aquaman-coder 0.12.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 tech4242
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,126 @@
+# aquaman-coder
+
+**Vault adapter for AI coding agents.** Keep API keys, secrets, and `.env` contents out of your coding agent's memory and transcripts.
+
+Pair with [`aquaman-proxy`](../proxy) (the vault + daemon + audit core). Together: `aquaman-proxy` holds credentials in a separate process; `aquaman-coder` hooks into your coding agent so per-tool-call commands get credentials materialized over UDS, run with output redacted, and the agent never sees raw keys.
+
+## What it does
+
+1. **Inject vault-backed credentials per Bash tool call.** No `.env` files in your project. The agent runs `gh pr list` → the hook rewrites the command to wrap it under `aquaman-coder exec --` → that wrapper fetches `GH_TOKEN` from the vault, injects it into the subprocess env, runs, and exits. The agent's own process never sees the credential.
+2. **Redact secrets from tool output.** `aquaman-coder exec` pipes stdout/stderr through a pattern redactor before printing — secret-shaped strings (AWS, GitHub, Stripe, Slack, OpenAI, Anthropic, JWTs, PEM private keys) become `[REDACTED:kind]` before they enter the agent's transcript.
+3. **Stay isolated from the proxy.** `aquaman-coder` only talks to `aquaman-proxy` over `~/.aquaman/proxy.sock` (UDS, `chmod 0o600`) via the broker endpoint `POST /broker/resolve`. No shared memory, no network exposure.
+
+## Install
+
+```bash
+npm install -g aquaman-proxy aquaman-coder
+```
+
+Requires `aquaman-proxy` (same version) running as a daemon — start it once per machine session with `aquaman daemon &` (or have it managed by your shell's init).
+
+## Quick Start (Claude Code)
+
+```bash
+aquaman setup                                # vault wizard (one-time)
+aquaman daemon &                             # start the proxy
+
+aquaman coder project add my-app --path ~/code/my-app \
+  --env ANTHROPIC_API_KEY=aquaman://anthropic/api_key \
+  --env GITHUB_TOKEN=aquaman://github/token
+aquaman coder setup claude-code              # install hook in ~/.claude/settings.json
+aquaman coder doctor                         # verify
+```
+
+**See it for yourself (the 30-second aha):** restart Claude Code, open a new session inside `~/code/my-app`, and ask the agent to run:
+
+```
+printenv | grep ANTHROPIC_API_KEY
+```
+
+You'll see this in the transcript:
+
+```
+ANTHROPIC_API_KEY=[REDACTED:injected-value]
+
+⏺ ANTHROPIC_API_KEY is set and available (injected via aquaman vault). 
+```
+
+The *child* process saw the real key (your tests, builds, MCP servers, import scripts — anything that actually needs it works). The *agent* — the thing that decides what code to run on your machine — never sees the value, and so neither does the conversation history, neither does the model provider's logs, neither does anyone who later screenshots your terminal.
+
+When Claude Code runs a Bash tool in `~/code/my-app`, aquaman's hook rewrites the command via `updatedInput.command` to wrap it under `aquaman-coder exec`. That wrapper:
+
+- Resolves each `aquaman://service/key` reference via the broker (`POST /broker/resolve` over UDS) — credentials are materialized for one command, not for the agent's lifetime.
+- Pipes stdout/stderr through a redactor that prepends a value-based pattern for each resolved value: **whatever string was injected gets redacted, regardless of shape** (Atlassian tokens, Notion secrets, internal-API keys — none of them need to match a known provider format). Generic shape-based patterns (sk-ant-, ghp_, sk_live_, AKIA…, JWTs, PEM blocks, ATATT3xF…) still run after as defense-in-depth for secrets the child surfaces that we did NOT inject.
+- Cleans up when the command exits.
+
+## CLI surface
+
+The unified CLI lives in `aquaman-proxy` and delegates `coder` subcommands here:
+
+```
+aquaman coder
+├── setup <agent>             Install hooks for an agent (claude-code today)
+├── doctor                    Deep diagnostic — projects, broker, per-project vault checks
+├── status                    Configured projects + hook wiring + broker connectivity
+├── project list/add/remove   ~/.aquaman/projects.yaml CRUD
+├── get <ref>                 Resolve an aquaman://service/key reference once
+├── exec <cmd> [args...]      Run a command with project env injected + output redacted
+└── hook                      Stdio hook handler (invoked by Claude Code; not user-facing)
+```
+
+The `aquaman-coder` binary works directly too — `aquaman coder X` ≡ `aquaman-coder X`. The unified form is the documented one; the standalone binary is what Claude Code's hook contract executes per tool call (faster, skips the shim).
+
+## Architecture
+
+```
+Claude Code / Codex / OpenCode / Cursor
+        │  hook stdin/stdout JSON
+        ▼
+  aquaman-coder (this package)
+        │  HTTP over UDS
+        ▼
+  aquaman-proxy daemon
+        │
+        ▼
+  Vault backends (Keychain, 1Password, HashiCorp Vault, KeePassXC,
+                  encrypted-file, systemd-creds, Bitwarden)
+```
+
+The hook uses Claude Code's real protocol (verified against the live docs):
+
+- **PreToolUse** on Bash: emits `{ hookSpecificOutput: { permissionDecision: "allow", updatedInput: { command: "aquaman-coder exec -- sh -c '...'" } } }`. Claude Code runs the rewritten command in its child shell; the wrapper does the broker resolve.
+- **PostToolUse**: emits `{ hookSpecificOutput: { additionalContext: "aquaman: tool output contained secret patterns…" } }` if the redactor finds secrets in the output. Note: PostToolUse can't *rewrite* output (the tool already ran) — real scrubbing happens inside `aquaman-coder exec`'s stdout pipeline. PostToolUse is purely an alert.
+
+See [`docs/PACKAGES.md`](../../docs/PACKAGES.md) for cross-package import rules.
+
+## projects.yaml
+
+```yaml
+# ~/.aquaman/projects.yaml
+version: 1
+projects:
+  my-app:
+    paths:
+      - ~/code/my-app
+    env:
+      ANTHROPIC_API_KEY: aquaman://anthropic/api_key
+      GITHUB_TOKEN: aquaman://github/token
+      DATABASE_URL: aquaman://supabase/db_url
+```
+
+Each project owns one or more filesystem paths. When the agent runs a Bash tool whose `cwd` matches a project path (longest-prefix wins), every `aquaman://service/key` reference is resolved via the broker and injected into the subprocess env.
+
+The file is `chmod 0o600`. Both the service and key components are validated against safe regexes before any broker lookup.
+
+## Adapter status
+
+| Adapter | Status | Release |
+|---|---|---|
+| Claude Code | shipped | v0.12.0 |
+| Codex CLI | planned | v0.13.0 |
+| OpenCode (sst) | planned | v0.14.0 |
+| Cursor | planned | v0.15.0 |
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/adapters/claude-code/hook.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Claude Code hook handler.
+ *
+ * Claude Code's hook protocol (verified against https://code.claude.com/docs/en/hooks):
+ *   - The hook receives a JSON event on stdin.
+ *   - Structured decisions: write JSON to stdout, exit 0.
+ *   - Blocking errors: write a message to stderr, exit 2.
+ *
+ * PreToolUse hookSpecificOutput supports `permissionDecision`,
+ * `permissionDecisionReason`, `updatedInput`, and `additionalContext`.
+ * There is NO env-injection API on PreToolUse — to scope credentials
+ * to a single tool call we rewrite the Bash command itself via
+ * `updatedInput.command` to invoke it under `aquaman-coder exec`,
+ * which runs the broker resolve + redaction pipeline server-side.
+ *
+ * PostToolUse hookSpecificOutput only supports `additionalContext` and
+ * cannot mutate the tool output (the tool has already run). When the
+ * redactor finds secrets we emit a warning notice via additionalContext
+ * — the actual scrubbing must happen inside `aquaman-coder exec` itself
+ * so leaked secrets never reach the model.
+ */
+import { BrokerClient } from '../../broker-client.js';
+export interface HookEvent {
+    hook_event_name?: string;
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+    tool_response?: unknown;
+    cwd?: string;
+}
+export interface HookDecision {
+    hookSpecificOutput?: Record<string, unknown>;
+    decision?: 'block' | 'approve';
+    reason?: string;
+}
+export interface HookContext {
+    /** Override for testing. Defaults to BrokerClient with default UDS. */
+    broker?: BrokerClient;
+    /** Override projects.yaml path for testing. */
+    projectsPath?: string;
+    /**
+     * Wrapper command prefix injected into Bash commands. Default
+     * `aquaman-coder exec --` — change in tests to assert the rewrite.
+     */
+    wrapperPrefix?: string;
+}
+/**
+ * If the project map has env bindings AND this is a Bash tool call AND
+ * the command isn't already wrapped, rewrite it to run under the
+ * `aquaman-coder exec` wrapper. The wrapper resolves env via the broker
+ * and pipes stdout/stderr through the redactor.
+ */
+export declare function handlePreToolUse(event: HookEvent, ctx?: HookContext): Promise<HookDecision | null>;
+/**
+ * Inspect tool output for leaked secrets. Cannot rewrite — the tool has
+ * already run — but we surface a warning to Claude via additionalContext.
+ * Pair with `aquaman-coder exec`'s stdout/stderr redactor for real
+ * prevention.
+ */
+export declare function handlePostToolUse(event: HookEvent): HookDecision | null;
+/**
+ * Stdio entry point: read JSON from stdin, dispatch by hook_event_name,
+ * write decision to stdout (exit 0) or error to stderr (exit 2).
+ */
+export declare function runHookFromStdin(_argv: string[], ctx?: HookContext): Promise<number>;
+//# sourceMappingURL=hook.d.ts.map

package/dist/adapters/claude-code/hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,WAAW,SAAS;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAUD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,SAAS,EAChB,GAAG,GAAE,WAAgB,GACpB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAmD9B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,IAAI,CAmBvE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EAAE,EACf,GAAG,GAAE,WAAgB,GACpB,OAAO,CAAC,MAAM,CAAC,CAkCjB"}

package/dist/adapters/claude-code/hook.js

@@ -0,0 +1,161 @@
+/**
+ * Claude Code hook handler.
+ *
+ * Claude Code's hook protocol (verified against https://code.claude.com/docs/en/hooks):
+ *   - The hook receives a JSON event on stdin.
+ *   - Structured decisions: write JSON to stdout, exit 0.
+ *   - Blocking errors: write a message to stderr, exit 2.
+ *
+ * PreToolUse hookSpecificOutput supports `permissionDecision`,
+ * `permissionDecisionReason`, `updatedInput`, and `additionalContext`.
+ * There is NO env-injection API on PreToolUse — to scope credentials
+ * to a single tool call we rewrite the Bash command itself via
+ * `updatedInput.command` to invoke it under `aquaman-coder exec`,
+ * which runs the broker resolve + redaction pipeline server-side.
+ *
+ * PostToolUse hookSpecificOutput only supports `additionalContext` and
+ * cannot mutate the tool output (the tool has already run). When the
+ * redactor finds secrets we emit a warning notice via additionalContext
+ * — the actual scrubbing must happen inside `aquaman-coder exec` itself
+ * so leaked secrets never reach the model.
+ */
+// Note: imported from `aquaman-proxy` (which re-exports from its
+// merged core/). There is no separate `aquaman-core` npm package since
+// v0.7.0; the vitest alias resolves the same path for tests.
+import { redact } from 'aquaman-proxy';
+import { findProjectForCwd, loadProjects } from '../../projects.js';
+import { BrokerClient } from '../../broker-client.js';
+// Default wrapper uses the direct binary form (`aquaman-coder exec`) rather
+// than the unified-CLI form (`aquaman coder exec`) to skip the shim's
+// process-spawn overhead on every Bash tool call. Both forms work; the
+// rewrite check below matches either so manually-wrapped commands aren't
+// double-wrapped.
+const DEFAULT_WRAPPER = 'aquaman-coder exec --';
+const AQUAMAN_WRAPPER_MARKS = ['aquaman-coder exec', 'aquaman coder exec'];
+/**
+ * If the project map has env bindings AND this is a Bash tool call AND
+ * the command isn't already wrapped, rewrite it to run under the
+ * `aquaman-coder exec` wrapper. The wrapper resolves env via the broker
+ * and pipes stdout/stderr through the redactor.
+ */
+export async function handlePreToolUse(event, ctx = {}) {
+    if (event.tool_name !== 'Bash')
+        return null;
+    const cwd = event.cwd || process.cwd();
+    const projects = loadProjects(ctx.projectsPath);
+    const match = findProjectForCwd(cwd, projects);
+    if (!match)
+        return null;
+    // No env bindings → nothing for the wrapper to inject; skip.
+    if (Object.keys(match.config.env).length === 0)
+        return null;
+    const command = String(event.tool_input?.command ?? '');
+    if (!command)
+        return null;
+    // Avoid wrapping ourselves recursively.
+    if (AQUAMAN_WRAPPER_MARKS.some((m) => command.includes(m)))
+        return null;
+    // Quick health check on the broker — if the proxy isn't running, deny
+    // loudly so the user knows the credentials won't be available.
+    const broker = ctx.broker ?? new BrokerClient();
+    try {
+        await broker.health();
+    }
+    catch (err) {
+        return {
+            hookSpecificOutput: {
+                hookEventName: 'PreToolUse',
+                permissionDecision: 'deny',
+                permissionDecisionReason: `aquaman: proxy not reachable (${err.message}). ` +
+                    `Start it with: aquaman daemon`,
+            },
+        };
+    }
+    const wrapper = ctx.wrapperPrefix ?? DEFAULT_WRAPPER;
+    const wrapped = `${wrapper} sh -c ${shellQuote(command)}`;
+    return {
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            permissionDecision: 'allow',
+            updatedInput: {
+                ...event.tool_input,
+                command: wrapped,
+            },
+            additionalContext: `aquaman: wrapped command under \`${wrapper}\` so credentials ` +
+                `(${Object.keys(match.config.env).join(', ')}) are injected ` +
+                `from the vault only for the duration of this command.`,
+        },
+    };
+}
+/**
+ * Inspect tool output for leaked secrets. Cannot rewrite — the tool has
+ * already run — but we surface a warning to Claude via additionalContext.
+ * Pair with `aquaman-coder exec`'s stdout/stderr redactor for real
+ * prevention.
+ */
+export function handlePostToolUse(event) {
+    const out = event.tool_response ?? event.tool_output;
+    if (out === undefined || out === null)
+        return null;
+    const text = typeof out === 'string' ? out : JSON.stringify(out);
+    const { findings } = redact(text);
+    if (findings.length === 0)
+        return null;
+    const summary = findings.map((f) => `${f.kind}×${f.count}`).join(', ');
+    return {
+        hookSpecificOutput: {
+            hookEventName: 'PostToolUse',
+            additionalContext: `aquaman: tool output contained secret patterns (${summary}). ` +
+                `These were detected after the fact — to scrub before output ` +
+                `reaches the model, ensure agent-invoked commands route through ` +
+                `\`aquaman-coder exec\`.`,
+        },
+    };
+}
+/**
+ * Stdio entry point: read JSON from stdin, dispatch by hook_event_name,
+ * write decision to stdout (exit 0) or error to stderr (exit 2).
+ */
+export async function runHookFromStdin(_argv, ctx = {}) {
+    let stdin = '';
+    for await (const chunk of process.stdin) {
+        stdin += chunk;
+    }
+    let event;
+    try {
+        event = JSON.parse(stdin);
+    }
+    catch (err) {
+        process.stderr.write(`aquaman-coder: malformed hook input: ${err.message}\n`);
+        return 2;
+    }
+    let decision = null;
+    try {
+        switch (event.hook_event_name) {
+            case 'PreToolUse':
+                decision = await handlePreToolUse(event, ctx);
+                break;
+            case 'PostToolUse':
+                decision = handlePostToolUse(event);
+                break;
+            default:
+                return 0;
+        }
+    }
+    catch (err) {
+        process.stderr.write(`aquaman-coder: hook failed: ${err.message}\n`);
+        return 2;
+    }
+    if (!decision)
+        return 0;
+    process.stdout.write(JSON.stringify(decision));
+    return 0;
+}
+/**
+ * POSIX single-quote-safe shell escape. Single quotes inside become
+ * `'\''` per the standard idiom.
+ */
+function shellQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+//# sourceMappingURL=hook.js.map

package/dist/adapters/claude-code/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/adapters/claude-code/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,iEAAiE;AACjE,uEAAuE;AACvE,6DAA6D;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAY,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AA4BtD,4EAA4E;AAC5E,sEAAsE;AACtE,uEAAuE;AACvE,yEAAyE;AACzE,kBAAkB;AAClB,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,qBAAqB,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAgB,EAChB,MAAmB,EAAE;IAErB,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,6DAA6D;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,OAAO,GAAG,MAAM,CAAE,KAAK,CAAC,UAAkB,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,wCAAwC;IACxC,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAExE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EACtB,iCAAkC,GAAa,CAAC,OAAO,KAAK;oBAC5D,+BAA+B;aAClC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,eAAe,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,OAAO,UAAU,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAE1D,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,OAAO;YAC3B,YAAY,EAAE;gBACZ,GAAI,KAAK,CAAC,UAAsC;gBAChD,OAAO,EAAE,OAAO;aACjB;YACD,iBAAiB,EACf,oCAAoC,OAAO,oBAAoB;gBAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAC7D,uDAAuD;SAC1D;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgB;IAChD,MAAM,GAAG,GAAI,KAAa,CAAC,aAAa,IAAK,KAAa,CAAC,WAAW,CAAC;IACvE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,aAAa;YAC5B,iBAAiB,EACf,mDAAmD,OAAO,KAAK;gBAC/D,8DAA8D;gBAC9D,iEAAiE;gBACjE,yBAAyB;SAC5B;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAe,EACf,MAAmB,EAAE;IAErB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAyC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,QAAQ,GAAwB,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,KAAK,CAAC,eAAe,EAAE,CAAC;YAC9B,KAAK,YAAY;gBACf,QAAQ,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,aAAa;gBAChB,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM;YACR;gBACE,OAAO,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAAgC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/dist/adapters/claude-code/setup.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Claude Code setup — writes the hook configuration into
+ * `~/.claude/settings.json` so Claude Code invokes aquaman-coder on
+ * each tool call.
+ *
+ * Never overwrites unrelated keys. Atomic write via .tmp + rename.
+ */
+export interface ClaudeSettings {
+    hooks?: Record<string, Array<{
+        matcher?: string;
+        hooks: Array<{
+            type: 'command';
+            command: string;
+        }>;
+    }>>;
+    apiKeyHelper?: string;
+    [key: string]: unknown;
+}
+export declare function defaultSettingsPath(): string;
+export interface SetupOptions {
+    settingsPath?: string;
+    hookCommand?: string;
+}
+export interface SetupResult {
+    path: string;
+    changed: boolean;
+    before: ClaudeSettings | null;
+    after: ClaudeSettings;
+}
+/**
+ * Ensure ~/.claude/settings.json has PreToolUse + PostToolUse hooks
+ * pointing at `aquaman coder hook` (the canonical unified-CLI form;
+ * the `aquaman` binary's `coder` shim execs `aquaman-coder` under the hood).
+ */
+export declare function installClaudeCodeHooks(opts?: SetupOptions): SetupResult;
+/**
+ * Remove aquaman coder hooks from settings.json (matches both legacy
+ * `aquaman-coder hook` and canonical `aquaman coder hook` forms).
+ */
+export declare function uninstallClaudeCodeHooks(opts?: SetupOptions): SetupResult;
+//# sourceMappingURL=setup.d.ts.map

package/dist/adapters/claude-code/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code/setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,SAAS,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC,CAAC;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,cAAc,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,YAAiB,GAAG,WAAW,CAsD3E;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,GAAE,YAAiB,GAAG,WAAW,CAwC7E"}

package/dist/adapters/claude-code/setup.js

@@ -0,0 +1,102 @@
+/**
+ * Claude Code setup — writes the hook configuration into
+ * `~/.claude/settings.json` so Claude Code invokes aquaman-coder on
+ * each tool call.
+ *
+ * Never overwrites unrelated keys. Atomic write via .tmp + rename.
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+export function defaultSettingsPath() {
+    return path.join(os.homedir(), '.claude', 'settings.json');
+}
+/**
+ * Ensure ~/.claude/settings.json has PreToolUse + PostToolUse hooks
+ * pointing at `aquaman coder hook` (the canonical unified-CLI form;
+ * the `aquaman` binary's `coder` shim execs `aquaman-coder` under the hood).
+ */
+export function installClaudeCodeHooks(opts = {}) {
+    const settingsPath = opts.settingsPath ?? defaultSettingsPath();
+    const hookCommand = opts.hookCommand ?? 'aquaman coder hook';
+    const dir = path.dirname(settingsPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    let before = null;
+    let settings = {};
+    if (fs.existsSync(settingsPath)) {
+        const raw = fs.readFileSync(settingsPath, 'utf-8');
+        try {
+            before = JSON.parse(raw);
+            settings = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new Error(`Existing ${settingsPath} is not valid JSON: ${err.message}`);
+        }
+    }
+    settings.hooks = settings.hooks ?? {};
+    for (const event of ['PreToolUse', 'PostToolUse']) {
+        const list = settings.hooks[event] ?? [];
+        // Match by substring so wrapper-script variants like
+        // "/path/to/wrap aquaman coder hook --debug" still count as installed.
+        // Also matches the legacy `aquaman-coder hook` form so v0.11.x installs
+        // don't get a duplicate appended on upgrade.
+        const alreadyInstalled = list.some((entry) => entry.hooks?.some((h) => h.command?.includes('aquaman coder hook') ||
+            h.command?.includes('aquaman-coder hook')));
+        if (alreadyInstalled)
+            continue;
+        list.push({
+            matcher: '*',
+            hooks: [{ type: 'command', command: hookCommand }],
+        });
+        settings.hooks[event] = list;
+    }
+    const after = settings;
+    const changed = JSON.stringify(before) !== JSON.stringify(after);
+    if (changed) {
+        const tmp = settingsPath + '.tmp';
+        fs.writeFileSync(tmp, JSON.stringify(after, null, 2), { mode: 0o600 });
+        fs.renameSync(tmp, settingsPath);
+    }
+    return { path: settingsPath, changed, before, after };
+}
+/**
+ * Remove aquaman coder hooks from settings.json (matches both legacy
+ * `aquaman-coder hook` and canonical `aquaman coder hook` forms).
+ */
+export function uninstallClaudeCodeHooks(opts = {}) {
+    const settingsPath = opts.settingsPath ?? defaultSettingsPath();
+    const hookCommand = opts.hookCommand ?? 'aquaman coder hook';
+    if (!fs.existsSync(settingsPath)) {
+        return { path: settingsPath, changed: false, before: null, after: {} };
+    }
+    const raw = fs.readFileSync(settingsPath, 'utf-8');
+    const before = JSON.parse(raw);
+    const settings = JSON.parse(raw);
+    if (settings.hooks) {
+        for (const event of Object.keys(settings.hooks)) {
+            settings.hooks[event] = settings.hooks[event]
+                .map((entry) => ({
+                ...entry,
+                hooks: entry.hooks.filter((h) => !h.command?.includes('aquaman coder hook') &&
+                    !h.command?.includes('aquaman-coder hook')),
+            }))
+                .filter((entry) => entry.hooks.length > 0);
+            if (settings.hooks[event].length === 0) {
+                delete settings.hooks[event];
+            }
+        }
+        if (Object.keys(settings.hooks).length === 0) {
+            delete settings.hooks;
+        }
+    }
+    const changed = JSON.stringify(before) !== JSON.stringify(settings);
+    if (changed) {
+        const tmp = settingsPath + '.tmp';
+        fs.writeFileSync(tmp, JSON.stringify(settings, null, 2), { mode: 0o600 });
+        fs.renameSync(tmp, settingsPath);
+    }
+    return { path: settingsPath, changed, before, after: settings };
+}
+//# sourceMappingURL=setup.js.map

package/dist/adapters/claude-code/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/adapters/claude-code/setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAC7D,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAqB,EAAE;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAE7D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,IAAI,QAAQ,GAAmB,EAAE,CAAC;IAClC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;YAC3C,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IAEtC,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzC,qDAAqD;QACrD,uEAAuE;QACvE,wEAAwE;QACxE,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC;YACzC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAC1C,CACF,CAAC;QACF,IAAI,gBAAgB;YAAE,SAAS;QAE/B,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,CAAC;QAClC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAqB,EAAE;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAE7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAEnD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;iBAC1C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACf,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC;oBAC1C,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAC3C;aACF,CAAC,CAAC;iBACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,CAAC;QAClC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAClE,CAAC"}

package/dist/broker-client.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Broker client — talks to the aquaman-proxy daemon over UDS to
+ * materialize credentials per tool call.
+ *
+ * Wraps `POST /broker/resolve` with retry, timeout, and clean errors.
+ */
+export interface BrokerResolveOptions {
+    service: string;
+    key: string;
+    ttlSeconds?: number;
+}
+export interface BrokerResolveResult {
+    value: string;
+    expiresAt: string;
+}
+export interface BrokerClientOptions {
+    socketPath?: string;
+    timeoutMs?: number;
+}
+export declare function defaultSocketPath(): string;
+export declare class BrokerClient {
+    private socketPath;
+    private timeoutMs;
+    constructor(opts?: BrokerClientOptions);
+    /**
+     * Materialize a credential. Throws if the proxy is unreachable,
+     * the credential is not found, or the request is policy-denied.
+     */
+    resolve(opts: BrokerResolveOptions): Promise<BrokerResolveResult>;
+    /**
+     * Check whether the proxy is up and responsive.
+     */
+    health(): Promise<{
+        status: string;
+        version?: string;
+    }>;
+    private request;
+}
+//# sourceMappingURL=broker-client.d.ts.map

package/dist/broker-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker-client.d.ts","sourceRoot":"","sources":["../src/broker-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAS;gBAEd,IAAI,GAAE,mBAAwB;IAK1C;;;OAGG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+BvE;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ7D,OAAO,CAAC,OAAO;CA6ChB"}