nexrall-code 0.5.177 → 0.5.179

package/dist/index.js

@@ -14343,6 +14343,7 @@ var require_sharedTasks = __commonJS({
     exports2.createSharedTask = createSharedTask;
     exports2.claimTask = claimTask;
     exports2.updateSharedTaskStatus = updateSharedTaskStatus;
+    exports2.deleteSharedTask = deleteSharedTask;
     var fs32 = __importStar(__require("fs"));
     var os20 = __importStar(__require("os"));
     var path32 = __importStar(__require("path"));
@@ -14476,6 +14477,14 @@ var require_sharedTasks = __commonJS({
       }, workDir);
     }
     exports2._sharedTasksInternal = { tasksRoot, scopeDir, taskPath, isClaimAbandoned, isUnblocked, CLAIM_STALE_MS, MIN_CLAIM_AGE_FOR_DEATH_CHECK_MS };
+    function deleteSharedTask(workDir, taskId) {
+      try {
+        fs32.unlinkSync(taskPath(workDir, taskId));
+        return true;
+      } catch {
+        return false;
+      }
+    }
   }
 });
 
@@ -106697,6 +106706,16 @@ var require_hooks = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.withAgentHooks = withAgentHooks;
     exports2.loadHooks = loadHooks2;
+    exports2.setHookWakeListener = setHookWakeListener2;
+    exports2.setHookStatusListener = setHookStatusListener2;
+    exports2.drainHookDeliveries = drainHookDeliveries;
+    exports2.takeHookWakes = takeHookWakes2;
+    exports2.hasPendingHookWake = hasPendingHookWake2;
+    exports2.formatHookDeliveries = formatHookDeliveries2;
+    exports2.resetHookOnceState = resetHookOnceState2;
+    exports2.setHookMcpCaller = setHookMcpCaller2;
+    exports2.setHookEventListener = setHookEventListener2;
+    exports2.hasHookEventListener = hasHookEventListener;
     exports2.parsePromptHookReply = parsePromptHookReply;
     exports2.hookRunOptsFor = hookRunOptsFor;
     exports2.classifyStopFailure = classifyStopFailure;
@@ -106705,6 +106724,8 @@ var require_hooks = __commonJS({
     exports2.runSimpleHooks = runSimpleHooks;
     exports2.runLifecycleHooks = runLifecycleHooks;
     exports2.runPermissionRequestHooks = runPermissionRequestHooks3;
+    exports2.runElicitationHooks = runElicitationHooks2;
+    exports2.runElicitationResultHooks = runElicitationResultHooks2;
     exports2.fireObserverHook = fireObserverHook3;
     exports2.fireNotificationHooks = fireNotificationHooks2;
     exports2.fireManualPostCompactHook = fireManualPostCompactHook2;
@@ -106786,7 +106807,12 @@ var require_hooks = __commonJS({
       "ConfigChange",
       "WorktreeCreate",
       "WorktreeRemove",
-      "Setup"
+      "Setup",
+      "PostToolBatch",
+      "TaskCreated",
+      "TaskCompleted",
+      "Elicitation",
+      "ElicitationResult"
     ];
     function toHookEntries(list) {
       return list.map((it) => {
@@ -106795,11 +106821,206 @@ var require_hooks = __commonJS({
           return { matcher: e2.matcher, hooks: e2.hooks };
         const { matcher, ...rest } = e2;
         const hook = { ...rest };
-        if (!isKnownHandlerType(hook.type))
-          hook.type = "command";
+        if (!isKnownHandlerType(hook.type)) {
+          hook.type = !hook.command && !hook.url && !hook.prompt && hook.server && hook.tool ? "mcp_tool" : "command";
+        }
         return { matcher, hooks: [hook] };
       });
     }
+    var _hookDeliveries = [];
+    var _hookWakeListener = null;
+    var _hookStatusListener = null;
+    function setHookWakeListener2(fn) {
+      _hookWakeListener = fn;
+    }
+    function setHookStatusListener2(fn) {
+      _hookStatusListener = fn;
+    }
+    function drainHookDeliveries() {
+      return _hookDeliveries.splice(0);
+    }
+    function takeHookWakes2() {
+      const out = _hookDeliveries.filter((d) => d.kind === "wake");
+      for (let i2 = _hookDeliveries.length - 1; i2 >= 0; i2--)
+        if (_hookDeliveries[i2].kind === "wake")
+          _hookDeliveries.splice(i2, 1);
+      return out;
+    }
+    function hasPendingHookWake2() {
+      return _hookDeliveries.some((d) => d.kind === "wake");
+    }
+    function formatHookDeliveries2(list) {
+      return list.map((d) => `<hook-context source="${d.source}">
+${d.text}
+</hook-context>`).join("\n\n");
+    }
+    var _hookOnceDone = /* @__PURE__ */ new Set();
+    function hookIdentity(event, hook, matcher, dir) {
+      const body = hook.command ?? hook.url ?? hook.prompt ?? `${hook.server ?? ""}__${hook.tool ?? ""}`;
+      return `${dir ?? ""}|${event}|${matcher ?? ""}|${body}`;
+    }
+    function resetHookOnceState2() {
+      _hookOnceDone.clear();
+    }
+    var _activeStatuses = /* @__PURE__ */ new Map();
+    var _statusSeq = 0;
+    function hookStatusBegin(message) {
+      const id = ++_statusSeq;
+      _activeStatuses.set(id, message);
+      _hookStatusListener?.(message);
+      return id;
+    }
+    function hookStatusEnd(id) {
+      if (!_activeStatuses.delete(id))
+        return;
+      if (!_activeStatuses.size) {
+        _hookStatusListener?.(null);
+        return;
+      }
+      _hookStatusListener?.([..._activeStatuses.values()].pop() ?? null);
+    }
+    var _hookMcpCaller = null;
+    function setHookMcpCaller2(fn) {
+      _hookMcpCaller = fn;
+    }
+    var _hookEventListener = null;
+    function setHookEventListener2(fn) {
+      _hookEventListener = fn;
+    }
+    function hasHookEventListener() {
+      return _hookEventListener !== null;
+    }
+    var _hookIdSeq = 0;
+    function emitHookLifecycle(evt) {
+      try {
+        _hookEventListener?.(evt);
+      } catch {
+      }
+    }
+    function hookDisplayName(hook) {
+      if (hook.type === "http")
+        return String(hook.url ?? "http");
+      if (hook.type === "mcp_tool")
+        return `${String(hook.server ?? "")}:${String(hook.tool ?? "")}`;
+      if (hook.type === "prompt" || hook.type === "agent")
+        return hook.type;
+      return String(hook.command ?? "command");
+    }
+    var HOOK_PROGRESS_AFTER_MS = 1e3;
+    var HOOK_PROGRESS_FLUSH_MS = 250;
+    async function runWithHookEvents(hook, event, run) {
+      if (!_hookEventListener)
+        return run(void 0);
+      const hookId = `hook_${Date.now().toString(36)}_${(++_hookIdSeq).toString(36)}`;
+      const hookName = hookDisplayName(hook);
+      const startedAt = Date.now();
+      emitHookLifecycle({ kind: "started", hookId, hookName, hookEvent: event });
+      let pendingOut = "";
+      let pendingErr = "";
+      let lastFlush = 0;
+      let flushTimer = null;
+      const flush = () => {
+        flushTimer = null;
+        if (!pendingOut && !pendingErr)
+          return;
+        const stdout2 = pendingOut, stderr2 = pendingErr;
+        pendingOut = "";
+        pendingErr = "";
+        lastFlush = Date.now();
+        emitHookLifecycle({ kind: "progress", hookId, hookName, hookEvent: event, stdout: stdout2, stderr: stderr2, output: stdout2 + stderr2 });
+      };
+      const onData = (d) => {
+        if (Date.now() - startedAt < HOOK_PROGRESS_AFTER_MS)
+          return;
+        if (d.stdout)
+          pendingOut += d.stdout;
+        if (d.stderr)
+          pendingErr += d.stderr;
+        if (!pendingOut && !pendingErr)
+          return;
+        const since = Date.now() - lastFlush;
+        if (since >= HOOK_PROGRESS_FLUSH_MS)
+          flush();
+        else if (!flushTimer)
+          flushTimer = setTimeout(flush, HOOK_PROGRESS_FLUSH_MS - since);
+      };
+      let r2;
+      try {
+        r2 = await run(onData);
+      } catch (err) {
+        if (flushTimer)
+          clearTimeout(flushTimer);
+        const message = err?.message ?? String(err);
+        emitHookLifecycle({ kind: "response", hookId, hookName, hookEvent: event, stdout: "", stderr: message, output: message, outcome: "error" });
+        throw err;
+      }
+      if (flushTimer)
+        clearTimeout(flushTimer);
+      const stdout = r2.stdout ?? "";
+      const stderr = r2.stderr ?? "";
+      emitHookLifecycle({
+        kind: "response",
+        hookId,
+        hookName,
+        hookEvent: event,
+        stdout,
+        stderr,
+        output: [stdout.trim(), stderr.trim()].filter(Boolean).join("\n"),
+        // status null = killed / never exited (spawnHook's timeout path) — there is no exit code to report.
+        ...r2.status === null ? {} : { exitCode: r2.status },
+        outcome: r2.status === 0 ? "success" : r2.status === null ? "cancelled" : "error"
+      });
+      return r2;
+    }
+    function isBackgroundHook(hook) {
+      return hook.type === "command" && (hook.async === true || hook.asyncRewake === true);
+    }
+    function hookGate(hook, event, matcher, dir) {
+      const key = hook.once ? hookIdentity(event, hook, matcher, dir) : void 0;
+      if (key && _hookOnceDone.has(key))
+        return { skip: true };
+      if (isBackgroundHook(hook))
+        return { background: true, key };
+      return { key, statusId: hook.statusMessage ? hookStatusBegin(hook.statusMessage) : void 0 };
+    }
+    function startBackgroundHook(hook, payload, opts) {
+      const statusId = hook.statusMessage ? hookStatusBegin(hook.statusMessage) : void 0;
+      const done = (r2) => {
+        if (statusId !== void 0)
+          hookStatusEnd(statusId);
+        if (r2.status === 0 && opts.key)
+          _hookOnceDone.add(opts.key);
+        const out = (r2.stdout ?? "").toString().trim();
+        if (hook.asyncRewake && r2.status === 2) {
+          const text = (r2.stderr ?? "").toString().trim() || out;
+          _hookDeliveries.push({ kind: "wake", text: text || "Hook asked the session to wake (exit 2).", source: opts.eventLabel });
+          try {
+            _hookWakeListener?.();
+          } catch {
+          }
+          return;
+        }
+        const context = directiveContext(out);
+        if (context)
+          _hookDeliveries.push({ kind: "context", text: context, source: opts.eventLabel });
+      };
+      void runHookHandler(hook, payload, { cwd: opts.cwd, timeoutMs: opts.timeoutMs, env: opts.env, event: opts.event }).then(done, () => done({ status: null, stdout: "", stderr: "" }));
+    }
+    function directiveContext(out) {
+      if (!out.startsWith("{"))
+        return "";
+      try {
+        const j = JSON.parse(out);
+        const parts = [];
+        if (typeof j.additionalContext === "string" && j.additionalContext)
+          parts.push(j.additionalContext);
+        if (typeof j.systemMessage === "string" && j.systemMessage)
+          parts.push(j.systemMessage);
+        return parts.join("\n");
+      } catch {
+        return "";
+      }
+    }
     function spawnHook(command, opts) {
       return new Promise((resolve12) => {
         let stdout = "";
@@ -106809,7 +107030,8 @@ var require_hooks = __commonJS({
           if (settled)
             return;
           settled = true;
-          clearTimeout(timer);
+          if (timer)
+            clearTimeout(timer);
           resolve12({ status, stdout, stderr });
         };
         let child;
@@ -106819,7 +107041,7 @@ var require_hooks = __commonJS({
           resolve12({ status: null, stdout: "", stderr: "" });
           return;
         }
-        const timer = setTimeout(() => {
+        const timer = opts.timeout === null ? null : setTimeout(() => {
           try {
             child.kill("SIGTERM");
           } catch {
@@ -106828,12 +107050,16 @@ var require_hooks = __commonJS({
         }, opts.timeout);
         const cap = 16 * 1024 * 1024;
         child.stdout?.on("data", (d) => {
+          const s2 = d.toString("utf-8");
           if (stdout.length < cap)
-            stdout += d.toString("utf-8");
+            stdout += s2;
+          opts.onData?.({ stdout: s2 });
         });
         child.stderr?.on("data", (d) => {
+          const s2 = d.toString("utf-8");
           if (stderr.length < cap)
-            stderr += d.toString("utf-8");
+            stderr += s2;
+          opts.onData?.({ stderr: s2 });
         });
         child.on("error", () => done(null));
         child.on("close", (code) => done(code));
@@ -106866,13 +107092,91 @@ var require_hooks = __commonJS({
         return { status: 1, stdout: "", stderr: `hook request failed: ${err.message}` };
       }
     }
-    async function runHookHandler(hook, payload, opts) {
-      if (hook.type === "http")
-        return httpHook(hook, payload, opts.timeoutMs);
-      if (hook.type === "prompt" || hook.type === "agent") {
-        return promptHook(hook, payload, { ...opts, envCtx: opts.hookEnv });
+    async function mcpToolHook(hook, payload) {
+      const caller = _hookMcpCaller;
+      const server = String(hook.server ?? "");
+      const tool = String(hook.tool ?? "");
+      if (!caller) {
+        return { status: 1, stdout: "", stderr: `mcp_tool hook "${server}:${tool}" needs a connected MCP client` };
+      }
+      try {
+        const res = await caller(server, tool, mcpHookInput(hook.input, payload));
+        if ("error" in res)
+          return { status: 1, stdout: "", stderr: res.error };
+        const text = (res.text ?? "").trim();
+        if (!text)
+          return { status: 0, stdout: "", stderr: "" };
+        return { status: 0, stdout: text.startsWith("{") ? text : JSON.stringify({ additionalContext: text }), stderr: "" };
+      } catch (err) {
+        return { status: 1, stdout: "", stderr: `mcp_tool hook ${server}:${tool} failed: ${err.message}` };
       }
-      return spawnHook(String(hook.command ?? ""), { cwd: opts.cwd, timeout: opts.timeoutMs, input: payload, env: opts.env });
+    }
+    function mcpHookInput(input, payload) {
+      if (!input)
+        return {};
+      let root = {};
+      try {
+        const j = JSON.parse(payload);
+        if (j && typeof j === "object" && !Array.isArray(j))
+          root = j;
+      } catch {
+      }
+      const nav = (parts) => {
+        let cur = root;
+        for (const p of parts) {
+          if (cur === null || typeof cur !== "object")
+            return void 0;
+          cur = cur[p];
+        }
+        return cur;
+      };
+      const lookup = (path33) => {
+        const parts = path33.split(".").map((s2) => s2.trim()).filter(Boolean);
+        if (!parts.length)
+          return void 0;
+        const candidates = [parts];
+        if (parts[0] === "tool_input" || parts[0] === "input") {
+          const rest = parts.slice(1);
+          candidates.unshift(rest, ["input", ...rest], ["tool_input", ...rest]);
+        }
+        for (const c of candidates) {
+          const v = nav(c);
+          if (v !== void 0)
+            return v;
+        }
+        return void 0;
+      };
+      const subst = (v) => {
+        if (typeof v !== "string")
+          return v;
+        const whole = v.match(/^\$\{([^}]+)\}$/);
+        if (whole) {
+          const hit = lookup(whole[1]);
+          return hit === void 0 ? "" : hit;
+        }
+        return v.replace(/\$\{([^}]+)\}/g, (_m, p) => {
+          const hit = lookup(p);
+          if (hit === void 0)
+            return "";
+          return typeof hit === "string" ? hit : JSON.stringify(hit);
+        });
+      };
+      const out = {};
+      for (const [k, val] of Object.entries(input))
+        out[k] = subst(val);
+      return out;
+    }
+    async function runHookHandler(hook, payload, opts) {
+      return runWithHookEvents(hook, opts.event ?? "hook", (onData) => {
+        if (hook.type === "http")
+          return httpHook(hook, payload, opts.timeoutMs ?? 6e4);
+        if (hook.type === "mcp_tool")
+          return mcpToolHook(hook, payload);
+        if (hook.type === "prompt" || hook.type === "agent") {
+          return promptHook(hook, payload, { ...opts, timeoutMs: opts.timeoutMs ?? 6e4, envCtx: opts.hookEnv });
+        }
+        return spawnHook(String(hook.command ?? ""), { cwd: opts.cwd, timeout: opts.timeoutMs, input: payload, env: opts.env, onData });
+      });
     }
     var HOOK_AGENT_TOOLS = [
       {
@@ -107094,22 +107398,38 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
         input,
         ...result ? { result: { output: result.output, error: result.error } } : {}
       });
+      const eventLabel = `${phase} (${toolName})`;
+      const hookEnv = {
+        ...process.env,
+        NEXRALL_TOOL_NAME: toolName,
+        NEXRALL_TOOL_INPUT: JSON.stringify(input),
+        NEXRALL_HOOK_PHASE: phase
+      };
       for (const entry of entries) {
         if (!hookMatches(entry.matcher, toolName))
           continue;
         for (const hook of entry.hooks ?? []) {
           if (!isRunnableHook(hook))
             continue;
-          const hookTimeout = hookTimeoutMs(hook, 6e4);
+          const gate = hookGate(hook, phase, entry.matcher, workDir);
+          if (gate.skip)
+            continue;
+          if (gate.background) {
+            startBackgroundHook(hook, payload, {
+              cwd: workDir,
+              env: hookEnv,
+              eventLabel,
+              event: phase,
+              timeoutMs: hook.asyncRewake ? hookTimeoutMs(hook, 6e4) : null,
+              key: gate.key
+            });
+            continue;
+          }
           const r2 = await runHookHandler(hook, payload, {
             cwd: workDir,
-            timeoutMs: hookTimeout,
-            env: {
-              ...process.env,
-              NEXRALL_TOOL_NAME: toolName,
-              NEXRALL_TOOL_INPUT: JSON.stringify(input),
-              NEXRALL_HOOK_PHASE: phase
-            },
+            timeoutMs: hookTimeoutMs(hook, 6e4),
+            env: hookEnv,
+            event: phase,
             ...hookOpts
           });
           const out = (r2.stdout ?? "").toString().trim();
@@ -107131,17 +107451,33 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
             const err = (r2.stderr ?? "").toString().trim();
             outcome.reason = err || outcome.reason || `Blocked by ${phase} hook`;
           }
+          if (gate.statusId !== void 0)
+            hookStatusEnd(gate.statusId);
+          if (r2.status === 0 && gate.key)
+            _hookOnceDone.add(gate.key);
         }
       }
       return outcome;
     }
-    async function runSimpleHooks(defs, workDir, extraEnv, hookOpts) {
+    async function runSimpleHooks(defs, workDir, extraEnv, hookOpts, event = "hook") {
       if (!defs?.length)
         return;
+      const env4 = extraEnv ? { ...process.env, ...extraEnv } : void 0;
       for (const hook of defs) {
         if (!isRunnableHook(hook))
           continue;
-        await runHookHandler(hook, "", { cwd: workDir, timeoutMs: hookTimeoutMs(hook, 1e4), env: extraEnv ? { ...process.env, ...extraEnv } : void 0, ...hookOpts });
+        const gate = hookGate(hook, event, void 0, workDir);
+        if (gate.skip)
+          continue;
+        if (gate.background) {
+          startBackgroundHook(hook, "", { cwd: workDir, env: env4, eventLabel: event, event, timeoutMs: hook.asyncRewake ? hookTimeoutMs(hook, 1e4) : null, key: gate.key });
+          continue;
+        }
+        const r2 = await runHookHandler(hook, "", { cwd: workDir, timeoutMs: hookTimeoutMs(hook, 1e4), env: env4, event, ...hookOpts });
+        if (gate.statusId !== void 0)
+          hookStatusEnd(gate.statusId);
+        if (r2.status === 0 && gate.key)
+          _hookOnceDone.add(gate.key);
       }
     }
     function flattenHookDefs(items, matchValue) {
@@ -107158,7 +107494,7 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
       return out;
     }
     function isKnownHandlerType(t2) {
-      return t2 === "command" || t2 === "http" || t2 === "prompt" || t2 === "agent";
+      return t2 === "command" || t2 === "http" || t2 === "prompt" || t2 === "agent" || t2 === "mcp_tool";
     }
     function isRunnableHook(hook) {
       if (!isKnownHandlerType(hook.type))
@@ -107167,6 +107503,8 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
         return !!hook.command;
       if (hook.type === "http")
         return !!hook.url;
+      if (hook.type === "mcp_tool")
+        return !!hook.server && !!hook.tool;
       return !!hook.prompt;
     }
     async function runLifecycleHooks(items, event, workDir, payload, matchValue, hookOpts) {
@@ -107178,8 +107516,22 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
       for (const hook of defs) {
         if (!isRunnableHook(hook))
           continue;
+        const gate = hookGate(hook, event, matchValue, workDir);
+        if (gate.skip)
+          continue;
+        if (gate.background) {
+          startBackgroundHook(hook, input, {
+            cwd: workDir,
+            env: { ...process.env, NEXRALL_HOOK_PHASE: event },
+            eventLabel: event,
+            event,
+            timeoutMs: hook.asyncRewake ? hookTimeoutMs(hook, 6e4) : null,
+            key: gate.key
+          });
+          continue;
+        }
         const timeout = hookTimeoutMs(hook, hook.type === "agent" ? 6e4 : hook.type === "prompt" ? 3e4 : 3e4);
-        const r2 = await runHookHandler(hook, input, { cwd: workDir, timeoutMs: timeout, env: { ...process.env, NEXRALL_HOOK_PHASE: event }, ...hookOpts });
+        const r2 = await runHookHandler(hook, input, { cwd: workDir, timeoutMs: timeout, env: { ...process.env, NEXRALL_HOOK_PHASE: event }, event, ...hookOpts });
         const out = (r2.stdout ?? "").toString().trim();
         if (out.startsWith("{")) {
           try {
@@ -107212,6 +107564,10 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
           outcome.block = true;
           outcome.reason = (r2.stderr ?? "").toString().trim() || outcome.reason || `Blocked by ${event} hook`;
         }
+        if (gate.statusId !== void 0)
+          hookStatusEnd(gate.statusId);
+        if (r2.status === 0 && gate.key)
+          _hookOnceDone.add(gate.key);
       }
       return outcome;
     }
@@ -107229,6 +107585,106 @@ ${out.output}` : `Error: ${out.error}` : out.output ?? "",
       }
       return { answer: null };
     }
+    function parseElicitationAnswer(stdout) {
+      const out = stdout.trim();
+      if (!out.startsWith("{"))
+        return null;
+      try {
+        const j = JSON.parse(out);
+        const src = j.hookSpecificOutput ?? j;
+        if (src.action !== "accept" && src.action !== "decline" && src.action !== "cancel")
+          return null;
+        const content = src.content && typeof src.content === "object" && !Array.isArray(src.content) ? src.content : void 0;
+        return content ? { action: src.action, content } : { action: src.action };
+      } catch {
+        return null;
+      }
+    }
+    async function runElicitationHooks2(workDir, server, input, sessionId = "") {
+      try {
+        const items = loadHooks2(workDir).Elicitation;
+        if (!items?.length)
+          return null;
+        const defs = flattenHookDefs(items, server);
+        if (!defs.length)
+          return null;
+        const payload = JSON.stringify({ session_id: sessionId, cwd: workDir, hook_event_name: "Elicitation", mcp_server_name: server, ...input });
+        for (const hook of defs) {
+          if (!isRunnableHook(hook))
+            continue;
+          const gate = hookGate(hook, "Elicitation", server, workDir);
+          if (gate.skip)
+            continue;
+          if (gate.background) {
+            startBackgroundHook(hook, payload, { cwd: workDir, env: { ...process.env, NEXRALL_HOOK_PHASE: "Elicitation" }, eventLabel: "Elicitation", event: "Elicitation", timeoutMs: hook.asyncRewake ? hookTimeoutMs(hook, 6e4) : null, key: gate.key });
+            continue;
+          }
+          const r2 = await runHookHandler(hook, payload, { cwd: workDir, timeoutMs: hookTimeoutMs(hook, 3e4), env: { ...process.env, NEXRALL_HOOK_PHASE: "Elicitation" }, event: "Elicitation" });
+          if (gate.statusId !== void 0)
+            hookStatusEnd(gate.statusId);
+          if (r2.status === 0 && gate.key)
+            _hookOnceDone.add(gate.key);
+          if (r2.status === 2)
+            return { action: "decline" };
+          const answer = parseElicitationAnswer((r2.stdout ?? "").toString());
+          if (answer)
+            return answer;
+        }
+      } catch {
+      }
+      return null;
+    }
+    async function runElicitationResultHooks2(workDir, server, answer, meta = {}) {
+      try {
+        const items = loadHooks2(workDir).ElicitationResult;
+        if (!items?.length)
+          return answer;
+        const defs = flattenHookDefs(items, server);
+        if (!defs.length)
+          return answer;
+        let current = answer;
+        for (const hook of defs) {
+          if (!isRunnableHook(hook))
+            continue;
+          const gate = hookGate(hook, "ElicitationResult", server, workDir);
+          if (gate.skip)
+            continue;
+          const payload = JSON.stringify({
+            session_id: meta.sessionId ?? "",
+            cwd: workDir,
+            hook_event_name: "ElicitationResult",
+            mcp_server_name: server,
+            action: current.action,
+            content: current.content,
+            mode: meta.mode,
+            elicitation_id: meta.elicitationId
+          });
+          if (gate.background) {
+            startBackgroundHook(hook, payload, { cwd: workDir, env: { ...process.env, NEXRALL_HOOK_PHASE: "ElicitationResult" }, eventLabel: "ElicitationResult", event: "ElicitationResult", timeoutMs: hook.asyncRewake ? hookTimeoutMs(hook, 6e4) : null, key: gate.key });
+            continue;
+          }
+          const r2 = await runHookHandler(hook, payload, { cwd: workDir, timeoutMs: hookTimeoutMs(hook, 3e4), env: { ...process.env, NEXRALL_HOOK_PHASE: "ElicitationResult" }, event: "ElicitationResult" });
+          if (gate.statusId !== void 0)
+            hookStatusEnd(gate.statusId);
+          if (r2.status === 0 && gate.key)
+            _hookOnceDone.add(gate.key);
+          if (r2.status === 2)
+            return { action: "decline" };
+          const override = parseElicitationAnswer((r2.stdout ?? "").toString());
+          if (override) {
+            if (override.action === "accept") {
+              const content = override.content ?? (current.action === "accept" ? current.content : void 0);
+              current = content ? { action: "accept", content } : { action: "accept" };
+            } else {
+              current = { action: override.action };
+            }
+          }
+        }
+        return current;
+      } catch {
+        return answer;
+      }
+    }
     async function fireObserverHook3(workDir, event, payload, matchValue) {
       try {
         const items = loadHooks2(workDir)[event];
@@ -107923,6 +108379,11 @@ var require_iterationPolicy = __commonJS({
 \u{1F6D1} Stopped: the same tool error repeated ${exports2.REPEAT_STALL_LIMIT} rounds in a row, so the agent was looping without making progress.` + (ctx.repeatError ? ` The recurring error was:
 ${ctx.repeatError}
 ` : "\n") + `Fix that underlying cause (or grant the needed permission) and send "continue".
+`;
+        case "hook-blocked":
+          return `
+\u26D4 A PostToolBatch hook stopped the turn before the next model call` + (ctx.hookReason ? `: ${ctx.hookReason}` : ".") + `
+The reason is in the conversation, so send "continue" once the cause is handled.
 `;
         case "budget":
           return `
@@ -108523,7 +108984,10 @@ ${body}`);
       "no-balance",
       "no-team-budget",
       "team-unavailable",
-      "reported-elsewhere"
+      "reported-elsewhere",
+      // A hook stopping the batch means the sub-agent stopped short of its report, so the
+      // parent must not read the result as a finished one.
+      "hook-blocked"
     ]);
     exports2.SUBAGENT_PREAMBLE = [
       "# You are a sub-agent",
@@ -109232,8 +109696,8 @@ var require_loop = __commonJS({
   "../core/dist/agent/loop.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.resolveSubtaskTimeoutMs = exports2.canSpawnSubAgents = exports2.intersectAllowlists = exports2.noSpawnReason = exports2.resolveMaxSubagentDepth = exports2._sessionSubAgentCount = exports2.resetSessionSubAgentBudget = exports2._resetSubTaskLimiter = exports2.createLimiter = exports2.resolveMaxSubagentsPerSession = exports2.resolveMaxConcurrentSubtasks = exports2.lockPathsFor = exports2.resolveMaxIterations = exports2.stopReasonNotice = exports2.executeAgentMemoryWrite = exports2.AGENT_MEMORY_TOOL_SCHEMA = exports2.AGENT_MEMORY_TOOL = exports2._stallLimits = exports2.errorRoundSignature = exports2._emptyTurnRetry = exports2.shouldRetryEmptyTurn = exports2.emptyTurnBackoffMs = exports2.compactMessagesForResume = exports2.estimateTokensRough = exports2.makeCachedSummarizer = exports2.pruneOldToolResults = exports2.ledgerSummary = exports2.ledgerRecord = exports2.createLedger = exports2.transcriptOf = exports2.persistRuntimeContext = exports2.findSafeCutIndex = exports2.VERIFY_CMD_RE = exports2.allowsTestOnlyWrite = exports2.WRITE_TOOL_NAMES = exports2.estimateBodyBytes = exports2.pruneReclaimFloor = exports2.compactionThresholds = exports2.compactionLimits = exports2.contextWindowFor = exports2.fireObserverHook = exports2.fireManualPreCompactHook = exports2.fireManualPostCompactHook = exports2.fireNotificationHooks = exports2.runPermissionRequestHooks = exports2.runLifecycleHooks = exports2.classifyStopFailure = exports2.parsePromptHookReply = exports2.loadHooks = exports2.bashNeedsRepoLock = void 0;
-    exports2.lastToolResults = exports2.summariseSubTaskProgress = exports2.capSubTaskText = exports2.extractSubTaskText = exports2.ToolNotAllowedError = void 0;
+    exports2.resolveMaxIterations = exports2.stopReasonNotice = exports2.executeAgentMemoryWrite = exports2.AGENT_MEMORY_TOOL_SCHEMA = exports2.AGENT_MEMORY_TOOL = exports2._stallLimits = exports2.errorRoundSignature = exports2._emptyTurnRetry = exports2.shouldRetryEmptyTurn = exports2.emptyTurnBackoffMs = exports2.compactMessagesForResume = exports2.estimateTokensRough = exports2.makeCachedSummarizer = exports2.pruneOldToolResults = exports2.ledgerSummary = exports2.ledgerRecord = exports2.createLedger = exports2.transcriptOf = exports2.persistRuntimeContext = exports2.findSafeCutIndex = exports2.VERIFY_CMD_RE = exports2.allowsTestOnlyWrite = exports2.WRITE_TOOL_NAMES = exports2.estimateBodyBytes = exports2.pruneReclaimFloor = exports2.compactionThresholds = exports2.compactionLimits = exports2.contextWindowFor = exports2.runElicitationResultHooks = exports2.runElicitationHooks = exports2.hasHookEventListener = exports2.setHookEventListener = exports2.resetHookOnceState = exports2.setHookMcpCaller = exports2.setHookStatusListener = exports2.setHookWakeListener = exports2.formatHookDeliveries = exports2.hasPendingHookWake = exports2.takeHookWakes = exports2.drainHookDeliveries = exports2.fireObserverHook = exports2.fireManualPreCompactHook = exports2.fireManualPostCompactHook = exports2.fireNotificationHooks = exports2.runPermissionRequestHooks = exports2.runLifecycleHooks = exports2.classifyStopFailure = exports2.parsePromptHookReply = exports2.loadHooks = exports2.bashNeedsRepoLock = void 0;
+    exports2.lastToolResults = exports2.summariseSubTaskProgress = exports2.capSubTaskText = exports2.extractSubTaskText = exports2.ToolNotAllowedError = exports2.resolveSubtaskTimeoutMs = exports2.canSpawnSubAgents = exports2.intersectAllowlists = exports2.noSpawnReason = exports2.resolveMaxSubagentDepth = exports2._sessionSubAgentCount = exports2.resetSessionSubAgentBudget = exports2._resetSubTaskLimiter = exports2.createLimiter = exports2.resolveMaxSubagentsPerSession = exports2.resolveMaxConcurrentSubtasks = exports2.lockPathsFor = void 0;
     exports2.dispatchSubAgent = dispatchSubAgent;
     exports2.dispatchBackgroundSubAgent = dispatchBackgroundSubAgent;
     exports2.runAgentLoop = runAgentLoop2;
@@ -109244,6 +109708,7 @@ var require_loop = __commonJS({
     var types_1 = require_types();
     var client_1 = require_client();
     var executor_1 = require_executor();
+    var sharedTasks_1 = require_sharedTasks();
     var agentTypes_1 = require_agentTypes();
     var skills_1 = require_skills();
     var rules_1 = require_rules();
@@ -109291,6 +109756,42 @@ var require_loop = __commonJS({
     Object.defineProperty(exports2, "fireObserverHook", { enumerable: true, get: function() {
       return hooks_2.fireObserverHook;
     } });
+    Object.defineProperty(exports2, "drainHookDeliveries", { enumerable: true, get: function() {
+      return hooks_2.drainHookDeliveries;
+    } });
+    Object.defineProperty(exports2, "takeHookWakes", { enumerable: true, get: function() {
+      return hooks_2.takeHookWakes;
+    } });
+    Object.defineProperty(exports2, "hasPendingHookWake", { enumerable: true, get: function() {
+      return hooks_2.hasPendingHookWake;
+    } });
+    Object.defineProperty(exports2, "formatHookDeliveries", { enumerable: true, get: function() {
+      return hooks_2.formatHookDeliveries;
+    } });
+    Object.defineProperty(exports2, "setHookWakeListener", { enumerable: true, get: function() {
+      return hooks_2.setHookWakeListener;
+    } });
+    Object.defineProperty(exports2, "setHookStatusListener", { enumerable: true, get: function() {
+      return hooks_2.setHookStatusListener;
+    } });
+    Object.defineProperty(exports2, "setHookMcpCaller", { enumerable: true, get: function() {
+      return hooks_2.setHookMcpCaller;
+    } });
+    Object.defineProperty(exports2, "resetHookOnceState", { enumerable: true, get: function() {
+      return hooks_2.resetHookOnceState;
+    } });
+    Object.defineProperty(exports2, "setHookEventListener", { enumerable: true, get: function() {
+      return hooks_2.setHookEventListener;
+    } });
+    Object.defineProperty(exports2, "hasHookEventListener", { enumerable: true, get: function() {
+      return hooks_2.hasHookEventListener;
+    } });
+    Object.defineProperty(exports2, "runElicitationHooks", { enumerable: true, get: function() {
+      return hooks_2.runElicitationHooks;
+    } });
+    Object.defineProperty(exports2, "runElicitationResultHooks", { enumerable: true, get: function() {
+      return hooks_2.runElicitationResultHooks;
+    } });
     var compaction_1 = require_compaction();
     var compaction_2 = require_compaction();
     Object.defineProperty(exports2, "contextWindowFor", { enumerable: true, get: function() {
@@ -109465,6 +109966,27 @@ var require_loop = __commonJS({
           subAgentBudget_1._inFlightByDepth.delete(childDepth);
       }
     }
+    async function taskHookVeto(entries, event, input, options, extra = {}) {
+      if (!entries?.length)
+        return null;
+      const taskId = typeof input.task_id === "string" ? input.task_id : "";
+      const task = extra.task_subject ? null : (0, sharedTasks_1.listSharedTasks)(options.workDir).find((t2) => t2.id === taskId);
+      const payload = {
+        session_id: options.sessionId ?? "",
+        ...taskId ? { task_id: taskId } : {},
+        ...task ? { task_subject: task.content, task_description: task.content } : {},
+        ...extra,
+        tool_input: input
+      };
+      try {
+        const outcome = await (0, hooks_1.runLifecycleHooks)(entries, event, options.workDir, payload, void 0, (0, hooks_1.hookRunOptsFor)(options));
+        if (!outcome.block)
+          return null;
+        return `Refused by ${event} hook${outcome.reason ? `: ${outcome.reason}` : ""}`;
+      } catch {
+        return null;
+      }
+    }
     function dispatchBackgroundSubAgent(input, options, agentTypes, hub) {
       const overBudget = (0, subAgentBudget_1.claimSessionSubAgentSlot)(options.workDir, options.onNotice ?? options.onText, options.sessionId);
       if (overBudget)
@@ -109668,6 +110190,7 @@ ${ctx}
       let repeatedErrorRounds = 0;
       let lastErrorSignature = "";
       let stalledRepeatError = null;
+      let hookBlockedReason = null;
       let budget = maxIterations;
       let iteration = 0;
       let emptyTurnRetries = 0;
@@ -109851,7 +110374,8 @@ ${ctx}
             const queued = options.takePendingInput?.() ?? [];
             const peerMsgs = options.drainPeerMessages?.() ?? [];
             const bgDone = drainBackgroundNotifications();
-            if (queued.length || peerMsgs.length || bgDone.length) {
+            const hookMsgs = (0, hooks_1.drainHookDeliveries)();
+            if (queued.length || peerMsgs.length || bgDone.length || hookMsgs.length) {
               const parts = [];
               if (queued.length) {
                 parts.push(queued.join("\n\n"));
@@ -109863,6 +110387,8 @@ ${ctx}
               }
               if (bgDone.length)
                 parts.push((0, backgroundAgents_1.formatBackgroundNotifications)(bgDone));
+              if (hookMsgs.length)
+                parts.push((0, hooks_1.formatHookDeliveries)(hookMsgs));
               messages.push({ role: "user", content: [{ type: "text", text: parts.join("\n\n") }] });
               continue;
             }
@@ -109895,7 +110421,8 @@ ${ctx}
             const queued = options.takePendingInput?.() ?? [];
             const peerMsgs = options.drainPeerMessages?.() ?? [];
             const bgDone = drainBackgroundNotifications();
-            if (queued.length || peerMsgs.length || bgDone.length) {
+            const hookMsgs = (0, hooks_1.drainHookDeliveries)();
+            if (queued.length || peerMsgs.length || bgDone.length || hookMsgs.length) {
               const parts = [];
               if (queued.length) {
                 parts.push(queued.join("\n\n"));
@@ -109907,6 +110434,8 @@ ${ctx}
               }
               if (bgDone.length)
                 parts.push((0, backgroundAgents_1.formatBackgroundNotifications)(bgDone));
+              if (hookMsgs.length)
+                parts.push((0, hooks_1.formatHookDeliveries)(hookMsgs));
               messages.push({ role: "user", content: [{ type: "text", text: parts.join("\n\n") }] });
               continue;
             }
@@ -110065,7 +110594,16 @@ ${ctx}
               if (pre.block) {
                 result = { error: `Blocked by PreToolUse hook: ${pre.reason}` };
               } else {
+                const taskIdsBefore = name === "create_shared_task" ? new Set((0, sharedTasks_1.listSharedTasks)(options.workDir).map((t2) => t2.id)) : null;
                 try {
+                  if (name === "update_shared_task_status" && String(input.status ?? "") === "completed") {
+                    const veto = await taskHookVeto(hooks.TaskCompleted, "TaskCompleted", input, options);
+                    if (veto) {
+                      result = { error: veto };
+                      options.onToolResult(name, result, void 0, toolMeta);
+                      return { block: { ...block, id }, result };
+                    }
+                  }
                   if (name === iterationPolicy_1.AGENT_MEMORY_TOOL) {
                     result = await (0, iterationPolicy_1.executeAgentMemoryWrite)(input, options._agentMemory, options.workDir);
                     options.onToolResult(name, result, void 0, toolMeta);
@@ -110103,6 +110641,21 @@ ${ctx}
                 } catch (err) {
                   result = { error: `Tool execution failed: ${err.message}` };
                 }
+                if (name === "create_shared_task" && result.error === void 0 && taskIdsBefore) {
+                  const created = (0, sharedTasks_1.listSharedTasks)(options.workDir).filter((t2) => !taskIdsBefore.has(t2.id) && typeof input.content === "string" && t2.content === input.content);
+                  const task = created[created.length - 1];
+                  if (task) {
+                    const veto = await taskHookVeto(hooks.TaskCreated, "TaskCreated", input, options, {
+                      task_id: task.id,
+                      task_subject: task.content,
+                      task_description: task.content
+                    });
+                    if (veto) {
+                      (0, sharedTasks_1.deleteSharedTask)(options.workDir, task.id);
+                      result = { error: veto };
+                    }
+                  }
+                }
                 if (name === "memory_write" && result.error === void 0) {
                   const scope = input.scope === "global" ? "global" : "project";
                   void (0, compaction_1.maybeCompactMemory)(scope, options);
@@ -110194,6 +110747,32 @@ ${result.output}` : `Error: ${result.error}` : result.output ?? "",
           if (bgFinished.length) {
             toolResultContent.push({ type: "text", text: (0, backgroundAgents_1.formatBackgroundNotifications)(bgFinished) });
           }
+          const hookDeliveries = (0, hooks_1.drainHookDeliveries)();
+          if (hookDeliveries.length) {
+            toolResultContent.push({ type: "text", text: (0, hooks_1.formatHookDeliveries)(hookDeliveries) });
+          }
+          let postBatchStop = null;
+          if (hooks.PostToolBatch?.length) {
+            const batch = await (0, hooks_1.runLifecycleHooks)(hooks.PostToolBatch, "PostToolBatch", options.workDir, {
+              tool_calls: toolResults.map(({ block: b, result: r2 }) => ({
+                tool_name: b.name,
+                tool_input: b.input,
+                tool_use_id: b.id,
+                tool_response: r2.error !== void 0 ? r2.output ? `Error: ${r2.error}
+
+${r2.output}` : `Error: ${r2.error}` : r2.output ?? ""
+              }))
+            }, void 0, (0, hooks_1.hookRunOptsFor)(options));
+            if (batch.context)
+              toolResultContent.push({ type: "text", text: batch.context });
+            if (batch.block) {
+              postBatchStop = batch.reason?.trim() || "a PostToolBatch hook stopped the turn";
+              toolResultContent.push({
+                type: "text",
+                text: `A PostToolBatch hook stopped the turn before the next model call: ${postBatchStop}`
+              });
+            }
+          }
           const toolResultMessage = {
             role: "user",
             content: toolResultContent
@@ -110201,6 +110780,11 @@ ${result.output}` : `Error: ${result.error}` : result.output ?? "",
           messages.push(toolResultMessage);
           completedRounds++;
           options.onProgress?.(messages);
+          if (postBatchStop) {
+            stopReason = "hook-blocked";
+            hookBlockedReason = postBatchStop;
+            break;
+          }
           const errored = toolResults.filter(({ result }) => result.error !== void 0);
           const allErrored = toolResults.length > 0 && errored.length === toolResults.length;
           consecutiveErrorRounds = allErrored ? consecutiveErrorRounds + 1 : 0;
@@ -110234,7 +110818,7 @@ ${result.output}` : `Error: ${result.error}` : result.output ?? "",
         const apiFailure = (0, hooks_1.apiFailureForStopReason)(stopReason);
         if (apiFailure)
           await fireStopFailure(apiFailure);
-        const notice = (0, iterationPolicy_1.stopReasonNotice)(stopReason, { budget, repeatError: stalledRepeatError });
+        const notice = (0, iterationPolicy_1.stopReasonNotice)(stopReason, { budget, repeatError: stalledRepeatError, hookReason: hookBlockedReason });
         if (options._onStopReason)
           options._onStopReason(stopReason, notice || null);
         else if (notice)
@@ -110525,9 +111109,12 @@ var require_client2 = __commonJS({
   "../core/dist/mcp/client.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.McpClient = void 0;
+    exports2.McpClient = exports2.MCP_ELICITATION_CAPABILITY = void 0;
     exports2.flattenResourceContents = flattenResourceContents;
     exports2.flattenPromptMessages = flattenPromptMessages;
+    exports2.elicitationCapability = elicitationCapability;
+    exports2.normalizeElicitationRequest = normalizeElicitationRequest;
+    exports2.serverRequestReply = serverRequestReply;
     var child_process_1 = __require("child_process");
     function flattenResourceContents(result, maxChars = 1e5) {
       const contents = result?.contents ?? [];
@@ -110567,6 +111154,39 @@ var require_client2 = __commonJS({
       return text.length > maxChars ? text.slice(0, maxChars) + `
 \u2026 [truncated, ${text.length - maxChars} more characters]` : text;
     }
+    exports2.MCP_ELICITATION_CAPABILITY = { elicitation: { form: {}, url: {} } };
+    function elicitationCapability(bare) {
+      return bare ? { elicitation: {} } : { elicitation: { form: {}, url: {} } };
+    }
+    function normalizeElicitationRequest(params) {
+      const p = params ?? {};
+      const url = typeof p.url === "string" ? p.url : void 0;
+      const schema = p.requestedSchema ?? p.schema;
+      return {
+        message: typeof p.message === "string" && p.message.trim() ? p.message : "An MCP server is asking for input.",
+        mode: p.mode === "url" || !p.mode && url ? "url" : "form",
+        requestedSchema: schema && typeof schema === "object" ? schema : void 0,
+        url,
+        elicitationId: typeof p.elicitationId === "string" ? p.elicitationId : typeof p.elicitation_id === "string" ? p.elicitation_id : void 0
+      };
+    }
+    async function serverRequestReply(server, handler, method, params) {
+      if (method === "elicitation/create") {
+        let resp = { action: "decline" };
+        const request = normalizeElicitationRequest(params);
+        try {
+          if (handler)
+            resp = await handler(server, request);
+        } catch {
+          resp = { action: "decline" };
+        }
+        const result = { action: resp.action };
+        if (resp.action === "accept" && resp.content)
+          result.content = resp.content;
+        return { result };
+      }
+      return { error: { code: -32601, message: `Method not found: ${method}` } };
+    }
     var McpClient = class {
       constructor(name, config) {
         this.config = config;
@@ -110575,11 +111195,15 @@ var require_client2 = __commonJS({
         this._pending = /* @__PURE__ */ new Map();
         this._buf = "";
         this._tools = [];
+        this._elicitationHandler = null;
         this.name = name;
       }
       get tools() {
         return this._tools;
       }
+      setElicitationHandler(handler) {
+        this._elicitationHandler = handler;
+      }
       async connect() {
         if (!this.config.command)
           throw new Error(`MCP server "${this.name}" has no command (stdio transport requires one).`);
@@ -110607,7 +111231,7 @@ var require_client2 = __commonJS({
         });
         await this._request("initialize", {
           protocolVersion: "2024-11-05",
-          capabilities: {},
+          capabilities: elicitationCapability(this.config.bareElicitationCapability),
           clientInfo: { name: "nexrall-code", version: "1.0" }
         });
         this._notify("notifications/initialized");
@@ -110688,6 +111312,10 @@ var require_client2 = __commonJS({
         } catch {
           return;
         }
+        if (typeof msg.method === "string" && msg.id != null) {
+          void this._handleServerRequest(msg.id, msg.method, msg.params);
+          return;
+        }
         if (msg.id == null)
           return;
         const pending = this._pending.get(msg.id);
@@ -110700,6 +111328,11 @@ var require_client2 = __commonJS({
           pending.resolve(msg.result);
         }
       }
+      /** Answer a server→client request. Errors are swallowed — the server must get SOME reply. */
+      async _handleServerRequest(id, method, params) {
+        const reply = await serverRequestReply(this.name, this._elicitationHandler, method, params);
+        this._send({ jsonrpc: "2.0", id, ...reply });
+      }
       _rejectAll(err) {
         for (const { reject } of this._pending.values())
           reject(err);
@@ -110738,17 +111371,21 @@ var require_httpClient = __commonJS({
         this._nextId = 1;
         this._tools = [];
         this._sessionId = null;
+        this._elicitationHandler = null;
         this.name = name;
       }
       get tools() {
         return this._tools;
       }
+      setElicitationHandler(handler) {
+        this._elicitationHandler = handler;
+      }
       async connect() {
         if (!this.config.url)
           throw new Error(`MCP server "${this.name}" has no url (http/sse transport requires one).`);
         await this._rpc("initialize", {
           protocolVersion: "2024-11-05",
-          capabilities: {},
+          capabilities: (0, client_1.elicitationCapability)(this.config.bareElicitationCapability),
           clientInfo: { name: "nexrall-code", version: "1.0" }
         });
         await this._notify("notifications/initialized");
@@ -110843,29 +111480,106 @@ var require_httpClient = __commonJS({
           throw new Error(`MCP HTTP ${resp.status} ${resp.statusText}${body ? `: ${body.slice(0, 200)}` : ""}`);
         }
         const contentType = resp.headers.get("content-type") ?? "";
+        if (contentType.includes("text/event-stream"))
+          return await this._consumeSse(resp, id);
         const text = await resp.text();
         if (!text.trim())
           return null;
-        const consume = (msg) => {
+        const msg = JSON.parse(text);
+        if (msg.error)
+          throw new Error(`MCP error ${msg.error.code}: ${msg.error.message}`);
+        return msg.result ?? null;
+      }
+      /**
+       * Read an SSE reply frame by frame. A server request (elicitation) is answered on the
+       * spot: the server WAITS for that answer before it sends our own result, so buffering
+       * the whole stream first would deadlock until the request timeout. As soon as our id
+       * arrives we stop and cancel the body (the stream may stay open for the session).
+       * Falls back to a buffered parse when the runtime hands us no readable body.
+       */
+      async _consumeSse(resp, id) {
+        const state = { have: false };
+        const handle2 = (msg) => {
+          if (typeof msg.method === "string" && msg.id != null) {
+            this._answerServerRequest(msg.id, msg.method, msg.params);
+            return;
+          }
+          if (msg.id !== id)
+            return;
           if (msg.error)
-            throw new Error(`MCP error ${msg.error.code}: ${msg.error.message}`);
-          return msg.result ?? null;
+            state.failure = new Error(`MCP error ${msg.error.code}: ${msg.error.message}`);
+          else {
+            state.result = msg.result ?? null;
+            state.have = true;
+          }
         };
-        if (contentType.includes("text/event-stream")) {
-          for (const frame of text.split(/\r?\n\r?\n/)) {
-            const dataLines = frame.split(/\r?\n/).filter((l2) => l2.startsWith("data:")).map((l2) => l2.slice(5).trim());
+        const body = resp.body;
+        if (body && typeof body[Symbol.asyncIterator] === "function") {
+          let buf = "";
+          const dataLines = [];
+          const flush = () => {
             if (!dataLines.length)
+              return;
+            const data = dataLines.join("\n");
+            dataLines.length = 0;
+            try {
+              handle2(JSON.parse(data));
+            } catch {
+            }
+          };
+          try {
+            for await (const chunk of body) {
+              buf += Buffer.from(chunk).toString("utf-8");
+              let nl;
+              while ((nl = buf.indexOf("\n")) !== -1) {
+                let line = buf.slice(0, nl);
+                buf = buf.slice(nl + 1);
+                if (line.endsWith("\r"))
+                  line = line.slice(0, -1);
+                if (!line) {
+                  flush();
+                  if (state.have || state.failure)
+                    break;
+                  continue;
+                }
+                if (line.startsWith("data:"))
+                  dataLines.push(line.slice(5).replace(/^ /, ""));
+              }
+              if (state.have || state.failure)
+                break;
+            }
+            flush();
+          } catch {
+          }
+          try {
+            await body.cancel?.();
+          } catch {
+          }
+        } else {
+          const text = await resp.text();
+          for (const frame of text.split(/\r?\n\r?\n/)) {
+            const data = frame.split(/\r?\n/).filter((l2) => l2.startsWith("data:")).map((l2) => l2.slice(5).trim()).join("\n");
+            if (!data)
               continue;
             try {
-              const msg = JSON.parse(dataLines.join("\n"));
-              if (msg.id === id)
-                return consume(msg);
+              handle2(JSON.parse(data));
             } catch {
             }
           }
-          throw new Error("No matching JSON-RPC response found in SSE stream");
         }
-        return consume(JSON.parse(text));
+        if (state.failure)
+          throw state.failure;
+        if (!state.have)
+          throw new Error("No matching JSON-RPC response found in SSE stream");
+        return state.result;
+      }
+      /** Reply to a server→client request. Fire-and-forget: the in-flight reader must not block. */
+      _answerServerRequest(id, method, params) {
+        void (async () => {
+          const reply = await (0, client_1.serverRequestReply)(this.name, this._elicitationHandler, method, params);
+          await this._post({ jsonrpc: "2.0", id, ...reply });
+        })().catch(() => {
+        });
       }
     };
     exports2.McpHttpClient = McpHttpClient;
@@ -110897,18 +111611,22 @@ var require_sseClient = __commonJS({
         this._closed = false;
         this._pending = /* @__PURE__ */ new Map();
         this._endpointWaiter = null;
+        this._elicitationHandler = null;
         this.name = name;
       }
       get tools() {
         return this._tools;
       }
+      setElicitationHandler(handler) {
+        this._elicitationHandler = handler;
+      }
       async connect() {
         if (!this.config.url)
           throw new Error(`MCP server "${this.name}" has no url (sse transport requires one).`);
         await this._openStream();
         await this._rpc("initialize", {
           protocolVersion: "2024-11-05",
-          capabilities: {},
+          capabilities: (0, client_1.elicitationCapability)(this.config.bareElicitationCapability),
           clientInfo: { name: "nexrall-code", version: "1.0" }
         });
         await this._notify("notifications/initialized");
@@ -111061,6 +111779,17 @@ var require_sseClient = __commonJS({
         } catch {
           return;
         }
+        if (typeof msg.method === "string" && msg.id != null) {
+          const method = msg.method;
+          const params = msg.params;
+          const reqId = msg.id;
+          void (async () => {
+            const reply = await (0, client_1.serverRequestReply)(this.name, this._elicitationHandler, method, params);
+            await this._postMessage({ jsonrpc: "2.0", id: reqId, ...reply });
+          })().catch(() => {
+          });
+          return;
+        }
         if (typeof msg.id === "number" && this._pending.has(msg.id)) {
           const { resolve: resolve12, reject, timer } = this._pending.get(msg.id);
           clearTimeout(timer);
@@ -111069,6 +111798,7 @@ var require_sseClient = __commonJS({
             reject(new Error(`MCP error ${msg.error.code}: ${msg.error.message}`));
           else
             resolve12(msg.result ?? null);
+          return;
         }
       }
       _rpc(method, params) {
@@ -111290,6 +112020,17 @@ var require_manager = __commonJS({
         this._needsAuth = /* @__PURE__ */ new Map();
         this._disabled = /* @__PURE__ */ new Set();
         this.stats = new stats_1.ToolStats();
+        this._elicitationHandler = null;
+      }
+      /**
+       * Route every server's elicitation (`elicitation/create`) through this handler —
+       * including servers that connect later, which is why it is also re-applied in
+       * connectAll/enable. Pass null to restore auto-decline.
+       */
+      setElicitationHandler(handler) {
+        this._elicitationHandler = handler;
+        for (const client of this._clients.values())
+          client.setElicitationHandler(handler);
       }
       /** Pick the transport for a server config: stdio (command), Streamable HTTP, or legacy SSE. */
       static makeClient(name, cfg) {
@@ -111335,6 +112076,7 @@ var require_manager = __commonJS({
             return;
           }
           const client = _McpManager.makeClient(name, serverCfg);
+          client.setElicitationHandler(this._elicitationHandler);
           try {
             await client.connect();
             this._clients.set(name, client);
@@ -111594,6 +112336,7 @@ var require_manager = __commonJS({
           return `no server named "${name}" is configured`;
         this._dropClient(name);
         const client = _McpManager.makeClient(name, cfg);
+        client.setElicitationHandler(this._elicitationHandler);
         try {
           await client.connect();
         } catch (err) {
@@ -152779,6 +153522,14 @@ function checkPartialMessages(f3) {
   }
   return null;
 }
+function checkHookEvents(f3) {
+  if (!f3.includeHookEvents)
+    return null;
+  if (f3.outputFormat !== "stream-json") {
+    return "--include-hook-events needs --output-format stream-json (hook lifecycle events are part of the JSON stream).";
+  }
+  return null;
+}
 function checkReplayUserMessages(f3) {
   if (!f3.replay)
     return null;
@@ -152809,6 +153560,29 @@ function initEventPayload(i2) {
 function userReplayPayload(text) {
   return { type: "user", message: { role: "user", content: [{ type: "text", text }] } };
 }
+function hookEventPayload(e2) {
+  const base = {
+    type: "system",
+    subtype: `hook_${e2.kind}`,
+    hook_id: e2.hookId,
+    hook_name: e2.hookName,
+    hook_event: e2.hookEvent,
+    uuid: e2.uuid,
+    session_id: e2.sessionId
+  };
+  if (e2.kind === "started")
+    return base;
+  if (e2.kind === "progress")
+    return { ...base, stdout: e2.stdout ?? "", stderr: e2.stderr ?? "", output: e2.output ?? "" };
+  return {
+    ...base,
+    output: e2.output ?? "",
+    stdout: e2.stdout ?? "",
+    stderr: e2.stderr ?? "",
+    ...e2.exitCode !== void 0 ? { exit_code: e2.exitCode } : {},
+    outcome: e2.outcome ?? "error"
+  };
+}
 function parseAgentsArg(raw, cwd2) {
   if (raw === void 0)
     return { ok: true, value: [] };
@@ -155286,7 +156060,7 @@ import * as os18 from "os";
 import * as crypto7 from "crypto";
 import { createRequire } from "module";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { execSync, execFileSync as execFileSync5 } from "child_process";
+import { execFile as execFile2, execFileSync as execFileSync5 } from "child_process";
 
 // src/permissions/handler.ts
 import * as readline2 from "readline";
@@ -156268,6 +157042,117 @@ function currentAudit() {
 
 // src/commands/chat.ts
 var import_code_core19 = __toESM(require_dist3(), 1);
+
+// src/ui/mcpElicit.ts
+function fieldsOf(schema) {
+  const props = schema?.properties ?? {};
+  const required = new Set(Array.isArray(schema?.required) ? schema.required.map(String) : []);
+  return Object.entries(props).map(([name, p]) => ({
+    name,
+    title: typeof p.title === "string" ? p.title : name,
+    description: typeof p.description === "string" ? p.description : void 0,
+    type: typeof p.type === "string" ? p.type : "string",
+    enumValues: Array.isArray(p.enum) ? p.enum : void 0,
+    required: required.has(name)
+  }));
+}
+function coerce(raw, type) {
+  if (type === "number" || type === "integer") {
+    const n = type === "integer" ? parseInt(raw, 10) : Number(raw);
+    return Number.isFinite(n) ? { ok: true, value: n } : { ok: false };
+  }
+  return { ok: true, value: raw };
+}
+async function elicitForm(server, req, io) {
+  const fields = fieldsOf(req.requestedSchema);
+  io.print(paint.dim(`  ${server} asks: ${truncateCells(req.message, 300)}`));
+  if (!fields.length) {
+    const idx = await io.choose({
+      title: `${server} is asking for your confirmation`,
+      // The 'n'-keyed option is what Esc / Ctrl+C resolve to (choiceBox.denyIndex).
+      options: [{ key: "y", label: "Continue" }, { key: "n", label: "Decline" }, { key: "c", label: "Cancel" }]
+    });
+    if (idx < 0)
+      return { action: "decline" };
+    return idx === 0 ? { action: "accept", content: {} } : { action: idx === 1 ? "decline" : "cancel" };
+  }
+  const content = {};
+  for (const f3 of fields) {
+    const label = f3.title + (f3.required ? "" : " (optional)");
+    if (f3.enumValues?.length) {
+      const options = f3.enumValues.map((v, i2) => ({ key: String(i2 + 1), label: String(v) }));
+      options.push({ key: "n", label: "\u2014 decline \u2014" }, { key: "c", label: "\u2014 cancel \u2014" });
+      const idx = await io.choose({ title: `${server}: ${label}`, detail: f3.description, options });
+      if (idx < 0)
+        return { action: "decline" };
+      if (idx === f3.enumValues.length)
+        return { action: "decline" };
+      if (idx === f3.enumValues.length + 1)
+        return { action: "cancel" };
+      content[f3.name] = f3.enumValues[idx];
+      continue;
+    }
+    if (f3.type === "boolean") {
+      const idx = await io.choose({
+        title: `${server}: ${label}`,
+        detail: f3.description,
+        // Esc means "leave the form", NOT "answer false" — a silent wrong answer is worse
+        // than a dismissal, so 'n' is the decline sentinel here too.
+        options: [
+          { key: "y", label: "Yes" },
+          { key: "f", label: "No" },
+          { key: "n", label: "\u2014 decline \u2014" },
+          { key: "c", label: "\u2014 cancel \u2014" }
+        ]
+      });
+      if (idx < 0 || idx === 2)
+        return { action: "decline" };
+      if (idx === 3)
+        return { action: "cancel" };
+      content[f3.name] = idx === 0;
+      continue;
+    }
+    const raw = (await io.line(`  ${server}: ${label}${f3.description ? ` \u2014 ${f3.description}` : ""}: `)).trim();
+    if (!raw) {
+      if (f3.required)
+        return { action: "decline" };
+      continue;
+    }
+    const c = coerce(raw, f3.type);
+    if (!c.ok) {
+      io.print(paint.yellow(`  ${server}: "${raw}" is not a ${f3.type} \u2014 declining.`));
+      return { action: "decline" };
+    }
+    content[f3.name] = c.value;
+  }
+  return { action: "accept", content };
+}
+async function elicitUrl(server, req, io) {
+  if (!req.url)
+    return { action: "decline" };
+  io.print(paint.dim(`  ${server} asks: ${truncateCells(req.message, 300)}`));
+  const idx = await io.choose({
+    title: `${server} needs you to open a page`,
+    detail: truncateCells(req.url, 120),
+    options: [{ key: "o", label: "Open in browser" }, { key: "n", label: "Decline" }, { key: "c", label: "Cancel" }]
+  });
+  if (idx < 0)
+    return { action: "decline" };
+  if (idx === 0) {
+    io.openUrl(req.url);
+    return { action: "accept" };
+  }
+  return { action: idx === 1 ? "decline" : "cancel" };
+}
+async function elicit(server, req, io) {
+  try {
+    return req.mode === "url" ? await elicitUrl(server, req, io) : await elicitForm(server, req, io);
+  } catch {
+    return { action: "decline" };
+  }
+}
+
+// src/commands/chat.ts
 var import_code_core20 = __toESM(require_dist3(), 1);
 
 // src/debugLog.ts
@@ -172348,12 +173233,16 @@ function resolveModelLabel(alias) {
   const id = normaliseModelId(alias);
   return (0, import_code_core18.liveLabelFor)(id, MODEL_LABELS[id] ?? id);
 }
-function tryExec(cmd, cwd2) {
-  try {
-    return execSync(cmd, { cwd: cwd2, encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }).trim() || void 0;
-  } catch {
-    return void 0;
-  }
+async function tryExecAsync(file, args, cwd2) {
+  return new Promise((resolve12) => {
+    try {
+      execFile2(file, args, { cwd: cwd2, encoding: "utf-8" }, (err, stdout) => {
+        resolve12(err ? void 0 : String(stdout).trim() || void 0);
+      });
+    } catch {
+      resolve12(void 0);
+    }
+  });
 }
 var BILLING_URL = "https://app.nexrall.com/?settings=billing";
 function hyperlink(label, url) {
@@ -172381,28 +173270,29 @@ function currentUserLabel() {
     return "there";
   }
 }
-function collectEnv(workDir) {
+async function collectEnv(workDir) {
   return {
     cwd: workDir,
     platform: `${os18.platform()} ${os18.release()}`,
     shell: process.env.SHELL ?? process.env.ComSpec ?? "unknown",
     date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
-    ...collectGitEnv(workDir)
+    ...await collectGitEnv(workDir)
   };
 }
-function collectGitEnv(workDir) {
-  return {
-    gitBranch: tryExec("git branch --show-current", workDir),
-    gitStatus: tryExec("git status --short", workDir),
-    gitDiff: tryExec("git diff --stat HEAD", workDir),
-    recentCommits: tryExec("git log --oneline -5", workDir)
-  };
+async function collectGitEnv(workDir) {
+  const [gitBranch2, gitStatus, gitDiff, recentCommits] = await Promise.all([
+    tryExecAsync("git", ["branch", "--show-current"], workDir),
+    tryExecAsync("git", ["status", "--short"], workDir),
+    tryExecAsync("git", ["diff", "--stat", "HEAD"], workDir),
+    tryExecAsync("git", ["log", "--oneline", "-5"], workDir)
+  ]);
+  return { gitBranch: gitBranch2, gitStatus, gitDiff, recentCommits };
 }
-function refreshEnvForTurn(env4, workDir) {
+async function refreshEnvForTurn(env4, workDir) {
   return {
     ...env4,
     date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
-    ...collectGitEnv(workDir)
+    ...await collectGitEnv(workDir)
   };
 }
 var noDiscovery = false;
@@ -172586,6 +173476,10 @@ var Spinner = class {
   verbIdx = 0;
   thinkTokens = 0;
   thinkText = "";
+  // A running hook's `statusMessage` (Claude Code). While set it REPLACES the label —
+  // the whole point is telling the user which hook is producing the wait — and the
+  // normal label returns the moment the hook finishes (listener sends null).
+  hookStatus = "";
   start(text, opts) {
     this.stop();
     this.baseText = text;
@@ -172640,13 +173534,24 @@ var Spinner = class {
       return;
     this.baseText = text;
   }
+  /**
+   * A hook with `statusMessage` started (message) or finished (null). Renders immediately
+   * rather than on the next tick: the whole point of the message is that a long hook is
+   * RUNNING, and waiting up to 100ms to admit that is the kind of silence it exists to fix.
+   * No-op while the spinner is stopped — an idle session keeps its prompt, not a status line.
+   */
+  setHookStatus(message) {
+    this.hookStatus = message ?? "";
+    if (this.interval !== null)
+      this.render();
+  }
   render() {
     const elapsedSec = Math.floor((Date.now() - this.startedAt) / 1e3);
     if (this.verbs && elapsedSec > 0 && elapsedSec % VERB_ROTATE_SEC === 0 && this.lastRotateSec !== elapsedSec) {
       this.lastRotateSec = elapsedSec;
       this.verbIdx++;
     }
-    const label = this.verbs ? `${WORKING_VERBS[this.verbIdx % WORKING_VERBS.length]}\u2026` : this.baseText;
+    const label = this.hookStatus || (this.verbs ? `${WORKING_VERBS[this.verbIdx % WORKING_VERBS.length]}\u2026` : this.baseText);
     const status = composeStatusLine({
       frame: this.frames[this.i % this.frames.length],
       text: label,
@@ -172689,12 +173594,14 @@ function nextBackgroundChange() {
 }
 var _mcpManager = null;
 var _askIO = null;
+var _elicitationHandler = null;
 var _mcpConfig = null;
 var sessionTouched = [];
 async function initMcp(workDir, override, strict) {
   if (noDiscovery && !override) {
     _mcpConfig = { mcpServers: {} };
     _mcpManager = null;
+    wireHookMcpCaller();
     return;
   }
   _mcpConfig = strict && override ? { mcpServers: {} } : import_code_core18.McpManager.loadConfig(workDir);
@@ -172702,6 +173609,7 @@ async function initMcp(workDir, override, strict) {
     Object.assign(_mcpConfig.mcpServers, override.mcpServers);
   if (Object.keys(_mcpConfig.mcpServers).length === 0) {
     _mcpManager = null;
+    wireHookMcpCaller();
     return;
   }
   try {
@@ -172709,8 +173617,48 @@ async function initMcp(workDir, override, strict) {
   } catch {
   }
   const manager = new import_code_core18.McpManager();
+  manager.setElicitationHandler(_elicitationHandler);
   await manager.connectAll(_mcpConfig);
   _mcpManager = manager;
+  wireHookMcpCaller();
+}
+function wireHookMcpCaller() {
+  const mgr = _mcpManager;
+  if (!mgr) {
+    (0, import_code_core19.setHookMcpCaller)(null);
+    return;
+  }
+  (0, import_code_core19.setHookMcpCaller)(async (server, tool, input) => {
+    const text = await mgr.callTool(`${server}__${tool}`, input);
+    return text === null ? { error: `MCP server "${server}" has no tool "${tool}" (or the server is not connected)` } : { text };
+  });
+}
+async function handleElicitation(server, req, workDir, getSessionId, interactive) {
+  const hookAnswer = await (0, import_code_core19.runElicitationHooks)(workDir, server, {
+    message: req.message,
+    mode: req.mode,
+    url: req.url,
+    elicitation_id: req.elicitationId,
+    requested_schema: req.requestedSchema
+  }, getSessionId());
+  let answer;
+  if (hookAnswer)
+    answer = hookAnswer;
+  else if (!interactive || !_askIO)
+    answer = { action: "decline" };
+  else {
+    answer = await elicit(server, req, {
+      choose: _askIO.choose,
+      line: _askIO.line,
+      print: (t2) => console.log(t2),
+      openUrl: (url) => openInBrowser(url)
+    });
+  }
+  return await (0, import_code_core19.runElicitationResultHooks)(workDir, server, answer, {
+    sessionId: getSessionId(),
+    mode: req.mode,
+    elicitationId: req.elicitationId
+  });
 }
 function formatAgentsList(workDir) {
   const { types: types3, warnings } = (0, import_code_core18.loadAgentTypesWithWarnings)(workDir);
@@ -173086,6 +174034,7 @@ async function runTurn(messages, modelAlias, workDir, abortSignal, env4, nexrall
   const turnStart = Date.now();
   userActiveThisTurn = false;
   const spinner = new Spinner();
+  (0, import_code_core19.setHookStatusListener)((m2) => spinner.setHookStatus(m2));
   const mdRender = new MarkdownStreamRenderer();
   const toolStream = new ToolStreamPrinter(PREVIEW_LINES);
   let toolStartTime = 0;
@@ -173112,7 +174061,7 @@ async function runTurn(messages, modelAlias, workDir, abortSignal, env4, nexrall
     workDir,
     sessionId: activeSessionIdGetter(),
     model: modelAlias,
-    env: refreshEnvForTurn(env4, workDir),
+    env: await refreshEnvForTurn(env4, workDir),
     nexrallMd,
     mode,
     // `/mode plan` previously only hinted to the backend — the footer said "plan
@@ -173465,7 +174414,7 @@ async function runTurnHeadless(messages, modelAlias, workDir, _abortSignal, env4
     workDir,
     sessionId: activeSessionIdGetter(),
     model: modelAlias,
-    env: refreshEnvForTurn(env4, workDir),
+    env: await refreshEnvForTurn(env4, workDir),
     nexrallMd,
     mode,
     planMode: mode === "plan",
@@ -173991,7 +174940,7 @@ Resume it with: nex --worktree ${worktreeState.name}
       void (0, import_code_core19.fireObserverHook)(requestedWorkDir, "WorktreeRemove", { name: worktreeState.name, path: worktreeState.worktreePath }, worktreeState.name);
     });
   }
-  const env4 = collectEnv(workDir);
+  const env4 = await collectEnv(workDir);
   let briefBase = options.systemPrompt?.trim() ?? readNexrallMd(workDir);
   const agentPrefix = options.selectedAgent?.prompt?.trim();
   const briefParts = [agentPrefix, briefBase, options.appendSystemPrompt?.trim(), addDirNote(options.addDirs ?? []), options.jsonSchema ? schemaInstruction(options.jsonSchema) : ""];
@@ -174005,6 +174954,13 @@ Resume it with: nex --worktree ${worktreeState.name}
   _headlessPolicy.verbose = !!options.verbose;
   _headlessPolicy.includePartial = !!options.includePartialMessages;
   _headlessPolicy.permissionMode = String(options.initialMode ?? "");
+  const streamHookEvents = options.outputFormat === "stream-json";
+  const allHookEvents = !!options.includeHookEvents;
+  (0, import_code_core19.setHookEventListener)(streamHookEvents ? (evt) => {
+    if (!allHookEvents && evt.hookEvent !== "SessionStart" && evt.hookEvent !== "Setup")
+      return;
+    process.stdout.write(JSON.stringify(hookEventPayload({ ...evt, sessionId: activeSessionIdGetter() ?? "", uuid: crypto7.randomUUID() })) + "\n");
+  } : null);
   const saveSession2 = options.noSessionPersistence ? () => {
   } : saveSession;
   const interactive = !headless && !options.prompt && !options.stdinText;
@@ -174127,6 +175083,7 @@ Resume it with: nex --worktree ${worktreeState.name}
     setExcludedPatterns(contextSet.excluded);
     console.log((edit.ok ? paint.green : paint.yellow)("  " + edit.message));
   };
+  _elicitationHandler = (server, req) => handleElicitation(server, req, workDir, () => sessionId, interactive);
   const mcpStarted = (async () => {
     try {
       await initMcp(workDir, options.mcpOverride, options.strictMcp);
@@ -175114,6 +176071,7 @@ ${text}` : "");
           activeGoal = null;
           criteriaLastLine = "";
           cliBackgroundAgents.stopAll({ dropPending: true });
+          (0, import_code_core19.resetHookOnceState)();
           inputBuffer = "";
           if (interactive)
             await getInkTerminal().clearTranscript();
@@ -175320,7 +176278,7 @@ ${summaryText}` }] },
           }
           const readme = tryRead(path29.join(workDir, "README.md"))?.slice(0, 2e3) ?? "";
           const pkgJson = tryRead(path29.join(workDir, "package.json"))?.slice(0, 1e3) ?? "";
-          const dirList = tryExec("ls -la", workDir)?.slice(0, 500) ?? "";
+          const dirList = (await tryExecAsync("ls", ["-la"], workDir))?.slice(0, 500) ?? "";
           const initPrompt = `Analyze this project and write a concise nexrall.md (project-specific instructions for an AI coding assistant).
 Include: project overview, tech stack, coding conventions, important files/folders, what to avoid.
 Keep it under 400 words. Use markdown. Be specific and actionable.
@@ -177246,6 +178204,7 @@ ${text}
     rl.resume();
     rl.prompt();
     deliverBackgroundWhenIdle();
+    deliverHookWakeWhenIdle();
   });
   async function runGoalLoop() {
     while (activeGoal) {
@@ -177326,6 +178285,20 @@ ${text}
     bgLastCount = n;
     deliverBackgroundWhenIdle();
   });
+  let hookWakeTimer = null;
+  function deliverHookWakeWhenIdle() {
+    if (hookWakeTimer || agentRunning || !(0, import_code_core19.hasPendingHookWake)())
+      return;
+    hookWakeTimer = setTimeout(() => {
+      hookWakeTimer = null;
+      if (agentRunning || !(0, import_code_core19.hasPendingHookWake)())
+        return;
+      const wakes = (0, import_code_core19.takeHookWakes)();
+      console.log(paint.dim(`  \u2699 hook wake \u2014 continuing`));
+      rl.emit("line", (0, import_code_core19.formatHookDeliveries)(wakes));
+    }, 400);
+  }
+  (0, import_code_core19.setHookWakeListener)(deliverHookWakeWhenIdle);
   const loopTimer = setInterval(() => {
     if (loopScheduler.size === 0)
       return;
@@ -178138,7 +179111,7 @@ program2.command("sessions").description("List, export, import, or delete saved
   console.log(paint.dim("  nex sessions --events <id> [--json]       to follow its event stream"));
   console.log();
 });
-program2.option("-p, --pro", "Use Claude Opus 5.5 (most capable)").option("-t, --turbo", "Use Claude Sonnet 5.5 (fast)").option("-u, --ultra", "Use Claude Fable 5.1 (most powerful)").option("-y, --yolo", "Auto-approve all tool calls (no permission prompts)").option("-d, --dir <path>", "Set working directory (default: current directory)").option("-m, --model <name>", "Explicit model, e.g. claude-opus-5-5 | gpt-5.4 | gpt-4.1").option("-r, --resume [id]", "Resume last session, or a specific session id").option("-c, --continue", "Continue the latest conversation in this folder").option("--plan", "Start in plan mode (read-only; /mode or Shift+Tab can leave it)").option("--readonly", "Read-only for the whole session: plan mode that cannot be switched off").option("--auto", "Start in auto mode (the default \u2014 edits and commands run without asking)").option("--mode <mode>", "Starting permission mode: ask | edit | auto | plan").option("--fullscreen", "Draw the whole session on the terminal's alternate screen: the transcript re-wraps on resize and PgUp/PgDn page through it (no terminal scrollback while it is on; /fullscreen toggles it)").option("--bg", "Run the prompt in the background (headless); returns a job id. See: nex jobs | logs | attach | kill").option("--debug", "Write request timing, retries and errors to a debug log file").option("--no-color", "Disable colored output (also honours NO_COLOR)").option("-w, --worktree [name]", "Isolate this session in its own worktree \u2014 a separate directory (and, in a git repo, its own branch) so it can never overwrite files another session (or you) are touching in the main checkout. Omit a name for an auto-generated one; pass an existing name to resume that same worktree.").option("-e, --effort <level>", "Thinking effort \u2014 real levels depend on the model (e.g. DeepSeek: low|high|max, Qwen: low|high); run `nex --model <id>` then `/effort` with no argument to see a model's scale").option("--no-banner", "Skip the ASCII banner (useful in scripts/pipes)").option("--print", "One-shot, non-interactive run that prints the answer and exits (same as --output-format text). Claude Code's `-p` is spelled --print here because `-p` already means --pro").option("--output-format <fmt>", "One-shot output format: text | json | stream-json (implies auto-approve)").option("--audit [path]", "Log every tool call (and refusal) to a JSONL trail (default: .nexrall/audit/<session>.jsonl)").option("--permission-mode <mode>", "Permission mode: ask | edit | auto | plan (also Claude Code names: default | acceptEdits | dontAsk | bypassPermissions). With --output-format, anything that would prompt is DENIED instead of auto-approved").option("--allowedTools, --allowed-tools <tools...>", 'Tools/rules to allow without asking, e.g. "Bash(git *)" Edit (comma or space separated; put the prompt BEFORE this flag)').option("--disallowedTools, --disallowed-tools <tools...>", 'Tools/rules to deny, e.g. "Bash(rm *)" (deny always wins)').option("--append-system-prompt <text>", "Extra instructions appended to the project brief for this run").option("--max-budget-usd <amount>", "Stop a one-shot run once it has spent this many dollars (needs --output-format)").option("--mcp-config <configs...>", 'Load MCP servers from JSON files or inline JSON ({"mcpServers":{\u2026}}) for this run').option("--strict-mcp-config", "With --mcp-config: use ONLY those servers, ignoring ~/.nexrall/mcp.json and the project one").option("--add-dir <dirs...>", "Extra directories the agent may read and edit besides the project folder").option("--input-format <format>", "text (default) | stream-json \u2014 read the prompt as Claude-Code-style NDJSON user messages on stdin").option("--json-schema <schema>", 'JSON Schema (inline or file) the final answer must satisfy; needs --output-format. Result gains "structured_output"; exit 3 if it does not validate').option("--no-session-persistence", "Do not save this run to disk (needs --output-format; it cannot be resumed)").option("--max-turns <n>", "Stop a headless run after N agent rounds (needs --output-format; exit 4 when it hits the limit)").option("--permission-prompt-tool <t>", "MCP tool (mcp__server__tool) that answers permission prompts in non-interactive runs \u2014 instead of nex denying them").option("--append-system-prompt-file <path>", "Like --append-system-prompt, read from a file").option("--system-prompt <text>", "REPLACE the project brief (nexrall.md + memory + global instructions) with this text for this run").option("--system-prompt-file <path>", "Like --system-prompt, read from a file").option("--verbose", "Print progress detail (tool calls, timings, usage) to stderr while a one-shot run works").option("--include-partial-messages", "Stream model deltas as they arrive (needs --output-format stream-json)").option("--replay-user-messages", "Echo each stdin message back on stdout as it is consumed (needs --input-format stream-json --output-format stream-json)").option("--agents <json-or-file>", 'Define extra sub-agents for this run: a JSON object { "name": { "description", "prompt", "tools", "model" } } or @file.json').option("--agent <name>", "Run this session AS that agent (its prompt, tools and model), from .nexrall/agents, a plugin, --agents or a builtin").option("--bare", "Start without discovery: no nexrall.md/memory, skills, plugins, hooks or MCP config files").option("--safe-mode", "Same as --bare (Claude Code's troubleshooting name)").option("--tools <list>", 'Exactly these built-in tools ("Bash,Read,Edit", "default", or "" for none); the rest are removed, not just unapproved').option("--session-id <id>", "Use this id for a NEW conversation (letters, digits, - _), so a script can find it again").option("-n, --name <name>", "Name the conversation; `nex -r <name>` resumes it by that name").option("--fork-session", "With --resume/--continue: branch into a new session instead of continuing the original").option("--fallback-model <name>", "If the main model is overloaded or unreachable, retry the turn once on this model (needs --output-format)").option("--settings <file|json>", "Settings (permissions, hooks\u2026) for this run only: a JSON file or an inline JSON object; merged over the user/project settings").option("--debug-file <path>", "Write the --debug diagnostics log to this file (implies --debug)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
+program2.option("-p, --pro", "Use Claude Opus 5.5 (most capable)").option("-t, --turbo", "Use Claude Sonnet 5.5 (fast)").option("-u, --ultra", "Use Claude Fable 5.1 (most powerful)").option("-y, --yolo", "Auto-approve all tool calls (no permission prompts)").option("-d, --dir <path>", "Set working directory (default: current directory)").option("-m, --model <name>", "Explicit model, e.g. claude-opus-5-5 | gpt-5.4 | gpt-4.1").option("-r, --resume [id]", "Resume last session, or a specific session id").option("-c, --continue", "Continue the latest conversation in this folder").option("--plan", "Start in plan mode (read-only; /mode or Shift+Tab can leave it)").option("--readonly", "Read-only for the whole session: plan mode that cannot be switched off").option("--auto", "Start in auto mode (the default \u2014 edits and commands run without asking)").option("--mode <mode>", "Starting permission mode: ask | edit | auto | plan").option("--fullscreen", "Draw the whole session on the terminal's alternate screen: the transcript re-wraps on resize and PgUp/PgDn page through it (no terminal scrollback while it is on; /fullscreen toggles it)").option("--bg", "Run the prompt in the background (headless); returns a job id. See: nex jobs | logs | attach | kill").option("--debug", "Write request timing, retries and errors to a debug log file").option("--no-color", "Disable colored output (also honours NO_COLOR)").option("-w, --worktree [name]", "Isolate this session in its own worktree \u2014 a separate directory (and, in a git repo, its own branch) so it can never overwrite files another session (or you) are touching in the main checkout. Omit a name for an auto-generated one; pass an existing name to resume that same worktree.").option("-e, --effort <level>", "Thinking effort \u2014 real levels depend on the model (e.g. DeepSeek: low|high|max, Qwen: low|high); run `nex --model <id>` then `/effort` with no argument to see a model's scale").option("--no-banner", "Skip the ASCII banner (useful in scripts/pipes)").option("--print", "One-shot, non-interactive run that prints the answer and exits (same as --output-format text). Claude Code's `-p` is spelled --print here because `-p` already means --pro").option("--output-format <fmt>", "One-shot output format: text | json | stream-json (implies auto-approve)").option("--audit [path]", "Log every tool call (and refusal) to a JSONL trail (default: .nexrall/audit/<session>.jsonl)").option("--permission-mode <mode>", "Permission mode: ask | edit | auto | plan (also Claude Code names: default | acceptEdits | dontAsk | bypassPermissions). With --output-format, anything that would prompt is DENIED instead of auto-approved").option("--allowedTools, --allowed-tools <tools...>", 'Tools/rules to allow without asking, e.g. "Bash(git *)" Edit (comma or space separated; put the prompt BEFORE this flag)').option("--disallowedTools, --disallowed-tools <tools...>", 'Tools/rules to deny, e.g. "Bash(rm *)" (deny always wins)').option("--append-system-prompt <text>", "Extra instructions appended to the project brief for this run").option("--max-budget-usd <amount>", "Stop a one-shot run once it has spent this many dollars (needs --output-format)").option("--mcp-config <configs...>", 'Load MCP servers from JSON files or inline JSON ({"mcpServers":{\u2026}}) for this run').option("--strict-mcp-config", "With --mcp-config: use ONLY those servers, ignoring ~/.nexrall/mcp.json and the project one").option("--add-dir <dirs...>", "Extra directories the agent may read and edit besides the project folder").option("--input-format <format>", "text (default) | stream-json \u2014 read the prompt as Claude-Code-style NDJSON user messages on stdin").option("--json-schema <schema>", 'JSON Schema (inline or file) the final answer must satisfy; needs --output-format. Result gains "structured_output"; exit 3 if it does not validate').option("--no-session-persistence", "Do not save this run to disk (needs --output-format; it cannot be resumed)").option("--max-turns <n>", "Stop a headless run after N agent rounds (needs --output-format; exit 4 when it hits the limit)").option("--permission-prompt-tool <t>", "MCP tool (mcp__server__tool) that answers permission prompts in non-interactive runs \u2014 instead of nex denying them").option("--append-system-prompt-file <path>", "Like --append-system-prompt, read from a file").option("--system-prompt <text>", "REPLACE the project brief (nexrall.md + memory + global instructions) with this text for this run").option("--system-prompt-file <path>", "Like --system-prompt, read from a file").option("--verbose", "Print progress detail (tool calls, timings, usage) to stderr while a one-shot run works").option("--include-partial-messages", "Stream model deltas as they arrive (needs --output-format stream-json)").option("--include-hook-events", "Include hook lifecycle events in the stream-json output (system: hook_started / hook_progress / hook_response)").option("--replay-user-messages", "Echo each stdin message back on stdout as it is consumed (needs --input-format stream-json --output-format stream-json)").option("--agents <json-or-file>", 'Define extra sub-agents for this run: a JSON object { "name": { "description", "prompt", "tools", "model" } } or @file.json').option("--agent <name>", "Run this session AS that agent (its prompt, tools and model), from .nexrall/agents, a plugin, --agents or a builtin").option("--bare", "Start without discovery: no nexrall.md/memory, skills, plugins, hooks or MCP config files").option("--safe-mode", "Same as --bare (Claude Code's troubleshooting name)").option("--tools <list>", 'Exactly these built-in tools ("Bash,Read,Edit", "default", or "" for none); the rest are removed, not just unapproved').option("--session-id <id>", "Use this id for a NEW conversation (letters, digits, - _), so a script can find it again").option("-n, --name <name>", "Name the conversation; `nex -r <name>` resumes it by that name").option("--fork-session", "With --resume/--continue: branch into a new session instead of continuing the original").option("--fallback-model <name>", "If the main model is overloaded or unreachable, retry the turn once on this model (needs --output-format)").option("--settings <file|json>", "Settings (permissions, hooks\u2026) for this run only: a JSON file or an inline JSON object; merged over the user/project settings").option("--debug-file <path>", "Write the --debug diagnostics log to this file (implies --debug)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
   if (!(0, import_code_core22.isAuthenticated)()) {
     console.error("Not logged in. Run: nex auth");
     process.exit(1);
@@ -178410,6 +179383,11 @@ program2.option("-p, --pro", "Use Claude Opus 5.5 (most capable)").option("-t, -
     console.error(partialErr);
     process.exit(1);
   }
+  const hookEventsErr = checkHookEvents({ includeHookEvents: !!options.includeHookEvents, outputFormat });
+  if (hookEventsErr) {
+    console.error(hookEventsErr);
+    process.exit(1);
+  }
   const replayErr = checkReplayUserMessages({ replay: !!options.replayUserMessages, inputFormat: options.inputFormat, outputFormat });
   if (replayErr) {
     console.error(replayErr);
@@ -178434,7 +179412,7 @@ program2.option("-p, --pro", "Use Claude Opus 5.5 (most capable)").option("-t, -
     }
     effort = lvl;
   }
-  await startChatSession({ model, workDir, prompt: prompt2, resume, continueLast: !!options.continue, initialMode: modeRes.mode, lockMode: modeRes.locked, debug: !!options.debug || debugFile !== void 0, debugFile, fallbackModel, maxTurns, onlyTools, newSessionId, sessionName, forkSession: !!options.forkSession, stdinText, stdinFollowUps, showBanner, outputFormat, effort, audit: options.audit, worktree, fullscreen: !!options.fullscreen, strictPermissions: options.permissionMode !== void 0, budgetUsd, appendSystemPrompt, mcpOverride, strictMcp: !!options.strictMcpConfig, systemPrompt: sysPrompt.value, verbose: !!options.verbose, includePartialMessages: !!options.includePartialMessages, agents: agentsParsed.value, selectedAgent: selectedAgent ? { name: selectedAgent.name, prompt: selectedAgent.prompt, tools: selectedAgent.tools, model: selectedAgent.model } : void 0, replayUserMessages: !!options.replayUserMessages, inputFormatWasStreamJson: options.inputFormat !== void 0 && String(options.inputFormat).toLowerCase() === "stream-json", bare: !!(options.bare || options.safeMode), noSessionPersistence: options.sessionPersistence === false, addDirs: addDirs.value, jsonSchema, permissionPromptTool });
+  await startChatSession({ model, workDir, prompt: prompt2, resume, continueLast: !!options.continue, initialMode: modeRes.mode, lockMode: modeRes.locked, debug: !!options.debug || debugFile !== void 0, debugFile, fallbackModel, maxTurns, onlyTools, newSessionId, sessionName, forkSession: !!options.forkSession, stdinText, stdinFollowUps, showBanner, outputFormat, effort, audit: options.audit, worktree, fullscreen: !!options.fullscreen, strictPermissions: options.permissionMode !== void 0, budgetUsd, appendSystemPrompt, mcpOverride, strictMcp: !!options.strictMcpConfig, systemPrompt: sysPrompt.value, verbose: !!options.verbose, includePartialMessages: !!options.includePartialMessages, includeHookEvents: !!options.includeHookEvents, agents: agentsParsed.value, selectedAgent: selectedAgent ? { name: selectedAgent.name, prompt: selectedAgent.prompt, tools: selectedAgent.tools, model: selectedAgent.model } : void 0, replayUserMessages: !!options.replayUserMessages, inputFormatWasStreamJson: options.inputFormat !== void 0 && String(options.inputFormat).toLowerCase() === "stream-json", bare: !!(options.bare || options.safeMode), noSessionPersistence: options.sessionPersistence === false, addDirs: addDirs.value, jsonSchema, permissionPromptTool });
 });
 program2.parse();
 /*! Bundled license information: