claude-remote-guard 1.0.0

package/dist/bin/cli.js

@@ -0,0 +1,427 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+import { loadConfig, saveConfig, getConfigPath, configExists, deleteConfig, } from '../lib/config.js';
+import { registerHook, unregisterHook, isHookRegistered } from '../lib/claude-settings.js';
+import { sendTestNotification } from '../lib/slack.js';
+import { testConnection as testSupabaseConnection, shutdownSupabase } from '../lib/supabase.js';
+import { createEdgeFunctionFiles, getEdgeFunctionEnvVars, getEdgeFunctionName } from '../lib/edge-function.js';
+import { printSupabaseSetupInstructions } from '../lib/setup-instructions.js';
+const program = new Command();
+program
+    .name('guard')
+    .description('Claude Guard - Remote approval system for Claude Code CLI')
+    .version('1.0.0');
+program
+    .command('init')
+    .description('Initialize Claude Guard with interactive setup')
+    .action(async () => {
+    console.log(chalk.blue('\n🛡️  Claude Guard Setup\n'));
+    if (configExists()) {
+        const { overwrite } = await inquirer.prompt([
+            {
+                type: 'confirm',
+                name: 'overwrite',
+                message: 'Configuration already exists. Overwrite?',
+                default: false,
+            },
+        ]);
+        if (!overwrite) {
+            console.log(chalk.yellow('Setup cancelled.'));
+            return;
+        }
+    }
+    // Step 1: Select messenger type
+    const { messengerType } = await inquirer.prompt([
+        {
+            type: 'list',
+            name: 'messengerType',
+            message: 'Select notification messenger:',
+            choices: [
+                { name: 'Slack', value: 'slack' },
+                { name: 'Telegram', value: 'telegram' },
+                { name: 'WhatsApp (Twilio)', value: 'whatsapp' },
+            ],
+            default: 'slack',
+        },
+    ]);
+    // Step 2: Messenger-specific configuration
+    let messengerConfig;
+    if (messengerType === 'slack') {
+        const slackAnswers = await inquirer.prompt([
+            {
+                type: 'input',
+                name: 'webhookUrl',
+                message: 'Slack Webhook URL:',
+                validate: (input) => {
+                    if (!input.startsWith('https://hooks.slack.com/')) {
+                        return 'Please enter a valid Slack webhook URL';
+                    }
+                    return true;
+                },
+            },
+            {
+                type: 'input',
+                name: 'channelId',
+                message: 'Slack Channel ID (optional):',
+                default: '',
+            },
+        ]);
+        messengerConfig = {
+            type: 'slack',
+            slack: {
+                webhookUrl: slackAnswers.webhookUrl,
+                channelId: slackAnswers.channelId || undefined,
+            },
+        };
+    }
+    else if (messengerType === 'telegram') {
+        const telegramAnswers = await inquirer.prompt([
+            {
+                type: 'input',
+                name: 'botToken',
+                message: 'Telegram Bot Token:',
+                validate: (input) => {
+                    if (!input || input.length < 10) {
+                        return 'Please enter a valid Telegram Bot Token';
+                    }
+                    return true;
+                },
+            },
+            {
+                type: 'input',
+                name: 'chatId',
+                message: 'Telegram Chat ID:',
+                validate: (input) => {
+                    if (!input || input.length === 0) {
+                        return 'Please enter a valid Chat ID';
+                    }
+                    return true;
+                },
+            },
+        ]);
+        messengerConfig = {
+            type: 'telegram',
+            telegram: {
+                botToken: telegramAnswers.botToken,
+                chatId: telegramAnswers.chatId,
+            },
+        };
+    }
+    else {
+        // WhatsApp (Twilio)
+        const whatsappAnswers = await inquirer.prompt([
+            {
+                type: 'input',
+                name: 'accountSid',
+                message: 'Twilio Account SID:',
+                validate: (input) => {
+                    if (!input || !input.startsWith('AC')) {
+                        return 'Please enter a valid Twilio Account SID (starts with AC)';
+                    }
+                    return true;
+                },
+            },
+            {
+                type: 'input',
+                name: 'authToken',
+                message: 'Twilio Auth Token:',
+                validate: (input) => {
+                    if (!input || input.length < 20) {
+                        return 'Please enter a valid Twilio Auth Token';
+                    }
+                    return true;
+                },
+            },
+            {
+                type: 'input',
+                name: 'fromNumber',
+                message: 'WhatsApp From Number (e.g., whatsapp:+14155238886):',
+                validate: (input) => {
+                    if (!input.startsWith('whatsapp:+')) {
+                        return 'Please enter a valid WhatsApp number (format: whatsapp:+1234567890)';
+                    }
+                    return true;
+                },
+            },
+            {
+                type: 'input',
+                name: 'toNumber',
+                message: 'WhatsApp To Number (e.g., whatsapp:+1234567890):',
+                validate: (input) => {
+                    if (!input.startsWith('whatsapp:+')) {
+                        return 'Please enter a valid WhatsApp number (format: whatsapp:+1234567890)';
+                    }
+                    return true;
+                },
+            },
+        ]);
+        messengerConfig = {
+            type: 'whatsapp',
+            whatsapp: {
+                accountSid: whatsappAnswers.accountSid,
+                authToken: whatsappAnswers.authToken,
+                fromNumber: whatsappAnswers.fromNumber,
+                toNumber: whatsappAnswers.toNumber,
+            },
+        };
+    }
+    // Step 3: Common configuration (Supabase and Rules)
+    const answers = await inquirer.prompt([
+        {
+            type: 'input',
+            name: 'supabaseUrl',
+            message: 'Supabase Project URL (https://xxx.supabase.co):',
+            validate: (input) => {
+                if (!input.startsWith('https://') || !input.includes('.supabase.co')) {
+                    return 'Please enter a valid Supabase URL (https://xxx.supabase.co)';
+                }
+                return true;
+            },
+        },
+        {
+            type: 'input',
+            name: 'supabaseAnonKey',
+            message: 'Supabase Anon Key:',
+            validate: (input) => {
+                if (!input || input.length < 20) {
+                    return 'Please enter a valid Supabase Anon Key';
+                }
+                return true;
+            },
+        },
+        {
+            type: 'number',
+            name: 'timeoutSeconds',
+            message: 'Approval timeout (seconds):',
+            default: 300,
+            validate: (input) => {
+                if (input < 10 || input > 3600) {
+                    return 'Timeout must be between 10 and 3600 seconds';
+                }
+                return true;
+            },
+        },
+        {
+            type: 'list',
+            name: 'defaultAction',
+            message: 'Default action on timeout:',
+            choices: [
+                { name: 'Deny (safer)', value: 'deny' },
+                { name: 'Allow', value: 'allow' },
+            ],
+            default: 'deny',
+        },
+    ]);
+    const config = {
+        messenger: messengerConfig,
+        supabase: {
+            url: answers.supabaseUrl,
+            anonKey: answers.supabaseAnonKey,
+        },
+        rules: {
+            timeoutSeconds: answers.timeoutSeconds,
+            defaultAction: answers.defaultAction,
+        },
+    };
+    saveConfig(config);
+    console.log(chalk.green(`\n✓ Configuration saved to ${getConfigPath()}`));
+    // Register hook
+    const hookResult = registerHook();
+    if (hookResult.success) {
+        console.log(chalk.green(`✓ ${hookResult.message}`));
+    }
+    else {
+        console.log(chalk.red(`✗ ${hookResult.message}`));
+    }
+    // Test connections
+    const { testNow } = await inquirer.prompt([
+        {
+            type: 'confirm',
+            name: 'testNow',
+            message: 'Test connections now?',
+            default: true,
+        },
+    ]);
+    if (testNow) {
+        await runTests(config);
+    }
+    // Edge Function setup prompt
+    const { setupEdgeFunction } = await inquirer.prompt([
+        {
+            type: 'confirm',
+            name: 'setupEdgeFunction',
+            message: 'Do you want to set up Supabase Edge Function?',
+            default: true,
+        },
+    ]);
+    if (setupEdgeFunction) {
+        const result = createEdgeFunctionFiles(process.cwd(), messengerType);
+        if (result.success) {
+            const funcName = getEdgeFunctionName(messengerType);
+            const envVars = getEdgeFunctionEnvVars(messengerType);
+            console.log(chalk.green(`\n✓ Edge Function files created at ./${result.path}/`));
+            console.log(chalk.blue('\nNext steps:'));
+            console.log(chalk.gray('  1. supabase login'));
+            console.log(chalk.gray('  2. supabase link --project-ref <your-project-ref>'));
+            console.log(chalk.gray(`  3. Set environment variable(s):`));
+            for (const envVar of envVars) {
+                console.log(chalk.cyan(`     supabase secrets set ${envVar}=<your-${envVar.toLowerCase().replace(/_/g, '-')}>`));
+            }
+            console.log(chalk.gray(`  4. supabase functions deploy ${funcName}`));
+            console.log(chalk.gray(`  5. Set webhook URL to:`));
+            console.log(chalk.cyan(`     https://<project-ref>.supabase.co/functions/v1/${funcName}`));
+            // Messenger-specific setup instructions
+            if (messengerType === 'slack') {
+                console.log(chalk.yellow('\n⚠️  Slack Setup:'));
+                console.log(chalk.gray('   Get your Signing Secret from:'));
+                console.log(chalk.gray('   Slack App Settings > Basic Information > App Credentials > Signing Secret'));
+                console.log(chalk.gray('   Set Interactivity URL in: Slack App Settings > Interactivity & Shortcuts'));
+            }
+            else if (messengerType === 'telegram') {
+                console.log(chalk.yellow('\n⚠️  Telegram Setup:'));
+                console.log(chalk.gray('   1. Generate a random secret (e.g., openssl rand -hex 32)'));
+                console.log(chalk.gray('   2. Set webhook with secret_token:'));
+                console.log(chalk.cyan('   curl -X POST "https://api.telegram.org/bot<BOT_TOKEN>/setWebhook" \\'));
+                console.log(chalk.cyan('     -d "url=https://<project-ref>.supabase.co/functions/v1/telegram-callback" \\'));
+                console.log(chalk.cyan('     -d "secret_token=<YOUR_WEBHOOK_SECRET>"'));
+            }
+            else if (messengerType === 'whatsapp') {
+                console.log(chalk.yellow('\n⚠️  WhatsApp (Twilio) Setup:'));
+                console.log(chalk.gray('   Set webhook URL in: Twilio Console > Messaging > Settings > WhatsApp Sandbox'));
+                console.log(chalk.gray('   When a message comes in: https://<project-ref>.supabase.co/functions/v1/whatsapp-callback'));
+            }
+        }
+        else {
+            console.log(chalk.red(`\n✗ Failed to create Edge Function files: ${result.error}`));
+        }
+    }
+    // Always show SQL setup instructions
+    printSupabaseSetupInstructions();
+    console.log(chalk.green('\n🎉 Setup complete! Claude Guard is now active.\n'));
+});
+program
+    .command('status')
+    .description('Check Claude Guard status and connections')
+    .action(async () => {
+    console.log(chalk.blue('\n🛡️  Claude Guard Status\n'));
+    // Check config
+    const config = loadConfig();
+    if (!config) {
+        console.log(chalk.red('✗ Configuration not found or invalid'));
+        console.log(chalk.gray(`  Run ${chalk.cyan('guard init')} to set up`));
+        return;
+    }
+    console.log(chalk.green('✓ Configuration loaded'));
+    // Check hook registration
+    if (isHookRegistered()) {
+        console.log(chalk.green('✓ Hook registered in Claude settings'));
+    }
+    else {
+        console.log(chalk.yellow('⚠ Hook not registered'));
+        console.log(chalk.gray(`  Run ${chalk.cyan('guard init')} to register`));
+    }
+    // Test Supabase
+    console.log(chalk.gray('  Testing Supabase connection...'));
+    const sbResult = await testSupabaseConnection(config);
+    if (sbResult.ok) {
+        console.log(chalk.green('✓ Supabase connection OK'));
+    }
+    else {
+        console.log(chalk.red(`✗ Supabase connection failed: ${sbResult.error}`));
+    }
+    await shutdownSupabase();
+    console.log('');
+});
+program
+    .command('test')
+    .description('Send a test notification')
+    .action(async () => {
+    const config = loadConfig();
+    if (!config) {
+        console.log(chalk.red('Configuration not found. Run guard init first.'));
+        return;
+    }
+    const messengerType = config.messenger.type;
+    console.log(chalk.blue(`Sending test notification via ${messengerType}...`));
+    if (messengerType === 'slack' && config.messenger.slack) {
+        const result = await sendTestNotification(config.messenger.slack.webhookUrl);
+        if (result.ok) {
+            console.log(chalk.green('✓ Test notification sent successfully!'));
+        }
+        else {
+            console.log(chalk.red(`✗ Failed to send notification: ${result.error}`));
+        }
+    }
+    else if (messengerType === 'telegram') {
+        // TODO: Implement Telegram test notification
+        console.log(chalk.yellow('⚠ Telegram test notification not yet implemented'));
+    }
+    else if (messengerType === 'whatsapp') {
+        // TODO: Implement WhatsApp test notification
+        console.log(chalk.yellow('⚠ WhatsApp test notification not yet implemented'));
+    }
+    else {
+        console.log(chalk.red('✗ Unknown messenger type or missing configuration'));
+    }
+});
+program
+    .command('uninstall')
+    .description('Remove Claude Guard configuration and hooks')
+    .action(async () => {
+    const { confirm } = await inquirer.prompt([
+        {
+            type: 'confirm',
+            name: 'confirm',
+            message: 'Are you sure you want to uninstall Claude Guard?',
+            default: false,
+        },
+    ]);
+    if (!confirm) {
+        console.log(chalk.yellow('Uninstall cancelled.'));
+        return;
+    }
+    // Unregister hook
+    const hookResult = unregisterHook();
+    console.log(hookResult.success ? chalk.green(`✓ ${hookResult.message}`) : chalk.red(`✗ ${hookResult.message}`));
+    // Delete config
+    deleteConfig();
+    console.log(chalk.green('✓ Configuration deleted'));
+    console.log(chalk.blue('\nClaude Guard has been uninstalled.\n'));
+});
+async function runTests(config) {
+    console.log(chalk.blue('\nTesting connections...\n'));
+    // Test messenger based on type
+    const messengerType = config.messenger.type;
+    console.log(chalk.gray(`Testing ${messengerType} connection...`));
+    if (messengerType === 'slack' && config.messenger.slack) {
+        const slackResult = await sendTestNotification(config.messenger.slack.webhookUrl);
+        if (slackResult.ok) {
+            console.log(chalk.green('✓ Slack webhook OK'));
+        }
+        else {
+            console.log(chalk.red(`✗ Slack webhook failed: ${slackResult.error}`));
+        }
+    }
+    else if (messengerType === 'telegram') {
+        // TODO: Implement Telegram test
+        console.log(chalk.yellow('⚠ Telegram connection test not yet implemented'));
+    }
+    else if (messengerType === 'whatsapp') {
+        // TODO: Implement WhatsApp test
+        console.log(chalk.yellow('⚠ WhatsApp connection test not yet implemented'));
+    }
+    // Test Supabase
+    console.log(chalk.gray('Testing Supabase connection...'));
+    const sbResult = await testSupabaseConnection(config);
+    if (sbResult.ok) {
+        console.log(chalk.green('✓ Supabase connection OK'));
+    }
+    else {
+        console.log(chalk.red(`✗ Supabase connection failed: ${sbResult.error}`));
+    }
+    await shutdownSupabase();
+}
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/bin/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bin/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,YAAY,EACZ,YAAY,GAEb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE/G,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAE9E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,2DAA2D,CAAC;KACxE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,gDAAgD,CAAC;KAC7D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAEvD,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YAC1C;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0CAA0C;gBACnD,OAAO,EAAE,KAAK;aACf;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QAC9C;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,gCAAgC;YACzC,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;gBACjC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;gBACvC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,UAAU,EAAE;aACjD;YACD,OAAO,EAAE,OAAO;SACjB;KACF,CAAC,CAAC;IAEH,2CAA2C;IAC3C,IAAI,eAAoC,CAAC;IAEzC,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACzC;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,oBAAoB;gBAC7B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;wBAClD,OAAO,wCAAwC,CAAC;oBAClD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,8BAA8B;gBACvC,OAAO,EAAE,EAAE;aACZ;SACF,CAAC,CAAC;QACH,eAAe,GAAG;YAChB,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,SAAS;aAC/C;SACF,CAAC;IACJ,CAAC;SAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YAC5C;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,qBAAqB;gBAC9B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;wBAChC,OAAO,yCAAyC,CAAC;oBACnD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mBAAmB;gBAC5B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACjC,OAAO,8BAA8B,CAAC;oBACxC,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QACH,eAAe,GAAG;YAChB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACR,QAAQ,EAAE,eAAe,CAAC,QAAQ;gBAClC,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B;SACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oBAAoB;QACpB,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YAC5C;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,qBAAqB;gBAC9B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtC,OAAO,0DAA0D,CAAC;oBACpE,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,oBAAoB;gBAC7B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;wBAChC,OAAO,wCAAwC,CAAC;oBAClD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,qDAAqD;gBAC9D,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;wBACpC,OAAO,qEAAqE,CAAC;oBAC/E,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,kDAAkD;gBAC3D,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;wBACpC,OAAO,qEAAqE,CAAC;oBAC/E,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QACH,eAAe,GAAG;YAChB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACR,UAAU,EAAE,eAAe,CAAC,UAAU;gBACtC,SAAS,EAAE,eAAe,CAAC,SAAS;gBACpC,UAAU,EAAE,eAAe,CAAC,UAAU;gBACtC,QAAQ,EAAE,eAAe,CAAC,QAAQ;aACnC;SACF,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,iDAAiD;YAC1D,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACrE,OAAO,6DAA6D,CAAC;gBACvE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF;QACD;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,oBAAoB;YAC7B,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAChC,OAAO,wCAAwC,CAAC;gBAClD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,6BAA6B;YACtC,OAAO,EAAE,GAAG;YACZ,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC1B,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;oBAC/B,OAAO,6CAA6C,CAAC;gBACvD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;SACF;QACD;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,4BAA4B;YACrC,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE;gBACvC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;aAClC;YACD,OAAO,EAAE,MAAM;SAChB;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAW;QACrB,SAAS,EAAE,eAAe;QAC1B,QAAQ,EAAE;YACR,GAAG,EAAE,OAAO,CAAC,WAAW;YACxB,OAAO,EAAE,OAAO,CAAC,eAAe;SACjC;QACD,KAAK,EAAE;YACL,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC;KACF,CAAC;IAEF,UAAU,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;IAE1E,gBAAgB;IAChB,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,mBAAmB;IACnB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACxC;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,uBAAuB;YAChC,OAAO,EAAE,IAAI;SACd;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,6BAA6B;IAC7B,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QAClD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,+CAA+C;YACxD,OAAO,EAAE,IAAI;SACd;KACF,CAAC,CAAC;IAEH,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAA8B,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,aAA8B,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,sBAAsB,CAAC,aAA8B,CAAC,CAAC;YAEvE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC7D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,UAAU,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACnH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uDAAuD,QAAQ,EAAE,CAAC,CAAC,CAAC;YAE3F,wCAAwC;YACxC,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC,CAAC;gBACxG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC,CAAC;YACzG,CAAC;iBAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC,CAAC;gBACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC,CAAC;gBACnG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC,CAAC;gBAC7G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC,CAAC;gBAC3G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8FAA8F,CAAC,CAAC,CAAC;YAC1H,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,8BAA8B,EAAE,CAAC;IAEjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAExD,eAAe;IACf,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAEnD,0BAA0B;IAC1B,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,gBAAgB,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,aAAa,KAAK,CAAC,CAAC,CAAC;IAE7E,IAAI,aAAa,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;SAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACxC,6CAA6C;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACxC,6CAA6C;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACxC;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,kDAAkD;YAC3D,OAAO,EAAE,KAAK;SACf;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEhH,gBAAgB;IAChB,YAAY,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEL,KAAK,UAAU,QAAQ,CAAC,MAAc;IACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAEtD,+BAA+B;IAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,aAAa,gBAAgB,CAAC,CAAC,CAAC;IAElE,IAAI,aAAa,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;SAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACxC,gCAAgC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAC9E,CAAC;SAAM,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACxC,gCAAgC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,gBAAgB,EAAE,CAAC;AAC3B,CAAC;AAED,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/bin/hook.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=hook.d.ts.map

package/dist/bin/hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/bin/hook.ts"],"names":[],"mappings":""}

package/dist/bin/hook.js

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+import { v4 as uuidv4 } from 'uuid';
+import { loadConfig } from '../lib/config.js';
+import { analyzeCommand } from '../lib/rules.js';
+import { MessengerFactory } from '../lib/messenger/factory.js';
+import { initializeSupabase, createRequest, listenForApproval, shutdownSupabase, } from '../lib/supabase.js';
+async function readStdin() {
+    return new Promise((resolve) => {
+        let data = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (chunk) => {
+            data += chunk;
+        });
+        process.stdin.on('end', () => {
+            resolve(data);
+        });
+    });
+}
+function output(result) {
+    console.log(JSON.stringify(result));
+}
+async function main() {
+    try {
+        // Read input from stdin
+        const input = await readStdin();
+        if (!input.trim()) {
+            // Empty input is suspicious - deny for safety
+            output({ decision: 'deny', reason: 'Empty input received' });
+            return;
+        }
+        let hookInput;
+        try {
+            hookInput = JSON.parse(input);
+        }
+        catch {
+            // Invalid JSON could be an attack - deny for safety
+            output({ decision: 'deny', reason: 'Invalid JSON input' });
+            return;
+        }
+        // Only process Bash commands
+        if (hookInput.tool_name !== 'Bash') {
+            output({ decision: 'allow' });
+            return;
+        }
+        const command = hookInput.tool_input.command;
+        if (!command || typeof command !== 'string') {
+            output({ decision: 'allow' });
+            return;
+        }
+        // Load config
+        const config = loadConfig();
+        if (!config) {
+            // No config, allow all commands
+            output({ decision: 'allow' });
+            return;
+        }
+        // Analyze command for danger
+        const analysis = analyzeCommand(command, config.rules.customPatterns?.map((p) => ({
+            pattern: new RegExp(p.pattern, 'i'),
+            severity: p.severity,
+            reason: p.reason,
+        })), config.rules.whitelist);
+        if (!analysis.isDangerous) {
+            output({ decision: 'allow' });
+            return;
+        }
+        // Command is dangerous - request approval
+        const requestId = uuidv4();
+        const cwd = process.cwd();
+        try {
+            // Initialize Supabase
+            initializeSupabase(config);
+            // Create request in Supabase
+            await createRequest(requestId, {
+                command,
+                dangerReason: analysis.reason,
+                severity: analysis.severity,
+                cwd,
+            });
+            // Send notification via configured messenger
+            const messenger = MessengerFactory.create(config.messenger);
+            const messengerLabel = MessengerFactory.getMessengerTypeLabel(config.messenger.type);
+            const notificationResult = await messenger.sendNotification({
+                requestId,
+                command,
+                reason: analysis.reason,
+                severity: analysis.severity,
+                cwd,
+                timestamp: Date.now(),
+            });
+            if (!notificationResult.ok) {
+                // Failed to send notification, use default action
+                const decision = config.rules.defaultAction === 'allow' ? 'allow' : 'deny';
+                output({
+                    decision,
+                    reason: `Failed to send notification: ${notificationResult.error}`,
+                });
+                await shutdownSupabase();
+                return;
+            }
+            // Wait for approval
+            const timeoutMs = config.rules.timeoutSeconds * 1000;
+            const status = await new Promise((resolve) => {
+                listenForApproval(requestId, timeoutMs, (status) => {
+                    resolve(status);
+                });
+            });
+            await shutdownSupabase();
+            if (status === 'approved') {
+                output({ decision: 'allow', reason: `Approved via ${messengerLabel}` });
+            }
+            else if (status === 'rejected') {
+                output({ decision: 'deny', reason: `Rejected via ${messengerLabel}` });
+            }
+            else {
+                // Timeout - use default action
+                const decision = config.rules.defaultAction === 'allow' ? 'allow' : 'deny';
+                output({ decision, reason: 'Approval timed out' });
+            }
+        }
+        catch (error) {
+            await shutdownSupabase().catch(() => { });
+            // On error, use default action
+            const decision = config.rules.defaultAction === 'allow' ? 'allow' : 'deny';
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            output({ decision, reason: `Error: ${errorMessage}` });
+        }
+    }
+    catch (error) {
+        // Critical error, deny for safety
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        output({ decision: 'deny', reason: `Critical error: ${errorMessage}` });
+    }
+}
+main();
+//# sourceMappingURL=hook.js.map

package/dist/bin/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/bin/hook.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAe5B,KAAK,UAAU,SAAS;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,MAAkB;IAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,wBAAwB;QACxB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,8CAA8C;YAC9C,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;YACpD,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,6BAA6B;QAC7B,IAAI,SAAS,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACnC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,cAAc;QACd,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gCAAgC;YAChC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,cAAc,CAC7B,OAAO,EACP,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;YACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,EACH,MAAM,CAAC,KAAK,CAAC,SAAS,CACvB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,IAAI,CAAC;YACH,sBAAsB;YACtB,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE3B,6BAA6B;YAC7B,MAAM,aAAa,CAAC,SAAS,EAAE;gBAC7B,OAAO;gBACP,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,GAAG;aACJ,CAAC,CAAC;YAEH,6CAA6C;YAC7C,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,cAAc,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrF,MAAM,kBAAkB,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC;gBAC1D,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,GAAG;gBACH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;gBAC3B,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3E,MAAM,CAAC;oBACL,QAAQ;oBACR,MAAM,EAAE,gCAAgC,kBAAkB,CAAC,KAAK,EAAE;iBACnE,CAAC,CAAC;gBACH,MAAM,gBAAgB,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,oBAAoB;YACpB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAErD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAsC,CAAC,OAAO,EAAE,EAAE;gBAChF,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;oBACjD,OAAO,CAAC,MAA6C,CAAC,CAAC;gBACzD,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,gBAAgB,EAAE,CAAC;YAEzB,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,cAAc,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,+BAA+B;gBAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3E,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,YAAY,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kCAAkC;QAClC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC9E,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,YAAY,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { loadConfig, saveConfig, getConfigPath, type Config } from './lib/config.js';
+export { analyzeCommand, type RuleResult, type Severity } from './lib/rules.js';
+export { sendSlackNotification, type SlackMessage } from './lib/slack.js';
+export { initializeSupabase, createRequest, listenForApproval, type ApprovalRequest, type ApprovalStatus, } from './lib/supabase.js';
+export { registerHook, unregisterHook } from './lib/claude-settings.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { loadConfig, saveConfig, getConfigPath } from './lib/config.js';
+export { analyzeCommand } from './lib/rules.js';
+export { sendSlackNotification } from './lib/slack.js';
+export { initializeSupabase, createRequest, listenForApproval, } from './lib/supabase.js';
+export { registerHook, unregisterHook } from './lib/claude-settings.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAe,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAkC,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAqB,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/lib/claude-settings.d.ts

@@ -0,0 +1,11 @@
+export declare function isHookRegistered(): boolean;
+export declare function registerHook(): {
+    success: boolean;
+    message: string;
+};
+export declare function unregisterHook(): {
+    success: boolean;
+    message: string;
+};
+export declare function getClaudeSettingsPath(): string;
+//# sourceMappingURL=claude-settings.d.ts.map

package/dist/lib/claude-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-settings.d.ts","sourceRoot":"","sources":["../../src/lib/claude-settings.ts"],"names":[],"mappings":"AA0DA,wBAAgB,gBAAgB,IAAI,OAAO,CAQ1C;AAED,wBAAgB,YAAY,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0BpE;AAED,wBAAgB,cAAc,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA8BtE;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C"}