@tekmidian/pai 1.0.0 → 1.0.3

package/dist/hooks/capture-tool-output.mjs

@@ -4,7 +4,6 @@ const require = __paiCreateRequire(import.meta.url);
 if (!process.env.PAI_QUIET_NOTICES) process.env.PAI_QUIET_NOTICES = '1';
 
 // src/hooks/ts/post-tool-use/capture-tool-output.ts
-import { appendFileSync, mkdirSync as mkdirSync2, existsSync as existsSync3 } from "fs";
 import { join as join3 } from "path";
 
 // src/hooks/ts/lib/pai-paths.ts
@@ -136,6 +135,51 @@ function historyDir() {
   return resolvePaiFile(paiHomePath("History"), [oldHistoryDir()], "pai config migrate --history");
 }
 
+// src/hooks/ts/lib/raw-capture.ts
+import { appendFileSync, chmodSync, existsSync as existsSync3, mkdirSync as mkdirSync2, renameSync as renameSync2, statSync as statSync2 } from "fs";
+
+// src/workers/ps-table.ts
+var PS_MAX_BUFFER = 64 * 1024 * 1024;
+
+// src/hooks/ts/lib/loop-guard.ts
+var LOOP_MAX_REPEATS = 4;
+var LOOP_READ_STREAK = Number(process.env.PAI_LOOP_READ_STREAK) > 0 ? Number(process.env.PAI_LOOP_READ_STREAK) : 15;
+var SELF = "If your part is done, commit and write your R report. If you are stuck, report the blocker in R x= (or use pai worker help if available).";
+var LOOP_DENY_REASON = `loop guard: you ran this command ${LOOP_MAX_REPEATS} times with the same result and nothing changed. Stop repeating it. ${SELF}`;
+var WAIT_CAP_MS = 45 * 6e4;
+var FP_FULL_READ_BYTES = 256 * 1024;
+var FP_TOTAL_BYTES = 4 * 1024 * 1024;
+var SECRET_LINE = /pass(?:word|wd)|secret|token|api[_-]?key|credential|authorization|bearer|private key|^\s*(?:export\s+)?[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=|\b(?:sk|ghp|gho|xox[bap])[-_][A-Za-z0-9_-]{16,}|\b[A-Za-z0-9+]{40,}={0,2}(?![\w/])|\b[a-z][a-z0-9+.-]*:\/\/[^\s\/:@]+:[^\s\/@]+@|\b(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}\b|\bgh[pousr]_[A-Za-z0-9]{20,}/i;
+var MASKED_LINE = "[line masked: looks like a secret]";
+function maskSecrets(text) {
+  return text.split("\n").map((l) => SECRET_LINE.test(l) ? MASKED_LINE : l).join("\n");
+}
+
+// src/hooks/ts/lib/raw-capture.ts
+var RAW_CAPTURE_MAX_BYTES = 10 * 1024 * 1024;
+function redactDeep(value) {
+  if (typeof value === "string") return maskSecrets(value);
+  if (Array.isArray(value)) return value.map(redactDeep);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) out[k] = redactDeep(v);
+    return out;
+  }
+  return value;
+}
+function appendRawCapture(file, dir, line, maxBytes = RAW_CAPTURE_MAX_BYTES) {
+  if (!existsSync3(dir)) mkdirSync2(dir, { recursive: true, mode: 448 });
+  try {
+    if (statSync2(file).size + Buffer.byteLength(line) > maxBytes) renameSync2(file, `${file}.1`);
+  } catch {
+  }
+  appendFileSync(file, line, { mode: 384 });
+  try {
+    chmodSync(file, 384);
+  } catch {
+  }
+}
+
 // src/hooks/ts/post-tool-use/capture-tool-output.ts
 var CAPTURE_DIR = join3(historyDir(), "raw-outputs");
 var INTERESTING_TOOLS = ["Bash", "Edit", "Write", "Read", "Task", "NotebookEdit"];
@@ -157,18 +201,15 @@ async function main() {
     const today = now.toISOString().split("T")[0];
     const yearMonth = today.substring(0, 7);
     const dateDir = join3(CAPTURE_DIR, yearMonth);
-    if (!existsSync3(dateDir)) {
-      mkdirSync2(dateDir, { recursive: true });
-    }
     const captureFile = join3(dateDir, `${today}_tool-outputs.jsonl`);
     const captureEntry = JSON.stringify({
       timestamp: data.timestamp || now.toISOString(),
       tool: data.tool_name,
-      input: data.tool_input,
-      output: data.tool_response,
-      session: data.conversation_id
+      input: redactDeep(data.tool_input),
+      output: redactDeep(data.tool_response),
+      session: data.session_id
     }) + "\n";
-    appendFileSync(captureFile, captureEntry);
+    appendRawCapture(captureFile, dateDir, captureEntry);
     process.exit(0);
   } catch (error) {
     console.error(`[UOCS] PostToolUse hook error: ${error}`);

package/dist/hooks/context-compression-hook.mjs

@@ -7598,6 +7598,7 @@ async function sendNtfyNotification(message, retries = 2) {
     try {
       const response = await fetch(`https://ntfy.sh/${topic}`, {
         method: "POST",
+        signal: AbortSignal.timeout(5e3),
         body: message,
         headers: {
           "Title": "Claude Code",
@@ -7624,6 +7625,9 @@ async function sendNtfyNotification(message, retries = 2) {
 // src/hooks/ts/lib/project-utils/session-notes.ts
 import { existsSync as existsSync5, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readFileSync as readFileSync4, writeFileSync, renameSync as renameSync2 } from "fs";
 import { join as join5, basename as basename2 } from "path";
+function localDateString(now = /* @__PURE__ */ new Date()) {
+  return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")}`;
+}
 function getMonthDir(notesDir) {
   const now = /* @__PURE__ */ new Date();
   const year = String(now.getFullYear());
@@ -7676,7 +7680,7 @@ function getCurrentNotePath(notesDir) {
 }
 function createSessionNote(notesDir, description) {
   const noteNumber = getNextNoteNumber(notesDir);
-  const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const date = localDateString();
   const monthDir = getMonthDir(notesDir);
   const filename = `${noteNumber} - ${date} - New Session.md`;
   const filepath = join5(monthDir, filename);
@@ -7714,7 +7718,7 @@ function appendCheckpoint(notePath, checkpoint) {
       const noteFilename = basename2(notePath);
       const numberMatch = noteFilename.match(/^(\d+)/);
       const noteNumber = numberMatch ? numberMatch[1] : "0000";
-      const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+      const date = localDateString();
       const content2 = `# Session ${noteNumber}: Recovered
 
 **Date:** ${date}
@@ -7828,9 +7832,15 @@ function renameSessionNote(notePath, meaningfulName) {
   const [, noteNumber, date] = match;
   const titleCaseName = meaningfulName.replace(/[\/\\:\0]/g, " ").split(/[\s_-]+/).map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ").trim();
   const paddedNumber = noteNumber.padStart(4, "0");
-  const newFilename = `${paddedNumber} - ${date} - ${titleCaseName}.md`;
-  const newPath = join5(dir, newFilename);
+  let newFilename = `${paddedNumber} - ${date} - ${titleCaseName}.md`;
+  let newPath = join5(dir, newFilename);
   if (newFilename === oldFilename) return notePath;
+  if (existsSync5(newPath)) {
+    let n = 2;
+    while (existsSync5(join5(dir, `${paiNumberedBase(paddedNumber, date, titleCaseName)} (${n}).md`))) n++;
+    newFilename = `${paiNumberedBase(paddedNumber, date, titleCaseName)} (${n}).md`;
+    newPath = join5(dir, newFilename);
+  }
   try {
     renameSync2(notePath, newPath);
     console.error(`Renamed note: ${oldFilename} \u2192 ${newFilename}`);
@@ -7840,6 +7850,9 @@ function renameSessionNote(notePath, meaningfulName) {
     return notePath;
   }
 }
+function paiNumberedBase(num, date, name) {
+  return `${num} - ${date} - ${name}`;
+}
 
 // src/hooks/ts/lib/project-utils/todo.ts
 import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync4 } from "fs";
@@ -8019,16 +8032,23 @@ function resolveToken() {
   }
   return process.env.FORGE_TOKEN || process.env.AIBROKER_FORGE_TOKEN || void 0;
 }
-var curlHttp = (method, url, token, body, timeoutMs) => {
-  const cfg = [
-    `url = "${url}"`,
-    `request = "${method}"`,
-    `header = "Authorization: token ${token}"`,
+function curlQuote(v) {
+  if (/[\r\n]/.test(v)) throw new ForgeError("refusing newline in curl config value");
+  return v.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function buildCurlConfig(method, url, token, timeoutMs) {
+  return [
+    `url = "${curlQuote(url)}"`,
+    `request = "${curlQuote(method)}"`,
+    `header = "Authorization: token ${curlQuote(token)}"`,
     `header = "Content-Type: application/json"`,
     `max-time = ${Math.max(0.5, timeoutMs / 1e3)}`,
     `silent`,
     `write-out = "\\n%{http_code}"`
   ].join("\n");
+}
+var curlHttp = (method, url, token, body, timeoutMs) => {
+  const cfg = buildCurlConfig(method, url, token, timeoutMs);
   const argv = body !== void 0 ? ["-K", "-", "--data-raw", body] : ["-K", "-"];
   const r = spawnSync("curl", argv, { input: cfg, encoding: "utf8", timeout: timeoutMs + 500, maxBuffer: 16 * 1024 * 1024 });
   if (r.error || r.status !== 0) throw new ForgeError(`curl failed (${r.error?.message ?? `exit ${r.status}`})`);
@@ -9374,7 +9394,7 @@ ${state}` : `Context compression triggered at ~${tokenDisplay} tokens with ${sta
             let noteContent = readFileSync14(newPath, "utf-8");
             noteContent = noteContent.replace(
               /^(# Session \d+:)\s*.*$/m,
-              `$1 ${title}`
+              (_m, h1) => `${h1} ${title}`
             );
             writeFileSync8(newPath, noteContent);
             console.error(`Updated note H1 to match rename`);

package/dist/hooks/initialize-session.mjs

@@ -7541,6 +7541,7 @@ async function sendNtfyNotification(message, retries = 2) {
     try {
       const response = await fetch(`https://ntfy.sh/${topic}`, {
         method: "POST",
+        signal: AbortSignal.timeout(5e3),
         body: message,
         headers: {
           "Title": "Claude Code",

package/dist/hooks/load-core-context.mjs

@@ -7575,7 +7575,7 @@ async function main() {
     const daName = process.env.DA || "PAI";
     const daColor = process.env.DA_COLOR || "blue";
     const engineerName = process.env.ENGINEER_NAME || "";
-    coreContent = coreContent.replace(/\{\{DA\}\}/g, daName).replace(/\{\{DA_COLOR\}\}/g, daColor).replace(/\{\{ENGINEER_NAME\}\}/g, engineerName);
+    coreContent = coreContent.replace(/\{\{DA\}\}/g, () => daName).replace(/\{\{DA_COLOR\}\}/g, () => daColor).replace(/\{\{ENGINEER_NAME\}\}/g, () => engineerName);
     console.error(`Read ${coreContent.length} characters from ${coreSkillPath} (Personalized for ${engineerName} & ${daName})`);
     const message = `<system-reminder>
 PAI CORE CONTEXT

package/dist/hooks/load-project-context.mjs

@@ -8964,7 +8964,7 @@ function statusPath(logDir, id) {
 }
 
 // src/workers/pending.ts
-import { existsSync as existsSync9, readFileSync as readFileSync9, statSync as statSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync9, readFileSync as readFileSync9, statSync as statSync4 } from "node:fs";
 
 // src/workers/status.ts
 import { execFileSync } from "node:child_process";
@@ -9756,6 +9756,7 @@ async function sendNtfyNotification(message, retries = 2) {
     try {
       const response = await fetch(`https://ntfy.sh/${topic}`, {
         method: "POST",
+        signal: AbortSignal.timeout(5e3),
         body: message,
         headers: {
           "Title": "Claude Code",
@@ -9780,8 +9781,11 @@ async function sendNtfyNotification(message, retries = 2) {
 }
 
 // src/hooks/ts/lib/project-utils/session-notes.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync13, writeFileSync as writeFileSync6, renameSync as renameSync5 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync13, writeFileSync as writeFileSync5, renameSync as renameSync5 } from "fs";
 import { join as join12, basename as basename5 } from "path";
+function localDateString(now = /* @__PURE__ */ new Date()) {
+  return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")}`;
+}
 function getMonthDir(notesDir) {
   const now = /* @__PURE__ */ new Date();
   const year = String(now.getFullYear());
@@ -9834,7 +9838,7 @@ function getCurrentNotePath(notesDir) {
 }
 function createSessionNote(notesDir, description) {
   const noteNumber = getNextNoteNumber(notesDir);
-  const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+  const date = localDateString();
   const monthDir = getMonthDir(notesDir);
   const filename = `${noteNumber} - ${date} - New Session.md`;
   const filepath = join12(monthDir, filename);
@@ -9859,7 +9863,7 @@ function createSessionNote(notesDir, description) {
 
 **Tags:** #Session
 `;
-  writeFileSync6(filepath, content);
+  writeFileSync5(filepath, content);
   console.error(`Created session note: ${filename}`);
   return filepath;
 }
@@ -9893,6 +9897,7 @@ function getRoutedNotesPath() {
   }
   return null;
 }
+var PAI_CLI_TIMEOUT_MS = 1e4;
 var PROJECT_SIGNALS = [
   ".git",
   "package.json",
@@ -10020,17 +10025,22 @@ async function main() {
   if (hasTodo) {
     console.error(`TODO.md: ${todoPath}`);
   } else {
-    const newTodoPath = join13(notesDir, "TODO.md");
-    const { writeFileSync: writeFileSync7 } = await import("fs");
-    writeFileSync7(newTodoPath, `# TODO
+    const newTodoPath = todoPath;
+    const { writeFileSync: writeFileSync6, mkdirSync: mkdirSync7 } = await import("fs");
+    mkdirSync7(dirname6(newTodoPath), { recursive: true });
+    writeFileSync6(newTodoPath, `# TODO
+
+## Current Session
 
-## Offen
+- [ ] (Tasks will be tracked here)
 
-- [ ] 
+## Backlog
+
+- [ ] (Future tasks)
 
 ---
 
-*Created: ${(/* @__PURE__ */ new Date()).toISOString()}*
+*Last updated: ${(/* @__PURE__ */ new Date()).toISOString()}*
 `);
     console.error(`Created TODO.md: ${newTodoPath}`);
   }
@@ -10071,29 +10081,34 @@ Using existing session note: ${basename6(activeNotePath)}`);
     } catch {
     }
   }
-  await sendNtfyNotification(`Session started in ${projectName}`);
+  await sendNtfyNotification("Session started");
   const paiBin = findPaiBinary();
   let paiProjectBlock = "";
+  let detectedRootPath;
   try {
     const { execFileSync: execFileSync3 } = await import("child_process");
     const raw = execFileSync3(paiBin, ["project", "detect", "--json", cwd], {
       encoding: "utf-8",
-      env: process.env
+      env: process.env,
+      timeout: PAI_CLI_TIMEOUT_MS
     }).trim();
     if (raw) {
       const detected = JSON.parse(raw);
+      detectedRootPath = detected.root_path;
       const tryAutoRegister = async () => {
         if (isGuardedPath(cwd) || !hasProjectSignals(cwd)) return false;
         try {
           execFileSync3(paiBin, ["project", "add", cwd], {
             encoding: "utf-8",
-            env: process.env
+            env: process.env,
+            timeout: PAI_CLI_TIMEOUT_MS
           });
           console.error(`PAI auto-registered project at: ${cwd}`);
           try {
             const raw2 = execFileSync3(paiBin, ["project", "detect", "--json", cwd], {
               encoding: "utf-8",
-              env: process.env
+              env: process.env,
+              timeout: PAI_CLI_TIMEOUT_MS
             }).trim();
             if (raw2) {
               const detected2 = JSON.parse(raw2);
@@ -10149,6 +10164,7 @@ WARNING: Project status is "${detected.status}". Run: pai project health --fix`
     }
   } catch (e) {
     console.error("pai project detect failed:", e);
+    detectedRootPath = cwd;
   }
   const reminder = `
 <system-reminder>
@@ -10177,7 +10193,7 @@ ${paiProjectBlock}` : ""}
   }
   try {
     const { execFileSync: run } = await import("child_process");
-    const pins = run(paiBin, ["project", "pins"], { encoding: "utf-8", cwd }).trim();
+    const pins = run(paiBin, ["project", "pins"], { encoding: "utf-8", cwd, timeout: PAI_CLI_TIMEOUT_MS }).trim();
     if (pins) console.log(pins);
   } catch {
   }
@@ -10233,20 +10249,7 @@ THE ABOVE INSTRUCTIONS ARE MANDATORY. Follow them exactly.
     console.error(`Injected CLAUDE.md content from: ${path}`);
   }
   try {
-    let wakeupRootPath;
-    try {
-      const { execFileSync: efs } = await import("child_process");
-      const raw2 = efs(paiBin, ["project", "detect", "--json", cwd], {
-        encoding: "utf-8",
-        env: process.env
-      }).trim();
-      if (raw2) {
-        const det = JSON.parse(raw2);
-        if (det.root_path) wakeupRootPath = det.root_path;
-      }
-    } catch {
-      wakeupRootPath = cwd;
-    }
+    const wakeupRootPath = detectedRootPath;
     const wakeupBlock = buildWakeupContext(wakeupRootPath, void 0, { skipStory: handoverInjected });
     if (wakeupBlock) {
       const wakeupReminder = `

package/dist/hooks/security-validator.mjs

@@ -9078,7 +9078,7 @@ function currentWorkerId(env = process.env, logDir) {
 }
 
 // src/hooks/ts/pre-tool-use/security-validator.ts
-import { appendFileSync, mkdirSync as mkdirSync5, existsSync as existsSync11 } from "fs";
+import { appendFileSync, mkdirSync as mkdirSync5, existsSync as existsSync11, chmodSync as chmodSync4 } from "fs";
 import { dirname as dirname7, resolve as resolve5 } from "path";
 
 // src/hooks/ts/lib/pai-paths.ts
@@ -9208,6 +9208,23 @@ function isSharedCheckout(p) {
   return statuses.some((s) => s.id !== p.selfId && isLive(s) && real(s.cwd) === top);
 }
 
+// src/workers/ps-table.ts
+var PS_MAX_BUFFER = 64 * 1024 * 1024;
+
+// src/hooks/ts/lib/loop-guard.ts
+var LOOP_MAX_REPEATS = 4;
+var LOOP_READ_STREAK = Number(process.env.PAI_LOOP_READ_STREAK) > 0 ? Number(process.env.PAI_LOOP_READ_STREAK) : 15;
+var SELF = "If your part is done, commit and write your R report. If you are stuck, report the blocker in R x= (or use pai worker help if available).";
+var LOOP_DENY_REASON = `loop guard: you ran this command ${LOOP_MAX_REPEATS} times with the same result and nothing changed. Stop repeating it. ${SELF}`;
+var WAIT_CAP_MS = 45 * 6e4;
+var FP_FULL_READ_BYTES = 256 * 1024;
+var FP_TOTAL_BYTES = 4 * 1024 * 1024;
+var SECRET_LINE = /pass(?:word|wd)|secret|token|api[_-]?key|credential|authorization|bearer|private key|^\s*(?:export\s+)?[A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASS\w*|CRED\w*|AUTH\w*)\s*=|\b(?:sk|ghp|gho|xox[bap])[-_][A-Za-z0-9_-]{16,}|\b[A-Za-z0-9+]{40,}={0,2}(?![\w/])|\b[a-z][a-z0-9+.-]*:\/\/[^\s\/:@]+:[^\s\/@]+@|\b(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}\b|\bgh[pousr]_[A-Za-z0-9]{20,}/i;
+var MASKED_LINE = "[line masked: looks like a secret]";
+function maskSecrets(text) {
+  return text.split("\n").map((l) => SECRET_LINE.test(l) ? MASKED_LINE : l).join("\n");
+}
+
 // src/hooks/ts/lib/worker-git-guard.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync10 } from "node:fs";
@@ -9262,7 +9279,7 @@ function isInsideWorktree(cwd, root) {
 }
 var GIT_WRITE = /\bgit\b[^&;|\n]*?\s(?:commit|add|am|cherry-pick|apply|push|tag|rm|mv)(?![\w-])/;
 var UNKNOWN_DIR = "/\0unresolved";
-function splitSegments(command) {
+function splitSegments2(command) {
   const out = [];
   let cur = "";
   let quote = "";
@@ -9295,7 +9312,7 @@ function worktreeEscape(command, cwd, worktreesRoot) {
   const allowed = (dir) => isInsideWorktree(dir, cwd) || isInsideWorktree(dir, worktreesRoot) || /^\/(tmp|private\/tmp|var\/folders|private\/var\/folders)(\/|$)/.test(dir);
   let here = cwd;
   const env = {};
-  for (const segment of splitSegments(command)) {
+  for (const segment of splitSegments2(command)) {
     const tokens = tokenize(segment);
     const segEnv = {};
     let i = 0;
@@ -9424,6 +9441,8 @@ var DANGEROUS_FILE_OPS_PATTERNS = [
 var DANGEROUS_GIT_PATTERNS = [
   /\bgit\b.*\spush\b.*(\s-f\b|\s--force(\s|$))/i,
   // git push -f / --force; --force-with-lease and --follow-tags pass
+  /\bgit\b.*\spush\b.*\s\+\S/i,
+  // a plus-prefixed refspec forces the update without -f
   /\bgit\s+reset\s+--hard/i
   // git reset --hard
   // Add your own git safety patterns here
@@ -9457,17 +9476,27 @@ function deny(reason) {
 `);
   process.exit(2);
 }
+function dropQuoted(segment) {
+  return segment.replace(/"(?:\\.|[^"\\])*"|'[^']*'/g, '""');
+}
+function gitPatternHit(pattern, segment) {
+  const bare = dropQuoted(segment);
+  if (pattern.test(bare)) return true;
+  return /\bgit\b.*\spush\b/.test(bare) && pattern.test(segment.replace(/["']/g, ""));
+}
 function detectAttack(content) {
+  const unquoted = content.replace(/["']/g, "");
   for (const { category, patterns } of ALL_BLOCK_PATTERNS) {
     for (const pattern of patterns) {
-      if (pattern.test(content)) {
+      if (pattern.test(content) || pattern.test(unquoted)) {
         return { blocked: true, category, pattern: pattern.source };
       }
     }
   }
+  const segments = splitSegments2(content);
   for (const { category, patterns } of CONFIRM_PATTERNS) {
     for (const pattern of patterns) {
-      if (pattern.test(content)) {
+      if (segments.some((seg) => gitPatternHit(pattern, seg))) {
         return { blocked: false, requiresConfirmation: true, category, pattern: pattern.source };
       }
     }
@@ -9476,13 +9505,15 @@ function detectAttack(content) {
 }
 function logSecurityEvent(event) {
   const logPath = securityEventsPath();
+  if (typeof event.command === "string") event = { ...event, command: maskSecrets(event.command) };
   const entry = JSON.stringify({ timestamp: (/* @__PURE__ */ new Date()).toISOString(), ...event }) + "\n";
   try {
     const dir = dirname7(logPath);
     if (!existsSync11(dir)) {
       mkdirSync5(dir, { recursive: true });
     }
-    appendFileSync(logPath, entry);
+    appendFileSync(logPath, entry, { mode: 384 });
+    chmodSync4(logPath, 384);
   } catch {
   }
 }
@@ -9490,9 +9521,10 @@ async function main() {
   let input;
   try {
     const chunks = [];
-    const timeoutPromise = new Promise(
-      (_, reject) => setTimeout(() => reject(new Error("timeout")), 100)
-    );
+    let timer;
+    const timeoutPromise = new Promise((_, reject) => {
+      timer = setTimeout(() => reject(new Error("timeout")), 2e3);
+    });
     const readPromise = (async () => {
       for await (const chunk of process.stdin) {
         chunks.push(chunk);
@@ -9504,8 +9536,9 @@ async function main() {
       const result2 = await Promise.race([readPromise, timeoutPromise]);
       text = Buffer.concat(result2).toString("utf-8");
     } catch {
-      console.log(JSON.stringify({ permissionDecision: "allow" }));
-      return;
+      deny("The hook input could not be read in time, so the command cannot be checked. Retry the command.");
+    } finally {
+      clearTimeout(timer);
     }
     if (!text.trim()) {
       console.log(JSON.stringify({ permissionDecision: "allow" }));
@@ -9513,8 +9546,7 @@ async function main() {
     }
     input = JSON.parse(text);
   } catch {
-    console.log(JSON.stringify({ permissionDecision: "allow" }));
-    return;
+    deny("The hook input could not be parsed, so the command cannot be checked. Retry the command.");
   }
   if (input.tool_name !== "Bash") {
     console.log(JSON.stringify({ permissionDecision: "allow" }));

package/dist/hooks/stop-hook.mjs

@@ -7382,8 +7382,8 @@ function setTabTitle(title) {
 }
 
 // src/hooks/ts/stop/stop-hook.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, mkdirSync as mkdirSync7, existsSync as existsSync11, unlinkSync as unlinkSync2 } from "fs";
-import { join as join12, basename as basename6, dirname as dirname4 } from "path";
+import { readFileSync as readFileSync10, existsSync as existsSync11, unlinkSync as unlinkSync2 } from "fs";
+import { join as join12, basename as basename6, dirname as dirname5 } from "path";
 import { connect } from "net";
 import { randomUUID } from "crypto";
 
@@ -7636,6 +7636,7 @@ async function sendNtfyNotification(message, retries = 2) {
     try {
       const response = await fetch(`https://ntfy.sh/${topic}`, {
         method: "POST",
+        signal: AbortSignal.timeout(5e3),
         body: message,
         headers: {
           "Title": "Claude Code",
@@ -7792,9 +7793,15 @@ function renameSessionNote(notePath, meaningfulName) {
   const [, noteNumber, date] = match;
   const titleCaseName = meaningfulName.replace(/[\/\\:\0]/g, " ").split(/[\s_-]+/).map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ").trim();
   const paddedNumber = noteNumber.padStart(4, "0");
-  const newFilename = `${paddedNumber} - ${date} - ${titleCaseName}.md`;
-  const newPath = join5(dir, newFilename);
+  let newFilename = `${paddedNumber} - ${date} - ${titleCaseName}.md`;
+  let newPath = join5(dir, newFilename);
   if (newFilename === oldFilename) return notePath;
+  if (existsSync5(newPath)) {
+    let n = 2;
+    while (existsSync5(join5(dir, `${paiNumberedBase(paddedNumber, date, titleCaseName)} (${n}).md`))) n++;
+    newFilename = `${paiNumberedBase(paddedNumber, date, titleCaseName)} (${n}).md`;
+    newPath = join5(dir, newFilename);
+  }
   try {
     renameSync2(notePath, newPath);
     console.error(`Renamed note: ${oldFilename} \u2192 ${newFilename}`);
@@ -7804,6 +7811,9 @@ function renameSessionNote(notePath, meaningfulName) {
     return notePath;
   }
 }
+function paiNumberedBase(num, date, name) {
+  return `${num} - ${date} - ${name}`;
+}
 function finalizeSessionNote(notePath, summary) {
   if (!existsSync5(notePath)) {
     console.error(`Note file not found: ${notePath}`);
@@ -7819,7 +7829,7 @@ function finalizeSessionNote(notePath, summary) {
     const completionTime = (/* @__PURE__ */ new Date()).toISOString();
     content = content.replace(
       "---\n\n## Work Done",
-      `**Completed:** ${completionTime}
+      () => `**Completed:** ${completionTime}
 
 ---
 
@@ -7830,7 +7840,7 @@ function finalizeSessionNote(notePath, summary) {
   if (nextStepsMatch) {
     content = content.replace(
       nextStepsMatch[0],
-      `## Next Steps
+      () => `## Next Steps
 
 ${summary || "Session completed."}`
     );
@@ -8022,16 +8032,23 @@ function resolveToken() {
   }
   return process.env.FORGE_TOKEN || process.env.AIBROKER_FORGE_TOKEN || void 0;
 }
-var curlHttp = (method, url, token, body, timeoutMs) => {
-  const cfg = [
-    `url = "${url}"`,
-    `request = "${method}"`,
-    `header = "Authorization: token ${token}"`,
+function curlQuote(v) {
+  if (/[\r\n]/.test(v)) throw new ForgeError("refusing newline in curl config value");
+  return v.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function buildCurlConfig(method, url, token, timeoutMs) {
+  return [
+    `url = "${curlQuote(url)}"`,
+    `request = "${curlQuote(method)}"`,
+    `header = "Authorization: token ${curlQuote(token)}"`,
     `header = "Content-Type: application/json"`,
     `max-time = ${Math.max(0.5, timeoutMs / 1e3)}`,
     `silent`,
     `write-out = "\\n%{http_code}"`
   ].join("\n");
+}
+var curlHttp = (method, url, token, body, timeoutMs) => {
+  const cfg = buildCurlConfig(method, url, token, timeoutMs);
   const argv = body !== void 0 ? ["-K", "-", "--data-raw", body] : ["-K", "-"];
   const r = spawnSync("curl", argv, { input: cfg, encoding: "utf8", timeout: timeoutMs + 500, maxBuffer: 16 * 1024 * 1024 });
   if (r.error || r.status !== 0) throw new ForgeError(`curl failed (${r.error?.message ?? `exit ${r.status}`})`);
@@ -8563,6 +8580,22 @@ function sessionStateDir() {
 }
 var SESSION_STOP_LOCK_ABANDONED_AFTER_MS = 60 * 60 * 1e3;
 
+// src/config/atomic-file.ts
+import { mkdirSync as mkdirSync7, renameSync as renameSync6, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { randomBytes } from "node:crypto";
+import { dirname as dirname4 } from "node:path";
+function writeFileAtomic(path, text) {
+  mkdirSync7(dirname4(path), { recursive: true });
+  const tmp = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+  try {
+    writeFileSync5(tmp, text, "utf8");
+    renameSync6(tmp, path);
+  } catch (e) {
+    rmSync(tmp, { force: true });
+    throw e;
+  }
+}
+
 // src/hooks/ts/stop/stop-hook.ts
 var DAEMON_SOCKET = process.env.PAI_SOCKET ?? "/tmp/pai.sock";
 var DAEMON_TIMEOUT_MS = 800;
@@ -8574,8 +8607,10 @@ var AUTO_SAVE_INTERVAL = (() => {
   }
   return 15;
 })();
+var SAFE_SESSION_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
 function readSessionState(sessionId) {
   try {
+    if (!SAFE_SESSION_ID.test(sessionId)) return { humanMessageCount: 0 };
     const stateFile = join12(sessionStateDir(), `${sessionId}.json`);
     if (!existsSync11(stateFile)) return { humanMessageCount: 0 };
     const raw = readFileSync10(stateFile, "utf-8");
@@ -8589,16 +8624,19 @@ function readSessionState(sessionId) {
 }
 function writeSessionState(sessionId, state) {
   try {
-    const dir = paiHomePath("session-state");
-    mkdirSync7(dir, { recursive: true });
-    const stateFile = join12(dir, `${sessionId}.json`);
-    writeFileSync5(stateFile, JSON.stringify(state, null, 2), "utf-8");
+    if (!SAFE_SESSION_ID.test(sessionId)) {
+      console.error(`STOP-HOOK: Refusing session state for unsafe session id`);
+      return;
+    }
+    const stateFile = join12(paiHomePath("session-state"), `${sessionId}.json`);
+    writeFileAtomic(stateFile, JSON.stringify(state, null, 2));
   } catch (e) {
     console.error(`STOP-HOOK: Could not write session state: ${e}`);
   }
 }
 function deleteSessionState(sessionId) {
   try {
+    if (!SAFE_SESSION_ID.test(sessionId)) return;
     const stateFile = join12(sessionStateDir(), `${sessionId}.json`);
     if (existsSync11(stateFile)) {
       unlinkSync2(stateFile);
@@ -9057,7 +9095,7 @@ async function executeDirectly(lines, transcriptPath, cwd, message, lastUserQuer
     console.error(`Could not finalize session note: ${noteError}`);
   }
   try {
-    const transcriptDir = dirname4(transcriptPath);
+    const transcriptDir = dirname5(transcriptPath);
     const archivedCount = archiveSessionFilesToSessionsDir(transcriptDir);
     if (archivedCount > 0) {
       console.error(`Archived ${archivedCount} session file(s) to sessions/`);