@smeltjs/core 0.2.0 → 0.3.0

package/dist/hooks/shims/claude-code.d.ts

@@ -1,23 +1,10 @@
 import type { ShimAdapter } from '../shim.ts';
 /**
- * Claude Code shim — VERIFIED tier.
- *
- * Schema per <https://code.claude.com/docs/en/hooks> (verified 2026-09-02; the deep
- * dive is docs/research/2026-09-02-agent-enforcement.md § 1):
- *
- *  - stdin: `{ hook_event_name: "PreToolUse", tool_name, tool_input, cwd }`. For
- *    `Read`, `tool_input.file_path` is already absolute and `offset`/`limit` mark a
- *    windowed read; for `Bash`, `tool_input.command` is the full command string, and
- *    a relative path in it resolves against the payload's `cwd` — the *session's*
- *    working directory, which after the model `cd`s differs from this hook
- *    process's own cwd.
- *  - deny: `hookSpecificOutput.permissionDecision: "deny"` with
- *    `permissionDecisionReason` — which is **shown to the model**, so the guard's
- *    reason (the exact replacement command, the `smelt retrieve` contract) lands in
- *    the transcript as steering.
- *  - rewrite (opt-in, `hooks.enforcement: "rewrite"`): `updatedInput` replaces the
- *    entire input object of the *same* tool (v2.0.10+), so a Bash command can be
- *    substituted but a Read can never become a Bash call — Reads deny in every mode.
+ * Claude Code shim — VERIFIED tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/claude-code.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/claude-code.js` as the
+ * harness's hook command; this file is what that runs.
  */
 export declare const adapter: ShimAdapter;
 //# sourceMappingURL=claude-code.d.ts.map

package/dist/hooks/shims/claude-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/claude-code.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,OAAO,EAAE,WAqCrB,CAAC"}
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/claude-code.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,WAAuC,CAAC","sourcesContent":["import { claudeCode } from '../../harness/claude-code.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Claude Code shim — VERIFIED tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/claude-code.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/claude-code.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(claudeCode);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/claude-code.js

@@ -1,61 +1,14 @@
-import { asRecord, isMainModule, runShimMain, toolCallRequest } from '../shim.js';
+import { claudeCode } from '../../harness/claude-code.js';
+import { shimAdapterOf } from '../../harness/profile.js';
+import { isMainModule, runShimMain } from '../shim.js';
 /**
- * Claude Code shim — VERIFIED tier.
- *
- * Schema per <https://code.claude.com/docs/en/hooks> (verified 2026-09-02; the deep
- * dive is docs/research/2026-09-02-agent-enforcement.md § 1):
- *
- *  - stdin: `{ hook_event_name: "PreToolUse", tool_name, tool_input, cwd }`. For
- *    `Read`, `tool_input.file_path` is already absolute and `offset`/`limit` mark a
- *    windowed read; for `Bash`, `tool_input.command` is the full command string, and
- *    a relative path in it resolves against the payload's `cwd` — the *session's*
- *    working directory, which after the model `cd`s differs from this hook
- *    process's own cwd.
- *  - deny: `hookSpecificOutput.permissionDecision: "deny"` with
- *    `permissionDecisionReason` — which is **shown to the model**, so the guard's
- *    reason (the exact replacement command, the `smelt retrieve` contract) lands in
- *    the transcript as steering.
- *  - rewrite (opt-in, `hooks.enforcement: "rewrite"`): `updatedInput` replaces the
- *    entire input object of the *same* tool (v2.0.10+), so a Bash command can be
- *    substituted but a Read can never become a Bash call — Reads deny in every mode.
+ * Claude Code shim — VERIFIED tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/claude-code.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/claude-code.js` as the
+ * harness's hook command; this file is what that runs.
  */
-export const adapter = {
-    toRequest: (raw) => {
-        const fields = asRecord(raw);
-        return toolCallRequest(fields['tool_name'], fields['tool_input'], {
-            read: ['Read'],
-            bash: ['Bash'],
-        });
-    },
-    cwd: (raw) => {
-        const cwd = asRecord(raw)['cwd'];
-        return typeof cwd === 'string' && cwd !== '' ? cwd : undefined;
-    },
-    pass: () => ({ stdout: '', exitCode: 0 }),
-    deny: (_raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: 'PreToolUse',
-                permissionDecision: 'deny',
-                permissionDecisionReason: decision.reason ?? 'denied by the smelt guard',
-            },
-        })}\n`,
-        exitCode: 0,
-    }),
-    rewrite: (raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: 'PreToolUse',
-                permissionDecision: 'allow',
-                permissionDecisionReason: `smelt rewrote this command (hooks.enforcement: "rewrite"): ` +
-                    `${decision.suggestion ?? ''}`,
-                // updatedInput replaces the whole input object — unchanged fields ride along.
-                updatedInput: { ...asRecord(asRecord(raw)['tool_input']), command: decision.suggestion },
-            },
-        })}\n`,
-        exitCode: 0,
-    }),
-};
+export const adapter = shimAdapterOf(claudeCode);
 if (isMainModule(import.meta.url))
     runShimMain(adapter);
 //# sourceMappingURL=claude-code.js.map

package/dist/hooks/shims/claude-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../../src/hooks/shims/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;YAChE,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,MAAM,CAAC;SACf,CAAC,CAAC;IACL,CAAC;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EAAE,QAAQ,CAAC,MAAM,IAAI,2BAA2B;aACzE;SACF,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,OAAO;gBAC3B,wBAAwB,EACtB,6DAA6D;oBAC7D,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE;gBAChC,8EAA8E;gBAC9E,YAAY,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;aACzF;SACF,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;CACH,CAAC;AAEF,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../../src/hooks/shims/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9D,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC","sourcesContent":["import { claudeCode } from '../../harness/claude-code.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Claude Code shim — VERIFIED tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/claude-code.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/claude-code.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(claudeCode);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/cline.d.ts

@@ -1,17 +1,10 @@
 import type { ShimAdapter } from '../shim.ts';
 /**
- * Cline shim — EXPERIMENTAL tier: schema mapped from the capability matrix
- * (docs/research/2026-09-02-harness-capability-matrix.md, Cline row; primary source
- * <https://docs.cline.bot/features/hooks>), not yet smoke-tested against the real
- * binary.
- *
- *  - event: `PreToolUse`, delivered to an executable under `.clinerules/hooks/`;
- *    stdin carries the tool call (accepted spellings: `tool_name`/`tool_input`,
- *    `toolName`/`toolInput`, or nested under `preToolUse`).
- *  - deny: `{ "cancel": true, "errorMessage": … }`. **Deny-only**: the response
- *    schema has no input-modification field, so under
- *    `hooks.enforcement: "rewrite"` this harness falls back to the deny, whose
- *    reason still carries the exact replacement pipeline.
+ * Cline shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/cline.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/cline.js` as the
+ * harness's hook command; this file is what that runs.
  */
 export declare const adapter: ShimAdapter;
 //# sourceMappingURL=cline.d.ts.map

package/dist/hooks/shims/cline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cline.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/cline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,EAAE,WAqBrB,CAAC"}
+{"version":3,"file":"cline.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/cline.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,WAAkC,CAAC","sourcesContent":["import { cline } from '../../harness/cline.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Cline shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/cline.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/cline.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(cline);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/cline.js

@@ -1,39 +1,14 @@
-import { asRecord, isMainModule, runShimMain, toolCallRequest } from '../shim.js';
+import { cline } from '../../harness/cline.js';
+import { shimAdapterOf } from '../../harness/profile.js';
+import { isMainModule, runShimMain } from '../shim.js';
 /**
- * Cline shim — EXPERIMENTAL tier: schema mapped from the capability matrix
- * (docs/research/2026-09-02-harness-capability-matrix.md, Cline row; primary source
- * <https://docs.cline.bot/features/hooks>), not yet smoke-tested against the real
- * binary.
- *
- *  - event: `PreToolUse`, delivered to an executable under `.clinerules/hooks/`;
- *    stdin carries the tool call (accepted spellings: `tool_name`/`tool_input`,
- *    `toolName`/`toolInput`, or nested under `preToolUse`).
- *  - deny: `{ "cancel": true, "errorMessage": … }`. **Deny-only**: the response
- *    schema has no input-modification field, so under
- *    `hooks.enforcement: "rewrite"` this harness falls back to the deny, whose
- *    reason still carries the exact replacement pipeline.
+ * Cline shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/cline.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/cline.js` as the
+ * harness's hook command; this file is what that runs.
  */
-export const adapter = {
-    toRequest: (raw) => {
-        const fields = asRecord(raw);
-        const nested = asRecord(fields['preToolUse']);
-        const name = fields['tool_name'] ?? fields['toolName'] ?? nested['toolName'] ?? nested['tool'];
-        const input = fields['tool_input'] ?? fields['toolInput'] ?? nested['toolInput'] ?? nested['input'];
-        return toolCallRequest(name, input, {
-            read: ['Read', 'read_file', 'readFile'],
-            bash: ['Bash', 'execute_command', 'executeCommand', 'shell'],
-        });
-    },
-    pass: () => ({ stdout: '', exitCode: 0 }),
-    deny: (_raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            cancel: true,
-            errorMessage: decision.reason ?? 'denied by the smelt guard',
-        })}\n`,
-        exitCode: 0,
-    }),
-    // No `rewrite`: Cline's PreToolUse response cannot modify tool input (deny-only).
-};
+export const adapter = shimAdapterOf(cline);
 if (isMainModule(import.meta.url))
     runShimMain(adapter);
 //# sourceMappingURL=cline.js.map

package/dist/hooks/shims/cline.js.map

@@ -1 +1 @@
-{"version":3,"file":"cline.js","sourceRoot":"","sources":["../../../src/hooks/shims/cline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/F,MAAM,KAAK,GACT,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACxF,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE;YAClC,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC;YACvC,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,OAAO,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,QAAQ,CAAC,MAAM,IAAI,2BAA2B;SAC7D,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,kFAAkF;CACnF,CAAC;AAEF,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"cline.js","sourceRoot":"","sources":["../../../src/hooks/shims/cline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB,aAAa,CAAC,KAAK,CAAC,CAAC;AAEzD,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC","sourcesContent":["import { cline } from '../../harness/cline.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Cline shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/cline.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/cline.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(cline);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/codex.d.ts

@@ -1,23 +1,10 @@
 import type { ShimAdapter } from '../shim.ts';
 /**
- * Codex CLI shim — VERIFIED tier.
- *
- * Codex's experimental hooks (`features.hooks`, rust-v0.114.0+, on by default from
- * 0.150.1) deliberately mirror Claude Code's schema — the survey is
- * docs/research/2026-09-02-agent-enforcement.md § 3, primary source
- * <https://developers.openai.com/codex/hooks>:
- *
- *  - stdin: `{ tool_name, tool_input }`; shell input arrives as `tool_name: "Bash"`,
- *    `tool_input.command`.
- *  - deny: `hookSpecificOutput.permissionDecision: "deny"` + reason (or exit 2).
- *  - rewrite: `permissionDecision: "allow"` with `updatedInput` — for Bash,
- *    `updatedInput` **must include a string `command` field**, which this shim's
- *    rewrite always does.
- *
- * Two documented differences from Claude Code, both honoured here:
- * `permissionDecision: "ask"` is NOT supported (a parse error — the tool proceeds),
- * and this shim never emits it; project-layer hooks only run once the project is
- * trusted, which the installer's output says out loud.
+ * Codex CLI shim — VERIFIED tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/codex.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/codex.js` as the
+ * harness's hook command; this file is what that runs.
  */
 export declare const adapter: ShimAdapter;
 //# sourceMappingURL=codex.d.ts.map

package/dist/hooks/shims/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/codex.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,OAAO,EAAE,WAgCrB,CAAC"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/codex.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,WAAkC,CAAC","sourcesContent":["import { codex } from '../../harness/codex.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Codex CLI shim — VERIFIED tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/codex.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/codex.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(codex);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/codex.js

@@ -1,56 +1,14 @@
-import { asRecord, isMainModule, runShimMain, toolCallRequest } from '../shim.js';
+import { codex } from '../../harness/codex.js';
+import { shimAdapterOf } from '../../harness/profile.js';
+import { isMainModule, runShimMain } from '../shim.js';
 /**
- * Codex CLI shim — VERIFIED tier.
- *
- * Codex's experimental hooks (`features.hooks`, rust-v0.114.0+, on by default from
- * 0.150.1) deliberately mirror Claude Code's schema — the survey is
- * docs/research/2026-09-02-agent-enforcement.md § 3, primary source
- * <https://developers.openai.com/codex/hooks>:
- *
- *  - stdin: `{ tool_name, tool_input }`; shell input arrives as `tool_name: "Bash"`,
- *    `tool_input.command`.
- *  - deny: `hookSpecificOutput.permissionDecision: "deny"` + reason (or exit 2).
- *  - rewrite: `permissionDecision: "allow"` with `updatedInput` — for Bash,
- *    `updatedInput` **must include a string `command` field**, which this shim's
- *    rewrite always does.
- *
- * Two documented differences from Claude Code, both honoured here:
- * `permissionDecision: "ask"` is NOT supported (a parse error — the tool proceeds),
- * and this shim never emits it; project-layer hooks only run once the project is
- * trusted, which the installer's output says out loud.
+ * Codex CLI shim — VERIFIED tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/codex.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/codex.js` as the
+ * harness's hook command; this file is what that runs.
  */
-export const adapter = {
-    toRequest: (raw) => {
-        const fields = asRecord(raw);
-        return toolCallRequest(fields['tool_name'], fields['tool_input'], {
-            read: ['Read'],
-            bash: ['Bash', 'shell'],
-        });
-    },
-    pass: () => ({ stdout: '', exitCode: 0 }),
-    deny: (_raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: 'PreToolUse',
-                permissionDecision: 'deny',
-                permissionDecisionReason: decision.reason ?? 'denied by the smelt guard',
-            },
-        })}\n`,
-        exitCode: 0,
-    }),
-    rewrite: (raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: 'PreToolUse',
-                permissionDecision: 'allow',
-                permissionDecisionReason: `smelt rewrote this command (hooks.enforcement: "rewrite"): ` +
-                    `${decision.suggestion ?? ''}`,
-                updatedInput: { ...asRecord(asRecord(raw)['tool_input']), command: decision.suggestion },
-            },
-        })}\n`,
-        exitCode: 0,
-    }),
-};
+export const adapter = shimAdapterOf(codex);
 if (isMainModule(import.meta.url))
     runShimMain(adapter);
 //# sourceMappingURL=codex.js.map

package/dist/hooks/shims/codex.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../../src/hooks/shims/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;YAChE,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EAAE,QAAQ,CAAC,MAAM,IAAI,2BAA2B;aACzE;SACF,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,OAAO;gBAC3B,wBAAwB,EACtB,6DAA6D;oBAC7D,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE;gBAChC,YAAY,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;aACzF;SACF,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;CACH,CAAC;AAEF,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../../src/hooks/shims/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB,aAAa,CAAC,KAAK,CAAC,CAAC;AAEzD,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC","sourcesContent":["import { codex } from '../../harness/codex.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Codex CLI shim — VERIFIED tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/codex.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/codex.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(codex);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/cursor.d.ts

@@ -1,19 +1,10 @@
 import type { ShimAdapter } from '../shim.ts';
 /**
- * Cursor CLI/agent shim — EXPERIMENTAL tier: schema mapped from the capability
- * matrix (docs/research/2026-09-02-harness-capability-matrix.md, Cursor row; primary
- * source <https://cursor.com/docs/agent/hooks>), not yet smoke-tested against the
- * real binary.
- *
- *  - event: `preToolUse` (the broad hook — unlike `beforeShellExecution`, it
- *    supports input rewrite); stdin `{ tool_name, tool_input }`.
- *  - deny: `{ "permission": "deny", "agentMessage": … }` — `agentMessage` reaches
- *    the model, `userMessage` the human; the guard's steering text goes to the model.
- *  - rewrite: `{ "permission": "allow", "updated_input": { … } }` (snake_case, the
- *    whole input object).
- *
- * Cursor has no static permission-config file — gating is entirely hook code — so
- * this shim plus the instruction file is the whole enforcement story there.
+ * Cursor shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/cursor.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/cursor.js` as the
+ * harness's hook command; this file is what that runs.
  */
 export declare const adapter: ShimAdapter;
 //# sourceMappingURL=cursor.d.ts.map

package/dist/hooks/shims/cursor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/cursor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,OAAO,EAAE,WA2BrB,CAAC"}
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/cursor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,WAAmC,CAAC","sourcesContent":["import { cursor } from '../../harness/cursor.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Cursor shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/cursor.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/cursor.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(cursor);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/cursor.js

@@ -1,47 +1,14 @@
-import { asRecord, isMainModule, runShimMain, toolCallRequest } from '../shim.js';
+import { cursor } from '../../harness/cursor.js';
+import { shimAdapterOf } from '../../harness/profile.js';
+import { isMainModule, runShimMain } from '../shim.js';
 /**
- * Cursor CLI/agent shim — EXPERIMENTAL tier: schema mapped from the capability
- * matrix (docs/research/2026-09-02-harness-capability-matrix.md, Cursor row; primary
- * source <https://cursor.com/docs/agent/hooks>), not yet smoke-tested against the
- * real binary.
- *
- *  - event: `preToolUse` (the broad hook — unlike `beforeShellExecution`, it
- *    supports input rewrite); stdin `{ tool_name, tool_input }`.
- *  - deny: `{ "permission": "deny", "agentMessage": … }` — `agentMessage` reaches
- *    the model, `userMessage` the human; the guard's steering text goes to the model.
- *  - rewrite: `{ "permission": "allow", "updated_input": { … } }` (snake_case, the
- *    whole input object).
- *
- * Cursor has no static permission-config file — gating is entirely hook code — so
- * this shim plus the instruction file is the whole enforcement story there.
+ * Cursor shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/cursor.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/cursor.js` as the
+ * harness's hook command; this file is what that runs.
  */
-export const adapter = {
-    toRequest: (raw) => {
-        const fields = asRecord(raw);
-        return toolCallRequest(fields['tool_name'], fields['tool_input'], {
-            read: ['read_file', 'Read', 'ReadFile'],
-            bash: ['run_terminal_cmd', 'Shell', 'Bash', 'shell'],
-        });
-    },
-    pass: () => ({ stdout: '', exitCode: 0 }),
-    deny: (_raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            permission: 'deny',
-            agentMessage: decision.reason ?? 'denied by the smelt guard',
-        })}\n`,
-        exitCode: 0,
-    }),
-    rewrite: (raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            permission: 'allow',
-            updated_input: { ...asRecord(asRecord(raw)['tool_input']), command: decision.suggestion },
-        })}\n`,
-        // The allow/updated_input shape carries no message field — announce on stderr.
-        stderr: `smelt guard (rewrite mode): substituted the command in-flight with ` +
-            `\`${decision.suggestion ?? ''}\`. ${decision.reason ?? ''}\n`,
-        exitCode: 0,
-    }),
-};
+export const adapter = shimAdapterOf(cursor);
 if (isMainModule(import.meta.url))
     runShimMain(adapter);
 //# sourceMappingURL=cursor.js.map

package/dist/hooks/shims/cursor.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../../src/hooks/shims/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;YAChE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;YACvC,IAAI,EAAE,CAAC,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,UAAU,EAAE,MAAM;YAClB,YAAY,EAAE,QAAQ,CAAC,MAAM,IAAI,2BAA2B;SAC7D,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,UAAU,EAAE,OAAO;YACnB,aAAa,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;SAC1F,CAAC,IAAI;QACN,+EAA+E;QAC/E,MAAM,EACJ,qEAAqE;YACrE,KAAK,QAAQ,CAAC,UAAU,IAAI,EAAE,OAAO,QAAQ,CAAC,MAAM,IAAI,EAAE,IAAI;QAChE,QAAQ,EAAE,CAAC;KACZ,CAAC;CACH,CAAC;AAEF,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../../src/hooks/shims/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB,aAAa,CAAC,MAAM,CAAC,CAAC;AAE1D,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC","sourcesContent":["import { cursor } from '../../harness/cursor.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Cursor shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/cursor.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/cursor.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(cursor);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/gemini.d.ts

@@ -1,23 +1,10 @@
 import type { ShimAdapter } from '../shim.ts';
 /**
- * Gemini CLI shim — EXPERIMENTAL tier: the schema below is mapped from the
- * capability matrix (docs/research/2026-09-02-harness-capability-matrix.md, Gemini
- * CLI row; primary source <https://geminicli.com/docs/hooks/reference/>), and the
- * field names were additionally checked 2026-09-02 against the shipped
- * `@google/gemini-cli` 0.58.0 bundle (installed headlessly for KOT-212's
- * verification pass): the BeforeTool stdin payload is `{ tool_name, tool_input }`,
- * `read_file` takes `file_path` with `start_line`/`end_line` windows, the shell
- * tool is `run_shell_command` with `command`, denial is `{ "decision": "deny",
- * "reason": … }`, and `hookSpecificOutput.tool_input` substitutes the input. What
- * has NOT run is a live end-to-end session (needs credentials this environment does
- * not have), so the tier stays experimental — treat surprises as shim bugs and
- * please report them.
- *
- * Carried caveat from the matrix: Gemini's policy engine has an open bug where an
- * `allow` policy is ignored in non-interactive runs
- * (<https://github.com/google-gemini/gemini-cli/issues/20469>) — this preset uses
- * hooks, not the policy engine, but non-interactive behaviour is the least-tested
- * corner; verify before relying on it in CI.
+ * Gemini CLI shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/gemini.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/gemini.js` as the
+ * harness's hook command; this file is what that runs.
  */
 export declare const adapter: ShimAdapter;
 //# sourceMappingURL=gemini.d.ts.map

package/dist/hooks/shims/gemini.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gemini.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/gemini.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,OAAO,EAAE,WA6BrB,CAAC"}
+{"version":3,"file":"gemini.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/gemini.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,WAAmC,CAAC","sourcesContent":["import { gemini } from '../../harness/gemini.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Gemini CLI shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/gemini.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/gemini.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(gemini);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/gemini.js

@@ -1,53 +1,14 @@
-import { asRecord, isMainModule, runShimMain, toolCallRequest } from '../shim.js';
+import { gemini } from '../../harness/gemini.js';
+import { shimAdapterOf } from '../../harness/profile.js';
+import { isMainModule, runShimMain } from '../shim.js';
 /**
- * Gemini CLI shim — EXPERIMENTAL tier: the schema below is mapped from the
- * capability matrix (docs/research/2026-09-02-harness-capability-matrix.md, Gemini
- * CLI row; primary source <https://geminicli.com/docs/hooks/reference/>), and the
- * field names were additionally checked 2026-09-02 against the shipped
- * `@google/gemini-cli` 0.58.0 bundle (installed headlessly for KOT-212's
- * verification pass): the BeforeTool stdin payload is `{ tool_name, tool_input }`,
- * `read_file` takes `file_path` with `start_line`/`end_line` windows, the shell
- * tool is `run_shell_command` with `command`, denial is `{ "decision": "deny",
- * "reason": … }`, and `hookSpecificOutput.tool_input` substitutes the input. What
- * has NOT run is a live end-to-end session (needs credentials this environment does
- * not have), so the tier stays experimental — treat surprises as shim bugs and
- * please report them.
- *
- * Carried caveat from the matrix: Gemini's policy engine has an open bug where an
- * `allow` policy is ignored in non-interactive runs
- * (<https://github.com/google-gemini/gemini-cli/issues/20469>) — this preset uses
- * hooks, not the policy engine, but non-interactive behaviour is the least-tested
- * corner; verify before relying on it in CI.
+ * Gemini CLI shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/gemini.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/gemini.js` as the
+ * harness's hook command; this file is what that runs.
  */
-export const adapter = {
-    toRequest: (raw) => {
-        const fields = asRecord(raw);
-        return toolCallRequest(fields['tool_name'], fields['tool_input'], {
-            read: ['read_file', 'ReadFile', 'Read'],
-            bash: ['run_shell_command', 'Shell', 'Bash'],
-        });
-    },
-    pass: () => ({ stdout: '', exitCode: 0 }),
-    deny: (_raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            decision: 'deny',
-            reason: decision.reason ?? 'denied by the smelt guard',
-        })}\n`,
-        exitCode: 0,
-    }),
-    rewrite: (raw, _request, decision) => ({
-        stdout: `${JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: 'BeforeTool',
-                tool_input: { ...asRecord(asRecord(raw)['tool_input']), command: decision.suggestion },
-            },
-        })}\n`,
-        // The BeforeTool rewrite shape carries no reason field — announce on stderr.
-        stderr: `smelt guard (rewrite mode): substituted the command in-flight with ` +
-            `\`${decision.suggestion ?? ''}\`. ${decision.reason ?? ''}\n`,
-        exitCode: 0,
-    }),
-};
+export const adapter = shimAdapterOf(gemini);
 if (isMainModule(import.meta.url))
     runShimMain(adapter);
 //# sourceMappingURL=gemini.js.map

package/dist/hooks/shims/gemini.js.map

@@ -1 +1 @@
-{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../../src/hooks/shims/gemini.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;YAChE,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;YACvC,IAAI,EAAE,CAAC,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,2BAA2B;SACvD,CAAC,IAAI;QACN,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACxB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;aACvF;SACF,CAAC,IAAI;QACN,6EAA6E;QAC7E,MAAM,EACJ,qEAAqE;YACrE,KAAK,QAAQ,CAAC,UAAU,IAAI,EAAE,OAAO,QAAQ,CAAC,MAAM,IAAI,EAAE,IAAI;QAChE,QAAQ,EAAE,CAAC;KACZ,CAAC;CACH,CAAC;AAEF,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../../src/hooks/shims/gemini.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAgB,aAAa,CAAC,MAAM,CAAC,CAAC;AAE1D,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;IAAE,WAAW,CAAC,OAAO,CAAC,CAAC","sourcesContent":["import { gemini } from '../../harness/gemini.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Gemini CLI shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/gemini.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/gemini.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(gemini);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}

package/dist/hooks/shims/grok.d.ts

@@ -1,18 +1,10 @@
 import type { ShimAdapter } from '../shim.ts';
 /**
- * Grok CLI shim — EXPERIMENTAL tier: schema mapped from the capability matrix
- * (docs/research/2026-09-02-harness-capability-matrix.md, Grok CLI row; primary
- * source <https://docs.x.ai/build/features/hooks>), not yet smoke-tested against
- * the real binary. Note the matrix's provenance warning: the official CLI is
- * `xai-org/grok-build` (binary `grok`) — `superagent-ai/grok-cli` is a third-party
- * clone with a different hook surface.
- *
- *  - event: `PreToolUse`; stdin `{ tool_name, tool_input }` (Claude-Code-like tool
- *    names).
- *  - deny: `{ "decision": "deny", "reason": … }` or exit 2. **Deny-only**: the input
- *    is read-only to hooks, so there is no rewrite here — under
- *    `hooks.enforcement: "rewrite"` this harness falls back to the deny, whose
- *    reason still carries the exact replacement pipeline.
+ * Grok CLI shim — EXPERIMENTAL tier. The runnable front door only: every fact about this
+ * harness, its hook schema included, lives in its profile
+ * (`src/harness/grok.ts`), and `shimFromSchema` turns that schema into the
+ * adapter below. The installer wires `node dist/hooks/shims/grok.js` as the
+ * harness's hook command; this file is what that runs.
  */
 export declare const adapter: ShimAdapter;
 //# sourceMappingURL=grok.d.ts.map

package/dist/hooks/shims/grok.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grok.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/grok.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,OAAO,EAAE,WAiBrB,CAAC"}
+{"version":3,"file":"grok.d.ts","sourceRoot":"","sources":["../../../src/hooks/shims/grok.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,WAAiC,CAAC","sourcesContent":["import { grok } from '../../harness/grok.ts';\nimport { shimAdapterOf } from '../../harness/profile.ts';\nimport { isMainModule, runShimMain } from '../shim.ts';\nimport type { ShimAdapter } from '../shim.ts';\n\n/**\n * Grok CLI shim — EXPERIMENTAL tier. The runnable front door only: every fact about this\n * harness, its hook schema included, lives in its profile\n * (`src/harness/grok.ts`), and `shimFromSchema` turns that schema into the\n * adapter below. The installer wires `node dist/hooks/shims/grok.js` as the\n * harness's hook command; this file is what that runs.\n */\nexport const adapter: ShimAdapter = shimAdapterOf(grok);\n\nif (isMainModule(import.meta.url)) runShimMain(adapter);\n"]}