agentopology 0.9.2 → 0.10.0

package/README.md

@@ -12,7 +12,7 @@
 </p>
 
 <p align="center">
-  <strong>Claude Code</strong> · <strong>Claude Workflow</strong> · <strong>OpenClaw</strong> · <strong>Codex</strong> · <strong>Cursor</strong> · <strong>Gemini CLI</strong> · <strong>Copilot</strong> · <strong>Kiro</strong>
+  <strong>Claude Code</strong> · experimental: Claude Workflow · Codex · Cursor
 </p>
 
 <p align="center">
@@ -61,7 +61,6 @@ topology code-review : [pipeline] {
 ```bash
 agentopology scaffold my-team.at --target claude-code      # → .claude/agents/
 agentopology scaffold my-team.at --target claude-workflow  # → my-team.workflow.js (+ SEAM/README/LOSSY-REPORT)
-agentopology scaffold my-team.at --target openclaw         # → .openclaw/soul.md
 agentopology scaffold my-team.at --target codex            # → .codex/
 agentopology scaffold my-team.at --target cursor           # → .cursor/rules/
 ```
@@ -96,10 +95,9 @@ who works, when they work, and what they know when they work. One file, two ways
                         ┌────────────┐
       ┌──────────────┐  │  Parser &  │   scaffold ──▶ Platform configs
       │   .at file   │─▶│  Validator │──┤                ├── .claude/agents/
-      │  (you write) │  │  103 rules  │  │                ├── <topology>.workflow.js
+      │  (you write) │  │  112 rules  │  │                ├── <topology>.workflow.js
       └──────────────┘  └────────────┘  │                ├── .codex/  .cursor/rules/
-                                        │                ├── .openclaw/  .github/agents/
-                                        │                └── .kiro/  …
+                                        │                └── …
                                         │
                                         └── plan ──────▶ Execution brief
                                                           │
@@ -234,8 +232,8 @@ In Claude Code, type `/agentopology` — or just ask naturally:
 Say **"I want a code review team with an analyzer, security scanner, and reviewer"** — the skill:
 
 1. Generates the `.at` file with the right syntax
-2. Validates it against 103 rules
-3. Scaffolds it to Claude Code, OpenClaw, Cursor, or any target
+2. Validates it against 112 rules
+3. Scaffolds it to Claude Code (or an experimental target: Codex, Cursor)
 
 **Full agent team in under 2 minutes.** No docs to read. No syntax to memorize. You describe what you want, the skill handles the rest.
 
@@ -249,7 +247,7 @@ You have a working `.at` file and want to make it better? Just tell the skill wh
 - **"Add a hook that formats code after every write"** — generates the hook block with the right lifecycle event
 - **"Add an MCP server for GitHub"** — adds the server config with environment variables
 - **"Add a quality gate between the builder and reviewer"** — inserts a gate with halt-on-fail
-- **"Switch the target to OpenClaw"** — re-scaffolds the entire topology for a different platform
+- **"Switch the target to Codex"** — re-scaffolds the entire topology for an experimental target
 
 The workflow is always the same: **describe the change → the skill updates the `.at` file → validates → re-scaffolds.** You never touch config files manually.
 
@@ -323,15 +321,11 @@ This defines three agents, their tools and memory, a quality gate, and a flow wi
 | Target | Command | What It Generates |
 |--------|---------|-------------------|
 | **Claude Code** | `--target claude-code` | `.claude/agents/`, `.claude/skills/`, `.mcp.json`, `.claude/settings.json` (the event-driven host) |
-| **Claude Workflow** | `--target claude-workflow` | `<topology>.workflow.js` (deterministic fan-out rung) + `-SEAM.md`, `-README.md`, `-LOSSY-REPORT.md` |
-| **OpenClaw** | `--target openclaw` | `.openclaw/soul.md`, `.openclaw/skills/`, `.openclaw/config.json` |
-| **Codex** | `--target codex` | `.codex/config.toml`, `AGENTS.md` |
-| **Cursor** | `--target cursor` | `.cursor/rules/*.mdc`, `.cursor/mcp.json`, `.cursor/hooks.json` |
-| **Gemini CLI** | `--target gemini-cli` | `.gemini/`, `AGENTS.md` |
-| **Copilot** | `--target copilot-cli` | `.github/agents/*.agent.md`, `.github/copilot-instructions.md` |
-| **Kiro** | `--target kiro` | `.kiro/agents/*.json`, `.kiro/steering/` |
+| **Claude Workflow** (experimental) | `--target claude-workflow` | `<topology>.workflow.js` (deterministic fan-out rung) + `-SEAM.md`, `-README.md`, `-LOSSY-REPORT.md` |
+| **Codex** (experimental) | `--target codex` | `.codex/config.toml`, `AGENTS.md` |
+| **Cursor** (experimental) | `--target cursor` | `.cursor/rules/*.mdc`, `.cursor/mcp.json`, `.cursor/hooks.json` |
 
-Every binding is ground-truth validated against real-world configs from production repos.
+Claude Code is the supported target. The experimental ones are kept, not verified the way claude-code is. `gemini-cli`, `copilot-cli`, `openclaw` and `kiro` were removed in 0.10.0 (use 0.9.x for them).
 
 ---
 
@@ -566,7 +560,7 @@ import { parse, validate, bindings } from "agentopology";
 // Parse
 const ast = parse(atSource);
 
-// Validate (103 built-in rules, V1-V103)
+// Validate (112 built-in rules, V1-V112)
 const issues = validate(ast);
 
 // Scaffold — generate platform files
@@ -624,7 +618,7 @@ You can `agentopology visualize` it into an interactive graph. You can hand it t
 | **Switch platforms** | Rewrite everything | Change `--target` |
 | **Add an agent** | Update 5-12 files across 3 tools | Add 4 lines to `.at` file |
 | **See the architecture** | Read YAML, JSON, TOML, Markdown across 6 dirs | One `.at` file. Or `visualize` it. |
-| **Validate** | Hope for the best | 103 built-in rules catch errors before deploy |
+| **Validate** | Hope for the best | 112 built-in rules catch errors before deploy |
 | **Onboard someone** | "Read these 15 files and figure it out" | "Read this `.at` file" |
 | **Version control** | Diff 47 generated files | Diff one `.at` file |
 | **Move to a new tool** | Start over | `--target new-tool` |
@@ -646,7 +640,7 @@ You can `agentopology visualize` it into an interactive graph. You can hand it t
 ## CLI Reference
 
 ```
-agentopology validate <file>              Validate an .at file (103 rules)
+agentopology validate <file>              Validate an .at file (112 rules)
 agentopology plan <file>                  Resolve for interpreted execution — no files written
 agentopology scaffold <file> --target <t> Generate platform configs
 agentopology sync <file> --target <t> --dir <d>  Sync platform files back to .at
@@ -655,6 +649,10 @@ agentopology visualize <file>             Interactive topology graph (+ cross-li
 agentopology visualize-brain <folder>     Render a brain vault as an Obsidian-style graph (no Obsidian)
 agentopology export <file> --format <fmt> Export as markdown, mermaid, json, ascii, or brief
 agentopology info <file>                  Topology analysis and suggestions
+agentopology guard <file> --check [--dir <d>]   What the project enforces today: refuse / none / hope per gate
+agentopology guard <file> --target claude-code [--dir <d>] [--dry-run]   Write only the guards (hook scripts, gates, checks, settings hooks and permissions) into a hand-built project
+agentopology inventory [<dir>]                  What is live in the project, as JSON (writes nothing)
+agentopology validate <file> --inventory <dir>  Coverage: live things the .at accounts for; unmapped, missing
 agentopology targets                      List supported platforms
 agentopology docs [topic]                 Language reference (43 topics)
 ```

package/dist/__tests__/e2e/action-guard.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Guards for script steps (N38). A gate whose `before:` is an action (a script
+ * step) used to compile to nothing: V25 said "invoke it from your playbook" and
+ * a session ran the step whether or not the gate held. Now one generated
+ * script, before-action.sh, refuses the step's Bash command (exit 2) until the
+ * ledger shows the gate's `after:` step finished ok for the same unit.
+ *
+ * The tests scaffold a small topology into a temp dir and run the generated
+ * script the way Claude Code runs a hook: a shell, a subfolder as the current
+ * directory, CLAUDE_PROJECT_DIR set, the event's JSON on stdin.
+ */
+export {};
+//# sourceMappingURL=action-guard.test.d.ts.map

package/dist/__tests__/e2e/action-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-guard.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/e2e/action-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/__tests__/e2e/action-guard.test.js

@@ -0,0 +1,299 @@
+/**
+ * Guards for script steps (N38). A gate whose `before:` is an action (a script
+ * step) used to compile to nothing: V25 said "invoke it from your playbook" and
+ * a session ran the step whether or not the gate held. Now one generated
+ * script, before-action.sh, refuses the step's Bash command (exit 2) until the
+ * ledger shows the gate's `after:` step finished ok for the same unit.
+ *
+ * The tests scaffold a small topology into a temp dir and run the generated
+ * script the way Claude Code runs a hook: a shell, a subfolder as the current
+ * directory, CLAUDE_PROJECT_DIR set, the event's JSON on stdin.
+ */
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { spawnSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import { dirname, join } from "node:path";
+import { parse } from "../../parser/index.js";
+import { validate } from "../../parser/validator.js";
+import { serializeAST as serialize } from "../../import/serializer.js";
+import { claudeCodeBinding } from "../../bindings/claude-code.js";
+import { checkGuards } from "../../guard/check.js";
+const hasJq = spawnSync("/bin/sh", ["-c", "command -v jq"]).status === 0;
+const topology = (extra = "", gate = `after: render\n      before: publish\n      ledger: trace`) => `topology ship : [pipeline] {
+  meta { version: "1.0.0" description: "Render then publish" }
+  orchestrator { model: sonnet handles: [render, publish] }
+  action render {
+    kind: external
+    commands: ["./tool render"]
+  }
+  action publish {
+    kind: external
+    commands: ["./tool publish", "./tool republish"]
+    unit-from: "./tool (?:re)?publish (\\S+)"
+  }
+  records {
+    record trace { path: "logs/{unit}/trace.jsonl" }
+  }
+  gates {
+    gate publish-ready {
+      ${gate}
+      on-fail: halt
+    }
+  }
+  flow { render -> publish }
+${extra}}
+`;
+let root;
+const at = (p) => join(root, p);
+const SCRIPT = ".claude/skills/ship/scripts/before-action.sh";
+function scaffold(src) {
+    const ast = parse(src);
+    for (const f of claudeCodeBinding.scaffold(ast)) {
+        fs.mkdirSync(dirname(at(f.path)), { recursive: true });
+        fs.writeFileSync(at(f.path), f.content);
+        if (f.executable)
+            fs.chmodSync(at(f.path), 0o755);
+    }
+    fs.mkdirSync(at("src/deep"), { recursive: true });
+    return ast;
+}
+function hook(stdin, command = `bash "$CLAUDE_PROJECT_DIR/${SCRIPT}"`) {
+    return spawnSync("/bin/sh", ["-c", command], {
+        cwd: at("src/deep"),
+        input: stdin,
+        env: { ...process.env, CLAUDE_PROJECT_DIR: root },
+        encoding: "utf8",
+        timeout: 20_000,
+    });
+}
+const bash = (command) => JSON.stringify({ hook_event_name: "PreToolUse", tool_name: "Bash", tool_input: { command } });
+const ledger = (unit, lines) => {
+    fs.mkdirSync(at(`logs/${unit}`), { recursive: true });
+    fs.writeFileSync(at(`logs/${unit}/trace.jsonl`), lines.map((l) => JSON.stringify(l)).join("\n") + "\n");
+};
+const rec = (step, ok, unit) => ({ step, ...(unit ? { unit } : {}), ok, at: "2026-01-01T00:00:00Z" });
+beforeEach(() => { root = fs.mkdtempSync(join(os.tmpdir(), "at-action-guard-")); });
+afterEach(() => fs.rmSync(root, { recursive: true, force: true }));
+describe.skipIf(!hasJq)("[N38] before-action.sh refuses a script step until the ledger shows its gate held", () => {
+    beforeEach(() => { scaffold(topology()); });
+    it("[N38] AG1 is wired as a PreToolUse Bash entry with onFailure block, naming the script by $CLAUDE_PROJECT_DIR", () => {
+        const settings = JSON.parse(fs.readFileSync(at(".claude/settings.json"), "utf8"));
+        expect(settings.hooks.PreToolUse).toContainEqual({
+            matcher: "Bash",
+            hooks: [{ type: "command", command: `bash "$CLAUDE_PROJECT_DIR/${SCRIPT}"`, onFailure: "block" }],
+        });
+    });
+    it("[N38] AG2 no ledger record for the step: exit 2, stderr names the gate, step, unit and ledger path", () => {
+        const r = hook(bash("./tool publish ep42"));
+        expect(r.status).toBe(2);
+        expect(r.stderr).toContain("publish-ready");
+        expect(r.stderr).toContain("render");
+        expect(r.stderr).toContain("ep42");
+        expect(r.stderr).toContain("logs/ep42/trace.jsonl");
+    });
+    it("[N38] AG3 an ok record for the same unit: exit 0", () => {
+        ledger("ep42", [rec("render", true, "ep42")]);
+        expect(hook(bash("./tool publish ep42")).status).toBe(0);
+        expect(hook(bash("./tool republish ep42")).status).toBe(0);
+    });
+    it("[N38] AG4 an ok record for another unit does not open this unit's gate", () => {
+        ledger("ep41", [rec("render", true, "ep41")]);
+        ledger("ep42", [rec("render", true, "ep41")]);
+        expect(hook(bash("./tool publish ep42")).status).toBe(2);
+    });
+    it("[N38] AG5 the LAST record decides: ok:false after an earlier ok is a deny", () => {
+        ledger("ep42", [rec("render", true, "ep42"), rec("render", false, "ep42")]);
+        expect(hook(bash("./tool publish ep42")).status).toBe(2);
+    });
+    it("[N38] AG5 a later ok after an earlier failure opens the gate", () => {
+        ledger("ep42", [rec("render", false, "ep42"), rec("render", true, "ep42")]);
+        expect(hook(bash("./tool publish ep42")).status).toBe(0);
+    });
+    it("[N38] AG6 a command that matches no guarded action: exit 0", () => {
+        expect(hook(bash("ls -la")).status).toBe(0);
+        expect(hook(bash("./tool render ep42")).status).toBe(0);
+        expect(hook(bash("./tool publishing ep42")).status).toBe(0);
+    });
+    it("[N38] AG7 a missing ledger file is a deny", () => {
+        expect(fs.existsSync(at("logs"))).toBe(false);
+        expect(hook(bash("./tool publish ep42")).status).toBe(2);
+    });
+    it("[N38] AG8 bad JSON on stdin: exit 2", () => {
+        expect(hook("not json {").status).toBe(2);
+        expect(hook("").status).toBe(2);
+    });
+    it("[N38] AG9 leading VAR=value assignments are stripped before matching", () => {
+        expect(hook(bash("DEBUG=1 TOKEN='a b' ./tool publish ep42")).status).toBe(2);
+        ledger("ep42", [rec("render", true, "ep42")]);
+        expect(hook(bash("DEBUG=1 TOKEN='a b' ./tool publish ep42")).status).toBe(0);
+    });
+    it("[N38] AG10 a unit that would climb out of the project is a deny, not a path", () => {
+        const r = hook(bash("./tool publish ../../etc"));
+        expect(r.status).toBe(2);
+    });
+    it("[N38] AG11 fails closed when CLAUDE_PROJECT_DIR is unset", () => {
+        const r = spawnSync("/bin/sh", ["-c", `bash ${at(SCRIPT)}`], {
+            input: bash("ls"), env: { PATH: process.env.PATH }, encoding: "utf8",
+        });
+        expect(r.status).toBe(2);
+    });
+    it("[N38] AG12 a gate with run: also runs its wrapper, and a failing check denies", () => {
+        scaffold(topology("", `after: render\n      before: publish\n      ledger: trace\n      run: "scripts/check.sh"`));
+        ledger("ep42", [rec("render", true, "ep42")]);
+        // the scaffolded wrapper is a stub that blocks until it is written
+        expect(hook(bash("./tool publish ep42")).status).toBe(2);
+        fs.writeFileSync(at(".claude/skills/ship/scripts/check.sh"), "#!/usr/bin/env bash\nexit 0\n", { mode: 0o755 });
+        expect(hook(bash("./tool publish ep42")).status).toBe(0);
+        fs.writeFileSync(at(".claude/skills/ship/scripts/check.sh"), "#!/usr/bin/env bash\nexit 1\n", { mode: 0o755 });
+        expect(hook(bash("./tool publish ep42")).status).toBe(2);
+    });
+});
+describe("[N38] the language: records, ledger and unit-from", () => {
+    it("[N38] AG13 parse and serialize round-trip", () => {
+        const ast = parse(topology());
+        expect(ast.records).toEqual([{ id: "trace", path: "logs/{unit}/trace.jsonl" }]);
+        const publish = ast.nodes.find((n) => n.id === "publish");
+        expect(publish.unitFrom).toBe("./tool (?:re)?publish (\\S+)");
+        const gate = ast.nodes.find((n) => n.id === "publish-ready");
+        expect(gate.ledger).toBe("trace");
+        const again = parse(serialize(ast));
+        expect(again.records).toEqual(ast.records);
+        expect(again.nodes.find((n) => n.id === "publish").unitFrom).toBe(publish.unitFrom);
+        expect(again.nodes.find((n) => n.id === "publish-ready").ledger).toBe("trace");
+    });
+    it("[N38] AG14 V102 accepts the new names and still refuses unknown ones", () => {
+        const rules = (src) => validate(parse(src)).filter((r) => r.rule === "V102");
+        expect(rules(topology())).toEqual([]);
+        expect(rules(topology().replace("ledger: trace", "ledgr: trace")).length).toBe(1);
+    });
+});
+describe("[N38] validation", () => {
+    const findings = (src, rule) => validate(parse(src)).filter((r) => r.rule === rule);
+    it("[N38] AG15 V25 no longer warns for a bounce-back gate before an action with commands, and still does for one without", () => {
+        const bounce = (src) => src.replace("on-fail: halt", "on-fail: bounce-back");
+        expect(findings(bounce(topology()), "V25")).toEqual([]);
+        const noCommands = bounce(topology()).replace(/(action publish \{\n    kind: external\n)    commands: \[[^\]]*\]\n/, "$1");
+        expect(findings(noCommands, "V25").length).toBe(1);
+    });
+    it("[N38] AG16 V110 warns when a gate before an action has neither ledger nor run:", () => {
+        const src = topology().replace("records {\n    record trace { path: \"logs/{unit}/trace.jsonl\" }\n  }\n", "").replace("      ledger: trace\n", "");
+        const hits = findings(src, "V110");
+        expect(hits.length).toBe(1);
+        expect(hits[0].level).toBe("warning");
+        expect(hits[0].node).toBe("publish-ready");
+        expect(findings(topology(), "V110")).toEqual([]);
+    });
+    it("[N38] AG17 V110 does not fire when the single record is the default ledger", () => {
+        expect(findings(topology().replace("      ledger: trace\n", ""), "V110")).toEqual([]);
+    });
+    it("[N38] AG18 V111 errors on a unit-from that is not a regex or has no capture group", () => {
+        const bad = findings(topology().replace(/unit-from: ".*"/, 'unit-from: "./tool (publish"'), "V111");
+        expect(bad.length).toBe(1);
+        expect(bad[0].level).toBe("error");
+        const none = findings(topology().replace(/unit-from: ".*"/, 'unit-from: "./tool publish \\\\S+"'), "V111");
+        expect(none.length).toBe(1);
+        expect(none[0].message).toMatch(/capture group/);
+        expect(findings(topology(), "V111")).toEqual([]);
+    });
+    it("[N38] AG19 V112 errors on a ledger that names no record", () => {
+        const hits = findings(topology().replace("ledger: trace", "ledger: nope"), "V112");
+        expect(hits.length).toBe(1);
+        expect(hits[0].level).toBe("error");
+        expect(hits[0].message).toContain("nope");
+    });
+    it("[N38] AG19 V112 errors on an unsafe record path, and allows {unit}", () => {
+        expect(findings(topology().replace("logs/{unit}/trace.jsonl", "../{unit}/trace.jsonl"), "V112").length).toBe(1);
+        expect(findings(topology().replace("logs/{unit}/trace.jsonl", "/abs/trace.jsonl"), "V112").length).toBe(1);
+        expect(findings(topology(), "V112")).toEqual([]);
+    });
+    it("[N38] AG19 V112 errors when a gate needs a ledger, names none, and several records exist", () => {
+        const two = topology().replace("  }\n  gates", '    record audit { path: "logs/audit.jsonl" }\n  }\n  gates').replace("      ledger: trace\n", "");
+        const hits = findings(two, "V112");
+        expect(hits.length).toBe(1);
+        expect(hits[0].message).toMatch(/more than one record|which/);
+    });
+});
+describe.skipIf(!hasJq)("[N38] guard --check", () => {
+    it("[N38] AG20 reports refuse by hook when the Bash entry and the script's line are on disk, with the scope note", () => {
+        const ast = scaffold(topology());
+        const g = checkGuards(ast, root).items.find((i) => i.id === "publish-ready");
+        expect(g).toMatchObject({ kind: "gate", strength: "refuse", by: "hook" });
+        expect(g.notes.join(" ")).toContain("refuses in Claude Code sessions only; a step run outside Claude is covered by step check (by: code)");
+    });
+    it("[N38] AG20 reports none when the settings entry is gone", () => {
+        const ast = scaffold(topology());
+        const s = JSON.parse(fs.readFileSync(at(".claude/settings.json"), "utf8"));
+        delete s.hooks;
+        fs.writeFileSync(at(".claude/settings.json"), JSON.stringify(s));
+        const g = checkGuards(ast, root).items.find((i) => i.id === "publish-ready");
+        expect(g.strength).toBe("none");
+    });
+    it("[N38] AG20 reports none when the script has no line for the gate", () => {
+        const ast = scaffold(topology());
+        fs.writeFileSync(at(SCRIPT), "#!/usr/bin/env bash\nexit 0\n");
+        expect(checkGuards(ast, root).items.find((i) => i.id === "publish-ready").strength).toBe("none");
+    });
+});
+describe.skipIf(!hasJq)("[N42] before-action.sh sees a step inside a chained command", () => {
+    beforeEach(() => { scaffold(topology()); });
+    it("[N42] AG21 a step after cd, ;, ||, | or on a later line is refused while its gate is unmet", () => {
+        for (const c of [
+            "cd sub && ./tool publish ep1",
+            "true; ./tool publish ep1",
+            "make x || ./tool publish ep1",
+            "./tool lint | ./tool publish ep1",
+            "echo hi\n./tool publish ep1",
+            "(cd sub && ./tool publish ep1)",
+            "cd sub && DEBUG=1 time ./tool publish ep1",
+            "{ ./tool publish ep1; }",
+            "./tool lint & ./tool publish ep1",
+        ]) {
+            const r = hook(bash(c));
+            expect(r.status, c).toBe(2);
+            expect(r.stderr, c).toContain("publish-ready");
+        }
+    });
+    it("[N42] AG22 with an ok record the chained step runs, and the unit is read from the right segment", () => {
+        ledger("ep1", [rec("render", true, "ep1")]);
+        expect(hook(bash("cd sub && ./tool publish ep1")).status).toBe(0);
+        const r = hook(bash("cd sub && ./tool publish ep2"));
+        expect(r.status).toBe(2);
+        expect(r.stderr).toContain("ep2");
+    });
+    it("[N42] AG23 a command word that is not at a segment start is not a step", () => {
+        expect(hook(bash("echo ./tool publish ep1")).status).toBe(0);
+        expect(hook(bash("cd sub && echo ./tool publish ep1")).status).toBe(0);
+    });
+    it("[N42] AG24 two guarded steps in one command need both gates", () => {
+        const two = topology().replace("  records {", '  action archive {\n    kind: external\n    commands: ["./tool archive"]\n    unit-from: "./tool archive (\\S+)"\n  }\n  records {').replace("  }\n  flow", "    gate archive-ready {\n      after: publish\n      before: archive\n      ledger: trace\n      on-fail: halt\n    }\n  }\n  flow");
+        scaffold(two);
+        const cmd = "./tool publish ep1 && ./tool archive ep1";
+        ledger("ep1", [rec("render", true, "ep1")]);
+        const r = hook(bash(cmd));
+        expect(r.status).toBe(2);
+        expect(r.stderr).toContain("archive-ready");
+        ledger("ep1", [rec("publish", true, "ep1")]);
+        const r2 = hook(bash(cmd));
+        expect(r2.status).toBe(2);
+        expect(r2.stderr).toContain("publish-ready");
+        ledger("ep1", [rec("render", true, "ep1"), rec("publish", true, "ep1")]);
+        const ok = hook(bash(cmd));
+        expect(ok.stderr).toBe("");
+        expect(ok.status).toBe(0);
+    });
+    it("[N42] AG26 a check script that reads stdin does not swallow the later segments", () => {
+        const two = topology().replace("    gate publish-ready {", '    gate render-ready {\n      before: render\n      run: "scripts/check.sh"\n      on-fail: halt\n    }\n    gate publish-ready {');
+        scaffold(two);
+        fs.writeFileSync(at(".claude/skills/ship/scripts/check.sh"), "#!/usr/bin/env bash\ncat >/dev/null\nexit 0\n", { mode: 0o755 });
+        const r = hook(bash("./tool render && ./tool publish ep1"));
+        expect(r.status).toBe(2);
+        expect(r.stderr).toContain("publish-ready");
+    });
+    it("[N42] AG25 guard --check notes that an indirect run is not seen", () => {
+        const ast = scaffold(topology());
+        const g = checkGuards(ast, root).items.find((i) => i.id === "publish-ready");
+        expect(g.notes.join(" ")).toContain("a command that runs the step indirectly (bash -c, eval, a script that calls it) is not seen");
+    });
+});
+//# sourceMappingURL=action-guard.test.js.map

package/dist/__tests__/e2e/action-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-guard.test.js","sourceRoot":"","sources":["../../../src/__tests__/e2e/action-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,YAAY,IAAI,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAEzE,MAAM,QAAQ,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,2DAA2D,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;QAiB7F,IAAI;;;;;EAKV,KAAK;CACN,CAAC;AAEF,IAAI,IAAY,CAAC;AACjB,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAE9D,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,UAAU;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,OAAO,GAAG,6BAA6B,MAAM,GAAG;IAC3E,OAAO,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;QAC3C,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE;QACjD,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;AACL,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAChI,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE;IAC/C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAC1G,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAW,EAAE,IAAa,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAEhI,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEnE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAChH,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,EAAE,CAAC,8GAA8G,EAAE,GAAG,EAAE;QACtH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC;YAC/C,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,6BAA6B,MAAM,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;SAClG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,GAAG,EAAE;QAC5G,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC3D,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM;SACrE,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,0FAA0F,CAAC,CAAC,CAAC;QACnH,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,mEAAmE;QACnE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,sCAAsC,CAAC,EAAE,+BAA+B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,sCAAsC,CAAC,EAAE,+BAA+B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAA0B,CAAC;QACnF,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAwB,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAA2B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/G,MAAM,CAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAEpG,EAAE,CAAC,sHAAsH,EAAE,GAAG,EAAE;QAC9H,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACrF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,qEAAqE,EAAE,IAAI,CAAC,CAAC;QAC3H,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC,0EAA0E,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;QACpJ,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,EAAE,MAAM,CAAC,CAAC;QACpG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3G,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChH,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3G,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,6DAA6D,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;QACnJ,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,8GAA8G,EAAE,GAAG,EAAE;QACtH,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAE,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,qGAAqG,CAAC,CAAC;IAC7I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC,KAAK,CAAC;QACf,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAE,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAC9D,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC1F,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,KAAK,MAAM,CAAC,IAAI;YACd,8BAA8B;YAC9B,0BAA0B;YAC1B,8BAA8B;YAC9B,kCAAkC;YAClC,6BAA6B;YAC7B,gCAAgC;YAChC,2CAA2C;YAC3C,yBAAyB;YACzB,kCAAkC;SACnC,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC,OAAO,CAC5B,aAAa,EACb,oIAAoI,CACrI,CAAC,OAAO,CAAC,aAAa,EAAE,qIAAqI,CAAC,CAAC;QAChK,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,0CAA0C,CAAC;QACvD,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC,OAAO,CAC5B,0BAA0B,EAC1B,oIAAoI,CACrI,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,sCAAsC,CAAC,EAAE,+CAA+C,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/H,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAE,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,6FAA6F,CAAC,CAAC;IACrI,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/e2e/conformance.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Conformance v0: the claude-code binding's generated hooks, run against
+ * Claude Code's hook contract (src/conformance/claude-code.ts, checked against
+ * the docs for Claude Code 2.1.319).
+ *
+ * For every example and fixture: the settings.json hooks and each agent's
+ * frontmatter hooks are checked statically, then every command hook is run
+ * the way Claude Code runs it (a shell, the session's current directory,
+ * CLAUDE_PROJECT_DIR set, the event's JSON on stdin). The working directory is
+ * a subfolder on purpose: hooks run where Claude is, not at the project root.
+ */
+export {};
+//# sourceMappingURL=conformance.test.d.ts.map

package/dist/__tests__/e2e/conformance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/e2e/conformance.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/__tests__/e2e/conformance.test.js

@@ -0,0 +1,109 @@
+/**
+ * Conformance v0: the claude-code binding's generated hooks, run against
+ * Claude Code's hook contract (src/conformance/claude-code.ts, checked against
+ * the docs for Claude Code 2.1.319).
+ *
+ * For every example and fixture: the settings.json hooks and each agent's
+ * frontmatter hooks are checked statically, then every command hook is run
+ * the way Claude Code runs it (a shell, the session's current directory,
+ * CLAUDE_PROJECT_DIR set, the event's JSON on stdin). The working directory is
+ * a subfolder on purpose: hooks run where Claude is, not at the project root.
+ */
+import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import { spawnSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import { resolve, dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parse } from "../../parser/index.js";
+import { claudeCodeBinding } from "../../bindings/claude-code.js";
+import { checkHooks, checkStdout, payloadFor, unanchoredScript, VERIFIED_ON, HOOK_EVENTS } from "../../conformance/claude-code.js";
+const here = dirname(fileURLToPath(import.meta.url));
+const repo = resolve(here, "../../..");
+const CORPUS = [
+    ...fs.readdirSync(join(repo, "examples")).filter((f) => f.endsWith(".at")).map((f) => join(repo, "examples", f)),
+    join(here, "fixtures/compile.at"),
+    join(here, "fixtures/hazards.at"),
+    join(repo, "kitchen-sink.at"),
+];
+const hasJq = spawnSync("/bin/sh", ["-c", "command -v jq"]).status === 0;
+/** Command hooks from settings.json and from agent frontmatter. */
+function commandHooks(files) {
+    const out = [];
+    const settings = files.find((f) => f.path === ".claude/settings.json");
+    for (const [event, entries] of Object.entries((settings ? JSON.parse(settings.content).hooks : {}) ?? {})) {
+        for (const e of entries) {
+            for (const h of e.hooks)
+                if (h.type === "command" && h.command)
+                    out.push({ event, matcher: e.matcher, command: h.command, where: "settings.json" });
+        }
+    }
+    for (const f of files.filter((x) => x.path.startsWith(".claude/agents/") && x.path.endsWith(".md"))) {
+        const front = f.content.split(/\n---\n/)[0];
+        let event = "";
+        for (const line of front.split("\n")) {
+            const ev = /^ {2}([A-Za-z]+):\s*$/.exec(line);
+            if (ev)
+                event = ev[1];
+            const cmd = /^\s+(?:- )?command: (".*")\s*$/.exec(line);
+            if (cmd && event)
+                out.push({ event: event === "Stop" ? "SubagentStop" : event, command: JSON.parse(cmd[1]), where: f.path });
+        }
+    }
+    return out;
+}
+it(`[N28] [CF0] the contract names the Claude Code version it was checked on (${VERIFIED_ON})`, () => {
+    expect(VERIFIED_ON).toMatch(/^\d+\.\d+\.\d+$/);
+    expect(HOOK_EVENTS.size).toBe(33);
+});
+it("[N28] [CF0] a relative script path is caught; an anchored or absolute one is not", () => {
+    expect(unanchoredScript("bash .claude/skills/t/scripts/x.sh")).toBe(".claude/skills/t/scripts/x.sh");
+    expect(unanchoredScript('bash "$CLAUDE_PROJECT_DIR/.claude/skills/t/scripts/x.sh"')).toBeNull();
+    expect(unanchoredScript("python3 /opt/check.py --strict")).toBeNull();
+    expect(unanchoredScript("echo hi")).toBeNull();
+});
+for (const file of CORPUS) {
+    const name = file.replace(repo + "/", "");
+    describe(`conformance: ${name}`, () => {
+        const files = claudeCodeBinding.scaffold(parse(fs.readFileSync(file, "utf8")));
+        const settings = files.find((f) => f.path === ".claude/settings.json");
+        const hooks = commandHooks(files);
+        let root;
+        let sub;
+        beforeAll(() => {
+            root = fs.mkdtempSync(join(os.tmpdir(), "at-conformance-"));
+            for (const f of files) {
+                const p = join(root, f.path);
+                fs.mkdirSync(dirname(p), { recursive: true });
+                fs.writeFileSync(p, f.content);
+                if (f.executable)
+                    fs.chmodSync(p, 0o755);
+            }
+            sub = join(root, "src/deep");
+            fs.mkdirSync(sub, { recursive: true });
+        });
+        afterAll(() => fs.rmSync(root, { recursive: true, force: true }));
+        it("[N28] [CF1] settings.json hooks match the contract (events, matchers, handler fields, onFailure, anchored paths)", () => {
+            expect(checkHooks(settings ? JSON.parse(settings.content).hooks ?? {} : {})).toEqual([]);
+        });
+        it("[N28] [CF1] agent frontmatter command hooks name their scripts by an anchored path", () => {
+            const loose = hooks.filter((h) => h.where !== "settings.json").map((h) => unanchoredScript(h.command)).filter(Boolean);
+            expect(loose).toEqual([]);
+        });
+        it.skipIf(!hasJq)("[N28] [CF2] every command hook runs from a subfolder: found, exits 0 or 2, and its stdout is valid for its event", () => {
+            const results = hooks.map((h) => {
+                const r = spawnSync("/bin/sh", ["-c", h.command], {
+                    cwd: sub,
+                    input: JSON.stringify(payloadFor(h.event, sub, h.matcher)),
+                    env: { ...process.env, CLAUDE_PROJECT_DIR: root },
+                    encoding: "utf8",
+                    timeout: 20_000,
+                });
+                const bad = r.status !== 0 && r.status !== 2 ? `exit ${r.status}: ${r.stderr.trim().split("\n").pop()}` : r.status === 0 ? checkStdout(h.event, r.stdout) : null;
+                return bad ? `${h.event} ${h.matcher ?? ""} ${h.command} → ${bad}` : null;
+            });
+            expect(results.filter(Boolean)).toEqual([]);
+        });
+    });
+}
+//# sourceMappingURL=conformance.test.js.map

package/dist/__tests__/e2e/conformance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.test.js","sourceRoot":"","sources":["../../../src/__tests__/e2e/conformance.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAEnI,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACvC,MAAM,MAAM,GAAG;IACb,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAChH,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACjC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACjC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAC9B,CAAC;AACF,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAIzE,mEAAmE;AACnE,SAAS,YAAY,CAAC,KAA+C;IACnE,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1G,KAAK,MAAM,CAAC,IAAI,OAAwF,EAAE,CAAC;YACzG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,EAAE;gBAAE,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,GAAG,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,EAAE,CAAC,6EAA6E,WAAW,GAAG,EAAE,GAAG,EAAE;IACnG,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/C,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACrG,MAAM,CAAC,gBAAgB,CAAC,0DAA0D,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChG,MAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,IAAI,EAAE,EAAE,GAAG,EAAE;QACpC,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAY,CAAC;QACjB,IAAI,GAAW,CAAC;QAEhB,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC5D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC7B,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC,UAAU;oBAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAElE,EAAE,CAAC,kHAAkH,EAAE,GAAG,EAAE;YAC1H,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;YAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,kHAAkH,EAAE,GAAG,EAAE;YACzI,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;oBAChD,GAAG,EAAE,GAAG;oBACR,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC1D,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE;oBACjD,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjK,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/__tests__/e2e/contract-drift.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Claude Code's hook contract as a committed snapshot (N37).
+ *
+ * spec/claude-code/hooks-contract.json is extracted from the hooks reference
+ * page by scripts/claude-code-drift.mjs; the minimum version's contract
+ * (hooks-contract.2.1.295.json) is derived from it by dropping what requires a
+ * newer version. These tests are offline: they hold the code to the snapshot,
+ * and the script holds the snapshot to the live page.
+ */
+export {};
+//# sourceMappingURL=contract-drift.test.d.ts.map

package/dist/__tests__/e2e/contract-drift.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-drift.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/e2e/contract-drift.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}