aura-code 0.6.3 → 0.10.1

package/dist/plugins/commands.js

@@ -0,0 +1,134 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findInvocable = findInvocable;
+exports.expandCommand = expandCommand;
+exports.expandAgentTask = expandAgentTask;
+exports.expandSkillTask = expandSkillTask;
+exports.splitArgs = splitArgs;
+/**
+ * Plugin command expansion — turns "/name args" into the task prompt that
+ * runs through the normal agent loop.
+ *
+ * Substitutions (Claude Code compatible):
+ *   $ARGUMENTS      — the full argument string
+ *   $1 … $9         — whitespace-split positional arguments
+ *   !`cmd`          — replaced with the command's stdout. Gated by the same
+ *                     safety posture as run_shell: auto mode runs it,
+ *                     read-only skips it, normal mode asks via confirmFn.
+ *   @path           — left as-is: the agent has read_file and the prompt
+ *                     tells it to read referenced files itself.
+ *
+ * Frontmatter `model:` and `allowed-tools:` are parsed but ignored — aura is
+ * provider-agnostic and its permission system governs tools (documented in
+ * docs/PLUGINS.md).
+ */
+const child_process_1 = require("child_process");
+/**
+ * Resolve "/name" against loaded plugins. Accepts bare names ("review"),
+ * plugin-qualified names ("pr-tools:review"), and falls back through
+ * commands → skills → agents. Ambiguous bare names across plugins return
+ * the candidate list instead of guessing.
+ */
+function findInvocable(plugins, rawName) {
+    const name = rawName.replace(/^\//, '');
+    // Qualified: plugin:name (also covers subdir commands like git:commit —
+    // try both interpretations).
+    if (name.includes(':')) {
+        const [pluginName, ...rest] = name.split(':');
+        const inner = rest.join(':');
+        const plugin = plugins.find(p => p.name === pluginName);
+        if (plugin) {
+            const cmd = plugin.commands.find(c => c.name === inner);
+            if (cmd)
+                return { kind: 'command', command: cmd };
+            const skill = plugin.skills.find(s => s.name === inner);
+            if (skill)
+                return { kind: 'skill', skill };
+            const agent = plugin.agents.find(a => a.name === inner);
+            if (agent)
+                return { kind: 'agent', agent };
+        }
+        // Fall through: the colon may be a subdir namespace, not a plugin name.
+    }
+    const commands = plugins.flatMap(p => p.commands).filter(c => c.name === name);
+    if (commands.length === 1)
+        return { kind: 'command', command: commands[0] };
+    if (commands.length > 1) {
+        return { kind: 'ambiguous', candidates: commands.map(c => `${c.pluginName}:${c.name}`) };
+    }
+    const skills = plugins.flatMap(p => p.skills).filter(s => s.name === name);
+    if (skills.length === 1)
+        return { kind: 'skill', skill: skills[0] };
+    if (skills.length > 1) {
+        return { kind: 'ambiguous', candidates: skills.map(s => `${s.pluginName}:${s.name}`) };
+    }
+    const agents = plugins.flatMap(p => p.agents).filter(a => a.name === name);
+    if (agents.length === 1)
+        return { kind: 'agent', agent: agents[0] };
+    if (agents.length > 1) {
+        return { kind: 'ambiguous', candidates: agents.map(a => `${a.pluginName}:${a.name}`) };
+    }
+    return null;
+}
+/** Expand a command body with the given argument string into the final task prompt. */
+async function expandCommand(command, argsStr, opts) {
+    let body = command.body;
+    const args = splitArgs(argsStr);
+    const usesPlaceholders = /\$ARGUMENTS|\$[1-9]/.test(body);
+    body = body.replace(/\$ARGUMENTS/g, argsStr);
+    body = body.replace(/\$([1-9])/g, (_, n) => args[Number(n) - 1] ?? '');
+    // !`cmd` shell preprocessing
+    const shellRefs = [...body.matchAll(/!`([^`]+)`/g)];
+    for (const ref of shellRefs) {
+        const cmd = ref[1];
+        let replacement;
+        if (opts.mode === 'read-only') {
+            replacement = `[shell preprocessing skipped in read-only mode: ${cmd}]`;
+        }
+        else if (opts.mode === 'normal') {
+            const approved = opts.confirmFn ? await opts.confirmFn(`Plugin command wants to run: $ ${cmd}`) : false;
+            replacement = approved
+                ? await runPreprocess(cmd, opts)
+                : `[shell preprocessing declined: ${cmd}]`;
+        }
+        else {
+            replacement = await runPreprocess(cmd, opts);
+        }
+        body = body.replace(ref[0], replacement);
+    }
+    // No placeholders but args given → append them (Claude Code behavior).
+    if (!usesPlaceholders && argsStr.trim()) {
+        body = `${body}\n\nARGUMENTS: ${argsStr.trim()}`;
+    }
+    return body;
+}
+/** Build the task for a plugin agent: its system prompt preambles the task. */
+function expandAgentTask(agent, task) {
+    return `${agent.systemPrompt}\n\n---\n\n${task.trim() || 'Proceed with your role as described above.'}`;
+}
+/** Build the task for a skill: SKILL.md body + the user's request. */
+function expandSkillTask(skill, task) {
+    const header = `The following skill instructions apply to this task (from plugin "${skill.pluginName}", skill files live in ${skill.dir}):`;
+    return `${header}\n\n${skill.body}\n\n---\n\n${task.trim() || 'Apply this skill to the current project.'}`;
+}
+function runPreprocess(cmd, opts) {
+    return new Promise(resolve => {
+        (0, child_process_1.execFile)('bash', ['-c', cmd], { cwd: opts.cwd, timeout: opts.shellTimeoutMs ?? 30_000, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
+            if (err)
+                resolve(`[shell preprocessing failed: ${(stderr || err.message).trim().slice(0, 200)}]`);
+            else
+                resolve(stdout.trim().slice(0, 8000));
+        });
+    });
+}
+/** Whitespace split honoring double/single quotes: a "b c" → ["a", "b c"]. */
+function splitArgs(argsStr) {
+    const out = [];
+    const re = /"([^"]*)"|'([^']*)'|(\S+)/g;
+    let m;
+    while ((m = re.exec(argsStr)) !== null) {
+        out.push(m[1] ?? m[2] ?? m[3]);
+    }
+    return out;
+}
+//# sourceMappingURL=commands.js.map

package/dist/plugins/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/plugins/commands.ts"],"names":[],"mappings":";;AAiCA,sCAuCC;AAaD,sCAoCC;AAGD,0CAEC;AAGD,0CAGC;AAgBD,8BAQC;AA5JD;;;;;;;;;;;;;;;;GAgBG;AACH,iDAAyC;AAUzC;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,OAAuB,EAAE,OAAe;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAExC,wEAAwE;IACxE,6BAA6B;IAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QACxD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACxD,IAAI,GAAG;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,wEAAwE;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,uFAAuF;AAChF,KAAK,UAAU,aAAa,CACjC,OAAoC,EACpC,OAAe,EACf,IAAmB;IAEnB,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEhC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvE,6BAA6B;IAC7B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,WAAmB,CAAC;QACxB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9B,WAAW,GAAG,mDAAmD,GAAG,GAAG,CAAC;QAC1E,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACxG,WAAW,GAAG,QAAQ;gBACpB,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;gBAChC,CAAC,CAAC,kCAAkC,GAAG,GAAG,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,GAAG,GAAG,IAAI,kBAAkB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAgB,eAAe,CAAC,KAAkB,EAAE,IAAY;IAC9D,OAAO,GAAG,KAAK,CAAC,YAAY,cAAc,IAAI,CAAC,IAAI,EAAE,IAAI,4CAA4C,EAAE,CAAC;AAC1G,CAAC;AAED,sEAAsE;AACtE,SAAgB,eAAe,CAAC,KAAkB,EAAE,IAAY;IAC9D,MAAM,MAAM,GAAG,qEAAqE,KAAK,CAAC,UAAU,0BAA0B,KAAK,CAAC,GAAG,IAAI,CAAC;IAC5I,OAAO,GAAG,MAAM,OAAO,KAAK,CAAC,IAAI,cAAc,IAAI,CAAC,IAAI,EAAE,IAAI,0CAA0C,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAmB;IACrD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,IAAA,wBAAQ,EACN,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EACnB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,IAAI,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,EACjF,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,IAAI,GAAG;gBAAE,OAAO,CAAC,gCAAgC,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;;gBAC7F,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAgB,SAAS,CAAC,OAAe;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,4BAA4B,CAAC;IACxC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/plugins/frontmatter.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Minimal YAML frontmatter parser for plugin markdown files.
+ *
+ * Supports the subset actually used by Claude Code commands/agents/skills:
+ * scalar strings (quoted or bare), numbers, booleans, inline arrays
+ * ([a, b]) and block arrays (- item). Nested maps are skipped rather than
+ * parsed — no plugin frontmatter field aura consumes is nested. Deliberately
+ * dependency-free (aura's code standard: no new deps).
+ */
+export interface Frontmatter {
+    data: Record<string, unknown>;
+    body: string;
+}
+export declare function parseFrontmatter(content: string): Frontmatter;

package/dist/plugins/frontmatter.js

@@ -0,0 +1,78 @@
+"use strict";
+/**
+ * Minimal YAML frontmatter parser for plugin markdown files.
+ *
+ * Supports the subset actually used by Claude Code commands/agents/skills:
+ * scalar strings (quoted or bare), numbers, booleans, inline arrays
+ * ([a, b]) and block arrays (- item). Nested maps are skipped rather than
+ * parsed — no plugin frontmatter field aura consumes is nested. Deliberately
+ * dependency-free (aura's code standard: no new deps).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseFrontmatter = parseFrontmatter;
+function parseFrontmatter(content) {
+    const normalized = content.replace(/^/, '');
+    const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(normalized);
+    if (!match)
+        return { data: {}, body: normalized };
+    const data = {};
+    const lines = match[1].split(/\r?\n/);
+    let pendingArrayKey = null;
+    for (const line of lines) {
+        if (!line.trim() || line.trim().startsWith('#'))
+            continue;
+        // Block-array item under a pending key:  "  - value"
+        const item = /^\s+-\s+(.*)$/.exec(line);
+        if (item && pendingArrayKey) {
+            data[pendingArrayKey].push(scalar(item[1]));
+            continue;
+        }
+        // Indented non-item line = nested structure we don't consume — skip.
+        if (/^\s/.test(line)) {
+            pendingArrayKey = null;
+            continue;
+        }
+        const kv = /^([A-Za-z0-9_-]+):\s*(.*)$/.exec(line);
+        if (!kv) {
+            pendingArrayKey = null;
+            continue;
+        }
+        const [, key, rawValue] = kv;
+        if (rawValue === '') {
+            // Either a block array follows, or an empty value.
+            data[key] = [];
+            pendingArrayKey = key;
+            continue;
+        }
+        pendingArrayKey = null;
+        if (rawValue.startsWith('[') && rawValue.endsWith(']')) {
+            data[key] = rawValue
+                .slice(1, -1)
+                .split(',')
+                .map(v => scalar(v.trim()))
+                .filter(v => v !== '');
+            continue;
+        }
+        data[key] = scalar(rawValue);
+    }
+    // Keys that collected no items and no value: normalize [] → undefined-ish
+    for (const [k, v] of Object.entries(data)) {
+        if (Array.isArray(v) && v.length === 0)
+            data[k] = '';
+    }
+    return { data, body: normalized.slice(match[0].length) };
+}
+function scalar(raw) {
+    const v = raw.trim();
+    if ((v.startsWith('"') && v.endsWith('"')) || (v.startsWith("'") && v.endsWith("'"))) {
+        return v.slice(1, -1);
+    }
+    if (v === 'true')
+        return true;
+    if (v === 'false')
+        return false;
+    if (/^-?\d+(\.\d+)?$/.test(v))
+        return Number(v);
+    return v;
+}
+//# sourceMappingURL=frontmatter.js.map

package/dist/plugins/frontmatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontmatter.js","sourceRoot":"","sources":["../../src/plugins/frontmatter.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAOH,4CAoDC;AApDD,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAElD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEtC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE1D,qDAAqD;QACrD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,eAAe,EAAE,CAAC;YAC3B,IAAI,CAAC,eAAe,CAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,qEAAqE;QACrE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,eAAe,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAE3D,MAAM,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,eAAe,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpB,mDAAmD;YACnD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACf,eAAe,GAAG,GAAG,CAAC;YACtB,SAAS;QACX,CAAC;QACD,eAAe,GAAG,IAAI,CAAC;QAEvB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ;iBACjB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;iBACZ,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;iBAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,0EAA0E;IAC1E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/plugins/hooks.d.ts

@@ -0,0 +1,12 @@
+import type { HookEntry, HookEvent } from './types.js';
+export interface HookOutcome {
+    /** True when a PreToolUse hook blocked the call. */
+    block: boolean;
+    /** Reasons from blocking hooks / warnings from failing ones. */
+    messages: string[];
+}
+/**
+ * Run every hook registered for `event` whose matcher covers this tool.
+ * Hook failures (bad command, timeout, non-2 exit) never block — they warn.
+ */
+export declare function runHooks(event: HookEvent, toolName: string, toolInput: Record<string, unknown>, entries: HookEntry[], projectRoot: string, toolResponse?: string): Promise<HookOutcome>;

package/dist/plugins/hooks.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runHooks = runHooks;
+/**
+ * Plugin hook runner — executes Claude Code-style hooks around tool calls.
+ *
+ * Compatibility contract (matches Claude Code so published plugins work
+ * unmodified):
+ *   - The hook command receives a JSON payload on stdin with the Claude Code
+ *     tool name and input-key spelling (Bash/Write/Edit…, file_path/…).
+ *   - Exit code 2 blocks the tool call (PreToolUse); stderr becomes the
+ *     reason fed back to the model. Any other non-zero exit is a warning.
+ *   - stdout JSON {"decision": "block", "reason": "…"} also blocks.
+ *   - ${CLAUDE_PLUGIN_ROOT} in the command is replaced with the plugin dir;
+ *     $CLAUDE_PROJECT_DIR is provided as an env var.
+ *
+ * Security note: hooks are user-installed code and run unsandboxed with the
+ * user's privileges by design — installing a plugin is trusting its author,
+ * exactly like installing an npm package. Documented in docs/SECURITY.md.
+ */
+const child_process_1 = require("child_process");
+/** aura tool name → Claude Code tool name (what hook matchers/scripts expect). */
+const CLAUDE_TOOL_ALIAS = {
+    run_shell: 'Bash',
+    write_file: 'Write',
+    edit_file: 'Edit',
+    read_file: 'Read',
+    list_dir: 'Glob',
+    search_code: 'Grep',
+    web_fetch: 'WebFetch',
+    web_search: 'WebSearch',
+    run_tests: 'Bash',
+    spawn_task: 'Task',
+};
+/** aura input shape → Claude Code input-key spelling, per tool. */
+function toClaudeInput(auraName, input) {
+    switch (auraName) {
+        case 'write_file': return { file_path: input.path, content: input.content };
+        case 'edit_file': return { file_path: input.path, old_string: input.find, new_string: input.replace };
+        case 'read_file': return { file_path: input.path };
+        case 'run_shell': return { command: input.command, timeout: input.timeout };
+        default: return input;
+    }
+}
+const DEFAULT_TIMEOUT_S = 60;
+/**
+ * Run every hook registered for `event` whose matcher covers this tool.
+ * Hook failures (bad command, timeout, non-2 exit) never block — they warn.
+ */
+async function runHooks(event, toolName, toolInput, entries, projectRoot, toolResponse) {
+    const outcome = { block: false, messages: [] };
+    const claudeName = CLAUDE_TOOL_ALIAS[toolName] ?? toolName;
+    for (const entry of entries) {
+        if (entry.event !== event)
+            continue;
+        if (!matcherCovers(entry.matcher, claudeName, toolName))
+            continue;
+        const payload = JSON.stringify({
+            hook_event_name: event,
+            tool_name: claudeName,
+            tool_input: toClaudeInput(toolName, toolInput),
+            ...(toolResponse !== undefined ? { tool_response: toolResponse.slice(0, 8000) } : {}),
+            cwd: projectRoot,
+            // aura-specific extras, namespaced so CC-written hooks are unaffected
+            aura: { tool_name: toolName, tool_input: toolInput },
+        });
+        const command = entry.command.replace(/\$\{CLAUDE_PLUGIN_ROOT\}/g, entry.pluginRoot);
+        const result = await execHook(command, payload, projectRoot, entry);
+        if (result.blocked) {
+            outcome.block = true;
+            if (result.reason)
+                outcome.messages.push(`[${entry.pluginName}] ${result.reason}`);
+        }
+        else if (result.warning) {
+            outcome.messages.push(`[${entry.pluginName}] ${result.warning}`);
+        }
+    }
+    return outcome;
+}
+function matcherCovers(matcher, claudeName, auraName) {
+    if (!matcher || matcher === '*' || matcher === '')
+        return true;
+    try {
+        const re = new RegExp(`^(?:${matcher})$`);
+        return re.test(claudeName) || re.test(auraName);
+    }
+    catch {
+        return matcher === claudeName || matcher === auraName;
+    }
+}
+function execHook(command, payload, cwd, entry) {
+    return new Promise(resolve => {
+        const timeoutMs = (entry.timeout ?? DEFAULT_TIMEOUT_S) * 1000;
+        let child;
+        try {
+            child = (0, child_process_1.spawn)(command, {
+                shell: true, cwd,
+                env: {
+                    ...process.env,
+                    CLAUDE_PROJECT_DIR: cwd,
+                    AURA_PROJECT_DIR: cwd,
+                    CLAUDE_PLUGIN_ROOT: entry.pluginRoot,
+                },
+            });
+        }
+        catch (e) {
+            resolve({ blocked: false, warning: `hook failed to start: ${String(e)}` });
+            return;
+        }
+        let stdout = '';
+        let stderr = '';
+        let settled = false;
+        const settle = (v) => {
+            if (!settled) {
+                settled = true;
+                clearTimeout(timer);
+                resolve(v);
+            }
+        };
+        const timer = setTimeout(() => {
+            child.kill('SIGKILL');
+            settle({ blocked: false, warning: `hook timed out after ${timeoutMs / 1000}s` });
+        }, timeoutMs);
+        child.stdout?.on('data', d => { stdout += String(d); });
+        child.stderr?.on('data', d => { stderr += String(d); });
+        child.on('error', e => settle({ blocked: false, warning: `hook error: ${String(e)}` }));
+        child.on('close', code => {
+            // stdout JSON verdict wins regardless of exit code
+            try {
+                const parsed = JSON.parse(stdout);
+                if (parsed?.decision === 'block') {
+                    settle({ blocked: true, reason: String(parsed.reason ?? stderr.trim() ?? 'blocked') });
+                    return;
+                }
+            }
+            catch { /* stdout wasn't JSON — fall through to exit-code semantics */ }
+            if (code === 2)
+                settle({ blocked: true, reason: stderr.trim() || 'blocked by hook' });
+            else if (code !== 0)
+                settle({ blocked: false, warning: `hook exited ${code}: ${stderr.trim().slice(0, 200)}` });
+            else
+                settle({ blocked: false });
+        });
+        child.stdin?.on('error', () => { });
+        child.stdin?.end(payload);
+    });
+}
+//# sourceMappingURL=hooks.js.map

package/dist/plugins/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/plugins/hooks.ts"],"names":[],"mappings":";;AA0DA,4BAqCC;AA/FD;;;;;;;;;;;;;;;;GAgBG;AACH,iDAAsC;AAUtC,kFAAkF;AAClF,MAAM,iBAAiB,GAA2B;IAChD,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,UAAU;IACrB,UAAU,EAAE,WAAW;IACvB,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,MAAM;CACnB,CAAC;AAEF,mEAAmE;AACnE,SAAS,aAAa,CAAC,QAAgB,EAAE,KAA8B;IACrE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5E,KAAK,WAAW,CAAC,CAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACvG,KAAK,WAAW,CAAC,CAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,KAAK,WAAW,CAAC,CAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,OAAO,CAAC,CAAW,OAAO,KAAK,CAAC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;GAGG;AACI,KAAK,UAAU,QAAQ,CAC5B,KAAgB,EAChB,QAAgB,EAChB,SAAkC,EAClC,OAAoB,EACpB,WAAmB,EACnB,YAAqB;IAErB,MAAM,OAAO,GAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAE3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,SAAS;QACpC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC;YAAE,SAAS;QAElE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC9C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,EAAE,WAAW;YAChB,sEAAsE;YACtE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;SACrD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAEpE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;YACrB,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,OAA2B,EAAE,UAAkB,EAAE,QAAgB;IACtF,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,OAAO,IAAI,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,QAAQ,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,OAAe,EACf,OAAe,EACf,GAAW,EACX,KAAgB;IAEhB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,iBAAiB,CAAC,GAAG,IAAI,CAAC;QAC9D,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE;gBACrB,KAAK,EAAE,IAAI,EAAE,GAAG;gBAChB,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,kBAAkB,EAAE,GAAG;oBACvB,gBAAgB,EAAE,GAAG;oBACrB,kBAAkB,EAAE,KAAK,CAAC,UAAU;iBACrC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAA0D,EAAE,EAAE;YAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QACpE,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACvB,mDAAmD;YACnD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,MAAM,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;oBACvF,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,8DAA8D,CAAC,CAAC;YAE1E,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC,CAAC;iBACjF,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;;gBAC3G,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAgD,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/plugins/loader.d.ts

@@ -0,0 +1,7 @@
+import type { LoadedPlugin } from './types.js';
+export declare function pluginsDir(): string;
+export declare function marketplacesDir(): string;
+/** Load every plugin installed in the plugins dir. Never throws. */
+export declare function loadAllPlugins(): LoadedPlugin[];
+/** Load a single plugin directory. Returns null when it isn't a plugin. */
+export declare function loadPlugin(dir: string): LoadedPlugin | null;