@vincemakes/kiso-core 0.43.0 → 0.44.0

package/dist/kernel/hooks.d.ts

@@ -27,6 +27,13 @@ export interface ToolCallPayload {
     readonly callId: string;
     readonly name: string;
     readonly input: Readonly<Record<string, unknown>>;
+    /** 0.44.0 (#20): the invocation's arguments as the model streamed them —
+     *  the same lexical evidence the tool receives as `ctx.rawInput`, on
+     *  onPreTool and onPostTool alike, fresh or recovered; absent when no
+     *  delta was streamed. Evidence for the host, never a control input: the
+     *  approval chain never receives it, and validation, permission and
+     *  execution read the parsed input. */
+    readonly rawInput?: string;
 }
 export interface HookHost {
     /** Assemble: rewrite or veto the incoming user message. null = drop. */

package/dist/kernel/loop.js

@@ -357,7 +357,7 @@ export async function* loop(config) {
         launches.push((async () => {
             try {
                 decideChain = decideChain.then(async () => {
-                    const v = await decideCall(call, table, hooks, { signal: signal ?? NEVER_ABORT, ...(config.sessionId !== undefined ? { sessionId: config.sessionId } : {}) }, log, config.resolveApproval, config.approvalVerdict, signal, config.approvalPolicy, nextDecisionId, pushExec);
+                    const v = await decideCall(call, table, hooks, { signal: signal ?? NEVER_ABORT, ...(config.sessionId !== undefined ? { sessionId: config.sessionId } : {}) }, log, config.resolveApproval, config.approvalVerdict, signal, config.approvalPolicy, nextDecisionId, pushExec, rawInput);
                     askOrder.ahead = askGate;
                     if (v.action === "ask") {
                         askGate = new Promise((res) => {
@@ -1020,7 +1020,7 @@ function resultEvent(call, result, executionId) {
  * caller runs it (conservative ordering: the calls after an ask wait for
  * its resolution).
  */
-async function decideCall(call, registry, hooks, ctx, log, resolveApproval, resolveApprovalVerdict, signal, approvalPolicy, nextDecisionId, push) {
+async function decideCall(call, registry, hooks, ctx, log, resolveApproval, resolveApprovalVerdict, signal, approvalPolicy, nextDecisionId, push, rawInput) {
     const payload = {
         callId: call.callId,
         name: call.name,
@@ -1157,7 +1157,9 @@ async function decideCall(call, registry, hooks, ctx, log, resolveApproval, reso
     // resolved by the human pause above — the static hook never speaks for
     // it, and a durable decision already spoke for the call).
     if (durable === undefined && chainVerdict === undefined && hooks.onPreTool) {
-        const decision = await raceAbort(hooks.onPreTool(payload, ctx), signal);
+        // #20: the hook gets the lexical evidence; the chain above never did —
+        // it decides on the parsed call, the object it has always received.
+        const decision = await raceAbort(hooks.onPreTool(rawInput !== undefined ? { ...payload, rawInput } : payload, ctx), signal);
         if (signal?.aborted)
             throw ABORTED;
         if (decision.action === "defer") {
@@ -1269,7 +1271,7 @@ async function runLedgered(call, registry, hooks, ctx, signal, push) {
         };
     }
     if (hooks.onPostTool) {
-        result = await hooks.onPostTool({ callId: call.callId, name: call.name, input: call.input ?? {} }, result, ctx);
+        result = await hooks.onPostTool({ callId: call.callId, name: call.name, input: call.input ?? {}, ...(ctx.rawInput !== undefined ? { rawInput: ctx.rawInput } : {}) }, result, ctx);
     }
     // ruling #12 correction one: a non-idempotent failure's side effects may have
     // partially applied — an honest note rides the RESULT (and the failed

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-core",
-	"version": "0.43.0",
+	"version": "0.44.0",
 	"description": "kiso core \u2014 protocol, event log, loop, hooks, modes, permissions, compaction, delivery truth. The 2,000-line kernel at the bottom of the kiso framework.",
 	"type": "module",
 	"license": "MIT",
@@ -33,7 +33,7 @@
 		"openai"
 	],
 	"devDependencies": {
-		"@vincemakes/kiso-evals": "0.43.0",
+		"@vincemakes/kiso-evals": "0.44.0",
 		"@types/node": "^26.1.2",
 		"typescript": "^5.7.2",
 		"vitest": "^3.0.0"