cherry-works 0.7.1 → 0.7.4

package/dist/main.js

@@ -9507,7 +9507,7 @@ var require_core = __commonJS({
       errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
         if (!errors || errors.length === 0)
           return "No errors";
-        return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text, msg) => text + separator + msg);
+        return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text2, msg) => text2 + separator + msg);
       }
       $dataMetaSchema(metaSchema, keywordsJsonPointers) {
         const rules = this.RULES.all;
@@ -14822,14 +14822,14 @@ var require_foldFlowLines = __commonJS({
     var FOLD_FLOW = "flow";
     var FOLD_BLOCK = "block";
     var FOLD_QUOTED = "quoted";
-    function foldFlowLines(text, indent, mode = "flow", { indentAtStart, lineWidth = 80, minContentWidth = 20, onFold, onOverflow } = {}) {
+    function foldFlowLines(text2, indent, mode = "flow", { indentAtStart, lineWidth = 80, minContentWidth = 20, onFold, onOverflow } = {}) {
       if (!lineWidth || lineWidth < 0)
-        return text;
+        return text2;
       if (lineWidth < minContentWidth)
         minContentWidth = 0;
       const endStep = Math.max(1 + minContentWidth, 1 + lineWidth - indent.length);
-      if (text.length <= endStep)
-        return text;
+      if (text2.length <= endStep)
+        return text2;
       const folds = [];
       const escapedFolds = {};
       let end = lineWidth - indent.length;
@@ -14846,14 +14846,14 @@ var require_foldFlowLines = __commonJS({
       let escStart = -1;
       let escEnd = -1;
       if (mode === FOLD_BLOCK) {
-        i = consumeMoreIndentedLines(text, i, indent.length);
+        i = consumeMoreIndentedLines(text2, i, indent.length);
         if (i !== -1)
           end = i + endStep;
       }
-      for (let ch; ch = text[i += 1]; ) {
+      for (let ch; ch = text2[i += 1]; ) {
         if (mode === FOLD_QUOTED && ch === "\\") {
           escStart = i;
-          switch (text[i + 1]) {
+          switch (text2[i + 1]) {
             case "x":
               i += 3;
               break;
@@ -14870,12 +14870,12 @@ var require_foldFlowLines = __commonJS({
         }
         if (ch === "\n") {
           if (mode === FOLD_BLOCK)
-            i = consumeMoreIndentedLines(text, i, indent.length);
+            i = consumeMoreIndentedLines(text2, i, indent.length);
           end = i + indent.length + endStep;
           split = void 0;
         } else {
           if (ch === " " && prev && prev !== " " && prev !== "\n" && prev !== "	") {
-            const next = text[i + 1];
+            const next = text2[i + 1];
             if (next && next !== " " && next !== "\n" && next !== "	")
               split = i;
           }
@@ -14887,12 +14887,12 @@ var require_foldFlowLines = __commonJS({
             } else if (mode === FOLD_QUOTED) {
               while (prev === " " || prev === "	") {
                 prev = ch;
-                ch = text[i += 1];
+                ch = text2[i += 1];
                 overflow = true;
               }
               const j = i > escEnd + 1 ? i - 2 : escStart - 1;
               if (escapedFolds[j])
-                return text;
+                return text2;
               folds.push(j);
               escapedFolds[j] = true;
               end = j + endStep;
@@ -14907,39 +14907,39 @@ var require_foldFlowLines = __commonJS({
       if (overflow && onOverflow)
         onOverflow();
       if (folds.length === 0)
-        return text;
+        return text2;
       if (onFold)
         onFold();
-      let res = text.slice(0, folds[0]);
+      let res = text2.slice(0, folds[0]);
       for (let i2 = 0; i2 < folds.length; ++i2) {
         const fold = folds[i2];
-        const end2 = folds[i2 + 1] || text.length;
+        const end2 = folds[i2 + 1] || text2.length;
         if (fold === 0)
           res = `
-${indent}${text.slice(0, end2)}`;
+${indent}${text2.slice(0, end2)}`;
         else {
           if (mode === FOLD_QUOTED && escapedFolds[fold])
-            res += `${text[fold]}\\`;
+            res += `${text2[fold]}\\`;
           res += `
-${indent}${text.slice(fold + 1, end2)}`;
+${indent}${text2.slice(fold + 1, end2)}`;
         }
       }
       return res;
     }
-    function consumeMoreIndentedLines(text, i, indent) {
+    function consumeMoreIndentedLines(text2, i, indent) {
       let end = i;
       let start = i + 1;
-      let ch = text[start];
+      let ch = text2[start];
       while (ch === " " || ch === "	") {
         if (i < start + indent) {
-          ch = text[++i];
+          ch = text2[++i];
         } else {
           do {
-            ch = text[++i];
+            ch = text2[++i];
           } while (ch && ch !== "\n");
           end = i;
           start = i + 1;
-          ch = text[start];
+          ch = text2[start];
         }
       }
       return end;
@@ -21665,7 +21665,7 @@ var require_cross_spawn = __commonJS({
     var cp = __require("child_process");
     var parse5 = require_parse2();
     var enoent = require_enoent();
-    function spawn5(command2, args, options) {
+    function spawn6(command2, args, options) {
       const parsed = parse5(command2, args, options);
       const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
@@ -21677,8 +21677,8 @@ var require_cross_spawn = __commonJS({
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
     }
-    module.exports = spawn5;
-    module.exports.spawn = spawn5;
+    module.exports = spawn6;
+    module.exports.spawn = spawn6;
     module.exports.sync = spawnSync;
     module.exports._parse = parse5;
     module.exports._enoent = enoent;
@@ -21898,7 +21898,7 @@ import { pathToFileURL as pathToFileURL2 } from "url";
 // package.json
 var package_default = {
   name: "cherry-works",
-  version: "0.7.1",
+  version: "0.7.4",
   description: "The charter engine: resolves a charter and compiles it into what a coding agent reads.",
   keywords: [
     "claude-code",
@@ -22057,10 +22057,10 @@ var UI = class {
     });
     return this.rows[this.rows.length - 1];
   }
-  colFromString(text) {
+  colFromString(text2) {
     return {
-      text,
-      padding: this.measurePadding(text)
+      text: text2,
+      padding: this.measurePadding(text2)
     };
   }
   measurePadding(str) {
@@ -25324,17 +25324,17 @@ function usage(yargs, shim3) {
   };
   return self;
 }
-function isIndentedText(text) {
-  return typeof text === "object";
+function isIndentedText(text2) {
+  return typeof text2 === "object";
 }
-function addIndentation(text, indent) {
-  return isIndentedText(text) ? { text: text.text, indentation: text.indentation + indent } : { text, indentation: indent };
+function addIndentation(text2, indent) {
+  return isIndentedText(text2) ? { text: text2.text, indentation: text2.indentation + indent } : { text: text2, indentation: indent };
 }
-function getIndentation(text) {
-  return isIndentedText(text) ? text.indentation : 0;
+function getIndentation(text2) {
+  return isIndentedText(text2) ? text2.indentation : 0;
 }
-function getText(text) {
-  return isIndentedText(text) ? text.text : text;
+function getText(text2) {
+  return isIndentedText(text2) ? text2.text : text2;
 }
 
 // node_modules/.pnpm/yargs@18.1.0/node_modules/yargs/build/lib/completion-templates.js
@@ -37577,8 +37577,8 @@ function ko_default() {
 }
 
 // node_modules/.pnpm/zod@4.6.1/node_modules/zod/v4/locales/lt.js
-var capitalizeFirstCharacter = (text) => {
-  return text.charAt(0).toUpperCase() + text.slice(1);
+var capitalizeFirstCharacter = (text2) => {
+  return text2.charAt(0).toUpperCase() + text2.slice(1);
 };
 function getUnitTypeFromNumber(number4) {
   const abs = Math.abs(number4);
@@ -51930,7 +51930,7 @@ var HonoRequest = class {
    * ```
    */
   json() {
-    return this.#cachedBody("text").then((text) => JSON.parse(text));
+    return this.#cachedBody("text").then((text2) => JSON.parse(text2));
   }
   /**
    * `.text()` can parse Request body of type `text/plain`
@@ -52496,9 +52496,9 @@ var Context = class {
    * })
    * ```
    */
-  text = (text, arg, headers) => {
-    return !this.#preparedHeaders && !this.#status && !arg && !headers && !this.finalized ? new Response(text) : this.#newResponse(
-      text,
+  text = (text2, arg, headers) => {
+    return !this.#preparedHeaders && !this.#status && !arg && !headers && !this.finalized ? new Response(text2) : this.#newResponse(
+      text2,
       arg,
       setDefaultContentType(TEXT_PLAIN, headers)
     );
@@ -57515,7 +57515,15 @@ var SessionReviewOutcomeSchema = dto(
     dailySessionSummary: external_exports.record(external_exports.string(), DataDTOs.SessionSummary)
   })
 );
-var OutcomeDTOs = byType(DoctorOutcomeSchema, ExplanationOutcomeSchema, SessionReviewOutcomeSchema);
+var SensorRunOutcomeSchema = dto(
+  "SensorRunOutcome",
+  external_exports.object({
+    exitCode: external_exports.number(),
+    answer: external_exports.string(),
+    problem: external_exports.string()
+  })
+);
+var OutcomeDTOs = byType(DoctorOutcomeSchema, ExplanationOutcomeSchema, SensorRunOutcomeSchema, SessionReviewOutcomeSchema);
 
 // src/hexagon/domain/models/helper.ts
 function formatFrontmatterValue(value) {
@@ -57837,10 +57845,10 @@ var SAMPLE_CASES = [
 var SAMPLE = JSON.stringify({ cases: SAMPLE_CASES }, void 0, 1).replace(/\n\s*/g, " ");
 var DEFAULT_TEST_SUITE_BODY = `${JSON.stringify({ description: "What these cases pin down.", cases: [SAMPLE_CASES[0]] }, null, 2)}
 `;
-function testSuiteOf(text) {
+function testSuiteOf(text2) {
   let written;
   try {
-    written = JSON.parse(text);
+    written = JSON.parse(text2);
   } catch {
     throw new TestSuiteFault(
       `This file is not JSON, so nothing can read the cases it was meant to hold.`,
@@ -57849,7 +57857,7 @@ function testSuiteOf(text) {
   }
   const read = TestSuiteSchema2.safeParse(written);
   if (!read.success) throw new TestSuiteFault(`This file is not written as a suite of cases.`, `Write it as ${SAMPLE}`);
-  return new TestSuite(read.data.description, read.data.cases, text);
+  return new TestSuite(read.data.description, read.data.cases, text2);
 }
 
 // src/hexagon/domain/models/test/TestRoot.ts
@@ -58075,6 +58083,9 @@ function sessionReviewOutcomeDTO(sessionAnalysis, sessionAnalysisSummary, sessio
     }
   };
 }
+function sensorRunOutcomeDTO(signalAnswer) {
+  return { type: "SensorRunOutcome", data: { exitCode: signalAnswer.exitCode, answer: signalAnswer.stdout, problem: signalAnswer.stderr } };
+}
 
 // src/driver/portal/routes.ts
 var json3 = (schema, description) => ({
@@ -58514,8 +58525,27 @@ var RemoveCommand = class {
   }
 };
 
-// src/driver/cli/commands/SessionsCommand.ts
+// src/driver/cli/commands/SensorRunCommand.ts
+import { text } from "stream/consumers";
 var OPTIONS12 = {
+  signal: {
+    type: "string",
+    describe: "The signal the host fired, as a sensor names it: Stop, PreToolUse\u2026"
+  }
+};
+var SensorRunCommand = class {
+  name = "sensor run <signal>";
+  summary = "Run every sensor of a signal, as the host's one hook for it";
+  options = OPTIONS12;
+  async run({ sensorRunningApp: sensorRunningApp2 }, { signal }) {
+    const stdin = process.stdin.isTTY ? "" : await text(process.stdin);
+    const { data: sensorRunOutcome } = await sensorRunningApp2.runSensors(signal ?? "", stdin);
+    return { code: sensorRunOutcome.exitCode, result: sensorRunOutcome.answer, problem: sensorRunOutcome.problem };
+  }
+};
+
+// src/driver/cli/commands/SessionsCommand.ts
+var OPTIONS13 = {
   since: {
     type: "string",
     describe: "Count the sessions whose last stop is on or after this day, YYYY-MM-DD; 31 days from it unless --until says"
@@ -58533,7 +58563,7 @@ var OPTIONS12 = {
 var SessionsCommand = class {
   name = "sessions";
   summary = "Sum up the tokens of the sessions kept on this machine, by day and by session";
-  options = OPTIONS12;
+  options = OPTIONS13;
   async run({ sessionReviewingApp: sessionReviewingApp2 }, { since, until, json: isJson }) {
     const sessionReviewOutcome = await sessionReviewingApp2.sessionSummary(since, until);
     if (isJson) return { code: EXIT_OK, result: `${JSON.stringify(sessionReviewOutcome, null, 2)}
@@ -58591,7 +58621,7 @@ var SuiteAddCommand = class {
 };
 
 // src/driver/cli/commands/SuiteEditCommand.ts
-var OPTIONS13 = {
+var OPTIONS14 = {
   name: {
     type: "string",
     describe: `The test file's name under ${TEST_DIRECTORY}/: "untitled-1.json"`
@@ -58600,7 +58630,7 @@ var OPTIONS13 = {
 var SuiteEditCommand = class {
   name = "suite edit <name>";
   summary = "Open one test file in your editor";
-  options = OPTIONS13;
+  options = OPTIONS14;
   async run({ cwd, testAuthoringApp: testAuthoringApp2 }, { name }) {
     const { testSuites } = (await testAuthoringApp2.suites()).data;
     if (!testSuites.some((one) => one.data.name === name))
@@ -58613,7 +58643,7 @@ var SuiteEditCommand = class {
 };
 
 // src/driver/cli/commands/SuiteRemoveCommand.ts
-var OPTIONS14 = {
+var OPTIONS15 = {
   name: {
     type: "string",
     describe: `The test file's name under ${TEST_DIRECTORY}/: "untitled-1.json"`
@@ -58622,7 +58652,7 @@ var OPTIONS14 = {
 var SuiteRemoveCommand = class {
   name = "suite remove <name>";
   summary = "Delete one test file";
-  options = OPTIONS14;
+  options = OPTIONS15;
   async run({ testAuthoringApp: testAuthoringApp2 }, { name }) {
     const removedName = await testAuthoringApp2.removeSuite(name ?? "");
     return { code: EXIT_OK, result: `Removed ${TEST_DIRECTORY}/${removedName}.
@@ -58669,7 +58699,7 @@ function lines2(one) {
 }
 
 // src/driver/cli/commands/VendorAddCommand.ts
-var OPTIONS15 = {
+var OPTIONS16 = {
   source: {
     type: "string",
     describe: "What git clones the charter from: an address over any transport, or a path on disk"
@@ -58682,7 +58712,7 @@ var OPTIONS15 = {
 var VendorAddCommand = class {
   name = "vendor add <source>";
   summary = "Install a charter from a git source, or bring an installed one up to date";
-  options = OPTIONS15;
+  options = OPTIONS16;
   async run({ charterVendoringApp: charterVendoringApp2 }, { source, ref }) {
     const folder = await charterVendoringApp2.add(source ?? "", ref);
     return {
@@ -58710,7 +58740,7 @@ var VendorListCommand = class {
 };
 
 // src/driver/cli/commands/VendorRemoveCommand.ts
-var OPTIONS16 = {
+var OPTIONS17 = {
   name: {
     type: "string",
     describe: "The folder this charter was installed as, as it reads under .cw/vendor/"
@@ -58719,7 +58749,7 @@ var OPTIONS16 = {
 var VendorRemoveCommand = class {
   name = "vendor remove <name>";
   summary = "Take an installed charter away";
-  options = OPTIONS16;
+  options = OPTIONS17;
   async run({ charterVendoringApp: charterVendoringApp2 }, { name }) {
     const folder = await charterVendoringApp2.remove(name ?? "");
     return {
@@ -58756,7 +58786,8 @@ var COMMANDS = [
   new VendorListCommand(),
   new PortalCommand(),
   new McpAuthCommand(),
-  new McpServeCommand()
+  new McpServeCommand(),
+  new SensorRunCommand()
 ];
 
 // src/driver/cli/Commander.ts
@@ -60077,11 +60108,11 @@ var WorkspaceSettings = class {
 
 // src/hexagon/service/settingsRepo.ts
 async function loadSettings(repo, fileReaders) {
-  const text = await fileReaders.readIfThere(settingsFileIn(repo));
-  if (text === void 0) return new WorkspaceSettings([]);
+  const text2 = await fileReaders.readIfThere(settingsFileIn(repo));
+  if (text2 === void 0) return new WorkspaceSettings([]);
   let written;
   try {
-    written = JSON.parse(text);
+    written = JSON.parse(text2);
   } catch {
     throw new SettingsFault(
       `These are this repository's own settings and this is not JSON.`,
@@ -60137,10 +60168,10 @@ async function addTestSuite(repo, fileReaders, fileWriter2) {
   await fileWriter2.write(new URL(name, testFolderIn(repo)), DEFAULT_TEST_SUITE_BODY);
   return name;
 }
-async function writeTestSuite(repo, fileReaders, fileWriter2, name, text) {
+async function writeTestSuite(repo, fileReaders, fileWriter2, name, text2) {
   await ensureTestSuiteNamed(repo, fileReaders, name);
-  testSuiteOf(text);
-  await fileWriter2.write(new URL(name, testFolderIn(repo)), text);
+  testSuiteOf(text2);
+  await fileWriter2.write(new URL(name, testFolderIn(repo)), text2);
   return name;
 }
 async function removeTestSuite(repo, fileReaders, fileWriter2, name) {
@@ -60387,22 +60418,24 @@ function isStamped(contents) {
 
 // src/hexagon/domain/models/output/CharterOutput.ts
 var CharterOutput = class {
-  constructor(catalogue, charterMd, compiledPrimitives, mcpOrigins, providerComponents) {
+  constructor(catalogue, charterMd, compiledPrimitives, mcpOrigins, builtSensors, providerComponents) {
     this.catalogue = catalogue;
     this.charterMd = charterMd;
     this.compiledPrimitives = compiledPrimitives;
     this.mcpOrigins = mcpOrigins;
+    this.builtSensors = builtSensors;
     this.providerComponents = providerComponents;
   }
   catalogue;
   charterMd;
   compiledPrimitives;
   mcpOrigins;
+  builtSensors;
   providerComponents;
   /** Every file this output is put down as: what each of its parts says it is
    *  put down as, together (FR-020, FR-021). */
   get projections() {
-    return [this.catalogue, this.mcpOrigins, this.charterMd, ...this.compiledPrimitives, ...this.providerComponents].flatMap(
+    return [this.catalogue, this.mcpOrigins, this.builtSensors, this.charterMd, ...this.compiledPrimitives, ...this.providerComponents].flatMap(
       (outputPart) => outputPart.projections
     );
   }
@@ -60528,6 +60561,36 @@ function compiledPrimitiveOf(charter, primitive) {
   );
 }
 
+// src/hexagon/domain/models/output/common/BuiltSensor.ts
+function sensorRunCommandOf(signal) {
+  return `cw sensor run ${signal}`;
+}
+var BuiltSensors = class {
+  constructor(sensors) {
+    this.sensors = sensors;
+  }
+  sensors;
+  /** The file it is put down as, in the output folder: generated, and the
+   *  charter's alone. Indented, since it is committed and read in diffs when a
+   *  sensor's command changes. */
+  get projections() {
+    return [
+      {
+        file: `${OUT_DIRECTORY}/sensors.json`,
+        contents: `${JSON.stringify({ sensors: this.sensors }, void 0, 2)}
+`,
+        projectionPolicy: "replace",
+        executable: false
+      }
+    ];
+  }
+  /** Every signal at least one sensor names, each once, in the order the
+   *  sensors name them. */
+  get signals() {
+    return [...new Set(this.sensors.map((builtSensor) => builtSensor.signal))];
+  }
+};
+
 // src/hexagon/domain/models/output/provider-component/ProviderComponent.ts
 var ProviderComponent = class {
   constructor(path, document, projectionPolicy) {
@@ -60672,7 +60735,7 @@ var ClaudeSettings = class _ClaudeSettings extends SettingBasedComponent {
 };
 
 // src/hexagon/domain/services/compile/claudeComponentFactory.ts
-function claudeComponentsOf(charter, compiledPrimitiveByPrimitive, shortMcpIds) {
+function claudeComponentsOf(charter, compiledPrimitiveByPrimitive, shortMcpIds, builtSensors) {
   const isSettingComponent = (one) => one.kind === PosturePrimitive.kind || one.kind === SensorPrimitive.kind;
   const asSettings = charter.primitives.filter(isSettingComponent);
   const asDocuments = charter.primitives.filter((one) => !isSettingComponent(one));
@@ -60690,7 +60753,7 @@ function claudeComponentsOf(charter, compiledPrimitiveByPrimitive, shortMcpIds)
     // The section of `CLAUDE.md` that sends this host to the charter at all
     // (FR-051).
     ClaudeEntryFile.of(),
-    ...asSettings.length === 0 && toolsByMcpId.size === 0 ? [] : [ClaudeSettings.of(claudeSettingsOf(charter, compiledPrimitiveByPrimitive, asSettings))],
+    ...asSettings.length === 0 && toolsByMcpId.size === 0 ? [] : [ClaudeSettings.of(claudeSettingsOf(charter, builtSensors, asSettings))],
     ClaudeMcpConfig.of(),
     ...asDocuments.flatMap(
       (one) => claudeDocumentComponentOf(
@@ -60702,30 +60765,19 @@ function claudeComponentsOf(charter, compiledPrimitiveByPrimitive, shortMcpIds)
     )
   ];
 }
-function claudeSettingsOf(charter, compiledPrimitiveByPrimitive, ones) {
-  const allow = /* @__PURE__ */ new Set();
-  const deny = /* @__PURE__ */ new Set();
-  const hooks = {};
-  for (const one of ones) {
-    if (one.kind === PosturePrimitive.kind) {
-      const headers = one.headers;
-      for (const permission of headers.allow) allow.add(permission);
-      for (const permission of headers.deny) deny.add(permission);
-    }
-    if (one.kind === SensorPrimitive.kind) {
-      const { signal, run: run3 } = one.headers;
-      const command2 = run3.replace(REFERENCE, (reference, referencedId) => {
-        const scriptPrimitive = charter.primitiveById.get(referencedId);
-        const executionFile = scriptPrimitive && compiledPrimitiveByPrimitive.get(scriptPrimitive)?.projections.find((projection) => projection.executable)?.file;
-        return executionFile ?? reference;
-      });
-      if (isClaudeHookEvent(signal))
-        hooks[signal] = [...hooks[signal] ?? [], { hooks: [{ type: "command", command: command2 }] }];
+function claudeSettingsOf(charter, builtSensors, settingPrimitives) {
+  const allowedPermissions = /* @__PURE__ */ new Set();
+  const deniedPermissions = /* @__PURE__ */ new Set();
+  for (const settingPrimitive of settingPrimitives) {
+    if (settingPrimitive.kind === PosturePrimitive.kind) {
+      for (const permission of settingPrimitive.headers.allow) allowedPermissions.add(permission);
+      for (const permission of settingPrimitive.headers.deny) deniedPermissions.add(permission);
     }
   }
+  const hookEvents = builtSensors.signals.filter(isClaudeHookEvent).sort();
   return {
-    ...allow.size === 0 && deny.size === 0 ? {} : { permissions: { allow: [...allow], deny: [...deny] } },
-    ...Object.keys(hooks).length === 0 ? {} : { hooks },
+    ...allowedPermissions.size === 0 && deniedPermissions.size === 0 ? {} : { permissions: { allow: [...allowedPermissions], deny: [...deniedPermissions] } },
+    ...hookEvents.length === 0 ? {} : { hooks: Object.fromEntries(hookEvents.map((hookEvent) => [hookEvent, [{ hooks: [{ type: "command", command: sensorRunCommandOf(hookEvent) }] }]])) },
     // A charter reaching an mcp origin has its tools' schemas deferred by the host
     // itself, the one server listing every tool (EVAL-FR-016).
     ...charter.primitives.some((primitive) => primitive instanceof McpPrimitive) && { env: CLAUDE_TOOL_SEARCH_ENV }
@@ -60805,6 +60857,19 @@ function mcpOriginsOf(charter, shortMcpIds, toolsByOriginKey = /* @__PURE__ */ n
   });
 }
 
+// src/hexagon/domain/services/compile/builtSensorsFactory.ts
+function builtSensorsOf(charter, compiledPrimitiveByPrimitive) {
+  return [...charter.primitives].flatMap((primitive) => primitive.kind === SensorPrimitive.kind ? [primitive] : []).sort((one, another) => one.headers.id < another.headers.id ? -1 : 1).map(({ headers: { id, signal, run: run3 } }) => ({
+    id,
+    signal,
+    command: run3.replace(REFERENCE, (reference, referencedId) => {
+      const scriptPrimitive = charter.primitiveById.get(referencedId);
+      const executionFile = scriptPrimitive && compiledPrimitiveByPrimitive.get(scriptPrimitive)?.projections.find((projection) => projection.executable)?.file;
+      return executionFile ?? reference;
+    })
+  }));
+}
+
 // src/hexagon/domain/services/compile/compileService.ts
 function compile2(charter, agents, toolsByOriginKey = /* @__PURE__ */ new Map()) {
   const shortMcpIds = shortenStringsOf(
@@ -60813,6 +60878,7 @@ function compile2(charter, agents, toolsByOriginKey = /* @__PURE__ */ new Map())
   const compiledPrimitiveByPrimitive = new Map(
     [...charter.primitives].sort((one, another) => one.headers.id < another.headers.id ? -1 : one.headers.id > another.headers.id ? 1 : 0).map((primitive) => [primitive, compiledPrimitiveOf(charter, primitive)])
   );
+  const builtSensors = new BuiltSensors(builtSensorsOf(charter, compiledPrimitiveByPrimitive));
   return new CharterOutput(
     // What an agent opens from the catalogue is the primitive as it compiled,
     // not the file its author wrote: the whole body in one place, under the
@@ -60822,13 +60888,14 @@ function compile2(charter, agents, toolsByOriginKey = /* @__PURE__ */ new Map())
     charterMdOf(PRIMITIVE_CLASSES),
     [...compiledPrimitiveByPrimitive.values()],
     new McpOrigins(mcpOriginsOf(charter, shortMcpIds, toolsByOriginKey)),
-    agents.flatMap((agent) => providerComponentsOf(agent, charter, compiledPrimitiveByPrimitive, shortMcpIds))
+    builtSensors,
+    agents.flatMap((agent) => providerComponentsOf(agent, charter, compiledPrimitiveByPrimitive, shortMcpIds, builtSensors))
   );
 }
-function providerComponentsOf(agent, charter, compiledPrimitiveByPrimitive, shortMcpIds) {
+function providerComponentsOf(agent, charter, compiledPrimitiveByPrimitive, shortMcpIds, builtSensors) {
   switch (agent) {
     case "claude":
-      return claudeComponentsOf(charter, compiledPrimitiveByPrimitive, shortMcpIds);
+      return claudeComponentsOf(charter, compiledPrimitiveByPrimitive, shortMcpIds, builtSensors);
   }
 }
 
@@ -61099,7 +61166,7 @@ function tokenFactorOf(agent) {
 function estimatedMainContextOf(charter, agent, tokenCounter2) {
   return new MainContext(
     agent,
-    mainContextTextsOf(charter, agent).map(({ text, ...mainContextText }) => ({ ...mainContextText, tokens: Math.round(tokenCounter2.countTokens(text) * tokenFactorOf(agent)) })),
+    mainContextTextsOf(charter, agent).map(({ text: text2, ...mainContextText }) => ({ ...mainContextText, tokens: Math.round(tokenCounter2.countTokens(text2) * tokenFactorOf(agent)) })),
     false
   );
 }
@@ -61112,7 +61179,7 @@ async function exactMainContextOf(charter, agent, agentCli) {
   const countTokensFromAnswer = ({ usage: { inputTokens, cacheCreationInputTokens, cacheReadInputTokens } }) => inputTokens + cacheCreationInputTokens + cacheReadInputTokens;
   const ownTokens = countTokensFromAnswer(await agentCli.ask("."));
   const mainContextTexts = mainContextTextsOf(charter, agent);
-  const sentTokenCounts = await Promise.all(mainContextTexts.map(async ({ text }) => countTokensFromAnswer(await agentCli.ask(text))));
+  const sentTokenCounts = await Promise.all(mainContextTexts.map(async ({ text: text2 }) => countTokensFromAnswer(await agentCli.ask(text2))));
   return new MainContext(
     agent,
     mainContextTexts.map(({ text: _text, ...mainContextText }, index) => ({ ...mainContextText, tokens: Math.max(0, sentTokenCounts[index] - ownTokens) })),
@@ -61630,27 +61697,27 @@ var TestAuthoring = class {
   async addSuite() {
     return addTestSuite(this.#repoPath, this.#fileReader, this.#fileWriter);
   }
-  async writeSuite(name, text) {
-    return writeTestSuite(this.#repoPath, this.#fileReader, this.#fileWriter, name, text);
+  async writeSuite(name, text2) {
+    return writeTestSuite(this.#repoPath, this.#fileReader, this.#fileWriter, name, text2);
   }
   async removeSuite(name) {
     return removeTestSuite(this.#repoPath, this.#fileReader, this.#fileWriter, name);
   }
 };
 
-// src/hexagon/port/zdriven/DrivenFault.ts
-var DrivenFault = class extends DomainFault {
+// src/hexagon/port/zdriven/AdapterFault.ts
+var AdapterFault = class extends DomainFault {
 };
 
 // src/hexagon/port/zdriven/ForCallingMcpServers.ts
-var UnauthorizedMcpFault = class extends DrivenFault {
+var UnauthorizedMcpFault = class extends AdapterFault {
 };
 
 // src/hexagon/application/McpConnecting.ts
 var CONNECT_TIMEOUT_MS = 1e4;
-var errorAnswerOf = (text) => ({
+var errorAnswerOf = (text2) => ({
   type: "ToolAnswer",
-  data: { content: [{ type: "text", text }], isError: true }
+  data: { content: [{ type: "text", text: text2 }], isError: true }
 });
 var McpConnecting = class {
   #repoPath;
@@ -61947,10 +62014,10 @@ var EvalSuiteSchema = external_exports.strictObject({
 var SAMPLE2 = JSON.stringify({
   cases: [{ prompt: "plan this feature: export a report", expect: { invoke: "sdd-plan", follow: "plain-names", maxTokens: 2e5 } }]
 });
-function evalSuiteOf(text) {
+function evalSuiteOf(text2) {
   let evalSuiteJson;
   try {
-    evalSuiteJson = JSON.parse(text);
+    evalSuiteJson = JSON.parse(text2);
   } catch {
     throw new EvalSuiteFault(`This file is not JSON, so nothing can read the cases it was meant to hold.`, `Write it as ${SAMPLE2}`);
   }
@@ -62150,6 +62217,92 @@ var CharterEvaluating = class {
   }
 };
 
+// src/hexagon/domain/models/sensor/SensorAnswer.ts
+var CONTEXT_SIGNALS = ["UserPromptSubmit", "SessionStart"];
+var PERMISSION_DECISIONS = ["deny", "ask", "allow"];
+function signalAnswerOf(signal, sensorAnswers) {
+  const blockingAnswers = sensorAnswers.filter((sensorAnswer) => sensorAnswer.exitCode === 2);
+  const failedAnswers = sensorAnswers.filter((sensorAnswer) => sensorAnswer.exitCode !== 0);
+  const exitCode = blockingAnswers.length > 0 ? 2 : failedAnswers[0]?.exitCode ?? 0;
+  const stderr = (blockingAnswers.length > 0 ? blockingAnswers : failedAnswers).map((sensorAnswer) => sensorAnswer.stderr).join("");
+  const answerTexts = sensorAnswers.map((sensorAnswer) => sensorAnswer.stdout.trim()).filter((answerText) => answerText !== "");
+  const isPlainObject3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+  const structuredAnswers = answerTexts.map((answerText) => {
+    try {
+      const answerJSON = JSON.parse(answerText);
+      return isPlainObject3(answerJSON) ? answerJSON : void 0;
+    } catch {
+      return void 0;
+    }
+  });
+  if (structuredAnswers.every((structuredAnswer) => structuredAnswer === void 0))
+    return { exitCode, stdout: answerTexts.map((answerText) => `${answerText}
+`).join(""), stderr };
+  const plainTexts = answerTexts.filter((_answerText, index) => structuredAnswers[index] === void 0);
+  const answerJSONs = structuredAnswers.filter((structuredAnswer) => structuredAnswer !== void 0);
+  const hookSpecificOutputs = answerJSONs.map((answerJSON) => answerJSON["hookSpecificOutput"]).filter(isPlainObject3);
+  const joinedTextOf = (values) => values.filter((value) => typeof value === "string" && value !== "").join("\n");
+  const combinedAnswer = Object.assign({}, ...[...answerJSONs].reverse());
+  const combinedHookSpecificOutput = Object.assign({}, ...[...hookSpecificOutputs].reverse());
+  const stoppingAnswers = answerJSONs.filter((answerJSON) => answerJSON["continue"] === false);
+  if (stoppingAnswers.length > 0) {
+    combinedAnswer["continue"] = false;
+    combinedAnswer["stopReason"] = joinedTextOf(stoppingAnswers.map((answerJSON) => answerJSON["stopReason"]));
+  }
+  if ("suppressOutput" in combinedAnswer) combinedAnswer["suppressOutput"] = answerJSONs.every((answerJSON) => answerJSON["suppressOutput"] === true);
+  const blockingJSONs = answerJSONs.filter((answerJSON) => answerJSON["decision"] === "block");
+  if (blockingJSONs.length > 0) {
+    combinedAnswer["decision"] = "block";
+    combinedAnswer["reason"] = joinedTextOf(blockingJSONs.map((answerJSON) => answerJSON["reason"]));
+  }
+  const isContextSignal = CONTEXT_SIGNALS.includes(signal);
+  const systemMessage = joinedTextOf([...answerJSONs.map((answerJSON) => answerJSON["systemMessage"]), ...isContextSignal ? [] : plainTexts]);
+  if (systemMessage !== "") combinedAnswer["systemMessage"] = systemMessage;
+  const permissionDecision = PERMISSION_DECISIONS.find((rankedDecision) => hookSpecificOutputs.some((hookSpecificOutput) => hookSpecificOutput["permissionDecision"] === rankedDecision));
+  if (permissionDecision !== void 0) {
+    combinedHookSpecificOutput["permissionDecision"] = permissionDecision;
+    combinedHookSpecificOutput["permissionDecisionReason"] = joinedTextOf(
+      hookSpecificOutputs.filter((hookSpecificOutput) => hookSpecificOutput["permissionDecision"] === permissionDecision).map((hookSpecificOutput) => hookSpecificOutput["permissionDecisionReason"])
+    );
+  }
+  const additionalContext = joinedTextOf([...hookSpecificOutputs.map((hookSpecificOutput) => hookSpecificOutput["additionalContext"]), ...isContextSignal ? plainTexts : []]);
+  if (additionalContext !== "") combinedHookSpecificOutput["additionalContext"] = additionalContext;
+  if (Object.keys(combinedHookSpecificOutput).length > 0) combinedAnswer["hookSpecificOutput"] = { ...combinedHookSpecificOutput, hookEventName: signal };
+  return { exitCode, stdout: `${JSON.stringify(combinedAnswer)}
+`, stderr };
+}
+
+// src/hexagon/service/sensorsRepo.ts
+async function loadBuiltSensors(repo, fileReader2) {
+  const contents = await fileReader2.readIfThere(new URL("sensors.json", outFolderIn(repo)));
+  try {
+    const sensorsJson = JSON.parse(contents ?? "{}");
+    const sensors = sensorsJson.sensors;
+    if (Array.isArray(sensors)) return new BuiltSensors(sensors);
+  } catch {
+  }
+  return new BuiltSensors([]);
+}
+
+// src/hexagon/application/SensorRunning.ts
+var SensorRunning = class {
+  #repoPath;
+  #fileReader;
+  #shell;
+  constructor(repoPath2, fileReader2, shell2) {
+    this.#repoPath = repoPath2;
+    this.#fileReader = fileReader2;
+    this.#shell = shell2;
+  }
+  async runSensors(signal, stdin) {
+    const builtSensors = await loadBuiltSensors(this.#repoPath, this.#fileReader);
+    const sensorAnswers = await Promise.all(
+      builtSensors.sensors.filter((builtSensor) => builtSensor.signal === signal).map((builtSensor) => this.#shell.runShellCommand(builtSensor.command, this.#repoPath, stdin))
+    );
+    return sensorRunOutcomeDTO(signalAnswerOf(signal, sensorAnswers));
+  }
+};
+
 // src/zdriven/FileReaders.ts
 import { readdir, readFile, stat } from "fs/promises";
 var FileReaders = class {
@@ -62305,7 +62458,7 @@ var Git = class {
     try {
       await run("git", ["fetch", "--quiet", "--no-tags", "--", source, ref], { cwd });
     } catch (raised) {
-      throw new DrivenFault(
+      throw new AdapterFault(
         `${raised}`,
         version2 === void 0 ? "Check the address, and that you can reach it from here." : `Check the address, and that "${version2}" is a tag or branch it has.`
       );
@@ -62318,9 +62471,9 @@ var Git = class {
     const atVersion = version2 === void 0 ? "" : ` at ${version2}`;
     const [requiredPath = ""] = includePaths;
     if (await objectTypeAt(requiredPath) === void 0)
-      throw new DrivenFault(`${source} has no "${requiredPath}"${atVersion}.`, `Check that the source holds "${requiredPath}" at the version asked for.`);
+      throw new AdapterFault(`${source} has no "${requiredPath}"${atVersion}.`, `Check that the source holds "${requiredPath}" at the version asked for.`);
     if (refusedIfSourceHolds !== void 0 && await objectTypeAt(refusedIfSourceHolds) === "tree")
-      throw new DrivenFault(
+      throw new AdapterFault(
         `${source} holds "${refusedIfSourceHolds}"${atVersion}, which this copy refuses.`,
         `Remove "${refusedIfSourceHolds}" from the source, or copy a version without it.`
       );
@@ -62345,7 +62498,7 @@ var Git = class {
       return intoSubFolder;
     } catch (raised) {
       await run("git", ["restore", "--source=HEAD", "--worktree", "--", intoSubFolder], { cwd }).catch(() => void 0);
-      throw new DrivenFault(`${raised}`, `Check that "${intoSubFolder}" can be written, and run this again.`);
+      throw new AdapterFault(`${raised}`, `Check that "${intoSubFolder}" can be written, and run this again.`);
     } finally {
       await rm2(vendorIndexPath, { force: true });
     }
@@ -62359,7 +62512,7 @@ var Git = class {
       await run("git", ["rm", "-r", "--quiet", "--", subFolder], { cwd });
       await run("git", ["commit", "-qm", `Remove ${subFolder}`], { cwd });
     } catch (raised) {
-      throw new DrivenFault(`${raised}`, `Check that "${subFolder}" is a folder this repository holds.`);
+      throw new AdapterFault(`${raised}`, `Check that "${subFolder}" is a folder this repository holds.`);
     }
   }
   /** `git worktree add --detach` at `HEAD`, forced over a record of one
@@ -62368,7 +62521,7 @@ var Git = class {
     try {
       await run("git", ["worktree", "add", "--quiet", "--detach", "--force", fileURLToPath3(worktreeFolder), "HEAD"], { cwd: fileURLToPath3(repo) });
     } catch (raised) {
-      throw new DrivenFault(`${raised}`, "Commit what is to be evaluated first: a worktree holds the last commit.");
+      throw new AdapterFault(`${raised}`, "Commit what is to be evaluated first: a worktree holds the last commit.");
     }
   }
   /** `git worktree remove --force`, then the folder removed whatever git
@@ -62417,7 +62570,7 @@ var OsSecrets = class {
   async writeSecret(key, secret) {
     this.refuseUnsupportedPlatform();
     if (this.platform === "darwin" && /["\\\n]/.test(key)) {
-      throw new DrivenFault(`The key "${key}" cannot be kept in the keychain.`, "Name the mcp origin by an address without quotes, backslashes or line breaks.");
+      throw new AdapterFault(`The key "${key}" cannot be kept in the keychain.`, "Name the mcp origin by an address without quotes, backslashes or line breaks.");
     }
     const commandOutputOfWrite = this.platform === "darwin" ? await commandOutput(
       "security",
@@ -62442,7 +62595,7 @@ var OsSecrets = class {
    *  before a command runs. */
   refuseUnsupportedPlatform() {
     if (this.platform !== "darwin" && this.platform !== "linux") {
-      throw new DrivenFault(
+      throw new AdapterFault(
         `Keeping a secret is not supported on "${this.platform}".`,
         "Sign in from macOS or Linux, whose credential stores cw uses."
       );
@@ -62450,7 +62603,7 @@ var OsSecrets = class {
   }
   throwFault(operation, key, stderr = "") {
     const storeName = this.platform === "darwin" ? "The keychain" : "The secret service";
-    throw new DrivenFault(
+    throw new AdapterFault(
       `${storeName} refused to ${operation} the secret for "${key}".${stderr.trim() === "" ? "" : ` It said: ${stderr.trim()}`}`,
       this.platform === "darwin" ? "Check that the login keychain is unlocked." : "Check that secret-tool is installed and a secret service is running."
     );
@@ -63379,7 +63532,7 @@ var OAuth = class {
     let callbackTimeout;
     const authorizationCode = new Promise((resolve5, reject) => {
       callbackTimeout = setTimeout(
-        () => reject(new DrivenFault(`Nobody came back from signing in to ${endpoint} in time.`, 'Run "cw mcp auth" again, and open the address it prints.')),
+        () => reject(new AdapterFault(`Nobody came back from signing in to ${endpoint} in time.`, 'Run "cw mcp auth" again, and open the address it prints.')),
         this.#callbackTimeoutMs
       );
       callbackServer.on("request", (request, response) => {
@@ -63390,7 +63543,7 @@ var OAuth = class {
         response.writeHead(200, { "content-type": "text/plain; charset=utf-8" }).end(signedIn ? "Signed in. Go back to the terminal.\n" : "Not signed in. Go back to the terminal.\n");
         if (signedIn) return resolve5(callbackCode);
         const callbackError = callbackUrl.searchParams.get("error");
-        reject(new DrivenFault(`Signing in to ${endpoint} came back without an authorization${callbackError ? `: ${callbackError}` : ""}.`, 'Run "cw mcp auth" again.'));
+        reject(new AdapterFault(`Signing in to ${endpoint} came back without an authorization${callbackError ? `: ${callbackError}` : ""}.`, 'Run "cw mcp auth" again.'));
       });
     });
     authorizationCode.catch(() => void 0);
@@ -63401,8 +63554,8 @@ var OAuth = class {
         await auth(provider, { serverUrl: endpoint, authorizationCode: await authorizationCode });
       return oauthGrantOf(endpoint, oauthSession);
     } catch (raised) {
-      if (raised instanceof DrivenFault) throw raised;
-      throw new DrivenFault(
+      if (raised instanceof AdapterFault) throw raised;
+      throw new AdapterFault(
         `Signing in to ${endpoint} failed: ${raised instanceof Error ? raised.message : String(raised)}`,
         'Check the address is reachable and offers an OAuth sign-in, then run "cw mcp auth" again.'
       );
@@ -63428,7 +63581,7 @@ var OAuth = class {
       if (await auth(provider, { serverUrl: endpoint }) === "REDIRECT") return void 0;
     } catch (raised) {
       if (raised instanceof OAuthError) return void 0;
-      throw new DrivenFault(
+      throw new AdapterFault(
         `Renewing the sign-in to ${endpoint} failed: ${raised instanceof Error ? raised.message : String(raised)}`,
         "Check the address is reachable, then try again."
       );
@@ -63473,7 +63626,7 @@ var OAuth = class {
 };
 function oauthGrantOf(endpoint, { clientInformation, tokens }) {
   if (clientInformation === void 0 || tokens === void 0)
-    throw new DrivenFault(`Signing in to ${endpoint} ended without a token.`, 'Run "cw mcp auth" again.');
+    throw new AdapterFault(`Signing in to ${endpoint} ended without a token.`, 'Run "cw mcp auth" again.');
   return {
     accessToken: tokens.access_token,
     ...tokens.refresh_token !== void 0 && { refreshToken: tokens.refresh_token },
@@ -64827,7 +64980,7 @@ var StreamableHTTPClientTransport = class {
         this._sessionId = sessionId;
       }
       if (!response.ok) {
-        const text = await response.text().catch(() => null);
+        const text2 = await response.text().catch(() => null);
         if (response.status === 401 && this._authProvider) {
           if (this._hasCompletedAuthFlow) {
             throw new StreamableHTTPError(401, "Server returned 401 after successful authentication");
@@ -64873,7 +65026,7 @@ var StreamableHTTPClientTransport = class {
             return this.send(message);
           }
         }
-        throw new StreamableHTTPError(response.status, `Error POSTing to endpoint: ${text}`);
+        throw new StreamableHTTPError(response.status, `Error POSTing to endpoint: ${text2}`);
       }
       this._hasCompletedAuthFlow = false;
       this._lastUpscopingHeader = void 0;
@@ -64993,7 +65146,7 @@ var McpClients = class {
         client.connect(transport).then(() => client.listTools()),
         new Promise((_resolve, reject) => {
           connectTimeout = setTimeout(
-            () => reject(new DrivenFault(`${address} did not answer within ${timeoutMs / 1e3} seconds.`, "Check the mcp origin is up, then start the server again.")),
+            () => reject(new AdapterFault(`${address} did not answer within ${timeoutMs / 1e3} seconds.`, "Check the mcp origin is up, then start the server again.")),
             timeoutMs
           );
         })
@@ -65019,10 +65172,10 @@ var McpClients = class {
   }
 };
 function faultOf(raised, failed, fix) {
-  if (raised instanceof DrivenFault) return raised;
+  if (raised instanceof AdapterFault) return raised;
   if (raised instanceof StreamableHTTPError && raised.code === 401)
     return new UnauthorizedMcpFault(`${failed}: the mcp origin refused your credential.`, 'Run "cw mcp auth" at a terminal to sign in there again.');
-  return new DrivenFault(`${failed}: ${raised instanceof Error ? raised.message : String(raised)}`, fix);
+  return new AdapterFault(`${failed}: ${raised instanceof Error ? raised.message : String(raised)}`, fix);
 }
 
 // node_modules/.pnpm/js-tiktoken@1.0.21/node_modules/js-tiktoken/dist/chunk-VL2OQCWN.js
@@ -65096,12 +65249,12 @@ var _Tiktoken = class {
       this.textMap.set(rank, bytes);
     }
     this.specialTokens = { ...ranks.special_tokens, ...extendedSpecialTokens };
-    this.inverseSpecialTokens = Object.entries(this.specialTokens).reduce((memo2, [text, rank]) => {
-      memo2[rank] = this.textEncoder.encode(text);
+    this.inverseSpecialTokens = Object.entries(this.specialTokens).reduce((memo2, [text2, rank]) => {
+      memo2[rank] = this.textEncoder.encode(text2);
       return memo2;
     }, {});
   }
-  encode(text, allowedSpecial = [], disallowedSpecial = "all") {
+  encode(text2, allowedSpecial = [], disallowedSpecial = "all") {
     const regexes = new RegExp(this.patStr, "ug");
     const specialRegex = _Tiktoken.specialTokenRegex(
       Object.keys(this.specialTokens)
@@ -65119,7 +65272,7 @@ var _Tiktoken = class {
       const disallowedSpecialRegex = _Tiktoken.specialTokenRegex([
         ...disallowedSpecialSet
       ]);
-      const specialMatch = text.match(disallowedSpecialRegex);
+      const specialMatch = text2.match(disallowedSpecialRegex);
       if (specialMatch != null) {
         throw new Error(
           `The text contains a special token that is not allowed: ${specialMatch[0]}`
@@ -65132,13 +65285,13 @@ var _Tiktoken = class {
       let startFind = start;
       while (true) {
         specialRegex.lastIndex = startFind;
-        nextSpecial = specialRegex.exec(text);
+        nextSpecial = specialRegex.exec(text2);
         if (nextSpecial == null || allowedSpecialSet.has(nextSpecial[0]))
           break;
         startFind = nextSpecial.index + 1;
       }
-      const end = nextSpecial?.index ?? text.length;
-      for (const match2 of text.substring(start, end).matchAll(regexes)) {
+      const end = nextSpecial?.index ?? text2.length;
+      for (const match2 of text2.substring(start, end).matchAll(regexes)) {
         const piece = this.textEncoder.encode(match2[0]);
         const token2 = this.rankMap.get(piece.join(","));
         if (token2 != null) {
@@ -65186,9 +65339,9 @@ var o200k_base_default = { "pat_str": "[^\\r\\n\\p{L}\\p{N}]?[\\p{Lu}\\p{Lt}\\p{
 // src/zdriven/Tiktoken.ts
 var Tiktoken2 = class {
   #encoding;
-  countTokens(text) {
+  countTokens(text2) {
     this.#encoding ??= new Tiktoken(o200k_base_default);
-    return this.#encoding.encode(text).length;
+    return this.#encoding.encode(text2).length;
   }
 };
 
@@ -65245,12 +65398,12 @@ var ClaudeCli = class {
         claudeProcess.on("error", reject);
         claudeProcess.on(
           "close",
-          (code) => code === 0 ? resolve5(stdout) : reject(new DrivenFault(`"claude -p" stopped with status ${code}: ${stderr.trim()}`, 'Check that "claude" runs and is signed in here.'))
+          (code) => code === 0 ? resolve5(stdout) : reject(new AdapterFault(`"claude -p" stopped with status ${code}: ${stderr.trim()}`, 'Check that "claude" runs and is signed in here.'))
         );
         claudeProcess.stdin.end(prompt);
       });
       const { is_error: isError, result: resultText } = JSON.parse(printedJson);
-      if (isError === true) throw new DrivenFault(`"claude -p" answered with an error: ${resultText ?? ""}`.trim(), 'Check that "claude" runs and is signed in here.');
+      if (isError === true) throw new AdapterFault(`"claude -p" answered with an error: ${resultText ?? ""}`.trim(), 'Check that "claude" runs and is signed in here.');
       return printedJson;
     } finally {
       if (emptyFolder !== void 0) await rm3(emptyFolder, { recursive: true, force: true });
@@ -65297,7 +65450,7 @@ var Promptfoo = class {
         { cwd: this.installFolderPath, maxBuffer: 64 * 1024 * 1024 }
       );
     } catch (raised) {
-      throw new DrivenFault(`Installing promptfoo failed: ${raised}`, `Check that npm can reach the registry, then run "cw eval" again.`);
+      throw new AdapterFault(`Installing promptfoo failed: ${raised}`, `Check that npm can reach the registry, then run "cw eval" again.`);
     }
   }
   async evaluate({ description, prompt, workingFolder, assertions }) {
@@ -65353,13 +65506,13 @@ var Promptfoo = class {
         });
       } catch (raised) {
         if (raised.code !== PROMPTFOO_FAILED_TEST_EXIT_CODE)
-          throw new DrivenFault(`"promptfoo eval" stopped with an error: ${raised.stderr?.trim() || raised}`, 'Check that "claude" runs and is signed in here.');
+          throw new AdapterFault(`"promptfoo eval" stopped with an error: ${raised.stderr?.trim() || raised}`, 'Check that "claude" runs and is signed in here.');
       }
       const {
         results: { results: testResults }
       } = JSON.parse(await readFile2(outputFilePath, "utf8"));
       const [testResult] = testResults;
-      if (testResult === void 0) throw new DrivenFault('"promptfoo eval" wrote no result.', 'Run "cw eval" again.');
+      if (testResult === void 0) throw new AdapterFault('"promptfoo eval" wrote no result.', 'Run "cw eval" again.');
       return {
         success: testResult.success,
         totalTokens: testResult.response?.tokenUsage?.total ?? 0,
@@ -65378,11 +65531,11 @@ var Promptfoo = class {
 
 // src/zdriven/ConsoleReporter.ts
 var ConsoleReporter = class {
-  report(text) {
-    process.stdout.write(text);
+  report(text2) {
+    process.stdout.write(text2);
   }
-  problem(text) {
-    process.stderr.write(text);
+  problem(text2) {
+    process.stderr.write(text2);
   }
 };
 
@@ -65393,6 +65546,29 @@ var SystemClock = class {
   }
 };
 
+// src/zdriven/Shell.ts
+import { spawn as spawn5 } from "child_process";
+import { fileURLToPath as fileURLToPath5 } from "url";
+var Shell = class {
+  runShellCommand(command2, workingFolder, stdin) {
+    return new Promise((resolve5) => {
+      const childProcess = spawn5(command2, { shell: true, cwd: fileURLToPath5(workingFolder), stdio: "pipe" });
+      const stdoutChunks = [];
+      const stderrChunks = [];
+      childProcess.stdout.on("data", (chunk) => stdoutChunks.push(chunk));
+      childProcess.stderr.on("data", (chunk) => stderrChunks.push(chunk));
+      childProcess.on("error", (raised) => resolve5({ exitCode: 1, stdout: "", stderr: `${raised.message}
+` }));
+      childProcess.on(
+        "close",
+        (exitCode) => resolve5({ exitCode: exitCode ?? 1, stdout: Buffer.concat(stdoutChunks).toString(), stderr: Buffer.concat(stderrChunks).toString() })
+      );
+      childProcess.stdin.on("error", () => void 0);
+      childProcess.stdin.end(stdin);
+    });
+  }
+};
+
 // main.ts
 var fileReader = new FileReaders();
 var yamlParser = new YamlParser();
@@ -65403,6 +65579,7 @@ var authorizing = new OAuth();
 var mcpServers = new McpClients();
 var tokenCounter = new Tiktoken2();
 var clock = new SystemClock();
+var shell = new Shell();
 var agentCliByProvider = { claude: new ClaudeCli() };
 var repoPath = pathToFileURL2(`${process.cwd()}/`);
 var charterAuthoringApp = new CharterAuthoring(
@@ -65425,6 +65602,7 @@ var sessionReviewingApp = new SessionReviewing(repoPath, homePath, fileReader, c
 var promptfooRunner = new Promptfoo(join6(homedir(), ".cherry-works"));
 var progressReporter = new ConsoleReporter();
 var charterEvaluatingApp = new CharterEvaluating(repoPath, fileReader, yamlParser, fileWriter, vcs, agentCliByProvider, promptfooRunner, progressReporter);
+var sensorRunningApp = new SensorRunning(repoPath, fileReader, shell);
 var cli = new Commander({
   cwd: process.cwd(),
   version: package_default.version,
@@ -65433,7 +65611,8 @@ var cli = new Commander({
   testAuthoringApp,
   mcpConnectingApp,
   sessionReviewingApp,
-  charterEvaluatingApp
+  charterEvaluatingApp,
+  sensorRunningApp
 });
 process.exitCode = await cli.run(process.argv.slice(2));
 /*! Bundled license information: