open-multi-agent-kit 0.80.7 → 0.80.8

package/dist/core/hook-inventory.d.ts

@@ -2,13 +2,15 @@
  * Minimal hook inventory for the loadout runtime.
  *
  * The external harness resolves `scriptPath` to an actual shell script.
- * This module only provides the canonical names and builtin flag so the
- * loadout layer can validate allow/exclude/require selectors.
+ * This module provides canonical names plus safe policy metadata so the
+ * loadout layer can validate selectors without executing hooks.
  */
+import type { HookPolicyMetadata } from "./hooks/index.ts";
 export interface HookDescriptor {
     name: string;
     scriptPath?: string;
     builtin: boolean;
+    policy: HookPolicyMetadata;
 }
 export interface HookInventory {
     hooks: readonly HookDescriptor[];

package/dist/core/hook-inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-inventory.d.ts","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CACjC;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,cAAc,EASlD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAqBlE","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module only provides the canonical names and builtin flag so the\n * loadout layer can validate allow/exclude/require selectors.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\t{ name: \"pre-shell-guard\", builtin: true },\n\t{ name: \"protect-secrets\", builtin: true },\n\t{ name: \"session-context\", builtin: true },\n\t{ name: \"precompact-checkpoint\", builtin: true },\n\t{ name: \"typecheck-after-edit\", builtin: true },\n\t{ name: \"stop-verify\", builtin: true },\n\t{ name: \"subagent-stop-audit\", builtin: true },\n\t{ name: \"npm-audit-summary\", builtin: true },\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir);\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}
+{"version":3,"file":"hook-inventory.d.ts","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;CACjC;AAMD,eAAO,MAAM,aAAa,EAAE,SAAS,cAAc,EAyElD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAsBlE","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module provides canonical names plus safe policy metadata so the\n * loadout layer can validate selectors without executing hooks.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { HookPolicyMetadata } from \"./hooks/index.ts\";\nimport { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from \"./hooks/index.ts\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n\tpolicy: HookPolicyMetadata;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nfunction builtinHook(name: string, policy: HookPolicyMetadata): HookDescriptor {\n\treturn { name, builtin: true, policy: sanitizeHookPolicy(policy) };\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\tbuiltinHook(\"pre-shell-guard\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 3_000,\n\t}),\n\tbuiltinHook(\"protect-secrets\", {\n\t\tstages: [\"tool_call\", \"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"session-context\", {\n\t\tstages: [\"session_start\"],\n\t\teffects: [\"mutator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"precompact-checkpoint\", {\n\t\tstages: [\"pre_compact\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"typecheck-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"stop-verify\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"subagent-stop-audit\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"npm-audit-summary\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"bounded-evidence\", {\n\t\tstages: [\"tool_result\", \"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"document-artifact-guard\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"component-spec-before-build\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"visual-diff-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir).sort();\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t\tpolicy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}

package/dist/core/hook-inventory.js

@@ -2,20 +2,88 @@
  * Minimal hook inventory for the loadout runtime.
  *
  * The external harness resolves `scriptPath` to an actual shell script.
- * This module only provides the canonical names and builtin flag so the
- * loadout layer can validate allow/exclude/require selectors.
+ * This module provides canonical names plus safe policy metadata so the
+ * loadout layer can validate selectors without executing hooks.
  */
 import fs from "node:fs";
 import path from "node:path";
+import { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from "./hooks/index.js";
+function builtinHook(name, policy) {
+    return { name, builtin: true, policy: sanitizeHookPolicy(policy) };
+}
 export const BUILTIN_HOOKS = [
-    { name: "pre-shell-guard", builtin: true },
-    { name: "protect-secrets", builtin: true },
-    { name: "session-context", builtin: true },
-    { name: "precompact-checkpoint", builtin: true },
-    { name: "typecheck-after-edit", builtin: true },
-    { name: "stop-verify", builtin: true },
-    { name: "subagent-stop-audit", builtin: true },
-    { name: "npm-audit-summary", builtin: true },
+    builtinHook("pre-shell-guard", {
+        stages: ["tool_call"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 3_000,
+    }),
+    builtinHook("protect-secrets", {
+        stages: ["tool_call", "tool_result"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 5_000,
+    }),
+    builtinHook("session-context", {
+        stages: ["session_start"],
+        effects: ["mutator"],
+        failureMode: "fail-closed",
+        timeoutMs: 5_000,
+    }),
+    builtinHook("precompact-checkpoint", {
+        stages: ["pre_compact"],
+        effects: ["observer"],
+        failureMode: "fail-closed",
+        timeoutMs: 5_000,
+    }),
+    builtinHook("typecheck-after-edit", {
+        stages: ["tool_result"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 30_000,
+    }),
+    builtinHook("stop-verify", {
+        stages: ["session_stop"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 30_000,
+    }),
+    builtinHook("subagent-stop-audit", {
+        stages: ["session_stop"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 10_000,
+    }),
+    builtinHook("npm-audit-summary", {
+        stages: ["session_stop"],
+        effects: ["observer"],
+        failureMode: "fail-closed",
+        timeoutMs: 30_000,
+    }),
+    builtinHook("bounded-evidence", {
+        stages: ["tool_result", "session_stop"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 10_000,
+    }),
+    builtinHook("document-artifact-guard", {
+        stages: ["tool_result"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 5_000,
+    }),
+    builtinHook("component-spec-before-build", {
+        stages: ["tool_call"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 5_000,
+    }),
+    builtinHook("visual-diff-after-edit", {
+        stages: ["tool_result"],
+        effects: ["validator"],
+        failureMode: "fail-closed",
+        timeoutMs: 10_000,
+    }),
 ];
 /**
  * Load the hook inventory. Builtin hooks are always present; if an agent
@@ -27,7 +95,7 @@ export function loadHookInventory(agentDir) {
     if (agentDir) {
         try {
             const hooksDir = path.join(agentDir, "hooks");
-            const entries = fs.readdirSync(hooksDir);
+            const entries = fs.readdirSync(hooksDir).sort();
             for (const entry of entries) {
                 if (!entry.endsWith(".sh"))
                     continue;
@@ -38,6 +106,7 @@ export function loadHookInventory(agentDir) {
                     name,
                     scriptPath: path.join(hooksDir, entry),
                     builtin: false,
+                    policy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),
                 });
             }
         }

package/dist/core/hook-inventory.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook-inventory.js","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,CAAC,MAAM,aAAa,GAA8B;IACvD,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC1C,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE;IAChD,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC/C,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE;IACtC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE;CAC5C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAiB;IACnE,MAAM,KAAK,GAAqB,CAAC,GAAG,aAAa,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;oBAAE,SAAS;gBACjD,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACtC,OAAO,EAAE,KAAK;iBACd,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;QACnE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,CACjB","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module only provides the canonical names and builtin flag so the\n * loadout layer can validate allow/exclude/require selectors.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\t{ name: \"pre-shell-guard\", builtin: true },\n\t{ name: \"protect-secrets\", builtin: true },\n\t{ name: \"session-context\", builtin: true },\n\t{ name: \"precompact-checkpoint\", builtin: true },\n\t{ name: \"typecheck-after-edit\", builtin: true },\n\t{ name: \"stop-verify\", builtin: true },\n\t{ name: \"subagent-stop-audit\", builtin: true },\n\t{ name: \"npm-audit-summary\", builtin: true },\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir);\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}
+{"version":3,"file":"hook-inventory.js","sourceRoot":"","sources":["../../src/core/hook-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAa3E,SAAS,WAAW,CAAC,IAAY,EAAE,MAA0B,EAAkB;IAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAAA,CACnE;AAED,MAAM,CAAC,MAAM,aAAa,GAA8B;IACvD,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;QACpC,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,iBAAiB,EAAE;QAC9B,MAAM,EAAE,CAAC,eAAe,CAAC;QACzB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,uBAAuB,EAAE;QACpC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,sBAAsB,EAAE;QACnC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,aAAa,EAAE;QAC1B,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,qBAAqB,EAAE;QAClC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,mBAAmB,EAAE;QAChC,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,kBAAkB,EAAE;QAC/B,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;QACvC,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;IACF,WAAW,CAAC,yBAAyB,EAAE;QACtC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,6BAA6B,EAAE;QAC1C,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,KAAK;KAChB,CAAC;IACF,WAAW,CAAC,wBAAwB,EAAE;QACrC,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KACjB,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAiB,EAAiB;IACnE,MAAM,KAAK,GAAqB,CAAC,GAAG,aAAa,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;oBAAE,SAAS;gBACjD,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACtC,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;iBAC/C,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;QACnE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,CACjB","sourcesContent":["/**\n * Minimal hook inventory for the loadout runtime.\n *\n * The external harness resolves `scriptPath` to an actual shell script.\n * This module provides canonical names plus safe policy metadata so the\n * loadout layer can validate selectors without executing hooks.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { HookPolicyMetadata } from \"./hooks/index.ts\";\nimport { DEFAULT_HOOK_POLICY, sanitizeHookPolicy } from \"./hooks/index.ts\";\n\nexport interface HookDescriptor {\n\tname: string;\n\tscriptPath?: string;\n\tbuiltin: boolean;\n\tpolicy: HookPolicyMetadata;\n}\n\nexport interface HookInventory {\n\thooks: readonly HookDescriptor[];\n}\n\nfunction builtinHook(name: string, policy: HookPolicyMetadata): HookDescriptor {\n\treturn { name, builtin: true, policy: sanitizeHookPolicy(policy) };\n}\n\nexport const BUILTIN_HOOKS: readonly HookDescriptor[] = [\n\tbuiltinHook(\"pre-shell-guard\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 3_000,\n\t}),\n\tbuiltinHook(\"protect-secrets\", {\n\t\tstages: [\"tool_call\", \"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"session-context\", {\n\t\tstages: [\"session_start\"],\n\t\teffects: [\"mutator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"precompact-checkpoint\", {\n\t\tstages: [\"pre_compact\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"typecheck-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"stop-verify\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"subagent-stop-audit\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"npm-audit-summary\", {\n\t\tstages: [\"session_stop\"],\n\t\teffects: [\"observer\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 30_000,\n\t}),\n\tbuiltinHook(\"bounded-evidence\", {\n\t\tstages: [\"tool_result\", \"session_stop\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n\tbuiltinHook(\"document-artifact-guard\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"component-spec-before-build\", {\n\t\tstages: [\"tool_call\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 5_000,\n\t}),\n\tbuiltinHook(\"visual-diff-after-edit\", {\n\t\tstages: [\"tool_result\"],\n\t\teffects: [\"validator\"],\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: 10_000,\n\t}),\n];\n\n/**\n * Load the hook inventory. Builtin hooks are always present; if an agent\n * directory is provided and its `hooks` subdirectory exists, any shell scripts\n * discovered there are appended as non-builtin descriptors.\n */\nexport function loadHookInventory(agentDir?: string): HookInventory {\n\tconst hooks: HookDescriptor[] = [...BUILTIN_HOOKS];\n\tif (agentDir) {\n\t\ttry {\n\t\t\tconst hooksDir = path.join(agentDir, \"hooks\");\n\t\t\tconst entries = fs.readdirSync(hooksDir).sort();\n\t\t\tfor (const entry of entries) {\n\t\t\t\tif (!entry.endsWith(\".sh\")) continue;\n\t\t\t\tconst name = entry.slice(0, -3);\n\t\t\t\tif (hooks.some((h) => h.name === name)) continue;\n\t\t\t\thooks.push({\n\t\t\t\t\tname,\n\t\t\t\t\tscriptPath: path.join(hooksDir, entry),\n\t\t\t\t\tbuiltin: false,\n\t\t\t\t\tpolicy: sanitizeHookPolicy(DEFAULT_HOOK_POLICY),\n\t\t\t\t});\n\t\t\t}\n\t\t} catch {\n\t\t\t// Hooks directory may be absent; builtin inventory is sufficient.\n\t\t}\n\t}\n\treturn { hooks };\n}\n"]}

package/dist/core/hooks/fail-closed.d.ts

@@ -1,6 +1,9 @@
-import type { FailClosedToolCallResult, FailClosedToolResult, HookFailure } from "./types.ts";
+import type { FailClosedToolCallResult, FailClosedToolResult, HookFailure, HookPolicyMetadata } from "./types.ts";
 export declare const FAIL_CLOSED_REASON = "Tool execution was blocked by fail-closed hook policy.";
+export declare const MAX_HOOK_TIMEOUT_MS = 30000;
+export declare const DEFAULT_HOOK_POLICY: HookPolicyMetadata;
 export declare function sanitizeHookFailure(failure?: unknown): HookFailure;
+export declare function sanitizeHookPolicy(policy?: unknown): HookPolicyMetadata;
 export declare function formatFailClosedReason(failure?: unknown): string;
 export declare function createFailClosedToolCallResult(failure?: unknown): FailClosedToolCallResult;
 export declare function createFailClosedToolResult(failure?: unknown): FailClosedToolResult;

package/dist/core/hooks/fail-closed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fail-closed.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/fail-closed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EAGX,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,kBAAkB,2DAA2D,CAAC;AAsC3F,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAWlE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAGhE;AAED,wBAAgB,8BAA8B,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,wBAAwB,CAK1F;AAED,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAMlF","sourcesContent":["import type {\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureStage,\n} from \"./types.ts\";\n\nexport const FAIL_CLOSED_REASON = \"Tool execution was blocked by fail-closed hook policy.\";\n\nconst DEFAULT_HOOK_FAILURE: HookFailure = {\n\ttype: \"hook_failure\",\n\tsanitized: true,\n\tcode: \"hook_failed\",\n\tstage: \"unknown\",\n};\n\nconst HOOK_FAILURE_CODES: ReadonlySet<string> = new Set<string>([\n\t\"hook_failed\",\n\t\"hook_rejected\",\n\t\"hook_timeout\",\n\t\"hook_unavailable\",\n]);\n\nconst HOOK_FAILURE_STAGES: ReadonlySet<string> = new Set<string>([\"tool_call\", \"tool_result\", \"unknown\"]);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isHookFailureCode(value: unknown): value is HookFailureCode {\n\treturn typeof value === \"string\" && HOOK_FAILURE_CODES.has(value);\n}\n\nfunction isHookFailureStage(value: unknown): value is HookFailureStage {\n\treturn typeof value === \"string\" && HOOK_FAILURE_STAGES.has(value);\n}\n\nfunction readHookFailureCode(value: unknown): HookFailureCode {\n\treturn isHookFailureCode(value) ? value : DEFAULT_HOOK_FAILURE.code;\n}\n\nfunction readHookFailureStage(value: unknown): HookFailureStage {\n\treturn isHookFailureStage(value) ? value : DEFAULT_HOOK_FAILURE.stage;\n}\n\nexport function sanitizeHookFailure(failure?: unknown): HookFailure {\n\tif (!isRecord(failure)) {\n\t\treturn { ...DEFAULT_HOOK_FAILURE };\n\t}\n\n\treturn {\n\t\ttype: \"hook_failure\",\n\t\tsanitized: true,\n\t\tcode: readHookFailureCode(failure.code),\n\t\tstage: readHookFailureStage(failure.stage),\n\t};\n}\n\nexport function formatFailClosedReason(failure?: unknown): string {\n\tvoid failure;\n\treturn FAIL_CLOSED_REASON;\n}\n\nexport function createFailClosedToolCallResult(failure?: unknown): FailClosedToolCallResult {\n\treturn {\n\t\tblock: true,\n\t\treason: formatFailClosedReason(failure),\n\t};\n}\n\nexport function createFailClosedToolResult(failure?: unknown): FailClosedToolResult {\n\treturn {\n\t\tcontent: [{ type: \"text\", text: formatFailClosedReason(failure) }],\n\t\tdetails: sanitizeHookFailure(failure),\n\t\tisError: true,\n\t};\n}\n"]}
+{"version":3,"file":"fail-closed.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/fail-closed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EAIX,kBAAkB,EAElB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,kBAAkB,2DAA2D,CAAC;AAC3F,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,eAAO,MAAM,mBAAmB,EAAE,kBAKhC,CAAC;AA0FH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAWlE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAgBvE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAGhE;AAED,wBAAgB,8BAA8B,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,wBAAwB,CAK1F;AAED,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAMlF","sourcesContent":["import type {\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureStage,\n\tHookPolicyEffect,\n\tHookPolicyMetadata,\n\tHookPolicyStage,\n} from \"./types.ts\";\n\nexport const FAIL_CLOSED_REASON = \"Tool execution was blocked by fail-closed hook policy.\";\nexport const MAX_HOOK_TIMEOUT_MS = 30_000;\nexport const DEFAULT_HOOK_POLICY: HookPolicyMetadata = freezeHookPolicy({\n\tstages: [\"tool_call\", \"tool_result\"],\n\teffects: [\"validator\"],\n\tfailureMode: \"fail-closed\",\n\ttimeoutMs: 5_000,\n});\n\nconst DEFAULT_HOOK_FAILURE: HookFailure = freezeHookFailure({\n\ttype: \"hook_failure\",\n\tsanitized: true,\n\tcode: \"hook_failed\",\n\tstage: \"unknown\",\n});\n\nconst HOOK_FAILURE_CODES: ReadonlySet<string> = new Set<string>([\n\t\"hook_failed\",\n\t\"hook_rejected\",\n\t\"hook_timeout\",\n\t\"hook_unavailable\",\n]);\n\nconst HOOK_FAILURE_STAGES: ReadonlySet<string> = new Set<string>([\"tool_call\", \"tool_result\", \"unknown\"]);\nconst HOOK_POLICY_STAGES: readonly HookPolicyStage[] = [\n\t\"tool_call\",\n\t\"tool_result\",\n\t\"session_start\",\n\t\"pre_compact\",\n\t\"session_stop\",\n];\nconst HOOK_POLICY_EFFECTS: readonly HookPolicyEffect[] = [\"validator\", \"mutator\", \"observer\"];\nconst HOOK_POLICY_STAGE_SET: ReadonlySet<string> = new Set<string>(HOOK_POLICY_STAGES);\nconst HOOK_POLICY_EFFECT_SET: ReadonlySet<string> = new Set<string>(HOOK_POLICY_EFFECTS);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isHookFailureCode(value: unknown): value is HookFailureCode {\n\treturn typeof value === \"string\" && HOOK_FAILURE_CODES.has(value);\n}\n\nfunction isHookFailureStage(value: unknown): value is HookFailureStage {\n\treturn typeof value === \"string\" && HOOK_FAILURE_STAGES.has(value);\n}\n\nfunction isHookPolicyStage(value: unknown): value is HookPolicyStage {\n\treturn typeof value === \"string\" && HOOK_POLICY_STAGE_SET.has(value);\n}\n\nfunction isHookPolicyEffect(value: unknown): value is HookPolicyEffect {\n\treturn typeof value === \"string\" && HOOK_POLICY_EFFECT_SET.has(value);\n}\n\nfunction readHookFailureCode(value: unknown): HookFailureCode {\n\treturn isHookFailureCode(value) ? value : DEFAULT_HOOK_FAILURE.code;\n}\n\nfunction readHookFailureStage(value: unknown): HookFailureStage {\n\treturn isHookFailureStage(value) ? value : DEFAULT_HOOK_FAILURE.stage;\n}\n\nfunction freezeHookFailure(failure: HookFailure): HookFailure {\n\treturn Object.freeze({ ...failure });\n}\n\nfunction freezeHookPolicy(policy: HookPolicyMetadata): HookPolicyMetadata {\n\treturn Object.freeze({\n\t\tstages: Object.freeze([...policy.stages]),\n\t\teffects: Object.freeze([...policy.effects]),\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: policy.timeoutMs,\n\t});\n}\n\nfunction sanitizePolicyStages(value: unknown): readonly HookPolicyStage[] {\n\tif (!Array.isArray(value)) return [...DEFAULT_HOOK_POLICY.stages];\n\tconst present = new Set(value.filter(isHookPolicyStage));\n\tif (present.size === 0) return [...DEFAULT_HOOK_POLICY.stages];\n\treturn HOOK_POLICY_STAGES.filter((stage) => present.has(stage));\n}\n\nfunction sanitizePolicyEffects(value: unknown): readonly HookPolicyEffect[] {\n\tif (!Array.isArray(value)) return [...DEFAULT_HOOK_POLICY.effects];\n\tconst present = new Set(value.filter(isHookPolicyEffect));\n\tif (present.size === 0) return [...DEFAULT_HOOK_POLICY.effects];\n\treturn HOOK_POLICY_EFFECTS.filter((effect) => present.has(effect));\n}\n\nfunction sanitizePolicyTimeout(value: unknown): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value)) return DEFAULT_HOOK_POLICY.timeoutMs;\n\tconst timeoutMs = Math.trunc(value);\n\tif (timeoutMs <= 0 || timeoutMs > MAX_HOOK_TIMEOUT_MS) return DEFAULT_HOOK_POLICY.timeoutMs;\n\treturn timeoutMs;\n}\n\nexport function sanitizeHookFailure(failure?: unknown): HookFailure {\n\tif (!isRecord(failure)) {\n\t\treturn freezeHookFailure(DEFAULT_HOOK_FAILURE);\n\t}\n\n\treturn freezeHookFailure({\n\t\ttype: \"hook_failure\",\n\t\tsanitized: true,\n\t\tcode: readHookFailureCode(failure.code),\n\t\tstage: readHookFailureStage(failure.stage),\n\t});\n}\n\nexport function sanitizeHookPolicy(policy?: unknown): HookPolicyMetadata {\n\tif (!isRecord(policy)) {\n\t\treturn freezeHookPolicy({\n\t\t\tstages: [...DEFAULT_HOOK_POLICY.stages],\n\t\t\teffects: [...DEFAULT_HOOK_POLICY.effects],\n\t\t\tfailureMode: \"fail-closed\",\n\t\t\ttimeoutMs: DEFAULT_HOOK_POLICY.timeoutMs,\n\t\t});\n\t}\n\n\treturn freezeHookPolicy({\n\t\tstages: sanitizePolicyStages(policy.stages),\n\t\teffects: sanitizePolicyEffects(policy.effects),\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: sanitizePolicyTimeout(policy.timeoutMs),\n\t});\n}\n\nexport function formatFailClosedReason(failure?: unknown): string {\n\tvoid failure;\n\treturn FAIL_CLOSED_REASON;\n}\n\nexport function createFailClosedToolCallResult(failure?: unknown): FailClosedToolCallResult {\n\treturn {\n\t\tblock: true,\n\t\treason: formatFailClosedReason(failure),\n\t};\n}\n\nexport function createFailClosedToolResult(failure?: unknown): FailClosedToolResult {\n\treturn {\n\t\tcontent: [{ type: \"text\", text: formatFailClosedReason(failure) }],\n\t\tdetails: sanitizeHookFailure(failure),\n\t\tisError: true,\n\t};\n}\n"]}

package/dist/core/hooks/fail-closed.js

@@ -1,10 +1,17 @@
 export const FAIL_CLOSED_REASON = "Tool execution was blocked by fail-closed hook policy.";
-const DEFAULT_HOOK_FAILURE = {
+export const MAX_HOOK_TIMEOUT_MS = 30_000;
+export const DEFAULT_HOOK_POLICY = freezeHookPolicy({
+    stages: ["tool_call", "tool_result"],
+    effects: ["validator"],
+    failureMode: "fail-closed",
+    timeoutMs: 5_000,
+});
+const DEFAULT_HOOK_FAILURE = freezeHookFailure({
     type: "hook_failure",
     sanitized: true,
     code: "hook_failed",
     stage: "unknown",
-};
+});
 const HOOK_FAILURE_CODES = new Set([
     "hook_failed",
     "hook_rejected",
@@ -12,6 +19,16 @@ const HOOK_FAILURE_CODES = new Set([
     "hook_unavailable",
 ]);
 const HOOK_FAILURE_STAGES = new Set(["tool_call", "tool_result", "unknown"]);
+const HOOK_POLICY_STAGES = [
+    "tool_call",
+    "tool_result",
+    "session_start",
+    "pre_compact",
+    "session_stop",
+];
+const HOOK_POLICY_EFFECTS = ["validator", "mutator", "observer"];
+const HOOK_POLICY_STAGE_SET = new Set(HOOK_POLICY_STAGES);
+const HOOK_POLICY_EFFECT_SET = new Set(HOOK_POLICY_EFFECTS);
 function isRecord(value) {
     return typeof value === "object" && value !== null;
 }
@@ -21,22 +38,79 @@ function isHookFailureCode(value) {
 function isHookFailureStage(value) {
     return typeof value === "string" && HOOK_FAILURE_STAGES.has(value);
 }
+function isHookPolicyStage(value) {
+    return typeof value === "string" && HOOK_POLICY_STAGE_SET.has(value);
+}
+function isHookPolicyEffect(value) {
+    return typeof value === "string" && HOOK_POLICY_EFFECT_SET.has(value);
+}
 function readHookFailureCode(value) {
     return isHookFailureCode(value) ? value : DEFAULT_HOOK_FAILURE.code;
 }
 function readHookFailureStage(value) {
     return isHookFailureStage(value) ? value : DEFAULT_HOOK_FAILURE.stage;
 }
+function freezeHookFailure(failure) {
+    return Object.freeze({ ...failure });
+}
+function freezeHookPolicy(policy) {
+    return Object.freeze({
+        stages: Object.freeze([...policy.stages]),
+        effects: Object.freeze([...policy.effects]),
+        failureMode: "fail-closed",
+        timeoutMs: policy.timeoutMs,
+    });
+}
+function sanitizePolicyStages(value) {
+    if (!Array.isArray(value))
+        return [...DEFAULT_HOOK_POLICY.stages];
+    const present = new Set(value.filter(isHookPolicyStage));
+    if (present.size === 0)
+        return [...DEFAULT_HOOK_POLICY.stages];
+    return HOOK_POLICY_STAGES.filter((stage) => present.has(stage));
+}
+function sanitizePolicyEffects(value) {
+    if (!Array.isArray(value))
+        return [...DEFAULT_HOOK_POLICY.effects];
+    const present = new Set(value.filter(isHookPolicyEffect));
+    if (present.size === 0)
+        return [...DEFAULT_HOOK_POLICY.effects];
+    return HOOK_POLICY_EFFECTS.filter((effect) => present.has(effect));
+}
+function sanitizePolicyTimeout(value) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return DEFAULT_HOOK_POLICY.timeoutMs;
+    const timeoutMs = Math.trunc(value);
+    if (timeoutMs <= 0 || timeoutMs > MAX_HOOK_TIMEOUT_MS)
+        return DEFAULT_HOOK_POLICY.timeoutMs;
+    return timeoutMs;
+}
 export function sanitizeHookFailure(failure) {
     if (!isRecord(failure)) {
-        return { ...DEFAULT_HOOK_FAILURE };
+        return freezeHookFailure(DEFAULT_HOOK_FAILURE);
     }
-    return {
+    return freezeHookFailure({
         type: "hook_failure",
         sanitized: true,
         code: readHookFailureCode(failure.code),
         stage: readHookFailureStage(failure.stage),
-    };
+    });
+}
+export function sanitizeHookPolicy(policy) {
+    if (!isRecord(policy)) {
+        return freezeHookPolicy({
+            stages: [...DEFAULT_HOOK_POLICY.stages],
+            effects: [...DEFAULT_HOOK_POLICY.effects],
+            failureMode: "fail-closed",
+            timeoutMs: DEFAULT_HOOK_POLICY.timeoutMs,
+        });
+    }
+    return freezeHookPolicy({
+        stages: sanitizePolicyStages(policy.stages),
+        effects: sanitizePolicyEffects(policy.effects),
+        failureMode: "fail-closed",
+        timeoutMs: sanitizePolicyTimeout(policy.timeoutMs),
+    });
 }
 export function formatFailClosedReason(failure) {
     void failure;

package/dist/core/hooks/fail-closed.js.map

@@ -1 +1 @@
-{"version":3,"file":"fail-closed.js","sourceRoot":"","sources":["../../../src/core/hooks/fail-closed.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,kBAAkB,GAAG,wDAAwD,CAAC;AAE3F,MAAM,oBAAoB,GAAgB;IACzC,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,SAAS;CAChB,CAAC;AAEF,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS;IAC/D,aAAa;IACb,eAAe;IACf,cAAc;IACd,kBAAkB;CAClB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAE1G,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACnD;AAED,SAAS,iBAAiB,CAAC,KAAc,EAA4B;IACpE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,kBAAkB,CAAC,KAAc,EAA6B;IACtE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CACnE;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAmB;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC;AAAA,CACpE;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAoB;IAC/D,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC;AAAA,CACtE;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAiB,EAAe;IACnE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACpC,CAAC;IAED,OAAO;QACN,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;KAC1C,CAAC;AAAA,CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAiB,EAAU;IACjE,KAAK,OAAO,CAAC;IACb,OAAO,kBAAkB,CAAC;AAAA,CAC1B;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAiB,EAA4B;IAC3F,OAAO;QACN,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC;KACvC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiB,EAAwB;IACnF,OAAO;QACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,IAAI;KACb,CAAC;AAAA,CACF","sourcesContent":["import type {\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureStage,\n} from \"./types.ts\";\n\nexport const FAIL_CLOSED_REASON = \"Tool execution was blocked by fail-closed hook policy.\";\n\nconst DEFAULT_HOOK_FAILURE: HookFailure = {\n\ttype: \"hook_failure\",\n\tsanitized: true,\n\tcode: \"hook_failed\",\n\tstage: \"unknown\",\n};\n\nconst HOOK_FAILURE_CODES: ReadonlySet<string> = new Set<string>([\n\t\"hook_failed\",\n\t\"hook_rejected\",\n\t\"hook_timeout\",\n\t\"hook_unavailable\",\n]);\n\nconst HOOK_FAILURE_STAGES: ReadonlySet<string> = new Set<string>([\"tool_call\", \"tool_result\", \"unknown\"]);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isHookFailureCode(value: unknown): value is HookFailureCode {\n\treturn typeof value === \"string\" && HOOK_FAILURE_CODES.has(value);\n}\n\nfunction isHookFailureStage(value: unknown): value is HookFailureStage {\n\treturn typeof value === \"string\" && HOOK_FAILURE_STAGES.has(value);\n}\n\nfunction readHookFailureCode(value: unknown): HookFailureCode {\n\treturn isHookFailureCode(value) ? value : DEFAULT_HOOK_FAILURE.code;\n}\n\nfunction readHookFailureStage(value: unknown): HookFailureStage {\n\treturn isHookFailureStage(value) ? value : DEFAULT_HOOK_FAILURE.stage;\n}\n\nexport function sanitizeHookFailure(failure?: unknown): HookFailure {\n\tif (!isRecord(failure)) {\n\t\treturn { ...DEFAULT_HOOK_FAILURE };\n\t}\n\n\treturn {\n\t\ttype: \"hook_failure\",\n\t\tsanitized: true,\n\t\tcode: readHookFailureCode(failure.code),\n\t\tstage: readHookFailureStage(failure.stage),\n\t};\n}\n\nexport function formatFailClosedReason(failure?: unknown): string {\n\tvoid failure;\n\treturn FAIL_CLOSED_REASON;\n}\n\nexport function createFailClosedToolCallResult(failure?: unknown): FailClosedToolCallResult {\n\treturn {\n\t\tblock: true,\n\t\treason: formatFailClosedReason(failure),\n\t};\n}\n\nexport function createFailClosedToolResult(failure?: unknown): FailClosedToolResult {\n\treturn {\n\t\tcontent: [{ type: \"text\", text: formatFailClosedReason(failure) }],\n\t\tdetails: sanitizeHookFailure(failure),\n\t\tisError: true,\n\t};\n}\n"]}
+{"version":3,"file":"fail-closed.js","sourceRoot":"","sources":["../../../src/core/hooks/fail-closed.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,kBAAkB,GAAG,wDAAwD,CAAC;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAuB,gBAAgB,CAAC;IACvE,MAAM,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,OAAO,EAAE,CAAC,WAAW,CAAC;IACtB,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,KAAK;CAChB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAgB,iBAAiB,CAAC;IAC3D,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,SAAS;CAChB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS;IAC/D,aAAa;IACb,eAAe;IACf,cAAc;IACd,kBAAkB;CAClB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAC1G,MAAM,kBAAkB,GAA+B;IACtD,WAAW;IACX,aAAa;IACb,eAAe;IACf,aAAa;IACb,cAAc;CACd,CAAC;AACF,MAAM,mBAAmB,GAAgC,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;AACvF,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAS,mBAAmB,CAAC,CAAC;AAEzF,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACnD;AAED,SAAS,iBAAiB,CAAC,KAAc,EAA4B;IACpE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,kBAAkB,CAAC,KAAc,EAA6B;IACtE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CACnE;AAED,SAAS,iBAAiB,CAAC,KAAc,EAA4B;IACpE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CACrE;AAED,SAAS,kBAAkB,CAAC,KAAc,EAA6B;IACtE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CACtE;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAmB;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC;AAAA,CACpE;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAoB;IAC/D,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC;AAAA,CACtE;AAED,SAAS,iBAAiB,CAAC,OAAoB,EAAe;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAAA,CACrC;AAED,SAAS,gBAAgB,CAAC,MAA0B,EAAsB;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAC,CAAC;AAAA,CACH;AAED,SAAS,oBAAoB,CAAC,KAAc,EAA8B;IACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAChE;AAED,SAAS,qBAAqB,CAAC,KAAc,EAA+B;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CACnE;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAU;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC,SAAS,CAAC;IAC/F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,mBAAmB;QAAE,OAAO,mBAAmB,CAAC,SAAS,CAAC;IAC5F,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAiB,EAAe;IACnE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,iBAAiB,CAAC;QACxB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;KAC1C,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAgB,EAAsB;IACxE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO,gBAAgB,CAAC;YACvB,MAAM,EAAE,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC;YACvC,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC;YACzC,WAAW,EAAE,aAAa;YAC1B,SAAS,EAAE,mBAAmB,CAAC,SAAS;SACxC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,gBAAgB,CAAC;QACvB,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9C,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC;KAClD,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAiB,EAAU;IACjE,KAAK,OAAO,CAAC;IACb,OAAO,kBAAkB,CAAC;AAAA,CAC1B;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAiB,EAA4B;IAC3F,OAAO;QACN,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC;KACvC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiB,EAAwB;IACnF,OAAO;QACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,IAAI;KACb,CAAC;AAAA,CACF","sourcesContent":["import type {\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureStage,\n\tHookPolicyEffect,\n\tHookPolicyMetadata,\n\tHookPolicyStage,\n} from \"./types.ts\";\n\nexport const FAIL_CLOSED_REASON = \"Tool execution was blocked by fail-closed hook policy.\";\nexport const MAX_HOOK_TIMEOUT_MS = 30_000;\nexport const DEFAULT_HOOK_POLICY: HookPolicyMetadata = freezeHookPolicy({\n\tstages: [\"tool_call\", \"tool_result\"],\n\teffects: [\"validator\"],\n\tfailureMode: \"fail-closed\",\n\ttimeoutMs: 5_000,\n});\n\nconst DEFAULT_HOOK_FAILURE: HookFailure = freezeHookFailure({\n\ttype: \"hook_failure\",\n\tsanitized: true,\n\tcode: \"hook_failed\",\n\tstage: \"unknown\",\n});\n\nconst HOOK_FAILURE_CODES: ReadonlySet<string> = new Set<string>([\n\t\"hook_failed\",\n\t\"hook_rejected\",\n\t\"hook_timeout\",\n\t\"hook_unavailable\",\n]);\n\nconst HOOK_FAILURE_STAGES: ReadonlySet<string> = new Set<string>([\"tool_call\", \"tool_result\", \"unknown\"]);\nconst HOOK_POLICY_STAGES: readonly HookPolicyStage[] = [\n\t\"tool_call\",\n\t\"tool_result\",\n\t\"session_start\",\n\t\"pre_compact\",\n\t\"session_stop\",\n];\nconst HOOK_POLICY_EFFECTS: readonly HookPolicyEffect[] = [\"validator\", \"mutator\", \"observer\"];\nconst HOOK_POLICY_STAGE_SET: ReadonlySet<string> = new Set<string>(HOOK_POLICY_STAGES);\nconst HOOK_POLICY_EFFECT_SET: ReadonlySet<string> = new Set<string>(HOOK_POLICY_EFFECTS);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isHookFailureCode(value: unknown): value is HookFailureCode {\n\treturn typeof value === \"string\" && HOOK_FAILURE_CODES.has(value);\n}\n\nfunction isHookFailureStage(value: unknown): value is HookFailureStage {\n\treturn typeof value === \"string\" && HOOK_FAILURE_STAGES.has(value);\n}\n\nfunction isHookPolicyStage(value: unknown): value is HookPolicyStage {\n\treturn typeof value === \"string\" && HOOK_POLICY_STAGE_SET.has(value);\n}\n\nfunction isHookPolicyEffect(value: unknown): value is HookPolicyEffect {\n\treturn typeof value === \"string\" && HOOK_POLICY_EFFECT_SET.has(value);\n}\n\nfunction readHookFailureCode(value: unknown): HookFailureCode {\n\treturn isHookFailureCode(value) ? value : DEFAULT_HOOK_FAILURE.code;\n}\n\nfunction readHookFailureStage(value: unknown): HookFailureStage {\n\treturn isHookFailureStage(value) ? value : DEFAULT_HOOK_FAILURE.stage;\n}\n\nfunction freezeHookFailure(failure: HookFailure): HookFailure {\n\treturn Object.freeze({ ...failure });\n}\n\nfunction freezeHookPolicy(policy: HookPolicyMetadata): HookPolicyMetadata {\n\treturn Object.freeze({\n\t\tstages: Object.freeze([...policy.stages]),\n\t\teffects: Object.freeze([...policy.effects]),\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: policy.timeoutMs,\n\t});\n}\n\nfunction sanitizePolicyStages(value: unknown): readonly HookPolicyStage[] {\n\tif (!Array.isArray(value)) return [...DEFAULT_HOOK_POLICY.stages];\n\tconst present = new Set(value.filter(isHookPolicyStage));\n\tif (present.size === 0) return [...DEFAULT_HOOK_POLICY.stages];\n\treturn HOOK_POLICY_STAGES.filter((stage) => present.has(stage));\n}\n\nfunction sanitizePolicyEffects(value: unknown): readonly HookPolicyEffect[] {\n\tif (!Array.isArray(value)) return [...DEFAULT_HOOK_POLICY.effects];\n\tconst present = new Set(value.filter(isHookPolicyEffect));\n\tif (present.size === 0) return [...DEFAULT_HOOK_POLICY.effects];\n\treturn HOOK_POLICY_EFFECTS.filter((effect) => present.has(effect));\n}\n\nfunction sanitizePolicyTimeout(value: unknown): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value)) return DEFAULT_HOOK_POLICY.timeoutMs;\n\tconst timeoutMs = Math.trunc(value);\n\tif (timeoutMs <= 0 || timeoutMs > MAX_HOOK_TIMEOUT_MS) return DEFAULT_HOOK_POLICY.timeoutMs;\n\treturn timeoutMs;\n}\n\nexport function sanitizeHookFailure(failure?: unknown): HookFailure {\n\tif (!isRecord(failure)) {\n\t\treturn freezeHookFailure(DEFAULT_HOOK_FAILURE);\n\t}\n\n\treturn freezeHookFailure({\n\t\ttype: \"hook_failure\",\n\t\tsanitized: true,\n\t\tcode: readHookFailureCode(failure.code),\n\t\tstage: readHookFailureStage(failure.stage),\n\t});\n}\n\nexport function sanitizeHookPolicy(policy?: unknown): HookPolicyMetadata {\n\tif (!isRecord(policy)) {\n\t\treturn freezeHookPolicy({\n\t\t\tstages: [...DEFAULT_HOOK_POLICY.stages],\n\t\t\teffects: [...DEFAULT_HOOK_POLICY.effects],\n\t\t\tfailureMode: \"fail-closed\",\n\t\t\ttimeoutMs: DEFAULT_HOOK_POLICY.timeoutMs,\n\t\t});\n\t}\n\n\treturn freezeHookPolicy({\n\t\tstages: sanitizePolicyStages(policy.stages),\n\t\teffects: sanitizePolicyEffects(policy.effects),\n\t\tfailureMode: \"fail-closed\",\n\t\ttimeoutMs: sanitizePolicyTimeout(policy.timeoutMs),\n\t});\n}\n\nexport function formatFailClosedReason(failure?: unknown): string {\n\tvoid failure;\n\treturn FAIL_CLOSED_REASON;\n}\n\nexport function createFailClosedToolCallResult(failure?: unknown): FailClosedToolCallResult {\n\treturn {\n\t\tblock: true,\n\t\treason: formatFailClosedReason(failure),\n\t};\n}\n\nexport function createFailClosedToolResult(failure?: unknown): FailClosedToolResult {\n\treturn {\n\t\tcontent: [{ type: \"text\", text: formatFailClosedReason(failure) }],\n\t\tdetails: sanitizeHookFailure(failure),\n\t\tisError: true,\n\t};\n}\n"]}

package/dist/core/hooks/index.d.ts

@@ -1,3 +1,3 @@
-export { createFailClosedToolCallResult, createFailClosedToolResult, FAIL_CLOSED_REASON, formatFailClosedReason, sanitizeHookFailure, } from "./fail-closed.ts";
-export type { FailClosedTextContent, FailClosedToolCallResult, FailClosedToolResult, HookFailure, HookFailureCode, HookFailureStage, } from "./types.ts";
+export { createFailClosedToolCallResult, createFailClosedToolResult, DEFAULT_HOOK_POLICY, FAIL_CLOSED_REASON, formatFailClosedReason, MAX_HOOK_TIMEOUT_MS, sanitizeHookFailure, sanitizeHookPolicy, } from "./fail-closed.ts";
+export type { FailClosedTextContent, FailClosedToolCallResult, FailClosedToolResult, HookFailure, HookFailureCode, HookFailureMode, HookFailureStage, HookPolicyEffect, HookPolicyMetadata, HookPolicyStage, } from "./types.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/core/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,gBAAgB,GAChB,MAAM,YAAY,CAAC","sourcesContent":["export {\n\tcreateFailClosedToolCallResult,\n\tcreateFailClosedToolResult,\n\tFAIL_CLOSED_REASON,\n\tformatFailClosedReason,\n\tsanitizeHookFailure,\n} from \"./fail-closed.ts\";\nexport type {\n\tFailClosedTextContent,\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureStage,\n} from \"./types.ts\";\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GACf,MAAM,YAAY,CAAC","sourcesContent":["export {\n\tcreateFailClosedToolCallResult,\n\tcreateFailClosedToolResult,\n\tDEFAULT_HOOK_POLICY,\n\tFAIL_CLOSED_REASON,\n\tformatFailClosedReason,\n\tMAX_HOOK_TIMEOUT_MS,\n\tsanitizeHookFailure,\n\tsanitizeHookPolicy,\n} from \"./fail-closed.ts\";\nexport type {\n\tFailClosedTextContent,\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureMode,\n\tHookFailureStage,\n\tHookPolicyEffect,\n\tHookPolicyMetadata,\n\tHookPolicyStage,\n} from \"./types.ts\";\n"]}

package/dist/core/hooks/index.js

@@ -1,2 +1,2 @@
-export { createFailClosedToolCallResult, createFailClosedToolResult, FAIL_CLOSED_REASON, formatFailClosedReason, sanitizeHookFailure, } from "./fail-closed.js";
+export { createFailClosedToolCallResult, createFailClosedToolResult, DEFAULT_HOOK_POLICY, FAIL_CLOSED_REASON, formatFailClosedReason, MAX_HOOK_TIMEOUT_MS, sanitizeHookFailure, sanitizeHookPolicy, } from "./fail-closed.js";
 //# sourceMappingURL=index.js.map

package/dist/core/hooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACnB,MAAM,kBAAkB,CAAC","sourcesContent":["export {\n\tcreateFailClosedToolCallResult,\n\tcreateFailClosedToolResult,\n\tFAIL_CLOSED_REASON,\n\tformatFailClosedReason,\n\tsanitizeHookFailure,\n} from \"./fail-closed.ts\";\nexport type {\n\tFailClosedTextContent,\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureStage,\n} from \"./types.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,kBAAkB,CAAC","sourcesContent":["export {\n\tcreateFailClosedToolCallResult,\n\tcreateFailClosedToolResult,\n\tDEFAULT_HOOK_POLICY,\n\tFAIL_CLOSED_REASON,\n\tformatFailClosedReason,\n\tMAX_HOOK_TIMEOUT_MS,\n\tsanitizeHookFailure,\n\tsanitizeHookPolicy,\n} from \"./fail-closed.ts\";\nexport type {\n\tFailClosedTextContent,\n\tFailClosedToolCallResult,\n\tFailClosedToolResult,\n\tHookFailure,\n\tHookFailureCode,\n\tHookFailureMode,\n\tHookFailureStage,\n\tHookPolicyEffect,\n\tHookPolicyMetadata,\n\tHookPolicyStage,\n} from \"./types.ts\";\n"]}

package/dist/core/hooks/types.d.ts

@@ -1,5 +1,14 @@
 export type HookFailureCode = "hook_failed" | "hook_rejected" | "hook_timeout" | "hook_unavailable";
 export type HookFailureStage = "tool_call" | "tool_result" | "unknown";
+export type HookPolicyStage = "tool_call" | "tool_result" | "session_start" | "pre_compact" | "session_stop";
+export type HookPolicyEffect = "validator" | "mutator" | "observer";
+export type HookFailureMode = "fail-closed";
+export interface HookPolicyMetadata {
+    stages: readonly HookPolicyStage[];
+    effects: readonly HookPolicyEffect[];
+    failureMode: HookFailureMode;
+    timeoutMs: number;
+}
 /**
  * Sanitized hook failure metadata safe to expose in tool results.
  *

package/dist/core/hooks/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,eAAe,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEpG,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,wBAAwB;IACxC,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,IAAI,CAAC;CACd","sourcesContent":["export type HookFailureCode = \"hook_failed\" | \"hook_rejected\" | \"hook_timeout\" | \"hook_unavailable\";\n\nexport type HookFailureStage = \"tool_call\" | \"tool_result\" | \"unknown\";\n\n/**\n * Sanitized hook failure metadata safe to expose in tool results.\n *\n * This structure intentionally carries only bounded coded values. It must not\n * include raw causes, stacks, commands, content, or filesystem paths.\n */\nexport interface HookFailure {\n\ttype: \"hook_failure\";\n\tsanitized: true;\n\tcode: HookFailureCode;\n\tstage: HookFailureStage;\n}\n\nexport interface FailClosedTextContent {\n\ttype: \"text\";\n\ttext: string;\n}\n\nexport interface FailClosedToolCallResult {\n\tblock: true;\n\treason: string;\n}\n\nexport interface FailClosedToolResult {\n\tcontent: FailClosedTextContent[];\n\tdetails: HookFailure;\n\tisError: true;\n}\n"]}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/hooks/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,eAAe,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEpG,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAEvE,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,aAAa,GAAG,eAAe,GAAG,aAAa,GAAG,cAAc,CAAC;AAE7G,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG,aAAa,CAAC;AAE5C,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC,WAAW,EAAE,eAAe,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,wBAAwB;IACxC,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,IAAI,CAAC;CACd","sourcesContent":["export type HookFailureCode = \"hook_failed\" | \"hook_rejected\" | \"hook_timeout\" | \"hook_unavailable\";\n\nexport type HookFailureStage = \"tool_call\" | \"tool_result\" | \"unknown\";\n\nexport type HookPolicyStage = \"tool_call\" | \"tool_result\" | \"session_start\" | \"pre_compact\" | \"session_stop\";\n\nexport type HookPolicyEffect = \"validator\" | \"mutator\" | \"observer\";\n\nexport type HookFailureMode = \"fail-closed\";\n\nexport interface HookPolicyMetadata {\n\tstages: readonly HookPolicyStage[];\n\teffects: readonly HookPolicyEffect[];\n\tfailureMode: HookFailureMode;\n\ttimeoutMs: number;\n}\n\n/**\n * Sanitized hook failure metadata safe to expose in tool results.\n *\n * This structure intentionally carries only bounded coded values. It must not\n * include raw causes, stacks, commands, content, or filesystem paths.\n */\nexport interface HookFailure {\n\ttype: \"hook_failure\";\n\tsanitized: true;\n\tcode: HookFailureCode;\n\tstage: HookFailureStage;\n}\n\nexport interface FailClosedTextContent {\n\ttype: \"text\";\n\ttext: string;\n}\n\nexport interface FailClosedToolCallResult {\n\tblock: true;\n\treason: string;\n}\n\nexport interface FailClosedToolResult {\n\tcontent: FailClosedTextContent[];\n\tdetails: HookFailure;\n\tisError: true;\n}\n"]}

package/dist/core/hooks/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/hooks/types.ts"],"names":[],"mappings":"","sourcesContent":["export type HookFailureCode = \"hook_failed\" | \"hook_rejected\" | \"hook_timeout\" | \"hook_unavailable\";\n\nexport type HookFailureStage = \"tool_call\" | \"tool_result\" | \"unknown\";\n\n/**\n * Sanitized hook failure metadata safe to expose in tool results.\n *\n * This structure intentionally carries only bounded coded values. It must not\n * include raw causes, stacks, commands, content, or filesystem paths.\n */\nexport interface HookFailure {\n\ttype: \"hook_failure\";\n\tsanitized: true;\n\tcode: HookFailureCode;\n\tstage: HookFailureStage;\n}\n\nexport interface FailClosedTextContent {\n\ttype: \"text\";\n\ttext: string;\n}\n\nexport interface FailClosedToolCallResult {\n\tblock: true;\n\treason: string;\n}\n\nexport interface FailClosedToolResult {\n\tcontent: FailClosedTextContent[];\n\tdetails: HookFailure;\n\tisError: true;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/hooks/types.ts"],"names":[],"mappings":"","sourcesContent":["export type HookFailureCode = \"hook_failed\" | \"hook_rejected\" | \"hook_timeout\" | \"hook_unavailable\";\n\nexport type HookFailureStage = \"tool_call\" | \"tool_result\" | \"unknown\";\n\nexport type HookPolicyStage = \"tool_call\" | \"tool_result\" | \"session_start\" | \"pre_compact\" | \"session_stop\";\n\nexport type HookPolicyEffect = \"validator\" | \"mutator\" | \"observer\";\n\nexport type HookFailureMode = \"fail-closed\";\n\nexport interface HookPolicyMetadata {\n\tstages: readonly HookPolicyStage[];\n\teffects: readonly HookPolicyEffect[];\n\tfailureMode: HookFailureMode;\n\ttimeoutMs: number;\n}\n\n/**\n * Sanitized hook failure metadata safe to expose in tool results.\n *\n * This structure intentionally carries only bounded coded values. It must not\n * include raw causes, stacks, commands, content, or filesystem paths.\n */\nexport interface HookFailure {\n\ttype: \"hook_failure\";\n\tsanitized: true;\n\tcode: HookFailureCode;\n\tstage: HookFailureStage;\n}\n\nexport interface FailClosedTextContent {\n\ttype: \"text\";\n\ttext: string;\n}\n\nexport interface FailClosedToolCallResult {\n\tblock: true;\n\treason: string;\n}\n\nexport interface FailClosedToolResult {\n\tcontent: FailClosedTextContent[];\n\tdetails: HookFailure;\n\tisError: true;\n}\n"]}

package/dist/core/keybindings.d.ts

@@ -1,4 +1,4 @@
-import { type Keybinding, type KeybindingsConfig, type KeyId, KeybindingsManager as TuiKeybindingsManager } from "@earendil-works/omk-tui";
+import { type Keybinding, type KeybindingsConfig, type KeyId, KeybindingsManager as TuiKeybindingsManager } from "omk-tui";
 export interface AppKeybindings {
     "app.interrupt": true;
     "app.clear": true;
@@ -7,7 +7,6 @@ export interface AppKeybindings {
     "app.thinking.cycle": true;
     "app.model.cycleForward": true;
     "app.model.cycleBackward": true;
-    "app.model.providerPrevious": true;
     "app.model.select": true;
     "app.tools.expand": true;
     "app.thinking.toggle": true;
@@ -44,7 +43,7 @@ export interface AppKeybindings {
     "app.tree.filter.cycleBackward": true;
 }
 export type AppKeybinding = keyof AppKeybindings;
-declare module "@earendil-works/omk-tui" {
+declare module "omk-tui" {
     interface Keybindings extends AppKeybindings {
     }
 }
@@ -201,10 +200,6 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "shift+ctrl+p";
         readonly description: "Cycle to previous model";
     };
-    readonly "app.model.providerPrevious": {
-        readonly defaultKeys: "shift+tab";
-        readonly description: "Cycle to previous provider in the model selector";
-    };
     readonly "app.model.select": {
         readonly defaultKeys: "ctrl+l";
         readonly description: "Open model selector";
@@ -351,13 +346,6 @@ export declare class KeybindingsManager extends TuiKeybindingsManager {
     constructor(userBindings?: KeybindingsConfig, configPath?: string);
     static create(agentDir?: string): KeybindingsManager;
     reload(): void;
-    matchInScope(data: string, keybindings: readonly Keybinding[]): {
-        keybinding: Keybinding | undefined;
-        conflicts: Array<{
-            key: KeyId;
-            keybindings: Keybinding[];
-        }>;
-    };
     getEffectiveConfig(): KeybindingsConfig;
     private static loadFromFile;
 }

package/dist/core/keybindings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keybindings.d.ts","sourceRoot":"","sources":["../../src/core/keybindings.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,UAAU,EAEf,KAAK,iBAAiB,EACtB,KAAK,KAAK,EAGV,kBAAkB,IAAI,qBAAqB,EAC3C,MAAM,yBAAyB,CAAC;AAKjC,MAAM,WAAW,cAAc;IAC9B,eAAe,EAAE,IAAI,CAAC;IACtB,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,IAAI,CAAC;IACpB,oBAAoB,EAAE,IAAI,CAAC;IAC3B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,yBAAyB,EAAE,IAAI,CAAC;IAChC,4BAA4B,EAAE,IAAI,CAAC;IACnC,kBAAkB,EAAE,IAAI,CAAC;IACzB,kBAAkB,EAAE,IAAI,CAAC;IACzB,qBAAqB,EAAE,IAAI,CAAC;IAC5B,+BAA+B,EAAE,IAAI,CAAC;IACtC,qBAAqB,EAAE,IAAI,CAAC;IAC5B,sBAAsB,EAAE,IAAI,CAAC;IAC7B,qBAAqB,EAAE,IAAI,CAAC;IAC5B,0BAA0B,EAAE,IAAI,CAAC;IACjC,iBAAiB,EAAE,IAAI,CAAC;IACxB,kBAAkB,EAAE,IAAI,CAAC;IACzB,kBAAkB,EAAE,IAAI,CAAC;IACzB,oBAAoB,EAAE,IAAI,CAAC;IAC3B,mBAAmB,EAAE,IAAI,CAAC;IAC1B,uBAAuB,EAAE,IAAI,CAAC;IAC9B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,+BAA+B,EAAE,IAAI,CAAC;IACtC,wBAAwB,EAAE,IAAI,CAAC;IAC/B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,+BAA+B,EAAE,IAAI,CAAC;IACtC,iBAAiB,EAAE,IAAI,CAAC;IACxB,sBAAsB,EAAE,IAAI,CAAC;IAC7B,qBAAqB,EAAE,IAAI,CAAC;IAC5B,2BAA2B,EAAE,IAAI,CAAC;IAClC,sBAAsB,EAAE,IAAI,CAAC;IAC7B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,yBAAyB,EAAE,IAAI,CAAC;IAChC,yBAAyB,EAAE,IAAI,CAAC;IAChC,0BAA0B,EAAE,IAAI,CAAC;IACjC,6BAA6B,EAAE,IAAI,CAAC;IACpC,qBAAqB,EAAE,IAAI,CAAC;IAC5B,8BAA8B,EAAE,IAAI,CAAC;IACrC,+BAA+B,EAAE,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC;AAEjD,OAAO,QAAQ,yBAAyB,CAAC,CAAC;IACzC,UAAU,WAAY,SAAQ,cAAc;KAAG;CAC/C;AAED,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+IkB,CAAC;AAwF3C,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC7E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;CAClB,CAiBA;AA8BD,qBAAa,kBAAmB,SAAQ,qBAAqB;IAC5D,OAAO,CAAC,UAAU,CAAqB;IAEvC,YAAY,YAAY,GAAE,iBAAsB,EAAE,UAAU,CAAC,EAAE,MAAM,EAGpE;IAED,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAE,MAAsB,GAAG,kBAAkB,CAIlE;IAED,MAAM,IAAI,IAAI,CAGb;IAED,YAAY,CACX,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,SAAS,UAAU,EAAE,GAChC;QAAE,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,KAAK,CAAC;YAAC,WAAW,EAAE,UAAU,EAAE,CAAA;SAAE,CAAC,CAAA;KAAE,CA4BrG;IAED,kBAAkB,IAAI,iBAAiB,CAEtC;IAED,OAAO,CAAC,MAAM,CAAC,YAAY;CAK3B;AAED,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC","sourcesContent":["import {\n\ttype Keybinding,\n\ttype KeybindingDefinitions,\n\ttype KeybindingsConfig,\n\ttype KeyId,\n\tmatchesKey,\n\tTUI_KEYBINDINGS,\n\tKeybindingsManager as TuiKeybindingsManager,\n} from \"@earendil-works/omk-tui\";\nimport { existsSync, readFileSync } from \"fs\";\nimport { join } from \"path\";\nimport { getAgentDir } from \"../config.ts\";\n\nexport interface AppKeybindings {\n\t\"app.interrupt\": true;\n\t\"app.clear\": true;\n\t\"app.exit\": true;\n\t\"app.suspend\": true;\n\t\"app.thinking.cycle\": true;\n\t\"app.model.cycleForward\": true;\n\t\"app.model.cycleBackward\": true;\n\t\"app.model.providerPrevious\": true;\n\t\"app.model.select\": true;\n\t\"app.tools.expand\": true;\n\t\"app.thinking.toggle\": true;\n\t\"app.session.toggleNamedFilter\": true;\n\t\"app.editor.external\": true;\n\t\"app.message.followUp\": true;\n\t\"app.message.dequeue\": true;\n\t\"app.clipboard.pasteImage\": true;\n\t\"app.session.new\": true;\n\t\"app.session.tree\": true;\n\t\"app.session.fork\": true;\n\t\"app.session.resume\": true;\n\t\"app.tree.foldOrUp\": true;\n\t\"app.tree.unfoldOrDown\": true;\n\t\"app.tree.editLabel\": true;\n\t\"app.tree.toggleLabelTimestamp\": true;\n\t\"app.session.togglePath\": true;\n\t\"app.session.toggleSort\": true;\n\t\"app.session.rename\": true;\n\t\"app.session.delete\": true;\n\t\"app.session.deleteNoninvasive\": true;\n\t\"app.models.save\": true;\n\t\"app.models.enableAll\": true;\n\t\"app.models.clearAll\": true;\n\t\"app.models.toggleProvider\": true;\n\t\"app.models.reorderUp\": true;\n\t\"app.models.reorderDown\": true;\n\t\"app.tree.filter.default\": true;\n\t\"app.tree.filter.noTools\": true;\n\t\"app.tree.filter.userOnly\": true;\n\t\"app.tree.filter.labeledOnly\": true;\n\t\"app.tree.filter.all\": true;\n\t\"app.tree.filter.cycleForward\": true;\n\t\"app.tree.filter.cycleBackward\": true;\n}\n\nexport type AppKeybinding = keyof AppKeybindings;\n\ndeclare module \"@earendil-works/omk-tui\" {\n\tinterface Keybindings extends AppKeybindings {}\n}\n\nexport const KEYBINDINGS = {\n\t...TUI_KEYBINDINGS,\n\t\"app.interrupt\": { defaultKeys: \"escape\", description: \"Cancel or abort\" },\n\t\"app.clear\": { defaultKeys: \"ctrl+c\", description: \"Clear editor\" },\n\t\"app.exit\": { defaultKeys: \"ctrl+d\", description: \"Exit when editor is empty\" },\n\t\"app.suspend\": {\n\t\tdefaultKeys: process.platform === \"win32\" ? [] : \"ctrl+z\",\n\t\tdescription: \"Suspend to background\",\n\t},\n\t\"app.thinking.cycle\": {\n\t\tdefaultKeys: \"shift+tab\",\n\t\tdescription: \"Cycle thinking level\",\n\t},\n\t\"app.model.cycleForward\": {\n\t\tdefaultKeys: \"ctrl+p\",\n\t\tdescription: \"Cycle to next model\",\n\t},\n\t\"app.model.cycleBackward\": {\n\t\tdefaultKeys: \"shift+ctrl+p\",\n\t\tdescription: \"Cycle to previous model\",\n\t},\n\t\"app.model.providerPrevious\": {\n\t\tdefaultKeys: \"shift+tab\",\n\t\tdescription: \"Cycle to previous provider in the model selector\",\n\t},\n\t\"app.model.select\": { defaultKeys: \"ctrl+l\", description: \"Open model selector\" },\n\t\"app.tools.expand\": { defaultKeys: \"ctrl+o\", description: \"Toggle tool output\" },\n\t\"app.thinking.toggle\": {\n\t\tdefaultKeys: \"ctrl+t\",\n\t\tdescription: \"Toggle thinking blocks\",\n\t},\n\t\"app.session.toggleNamedFilter\": {\n\t\tdefaultKeys: \"ctrl+n\",\n\t\tdescription: \"Toggle named session filter\",\n\t},\n\t\"app.editor.external\": {\n\t\tdefaultKeys: \"ctrl+g\",\n\t\tdescription: \"Open external editor\",\n\t},\n\t\"app.message.followUp\": {\n\t\tdefaultKeys: \"alt+enter\",\n\t\tdescription: \"Queue follow-up message\",\n\t},\n\t\"app.message.dequeue\": {\n\t\tdefaultKeys: \"alt+up\",\n\t\tdescription: \"Restore queued messages\",\n\t},\n\t\"app.clipboard.pasteImage\": {\n\t\tdefaultKeys: process.platform === \"win32\" ? \"alt+v\" : \"ctrl+v\",\n\t\tdescription: \"Paste image from clipboard\",\n\t},\n\t\"app.session.new\": { defaultKeys: [], description: \"Start a new session\" },\n\t\"app.session.tree\": { defaultKeys: [], description: \"Open session tree\" },\n\t\"app.session.fork\": { defaultKeys: [], description: \"Fork current session\" },\n\t\"app.session.resume\": { defaultKeys: [], description: \"Resume a session\" },\n\t\"app.tree.foldOrUp\": {\n\t\tdefaultKeys: [\"ctrl+left\", \"alt+left\"],\n\t\tdescription: \"Fold tree branch or move up\",\n\t},\n\t\"app.tree.unfoldOrDown\": {\n\t\tdefaultKeys: [\"ctrl+right\", \"alt+right\"],\n\t\tdescription: \"Unfold tree branch or move down\",\n\t},\n\t\"app.tree.editLabel\": {\n\t\tdefaultKeys: \"shift+l\",\n\t\tdescription: \"Edit tree label\",\n\t},\n\t\"app.tree.toggleLabelTimestamp\": {\n\t\tdefaultKeys: \"shift+t\",\n\t\tdescription: \"Toggle tree label timestamps\",\n\t},\n\t\"app.session.togglePath\": {\n\t\tdefaultKeys: \"ctrl+p\",\n\t\tdescription: \"Toggle session path display\",\n\t},\n\t\"app.session.toggleSort\": {\n\t\tdefaultKeys: \"ctrl+s\",\n\t\tdescription: \"Toggle session sort mode\",\n\t},\n\t\"app.session.rename\": {\n\t\tdefaultKeys: \"ctrl+r\",\n\t\tdescription: \"Rename session\",\n\t},\n\t\"app.session.delete\": {\n\t\tdefaultKeys: \"ctrl+d\",\n\t\tdescription: \"Delete session\",\n\t},\n\t\"app.session.deleteNoninvasive\": {\n\t\tdefaultKeys: \"ctrl+backspace\",\n\t\tdescription: \"Delete session when query is empty\",\n\t},\n\t\"app.models.save\": {\n\t\tdefaultKeys: \"ctrl+s\",\n\t\tdescription: \"Save model selection\",\n\t},\n\t\"app.models.enableAll\": {\n\t\tdefaultKeys: \"ctrl+a\",\n\t\tdescription: \"Enable all models\",\n\t},\n\t\"app.models.clearAll\": {\n\t\tdefaultKeys: \"ctrl+x\",\n\t\tdescription: \"Clear all models\",\n\t},\n\t\"app.models.toggleProvider\": {\n\t\tdefaultKeys: \"ctrl+p\",\n\t\tdescription: \"Toggle all models for provider\",\n\t},\n\t\"app.models.reorderUp\": {\n\t\tdefaultKeys: \"alt+up\",\n\t\tdescription: \"Move model up in order\",\n\t},\n\t\"app.models.reorderDown\": {\n\t\tdefaultKeys: \"alt+down\",\n\t\tdescription: \"Move model down in order\",\n\t},\n\t\"app.tree.filter.default\": {\n\t\tdefaultKeys: \"ctrl+d\",\n\t\tdescription: \"Tree filter: default view\",\n\t},\n\t\"app.tree.filter.noTools\": {\n\t\tdefaultKeys: \"ctrl+t\",\n\t\tdescription: \"Tree filter: hide tool results\",\n\t},\n\t\"app.tree.filter.userOnly\": {\n\t\tdefaultKeys: \"ctrl+u\",\n\t\tdescription: \"Tree filter: user messages only\",\n\t},\n\t\"app.tree.filter.labeledOnly\": {\n\t\tdefaultKeys: \"ctrl+l\",\n\t\tdescription: \"Tree filter: labeled entries only\",\n\t},\n\t\"app.tree.filter.all\": {\n\t\tdefaultKeys: \"ctrl+a\",\n\t\tdescription: \"Tree filter: show all entries\",\n\t},\n\t\"app.tree.filter.cycleForward\": {\n\t\tdefaultKeys: \"ctrl+o\",\n\t\tdescription: \"Tree filter: cycle forward\",\n\t},\n\t\"app.tree.filter.cycleBackward\": {\n\t\tdefaultKeys: \"shift+ctrl+o\",\n\t\tdescription: \"Tree filter: cycle backward\",\n\t},\n} as const satisfies KeybindingDefinitions;\n\nconst KEYBINDING_NAME_MIGRATIONS = {\n\tcursorUp: \"tui.editor.cursorUp\",\n\tcursorDown: \"tui.editor.cursorDown\",\n\tcursorLeft: \"tui.editor.cursorLeft\",\n\tcursorRight: \"tui.editor.cursorRight\",\n\tcursorWordLeft: \"tui.editor.cursorWordLeft\",\n\tcursorWordRight: \"tui.editor.cursorWordRight\",\n\tcursorLineStart: \"tui.editor.cursorLineStart\",\n\tcursorLineEnd: \"tui.editor.cursorLineEnd\",\n\tjumpForward: \"tui.editor.jumpForward\",\n\tjumpBackward: \"tui.editor.jumpBackward\",\n\tpageUp: \"tui.editor.pageUp\",\n\tpageDown: \"tui.editor.pageDown\",\n\tdeleteCharBackward: \"tui.editor.deleteCharBackward\",\n\tdeleteCharForward: \"tui.editor.deleteCharForward\",\n\tdeleteWordBackward: \"tui.editor.deleteWordBackward\",\n\tdeleteWordForward: \"tui.editor.deleteWordForward\",\n\tdeleteToLineStart: \"tui.editor.deleteToLineStart\",\n\tdeleteToLineEnd: \"tui.editor.deleteToLineEnd\",\n\tyank: \"tui.editor.yank\",\n\tyankPop: \"tui.editor.yankPop\",\n\tundo: \"tui.editor.undo\",\n\tnewLine: \"tui.input.newLine\",\n\tsubmit: \"tui.input.submit\",\n\ttab: \"tui.input.tab\",\n\tcopy: \"tui.input.copy\",\n\tselectUp: \"tui.select.up\",\n\tselectDown: \"tui.select.down\",\n\tselectPageUp: \"tui.select.pageUp\",\n\tselectPageDown: \"tui.select.pageDown\",\n\tselectConfirm: \"tui.select.confirm\",\n\tselectCancel: \"tui.select.cancel\",\n\tinterrupt: \"app.interrupt\",\n\tclear: \"app.clear\",\n\texit: \"app.exit\",\n\tsuspend: \"app.suspend\",\n\tcycleThinkingLevel: \"app.thinking.cycle\",\n\tcycleModelForward: \"app.model.cycleForward\",\n\tcycleModelBackward: \"app.model.cycleBackward\",\n\tselectModel: \"app.model.select\",\n\texpandTools: \"app.tools.expand\",\n\ttoggleThinking: \"app.thinking.toggle\",\n\ttoggleSessionNamedFilter: \"app.session.toggleNamedFilter\",\n\texternalEditor: \"app.editor.external\",\n\tfollowUp: \"app.message.followUp\",\n\tdequeue: \"app.message.dequeue\",\n\tpasteImage: \"app.clipboard.pasteImage\",\n\tnewSession: \"app.session.new\",\n\ttree: \"app.session.tree\",\n\tfork: \"app.session.fork\",\n\tresume: \"app.session.resume\",\n\ttreeFoldOrUp: \"app.tree.foldOrUp\",\n\ttreeUnfoldOrDown: \"app.tree.unfoldOrDown\",\n\ttreeEditLabel: \"app.tree.editLabel\",\n\ttreeToggleLabelTimestamp: \"app.tree.toggleLabelTimestamp\",\n\ttoggleSessionPath: \"app.session.togglePath\",\n\ttoggleSessionSort: \"app.session.toggleSort\",\n\trenameSession: \"app.session.rename\",\n\tdeleteSession: \"app.session.delete\",\n\tdeleteSessionNoninvasive: \"app.session.deleteNoninvasive\",\n} as const satisfies Record<string, Keybinding>;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isLegacyKeybindingName(key: string): key is keyof typeof KEYBINDING_NAME_MIGRATIONS {\n\treturn key in KEYBINDING_NAME_MIGRATIONS;\n}\n\nfunction toKeybindingsConfig(value: unknown): KeybindingsConfig {\n\tif (!isRecord(value)) return {};\n\n\tconst config: KeybindingsConfig = {};\n\tfor (const [key, binding] of Object.entries(value)) {\n\t\tif (typeof binding === \"string\") {\n\t\t\tconfig[key] = binding as KeyId;\n\t\t\tcontinue;\n\t\t}\n\t\tif (Array.isArray(binding) && binding.every((entry) => typeof entry === \"string\")) {\n\t\t\tconfig[key] = binding as KeyId[];\n\t\t}\n\t}\n\treturn config;\n}\n\nexport function migrateKeybindingsConfig(rawConfig: Record<string, unknown>): {\n\tconfig: Record<string, unknown>;\n\tmigrated: boolean;\n} {\n\tconst config: Record<string, unknown> = {};\n\tlet migrated = false;\n\n\tfor (const [key, value] of Object.entries(rawConfig)) {\n\t\tconst nextKey = isLegacyKeybindingName(key) ? KEYBINDING_NAME_MIGRATIONS[key] : key;\n\t\tif (nextKey !== key) {\n\t\t\tmigrated = true;\n\t\t}\n\t\tif (key !== nextKey && Object.hasOwn(rawConfig, nextKey)) {\n\t\t\tmigrated = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconfig[nextKey] = value;\n\t}\n\n\treturn { config: orderKeybindingsConfig(config), migrated };\n}\n\nfunction orderKeybindingsConfig(config: Record<string, unknown>): Record<string, unknown> {\n\tconst ordered: Record<string, unknown> = {};\n\tfor (const keybinding of Object.keys(KEYBINDINGS)) {\n\t\tif (Object.hasOwn(config, keybinding)) {\n\t\t\tordered[keybinding] = config[keybinding];\n\t\t}\n\t}\n\n\tconst extras = Object.keys(config)\n\t\t.filter((key) => !Object.hasOwn(ordered, key))\n\t\t.sort();\n\tfor (const key of extras) {\n\t\tordered[key] = config[key];\n\t}\n\n\treturn ordered;\n}\n\nfunction loadRawConfig(path: string): Record<string, unknown> | undefined {\n\tif (!existsSync(path)) return undefined;\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(path, \"utf-8\")) as unknown;\n\t\treturn isRecord(parsed) ? parsed : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport class KeybindingsManager extends TuiKeybindingsManager {\n\tprivate configPath: string | undefined;\n\n\tconstructor(userBindings: KeybindingsConfig = {}, configPath?: string) {\n\t\tsuper(KEYBINDINGS, userBindings);\n\t\tthis.configPath = configPath;\n\t}\n\n\tstatic create(agentDir: string = getAgentDir()): KeybindingsManager {\n\t\tconst configPath = join(agentDir, \"keybindings.json\");\n\t\tconst userBindings = KeybindingsManager.loadFromFile(configPath);\n\t\treturn new KeybindingsManager(userBindings, configPath);\n\t}\n\n\treload(): void {\n\t\tif (!this.configPath) return;\n\t\tthis.setUserBindings(KeybindingsManager.loadFromFile(this.configPath));\n\t}\n\n\tmatchInScope(\n\t\tdata: string,\n\t\tkeybindings: readonly Keybinding[],\n\t): { keybinding: Keybinding | undefined; conflicts: Array<{ key: KeyId; keybindings: Keybinding[] }> } {\n\t\tconst matches: Array<{ keybinding: Keybinding; key: KeyId }> = [];\n\t\tfor (const keybinding of keybindings) {\n\t\t\tfor (const key of this.getKeys(keybinding)) {\n\t\t\t\tif (matchesKey(data, key)) {\n\t\t\t\t\tmatches.push({ keybinding, key });\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (matches.length <= 1) {\n\t\t\treturn { keybinding: matches[0]?.keybinding, conflicts: [] };\n\t\t}\n\n\t\tconst conflictsByKey = new Map<KeyId, Set<Keybinding>>();\n\t\tfor (const match of matches) {\n\t\t\tconst conflict = conflictsByKey.get(match.key) ?? new Set<Keybinding>();\n\t\t\tconflict.add(match.keybinding);\n\t\t\tconflictsByKey.set(match.key, conflict);\n\t\t}\n\n\t\treturn {\n\t\t\tkeybinding: undefined,\n\t\t\tconflicts: [...conflictsByKey]\n\t\t\t\t.map(([key, conflicted]) => ({ key, keybindings: [...conflicted] }))\n\t\t\t\t.filter((conflict) => conflict.keybindings.length > 1),\n\t\t};\n\t}\n\n\tgetEffectiveConfig(): KeybindingsConfig {\n\t\treturn this.getResolvedBindings();\n\t}\n\n\tprivate static loadFromFile(path: string): KeybindingsConfig {\n\t\tconst rawConfig = loadRawConfig(path);\n\t\tif (!rawConfig) return {};\n\t\treturn toKeybindingsConfig(migrateKeybindingsConfig(rawConfig).config);\n\t}\n}\n\nexport type { Keybinding, KeyId, KeybindingsConfig };\n"]}
+{"version":3,"file":"keybindings.d.ts","sourceRoot":"","sources":["../../src/core/keybindings.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,UAAU,EAEf,KAAK,iBAAiB,EACtB,KAAK,KAAK,EAEV,kBAAkB,IAAI,qBAAqB,EAC3C,MAAM,SAAS,CAAC;AAIjB,MAAM,WAAW,cAAc;IAC9B,eAAe,EAAE,IAAI,CAAC;IACtB,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,IAAI,CAAC;IACpB,oBAAoB,EAAE,IAAI,CAAC;IAC3B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,yBAAyB,EAAE,IAAI,CAAC;IAChC,kBAAkB,EAAE,IAAI,CAAC;IACzB,kBAAkB,EAAE,IAAI,CAAC;IACzB,qBAAqB,EAAE,IAAI,CAAC;IAC5B,+BAA+B,EAAE,IAAI,CAAC;IACtC,qBAAqB,EAAE,IAAI,CAAC;IAC5B,sBAAsB,EAAE,IAAI,CAAC;IAC7B,qBAAqB,EAAE,IAAI,CAAC;IAC5B,0BAA0B,EAAE,IAAI,CAAC;IACjC,iBAAiB,EAAE,IAAI,CAAC;IACxB,kBAAkB,EAAE,IAAI,CAAC;IACzB,kBAAkB,EAAE,IAAI,CAAC;IACzB,oBAAoB,EAAE,IAAI,CAAC;IAC3B,mBAAmB,EAAE,IAAI,CAAC;IAC1B,uBAAuB,EAAE,IAAI,CAAC;IAC9B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,+BAA+B,EAAE,IAAI,CAAC;IACtC,wBAAwB,EAAE,IAAI,CAAC;IAC/B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,+BAA+B,EAAE,IAAI,CAAC;IACtC,iBAAiB,EAAE,IAAI,CAAC;IACxB,sBAAsB,EAAE,IAAI,CAAC;IAC7B,qBAAqB,EAAE,IAAI,CAAC;IAC5B,2BAA2B,EAAE,IAAI,CAAC;IAClC,sBAAsB,EAAE,IAAI,CAAC;IAC7B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,yBAAyB,EAAE,IAAI,CAAC;IAChC,yBAAyB,EAAE,IAAI,CAAC;IAChC,0BAA0B,EAAE,IAAI,CAAC;IACjC,6BAA6B,EAAE,IAAI,CAAC;IACpC,qBAAqB,EAAE,IAAI,CAAC;IAC5B,8BAA8B,EAAE,IAAI,CAAC;IACrC,+BAA+B,EAAE,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC;AAEjD,OAAO,QAAQ,SAAS,CAAC,CAAC;IACzB,UAAU,WAAY,SAAQ,cAAc;KAAG;CAC/C;AAED,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2IkB,CAAC;AAwF3C,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC7E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;CAClB,CAiBA;AA8BD,qBAAa,kBAAmB,SAAQ,qBAAqB;IAC5D,OAAO,CAAC,UAAU,CAAqB;IAEvC,YAAY,YAAY,GAAE,iBAAsB,EAAE,UAAU,CAAC,EAAE,MAAM,EAGpE;IAED,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAE,MAAsB,GAAG,kBAAkB,CAIlE;IAED,MAAM,IAAI,IAAI,CAGb;IAED,kBAAkB,IAAI,iBAAiB,CAEtC;IAED,OAAO,CAAC,MAAM,CAAC,YAAY;CAK3B;AAED,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC","sourcesContent":["import { existsSync, readFileSync } from \"fs\";\nimport {\n\ttype Keybinding,\n\ttype KeybindingDefinitions,\n\ttype KeybindingsConfig,\n\ttype KeyId,\n\tTUI_KEYBINDINGS,\n\tKeybindingsManager as TuiKeybindingsManager,\n} from \"omk-tui\";\nimport { join } from \"path\";\nimport { getAgentDir } from \"../config.ts\";\n\nexport interface AppKeybindings {\n\t\"app.interrupt\": true;\n\t\"app.clear\": true;\n\t\"app.exit\": true;\n\t\"app.suspend\": true;\n\t\"app.thinking.cycle\": true;\n\t\"app.model.cycleForward\": true;\n\t\"app.model.cycleBackward\": true;\n\t\"app.model.select\": true;\n\t\"app.tools.expand\": true;\n\t\"app.thinking.toggle\": true;\n\t\"app.session.toggleNamedFilter\": true;\n\t\"app.editor.external\": true;\n\t\"app.message.followUp\": true;\n\t\"app.message.dequeue\": true;\n\t\"app.clipboard.pasteImage\": true;\n\t\"app.session.new\": true;\n\t\"app.session.tree\": true;\n\t\"app.session.fork\": true;\n\t\"app.session.resume\": true;\n\t\"app.tree.foldOrUp\": true;\n\t\"app.tree.unfoldOrDown\": true;\n\t\"app.tree.editLabel\": true;\n\t\"app.tree.toggleLabelTimestamp\": true;\n\t\"app.session.togglePath\": true;\n\t\"app.session.toggleSort\": true;\n\t\"app.session.rename\": true;\n\t\"app.session.delete\": true;\n\t\"app.session.deleteNoninvasive\": true;\n\t\"app.models.save\": true;\n\t\"app.models.enableAll\": true;\n\t\"app.models.clearAll\": true;\n\t\"app.models.toggleProvider\": true;\n\t\"app.models.reorderUp\": true;\n\t\"app.models.reorderDown\": true;\n\t\"app.tree.filter.default\": true;\n\t\"app.tree.filter.noTools\": true;\n\t\"app.tree.filter.userOnly\": true;\n\t\"app.tree.filter.labeledOnly\": true;\n\t\"app.tree.filter.all\": true;\n\t\"app.tree.filter.cycleForward\": true;\n\t\"app.tree.filter.cycleBackward\": true;\n}\n\nexport type AppKeybinding = keyof AppKeybindings;\n\ndeclare module \"omk-tui\" {\n\tinterface Keybindings extends AppKeybindings {}\n}\n\nexport const KEYBINDINGS = {\n\t...TUI_KEYBINDINGS,\n\t\"app.interrupt\": { defaultKeys: \"escape\", description: \"Cancel or abort\" },\n\t\"app.clear\": { defaultKeys: \"ctrl+c\", description: \"Clear editor\" },\n\t\"app.exit\": { defaultKeys: \"ctrl+d\", description: \"Exit when editor is empty\" },\n\t\"app.suspend\": {\n\t\tdefaultKeys: process.platform === \"win32\" ? [] : \"ctrl+z\",\n\t\tdescription: \"Suspend to background\",\n\t},\n\t\"app.thinking.cycle\": {\n\t\tdefaultKeys: \"shift+tab\",\n\t\tdescription: \"Cycle thinking level\",\n\t},\n\t\"app.model.cycleForward\": {\n\t\tdefaultKeys: \"ctrl+p\",\n\t\tdescription: \"Cycle to next model\",\n\t},\n\t\"app.model.cycleBackward\": {\n\t\tdefaultKeys: \"shift+ctrl+p\",\n\t\tdescription: \"Cycle to previous model\",\n\t},\n\t\"app.model.select\": { defaultKeys: \"ctrl+l\", description: \"Open model selector\" },\n\t\"app.tools.expand\": { defaultKeys: \"ctrl+o\", description: \"Toggle tool output\" },\n\t\"app.thinking.toggle\": {\n\t\tdefaultKeys: \"ctrl+t\",\n\t\tdescription: \"Toggle thinking blocks\",\n\t},\n\t\"app.session.toggleNamedFilter\": {\n\t\tdefaultKeys: \"ctrl+n\",\n\t\tdescription: \"Toggle named session filter\",\n\t},\n\t\"app.editor.external\": {\n\t\tdefaultKeys: \"ctrl+g\",\n\t\tdescription: \"Open external editor\",\n\t},\n\t\"app.message.followUp\": {\n\t\tdefaultKeys: \"alt+enter\",\n\t\tdescription: \"Queue follow-up message\",\n\t},\n\t\"app.message.dequeue\": {\n\t\tdefaultKeys: \"alt+up\",\n\t\tdescription: \"Restore queued messages\",\n\t},\n\t\"app.clipboard.pasteImage\": {\n\t\tdefaultKeys: process.platform === \"win32\" ? \"alt+v\" : \"ctrl+v\",\n\t\tdescription: \"Paste image from clipboard\",\n\t},\n\t\"app.session.new\": { defaultKeys: [], description: \"Start a new session\" },\n\t\"app.session.tree\": { defaultKeys: [], description: \"Open session tree\" },\n\t\"app.session.fork\": { defaultKeys: [], description: \"Fork current session\" },\n\t\"app.session.resume\": { defaultKeys: [], description: \"Resume a session\" },\n\t\"app.tree.foldOrUp\": {\n\t\tdefaultKeys: [\"ctrl+left\", \"alt+left\"],\n\t\tdescription: \"Fold tree branch or move up\",\n\t},\n\t\"app.tree.unfoldOrDown\": {\n\t\tdefaultKeys: [\"ctrl+right\", \"alt+right\"],\n\t\tdescription: \"Unfold tree branch or move down\",\n\t},\n\t\"app.tree.editLabel\": {\n\t\tdefaultKeys: \"shift+l\",\n\t\tdescription: \"Edit tree label\",\n\t},\n\t\"app.tree.toggleLabelTimestamp\": {\n\t\tdefaultKeys: \"shift+t\",\n\t\tdescription: \"Toggle tree label timestamps\",\n\t},\n\t\"app.session.togglePath\": {\n\t\tdefaultKeys: \"ctrl+p\",\n\t\tdescription: \"Toggle session path display\",\n\t},\n\t\"app.session.toggleSort\": {\n\t\tdefaultKeys: \"ctrl+s\",\n\t\tdescription: \"Toggle session sort mode\",\n\t},\n\t\"app.session.rename\": {\n\t\tdefaultKeys: \"ctrl+r\",\n\t\tdescription: \"Rename session\",\n\t},\n\t\"app.session.delete\": {\n\t\tdefaultKeys: \"ctrl+d\",\n\t\tdescription: \"Delete session\",\n\t},\n\t\"app.session.deleteNoninvasive\": {\n\t\tdefaultKeys: \"ctrl+backspace\",\n\t\tdescription: \"Delete session when query is empty\",\n\t},\n\t\"app.models.save\": {\n\t\tdefaultKeys: \"ctrl+s\",\n\t\tdescription: \"Save model selection\",\n\t},\n\t\"app.models.enableAll\": {\n\t\tdefaultKeys: \"ctrl+a\",\n\t\tdescription: \"Enable all models\",\n\t},\n\t\"app.models.clearAll\": {\n\t\tdefaultKeys: \"ctrl+x\",\n\t\tdescription: \"Clear all models\",\n\t},\n\t\"app.models.toggleProvider\": {\n\t\tdefaultKeys: \"ctrl+p\",\n\t\tdescription: \"Toggle all models for provider\",\n\t},\n\t\"app.models.reorderUp\": {\n\t\tdefaultKeys: \"alt+up\",\n\t\tdescription: \"Move model up in order\",\n\t},\n\t\"app.models.reorderDown\": {\n\t\tdefaultKeys: \"alt+down\",\n\t\tdescription: \"Move model down in order\",\n\t},\n\t\"app.tree.filter.default\": {\n\t\tdefaultKeys: \"ctrl+d\",\n\t\tdescription: \"Tree filter: default view\",\n\t},\n\t\"app.tree.filter.noTools\": {\n\t\tdefaultKeys: \"ctrl+t\",\n\t\tdescription: \"Tree filter: hide tool results\",\n\t},\n\t\"app.tree.filter.userOnly\": {\n\t\tdefaultKeys: \"ctrl+u\",\n\t\tdescription: \"Tree filter: user messages only\",\n\t},\n\t\"app.tree.filter.labeledOnly\": {\n\t\tdefaultKeys: \"ctrl+l\",\n\t\tdescription: \"Tree filter: labeled entries only\",\n\t},\n\t\"app.tree.filter.all\": {\n\t\tdefaultKeys: \"ctrl+a\",\n\t\tdescription: \"Tree filter: show all entries\",\n\t},\n\t\"app.tree.filter.cycleForward\": {\n\t\tdefaultKeys: \"ctrl+o\",\n\t\tdescription: \"Tree filter: cycle forward\",\n\t},\n\t\"app.tree.filter.cycleBackward\": {\n\t\tdefaultKeys: \"shift+ctrl+o\",\n\t\tdescription: \"Tree filter: cycle backward\",\n\t},\n} as const satisfies KeybindingDefinitions;\n\nconst KEYBINDING_NAME_MIGRATIONS = {\n\tcursorUp: \"tui.editor.cursorUp\",\n\tcursorDown: \"tui.editor.cursorDown\",\n\tcursorLeft: \"tui.editor.cursorLeft\",\n\tcursorRight: \"tui.editor.cursorRight\",\n\tcursorWordLeft: \"tui.editor.cursorWordLeft\",\n\tcursorWordRight: \"tui.editor.cursorWordRight\",\n\tcursorLineStart: \"tui.editor.cursorLineStart\",\n\tcursorLineEnd: \"tui.editor.cursorLineEnd\",\n\tjumpForward: \"tui.editor.jumpForward\",\n\tjumpBackward: \"tui.editor.jumpBackward\",\n\tpageUp: \"tui.editor.pageUp\",\n\tpageDown: \"tui.editor.pageDown\",\n\tdeleteCharBackward: \"tui.editor.deleteCharBackward\",\n\tdeleteCharForward: \"tui.editor.deleteCharForward\",\n\tdeleteWordBackward: \"tui.editor.deleteWordBackward\",\n\tdeleteWordForward: \"tui.editor.deleteWordForward\",\n\tdeleteToLineStart: \"tui.editor.deleteToLineStart\",\n\tdeleteToLineEnd: \"tui.editor.deleteToLineEnd\",\n\tyank: \"tui.editor.yank\",\n\tyankPop: \"tui.editor.yankPop\",\n\tundo: \"tui.editor.undo\",\n\tnewLine: \"tui.input.newLine\",\n\tsubmit: \"tui.input.submit\",\n\ttab: \"tui.input.tab\",\n\tcopy: \"tui.input.copy\",\n\tselectUp: \"tui.select.up\",\n\tselectDown: \"tui.select.down\",\n\tselectPageUp: \"tui.select.pageUp\",\n\tselectPageDown: \"tui.select.pageDown\",\n\tselectConfirm: \"tui.select.confirm\",\n\tselectCancel: \"tui.select.cancel\",\n\tinterrupt: \"app.interrupt\",\n\tclear: \"app.clear\",\n\texit: \"app.exit\",\n\tsuspend: \"app.suspend\",\n\tcycleThinkingLevel: \"app.thinking.cycle\",\n\tcycleModelForward: \"app.model.cycleForward\",\n\tcycleModelBackward: \"app.model.cycleBackward\",\n\tselectModel: \"app.model.select\",\n\texpandTools: \"app.tools.expand\",\n\ttoggleThinking: \"app.thinking.toggle\",\n\ttoggleSessionNamedFilter: \"app.session.toggleNamedFilter\",\n\texternalEditor: \"app.editor.external\",\n\tfollowUp: \"app.message.followUp\",\n\tdequeue: \"app.message.dequeue\",\n\tpasteImage: \"app.clipboard.pasteImage\",\n\tnewSession: \"app.session.new\",\n\ttree: \"app.session.tree\",\n\tfork: \"app.session.fork\",\n\tresume: \"app.session.resume\",\n\ttreeFoldOrUp: \"app.tree.foldOrUp\",\n\ttreeUnfoldOrDown: \"app.tree.unfoldOrDown\",\n\ttreeEditLabel: \"app.tree.editLabel\",\n\ttreeToggleLabelTimestamp: \"app.tree.toggleLabelTimestamp\",\n\ttoggleSessionPath: \"app.session.togglePath\",\n\ttoggleSessionSort: \"app.session.toggleSort\",\n\trenameSession: \"app.session.rename\",\n\tdeleteSession: \"app.session.delete\",\n\tdeleteSessionNoninvasive: \"app.session.deleteNoninvasive\",\n} as const satisfies Record<string, Keybinding>;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isLegacyKeybindingName(key: string): key is keyof typeof KEYBINDING_NAME_MIGRATIONS {\n\treturn key in KEYBINDING_NAME_MIGRATIONS;\n}\n\nfunction toKeybindingsConfig(value: unknown): KeybindingsConfig {\n\tif (!isRecord(value)) return {};\n\n\tconst config: KeybindingsConfig = {};\n\tfor (const [key, binding] of Object.entries(value)) {\n\t\tif (typeof binding === \"string\") {\n\t\t\tconfig[key] = binding as KeyId;\n\t\t\tcontinue;\n\t\t}\n\t\tif (Array.isArray(binding) && binding.every((entry) => typeof entry === \"string\")) {\n\t\t\tconfig[key] = binding as KeyId[];\n\t\t}\n\t}\n\treturn config;\n}\n\nexport function migrateKeybindingsConfig(rawConfig: Record<string, unknown>): {\n\tconfig: Record<string, unknown>;\n\tmigrated: boolean;\n} {\n\tconst config: Record<string, unknown> = {};\n\tlet migrated = false;\n\n\tfor (const [key, value] of Object.entries(rawConfig)) {\n\t\tconst nextKey = isLegacyKeybindingName(key) ? KEYBINDING_NAME_MIGRATIONS[key] : key;\n\t\tif (nextKey !== key) {\n\t\t\tmigrated = true;\n\t\t}\n\t\tif (key !== nextKey && Object.hasOwn(rawConfig, nextKey)) {\n\t\t\tmigrated = true;\n\t\t\tcontinue;\n\t\t}\n\t\tconfig[nextKey] = value;\n\t}\n\n\treturn { config: orderKeybindingsConfig(config), migrated };\n}\n\nfunction orderKeybindingsConfig(config: Record<string, unknown>): Record<string, unknown> {\n\tconst ordered: Record<string, unknown> = {};\n\tfor (const keybinding of Object.keys(KEYBINDINGS)) {\n\t\tif (Object.hasOwn(config, keybinding)) {\n\t\t\tordered[keybinding] = config[keybinding];\n\t\t}\n\t}\n\n\tconst extras = Object.keys(config)\n\t\t.filter((key) => !Object.hasOwn(ordered, key))\n\t\t.sort();\n\tfor (const key of extras) {\n\t\tordered[key] = config[key];\n\t}\n\n\treturn ordered;\n}\n\nfunction loadRawConfig(path: string): Record<string, unknown> | undefined {\n\tif (!existsSync(path)) return undefined;\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(path, \"utf-8\")) as unknown;\n\t\treturn isRecord(parsed) ? parsed : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport class KeybindingsManager extends TuiKeybindingsManager {\n\tprivate configPath: string | undefined;\n\n\tconstructor(userBindings: KeybindingsConfig = {}, configPath?: string) {\n\t\tsuper(KEYBINDINGS, userBindings);\n\t\tthis.configPath = configPath;\n\t}\n\n\tstatic create(agentDir: string = getAgentDir()): KeybindingsManager {\n\t\tconst configPath = join(agentDir, \"keybindings.json\");\n\t\tconst userBindings = KeybindingsManager.loadFromFile(configPath);\n\t\treturn new KeybindingsManager(userBindings, configPath);\n\t}\n\n\treload(): void {\n\t\tif (!this.configPath) return;\n\t\tthis.setUserBindings(KeybindingsManager.loadFromFile(this.configPath));\n\t}\n\n\tgetEffectiveConfig(): KeybindingsConfig {\n\t\treturn this.getResolvedBindings();\n\t}\n\n\tprivate static loadFromFile(path: string): KeybindingsConfig {\n\t\tconst rawConfig = loadRawConfig(path);\n\t\tif (!rawConfig) return {};\n\t\treturn toKeybindingsConfig(migrateKeybindingsConfig(rawConfig).config);\n\t}\n}\n\nexport type { Keybinding, KeyId, KeybindingsConfig };\n"]}