commandmate 0.22.2 → 0.23.0

package/scripts/hooks/cmate-agent-event.sh

@@ -6,6 +6,21 @@
 # `notify`) so the server learns that a turn ended from the agent itself rather
 # than by reading the terminal. See docs/user-guide/agent-event-hooks.md.
 #
+# **This script is on the critical path for every tool except Claude Code.**
+# Issue #1757 measured `type:"http"` handlers against codex, copilot, gemini and
+# antigravity and none of the four accept them — codex is the worst case, where
+# a single `"type":"http"` entry makes it discard the whole hooks.json and every
+# event dies with one line on stderr. So `type:"command"` running this script is
+# the only delivery mechanism those tools have, and a word this script refuses
+# is a word that tool can never report.
+#
+# Which is what Issue #1759 fixed here. Before it, `--event` accepted five words
+# while the API accepted seven: `pre_tool_use` and `post_tool_use`, added to
+# `AGENT_EVENT_TYPES` by #1726, exited 2 rather than posting. `map_event_name`
+# also knew only Claude's spellings, so gemini's `BeforeTool` / `AfterAgent`
+# family died as "unrecognized hook event name". Both are now complete: seven
+# words, and the native spellings of all five push-mode tools.
+#
 # Written for bash 3.2 — the version macOS still ships — so no associative
 # arrays, `mapfile`, or `${var^^}`.
 #
@@ -24,11 +39,12 @@ Usage: cmate-agent-event.sh [options] [JSON]
 Options:
   --tool ID          Agent CLI id (default: $CM_AGENT_TOOL, else "claude")
   --event EVENT      stop | notification | session_start | user_prompt_submit |
-                     session_end (default: "stop")
+                     session_end | pre_tool_use | post_tool_use (default: "stop")
   --cwd PATH         Agent working directory (default: $CLAUDE_PROJECT_DIR, else $PWD)
   --session-id ID    Opaque agent session id
   --worktree-id ID   CommandMate worktree id; skips cwd-based resolution
   --instance-id ID   Agent instance id; without it the event lands on the primary
+  --detail TEXT      Event subtype; without it, read from the payload
   --json JSON        Hook payload to read cwd/session/event from
   --stdin-json       Read that payload from stdin instead
   --url URL          Endpoint (default: http://$CM_HOST:$CM_PORT/api/hooks/agent-event)
@@ -61,13 +77,37 @@ json_escape() {
 }
 
 # Map an agent's own event name onto the API vocabulary.
+#
+# The spellings come from Issue #1757's live capture of all four tools
+# (docs/design/agent-hooks-phase4-live-verification.md §8.1) and #1721's of
+# Claude. Three dialects share this function because a single relay serves every
+# tool; a name that is not below is refused rather than guessed at, so a tool
+# whose vocabulary grows fails loudly instead of filing an unknown event under
+# something adjacent.
+#
+# Deliberately absent: `PreInvocation` / `PostInvocation` (antigravity),
+# `BeforeModel` / `AfterModel` / `PreCompress` (gemini), `PreCompact` /
+# `PostCompact` / `SubagentStart` (codex). They are real events with no word in
+# AGENT_EVENT_TYPES, and inventing one for them here would put a meaning in the
+# API that no consumer agreed to.
 map_event_name() {
   case "$1" in
+    # Claude Code / codex / copilot / antigravity — the CamelCase dialect.
+    # (antigravity never reaches this function from a payload: its payloads carry
+    # no event name at all, so its hooks must pass --event. #1757 R2.)
     Stop|SubagentStop|agent-turn-complete) printf 'stop' ;;
     Notification) printf 'notification' ;;
     SessionStart) printf 'session_start' ;;
     SessionEnd) printf 'session_end' ;;
     UserPromptSubmit) printf 'user_prompt_submit' ;;
+    PreToolUse) printf 'pre_tool_use' ;;
+    PostToolUse) printf 'post_tool_use' ;;
+    # gemini renames four of the seven. The table is the CLI's own, read out of
+    # `gemini hooks migrate --from-claude` rather than guessed (#1757 §5.3.1).
+    BeforeAgent) printf 'user_prompt_submit' ;;
+    AfterAgent) printf 'stop' ;;
+    BeforeTool) printf 'pre_tool_use' ;;
+    AfterTool) printf 'post_tool_use' ;;
     *) printf '' ;;
   esac
 }
@@ -75,11 +115,15 @@ map_event_name() {
 # The event's subtype, where it has one. Each event spells it differently and
 # none of them share a field. Notification is judged on notification_type, never
 # on the human-facing "message" (Issue #1721, D3).
+#
+# pre_tool_use / post_tool_use carry `tool_name`, which is what the receiver
+# stores as the detail and what a matcher is tested against (Issue #1726).
 detail_field_for_event() {
   case "$1" in
     notification) printf 'notification_type' ;;
     session_end) printf 'reason' ;;
     session_start) printf 'source' ;;
+    pre_tool_use|post_tool_use) printf 'tool_name' ;;
     *) printf '' ;;
   esac
 }
@@ -104,6 +148,7 @@ while [ $# -gt 0 ]; do
     --session-id) [ $# -ge 2 ] || die "--session-id requires a value"; SESSION_ID="$2"; shift 2 ;;
     --worktree-id) [ $# -ge 2 ] || die "--worktree-id requires a value"; WORKTREE_ID="$2"; shift 2 ;;
     --instance-id) [ $# -ge 2 ] || die "--instance-id requires a value"; INSTANCE_ID="$2"; shift 2 ;;
+    --detail) [ $# -ge 2 ] || die "--detail requires a value"; DETAIL="$2"; shift 2 ;;
     --json) [ $# -ge 2 ] || die "--json requires a value"; HOOK_JSON="$2"; shift 2 ;;
     --url) [ $# -ge 2 ] || die "--url requires a value"; URL="$2"; shift 2 ;;
     --stdin-json) READ_STDIN=1; shift ;;
@@ -131,9 +176,21 @@ if [ -n "$HOOK_JSON" ]; then
       [ -n "$EVENT" ] || die "unrecognized hook event name: $JSON_EVENT"
     fi
   fi
+  # Session id spellings, in preference order. `session_id` covers Claude,
+  # codex, copilot and gemini; `conversationId` is antigravity's protojson name
+  # for the same thing (#1757 R4). The two turn-ids are last because they
+  # identify a turn rather than a session and are only worth sending when
+  # nothing better exists: `turn_id` is codex's, `turn-id` predates #1757 and is
+  # kept so a hook configured against an older release keeps working.
   if [ -z "$SESSION_ID" ]; then
     SESSION_ID="$(json_string_field "$HOOK_JSON" 'session_id')"
   fi
+  if [ -z "$SESSION_ID" ]; then
+    SESSION_ID="$(json_string_field "$HOOK_JSON" 'conversationId')"
+  fi
+  if [ -z "$SESSION_ID" ]; then
+    SESSION_ID="$(json_string_field "$HOOK_JSON" 'turn_id')"
+  fi
   if [ -z "$SESSION_ID" ]; then
     SESSION_ID="$(json_string_field "$HOOK_JSON" 'turn-id')"
   fi
@@ -141,9 +198,12 @@ fi
 
 [ -n "$EVENT" ] || EVENT="stop"
 
+# All seven words of AGENT_EVENT_TYPES. Kept in the same order as
+# src/lib/hooks/agent-event-types.ts so the two are read side by side; a word
+# missing here is a word the API accepts and the relay silently cannot send.
 case "$EVENT" in
-  stop|notification|session_start|user_prompt_submit|session_end) ;;
-  *) die "--event must be one of: stop, notification, session_start, user_prompt_submit, session_end (got \"$EVENT\")" ;;
+  stop|notification|session_start|user_prompt_submit|session_end|pre_tool_use|post_tool_use) ;;
+  *) die "--event must be one of: stop, notification, session_start, user_prompt_submit, session_end, pre_tool_use, post_tool_use (got \"$EVENT\")" ;;
 esac
 
 if [ -z "$DETAIL" ] && [ -n "$HOOK_JSON" ]; then
@@ -153,6 +213,16 @@ if [ -z "$DETAIL" ] && [ -n "$HOOK_JSON" ]; then
   fi
 fi
 
+# antigravity nests the tool name under `toolCall.name` and has no `tool_name`
+# at all (#1757 R3: its payload is camelCase protojson throughout). Only
+# consulted when the flat field produced nothing, so no other tool's payload can
+# reach it.
+if [ -z "$DETAIL" ] && [ -n "$HOOK_JSON" ]; then
+  case "$EVENT" in
+    pre_tool_use|post_tool_use) DETAIL="$(json_string_field "$HOOK_JSON" 'name')" ;;
+  esac
+fi
+
 [ -n "$TOOL" ] || die "--tool must not be empty"
 
 if [ -z "$CWD" ]; then

package/.next/server/chunks/8856.js

@@ -1,4 +0,0 @@
-"use strict";exports.id=8856,exports.ids=[8856],exports.modules={2924:(a,b,c)=>{c.d(b,{r:()=>h,g:()=>g});var d=c(48524),e=c(72626);let f=(0,e.h)("lib/tasks/task-transition-service");function g(a,b,c,e){let g=a.transaction(()=>{let f=(0,d.gg)(a,b);if(!f)return null;let g=f.status,h=function(a,b){switch(a){case"pending":switch(b){case"message_sent":return"running";case"send_failed":case"cancel":return"cancelled";default:return null}case"running":switch(b){case"prompt_detected":return"waiting_input";case"agent_idle":return"running";case"verify_started":return"verifying";case"send_failed":return"failed";case"cancel":return"cancelled";default:return null}case"waiting_input":switch(b){case"prompt_answered_auto":case"prompt_answered_human":case"agent_idle":return"running";case"verify_started":return"verifying";case"cancel":return"cancelled";default:return null}case"verifying":switch(b){case"verify_passed":return"succeeded";case"verify_failed":return"failed";case"verify_not_started":return"not_started";case"cancel":return"cancelled";default:return null}case"failed":case"not_started":switch(b){case"message_sent":return"running";case"verify_started":return"verifying";case"cancel":return"cancelled";default:return null}default:return null}}(g,c),i=function(a,b){let c=void 0===b.payload||0===Object.keys(b.payload).length?null:JSON.stringify(b.payload);return Number(a.prepare(`
-      INSERT INTO task_events (task_id, event, from_status, to_status, payload_json, created_at)
-      VALUES (?, ?, ?, ?, ?, ?)
-    `).run(b.taskId,b.event,b.fromStatus,b.toStatus,c,b.createdAt).lastInsertRowid)}(a,{taskId:b,event:c,fromStatus:g,toStatus:h,payload:e,createdAt:Date.now()});return null===h?{task:f,fromStatus:g,toStatus:null,eventId:i}:{task:(0,d.xZ)(a,b,h,e?.runId===void 0?{}:{lastVerificationRunId:e.runId}),fromStatus:g,toStatus:h,eventId:i}})();return null===g?f.warn("task-event-unknown-task",{taskId:b,event:c}):null===g.toStatus&&f.warn("task-event-rejected",{taskId:b,event:c,fromStatus:g.fromStatus}),g}function h(a,b,c,e,h,i){try{let f=(0,d.MH)(a,b,c,e);if(!f)return null;return g(a,f.id,h,i)}catch(a){return f.warn("task-event-failed",{worktreeId:b,cliToolId:c,instanceId:e,event:h,error:a instanceof Error?a.message:String(a)}),null}}},13287:(a,b,c)=>{c.d(b,{I4:()=>j,k$:()=>e,l9:()=>d,ss:()=>h});let d="PermissionRequest",e="AskUserQuestion";function f(a,b){let c=a[b];return"string"==typeof c&&""!==c?c:null}function g(a){return"object"==typeof a&&null!==a&&!Array.isArray(a)}function h(a){if(!g(a)||a.hook_event_name!==d)return null;let b=f(a,"tool_name");return b&&!(b.length>128)&&g(a.tool_input)?{toolName:b,toolInput:a.tool_input,promptId:f(a,"prompt_id"),sessionId:f(a,"session_id"),permissionMode:f(a,"permission_mode"),permissionSuggestions:Array.isArray(a.permission_suggestions)?a.permission_suggestions:null}:null}let i={Bash:["command","description"],BashOutput:["bash_id"],KillShell:["shell_id"],Read:["file_path"],Write:["file_path"],Edit:["file_path"],NotebookEdit:["notebook_path"],Glob:["pattern","path"],Grep:["pattern","path"],WebFetch:["url","prompt"],WebSearch:["query"],SlashCommand:["command"],Task:["description","subagent_type","prompt"]};function j(a,b){let c=i[a];if(c){let a=c.map(a=>b[a]).filter(a=>"string"==typeof a&&""!==a);if(a.length>0)return a}try{return[JSON.stringify(b)??""]}catch{return[Object.keys(b).join(" ")]}}},16983:(a,b,c)=>{c.d(b,{Jn:()=>e,eu:()=>f,sO:()=>d});let d=1e3,e=200,f=2e4},24455:(a,b,c)=>{c.d(b,{Cs:()=>o,G:()=>s,GE:()=>j,LP:()=>r,Re:()=>z,UL:()=>v,Ue:()=>h,W8:()=>m,XK:()=>n,ZO:()=>u,_9:()=>p,aq:()=>l,fC:()=>y,kC:()=>q,pL:()=>i,ps:()=>t,v7:()=>g});var d=c(68901);c(66007);var e=c(15194);let f=(0,c(72626).h)("auto-yes-state");function g(a,b,c){if(a.includes(":"))throw Error(`worktreeId must not contain ':': ${a}`);if(!c||c===b)return`${a}:${b}`;if(c.includes(":"))throw Error(`instanceId must not contain ':': ${c}`);return`${a}:${b}:${c}`}function h(a){let b=a.indexOf(":");return -1===b?a:a.substring(0,b)}function i(a){let b=a.split(":")[1];return void 0===b?null:(0,e.hR)(b)?b:null}function j(a){let b=a.split(":");return b[2]??b[1]??null}let k=globalThis.__autoYesStates??(globalThis.__autoYesStates=new Map);function l(a,b="claude",c){let d=g(a,b,c),e=k.get(d);return e?Date.now()>=e.expiresAt?n(a,b,"expired",c):e:null}function m(a,b,c,e,f,h){let i=g(a,b,h);if(!c)return n(a,b,void 0,h);{let a=Date.now(),b={enabled:!0,enabledAt:a,expiresAt:a+(e??d.t6),stopPattern:f};return k.set(i,b),b}}function n(a,b="claude",c,d){let e=g(a,b,d),f=k.get(e),h={enabled:!1,enabledAt:f?.enabledAt??0,expiresAt:f?.expiresAt??0,stopPattern:f?.stopPattern,stopReason:c};return k.set(e,h),h}function o(a,b,c){let e=h(a),g=i(a);if(!g)return!1;let k=j(a)??void 0,m=l(e,g,k);if(!m?.stopPattern)return!1;if(!(0,d.P0)(m.stopPattern).valid)return f.warn("invalid-stop-pattern",{detail:String({compositeKey:a})}),n(e,g,void 0,k),!1;try{let h=new RegExp(m.stopPattern),i=(0,d.eJ)(h,b);if(null===i)return f.warn("stop-condition-check",{detail:String({compositeKey:a})}),n(e,g,void 0,k),!1;if(i)return n(e,g,"stop_pattern_matched",k),c&&c(a),f.warn("stop-condition-matched",{detail:String({compositeKey:a})}),!0}catch{f.warn("stop-condition-check",{detail:String({compositeKey:a})})}return!1}function p(a,b){return a.filter(a=>h(a)===b)}function q(a){return p(Array.from(k.keys()),a)}function r(a){let b=q(a);return b.forEach(a=>k.delete(a)),b.length}function s(a){return a<x?t:Math.min(t*Math.pow(2,a-x+1),w)}let t=2e3,u=5e3,v=1e4,w=6e4,x=5,y=50,z=50},36051:(a,b,c)=>{c.d(b,{Yo:()=>h,fO:()=>i,lY:()=>e});var d=c(81254);let e=500,f={notification:"Notification(permission_prompt)","permission-request":"PermissionRequest (no decision)"};function g(a,b){let c=[`A dialog is open in ${a}: the agent reported it via ${f[b.source]}${b.toolName?` for ${b.toolName}`:""}, but the detection layer published no options for it.`,`Answer it in the terminal, or send the option NUMBER with \`commandmate respond ${a} <number>\` — yes/no is not resolved on a numbered dialog (Issue #1681).`];if(b.message&&c.push(`Agent message: "${b.message}"`),b.askUserQuestion){let{question:a,labels:d,questionCount:e}=b.askUserQuestion;c.push(`The agent asked${e>1?` ${e} questions, the first being`:""}: "${a}" — offering: ${d.join(" / ")}. The picker renumbers and adds its own entries, so read the option NUMBER off the terminal rather than counting this list.`)}return c.join(" ")}function h(a,b){return{type:d.LT,status:"pending",question:g(a,b),options:[],source:b.source,...b.message?{message:b.message}:{},...b.toolName?{toolName:b.toolName}:{},...b.askUserQuestion?{askUserQuestion:b.askUserQuestion}:{}}}function i(a,b){return{type:d.LT,status:"unclassified",question:g(a,b),options:[],source:b.source,...b.message?{message:b.message}:{},...b.toolName?{toolName:b.toolName}:{},...b.askUserQuestion?{askUserQuestion:b.askUserQuestion}:{}}}},48083:(a,b,c)=>{c.d(b,{BJ:()=>B,CE:()=>o,Fw:()=>C,HR:()=>y,P5:()=>w,R4:()=>t,_N:()=>A,ak:()=>q,dj:()=>r,ik:()=>v,je:()=>s,m5:()=>z,n4:()=>p,zA:()=>x,zM:()=>n});var d=c(24455),e=c(13287),f=c(67882),g=c(36051);let h=globalThis.__agentEventLastStopAt??(globalThis.__agentEventLastStopAt=new Map),i=globalThis.__agentEventLast??(globalThis.__agentEventLast=new Map),j=globalThis.__agentEventGenerationStartedAt??(globalThis.__agentEventGenerationStartedAt=new Map),k=globalThis.__agentEventPromptWaiting??(globalThis.__agentEventPromptWaiting=new Map),l=globalThis.__agentEventAskUserQuestion??(globalThis.__agentEventAskUserQuestion=new Map),m=globalThis.__agentEventRecentKeys??(globalThis.__agentEventRecentKeys=new Map);function n(a,b,c,e=Date.now()){h.set((0,d.v7)(a,b,c),e)}function o(a,b,c){return h.get((0,d.v7)(a,b,c))??null}function p(a,b,c,f){let g=(0,d.v7)(a,b,c);i.set(g,f),function(a,b){switch(b.event){case"pre_tool_use":b.detail!==e.k$&&l.delete(a);return;case"notification":"idle_prompt"===b.detail&&l.delete(a);return;case"post_tool_use":case"stop":case"user_prompt_submit":case"session_start":case"session_end":l.delete(a);return;default:b.event;return}}(g,f),"session_start"===f.event&&j.set(g,f.at),function(a,b){switch(b.event){case"notification":"permission_prompt"===b.detail?u(a,{source:"notification",message:b.message??null,at:b.at}):"idle_prompt"===b.detail&&k.delete(a);return;case"stop":case"user_prompt_submit":case"session_start":case"session_end":case"post_tool_use":k.delete(a);return;case"pre_tool_use":return;default:b.event;return}}(g,f)}function q(a,b,c){return i.get((0,d.v7)(a,b,c))??null}function r(a,b,c,e=Date.now()){let f=(0,d.v7)(a,b,c);j.set(f,e),k.delete(f),l.delete(f)}function s(a,b,c){let e=(0,d.v7)(a,b,c);i.delete(e),j.delete(e),k.delete(e),l.delete(e)}function t(a,b,c,e=Date.now()){let g=(0,d.v7)(a,b,c),h=i.get(g);if(!h)return null;let k=j.get(g);if(void 0!==k&&h.at<k||e-h.at>=18e5)return null;let l=(0,f.DA)(h.event,h.detail);return null===l?null:{...l,event:h.event,at:h.at,detail:h.detail}}function u(a,b){let c=k.get(a),d="notification"===b.source;if(c){c.message=b.message??c.message,c.toolName=b.toolName??c.toolName,d&&(c.source="notification",c.confirmedAt??=b.at);return}k.set(a,{at:b.at,source:b.source,message:b.message?b.message.slice(0,g.lY):null,toolName:b.toolName??null,confirmedAt:d?b.at:null,scraperCorroborated:!1,recorded:!1})}function v(a,b,c,e,f=Date.now()){u((0,d.v7)(a,b,c),{source:"permission-request",message:null,toolName:e,at:f})}function w(a,b,c,e=Date.now()){let f=(0,d.v7)(a,b,c),g=k.get(f);if(!g)return null;let h=j.get(f);return void 0!==h&&g.at<h||e-g.at>=18e5||null===g.confirmedAt&&e-g.at>=2e4?null:g}function x(a,b,c,e=Date.now()){let f=k.get((0,d.v7)(a,b,c));f&&(f.scraperCorroborated=!0,f.confirmedAt??=e)}function y(a,b,c){let e=k.get((0,d.v7)(a,b,c));e&&(e.recorded=!0)}function z(a,b,c){k.delete((0,d.v7)(a,b,c))}function A(a,b,c,e,f=Date.now()){l.set((0,d.v7)(a,b,c),{at:f,spec:e})}function B(a,b,c,e=Date.now()){let f=(0,d.v7)(a,b,c),g=l.get(f);if(!g)return null;let h=j.get(f);return void 0!==h&&g.at<h||e-g.at>=18e5?null:g}function C(a,b,c,e,f,g=Date.now(),h=null){if(!f)return!1;let i=[(0,d.v7)(a,b,c),e,h??"",f].join(" "),j=m.get(i);return void 0!==j&&g-j<3e3||(m.set(i,g),function(a){for(let[b,c]of m)a-c>=3e3&&m.delete(b);for(;m.size>512;){let a=m.keys().next();if(a.done)break;m.delete(a.value)}}(g),!1)}},56791:(a,b,c)=>{c.d(b,{ACU:()=>d.AC,Tu1:()=>d.Tu,ug3:()=>d.ug,ePp:()=>d.eP,mgu:()=>d.mg,lmQ:()=>d.lm,afR:()=>d.af,KG7:()=>d.KG,cDg:()=>d.cD,Jj_:()=>d.Jj,YXK:()=>d.YX,G4M:()=>d.G4,hLV:()=>d.hL,qpu:()=>d.qp,hlF:()=>d.hl,ToT:()=>d.To,oHS:()=>d.oH,UTO:()=>d.UT,pyp:()=>d.py,rYZ:()=>d.rY,yyF:()=>d.yy,pEA:()=>d.pE,z2r:()=>d.z2,cPO:()=>d.cP,DFh:()=>d.DF,lAn:()=>d.lA,QpU:()=>d.Qp,thF:()=>d.th,oZb:()=>d.oZ,ZPM:()=>d.ZP,YsC:()=>d.Ys,vgV:()=>d.vg,Rm5:()=>d.Rm,C81:()=>d.C8,u$7:()=>d.u$,MHq:()=>d.MH,BN2:()=>d.BN,m0H:()=>d.m0,r3d:()=>d.r3,TkM:()=>d.Tk,fXo:()=>d.fX,nO1:()=>d.nO,SjY:()=>d.Sj,iTB:()=>d.iT,gpF:()=>d.gp,yEE:()=>d.yE,BEB:()=>d.BE,qKv:()=>d.qK,p41:()=>d.p4,r8U:()=>d.r8,of8:()=>d.of,DNF:()=>d.DN,pZp:()=>d.pZ,kAO:()=>d.kA,VLK:()=>d.VL,CFc:()=>d.CF,NVZ:()=>d.NV,ceo:()=>d.ce,WZv:()=>d.WZ,y1O:()=>d.y1,ggW:()=>d.gg,NrL:()=>d.Nr,obI:()=>d.ob,frO:()=>d.fr,J6l:()=>d.J6,Uim:()=>d.Ui,P99:()=>d.P9,eNI:()=>d.eN,vil:()=>d.vi,uJp:()=>d.uJ,yTo:()=>d.yT,VkA:()=>d.Vk,Mt$:()=>d.Mt,UE1:()=>d.UE,PLg:()=>d.PL,jpM:()=>d.jp,pGL:()=>d.pG,nQM:()=>d.nQ,ybN:()=>d.yb,GAi:()=>d.GA,Cs6:()=>d.Cs,xRr:()=>d.xR,azd:()=>d.az,nZD:()=>d.nZ,PPl:()=>d.PP,DxD:()=>d.Dx,OaR:()=>d.O,EU4:()=>d.EU,HZx:()=>d.HZ,UYU:()=>d.UY,cwY:()=>d.cw,jJB:()=>d.jJ,DCX:()=>d.DC,PPx:()=>d.gb,yBd:()=>d.yB,uy0:()=>d.uy,sal:()=>d.s,ium:()=>d.iu,hqe:()=>d.hq,z1g:()=>d.z1,blx:()=>d.bl,jAi:()=>d.jA,ZL2:()=>d.ZL});var d=c(90444);c(88807),c(72456),c(20416),c(10406),c(29021),c(33873),c(21820),c(7956),(0,c(72626).h)("db-migration-path")},66007:(a,b,c)=>{c.d(b,{B9:()=>m,Px:()=>o,Uc:()=>l,b$:()=>n,h6:()=>k});var d=c(33873),e=c.n(d),f=c(29021),g=c(72626),h=c(80438);let i=(0,g.h)("path-validator"),j=/^[a-zA-Z0-9_-]+$/;function k(a){return!!a&&0!==a.length&&j.test(a)}function l(a,b){return a===b||a.startsWith(b+e().sep)}function m(a,b){if(!a||""===a.trim()||a.includes("\0"))return!1;let c=a;try{c=decodeURIComponent(a)}catch{c=a}if(c.includes("\0"))return!1;let d=e().resolve(b),f=e().resolve(b,c),g=e().relative(d,f);return!(g.startsWith("..")||e().isAbsolute(g))}function n(a,b){if(!a||""===a.trim())throw Error("Invalid path: Path cannot be empty");if(a.includes("\0"))throw Error("Invalid path: Null bytes not allowed");if(!m(a,b))throw Error(`Path is outside allowed directory: ${a} (allowed root: ${b})`);let c=a;try{c=decodeURIComponent(a)}catch{c=a}return e().resolve(b,c)}function o(a,b){let c;try{c=(0,f.realpathSync)(b)}catch{return!1}let d=e().resolve(b,a);if((0,f.existsSync)(d))try{let b=(0,f.realpathSync)(d),e=l(b,c);return e||(0,h.h)(i,"symlink-rejected",{targetPath:a,resolvedTarget:b}),e}catch{return!1}try{if((0,f.lstatSync)(d).isSymbolicLink())try{let b=(0,f.readlinkSync)(d),g=e().resolve(e().dirname(d),b),j=l(g,c);return j||(0,h.h)(i,"dangling-symlink-rejected",{targetPath:a,resolvedLinkTarget:g}),j}catch{return!1}}catch{}let g=e().dirname(d);for(;g!==e().dirname(g);){if((0,f.existsSync)(g))try{let a=(0,f.realpathSync)(g),b=l(a,c);return b||(0,h.h)(i,"symlink-ancestor-rejected",{currentPath:g,resolvedAncestor:a}),b}catch{break}g=e().dirname(g)}return!1}},67882:(a,b,c)=>{c.d(b,{DA:()=>e,O_:()=>f,Oh:()=>d,_K:()=>g});let d={PROMPT_SUBMIT:"hook_prompt_submit",STOP:"hook_stop",PERMISSION_PROMPT:"hook_permission_prompt",PERMISSION_REQUEST:"hook_permission_request",IDLE_PROMPT:"hook_idle_prompt",PRE_TOOL_USE:"hook_pre_tool_use",POST_TOOL_USE:"hook_post_tool_use"};function e(a,b){switch(a){case"user_prompt_submit":return{status:"running",reason:d.PROMPT_SUBMIT};case"pre_tool_use":return{status:"running",reason:d.PRE_TOOL_USE};case"post_tool_use":return{status:"running",reason:d.POST_TOOL_USE};case"stop":return{status:"ready",reason:d.STOP};case"notification":if("permission_prompt"===b)return{status:"waiting",reason:d.PERMISSION_PROMPT};if("idle_prompt"===b)return{status:"ready",reason:d.IDLE_PROMPT};return null;default:return null}}function f(a){switch(a){case"waiting":return{isWaitingForResponse:!0,isProcessing:!1};case"running":return{isWaitingForResponse:!1,isProcessing:!0};default:return{isWaitingForResponse:!1,isProcessing:!1}}}function g(a){return a.isSessionRunning?a.isWaitingForResponse?"waiting":a.isProcessing?"running":"ready":null}},68901:(a,b,c)=>{c.d(b,{FW:()=>l,Ke:()=>k,P0:()=>n,QN:()=>j,dR:()=>i,eJ:()=>o,t6:()=>h,ul:()=>m});var d=c(82366),e=c.n(d),f=c(16983);let g=[36e5,108e5,288e5],h=36e5;function i(a){return"number"==typeof a&&g.includes(a)}let j=5e3,k=f.sO,l=5e3,m=20;function n(a){if(a.length>500)return{valid:!1,error:"Pattern must be 500 characters or less"};if(!e()(a))return{valid:!1,error:"Pattern may cause performance issues (catastrophic backtracking detected)"};try{return new RegExp(a),{valid:!0}}catch{return{valid:!1,error:"Invalid regular expression syntax"}}}function o(a,b,c=100){try{return a.test(b)}catch{return null}}},80438:(a,b,c)=>{c.d(b,{h:()=>d});function d(a,b,c){a.warn(`security:${b}`,c)}},81254:(a,b,c)=>{function d(a){return"answer_only"===a||"answer_then_enter"===a}c.d(b,{LT:()=>e,MI:()=>d,XF:()=>f});let e="unclassified";function f(a){return null!=a&&a.type!==e}}};