@zaip-ai/cli 4.9.0 → 5.1.0

package/dist/services/codex-pre-tool-cloud-template.js

@@ -0,0 +1,190 @@
+export const CODEX_PRE_TOOL_CLOUD_HOOK = String.raw `import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+
+export function createCloudValidators({ tokenizeLiteralCommand, deny, repositoryRoot, isWithinRepository, cloudRunnerScript, cloudContractPath, cloudOperationProviders }) {
+function optionMap(tokens) {
+  if (tokens.length % 2 !== 0) return null;
+  const values = new Map();
+  for (let index = 0; index < tokens.length; index += 2) {
+    const key = tokens[index];
+    const value = tokens[index + 1];
+    if (!key.startsWith("--") || value.startsWith("--") || values.has(key)) return null;
+    values.set(key, value);
+  }
+  return values;
+}
+
+function requireExactOptions(options, allowed, required) {
+  if ([...options.keys()].some((key) => !allowed.has(key))) return false;
+  return [...required].every((key) => typeof options.get(key) === "string" && options.get(key).length > 0);
+}
+
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string" && item.length > 0);
+}
+
+async function readCloudContract(options) {
+  if (options.get("--contract") !== cloudContractPath) {
+    deny("Cloud runner must use the canonical autonomous-cloud contract path.");
+  }
+  const absolute = resolve(repositoryRoot, cloudContractPath);
+  if (!isWithinRepository(absolute)) deny("Cloud runner contract escapes the repository boundary.");
+  let contract;
+  try {
+    contract = JSON.parse(await readFile(absolute, "utf8"));
+  } catch {
+    deny("Cloud runner contract is absent or malformed.");
+  }
+  if (
+    contract === null ||
+    typeof contract !== "object" ||
+    contract.version !== 1 ||
+    contract.profile !== "autonomous-cloud" ||
+    contract.cloudflare === null ||
+    typeof contract.cloudflare !== "object" ||
+    contract.hostinger === null ||
+    typeof contract.hostinger !== "object"
+  ) {
+    deny("Cloud runner contract has no valid autonomous-cloud profile.");
+  }
+  return contract;
+}
+
+function cloudflareTargetMatches(contract, options, operation) {
+  const cloudflare = contract.cloudflare;
+  const record = options.get("--dns-record");
+  const managed = isStringArray(cloudflare.dns_records) && cloudflare.dns_records.includes(record);
+  const direct = cloudflare.direct_dns_records !== null && typeof cloudflare.direct_dns_records === "object" && Object.hasOwn(cloudflare.direct_dns_records, record);
+  return (
+    typeof cloudflare.account_id === "string" &&
+    typeof cloudflare.zone_id === "string" &&
+    isStringArray(cloudflare.allowed_operations) &&
+    cloudflare.account_id === options.get("--account-id") &&
+    cloudflare.zone_id === options.get("--zone-id") &&
+    cloudflare.allowed_operations.includes(operation) &&
+    (operation === "cloudflare:dns:read" ? managed || direct : direct && !managed)
+  );
+}
+
+function hostingerTargetMatches(contract, options, operation) {
+  const hostinger = contract.hostinger;
+  const role = options.get("--vps-role");
+  if (
+    typeof hostinger.account_id !== "string" ||
+    !isStringArray(hostinger.allowed_operations) ||
+    hostinger.account_id !== options.get("--account-id") ||
+    !hostinger.allowed_operations.includes(operation) ||
+    (role !== "edge" && role !== "application") ||
+    hostinger.vps === null ||
+    typeof hostinger.vps !== "object"
+  ) {
+    return false;
+  }
+  const target = hostinger.vps[role];
+  if (target === null || typeof target !== "object") return false;
+
+  if (typeof target.id !== "string" || target.id !== options.get("--vps-id")) return false;
+  if (operation.startsWith("hostinger:ssh:")) {
+    return typeof target.host_key_sha256 === "string" && target.host_key_sha256 === options.get("--host-key-sha256");
+  }
+  return true;
+}
+
+function terraformTargetMatches(contract, options, operation) {
+  const terraform = contract.terraform;
+  if (
+    terraform === null ||
+    typeof terraform !== "object" ||
+    !isStringArray(terraform.allowed_operations) ||
+    !terraform.allowed_operations.includes(operation)
+  ) return false;
+  if (operation === "terraform:plan") return terraform.working_directory === options.get("--terraform-directory");
+  if (operation === "terraform:apply") {
+    const plan = terraform.plan;
+    return plan !== null && typeof plan === "object" && typeof plan.path === "string" && typeof plan.sha256 === "string" && typeof plan.policy_result_sha256 === "string" && plan.path === options.get("--plan-path") && plan.sha256 === options.get("--plan-sha256") && plan.policy_result_sha256 === options.get("--policy-result-sha256");
+  }
+  return terraform.import_targets !== null && typeof terraform.import_targets === "object" && terraform.import_targets[options.get("--resource-address")] === options.get("--resource-id");
+}
+
+function validateDirectCloudProviderMutation(command) {
+  const tokens = tokenizeLiteralCommand(command);
+  if (/^(?:node|node\.exe)$/i.test(tokens?.[0] ?? "") && tokens?.[1] === cloudRunnerScript) return;
+  if (/\bterraform(?:\.exe)?\s+(?:apply|destroy|import)\b/i.test(command)) deny("Direct Terraform mutation is blocked; use the contract-bound cloud runner.");
+  const provider = /^(?:wrangler|cloudflare|hostinger)(?:\.exe|\.cmd|\.js|\.mjs)?$/i;
+  const wrapperProvider = /^(?:wrangler|cloudflare|hostinger)(?:\.exe|\.cmd|\.js|\.mjs|@[A-Za-z0-9][A-Za-z0-9._-]*)?$/i;
+  const base = (token) => token?.split(/[\\/]/).at(-1) ?? "";
+  if (tokens === null) {
+    // Complex shell syntax stays fail-closed; literal arguments are inspected as tokens below.
+    if (/\b(?:wrangler|cloudflare|hostinger)(?:\.exe)?\b/i.test(command)) deny("Direct Cloudflare or Hostinger commands are blocked; use the contract-bound cloud runner.");
+    return;
+  }
+  let index = 0;
+  const launcher = base(tokens[0]);
+  if (/^(?:npx|pnpm|npm|yarn|bunx)(?:\.cmd|\.exe)?$/i.test(launcher)) {
+    // Package-manager options can move the executable. Inspect exact provider
+    // tokens across this recognized wrapper; paths and document names remain inert.
+    if (tokens.slice(1).some((token) => wrapperProvider.test(token))) deny("Direct Cloudflare or Hostinger commands are blocked; use the contract-bound cloud runner.");
+    index = 1;
+    if (/^npx(?:\.cmd|\.exe)?$/i.test(launcher) && /^(?:--yes|-y)$/.test(tokens[index] ?? "")) index += 1;
+    if (/^pnpm(?:\.cmd|\.exe)?$/i.test(launcher) && /^(?:--filter|--dir)$/.test(tokens[index] ?? "") && tokens[index + 1]) index += 2;
+    if (/^(?:exec|dlx)$/.test(tokens[index] ?? "")) index += 1;
+    if (tokens[index] === "--") index += 1;
+    if (/^(?:exec|dlx)$/.test(tokens[index] ?? "")) index += 1;
+  } else if (/^(?:node|node\.exe)$/i.test(launcher)) index = 1;
+  else if (/^(?:powershell|pwsh|cmd|bash|sh)(?:\.exe)?$/i.test(launcher)) {
+    if (/\b(?:wrangler|cloudflare|hostinger)(?:\.exe)?\b/i.test(command)) deny("Direct Cloudflare or Hostinger commands are blocked; use the contract-bound cloud runner.");
+    return;
+  }
+  if (provider.test(base(tokens[index]))) deny("Direct Cloudflare or Hostinger commands are blocked; use the contract-bound cloud runner.");
+}
+
+async function validateCloudRunner(command) {
+  const tokens = tokenizeLiteralCommand(command);
+  if (tokens === null || tokens.length < 2 || !/^(?:node|node\.exe)$/i.test(tokens[0]) || tokens[1] !== cloudRunnerScript) {
+    return false;
+  }
+  const options = optionMap(tokens.slice(2));
+  if (options === null) deny("Cloud runner requires literal, named arguments.");
+  const operation = options.get("--operation");
+  if (operation === "contract:derive") {
+    if (!requireExactOptions(options, new Set(["--operation", "--credentials-source"]), new Set(["--operation", "--credentials-source"]))) {
+      deny("Cloud contract derivation has unrecognized arguments.");
+    }
+    if (options.get("--credentials-source") !== "root") {
+      deny("Cloud contract derivation requires the selected root credential source.");
+    }
+    return true;
+  }
+  const provider = cloudOperationProviders.get(operation);
+  if (provider === undefined) deny("Cloud runner operation is unrecognized or destructive.");
+  const common = new Set(["--contract", "--operation", "--provider", "--account-id", "--credentials-source", "--zone-id", "--dns-record", "--vps-role", "--vps-id", "--host-key-sha256", "--terraform-directory", "--plan-path", "--plan-sha256", "--policy-result-sha256", "--resource-address", "--resource-id"]);
+  const baseRequired = provider === "terraform"
+    ? new Set(["--contract", "--operation", "--credentials-source"])
+    : new Set(["--contract", "--operation", "--provider", "--account-id", "--credentials-source"]);
+  if (!requireExactOptions(options, common, baseRequired)) {
+    deny("Cloud runner invocation has unrecognized arguments.");
+  }
+  if ((provider !== "terraform" && options.get("--provider") !== provider) || !["root", "agents"].includes(options.get("--credentials-source"))) {
+    deny("Cloud runner provider or credential source is outside the approved contract.");
+  }
+  const contract = await readCloudContract(options);
+  const valid = provider === "cloudflare"
+    ? requireExactOptions(options, common, new Set(["--contract", "--operation", "--provider", "--account-id", "--credentials-source", "--zone-id", "--dns-record"])) && cloudflareTargetMatches(contract, options, operation)
+    : provider === "hostinger"
+      ? requireExactOptions(options, common, new Set(["--contract", "--operation", "--provider", "--account-id", "--credentials-source", "--vps-role"])) && hostingerTargetMatches(contract, options, operation)
+      : requireExactOptions(
+          options,
+          common,
+          operation === "terraform:plan"
+            ? new Set(["--contract", "--operation", "--credentials-source", "--terraform-directory"])
+            : operation === "terraform:apply"
+              ? new Set(["--contract", "--operation", "--credentials-source", "--plan-path", "--plan-sha256", "--policy-result-sha256"])
+              : new Set(["--contract", "--operation", "--credentials-source", "--resource-address", "--resource-id"]),
+        ) && terraformTargetMatches(contract, options, operation);
+  if (!valid) deny("Cloud runner target, operation, or host identity is outside the approved contract.");
+  return true;
+}
+return { validateCloudRunner, validateDirectCloudProviderMutation };
+}
+`;
+//# sourceMappingURL=codex-pre-tool-cloud-template.js.map

package/dist/services/codex-pre-tool-cloud-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-cloud-template.js","sourceRoot":"","sources":["../../src/services/codex-pre-tool-cloud-template.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4LlD,CAAC"}

package/dist/services/codex-pre-tool-dependencies.test-support.d.ts

@@ -0,0 +1,2 @@
+export declare function writePreToolDependencies(write: (file: string, content: string) => Promise<void>): Promise<void>;
+//# sourceMappingURL=codex-pre-tool-dependencies.test-support.d.ts.map

package/dist/services/codex-pre-tool-dependencies.test-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-dependencies.test-support.d.ts","sourceRoot":"","sources":["../../src/services/codex-pre-tool-dependencies.test-support.ts"],"names":[],"mappings":"AAIA,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GACtD,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/services/codex-pre-tool-dependencies.test-support.js

@@ -0,0 +1,9 @@
+import { CODEX_PRE_TOOL_CLOUD_HOOK } from "./codex-pre-tool-cloud-template.js";
+import { CODEX_PRE_TOOL_HOST_CONTEXT_HOOK } from "./codex-pre-tool-host-context-template.js";
+import { CODEX_PRE_TOOL_CLI_CAPTURE_HOOK } from "./codex-pre-tool-cli-capture-template.js";
+export async function writePreToolDependencies(write) {
+    await write("zaip-pre-tool-cloud.mjs", CODEX_PRE_TOOL_CLOUD_HOOK);
+    await write("zaip-pre-tool-host-context.mjs", CODEX_PRE_TOOL_HOST_CONTEXT_HOOK);
+    await write("zaip-pre-tool-cli-capture.mjs", CODEX_PRE_TOOL_CLI_CAPTURE_HOOK);
+}
+//# sourceMappingURL=codex-pre-tool-dependencies.test-support.js.map

package/dist/services/codex-pre-tool-dependencies.test-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-dependencies.test-support.js","sourceRoot":"","sources":["../../src/services/codex-pre-tool-dependencies.test-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAE3F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAuD;IAEvD,MAAM,KAAK,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,gCAAgC,EAAE,gCAAgC,CAAC,CAAC;IAChF,MAAM,KAAK,CAAC,+BAA+B,EAAE,+BAA+B,CAAC,CAAC;AAChF,CAAC"}

package/dist/services/codex-pre-tool-hook-fixture.test-support.d.ts

@@ -0,0 +1,5 @@
+export declare function installPreToolHook(root: string): Promise<{
+    hooks: string;
+    hookPath: string;
+}>;
+//# sourceMappingURL=codex-pre-tool-hook-fixture.test-support.d.ts.map

package/dist/services/codex-pre-tool-hook-fixture.test-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-hook-fixture.test-support.d.ts","sourceRoot":"","sources":["../../src/services/codex-pre-tool-hook-fixture.test-support.ts"],"names":[],"mappings":"AAQA,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM;;;GAUpD"}

package/dist/services/codex-pre-tool-hook-fixture.test-support.js

@@ -0,0 +1,19 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { CODEX_HOOK_ACTIVATION } from "./codex-hook-activation.js";
+import { CODEX_NATIVE_TOOL_AUTHORITY_HOOK } from "./codex-native-tool-authority-template.js";
+import { writePreToolDependencies } from "./codex-pre-tool-dependencies.test-support.js";
+import { CODEX_PRE_TOOL_HOOK } from "./codex-pre-tool-hook-template.js";
+import { CODEX_PRE_TOOL_SUPPORT_HOOK } from "./codex-pre-tool-support-template.js";
+export async function installPreToolHook(root) {
+    const hooks = join(root, ".codex", "hooks");
+    await mkdir(hooks, { recursive: true });
+    const hookPath = join(hooks, "zaip-pre-tool-use.mjs");
+    await writeFile(hookPath, CODEX_PRE_TOOL_HOOK);
+    await writeFile(join(hooks, "zaip-hook-activation.mjs"), CODEX_HOOK_ACTIVATION);
+    await writeFile(join(hooks, "zaip-pre-tool-support.mjs"), CODEX_PRE_TOOL_SUPPORT_HOOK);
+    await writePreToolDependencies((file, content) => writeFile(join(hooks, file), content));
+    await writeFile(join(hooks, "zaip-native-tool-authority.mjs"), CODEX_NATIVE_TOOL_AUTHORITY_HOOK);
+    return { hooks, hookPath };
+}
+//# sourceMappingURL=codex-pre-tool-hook-fixture.test-support.js.map

package/dist/services/codex-pre-tool-hook-fixture.test-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-hook-fixture.test-support.js","sourceRoot":"","sources":["../../src/services/codex-pre-tool-hook-fixture.test-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,0BAA0B,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAChF,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACvF,MAAM,wBAAwB,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,gCAAgC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACjG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC"}

package/dist/services/codex-pre-tool-hook-template-bootstrap.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codex-pre-tool-hook-template-bootstrap.test.d.ts.map

package/dist/services/codex-pre-tool-hook-template-bootstrap.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-hook-template-bootstrap.test.d.ts","sourceRoot":"","sources":["../../src/services/codex-pre-tool-hook-template-bootstrap.test.ts"],"names":[],"mappings":""}

package/dist/services/codex-pre-tool-hook-template-bootstrap.test.js

@@ -0,0 +1,107 @@
+import { spawnSync } from "node:child_process";
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { homedir, tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, expect, it } from "vitest";
+import { CODEX_HOOK_ACTIVATION } from "./codex-hook-activation.js";
+import { CODEX_NATIVE_TOOL_AUTHORITY_HOOK } from "./codex-native-tool-authority-template.js";
+import { CODEX_PRE_TOOL_HOOK } from "./codex-pre-tool-hook-template.js";
+import { CODEX_PRE_TOOL_SUPPORT_HOOK } from "./codex-pre-tool-support-template.js";
+import { writePreToolDependencies } from "./codex-pre-tool-dependencies.test-support.js";
+const roots = [];
+afterEach(async () => {
+    await Promise.all(roots.splice(0).map((root) => rm(root, { recursive: true, force: true })));
+});
+it("allows explicit acceptance arguments before Task capture without allowing writes", async () => {
+    const root = await mkdtemp(join(tmpdir(), "zaip-cli-bootstrap-hook-"));
+    roots.push(root);
+    await mkdir(join(root, ".agents", "config"), { recursive: true });
+    await writeFile(join(root, ".agents", "config", "project.yaml"), "zaip:\n  enabled: true\ntracking:\n  enabled: false\n");
+    const hooks = join(root, ".codex", "hooks");
+    await mkdir(hooks, { recursive: true });
+    await writeFile(join(hooks, "zaip-pre-tool-use.mjs"), CODEX_PRE_TOOL_HOOK);
+    await writeFile(join(hooks, "zaip-hook-activation.mjs"), CODEX_HOOK_ACTIVATION);
+    await writeFile(join(hooks, "zaip-pre-tool-support.mjs"), CODEX_PRE_TOOL_SUPPORT_HOOK);
+    await writePreToolDependencies((file, content) => writeFile(join(hooks, file), content));
+    await writeFile(join(hooks, "zaip-native-tool-authority.mjs"), CODEX_NATIVE_TOOL_AUTHORITY_HOOK);
+    const invoke = (cmd) => spawnSync(process.execPath, [join(hooks, "zaip-pre-tool-use.mjs")], {
+        cwd: root,
+        encoding: "utf8",
+        windowsHide: true,
+        env: { ...process.env, CODEX_THREAD_ID: "bootstrap-thread", CODEX_TURN_ID: "bootstrap-turn" },
+        input: JSON.stringify({
+            cwd: root,
+            session_id: "bootstrap-thread",
+            turn_id: "bootstrap-turn",
+            tool_use_id: "bootstrap-tool",
+            tool_name: "exec_command",
+            tool_input: { cmd },
+        }),
+    });
+    const result = invoke("node .agents/runtime/bin/zaip.mjs conversation start --intent new-work --acceptance AC-WORK-001-09 --json");
+    expect(result.status, result.stderr).toBe(0);
+    const output = JSON.parse(result.stdout).hookSpecificOutput;
+    expect(output.permissionDecision, result.stdout).toBe("allow");
+    expect(output.updatedInput.cmd).toContain("--codex-hook-id=");
+    for (const cmd of [
+        "ac src/a.ts payload",
+        "AC src/a.ts payload",
+        "(Set-Content -LiteralPath src/a.ts -Value code)",
+        "Write-Output (Set-Content -LiteralPath src/a.ts -Value code)",
+        "env cp src/a.ts src/b.ts",
+        "exec cp src/a.ts src/b.ts",
+        "FOO=1 cp src/a.ts src/b.ts",
+        "unknown-wrapper ac src/a.ts payload",
+        ".\\echo.cmd ac src/a.ts payload",
+        ".\\node.cmd .agents/runtime/bin/zaip.mjs conversation start --acceptance AC-WORK-001-09",
+        "echo.cmd ac src/a.ts payload",
+        "node.cmd .agents/runtime/bin/zaip.mjs conversation start --acceptance AC-WORK-001-09",
+        "node scripts/unknown.mjs --acceptance AC-WORK-001-09",
+        "command ac src/a.ts payload",
+        ".\\sed.exe -i s/a/b/ src/a.ts",
+        ".\\sed.exe -f script.sed src/input.ts",
+        "git apply patch.diff",
+        "node scripts/read.mjs --acceptance AC-WORK-001-09; ac src/a.ts payload",
+        "node scripts/read.mjs > src/a.ts",
+    ]) {
+        const blocked = invoke(cmd);
+        expect(blocked.status, blocked.stderr).toBe(0);
+        expect(JSON.parse(blocked.stdout).hookSpecificOutput.permissionDecision).toBe("deny");
+    }
+});
+it("denies a configured project when the activation module is missing", async () => {
+    const root = await mkdtemp(join(tmpdir(), "zaip-cli-missing-activation-"));
+    roots.push(root);
+    await mkdir(join(root, ".agents", "config"), { recursive: true });
+    await writeFile(join(root, ".agents", "config", "project.yaml"), "zaip:\n  enabled: true\n");
+    const hooks = join(root, ".codex", "hooks");
+    await mkdir(hooks, { recursive: true });
+    await writeFile(join(hooks, "zaip-pre-tool-use.mjs"), CODEX_PRE_TOOL_HOOK);
+    await writeFile(join(hooks, "zaip-pre-tool-support.mjs"), CODEX_PRE_TOOL_SUPPORT_HOOK);
+    await writePreToolDependencies((file, content) => writeFile(join(hooks, file), content));
+    await writeFile(join(hooks, "zaip-native-tool-authority.mjs"), CODEX_NATIVE_TOOL_AUTHORITY_HOOK);
+    const invoke = () => spawnSync(process.execPath, [join(hooks, "zaip-pre-tool-use.mjs")], {
+        cwd: root,
+        encoding: "utf8",
+        windowsHide: true,
+        input: JSON.stringify({
+            cwd: root,
+            tool_name: "apply_patch",
+            tool_input: { command: "*** Begin Patch\n*** Add File: src/code.ts\n+ok\n*** End Patch" },
+        }),
+    });
+    const result = invoke();
+    expect(result.status, result.stderr).toBe(0);
+    expect(JSON.parse(result.stdout).hookSpecificOutput).toMatchObject({
+        permissionDecision: "deny",
+        permissionDecisionReason: expect.stringContaining("activation module is unavailable"),
+    });
+    const config = join(root, ".agents", "config", "project.yaml");
+    await writeFile(config, "zaip:\n  enabled: false\n");
+    expect(invoke().stdout).toBe("{}\n");
+    await writeFile(config, 'zaip:\n  enabled: "false"\n');
+    expect(JSON.parse(invoke().stdout).hookSpecificOutput.permissionDecision).toBe("deny");
+    await rm(config);
+    expect(invoke().stdout).toBe("{}\n");
+});
+//# sourceMappingURL=codex-pre-tool-hook-template-bootstrap.test.js.map

package/dist/services/codex-pre-tool-hook-template-bootstrap.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-pre-tool-hook-template-bootstrap.test.js","sourceRoot":"","sources":["../../src/services/codex-pre-tool-hook-template-bootstrap.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAEzF,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,EAC/C,uDAAuD,CACxD,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,0BAA0B,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAChF,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACvF,MAAM,wBAAwB,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,gCAAgC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAC7B,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EAAE;QAClE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;QACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE;QAC7F,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,gBAAgB;YACzB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,cAAc;YACzB,UAAU,EAAE,EAAE,GAAG,EAAE;SACpB,CAAC;KACH,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,MAAM,CACnB,2GAA2G,CAC5G,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC;IAC5D,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI;QAChB,qBAAqB;QACrB,qBAAqB;QACrB,iDAAiD;QACjD,8DAA8D;QAC9D,0BAA0B;QAC1B,2BAA2B;QAC3B,4BAA4B;QAC5B,qCAAqC;QACrC,iCAAiC;QACjC,yFAAyF;QACzF,8BAA8B;QAC9B,sFAAsF;QACtF,sDAAsD;QACtD,6BAA6B;QAC7B,+BAA+B;QAC/B,uCAAuC;QACvC,sBAAsB;QACtB,wEAAwE;QACxE,kCAAkC;KACnC,EAAE,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACvF,MAAM,wBAAwB,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,gCAAgC,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EAAE;QAClE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,IAAI;YACT,SAAS,EAAE,aAAa;YACxB,UAAU,EAAE,EAAE,OAAO,EAAE,gEAAgE,EAAE;SAC1F,CAAC;KACH,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC;QACjE,kBAAkB,EAAE,MAAM;QAC1B,wBAAwB,EAAE,MAAM,CAAC,gBAAgB,CAAC,kCAAkC,CAAC;KACtF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC/D,MAAM,SAAS,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACrD,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,SAAS,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IACvD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IACjB,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC"}

package/dist/services/codex-pre-tool-hook-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-pre-tool-hook-template.d.ts","sourceRoot":"","sources":["../../src/services/codex-pre-tool-hook-template.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mBAAmB,QAiuB/B,CAAC"}
+{"version":3,"file":"codex-pre-tool-hook-template.d.ts","sourceRoot":"","sources":["../../src/services/codex-pre-tool-hook-template.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mBAAmB,QA+mB/B,CAAC"}