@sun-asterisk/sungen 3.2.35 → 3.3.0-alpha.10

package/dist/hooks/bash-read-only-segment.js

@@ -0,0 +1,168 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.lineKeepsReadOnlyExemption = lineKeepsReadOnlyExemption;
+exports.isReadOnlyNodeEval = isReadOnlyNodeEval;
+exports.isReadOnlySegment = isReadOnlySegment;
+exports.pipelineStaysReadOnly = pipelineStaysReadOnly;
+/**
+ * Which Bash segments only READ, so they may name a protected path freely (bash-protected-mention).
+ *
+ * An allowlist, fail-closed (#968): a command is read-only only in the forms listed here. It drops
+ * back to "the guard cannot tell" when
+ *   - the command word has a `/` outside the system bin dirs (`./cat`, `/tmp/evil/jq`),
+ *   - a word holds `$`, `{`, `*`, `?` or `[` (`$'--output'`, `${…}`, `--{output=…,stat}`, a `q*` glob can
+ *     hide an option name or a path),
+ *   - an option runs a program or writes a file, also abbreviated where the tool accepts that
+ *     (`rg --pre`, `git diff --output` / `--outp`, ugrep's `grep --filter` / `--save-config` / `--pager`
+ *     / `--config`, `sort -o` / `--o…` / `--c…`),
+ *   - git has any global option before its subcommand except `--no-pager` / `-P` / `--no-optional-locks`
+ *     (`-c`, `--config-env`, `--exec-path`, `-C`, `--git-dir`… can point it at another program),
+ *   - its output is piped into anything that is not a read-only command or filter (`| xargs rm`, `| sh`).
+ * And the whole LINE loses the exemption (lineKeepsReadOnlyExemption) when it uses command
+ * substitution or changes shell state that a later command obeys: any `NAME=value`, `export`,
+ * `declare`, `typeset`, `set`, `setopt`, `shopt`, `alias`, `unalias`, `hash`, `unset`, `read`,
+ * `enable`, `builtin`, `trap`, `source` / `.`, `eval`, or a function definition.
+ * `git grep` is not read-only at all: `-O` runs a program, also inside a flag cluster (`-nOrm`) and
+ * as an abbreviation (`--open=`). `node -e|-p` counts only when its script can do nothing but read
+ * (isReadOnlyNodeEval).
+ *
+ * Accepted floor, not closed here: `sungen` is listed read-only (it writes approval records only
+ * through its own human gates); a path built at runtime (`$VAR` away from a protected name), a
+ * symlink, or a script that writes without naming the path is out of reach; a bare directory
+ * (`rm -rf qa/decisions`, `cd qa && rm -rf decisions/`) is not a protected-path mention (#970);
+ * `git -C <dir> …` is not followed; a same-line `D=qa/decisions; … $D` is not tracked; pathless
+ * destructive git (`clean -fdx`, `stash`, `reset --hard`, `checkout .`, `apply`, `am`) is not seen;
+ * and a quoting trick the tokenizer reads differently from the shell can turn a deny into an ask.
+ * The backstop is release-time decision integrity: the git HEAD comparison and the in-run rule.
+ */
+const path = __importStar(require("path"));
+const READ_ONLY = new Set(['cat', 'ls', 'head', 'tail', 'grep', 'rg', 'wc', 'diff', 'stat', 'jq', 'sungen', 'sungen.js']);
+const GIT_READ_ONLY = new Set(['diff', 'log', 'show', 'status', 'check-ignore', 'ls-files', 'ls-tree', 'blame', 'rev-parse', 'cat-file']);
+/** The only git global options allowed before a read-only subcommand. */
+const GIT_SAFE_GLOBALS = new Set(['--no-pager', '-P', '--no-optional-locks']);
+/** Filters that write only to stdout — safe as a pipe sink, in the forms isPipeFilter allows. */
+const FILTERS = new Set(['sort', 'uniq', 'cut', 'tr']);
+/** A command word with a `/` counts only from these dirs: `./cat` or `/tmp/evil/jq` is not `cat` / `jq`. */
+const SYSTEM_BIN = new Set(['/usr/bin', '/bin', '/usr/local/bin', '/opt/homebrew/bin']);
+/** Characters that let the shell build a word the guard cannot read: expansions, braces, globs. */
+const OPAQUE_WORD = /[$*?[{]/;
+/** Is `word` the long option `--<one of names>`, or an abbreviation of one at least `min` chars long? */
+const longOpt = (names, min) => (word) => {
+    const m = /^--([^=]+)/.exec(word);
+    return !!m && names.some((n) => n === m[1] || (m[1].length >= min && n.startsWith(m[1])));
+};
+/** Options that make an otherwise read-only command run a program or write a file. */
+const UNSAFE_OPT = {
+    rg: (w) => /^--(?:pre|hostname-bin)(?:=|$)/.test(w),
+    git: longOpt(['output', 'ext-diff', 'textconv'], 2),
+    // `grep` may be ugrep: --filter runs programs, --save-config writes, --pager / --view run one, --config / ---FILE load those
+    grep: (w) => w.startsWith('---') || longOpt(['filter', 'save-config', 'pager', 'view', 'config'], 3)(w),
+};
+const trustedWords = (seg) => !seg.assigns.length && !seg.words.some((w) => OPAQUE_WORD.test(w))
+    && (!seg.cmdPath.includes('/') || SYSTEM_BIN.has(path.posix.dirname(seg.cmdPath)));
+/** `$(…)`, backticks, `<(…)`, `>(…)`: a command's output becomes another command's words. */
+const SUBSTITUTION = /\$\(|`|[<>]\(/;
+/** Commands that change shell state a later command on the line obeys. */
+const SHELL_STATE = new Set([
+    'export', 'declare', 'typeset', 'local', 'readonly', 'set', 'setopt', 'shopt', 'alias', 'unalias', 'hash', 'unset',
+    'read', 'enable', 'builtin', 'trap', 'source', '.', 'eval', 'function',
+]);
+/** `name() {` / `name() (` — a function definition (`function name` is caught by SHELL_STATE). */
+const FUNCTION_DEF = /(?:^|[\s;&|])[\w.:-]+\s*\(\s*\)\s*[{(]/;
+/** May any read-only segment of this line keep its exemption? */
+function lineKeepsReadOnlyExemption(command, segs) {
+    return !SUBSTITUTION.test(command) && !FUNCTION_DEF.test(command)
+        && !segs.some((s) => s.assigns.length || SHELL_STATE.has(s.cmd));
+}
+/** `node -e` / `node -p` whose script can only read: no write/exec API, no computed access, no escapes. */
+const NODE_EVAL_FLAGS = new Set(['-e', '-p', '--eval', '--print']);
+const NODE_UNSAFE = new RegExp([
+    '[`\\[\\\\]', // template literals, computed property access, string escapes
+    'flag', // `readFileSync(p, { flag: 'w' })` truncates p
+    'write', 'append', '\\brm', 'unlink', 'rename', 'copy', '\\bcp', 'mkd', 'truncate', 'stream', 'open', 'link',
+    'chmod', 'chown', 'utime', 'exec', 'spawn', 'fork', 'child', 'eval', 'function', 'import', 'constructor',
+    'proto', 'reflect', 'proxy', 'global', 'process', 'module', 'object', 'concat', '\\bvm\\b', 'worker', 'binding',
+].join('|'), 'i');
+const SAFE_REQUIRE = /\brequire\(\s*(['"])(?:(?:node:)?(?:fs|path)|[./][^'"]*\.json)\1\s*\)/g;
+function isReadOnlyNodeEval(args) {
+    if (args.length !== 2 || !NODE_EVAL_FLAGS.has(args[0]))
+        return false;
+    const script = args[1];
+    return !NODE_UNSAFE.test(script) && !/\brequire\b/.test(script.replace(SAFE_REQUIRE, ''));
+}
+/** `git [--no-pager|-P|--no-optional-locks]… <read-only subcommand> …` — anchored, no other global option. */
+function isReadOnlyGit(words) {
+    let k = 0;
+    while (GIT_SAFE_GLOBALS.has(words[k]))
+        k++;
+    return GIT_READ_ONLY.has(words[k] ?? '');
+}
+/** Does this segment only read? (`words` holds its arguments and redirection targets.) */
+function isReadOnlySegment(seg) {
+    if (!seg.cmd || !trustedWords(seg))
+        return false;
+    const unsafe = UNSAFE_OPT[seg.cmd];
+    if (unsafe && seg.words.some(unsafe))
+        return false;
+    if (seg.cmd === 'git')
+        return isReadOnlyGit(seg.words);
+    if (seg.cmd === 'node')
+        return isReadOnlyNodeEval(seg.words);
+    return READ_ONLY.has(seg.cmd);
+}
+/** A pipe sink that cannot act on what it reads: a read-only command, or a stdout-only filter. */
+function isPipeFilter(seg) {
+    if (isReadOnlySegment(seg))
+        return true;
+    if (!FILTERS.has(seg.cmd) || !trustedWords(seg))
+        return false;
+    // `sort -o out` / `--compress-program=…` (any `--o…` / `--c…` abbreviation) write or run; `uniq in out` writes its second operand.
+    if (seg.cmd === 'sort')
+        return !seg.words.some((w) => /^(?:-[^-]*o|--[oc])/.test(w));
+    if (seg.cmd === 'uniq')
+        return seg.words.every((w) => w.startsWith('-'));
+    return true; // cut, tr: operands are inputs or character sets
+}
+/** Does everything downstream of segment `i` in its pipeline only read / filter? */
+function pipelineStaysReadOnly(segs, i) {
+    for (let j = i; segs[j]?.pipesTo; j++) {
+        const next = segs[j + 1];
+        if (!next || !isPipeFilter(next))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=bash-read-only-segment.js.map

package/dist/hooks/bash-read-only-segment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-read-only-segment.js","sourceRoot":"","sources":["../../src/hooks/bash-read-only-segment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEA,gEAGC;AAaD,gDAIC;AAUD,8CAOC;AAaD,sDAMC;AAjID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,2CAA6B;AAG7B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAC1H,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1I,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC9E,iGAAiG;AACjG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvD,4GAA4G;AAC5G,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACxF,mGAAmG;AACnG,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B,yGAAyG;AACzG,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,IAAY,EAAW,EAAE;IAC1E,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC,CAAC;AACF,sFAAsF;AACtF,MAAM,UAAU,GAA8C;IAC5D,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACnD,6HAA6H;IAC7H,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CACxG,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,GAAgB,EAAW,EAAE,CACjD,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;OAC/D,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAErF,6FAA6F;AAC7F,MAAM,YAAY,GAAG,eAAe,CAAC;AACrC,0EAA0E;AAC1E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO;IAClH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU;CACvE,CAAC,CAAC;AACH,kGAAkG;AAClG,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,iEAAiE;AACjE,SAAgB,0BAA0B,CAAC,OAAe,EAAE,IAAmB;IAC7E,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;WAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,2GAA2G;AAC3G,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC;IAC7B,YAAY,EAAE,8DAA8D;IAC5E,MAAM,EAAE,+CAA+C;IACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM;IAC5G,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa;IACxG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS;CAChH,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAClB,MAAM,YAAY,GAAG,wEAAwE,CAAC;AAE9F,SAAgB,kBAAkB,CAAC,IAAc;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,8GAA8G;AAC9G,SAAS,aAAa,CAAC,KAAe;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAC;IAC3C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,SAAgB,iBAAiB,CAAC,GAAgB;IAChD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,kGAAkG;AAClG,SAAS,YAAY,CAAC,GAAgB;IACpC,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,mIAAmI;IACnI,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,CAAG,iDAAiD;AAClE,CAAC;AAED,oFAAoF;AACpF,SAAgB,qBAAqB,CAAC,IAAmB,EAAE,CAAS;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/hooks/bash-write-targets.d.ts

@@ -0,0 +1,25 @@
+/** One simple command of a Bash line (`a | b && c` is three). */
+export interface BashSegment {
+    /** The command name (basename, after env assignments and wrappers like `sudo`), or ''. */
+    cmd: string;
+    /** The command word as written (`./cat`, `/usr/bin/grep`, `cat`). */
+    cmdPath: string;
+    /** Its arguments, and every redirection target, as written. */
+    words: string[];
+    /** The directory it runs in — a preceding `cd` in the same line is followed. */
+    dir: string;
+    /** Absolute paths it writes via redirection, `tee`, `sed -i` or `git … --output`. */
+    writes: string[];
+    /** False once a `cd` / `pushd` / `popd` on the line went somewhere the guard cannot resolve. */
+    dirKnown: boolean;
+    /** It writes a relative path while `dirKnown` is false — the guard cannot tell where. */
+    writesInUnknownDir: boolean;
+    /** Leading `NAME=value` assignments (a lone `X=…` is a segment too, with cmd ''). */
+    assigns: string[];
+    /** Its stdout feeds the next segment through `|`. */
+    pipesTo: boolean;
+}
+export declare function bashSegments(command: string, cwd: string): BashSegment[];
+/** Absolute paths the command writes via redirection, `tee`, `sed -i` or `git --output`, resolved against `cwd`. */
+export declare function bashWriteTargets(command: string, cwd: string): string[];
+//# sourceMappingURL=bash-write-targets.d.ts.map

package/dist/hooks/bash-write-targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-write-targets.d.ts","sourceRoot":"","sources":["../../src/hooks/bash-write-targets.ts"],"names":[],"mappings":"AAmGA,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,0FAA0F;IAC1F,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,qFAAqF;IACrF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gGAAgG;IAChG,QAAQ,EAAE,OAAO,CAAC;IAClB,yFAAyF;IACzF,kBAAkB,EAAE,OAAO,CAAC;IAC5B,qFAAqF;IACrF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qDAAqD;IACrD,OAAO,EAAE,OAAO,CAAC;CAClB;AAsBD,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAgDxE;AAED,oHAAoH;AACpH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAEvE"}

package/dist/hooks/bash-write-targets.js

@@ -0,0 +1,266 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bashSegments = bashSegments;
+exports.bashWriteTargets = bashWriteTargets;
+/**
+ * The files a Bash command line WRITES through the three forms the pre-tool guard covers (P0.1):
+ * output redirection (`>`, `>>`, `>|`, `&>`, `2>`, `>&file`, zsh `>!`…), `tee`, in-place `sed -i`, and
+ * `git … --output <file>` (also abbreviated, `--outp=`) (#968).
+ *
+ * A floor, not a shell interpreter: quotes, escapes, `$'…'` ANSI-C strings, backslash-newline
+ * continuations, `;`/`&&`/`||`/`|` and `cd` / `pushd` (with their options; an operand it cannot resolve
+ * marks the directory unknown) are understood; anything else that can write a file (`cp`, a script, `python -c`) is out of scope by
+ * design. The command string is untrusted — it is only tokenized here, never executed.
+ */
+const path = __importStar(require("path"));
+/** Commands that run another command: the real one is the next word. */
+const WRAPPERS = new Set(['sudo', 'env', 'command', 'nohup', 'time', 'exec', 'nice']);
+const ASSIGNMENT = /^[A-Za-z_]\w*=/;
+const ANSI_C = {
+    a: '\x07', b: '\b', e: '\x1b', E: '\x1b', f: '\f', n: '\n', r: '\r', t: '\t', v: '\v', '\\': '\\', "'": "'", '"': '"', '?': '?',
+};
+/** Decode a bash `$'…'` body starting at `j` (just past `$'`); returns the text and the index past the closing `'`. */
+function ansiC(cmd, j) {
+    let out = '';
+    while (j < cmd.length && cmd[j] !== "'") {
+        if (cmd[j] !== '\\' || j + 1 >= cmd.length) {
+            out += cmd[j++];
+            continue;
+        }
+        const e = cmd[j + 1];
+        j += 2;
+        if (e in ANSI_C)
+            out += ANSI_C[e];
+        else if (/[0-7]/.test(e)) {
+            let m = e;
+            while (m.length < 3 && /[0-7]/.test(cmd[j] ?? ''))
+                m += cmd[j++];
+            out += String.fromCharCode(parseInt(m, 8) & 0xff);
+        }
+        else if (e === 'x' || e === 'u' || e === 'U') {
+            const max = e === 'x' ? 2 : e === 'u' ? 4 : 8;
+            let h = '';
+            while (h.length < max && /[0-9a-fA-F]/.test(cmd[j] ?? ''))
+                h += cmd[j++];
+            const cp = parseInt(h, 16);
+            out += !h ? `\\${e}` : cp <= 0x10ffff ? String.fromCodePoint(cp) : '\ufffd'; // never throw: a throw fails open
+        }
+        else if (e === 'c' && j < cmd.length)
+            out += String.fromCharCode(cmd.charCodeAt(j++) & 31);
+        else
+            out += `\\${e}`;
+    }
+    return [out, j + 1];
+}
+function tokenize(cmd) {
+    const toks = [];
+    let word = '';
+    let inWord = false;
+    const flush = () => { if (inWord)
+        toks.push({ kind: 'word', value: word }); word = ''; inWord = false; };
+    for (let i = 0; i < cmd.length;) {
+        const ch = cmd[i];
+        if (ch === '$' && cmd[i + 1] === "'") {
+            const [text, next] = ansiC(cmd, i + 2);
+            word += text;
+            inWord = true;
+            i = next;
+        }
+        else if (ch === '$' && cmd[i + 1] === '"') {
+            i++; // `$"…"` (locale translation) reads as `"…"`
+        }
+        else if (ch === "'") {
+            const end = cmd.indexOf("'", i + 1);
+            word += cmd.slice(i + 1, end < 0 ? cmd.length : end);
+            inWord = true;
+            i = end < 0 ? cmd.length : end + 1;
+        }
+        else if (ch === '"') {
+            let j = i + 1;
+            for (; j < cmd.length && cmd[j] !== '"'; j++) {
+                if (cmd[j] === '\\' && cmd[j + 1] === '\n') {
+                    j++;
+                    continue;
+                } // line continuation
+                if (cmd[j] === '\\' && j + 1 < cmd.length)
+                    j++;
+                word += cmd[j];
+            }
+            inWord = true;
+            i = j + 1;
+        }
+        else if (ch === '\\' && cmd[i + 1] === '\n') {
+            i += 2; // line continuation: removed entirely
+        }
+        else if (ch === '\\' && i + 1 < cmd.length) {
+            word += cmd[i + 1];
+            inWord = true;
+            i += 2;
+        }
+        else if (ch === ' ' || ch === '\t') {
+            flush();
+            i++;
+        }
+        else if ('\n;|()'.includes(ch) || (ch === '&' && cmd[i + 1] !== '>')) {
+            const doubled = (ch === '|' || ch === '&') && cmd[i + 1] === ch;
+            flush();
+            toks.push({ kind: 'sep', pipe: ch === '|' && !doubled });
+            i += doubled ? 2 : 1;
+        }
+        else if (ch === '>' || (ch === '&' && cmd[i + 1] === '>')) {
+            if (ch === '>' && inWord && /^\d+$/.test(word)) {
+                word = '';
+                inWord = false;
+            }
+            else
+                flush(); // `2>`: an fd, not a word
+            i += ch === '&' ? 2 : 1;
+            if (cmd[i] === '>')
+                i++; // `>>`, `&>>`
+            const dup = cmd[i] === '&'; // `>&x`, `>>&x`: an fd dup only when x is an fd
+            if (dup)
+                i++;
+            if (cmd[i] === '|' || cmd[i] === '!')
+                i++; // clobber: `>|`, `>!`, `>>!`, `&>!`, `>&|`, `>&!`
+            toks.push({ kind: 'redir', writes: true, dup });
+        }
+        else if (ch === '<') {
+            flush();
+            i++;
+            while (cmd[i] === '<')
+                i++;
+            toks.push({ kind: 'redir', writes: false });
+        }
+        else {
+            word += ch;
+            inWord = true;
+            i++;
+        }
+    }
+    flush();
+    return toks;
+}
+const isInPlaceFlag = (a) => a === '--in-place' || a.startsWith('--in-place=') || /^-[a-zA-Z]*i/.test(a);
+/** `git diff|log|show … --output=<file>` / `--output <file>` writes that file (git takes `--outp` for `--output`). */
+function gitOutputTargets(args) {
+    const out = [];
+    args.forEach((a, k) => {
+        const m = /^--([\w-]+)(=([\s\S]*))?$/.exec(a);
+        if (!m || m[1].length < 2 || !'output'.startsWith(m[1]))
+            return;
+        if (m[2] !== undefined)
+            out.push(m[3]);
+        else if (args[k + 1])
+            out.push(args[k + 1]);
+    });
+    return out.filter((t) => t && t !== '/dev/null' && t !== '-');
+}
+/** The operand of `cd` / `pushd` after its options (`-L -P -e -@`, pushd `-n`, `--`), or null when there is not exactly one. */
+function cdOperand(args) {
+    let k = 0;
+    while (k < args.length && /^-[LPe@n]+$/.test(args[k]))
+        k++;
+    if (args[k] === '--')
+        k++;
+    return args.length - k === 1 ? args[k] : null;
+}
+function bashSegments(command, cwd) {
+    const out = [];
+    const toks = tokenize(command);
+    let dir = cwd;
+    let dirKnown = true;
+    let seg = [];
+    let redirected = [];
+    let rawWrites = [];
+    const endSegment = (pipesTo = false) => {
+        let k = 0;
+        while (k < seg.length && (ASSIGNMENT.test(seg[k]) || WRAPPERS.has(seg[k])))
+            k++;
+        const assigns = seg.slice(0, k).filter((w) => ASSIGNMENT.test(w));
+        const cmdPath = seg[k] ?? '';
+        const cmd = path.basename(cmdPath);
+        const args = seg.slice(k + 1).filter((a) => a !== '');
+        if (cmd === 'tee')
+            rawWrites.push(...args.filter((a) => !a.startsWith('-')));
+        else if ((cmd === 'sed' || cmd === 'gsed') && args.some(isInPlaceFlag))
+            rawWrites.push(...args.filter((a) => !a.startsWith('-')));
+        else if (cmd === 'git')
+            rawWrites.push(...gitOutputTargets(args));
+        const writes = rawWrites.map((a) => path.resolve(dir, a));
+        const writesInUnknownDir = !dirKnown && rawWrites.some((a) => !path.isAbsolute(a));
+        if (cmd || redirected.length || assigns.length) {
+            out.push({ cmd, cmdPath, words: [...args, ...redirected], dir, dirKnown, writes, writesInUnknownDir, assigns, pipesTo });
+        }
+        if (cmd === 'cd' || cmd === 'pushd' || cmd === 'popd') {
+            const target = cmd === 'popd' ? null : cdOperand(args);
+            if (target && !/[$~`]/.test(target) && target !== '-' && !/^[+-]\d+$/.test(target)) {
+                dir = path.resolve(dir, target);
+                dirKnown = dirKnown || path.isAbsolute(target);
+            }
+            else
+                dirKnown = false; // `cd`, `cd ~`, `cd $D`, `cd -`, `popd`: somewhere the guard cannot resolve
+        }
+        seg = [];
+        redirected = [];
+        rawWrites = [];
+    };
+    for (let t = 0; t < toks.length; t++) {
+        const tok = toks[t];
+        if (tok.kind === 'sep') {
+            endSegment(tok.pipe === true);
+            continue;
+        }
+        if (tok.kind === 'redir') {
+            const target = toks[t + 1];
+            if (target?.kind !== 'word')
+                continue;
+            t++;
+            redirected.push(target.value);
+            const fd = tok.dup && /^(?:\d+-?|-)$/.test(target.value); // `2>&1`, `>&2`, `2>&-`
+            if (tok.writes && !fd && target.value && target.value !== '/dev/null' && target.value !== '-')
+                rawWrites.push(target.value);
+            continue;
+        }
+        seg.push(tok.value);
+    }
+    endSegment();
+    return out;
+}
+/** Absolute paths the command writes via redirection, `tee`, `sed -i` or `git --output`, resolved against `cwd`. */
+function bashWriteTargets(command, cwd) {
+    return bashSegments(command, cwd).flatMap((s) => s.writes);
+}
+//# sourceMappingURL=bash-write-targets.js.map

package/dist/hooks/bash-write-targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-write-targets.js","sourceRoot":"","sources":["../../src/hooks/bash-write-targets.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6IA,oCAgDC;AAGD,4CAEC;AAlMD;;;;;;;;;GASG;AACH,2CAA6B;AAI7B,wEAAwE;AACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACtF,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,MAAM,GAA2B;IACrC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CAChI,CAAC;AAEF,uHAAuH;AACvH,SAAS,KAAK,CAAC,GAAW,EAAE,CAAS;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1E,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,CAAC,IAAI,MAAM;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;aAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACjE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAG,kCAAkC;QACnH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM;YAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;;YACxF,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/G,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,IAAI,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC,GAAG,IAAI,CAAC;QACxC,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5C,CAAC,EAAE,CAAC,CAAG,6CAA6C;QACtD,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC1G,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC,CAAG,oBAAoB;gBACrF,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM;oBAAE,CAAC,EAAE,CAAC;gBAC/C,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,EAAE,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAC,CAAG,sCAAsC;QAClD,CAAC;aAAM,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YAC7C,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACrC,KAAK,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YAChE,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5D,IAAI,EAAE,KAAK,GAAG,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC;YAAC,CAAC;;gBAAM,KAAK,EAAE,CAAC,CAAC,0BAA0B;YACvH,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC,CAA0B,cAAc;YAChE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAuB,gDAAgD;YAClG,IAAI,GAAG;gBAAE,CAAC,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC,CAAQ,kDAAkD;YACpG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAwB1H,sHAAsH;AACtH,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QAChE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAClC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,gIAAgI;AAChI,SAAS,SAAS,CAAC,IAAc;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAC;IAC3D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,CAAC,EAAE,CAAC;IAC1B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe,EAAE,GAAW;IACvD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,CAAC,OAAO,GAAG,KAAK,EAAQ,EAAE;QAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,GAAG,KAAK,KAAK;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxE,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC7H,IAAI,GAAG,KAAK,KAAK;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,kBAAkB,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnF,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC;;gBAAM,QAAQ,GAAG,KAAK,CAAC,CAAG,4EAA4E;QACzG,CAAC;QACD,GAAG,GAAG,EAAE,CAAC;QAAC,UAAU,GAAG,EAAE,CAAC;QAAC,SAAS,GAAG,EAAE,CAAC;IAC5C,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACpE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM;gBAAE,SAAS;YACtC,CAAC,EAAE,CAAC;YACJ,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAG,wBAAwB;YACpF,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG;gBAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5H,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,UAAU,EAAE,CAAC;IACb,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oHAAoH;AACpH,SAAgB,gBAAgB,CAAC,OAAe,EAAE,GAAW;IAC3D,OAAO,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC"}

package/dist/hooks/claude-hook-entry.d.ts

@@ -0,0 +1,11 @@
+import { HookContext, HookInput } from './hook-result-contract';
+export declare function parsePayload(raw: string): HookInput;
+export declare function contextFor(input: HookInput, env: Record<string, string | undefined>): HookContext;
+/**
+ * What to print for this hook and raw payload — pure apart from the hook's own reads. `oversize`
+ * means the payload was too large to read at all.
+ */
+export declare function dispatch(hookName: string, raw: string, env: Record<string, string | undefined>, oversize?: boolean): string;
+/** Run one hook end to end. Resolves once stdout has flushed; never rejects. */
+export declare function main(hookName?: string): Promise<void>;
+//# sourceMappingURL=claude-hook-entry.d.ts.map

package/dist/hooks/claude-hook-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hook-entry.d.ts","sourceRoot":"","sources":["../../src/hooks/claude-hook-entry.ts"],"names":[],"mappings":"AAaA,OAAO,EAAmB,WAAW,EAAE,SAAS,EAAqD,MAAM,wBAAwB,CAAC;AAYpI,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAKnD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,WAAW,CAGjG;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,UAAQ,GAAG,MAAM,CASzH;AAoBD,gFAAgF;AAChF,wBAAsB,IAAI,CAAC,QAAQ,GAAE,MAA8B,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlF"}

package/dist/hooks/claude-hook-entry.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parsePayload = parsePayload;
+exports.contextFor = contextFor;
+exports.dispatch = dispatch;
+exports.main = main;
+/**
+ * Claude Code → sungen hook bridge (P0.1). Three ways in, one behaviour:
+ *
+ *   node dist/hooks/claude-hook-entry.js <hook>        executed directly (`require.main` branch)
+ *   .claude/hooks/sungen-hook.cjs <hook>               the project launcher `require`s this, calls main
+ *   sungen hook <hook>                                  the hidden CLI command (debugging, dev checkouts)
+ *
+ * Reads the event JSON on stdin, runs the hook through `runHook` (toggles + fail-open), and prints
+ * the Claude Code JSON on stdout. Exit code is ALWAYS 0 and anything unexpected prints `{}`: a hook
+ * error must never block or derail a session. The payload is untrusted — it is parsed as JSON and
+ * read field by field, never executed.
+ */
+const path = __importStar(require("path"));
+const hook_result_contract_1 = require("./hook-result-contract");
+const hook_registry_1 = require("./hook-registry");
+const hook_toggles_1 = require("./hook-toggles");
+/**
+ * Payloads above this are not parsed. Not a free pass either: a hook declares what an unreadable
+ * payload means (`onUnreadableInput`) — the guard asks, the advisory hooks stay quiet.
+ */
+const MAX_PAYLOAD_BYTES = 5 * 1024 * 1024;
+/** A hook whose stdin never closes still answers (as a no-op) well inside its timeout. */
+const STDIN_TIMEOUT_MS = 2000;
+function parsePayload(raw) {
+    try {
+        const v = JSON.parse(raw);
+        return v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+    }
+    catch {
+        return {};
+    }
+}
+function contextFor(input, env) {
+    const cwd = typeof input.cwd === 'string' && path.isAbsolute(input.cwd) ? input.cwd : env.CLAUDE_PROJECT_DIR || process.cwd();
+    return { env, cwd };
+}
+/**
+ * What to print for this hook and raw payload — pure apart from the hook's own reads. `oversize`
+ * means the payload was too large to read at all.
+ */
+function dispatch(hookName, raw, env, oversize = false) {
+    if ((0, hook_toggles_1.hooksKilled)(env))
+        return '{}';
+    const hook = (0, hook_registry_1.loadHook)(hookName);
+    if (!hook)
+        return '{}';
+    if (oversize)
+        return (0, hook_result_contract_1.toClaudeStdout)(hook.meta.events[0], (0, hook_result_contract_1.runHookOnUnreadableInput)(hook, contextFor({}, env)));
+    const input = parsePayload(raw);
+    const event = typeof input.hook_event_name === 'string' ? input.hook_event_name : hook.meta.events[0];
+    if (!hook.meta.events.includes(event))
+        return '{}';
+    return (0, hook_result_contract_1.toClaudeStdout)(event, (0, hook_result_contract_1.runHook)(hook, input, contextFor(input, env)));
+}
+function readStdin() {
+    return new Promise((resolve) => {
+        if (process.stdin.isTTY) {
+            resolve({ raw: '', oversize: false });
+            return;
+        }
+        let size = 0;
+        const chunks = [];
+        const done = (raw, oversize = false) => {
+            clearTimeout(timer);
+            process.stdin.removeAllListeners();
+            process.stdin.destroy();
+            resolve({ raw, oversize });
+        };
+        const timer = setTimeout(() => done(''), STDIN_TIMEOUT_MS);
+        process.stdin.on('data', (c) => {
+            size += c.length;
+            if (size > MAX_PAYLOAD_BYTES)
+                done('', true);
+            else
+                chunks.push(c);
+        });
+        process.stdin.on('end', () => done(Buffer.concat(chunks).toString('utf8')));
+        process.stdin.on('error', () => done(''));
+    });
+}
+/** Run one hook end to end. Resolves once stdout has flushed; never rejects. */
+async function main(hookName = process.argv[2] ?? '') {
+    let out = '{}';
+    try {
+        const { raw, oversize } = await readStdin();
+        out = dispatch(hookName, raw, process.env, oversize);
+    }
+    catch {
+        out = '{}';
+    }
+    await new Promise((resolve) => process.stdout.write(`${out}\n`, () => resolve()));
+    process.exitCode = 0;
+}
+if (require.main === module) {
+    // Exit explicitly once flushed: a stray handle must not keep a hook alive into its timeout.
+    void main().then(() => process.exit(0), () => process.exit(0));
+}
+//# sourceMappingURL=claude-hook-entry.js.map