claude-brain 0.30.2 → 0.30.3

package/src/hooks/interceptor-hook.ts

@@ -1,201 +1,204 @@
-#!/usr/bin/env bun
-/**
- * Code Intelligence Interceptor — PreToolUse Hook
- *
- * Intercepts Glob and Grep calls, queries the code index,
- * and blocks the tool when confident results exist.
- *
- * CRITICAL CONSTRAINTS:
- * - Must complete in <3s (PreToolUse timeout)
- * - Stderr = message shown to Claude when blocking
- * - Exit 0 = allow tool, exit non-zero = block tool
- * - NEVER write to stdout (corrupts JSON-RPC)
- */
-
-interface HookStdin {
-  session_id: string
-  tool_name: string
-  tool_input: Record<string, any>
-  cwd?: string
-}
-
-interface SymbolResult {
-  symbol: string
-  type: string
-  filePath: string
-  lineStart: number
-  lineEnd?: number
-  signature?: string
-  confidence: number
-}
-
-async function main(): Promise<void> {
-  const rawInput = await readStdin()
-  if (!rawInput.trim()) { process.exit(0); return }
-
-  let input: HookStdin
-  try { input = JSON.parse(rawInput) }
-  catch { process.exit(0); return }
-
-  // Only intercept Glob and Grep
-  if (!['Glob', 'Grep'].includes(input.tool_name)) {
-    process.exit(0)
-    return
-  }
-
-  // Extract search intent from tool input
-  const searchTerm = extractSearchIntent(input)
-  if (!searchTerm) { process.exit(0); return }
-
-  // Detect project from cwd
-  const project = detectProject(input.cwd)
-  if (!project) { process.exit(0); return }
-
-  // BUG-006: Read port from --port arg (cross-platform). Env var fallback removed — breaks Windows cmd.exe.
-  const portIdx = process.argv.indexOf('--port')
-  const portArg = portIdx >= 0 ? process.argv[portIdx + 1] : undefined
-  const port = parseInt(portArg || '3000', 10)
-
-  try {
-    const params = new URLSearchParams({
-      query: searchTerm,
-      project,
-      limit: '10',
-    })
-
-    const res = await fetch(
-      `http://localhost:${port}/api/code/search?${params}`,
-      { signal: AbortSignal.timeout(2000) }
-    )
-
-    if (!res.ok) { process.exit(0); return }
-
-    const data = await res.json() as { data?: SymbolResult[] }
-    const results: SymbolResult[] = Array.isArray(data.data) ? data.data : (data.data as any) || []
-
-    // Only block if we have confident results
-    if (results.length > 0 && results[0].confidence > 0.7) {
-      const message = formatResults(results, input.tool_name, searchTerm)
-      process.stderr.write(message)
-      process.exit(2) // non-zero = BLOCK
-    } else {
-      process.exit(0) // let original tool run
-    }
-  } catch {
-    // Any error = let original tool run (safe fallback)
-    process.exit(0)
-  }
-}
-
-function extractSearchIntent(input: HookStdin): string | null {
-  const toolInput = input.tool_input
-
-  if (input.tool_name === 'Glob') {
-    const pattern = toolInput.pattern || ''
-    if (isGenericGlob(pattern)) return null
-    return extractGlobKeyword(pattern)
-  }
-
-  if (input.tool_name === 'Grep') {
-    const pattern = toolInput.pattern || ''
-    if (isComplexRegex(pattern)) return null
-    return pattern
-  }
-
-  return null
-}
-
-/** Returns true for patterns like "**\/*.ts", "**\/*.js" that match too broadly */
-function isGenericGlob(pattern: string): boolean {
-  return /^\*\*\/\*\.\w+$/.test(pattern)
-}
-
-/** Extract the meaningful keyword from a glob pattern */
-function extractGlobKeyword(pattern: string): string | null {
-  const cleaned = pattern
-    .replace(/\*\*/g, '')
-    .replace(/\*/g, '')
-    .replace(/\//g, ' ')
-    .replace(/\.\w+$/g, '') // remove extension
-    .trim()
-
-  const words = cleaned.split(/\s+/).filter(w => w.length >= 3)
-  return words.length > 0 ? words.join(' ') : null
-}
-
-/** Returns true for patterns that are complex regex, not simple symbol names */
-function isComplexRegex(pattern: string): boolean {
-  // Simple word-like patterns are fine to intercept
-  if (/^\w+$/.test(pattern)) return false
-  // Patterns with regex meta-chars are complex
-  return /[\\()[\]{}|^$+?]/.test(pattern)
-}
-
-function detectProject(cwd?: string): string | null {
-  if (!cwd) return null
-  // Split by both / and \ for cross-platform support (Windows uses backslashes)
-  const segments = cwd.split(/[/\\]/).filter(Boolean)
-  return segments[segments.length - 1] || null
-}
-
-function formatResults(
-  results: SymbolResult[],
-  toolName: string,
-  searchTerm: string
-): string {
-  const lines: string[] = [
-    `Code index found ${results.length} match${results.length === 1 ? '' : 'es'} for "${searchTerm}" (skip ${toolName}, use Read directly):`,
-    '',
-  ]
-
-  for (const r of results.slice(0, 8)) {
-    const sig = r.signature ? ` ${r.signature}` : ''
-    const lineRange = r.lineEnd
-      ? `${r.lineStart}-${r.lineEnd}`
-      : `${r.lineStart}`
-    lines.push(
-      `  ${r.symbol} (${r.type})${sig} → ${r.filePath}:${lineRange}`
-    )
-  }
-
-  if (results.length > 8) {
-    lines.push(`  ... and ${results.length - 8} more`)
-  }
-
-  // Add actionable tip
-  lines.push('')
-  const top = results[0]!
-  const offset = Math.max(1, top.lineStart - 5)
-  const limit = ((top.lineEnd || top.lineStart) + 20) - top.lineStart + 10
-  lines.push(
-    `Tip: Read("${top.filePath}", offset=${offset}, limit=${limit}) for the ${top.type} body.`
-  )
-
-  return lines.join('\n')
-}
-
-/** Read all of stdin as a string */
-function readStdin(): Promise<string> {
-  return new Promise((resolve, reject) => {
-    const chunks: Buffer[] = []
-    const stdin = process.stdin
-
-    stdin.on('data', (chunk: Buffer) => chunks.push(chunk))
-    stdin.on('end', () => resolve(Buffer.concat(chunks).toString('utf-8')))
-    stdin.on('error', reject)
-
-    // Timeout after 2 seconds
-    setTimeout(() => {
-      stdin.destroy()
-      resolve(Buffer.concat(chunks).toString('utf-8'))
-    }, 2000)
-  })
-}
-
-// Execute when run directly
-const isDirectRun = process.argv[1]?.includes('interceptor-hook')
-if (isDirectRun) {
-  main().catch(() => process.exit(0))
-}
-
-export { main }
+#!/usr/bin/env bun
+/**
+ * Code Intelligence Interceptor — PreToolUse Hook
+ *
+ * Intercepts Glob and Grep calls, queries the code index,
+ * and blocks the tool when confident results exist.
+ *
+ * CRITICAL CONSTRAINTS:
+ * - Must complete in <3s (PreToolUse timeout)
+ * - Stderr = message shown to Claude when blocking
+ * - Exit 0 = allow tool, exit non-zero = block tool
+ * - NEVER write to stdout (corrupts JSON-RPC)
+ */
+
+interface HookStdin {
+  session_id: string
+  tool_name: string
+  tool_input: Record<string, any>
+  cwd?: string
+}
+
+interface SymbolResult {
+  symbol: string
+  type: string
+  filePath: string
+  lineStart: number
+  lineEnd?: number
+  signature?: string
+  confidence: number
+}
+
+async function main(): Promise<void> {
+  const rawInput = await readStdin()
+  if (!rawInput.trim()) { process.exit(0); return }
+
+  let input: HookStdin
+  try { input = JSON.parse(rawInput) }
+  catch { process.exit(0); return }
+
+  // Only intercept Glob and Grep
+  if (!['Glob', 'Grep'].includes(input.tool_name)) {
+    process.exit(0)
+    return
+  }
+
+  // Extract search intent from tool input
+  const searchTerm = extractSearchIntent(input)
+  if (!searchTerm) { process.exit(0); return }
+
+  // Detect project from cwd
+  const project = detectProject(input.cwd)
+  if (!project) { process.exit(0); return }
+
+  // BUG-006: Read port from --port arg (cross-platform). Env var fallback removed — breaks Windows cmd.exe.
+  const portIdx = process.argv.indexOf('--port')
+  const portArg = portIdx >= 0 ? process.argv[portIdx + 1] : undefined
+  const port = parseInt(portArg || '3000', 10)
+
+  try {
+    const params = new URLSearchParams({
+      query: searchTerm,
+      project,
+      limit: '10',
+    })
+
+    const res = await fetch(
+      `http://localhost:${port}/api/code/search?${params}`,
+      { signal: AbortSignal.timeout(2000) }
+    )
+
+    if (!res.ok) { process.exit(0); return }
+
+    const data = await res.json() as { data?: SymbolResult[] }
+    const results: SymbolResult[] = Array.isArray(data.data) ? data.data : (data.data as any) || []
+
+    // Only block if we have confident results
+    if (results.length > 0 && results[0].confidence > 0.7) {
+      const message = formatResults(results, input.tool_name, searchTerm)
+      process.stderr.write(message)
+      process.exit(2) // non-zero = BLOCK
+    } else {
+      process.exit(0) // let original tool run
+    }
+  } catch {
+    // Any error = let original tool run (safe fallback)
+    process.exit(0)
+  }
+}
+
+function extractSearchIntent(input: HookStdin): string | null {
+  const toolInput = input.tool_input
+
+  if (input.tool_name === 'Glob') {
+    const pattern = toolInput.pattern || ''
+    if (isGenericGlob(pattern)) return null
+    return extractGlobKeyword(pattern)
+  }
+
+  if (input.tool_name === 'Grep') {
+    const pattern = toolInput.pattern || ''
+    if (isComplexRegex(pattern)) return null
+    return pattern
+  }
+
+  return null
+}
+
+/** Returns true for patterns like "**\/*.ts", "**\/*.js" that match too broadly */
+function isGenericGlob(pattern: string): boolean {
+  return /^\*\*\/\*\.\w+$/.test(pattern)
+}
+
+/** Extract the meaningful keyword from a glob pattern */
+function extractGlobKeyword(pattern: string): string | null {
+  const cleaned = pattern
+    .replace(/\*\*/g, '')
+    .replace(/\*/g, '')
+    .replace(/\//g, ' ')
+    .replace(/\.\w+$/g, '') // remove extension
+    .trim()
+
+  const words = cleaned.split(/\s+/).filter(w => w.length >= 3)
+  return words.length > 0 ? words.join(' ') : null
+}
+
+/** Returns true for patterns that are complex regex, not simple symbol names */
+function isComplexRegex(pattern: string): boolean {
+  // Simple word-like patterns are fine to intercept
+  if (/^\w+$/.test(pattern)) return false
+  // Patterns with regex meta-chars are complex
+  return /[\\()[\]{}|^$+?]/.test(pattern)
+}
+
+function detectProject(cwd?: string): string | null {
+  if (!cwd) return null
+  // Split by both / and \ for cross-platform support (Windows uses backslashes)
+  const segments = cwd.split(/[/\\]/).filter(Boolean)
+  return segments[segments.length - 1] || null
+}
+
+function formatResults(
+  results: SymbolResult[],
+  toolName: string,
+  searchTerm: string
+): string {
+  const lines: string[] = [
+    `Code index found ${results.length} match${results.length === 1 ? '' : 'es'} for "${searchTerm}" (skip ${toolName}, use Read directly):`,
+    '',
+  ]
+
+  for (const r of results.slice(0, 8)) {
+    const sig = r.signature ? ` ${r.signature}` : ''
+    const lineRange = r.lineEnd
+      ? `${r.lineStart}-${r.lineEnd}`
+      : `${r.lineStart}`
+    lines.push(
+      `  ${r.symbol} (${r.type})${sig} → ${r.filePath}:${lineRange}`
+    )
+  }
+
+  if (results.length > 8) {
+    lines.push(`  ... and ${results.length - 8} more`)
+  }
+
+  // Add actionable tip
+  lines.push('')
+  const top = results[0]!
+  const offset = Math.max(1, top.lineStart - 5)
+  const limit = ((top.lineEnd || top.lineStart) + 20) - top.lineStart + 10
+  lines.push(
+    `Tip: Read("${top.filePath}", offset=${offset}, limit=${limit}) for the ${top.type} body.`
+  )
+
+  return lines.join('\n')
+}
+
+/** Read all of stdin as a string */
+function readStdin(): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const chunks: Buffer[] = []
+    const stdin = process.stdin
+
+    stdin.on('data', (chunk: Buffer) => chunks.push(chunk))
+    stdin.on('end', () => resolve(Buffer.concat(chunks).toString('utf-8')))
+    stdin.on('error', reject)
+
+    // Timeout after 2 seconds
+    setTimeout(() => {
+      stdin.destroy()
+      resolve(Buffer.concat(chunks).toString('utf-8'))
+    }, 2000)
+  })
+}
+
+// Execute when run directly
+const isDirectRun = process.argv[1]?.includes('interceptor-hook')
+if (isDirectRun) {
+  main().catch((error) => {
+    process.stderr.write(`[interceptor-hook] Fatal error: ${error?.message || error}\n`)
+    process.exit(1)
+  })
+}
+
+export { main }