gsd-pi 2.76.0 → 2.77.0

package/packages/pi-coding-agent/dist/core/hooks-runner.js

@@ -0,0 +1,337 @@
+/**
+ * Layer 0 shell-hook runner.
+ *
+ * Bridges the Layer 2 extension event bus to user-configured shell commands
+ * declared in `settings.json` under the `hooks` key. Each hook entry receives
+ * the event payload as JSON on stdin and can mutate the pending action by
+ * writing a JSON response to stdout.
+ *
+ * Trust model: hooks loaded from project-scoped settings are dropped unless
+ * the user has opted in by creating `.pi/hooks.trusted` in the project root.
+ * This prevents a cloned repository from executing arbitrary shell commands.
+ */
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { CONFIG_DIR_NAME } from "../config.js";
+const TRUST_MARKER = "hooks.trusted";
+const DEFAULT_TIMEOUT_MS = 30_000;
+export function isProjectHooksTrusted(cwd) {
+    return existsSync(join(cwd, CONFIG_DIR_NAME, TRUST_MARKER));
+}
+function collectHooks(name, globalSettings, projectSettings, cwd) {
+    const result = [];
+    for (const entry of globalSettings.hooks?.[name] ?? []) {
+        result.push({ ...entry, scope: "global" });
+    }
+    if (projectSettings.hooks?.[name]?.length && isProjectHooksTrusted(cwd)) {
+        for (const entry of projectSettings.hooks[name] ?? []) {
+            result.push({ ...entry, scope: "project" });
+        }
+    }
+    return result;
+}
+function matchesFilter(entry, payload) {
+    const filter = entry.match;
+    if (!filter)
+        return true;
+    if (filter.tool !== undefined) {
+        const names = Array.isArray(filter.tool) ? filter.tool : [filter.tool];
+        const toolName = payload.toolName ?? payload.tool;
+        if (typeof toolName !== "string" || !names.includes(toolName))
+            return false;
+    }
+    if (filter.command !== undefined) {
+        const cmd = payload.input?.command
+            ?? payload.command;
+        if (typeof cmd !== "string" || !cmd.startsWith(filter.command))
+            return false;
+    }
+    return true;
+}
+async function runOne(name, hook, payload, cwd) {
+    const timeout = hook.timeout ?? DEFAULT_TIMEOUT_MS;
+    const startedAt = Date.now();
+    return new Promise((resolve) => {
+        const child = spawn(hook.command, {
+            cwd,
+            shell: true,
+            stdio: ["pipe", "pipe", "pipe"],
+            env: { ...process.env, ...hook.env, GSD_HOOK_EVENT: name, GSD_HOOK_SCOPE: hook.scope },
+        });
+        let stdout = "";
+        let stderr = "";
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill("SIGTERM");
+            setTimeout(() => {
+                if (child.exitCode === null)
+                    child.kill("SIGKILL");
+            }, 2_000);
+        }, timeout);
+        child.stdout.on("data", (d) => { stdout += d.toString(); });
+        child.stderr.on("data", (d) => { stderr += d.toString(); });
+        child.on("error", (err) => {
+            clearTimeout(timer);
+            resolve({
+                name,
+                scope: hook.scope,
+                command: hook.command,
+                exitCode: 1,
+                stdout,
+                stderr: stderr || String(err),
+                durationMs: Date.now() - startedAt,
+                timedOut: false,
+            });
+        });
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            let parsed;
+            const trimmed = stdout.trim();
+            if (trimmed.startsWith("{") && trimmed.endsWith("}")) {
+                try {
+                    parsed = JSON.parse(trimmed);
+                }
+                catch { /* tolerate non-JSON stdout */ }
+            }
+            resolve({
+                name,
+                scope: hook.scope,
+                command: hook.command,
+                exitCode: code ?? -1,
+                stdout,
+                stderr,
+                durationMs: Date.now() - startedAt,
+                timedOut,
+                parsed,
+            });
+        });
+        // Silence EPIPE if the child exits before consuming stdin.
+        child.stdin.on("error", () => { });
+        try {
+            child.stdin.write(JSON.stringify(payload), () => {
+                try {
+                    child.stdin.end();
+                }
+                catch { /* ignore */ }
+            });
+        }
+        catch { /* child may have already exited */ }
+    });
+}
+async function runChain(name, payload, hooks, cwd, onInvocation) {
+    let merged;
+    for (const hook of hooks) {
+        if (!matchesFilter(hook, payload))
+            continue;
+        const invocation = await runOne(name, hook, payload, cwd);
+        onInvocation?.(invocation);
+        if (invocation.exitCode !== 0 && hook.blocking !== false) {
+            const reason = invocation.parsed?.reason
+                ?? (invocation.stderr.trim()
+                    || `Hook ${hook.command} exited with code ${invocation.exitCode}`);
+            return { ...(merged ?? {}), block: true, reason };
+        }
+        if (invocation.parsed) {
+            if (invocation.parsed.block)
+                return { ...(merged ?? {}), ...invocation.parsed };
+            merged = { ...(merged ?? {}), ...invocation.parsed };
+        }
+    }
+    return merged;
+}
+export function createHooksRunner(options) {
+    const { extensionRunner, cwd, onInvocation } = options;
+    const dispatch = async (name, payload) => {
+        const hooks = collectHooks(name, options.getGlobalSettings(), options.getProjectSettings(), cwd);
+        if (hooks.length === 0)
+            return undefined;
+        return runChain(name, payload, hooks, cwd, onInvocation);
+    };
+    const handlers = new Map();
+    handlers.set("input", [async (event) => {
+            const e = event;
+            const result = await dispatch("UserPromptSubmit", { text: e.text, source: e.source });
+            if (result?.block)
+                return { action: "handled" };
+            return undefined;
+        }]);
+    handlers.set("tool_call", [async (event) => {
+            const e = event;
+            const result = await dispatch("PreToolUse", {
+                toolCallId: e.toolCallId,
+                toolName: e.toolName,
+                input: e.input,
+            });
+            if (result?.block)
+                return { block: true, reason: result.reason };
+            return undefined;
+        }]);
+    handlers.set("tool_result", [async (event) => {
+            const e = event;
+            await dispatch("PostToolUse", {
+                toolCallId: e.toolCallId,
+                toolName: e.toolName,
+                input: e.input,
+                content: e.content,
+                isError: e.isError,
+                details: e.details,
+            });
+            return undefined;
+        }]);
+    handlers.set("stop", [async (event) => {
+            const e = event;
+            await dispatch("Stop", { reason: e.reason });
+            return undefined;
+        }]);
+    handlers.set("notification", [async (event) => {
+            const e = event;
+            await dispatch("Notification", { kind: e.kind, message: e.message, details: e.details });
+            if (e.kind === "blocked") {
+                await dispatch("Blocked", { message: e.message, details: e.details });
+            }
+            return undefined;
+        }]);
+    handlers.set("session_end", [async (event) => {
+            const e = event;
+            await dispatch("SessionEnd", { reason: e.reason, sessionFile: e.sessionFile });
+            return undefined;
+        }]);
+    handlers.set("before_commit", [async (event) => {
+            const e = event;
+            const result = await dispatch("PreCommit", { message: e.message, files: e.files, cwd: e.cwd, author: e.author });
+            if (!result)
+                return undefined;
+            if (result.block)
+                return { cancel: true, reason: result.reason };
+            if (result.message !== undefined)
+                return { message: result.message };
+            return undefined;
+        }]);
+    handlers.set("commit", [async (event) => {
+            const e = event;
+            await dispatch("PostCommit", { sha: e.sha, message: e.message, files: e.files, cwd: e.cwd });
+            return undefined;
+        }]);
+    handlers.set("before_push", [async (event) => {
+            const e = event;
+            const result = await dispatch("PrePush", { remote: e.remote, branch: e.branch, cwd: e.cwd });
+            if (result?.block)
+                return { cancel: true, reason: result.reason };
+            return undefined;
+        }]);
+    handlers.set("push", [async (event) => {
+            const e = event;
+            await dispatch("PostPush", { remote: e.remote, branch: e.branch, cwd: e.cwd });
+            return undefined;
+        }]);
+    handlers.set("before_pr", [async (event) => {
+            const e = event;
+            const result = await dispatch("PrePr", {
+                branch: e.branch,
+                targetBranch: e.targetBranch,
+                title: e.title,
+                body: e.body,
+                cwd: e.cwd,
+            });
+            if (!result)
+                return undefined;
+            if (result.block)
+                return { cancel: true, reason: result.reason };
+            if (result.title !== undefined || result.body !== undefined) {
+                return { title: result.title, body: result.body };
+            }
+            return undefined;
+        }]);
+    handlers.set("pr_opened", [async (event) => {
+            const e = event;
+            await dispatch("PostPr", { url: e.url, branch: e.branch, targetBranch: e.targetBranch, cwd: e.cwd });
+            return undefined;
+        }]);
+    handlers.set("before_verify", [async (event) => {
+            const e = event;
+            const result = await dispatch("PreVerify", { unitType: e.unitType, unitId: e.unitId, cwd: e.cwd });
+            if (result?.block)
+                return { cancel: true, reason: result.reason };
+            return undefined;
+        }]);
+    handlers.set("verify_result", [async (event) => {
+            const e = event;
+            await dispatch("PostVerify", {
+                passed: e.passed,
+                failures: e.failures,
+                unitType: e.unitType,
+                unitId: e.unitId,
+                cwd: e.cwd,
+            });
+            return undefined;
+        }]);
+    handlers.set("budget_threshold", [async (event) => {
+            const e = event;
+            const result = await dispatch("BudgetThreshold", {
+                fraction: e.fraction,
+                spent: e.spent,
+                limit: e.limit,
+                currency: e.currency,
+            });
+            if (result?.action)
+                return { action: result.action };
+            return undefined;
+        }]);
+    handlers.set("milestone_start", [async (event) => {
+            const e = event;
+            await dispatch("PreMilestone", { milestoneId: e.milestoneId, title: e.title, cwd: e.cwd });
+            return undefined;
+        }]);
+    handlers.set("milestone_end", [async (event) => {
+            const e = event;
+            await dispatch("PostMilestone", { milestoneId: e.milestoneId, status: e.status, cwd: e.cwd });
+            return undefined;
+        }]);
+    handlers.set("unit_start", [async (event) => {
+            const e = event;
+            await dispatch("PreUnit", {
+                unitType: e.unitType,
+                unitId: e.unitId,
+                milestoneId: e.milestoneId,
+                cwd: e.cwd,
+            });
+            return undefined;
+        }]);
+    handlers.set("unit_end", [async (event) => {
+            const e = event;
+            await dispatch("PostUnit", {
+                unitType: e.unitType,
+                unitId: e.unitId,
+                milestoneId: e.milestoneId,
+                status: e.status,
+                cwd: e.cwd,
+            });
+            return undefined;
+        }]);
+    handlers.set("session_before_compact", [async (event) => {
+            const e = event;
+            const result = await dispatch("PreCompact", { branchEntries: e.branchEntries.length });
+            if (result?.block)
+                return { cancel: true };
+            return undefined;
+        }]);
+    handlers.set("session_compact", [async (event) => {
+            const e = event;
+            await dispatch("PostCompact", { fromExtension: e.fromExtension });
+            return undefined;
+        }]);
+    const dispose = extensionRunner.installHookBridge("__hooks__", handlers);
+    return {
+        dispose,
+        async fireSessionStart() {
+            const payload = { type: "session_start" };
+            await dispatch("SessionStart", { cwd, type: payload.type });
+        },
+        async fireSessionEnd(reason) {
+            await dispatch("SessionEnd", { reason });
+        },
+    };
+}
+//# sourceMappingURL=hooks-runner.js.map

package/packages/pi-coding-agent/dist/core/hooks-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-runner.js","sourceRoot":"","sources":["../../src/core/hooks-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAqC/C,MAAM,YAAY,GAAG,eAAe,CAAC;AACrC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AA8BlC,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAChD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CACpB,IAAc,EACd,cAAwB,EACxB,eAAyB,EACzB,GAAW;IAEX,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAgB,EAAE,OAAgC;IACxE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAK,OAA6B,CAAC,IAAI,CAAC;QACzE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7E,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,GAAI,OAAO,CAAC,KAA2C,EAAE,OAAO;eACpE,OAAiC,CAAC,OAAO,CAAC;QAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9E,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,MAAM,CACpB,IAAc,EACd,IAAgB,EAChB,OAAgB,EAChB,GAAW;IAEX,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;YACjC,GAAG;YACH,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,EAAE;SACtF,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE;gBACf,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC,EAAE,KAAK,CAAC,CAAC;QACX,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACP,IAAI;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,QAAQ,EAAE,KAAK;aACf,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,MAAoC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAqB,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,CAAC;gBACP,IAAI;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;gBACpB,MAAM;gBACN,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,QAAQ;gBACR,MAAM;aACN,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,2DAA2D;QAC3D,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAe,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE;gBAC/C,IAAI,CAAC;oBAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACtB,IAAc,EACd,OAAgC,EAChC,KAAmB,EACnB,GAAW,EACX,YAA0C;IAE1C,IAAI,MAAoC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,SAAS;QAC5C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QAE3B,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM;mBACpC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE;uBACxB,QAAQ,IAAI,CAAC,OAAO,qBAAqB,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK;gBAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;YAChF,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACtD,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAsBD,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC5D,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAEvD,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAc,EAAE,OAAgC,EAAE,EAAE;QAC3E,MAAM,KAAK,GAAG,YAAY,CACzB,IAAI,EACJ,OAAO,CAAC,iBAAiB,EAAE,EAC3B,OAAO,CAAC,kBAAkB,EAAE,EAC5B,GAAG,CACH,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEhD,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAc,EAAyC,EAAE;YACtF,MAAM,CAAC,GAAG,KAAmB,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,IAAI,MAAM,EAAE,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAc,EAA4C,EAAE;YAC7F,MAAM,CAAC,GAAG,KAAsB,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE;gBAC3C,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;aACd,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,KAAc,EAA8C,EAAE;YACjG,MAAM,CAAC,GAAG,KAAwB,CAAC;YACnC,MAAM,QAAQ,CAAC,aAAa,EAAE;gBAC7B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;aAClB,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,KAAkB,CAAC;YAC7B,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,KAA0B,CAAC;YACrC,MAAM,QAAQ,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACrD,MAAM,CAAC,GAAG,KAAwB,CAAC;YACnC,MAAM,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/E,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAc,EAAgD,EAAE;YACrG,MAAM,CAAC,GAAG,KAA0B,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACjH,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,CAAC,GAAG,KAAoB,CAAC;YAC/B,MAAM,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7F,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,KAAc,EAA8C,EAAE;YACjG,MAAM,CAAC,GAAG,KAAwB,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7F,IAAI,MAAM,EAAE,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,KAAkB,CAAC;YAC7B,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/E,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAc,EAA4C,EAAE;YAC7F,MAAM,CAAC,GAAG,KAAsB,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE;gBACtC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,GAAG,EAAE,CAAC,CAAC,GAAG;aACV,CAAC,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YACnD,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACnD,MAAM,CAAC,GAAG,KAAsB,CAAC;YACjC,MAAM,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACrG,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAc,EAAgD,EAAE;YACrG,MAAM,CAAC,GAAG,KAA0B,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACnG,IAAI,MAAM,EAAE,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACvD,MAAM,CAAC,GAAG,KAA0B,CAAC;YACrC,MAAM,QAAQ,CAAC,YAAY,EAAE;gBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG;aACV,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,KAAc,EAAmD,EAAE;YAC3G,MAAM,CAAC,GAAG,KAA6B,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE;gBAChD,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACpB,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACzD,MAAM,CAAC,GAAG,KAA4B,CAAC;YACvC,MAAM,QAAQ,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3F,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACvD,MAAM,CAAC,GAAG,KAA0B,CAAC;YACrC,MAAM,QAAQ,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACpD,MAAM,CAAC,GAAG,KAAuB,CAAC;YAClC,MAAM,QAAQ,CAAC,SAAS,EAAE;gBACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,GAAG,EAAE,CAAC,CAAC,GAAG;aACV,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAClD,MAAM,CAAC,GAAG,KAAqB,CAAC;YAChC,MAAM,QAAQ,CAAC,UAAU,EAAE;gBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG;aACV,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,KAAc,EAAmD,EAAE;YACjH,MAAM,CAAC,GAAG,KAAkC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;YACvF,IAAI,MAAM,EAAE,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACzD,MAAM,CAAC,GAAG,KAA4B,CAAC;YACvC,MAAM,QAAQ,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YAClE,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,eAAe,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEzE,OAAO;QACN,OAAO;QACP,KAAK,CAAC,gBAAgB;YACrB,MAAM,OAAO,GAAsB,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YAC7D,MAAM,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,MAAM;YAC1B,MAAM,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["/**\n * Layer 0 shell-hook runner.\n *\n * Bridges the Layer 2 extension event bus to user-configured shell commands\n * declared in `settings.json` under the `hooks` key. Each hook entry receives\n * the event payload as JSON on stdin and can mutate the pending action by\n * writing a JSON response to stdout.\n *\n * Trust model: hooks loaded from project-scoped settings are dropped unless\n * the user has opted in by creating `.pi/hooks.trusted` in the project root.\n * This prevents a cloned repository from executing arbitrary shell commands.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../config.js\";\nimport type { ExtensionRunner } from \"./extensions/runner.js\";\nimport type {\n\tBeforeCommitEventResult,\n\tBeforePrEventResult,\n\tBeforePushEventResult,\n\tBeforeVerifyEventResult,\n\tBudgetThresholdEventResult,\n\tCommitEvent,\n\tInputEventResult,\n\tNotificationEvent,\n\tPrOpenedEvent,\n\tPushEvent,\n\tSessionEndEvent,\n\tSessionStartEvent,\n\tStopEvent,\n\tToolCallEvent,\n\tToolCallEventResult,\n\tToolResultEvent,\n\tToolResultEventResult,\n\tBeforeCommitEvent,\n\tBeforePrEvent,\n\tBeforePushEvent,\n\tBeforeVerifyEvent,\n\tBudgetThresholdEvent,\n\tInputEvent,\n\tMilestoneEndEvent,\n\tMilestoneStartEvent,\n\tSessionBeforeCompactEvent,\n\tSessionBeforeCompactResult,\n\tSessionCompactEvent,\n\tUnitEndEvent,\n\tUnitStartEvent,\n\tVerifyResultEvent,\n} from \"./extensions/types.js\";\nimport type { HookEntry, HooksSettings, Settings } from \"./settings-manager.js\";\n\nconst TRUST_MARKER = \"hooks.trusted\";\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\nexport type HookName = keyof HooksSettings;\nexport type HookScope = \"global\" | \"project\";\n\ninterface ScopedHook extends HookEntry {\n\tscope: HookScope;\n}\n\nexport interface HookStdoutResult {\n\tblock?: boolean;\n\treason?: string;\n\tmessage?: string;\n\ttitle?: string;\n\tbody?: string;\n\taction?: \"pause\" | \"downgrade\" | \"continue\";\n}\n\nexport interface HookInvocation {\n\tname: HookName;\n\tscope: HookScope;\n\tcommand: string;\n\texitCode: number;\n\tstdout: string;\n\tstderr: string;\n\tdurationMs: number;\n\ttimedOut: boolean;\n\tparsed?: HookStdoutResult;\n}\n\nexport function isProjectHooksTrusted(cwd: string): boolean {\n\treturn existsSync(join(cwd, CONFIG_DIR_NAME, TRUST_MARKER));\n}\n\nfunction collectHooks(\n\tname: HookName,\n\tglobalSettings: Settings,\n\tprojectSettings: Settings,\n\tcwd: string,\n): ScopedHook[] {\n\tconst result: ScopedHook[] = [];\n\tfor (const entry of globalSettings.hooks?.[name] ?? []) {\n\t\tresult.push({ ...entry, scope: \"global\" });\n\t}\n\tif (projectSettings.hooks?.[name]?.length && isProjectHooksTrusted(cwd)) {\n\t\tfor (const entry of projectSettings.hooks[name] ?? []) {\n\t\t\tresult.push({ ...entry, scope: \"project\" });\n\t\t}\n\t}\n\treturn result;\n}\n\nfunction matchesFilter(entry: HookEntry, payload: Record<string, unknown>): boolean {\n\tconst filter = entry.match;\n\tif (!filter) return true;\n\n\tif (filter.tool !== undefined) {\n\t\tconst names = Array.isArray(filter.tool) ? filter.tool : [filter.tool];\n\t\tconst toolName = payload.toolName ?? (payload as { tool?: string }).tool;\n\t\tif (typeof toolName !== \"string\" || !names.includes(toolName)) return false;\n\t}\n\n\tif (filter.command !== undefined) {\n\t\tconst cmd = (payload.input as { command?: unknown } | undefined)?.command\n\t\t\t?? (payload as { command?: unknown }).command;\n\t\tif (typeof cmd !== \"string\" || !cmd.startsWith(filter.command)) return false;\n\t}\n\n\treturn true;\n}\n\nasync function runOne(\n\tname: HookName,\n\thook: ScopedHook,\n\tpayload: unknown,\n\tcwd: string,\n): Promise<HookInvocation> {\n\tconst timeout = hook.timeout ?? DEFAULT_TIMEOUT_MS;\n\tconst startedAt = Date.now();\n\n\treturn new Promise((resolve) => {\n\t\tconst child = spawn(hook.command, {\n\t\t\tcwd,\n\t\t\tshell: true,\n\t\t\tstdio: [\"pipe\", \"pipe\", \"pipe\"],\n\t\t\tenv: { ...process.env, ...hook.env, GSD_HOOK_EVENT: name, GSD_HOOK_SCOPE: hook.scope },\n\t\t});\n\n\t\tlet stdout = \"\";\n\t\tlet stderr = \"\";\n\t\tlet timedOut = false;\n\n\t\tconst timer = setTimeout(() => {\n\t\t\ttimedOut = true;\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t\tsetTimeout(() => {\n\t\t\t\tif (child.exitCode === null) child.kill(\"SIGKILL\");\n\t\t\t}, 2_000);\n\t\t}, timeout);\n\n\t\tchild.stdout.on(\"data\", (d) => { stdout += d.toString(); });\n\t\tchild.stderr.on(\"data\", (d) => { stderr += d.toString(); });\n\n\t\tchild.on(\"error\", (err) => {\n\t\t\tclearTimeout(timer);\n\t\t\tresolve({\n\t\t\t\tname,\n\t\t\t\tscope: hook.scope,\n\t\t\t\tcommand: hook.command,\n\t\t\t\texitCode: 1,\n\t\t\t\tstdout,\n\t\t\t\tstderr: stderr || String(err),\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\ttimedOut: false,\n\t\t\t});\n\t\t});\n\n\t\tchild.on(\"close\", (code) => {\n\t\t\tclearTimeout(timer);\n\t\t\tlet parsed: HookStdoutResult | undefined;\n\t\t\tconst trimmed = stdout.trim();\n\t\t\tif (trimmed.startsWith(\"{\") && trimmed.endsWith(\"}\")) {\n\t\t\t\ttry { parsed = JSON.parse(trimmed) as HookStdoutResult; } catch { /* tolerate non-JSON stdout */ }\n\t\t\t}\n\t\t\tresolve({\n\t\t\t\tname,\n\t\t\t\tscope: hook.scope,\n\t\t\t\tcommand: hook.command,\n\t\t\t\texitCode: code ?? -1,\n\t\t\t\tstdout,\n\t\t\t\tstderr,\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\ttimedOut,\n\t\t\t\tparsed,\n\t\t\t});\n\t\t});\n\n\t\t// Silence EPIPE if the child exits before consuming stdin.\n\t\tchild.stdin.on(\"error\", () => { /* no-op */ });\n\t\ttry {\n\t\t\tchild.stdin.write(JSON.stringify(payload), () => {\n\t\t\t\ttry { child.stdin.end(); } catch { /* ignore */ }\n\t\t\t});\n\t\t} catch { /* child may have already exited */ }\n\t});\n}\n\nasync function runChain(\n\tname: HookName,\n\tpayload: Record<string, unknown>,\n\thooks: ScopedHook[],\n\tcwd: string,\n\tonInvocation?: (i: HookInvocation) => void,\n): Promise<HookStdoutResult | undefined> {\n\tlet merged: HookStdoutResult | undefined;\n\tfor (const hook of hooks) {\n\t\tif (!matchesFilter(hook, payload)) continue;\n\t\tconst invocation = await runOne(name, hook, payload, cwd);\n\t\tonInvocation?.(invocation);\n\n\t\tif (invocation.exitCode !== 0 && hook.blocking !== false) {\n\t\t\tconst reason = invocation.parsed?.reason\n\t\t\t\t?? (invocation.stderr.trim()\n\t\t\t\t\t|| `Hook ${hook.command} exited with code ${invocation.exitCode}`);\n\t\t\treturn { ...(merged ?? {}), block: true, reason };\n\t\t}\n\n\t\tif (invocation.parsed) {\n\t\t\tif (invocation.parsed.block) return { ...(merged ?? {}), ...invocation.parsed };\n\t\t\tmerged = { ...(merged ?? {}), ...invocation.parsed };\n\t\t}\n\t}\n\treturn merged;\n}\n\n// ─── Public API ────────────────────────────────────────────────────────────\n\nexport interface HooksRunnerOptions {\n\textensionRunner: ExtensionRunner;\n\tgetGlobalSettings: () => Settings;\n\tgetProjectSettings: () => Settings;\n\tcwd: string;\n\tonInvocation?: (invocation: HookInvocation) => void;\n}\n\nexport interface HooksRunner {\n\tdispose(): void;\n\t/** Fire SessionStart once during bootstrap. */\n\tfireSessionStart(): Promise<void>;\n\t/** Fire SessionEnd during session teardown. */\n\tfireSessionEnd(reason: SessionEndEvent[\"reason\"]): Promise<void>;\n}\n\ntype HandlerFn = (event: unknown, ctx: unknown) => Promise<unknown>;\n\nexport function createHooksRunner(options: HooksRunnerOptions): HooksRunner {\n\tconst { extensionRunner, cwd, onInvocation } = options;\n\n\tconst dispatch = async (name: HookName, payload: Record<string, unknown>) => {\n\t\tconst hooks = collectHooks(\n\t\t\tname,\n\t\t\toptions.getGlobalSettings(),\n\t\t\toptions.getProjectSettings(),\n\t\t\tcwd,\n\t\t);\n\t\tif (hooks.length === 0) return undefined;\n\t\treturn runChain(name, payload, hooks, cwd, onInvocation);\n\t};\n\n\tconst handlers = new Map<string, HandlerFn[]>();\n\n\thandlers.set(\"input\", [async (event: unknown): Promise<InputEventResult | undefined> => {\n\t\tconst e = event as InputEvent;\n\t\tconst result = await dispatch(\"UserPromptSubmit\", { text: e.text, source: e.source });\n\t\tif (result?.block) return { action: \"handled\" };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"tool_call\", [async (event: unknown): Promise<ToolCallEventResult | undefined> => {\n\t\tconst e = event as ToolCallEvent;\n\t\tconst result = await dispatch(\"PreToolUse\", {\n\t\t\ttoolCallId: e.toolCallId,\n\t\t\ttoolName: e.toolName,\n\t\t\tinput: e.input,\n\t\t});\n\t\tif (result?.block) return { block: true, reason: result.reason };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"tool_result\", [async (event: unknown): Promise<ToolResultEventResult | undefined> => {\n\t\tconst e = event as ToolResultEvent;\n\t\tawait dispatch(\"PostToolUse\", {\n\t\t\ttoolCallId: e.toolCallId,\n\t\t\ttoolName: e.toolName,\n\t\t\tinput: e.input,\n\t\t\tcontent: e.content,\n\t\t\tisError: e.isError,\n\t\t\tdetails: e.details,\n\t\t});\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"stop\", [async (event: unknown) => {\n\t\tconst e = event as StopEvent;\n\t\tawait dispatch(\"Stop\", { reason: e.reason });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"notification\", [async (event: unknown) => {\n\t\tconst e = event as NotificationEvent;\n\t\tawait dispatch(\"Notification\", { kind: e.kind, message: e.message, details: e.details });\n\t\tif (e.kind === \"blocked\") {\n\t\t\tawait dispatch(\"Blocked\", { message: e.message, details: e.details });\n\t\t}\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"session_end\", [async (event: unknown) => {\n\t\tconst e = event as SessionEndEvent;\n\t\tawait dispatch(\"SessionEnd\", { reason: e.reason, sessionFile: e.sessionFile });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"before_commit\", [async (event: unknown): Promise<BeforeCommitEventResult | undefined> => {\n\t\tconst e = event as BeforeCommitEvent;\n\t\tconst result = await dispatch(\"PreCommit\", { message: e.message, files: e.files, cwd: e.cwd, author: e.author });\n\t\tif (!result) return undefined;\n\t\tif (result.block) return { cancel: true, reason: result.reason };\n\t\tif (result.message !== undefined) return { message: result.message };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"commit\", [async (event: unknown) => {\n\t\tconst e = event as CommitEvent;\n\t\tawait dispatch(\"PostCommit\", { sha: e.sha, message: e.message, files: e.files, cwd: e.cwd });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"before_push\", [async (event: unknown): Promise<BeforePushEventResult | undefined> => {\n\t\tconst e = event as BeforePushEvent;\n\t\tconst result = await dispatch(\"PrePush\", { remote: e.remote, branch: e.branch, cwd: e.cwd });\n\t\tif (result?.block) return { cancel: true, reason: result.reason };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"push\", [async (event: unknown) => {\n\t\tconst e = event as PushEvent;\n\t\tawait dispatch(\"PostPush\", { remote: e.remote, branch: e.branch, cwd: e.cwd });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"before_pr\", [async (event: unknown): Promise<BeforePrEventResult | undefined> => {\n\t\tconst e = event as BeforePrEvent;\n\t\tconst result = await dispatch(\"PrePr\", {\n\t\t\tbranch: e.branch,\n\t\t\ttargetBranch: e.targetBranch,\n\t\t\ttitle: e.title,\n\t\t\tbody: e.body,\n\t\t\tcwd: e.cwd,\n\t\t});\n\t\tif (!result) return undefined;\n\t\tif (result.block) return { cancel: true, reason: result.reason };\n\t\tif (result.title !== undefined || result.body !== undefined) {\n\t\t\treturn { title: result.title, body: result.body };\n\t\t}\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"pr_opened\", [async (event: unknown) => {\n\t\tconst e = event as PrOpenedEvent;\n\t\tawait dispatch(\"PostPr\", { url: e.url, branch: e.branch, targetBranch: e.targetBranch, cwd: e.cwd });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"before_verify\", [async (event: unknown): Promise<BeforeVerifyEventResult | undefined> => {\n\t\tconst e = event as BeforeVerifyEvent;\n\t\tconst result = await dispatch(\"PreVerify\", { unitType: e.unitType, unitId: e.unitId, cwd: e.cwd });\n\t\tif (result?.block) return { cancel: true, reason: result.reason };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"verify_result\", [async (event: unknown) => {\n\t\tconst e = event as VerifyResultEvent;\n\t\tawait dispatch(\"PostVerify\", {\n\t\t\tpassed: e.passed,\n\t\t\tfailures: e.failures,\n\t\t\tunitType: e.unitType,\n\t\t\tunitId: e.unitId,\n\t\t\tcwd: e.cwd,\n\t\t});\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"budget_threshold\", [async (event: unknown): Promise<BudgetThresholdEventResult | undefined> => {\n\t\tconst e = event as BudgetThresholdEvent;\n\t\tconst result = await dispatch(\"BudgetThreshold\", {\n\t\t\tfraction: e.fraction,\n\t\t\tspent: e.spent,\n\t\t\tlimit: e.limit,\n\t\t\tcurrency: e.currency,\n\t\t});\n\t\tif (result?.action) return { action: result.action };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"milestone_start\", [async (event: unknown) => {\n\t\tconst e = event as MilestoneStartEvent;\n\t\tawait dispatch(\"PreMilestone\", { milestoneId: e.milestoneId, title: e.title, cwd: e.cwd });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"milestone_end\", [async (event: unknown) => {\n\t\tconst e = event as MilestoneEndEvent;\n\t\tawait dispatch(\"PostMilestone\", { milestoneId: e.milestoneId, status: e.status, cwd: e.cwd });\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"unit_start\", [async (event: unknown) => {\n\t\tconst e = event as UnitStartEvent;\n\t\tawait dispatch(\"PreUnit\", {\n\t\t\tunitType: e.unitType,\n\t\t\tunitId: e.unitId,\n\t\t\tmilestoneId: e.milestoneId,\n\t\t\tcwd: e.cwd,\n\t\t});\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"unit_end\", [async (event: unknown) => {\n\t\tconst e = event as UnitEndEvent;\n\t\tawait dispatch(\"PostUnit\", {\n\t\t\tunitType: e.unitType,\n\t\t\tunitId: e.unitId,\n\t\t\tmilestoneId: e.milestoneId,\n\t\t\tstatus: e.status,\n\t\t\tcwd: e.cwd,\n\t\t});\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"session_before_compact\", [async (event: unknown): Promise<SessionBeforeCompactResult | undefined> => {\n\t\tconst e = event as SessionBeforeCompactEvent;\n\t\tconst result = await dispatch(\"PreCompact\", { branchEntries: e.branchEntries.length });\n\t\tif (result?.block) return { cancel: true };\n\t\treturn undefined;\n\t}]);\n\n\thandlers.set(\"session_compact\", [async (event: unknown) => {\n\t\tconst e = event as SessionCompactEvent;\n\t\tawait dispatch(\"PostCompact\", { fromExtension: e.fromExtension });\n\t\treturn undefined;\n\t}]);\n\n\tconst dispose = extensionRunner.installHookBridge(\"__hooks__\", handlers);\n\n\treturn {\n\t\tdispose,\n\t\tasync fireSessionStart() {\n\t\t\tconst payload: SessionStartEvent = { type: \"session_start\" };\n\t\t\tawait dispatch(\"SessionStart\", { cwd, type: payload.type });\n\t\t},\n\t\tasync fireSessionEnd(reason) {\n\t\t\tawait dispatch(\"SessionEnd\", { reason });\n\t\t},\n\t};\n}\n"]}

package/packages/pi-coding-agent/dist/core/hooks-runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hooks-runner.test.d.ts.map

package/packages/pi-coding-agent/dist/core/hooks-runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-runner.test.d.ts","sourceRoot":"","sources":["../../src/core/hooks-runner.test.ts"],"names":[],"mappings":""}

package/packages/pi-coding-agent/dist/core/hooks-runner.test.js

@@ -0,0 +1,234 @@
+import { describe, it, afterEach } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { CONFIG_DIR_NAME } from "../config.js";
+import { ExtensionRunner } from "./extensions/runner.js";
+import { createHooksRunner, isProjectHooksTrusted } from "./hooks-runner.js";
+function makeTempProject() {
+    const base = mkdtempSync(join(tmpdir(), "hooks-runner-test-"));
+    mkdirSync(join(base, CONFIG_DIR_NAME), { recursive: true });
+    return base;
+}
+function trust(cwd) {
+    writeFileSync(join(cwd, CONFIG_DIR_NAME, "hooks.trusted"), "");
+}
+function stubRuntime() {
+    return {
+        flagValues: new Map(),
+        pendingProviderRegistrations: [],
+        registerProvider: () => { },
+        unregisterProvider: () => { },
+        emitBeforeModelSelect: async () => undefined,
+        emitAdjustToolSet: async () => undefined,
+        emitExtensionEvent: async () => undefined,
+        sendMessage: () => { },
+        sendUserMessage: () => { },
+        retryLastTurn: () => { },
+        appendEntry: () => { },
+        setSessionName: () => { },
+        getSessionName: () => undefined,
+        setLabel: () => { },
+        getActiveTools: () => [],
+        getAllTools: () => [],
+        setActiveTools: () => { },
+        refreshTools: () => { },
+        getCommands: () => [],
+        setModel: async () => false,
+        getThinkingLevel: () => "off",
+        setThinkingLevel: () => { },
+    };
+}
+function makeRunner(cwd) {
+    return new ExtensionRunner([], stubRuntime(), cwd, {}, {});
+}
+describe("isProjectHooksTrusted", () => {
+    let tmpCwd;
+    afterEach(() => {
+        if (tmpCwd)
+            rmSync(tmpCwd, { recursive: true, force: true });
+        tmpCwd = undefined;
+    });
+    it("returns false when the marker is missing", () => {
+        tmpCwd = makeTempProject();
+        assert.equal(isProjectHooksTrusted(tmpCwd), false);
+    });
+    it("returns true after the marker is written", () => {
+        tmpCwd = makeTempProject();
+        trust(tmpCwd);
+        assert.equal(isProjectHooksTrusted(tmpCwd), true);
+    });
+});
+describe("createHooksRunner — trust gate", () => {
+    let tmpCwd;
+    afterEach(() => {
+        if (tmpCwd)
+            rmSync(tmpCwd, { recursive: true, force: true });
+        tmpCwd = undefined;
+    });
+    it("ignores project hooks when the trust marker is absent", async () => {
+        tmpCwd = makeTempProject();
+        const runner = makeRunner(tmpCwd);
+        const invocations = [];
+        const hooks = createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({}),
+            getProjectSettings: () => ({
+                hooks: {
+                    SessionStart: [
+                        { command: `node -e "process.stdout.write('{}')"` },
+                    ],
+                },
+            }),
+            cwd: tmpCwd,
+            onInvocation: (i) => invocations.push(i.command),
+        });
+        await hooks.fireSessionStart();
+        assert.deepEqual(invocations, []);
+        hooks.dispose();
+    });
+    it("runs project hooks when the trust marker is present", async () => {
+        tmpCwd = makeTempProject();
+        trust(tmpCwd);
+        const runner = makeRunner(tmpCwd);
+        const invocations = [];
+        const hooks = createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({}),
+            getProjectSettings: () => ({
+                hooks: {
+                    SessionStart: [{ command: `node -e "process.exit(0)"` }],
+                },
+            }),
+            cwd: tmpCwd,
+            onInvocation: (i) => invocations.push(i.command),
+        });
+        await hooks.fireSessionStart();
+        assert.deepEqual(invocations, [`node -e "process.exit(0)"`]);
+        hooks.dispose();
+    });
+    it("runs global hooks unconditionally", async () => {
+        tmpCwd = makeTempProject();
+        const runner = makeRunner(tmpCwd);
+        const invocations = [];
+        const hooks = createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({
+                hooks: { SessionStart: [{ command: `node -e "process.exit(0)"` }] },
+            }),
+            getProjectSettings: () => ({}),
+            cwd: tmpCwd,
+            onInvocation: (i) => invocations.push(i.command),
+        });
+        await hooks.fireSessionStart();
+        assert.deepEqual(invocations, [`node -e "process.exit(0)"`]);
+        hooks.dispose();
+    });
+});
+describe("createHooksRunner — PreToolUse bridges to tool_call", () => {
+    let tmpCwd;
+    afterEach(() => {
+        if (tmpCwd)
+            rmSync(tmpCwd, { recursive: true, force: true });
+        tmpCwd = undefined;
+    });
+    it("blocks a tool call when the PreToolUse hook returns { block: true }", async () => {
+        tmpCwd = makeTempProject();
+        const runner = makeRunner(tmpCwd);
+        createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({
+                hooks: {
+                    PreToolUse: [
+                        {
+                            command: `node -e "process.stdout.write(JSON.stringify({block:true,reason:'nope'}))"`,
+                        },
+                    ],
+                },
+            }),
+            getProjectSettings: () => ({}),
+            cwd: tmpCwd,
+        });
+        const result = await runner.emitToolCall({
+            type: "tool_call",
+            toolCallId: "t1",
+            toolName: "bash",
+            input: { command: "ls" },
+        });
+        assert.equal(result?.block, true);
+        assert.equal(result?.reason, "nope");
+    });
+    it("applies filter.tool to scope the hook", async () => {
+        tmpCwd = makeTempProject();
+        const runner = makeRunner(tmpCwd);
+        createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({
+                hooks: {
+                    PreToolUse: [
+                        {
+                            match: { tool: "bash" },
+                            command: `node -e "process.stdout.write(JSON.stringify({block:true,reason:'bash-only'}))"`,
+                        },
+                    ],
+                },
+            }),
+            getProjectSettings: () => ({}),
+            cwd: tmpCwd,
+        });
+        const readResult = await runner.emitToolCall({
+            type: "tool_call",
+            toolCallId: "t2",
+            toolName: "read",
+            input: { path: "/tmp/x" },
+        });
+        assert.equal(readResult?.block, undefined);
+        const bashResult = await runner.emitToolCall({
+            type: "tool_call",
+            toolCallId: "t3",
+            toolName: "bash",
+            input: { command: "rm -rf /" },
+        });
+        assert.equal(bashResult?.block, true);
+    });
+    it("treats a non-zero exit as a block when blocking is not disabled", async () => {
+        tmpCwd = makeTempProject();
+        const runner = makeRunner(tmpCwd);
+        createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({
+                hooks: { PreToolUse: [{ command: `node -e "process.exit(1)"` }] },
+            }),
+            getProjectSettings: () => ({}),
+            cwd: tmpCwd,
+        });
+        const result = await runner.emitToolCall({
+            type: "tool_call",
+            toolCallId: "t4",
+            toolName: "bash",
+            input: { command: "ls" },
+        });
+        assert.equal(result?.block, true);
+    });
+    it("does not block when blocking: false and exit is non-zero", async () => {
+        tmpCwd = makeTempProject();
+        const runner = makeRunner(tmpCwd);
+        createHooksRunner({
+            extensionRunner: runner,
+            getGlobalSettings: () => ({
+                hooks: { PreToolUse: [{ command: `node -e "process.exit(1)"`, blocking: false }] },
+            }),
+            getProjectSettings: () => ({}),
+            cwd: tmpCwd,
+        });
+        const result = await runner.emitToolCall({
+            type: "tool_call",
+            toolCallId: "t5",
+            toolName: "bash",
+            input: { command: "ls" },
+        });
+        assert.equal(result?.block, undefined);
+    });
+});
+//# sourceMappingURL=hooks-runner.test.js.map