@with-logic/elwood 0.1.0

package/dist/codex/config-restore.js

@@ -0,0 +1,90 @@
+/**
+ * Compensates the Codex CLI persisting picker selections into config.toml.
+ * Implements PRD §5.3 setModel restore and C-CODEX-14: a compare-and-swap restore
+ * of the user's global config that never clobbers concurrent edits, written
+ * atomically (sibling temp file + rename) so a crash mid-restore can never leave
+ * the user's config truncated.
+ */
+import { chmodSync, existsSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { errnoCode } from "../core/errors.js";
+export function codexConfigPath() {
+    return join(process.env["CODEX_HOME"] ?? join(homedir(), ".codex"), "config.toml");
+}
+/**
+ * Builds the CONTENT-FREE `raw` for a swallowed restore-failure warning: the config
+ * path plus a bounded errno code only — never the error message, which could carry
+ * credentials or conversation data if the failure came from a public listener.
+ */
+export function restoreFailureRaw(path, error) {
+    return `${path} (${errnoCode(error) ?? "UNKNOWN"})`;
+}
+export function snapshotCodexConfig() {
+    const path = codexConfigPath();
+    return existsSync(path) ? readFileSync(path, "utf8") : undefined;
+}
+/**
+ * Restores the snapshot if and only if the file now differs solely in the
+ * root-level model keys the picker writes. Anything else — a concurrent user
+ * edit, an unexpected rewrite — skips the restore so user-owned configuration is
+ * never clobbered. With no snapshot (no config.toml before the switch) a file the
+ * picker created is reported as `no_snapshot` rather than misreported as a
+ * concurrent edit.
+ */
+export function restoreCodexConfig(snapshot) {
+    const path = codexConfigPath();
+    const exists = existsSync(path);
+    if (snapshot === undefined)
+        return exists ? "no_snapshot" : "unchanged";
+    if (!exists)
+        return "skipped";
+    const current = readFileSync(path, "utf8");
+    if (current === snapshot)
+        return "unchanged";
+    if (withoutRootModelKeys(current) !== withoutRootModelKeys(snapshot))
+        return "skipped";
+    writeAtomically(path, snapshot);
+    return "restored";
+}
+/**
+ * Replaces `path` via a sibling temp file + rename so the config is never observed
+ * empty or partial. A symlinked config.toml is written THROUGH to its resolved
+ * target (renaming onto the link path would replace the link itself), and the
+ * target's mode is preserved. The temp file is removed on any failure.
+ */
+function writeAtomically(path, contents) {
+    const target = realpathSync(path);
+    const temp = join(dirname(target), `.config.toml.elwood-${process.pid}-${Date.now()}`);
+    try {
+        writeFileSync(temp, contents, { mode: 0o600 });
+        chmodSync(temp, statSync(target).mode & 0o777);
+        renameSync(temp, target);
+    }
+    catch (error) {
+        try {
+            unlinkSync(temp);
+        }
+        catch { } // best-effort cleanup; the original write error is the one that surfaces
+        throw error;
+    }
+}
+/**
+ * Strips `model` / `model_reasoning_effort` assignments from the root region
+ * only. TOML requires root keys to precede the first table header, so keys of
+ * the same name inside tables (for example profiles) are left untouched.
+ */
+function withoutRootModelKeys(text) {
+    const lines = text.split("\n");
+    const kept = [];
+    let inRoot = true;
+    for (const line of lines) {
+        if (inRoot && /^\s*\[/.test(line))
+            inRoot = false;
+        if (inRoot && /^\s*(model|model_reasoning_effort)\s*=/.test(line))
+            continue;
+        kept.push(line);
+    }
+    return kept.join("\n");
+}
+//# sourceMappingURL=config-restore.js.map

package/dist/codex/config-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-restore.js","sourceRoot":"","sources":["../../src/codex/config-restore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAU9C,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAc;IAC5D,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,GAAG,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA4B;IAC7D,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;IACxE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,uBAAuB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QAC/C,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC,CAAC,yEAAyE;QACpF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,KAAK,CAAC;QAClD,IAAI,MAAM,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/codex/config-transaction.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The Codex setModel config transaction: snapshot → drive the picker → restore,
+ * all under the process-wide config lock. Factored out of session-instance so
+ * every branch (switch succeeds/rejects × restore succeeds/throws) is unit
+ * testable without a live session. Implements PRD §5.3 setModel restore and
+ * C-CODEX-14 (a late picker rejection must still restore, and a restore failure
+ * must never mask the primary automation error).
+ */
+type CodexModelSwitch = {
+    /** Reads the current config.toml so it can be restored after the switch. */
+    readonly snapshot: () => string | undefined;
+    /** Drives the picker; rejects if the CLI automation fails or times out. */
+    readonly apply: () => Promise<void>;
+    /** Compare-and-swap restore of the snapshot; may warn but should not throw. */
+    readonly restore: (snapshot: string | undefined) => void;
+    /**
+     * Reports a restore failure that had to be SWALLOWED because a primary error is
+     * being preserved (both the picker and the restore failed). Without this the user
+     * would get no signal that their global config.toml may remain mutated. Optional;
+     * omitted in tests that don't assert the diagnostic.
+     */
+    readonly onRestoreError?: (error: unknown) => void;
+};
+export declare function runCodexModelSwitch(io: CodexModelSwitch): Promise<void>;
+export {};
+//# sourceMappingURL=config-transaction.d.ts.map

package/dist/codex/config-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-transaction.d.ts","sourceRoot":"","sources":["../../src/codex/config-transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,KAAK,gBAAgB,GAAG;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BvE"}

package/dist/codex/config-transaction.js

@@ -0,0 +1,47 @@
+/**
+ * The Codex setModel config transaction: snapshot → drive the picker → restore,
+ * all under the process-wide config lock. Factored out of session-instance so
+ * every branch (switch succeeds/rejects × restore succeeds/throws) is unit
+ * testable without a live session. Implements PRD §5.3 setModel restore and
+ * C-CODEX-14 (a late picker rejection must still restore, and a restore failure
+ * must never mask the primary automation error).
+ */
+import { withCodexConfigLock } from "./config-lock.js";
+export function runCodexModelSwitch(io) {
+    return withCodexConfigLock(async () => {
+        const snapshot = io.snapshot();
+        let primary;
+        let failed = false;
+        try {
+            await io.apply();
+        }
+        catch (error) {
+            failed = true;
+            primary = error;
+        }
+        // Restore whether or not the switch rejected, so a late picker timeout that
+        // fired AFTER Codex wrote config.toml still restores the user's default.
+        try {
+            io.restore(snapshot);
+        }
+        catch (restoreError) {
+            // When the switch succeeded, a restore failure surfaces on its own. When a
+            // primary error is being preserved we cannot also throw the restore failure,
+            // but it must NOT vanish — report it so the user learns config.toml may still
+            // be mutated (the alternative, silently dropping it, was the bug). The report
+            // is CONTAINED here: a throwing reporter must never replace the primary error
+            // this function guarantees to preserve.
+            if (!failed)
+                throw restoreError;
+            try {
+                io.onRestoreError?.(restoreError);
+            }
+            catch {
+                // A throwing reporter must not replace the primary error we preserve below.
+            }
+        }
+        if (failed)
+            throw primary;
+    });
+}
+//# sourceMappingURL=config-transaction.js.map

package/dist/codex/config-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-transaction.js","sourceRoot":"","sources":["../../src/codex/config-transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAkBvD,MAAM,UAAU,mBAAmB,CAAC,EAAoB;IACtD,OAAO,mBAAmB,CAAC,KAAK,IAAI,EAAE;QACpC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAgB,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,IAAI,CAAC;YACH,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,2EAA2E;YAC3E,6EAA6E;YAC7E,8EAA8E;YAC9E,8EAA8E;YAC9E,8EAA8E;YAC9E,wCAAwC;YACxC,IAAI,CAAC,MAAM;gBAAE,MAAM,YAAY,CAAC;YAChC,IAAI,CAAC;gBACH,EAAE,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;QACH,CAAC;QACD,IAAI,MAAM;YAAE,MAAM,OAAO,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/codex/hook-dispatch.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Codex hook handler dispatch: the shared fail-open dispatcher bound to the
+ * Codex result validator, plus block detection for `Stop`.
+ * Implements PRD §7A.2.
+ */
+import type { CodexHookEvent, CodexHookResult } from "./hooks.ts";
+export declare const requestCodexHook: import("../core/hook-dispatch.ts").HookDispatcher<CodexHookEvent, CodexHookResult>;
+export declare function isCodexBlock(result: CodexHookResult): boolean;
+//# sourceMappingURL=hook-dispatch.d.ts.map

package/dist/codex/hook-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-dispatch.d.ts","sourceRoot":"","sources":["../../src/codex/hook-dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlE,eAAO,MAAM,gBAAgB,oFAG5B,CAAC;AAEF,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAM7D"}

package/dist/codex/hook-dispatch.js

@@ -0,0 +1,14 @@
+/**
+ * Codex hook handler dispatch: the shared fail-open dispatcher bound to the
+ * Codex result validator, plus block detection for `Stop`.
+ * Implements PRD §7A.2.
+ */
+import { createHookDispatcher } from "../core/hook-dispatch.js";
+import { isCodexHookResult } from "./validate.js";
+export const requestCodexHook = createHookDispatcher("codex", isCodexHookResult);
+export function isCodexBlock(result) {
+    return Boolean(result &&
+        (("decision" in result && result.decision === "block") ||
+            ("continue" in result && result.continue === false)));
+}
+//# sourceMappingURL=hook-dispatch.js.map

package/dist/codex/hook-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-dispatch.js","sourceRoot":"","sources":["../../src/codex/hook-dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAClD,OAAO,EACP,iBAAiB,CAClB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,OAAO,OAAO,CACZ,MAAM;QACJ,CAAC,CAAC,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;YACpD,CAAC,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC"}

package/dist/codex/hook-names.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Codex hook names and common fields.
+ * Implements PRD §7A.
+ */
+export declare const codexHookEventNames: readonly ["SessionStart", "SubagentStart", "PreToolUse", "PermissionRequest", "PostToolUse", "PreCompact", "PostCompact", "UserPromptSubmit", "SubagentStop", "Stop"];
+export type CodexHookEventName = (typeof codexHookEventNames)[number];
+export type CodexPermissionMode = "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypassPermissions";
+export type CodexCommonHookFields = {
+    readonly session_id: string;
+    readonly transcript_path?: string | null;
+    readonly cwd: string;
+    readonly hook_event_name: CodexHookEventName;
+    readonly model?: string;
+    readonly permission_mode?: CodexPermissionMode;
+};
+export type CodexTurnFields = {
+    readonly turn_id: string;
+};
+//# sourceMappingURL=hook-names.d.ts.map

package/dist/codex/hook-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-names.d.ts","sourceRoot":"","sources":["../../src/codex/hook-names.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,mBAAmB,uKAWtB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,aAAa,GACb,MAAM,GACN,MAAM,GACN,SAAS,GACT,mBAAmB,CAAC;AAExB,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/codex/hook-names.js

@@ -0,0 +1,17 @@
+/**
+ * Codex hook names and common fields.
+ * Implements PRD §7A.
+ */
+export const codexHookEventNames = [
+    "SessionStart",
+    "SubagentStart",
+    "PreToolUse",
+    "PermissionRequest",
+    "PostToolUse",
+    "PreCompact",
+    "PostCompact",
+    "UserPromptSubmit",
+    "SubagentStop",
+    "Stop",
+];
+//# sourceMappingURL=hook-names.js.map

package/dist/codex/hook-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-names.js","sourceRoot":"","sources":["../../src/codex/hook-names.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc;IACd,eAAe;IACf,YAAY;IACZ,mBAAmB;IACnB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,MAAM;CACE,CAAC"}

package/dist/codex/hooks/dispatch.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Codex hook handler dispatch: the shared fail-open dispatcher bound to the
+ * Codex result validator, plus block detection for `Stop`.
+ * Implements PRD §7A.2.
+ */
+import type { CodexHookEvent, CodexHookResult } from "./index.ts";
+export declare const requestCodexHook: import("../../core/hook-dispatch.ts").HookDispatcher<CodexHookEvent, CodexHookResult>;
+export declare function isCodexBlock(result: CodexHookResult): boolean;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/codex/hooks/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/codex/hooks/dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlE,eAAO,MAAM,gBAAgB,uFAG5B,CAAC;AAEF,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAM7D"}

package/dist/codex/hooks/dispatch.js

@@ -0,0 +1,14 @@
+/**
+ * Codex hook handler dispatch: the shared fail-open dispatcher bound to the
+ * Codex result validator, plus block detection for `Stop`.
+ * Implements PRD §7A.2.
+ */
+import { createHookDispatcher } from "../../core/hook-dispatch.js";
+import { isCodexHookResult } from "./validate.js";
+export const requestCodexHook = createHookDispatcher("codex", isCodexHookResult);
+export function isCodexBlock(result) {
+    return Boolean(result &&
+        (("decision" in result && result.decision === "block") ||
+            ("continue" in result && result.continue === false)));
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/codex/hooks/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/codex/hooks/dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAClD,OAAO,EACP,iBAAiB,CAClB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,OAAO,OAAO,CACZ,MAAM;QACJ,CAAC,CAAC,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;YACpD,CAAC,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC"}

package/dist/codex/hooks/index.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Public Codex hook event and response types.
+ * Implements PRD §7A.
+ */
+import type { CodexToolEventFields, CodexUnknownToolName } from "../tool-types.ts";
+import type { CodexCommonHookFields, CodexHookEventName, CodexTurnFields } from "./names.ts";
+type MaybePromise<T> = T | Promise<T>;
+export type { CodexCommandToolInput, CodexGenericToolInput, CodexKnownToolName, CodexToolEventFields, CodexUnknownToolName, } from "../tool-types.ts";
+export type { CodexCommonHookFields, CodexHookEventName, CodexPermissionMode, } from "./names.ts";
+export { codexHookEventNames } from "./names.ts";
+type CodexToolEventName = "PreToolUse" | "PermissionRequest" | "PostToolUse";
+export type CodexToolEvent = CodexCommonHookFields & CodexTurnFields & CodexToolEventFields & {
+    readonly hook_event_name: CodexToolEventName;
+};
+export type CodexHookEvent = (CodexCommonHookFields & {
+    readonly hook_event_name: "SessionStart";
+    readonly source: string;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "SubagentStart";
+    readonly agent_id: string;
+    readonly agent_type: string;
+}) | CodexToolEvent | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "PreCompact" | "PostCompact";
+    readonly trigger: string;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "UserPromptSubmit";
+    readonly prompt: string;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "SubagentStop";
+    readonly agent_id: string;
+    readonly agent_type: string;
+    readonly agent_transcript_path?: string | null;
+    readonly stop_hook_active: boolean;
+    readonly last_assistant_message?: string | null;
+}) | (CodexCommonHookFields & CodexTurnFields & {
+    readonly hook_event_name: "Stop";
+    readonly stop_hook_active: boolean;
+    readonly last_assistant_message?: string | null;
+});
+export type CodexHookEventFor<K extends CodexHookEventName> = CodexHookEvent extends infer Event ? Event extends {
+    readonly hook_event_name: infer EventName;
+} ? K extends EventName ? Event & {
+    readonly hook_event_name: K;
+} : never : never : never;
+type CodexToolInputUpdateForEvent<Event> = Event extends {
+    readonly tool_input: infer Input;
+} ? Partial<Input> : never;
+export type CodexPreToolUseResultFor<Event> = {
+    readonly permissionDecision: "deny";
+    readonly permissionDecisionReason: string;
+} | {
+    readonly permissionDecision: "allow";
+    readonly updatedInput?: CodexToolInputUpdateForEvent<Event>;
+} | {
+    readonly additionalContext: string;
+};
+export type CodexPreToolUseResult = CodexPreToolUseResultFor<CodexHookEventFor<"PreToolUse">>;
+type CodexPreToolUseCommonResult = {
+    readonly permissionDecision: "deny";
+    readonly permissionDecisionReason: string;
+} | {
+    readonly permissionDecision: "allow";
+    readonly updatedInput?: never;
+} | {
+    readonly additionalContext: string;
+};
+export type CodexPermissionRequestResult = {
+    readonly behavior: "allow" | "deny";
+    readonly message?: string;
+};
+export type CodexBlockResult = {
+    readonly decision: "block";
+    readonly reason: string;
+    readonly additionalContext?: string;
+};
+export type CodexStopResult = {
+    readonly continue: false;
+    readonly stopReason: string;
+    readonly additionalContext?: string;
+};
+/** Return undefined for no decision; empty objects are invalid and fail open. */
+export type CodexHookResultFor<K extends CodexHookEventName> = K extends "PreToolUse" ? CodexPreToolUseResult | undefined : K extends "PermissionRequest" ? CodexPermissionRequestResult | undefined : K extends "Stop" | "SubagentStop" ? CodexBlockResult | CodexStopResult | undefined : undefined;
+export type CodexHookResultForEvent<Event extends CodexHookEvent> = Event["hook_event_name"] extends "PreToolUse" ? CodexPreToolUseResultFor<Event> | undefined : CodexHookResultFor<Event["hook_event_name"]>;
+export type CodexHookResult = {
+    [K in CodexHookEventName]: CodexHookResultFor<K>;
+}[CodexHookEventName];
+type CodexToolEventForTool<Tool extends string> = CodexHookEventFor<"PreToolUse"> & {
+    readonly tool_name: Tool;
+};
+type CodexToolSpecificHandler = {
+    readonly [Tool in Exclude<CodexHookEventFor<"PreToolUse">["tool_name"], CodexUnknownToolName> & string]?: (event: CodexToolEventForTool<Tool>) => MaybePromise<CodexHookResultForEvent<CodexToolEventForTool<Tool>>>;
+} & {
+    readonly unknown?: (event: CodexToolEventForTool<CodexUnknownToolName>) => MaybePromise<CodexHookResultForEvent<CodexToolEventForTool<CodexUnknownToolName>>>;
+};
+type CodexHandlerFor<K extends CodexHookEventName> = K extends "PreToolUse" ? ((event: CodexHookEventFor<K>) => MaybePromise<CodexPreToolUseCommonResult | undefined>) | CodexToolSpecificHandler : (event: CodexHookEventFor<K>) => MaybePromise<CodexHookResultFor<K>>;
+export type CodexHookHandlers = {
+    readonly [K in CodexHookEventName]?: CodexHandlerFor<K>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/codex/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/codex/hooks/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7F,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,KAAK,kBAAkB,GAAG,YAAY,GAAG,mBAAmB,GAAG,aAAa,CAAC;AAE7E,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAChD,eAAe,GACf,oBAAoB,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE1E,MAAM,MAAM,cAAc,GACtB,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/F,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC,GACJ,cAAc,GACd,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,YAAY,GAAG,aAAa,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC,GACJ,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9F,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD,CAAC,GACJ,CAAC,qBAAqB,GACpB,eAAe,GAAG;IAChB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjD,CAAC,CAAC;AAET,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,kBAAkB,IAAI,cAAc,SAAS,MAAM,KAAK,GAC5F,KAAK,SAAS;IAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,SAAS,CAAA;CAAE,GACzD,CAAC,SAAS,SAAS,GACjB,KAAK,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAA;CAAE,GACvC,KAAK,GACP,KAAK,GACP,KAAK,CAAC;AAEV,KAAK,4BAA4B,CAAC,KAAK,IAAI,KAAK,SAAS;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC;CAClC,GACG,OAAO,CAAC,KAAK,CAAC,GACd,KAAK,CAAC;AAEV,MAAM,MAAM,wBAAwB,CAAC,KAAK,IACtC;IAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GAClF;IACE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;CAC7D,GACD;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3C,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9F,KAAK,2BAA2B,GAC5B;IAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,kBAAkB,IAAI,CAAC,SAAS,YAAY,GACjF,qBAAqB,GAAG,SAAS,GACjC,CAAC,SAAS,mBAAmB,GAC3B,4BAA4B,GAAG,SAAS,GACxC,CAAC,SAAS,MAAM,GAAG,cAAc,GAC/B,gBAAgB,GAAG,eAAe,GAAG,SAAS,GAC9C,SAAS,CAAC;AAElB,MAAM,MAAM,uBAAuB,CAAC,KAAK,SAAS,cAAc,IAC9D,KAAK,CAAC,iBAAiB,CAAC,SAAS,YAAY,GACzC,wBAAwB,CAAC,KAAK,CAAC,GAAG,SAAS,GAC3C,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEnD,MAAM,MAAM,eAAe,GAAG;KAC3B,CAAC,IAAI,kBAAkB,GAAG,kBAAkB,CAAC,CAAC,CAAC;CACjD,CAAC,kBAAkB,CAAC,CAAC;AAEtB,KAAK,qBAAqB,CAAC,IAAI,SAAS,MAAM,IAAI,iBAAiB,CAAC,YAAY,CAAC,GAAG;IAClF,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,GAC3F,MAAM,CAAC,CAAC,EAAE,CACV,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAC/B,YAAY,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;CACxE,GAAG;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE,CACjB,KAAK,EAAE,qBAAqB,CAAC,oBAAoB,CAAC,KAC/C,YAAY,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;CACzF,CAAC;AAEF,KAAK,eAAe,CAAC,CAAC,SAAS,kBAAkB,IAAI,CAAC,SAAS,YAAY,GAEnE,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC,GACxF,wBAAwB,GAC5B,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,CAAC,IAAI,kBAAkB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;CACxD,CAAC"}

package/dist/codex/hooks/index.js

@@ -0,0 +1,6 @@
+/**
+ * Public Codex hook event and response types.
+ * Implements PRD §7A.
+ */
+export { codexHookEventNames } from "./names.js";
+//# sourceMappingURL=index.js.map

package/dist/codex/hooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/codex/hooks/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}

package/dist/codex/hooks/names.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Codex hook names and common fields.
+ * Implements PRD §7A.
+ */
+export declare const codexHookEventNames: readonly ["SessionStart", "SubagentStart", "PreToolUse", "PermissionRequest", "PostToolUse", "PreCompact", "PostCompact", "UserPromptSubmit", "SubagentStop", "Stop"];
+export type CodexHookEventName = (typeof codexHookEventNames)[number];
+export type CodexPermissionMode = "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypassPermissions";
+export type CodexCommonHookFields = {
+    readonly session_id: string;
+    readonly transcript_path?: string | null;
+    readonly cwd: string;
+    readonly hook_event_name: CodexHookEventName;
+    readonly model?: string;
+    readonly permission_mode?: CodexPermissionMode;
+};
+export type CodexTurnFields = {
+    readonly turn_id: string;
+};
+//# sourceMappingURL=names.d.ts.map

package/dist/codex/hooks/names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../../src/codex/hooks/names.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,mBAAmB,uKAWtB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,aAAa,GACb,MAAM,GACN,MAAM,GACN,SAAS,GACT,mBAAmB,CAAC;AAExB,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/codex/hooks/names.js

@@ -0,0 +1,17 @@
+/**
+ * Codex hook names and common fields.
+ * Implements PRD §7A.
+ */
+export const codexHookEventNames = [
+    "SessionStart",
+    "SubagentStart",
+    "PreToolUse",
+    "PermissionRequest",
+    "PostToolUse",
+    "PreCompact",
+    "PostCompact",
+    "UserPromptSubmit",
+    "SubagentStop",
+    "Stop",
+];
+//# sourceMappingURL=names.js.map

package/dist/codex/hooks/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../src/codex/hooks/names.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc;IACd,eAAe;IACf,YAAY;IACZ,mBAAmB;IACnB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,MAAM;CACE,CAAC"}

package/dist/codex/hooks/serialize.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Converts typed hook handler results to Codex hook process output.
+ * Implements PRD §7A.2.
+ */
+import type { BridgeProcessResult } from "../../bridge/types.ts";
+import type { CodexHookEventName, CodexHookResult } from "./index.ts";
+export declare function serializeCodexHookResult(eventName: CodexHookEventName, result: CodexHookResult): BridgeProcessResult;
+//# sourceMappingURL=serialize.d.ts.map

package/dist/codex/hooks/serialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.d.ts","sourceRoot":"","sources":["../../../src/codex/hooks/serialize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,eAAe,GACtB,mBAAmB,CAOrB"}

package/dist/codex/hooks/serialize.js

@@ -0,0 +1,48 @@
+/**
+ * Converts typed hook handler results to Codex hook process output.
+ * Implements PRD §7A.2.
+ */
+export function serializeCodexHookResult(eventName, result) {
+    if (result === undefined)
+        return { exitCode: 0, stdout: "", stderr: "" };
+    if ("permissionDecision" in result)
+        return jsonOutput({ hookSpecificOutput: named(eventName, result) });
+    if ("behavior" in result)
+        return jsonOutput(permissionRequest(eventName, result));
+    if ("decision" in result)
+        return jsonOutput(block(eventName, result));
+    return jsonOutput(common(eventName, result));
+}
+function jsonOutput(value) {
+    return { exitCode: 0, stdout: `${JSON.stringify(value)}\n`, stderr: "" };
+}
+function named(eventName, result) {
+    return { hookEventName: eventName, ...result };
+}
+function permissionRequest(eventName, result) {
+    return { hookSpecificOutput: { hookEventName: eventName, decision: result } };
+}
+function block(eventName, result) {
+    return {
+        decision: result.decision,
+        reason: result.reason,
+        ...(result.additionalContext === undefined
+            ? {}
+            : {
+                hookSpecificOutput: {
+                    hookEventName: eventName,
+                    additionalContext: result.additionalContext,
+                },
+            }),
+    };
+}
+function common(eventName, result) {
+    const { additionalContext, ...commonFields } = result;
+    return {
+        ...commonFields,
+        ...(typeof additionalContext === "string"
+            ? { hookSpecificOutput: { hookEventName: eventName, additionalContext } }
+            : {}),
+    };
+}
+//# sourceMappingURL=serialize.js.map

package/dist/codex/hooks/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../../../src/codex/hooks/serialize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,UAAU,wBAAwB,CACtC,SAA6B,EAC7B,MAAuB;IAEvB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,oBAAoB,IAAI,MAAM;QAChC,OAAO,UAAU,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB,EAAE,MAAyC;IACzE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAiB,EACjB,MAA0E;IAE1E,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,KAAK,CACZ,SAAiB,EACjB,MAIC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,kBAAkB,EAAE;oBAClB,aAAa,EAAE,SAAS;oBACxB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;iBAC5C;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,SAAiB,EAAE,MAAyC;IAC1E,MAAM,EAAE,iBAAiB,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;IACtD,OAAO;QACL,GAAG,YAAY;QACf,GAAG,CAAC,OAAO,iBAAiB,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE;YACzE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/codex/hooks/validate-result.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Runtime validation for Codex hook handler results.
+ * Implements PRD §7A.2.
+ */
+import type { CodexHookEvent, CodexHookEventName, CodexHookResult } from "./index.ts";
+export declare function isCodexHookResult(event: CodexHookEventName | CodexHookEvent, value: unknown): value is CodexHookResult;
+//# sourceMappingURL=validate-result.d.ts.map

package/dist/codex/hooks/validate-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-result.d.ts","sourceRoot":"","sources":["../../../src/codex/hooks/validate-result.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtF,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,kBAAkB,GAAG,cAAc,EAC1C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,eAAe,CAY1B"}

package/dist/codex/hooks/validate-result.js

@@ -0,0 +1,84 @@
+/**
+ * Runtime validation for Codex hook handler results.
+ * Implements PRD §7A.2.
+ */
+import { isOneOf, isRecord, optionalString } from "../../core/predicates.js";
+export function isCodexHookResult(event, value) {
+    const eventName = typeof event === "string" ? event : event.hook_event_name;
+    const toolName = typeof event === "string" || !("tool_name" in event) ? undefined : event.tool_name;
+    if (value === undefined)
+        return true;
+    if (!isRecord(value))
+        return false;
+    if ("permissionDecision" in value)
+        return isPreToolUseResult(eventName, value, toolName);
+    if (eventName === "PreToolUse" && "additionalContext" in value)
+        return isPreToolUseResult(eventName, value, toolName);
+    if ("behavior" in value)
+        return isPermissionRequestResult(eventName, value);
+    if ("decision" in value)
+        return isBlockResult(eventName, value);
+    return isStopResult(eventName, value);
+}
+function isPreToolUseResult(eventName, value, toolName) {
+    if (eventName !== "PreToolUse")
+        return false;
+    if (!keysAre(value, [
+        "permissionDecision",
+        "permissionDecisionReason",
+        "updatedInput",
+        "additionalContext",
+    ])) {
+        return false;
+    }
+    if ("additionalContext" in value && !("permissionDecision" in value)) {
+        return Object.keys(value).length === 1 && typeof value["additionalContext"] === "string";
+    }
+    if (value["permissionDecision"] === "deny") {
+        return (typeof value["permissionDecisionReason"] === "string" &&
+            !("updatedInput" in value) &&
+            !("additionalContext" in value));
+    }
+    return (value["permissionDecision"] === "allow" &&
+        !("permissionDecisionReason" in value) &&
+        !("additionalContext" in value) &&
+        isCodexToolInputUpdate(toolName, value["updatedInput"]));
+}
+function isPermissionRequestResult(eventName, value) {
+    return (eventName === "PermissionRequest" &&
+        keysAre(value, ["behavior", "message"]) &&
+        isOneOf(value["behavior"], ["allow", "deny"]) &&
+        optionalString(value["message"]));
+}
+function isBlockResult(eventName, value) {
+    return (isOneOf(eventName, ["SubagentStop", "Stop"]) &&
+        value["decision"] === "block" &&
+        typeof value["reason"] === "string" &&
+        optionalString(value["additionalContext"]));
+}
+function isStopResult(eventName, value) {
+    if (eventName !== "Stop" && eventName !== "SubagentStop")
+        return false;
+    return isContinueFalseResult(value);
+}
+function isContinueFalseResult(value) {
+    return (keysAre(value, ["continue", "stopReason", "additionalContext"]) &&
+        value["continue"] === false &&
+        typeof value["stopReason"] === "string" &&
+        optionalString(value["additionalContext"]));
+}
+function keysAre(value, allowed) {
+    return Object.keys(value).every((key) => allowed.includes(key));
+}
+function isCodexToolInputUpdate(toolName, value) {
+    if (value === undefined)
+        return true;
+    if (!isRecord(value))
+        return false;
+    if (toolName !== "Bash" && toolName !== "apply_patch")
+        return true;
+    return (keysAre(value, ["command", "description"]) &&
+        optionalString(value["description"]) &&
+        ("command" in value ? typeof value["command"] === "string" : true));
+}
+//# sourceMappingURL=validate-result.js.map