onadit 0.0.1 → 1.0.0

package/dist/src/cli/hooks-writers/claude-code.js

@@ -0,0 +1,289 @@
+/**
+ * Writer for `onadit hooks install --client claude-code`.
+ *
+ * Idempotent install of the Onadit policy hook into Claude Code's
+ * `settings.json` (`~/.claude`, or `$CLAUDE_CONFIG_DIR` when set). Mirrors the `mcp-config-writers/json-config`
+ * contract:
+ *
+ *   - Atomic settings.json write (tmp + rename).
+ *   - Backup the prior settings file to `<file>.bak.<id>` if it existed
+ *     and we're about to change anything; surface only an opaque ID.
+ *   - Refuse to overwrite when the file is not parseable JSON OR when
+ *     `hooks` is present but not an object — emit a redacted error
+ *     referring to the backup ID only.
+ *   - Detect an existing Onadit policy entry by command substring
+ *     ("rift-policy.mjs"); rewrite it in place rather than appending a
+ *     duplicate.
+ *   - Preserve every other top-level key, every other hook event, every
+ *     other PreToolUse entry.
+ *
+ * Hook script lifecycle:
+ *   - Installed at `<claude config dir>/hooks/rift-policy.mjs`, next to the
+ *     settings.json that references it.
+ *   - Atomic write (tmp + rename), 0755 permissions.
+ *   - Re-running with the same package version is a no-op for the script.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { claudeConfigDir, codexHomeDir } from "../agent-homes.js";
+import { CLAUDE_CODE_POLICY_SCRIPT, CODEX_POLICY_SCRIPT } from "./claude-code-policy-script.js";
+import { HooksParseFailedError } from "./errors.js";
+// The pack and the two searches, under the server's current and earlier names:
+// a half-finished upgrade can pair either server name with either tool prefix,
+// and the policy has to hold in every pairing.
+const RIFT_HOOK_MATCHER = "mcp__(onadit|rift)__(onadit|rift)_(context_pack|search|conversations_search)";
+export function writeClaudeCodeHook(opts) {
+    return writeAgentHook(hookTarget("claude-code", opts), opts);
+}
+/**
+ * Claude Code (`settings.json`) and Codex (`hooks.json`) keep hooks in the
+ * same shape and send the same payloads, so one writer serves both. Script
+ * and settings live in the same agent home, so each account home is
+ * self-contained and removing one never breaks another.
+ */
+export function hookTarget(client, opts) {
+    const home = { ...(opts.homeDir ? { homeDir: opts.homeDir } : {}), ...(opts.env ? { env: opts.env } : {}) };
+    return client === "codex"
+        ? // The node running Onadit: a packaged install bundles its own, and a
+            // Codex user need not have `node` on PATH.
+            { client, dir: codexHomeDir(home), settingsFile: "hooks.json", script: CODEX_POLICY_SCRIPT, node: process.execPath }
+        : { client, dir: claudeConfigDir(home), settingsFile: "settings.json", script: CLAUDE_CODE_POLICY_SCRIPT };
+}
+export function writeAgentHook(target, opts) {
+    const scriptPath = path.join(target.dir, "hooks", POLICY_MARKER);
+    const settingsPath = path.join(target.dir, target.settingsFile);
+    const now = () => (opts.now ?? defaultNow)();
+    const backupIdNow = () => formatBackupId(target.client, now);
+    // 1. Read settings (or treat missing/empty as `{}`).
+    const preexistingSettings = fs.existsSync(settingsPath);
+    let raw = "";
+    let parsed = {};
+    if (preexistingSettings) {
+        raw = fs.readFileSync(settingsPath, "utf8");
+        if (raw.trim() !== "") {
+            try {
+                const candidate = JSON.parse(raw);
+                if (typeof candidate !== "object" ||
+                    candidate === null ||
+                    Array.isArray(candidate)) {
+                    throw new SyntaxError(`${target.settingsFile} root must be a JSON object`);
+                }
+                parsed = candidate;
+            }
+            catch (err) {
+                throw failParse(target.client, settingsPath, raw, backupIdNow(), err, opts.dryRun);
+            }
+        }
+    }
+    // 1b. Reject malformed `hooks` shape early — same backup contract as
+    //     the JSON parse failure path.
+    const hooksField = parsed["hooks"];
+    if (hooksField !== undefined &&
+        (typeof hooksField !== "object" ||
+            hooksField === null ||
+            Array.isArray(hooksField))) {
+        throw failParse(target.client, settingsPath, raw, backupIdNow(), new TypeError(`${target.settingsFile} \`hooks\` is present but not an object`), opts.dryRun);
+    }
+    // A refresh only rewrites what is installed.
+    const installed = hooksOf(parsed);
+    const policyAt = findRiftHandler(installed["PreToolUse"], POLICY_MARKER);
+    const writePolicy = !opts.existingOnly || policyAt !== null;
+    const matcher = opts.keepMatcher && typeof policyAt?.matcher === "string" ? policyAt.matcher : RIFT_HOOK_MATCHER;
+    const writeSession = !opts.existingOnly || findRiftHandler(installed["SessionStart"], SESSION_START_MARKER) !== null;
+    // 2. Compare desired script content against on-disk content.
+    const desiredScript = target.script;
+    const existingScript = fs.existsSync(scriptPath)
+        ? fs.readFileSync(scriptPath, "utf8")
+        : null;
+    const scriptUpdated = writePolicy && existingScript !== desiredScript;
+    // 3. Merge the policy entry into PreToolUse.
+    const merged = writePolicy
+        ? mergeRiftHookEntry(parsed, scriptPath, matcher, target.node)
+        : { parsed, hookEntryAdded: false, hookEntryReplaced: false };
+    const session = opts.sessionStartCommand && writeSession
+        ? mergeSessionStartEntry(merged.parsed, opts.sessionStartCommand)
+        : null;
+    if (session)
+        merged.parsed = session.parsed;
+    const settingsChanged = merged.hookEntryAdded || merged.hookEntryReplaced || !!session?.changed;
+    const willTouchDisk = scriptUpdated || settingsChanged;
+    const backupId = preexistingSettings && settingsChanged ? backupIdNow() : null;
+    if (opts.dryRun || !willTouchDisk) {
+        return {
+            scriptPath,
+            settingsPath,
+            preexistingSettings,
+            backupId: null,
+            scriptUpdated,
+            hookEntryAdded: merged.hookEntryAdded,
+            hookEntryReplaced: merged.hookEntryReplaced,
+            ...(session ? { sessionStartEntry: session.status } : {}),
+            dryRun: !!opts.dryRun,
+        };
+    }
+    // 4. Write the script atomically.
+    if (scriptUpdated) {
+        fs.mkdirSync(path.dirname(scriptPath), { recursive: true });
+        const tmpScript = `${scriptPath}.tmp.${process.pid}`;
+        fs.writeFileSync(tmpScript, desiredScript, {
+            encoding: "utf8",
+            mode: 0o755,
+        });
+        fs.renameSync(tmpScript, scriptPath);
+        fs.chmodSync(scriptPath, 0o755);
+    }
+    // 5. Backup + atomically write settings if it changed.
+    if (settingsChanged) {
+        if (preexistingSettings && backupId) {
+            fs.writeFileSync(`${settingsPath}.bak.${backupId}`, raw, {
+                encoding: "utf8",
+                mode: 0o600,
+            });
+        }
+        else {
+            fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
+        }
+        const tmpSettings = `${settingsPath}.tmp.${process.pid}`;
+        // A settings file the person keeps private stays private.
+        const mode = preexistingSettings ? fs.statSync(settingsPath).mode & 0o777 : 0o644;
+        try {
+            fs.writeFileSync(tmpSettings, JSON.stringify(merged.parsed, null, 2) + "\n", { encoding: "utf8", mode });
+            fs.chmodSync(tmpSettings, mode);
+            fs.renameSync(tmpSettings, settingsPath);
+        }
+        catch (err) {
+            try {
+                if (fs.existsSync(tmpSettings))
+                    fs.unlinkSync(tmpSettings);
+            }
+            catch {
+                // ignore
+            }
+            if (preexistingSettings && backupId) {
+                try {
+                    fs.copyFileSync(`${settingsPath}.bak.${backupId}`, settingsPath);
+                }
+                catch {
+                    // best-effort — the backup file is the recovery surface.
+                }
+            }
+            throw err;
+        }
+    }
+    return {
+        scriptPath,
+        settingsPath,
+        preexistingSettings,
+        backupId,
+        scriptUpdated,
+        hookEntryAdded: merged.hookEntryAdded,
+        hookEntryReplaced: merged.hookEntryReplaced,
+        ...(session ? { sessionStartEntry: session.status } : {}),
+        dryRun: false,
+    };
+}
+/** Substrings that identify Onadit's two commands across reinstalls. */
+export const POLICY_MARKER = "rift-policy.mjs";
+export const SESSION_START_MARKER = " brief --hook";
+function isGroup(entry) {
+    return (typeof entry === "object" &&
+        entry !== null &&
+        !Array.isArray(entry) &&
+        Array.isArray(entry["hooks"]));
+}
+/** True for one command of a group when it is Onadit's (its command holds the marker). */
+export function isRiftHandler(handler, marker) {
+    const cmd = typeof handler === "object" && handler !== null ? handler["command"] : undefined;
+    return typeof cmd === "string" && cmd.includes(marker);
+}
+/** Where Onadit's command sits in an event's groups: the positions Codex keys its review on. */
+export function findRiftHandler(entries, marker) {
+    if (!Array.isArray(entries))
+        return null;
+    for (const [group, entry] of entries.entries()) {
+        if (!isGroup(entry))
+            continue;
+        const handler = entry.hooks.findIndex((h) => isRiftHandler(h, marker));
+        if (handler >= 0) {
+            return { group, handler, matcher: entry["matcher"], config: entry.hooks[handler] };
+        }
+    }
+    return null;
+}
+/**
+ * Put Onadit's command into an event. A group that holds only Onadit's command
+ * is Onadit's and is rewritten whole. In a group the user shares with their own
+ * commands, only Onadit's command changes: their commands, the matcher and any
+ * other setting of the group stay as they are.
+ */
+function mergeHandler(entries, marker, desired) {
+    // Assigned inside the map callback; widen so TS does not narrow to "added".
+    let status = "added";
+    const updated = entries.map((entry) => {
+        if (!isGroup(entry) || !entry.hooks.some((h) => isRiftHandler(h, marker)))
+            return entry;
+        const next = entry.hooks.length === 1
+            ? desired
+            : { ...entry, hooks: entry.hooks.map((h) => (isRiftHandler(h, marker) ? desired.hooks[0] : h)) };
+        status = JSON.stringify(entry) === JSON.stringify(next) ? "unchanged" : "replaced";
+        return next;
+    });
+    if (status === "added")
+        updated.push(desired);
+    return { entries: updated, status };
+}
+function hooksOf(parsed) {
+    const hooks = parsed["hooks"];
+    return typeof hooks === "object" && hooks !== null && !Array.isArray(hooks)
+        ? { ...hooks }
+        : {};
+}
+function mergeRiftHookEntry(parsed, scriptPath, matcher, node) {
+    const hooks = hooksOf(parsed);
+    // Quote the script path in case the user's $HOME contains spaces.
+    const command = `${node ? `"${node}"` : "node"} "${scriptPath}"`;
+    const merged = mergeHandler(Array.isArray(hooks["PreToolUse"]) ? hooks["PreToolUse"] : [], POLICY_MARKER, {
+        matcher,
+        hooks: [{ type: "command", command, timeout: 5 }],
+    });
+    hooks["PreToolUse"] = merged.entries;
+    return {
+        parsed: { ...parsed, hooks },
+        hookEntryAdded: merged.status === "added",
+        hookEntryReplaced: merged.status === "replaced",
+    };
+}
+function mergeSessionStartEntry(parsed, command) {
+    const hooks = hooksOf(parsed);
+    const merged = mergeHandler(Array.isArray(hooks["SessionStart"]) ? hooks["SessionStart"] : [], SESSION_START_MARKER, {
+        hooks: [{ type: "command", command, timeout: 10 }],
+    });
+    hooks["SessionStart"] = merged.entries;
+    return { parsed: { ...parsed, hooks }, changed: merged.status !== "unchanged", status: merged.status };
+}
+function formatBackupId(client, now) {
+    return `rift-hooks-${client}-${now()
+        .toISOString()
+        .replace(/\.\d{3}Z$/, "Z")
+        .replace(/:/g, "-")}`;
+}
+function defaultNow() {
+    return new Date();
+}
+function failParse(client, settingsPath, raw, id, cause, dryRun) {
+    if (!dryRun) {
+        try {
+            fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
+            fs.writeFileSync(`${settingsPath}.bak.${id}`, raw, {
+                encoding: "utf8",
+                mode: 0o600,
+            });
+        }
+        catch {
+            // best-effort; the operator-side recovery flow handles missing backups.
+        }
+    }
+    return new HooksParseFailedError(client, id, cause);
+}
+export { HooksParseFailedError } from "./errors.js";
+//# sourceMappingURL=claude-code.js.map

package/dist/src/cli/hooks-writers/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAsB,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,+EAA+E;AAC/E,+EAA+E;AAC/E,+CAA+C;AAC/C,MAAM,iBAAiB,GAAG,8EAA8E,CAAC;AA8BzG,MAAM,UAAU,mBAAmB,CACjC,IAA6B;IAE7B,OAAO,cAAc,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAoB,EAAE,IAAmB;IAClE,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5G,OAAO,MAAM,KAAK,OAAO;QACvB,CAAC,CAAC,qEAAqE;YACrE,2CAA2C;YAC3C,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE;QACtH,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAkB,EAClB,IAA8G;IAE9G,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,GAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAErE,qDAAqD;IACrD,MAAM,mBAAmB,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,mBAAmB,EAAE,CAAC;QACxB,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;gBAC7C,IACE,OAAO,SAAS,KAAK,QAAQ;oBAC7B,SAAS,KAAK,IAAI;oBAClB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;oBACD,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,CAAC,YAAY,6BAA6B,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,GAAG,SAAoC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mCAAmC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,IACE,UAAU,KAAK,SAAS;QACxB,CAAC,OAAO,UAAU,KAAK,QAAQ;YAC7B,UAAU,KAAK,IAAI;YACnB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAC5B,CAAC;QACD,MAAM,SAAS,CACb,MAAM,CAAC,MAAM,EACb,YAAY,EACZ,GAAG,EACH,WAAW,EAAE,EACb,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,YAAY,yCAAyC,CAAC,EAC9E,IAAI,CAAC,MAAM,CACZ,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,QAAQ,KAAK,IAAI,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACjH,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC,KAAK,IAAI,CAAC;IAErH,6DAA6D;IAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,aAAa,GAAG,WAAW,IAAI,cAAc,KAAK,aAAa,CAAC;IAEtE,6CAA6C;IAC7C,MAAM,MAAM,GAAgB,WAAW;QACrC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC;QAC9D,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,IAAI,YAAY;QACtD,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAAO;QAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE5C,MAAM,eAAe,GACnB,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1E,MAAM,aAAa,GAAG,aAAa,IAAI,eAAe,CAAC;IACvD,MAAM,QAAQ,GACZ,mBAAmB,IAAI,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,UAAU;YACV,YAAY;YACZ,mBAAmB;YACnB,QAAQ,EAAE,IAAI;YACd,aAAa;YACb,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,IAAI,aAAa,EAAE,CAAC;QAClB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,GAAG,UAAU,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACrD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE;YACzC,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACrC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,uDAAuD;IACvD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,mBAAmB,IAAI,QAAQ,EAAE,CAAC;YACpC,EAAE,CAAC,aAAa,CAAC,GAAG,YAAY,QAAQ,QAAQ,EAAE,EAAE,GAAG,EAAE;gBACvD,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,YAAY,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACzD,0DAA0D;QAC1D,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAClF,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzG,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAChC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,mBAAmB,IAAI,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,EAAE,CAAC,YAAY,CAAC,GAAG,YAAY,QAAQ,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;gBACnE,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;gBAC3D,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,YAAY;QACZ,mBAAmB;QACnB,QAAQ;QACR,aAAa;QACb,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAQD,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAIpD,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,OAAO,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,MAAc;IAC5D,MAAM,GAAG,GACP,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAE,OAAmC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,eAAe,CAC7B,OAAgB,EAChB,MAAc;IAEd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAA4B,EAAE,CAAC;QAChH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,OAAkB,EAClB,MAAc,EACd,OAAc;IAEd,4EAA4E;IAC5E,IAAI,MAAM,GAAG,OAA6C,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACxF,MAAM,IAAI,GACR,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,MAA+B;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,EAAE,GAAI,KAAiC,EAAE;QAC3C,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA+B,EAC/B,UAAkB,EAClB,OAAe,EACf,IAAa;IAEb,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,kEAAkE;IAClE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,GAAG,CAAC;IACjE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE;QACxG,OAAO;QACP,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACrC,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE;QAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO;QACzC,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA+B,EAC/B,OAAe;IAEf,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,oBAAoB,EAAE;QACnH,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;KACnD,CAAC,CAAC;IACH,KAAK,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACzG,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB,EAAE,GAAe;IAC3D,OAAO,cAAc,MAAM,IAAI,GAAG,EAAE;SACjC,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAChB,MAAoB,EACpB,YAAoB,EACpB,GAAW,EACX,EAAU,EACV,KAAc,EACd,MAAe;IAEf,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,EAAE,CAAC,aAAa,CAAC,GAAG,YAAY,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE;gBACjD,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,qBAAqB,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/cli/hooks-writers/codex.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Writer for `onadit hooks install --client codex`.
+ *
+ * Codex reads hooks from `hooks.json` in its home (`~/.codex`, or
+ * `$CODEX_HOME`), in the shape Claude Code uses in `settings.json`, and sends
+ * the same SessionStart and PreToolUse payloads (an MCP tool is named
+ * `mcp__onadit__onadit_search` there too). So the same two entries are written:
+ * the session-start brief and the pack-before-search policy.
+ *
+ * Codex runs a new or changed hook only after the user has reviewed it with
+ * `/hooks`. Onadit does not write that approval.
+ */
+import { type ClaudeCodeHookWriteOpts } from "./claude-code.js";
+import type { HookWriteOutcome } from "./types.js";
+export declare function writeCodexHook(opts: ClaudeCodeHookWriteOpts): HookWriteOutcome;
+//# sourceMappingURL=codex.d.ts.map

package/dist/src/cli/hooks-writers/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA8B,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,wBAAgB,cAAc,CAAC,IAAI,EAAE,uBAAuB,GAAG,gBAAgB,CAE9E"}

package/dist/src/cli/hooks-writers/codex.js

@@ -0,0 +1,17 @@
+/**
+ * Writer for `onadit hooks install --client codex`.
+ *
+ * Codex reads hooks from `hooks.json` in its home (`~/.codex`, or
+ * `$CODEX_HOME`), in the shape Claude Code uses in `settings.json`, and sends
+ * the same SessionStart and PreToolUse payloads (an MCP tool is named
+ * `mcp__onadit__onadit_search` there too). So the same two entries are written:
+ * the session-start brief and the pack-before-search policy.
+ *
+ * Codex runs a new or changed hook only after the user has reviewed it with
+ * `/hooks`. Onadit does not write that approval.
+ */
+import { hookTarget, writeAgentHook } from "./claude-code.js";
+export function writeCodexHook(opts) {
+    return writeAgentHook(hookTarget("codex", opts), opts);
+}
+//# sourceMappingURL=codex.js.map

package/dist/src/cli/hooks-writers/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAgC,MAAM,kBAAkB,CAAC;AAG5F,MAAM,UAAU,cAAc,CAAC,IAA6B;IAC1D,OAAO,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC"}

package/dist/src/cli/hooks-writers/errors.d.ts

@@ -0,0 +1,16 @@
+import type { HookClientId } from "./types.js";
+/**
+ * Thrown when a client settings file is malformed and we refuse to
+ * overwrite. Carries a backup ID the user can reference for recovery —
+ * the file's prior contents are saved to `<settings>.bak.<id>`.
+ *
+ * Message is path-free + content-free by construction so it can be
+ * emitted directly without leaking user data.
+ */
+export declare class HooksParseFailedError extends Error {
+    readonly client: HookClientId;
+    readonly backupId: string;
+    readonly cause?: unknown;
+    constructor(client: HookClientId, backupId: string, cause?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/src/cli/hooks-writers/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEtB,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAWpE"}

package/dist/src/cli/hooks-writers/errors.js

@@ -0,0 +1,24 @@
+/**
+ * Thrown when a client settings file is malformed and we refuse to
+ * overwrite. Carries a backup ID the user can reference for recovery —
+ * the file's prior contents are saved to `<settings>.bak.<id>`.
+ *
+ * Message is path-free + content-free by construction so it can be
+ * emitted directly without leaking user data.
+ */
+export class HooksParseFailedError extends Error {
+    client;
+    backupId;
+    cause;
+    constructor(client, backupId, cause) {
+        super(`onadit hooks install (${client}): existing settings file is not parseable. ` +
+            `Refusing to overwrite. A backup of the prior contents was saved (id: ${backupId}). ` +
+            `Repair the file by hand and re-run, or delete it and re-run for a fresh write.`);
+        this.name = "HooksParseFailedError";
+        this.client = client;
+        this.backupId = backupId;
+        if (cause !== undefined)
+            this.cause = cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/cli/hooks-writers/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/errors.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,MAAM,CAAe;IACrB,QAAQ,CAAS;IACR,KAAK,CAAW;IAElC,YAAY,MAAoB,EAAE,QAAgB,EAAE,KAAe;QACjE,KAAK,CACH,yBAAyB,MAAM,8CAA8C;YAC3E,wEAAwE,QAAQ,KAAK;YACrF,gFAAgF,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9C,CAAC;CACF"}

package/dist/src/cli/hooks-writers/index.d.ts

@@ -0,0 +1,23 @@
+import type { HookClientId, HookWriteOutcome } from "./types.js";
+export declare const ALL_HOOK_CLIENTS: readonly HookClientId[];
+export interface HookDispatchOpts {
+    client: HookClientId;
+    homeDir: string;
+    /** Environment read for CLAUDE_CONFIG_DIR / CODEX_HOME (test override). */
+    env?: NodeJS.ProcessEnv;
+    dryRun: boolean;
+    now?: () => Date;
+    /** Command for a SessionStart project-brief hook. */
+    sessionStartCommand?: string;
+    /** Refresh only the entries that are already installed. */
+    existingOnly?: boolean;
+    /** Leave the PreToolUse matcher as it is (see the writer). */
+    keepMatcher?: boolean;
+}
+export declare function writeHookConfig(opts: HookDispatchOpts): HookWriteOutcome;
+export declare function isHookClientId(s: string): s is HookClientId;
+export { HooksParseFailedError } from "./errors.js";
+export type { HookClientId, HookWriteOutcome } from "./types.js";
+export { installedSessionStartConfig, readSessionHooksState, removeAgentHooks } from "./state.js";
+export type { HookRemoval, SessionHooksState } from "./state.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/cli/hooks-writers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,eAAO,MAAM,gBAAgB,EAAE,SAAS,YAAY,EAG1C,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAgBxE;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,YAAY,CAE3D;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAClG,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/cli/hooks-writers/index.js

@@ -0,0 +1,34 @@
+/**
+ * Hooks-writer dispatch.
+ *
+ * Routes `claude-code` and `codex`, which share one hook format.
+ */
+import { writeClaudeCodeHook } from "./claude-code.js";
+import { writeCodexHook } from "./codex.js";
+export const ALL_HOOK_CLIENTS = [
+    "claude-code",
+    "codex",
+];
+export function writeHookConfig(opts) {
+    const writerOpts = {
+        homeDir: opts.homeDir,
+        ...(opts.env ? { env: opts.env } : {}),
+        dryRun: opts.dryRun,
+        ...(opts.now ? { now: opts.now } : {}),
+        ...(opts.sessionStartCommand ? { sessionStartCommand: opts.sessionStartCommand } : {}),
+        ...(opts.existingOnly ? { existingOnly: true } : {}),
+        ...(opts.keepMatcher ? { keepMatcher: true } : {}),
+    };
+    switch (opts.client) {
+        case "claude-code":
+            return writeClaudeCodeHook(writerOpts);
+        case "codex":
+            return writeCodexHook(writerOpts);
+    }
+}
+export function isHookClientId(s) {
+    return ALL_HOOK_CLIENTS.includes(s);
+}
+export { HooksParseFailedError } from "./errors.js";
+export { installedSessionStartConfig, readSessionHooksState, removeAgentHooks } from "./state.js";
+//# sourceMappingURL=index.js.map

package/dist/src/cli/hooks-writers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,MAAM,CAAC,MAAM,gBAAgB,GAA4B;IACvD,aAAa;IACb,OAAO;CACC,CAAC;AAiBX,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACzC,KAAK,OAAO;YACV,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAQ,gBAAsC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/cli/hooks-writers/state.d.ts

@@ -0,0 +1,43 @@
+import type { AgentHomeOpts } from "../agent-homes.js";
+import type { HookClientId } from "./types.js";
+/**
+ * off: one of Onadit's two commands is missing. needs_review: Codex has both
+ * but will not run them as they stand. on: installed and, for Codex, each
+ * approved in its current form and enabled.
+ */
+export type SessionHooksState = "off" | "needs_review" | "on";
+/**
+ * The hash Codex records when the person approves one command hook, and
+ * compares at every start: a hook whose hash no longer matches is skipped.
+ * Mirrors `hook_hash` in codex-rs/hooks/src/engine/discovery.rs (0.160): the
+ * SHA-256 of the sorted-key JSON of the event, the group's matcher and the
+ * one command with its defaults filled in. Should Codex change the recipe,
+ * the hashes stop matching and Onadit reports needs_review, never a false "on".
+ */
+export declare function codexHookHash(label: string, matcher: unknown, config: Record<string, unknown>): string;
+/** The config path the installed session-start entry carries, or null when there is none. */
+export declare function installedSessionStartConfig(client: HookClientId, opts?: AgentHomeOpts): string | null;
+export declare function readSessionHooksState(client: HookClientId, opts?: AgentHomeOpts): SessionHooksState;
+export interface HookRemoval {
+    client: HookClientId;
+    /** missing: no hooks file. absent: a file without Onadit commands. */
+    status: "removed" | "absent" | "missing" | "failed";
+    /** Opaque backup ID, present only when the file was rewritten. */
+    backupId?: string;
+    /**
+     * Codex only: a hook of the person's own sat after one of Onadit's, so its
+     * position changed. Codex keys a review on the position and will ask them
+     * to review that hook again before running it.
+     */
+    reviewAgain?: boolean;
+    error?: string;
+}
+/**
+ * Remove Onadit's two commands and its policy script. Everything else stays:
+ * other events, other groups, and in a group Onadit shares with the person's
+ * own commands, those commands and the group's settings.
+ */
+export declare function removeAgentHooks(client: HookClientId, opts?: AgentHomeOpts & {
+    now?: () => Date;
+}): HookRemoval;
+//# sourceMappingURL=state.d.ts.map

package/dist/src/cli/hooks-writers/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/state.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAQvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,cAAc,GAAG,IAAI,CAAC;AA4B9D;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAoBtG;AA0CD,6FAA6F;AAC7F,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,GAAG,IAAI,CAKzG;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,aAAkB,GAAG,iBAAiB,CA8BvG;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,sEAAsE;IACtE,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpD,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,aAAa,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAAO,GAC9C,WAAW,CA+Db"}