@usepowerplant/cli 0.4.3 → 0.4.4

package/dist/hooks/powerplant-codex-transcript.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+// Discovery only. The collector owns scope, transcript reads and uploads.
+import { Buffer } from "node:buffer";
+import { createHash, randomUUID } from "node:crypto";
+import { mkdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+const MAX_INPUT_BYTES = 128 * 1024;
+let chunks = [];
+let bytes = 0;
+process.stdin.on("error", () => {});
+process.stdin.on("data", (chunk) => {
+  bytes += chunk.length;
+  if (bytes <= MAX_INPUT_BYTES) chunks.push(chunk);
+  else chunks = [];
+});
+process.stdin.on("end", () => {
+  const dir = path.join(os.homedir(), ".config", "powerplant");
+  try {
+    if (bytes <= MAX_INPUT_BYTES) {
+      const input = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+      if (
+        ["SessionStart", "SessionEnd", "Stop"].includes(input?.hook_event_name) &&
+        typeof input.session_id === "string" &&
+        /^[a-zA-Z0-9_-]{1,200}$/.test(input.session_id)
+      ) {
+        const record = {
+          sessionId: input.session_id,
+          transcriptPath:
+            typeof input.transcript_path === "string" &&
+            input.transcript_path.length <= 4096 &&
+            path.isAbsolute(input.transcript_path)
+              ? input.transcript_path
+              : null,
+        };
+        const records = path.join(dir, "codex-transcripts");
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        mkdirSync(records, { recursive: true, mode: 0o700 });
+        const file = path.join(
+          records,
+          `${createHash("sha256").update(record.sessionId).digest("hex")}.json`
+        );
+        const temporary = `${file}.${randomUUID()}.tmp`;
+        try {
+          // eslint-disable-next-line security/detect-non-literal-fs-filename
+          writeFileSync(temporary, JSON.stringify(record), { mode: 0o600, flag: "wx" });
+          // eslint-disable-next-line security/detect-non-literal-fs-filename
+          renameSync(temporary, file);
+        } finally {
+          rmSync(temporary, { force: true });
+        }
+      }
+    }
+  } catch {
+    // Invalid input or unavailable disk must not interrupt the agent.
+  }
+  try {
+    // Publish after the pointer; existing file scans also recover missed hooks.
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    mkdirSync(dir, { recursive: true });
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    writeFileSync(path.join(dir, "session-change"), `${Date.now()}\n`, { mode: 0o600 });
+  } catch {
+    // Never report collector failures as agent output.
+  }
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usepowerplant/cli",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "publishConfig": {
     "access": "public"
   },
@@ -28,10 +28,10 @@
   "devDependencies": {
     "@powerplant/collector": "workspace:*",
     "@powerplant/core": "workspace:*",
-    "@types/node": "^26.3.0",
+    "@types/node": "^26.5.0",
     "esbuild": "^0.28.2",
     "typescript": "^5.9.3",
     "vitest": "^4.1.11",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   }
 }

package/dist/hooks/powerplant-session-change.mjs

@@ -1,21 +0,0 @@
-#!/usr/bin/env node
-// Canonical standalone hook, bundled by packages/cli/build.mjs.
-// Wake the local collector without inspecting or saving the hook payload.
-// Existing readers still enforce capture scope and redact before uploading.
-import { mkdirSync, writeFileSync } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-// Drain provider input without retaining it or emitting an agent response.
-process.stdin.on("error", () => {});
-process.stdin.resume();
-try {
-  const dir = path.join(os.homedir(), ".config", "powerplant");
-  // eslint-disable-next-line security/detect-non-literal-fs-filename
-  mkdirSync(dir, { recursive: true });
-  // A fixed-size signal coalesces events. No paths or content come from stdin.
-  // eslint-disable-next-line security/detect-non-literal-fs-filename
-  writeFileSync(path.join(dir, "session-change"), `${Date.now()}\n`, { mode: 0o600 });
-} catch {
-  // A disk failure must not disrupt the agent. Recovery scans still run.
-}