommand(profile: HarnessProfile, cwd: string): string {\n  /* v8 ignore next 5 -- unreachable: pinned by the harness-registry guard */\n  if (!hasShim(profile)) {\n    throw new Error(\n      `smelt: harness \"${profile.id}\" wires a hook command but ships no shim script.`,\n    );\n  }\n  return nodeCommand(cwd, shimScriptPath(profile));\n}\n\n/**\n * One harness's hook entries: the guard under each matcher its schema spells, plus\n * the two session-lifecycle hooks for the harnesses whose schema carries them. Every\n * toggle the wizard offers is a key that is present or absent here — an absent key is\n * how a re-run turns a toggle *off*, because the merge deletes what it no longer sees.\n */\nfunction jsonHookEvents(\n  step: HarnessJsonHooks,\n  ctx: HarnessInstallContext,\n  command: string,\n): Record<string, readonly unknown[]> {\n  // The trailing shell comment tags the entry as this installer's (see isOursEntry):\n  // a bare `cli/bin.js` substring would also match some other npm CLI's built binary.\n  const stats = `${nodeCommand(ctx.cwd, smeltBinPath(), 'stats')} 2>/dev/null || true # ${OURS_TOKEN}`;\n  const map = `${nodeCommand(\n    ctx.cwd,\n    smeltBinPath(),\n    `map . --budget ${String(ctx.budgetBytes)} --cache .smelt/tags`,\n  )} 2>/dev/null || true # ${OURS_TOKEN}`;\n\n  return {\n    ...(ctx.guard\n      ? {\n          [step.event]: step.matchers.map((matcher) =>\n            step.entry === 'bare-command' ? { command } : commandEntry(matcher, command),\n          ),\n        }\n      : {}),\n    ...(step.lifecycle && ctx.statsOnStop\n      ? { [LIFECYCLE_EVENTS.stats]: [commandEntry(undefined, stats)] }\n      : {}),\n    ...(step.lifecycle && ctx.mapOnStart\n      ? { [LIFECYCLE_EVENTS.map]: [commandEntry('startup|resume|clear|compact', map)] }\n      : {}),\n  };\n}\n\n/**\n * True for a hook entry this installer wrote. Matched on the shim script paths and the\n * `smelt:hooks` token the stats/map commands carry — never on a substring as generic\n * as `cli/bin.js`, which another npm CLI's built binary could share: remove and\n * re-install may only ever touch entries that are provably smelt's.\n */\nfunction isOursEntry(entry: unknown): boolean {\n  const text = JSON.stringify(entry) ?? '';\n  return text.includes('hooks/shims/') || text.includes(OURS_TOKEN);\n}\n\n/**\n * Merge our hook entries into a JSON settings file, preserving everything foreign\n * **byte-faithfully**: the merged `hooks` value is spliced into the original text, so\n * unknown top-level keys, string escapes, number spellings, indentation and key order\n * outside the `hooks` property ride through verbatim (an installer\n * that reformats somebody's settings file has edited what it was never asked to).\n * Inside `hooks`, unmanaged events and other people's entries under managed events\n * are preserved; our previous entries are replaced (that is what makes a re-run edit\n * toggles), and events left with no entries disappear. A semantic no-op returns the\n * input text unchanged. Returns `undefined` when the existing file is not a JSON\n * object — the caller skips the file rather than clobbering something it cannot\n * understand.\n */\nexport function mergeJsonHooks(\n  existingText: string | undefined,\n  events: Record<string, readonly unknown[]>,\n  shape: { readonly version?: number } = {},\n): string | undefined {\n  let root: Record<string, unknown> = {};\n  if (existingText !== undefined) {\n    try {\n      const parsed: unknown = JSON.parse(existingText);\n      if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) return undefined;\n      root = parsed as Record<string, unknown>;\n    } catch {\n      return undefined;\n    }\n  }\n  const hooksValue = root['hooks'];\n  const existingHooks =\n    typeof hooksValue === 'object' && hooksValue !== null && !Array.isArray(hooksValue)\n      ? (hooksValue as Record<string, unknown>)\n      : undefined;\n  const hooks = { ...existingHooks };\n\n  for (const event of MANAGED_EVENTS) {\n    const existing = Array.isArray(hooks[event]) ? (hooks[event] as unknown[]) : [];\n    const foreign = existing.filter((entry) => !isOursEntry(entry));\n    const ours = events[event] ?? [];\n    const merged = [...foreign, ...ours];\n    if (merged.length > 0) hooks[event] = merged;\n    else delete hooks[event];\n  }\n\n  const mergedHooks = Object.keys(hooks).length > 0 ? hooks : undefined;\n\n  // A brand-new file: nothing to preserve, render fresh two-space JSON.\n  if (existingText === undefined) {\n    const fresh: Record<string, unknown> = {};\n    if (mergedHooks !== undefined) fresh['hooks'] = mergedHooks;\n    if (shape.version !== undefined) fresh['version'] = shape.version;\n    return `${JSON.stringify(fresh, null, 2)}\\n`;\n  }\n\n  const hooksChanged =\n    JSON.stringify(existingHooks ?? null) !== JSON.stringify(mergedHooks ?? null);\n  const needsVersion = shape.version !== undefined && root['version'] === undefined;\n  if (!hooksChanged && !needsVersion) return existingText;\n\n  const newline = existingText.includes('\\r\\n') ? '\\r\\n' : '\\n';\n  const indent = /\\n([ \\t]+)\"/.exec(existingText)?.[1] ?? '  ';\n  let text = existingText;\n\n  if (hooksChanged) {\n    const scan = scanJsonTopLevel(text);\n    /* v8 ignore next -- unreachable: JSON.parse accepted the same text above */\n    if (scan === undefined) return undefined;\n    const property = scan.properties.find((candidate) => candidate.key === 'hooks');\n    if (mergedHooks === undefined) {\n      if (property !== undefined) text = removeJsonProperty(text, scan, property);\n    } else {\n      const rendered = renderJsonValue(mergedHooks, indent, newline);\n      text =\n        property !== undefined\n          ? `${text.slice(0, property.valueStart)}${rendered}${text.slice(property.valueEnd)}`\n          : insertJsonProperty(text, scan, 'hooks', rendered, indent, newline);\n    }\n  }\n  if (needsVersion) {\n    const scan = scanJsonTopLevel(text);\n    /* v8 ignore next -- unreachable: every splice above keeps the text valid JSON */\n    if (scan === undefined) return undefined;\n    text = insertJsonProperty(\n      text,\n      scan,\n      'version',\n      JSON.stringify(shape.version),\n      indent,\n      newline,\n    );\n  }\n  return text;\n}\n\n/** One top-level property of a JSON object, located by offsets in its source text. */\ninterface JsonTopLevelProperty {\n  readonly key: string;\n  /** Offset of the key's opening quote. */\n  readonly keyStart: number;\n  /** Offset of the value's first byte. */\n  readonly valueStart: number;\n  /** Offset one past the value's last byte. */\n  readonly valueEnd: number;\n}\n\ninterface JsonTopLevelScan {\n  /** Offset of the root object's `{`. */\n  readonly open: number;\n  /** Offset of the root object's `}`. */\n  readonly close: number;\n  readonly properties: readonly JsonTopLevelProperty[];\n}\n\n/**\n * Locate the top-level properties of a JSON object *in its source text*, so one\n * property can be replaced, inserted or removed while every other byte of the file\n * rides through verbatim. `undefined` when the text is not an object — callers have\n * already `JSON.parse`d it, so that is belt and braces, not a validator.\n */\nfunction scanJsonTopLevel(text: string): JsonTopLevelScan | undefined {\n  let i = skipJsonWhitespace(text, 0);\n  if (text[i] !== '{') return undefined;\n  const open = i;\n  i = skipJsonWhitespace(text, i + 1);\n  const properties: JsonTopLevelProperty[] = [];\n  if (text[i] === '}') return { open, close: i, properties };\n  for (;;) {\n    if (text[i] !== '\"') return undefined;\n    const keyStart = i;\n    const keyEnd = skipJsonString(text, i);\n    if (keyEnd === undefined) return undefined;\n    const key = JSON.parse(text.slice(keyStart, keyEnd)) as string;\n    i = skipJsonWhitespace(text, keyEnd);\n    if (text[i] !== ':') return undefined;\n    const valueStart = skipJsonWhitespace(text, i + 1);\n    const valueEnd = skipJsonValue(text, valueStart);\n    if (valueEnd === undefined) return undefined;\n    properties.push({ key, keyStart, valueStart, valueEnd });\n    i = skipJsonWhitespace(text, valueEnd);\n    if (text[i] === ',') {\n      i = skipJsonWhitespace(text, i + 1);\n      continue;\n    }\n    if (text[i] === '}') return { open, close: i, properties };\n    return undefined;\n  }\n}\n\nfunction skipJsonWhitespace(text: string, from: number): number {\n  let i = from;\n  while (i < text.length && ' \\t\\r\\n'.includes(text[i]!)) i += 1;\n  return i;\n}\n\n/** `from` points at `\"`; returns the offset one past the closing quote. */\nfunction skipJsonString(text: string, from: number): number | undefined {\n  let i = from + 1;\n  while (i < text.length) {\n    if (text[i] === '\\\\') i += 2;\n    else if (text[i] === '\"') return i + 1;\n    else i += 1;\n  }\n  return undefined;\n}\n\nfunction skipJsonValue(text: string, from: number): number | undefined {\n  const first = text[from];\n  if (first === '\"') return skipJsonString(text, from);\n  if (first === '{' || first === '[') {\n    let depth = 0;\n    let i = from;\n    while (i < text.length) {\n      const ch = text[i]!;\n      if (ch === '\"') {\n        const end = skipJsonString(text, i);\n        if (end === undefined) return undefined;\n        i = end;\n        continue;\n      }\n      if (ch === '{' || ch === '[') depth += 1;\n      else if (ch === '}' || ch === ']') {\n        depth -= 1;\n        if (depth === 0) return i + 1;\n      }\n      i += 1;\n    }\n    return undefined;\n  }\n  // number / true / false / null\n  let i = from;\n  while (i < text.length && !',}] \\t\\r\\n'.includes(text[i]!)) i += 1;\n  return i > from ? i : undefined;\n}\n\n/** A JSON value indented for embedding at a top-level property position. */\nfunction renderJsonValue(value: unknown, indent: string, newline: string): string {\n  return JSON.stringify(value, null, indent).split('\\n').join(`${newline}${indent}`);\n}\n\nfunction removeJsonProperty(\n  text: string,\n  scan: JsonTopLevelScan,\n  property: JsonTopLevelProperty,\n): string {\n  const index = scan.properties.indexOf(property);\n  const next = scan.properties[index + 1];\n  if (next !== undefined) {\n    // Delete through the separating comma and whitespace, up to the next key.\n    return text.slice(0, property.keyStart) + text.slice(next.keyStart);\n  }\n  const previous = scan.properties[index - 1];\n  // Last (or only) property: delete the preceding comma (if any) with it.\n  const from = previous !== undefined ? previous.valueEnd : scan.open + 1;\n  return text.slice(0, from) + text.slice(property.valueEnd);\n}\n\nfunction insertJsonProperty(\n  text: string,\n  scan: JsonTopLevelScan,\n  key: string,\n  renderedValue: string,\n  indent: string,\n  newline: string,\n): string {\n  const entry = `${JSON.stringify(key)}: ${renderedValue}`;\n  if (scan.properties.length === 0) {\n    return `${text.slice(0, scan.open + 1)}${newline}${indent}${entry}${newline}${text.slice(scan.close)}`;\n  }\n  const last = scan.properties[scan.properties.length - 1]!;\n  return `${text.slice(0, last.valueEnd)},${newline}${indent}${entry}${text.slice(last.valueEnd)}`;\n}\n\n/** Replace this installer's marker block in `existingText`, or append it. */\nexport function upsertMarkerBlock(\n  existingText: string | undefined,\n  block: string,\n  start: string,\n  end: string,\n): string {\n  if (existingText === undefined || existingText.trim() === '') return block;\n  const startIndex = existingText.indexOf(start);\n  const endIndex = existingText.indexOf(end);\n  if (startIndex !== -1 && endIndex !== -1 && endIndex > startIndex) {\n    const before = existingText.slice(0, startIndex);\n    const after = existingText.slice(endIndex + end.length).replace(/^\\n/, '');\n    return `${before}${block}${after}`;\n  }\n  return `${existingText.replace(/\\n*$/, '\\n\\n')}${block}`;\n}\n\n/** Remove the marker block. `undefined` when nothing (or only whitespace) remains. */\nexport function stripMarkerBlock(\n  existingText: string,\n  start: string,\n  end: string,\n): string | undefined {\n  const startIndex = existingText.indexOf(start);\n  const endIndex = existingText.indexOf(end);\n  if (startIndex === -1 || endIndex === -1 || endIndex <= startIndex) return existingText;\n  const stripped =\n    existingText.slice(0, startIndex).replace(/\\n+$/, '\\n') +\n    existingText.slice(endIndex + end.length).replace(/^\\n+/, '');\n  return stripped.trim() === '' ? undefined : stripped;\n}\n\n/* ------------------------------------------------------------------------------------\n * Planning\n * ---------------------------------------------------------------------------------- */\n\ninterface PlannedFile {\n  /** Display path, relative to the project. */\n  readonly name: string;\n  readonly path: string;\n  readonly content: string;\n  readonly exists: boolean;\n  readonly unchanged: boolean;\n  /** chmod after writing (the cline hook must be executable). */\n  readonly mode?: number;\n}\n\ninterface SkippedFile {\n  readonly name: string;\n  readonly why: string;\n}\n\ninterface PlannedRemoval {\n  readonly name: string;\n  readonly path: string;\n  /** `'delete'` removes the file; `'modify'` writes `content` (ours stripped out). */\n  readonly action: 'delete' | 'modify';\n  readonly content?: string;\n}\n\nexport interface HooksChoices {\n  harnesses: HarnessProfile[];\n  guard: boolean;\n  statsOnStop: boolean;\n  mapOnStart: boolean;\n  enforcement: EnforcementMode;\n  thresholdBytes: number;\n}\n\ninterface InstallPlan {\n  readonly files: readonly PlannedFile[];\n  readonly skipped: readonly SkippedFile[];\n  readonly notes: readonly string[];\n}\n\nfunction planFile(cwd: string, name: string, content: string, mode?: number): PlannedFile {\n  const path = join(cwd, name);\n  const exists = existsSync(path);\n  const unchanged = exists && readFileSync(path, 'utf8') === content;\n  return { name, path, content, exists, unchanged, ...(mode === undefined ? {} : { mode }) };\n}\n\nfunction readIfExists(path: string): string | undefined {\n  return existsSync(path) ? readFileSync(path, 'utf8') : undefined;\n}\n\n/**\n * Every file `install` would write, computed against the current disk state — pure\n * planning, nothing written. A fold over each chosen profile's `install` list and its\n * instruction layer; all per-harness knowledge is in the profiles. Shared instruction\n * files (several harnesses read AGENTS.md) are planned once.\n *\n * @throws {CliUsageError} when an existing `smelt.config.json` is malformed — the\n *   same refusal every other subcommand makes; an installer that guessed around a\n *   broken config would write settings the guard then ignores.\n */\nexport function planInstall(cwd: string, choices: HooksChoices): InstallPlan {\n  const files = new Map<string, PlannedFile>();\n  const skipped: SkippedFile[] = [];\n  const notes: string[] = [];\n\n  // -- smelt.config.json: the guard's runtime settings live here, not in any harness\n  // file, so every shim reads one source of truth.\n  const configPath = findConfigFile(cwd) ?? join(cwd, CONFIG_FILE_NAME);\n  const existingConfig =\n    readIfExists(configPath) === undefined\n      ? undefined\n      : parseConfig(readFileSync(configPath, 'utf8'), configPath);\n  const hooksBlock: SmeltConfigHooks = {\n    thresholdBytes: choices.thresholdBytes,\n    enforcement: choices.enforcement,\n  };\n  const budgetBytes = existingConfig?.defaultBudgetBytes ?? DEFAULT_SUGGESTION_BUDGET_BYTES;\n  files.set(configPath, {\n    name: portablePath(cwd, configPath),\n    path: configPath,\n    content: renderConfigWithHooks(existingConfig, hooksBlock),\n    exists: existsSync(configPath),\n    unchanged: readIfExists(configPath) === renderConfigWithHooks(existingConfig, hooksBlock),\n  });\n\n  const ctx: HarnessInstallContext = {\n    cwd,\n    guard: choices.guard,\n    statsOnStop: choices.statsOnStop,\n    mapOnStart: choices.mapOnStart,\n    thresholdBytes: choices.thresholdBytes,\n    budgetBytes,\n  };\n  const snippet = instructionSnippet(choices.thresholdBytes, budgetBytes);\n\n  const planJsonHooks = (\n    name: string,\n    events: Record<string, readonly unknown[]>,\n    shape: { readonly version?: number } = {},\n  ): void => {\n    const path = join(cwd, name);\n    // Nothing to install and nothing to strip: don't create an empty hooks file.\n    if (Object.keys(events).length === 0 && !existsSync(path)) return;\n    const merged = mergeJsonHooks(readIfExists(path), events, shape);\n    if (merged === undefined) {\n      skipped.push({\n        name,\n        why: 'exists but is not a JSON object — fix or remove it, then re-run',\n      });\n      return;\n    }\n    files.set(path, planFile(cwd, name, merged));\n  };\n\n  const planBlockFile = (\n    name: string,\n    block: string,\n    start: string,\n    end: string,\n    skipWhen?: { readonly contains: string; readonly why: string },\n  ): void => {\n    const path = join(cwd, name);\n    if (files.has(path)) return; // a shared file (AGENTS.md), already planned\n    const existing = readIfExists(path);\n    // A file that already carries its owner's version of what this block does is\n    // theirs to edit, not ours: say so, and touch nothing.\n    if (\n      skipWhen !== undefined &&\n      existing !== undefined &&\n      !existing.includes(start) &&\n      existing.includes(skipWhen.contains)\n    ) {\n      skipped.push({ name, why: skipWhen.why });\n      return;\n    }\n    files.set(path, planFile(cwd, name, upsertMarkerBlock(existing, block, start, end)));\n  };\n\n  for (const profile of choices.harnesses) {\n    for (const step of profile.install) {\n      switch (step.kind) {\n        case 'json-hooks':\n          planJsonHooks(\n            step.file,\n            jsonHookEvents(step, ctx, shimCommand(profile, cwd)),\n            step.shape ?? {},\n          );\n          break;\n        case 'marker-block':\n          planBlockFile(step.file, step.block(ctx), step.start, step.end, step.skipWhen);\n          break;\n        case 'own-file':\n          if (step.guardOnly && !ctx.guard) break;\n          files.set(join(cwd, step.file), planFile(cwd, step.file, step.content(ctx), step.mode));\n          break;\n      }\n    }\n\n    if (profile.instructions === 'snippet') {\n      planBlockFile(profile.instructionFile, snippet, SNIPPET_START_MD, SNIPPET_END_MD);\n    } else {\n      files.set(\n        join(cwd, profile.instructionFile),\n        planFile(cwd, profile.instructionFile, profile.instructions(ctx)),\n      );\n    }\n\n    for (const caveat of profile.caveats) notes.push(`${profile.name}: ${caveat}`);\n  }\n\n  return { files: [...files.values()], skipped, notes };\n}\n\n/** Where the installed config points the persistent store, relative to the config file. */\nexport const DEFAULT_STORE_DIR = '.smelt/store';\n\n/**\n * Existing config re-rendered with the hooks block, other fields carried verbatim —\n * except that a config with **no** store block gains a directory store. The deny\n * reasons and the instruction snippet teach `smelt retrieve <hash>`, and retrieval\n * across processes needs a persistent store (`smelt retrieve` refuses a memory\n * store, exit 2) — an install whose own guard promises a command the installed\n * config cannot run would be the exact silent-failure shape this project refuses.\n * An *explicit* `{\"kind\":\"memory\"}` is respected; the guard then conditions its\n * retrieve promise on the store kind instead (`retrieveSentence` in guard-core).\n *\n * That store injection is this verb's **policy**, which is why it lives here; the\n * bytes are written by `renderConfig` in `config.ts`, the one writer, so a key added\n * to the schema reaches this file and `init`'s together or not at all.\n */\nexport function renderConfigWithHooks(\n  existing: SmeltConfig | undefined,\n  hooks: SmeltConfigHooks,\n): string {\n  return renderConfig({\n    smeltConfig: CONFIG_VERSION,\n    ...(existing?.defaultBudgetBytes === undefined\n      ? {}\n      : { defaultBudgetBytes: existing.defaultBudgetBytes }),\n    ...(existing?.strategy === undefined ? {} : { strategy: existing.strategy }),\n    store: existing?.store ?? { kind: 'directory', path: DEFAULT_STORE_DIR },\n    hooks,\n  });\n}\n\n/**\n * Everything `remove` would delete or strip, computed against the current disk state.\n * The mirror image of {@link planInstall}, over the same data: each install step's\n * kind is also how it comes back out — a JSON hook file is strip-merged, a marker\n * block is stripped, a file that is entirely ours is deleted.\n */\nexport function planRemove(\n  cwd: string,\n  harnesses: readonly HarnessProfile[],\n): readonly PlannedRemoval[] {\n  const removals = new Map<string, PlannedRemoval>();\n\n  const planJsonStrip = (name: string): void => {\n    const path = join(cwd, name);\n    const existing = readIfExists(path);\n    if (existing === undefined) return;\n    const stripped = mergeJsonHooks(existing, {});\n    if (stripped === undefined || stripped === existing) return;\n    const remains: unknown = JSON.parse(stripped);\n    const empty =\n      typeof remains === 'object' &&\n      remains !== null &&\n      Object.keys(remains as Record<string, unknown>).filter((key) => key !== 'version').length ===\n        0;\n    removals.set(\n      path,\n      empty && existing.includes('hooks')\n        ? { name, path, action: 'delete' }\n        : { name, path, action: 'modify', content: stripped },\n    );\n  };\n\n  const planBlockStrip = (name: string, start: string, end: string): void => {\n    const path = join(cwd, name);\n    const existing = readIfExists(path);\n    if (existing === undefined || !existing.includes(start)) return;\n    const stripped = stripMarkerBlock(existing, start, end);\n    removals.set(\n      path,\n      stripped === undefined\n        ? { name, path, action: 'delete' }\n        : { name, path, action: 'modify', content: stripped },\n    );\n  };\n\n  const planWholeFileDelete = (name: string): void => {\n    const path = join(cwd, name);\n    const existing = readIfExists(path);\n    if (existing === undefined || !existing.includes(OURS_TOKEN)) return;\n    removals.set(path, { name, path, action: 'delete' });\n  };\n\n  for (const profile of harnesses) {\n    for (const step of profile.install) {\n      switch (step.kind) {\n        case 'json-hooks':\n          planJsonStrip(step.file);\n          break;\n        case 'marker-block':\n          planBlockStrip(step.file, step.start, step.end);\n          break;\n        case 'own-file':\n          planWholeFileDelete(step.file);\n          break;\n      }\n    }\n    if (profile.instructions === 'snippet') {\n      planBlockStrip(profile.instructionFile, SNIPPET_START_MD, SNIPPET_END_MD);\n    } else {\n      planWholeFileDelete(profile.instructionFile);\n    }\n  }\n\n  return [...removals.values()];\n}\n\n/* ------------------------------------------------------------------------------------\n * The wizard\n * ---------------------------------------------------------------------------------- */\n\ntype Asker = (prompt: string) => Promise<string>;\n\n/**\n * `smelt hooks <install|remove>`, start to finish. The same testability pattern as\n * `runInit`: a pure function over an input/output pair, exit code returned.\n */\nexport async function runHooks(\n  action: 'install' | 'remove',\n  harnessFlag: string | undefined,\n  io: HooksIo,\n): Promise<number> {\n  // Same adapter, same reason, as `runInit` — see the note on `answerReader`.\n  const lines = answerReader(io.input);\n  const ask = async (prompt: string): Promise<string> => {\n    io.output(prompt);\n    const next = await lines.next();\n    if (next === undefined) {\n      throw new CliUsageError(\n        `${CLI_NAME} hooks: input ended before the wizard finished. ` +\n          `Files already confirmed and written stay; nothing further was written.`,\n      );\n    }\n    return next.trim();\n  };\n\n  try {\n    return action === 'install'\n      ? await installFlow(io, ask, harnessFlag)\n      : await removeFlow(io, ask, harnessFlag);\n  } finally {\n    await lines.release();\n  }\n}\n\nfunction resolveHarnessFlag(flag: string): HarnessProfile {\n  const profile = harnessById(flag);\n  if (profile === undefined) {\n    throw new CliUsageError(\n      `${CLI_NAME} hooks: unknown harness \"${flag}\". ` +\n        `Known: ${HARNESSES.map((h) => h.id).join(', ')}.`,\n    );\n  }\n  return profile;\n}\n\nfunction tierLabel(profile: HarnessProfile): string {\n  return `${profile.id.padEnd(12)} ${profile.name.padEnd(14)} [${profile.tier}] — ${TIER_HONESTY[profile.tier]}`;\n}\n\nasync function installFlow(\n  io: HooksIo,\n  ask: Asker,\n  harnessFlag: string | undefined,\n): Promise<number> {\n  const home = io.home ?? homedir();\n  const detected = detectedHarnesses(io.cwd, home);\n\n  io.output(\n    `${CLI_NAME} hooks install — wires the smelt guard into agent-harness hooks.\\n` +\n      `Answer \\`back\\` at any step to return to the previous one. Nothing is written ` +\n      `until you confirm at the end.\\n\\n`,\n  );\n\n  const choices: HooksChoices = {\n    harnesses: harnessFlag !== undefined ? [resolveHarnessFlag(harnessFlag)] : [...detected],\n    ...presetToggles(io.cwd),\n    enforcement: 'deny',\n    thresholdBytes: DEFAULT_THRESHOLD_BYTES,\n  };\n\n  // With --harness the selection step is skipped, so the tier label — and its one\n  // line of honesty about what the tier means — is printed here instead.\n  if (harnessFlag !== undefined) {\n    for (const profile of choices.harnesses) io.output(`  ${tierLabel(profile)}\\n`);\n  }\n\n  const steps: readonly ((io_: HooksIo, ask_: Asker) => Promise<'ok' | 'back'>)[] = [\n    async (io_, ask_) =>\n      harnessFlag !== undefined ? 'ok' : stepHarnesses(io_, ask_, choices, detected),\n    async (io_, ask_) =>\n      stepToggle(io_, ask_, 'PreToolUse size-guard', guardCopy(), choices.guard, (on) => {\n        choices.guard = on;\n      }),\n    async (io_, ask_) =>\n      stepToggle(\n        io_,\n        ask_,\n        'stats on Stop',\n        `\\`smelt stats\\` runs when a session ends — the honest signal (expansion rate) ` +\n          `surfaced where the turn ends. Observation only; never blocks. Wired for ` +\n          `verified-tier harnesses (Claude Code, Codex).`,\n        choices.statsOnStop,\n        (on) => {\n          choices.statsOnStop = on;\n        },\n      ),\n    async (io_, ask_) =>\n      stepToggle(\n        io_,\n        ask_,\n        'repo map on SessionStart',\n        `\\`smelt map . --budget …\\` runs at session start and its output opens the ` +\n          `context — the agent starts oriented. Costs one map build per session. ` +\n          `Wired for verified-tier harnesses (Claude Code, Codex).`,\n        choices.mapOnStart,\n        (on) => {\n          choices.mapOnStart = on;\n        },\n      ),\n    async (io_, ask_) => stepEnforcement(io_, ask_, choices),\n    async (io_, ask_) => stepThreshold(io_, ask_, choices),\n  ];\n\n  let index = 0;\n  for (;;) {\n    while (index < steps.length) {\n      const outcome = await steps[index]!(io, ask);\n      if (outcome === 'back') {\n        if (index === 0) io.output(`This is the first step — there is nothing before it.\\n`);\n        else index -= 1;\n      } else {\n        index += 1;\n      }\n    }\n    if (choices.harnesses.length === 0) {\n      io.output(`No harness selected. Nothing to do; nothing was written.\\n`);\n      return 0;\n    }\n    const verdict = await confirmAndInstall(io, ask, choices);\n    if (verdict !== 'back') return 0;\n    index = steps.length - 1;\n  }\n}\n\nfunction guardCopy(): string {\n  return (\n    `Denies raw Reads (and simple \\`cat\\`s) of files over the size threshold, with a ` +\n    `reason naming the exact \\`smelt\\` replacement — the model still sees everything: ` +\n    `smelted first, \\`smelt retrieve\\` for the rest. Windowed reads (offset/limit) ` +\n    `always pass.`\n  );\n}\n\nasync function stepHarnesses(\n  io: HooksIo,\n  ask: Asker,\n  choices: HooksChoices,\n  detected: readonly HarnessProfile[],\n): Promise<'ok' | 'back'> {\n  io.output(`\\nHarnesses — detected by their config directories (project or home):\\n`);\n  for (const profile of HARNESSES) {\n    const mark = detected.includes(profile) ? '*' : ' ';\n    io.output(`  ${mark} ${tierLabel(profile)}\\n`);\n  }\n  io.output(`(* = detected here)\\n`);\n  for (;;) {\n    const current = choices.harnesses.map((profile) => profile.id).join(',') || '(none)';\n    const answer = await ask(\n      `install for which? (comma-separated ids, Enter = ${current}, or back)\\n> `,\n    );\n    if (answer === 'back') return 'back';\n    if (answer === '') return 'ok';\n    const ids = answer\n      .split(',')\n      .map((id) => id.trim())\n      .filter((id) => id !== '');\n    const chosen: HarnessProfile[] = [];\n    let bad: string | undefined;\n    for (const id of ids) {\n      const profile = harnessById(id);\n      if (profile === undefined) bad = id;\n      else if (!chosen.includes(profile)) chosen.push(profile);\n    }\n    if (bad !== undefined) {\n      io.output(`Unknown harness \"${bad}\". Known: ${HARNESSES.map((h) => h.id).join(', ')}.\\n`);\n      continue;\n    }\n    choices.harnesses = chosen;\n    return 'ok';\n  }\n}\n\nasync function stepToggle(\n  io: HooksIo,\n  ask: Asker,\n  name: string,\n  copy: string,\n  current: boolean,\n  set: (on: boolean) => void,\n): Promise<'ok' | 'back'> {\n  io.output(`\\n${name} — ${copy}\\n`);\n  for (;;) {\n    const answer = await ask(`${name}? (on/off) [${current ? 'on' : 'off'}] (or back)> `);\n    if (answer === 'back') return 'back';\n    if (answer === '') return 'ok';\n    if (answer === 'on' || answer === 'off') {\n      set(answer === 'on');\n      return 'ok';\n    }\n    io.output(`on, off, or back.\\n`);\n  }\n}\n\nasync function stepEnforcement(\n  io: HooksIo,\n  ask: Asker,\n  choices: HooksChoices,\n): Promise<'ok' | 'back'> {\n  io.output(\n    `\\nEnforcement — what happens when the guard catches an oversized raw read:\\n` +\n      `  1. deny     — refuse with a reason naming the exact replacement command. The\\n` +\n      `                transcript stays truthful; the model runs the replacement itself.\\n` +\n      `  2. rewrite  — on harnesses whose hooks can modify tool input, substitute the\\n` +\n      `                replacement in-flight (grep/cat piped through smelt). Never\\n` +\n      `                silent: the substitution is announced in the decision reason\\n` +\n      `                where the harness has one, on stderr where it does not.\\n` +\n      `                Harnesses that cannot rewrite fall back to deny.\\n`,\n  );\n  for (;;) {\n    const current = choices.enforcement === 'deny' ? '1' : '2';\n    const answer = await ask(`enforcement (1/2) [${current}] (or back)> `);\n    if (answer === 'back') return 'back';\n    const pick = answer === '' ? current : answer;\n    if (pick === '1' || pick === '2') {\n      choices.enforcement = pick === '1' ? 'deny' : 'rewrite';\n      return 'ok';\n    }\n    io.output(`1 for deny, 2 for rewrite, or back.\\n`);\n  }\n}\n\nasync function stepThreshold(\n  io: HooksIo,\n  ask: Asker,\n  choices: HooksChoices,\n): Promise<'ok' | 'back'> {\n  io.output(\n    `\\nSize threshold — reads at or under this many bytes always pass. The ${String(\n      DEFAULT_THRESHOLD_BYTES,\n    )}-byte default comes from the measured validation in ` +\n      `docs/research/2026-09-02-agent-enforcement.md § 5.\\n`,\n  );\n  for (;;) {\n    const answer = await ask(`threshold in bytes [${String(choices.thresholdBytes)}] (or back)> `);\n    if (answer === 'back') return 'back';\n    if (answer === '') return 'ok';\n    if (/^\\d+$/.test(answer) && Number(answer) > 0) {\n      choices.thresholdBytes = Number(answer);\n      return 'ok';\n    }\n    io.output(`A whole number of bytes greater than zero, e.g. 8192.\\n`);\n  }\n}\n\n/**\n * A re-run reads the toggles back off what is actually installed — every JSON hook\n * file this installer writes, plus the guard-only shim files, both derived from the\n * registry — so it edits instead of resetting. Harnesses that only wire the guard\n * (gemini, grok, cursor, hermes, opencode, cline) persist no stats/map entries, so\n * after a re-run scoped to them those toggles read back as off; the defaults below\n * apply only when nothing of smelt's is installed at all.\n */\nfunction presetToggles(cwd: string): Pick<HooksChoices, 'guard' | 'statsOnStop' | 'mapOnStart'> {\n  const defaults = { guard: true, statsOnStop: true, mapOnStart: false };\n  let anyOurs = false;\n  let guard = false;\n  let statsOnStop = false;\n  let mapOnStart = false;\n\n  for (const name of JSON_HOOK_FILES) {\n    const text = readIfExists(join(cwd, name));\n    if (text === undefined) continue;\n    let hooks: Record<string, unknown> | undefined;\n    try {\n      const parsed: unknown = JSON.parse(text);\n      const hooksValue =\n        typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)['hooks']\n          : undefined;\n      hooks =\n        typeof hooksValue === 'object' && hooksValue !== null && !Array.isArray(hooksValue)\n          ? (hooksValue as Record<string, unknown>)\n          : undefined;\n    } catch {\n      hooks = undefined;\n    }\n    if (hooks === undefined) continue;\n    const installed = hooks;\n    const hasOurs = (event: string): boolean =>\n      Array.isArray(installed[event]) &&\n      (installed[event] as unknown[]).some((entry) => isOursEntry(entry));\n    if (!MANAGED_EVENTS.some((event) => hasOurs(event))) continue;\n    anyOurs = true;\n    guard ||= GUARD_EVENTS.some((event) => hasOurs(event));\n    statsOnStop ||= hasOurs('Stop');\n    mapOnStart ||= hasOurs('SessionStart');\n  }\n\n  for (const name of GUARD_ONLY_FILES) {\n    const text = readIfExists(join(cwd, name));\n    if (text !== undefined && text.includes(OURS_TOKEN)) {\n      anyOurs = true;\n      guard = true;\n    }\n  }\n\n  return anyOurs ? { guard, statsOnStop, mapOnStart } : defaults;\n}\n\nconst fileLabel = (file: PlannedFile): string => {\n  if (file.unchanged) return 'unchanged — nothing to write';\n  return file.exists ? 'exists — will ask before overwriting' : 'new';\n};\n\nasync function confirmAndInstall(\n  io: HooksIo,\n  ask: Asker,\n  choices: HooksChoices,\n): Promise<'done' | 'back'> {\n  const plan = planInstall(io.cwd, choices);\n\n  io.output(\n    `\\nAbout to write, into ${io.cwd}:\\n` +\n      plan.files.map((file) => `  ${file.name.padEnd(32)} (${fileLabel(file)})\\n`).join('') +\n      plan.skipped.map((skip) => `  ${skip.name.padEnd(32)} (SKIPPED: ${skip.why})\\n`).join('') +\n      `Nothing has been written yet.\\n`,\n  );\n\n  for (;;) {\n    const answer = await ask(`confirm (yes / no / back)> `);\n    if (answer === 'back') return 'back';\n    if (answer === 'no') {\n      io.output(`Nothing was written.\\n`);\n      return 'done';\n    }\n    if (answer === 'yes') break;\n    io.output(`yes to write, no to leave everything untouched, back to change a setting.\\n`);\n  }\n\n  for (const file of plan.files) {\n    if (file.unchanged) {\n      io.output(`  ${file.name} — unchanged, not rewritten\\n`);\n      continue;\n    }\n    if (file.exists) {\n      // The one hard rule, same as `smelt init`: an existing file is never touched\n      // without an explicit per-file yes — not `y`, not Enter, a literal `yes`.\n      const answer = await ask(`  ${file.name} exists — overwrite it? (yes/no)> `);\n      if (answer !== 'yes') {\n        io.output(`  skipped ${file.name} — the existing file was not touched\\n`);\n        continue;\n      }\n    }\n    mkdirSync(dirname(file.path), { recursive: true });\n    writeFileSync(file.path, file.content);\n    if (file.mode !== undefined) chmodSync(file.path, file.mode);\n    io.output(`  wrote ${file.name}\\n`);\n  }\n\n  for (const note of plan.notes) io.output(`note: ${note}\\n`);\n  io.output(\n    `Done. Re-run \\`${CLI_NAME} hooks install\\` to edit toggles; ` +\n      `\\`${CLI_NAME} hooks remove\\` takes it all back out.\\n`,\n  );\n  return 'done';\n}\n\nasync function removeFlow(\n  io: HooksIo,\n  ask: Asker,\n  harnessFlag: string | undefined,\n): Promise<number> {\n  const harnesses = harnessFlag !== undefined ? [resolveHarnessFlag(harnessFlag)] : [...HARNESSES];\n  const removals = planRemove(io.cwd, harnesses);\n\n  if (removals.length === 0) {\n    io.output(`${CLI_NAME} hooks remove: nothing of smelt's found to remove in ${io.cwd}.\\n`);\n    return 0;\n  }\n\n  io.output(\n    `${CLI_NAME} hooks remove — takes smelt's hook wiring back out.\\n\\nPlanned:\\n` +\n      removals\n        .map(\n          (removal) =>\n            `  ${removal.name.padEnd(32)} (${\n              removal.action === 'delete' ? 'delete' : 'remove smelt entries, keep the rest'\n            })\\n`,\n        )\n        .join('') +\n      `${CONFIG_FILE_NAME} is left untouched — its hooks block is your config now; ` +\n      `edit or remove it there.\\nNothing has been changed yet.\\n`,\n  );\n\n  for (;;) {\n    const answer = await ask(`confirm (yes / no)> `);\n    if (answer === 'no') {\n      io.output(`Nothing was changed.\\n`);\n      return 0;\n    }\n    if (answer === 'yes') break;\n    io.output(`yes to proceed, no to leave everything untouched.\\n`);\n  }\n\n  for (const removal of removals) {\n    const verb = removal.action === 'delete' ? 'delete' : 'modify';\n    const answer = await ask(`  ${removal.name} — ${verb} it? (yes/no)> `);\n    if (answer !== 'yes') {\n      io.output(`  skipped ${removal.name} — not touched\\n`);\n      continue;\n    }\n    if (removal.action === 'delete') {\n      unlinkSync(removal.path);\n      io.output(`  deleted ${removal.name}\\n`);\n    } else {\n      writeFileSync(removal.path, removal.content ?? '');\n      io.output(`  cleaned ${removal.name}\\n`);\n    }\n  }\n  io.output(`Done.\\n`);\n  return 0;\n}\n"]}