@with-logic/elwood 0.1.0

package/dist/claude/validate/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../../src/claude/validate/input.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,cAAc,GACf,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAGL,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAO9D,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AACxE,MAAM,oBAAoB,GAAkE,IAAI,CAAC;AACjG,KAAK,oBAAoB,CAAC;AAK1B,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,MAAM,OAAO,GACX,CAAC,GAAG,IAAuB,EAAc,EAAE,CAC3C,CAAC,KAAK,EAAE,EAAE,CACR,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAE5B,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,WAAW,GAA4E;IAC3F,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC/B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,kBAAkB,EAAE,qBAAqB;IACzC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC;IACnC,mBAAmB,EAAE,sBAAsB;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/D,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACrD,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,uBAAuB,CAAC;IACxE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC;IAC/C,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC;IACjD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC;IACnD,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;IACzC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1F,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC;IACxC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,cAAc,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjF,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACvF,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAClD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC;CACxD,CAAC;AAQF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAW,CAAC;IACrD,IAAI,mBAAmB,CAAC,SAAS,CAAC;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,CACL,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC;QACrC,WAAW,CAAC,SAAqC,CAAC,CAAC,KAAK,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,kEAAkE;AAClE,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,CACL,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,SAAS;YACrC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC/D,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,KAAa;IAC1D,OAAO,CACL,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;QACtC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB,EAAE,KAAa;IAClE,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,eAAe,IAAI,KAAK,CAAC;IACjE,IAAI,SAAS,KAAK,oBAAoB;QAAE,OAAO,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;IAClF,IAAI,SAAS,KAAK,kBAAkB;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAyD;IAC5E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;IACrD,eAAe,EAAE,sBAAsB;IACvC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;IACrD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC7E,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;IACrD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;IACrD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;IACvD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;IACxD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;CAC9D,CAAC;AAEF,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAc;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,CACL,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;YAC5B,eAAe;YACf,kBAAkB;YAClB,iBAAiB;YACjB,SAAS;YACT,SAAS;SACV,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,CACL,UAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,UAAU,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAuB;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC5E,CAAC"}

package/dist/claude/validate/permission-update.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Runtime validation for Claude `updatedPermissions` (PermissionUpdate[]).
+ *
+ * Implements PRD §6.4: a `PermissionRequest` result may return
+ * `updatedPermissions`, which is serialized to Claude. Each entry must match one
+ * of the documented PermissionUpdate variants (see permissions.ts) rather than
+ * merely being an array, so a malformed entry cannot slip through.
+ */
+export declare function isPermissionUpdateArray(value: unknown): boolean;
+//# sourceMappingURL=permission-update.d.ts.map

package/dist/claude/validate/permission-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-update.d.ts","sourceRoot":"","sources":["../../../src/claude/validate/permission-update.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAuCH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE/D"}

package/dist/claude/validate/permission-update.js

@@ -0,0 +1,72 @@
+/**
+ * Runtime validation for Claude `updatedPermissions` (PermissionUpdate[]).
+ *
+ * Implements PRD §6.4: a `PermissionRequest` result may return
+ * `updatedPermissions`, which is serialized to Claude. Each entry must match one
+ * of the documented PermissionUpdate variants (see permissions.ts) rather than
+ * merely being an array, so a malformed entry cannot slip through.
+ */
+import { isOneOf, isRecord, optionalString } from "../../core/predicates.js";
+import { claudeHookPermissionModes } from "../hooks/names.js";
+const destinations = ["session", "localSettings", "projectSettings", "userSettings"];
+const ruleBehaviors = ["allow", "deny", "ask"];
+const updateTypes = [
+    "addRules",
+    "replaceRules",
+    "removeRules",
+    "setMode",
+    "addDirectories",
+    "removeDirectories",
+];
+// Bidirectional exactness guards (see Exact above). Each stops compiling the moment
+// its allowlist and the public union disagree.
+const _destinationsExact = destinations[0];
+const _behaviorsExact = ruleBehaviors[0];
+const _typesExact = updateTypes[0];
+void _destinationsExact;
+void _behaviorsExact;
+void _typesExact;
+export function isPermissionUpdateArray(value) {
+    return Array.isArray(value) && value.every(isPermissionUpdate);
+}
+function isPermissionUpdate(value) {
+    if (!isRecord(value))
+        return false;
+    if (!isOneOf(value["destination"], destinations))
+        return false;
+    const type = value["type"];
+    if (type === "addRules" || type === "replaceRules" || type === "removeRules") {
+        return isRulesUpdate(value);
+    }
+    if (type === "setMode")
+        return isSetModeUpdate(value);
+    if (type === "addDirectories" || type === "removeDirectories")
+        return isDirectoriesUpdate(value);
+    return false;
+}
+function isRulesUpdate(value) {
+    return (keysAllowed(value, ["type", "rules", "behavior", "destination"]) &&
+        isOneOf(value["behavior"], ruleBehaviors) &&
+        Array.isArray(value["rules"]) &&
+        value["rules"].every(isPermissionRule));
+}
+function isSetModeUpdate(value) {
+    return (keysAllowed(value, ["type", "mode", "destination"]) &&
+        isOneOf(value["mode"], claudeHookPermissionModes));
+}
+function isDirectoriesUpdate(value) {
+    return (keysAllowed(value, ["type", "directories", "destination"]) &&
+        Array.isArray(value["directories"]) &&
+        value["directories"].every((entry) => typeof entry === "string"));
+}
+function isPermissionRule(value) {
+    if (!isRecord(value))
+        return false;
+    return (keysAllowed(value, ["toolName", "ruleContent"]) &&
+        typeof value["toolName"] === "string" &&
+        optionalString(value["ruleContent"]));
+}
+function keysAllowed(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+//# sourceMappingURL=permission-update.js.map

package/dist/claude/validate/permission-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-update.js","sourceRoot":"","sources":["../../../src/claude/validate/permission-update.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAc9D,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,CAAU,CAAC;AAC9F,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AACxD,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,cAAc;IACd,aAAa;IACb,SAAS;IACT,gBAAgB;IAChB,mBAAmB;CACX,CAAC;AAEX,oFAAoF;AACpF,+CAA+C;AAC/C,MAAM,kBAAkB,GACtB,YAAY,CAAC,CAAC,CAAC,CAAC;AAClB,MAAM,eAAe,GACnB,aAAa,CAAC,CAAC,CAAC,CAAC;AACnB,MAAM,WAAW,GAAkE,WAAW,CAAC,CAAC,CAAC,CAAC;AAClG,KAAK,kBAAkB,CAAC;AACxB,KAAK,eAAe,CAAC;AACrB,KAAK,WAAW,CAAC;AAEjB,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC7E,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAwC;IAC7D,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAwC;IAC/D,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAwC;IACnE,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACnC,KAAK,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACrC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAwC,EACxC,OAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/claude/validate/result.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Runtime validation for Claude hook handler results.
+ * Implements PRD §6.4.
+ */
+import type { ClaudeHookEvent, ClaudeHookEventName, ClaudeHookResult } from "../hooks/index.ts";
+export declare function isClaudeHookResult(event: ClaudeHookEventName | ClaudeHookEvent, value: unknown): value is ClaudeHookResult;
+//# sourceMappingURL=result.d.ts.map

package/dist/claude/validate/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../src/claude/validate/result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAkBhG,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,mBAAmB,GAAG,eAAe,EAC5C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gBAAgB,CAuB3B"}

package/dist/claude/validate/result.js

@@ -0,0 +1,118 @@
+/**
+ * Runtime validation for Claude hook handler results.
+ * Implements PRD §6.4.
+ */
+import { isOneOf, isRecord, optionalBoolean, optionalString, optionalStringArray, } from "../../core/predicates.js";
+import { isPermissionUpdateArray } from "./permission-update.js";
+import { isClaudeToolInputUpdate } from "./tool-update.js";
+const contextResultEvents = new Set(["SessionStart", "Setup", "SubagentStart"]);
+const blockResultEvents = new Set([
+    "UserPromptSubmit",
+    "UserPromptExpansion",
+    "PostToolUse",
+    "PostToolUseFailure",
+    "PostToolBatch",
+    "Stop",
+    "SubagentStop",
+    "ConfigChange",
+    "PreCompact",
+]);
+const continueFalseEvents = new Set(["TeammateIdle", "TaskCreated", "TaskCompleted"]);
+export function isClaudeHookResult(event, value) {
+    const eventName = typeof event === "string" ? event : event.hook_event_name;
+    const toolName = typeof event === "string" || !("tool_name" in event) || typeof event.tool_name !== "string"
+        ? undefined
+        : event.tool_name;
+    if (value === undefined)
+        return true;
+    if (!isRecord(value))
+        return false;
+    if ("permissionDecision" in value)
+        return isPreToolUseResult(eventName, value, toolName);
+    if (eventName === "PreToolUse" && "additionalContext" in value) {
+        return isPreToolUseResult(eventName, value, toolName);
+    }
+    if ("behavior" in value)
+        return isPermissionRequestResult(eventName, value, toolName);
+    if ("retry" in value)
+        return eventName === "PermissionDenied" && value["retry"] === true;
+    if ("worktreePath" in value) {
+        return eventName === "WorktreeCreate" && typeof value["worktreePath"] === "string";
+    }
+    if ("action" in value)
+        return isElicitationResult(eventName, value);
+    if ("decision" in value)
+        return isBlockResult(eventName, value);
+    if ("continue" in value)
+        return isContinueFalseResult(eventName, value);
+    if (eventName === "PostToolUse")
+        return isPostToolUseResult(value);
+    if (!contextResultEvents.has(eventName))
+        return false;
+    return isContextResult(value);
+}
+function isPreToolUseResult(eventName, value, toolName) {
+    if (eventName !== "PreToolUse")
+        return false;
+    if (!("permissionDecision" in value)) {
+        return keysAre(value, ["additionalContext"]) && typeof value["additionalContext"] === "string";
+    }
+    return (keysAre(value, [
+        "permissionDecision",
+        "permissionDecisionReason",
+        "updatedInput",
+        "additionalContext",
+    ]) &&
+        isOneOf(value["permissionDecision"], ["allow", "deny", "ask", "defer"]) &&
+        optionalString(value["permissionDecisionReason"]) &&
+        optionalString(value["additionalContext"]) &&
+        isClaudeToolInputUpdate(toolName, value["updatedInput"]));
+}
+function isPermissionRequestResult(eventName, value, toolName) {
+    return (eventName === "PermissionRequest" &&
+        keysAre(value, ["behavior", "updatedInput", "updatedPermissions", "message", "interrupt"]) &&
+        isOneOf(value["behavior"], ["allow", "deny"]) &&
+        optionalString(value["message"]) &&
+        optionalBoolean(value["interrupt"]) &&
+        optionalPermissionUpdates(value["updatedPermissions"]) &&
+        isClaudeToolInputUpdate(toolName, value["updatedInput"]));
+}
+function optionalPermissionUpdates(value) {
+    return value === undefined || isPermissionUpdateArray(value);
+}
+function isElicitationResult(eventName, value) {
+    return ((eventName === "Elicitation" || eventName === "ElicitationResult") &&
+        keysAre(value, ["action", "content"]) &&
+        isOneOf(value["action"], ["accept", "decline", "cancel"]) &&
+        // `content` is an OPTIONAL non-array record; a string/array/null must fail
+        // rather than be serialized as if valid (matches ElicitationResult.content).
+        (value["content"] === undefined || isRecord(value["content"])));
+}
+function isBlockResult(eventName, value) {
+    return (blockResultEvents.has(eventName) &&
+        keysAre(value, ["decision", "reason", "additionalContext"]) &&
+        value["decision"] === "block" &&
+        typeof value["reason"] === "string" &&
+        optionalString(value["additionalContext"]));
+}
+function isContinueFalseResult(eventName, value) {
+    return (continueFalseEvents.has(eventName) &&
+        keysAre(value, ["continue", "stopReason"]) &&
+        value["continue"] === false &&
+        optionalString(value["stopReason"]));
+}
+function keysAre(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+// Every field is optional, so `{}` is a valid (no-op) result, as it is for context events.
+function isPostToolUseResult(value) {
+    return (keysAre(value, ["additionalContext", "updatedToolOutput", "updatedMCPToolOutput"]) &&
+        optionalString(value["additionalContext"]));
+}
+function isContextResult(value) {
+    return (keysAre(value, ["additionalContext", "initialUserMessage", "watchPaths"]) &&
+        optionalString(value["additionalContext"]) &&
+        optionalString(value["initialUserMessage"]) &&
+        optionalStringArray(value["watchPaths"]));
+}
+//# sourceMappingURL=result.js.map

package/dist/claude/validate/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../src/claude/validate/result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,OAAO,EACP,QAAQ,EACR,eAAe,EACf,cAAc,EACd,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AACxF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS;IACxC,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;IACb,oBAAoB;IACpB,eAAe;IACf,MAAM;IACN,cAAc;IACd,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,kBAAkB,CAChC,KAA4C,EAC5C,KAAc;IAEd,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC5E,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACzF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,oBAAoB,IAAI,KAAK;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzF,IAAI,SAAS,KAAK,YAAY,IAAI,mBAAmB,IAAI,KAAK,EAAE,CAAC;QAC/D,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,yBAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtF,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,SAAS,KAAK,kBAAkB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACzF,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,SAAS,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACpE,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,IAAI,UAAU,IAAI,KAAK;QAAE,OAAO,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CACzB,SAA8B,EAC9B,KAAwC,EACxC,QAAiB;IAEjB,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC,CAAC,oBAAoB,IAAI,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC;IACjG,CAAC;IACD,OAAO,CACL,OAAO,CAAC,KAAK,EAAE;QACb,oBAAoB;QACpB,0BAA0B;QAC1B,cAAc;QACd,mBAAmB;KACpB,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACvE,cAAc,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,SAA8B,EAC9B,KAAwC,EACxC,QAAiB;IAEjB,OAAO,CACL,SAAS,KAAK,mBAAmB;QACjC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,oBAAoB,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1F,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnC,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,KAAK,KAAK,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAA8B,EAC9B,KAAwC;IAExC,OAAO,CACL,CAAC,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,mBAAmB,CAAC;QAClE,OAAO,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzD,2EAA2E;QAC3E,6EAA6E;QAC7E,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,SAA8B,EAC9B,KAAwC;IAExC,OAAO,CACL,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC3D,KAAK,CAAC,UAAU,CAAC,KAAK,OAAO;QAC7B,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAA8B,EAC9B,KAAwC;IAExC,OAAO,CACL,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK;QAC3B,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAwC,EAAE,OAA0B;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,2FAA2F;AAC3F,SAAS,mBAAmB,CAAC,KAAwC;IACnE,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;QAClF,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAwC;IAC/D,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;QACzE,cAAc,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3C,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC"}

package/dist/claude/validate/shapes.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Field-shape validation tables for Claude hook payloads, built on the shared
+ * trust-boundary predicates in core/predicates.ts.
+ * Implements PRD §6.4: value TYPES, not merely key names, are validated.
+ */
+export { isRecord, optionalBoolean, optionalNumber, optionalString, optionalStringArray, } from "../../core/predicates.ts";
+export type FieldCheck = (value: unknown) => boolean;
+/**
+ * A validator table COUPLED to a public tool input `T`: exactly one field check per
+ * key of `T` (required, so adding a field to the public type forces a matching check
+ * and can't silently pass validation). Declare each table `satisfies FieldChecks<T>`.
+ */
+export type FieldChecks<T> = {
+    readonly [K in keyof Required<T>]-?: FieldCheck;
+};
+/**
+ * Validates a partial record: every present key must be one of `checks` and its
+ * value must pass that field's check. Absent keys pass (partial rewrites and
+ * optional fields), unknown keys fail.
+ */
+export declare function partial(value: Readonly<Record<string, unknown>>, checks: Readonly<Record<string, FieldCheck>>): boolean;
+//# sourceMappingURL=shapes.d.ts.map

package/dist/claude/validate/shapes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shapes.d.ts","sourceRoot":"","sources":["../../../src/claude/validate/shapes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;IAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU;CAAE,CAAC;AAEjF;;;;GAIG;AACH,wBAAgB,OAAO,CACrB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAC3C,OAAO,CAIT"}

package/dist/claude/validate/shapes.js

@@ -0,0 +1,15 @@
+/**
+ * Field-shape validation tables for Claude hook payloads, built on the shared
+ * trust-boundary predicates in core/predicates.ts.
+ * Implements PRD §6.4: value TYPES, not merely key names, are validated.
+ */
+export { isRecord, optionalBoolean, optionalNumber, optionalString, optionalStringArray, } from "../../core/predicates.js";
+/**
+ * Validates a partial record: every present key must be one of `checks` and its
+ * value must pass that field's check. Absent keys pass (partial rewrites and
+ * optional fields), unknown keys fail.
+ */
+export function partial(value, checks) {
+    return Object.keys(value).every((key) => Object.hasOwn(checks, key) && checks[key](value[key]));
+}
+//# sourceMappingURL=shapes.js.map

package/dist/claude/validate/shapes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shapes.js","sourceRoot":"","sources":["../../../src/claude/validate/shapes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAWlC;;;;GAIG;AACH,MAAM,UAAU,OAAO,CACrB,KAAwC,EACxC,MAA4C;IAE5C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAC7B,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAK,MAAM,CAAC,GAAG,CAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC"}

package/dist/claude/validate/tool-update.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Runtime validation for Claude tool input rewrite payloads.
+ *
+ * Implements PRD §6.4: a returned `updatedInput` MUST be validated against the
+ * actual tool input shape for known built-in tools before it is serialized to
+ * Claude. `updatedInput` is a partial rewrite, so every documented field is
+ * optional, but each present field must match the tool's documented value TYPE
+ * (not merely be a permitted key). Unknown/MCP tools accept any record.
+ *
+ * Each per-tool table is `satisfies FieldChecks<Input>`, so adding a field to the
+ * public tool input type forces a matching check here (a missing key fails to
+ * compile) — the validator can no longer silently drift from the shape it guards.
+ */
+export declare function isClaudeToolInputUpdate(toolName: string | undefined, value: unknown): boolean;
+//# sourceMappingURL=tool-update.d.ts.map

package/dist/claude/validate/tool-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-update.d.ts","sourceRoot":"","sources":["../../../src/claude/validate/tool-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA0BH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAM7F"}

package/dist/claude/validate/tool-update.js

@@ -0,0 +1,122 @@
+/**
+ * Runtime validation for Claude tool input rewrite payloads.
+ *
+ * Implements PRD §6.4: a returned `updatedInput` MUST be validated against the
+ * actual tool input shape for known built-in tools before it is serialized to
+ * Claude. `updatedInput` is a partial rewrite, so every documented field is
+ * optional, but each present field must match the tool's documented value TYPE
+ * (not merely be a permitted key). Unknown/MCP tools accept any record.
+ *
+ * Each per-tool table is `satisfies FieldChecks<Input>`, so adding a field to the
+ * public tool input type forces a matching check here (a missing key fails to
+ * compile) — the validator can no longer silently drift from the shape it guards.
+ */
+import { isRecord, optionalBoolean, optionalNumber, optionalString, optionalStringArray, partial, } from "./shapes.js";
+export function isClaudeToolInputUpdate(toolName, value) {
+    if (value === undefined)
+        return true;
+    if (!isRecord(value))
+        return false;
+    // An unknown/MCP tool (or absent name) has no table, so it accepts any record.
+    const checks = toolChecks[toolName ?? ""];
+    return checks === undefined ? true : partial(value, checks);
+}
+const agentChecks = {
+    prompt: optionalString,
+    description: optionalString,
+    subagent_type: optionalString,
+    model: optionalString,
+};
+const askUserQuestionChecks = {
+    questions: optionalQuestions,
+    answers: optionalAnswers,
+};
+// Shared by the Bash AND PowerShell tools (same documented BashInput shape).
+const shellChecks = {
+    command: optionalString,
+    description: optionalString,
+    timeout: optionalNumber,
+    run_in_background: optionalBoolean,
+};
+const editChecks = {
+    file_path: optionalString,
+    old_string: optionalString,
+    new_string: optionalString,
+    replace_all: optionalBoolean,
+};
+const exitPlanModeChecks = {
+    allowedPrompts: optionalStringArray,
+    plan: optionalString,
+    planFilePath: optionalString,
+};
+const globChecks = {
+    pattern: optionalString,
+    path: optionalString,
+};
+const grepChecks = {
+    pattern: optionalString,
+    path: optionalString,
+    glob: optionalString,
+    output_mode: optionalOutputMode,
+    "-i": optionalBoolean,
+    multiline: optionalBoolean,
+};
+const readChecks = {
+    file_path: optionalString,
+    offset: optionalNumber,
+    limit: optionalNumber,
+};
+const webFetchChecks = {
+    url: optionalString,
+    prompt: optionalString,
+};
+const webSearchChecks = {
+    query: optionalString,
+    allowed_domains: optionalStringArray,
+    blocked_domains: optionalStringArray,
+};
+const writeChecks = {
+    file_path: optionalString,
+    content: optionalString,
+};
+/** Maps each known built-in tool name to its field-check table; others accept any record. */
+const toolChecks = {
+    Agent: agentChecks,
+    AskUserQuestion: askUserQuestionChecks,
+    Bash: shellChecks,
+    PowerShell: shellChecks,
+    Edit: editChecks,
+    ExitPlanMode: exitPlanModeChecks,
+    Glob: globChecks,
+    Grep: grepChecks,
+    Read: readChecks,
+    WebFetch: webFetchChecks,
+    WebSearch: webSearchChecks,
+    Write: writeChecks,
+};
+function optionalOutputMode(value) {
+    return (value === undefined ||
+        value === "content" ||
+        value === "files_with_matches" ||
+        value === "count");
+}
+function optionalQuestions(value) {
+    return value === undefined || (Array.isArray(value) && value.every(isQuestion));
+}
+function isQuestion(value) {
+    if (!isRecord(value))
+        return false;
+    return (typeof value["question"] === "string" &&
+        typeof value["header"] === "string" &&
+        Array.isArray(value["options"]) &&
+        value["options"].every(isQuestionOption) &&
+        optionalBoolean(value["multiSelect"]));
+}
+function isQuestionOption(value) {
+    return (isRecord(value) && typeof value["label"] === "string" && optionalString(value["description"]));
+}
+function optionalAnswers(value) {
+    return (value === undefined ||
+        (isRecord(value) && Object.values(value).every((entry) => typeof entry === "string")));
+}
+//# sourceMappingURL=tool-update.js.map

package/dist/claude/validate/tool-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-update.js","sourceRoot":"","sources":["../../../src/claude/validate/tool-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,OAAO,EAGL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,OAAO,GACR,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,KAAc;IAClF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,+EAA+E;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,cAAc;IACtB,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,cAAc;IAC7B,KAAK,EAAE,cAAc;CACY,CAAC;AAEpC,MAAM,qBAAqB,GAAG;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,eAAe;CACmB,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,cAAc;IACvB,iBAAiB,EAAE,eAAe;CACF,CAAC;AAEnC,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,cAAc;IACzB,UAAU,EAAE,cAAc;IAC1B,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,eAAe;CACI,CAAC;AAEnC,MAAM,kBAAkB,GAAG;IACzB,cAAc,EAAE,mBAAmB;IACnC,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,cAAc;CACY,CAAC;AAE3C,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;CACY,CAAC;AAEnC,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,kBAAkB;IAC/B,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,eAAe;CACM,CAAC;AAEnC,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,cAAc;CACW,CAAC;AAEnC,MAAM,cAAc,GAAG;IACrB,GAAG,EAAE,cAAc;IACnB,MAAM,EAAE,cAAc;CACc,CAAC;AAEvC,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,cAAc;IACrB,eAAe,EAAE,mBAAmB;IACpC,eAAe,EAAE,mBAAmB;CACC,CAAC;AAExC,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,cAAc;IACzB,OAAO,EAAE,cAAc;CACU,CAAC;AAEpC,6FAA6F;AAC7F,MAAM,UAAU,GAAmE;IACjF,KAAK,EAAE,WAAW;IAClB,eAAe,EAAE,qBAAqB;IACtC,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,WAAW;IACvB,IAAI,EAAE,UAAU;IAChB,YAAY,EAAE,kBAAkB;IAChC,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe;IAC1B,KAAK,EAAE,WAAW;CACnB,CAAC;AAEF,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,oBAAoB;QAC9B,KAAK,KAAK,OAAO,CAClB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC"}

package/dist/claude/validate-input.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Runtime validation for Claude hook inputs crossing the bridge: common fields,
+ * then a per-event predicate table keyed by `hook_event_name`.
+ * Implements PRD §6.4.
+ */
+import type { ClaudeHookEvent } from "./hooks.ts";
+export declare function isClaudeHookInput(value: unknown): value is ClaudeHookEvent;
+//# sourceMappingURL=validate-input.d.ts.map

package/dist/claude/validate-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-input.d.ts","sourceRoot":"","sources":["../../src/claude/validate-input.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA0DlD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAW1E"}

package/dist/claude/validate-input.js

@@ -0,0 +1,137 @@
+/**
+ * Runtime validation for Claude hook inputs crossing the bridge: common fields,
+ * then a per-event predicate table keyed by `hook_event_name`.
+ * Implements PRD §6.4.
+ */
+import { isOneOf, isRecord, isString, optionalBoolean, optionalString, } from "../core/predicates.js";
+import { claudeHookPermissionModes, } from "./hook-names.js";
+import { isToolHookEventName } from "./tool-hook-events.js";
+const effortLevels = ["low", "medium", "high", "xhigh", "max"];
+const _effortLevelsCoupled = true;
+void _effortLevelsCoupled;
+const compactTrigger = (value) => isOneOf(value["trigger"], ["manual", "auto"]);
+const strings = (...keys) => (value) => hasStrings(value, keys);
+// One predicate per non-tool event; tool events share `hasToolEventFields`. The
+// table is keyed by the public union so a new event name cannot be forgotten.
+const eventChecks = {
+    SessionStart: strings("source"),
+    Setup: (value) => isOneOf(value["trigger"], ["init", "maintenance"]),
+    InstructionsLoaded: hasInstructionsLoaded,
+    UserPromptSubmit: strings("prompt"),
+    UserPromptExpansion: hasUserPromptExpansion,
+    PostToolBatch: (value) => hasPostToolBatch(value["tool_calls"]),
+    Notification: strings("message", "notification_type"),
+    SubagentStart: strings("agent_id", "agent_type"),
+    SubagentStop: strings("agent_id", "agent_type", "agent_transcript_path"),
+    TaskCreated: strings("task_id", "task_subject"),
+    TaskCompleted: strings("task_id", "task_subject"),
+    Stop: (value) => optionalBoolean(value["stop_hook_active"]),
+    StopFailure: strings("error"),
+    TeammateIdle: strings("teammate_name", "team_name"),
+    ConfigChange: strings("source"),
+    CwdChanged: strings("old_cwd", "new_cwd"),
+    FileChanged: (value) => hasStrings(value, ["file_path"]) && isOneOf(value["event"], ["change", "add", "unlink"]),
+    WorktreeCreate: strings("name"),
+    WorktreeRemove: strings("worktree_path"),
+    PreCompact: (value) => compactTrigger(value) && isNullableOptionalString(value["custom_instructions"]),
+    PostCompact: (value) => compactTrigger(value) && hasStrings(value, ["compact_summary"]),
+    SessionEnd: strings("reason"),
+    Elicitation: strings("mcp_server_name", "message"),
+    ElicitationResult: strings("mcp_server_name", "action"),
+};
+export function isClaudeHookInput(value) {
+    if (!(isRecord(value) && hasStrings(value, ["hook_event_name", "session_id", "cwd"]))) {
+        return false;
+    }
+    if (!hasValidCommonFields(value))
+        return false;
+    const eventName = value["hook_event_name"];
+    if (isToolHookEventName(eventName))
+        return hasToolEventFields(eventName, value);
+    return (Object.hasOwn(eventChecks, eventName) &&
+        eventChecks[eventName](value));
+}
+// C-HOOK-07 / C-HOOK-17: typed optional common fields present on every hook
+// event must match ClaudeCommonHookFields, not merely be ignored.
+function hasValidCommonFields(value) {
+    return (optionalString(value["transcript_path"]) &&
+        (value["permission_mode"] === undefined ||
+            isOneOf(value["permission_mode"], claudeHookPermissionModes)) &&
+        isValidEffort(value["effort"]));
+}
+function isValidEffort(value) {
+    if (value === undefined)
+        return true;
+    return isRecord(value) && isOneOf(value["level"], effortLevels);
+}
+function hasToolEventFields(eventName, value) {
+    return (typeof value["tool_name"] === "string" &&
+        isToolInput(value["tool_name"], value["tool_input"]) &&
+        hasToolSpecificEventFields(eventName, value));
+}
+function hasToolSpecificEventFields(eventName, value) {
+    if (eventName === "PostToolUse")
+        return "tool_response" in value;
+    if (eventName === "PostToolUseFailure")
+        return typeof value["error"] === "string";
+    if (eventName === "PermissionDenied")
+        return hasStrings(value, ["tool_use_id", "reason"]);
+    return true;
+}
+const toolInputChecks = {
+    Agent: (input) => typeof input["prompt"] === "string",
+    AskUserQuestion: isAskUserQuestionInput,
+    Bash: (input) => typeof input["command"] === "string",
+    Edit: (input) => hasStrings(input, ["file_path", "old_string", "new_string"]),
+    Glob: (input) => typeof input["pattern"] === "string",
+    Grep: (input) => typeof input["pattern"] === "string",
+    Read: (input) => typeof input["file_path"] === "string",
+    WebFetch: (input) => hasStrings(input, ["url", "prompt"]),
+    WebSearch: (input) => typeof input["query"] === "string",
+    Write: (input) => hasStrings(input, ["file_path", "content"]),
+};
+function isToolInput(toolName, input) {
+    if (!isRecord(input))
+        return false;
+    const check = Object.hasOwn(toolInputChecks, toolName) ? toolInputChecks[toolName] : undefined;
+    return check === undefined || check(input);
+}
+function hasInstructionsLoaded(value) {
+    return (hasStrings(value, ["file_path"]) &&
+        isOneOf(value["memory_type"], ["User", "Project", "Local", "Managed"]) &&
+        isOneOf(value["load_reason"], [
+            "session_start",
+            "nested_traversal",
+            "path_glob_match",
+            "include",
+            "compact",
+        ]));
+}
+function hasUserPromptExpansion(value) {
+    return (hasStrings(value, ["prompt", "command_name"]) &&
+        isOneOf(value["expansion_type"], ["slash_command", "mcp_prompt"]));
+}
+function hasPostToolBatch(value) {
+    return (Array.isArray(value) &&
+        value.every((item) => isRecord(item) && hasToolEventFields("PostToolUse", item)));
+}
+function isAskUserQuestionInput(input) {
+    return Array.isArray(input["questions"]) && input["questions"].every(isQuestion);
+}
+function isQuestion(value) {
+    return (isRecord(value) &&
+        hasStrings(value, ["question", "header"]) &&
+        Array.isArray(value["options"]) &&
+        value["options"].every(isQuestionOption) &&
+        optionalBoolean(value["multiSelect"]));
+}
+function isQuestionOption(value) {
+    return isRecord(value) && isString(value["label"]) && optionalString(value["description"]);
+}
+function hasStrings(value, keys) {
+    return keys.every((key) => isString(value[key]));
+}
+function isNullableOptionalString(value) {
+    return value === undefined || value === null || typeof value === "string";
+}
+//# sourceMappingURL=validate-input.js.map

package/dist/claude/validate-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-input.js","sourceRoot":"","sources":["../../src/claude/validate-input.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5D,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AACxE,MAAM,oBAAoB,GAAkE,IAAI,CAAC;AACjG,KAAK,oBAAoB,CAAC;AAK1B,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,MAAM,OAAO,GACX,CAAC,GAAG,IAAuB,EAAc,EAAE,CAC3C,CAAC,KAAK,EAAE,EAAE,CACR,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAE5B,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,WAAW,GAA4E;IAC3F,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC/B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,kBAAkB,EAAE,qBAAqB;IACzC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC;IACnC,mBAAmB,EAAE,sBAAsB;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/D,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACrD,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,uBAAuB,CAAC;IACxE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC;IAC/C,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC;IACjD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC;IACnD,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;IACzC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1F,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC,eAAe,CAAC;IACxC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,cAAc,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjF,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACvF,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAClD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC;CACxD,CAAC;AAQF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAW,CAAC;IACrD,IAAI,mBAAmB,CAAC,SAAS,CAAC;QAAE,OAAO,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,CACL,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC;QACrC,WAAW,CAAC,SAAqC,CAAC,CAAC,KAAK,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,kEAAkE;AAClE,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,CACL,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,SAAS;YACrC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC/D,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,KAAa;IAC1D,OAAO,CACL,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;QACtC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB,EAAE,KAAa;IAClE,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,eAAe,IAAI,KAAK,CAAC;IACjE,IAAI,SAAS,KAAK,oBAAoB;QAAE,OAAO,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;IAClF,IAAI,SAAS,KAAK,kBAAkB;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAyD;IAC5E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;IACrD,eAAe,EAAE,sBAAsB;IACvC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;IACrD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC7E,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;IACrD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;IACrD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;IACvD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;IACxD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;CAC9D,CAAC;AAEF,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAc;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,CACL,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;YAC5B,eAAe;YACf,kBAAkB;YAClB,iBAAiB;YACjB,SAAS;YACT,SAAS;SACV,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,CACL,UAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,UAAU,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAuB;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC5E,CAAC"}

package/dist/claude/validate-permission-update.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Runtime validation for Claude `updatedPermissions` (PermissionUpdate[]).
+ *
+ * Implements PRD §6.4: a `PermissionRequest` result may return
+ * `updatedPermissions`, which is serialized to Claude. Each entry must match one
+ * of the documented PermissionUpdate variants (see permissions.ts) rather than
+ * merely being an array, so a malformed entry cannot slip through.
+ */
+export declare function isPermissionUpdateArray(value: unknown): boolean;
+//# sourceMappingURL=validate-permission-update.d.ts.map

package/dist/claude/validate-permission-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-permission-update.d.ts","sourceRoot":"","sources":["../../src/claude/validate-permission-update.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAuCH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE/D"}