lee-spec-kit 0.8.1 → 0.8.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lee-spec-kit",
-  "version": "0.8.1",
+  "version": "0.8.4",
   "description": "Document-centered harness engineering toolkit for AI agent development",
   "type": "module",
   "bin": {

package/templates/en/common/README.md

@@ -5,9 +5,6 @@ This documentation is organized by feature to help agents quickly understand the
 ## Agent Session Start Checklist
 
 ```bash
-# (recommended once at start) run onboarding checks
-npx lee-spec-kit onboard --strict
-
 # 1) Detect project
 npx lee-spec-kit detect --json
 
@@ -105,7 +102,7 @@ When requirements/scope change, the “what to update” must be explicit in doc
 
 When you run `lee-spec-kit init`, it creates `.lee-spec-kit.json` in the docs root (default: `docs/`).
 
-- Used by `lee-spec-kit feature`, `status`, and `update` to detect docs location / project type / language.
+- Used by `lee-spec-kit feature`, `config`, `update`, `detect`, and workflow validators to resolve docs location / project type / language.
 - `docsRepo`, `pushDocs`, `docsRemote` are metadata for the CLI-managed **Docs Push policy** (the CLI does not auto-push).
 
 ### Fields

package/templates/en/common/agents/agents.md

@@ -24,6 +24,7 @@ This document defines workflow policy, not a custom runtime loop.
 - Minimum active feature docs: `spec.md`, `plan.md`, `tasks.md`, `decisions.md`.
 - When GitHub workflow is involved, also use `issue.md` and `pr.md`.
 - After reading the active feature docs, run `npx lee-spec-kit workflow-stage <featureRef> --json` and follow only that `nextAction`.
+- If `workflow-stage --json` also returns `primaryActionLabel` and `actionOptions`, treat `primaryActionLabel` as the default option label and present the exact `actionOptions[*].reply` tokens to the user.
 
 ## Execution Rules
 
@@ -31,6 +32,7 @@ This document defines workflow policy, not a custom runtime loop.
 - Codex owns the execution loop, tool usage, and hook lifecycle.
 - Do not start implementation unless `workflow-stage --json` reports `stage === "implementation"` and `implementationAllowed === true`.
 - Treat spec/plan/tasks approval, issue creation, and branch creation as hard gates before implementation.
+- In standalone mode, do not hand-write `git worktree add`; run the exact `nextAction.command` from `workflow-stage` so the managed workspace path, stale directory cleanup, and `.env`/`.env.*` copy step stay consistent.
 - Keep docs synced with code changes in the same turn whenever behavior or scope changes.
 - Use `npx lee-spec-kit commit-audit --json` before `git commit` when staged docs paths need validation.
 - Use `npx lee-spec-kit workflow-audit --json` as the default end-of-turn docs sync check.
@@ -44,6 +46,7 @@ This document defines workflow policy, not a custom runtime loop.
 
 - Ask the user for approval at documented workflow checkpoints and before remote or destructive actions.
 - If `workflow-stage --json` says `approvalRequired === true`, stop and ask the user at that checkpoint.
+- If `workflow-stage --json` returns labeled `actionOptions` at an approval boundary, keep those option labels and exact `reply` tokens in the user prompt instead of inventing new reply formats.
 - Share the exact artifact or plan before remote GitHub actions.
 
 ## Formatting Rules

package/templates/en/common/agents/git-workflow.md

@@ -81,8 +81,20 @@ main
 
 ### Branch Creation
 
+The canonical branch/worktree command comes from `workflow-stage`:
+
+```bash
+npx lee-spec-kit workflow-stage <featureRef> --json
+```
+
+Run the returned `nextAction.command` instead of hand-writing the worktree path. In
+`standalone` mode that command creates the worktree under the shared
+`workspaceRoot/.worktrees/{project-name}/` root, removes stale managed directories
+that are no longer registered Git worktrees, and copies existing `.env`/`.env.*` files
+from the project root into the new worktree when the target file is absent.
+
 ```bash
-# Default (recommended): create dedicated worktree + branch
+# Embedded fallback only: create dedicated worktree + branch
 mkdir -p .worktrees
 git worktree add -b feat/{issue-number}-{feature-name} .worktrees/feat-{issue-number}-{feature-name}
 
@@ -90,7 +102,7 @@ git worktree add -b feat/{issue-number}-{feature-name} .worktrees/feat-{issue-nu
 git worktree add .worktrees/feat-{issue-number}-{feature-name} feat/{issue-number}-{feature-name}
 ```
 
-> Continue implementation from the created worktree path (`.worktrees/feat-{issue-number}-{feature-name}`).
+> Continue implementation from the worktree path returned by `workflow-stage`.
 
 ### Document Commit Rules (Continuous Sync)
 

package/templates/en/common/agents/skills/execute-task.md

@@ -20,7 +20,7 @@ Use the active feature folder as the execution SSOT.
   - do not mark `[DONE]` without real completion and verification
   - update `Acceptance` and `Checklist` in the same edit when closing a task
   - if a completed task needs follow-up, add a new task instead of rewriting history
-- If you need to add a new task, prefer `npx lee-spec-kit task add <feature-ref> --title "..." --ref NON-PRD|PRD-*`.
+- If you need to add a new task, append a complete task block in `tasks.md` with a concrete title, `Acceptance`, `Checklist`, and `NON-PRD` or existing `PRD-*` tag.
 - Do not leave placeholder `Acceptance` or `Checklist` items in newly added tasks.
 
 ## 3. Keep docs in sync

package/templates/en/common/features/README.md

@@ -49,17 +49,13 @@ By the time work reaches this folder, the requirement should already be defined
 
 ---
 
-## Status Check
+## Workflow Stage Check
 
 ```bash
-npx lee-spec-kit status
+npx lee-spec-kit workflow-stage <feature-ref> --json
 ```
 
-Save to file:
-
-```bash
-npx lee-spec-kit status --write
-```
+Use the returned `stage`, `nextAction`, and `implementationAllowed` values as the current workflow state.
 
 ---
 
@@ -70,7 +66,7 @@ npx lee-spec-kit status --write
 - Use `[NON-PRD]` only for internal implementation work such as refactors, test-only work, tooling, renames, and cleanup.
 - If a change affects user-facing behavior, acceptance criteria, or scope, update PRD first and retag the task as `[PRD-...]`.
 - Do not invent PRD IDs inside feature docs. Define them in the PRD source first, and backfill legacy docs before linking tasks.
-- Coverage report: `npx lee-spec-kit requirements`
+- Keep traceability reviewable by maintaining `PRD Refs` in `spec.md` and PRD tags on each task line.
 
 ---
 

package/templates/en/common/features/feature-base/decisions.md

@@ -10,6 +10,7 @@ If unmanaged docs artifacts exist outside the canonical docs surface (for exampl
 
 Recording principles:
 
+- Prefer `npx lee-spec-kit decision add <feature-ref> --title "..." --context "..." --decision "..." --rationale "..." --evidence "..."` when creating a new ADR.
 - Every ADR must capture both **Decision (what was chosen)** and **Trace (how it was evaluated and validated)**.
 - Use fixed timing checkpoints:
   - Task start (`[TODO] -> [DOING]`): add 1-3 lines for `Context/Constraints` and `Trace (initial hypothesis)`

package/templates/en/common/features/feature-base/tasks.md

@@ -8,7 +8,7 @@
   - `[DOING] → [DONE]`: share the result and verification first, then update `Acceptance` and `Checklist` in the same edit
   - Ask for approval before changing task state only when the task crosses a documented review checkpoint or before remote/destructive actions.
   - Do not invent a standalone `OK` approval step when the workflow does not require one.
-  - `task-complete` rejects `[DONE]` while any item in that task's `Checklist` remains unchecked.
+  - Do not mark `[DONE]` while any item in that task's `Checklist` remains unchecked.
 - **PRD mapping (recommended)**: add an existing PRD requirement ID tag like `[PRD-FR-001]` or `[PRD-SCOPE-V1-DESKTOP-EDITOR]` to each task line, or tag non-PRD tasks as `[NON-PRD]`.
   - Do not invent PRD IDs in `tasks.md`. Only reference IDs that already exist in `docs/prd` or the upstream requirements doc.
   - If this is a legacy feature without PRD IDs yet, backfill IDs in the source requirements doc first, then align `spec.md` `PRD Refs` and task tags together.
@@ -69,8 +69,9 @@
 
 > Add tasks below. **At least 1 task is required.**
 > Keep tasks as one ordered list. The list order itself is the execution priority.
-> To add a new task, prefer `npx lee-spec-kit task add <feature-ref> --title "..." --ref NON-PRD|PRD-*`. Use an existing PRD key such as `PRD-FR-001` or `PRD-SCOPE-V1-DESKTOP-EDITOR`. Add `--acceptance` and `--check` inline when you already know the concrete items.
-> Do not leave placeholder `Acceptance` / `Checklist` content in place. `task-run` will block execution until those items are concrete.
+> Prefer `npx lee-spec-kit task add <feature-ref> --title "..." --ref NON-PRD --acceptance "..." --check "..."` for appending new tasks.
+> To add a new task, append a complete task block below the last existing task. Use an existing PRD key such as `PRD-FR-001` or `PRD-SCOPE-V1-DESKTOP-EDITOR`, or `[NON-PRD]` for internal work.
+> Do not leave placeholder `Acceptance` / `Checklist` content in place; implementation should not start until those items are concrete.
 > If you must edit manually, append it below the last existing task block in `Task List` instead of inserting it near the current task or right before `Completion Criteria`.
 
 ---

package/templates/ko/common/README.md

@@ -5,9 +5,6 @@
 ## 에이전트 세션 시작 체크리스트
 
 ```bash
-# (최초 1회 권장) 초기 온보딩 점검
-npx lee-spec-kit onboard --strict
-
 # 1) 프로젝트 감지
 npx lee-spec-kit detect --json
 
@@ -105,7 +102,7 @@ npx lee-spec-kit docs get agents --json
 
 `lee-spec-kit init`을 실행하면 문서 루트(기본: `docs/`)에 `.lee-spec-kit.json`이 생성됩니다.
 
-- `lee-spec-kit feature`, `status`, `update`에서 문서 위치/프로젝트 타입/언어를 감지하는 용도로 사용됩니다.
+- `lee-spec-kit feature`, `config`, `update`, `detect`, workflow validator에서 문서 위치/프로젝트 타입/언어를 해석하는 용도로 사용됩니다.
 - `docsRepo`, `pushDocs`, `docsRemote`는 CLI 관리 **Docs Push 정책**을 위한 메타데이터입니다. (자동 push는 하지 않습니다)
 
 ### 필드

package/templates/ko/common/agents/agents.md

@@ -24,6 +24,7 @@
 - 최소 기준 문서는 `spec.md`, `plan.md`, `tasks.md`, `decisions.md`입니다.
 - GitHub 워크플로우가 얽히면 `issue.md`, `pr.md`도 함께 봅니다.
 - 활성 feature 문서를 읽은 뒤에는 `npx lee-spec-kit workflow-stage <featureRef> --json`를 실행하고, 그 `nextAction`만 따릅니다.
+- `workflow-stage --json`가 `primaryActionLabel`과 `actionOptions`를 같이 반환하면, `primaryActionLabel`은 기본 옵션 라벨로 보고 사용자에게는 `actionOptions[*].reply` 값을 그대로 보여줍니다.
 
 ## 실행 규칙
 
@@ -31,6 +32,7 @@
 - Codex는 실행 루프, 도구 사용, hook lifecycle을 담당합니다.
 - `workflow-stage --json`가 `stage === "implementation"`이고 `implementationAllowed === true`를 반환하기 전에는 구현을 시작하지 않습니다.
 - spec / plan / tasks 승인, issue 생성, branch 생성은 구현 전 하드 게이트로 취급합니다.
+- standalone 모드에서는 `git worktree add`를 직접 만들지 말고 `workflow-stage`의 정확한 `nextAction.command`를 실행해 managed workspace 경로, stale 디렉터리 정리, `.env`/`.env.*` 복사 단계가 일관되게 유지되도록 합니다.
 - 동작이나 범위가 바뀌는 코드 변경이 있으면 같은 턴 안에서 feature 문서를 같이 동기화합니다.
 - staged된 docs 경로 검사가 필요하면 `git commit` 전에 `npx lee-spec-kit commit-audit --json`를 사용합니다.
 - 기본 docs sync 검사는 `npx lee-spec-kit workflow-audit --json`를 사용합니다.
@@ -46,6 +48,7 @@
 
 - 문서화된 workflow checkpoint와 원격/파괴적 작업 전에만 사용자 승인을 요청합니다.
 - `workflow-stage --json`가 `approvalRequired === true`를 반환하면 그 checkpoint에서 멈추고 사용자 승인을 받습니다.
+- `workflow-stage --json`가 승인 경계에서 라벨형 `actionOptions`를 반환하면, 사용자 프롬프트에서도 같은 옵션 라벨과 `reply` 값을 그대로 사용하고 다른 응답 형식을 임의로 만들지 않습니다.
 - GitHub 원격 작업 전에는 올릴 artifact나 계획을 먼저 공유합니다.
 
 ## 표기 규칙

package/templates/ko/common/agents/git-workflow.md

@@ -81,8 +81,19 @@ main
 
 ### 브랜치 생성
 
+브랜치/worktree 생성 명령의 기준은 `workflow-stage`입니다.
+
+```bash
+npx lee-spec-kit workflow-stage <featureRef> --json
+```
+
+worktree 경로를 직접 만들지 말고 반환된 `nextAction.command`를 실행하세요.
+`standalone` 모드에서는 이 명령이 공유 `workspaceRoot/.worktrees/{project-name}/`
+아래에 worktree를 만들고, Git에 등록되지 않은 이전 managed 디렉터리를 정리하며,
+새 worktree에 대상 파일이 없을 때 프로젝트 루트의 기존 `.env`/`.env.*` 파일을 복사합니다.
+
 ```bash
-# 기본(권장): 전용 worktree + 브랜치 생성
+# embedded fallback 전용: 전용 worktree + 브랜치 생성
 mkdir -p .worktrees
 git worktree add -b feat/{issue-number}-{feature-name} .worktrees/feat-{issue-number}-{feature-name}
 
@@ -90,7 +101,7 @@ git worktree add -b feat/{issue-number}-{feature-name} .worktrees/feat-{issue-nu
 git worktree add .worktrees/feat-{issue-number}-{feature-name} feat/{issue-number}-{feature-name}
 ```
 
-> 이후 작업은 생성된 worktree 경로(`.worktrees/feat-{issue-number}-{feature-name}`)에서 진행하세요.
+> 이후 작업은 `workflow-stage`가 반환한 worktree 경로에서 진행하세요.
 
 ### 문서 커밋 규칙 (Continuous Sync)
 

package/templates/ko/common/agents/skills/execute-task.md

@@ -20,7 +20,7 @@
   - 실제 완료/검증 없이 `[DONE]`로 바꾸지 않습니다
   - 태스크를 닫을 때는 같은 수정에서 `Acceptance`와 `Checklist`도 함께 갱신합니다
   - 완료된 태스크에 후속 작업이 생기면 히스토리를 고치지 말고 새 태스크를 추가합니다
-- 새 태스크를 추가해야 한다면 우선 `npx lee-spec-kit task add <feature-ref> --title "..." --ref NON-PRD|PRD-*`를 사용하세요.
+- 새 태스크를 추가해야 한다면 `tasks.md`에 구체적인 제목, `Acceptance`, `Checklist`, 그리고 `NON-PRD` 또는 기존 `PRD-*` 태그가 있는 완전한 태스크 블록을 추가하세요.
 - 새 태스크에 placeholder `Acceptance` 또는 `Checklist`를 남기지 않습니다.
 
 ## 3. 문서 동기화

package/templates/ko/common/features/README.md

@@ -49,17 +49,13 @@ Feature는 PRD → idea → feature 흐름에서 실제 구현을 진행하는
 
 ---
 
-## 상태 확인
+## Workflow 단계 확인
 
 ```bash
-npx lee-spec-kit status
+npx lee-spec-kit workflow-stage <feature-ref> --json
 ```
 
-파일로 저장:
-
-```bash
-npx lee-spec-kit status --write
-```
+반환되는 `stage`, `nextAction`, `implementationAllowed` 값을 현재 워크플로우 상태로 사용하세요.
 
 ---
 
@@ -70,7 +66,7 @@ npx lee-spec-kit status --write
 - `[NON-PRD]`는 refactor, 테스트 전용 작업, tooling, rename, cleanup 같은 내부 구현 작업에만 사용하세요.
 - 변경이 사용자 동작, acceptance criteria, 범위를 바꾸면 PRD를 먼저 갱신하고 태스크도 `[PRD-...]`로 다시 연결하세요.
 - 단, 태스크 문서에서 PRD ID를 임의 생성하지 않습니다. 먼저 PRD 원문에 정의하고, 레거시 문서는 원문 ID backfill 후 연결하세요.
-- 커버리지 리포트: `npx lee-spec-kit requirements`
+- 추적성은 `spec.md`의 `PRD Refs`와 각 태스크 라인의 PRD 태그를 유지해 검토 가능하게 만드세요.
 
 ---
 

package/templates/ko/common/features/feature-base/decisions.md

@@ -10,6 +10,7 @@ canonical docs surface 밖의 unmanaged docs 산출물(예: `docs/plans/*`, `doc
 
 기록 원칙:
 
+- 새 ADR 생성에는 `npx lee-spec-kit decision add <feature-ref> --title "..." --context "..." --decision "..." --rationale "..." --evidence "..."` 사용을 우선하세요.
 - 모든 ADR은 **Decision(무엇을 선택했는가)** + **Trace(어떻게 고민했고 무엇을 확인했는가)** 를 함께 남깁니다.
 - 작성 타이밍을 고정합니다.
   - 태스크 시작(`[TODO] -> [DOING]`): `Context/Constraints`와 `Trace(초기 가설)`를 1~3줄로 먼저 기록

package/templates/ko/common/features/feature-base/tasks.md

@@ -8,7 +8,7 @@
   - `[DOING] → [DONE]`: 완료 전 결과/검증을 공유하고 같은 수정에서 `Acceptance`와 `Checklist`를 함께 갱신합니다
   - 태스크 상태 변경 전에 승인이 필요한 경우는 문서화된 review checkpoint 또는 원격/파괴적 작업 직전뿐입니다.
   - 워크플로우가 요구하지 않는 standalone `OK` 승인 단계는 만들지 않습니다.
-  - 해당 태스크의 `Checklist`에 unchecked 항목이 남아 있으면 `task-complete`는 `[DONE]` 전환을 거부합니다.
+  - 해당 태스크의 `Checklist`에 unchecked 항목이 남아 있으면 `[DONE]`으로 전환하지 않습니다.
 - **PRD 매핑(권장)**: 각 태스크 라인에 `[PRD-FR-001]` 또는 `[PRD-SCOPE-V1-DESKTOP-EDITOR]` 같은 기존 PRD 요구사항 ID 태그를 추가하거나, PRD와 무관한 태스크는 `[NON-PRD]`로 표시하세요.
   - 단, `tasks.md`에서 PRD ID를 임의로 만들지 마세요. `docs/prd` 또는 상위 요구사항 문서에 먼저 정의된 ID만 참조해야 합니다.
   - 레거시 문서에 아직 PRD ID가 없다면, 먼저 원문 요구사항 문서에 ID를 backfill한 뒤 `spec.md`의 `PRD Refs`와 태스크 태그를 함께 맞추세요.
@@ -69,8 +69,9 @@
 
 > 아래에 태스크를 추가하세요. **최소 1개가 필요**합니다.
 > 태스크는 하나의 순차 리스트로 유지하고, 위에서 아래 순서 자체를 실행 우선순위로 취급하세요.
-> 새 태스크는 가급적 `npx lee-spec-kit task add <feature-ref> --title "..." --ref NON-PRD|PRD-*`로 추가하세요. `PRD-FR-001`이나 `PRD-SCOPE-V1-DESKTOP-EDITOR`처럼 이미 정의된 PRD key를 사용하면 됩니다. 필요하면 `--acceptance`, `--check`로 바로 구체 항목을 함께 적을 수 있습니다.
-> placeholder 상태의 `Acceptance` / `Checklist`를 그대로 두지 마세요. concrete item이 아니면 `task-run`이 실행을 막습니다.
+> 새 태스크 append에는 `npx lee-spec-kit task add <feature-ref> --title "..." --ref NON-PRD --acceptance "..." --check "..."` 사용을 우선하세요.
+> 새 태스크는 마지막 기존 태스크 아래에 완전한 태스크 블록으로 추가하세요. `PRD-FR-001`이나 `PRD-SCOPE-V1-DESKTOP-EDITOR`처럼 이미 정의된 PRD key를 사용하거나, 내부 작업이면 `[NON-PRD]`를 사용합니다.
+> placeholder 상태의 `Acceptance` / `Checklist`를 그대로 두지 마세요. 구체 항목이 아니면 구현을 시작하지 않습니다.
 > 수동 편집이 필요하면 현재 태스크 근처가 아니라 `태스크 목록`의 마지막 기존 태스크 block 아래에만 append 하세요.
 
 ---

package/dist/hooks-4S33YUIB.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/integrations/codex/hooks.ts"],"names":[],"mappings":";;;;;;;AAKA,IAAM,sBAAA,GAAyB;AAAA,EAC7B,8BAAA;AAAA,EACA,gCAAA;AAAA,EACA,qCAAA;AAAA,EACA,yBAAA;AAAA,EACA;AACF,CAAA;AAsBA,SAAS,qBAAqB,QAAA,EAAuC;AACnE,EAAA,QAAQ,QAAA;AAAU,IAChB,KAAK,8BAAA;AACH,MAAA,OAAO,CAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,uBAAA,EAsBY,IAAA,CAAK,SAAA,CAAU,yBAAA,EAA2B,CAAC,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAAA,IA4EhE,KAAK,gCAAA;AACH,MAAA,OAAO,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAAA,IA2CT,KAAK,qCAAA;AACH,MAAA,OAAO,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAAA,IAqCT,KAAK,yBAAA;AACH,MAAA,OAAO,CAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAAA,IA0lBT,KAAK,yBAAA;AACH,MAAA,OAAO,CAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA,CAAA;AAAA,IA4CT;AACE,MAAA,OAAO,EAAA;AAAA;AAEb;AAEA,SAAS,2BAA2B,QAAA,EAAuC;AACzE,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,EAAU,SAAS,QAAQ,CAAA;AACpD;AAEA,SAAS,qBAAqB,KAAA,EAAuB;AACnD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA;AACjC;AAEA,SAAS,aAAa,KAAA,EAAuB;AAC3C,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AACpD;AAEA,SAAS,6BAA6B,QAAA,EAAuC;AAC3E,EAAA,MAAM,gBAAA,GAAmB,oBAAA,CAAqB,0BAAA,CAA2B,QAAQ,CAAC,CAAA;AAClF,EAAA,MAAM,YAAA,GAAe;AAAA,IACnB,gBAAA;AAAA,IACA,kCAAA;AAAA,IACA,sCAAA;AAAA,IACA,kDAAA;AAAA,IACA,CAAA,2BAAA,EAA8B,IAAA,CAAK,SAAA,CAAU,gBAAgB,CAAC,CAAA,CAAA,CAAA;AAAA,IAC9D,4BAAA;AAAA,IACA,kBAAA;AAAA,IACA,yDAAA;AAAA,IACA,qCAAA;AAAA,IACA,oDAAA;AAAA,IACA,eAAA;AAAA,IACA,OAAA;AAAA,IACA,uCAAA;AAAA,IACA,2BAAA;AAAA,IACA,mFAAA;AAAA,IACA,OAAA;AAAA,IACA,mBAAA;AAAA,IACA,KAAA;AAAA,IACA,yBAAA;AAAA,IACA,sEAAA;AAAA,IACA,oBAAA;AAAA,IACA;AAAA,GACF,CAAE,KAAK,GAAG,CAAA;AACV,EAAA,OAAO,CAAA,IAAA,EAAO,IAAA,CAAK,SAAA,CAAU,YAAY,CAAC,CAAA,CAAA;AAC5C;AAEA,SAAS,iBAAiB,OAAA,EAA0B;AAClD,EAAA,MAAM,UAAA,GAAa,oBAAA,CAAqB,OAAO,CAAA,CAAE,IAAA,EAAK;AACtD,EAAA,OAAO,sBAAA,CAAuB,IAAA,CAAK,CAAC,QAAA,KAAa;AAC/C,IAAA,MAAM,iBAAiB,oBAAA,CAAqB,qBAAA,CAAsB,QAAQ,CAAC,EAAE,IAAA,EAAK;AAClF,IAAA,MAAM,cAAA,GAAiB,oBAAA;AAAA,MACrB,6BAA6B,QAAQ;AAAA,MACrC,IAAA,EAAK;AACP,IAAA,IAAI,UAAA,KAAe,cAAA,IAAkB,UAAA,CAAW,QAAA,CAAS,cAAc,CAAA,EAAG;AACxE,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,gBAAA,GAAmB,YAAA,CAAa,0BAAA,CAA2B,QAAQ,CAAC,CAAA;AAC1E,IAAA,MAAM,wBAAwB,IAAI,MAAA;AAAA,MAChC,mBAAmB,gBAAgB,CAAA,MAAA;AAAA,KACrC;AACA,IAAA,OAAO,qBAAA,CAAsB,KAAK,UAAU,CAAA;AAAA,EAC9C,CAAC,CAAA;AACH;AAEA,SAAS,sBAAsB,QAAA,EAAuC;AACpE,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,SAAA,CAAU,OAAA,CAAQ,QAAQ,CAAA;AACnD,EAAA,OAAO,CAAA,EAAG,WAAW,CAAA,EAAG,4BAAA,CAA6B,QAAQ,CAAC,CAAA,CAAA;AAChE;AAEA,SAAS,qBAAA,GAAmE;AAC1E,EAAA,MAAM,UAAA,GAAa,CAAC,QAAA,KAClB,qBAAA,CAAsB,QAAQ,CAAA;AAEhC,EAAA,OAAO;AAAA,IACL,YAAA,EAAc;AAAA,MACZ;AAAA,QACE,OAAA,EAAS,gBAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL;AAAA,YACE,IAAA,EAAM,SAAA;AAAA,YACN,OAAA,EAAS,WAAW,gCAAgC,CAAA;AAAA,YACpD,aAAA,EAAe;AAAA;AACjB;AACF;AACF,KACF;AAAA,IACA,gBAAA,EAAkB;AAAA,MAChB;AAAA,QACE,KAAA,EAAO;AAAA,UACL;AAAA,YACE,IAAA,EAAM,SAAA;AAAA,YACN,OAAA,EAAS,WAAW,qCAAqC;AAAA;AAC3D;AACF;AACF,KACF;AAAA,IACA,UAAA,EAAY;AAAA,MACV;AAAA,QACE,OAAA,EAAS,MAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL;AAAA,YACE,IAAA,EAAM,SAAA;AAAA,YACN,OAAA,EAAS,WAAW,yBAAyB,CAAA;AAAA,YAC7C,aAAA,EAAe;AAAA;AACjB;AACF;AACF,KACF;AAAA,IACA,IAAA,EAAM;AAAA,MACJ;AAAA,QACE,KAAA,EAAO;AAAA,UACL;AAAA,YACE,IAAA,EAAM,SAAA;AAAA,YACN,OAAA,EAAS,WAAW,yBAAyB,CAAA;AAAA,YAC7C,OAAA,EAAS;AAAA;AACX;AACF;AACF;AACF,GACF;AACF;AAEA,SAAS,yBAAA,GAAoC;AAC3C,EAAA,OAAO,IAAA,CAAK,KAAK,IAAA,CAAK,OAAA,CAAQ,cAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAC,CAAA,EAAG,UAAU,CAAA;AAC3E;AAEA,SAAS,mBAAmB,MAAA,EAA4D;AACtF,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,SAAU,EAAC;AACpC,EAAA,OAAO,MAAA,CACJ,GAAA,CAAI,CAAC,KAAA,KAAU;AACd,IAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAA,EAAG;AACtE,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,CAAM,MAAA;AAAA,MACxB,CAAC,IAAA,KACC,EACE,IAAA,IACA,OAAO,IAAA,KAAS,QAAA,IAChB,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,IACxB,gBAAA,CAAiB,KAAK,OAAO,CAAA;AAAA,KAEnC;AAEA,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,KAAA,KAAqC,CAAC,CAAC,KAAK,CAAA;AACzD;AAEA,SAAS,kBAAA,CACP,SACA,YAAA,EACiB;AACjB,EAAA,MAAM,SAAA,GAAqC;AAAA,IACzC,GAAI,QAAQ,KAAA,IAAS,OAAO,QAAQ,KAAA,KAAU,QAAA,GAAW,OAAA,CAAQ,KAAA,GAAQ;AAAC,GAC5E;AAEA,EAAA,KAAA,MAAW,SAAA,IAAa,MAAA,CAAO,IAAA,CAAK,YAAY,CAAA,EAAsB;AACpE,IAAA,MAAM,QAAA,GAAW,kBAAA;AAAA,MACf,KAAA,CAAM,QAAQ,SAAA,CAAU,SAAS,CAAC,CAAA,GAC7B,SAAA,CAAU,SAAS,CAAA,GACpB;AAAA,KACN;AACA,IAAA,SAAA,CAAU,SAAS,IAAI,CAAC,GAAG,UAAU,GAAG,YAAA,CAAa,SAAS,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,OAAA;AAAA,IACH,KAAA,EAAO;AAAA,GACT;AACF;AAEA,SAAS,oBAAoB,OAAA,EAA2C;AACtE,EAAA,MAAM,SAAA,GAAqC;AAAA,IACzC,GAAI,QAAQ,KAAA,IAAS,OAAO,QAAQ,KAAA,KAAU,QAAA,GAAW,OAAA,CAAQ,KAAA,GAAQ;AAAC,GAC5E;AAEA,EAAA,KAAA,MAAW,aAAa,CAAC,cAAA,EAAgB,kBAAA,EAAoB,YAAA,EAAc,MAAM,CAAA,EAAG;AAClF,IAAA,MAAM,MAAA,GAAS,kBAAA;AAAA,MACb,KAAA,CAAM,QAAQ,SAAA,CAAU,SAAS,CAAC,CAAA,GAC7B,SAAA,CAAU,SAAS,CAAA,GACpB;AAAA,KACN;AACA,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,SAAA,CAAU,SAAS,CAAA,GAAI,MAAA;AAAA,IACzB,CAAA,MAAO;AACL,MAAA,OAAO,UAAU,SAAS,CAAA;AAAA,IAC5B;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,OAAA;AAAA,IACH,KAAA,EAAO;AAAA,GACT;AACF;AAEO,SAAS,eAAA,CAAgB,QAAA,GAAW,OAAA,CAAQ,GAAA,EAAI,EAAW;AAChE,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU,QAAQ,CAAA;AACrC;AAEO,SAAS,yBAAA,CAA0B,GAAA,GAAM,OAAA,CAAQ,GAAA,EAAI,EAAW;AACrE,EAAA,OAAO,cAAc,CAAC,WAAA,EAAa,iBAAiB,CAAA,EAAG,GAAG,CAAA,IAAK,GAAA;AACjE;AAEO,SAAS,eAAA,CAAgB,QAAA,GAAW,OAAA,CAAQ,GAAA,EAAI,EAAW;AAChE,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,eAAA,CAAgB,QAAQ,GAAG,OAAO,CAAA;AACrD;AAEO,SAAS,sBAAA,CAAuB,QAAA,GAAW,OAAA,CAAQ,GAAA,EAAI,EAAW;AACvE,EAAA,OAAO,IAAA,CAAK,IAAA,CAAK,eAAA,CAAgB,QAAQ,GAAG,YAAY,CAAA;AAC1D;AAEA,eAAsB,0BAAA,CACpB,QAAA,GAAW,OAAA,CAAQ,GAAA,EAAI,EAKtB;AACD,EAAA,MAAM,QAAA,GAAW,gBAAgB,QAAQ,CAAA;AACzC,EAAA,MAAM,aAAA,GAAgB,uBAAuB,QAAQ,CAAA;AACrD,EAAA,MAAM,EAAA,CAAG,UAAU,QAAQ,CAAA;AAE3B,EAAA,KAAA,MAAW,YAAY,sBAAA,EAAwB;AAC7C,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU,QAAQ,CAAA;AAC/C,IAAA,MAAM,EAAA,CAAG,SAAA,CAAU,UAAA,EAAY,oBAAA,CAAqB,QAAQ,CAAA,EAAG;AAAA,MAC7D,QAAA,EAAU,OAAA;AAAA,MACV,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,eAAe,qBAAA,EAAsB;AAC3C,EAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,UAAA,CAAW,aAAa,CAAA;AAChD,EAAA,MAAM,OAAA,GAAU,MAAA,GACV,MAAM,EAAA,CAAG,QAAA,CAAS,aAAa,CAAA,GAChC,EAAE,KAAA,EAAO,EAAC,EAAE;AACjB,EAAA,MAAM,IAAA,GAAO,kBAAA,CAAmB,OAAA,EAAS,YAAY,CAAA;AACrD,EAAA,MAAM,WAAW,CAAA,EAAG,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAC;AAAA,CAAA;AACjD,EAAA,MAAM,WAAA,GAAc,SAAS,CAAA,EAAG,IAAA,CAAK,UAAU,OAAA,EAAS,IAAA,EAAM,CAAC,CAAC;AAAA,CAAA,GAAO,IAAA;AAEvE,EAAA,IAAI,gBAAgB,QAAA,EAAU;AAC5B,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,QAAQ,aAAA,EAAc;AAAA,EACzD;AAEA,EAAA,MAAM,EAAA,CAAG,SAAA,CAAU,aAAA,EAAe,QAAA,EAAU,OAAO,CAAA;AACnD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,IAAA;AAAA,IACT,MAAA,EAAQ,SAAS,SAAA,GAAY,SAAA;AAAA,IAC7B;AAAA,GACF;AACF;AAEA,eAAsB,0BAAA,CACpB,QAAA,GAAW,OAAA,CAAQ,GAAA,EAAI,EAC+B;AACtD,EAAA,MAAM,QAAA,GAAW,gBAAgB,QAAQ,CAAA;AACzC,EAAA,MAAM,aAAA,GAAgB,uBAAuB,QAAQ,CAAA;AACrD,EAAA,IAAI,OAAA,GAAU,KAAA;AAEd,EAAA,IAAI,MAAM,EAAA,CAAG,UAAA,CAAW,aAAa,CAAA,EAAG;AACtC,IAAA,MAAM,OAAA,GAAW,MAAM,EAAA,CAAG,QAAA,CAAS,aAAa,CAAA;AAChD,IAAA,MAAM,IAAA,GAAO,oBAAoB,OAAO,CAAA;AACxC,IAAA,MAAM,cAAc,CAAA,EAAG,IAAA,CAAK,UAAU,OAAA,EAAS,IAAA,EAAM,CAAC,CAAC;AAAA,CAAA;AACvD,IAAA,MAAM,WAAW,CAAA,EAAG,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAC;AAAA,CAAA;AACjD,IAAA,IAAI,gBAAgB,QAAA,EAAU;AAC5B,MAAA,MAAM,EAAA,CAAG,SAAA,CAAU,aAAA,EAAe,QAAA,EAAU,OAAO,CAAA;AACnD,MAAA,OAAA,GAAU,IAAA;AAAA,IACZ;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,YAAY,sBAAA,EAAwB;AAC7C,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU,QAAQ,CAAA;AAC/C,IAAA,IAAI,MAAM,EAAA,CAAG,UAAA,CAAW,UAAU,CAAA,EAAG;AACnC,MAAA,MAAM,EAAA,CAAG,OAAO,UAAU,CAAA;AAC1B,MAAA,OAAA,GAAU,IAAA;AAAA,IACZ;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,SAAS,aAAA,EAAc;AAClC","file":"hooks-4S33YUIB.js","sourcesContent":["import fs from 'fs-extra';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { runGitCapture } from '../../utils/git-run.js';\n\nconst MANAGED_HOOK_FILENAMES = [\n  '_lee_spec_kit_hook_utils.mjs',\n  'session_start_lee_spec_kit.mjs',\n  'user_prompt_submit_lee_spec_kit.mjs',\n  'pre_tool_use_policy.mjs',\n  'stop_workflow_audit.mjs',\n] as const;\n\ntype ManagedHookFileName = (typeof MANAGED_HOOK_FILENAMES)[number];\ntype HookEventName = 'SessionStart' | 'UserPromptSubmit' | 'PreToolUse' | 'Stop';\n\ninterface HookHandler {\n  type: 'command';\n  command: string;\n  statusMessage?: string;\n  timeout?: number;\n}\n\ninterface HookMatcherGroup {\n  matcher?: string;\n  hooks: HookHandler[];\n}\n\ninterface HooksConfigFile {\n  hooks?: Partial<Record<HookEventName, HookMatcherGroup[]>> & Record<string, unknown>;\n  [key: string]: unknown;\n}\n\nfunction getHookScriptContent(fileName: ManagedHookFileName): string {\n  switch (fileName) {\n    case '_lee_spec_kit_hook_utils.mjs':\n      return `#!/usr/bin/env node\nimport fs from 'node:fs';\nimport { spawnSync } from 'node:child_process';\n\nexport function readHookInput() {\n  try {\n    const raw = fs.readFileSync(0, 'utf8').trim();\n    if (!raw) return { ok: true, value: {} };\n    return {\n      ok: true,\n      value: JSON.parse(raw),\n    };\n  } catch (error) {\n    const message =\n      error instanceof Error ? error.message : 'Invalid Codex hook payload';\n    return {\n      ok: false,\n      error: message,\n    };\n  }\n}\n\nconst CLI_ENTRYPOINT = ${JSON.stringify(getInstalledCliEntrypoint())};\n\nexport function runLeeSpecKit(args, cwd = process.cwd()) {\n  return spawnSync(process.execPath, [CLI_ENTRYPOINT, ...args], {\n    cwd,\n    encoding: 'utf8',\n    stdio: ['ignore', 'pipe', 'pipe'],\n  });\n}\n\nexport function runLeeSpecKitJson(args, cwd = process.cwd()) {\n  const result = runLeeSpecKit(args, cwd);\n  const stdout = String(result.stdout || '').trim();\n  const stderr = String(result.stderr || '').trim();\n\n  if (result.error) {\n    return {\n      ok: false,\n      error: result.error.message || String(result.error),\n      status: result.status ?? 1,\n    };\n  }\n\n  if (result.status !== 0) {\n    return {\n      ok: false,\n      error: stderr || stdout || \\`lee-spec-kit \\${args.join(' ')} failed\\`,\n      status: result.status ?? 1,\n    };\n  }\n\n  if (!stdout) {\n    return {\n      ok: false,\n      error: \\`lee-spec-kit \\${args.join(' ')} returned empty JSON output\\`,\n      status: result.status ?? 0,\n    };\n  }\n\n  try {\n    return {\n      ok: true,\n      data: JSON.parse(stdout),\n      status: result.status ?? 0,\n    };\n  } catch (error) {\n    const message =\n      error instanceof Error ? error.message : 'Invalid JSON output from lee-spec-kit';\n    return {\n      ok: false,\n      error: \\`\\${message}: \\${stdout.slice(0, 200)}\\`,\n      status: result.status ?? 0,\n    };\n  }\n}\n\nexport function printAdditionalContext(hookEventName, additionalContext) {\n  process.stdout.write(\n    JSON.stringify({\n      hookSpecificOutput: {\n        hookEventName,\n        additionalContext,\n      },\n    })\n  );\n}\n\nexport function printBlock(reason) {\n  process.stdout.write(\n    JSON.stringify({\n      decision: 'block',\n      reason,\n    })\n  );\n}\n`;\n    case 'session_start_lee_spec_kit.mjs':\n      return `#!/usr/bin/env node\nimport { printAdditionalContext, readHookInput, runLeeSpecKitJson } from './_lee_spec_kit_hook_utils.mjs';\n\n// Equivalent CLI probe: npx lee-spec-kit detect --json\nconst inputResult = readHookInput();\nif (!inputResult.ok) {\n  process.exit(0);\n}\nconst input = inputResult.value;\nconst cwd = typeof input.cwd === 'string' && input.cwd ? input.cwd : process.cwd();\nconst detectedResult = runLeeSpecKitJson(['detect', '--json'], cwd);\nconst detected = detectedResult.ok ? detectedResult.data : null;\n\nif (detected?.status === 'ok' && detected?.isLeeSpecKitProject === true) {\n  const docsDir = detected.docsDir || '(unknown docs dir)';\n  const stageResult = runLeeSpecKitJson(['workflow-stage', '--json'], cwd);\n  const lines = [\n    'lee-spec-kit project detected.',\n    'Use lee-spec-kit docs and workflow policy only when explicitly detected.',\n    'Prefer Codex native execution with workspace-scoped AGENTS.md plus official hooks for the default runtime path.',\n    'If the user gives a generic request such as continuing the next feature according to the rules, interpret it through this workflow automatically.',\n    'infer the workflow automatically even for generic rule-following requests.',\n    \\`Docs dir: \\${docsDir}\\`,\n    'Start by reading npx lee-spec-kit docs get agents --json and the active feature docs.',\n    'Run npx lee-spec-kit workflow-stage --json before the next stage and only follow its nextAction.',\n    'Keep docs as the SSOT and treat workflow-audit as the end-of-turn sync guard.',\n  ];\n  if (stageResult.ok && stageResult.data?.status === 'ok') {\n    lines.push(\n      \\`Current workflow stage: \\${stageResult.data.stage}\\`,\n      \\`Next allowed action: \\${stageResult.data.nextAction?.category || 'none'}\\`,\n      \\`Approval required: \\${stageResult.data.approvalRequired ? 'yes' : 'no'}\\`,\n      \\`Implementation allowed: \\${stageResult.data.implementationAllowed ? 'yes' : 'no'}\\`\n    );\n  } else if (stageResult.ok && stageResult.data?.status === 'error') {\n    lines.push(\n      \\`Workflow stage is unresolved: \\${stageResult.data.reasonCode}\\`,\n      'Resolve feature selection or create/select the target feature before continuing.'\n    );\n  }\n  printAdditionalContext('SessionStart', lines.join('\\\\n'));\n}\n`;\n    case 'user_prompt_submit_lee_spec_kit.mjs':\n      return `#!/usr/bin/env node\nimport { printAdditionalContext, readHookInput, runLeeSpecKitJson } from './_lee_spec_kit_hook_utils.mjs';\n\nconst inputResult = readHookInput();\nif (!inputResult.ok) {\n  process.exit(0);\n}\nconst input = inputResult.value;\nconst cwd = typeof input.cwd === 'string' && input.cwd ? input.cwd : process.cwd();\nconst detectedResult = runLeeSpecKitJson(['detect', '--json'], cwd);\nconst detected = detectedResult.ok ? detectedResult.data : null;\n\nif (detected?.status === 'ok' && detected?.isLeeSpecKitProject === true) {\n  const stageResult = runLeeSpecKitJson(['workflow-stage', '--json'], cwd);\n  const lines = [\n    'This prompt is inside a lee-spec-kit workspace.',\n    'Interpret generic rule-following requests through the lee-spec-kit docs workflow automatically.',\n    'Prefer docs get plus feature-local docs as the primary context source.',\n    'Use workflow-stage --json to determine the next allowed stage before implementation.',\n  ];\n  if (stageResult.ok && stageResult.data?.status === 'ok') {\n    lines.push(\n      \\`Current workflow stage: \\${stageResult.data.stage}\\`,\n      \\`Next allowed action: \\${stageResult.data.nextAction?.category || 'none'}\\`,\n      \\`Approval required: \\${stageResult.data.approvalRequired ? 'yes' : 'no'}\\`,\n      \\`Implementation allowed: \\${stageResult.data.implementationAllowed ? 'yes' : 'no'}\\`,\n      'Do not jump ahead of the reported nextAction.'\n    );\n  } else if (stageResult.ok && stageResult.data?.status === 'error') {\n    lines.push(\n      \\`Workflow stage is unresolved: \\${stageResult.data.reasonCode}\\`,\n      'Resolve feature selection before attempting implementation.'\n    );\n  }\n  printAdditionalContext('UserPromptSubmit', lines.join('\\\\n'));\n}\n`;\n    case 'pre_tool_use_policy.mjs':\n      return `#!/usr/bin/env node\nimport { printBlock, readHookInput, runLeeSpecKitJson } from './_lee_spec_kit_hook_utils.mjs';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst inputResult = readHookInput();\nif (!inputResult.ok) {\n  printBlock('Codex hook input was malformed. Resolve the local hook setup before continuing.');\n  process.exit(0);\n}\nconst input = inputResult.value;\nconst cwd = typeof input.cwd === 'string' && input.cwd ? input.cwd : process.cwd();\nconst command = String(input?.tool_input?.command || '').trim();\n\nfunction tokenizeShellCommand(value) {\n  const matches = value.match(/\"(?:\\\\\\\\.|[^\"])*\"|'(?:\\\\\\\\.|[^'])*'|\\\\S+/g) || [];\n  return matches.map((token) => {\n    if (\n      (token.startsWith('\"') && token.endsWith('\"')) ||\n      (token.startsWith(\"'\") && token.endsWith(\"'\"))\n    ) {\n      return token.slice(1, -1);\n    }\n    return token;\n  });\n}\n\nfunction normalizeExecutableToken(token) {\n  const base = token.split(/[\\\\\\\\/]/).pop() || token;\n  return base.replace(/\\\\.(?:bat|cmd|exe)$/i, '').toLowerCase();\n}\n\nfunction stripEnvWrapper(tokens) {\n  let index = 1;\n  while (index < tokens.length) {\n    const token = tokens[index];\n    if (!token) {\n      index += 1;\n      continue;\n    }\n    if (token === '--') {\n      return tokens.slice(index + 1);\n    }\n    if (token.startsWith('-')) {\n      index += 1;\n      continue;\n    }\n    if (/^[A-Za-z_][A-Za-z0-9_]*=.*/.test(token)) {\n      index += 1;\n      continue;\n    }\n    return tokens.slice(index);\n  }\n\n  return tokens;\n}\n\nfunction stripSudoWrapper(tokens) {\n  let index = 1;\n  while (index < tokens.length) {\n    const token = tokens[index];\n    if (!token) {\n      index += 1;\n      continue;\n    }\n    if (token === '--') {\n      return tokens.slice(index + 1);\n    }\n    if (token === '-u' || token === '-g' || token === '-h' || token === '-p') {\n      index += 2;\n      continue;\n    }\n    if (token.startsWith('-')) {\n      index += 1;\n      continue;\n    }\n    return tokens.slice(index);\n  }\n\n  return tokens;\n}\n\nconst KNOWN_SHELL_EXECUTABLES = new Set([\n  'ash',\n  'bash',\n  'cmd',\n  'dash',\n  'fish',\n  'ksh',\n  'powershell',\n  'pwsh',\n  'sh',\n  'zsh',\n]);\nconst DIRECT_GIT_OR_GH_EXECUTABLES = new Set(['git', 'gh']);\n\nfunction isShellCommandFlag(token) {\n  const lower = token.toLowerCase();\n  if (lower === '-c' || lower === '/c' || lower === '-command') {\n    return true;\n  }\n  if (token === lower && /^-[a-z]*c[a-z]*$/.test(token)) {\n    return true;\n  }\n  return false;\n}\n\nfunction isExecutablePayloadFlag(token) {\n  const lower = token.toLowerCase();\n  if (isShellCommandFlag(token)) {\n    return true;\n  }\n  return lower === '-e' || lower === '-r' || lower === '--eval' || lower === '--execute';\n}\n\nfunction findShellCommandFlagIndex(tokens) {\n  return tokens.findIndex((token, index) => index > 0 && isShellCommandFlag(token));\n}\n\nfunction findExecutablePayloadFlagIndex(tokens) {\n  return tokens.findIndex((token, index) => index > 0 && isExecutablePayloadFlag(token));\n}\n\nfunction containsDangerousGitOrGhPayload(value) {\n  return (\n    /\\\\bgit(?:\\\\.cmd|\\\\.exe)?\\\\b[\\\\s\\\\S]{0,80}\\\\b(?:commit|push|checkout|switch|restore|clean|rebase|merge|cherry-pick|revert|stash|reset|branch|tag)\\\\b/i.test(\n      value\n    ) ||\n    /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\b[\\\\s\\\\S]{0,80}\\\\b(?:issue|pr|repo|release)\\\\b/i.test(\n      value\n    )\n  );\n}\n\nfunction containsProcessExecutionPayload(value) {\n  return (\n    /\\\\bchild_process\\\\b/i.test(value) ||\n    /\\\\bspawn(?:Sync)?\\\\s*\\\\(/i.test(value) ||\n    /\\\\bexec(?:Sync|FileSync|File)?\\\\s*\\\\(/i.test(value) ||\n    /\\\\bfork\\\\s*\\\\(/i.test(value) ||\n    /\\\\bsubprocess\\\\b/i.test(value) ||\n    /\\\\bos\\\\.system\\\\s*\\\\(/i.test(value) ||\n    /\\\\bsystem\\\\s*\\\\(/i.test(value) ||\n    /\\\\bpopen\\\\s*\\\\(/i.test(value) ||\n    /\\\\bcreateprocess\\\\b/i.test(value) ||\n    /\\\\bstart-process\\\\b/i.test(value)\n  );\n}\n\nconst KNOWN_EXECUTABLE_WRAPPERS = new Set([\n  'bun',\n  'deno',\n  'node',\n  'nodejs',\n  'perl',\n  'php',\n  'python',\n  'python2',\n  'python3',\n  'ruby',\n]);\n\nconst KNOWN_WRAPPER_LAUNCHERS = new Set(['uv', 'uvx']);\n\nconst EXECUTABLE_WRAPPER_OPTIONS_WITH_VALUE = new Set([\n  '--experimental-loader',\n  '--import',\n  '--loader',\n  '--require',\n  '-m',\n  '-r',\n]);\n\nconst UNSUPPORTED_WRAPPER_PAYLOAD = '__LEE_SPEC_KIT_UNSUPPORTED_WRAPPER_PAYLOAD__';\n\nfunction readWrapperScriptPayload(executable, tokens, rawValue, baseCwd) {\n  if (KNOWN_WRAPPER_LAUNCHERS.has(executable)) {\n    return UNSUPPORTED_WRAPPER_PAYLOAD;\n  }\n\n  if (!KNOWN_EXECUTABLE_WRAPPERS.has(executable)) {\n    const flagIndex = findExecutablePayloadFlagIndex(tokens);\n    return flagIndex === -1 || flagIndex + 1 >= tokens.length\n      ? null\n      : UNSUPPORTED_WRAPPER_PAYLOAD;\n  }\n\n  if (rawValue.includes('<<')) {\n    return UNSUPPORTED_WRAPPER_PAYLOAD;\n  }\n\n  const flagIndex = findExecutablePayloadFlagIndex(tokens);\n  if (flagIndex !== -1 && flagIndex + 1 < tokens.length) {\n    return UNSUPPORTED_WRAPPER_PAYLOAD;\n  }\n  return resolveScriptToken(tokens) ? UNSUPPORTED_WRAPPER_PAYLOAD : null;\n}\n\nfunction resolveScriptToken(tokens) {\n  for (let index = 1; index < tokens.length; index += 1) {\n    const token = tokens[index];\n    if (!token) continue;\n    if (token === '--') {\n      return tokens[index + 1] || null;\n    }\n    if (token === '-') {\n      return token;\n    }\n    if (token.startsWith('-')) {\n      if (\n        EXECUTABLE_WRAPPER_OPTIONS_WITH_VALUE.has(token.toLowerCase()) &&\n        index + 1 < tokens.length\n      ) {\n        index += 1;\n      }\n      continue;\n    }\n    return token;\n  }\n  return null;\n}\n\nfunction resolvesToExistingFile(token, baseCwd) {\n  if (!token || token.startsWith('-')) {\n    return false;\n  }\n\n  const resolvedPath = path.resolve(baseCwd, token);\n  try {\n    return fs.statSync(resolvedPath).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction unwrapShellCommand(value) {\n  let currentValue = value;\n\n  for (let depth = 0; depth < 6; depth += 1) {\n    const tokens = tokenizeShellCommand(currentValue);\n    const executable = normalizeExecutableToken(tokens[0] || '');\n\n    if (executable === 'sudo') {\n      const stripped = stripSudoWrapper(tokens);\n      currentValue = stripped.join(' ');\n      continue;\n    }\n\n    if (executable === 'command' || executable === 'nohup') {\n      if (tokens.length <= 1) return currentValue;\n      currentValue = tokens.slice(1).join(' ');\n      continue;\n    }\n\n    if (executable === 'env') {\n      const stripped = stripEnvWrapper(tokens);\n      currentValue = stripped.join(' ');\n      continue;\n    }\n\n    if (!KNOWN_SHELL_EXECUTABLES.has(executable)) {\n      return currentValue;\n    }\n\n    const flagIndex = findShellCommandFlagIndex(tokens);\n    if (flagIndex === -1 || flagIndex + 1 >= tokens.length) {\n      return currentValue;\n    }\n\n    currentValue = tokens.slice(flagIndex + 1).join(' ');\n  }\n\n  return currentValue;\n}\n\nfunction hasUnsupportedDangerousShellWrapper(value, baseCwd) {\n  let currentValue = value;\n\n  for (let depth = 0; depth < 6; depth += 1) {\n    const tokens = tokenizeShellCommand(currentValue);\n    const executable = normalizeExecutableToken(tokens[0] || '');\n\n    if (executable === 'sudo') {\n      currentValue = stripSudoWrapper(tokens).join(' ');\n      continue;\n    }\n\n    if (executable === 'command' || executable === 'nohup') {\n      if (tokens.length <= 1) return false;\n      currentValue = tokens.slice(1).join(' ');\n      continue;\n    }\n\n    if (executable === 'env') {\n      currentValue = stripEnvWrapper(tokens).join(' ');\n      continue;\n    }\n\n    if (DIRECT_GIT_OR_GH_EXECUTABLES.has(executable)) {\n      return false;\n    }\n\n    const flagIndex = findExecutablePayloadFlagIndex(tokens);\n    if (!KNOWN_SHELL_EXECUTABLES.has(executable)) {\n      const payload = readWrapperScriptPayload(\n        executable,\n        tokens,\n        currentValue,\n        baseCwd\n      );\n      if (payload === UNSUPPORTED_WRAPPER_PAYLOAD) {\n        return true;\n      }\n      if (!payload) {\n        return false;\n      }\n      return containsDangerousGitOrGhPayload(payload) || containsProcessExecutionPayload(payload);\n    }\n\n    if (flagIndex === -1 || flagIndex + 1 >= tokens.length) {\n      if (currentValue.includes('<<') || resolveScriptToken(tokens)) {\n        return true;\n      }\n      return false;\n    }\n\n    const payload = tokens.slice(flagIndex + 1).join(' ');\n    const payloadTokens = tokenizeShellCommand(payload);\n    if (resolvesToExistingFile(payloadTokens[0] || '', baseCwd)) {\n      return true;\n    }\n    currentValue = payload;\n  }\n\n  return false;\n}\n\nconst GIT_OPTIONS_WITH_VALUE = new Set([\n  '-C',\n  '-c',\n  '--exec-path',\n  '--git-dir',\n  '--namespace',\n  '--super-prefix',\n  '--work-tree',\n  '--config-env',\n]);\n\nfunction getGitSubcommand(value) {\n  const unwrappedValue = unwrapShellCommand(value);\n  const tokens = tokenizeShellCommand(unwrappedValue);\n  const gitIndex = tokens.findIndex(\n    (token) => normalizeExecutableToken(token) === 'git'\n  );\n  if (gitIndex === -1) return null;\n\n  for (let index = gitIndex + 1; index < tokens.length; index += 1) {\n    const token = tokens[index];\n    if (!token) continue;\n    if (token === '--') {\n      return tokens[index + 1] || null;\n    }\n    if (!token.startsWith('-')) {\n      return token;\n    }\n    if (GIT_OPTIONS_WITH_VALUE.has(token) && index + 1 < tokens.length) {\n      index += 1;\n    }\n  }\n\n  return null;\n}\n\nfunction getGitCommandCwd(value, baseCwd) {\n  const unwrappedValue = unwrapShellCommand(value);\n  const tokens = tokenizeShellCommand(unwrappedValue);\n  const gitIndex = tokens.findIndex(\n    (token) => normalizeExecutableToken(token) === 'git'\n  );\n  if (gitIndex === -1) return baseCwd;\n\n  let currentCwd = baseCwd;\n  for (let index = gitIndex + 1; index < tokens.length; index += 1) {\n    const token = tokens[index];\n    if (!token) continue;\n    if (token === '--') break;\n    if (!token.startsWith('-')) break;\n    if (token === '-C' && index + 1 < tokens.length) {\n      currentCwd = path.resolve(currentCwd, tokens[index + 1]);\n      index += 1;\n      continue;\n    }\n    if (GIT_OPTIONS_WITH_VALUE.has(token) && index + 1 < tokens.length) {\n      index += 1;\n    }\n  }\n\n  return currentCwd;\n}\n\nfunction hasUnsupportedGitTargetOptions(value) {\n  const unwrappedValue = unwrapShellCommand(value);\n  const tokens = tokenizeShellCommand(unwrappedValue);\n  return tokens.some((token) => {\n    const normalized = String(token || '').toLowerCase();\n    return (\n      normalized === '--git-dir' ||\n      normalized.startsWith('--git-dir=') ||\n      normalized === '--work-tree' ||\n      normalized.startsWith('--work-tree=')\n    );\n  });\n}\n\nfunction hasGitTargetEnvOverrides(value) {\n  const tokens = tokenizeShellCommand(value);\n  return tokens.some((token) => {\n    const normalized = String(token || '').trim().toUpperCase();\n    return (\n      normalized.startsWith('GIT_DIR=') ||\n      normalized.startsWith('GIT_WORK_TREE=')\n    );\n  });\n}\n\nconst normalizedCommand = unwrapShellCommand(command);\nconst hasUnsupportedShellWrappedDangerousCommand =\n  hasUnsupportedDangerousShellWrapper(command, cwd);\nconst gitSubcommand = getGitSubcommand(command);\nconst gitCommandCwd = getGitCommandCwd(command, cwd);\nconst hasUnsupportedGitTarget = hasUnsupportedGitTargetOptions(command);\nconst hasGitTargetEnvOverride = hasGitTargetEnvOverrides(command);\nconst isGitCommit = gitSubcommand === 'commit';\nconst isGitPush = gitSubcommand === 'push';\nconst isGitCheckout = gitSubcommand === 'checkout';\nconst isGitSwitch = gitSubcommand === 'switch';\nconst isGitRestore = gitSubcommand === 'restore';\nconst isGitClean = gitSubcommand === 'clean';\nconst isGitRebase = gitSubcommand === 'rebase';\nconst isGitMerge = gitSubcommand === 'merge';\nconst isGitCherryPick = gitSubcommand === 'cherry-pick';\nconst isGitRevert = gitSubcommand === 'revert';\nconst isGitStash = gitSubcommand === 'stash';\nconst isGitBranchDelete =\n  gitSubcommand === 'branch' &&\n  /(^|\\\\s)(?:-D|-d|--delete)(\\\\s|$)/.test(normalizedCommand);\nconst isGitTagDelete =\n  gitSubcommand === 'tag' &&\n  /(^|\\\\s)-d(\\\\s|$)/.test(normalizedCommand);\nconst isGitResetHard =\n  gitSubcommand === 'reset' && /(^|\\\\s)--hard(\\\\s|$)/.test(normalizedCommand);\nconst isAlwaysBlockedGhCommand =\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+repo\\\\s+delete\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+release\\\\s+delete\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+api\\\\b[\\\\s\\\\S]{0,160}(?:--method=DELETE|(?:-X|--method)\\\\s+DELETE)\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+api\\\\b[\\\\s\\\\S]{0,120}\\\\bgraphql\\\\b/i.test(command);\nconst isAlwaysBlockedGhOperation =\n  isAlwaysBlockedGhCommand;\nconst isDangerousGhCommand =\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+issue\\\\s+(?:create|delete|edit|close|reopen)\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+pr\\\\s+(?:create|merge|close|reopen|review|ready)\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+repo\\\\s+(?:delete|archive|rename|edit)\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+release\\\\s+(?:create|delete|edit)\\\\b/i.test(command) ||\n  /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+api\\\\b[\\\\s\\\\S]{0,160}(?:--method=(?:DELETE|PATCH|POST|PUT)|(?:-X|--method)\\\\s+(?:DELETE|PATCH|POST|PUT))\\\\b/i.test(command);\nconst isGitCreateBranch =\n  (isGitCheckout && /(^|\\\\s)-b(\\\\s|$)/.test(normalizedCommand)) ||\n  (isGitSwitch && /(^|\\\\s)(?:-c|--create)(\\\\s|$)/.test(normalizedCommand));\nconst isLeeSpecKitIssueCreate =\n  /\\\\blee-spec-kit\\\\b[\\\\s\\\\S]{0,120}\\\\bgithub\\\\s+issue\\\\b[\\\\s\\\\S]{0,160}\\\\b--create\\\\b/i.test(command);\nconst isLeeSpecKitPrCreate =\n  /\\\\blee-spec-kit\\\\b[\\\\s\\\\S]{0,120}\\\\bgithub\\\\s+pr\\\\b[\\\\s\\\\S]{0,160}\\\\b--create\\\\b/i.test(command);\nconst isLeeSpecKitPrMerge =\n  /\\\\blee-spec-kit\\\\b[\\\\s\\\\S]{0,120}\\\\bgithub\\\\s+pr\\\\b[\\\\s\\\\S]{0,160}\\\\b--merge\\\\b/i.test(command);\nconst isGhIssueCreate =\n  isDangerousGhCommand && /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+issue\\\\s+create\\\\b/i.test(command);\nconst isGhPrCreate =\n  isDangerousGhCommand && /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+pr\\\\s+create\\\\b/i.test(command);\nconst isGhPrMerge =\n  isDangerousGhCommand && /\\\\bgh(?:\\\\.cmd|\\\\.exe)?\\\\s+pr\\\\s+merge\\\\b/i.test(command);\nlet stageBoundAction = null;\nif (isGitCreateBranch) {\n  stageBoundAction = 'branch_create';\n} else if (isGhIssueCreate || isLeeSpecKitIssueCreate) {\n  stageBoundAction = 'issue_create';\n} else if (isGhPrCreate || isLeeSpecKitPrCreate) {\n  stageBoundAction = 'pr_create';\n} else if (isGhPrMerge || isLeeSpecKitPrMerge) {\n  stageBoundAction = 'pr_merge';\n}\nconst isDangerousCommand =\n  isAlwaysBlockedGhOperation ||\n  hasUnsupportedShellWrappedDangerousCommand ||\n  isGitCommit ||\n  isGitPush ||\n  isGitCheckout ||\n  isGitSwitch ||\n  isGitRestore ||\n  isGitClean ||\n  isGitRebase ||\n  isGitMerge ||\n  isGitCherryPick ||\n  isGitRevert ||\n  isGitStash ||\n  isGitBranchDelete ||\n  isGitTagDelete ||\n  isGitResetHard ||\n  isDangerousGhCommand ||\n  isLeeSpecKitIssueCreate ||\n  isLeeSpecKitPrCreate ||\n  isLeeSpecKitPrMerge;\n\nif (!command || !isDangerousCommand) {\n  process.exit(0);\n}\n\nif (isAlwaysBlockedGhOperation) {\n  printBlock('Destructive GitHub CLI commands such as repo or release deletion are not supported by lee-spec-kit hooks. Re-run them manually after explicit review.');\n  process.exit(0);\n}\n\nif (hasUnsupportedShellWrappedDangerousCommand) {\n  printBlock('lee-spec-kit hooks do not support this shell wrapper for git or gh commands. Re-run the command from a supported shell or the target repo root instead.');\n  process.exit(0);\n}\n\nif (hasUnsupportedGitTarget || hasGitTargetEnvOverride) {\n  printBlock('Git commands using --git-dir, --work-tree, GIT_DIR, or GIT_WORK_TREE are not supported by lee-spec-kit hooks. Re-run the command from the target repo root instead.');\n  process.exit(0);\n}\n\nconst detectedResult = runLeeSpecKitJson(['detect', '--json'], cwd);\nif (!detectedResult.ok) {\n  printBlock('lee-spec-kit detection failed inside the Codex hook. Fix the local CLI or hook setup before continuing.');\n  process.exit(0);\n}\nconst detected = detectedResult.data;\nif (!(detected?.status === 'ok' && detected?.isLeeSpecKitProject === true)) {\n  process.exit(0);\n}\n\nif (stageBoundAction) {\n  const stageResult = runLeeSpecKitJson(['workflow-stage', '--json'], cwd);\n  if (!stageResult.ok) {\n    printBlock('lee-spec-kit workflow-stage failed inside the Codex hook. Resolve the workflow stage before running this stage-bound command.');\n    process.exit(0);\n  }\n  const stage = stageResult.data;\n  if (stage?.status !== 'ok') {\n    printBlock('Resolve feature selection and workflow stage before running this stage-bound command.');\n    process.exit(0);\n  }\n  if (stage?.nextAction?.category !== stageBoundAction) {\n    printBlock(\n      \\`Current workflow stage is \\${stage?.stage || 'unknown'} and only \\${stage?.nextAction?.category || 'the current nextAction'} is allowed next. Do not jump ahead to \\${stageBoundAction}.\\`\n    );\n    process.exit(0);\n  }\n}\n\nif (path.resolve(gitCommandCwd) !== path.resolve(cwd) && !isGitCommit) {\n  printBlock('Git commands targeting another repo via -C are only supported for git commit. Re-run the command from the target repo root instead.');\n  process.exit(0);\n}\n\nif (isGitCommit) {\n  const commitAuditResult = runLeeSpecKitJson(\n    ['commit-audit', '--json', '--git-root', gitCommandCwd],\n    cwd\n  );\n  if (!commitAuditResult.ok) {\n    printBlock('lee-spec-kit commit-audit failed inside the Codex hook. Resolve the docs guardrail failure before committing.');\n    process.exit(0);\n  }\n  const commitAudit = commitAuditResult.data;\n  if (commitAudit?.status === 'blocked') {\n    if (commitAudit?.reasonCode === 'UNSUPPORTED_GIT_TARGET') {\n      printBlock('Git commit targets outside the current lee-spec-kit project topology are not supported. Re-run the command from the active workspace or target repo root instead.');\n      process.exit(0);\n    }\n    printBlock('Normalize or allowlist non-canonical docs paths before committing.');\n    process.exit(0);\n  }\n  if (!(commitAudit?.status === 'ok' || commitAudit?.status === 'skipped')) {\n    printBlock('lee-spec-kit commit-audit returned a non-ok status inside the Codex hook. Resolve the docs guardrail failure before committing.');\n    process.exit(0);\n  }\n}\n\nconst auditResult = runLeeSpecKitJson(['workflow-audit', '--json'], cwd);\nif (!auditResult.ok) {\n  printBlock('lee-spec-kit workflow-audit failed inside the Codex hook. Resolve the docs sync guardrail failure before continuing.');\n  process.exit(0);\n}\nconst audit = auditResult.data;\nif (audit?.status === 'needs_sync') {\n  printBlock('Sync the active feature docs before running remote or destructive commands.');\n  process.exit(0);\n}\nif (!(audit?.status === 'ok' || audit?.status === 'skipped')) {\n  printBlock('lee-spec-kit workflow-audit returned a non-ok status inside the Codex hook. Resolve the docs sync guardrail failure before continuing.');\n}\n`;\n    case 'stop_workflow_audit.mjs':\n      return `#!/usr/bin/env node\nimport { printBlock, readHookInput, runLeeSpecKitJson } from './_lee_spec_kit_hook_utils.mjs';\n\n// Equivalent CLI probe: npx lee-spec-kit workflow-audit --json\nconst inputResult = readHookInput();\nif (!inputResult.ok) {\n  printBlock('Codex stop hook input was malformed. Resolve the local hook setup before stopping.');\n  process.exit(0);\n}\nconst input = inputResult.value;\nif (input?.stop_hook_active === true) {\n  process.stdout.write(JSON.stringify({ continue: true }));\n  process.exit(0);\n}\n\nconst cwd = typeof input.cwd === 'string' && input.cwd ? input.cwd : process.cwd();\nconst detectedResult = runLeeSpecKitJson(['detect', '--json'], cwd);\nif (!detectedResult.ok) {\n  printBlock('lee-spec-kit detection failed inside the stop hook. Resolve the local CLI or hook setup before stopping.');\n  process.exit(0);\n}\nconst detected = detectedResult.data;\nif (!(detected?.status === 'ok' && detected?.isLeeSpecKitProject === true)) {\n  process.stdout.write(JSON.stringify({ continue: true }));\n  process.exit(0);\n}\n\nconst auditResult = runLeeSpecKitJson(['workflow-audit', '--json'], cwd);\nif (!auditResult.ok) {\n  printBlock('lee-spec-kit workflow-audit failed inside the stop hook. Resolve the docs sync guardrail failure before stopping.');\n  process.exit(0);\n}\nconst audit = auditResult.data;\nif (audit?.status === 'needs_sync') {\n  printBlock('Run one more pass and sync the active feature docs before stopping.');\n  process.exit(0);\n}\nif (!(audit?.status === 'ok' || audit?.status === 'skipped')) {\n  printBlock('lee-spec-kit workflow-audit returned a non-ok status inside the stop hook. Resolve the docs sync guardrail failure before stopping.');\n  process.exit(0);\n}\n\nprocess.stdout.write(JSON.stringify({ continue: true }));\n`;\n    default:\n      return '';\n  }\n}\n\nfunction getManagedHookRelativePath(fileName: ManagedHookFileName): string {\n  return path.posix.join('.codex', 'hooks', fileName);\n}\n\nfunction normalizePathSlashes(value: string): string {\n  return value.replace(/\\\\/g, '/');\n}\n\nfunction escapeRegExp(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n}\n\nfunction getPortableHookCommandSuffix(fileName: ManagedHookFileName): string {\n  const relativeHookPath = normalizePathSlashes(getManagedHookRelativePath(fileName));\n  const loaderSource = [\n    '(async () => {',\n    \"  const fs = require('node:fs');\",\n    \"  const path = require('node:path');\",\n    \"  const { pathToFileURL } = require('node:url');\",\n    `  const relativeHookPath = ${JSON.stringify(relativeHookPath)};`,\n    '  let dir = process.cwd();',\n    '  while (true) {',\n    '    const candidate = path.join(dir, relativeHookPath);',\n    '    if (fs.existsSync(candidate)) {',\n    '      await import(pathToFileURL(candidate).href);',\n    '      return;',\n    '    }',\n    '    const parent = path.dirname(dir);',\n    '    if (parent === dir) {',\n    \"      throw new Error('lee-spec-kit hook script not found: ' + relativeHookPath);\",\n    '    }',\n    '    dir = parent;',\n    '  }',\n    '})().catch((error) => {',\n    \"  console.error(error && error.stack ? error.stack : String(error));\",\n    '  process.exit(1);',\n    '});',\n  ].join(' ');\n  return ` -e ${JSON.stringify(loaderSource)}`;\n}\n\nfunction isManagedCommand(command: string): boolean {\n  const normalized = normalizePathSlashes(command).trim();\n  return MANAGED_HOOK_FILENAMES.some((fileName) => {\n    const currentCommand = normalizePathSlashes(toPortableHookCommand(fileName)).trim();\n    const portableSuffix = normalizePathSlashes(\n      getPortableHookCommandSuffix(fileName)\n    ).trim();\n    if (normalized === currentCommand || normalized.endsWith(portableSuffix)) {\n      return true;\n    }\n\n    const relativeHookPath = escapeRegExp(getManagedHookRelativePath(fileName));\n    const legacyAbsolutePattern = new RegExp(\n      `^node\\\\s+[\"']?.*${relativeHookPath}[\"']?$`\n    );\n    return legacyAbsolutePattern.test(normalized);\n  });\n}\n\nfunction toPortableHookCommand(fileName: ManagedHookFileName): string {\n  const nodeCommand = JSON.stringify(process.execPath);\n  return `${nodeCommand}${getPortableHookCommandSuffix(fileName)}`;\n}\n\nfunction getManagedHooksConfig(): Record<HookEventName, HookMatcherGroup[]> {\n  const commandFor = (fileName: ManagedHookFileName) =>\n    toPortableHookCommand(fileName);\n\n  return {\n    SessionStart: [\n      {\n        matcher: 'startup|resume',\n        hooks: [\n          {\n            type: 'command',\n            command: commandFor('session_start_lee_spec_kit.mjs'),\n            statusMessage: 'Loading lee-spec-kit workflow context',\n          },\n        ],\n      },\n    ],\n    UserPromptSubmit: [\n      {\n        hooks: [\n          {\n            type: 'command',\n            command: commandFor('user_prompt_submit_lee_spec_kit.mjs'),\n          },\n        ],\n      },\n    ],\n    PreToolUse: [\n      {\n        matcher: 'Bash',\n        hooks: [\n          {\n            type: 'command',\n            command: commandFor('pre_tool_use_policy.mjs'),\n            statusMessage: 'Checking lee-spec-kit workflow guardrails',\n          },\n        ],\n      },\n    ],\n    Stop: [\n      {\n        hooks: [\n          {\n            type: 'command',\n            command: commandFor('stop_workflow_audit.mjs'),\n            timeout: 30,\n          },\n        ],\n      },\n    ],\n  };\n}\n\nfunction getInstalledCliEntrypoint(): string {\n  return path.join(path.dirname(fileURLToPath(import.meta.url)), 'index.js');\n}\n\nfunction pruneManagedGroups(groups: HookMatcherGroup[] | undefined): HookMatcherGroup[] {\n  if (!Array.isArray(groups)) return [];\n  return groups\n    .map((group) => {\n      if (!group || typeof group !== 'object' || !Array.isArray(group.hooks)) {\n        return group;\n      }\n\n      const hooks = group.hooks.filter(\n        (hook) =>\n          !(\n            hook &&\n            typeof hook === 'object' &&\n            typeof hook.command === 'string' &&\n            isManagedCommand(hook.command)\n          )\n      );\n\n      if (hooks.length === 0) {\n        return null;\n      }\n\n      return {\n        ...group,\n        hooks,\n      };\n    })\n    .filter((group): group is HookMatcherGroup => !!group);\n}\n\nfunction mergeManagedGroups(\n  current: HooksConfigFile,\n  managedHooks: Record<HookEventName, HookMatcherGroup[]>\n): HooksConfigFile {\n  const nextHooks: Record<string, unknown> = {\n    ...(current.hooks && typeof current.hooks === 'object' ? current.hooks : {}),\n  };\n\n  for (const eventName of Object.keys(managedHooks) as HookEventName[]) {\n    const existing = pruneManagedGroups(\n      Array.isArray(nextHooks[eventName])\n        ? (nextHooks[eventName] as HookMatcherGroup[])\n        : undefined\n    );\n    nextHooks[eventName] = [...existing, ...managedHooks[eventName]];\n  }\n\n  return {\n    ...current,\n    hooks: nextHooks,\n  };\n}\n\nfunction removeManagedGroups(current: HooksConfigFile): HooksConfigFile {\n  const nextHooks: Record<string, unknown> = {\n    ...(current.hooks && typeof current.hooks === 'object' ? current.hooks : {}),\n  };\n\n  for (const eventName of ['SessionStart', 'UserPromptSubmit', 'PreToolUse', 'Stop']) {\n    const pruned = pruneManagedGroups(\n      Array.isArray(nextHooks[eventName])\n        ? (nextHooks[eventName] as HookMatcherGroup[])\n        : undefined\n    );\n    if (pruned.length > 0) {\n      nextHooks[eventName] = pruned;\n    } else {\n      delete nextHooks[eventName];\n    }\n  }\n\n  return {\n    ...current,\n    hooks: nextHooks,\n  };\n}\n\nexport function getRepoCodexDir(repoRoot = process.cwd()): string {\n  return path.join(repoRoot, '.codex');\n}\n\nexport function resolveCodexHooksRepoRoot(cwd = process.cwd()): string {\n  return runGitCapture(['rev-parse', '--show-toplevel'], cwd) || cwd;\n}\n\nexport function getRepoHooksDir(repoRoot = process.cwd()): string {\n  return path.join(getRepoCodexDir(repoRoot), 'hooks');\n}\n\nexport function getRepoHooksConfigPath(repoRoot = process.cwd()): string {\n  return path.join(getRepoCodexDir(repoRoot), 'hooks.json');\n}\n\nexport async function upsertLeeSpecKitCodexHooks(\n  repoRoot = process.cwd()\n): Promise<{\n  changed: boolean;\n  action: 'created' | 'updated' | 'noop';\n  hooksJsonPath: string;\n}> {\n  const hooksDir = getRepoHooksDir(repoRoot);\n  const hooksJsonPath = getRepoHooksConfigPath(repoRoot);\n  await fs.ensureDir(hooksDir);\n\n  for (const fileName of MANAGED_HOOK_FILENAMES) {\n    const targetPath = path.join(hooksDir, fileName);\n    await fs.writeFile(targetPath, getHookScriptContent(fileName), {\n      encoding: 'utf-8',\n      mode: 0o755,\n    });\n  }\n\n  const managedHooks = getManagedHooksConfig();\n  const exists = await fs.pathExists(hooksJsonPath);\n  const current = exists\n    ? ((await fs.readJson(hooksJsonPath)) as HooksConfigFile)\n    : ({ hooks: {} } as HooksConfigFile);\n  const next = mergeManagedGroups(current, managedHooks);\n  const nextJson = `${JSON.stringify(next, null, 2)}\\n`;\n  const currentJson = exists ? `${JSON.stringify(current, null, 2)}\\n` : null;\n\n  if (currentJson === nextJson) {\n    return { changed: false, action: 'noop', hooksJsonPath };\n  }\n\n  await fs.writeFile(hooksJsonPath, nextJson, 'utf-8');\n  return {\n    changed: true,\n    action: exists ? 'updated' : 'created',\n    hooksJsonPath,\n  };\n}\n\nexport async function removeLeeSpecKitCodexHooks(\n  repoRoot = process.cwd()\n): Promise<{ changed: boolean; hooksJsonPath: string }> {\n  const hooksDir = getRepoHooksDir(repoRoot);\n  const hooksJsonPath = getRepoHooksConfigPath(repoRoot);\n  let changed = false;\n\n  if (await fs.pathExists(hooksJsonPath)) {\n    const current = (await fs.readJson(hooksJsonPath)) as HooksConfigFile;\n    const next = removeManagedGroups(current);\n    const currentJson = `${JSON.stringify(current, null, 2)}\\n`;\n    const nextJson = `${JSON.stringify(next, null, 2)}\\n`;\n    if (currentJson !== nextJson) {\n      await fs.writeFile(hooksJsonPath, nextJson, 'utf-8');\n      changed = true;\n    }\n  }\n\n  for (const fileName of MANAGED_HOOK_FILENAMES) {\n    const targetPath = path.join(hooksDir, fileName);\n    if (await fs.pathExists(targetPath)) {\n      await fs.remove(targetPath);\n      changed = true;\n    }\n  }\n\n  return { changed, hooksJsonPath };\n}\n"]}