onadit 0.0.1 → 1.0.0

package/dist/src/cli/hooks-writers/state.js

@@ -0,0 +1,225 @@
+/**
+ * Reading and removing Onadit's hooks in an agent's hooks file.
+ *
+ * `readSessionHooksState` is what a connection flow shows: whether Onadit's two
+ * commands are installed and, for Codex, whether Codex will run them.
+ * `removeAgentHooks` is the reverse of `writeAgentHook`, for the off switch
+ * and `onadit uninstall`: a hook left behind would call a CLI that no longer
+ * exists at every session start.
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { findRiftHandler, hookTarget, isRiftHandler, POLICY_MARKER, SESSION_START_MARKER, } from "./claude-code.js";
+/** Onadit's two commands, with the event label Codex uses in its review keys. */
+const RIFT_HANDLERS = [
+    { event: "SessionStart", label: "session_start", marker: SESSION_START_MARKER },
+    { event: "PreToolUse", label: "pre_tool_use", marker: POLICY_MARKER },
+];
+function readHooks(file) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            return null;
+        const hooks = parsed["hooks"];
+        return typeof hooks === "object" && hooks !== null && !Array.isArray(hooks)
+            ? hooks
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function canonical(value) {
+    if (Array.isArray(value))
+        return value.map(canonical);
+    if (typeof value !== "object" || value === null)
+        return value;
+    const record = value;
+    return Object.fromEntries(Object.keys(record).sort().map((key) => [key, canonical(record[key])]));
+}
+/**
+ * The hash Codex records when the person approves one command hook, and
+ * compares at every start: a hook whose hash no longer matches is skipped.
+ * Mirrors `hook_hash` in codex-rs/hooks/src/engine/discovery.rs (0.160): the
+ * SHA-256 of the sorted-key JSON of the event, the group's matcher and the
+ * one command with its defaults filled in. Should Codex change the recipe,
+ * the hashes stop matching and Onadit reports needs_review, never a false "on".
+ */
+export function codexHookHash(label, matcher, config) {
+    const timeout = config["timeout"];
+    const statusMessage = config["statusMessage"];
+    const contextLimit = config["additionalContextLimit"];
+    const identity = {
+        event_name: label,
+        ...(typeof matcher === "string" ? { matcher } : {}),
+        hooks: [
+            {
+                type: "command",
+                command: config["command"],
+                timeout: Math.max(typeof timeout === "number" ? timeout : 600, 1),
+                async: config["async"] === true,
+                ...(typeof statusMessage === "string" ? { statusMessage } : {}),
+                // 2,500 tokens is Codex's default, which it leaves out of the hash.
+                ...(typeof contextLimit === "number" && contextLimit !== 2500 ? { additionalContextLimit: contextLimit } : {}),
+            },
+        ],
+    };
+    return `sha256:${crypto.createHash("sha256").update(JSON.stringify(canonical(identity))).digest("hex")}`;
+}
+/**
+ * The `[hooks.state."<key>"]` tables of Codex's config.toml, as Codex writes
+ * them, and `[features] hooks`. A form this scan does not know reads as "no
+ * review", which errs towards asking the person again.
+ */
+function readCodexReviews(configFile) {
+    const reviews = new Map();
+    let hooksEnabled = true;
+    let section = "";
+    let current = null;
+    for (const line of fs.readFileSync(configFile, "utf8").split(/\r?\n/)) {
+        const header = /^\s*\[\s*(.+?)\s*\]\s*(?:#.*)?$/.exec(line);
+        if (header) {
+            section = header[1];
+            current = null;
+            const basic = /^hooks\.state\."((?:[^"\\]|\\.)*)"$/.exec(section);
+            const literal = /^hooks\.state\.'([^']*)'$/.exec(section);
+            const key = basic ? basic[1].replace(/\\(["\\])/g, "$1") : literal?.[1];
+            if (key !== undefined) {
+                current = {};
+                reviews.set(key, current);
+            }
+            continue;
+        }
+        const pair = /^\s*([A-Za-z_]+)\s*=\s*(.+?)\s*(?:#.*)?$/.exec(line);
+        if (!pair)
+            continue;
+        const [, name, value] = pair;
+        if (section === "features" && name === "hooks" && value === "false")
+            hooksEnabled = false;
+        if (!current)
+            continue;
+        if (name === "trusted_hash")
+            current.trustedHash = /^"([^"]*)"$/.exec(value)?.[1] ?? "";
+        if (name === "enabled")
+            current.enabled = value === "true";
+    }
+    return { hooksEnabled, reviews };
+}
+/** The config path the installed session-start entry carries, or null when there is none. */
+export function installedSessionStartConfig(client, opts = {}) {
+    const target = hookTarget(client, opts);
+    const hooks = readHooks(path.join(target.dir, target.settingsFile));
+    const command = findRiftHandler(hooks?.["SessionStart"], SESSION_START_MARKER)?.config["command"];
+    return typeof command === "string" ? (/--config "([^"]+)" brief --hook/.exec(command)?.[1] ?? null) : null;
+}
+export function readSessionHooksState(client, opts = {}) {
+    const target = hookTarget(client, opts);
+    const file = path.join(target.dir, target.settingsFile);
+    const hooks = readHooks(file);
+    const found = RIFT_HANDLERS.map((rift) => ({ ...rift, at: findRiftHandler(hooks?.[rift.event], rift.marker) }));
+    if (found.some((rift) => rift.at === null))
+        return "off";
+    if (client !== "codex")
+        return "on";
+    // Codex runs a hook only when it is enabled and the person approved it in
+    // its current form. Onadit reads that record and never writes it.
+    try {
+        const { hooksEnabled, reviews } = readCodexReviews(path.join(target.dir, "config.toml"));
+        if (!hooksEnabled)
+            return "needs_review";
+        const files = new Set([file]);
+        try {
+            files.add(fs.realpathSync(file));
+        }
+        catch {
+            // The plain path is the only candidate.
+        }
+        const approved = found.every(({ label, at }) => {
+            const hash = codexHookHash(label, at.matcher, at.config);
+            return [...files].some((source) => {
+                const review = reviews.get(`${source}:${label}:${at.group}:${at.handler}`);
+                return review !== undefined && review.trustedHash === hash && review.enabled !== false;
+            });
+        });
+        return approved ? "on" : "needs_review";
+    }
+    catch {
+        return "needs_review";
+    }
+}
+/**
+ * Remove Onadit's two commands and its policy script. Everything else stays:
+ * other events, other groups, and in a group Onadit shares with the person's
+ * own commands, those commands and the group's settings.
+ */
+export function removeAgentHooks(client, opts = {}) {
+    const target = hookTarget(client, opts);
+    const file = path.join(target.dir, target.settingsFile);
+    if (!fs.existsSync(file))
+        return { client, status: "missing" };
+    try {
+        const raw = fs.readFileSync(file, "utf8");
+        const parsed = JSON.parse(raw);
+        const hooks = typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed["hooks"]
+            : undefined;
+        if (typeof hooks !== "object" || hooks === null || Array.isArray(hooks))
+            return { client, status: "absent" };
+        const next = { ...hooks };
+        let removed = false;
+        let moved = false;
+        for (const { event, marker } of RIFT_HANDLERS) {
+            const groups = next[event];
+            if (!Array.isArray(groups))
+                continue;
+            const kept = [];
+            let dropped = false;
+            for (const group of groups) {
+                const handlers = typeof group === "object" && group !== null && !Array.isArray(group)
+                    ? group["hooks"]
+                    : undefined;
+                const first = Array.isArray(handlers) ? handlers.findIndex((h) => isRiftHandler(h, marker)) : -1;
+                if (!Array.isArray(handlers) || first < 0) {
+                    // A group after one that was dropped moves up a position.
+                    if (dropped)
+                        moved = true;
+                    kept.push(group);
+                    continue;
+                }
+                removed = true;
+                const others = handlers.filter((h) => !isRiftHandler(h, marker));
+                if (others.length === 0) {
+                    dropped = true;
+                    continue;
+                }
+                if (dropped || handlers.slice(first).some((h) => !isRiftHandler(h, marker)))
+                    moved = true;
+                kept.push({ ...group, hooks: others });
+            }
+            if (kept.length > 0)
+                next[event] = kept;
+            else
+                delete next[event];
+        }
+        if (!removed)
+            return { client, status: "absent" };
+        const backupId = `rift-hooks-${client}-${(opts.now ?? (() => new Date()))()
+            .toISOString()
+            .replace(/\.\d{3}Z$/, "Z")
+            .replace(/:/g, "-")}`;
+        fs.writeFileSync(`${file}.bak.${backupId}`, raw, { encoding: "utf8", mode: 0o600 });
+        const tmp = `${file}.tmp.${process.pid}`;
+        fs.writeFileSync(tmp, JSON.stringify({ ...parsed, hooks: next }, null, 2) + "\n", {
+            encoding: "utf8",
+            mode: 0o644,
+        });
+        fs.renameSync(tmp, file);
+        fs.rmSync(path.join(target.dir, "hooks", POLICY_MARKER), { force: true });
+        return { client, status: "removed", backupId, ...(client === "codex" && moved ? { reviewAgain: true } : {}) };
+    }
+    catch (err) {
+        return { client, status: "failed", error: err instanceof Error ? err.message : String(err) };
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/src/cli/hooks-writers/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,UAAU,EACV,aAAa,EACb,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAU1B,iFAAiF;AACjF,MAAM,aAAa,GAAG;IACpB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC/E,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE;CAC7D,CAAC;AAEX,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,KAAK,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAE,KAAiC;YACpC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAgB,EAAE,MAA+B;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,KAAK;QACjB,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC1B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBACjE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;gBAC/B,GAAG,CAAC,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,oEAAoE;gBACpE,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/G;SACF;KACF,CAAC;IACF,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3G,CAAC;AAOD;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAuB,IAAI,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QAC7B,IAAI,OAAO,KAAK,UAAU,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO;YAAE,YAAY,GAAG,KAAK,CAAC;QAC1F,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,IAAI,KAAK,cAAc;YAAE,OAAO,CAAC,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,KAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,2BAA2B,CAAC,MAAoB,EAAE,OAAsB,EAAE;IACxF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAClG,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAoB,EAAE,OAAsB,EAAE;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAEpC,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,YAAY;YAAE,OAAO,cAAc,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE;YAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,EAAG,CAAC,OAAO,EAAE,EAAG,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,KAAK,IAAI,EAAG,CAAC,KAAK,IAAI,EAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7E,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC;YACzF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAoB,EACpB,OAA6C,EAAE;IAE/C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,MAAM,KAAK,GACT,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrE,CAAC,CAAE,MAAkC,CAAC,OAAO,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAE7G,MAAM,IAAI,GAAG,EAAE,GAAI,KAAiC,EAAE,CAAC;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrC,MAAM,IAAI,GAAc,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAClE,CAAC,CAAE,KAAiC,CAAC,OAAO,CAAC;oBAC7C,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC1C,0DAA0D;oBAC1D,IAAI,OAAO;wBAAE,KAAK,GAAG,IAAI,CAAC;oBAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxB,OAAO,GAAG,IAAI,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAE,KAAK,GAAG,IAAI,CAAC;gBAC1F,IAAI,CAAC,IAAI,CAAC,EAAE,GAAI,KAAiC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;;gBACnC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAElD,MAAM,QAAQ,GAAG,cAAc,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;aACxE,WAAW,EAAE;aACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;aACzB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,GAAG,IAAI,QAAQ,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAI,MAAkC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YAC7G,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC"}

package/dist/src/cli/hooks-writers/types.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Types for `onadit hooks install` writers.
+ *
+ * `claude-code` and `codex` are supported. The shape mirrors
+ * `mcp-config-writers/types.ts`.
+ */
+export type HookClientId = "claude-code" | "codex";
+export interface HookWriteOutcome {
+    /** Absolute path of the policy script we manage. */
+    scriptPath: string;
+    /** Absolute path of the client settings file we touched. */
+    settingsPath: string;
+    /** Whether settingsPath existed before this run. */
+    preexistingSettings: boolean;
+    /** Opaque ID surfaced to the user when a backup was written. */
+    backupId: string | null;
+    /** Hook script was written or replaced this run. */
+    scriptUpdated: boolean;
+    /** Settings entry was newly added. */
+    hookEntryAdded: boolean;
+    /** Settings entry existed but its matcher/command shape changed. */
+    hookEntryReplaced: boolean;
+    /** True when no write touched disk. */
+    dryRun: boolean;
+    /** SessionStart brief entry, when a session-start command was requested. */
+    sessionStartEntry?: "added" | "replaced" | "unchanged";
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/cli/hooks-writers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,OAAO,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAC;IACvB,sCAAsC;IACtC,cAAc,EAAE,OAAO,CAAC;IACxB,oEAAoE;IACpE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,uCAAuC;IACvC,MAAM,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;CACxD"}

package/dist/src/cli/hooks-writers/types.js

@@ -0,0 +1,8 @@
+/**
+ * Types for `onadit hooks install` writers.
+ *
+ * `claude-code` and `codex` are supported. The shape mirrors
+ * `mcp-config-writers/types.ts`.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/cli/hooks-writers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/cli/hooks-writers/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/src/cli/http-client.d.ts

@@ -0,0 +1,128 @@
+import { type KeychainOps } from "../auth/keychain.js";
+export type CliErrorCode = "connection_refused" | "unauthorized" | "not_found" | "invalid" | "config_too_new" | "conflict" | "rate_limited" | "validation" | "server_error" | "unknown";
+export declare class CliError extends Error {
+    readonly code: CliErrorCode;
+    readonly statusCode?: number | undefined;
+    readonly body?: unknown | undefined;
+    constructor(message: string, code: CliErrorCode, statusCode?: number | undefined, body?: unknown | undefined);
+}
+export interface HttpClientOpts {
+    baseUrl: string;
+    token: string | null;
+    fetchFn?: typeof fetch;
+}
+export interface HttpClient {
+    get(path: string): Promise<unknown>;
+    post(path: string, body?: unknown, options?: {
+        headers?: Record<string, string>;
+    }): Promise<{
+        status: number;
+        data: unknown;
+    }>;
+    postMultipart(path: string, form: FormData, options?: {
+        headers?: Record<string, string>;
+    }): Promise<{
+        status: number;
+        data: unknown;
+    }>;
+    del(path: string): Promise<{
+        status: number;
+        data: unknown;
+    }>;
+}
+export declare function createHttpClient(opts: HttpClientOpts): HttpClient;
+/**
+ * Single source of truth for "where is the config file?" — pure path
+ * resolution, no I/O. Per A-2.1 / A-2.2:
+ *   --config wins over RIFT_CONFIG wins over default
+ *   Empty / whitespace-only RIFT_CONFIG falls through to the default
+ *   Relative paths are resolved with path.resolve at call time
+ *
+ * Callers that need the file to actually exist should use
+ * `requireExistingConfigPath` instead, which also classifies missing
+ * vs invalid distinctly.
+ */
+export declare function resolveConfigPath(globalOpts: {
+    config?: string;
+}): string;
+/**
+ * For commands that need an existing, valid config (search, save,
+ * import, ingest, mcp install, feedback, capture, etc.). Throws a
+ * `CliError` with code "not_found" or "invalid", whose messages are
+ * distinct per A-2.3a / A-2.3c. Caller should let the exception
+ * propagate so the top-level CLI handler renders it.
+ */
+export declare function requireExistingConfigPath(globalOpts: {
+    config?: string;
+}): string;
+/**
+ * Status-only lenient base-URL resolver. `onadit status` is a diagnostic and
+ * must stay useful even when the config carries a top-level key this (older)
+ * CLI doesn't recognize yet — e.g. a newer beta wrote `codex_cli` and strict
+ * Zod parsing rejects the whole file. It reads ONLY `server.port` leniently
+ * so status can still probe the daemon and tell the friend to update.
+ *
+ * SECURITY: the host is hard-pinned to `127.0.0.1` — never read from the
+ * config. `onadit status` reads the auth token and sends it to this URL, so if
+ * lenient mode honoured an arbitrary `server.host`, a malformed config could
+ * redirect Onadit's secret token to a non-loopback address. The strict schema
+ * already constrains host to the `127.0.0.1` literal, so no valid config ever
+ * carries another host — there is nothing legitimate to read, and reading it
+ * would only open an exfiltration path. We pin the daemon address and vary
+ * only the port (the one field a real config legitimately changes).
+ *
+ * NEVER use this for daemon startup or any write path — strict validation
+ * (`resolveBaseUrl` / `requireExistingConfigPath`) stays the only gate there.
+ * This is a read-only, loopback-only diagnostic fallback, nothing more.
+ *
+ * Returns null when the file is missing/unreadable or not valid JSON — those
+ * are real errors the caller should surface, not "the config is just newer".
+ */
+export declare function resolveBaseUrlLenient(configPath: string): string | null;
+/**
+ * No-auth probe of a daemon's /health endpoint at an explicit base URL.
+ * `/health` is unauthenticated by design, so this needs neither a token nor
+ * a round-trip through the authenticated client. Returns the daemon's own
+ * ground truth for `voyage_key_present` — the only correct source for any
+ * "is a Voyage key loaded?" gate, since the daemon (not the calling shell)
+ * is the process that saves and embeds.
+ */
+export declare function probeDaemonHealth(baseUrl: string): Promise<{
+    up: boolean;
+    uptimeSeconds?: number;
+    voyageKeyPresent?: boolean;
+}>;
+/**
+ * No-config, no-auth direct probe of the daemon's /health endpoint at the
+ * default loopback URL. Used by `onadit status` only — every other command
+ * needs config and auth. Per A-2.3a/A-2.3b: `onadit status` MUST NOT hard-fail
+ * when the config is absent; it renders "config missing" instead, with the
+ * daemon's actual up/down state taken from this probe.
+ */
+export declare function probeDefaultDaemonHealth(): Promise<{
+    up: boolean;
+    uptimeSeconds?: number;
+    voyageKeyPresent?: boolean;
+}>;
+/**
+ * resolveBaseUrl stays strict — only commands that actually need the
+ * daemon URL call it, and they all need a real config. Per A-2.3a:
+ * status's no-config branch MUST NOT route through here; it uses
+ * `probeDefaultDaemonHealth()` instead.
+ */
+export declare function resolveBaseUrl(configPath: string): string;
+/**
+ * Read the current auth token. Checks `~/.rift/token` first, then the
+ * macOS Keychain. Returns `null` only when no token has been issued —
+ * a real "not yet onboarded" state. A locked Keychain (typical over
+ * SSH or in CI without a GUI session) is a recoverable *failure*, not
+ * a missing token, so it surfaces as a typed `CliError` with the exact
+ * `security unlock-keychain` recovery command.
+ *
+ * Without this conversion, CLI commands that call `readToken()` would
+ * leak the raw `security find-generic-password` failure to the user.
+ * Confirmed live on `0.1.0-beta.6` against an SSH'd test user, post-
+ * publish, before this fix landed.
+ */
+export declare function readToken(keychain?: KeychainOps): Promise<string | null>;
+//# sourceMappingURL=http-client.d.ts.map

package/dist/src/cli/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../../src/cli/http-client.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,cAAc,GACd,WAAW,GACX,SAAS,GAKT,gBAAgB,GAChB,UAAU,GACV,cAAc,GACd,YAAY,GACZ,cAAc,GACd,SAAS,CAAC;AAEd,qBAAa,QAAS,SAAQ,KAAK;aAGf,IAAI,EAAE,YAAY;aAClB,UAAU,CAAC,EAAE,MAAM;aACnB,IAAI,CAAC,EAAE,OAAO;gBAH9B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,YAAY,EAClB,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,IAAI,CAAC,EAAE,OAAO,YAAA;CAKjC;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAC7C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC9C,aAAa,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAC7C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC/D;AA6ED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CAqGjE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAezE;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAqBT;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyBvE;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,EAAE,EAAE,OAAO,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC,CAuBD;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC;IACxD,EAAE,EAAE,OAAO,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC,CAED;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAgCzD;AAyBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,GAAE,WAAyB,GAClC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB"}