agentvigil 1.0.0

package/dist/commands/uninstall.js

@@ -0,0 +1,13 @@
+import { logger } from '../utils/logger.js';
+import { unregisterHooks } from '../hooks/hook-manager.js';
+/**
+ * Removes all AgentVigil hook entries from ~/.claude/settings.json.
+ * Only removes commands registered by AgentVigil — all other hooks
+ * (including other tools' hooks) are left completely untouched.
+ */
+export async function runUninstall() {
+    logger.info('Removing AgentVigil hooks from ~/.claude/settings.json...');
+    await unregisterHooks();
+    logger.info('Verify with: cat ~/.claude/settings.json | grep -i agentvigil');
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/commands/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACzE,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;AAC/E,CAAC"}

package/dist/crypto/encryption.d.ts

@@ -0,0 +1,11 @@
+export interface KeyPair {
+    publicKey: string;
+    secretKey: string;
+}
+export declare function generateKeyPair(): KeyPair;
+/** Loads the persisted X25519 keypair from ~/.agentvigil/keys.json, generating and saving one on first run. */
+export declare function loadOrCreateKeyPair(): Promise<KeyPair>;
+export declare function deriveSharedSecret(ourSecretKey: string, theirPublicKey: string): string;
+export declare function encrypt(plaintext: string, sharedSecret: string): string;
+export declare function decrypt(ciphertext: string, sharedSecret: string): string;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/crypto/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/crypto/encryption.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAgB,eAAe,IAAI,OAAO,CAMzC;AAED,+GAA+G;AAC/G,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAe5D;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAMvF;AAED,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAavE;AAED,wBAAgB,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAWxE"}

package/dist/crypto/encryption.js

@@ -0,0 +1,57 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import nacl from 'tweetnacl';
+import { logger } from '../utils/logger.js';
+// Use Node's built-in Buffer for base64 — avoids tweetnacl-util ESM compat issues on Node 26.
+const encodeBase64 = (bytes) => Buffer.from(bytes).toString('base64');
+const decodeBase64 = (str) => new Uint8Array(Buffer.from(str, 'base64'));
+const KEYS_PATH = path.join(os.homedir(), '.agentvigil', 'keys.json');
+export function generateKeyPair() {
+    const keyPair = nacl.box.keyPair();
+    return {
+        publicKey: encodeBase64(keyPair.publicKey),
+        secretKey: encodeBase64(keyPair.secretKey),
+    };
+}
+/** Loads the persisted X25519 keypair from ~/.agentvigil/keys.json, generating and saving one on first run. */
+export async function loadOrCreateKeyPair() {
+    try {
+        const raw = await fs.readFile(KEYS_PATH, 'utf8');
+        const stored = JSON.parse(raw);
+        logger.info('Loaded existing keypair from keys.json');
+        return { publicKey: stored.public_key, secretKey: stored.secret_key };
+    }
+    catch {
+        const keyPair = generateKeyPair();
+        const store = { public_key: keyPair.publicKey, secret_key: keyPair.secretKey };
+        await fs.mkdir(path.dirname(KEYS_PATH), { recursive: true });
+        await fs.writeFile(KEYS_PATH, JSON.stringify(store, null, 2), { mode: 0o600 });
+        await fs.chmod(KEYS_PATH, 0o600);
+        logger.info('Generated new keypair (first run)');
+        return keyPair;
+    }
+}
+export function deriveSharedSecret(ourSecretKey, theirPublicKey) {
+    const sharedSecret = nacl.box.before(decodeBase64(theirPublicKey), decodeBase64(ourSecretKey));
+    return encodeBase64(sharedSecret);
+}
+export function encrypt(plaintext, sharedSecret) {
+    const nonce = nacl.randomBytes(nacl.box.nonceLength);
+    const messageUint8 = new TextEncoder().encode(plaintext);
+    const encrypted = nacl.box.after(messageUint8, nonce, decodeBase64(sharedSecret));
+    const combined = new Uint8Array(nonce.length + encrypted.length);
+    combined.set(nonce);
+    combined.set(encrypted, nonce.length);
+    return encodeBase64(combined);
+}
+export function decrypt(ciphertext, sharedSecret) {
+    const combined = decodeBase64(ciphertext);
+    const nonce = combined.slice(0, nacl.box.nonceLength);
+    const encrypted = combined.slice(nacl.box.nonceLength);
+    const decrypted = nacl.box.open.after(encrypted, nonce, decodeBase64(sharedSecret));
+    if (!decrypted)
+        throw new Error('Decryption failed — wrong key or tampered message');
+    return new TextDecoder().decode(decrypted);
+}
+//# sourceMappingURL=encryption.js.map

package/dist/crypto/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/crypto/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,8FAA8F;AAC9F,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1F,MAAM,YAAY,GAAG,CAAC,GAAW,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAYtE,MAAM,UAAU,eAAe;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1C,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,KAAK,GAAa,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QACzF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,cAAsB;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAClC,YAAY,CAAC,cAAc,CAAC,EAC5B,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAC;IACF,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,YAAoB;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAC9B,YAAY,EACZ,KAAK,EACL,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,UAAkB,EAAE,YAAoB;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CACnC,SAAS,EACT,KAAK,EACL,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAC;IACF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACrF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/hooks/hook-handler.d.ts

@@ -0,0 +1,18 @@
+import type { AgentEvent, HookPayload } from '../types.js';
+export declare function handleHook(eventType: string): Promise<void>;
+export declare function parseHookPayload(raw: string): HookPayload;
+export declare function buildAgentEvent(eventType: string, payload: HookPayload): AgentEvent;
+export interface PermissionDetails {
+    toolName: string;
+    toolInput: string;
+    fullText: string;
+}
+/**
+ * Reads the JSONL transcript and returns the tool name/input behind the most
+ * recent permission prompt, formatted as the human-readable command text
+ * shown on the phone (e.g. "$ rm -rf node_modules" or "Write file: foo.ts").
+ * Falls back to FALLBACK_PERMISSION_DETAILS if the transcript can't be read
+ * or contains no tool_use entry.
+ */
+export declare function getPermissionDetails(transcriptPath: string): Promise<PermissionDetails>;
+//# sourceMappingURL=hook-handler.d.ts.map

package/dist/hooks/hook-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-handler.d.ts","sourceRoot":"","sources":["../../src/hooks/hook-handler.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAkB,WAAW,EAAE,MAAM,aAAa,CAAC;AA4B3E,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0DjE;AA2CD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAUzD;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,UAAU,CAoBnF;AAMD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2B7F"}

package/dist/hooks/hook-handler.js

@@ -0,0 +1,256 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { WebSocket } from 'ws';
+import { logger } from '../utils/logger.js';
+import { getConfig } from '../utils/config.js';
+import { loadOrCreateKeyPair } from '../crypto/encryption.js';
+import { RelayHandler } from '../relay/relay-handler.js';
+import { isBlocklisted } from '../sessions/session-watcher.js';
+const LOG_FILE = path.join(os.homedir(), '.agentvigil', 'hooks.log');
+async function logToFile(type, payload) {
+    const line = `${new Date().toISOString()} [${type}] ${JSON.stringify(payload)}\n`;
+    await fs.appendFile(LOG_FILE, line).catch(() => { });
+}
+const DAEMON_FORWARD_TIMEOUT_MS = 1500;
+const HOOK_TYPES = ['permission_prompt', 'idle_prompt', 'stop', 'subagent_stop'];
+const DEFAULT_MESSAGE = {
+    permission_prompt: 'Permission required',
+    idle_prompt: 'Session idle, waiting for input',
+    stop: 'Session closed',
+    subagent_stop: 'Sub-agent completed',
+};
+const AGENT_EVENT_TYPE = {
+    permission_prompt: 'permission_prompt',
+    idle_prompt: 'idle_waiting',
+    stop: 'session_ended',
+    subagent_stop: 'task_complete',
+};
+export async function handleHook(eventType) {
+    // Log to file FIRST — before any other logic — so we can confirm hooks
+    // are actually firing even if downstream code fails.
+    const raw = await readStdin();
+    await logToFile(eventType, raw);
+    try {
+        const payload = parseHookPayload(raw);
+        if (isBlocklisted(payload.cwd)) {
+            logger.dim(`[${path.basename(payload.cwd)}] Ignoring hook from blocklisted project`);
+            return;
+        }
+        // Sub-agent completions are an internal implementation detail — only the
+        // top-level Stop hook represents the session actually finishing, so
+        // SubagentStop must never reach the session store, the daemon, or ntfy.
+        if (payload.hook_event_name === 'SubagentStop') {
+            logger.dim('Ignoring SubagentStop — sub-agent completions never notify the phone');
+            return;
+        }
+        const event = buildAgentEvent(eventType, payload);
+        if (eventType === 'permission_prompt') {
+            const details = await getPermissionDetails(payload.transcript_path);
+            if (details !== FALLBACK_PERMISSION_DETAILS) {
+                event.message = details.fullText;
+                event.permission_command = details.fullText;
+                event.tool_name = details.toolName;
+                event.tool_input = details.toolInput;
+            }
+        }
+        logger.info(`[${event.project_name}] ${event.type}: ${event.message}`);
+        const config = await getConfig();
+        const keyPair = await loadOrCreateKeyPair();
+        // Forward the event in-process to the long-running daemon (`agentvigil
+        // start`), which holds the live phone WebSocket connection and can relay
+        // it immediately.
+        const forwarded = await forwardToDaemon(event, config.ws_port, keyPair.secretKey);
+        if (!forwarded) {
+            // Daemon isn't running — this short-lived CLI process is the only
+            // chance this event gets to reach ntfy, so push it directly. When the
+            // daemon IS reachable it relays the forwarded event itself, so doing
+            // it here too would double-send every notification.
+            const relay = new RelayHandler({ sendEvent: () => { }, isPhoneConnected: false, getSharedSecret: () => undefined }, config.ntfy_topic);
+            await relay.handleAgentEvent(event);
+        }
+    }
+    catch (err) {
+        logger.error('Failed to handle hook event', err);
+    }
+}
+/**
+ * Sends the event to the daemon's local WebSocket server, authenticated with
+ * the Mac's own secret key (never sent to the phone). Resolves `true` only if
+ * the message was actually handed to the daemon; `false` if the daemon isn't
+ * running (or didn't respond in time), so the caller can fall back to its own
+ * ntfy push.
+ */
+function forwardToDaemon(event, wsPort, localToken) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const finish = (delivered) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(delivered);
+        };
+        let socket;
+        try {
+            socket = new WebSocket(`ws://127.0.0.1:${wsPort}/hook`);
+        }
+        catch {
+            resolve(false);
+            return;
+        }
+        const timer = setTimeout(() => {
+            socket.terminate();
+            finish(false);
+        }, DAEMON_FORWARD_TIMEOUT_MS);
+        let delivered = false;
+        socket.on('open', () => {
+            socket.send(JSON.stringify({ type: 'hook_event', token: localToken, event }));
+            delivered = true;
+            socket.close();
+        });
+        socket.on('close', () => finish(delivered));
+        socket.on('error', () => finish(false));
+    });
+}
+export function parseHookPayload(raw) {
+    const parsed = JSON.parse(raw || '{}');
+    return {
+        session_id: parsed.session_id ?? 'unknown',
+        transcript_path: parsed.transcript_path ?? '',
+        cwd: parsed.cwd ?? process.cwd(),
+        hook_event_name: parsed.hook_event_name ?? '',
+        notification_type: parsed.notification_type,
+        message: parsed.message,
+    };
+}
+export function buildAgentEvent(eventType, payload) {
+    if (!isHookType(eventType)) {
+        throw new Error(`Unknown hook type: ${eventType}`);
+    }
+    const event = {
+        type: AGENT_EVENT_TYPE[eventType],
+        session_id: payload.session_id,
+        project_name: path.basename(payload.cwd),
+        cwd: payload.cwd,
+        agent: 'claude-code',
+        message: payload.message ?? DEFAULT_MESSAGE[eventType],
+        timestamp: new Date().toISOString(),
+    };
+    if (eventType === 'permission_prompt') {
+        event.permission_command = payload.message;
+    }
+    return event;
+}
+function isHookType(value) {
+    return HOOK_TYPES.includes(value);
+}
+const FALLBACK_PERMISSION_DETAILS = {
+    toolName: 'Unknown',
+    toolInput: '',
+    fullText: 'Claude needs your permission',
+};
+/**
+ * Reads the JSONL transcript and returns the tool name/input behind the most
+ * recent permission prompt, formatted as the human-readable command text
+ * shown on the phone (e.g. "$ rm -rf node_modules" or "Write file: foo.ts").
+ * Falls back to FALLBACK_PERMISSION_DETAILS if the transcript can't be read
+ * or contains no tool_use entry.
+ */
+export async function getPermissionDetails(transcriptPath) {
+    if (!transcriptPath)
+        return FALLBACK_PERMISSION_DETAILS;
+    try {
+        const content = await fs.readFile(transcriptPath, 'utf-8');
+        const lines = content.trim().split('\n').filter((l) => l.trim());
+        for (const line of [...lines].reverse()) {
+            try {
+                const entry = JSON.parse(line);
+                const toolUse = extractToolUse(entry);
+                if (toolUse) {
+                    return {
+                        toolName: toolUse.name,
+                        toolInput: JSON.stringify(toolUse.input),
+                        fullText: formatPermissionText(toolUse.name, toolUse.input),
+                    };
+                }
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+    catch {
+        // Transcript missing or unreadable — fall through to the default.
+    }
+    return FALLBACK_PERMISSION_DETAILS;
+}
+/**
+ * Finds the most recent tool_use block in a transcript line, supporting both
+ * the raw `{ tool_name, tool_input }` shape and Claude Code's nested
+ * `{ message: { content: [{ type: 'tool_use', name, input }] } }` shape.
+ */
+function extractToolUse(entry) {
+    if (entry?.type === 'tool_use' || entry?.tool_name) {
+        return {
+            name: entry.tool_name ?? entry.name ?? 'Unknown',
+            input: entry.tool_input ?? entry.input ?? {},
+        };
+    }
+    const blocks = entry?.message?.content;
+    if (Array.isArray(blocks)) {
+        for (let i = blocks.length - 1; i >= 0; i--) {
+            const block = blocks[i];
+            if (block?.type === 'tool_use') {
+                return { name: block.name ?? 'Unknown', input: block.input ?? {} };
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * Formats the tool_use block as the question the terminal shows the user,
+ * e.g. "Do you want to create test.txt?" or "$ rm -rf node_modules".
+ * Claude Code does not persist this question text anywhere in the
+ * transcript — it's rendered client-side from the tool_use block — so it's
+ * reconstructed here from the tool name + input.
+ */
+function formatPermissionText(toolName, input) {
+    switch (toolName) {
+        case 'Bash':
+            return `$ ${input.command ?? ''}`;
+        case 'Write':
+            return `Do you want to create ${fileNameOf(input)}?`;
+        case 'Edit':
+        case 'MultiEdit':
+            return `Do you want to edit ${fileNameOf(input)}?`;
+        case 'Read':
+            return `Read ${fileNameOf(input)}`;
+        case 'WebFetch':
+            return `Fetch URL: ${input.url ?? ''}`;
+        case 'TodoWrite':
+            return 'Update todo list';
+        default:
+            return `${toolName}: ${keyDetailOf(input)}`;
+    }
+}
+/** Extracts just the filename (e.g. "test.txt") from a tool_use input's path. */
+function fileNameOf(input) {
+    const filePath = (input.file_path ?? input.path);
+    return filePath ? path.basename(filePath) : '';
+}
+/** Picks the single most relevant field from a tool_use input for the default case. */
+function keyDetailOf(input) {
+    const value = (input.file_path ?? input.path ?? input.pattern ?? input.command ?? input.url ?? input.query ?? input.description);
+    return value ?? JSON.stringify(input).substring(0, 100);
+}
+async function readStdin() {
+    return new Promise((resolve) => {
+        let data = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (chunk) => (data += chunk));
+        process.stdin.on('end', () => resolve(data));
+        setTimeout(() => resolve(data || '{}'), 2000);
+    });
+}
+//# sourceMappingURL=hook-handler.js.map

package/dist/hooks/hook-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-handler.js","sourceRoot":"","sources":["../../src/hooks/hook-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAG/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAErE,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,OAAgB;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;IAClF,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,UAAU,GAAG,CAAC,mBAAmB,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,CAAU,CAAC;AAG1F,MAAM,eAAe,GAA6B;IAChD,iBAAiB,EAAE,qBAAqB;IACxC,WAAW,EAAE,iCAAiC;IAC9C,IAAI,EAAE,gBAAgB;IACtB,aAAa,EAAE,qBAAqB;CACrC,CAAC;AAEF,MAAM,gBAAgB,GAAqC;IACzD,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,cAAc;IAC3B,IAAI,EAAE,eAAe;IACrB,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,IAAI,OAAO,CAAC,eAAe,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAElD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACpE,IAAI,OAAO,KAAK,2BAA2B,EAAE,CAAC;gBAC5C,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;gBACjC,KAAK,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAC5C,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;gBACnC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;YACvC,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAE5C,uEAAuE;QACvE,yEAAyE;QACzE,kBAAkB;QAClB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAElF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,kEAAkE;YAClE,sEAAsE;YACtE,qEAAqE;YACrE,oDAAoD;YACpD,MAAM,KAAK,GAAG,IAAI,YAAY,CAC5B,EAAE,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAClF,MAAM,CAAC,UAAU,CAClB,CAAC;YACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,KAAiB,EAAE,MAAc,EAAE,UAAkB;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,SAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,SAAS,CAAC,kBAAkB,MAAM,OAAO,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAE9B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9E,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;QAC1C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;QAC7C,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAChC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;QAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,OAAoB;IACrE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAe;QACxB,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,SAAS,CAAC;QACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,KAAK,CAAC,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAC7C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAQ,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAQD,MAAM,2BAA2B,GAAsB;IACrD,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,8BAA8B;CACzC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,cAAsB;IAC/D,IAAI,CAAC,cAAc;QAAE,OAAO,2BAA2B,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAEjE,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;wBACL,QAAQ,EAAE,OAAO,CAAC,IAAI;wBACtB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;wBACxC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;qBAC5D,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IAED,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAU;IAChC,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,IAAI,KAAK,EAAE,SAAS,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS;YAChD,KAAK,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,KAA8B;IAC5E,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACpC,KAAK,OAAO;YACV,OAAO,yBAAyB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACvD,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW;YACd,OAAO,uBAAuB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACrD,KAAK,MAAM;YACT,OAAO,QAAQ,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,KAAK,UAAU;YACb,OAAO,cAAc,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QACzC,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;QAC5B;YACE,OAAO,GAAG,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IAChD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,KAA8B;IAChD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAuB,CAAC;IACvE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,SAAS,WAAW,CAAC,KAA8B;IACjD,MAAM,KAAK,GACT,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,CAEpG,CAAC;IAChB,OAAO,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAGD,KAAK,UAAU,SAAS;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/hooks/hook-manager.d.ts

@@ -0,0 +1,22 @@
+/** Builds the shell command for a given hook type with full absolute paths. */
+export declare const buildHookCommand: (type: string) => string;
+interface HookCommand {
+    type: 'command';
+    command: string;
+}
+interface HookEntry {
+    matcher?: string;
+    hooks: HookCommand[];
+}
+type HookConfig = Record<string, HookEntry[]>;
+export declare function buildHookConfig(): HookConfig;
+/**
+ * Merge our hook config into the existing one without dropping or duplicating
+ * anything. An entry is considered "ours already" when an existing entry with
+ * the same matcher already runs a command that looks like one of ours.
+ */
+export declare function mergeHooks(existing: HookConfig, ours: HookConfig): HookConfig;
+export declare function registerHooks(): Promise<void>;
+export declare function unregisterHooks(): Promise<void>;
+export {};
+//# sourceMappingURL=hook-manager.d.ts.map

package/dist/hooks/hook-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-manager.d.ts","sourceRoot":"","sources":["../../src/hooks/hook-manager.ts"],"names":[],"mappings":"AAkBA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MACA,CAAC;AAcjD,UAAU,WAAW;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAS9C,wBAAgB,eAAe,IAAI,UAAU,CAmB5C;AAID;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CA+B7E;AAmCD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAKnD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBrD"}

package/dist/hooks/hook-manager.js

@@ -0,0 +1,133 @@
+import { fileURLToPath } from 'url';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { logger } from '../utils/logger.js';
+// ── Absolute-path hook command ─────────────────────────────────────────────
+// Claude Code fires hooks in a restricted shell where the npm global bin
+// directory is NOT in PATH, so bare `agentvigil hook <type>` silently fails.
+// Using process.execPath + the absolute path to dist/index.js works on any
+// machine regardless of how Node or the package were installed.
+const __filename = fileURLToPath(import.meta.url);
+// dist/hooks/hook-manager.js → go up one level to reach dist/
+const distDir = path.dirname(path.dirname(__filename));
+const entryPoint = path.join(distDir, 'index.js');
+const nodeExecutable = process.execPath;
+/** Builds the shell command for a given hook type with full absolute paths. */
+export const buildHookCommand = (type) => `${nodeExecutable} ${entryPoint} hook ${type}`;
+// ── Settings path ──────────────────────────────────────────────────────────
+const SETTINGS_PATH = path.join(os.homedir(), '.claude', 'settings.json');
+/** Marker present in every OLD-style bare command (pre-absolute-path fix). */
+const LEGACY_MARKER = 'agentvigil hook';
+/** Returns true when a command was registered by AgentVigil (old or new). */
+const isOurCommand = (cmd) => cmd.includes(entryPoint) || cmd.includes(LEGACY_MARKER);
+// ── Hook config builder ────────────────────────────────────────────────────
+export function buildHookConfig() {
+    return {
+        Notification: [
+            {
+                matcher: 'permission_prompt',
+                hooks: [{ type: 'command', command: buildHookCommand('permission_prompt') }],
+            },
+            {
+                matcher: 'idle_prompt',
+                hooks: [{ type: 'command', command: buildHookCommand('idle_prompt') }],
+            },
+        ],
+        Stop: [
+            { hooks: [{ type: 'command', command: buildHookCommand('stop') }] },
+        ],
+        SubagentStop: [
+            { hooks: [{ type: 'command', command: buildHookCommand('subagent_stop') }] },
+        ],
+    };
+}
+// ── Merge ──────────────────────────────────────────────────────────────────
+/**
+ * Merge our hook config into the existing one without dropping or duplicating
+ * anything. An entry is considered "ours already" when an existing entry with
+ * the same matcher already runs a command that looks like one of ours.
+ */
+export function mergeHooks(existing, ours) {
+    const merged = {};
+    for (const [event, entries] of Object.entries(existing)) {
+        merged[event] = [...entries];
+    }
+    for (const [event, ourEntries] of Object.entries(ours)) {
+        const entries = merged[event] ?? (merged[event] = []);
+        for (const ourEntry of ourEntries) {
+            // Strip any old/new variant of our command before adding the fresh one,
+            // so re-running setup upgrades bare commands to absolute-path commands.
+            for (const existingEntry of entries) {
+                if (existingEntry.matcher === ourEntry.matcher) {
+                    existingEntry.hooks = existingEntry.hooks.filter((h) => !isOurCommand(h.command));
+                }
+            }
+            // Remove entries that are now empty after stripping our old commands.
+            const emptyIdx = entries.findIndex((e) => e.matcher === ourEntry.matcher && e.hooks.length === 0);
+            if (emptyIdx !== -1)
+                entries.splice(emptyIdx, 1);
+            // Add the fresh entry (always — we removed any pre-existing one above).
+            entries.push(ourEntry);
+        }
+    }
+    return merged;
+}
+// ── File helpers ───────────────────────────────────────────────────────────
+async function fileExists(p) {
+    try {
+        await fs.access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function readSettings() {
+    try {
+        const raw = await fs.readFile(SETTINGS_PATH, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return {};
+        logger.warn('~/.claude/settings.json is malformed — backing it up and starting fresh');
+        await fs.copyFile(SETTINGS_PATH, `${SETTINGS_PATH}.bak`).catch(() => { });
+        return {};
+    }
+}
+async function writeSettings(settings) {
+    await fs.mkdir(path.dirname(SETTINGS_PATH), { recursive: true });
+    if (await fileExists(SETTINGS_PATH)) {
+        await fs.copyFile(SETTINGS_PATH, `${SETTINGS_PATH}.bak`);
+    }
+    await fs.writeFile(SETTINGS_PATH, JSON.stringify(settings, null, 2), 'utf8');
+}
+// ── Public API ─────────────────────────────────────────────────────────────
+export async function registerHooks() {
+    const existing = await readSettings();
+    existing.hooks = mergeHooks(existing.hooks ?? {}, buildHookConfig());
+    await writeSettings(existing);
+    logger.success('Hooks registered in ~/.claude/settings.json');
+}
+export async function unregisterHooks() {
+    const existing = await readSettings();
+    if (!existing.hooks)
+        return;
+    const cleaned = {};
+    for (const [event, entries] of Object.entries(existing.hooks)) {
+        const keptEntries = entries
+            .map((entry) => ({
+            ...entry,
+            hooks: entry.hooks.filter((h) => !isOurCommand(h.command)),
+        }))
+            .filter((entry) => entry.hooks.length > 0);
+        if (keptEntries.length > 0) {
+            cleaned[event] = keptEntries;
+        }
+    }
+    existing.hooks = cleaned;
+    await writeSettings(existing);
+    logger.success('Hooks removed from ~/.claude/settings.json');
+}
+//# sourceMappingURL=hook-manager.js.map

package/dist/hooks/hook-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-manager.js","sourceRoot":"","sources":["../../src/hooks/hook-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,gEAAgE;AAEhE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,8DAA8D;AAC9D,MAAM,OAAO,GAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAClD,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;AAExC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE,CACvD,GAAG,cAAc,IAAI,UAAU,SAAS,IAAI,EAAE,CAAC;AAEjD,8EAA8E;AAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAE1E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC,6EAA6E;AAC7E,MAAM,YAAY,GAAG,CAAC,GAAW,EAAW,EAAE,CAC5C,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAqB1D,8EAA8E;AAE9E,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,YAAY,EAAE;YACZ;gBACE,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,CAAC;aAC7E;YACD;gBACE,OAAO,EAAE,aAAa;gBACtB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;aACvE;SACF;QACD,IAAI,EAAE;YACJ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;SACpE;QACD,YAAY,EAAE;YACZ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE;SAC7E;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAoB,EAAE,IAAgB;IAC/D,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAEtD,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,wEAAwE;YACxE,wEAAwE;YACxE,KAAK,MAAM,aAAa,IAAI,OAAO,EAAE,CAAC;gBACpC,IAAI,aAAa,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;oBAC/C,aAAa,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAC9D,CAAC;YACF,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAEjD,wEAAwE;YACxE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACvF,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAwB;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IACrE,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO;IAE5B,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,WAAW,GAAG,OAAO;aACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,GAAG,KAAK;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAC3D,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE7C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC;IACzB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;AAC/D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}