@vess-id/vess 0.2.0-alpha.1

package/dist/cli/env.js

@@ -0,0 +1,182 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runEnvImport = runEnvImport;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const readline = __importStar(require("node:readline/promises"));
+const fs_utils_1 = require("../env/fs-utils");
+const env_reference_1 = require("../env/env-reference");
+const env_parser_1 = require("../env/env-parser");
+const key_manager_1 = require("../identity/key-manager");
+const cli_db_1 = require("./cli-db");
+const cli_utils_1 = require("./cli-utils");
+const env_classifier_1 = require("../env/env-classifier");
+async function runEnvImport(options) {
+    const { envFile, profile, skipKeychain, dryRun } = options;
+    if (!fs.existsSync(envFile)) {
+        throw new Error(`File not found: ${envFile}`);
+    }
+    const content = fs.readFileSync(envFile, 'utf-8');
+    // Guard: prevent double-import
+    for (const parsed of (0, env_parser_1.parseEnvLines)(content)) {
+        if (!parsed.isEmpty && !parsed.isComment && parsed.value.startsWith('vess://env/')) {
+            throw new Error(`${envFile} already contains vess:// references. ` +
+                `Use the .backup file to re-import from original values.`);
+        }
+    }
+    const outputLines = [];
+    let secretCount = 0;
+    let plainCount = 0;
+    const keyManager = skipKeychain ? null : new key_manager_1.KeyManager();
+    let profileStore = null;
+    let db = null;
+    if (!skipKeychain) {
+        const ctx = (0, cli_db_1.openProfileStore)('env import');
+        if (!ctx)
+            return;
+        db = ctx.db;
+        profileStore = ctx.profileStore;
+    }
+    try {
+        // Derive ClassifyOptions from EnvImportOptions
+        const effectiveMode = options.interactive ? 'interactive' : (options.mode ?? 'default');
+        let rl = null;
+        let promptFn;
+        if (effectiveMode === 'interactive') {
+            rl = readline.createInterface({
+                input: process.stdin,
+                output: process.stderr,
+            });
+            promptFn = async (key, _value) => {
+                const answer = await rl.question(`Treat '${key}' as secret? (Y/n): `);
+                return answer.trim().toLowerCase() !== 'n';
+            };
+        }
+        const classifyOptions = {
+            mode: effectiveMode,
+            secretKeys: options.secretKeys,
+            plaintextKeys: options.plaintextKeys,
+            promptFn,
+        };
+        (0, env_classifier_1.validateClassifyOptions)(classifyOptions);
+        // Collect all env keys for unmatched-key warnings
+        const allEnvKeys = new Set();
+        for (const parsed of (0, env_parser_1.parseEnvLines)(content)) {
+            if (!parsed.isEmpty && !parsed.isComment) {
+                allEnvKeys.add(parsed.key.toUpperCase());
+            }
+        }
+        // Warn about --keys entries that don't match any env key
+        if (effectiveMode === 'keys' && options.secretKeys) {
+            for (const sk of options.secretKeys) {
+                if (!allEnvKeys.has(sk.toUpperCase())) {
+                    (0, cli_utils_1.log)(`[vess] Warning: secret key '${sk}' was not found in the env file`);
+                }
+            }
+        }
+        try {
+            for (const parsed of (0, env_parser_1.parseEnvLines)(content)) {
+                if (parsed.isEmpty || parsed.isComment) {
+                    outputLines.push(parsed.originalLine);
+                    continue;
+                }
+                const result = await (0, env_classifier_1.classifyEnvEntry)(parsed.key, parsed.value, classifyOptions);
+                if (result.isSecret) {
+                    if (!dryRun && keyManager) {
+                        keyManager.storeEnvSecret(profile, parsed.key, parsed.value);
+                        try {
+                            profileStore?.addKey(profile, parsed.key);
+                        }
+                        catch (err) {
+                            keyManager.deleteEnvSecret(profile, parsed.key);
+                            throw new Error(`Failed to record metadata for ${parsed.key}: ${err instanceof Error ? err.message : String(err)}`);
+                        }
+                    }
+                    outputLines.push(`${parsed.key}=${(0, env_reference_1.formatEnvReference)(profile, parsed.key)}`);
+                    secretCount++;
+                }
+                else {
+                    outputLines.push(parsed.originalLine);
+                    plainCount++;
+                }
+            }
+        }
+        finally {
+            if (rl) {
+                rl.close();
+            }
+        }
+        if (dryRun) {
+            (0, cli_utils_1.log)(`[vess] Dry run: ${secretCount} secrets, ${plainCount} plaintext`);
+            for (const line of outputLines) {
+                (0, cli_utils_1.log)(line);
+            }
+            return;
+        }
+        // Backup original .env before overwriting
+        const backupPath = envFile + '.backup';
+        if (fs.existsSync(backupPath)) {
+            (0, cli_utils_1.log)(`[vess] Warning: overwriting existing ${backupPath}`);
+        }
+        fs.copyFileSync(envFile, backupPath);
+        fs.chmodSync(backupPath, 0o600);
+        // Preserve trailing newline if original had one
+        const trailingNewline = content.endsWith('\n');
+        let output = outputLines.join('\n');
+        if (trailingNewline && !output.endsWith('\n')) {
+            output += '\n';
+        }
+        (0, fs_utils_1.atomicWriteFile)(envFile, output);
+        (0, cli_utils_1.log)(`[vess] Imported ${secretCount} secrets to keychain profile "${profile}"`);
+        (0, cli_utils_1.log)(`[vess] ${plainCount} non-secret values left as plaintext`);
+        (0, cli_utils_1.log)(`[vess] Backup saved: ${backupPath}`);
+        (0, cli_utils_1.log)(`[vess] Updated: ${envFile}`);
+        (0, cli_utils_1.log)(`[vess] To use: vess run --profile ${profile} -- <command>`);
+        // Post-integration: offer to configure package.json, CLAUDE.md, Hook
+        if (!dryRun) {
+            const { runPostIntegration } = await Promise.resolve().then(() => __importStar(require('./env-post-integration')));
+            const envFileDir = path.dirname(path.resolve(envFile));
+            await runPostIntegration({
+                envFileDir,
+                skipIntegration: options.skipIntegration,
+            });
+        }
+    }
+    finally {
+        db?.close();
+    }
+}
+//# sourceMappingURL=env.js.map

package/dist/cli/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/cli/env.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,oCA2JC;AAnLD,uCAAwB;AACxB,2CAA4B;AAC5B,iEAAkD;AAClD,8CAAiD;AACjD,wDAAyD;AACzD,kDAAiD;AACjD,yDAAoD;AAEpD,qCAA2C;AAC3C,2CAAiC;AACjC,0DAA8G;AAcvG,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAEjD,+BAA+B;IAC/B,KAAK,MAAM,MAAM,IAAI,IAAA,0BAAa,EAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,wCAAwC;gBAClD,yDAAyD,CAC1D,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,UAAU,GAAG,CAAC,CAAA;IAElB,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,wBAAU,EAAE,CAAA;IAEzD,IAAI,YAAY,GAA2B,IAAI,CAAA;IAC/C,IAAI,EAAE,GAA6C,IAAI,CAAA;IACvD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAA,yBAAgB,EAAC,YAAY,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,EAAE,GAAG,GAAG,CAAC,EAAE,CAAA;QACX,YAAY,GAAG,GAAG,CAAC,YAAY,CAAA;IACjC,CAAC;IAED,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,aAAa,GAAe,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,CAAA;QAEnG,IAAI,EAAE,GAA8B,IAAI,CAAA;QACxC,IAAI,QAAwE,CAAA;QAE5E,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;YACpC,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;YACF,QAAQ,GAAG,KAAK,EAAE,GAAW,EAAE,MAAc,EAAoB,EAAE;gBACjE,MAAM,MAAM,GAAG,MAAM,EAAG,CAAC,QAAQ,CAAC,UAAU,GAAG,sBAAsB,CAAC,CAAA;gBACtE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAA;YAC5C,CAAC,CAAA;QACH,CAAC;QAED,MAAM,eAAe,GAAoB;YACvC,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ;SACT,CAAA;QAED,IAAA,wCAAuB,EAAC,eAAe,CAAC,CAAA;QAExC,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;QACpC,KAAK,MAAM,MAAM,IAAI,IAAA,0BAAa,EAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACzC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,aAAa,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACnD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACtC,IAAA,eAAG,EAAC,+BAA+B,EAAE,iCAAiC,CAAC,CAAA;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,IAAA,0BAAa,EAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACvC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;oBACrC,SAAQ;gBACV,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAgB,EAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;gBAEhF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;wBAC1B,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;wBAC5D,IAAI,CAAC;4BACH,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;wBAC3C,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,UAAU,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;4BAC/C,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnG,CAAA;wBACH,CAAC;oBACH,CAAC;oBACD,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,IAAA,kCAAkB,EAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;oBAC5E,WAAW,EAAE,CAAA;gBACf,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;oBACrC,UAAU,EAAE,CAAA;gBACd,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,EAAE,CAAC;gBACP,EAAE,CAAC,KAAK,EAAE,CAAA;YACZ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,IAAA,eAAG,EAAC,mBAAmB,WAAW,aAAa,UAAU,YAAY,CAAC,CAAA;YACtE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAA,eAAG,EAAC,IAAI,CAAC,CAAA;YACX,CAAC;YACD,OAAM;QACR,CAAC;QAED,0CAA0C;QAC1C,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,CAAA;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,IAAA,eAAG,EAAC,wCAAwC,UAAU,EAAE,CAAC,CAAA;QAC3D,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QACpC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAE/B,gDAAgD;QAChD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,IAAI,CAAA;QAChB,CAAC;QAED,IAAA,0BAAe,EAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAEhC,IAAA,eAAG,EAAC,mBAAmB,WAAW,iCAAiC,OAAO,GAAG,CAAC,CAAA;QAC9E,IAAA,eAAG,EAAC,UAAU,UAAU,sCAAsC,CAAC,CAAA;QAC/D,IAAA,eAAG,EAAC,wBAAwB,UAAU,EAAE,CAAC,CAAA;QACzC,IAAA,eAAG,EAAC,mBAAmB,OAAO,EAAE,CAAC,CAAA;QACjC,IAAA,eAAG,EAAC,qCAAqC,OAAO,eAAe,CAAC,CAAA;QAEhE,qEAAqE;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAA;YACrE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;YACtD,MAAM,kBAAkB,CAAC;gBACvB,UAAU;gBACV,eAAe,EAAE,OAAO,CAAC,eAAe;aACzC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,EAAE,KAAK,EAAE,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/cli/error-handlers.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Global error handlers for the daemon process.
+ *
+ * - unhandledRejection: log and swallow (keep daemon alive)
+ * - uncaughtException: log and trigger graceful shutdown
+ */
+export interface ErrorHandlerOptions {
+    onFatalError: () => void;
+}
+/** @internal — exposed only for tests */
+export declare function _resetForTesting(): void;
+export declare function installGlobalErrorHandlers(options: ErrorHandlerOptions): void;
+//# sourceMappingURL=error-handlers.d.ts.map

package/dist/cli/error-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handlers.d.ts","sourceRoot":"","sources":["../../src/cli/error-handlers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,IAAI,CAAA;CACzB;AAID,yCAAyC;AACzC,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAmB7E"}

package/dist/cli/error-handlers.js

@@ -0,0 +1,32 @@
+"use strict";
+/**
+ * Global error handlers for the daemon process.
+ *
+ * - unhandledRejection: log and swallow (keep daemon alive)
+ * - uncaughtException: log and trigger graceful shutdown
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._resetForTesting = _resetForTesting;
+exports.installGlobalErrorHandlers = installGlobalErrorHandlers;
+let installed = false;
+/** @internal — exposed only for tests */
+function _resetForTesting() {
+    installed = false;
+}
+function installGlobalErrorHandlers(options) {
+    if (installed)
+        return;
+    installed = true;
+    const { onFatalError } = options;
+    process.on('unhandledRejection', (reason, _promise) => {
+        const message = reason instanceof Error
+            ? `${reason.message}\n${reason.stack ?? ''}`
+            : String(reason);
+        console.error(`${new Date().toISOString()} [ERROR] Unhandled rejection: ${message}`);
+    });
+    process.on('uncaughtException', (error) => {
+        console.error(`${new Date().toISOString()} [ERROR] Uncaught exception: ${error.message}\n${error.stack ?? ''}`);
+        onFatalError();
+    });
+}
+//# sourceMappingURL=error-handlers.js.map

package/dist/cli/error-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handlers.js","sourceRoot":"","sources":["../../src/cli/error-handlers.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AASH,4CAEC;AAED,gEAmBC;AA1BD,IAAI,SAAS,GAAG,KAAK,CAAA;AAErB,yCAAyC;AACzC,SAAgB,gBAAgB;IAC9B,SAAS,GAAG,KAAK,CAAA;AACnB,CAAC;AAED,SAAgB,0BAA0B,CAAC,OAA4B;IACrE,IAAI,SAAS;QAAE,OAAM;IACrB,SAAS,GAAG,IAAI,CAAA;IAEhB,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IAEhC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,QAA0B,EAAE,EAAE;QAC/E,MAAM,OAAO,GAAG,MAAM,YAAY,KAAK;YACrC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE;YAC5C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAClB,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,iCAAiC,OAAO,EAAE,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAY,EAAE,EAAE;QAC/C,OAAO,CAAC,KAAK,CACX,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,gCAAgC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CACjG,CAAA;QACD,YAAY,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/cli/hook-check-env.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Check if the current directory's .env contains vess:// references.
+ * If so and the command is not a safe wrapper, output an additionalContext
+ * JSON to stdout for Claude Code's PreToolUse hook contract.
+ */
+export declare function runHookCheckEnv(command?: string): Promise<void>;
+/**
+ * CLI entry point: reads stdin for the tool input JSON from Claude Code,
+ * extracts the command, and runs the check.
+ */
+export declare function runHookCheckEnvFromStdin(): Promise<void>;
+//# sourceMappingURL=hook-check-env.d.ts.map

package/dist/cli/hook-check-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-check-env.d.ts","sourceRoot":"","sources":["../../src/cli/hook-check-env.ts"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCrE;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB9D"}

package/dist/cli/hook-check-env.js

@@ -0,0 +1,117 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runHookCheckEnv = runHookCheckEnv;
+exports.runHookCheckEnvFromStdin = runHookCheckEnvFromStdin;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/**
+ * Safe command prefixes that already handle env resolution.
+ * If a Bash command starts with any of these, skip the warning.
+ */
+const SAFE_PREFIXES = [
+    'vess run',
+    'npm run',
+    'npm start',
+    'npx ',
+    'yarn ',
+    'pnpm run',
+    'pnpm start',
+    'pnpm exec',
+    'make ',
+];
+/**
+ * Check if the current directory's .env contains vess:// references.
+ * If so and the command is not a safe wrapper, output an additionalContext
+ * JSON to stdout for Claude Code's PreToolUse hook contract.
+ */
+async function runHookCheckEnv(command) {
+    // If the command is a safe wrapper, skip entirely
+    if (command) {
+        const trimmed = command.trimStart();
+        for (const prefix of SAFE_PREFIXES) {
+            if (trimmed.startsWith(prefix)) {
+                return;
+            }
+        }
+    }
+    // Read .env from cwd
+    const envPath = path.join(process.cwd(), '.env');
+    let content;
+    try {
+        content = fs.readFileSync(envPath, 'utf-8');
+    }
+    catch {
+        return;
+    }
+    if (!content.includes('vess://env/')) {
+        return;
+    }
+    // Output additionalContext JSON to stdout
+    const output = {
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            permissionDecision: 'allow',
+            additionalContext: '[vess] This project\'s .env contains vess:// references. ' +
+                'Environment variables will NOT be resolved by direct commands. ' +
+                'Use project task runner scripts (e.g., npm run dev) or ' +
+                'vess run -- <command> instead.',
+        },
+    };
+    process.stdout.write(JSON.stringify(output));
+}
+/**
+ * CLI entry point: reads stdin for the tool input JSON from Claude Code,
+ * extracts the command, and runs the check.
+ */
+async function runHookCheckEnvFromStdin() {
+    let command;
+    // If stdin is a TTY (no piped input), skip command extraction
+    if (!process.stdin.isTTY) {
+        try {
+            const chunks = [];
+            for await (const chunk of process.stdin) {
+                chunks.push(chunk);
+            }
+            const input = JSON.parse(Buffer.concat(chunks).toString('utf-8'));
+            command = input?.tool_input?.command ?? input?.command;
+        }
+        catch {
+            // If stdin is empty or not JSON, proceed without command filtering
+        }
+    }
+    await runHookCheckEnv(command);
+}
+//# sourceMappingURL=hook-check-env.js.map

package/dist/cli/hook-check-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-check-env.js","sourceRoot":"","sources":["../../src/cli/hook-check-env.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,0CAqCC;AAMD,4DAkBC;AArFD,uCAAwB;AACxB,2CAA4B;AAE5B;;;GAGG;AACH,MAAM,aAAa,GAAG;IACpB,UAAU;IACV,SAAS;IACT,WAAW;IACX,MAAM;IACN,OAAO;IACP,UAAU;IACV,YAAY;IACZ,WAAW;IACX,OAAO;CACR,CAAA;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,OAAgB;IACpD,kDAAkD;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAA;QACnC,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,OAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;IAChD,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,OAAM;IACR,CAAC;IAED,0CAA0C;IAC1C,MAAM,MAAM,GAAG;QACb,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,OAAO;YAC3B,iBAAiB,EACf,2DAA2D;gBAC3D,iEAAiE;gBACjE,yDAAyD;gBACzD,gCAAgC;SACnC;KACF,CAAA;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,wBAAwB;IAC5C,IAAI,OAA2B,CAAA;IAE/B,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;YACjE,OAAO,GAAG,KAAK,EAAE,UAAU,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IAED,MAAM,eAAe,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}