apt-mcp-agent-setup 3.5.36 → 3.5.61

package/src/installer/hook-dispatcher.js

@@ -1,179 +1,179 @@
-'use strict';
-
-// Embedded with a trusted installation key. Only built-in modules may be used
-// until the committed release has been verified.
-function hookDispatcher(root, publicKey) {
-  return { runCLI(host, event, projectPath, executionOptions = {}) {
-    const fs = require('node:fs'), path = require('node:path'), crypto = require('node:crypto');
-    // Host adapters pass the workspace as base64 so hook command shells never
-    // reinterpret path data. Keep absolute raw paths usable for internal calls.
-    const inputPath = String(projectPath);
-    const decodedProjectPath = Buffer.from(inputPath, 'base64').toString('utf8');
-    const workspaceInput = path.isAbsolute(inputPath) || !fs.existsSync(decodedProjectPath) ? inputPath : decodedProjectPath;
-    const workspace = fs.realpathSync(workspaceInput);
-    const canonical = process.platform === 'win32' ? workspace.toLowerCase() : workspace;
-    const authorityFile = path.join(workspace, '.agents', 'runtime', 'generation.json');
-    let selected;
-    try { selected = JSON.parse(fs.readFileSync(authorityFile, 'utf8')); }
-    catch (error) {
-      if (error.code !== 'ENOENT') throw error;
-      // Migration only: the workspace pin is explicit, never the machine's
-      // latest pointer or a release inferred from deployed resource version.
-      selected = JSON.parse(fs.readFileSync(path.join(root, 'workspaces',
-        crypto.createHash('sha256').update(canonical).digest('hex') + '.json'), 'utf8'));
-    }
-    if (selected.workspace && (process.platform === 'win32' ? selected.workspace.toLowerCase() : selected.workspace) !== canonical)
-      throw Error('HOOK_WORKSPACE_BINDING_CONFLICT');
-    if (!/^\d+\.\d+\.\d+$/.test(selected.version) || !/^[a-f0-9]{64}$/.test(selected.digest))
-      throw Error('HOOK_RUNTIME_BINDING_REQUIRED');
-    const release = path.join(root, 'releases', `${selected.version}-${selected.digest}`);
-    if (fs.lstatSync(release).isSymbolicLink()) throw Error('HOOK_RUNTIME_LINK_REJECTED');
-    const manifest = JSON.parse(fs.readFileSync(path.join(release, 'integrity-manifest.json'), 'utf8'));
-    if (crypto.createHash('sha256').update(JSON.stringify(manifest)).digest('hex') !== selected.digest ||
-        !crypto.verify(null, Buffer.from(JSON.stringify(manifest.files)), publicKey, Buffer.from(manifest.signature, 'base64url')))
-      throw Error('HOOK_RUNTIME_SIGNATURE_INVALID');
-    for (const required of ['src/core/hook-bridge.js'])
-      if (!manifest.files[required]) throw Error('HOOK_RUNTIME_RECONNECT_REQUIRED');
-    for (const [file, digest] of Object.entries(manifest.files)) {
-      if (path.isAbsolute(file) || file.includes('\\') || file.split('/').some(part => !part || part === '..' || part === '.'))
-        throw Error('HOOK_RUNTIME_PATH_INVALID');
-      let cursor = release;
-      for (const part of file.split('/')) {
-        cursor = path.join(cursor, part);
-        if (fs.lstatSync(cursor).isSymbolicLink()) throw Error('HOOK_RUNTIME_LINK_REJECTED');
-      }
-      if (crypto.createHash('sha256').update(fs.readFileSync(cursor)).digest('hex') !== digest)
-        throw Error('HOOK_RUNTIME_INTEGRITY_INVALID');
-    }
-    return require(path.join(release, 'src/core/hook-bridge.js')).runCLI(host, event,
-      Buffer.from(workspace, 'utf8').toString('base64'), executionOptions);
-  } };
-}
-
-// The parent only uses built-ins. Synchronous hashing/locks in the signed
-// worker cannot prevent the parent from producing a blocking decision.
-function superviseHook(root, publicKey, dispatcherSource, args, timeoutMs, passive) {
-  const cp = require('node:child_process'), crypto = require('node:crypto');
-  const lease = { id: crypto.randomUUID(), notAfter: Date.now() + timeoutMs, maxDurationMs: timeoutMs };
-  // The worker lives for one host event. APT_HOOK_PROCESS lets its runtime
-  // locks record a start hint instead of starting PowerShell on every tool call.
-  const program = `process.env.APT_HOOK_PROCESS = '1';
-const dispatcher = (${dispatcherSource})(${JSON.stringify(root)}, ${JSON.stringify(publicKey)});
-process.once('message', async message => {
-  try { await dispatcher.runCLI(...message.args, { hookLease: message.lease }); }
-  catch (error) { process.stderr.write('APT hook: ' + (error.message || String(error)) + '\\n'); process.exitCode = 2; }
-  finally { if (process.connected) process.disconnect(); }
-});`;
-  return new Promise((resolve, reject) => {
-    let settled = false, output = '', errors = '', inputBytes = 0;
-    const received = [];
-    // APT allows a passive host read in every session state. A fault of APT
-    // itself, a missed deadline above all, must not refuse one. The answer is
-    // the output that lets the call proceed, or null for every other call.
-    const allowance = () => {
-      try {
-        const table = passive && passive[args[0]];
-        const allow = table && table.events[args[1]];
-        if (typeof allow !== 'string') return null;
-        const input = JSON.parse(Buffer.concat(received).toString('utf8'));
-        const name = input.tool_name;
-        if (typeof name !== 'string' || input.toolCall !== undefined || input.userStopped === true) return null;
-        return table.exact.includes(name) || table.insensitive.includes(name.toLowerCase()) ? allow : null;
-      } catch { return null; }
-    };
-    const child = cp.spawn(process.execPath, ['-e', program], { windowsHide: true, stdio: ['pipe', 'pipe', 'pipe', 'ipc'] });
-    const detach = () => {
-      clearTimeout(timer); process.stdin.unpipe(child.stdin); process.stdin.removeListener('data', countInput);
-      child.stdin.destroy();
-    };
-    const fail = code => {
-      if (settled) return;
-      settled = true; detach();
-      if (child.connected) child.disconnect();
-      child.kill(); child.stdout.destroy(); child.stderr.destroy(); child.unref();
-      const allow = allowance();
-      if (allow === null) return reject(new Error(code));
-      process.stderr.write('APT hook: ' + code + ' (not refused)\n');
-      process.stdout.write(allow + '\n');
-      process.exitCode = 0;
-      resolve();
-    };
-    const countInput = chunk => {
-      inputBytes += chunk.length;
-      if (inputBytes > 2 * 1024 * 1024) fail('HOOK_INPUT_LIMIT'); else received.push(Buffer.from(chunk));
-    };
-    const timer = setTimeout(() => fail('HOOK_DEADLINE_EXCEEDED'), timeoutMs);
-    child.on('error', () => fail('HOOK_WORKER_UNAVAILABLE'));
-    child.stdin.on('error', () => {});
-    child.stdout.on('data', chunk => { output += chunk.toString(); if (Buffer.byteLength(output) > 2 * 1024 * 1024) fail('HOOK_OUTPUT_LIMIT'); });
-    child.stderr.on('data', chunk => { errors += chunk.toString(); if (Buffer.byteLength(errors) > 64 * 1024) fail('HOOK_OUTPUT_LIMIT'); });
-    child.on('close', code => {
-      if (settled) return;
-      if (Date.now() >= lease.notAfter) return fail('HOOK_DEADLINE_EXCEEDED');
-      settled = true; detach();
-      // A worker that failed before the bridge could decide refuses nothing
-      // that APT always allows.
-      const allow = code === 0 ? null : allowance();
-      if (code === 0) { if (output) process.stdout.write(output); }
-      if (errors) process.stderr.write(errors);
-      if (allow !== null) process.stdout.write(allow + '\n');
-      process.exitCode = code === 0 || allow !== null ? 0 : 2;
-      resolve();
-    });
-    process.stdin.on('data', countInput); process.stdin.pipe(child.stdin);
-    child.send({ args, lease }, error => { if (error) fail('HOOK_WORKER_UNAVAILABLE'); });
-  });
-}
-
-// Only a pre-tool decision may block its host. Any other event observes
-// something that already happened, so a dispatcher or runtime fault there is a
-// non-blocking error: it must not reject a prompt or force a continuation.
-function blockingEvents() {
-  const { HOSTS } = require('../core/host-adapters');
-  return Object.fromEntries(Object.entries(HOSTS).map(([host, adapter]) =>
-    [host, Object.keys(adapter.events).filter(event => adapter.events[event] === 'before-tool')]));
-}
-
-// For each host: the events that guard a tool call, each with the output
-// that lets the call proceed, and the tools APT allows in every session state.
-function passiveReads() {
-  const { HOSTS, formatHookResult } = require('../core/host-adapters');
-  const { passiveHostTools } = require('../core/hook-bridge');
-  return Object.fromEntries(Object.entries(HOSTS).map(([host, adapter]) => [host, {
-    events: Object.fromEntries(Object.keys(adapter.events).filter(event => adapter.events[event] === 'before-tool')
-      .map(event => [event, JSON.stringify(formatHookResult(host, event, { allow: true }).output)])),
-    ...passiveHostTools(host) }]));
-}
-
-function renderDispatcher(runtimeRoot, publicKey, options = {}) {
-  const timeoutMs = options.timeoutMs === undefined ? 10000 : options.timeoutMs;
-  if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 100 || timeoutMs > 10000) throw new Error('HOOK_DEADLINE_INVALID');
-  return `'use strict';
-const dispatcher = (${hookDispatcher.toString()})(${JSON.stringify(runtimeRoot)}, ${JSON.stringify(publicKey.toString())});
-const blockingEvents = ${JSON.stringify(blockingEvents())};
-// An unknown host or event stays blocking.
-const failureCode = args => !blockingEvents[args[0]] || blockingEvents[args[0]].includes(args[1]) ? 2 : 1;
-function reportFailure(error, args) {
-  process.stderr.write('APT hook: ' + (error && error.message ? error.message : String(error)) + '\\n');
-  process.exitCode = failureCode(args);
-}
-module.exports = { runCLI(...args) {
-  try {
-    // Generated host commands use node --eval. Direct verifier consumers keep
-    // the synchronous interface; host execution always has an outer watchdog.
-    const hostCLI = process.argv.length === 1 && process.execArgv.some(arg => arg === '-e' || arg === '--eval');
-    const result = hostCLI
-      ? (${superviseHook.toString()})(${JSON.stringify(runtimeRoot)}, ${JSON.stringify(publicKey.toString())}, ${JSON.stringify(hookDispatcher.toString())}, args, ${timeoutMs}, ${JSON.stringify(passiveReads())})
-      : dispatcher.runCLI(...args);
-    if (result && typeof result.then === 'function')
-      result.then(() => { if (hostCLI && process.exitCode) process.exitCode = failureCode(args); },
-        error => reportFailure(error, args));
-    return result;
-  } catch (error) {
-    reportFailure(error, args);
-  }
-} };
-`;
-}
-
-module.exports = { hookDispatcher, renderDispatcher };
+'use strict';
+
+// Embedded with a trusted installation key. Only built-in modules may be used
+// until the committed release has been verified.
+function hookDispatcher(root, publicKey) {
+  return { runCLI(host, event, projectPath, executionOptions = {}) {
+    const fs = require('node:fs'), path = require('node:path'), crypto = require('node:crypto');
+    // Host adapters pass the workspace as base64 so hook command shells never
+    // reinterpret path data. Keep absolute raw paths usable for internal calls.
+    const inputPath = String(projectPath);
+    const decodedProjectPath = Buffer.from(inputPath, 'base64').toString('utf8');
+    const workspaceInput = path.isAbsolute(inputPath) || !fs.existsSync(decodedProjectPath) ? inputPath : decodedProjectPath;
+    const workspace = fs.realpathSync(workspaceInput);
+    const canonical = process.platform === 'win32' ? workspace.toLowerCase() : workspace;
+    const authorityFile = path.join(workspace, '.agents', 'runtime', 'generation.json');
+    let selected;
+    try { selected = JSON.parse(fs.readFileSync(authorityFile, 'utf8')); }
+    catch (error) {
+      if (error.code !== 'ENOENT') throw error;
+      // Migration only: the workspace pin is explicit, never the machine's
+      // latest pointer or a release inferred from deployed resource version.
+      selected = JSON.parse(fs.readFileSync(path.join(root, 'workspaces',
+        crypto.createHash('sha256').update(canonical).digest('hex') + '.json'), 'utf8'));
+    }
+    if (selected.workspace && (process.platform === 'win32' ? selected.workspace.toLowerCase() : selected.workspace) !== canonical)
+      throw Error('HOOK_WORKSPACE_BINDING_CONFLICT');
+    if (!/^\d+\.\d+\.\d+$/.test(selected.version) || !/^[a-f0-9]{64}$/.test(selected.digest))
+      throw Error('HOOK_RUNTIME_BINDING_REQUIRED');
+    const release = path.join(root, 'releases', `${selected.version}-${selected.digest}`);
+    if (fs.lstatSync(release).isSymbolicLink()) throw Error('HOOK_RUNTIME_LINK_REJECTED');
+    const manifest = JSON.parse(fs.readFileSync(path.join(release, 'integrity-manifest.json'), 'utf8'));
+    if (crypto.createHash('sha256').update(JSON.stringify(manifest)).digest('hex') !== selected.digest ||
+        !crypto.verify(null, Buffer.from(JSON.stringify(manifest.files)), publicKey, Buffer.from(manifest.signature, 'base64url')))
+      throw Error('HOOK_RUNTIME_SIGNATURE_INVALID');
+    for (const required of ['src/core/hook-bridge.js'])
+      if (!manifest.files[required]) throw Error('HOOK_RUNTIME_RECONNECT_REQUIRED');
+    for (const [file, digest] of Object.entries(manifest.files)) {
+      if (path.isAbsolute(file) || file.includes('\\') || file.split('/').some(part => !part || part === '..' || part === '.'))
+        throw Error('HOOK_RUNTIME_PATH_INVALID');
+      let cursor = release;
+      for (const part of file.split('/')) {
+        cursor = path.join(cursor, part);
+        if (fs.lstatSync(cursor).isSymbolicLink()) throw Error('HOOK_RUNTIME_LINK_REJECTED');
+      }
+      if (crypto.createHash('sha256').update(fs.readFileSync(cursor)).digest('hex') !== digest)
+        throw Error('HOOK_RUNTIME_INTEGRITY_INVALID');
+    }
+    return require(path.join(release, 'src/core/hook-bridge.js')).runCLI(host, event,
+      Buffer.from(workspace, 'utf8').toString('base64'), executionOptions);
+  } };
+}
+
+// The parent only uses built-ins. Synchronous hashing/locks in the signed
+// worker cannot prevent the parent from producing a blocking decision.
+function superviseHook(root, publicKey, dispatcherSource, args, timeoutMs, passive) {
+  const cp = require('node:child_process'), crypto = require('node:crypto');
+  const lease = { id: crypto.randomUUID(), notAfter: Date.now() + timeoutMs, maxDurationMs: timeoutMs };
+  // The worker lives for one host event. APT_HOOK_PROCESS lets its runtime
+  // locks record a start hint instead of starting PowerShell on every tool call.
+  const program = `process.env.APT_HOOK_PROCESS = '1';
+const dispatcher = (${dispatcherSource})(${JSON.stringify(root)}, ${JSON.stringify(publicKey)});
+process.once('message', async message => {
+  try { await dispatcher.runCLI(...message.args, { hookLease: message.lease }); }
+  catch (error) { process.stderr.write('APT hook: ' + (error.message || String(error)) + '\\n'); process.exitCode = 2; }
+  finally { if (process.connected) process.disconnect(); }
+});`;
+  return new Promise((resolve, reject) => {
+    let settled = false, output = '', errors = '', inputBytes = 0;
+    const received = [];
+    // APT allows a passive host read in every session state. A fault of APT
+    // itself, a missed deadline above all, must not refuse one. The answer is
+    // the output that lets the call proceed, or null for every other call.
+    const allowance = () => {
+      try {
+        const table = passive && passive[args[0]];
+        const allow = table && table.events[args[1]];
+        if (typeof allow !== 'string') return null;
+        const input = JSON.parse(Buffer.concat(received).toString('utf8'));
+        const name = input.tool_name;
+        if (typeof name !== 'string' || input.toolCall !== undefined || input.userStopped === true) return null;
+        return table.exact.includes(name) || table.insensitive.includes(name.toLowerCase()) ? allow : null;
+      } catch { return null; }
+    };
+    const child = cp.spawn(process.execPath, ['-e', program], { windowsHide: true, stdio: ['pipe', 'pipe', 'pipe', 'ipc'] });
+    const detach = () => {
+      clearTimeout(timer); process.stdin.unpipe(child.stdin); process.stdin.removeListener('data', countInput);
+      child.stdin.destroy();
+    };
+    const fail = code => {
+      if (settled) return;
+      settled = true; detach();
+      if (child.connected) child.disconnect();
+      child.kill(); child.stdout.destroy(); child.stderr.destroy(); child.unref();
+      const allow = allowance();
+      if (allow === null) return reject(new Error(code));
+      process.stderr.write('APT hook: ' + code + ' (not refused)\n');
+      process.stdout.write(allow + '\n');
+      process.exitCode = 0;
+      resolve();
+    };
+    const countInput = chunk => {
+      inputBytes += chunk.length;
+      if (inputBytes > 2 * 1024 * 1024) fail('HOOK_INPUT_LIMIT'); else received.push(Buffer.from(chunk));
+    };
+    const timer = setTimeout(() => fail('HOOK_DEADLINE_EXCEEDED'), timeoutMs);
+    child.on('error', () => fail('HOOK_WORKER_UNAVAILABLE'));
+    child.stdin.on('error', () => {});
+    child.stdout.on('data', chunk => { output += chunk.toString(); if (Buffer.byteLength(output) > 2 * 1024 * 1024) fail('HOOK_OUTPUT_LIMIT'); });
+    child.stderr.on('data', chunk => { errors += chunk.toString(); if (Buffer.byteLength(errors) > 64 * 1024) fail('HOOK_OUTPUT_LIMIT'); });
+    child.on('close', code => {
+      if (settled) return;
+      if (Date.now() >= lease.notAfter) return fail('HOOK_DEADLINE_EXCEEDED');
+      settled = true; detach();
+      // A worker that failed before the bridge could decide refuses nothing
+      // that APT always allows.
+      const allow = code === 0 ? null : allowance();
+      if (code === 0) { if (output) process.stdout.write(output); }
+      if (errors) process.stderr.write(errors);
+      if (allow !== null) process.stdout.write(allow + '\n');
+      process.exitCode = code === 0 || allow !== null ? 0 : 2;
+      resolve();
+    });
+    process.stdin.on('data', countInput); process.stdin.pipe(child.stdin);
+    child.send({ args, lease }, error => { if (error) fail('HOOK_WORKER_UNAVAILABLE'); });
+  });
+}
+
+// Only a pre-tool decision may block its host. Any other event observes
+// something that already happened, so a dispatcher or runtime fault there is a
+// non-blocking error: it must not reject a prompt or force a continuation.
+function blockingEvents() {
+  const { HOSTS } = require('../core/host-adapters');
+  return Object.fromEntries(Object.entries(HOSTS).map(([host, adapter]) =>
+    [host, Object.keys(adapter.events).filter(event => adapter.events[event] === 'before-tool')]));
+}
+
+// For each host: the events that guard a tool call, each with the output
+// that lets the call proceed, and the tools APT allows in every session state.
+function passiveReads() {
+  const { HOSTS, formatHookResult } = require('../core/host-adapters');
+  const { passiveHostTools } = require('../core/hook-bridge');
+  return Object.fromEntries(Object.entries(HOSTS).map(([host, adapter]) => [host, {
+    events: Object.fromEntries(Object.keys(adapter.events).filter(event => adapter.events[event] === 'before-tool')
+      .map(event => [event, JSON.stringify(formatHookResult(host, event, { allow: true }).output)])),
+    ...passiveHostTools(host) }]));
+}
+
+function renderDispatcher(runtimeRoot, publicKey, options = {}) {
+  const timeoutMs = options.timeoutMs === undefined ? 10000 : options.timeoutMs;
+  if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 100 || timeoutMs > 10000) throw new Error('HOOK_DEADLINE_INVALID');
+  return `'use strict';
+const dispatcher = (${hookDispatcher.toString()})(${JSON.stringify(runtimeRoot)}, ${JSON.stringify(publicKey.toString())});
+const blockingEvents = ${JSON.stringify(blockingEvents())};
+// An unknown host or event stays blocking.
+const failureCode = args => !blockingEvents[args[0]] || blockingEvents[args[0]].includes(args[1]) ? 2 : 1;
+function reportFailure(error, args) {
+  process.stderr.write('APT hook: ' + (error && error.message ? error.message : String(error)) + '\\n');
+  process.exitCode = failureCode(args);
+}
+module.exports = { runCLI(...args) {
+  try {
+    // Generated host commands use node --eval. Direct verifier consumers keep
+    // the synchronous interface; host execution always has an outer watchdog.
+    const hostCLI = process.argv.length === 1 && process.execArgv.some(arg => arg === '-e' || arg === '--eval');
+    const result = hostCLI
+      ? (${superviseHook.toString()})(${JSON.stringify(runtimeRoot)}, ${JSON.stringify(publicKey.toString())}, ${JSON.stringify(hookDispatcher.toString())}, args, ${timeoutMs}, ${JSON.stringify(passiveReads())})
+      : dispatcher.runCLI(...args);
+    if (result && typeof result.then === 'function')
+      result.then(() => { if (hostCLI && process.exitCode) process.exitCode = failureCode(args); },
+        error => reportFailure(error, args));
+    return result;
+  } catch (error) {
+    reportFailure(error, args);
+  }
+} };
+`;
+}
+
+module.exports = { hookDispatcher, renderDispatcher };

package/src/installer/host-hooks.js

@@ -1 +1 @@
-const _0x413bae=_0x44a1;function _0x3fa7(){const _0x409d32=['zMLSDgvY','BgL2zvzLCMLMAwvK','otLNrg1mufu','Aw5ZDgfSBeHVC3riB29RCW','D2LUzhn1CMy','mZyZndK4nvzOwffiyq','mtiWmZuYmMfRvuXqBW','C3rHDhvZ','y2XHDwrL','D3jPDgvgAwXLu3LUyW','oYbVCMLNAw5HBcbMAwXLihDHCYbWCMvZzxj2zwq6ia','y29KzxG','mZy3mdi4ngnLENziyq','y29TBwfUza','Cgf0Aa','C3rYAw5NAwz5','CMvJDxjZAxzL','DxrMoa','lI9Tyw5Hz2vKlwnVBMzPzW','BwTKAxjtEw5J','BwvZC2fNzq','BM9KzsaTzsaI','qvbux0Hpt0TFqLjjreDf','BM9KzsaTzsaIlYPbufrFse9ps19cuKLer0uQlW','BwvYz2viB29RCW','Ag9ZDa','Aw5JBhvKzxm','odK1mJKZEgDLENLh','lI4Vy29Yzs9OB3n0lwfKyxb0zxjZ','nde0rePUrMHw','ChvZAa','B2jQzwn0','A2v5CW','lMfNzw50CY9JB3jLl2HVB2STyNjPzgDLlMPZ','mJyXn1fKDLr0yW','yw50AwDYyxzPDhK','zxHPC3rZu3LUyW','CMvZB2X2zq','y2XHDwrLlwrLC2T0B3a','CMvWBgfJzq','CMvSyxrPDMu','C29Tzq','mJG5ode2qxrnvM9R','zw50CMLLCW','y29Kzq','AM9PBG','sw52ywXPzcbJB25MAwCGyxqG','odm2mdG0swPSvez6','CgfYC2u','su5wquXjrf9dt05gsuC','ChvIBgLJs2v5','zgLYBMfTzq','CMvHzezPBgvtEw5J','C3rHCNrZv2L0Aa','ChjVDg9JB2Xuzxn0zwq','y3vYC29Y'];_0x3fa7=function(){return _0x409d32;};return _0x3fa7();}(function(_0x26b785,_0x527cb3){const _0x4ec23d=_0x44a1,_0x451fcc=_0x26b785();while(!![]){try{const _0x57aee9=-parseInt(_0x4ec23d(0x10e))/0x1*(parseInt(_0x4ec23d(0x109))/0x2)+parseInt(_0x4ec23d(0x12a))/0x3+parseInt(_0x4ec23d(0x11b))/0x4+parseInt(_0x4ec23d(0x129))/0x5+-parseInt(_0x4ec23d(0x130))/0x6+-parseInt(_0x4ec23d(0x107))/0x7+-parseInt(_0x4ec23d(0x116))/0x8*(-parseInt(_0x4ec23d(0x126))/0x9);if(_0x57aee9===_0x527cb3)break;else _0x451fcc['push'](_0x451fcc['shift']());}catch(_0x3ba9e7){_0x451fcc['push'](_0x451fcc['shift']());}}}(_0x3fa7,0x6eed5));function _0x44a1(_0x5b8c2b,_0x5854d5){_0x5b8c2b=_0x5b8c2b-0x100;const _0x3fa7c4=_0x3fa7();let _0x44a123=_0x3fa7c4[_0x5b8c2b];if(_0x44a1['hbQjfS']===undefined){var _0x39d301=function(_0x5ac045){const _0x10c692='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x21dc3c='',_0xe0b2f4='';for(let _0x121493=0x0,_0x41f7a0,_0x374938,_0x2bab3a=0x0;_0x374938=_0x5ac045['charAt'](_0x2bab3a++);~_0x374938&&(_0x41f7a0=_0x121493%0x4?_0x41f7a0*0x40+_0x374938:_0x374938,_0x121493++%0x4)?_0x21dc3c+=String['fromCharCode'](0xff&_0x41f7a0>>(-0x2*_0x121493&0x6)):0x0){_0x374938=_0x10c692['indexOf'](_0x374938);}for(let _0x6accda=0x0,_0x5c43a4=_0x21dc3c['length'];_0x6accda<_0x5c43a4;_0x6accda++){_0xe0b2f4+='%'+('00'+_0x21dc3c['charCodeAt'](_0x6accda)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0xe0b2f4);};_0x44a1['vHzZeC']=_0x39d301,_0x44a1['ZmgFqy']={},_0x44a1['hbQjfS']=!![];}const _0xa19025=_0x3fa7c4[0x0],_0x4805b6=_0x5b8c2b+_0xa19025,_0x33d2b6=_0x44a1['ZmgFqy'][_0x4805b6];return!_0x33d2b6?(_0x44a123=_0x44a1['vHzZeC'](_0x44a123),_0x44a1['ZmgFqy'][_0x4805b6]=_0x44a123):_0x44a123=_0x33d2b6,_0x44a123;}const fs=require('fs'),path=require(_0x413bae(0x132)),{buildHookConfig}=require(_0x413bae(0x108)),{readJsonWithBackup,parseJson}=require(_0x413bae(0x136));function mergeHooks(_0x6accda,_0x5c43a4){const _0x1134ce=_0x413bae;if(Array['isArray'](_0x5c43a4)){const _0x1cbf9a=(Array['isArray'](_0x6accda)?_0x6accda:[])['filter'](_0x59e45a=>!JSON[_0x1134ce(0x133)](_0x59e45a)[_0x1134ce(0x106)](_0x1134ce(0x102)));return[..._0x1cbf9a,..._0x5c43a4];}if(_0x5c43a4&&typeof _0x5c43a4===_0x1134ce(0x10b)){const _0x15c265={..._0x6accda&&typeof _0x6accda===_0x1134ce(0x10b)?_0x6accda:{}},_0x2644d0=_0x15c265;for(const [_0x5ad08f,_0x220d5d]of Object[_0x1134ce(0x117)](_0x5c43a4)){const _0x38fc50=Array['isArray'](_0x220d5d)&&!JSON[_0x1134ce(0x133)](_0x2644d0[_0x5ad08f]??'')[_0x1134ce(0x106)](_0x1134ce(0x102))&&Object[_0x1134ce(0x117)](_0x2644d0)[_0x1134ce(0x115)](([_0x3eb471,_0x5f2716])=>_0x3eb471[_0x1134ce(0x121)](_0x5ad08f+'_')&&JSON[_0x1134ce(0x133)](_0x5f2716)[_0x1134ce(0x106)]('APT_HOOK_BRIDGE'));if(!_0x38fc50)_0x2644d0[_0x5ad08f]=mergeHooks(_0x2644d0[_0x5ad08f],_0x220d5d);}return _0x2644d0;}return _0x5c43a4;}function installHostHooks(_0x47644e,_0x139c39=null,_0x541f14={}){const _0x1eeec8=_0x413bae,_0x58e4e0=_0x541f14['fileSystem']||fs,_0x1011ad={};_0x1011ad['codex']=_0x1eeec8(0x12f),_0x1011ad[_0x1eeec8(0x12c)]='claude-code',_0x1011ad['cursor']=_0x1eeec8(0x123),_0x1011ad[_0x1eeec8(0x10f)]=_0x1eeec8(0x10f),_0x1011ad['vscode']='vscode-copilot',_0x1011ad['windsurf']=_0x1eeec8(0x128),_0x1011ad[_0x1eeec8(0x112)]=_0x1eeec8(0x112);const _0x1d0475=_0x1011ad;let _0x37c44a=path[_0x1eeec8(0x119)](_0x47644e,_0x1eeec8(0x10d));if(!_0x58e4e0[_0x1eeec8(0x110)](_0x37c44a))return[];if(_0x541f14['runtimeRoot']&&_0x541f14[_0x1eeec8(0x11e)]){_0x37c44a=path['join'](_0x47644e,'.agents/core/hook-dispatcher.js');const _0x3f56ec=require('./hook-dispatcher')['renderDispatcher'](_0x541f14['runtimeRoot'],_0x541f14[_0x1eeec8(0x11e)]);if(!_0x58e4e0['existsSync'](_0x37c44a)||_0x58e4e0[_0x1eeec8(0x120)](_0x37c44a,_0x1eeec8(0x135))!==_0x3f56ec)_0x58e4e0[_0x1eeec8(0x12d)](_0x37c44a,_0x3f56ec);}const _0x17558a=[];for(const _0x955bd6 of _0x139c39||Object[_0x1eeec8(0x10c)](_0x1d0475)[_0x1eeec8(0x124)](_0x19feaf=>_0x19feaf!=='claude-desktop')){const _0x4e0e74=buildHookConfig(_0x1d0475[_0x955bd6]||_0x955bd6,_0x37c44a,_0x47644e);if(!_0x4e0e74?.[_0x1eeec8(0x132)]||!_0x4e0e74['config']||_0x4e0e74['advisory'])continue;const _0x34a285=path[_0x1eeec8(0x111)](_0x47644e,_0x4e0e74[_0x1eeec8(0x132)]);if(path[_0x1eeec8(0x114)](_0x47644e,_0x34a285)[_0x1eeec8(0x121)]('..'))throw new Error('Hook\x20config\x20path\x20escapes\x20project');const _0x12305c=JSON[_0x1eeec8(0x11c)](JSON[_0x1eeec8(0x133)](_0x4e0e74['config']),(_0x9651dd,_0x16ab79)=>{const _0x326769=_0x1eeec8;if(_0x9651dd===_0x326769(0x131)&&typeof _0x16ab79==='string'&&_0x16ab79[_0x326769(0x121)]('node\x20-e\x20')&&!_0x16ab79[_0x326769(0x106)](_0x326769(0x102)))return _0x16ab79[_0x326769(0x113)](_0x326769(0x101),_0x326769(0x103));return _0x16ab79;});let _0xe78a3b;if(!_0x541f14['fileSystem'])_0xe78a3b=readJsonWithBackup(_0x34a285);else{if(!_0x58e4e0[_0x1eeec8(0x110)](_0x34a285))_0xe78a3b={};else try{_0xe78a3b=parseJson(_0x58e4e0[_0x1eeec8(0x120)](_0x34a285,_0x1eeec8(0x135)));}catch(_0x19aa6c){const _0x2604fe={};_0x2604fe[_0x1eeec8(0x118)]=_0x1eeec8(0x11d);throw Object['assign'](new Error(_0x1eeec8(0x11a)+_0x34a285+_0x1eeec8(0x12e)+_0x19aa6c[_0x1eeec8(0x100)]),_0x2604fe);}}const _0x3f691d=mergeHooks(_0xe78a3b,_0x12305c),_0x4c1377={};_0x4c1377[_0x1eeec8(0x134)]=!![],_0x58e4e0[_0x1eeec8(0x137)](path[_0x1eeec8(0x11f)](_0x34a285),_0x4c1377),_0x58e4e0[_0x1eeec8(0x12d)](_0x34a285,JSON['stringify'](_0x3f691d,null,0x2)+'\x0a');const _0x7258ea={};_0x7258ea[_0x1eeec8(0x105)]=_0x955bd6,_0x7258ea[_0x1eeec8(0x132)]=_0x4e0e74[_0x1eeec8(0x132)],_0x7258ea[_0x1eeec8(0x122)]=![],_0x7258ea[_0x1eeec8(0x125)]=![],_0x7258ea[_0x1eeec8(0x12b)]='installed-unobserved',_0x17558a[_0x1eeec8(0x10a)](_0x7258ea);}return _0x17558a;}const _0x2bab3a={};_0x2bab3a[_0x413bae(0x127)]=installHostHooks,_0x2bab3a[_0x413bae(0x104)]=mergeHooks,module['exports']=_0x2bab3a;
+const _0x3b39ef=_0x314b;(function(_0x575461,_0x1d6146){const _0xe3bd2d=_0x314b,_0x2f36e1=_0x575461();while(!![]){try{const _0x1cebbe=-parseInt(_0xe3bd2d(0x1ec))/0x1+parseInt(_0xe3bd2d(0x1d8))/0x2+-parseInt(_0xe3bd2d(0x1d5))/0x3*(-parseInt(_0xe3bd2d(0x1ed))/0x4)+-parseInt(_0xe3bd2d(0x1f3))/0x5*(-parseInt(_0xe3bd2d(0x1de))/0x6)+-parseInt(_0xe3bd2d(0x1db))/0x7+-parseInt(_0xe3bd2d(0x1df))/0x8+-parseInt(_0xe3bd2d(0x1f4))/0x9*(-parseInt(_0xe3bd2d(0x1fd))/0xa);if(_0x1cebbe===_0x1d6146)break;else _0x2f36e1['push'](_0x2f36e1['shift']());}catch(_0x4674a9){_0x2f36e1['push'](_0x2f36e1['shift']());}}}(_0x530d,0xc8831));const fs=require('fs'),path=require(_0x3b39ef(0x204)),{buildHookConfig}=require(_0x3b39ef(0x1eb)),{readJsonWithBackup,parseJson}=require(_0x3b39ef(0x201));function mergeHooks(_0x61db91,_0x462a15){const _0x35e53c=_0x3b39ef;if(Array[_0x35e53c(0x1f9)](_0x462a15)){const _0x86fa25=(Array[_0x35e53c(0x1f9)](_0x61db91)?_0x61db91:[])['filter'](_0x22aa64=>!JSON['stringify'](_0x22aa64)[_0x35e53c(0x209)](_0x35e53c(0x1ff)));return[..._0x86fa25,..._0x462a15];}if(_0x462a15&&typeof _0x462a15===_0x35e53c(0x1d6)){const _0x44a2de={..._0x61db91&&typeof _0x61db91==='object'?_0x61db91:{}},_0x2031df=_0x44a2de;for(const [_0x518295,_0x3a3cf6]of Object[_0x35e53c(0x20f)](_0x462a15)){const _0x14aef0=Array[_0x35e53c(0x1f9)](_0x3a3cf6)&&!JSON[_0x35e53c(0x1fc)](_0x2031df[_0x518295]??'')['includes']('APT_HOOK_BRIDGE')&&Object['entries'](_0x2031df)[_0x35e53c(0x202)](([_0x330867,_0x586a4e])=>_0x330867[_0x35e53c(0x1d3)](_0x518295+'_')&&JSON['stringify'](_0x586a4e)[_0x35e53c(0x209)](_0x35e53c(0x1ff)));if(!_0x14aef0)_0x2031df[_0x518295]=mergeHooks(_0x2031df[_0x518295],_0x3a3cf6);}return _0x2031df;}return _0x462a15;}function installHostHooks(_0x4d2a58,_0x3cc7bb=null,_0x471096={}){const _0xa0f5d3=_0x3b39ef,_0x4bf5de=_0x471096[_0xa0f5d3(0x208)]||fs,_0x5707e7={};_0x5707e7[_0xa0f5d3(0x1fb)]=_0xa0f5d3(0x1fb),_0x5707e7[_0xa0f5d3(0x1ea)]=_0xa0f5d3(0x1e2),_0x5707e7['cursor']=_0xa0f5d3(0x1e8),_0x5707e7['antigravity']=_0xa0f5d3(0x1dc),_0x5707e7[_0xa0f5d3(0x1f0)]='vscode-copilot',_0x5707e7[_0xa0f5d3(0x20c)]=_0xa0f5d3(0x20c),_0x5707e7[_0xa0f5d3(0x1fe)]=_0xa0f5d3(0x1fe);const _0xb4c1b7=_0x5707e7;let _0x318764=path[_0xa0f5d3(0x1e5)](_0x4d2a58,_0xa0f5d3(0x1ef));if(!_0x4bf5de[_0xa0f5d3(0x1e3)](_0x318764))return[];if(_0x471096[_0xa0f5d3(0x1f5)]&&_0x471096[_0xa0f5d3(0x203)]){_0x318764=path[_0xa0f5d3(0x1e5)](_0x4d2a58,'.agents/core/hook-dispatcher.js');const _0xeb248=require(_0xa0f5d3(0x1e1))['renderDispatcher'](_0x471096[_0xa0f5d3(0x1f5)],_0x471096[_0xa0f5d3(0x203)]);if(!_0x4bf5de[_0xa0f5d3(0x1e3)](_0x318764)||_0x4bf5de[_0xa0f5d3(0x20d)](_0x318764,_0xa0f5d3(0x20a))!==_0xeb248)_0x4bf5de[_0xa0f5d3(0x1e7)](_0x318764,_0xeb248);}const _0x3cc78b=[];for(const _0x10210f of _0x3cc7bb||Object['keys'](_0xb4c1b7)[_0xa0f5d3(0x20e)](_0x8a9272=>_0x8a9272!=='claude-desktop')){const _0x3fb3da=buildHookConfig(_0xb4c1b7[_0x10210f]||_0x10210f,_0x318764,_0x4d2a58);if(!_0x3fb3da?.[_0xa0f5d3(0x204)]||!_0x3fb3da[_0xa0f5d3(0x20b)]||_0x3fb3da[_0xa0f5d3(0x1e4)])continue;const _0x30d3ae=path[_0xa0f5d3(0x1dd)](_0x4d2a58,_0x3fb3da['path']);if(path[_0xa0f5d3(0x200)](_0x4d2a58,_0x30d3ae)['startsWith']('..'))throw new Error(_0xa0f5d3(0x207));const _0x266c4f=JSON[_0xa0f5d3(0x1f8)](JSON[_0xa0f5d3(0x1fc)](_0x3fb3da['config']),(_0x27c738,_0x1311c0)=>{const _0x33804b=_0xa0f5d3;if(_0x27c738===_0x33804b(0x1fa)&&typeof _0x1311c0===_0x33804b(0x1f7)&&_0x1311c0[_0x33804b(0x1d3)](_0x33804b(0x1ee))&&!_0x1311c0[_0x33804b(0x209)](_0x33804b(0x1ff)))return _0x1311c0['replace'](_0x33804b(0x206),_0x33804b(0x1d7));return _0x1311c0;});let _0x446082;if(!_0x471096[_0xa0f5d3(0x208)])_0x446082=readJsonWithBackup(_0x30d3ae);else{if(!_0x4bf5de[_0xa0f5d3(0x1e3)](_0x30d3ae))_0x446082={};else try{_0x446082=parseJson(_0x4bf5de[_0xa0f5d3(0x20d)](_0x30d3ae,'utf8'));}catch(_0x45f9aa){const _0x5db49e={};_0x5db49e['code']=_0xa0f5d3(0x1e0);throw Object['assign'](new Error('Invalid\x20config\x20at\x20'+_0x30d3ae+';\x20original\x20file\x20was\x20preserved:\x20'+_0x45f9aa[_0xa0f5d3(0x1f6)]),_0x5db49e);}}const _0x285820=mergeHooks(_0x446082,_0x266c4f),_0xa96398={};_0xa96398[_0xa0f5d3(0x1da)]=!![],_0x4bf5de['mkdirSync'](path[_0xa0f5d3(0x1d4)](_0x30d3ae),_0xa96398),_0x4bf5de[_0xa0f5d3(0x1e7)](_0x30d3ae,JSON['stringify'](_0x285820,null,0x2)+'\x0a');const _0x42f98e={};_0x42f98e[_0xa0f5d3(0x1f2)]=_0x10210f,_0x42f98e[_0xa0f5d3(0x204)]=_0x3fb3da['path'],_0x42f98e[_0xa0f5d3(0x205)]=![],_0x42f98e[_0xa0f5d3(0x1f1)]=![],_0x42f98e[_0xa0f5d3(0x1e9)]='installed-unobserved',_0x3cc78b[_0xa0f5d3(0x1e6)](_0x42f98e);}return _0x3cc78b;}function _0x314b(_0x54fe93,_0x1bcea5){_0x54fe93=_0x54fe93-0x1d3;const _0x530d48=_0x530d();let _0x314b68=_0x530d48[_0x54fe93];if(_0x314b['cSwDoq']===undefined){var _0x17a11b=function(_0x42d780){const _0x2238d1='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0xfd02cb='',_0x22ee82='';for(let _0x6c2713=0x0,_0x515b04,_0x517145,_0x17251e=0x0;_0x517145=_0x42d780['charAt'](_0x17251e++);~_0x517145&&(_0x515b04=_0x6c2713%0x4?_0x515b04*0x40+_0x517145:_0x517145,_0x6c2713++%0x4)?_0xfd02cb+=String['fromCharCode'](0xff&_0x515b04>>(-0x2*_0x6c2713&0x6)):0x0){_0x517145=_0x2238d1['indexOf'](_0x517145);}for(let _0x61db91=0x0,_0x462a15=_0xfd02cb['length'];_0x61db91<_0x462a15;_0x61db91++){_0x22ee82+='%'+('00'+_0xfd02cb['charCodeAt'](_0x61db91)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x22ee82);};_0x314b['HBVjkj']=_0x17a11b,_0x314b['JVazQZ']={},_0x314b['cSwDoq']=!![];}const _0x811710=_0x530d48[0x0],_0x3dbdb8=_0x54fe93+_0x811710,_0x187dac=_0x314b['JVazQZ'][_0x3dbdb8];return!_0x187dac?(_0x314b68=_0x314b['HBVjkj'](_0x314b68),_0x314b['JVazQZ'][_0x3dbdb8]=_0x314b68):_0x314b68=_0x187dac,_0x314b68;}const _0x17251e={};_0x17251e[_0x3b39ef(0x1d9)]=installHostHooks,_0x17251e['mergeHooks']=mergeHooks,module['exports']=_0x17251e;function _0x530d(){const _0x37c9f4=['C3rYAw5N','CgfYC2u','AxnbCNjHEq','y29TBwfUza','y29KzxG','C3rYAw5NAwz5','mtiWrKTxCer6','y2XHDwrLlwrLC2T0B3a','qvbux0Hpt0TFqLjjreDf','CMvSyxrPDMu','lI9Tyw5Hz2vKlwnVBMzPzW','C29Tzq','ChvIBgLJs2v5','Cgf0Aa','ChjVDg9JB2Xuzxn0zwq','BM9KzsaTzsaI','sg9VAYbJB25MAwCGCgf0AcbLC2nHCgvZihbYB2PLy3q','zMLSzvn5C3rLBq','Aw5JBhvKzxm','DxrMoa','y29UzMLN','D2LUzhn1CMy','CMvHzezPBgvtEw5J','zMLSDgvY','zw50CMLLCW','C3rHCNrZv2L0Aa','zgLYBMfTzq','mJe0mJnQvgTtuuy','B2jQzwn0','BM9KzsaTzsaIlYPbufrFse9ps19cuKLer0uQlW','mZiYodKWqM50Exb3','Aw5ZDgfSBeHVC3riB29RCW','CMvJDxjZAxzL','mJu5mZGWoe9ssLLeCq','yw50AwDYyxzPDhK','CMvZB2X2zq','nZKXndaWnKLbBLfPva','mJa1mJHrrg91z3y','su5wquXjrf9dt05gsuC','lI9OB29RlwrPC3bHDgnOzxi','y2XHDwrLlwnVzgu','zxHPC3rZu3LUyW','ywr2AxnVCNK','AM9PBG','ChvZAa','D3jPDgvgAwXLu3LUyW','y3vYC29Y','C3rHDhvZ','y2XHDwrL','lI4Vy29Yzs9OB3n0lwfKyxb0zxjZ','mte2nZe3nK5gB3ntsq','ntjxAefWuee','BM9KzsaTzsa','lMfNzw50CY9JB3jLl2HVB2STyNjPzgDLlMPZ','DNnJB2rL','BgL2zvzLCMLMAwvK','Ag9ZDa','nvjJsNr6Ea','ntKXmJi4zunorfLI','CNvUDgLTzvjVB3q','BwvZC2fNzq'];_0x530d=function(){return _0x37c9f4;};return _0x530d();}