promptkaizen-agent 0.1.0 → 0.3.0

package/dist/exec/pk-execute.js

@@ -0,0 +1,174 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runPkExecute = runPkExecute;
+const crypto_1 = require("crypto");
+const reduction_1 = require("../hooks/reduction");
+const policy_1 = require("./policy");
+const executor_1 = require("./executor");
+function hashPreview(code) {
+    return (0, crypto_1.createHash)('sha256').update(code).digest('hex').slice(0, 16);
+}
+/** 実行ログ/拒否ログの観測 entry を組み立てる (本文はマスク済み・先頭のみ)。 */
+function buildExecEntry(p) {
+    const maskedCode = p.maskText(p.code).slice(0, 2000);
+    const entry = {
+        filepath: 'mcp://pk_execute',
+        lineNumber: 0,
+        parsedAt: p.now,
+        source: 'hook',
+        raw: {
+            type: 'pk_execute',
+            sessionId: null, // MCP 経由はセッション文脈を持たない
+            timestamp: p.now,
+            language: p.language,
+            outcome: p.outcome,
+            exitCode: p.exitCode ?? null,
+            durationMs: p.durationMs ?? null,
+            codeMasked: maskedCode,
+        },
+    };
+    if (p.outcome === 'blocked' && p.ruleId) {
+        const detection = {
+            category: 'custom',
+            ruleId: 'pk_execute_blocked',
+            severity: 'high',
+            count: 1,
+            // 拒否理由の識別補助。コードはマスク済み先頭のみ (cloud 上限 200 文字)。
+            maskedPreview: `[${p.ruleId}] ${maskedCode}`.slice(0, 200),
+            matchHash: hashPreview(p.code),
+        };
+        entry.detections = [detection];
+    }
+    if (p.reduction)
+        entry.reduction = p.reduction;
+    return entry;
+}
+/** pk_execute 本体。例外を投げず PkExecuteResult に正規化する。 */
+async function runPkExecute(deps, args) {
+    const now = deps.now ?? (() => new Date().toISOString());
+    const language = args.language;
+    const code = typeof args.code === 'string' ? args.code : '';
+    if (!(0, executor_1.isExecLanguage)(language)) {
+        return {
+            content: [{ type: 'text', text: 'language は bash / node / python のいずれかを指定してください' }],
+            isError: true,
+        };
+    }
+    if (!code.trim()) {
+        return { content: [{ type: 'text', text: 'code は必須です' }], isError: true };
+    }
+    const timeoutArg = typeof args.timeout === 'number' && Number.isFinite(args.timeout) ? args.timeout : null;
+    const timeoutMs = timeoutArg ? Math.min(Math.max(timeoutArg * 1000, 1000), 300_000) : deps.timeoutMs;
+    // 1. 実行前ポリシー判定 (#44 接続)。拒否は違反イベントとして記録される。
+    const verdict = (0, policy_1.checkExecutionPolicy)(code, deps.getPolicy(), deps.projectRoot);
+    if (!verdict.allowed) {
+        await deps
+            .recordEntry(buildExecEntry({
+            maskText: deps.maskText,
+            now: now(),
+            language,
+            code,
+            outcome: 'blocked',
+            ruleId: verdict.ruleId,
+        }))
+            .catch(() => { });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `PromptKaizen のポリシーにより実行をブロックしました: ${verdict.reason}\n` +
+                        'コードを修正するか、組織の管理者にポリシー設定を確認してください。',
+                },
+            ],
+            isError: true,
+        };
+    }
+    // 2. 実行 (サンドボックス制約は executor 側)。
+    const exec = deps.execImpl ?? executor_1.executeCode;
+    const result = await exec({
+        language,
+        code,
+        projectRoot: deps.projectRoot,
+        timeoutMs,
+    });
+    // 3. 返却 stdout のマスク → 上限トリム (超過分は R1 退避 + 削減イベント)。
+    const masked = deps.maskText(result.stdout);
+    let returned = masked;
+    let reduction;
+    let overflowNote = '';
+    if (Buffer.byteLength(masked, 'utf8') > deps.maxReturnBytes) {
+        returned = masked.slice(0, deps.maxReturnBytes);
+        const refId = (0, executor_1.generateExecId)();
+        try {
+            deps.storeRef({
+                refId,
+                sessionId: null,
+                toolName: 'pk_execute',
+                cwd: deps.projectRoot,
+                createdAt: now(),
+                originalBytes: Buffer.byteLength(masked, 'utf8'),
+                originalTokens: (0, reduction_1.estimateTokensFromText)(masked),
+                replacedTokens: (0, reduction_1.estimateTokensFromText)(returned),
+                savedTokens: (0, reduction_1.estimateTokensFromText)(masked) - (0, reduction_1.estimateTokensFromText)(returned),
+                body: masked,
+            });
+            reduction = {
+                kind: 'r2_execute',
+                refId,
+                originalTokens: (0, reduction_1.estimateTokensFromText)(masked),
+                replacedTokens: (0, reduction_1.estimateTokensFromText)(returned),
+                savedTokens: (0, reduction_1.estimateTokensFromText)(masked) - (0, reduction_1.estimateTokensFromText)(returned),
+            };
+            overflowNote =
+                `\n--- stdout が上限 (${deps.maxReturnBytes.toLocaleString()} bytes) を超えたため切り詰めました。` +
+                    `全文: pk_fetch(ref_id: "${refId}") / 絞り込み: pk_fetch(ref_id: "${refId}", query: "検索語") ---`;
+        }
+        catch {
+            // 退避失敗時は参照を案内しない (切り詰めのみ)。
+            overflowNote = `\n--- stdout が上限 (${deps.maxReturnBytes.toLocaleString()} bytes) を超えたため切り詰めました ---`;
+        }
+    }
+    // 4. 実行ログ (#68) + 削減イベント (#92) を記録 (best-effort)。
+    await deps
+        .recordEntry(buildExecEntry({
+        maskText: deps.maskText,
+        now: now(),
+        language,
+        code,
+        outcome: 'executed',
+        exitCode: result.exitCode,
+        durationMs: result.durationMs,
+        reduction,
+    }))
+        .catch(() => { });
+    // 5. 応答の組み立て。
+    if (result.timedOut) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `タイムアウト (${Math.round(timeoutMs / 1000)}s) のため実行を中断しました。` + (returned ? `\n--- 中断までの stdout ---\n${returned}${overflowNote}` : ''),
+                },
+            ],
+            isError: true,
+        };
+    }
+    if (result.exitCode !== 0) {
+        const stderrMasked = deps.maskText(result.stderrHead);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `exit code ${result.exitCode ?? 'null'} (${result.durationMs}ms)\n` +
+                        (stderrMasked ? `--- stderr (先頭) ---\n${stderrMasked}\n` : '') +
+                        (returned ? `--- stdout ---\n${returned}${overflowNote}` : ''),
+                },
+            ],
+            isError: true,
+        };
+    }
+    return {
+        content: [{ type: 'text', text: (returned || '(stdout なし)') + overflowNote }],
+    };
+}
+//# sourceMappingURL=pk-execute.js.map

package/dist/exec/pk-execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pk-execute.js","sourceRoot":"","sources":["../../src/exec/pk-execute.ts"],"names":[],"mappings":";;AA2FA,oCA2IC;AAtOD,mCAAmC;AACnC,kDAA2D;AAK3D,qCAAqE;AACrE,yCAAyF;AAkCzF,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,iDAAiD;AACjD,SAAS,cAAc,CAAC,CAUvB;IACC,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,KAAK,GAAgB;QACzB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,GAAG;QACf,MAAM,EAAE,MAAM;QACd,GAAG,EAAE;YACH,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,IAAI,EAAE,sBAAsB;YACvC,SAAS,EAAE,CAAC,CAAC,GAAG;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAChC,UAAU,EAAE,UAAU;SACvB;KACF,CAAA;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,SAAS,GAAkB;YAC/B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC;YACR,6CAA6C;YAC7C,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1D,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;SAC/B,CAAA;QACD,KAAK,CAAC,UAAU,GAAG,CAAC,SAAS,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAA;IAC9C,OAAO,KAAK,CAAA;AACd,CAAC;AAED,mDAAmD;AAC5C,KAAK,UAAU,YAAY,CAChC,IAAmB,EACnB,IAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3D,IAAI,CAAC,IAAA,yBAAc,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;YACnF,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC3E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1G,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA;IAEpG,2CAA2C;IAC3C,MAAM,OAAO,GAAG,IAAA,6BAAoB,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IAC9E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI;aACP,WAAW,CACV,cAAc,CAAC;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,GAAG,EAAE;YACV,QAAQ;YACR,IAAI;YACJ,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CACH;aACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,qCAAqC,OAAO,CAAC,MAAM,IAAI;wBACvD,mCAAmC;iBACtC;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,sBAAW,CAAA;IACzC,MAAM,MAAM,GAAe,MAAM,IAAI,CAAC;QACpC,QAAQ;QACR,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS;KACV,CAAC,CAAA;IAEF,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,QAAQ,GAAG,MAAM,CAAA;IACrB,IAAI,SAAoC,CAAA;IACxC,IAAI,YAAY,GAAG,EAAE,CAAA;IACrB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5D,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,IAAA,yBAAc,GAAE,CAAA;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC;gBACZ,KAAK;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,YAAY;gBACtB,GAAG,EAAE,IAAI,CAAC,WAAW;gBACrB,SAAS,EAAE,GAAG,EAAE;gBAChB,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;gBAChD,cAAc,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC;gBAC9C,cAAc,EAAE,IAAA,kCAAsB,EAAC,QAAQ,CAAC;gBAChD,WAAW,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC,GAAG,IAAA,kCAAsB,EAAC,QAAQ,CAAC;gBAC9E,IAAI,EAAE,MAAM;aACb,CAAC,CAAA;YACF,SAAS,GAAG;gBACV,IAAI,EAAE,YAAY;gBAClB,KAAK;gBACL,cAAc,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC;gBAC9C,cAAc,EAAE,IAAA,kCAAsB,EAAC,QAAQ,CAAC;gBAChD,WAAW,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC,GAAG,IAAA,kCAAsB,EAAC,QAAQ,CAAC;aAC/E,CAAA;YACD,YAAY;gBACV,qBAAqB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,wBAAwB;oBACjF,yBAAyB,KAAK,gCAAgC,KAAK,sBAAsB,CAAA;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;YAC3B,YAAY,GAAG,qBAAqB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,2BAA2B,CAAA;QACrG,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,IAAI;SACP,WAAW,CACV,cAAc,CAAC;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,GAAG,EAAE;QACV,QAAQ;QACR,IAAI;QACJ,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS;KACV,CAAC,CACH;SACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAElB,cAAc;IACd,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,kBAAkB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,2BAA2B,QAAQ,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzI;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACrD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,aAAa,MAAM,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,UAAU,OAAO;wBACnE,CAAC,YAAY,CAAC,CAAC,CAAC,wBAAwB,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,QAAQ,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,IAAI,aAAa,CAAC,GAAG,YAAY,EAAE,CAAC;KAC9E,CAAA;AACH,CAAC"}

package/dist/exec/policy-fetcher.d.ts

@@ -0,0 +1,9 @@
+import type { ExecutionPolicy } from './policy';
+export interface FetchExecutionPolicyOptions {
+    apiEndpoint: string;
+    apiKey: string;
+    fetchImpl?: typeof fetch;
+}
+/** 組織/ユーザーの実行ポリシーを取得する。未設定・通信エラーは null。 */
+export declare function fetchExecutionPolicy(opts: FetchExecutionPolicyOptions): Promise<ExecutionPolicy | null>;
+//# sourceMappingURL=policy-fetcher.d.ts.map

package/dist/exec/policy-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fetcher.d.ts","sourceRoot":"","sources":["../../src/exec/policy-fetcher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAgB/C,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,2CAA2C;AAC3C,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAuBjC"}

package/dist/exec/policy-fetcher.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchExecutionPolicy = fetchExecutionPolicy;
+const zod_1 = require("zod");
+const logger_1 = require("../logger");
+const mask_rules_fetcher_1 = require("../mask-rules-fetcher");
+// =============================================
+// 組織実行ポリシーの取得 (Issue #94 / #44 接続)
+// =============================================
+//
+// 配信は既存の getAgentMaskRules 応答に同梱される execution フィールドを使う
+// (新エンドポイントを増やさない — functions のデプロイ明示列挙を変えないため)。
+// 取得できない場合は null を返し、ビルトイン禁止リストのみで動作する
+// (緩める方向には倒れない = 安全側)。
+const ExecutionPolicySchema = zod_1.z.object({
+    forbiddenCommands: zod_1.z.array(zod_1.z.string().min(1).max(200)).max(50).default([]),
+    forbiddenPaths: zod_1.z.array(zod_1.z.string().min(1).max(200)).max(50).default([]),
+});
+/** 組織/ユーザーの実行ポリシーを取得する。未設定・通信エラーは null。 */
+async function fetchExecutionPolicy(opts) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    try {
+        const res = await doFetch((0, mask_rules_fetcher_1.maskRulesUrl)(opts.apiEndpoint), {
+            method: 'GET',
+            headers: { Authorization: `Bearer ${opts.apiKey}` },
+        });
+        if (!res.ok) {
+            logger_1.logger.warn('fetchExecutionPolicy: non-OK response', { status: res.status });
+            return null;
+        }
+        const body = (await res.json());
+        if (!body.success || body.execution == null)
+            return null;
+        const parsed = ExecutionPolicySchema.safeParse(body.execution);
+        if (!parsed.success) {
+            logger_1.logger.warn('fetchExecutionPolicy: invalid payload', { error: parsed.error.message });
+            return null;
+        }
+        return parsed.data;
+    }
+    catch (e) {
+        logger_1.logger.warn('fetchExecutionPolicy failed', { error: e.message });
+        return null;
+    }
+}
+//# sourceMappingURL=policy-fetcher.js.map

package/dist/exec/policy-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fetcher.js","sourceRoot":"","sources":["../../src/exec/policy-fetcher.ts"],"names":[],"mappings":";;AA0BA,oDAyBC;AAnDD,6BAAuB;AACvB,sCAAkC;AAClC,8DAAoD;AAGpD,gDAAgD;AAChD,mCAAmC;AACnC,gDAAgD;AAChD,EAAE;AACF,uDAAuD;AACvD,iDAAiD;AACjD,uCAAuC;AACvC,uBAAuB;AAEvB,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxE,CAAC,CAAA;AAQF,2CAA2C;AACpC,KAAK,UAAU,oBAAoB,CACxC,IAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAA,iCAAY,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;SACpD,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,eAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5E,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+C,CAAA;QAC7E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACrF,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/exec/policy.d.ts

@@ -0,0 +1,32 @@
+/** 組織ポリシー (#44 PolicyConfig.execution) の agent 側表現。 */
+export interface ExecutionPolicy {
+    /** 禁止コマンド (正規表現文字列)。 */
+    forbiddenCommands: string[];
+    /** 禁止パス (前方一致 / ~ 展開対応)。 */
+    forbiddenPaths: string[];
+}
+/**
+ * ビルトイン禁止コマンド (高シグナルのみ。誤検知しやすい汎用語は入れない)。
+ * 組織ポリシーは追加方向にのみ働く (緩める方向の上書きは不可 = 安全側)。
+ */
+export declare const BUILTIN_FORBIDDEN_COMMANDS: Array<{
+    ruleId: string;
+    pattern: string;
+    label: string;
+}>;
+/** ビルトイン禁止パス (秘匿情報ディレクトリ)。組織ポリシーで追加可能。 */
+export declare const BUILTIN_FORBIDDEN_PATHS: string[];
+export interface PolicyVerdict {
+    allowed: boolean;
+    /** 拒否時のみ。detection メタ・拒否メッセージに使う。 */
+    ruleId?: string;
+    reason?: string;
+}
+/**
+ * code を実行ポリシーに照らす。拒否は最初の該当 1 件を返す。
+ * - 禁止コマンド: ビルトイン + 組織ポリシーの正規表現
+ * - 禁止パス: ビルトイン + 組織ポリシー (~ 表記と展開後の両方で部分一致)
+ * - プロジェクトルート外の絶対パス参照 (ホーム直下・システム領域) を拒否
+ */
+export declare function checkExecutionPolicy(code: string, policy: ExecutionPolicy | null, projectRoot: string): PolicyVerdict;
+//# sourceMappingURL=policy.d.ts.map

package/dist/exec/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/exec/policy.ts"],"names":[],"mappings":"AAiBA,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,4BAA4B;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAQhG,CAAA;AAED,0CAA0C;AAC1C,eAAO,MAAM,uBAAuB,UAA0E,CAAA;AAE9G,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,GAAG,IAAI,EAC9B,WAAW,EAAE,MAAM,GAClB,aAAa,CAkDf"}

package/dist/exec/policy.js

@@ -0,0 +1,88 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILTIN_FORBIDDEN_PATHS = exports.BUILTIN_FORBIDDEN_COMMANDS = void 0;
+exports.checkExecutionPolicy = checkExecutionPolicy;
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+/**
+ * ビルトイン禁止コマンド (高シグナルのみ。誤検知しやすい汎用語は入れない)。
+ * 組織ポリシーは追加方向にのみ働く (緩める方向の上書きは不可 = 安全側)。
+ */
+exports.BUILTIN_FORBIDDEN_COMMANDS = [
+    { ruleId: 'exec_rm_rf', pattern: 'rm\\s+(-[a-zA-Z]*r[a-zA-Z]*f|-[a-zA-Z]*f[a-zA-Z]*r)\\b', label: 'rm -rf' },
+    { ruleId: 'exec_sudo', pattern: '(^|[\\s;|&])sudo\\s', label: 'sudo' },
+    { ruleId: 'exec_mkfs', pattern: '\\bmkfs(\\.|\\s)', label: 'mkfs' },
+    { ruleId: 'exec_dd_device', pattern: '\\bdd\\s+[^\\n]*of=/dev/', label: 'dd of=/dev/*' },
+    { ruleId: 'exec_fork_bomb', pattern: ':\\(\\)\\s*\\{\\s*:\\s*\\|\\s*:', label: 'fork bomb' },
+    { ruleId: 'exec_shutdown', pattern: '(^|[\\s;|&])(shutdown|reboot|halt)\\s*($|[\\s;|&-])', label: 'shutdown/reboot' },
+    { ruleId: 'exec_curl_pipe_sh', pattern: '(curl|wget)\\s[^\\n|]*\\|\\s*(ba|z)?sh\\b', label: 'curl | sh' },
+];
+/** ビルトイン禁止パス (秘匿情報ディレクトリ)。組織ポリシーで追加可能。 */
+exports.BUILTIN_FORBIDDEN_PATHS = ['~/.ssh', '~/.aws', '~/.gnupg', '~/.config/gcloud', '~/.promptkaizen'];
+function expandHome(p) {
+    return p.startsWith('~') ? path_1.default.join(os_1.default.homedir(), p.slice(1)) : p;
+}
+/**
+ * code を実行ポリシーに照らす。拒否は最初の該当 1 件を返す。
+ * - 禁止コマンド: ビルトイン + 組織ポリシーの正規表現
+ * - 禁止パス: ビルトイン + 組織ポリシー (~ 表記と展開後の両方で部分一致)
+ * - プロジェクトルート外の絶対パス参照 (ホーム直下・システム領域) を拒否
+ */
+function checkExecutionPolicy(code, policy, projectRoot) {
+    // 1. 禁止コマンド (ビルトイン)
+    for (const b of exports.BUILTIN_FORBIDDEN_COMMANDS) {
+        if (new RegExp(b.pattern).test(code)) {
+            return { allowed: false, ruleId: b.ruleId, reason: `禁止コマンド (${b.label}) を含むため実行できません` };
+        }
+    }
+    // 2. 禁止コマンド (組織ポリシー)。不正な正規表現は 1 件で全体を落とさずスキップ。
+    for (const pattern of policy?.forbiddenCommands ?? []) {
+        try {
+            if (new RegExp(pattern).test(code)) {
+                return {
+                    allowed: false,
+                    ruleId: 'exec_org_forbidden_command',
+                    reason: '組織ポリシーの禁止コマンドに該当するため実行できません',
+                };
+            }
+        }
+        catch {
+            /* invalid regex → skip */
+        }
+    }
+    // 3. 禁止パス (ビルトイン + 組織)。~ 表記と展開後の両方を見る。
+    const forbiddenPaths = [...exports.BUILTIN_FORBIDDEN_PATHS, ...(policy?.forbiddenPaths ?? [])];
+    for (const p of forbiddenPaths) {
+        const expanded = expandHome(p);
+        if (code.includes(p) || (expanded !== p && code.includes(expanded))) {
+            return {
+                allowed: false,
+                ruleId: 'exec_forbidden_path',
+                reason: `禁止パス (${p}) への参照を含むため実行できません`,
+            };
+        }
+    }
+    // 4. プロジェクトルート外の絶対パス参照 (作業ディレクトリ制限)。
+    //    システム領域・他ユーザー領域を指す絶対パスを高シグナルに検査する。
+    //    /tmp と projectRoot 配下、および /usr 等の読み取り系ツールパスは許容。
+    const rootResolved = path_1.default.resolve(projectRoot);
+    const absPattern = /(?:^|[\s"'`=(])(\/(?:Users|home|etc|var|root)\/[^\s"'`);|&]*)/g;
+    for (const m of code.matchAll(absPattern)) {
+        const ref = m[1];
+        const resolved = path_1.default.resolve(ref);
+        if (resolved === rootResolved || resolved.startsWith(rootResolved + path_1.default.sep))
+            continue;
+        if (resolved.startsWith(path_1.default.resolve(os_1.default.tmpdir()) + path_1.default.sep))
+            continue;
+        return {
+            allowed: false,
+            ruleId: 'exec_outside_project_root',
+            reason: `プロジェクトルート外のパス (${ref}) への参照を含むため実行できません`,
+        };
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=policy.js.map

package/dist/exec/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/exec/policy.ts"],"names":[],"mappings":";;;;;;AA2DA,oDAsDC;AAjHD,4CAAmB;AACnB,gDAAuB;AAwBvB;;;GAGG;AACU,QAAA,0BAA0B,GAA8D;IACnG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,wDAAwD,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC5G,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE;IACtE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE;IACnE,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,cAAc,EAAE;IACxF,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,iCAAiC,EAAE,KAAK,EAAE,WAAW,EAAE;IAC5F,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,qDAAqD,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACrH,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,2CAA2C,EAAE,KAAK,EAAE,WAAW,EAAE;CAC1G,CAAA;AAED,0CAA0C;AAC7B,QAAA,uBAAuB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAA;AAS9G,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,IAAY,EACZ,MAA8B,EAC9B,WAAmB;IAEnB,oBAAoB;IACpB,KAAK,MAAM,CAAC,IAAI,kCAA0B,EAAE,CAAC;QAC3C,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAA;QACzF,CAAC;IACH,CAAC;IACD,+CAA+C;IAC/C,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,4BAA4B;oBACpC,MAAM,EAAE,6BAA6B;iBACtC,CAAA;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,uCAAuC;IACvC,MAAM,cAAc,GAAG,CAAC,GAAG,+BAAuB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;IACtF,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,SAAS,CAAC,oBAAoB;aACvC,CAAA;QACH,CAAC;IACH,CAAC;IACD,qCAAqC;IACrC,uCAAuC;IACvC,qDAAqD;IACrD,MAAM,YAAY,GAAG,cAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC9C,MAAM,UAAU,GAAG,gEAAgE,CAAA;IACnF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAChB,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,cAAI,CAAC,GAAG,CAAC;YAAE,SAAQ;QACvF,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAI,CAAC,OAAO,CAAC,YAAE,CAAC,MAAM,EAAE,CAAC,GAAG,cAAI,CAAC,GAAG,CAAC;YAAE,SAAQ;QACvE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,2BAA2B;YACnC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB;SAClD,CAAA;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC"}

package/dist/hooks/block-store.d.ts

@@ -0,0 +1,14 @@
+import type { DetectionMeta } from '../secret-detector';
+declare const BLOCK_LOG_PATH: string;
+export interface BlockEvent {
+    recordedAt: string;
+    sessionId: string | null;
+    cwd: string | null;
+    toolName: string | null;
+    /** 生機密を含まない検知メタ。 */
+    detections: DetectionMeta[];
+}
+/** ブロックイベントを 1 行 append する (best-effort、失敗してもブロック自体は成立)。 */
+export declare function recordBlockEvent(event: BlockEvent, logPath?: string): Promise<void>;
+export { BLOCK_LOG_PATH };
+//# sourceMappingURL=block-store.d.ts.map

package/dist/hooks/block-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-store.d.ts","sourceRoot":"","sources":["../../src/hooks/block-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAWvD,QAAA,MAAM,cAAc,QAAiE,CAAA;AAErF,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,oBAAoB;IACpB,UAAU,EAAE,aAAa,EAAE,CAAA;CAC5B;AAED,4DAA4D;AAC5D,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,MAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,OAAO,EAAE,cAAc,EAAE,CAAA"}

package/dist/hooks/block-store.js

@@ -0,0 +1,26 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BLOCK_LOG_PATH = void 0;
+exports.recordBlockEvent = recordBlockEvent;
+const promises_1 = __importDefault(require("fs/promises"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+// =============================================
+// ブロックイベントの記録 (Issue #67)
+// =============================================
+//
+// PreToolUse で deny したイベントをローカルに追記記録する。受け入れ条件は
+// 「ローカル SQLite へ記録」だが、SQLite 導入は Epic #66 P2 (#68) の専用スコープ。
+// 本タスクでは依存を増やさず JSONL に追記し、#68 で SQLite (FTS5) へ移行する。
+// 記録するのは検知メタ (生機密本文を含まない) のみ。
+const BLOCK_LOG_PATH = path_1.default.join(os_1.default.homedir(), '.promptkaizen', 'block-events.jsonl');
+exports.BLOCK_LOG_PATH = BLOCK_LOG_PATH;
+/** ブロックイベントを 1 行 append する (best-effort、失敗してもブロック自体は成立)。 */
+async function recordBlockEvent(event, logPath = BLOCK_LOG_PATH) {
+    await promises_1.default.mkdir(path_1.default.dirname(logPath), { recursive: true });
+    await promises_1.default.appendFile(logPath, JSON.stringify(event) + '\n', { mode: 0o600 });
+}
+//# sourceMappingURL=block-store.js.map

package/dist/hooks/block-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-store.js","sourceRoot":"","sources":["../../src/hooks/block-store.ts"],"names":[],"mappings":";;;;;;AA0BA,4CAMC;AAhCD,2DAA4B;AAC5B,4CAAmB;AACnB,gDAAuB;AAGvB,gDAAgD;AAChD,0BAA0B;AAC1B,gDAAgD;AAChD,EAAE;AACF,+CAA+C;AAC/C,4DAA4D;AAC5D,sDAAsD;AACtD,8BAA8B;AAE9B,MAAM,cAAc,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAA;AAoB5E,wCAAc;AATvB,4DAA4D;AACrD,KAAK,UAAU,gBAAgB,CACpC,KAAiB,EACjB,UAAkB,cAAc;IAEhC,MAAM,kBAAE,CAAC,KAAK,CAAC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,kBAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC7E,CAAC"}

package/dist/hooks/claude-hook.d.ts

@@ -0,0 +1,55 @@
+import { SecretDetector, type DetectionMeta } from '../secret-detector';
+/**
+ * 対応する hook イベント (全プラットフォームの和集合)。
+ * プラットフォーム別にどれを登録/受理するかは hooks/platforms.ts が定義する。
+ * - PreCompact: Claude Code 固有。
+ * - Stop: Codex CLI のターン終了イベント (#70)。観測のみ。
+ */
+export declare const SUPPORTED_EVENTS: readonly ["PreToolUse", "PostToolUse", "UserPromptSubmit", "SessionStart", "PreCompact", "Stop"];
+export type HookEvent = (typeof SUPPORTED_EVENTS)[number];
+export declare function isHookEvent(v: unknown): v is HookEvent;
+/** Claude Code が stdin で渡す共通フィールド (必要な分のみ)。 */
+export interface HookInput {
+    hook_event_name?: string;
+    session_id?: string;
+    cwd?: string;
+    transcript_path?: string;
+    tool_name?: string;
+    tool_input?: unknown;
+    prompt?: string;
+    [k: string]: unknown;
+}
+/**
+ * PreToolUse の deny は無条件ブロックなので、誤検知の影響が大きい。
+ * file_path 等の「パスにキーらしき文字列が紛れる」誤検出を避けるため、
+ * 値部分 (コマンド本文・プロンプト) のみを検知対象に集める。
+ */
+export declare function extractRiskText(event: HookEvent, input: HookInput): string;
+/** PreToolUse の出力 (Claude Code hooks の hookSpecificOutput 形式)。 */
+export interface PreToolUseDecision {
+    hookSpecificOutput: {
+        hookEventName: 'PreToolUse';
+        permissionDecision: 'deny' | 'allow' | 'ask';
+        permissionDecisionReason: string;
+    };
+}
+/** 検知メタから日本語の deny 理由を組み立てる (具体的に・生機密は出さない)。 */
+export declare function buildDenyReason(detections: DetectionMeta[]): string;
+/** PreToolUse の判定結果。 */
+export interface HookEvaluation {
+    /** PreToolUse で deny したか。 */
+    blocked: boolean;
+    /** 検知メタ (生機密は含まない)。記録・送信に使う。 */
+    detections: DetectionMeta[];
+    /** Claude Code に返す stdout JSON。null なら出力なし (= allow)。 */
+    output: PreToolUseDecision | null;
+    /** 終了コード。PreToolUse の deny は exit 0 + JSON で制御 (exit 2 は非構造化 block)。 */
+    exitCode: 0 | 2;
+}
+/**
+ * hook イベントを評価する純粋関数。
+ * - PreToolUse: 検知に該当したら deny を返す。
+ * - その他: 検知のみ付与 (ブロックはしない)。
+ */
+export declare function evaluateHook(event: HookEvent, input: HookInput, detector: SecretDetector): HookEvaluation;
+//# sourceMappingURL=claude-hook.d.ts.map

package/dist/hooks/claude-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hook.d.ts","sourceRoot":"","sources":["../../src/hooks/claude-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAkB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAcvF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,kGAOnB,CAAA;AACV,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzD,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,SAAS,CAEtD;AAED,+CAA+C;AAC/C,MAAM,WAAW,SAAS;IACxB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAO1E;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE;QAClB,aAAa,EAAE,YAAY,CAAA;QAC3B,kBAAkB,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;QAC5C,wBAAwB,EAAE,MAAM,CAAA;KACjC,CAAA;CACF;AAUD,gDAAgD;AAChD,wBAAgB,eAAe,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAenE;AA6BD,wBAAwB;AACxB,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,gCAAgC;IAChC,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,yDAAyD;IACzD,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACjC,wEAAwE;IACxE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAA;CAChB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,cAAc,GACvB,cAAc,CAwBhB"}

package/dist/hooks/claude-hook.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_EVENTS = void 0;
+exports.isHookEvent = isHookEvent;
+exports.extractRiskText = extractRiskText;
+exports.buildDenyReason = buildDenyReason;
+exports.evaluateHook = evaluateHook;
+const secret_detector_1 = require("../secret-detector");
+// =============================================
+// Claude Code hooks アダプタ (Issue #67 / Epic #66 P1) — 純粋ロジック
+// =============================================
+//
+// Claude Code 公式 hooks は JSON を stdin で渡し、stdout の JSON で制御する。
+// 本モジュールは「stdin の event payload を受け取り、返すべき hook 出力 +
+// 送信すべき観測 entry を計算する」純粋部分。I/O (stdin 読み取り・送信・記録) は
+// cli/hook.ts が担う。install-launchd / install-systemd と同じテスト容易性方針。
+//
+// 検知 (#42) を PreToolUse に接続して「事後検知」を「事前ブロック」に格上げする。
+// 既存 chokidar 経路は補完として併存 (hooks 未登録環境・取りこぼし回収)。
+/**
+ * 対応する hook イベント (全プラットフォームの和集合)。
+ * プラットフォーム別にどれを登録/受理するかは hooks/platforms.ts が定義する。
+ * - PreCompact: Claude Code 固有。
+ * - Stop: Codex CLI のターン終了イベント (#70)。観測のみ。
+ */
+exports.SUPPORTED_EVENTS = [
+    'PreToolUse',
+    'PostToolUse',
+    'UserPromptSubmit',
+    'SessionStart',
+    'PreCompact',
+    'Stop',
+];
+function isHookEvent(v) {
+    return typeof v === 'string' && exports.SUPPORTED_EVENTS.includes(v);
+}
+/**
+ * PreToolUse の deny は無条件ブロックなので、誤検知の影響が大きい。
+ * file_path 等の「パスにキーらしき文字列が紛れる」誤検出を避けるため、
+ * 値部分 (コマンド本文・プロンプト) のみを検知対象に集める。
+ */
+function extractRiskText(event, input) {
+    if (event === 'UserPromptSubmit') {
+        return typeof input.prompt === 'string' ? input.prompt : '';
+    }
+    // PreToolUse / PostToolUse: tool_input 全体の string を集める。
+    // Bash の command、Write/Edit の content 等が含まれる。
+    return (0, secret_detector_1.collectStrings)(input.tool_input ?? {});
+}
+const SEVERITY_LABEL = { high: '重大', medium: '中', low: '低' };
+const CATEGORY_LABEL = {
+    secret: 'シークレット',
+    pii: '個人情報',
+    pii_jp: '個人情報(日本)',
+    custom: '社内機密',
+};
+/** 検知メタから日本語の deny 理由を組み立てる (具体的に・生機密は出さない)。 */
+function buildDenyReason(detections) {
+    const top = [...detections].sort((a, b) => severityRank(b.severity) - severityRank(a.severity));
+    const lines = top
+        .slice(0, 5)
+        .map((d) => `・${CATEGORY_LABEL[d.category] ?? d.category} / ${ruleLabel(d.ruleId)} ` +
+        `(重大度: ${SEVERITY_LABEL[d.severity] ?? d.severity}, ${d.count} 件, 例: ${d.maskedPreview})`);
+    return ('PromptKaizen のポリシーにより、このツール実行をブロックしました。\n' +
+        '以下の機密情報が含まれています:\n' +
+        lines.join('\n') +
+        '\n機密値を削除するか、環境変数・シークレットマネージャ経由に変更してから再実行してください。');
+}
+function severityRank(s) {
+    return s === 'high' ? 2 : s === 'medium' ? 1 : 0;
+}
+const RULE_LABEL = {
+    anthropic_key: 'Anthropic APIキー',
+    openai_key: 'OpenAI APIキー',
+    github_token: 'GitHub トークン',
+    slack_token: 'Slack トークン',
+    aws_access_key: 'AWS アクセスキー',
+    gcp_api_key: 'GCP APIキー',
+    private_key_block: '秘密鍵ブロック',
+    jwt: 'JWT',
+    bearer_token: 'Bearer トークン',
+    high_entropy: '高エントロピー文字列',
+    jp_mynumber: 'マイナンバー',
+    jp_corporate_number: '法人番号',
+    jp_phone: '電話番号',
+    jp_postal: '郵便番号',
+    jp_address: '住所',
+    credit_card: 'クレジットカード番号',
+    email: 'メールアドレス',
+};
+function ruleLabel(id) {
+    return RULE_LABEL[id] ?? id;
+}
+/**
+ * hook イベントを評価する純粋関数。
+ * - PreToolUse: 検知に該当したら deny を返す。
+ * - その他: 検知のみ付与 (ブロックはしない)。
+ */
+function evaluateHook(event, input, detector) {
+    const text = extractRiskText(event, input);
+    const detections = text ? detector.detect(text) : [];
+    // PreToolUse の deny は無条件ブロックなので誤検知の影響が大きい。
+    // 重大度 high (重大) のみをブロック対象とし、medium/low は観測のみ
+    // (記録・送信は全件残す) に留めて通常の開発作業を妨げない。
+    const blocking = detections.filter((d) => d.severity === 'high');
+    if (event === 'PreToolUse' && blocking.length > 0) {
+        return {
+            blocked: true,
+            detections,
+            output: {
+                hookSpecificOutput: {
+                    hookEventName: 'PreToolUse',
+                    permissionDecision: 'deny',
+                    permissionDecisionReason: buildDenyReason(blocking),
+                },
+            },
+            exitCode: 0,
+        };
+    }
+    return { blocked: false, detections, output: null, exitCode: 0 };
+}
+//# sourceMappingURL=claude-hook.js.map

package/dist/hooks/claude-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hook.js","sourceRoot":"","sources":["../../src/hooks/claude-hook.ts"],"names":[],"mappings":";;;AA8BA,kCAEC;AAmBD,0CAOC;AAoBD,0CAeC;AA8CD,oCA4BC;AAvKD,wDAAuF;AAEvF,gDAAgD;AAChD,4DAA4D;AAC5D,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,qDAAqD;AACrD,oDAAoD;AACpD,iEAAiE;AACjE,EAAE;AACF,oDAAoD;AACpD,gDAAgD;AAEhD;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG;IAC9B,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,YAAY;IACZ,MAAM;CACE,CAAA;AAGV,SAAgB,WAAW,CAAC,CAAU;IACpC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAK,wBAAsC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AACrF,CAAC;AAcD;;;;GAIG;AACH,SAAgB,eAAe,CAAC,KAAgB,EAAE,KAAgB;IAChE,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;QACjC,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7D,CAAC;IACD,wDAAwD;IACxD,8CAA8C;IAC9C,OAAO,IAAA,gCAAc,EAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;AAC/C,CAAC;AAWD,MAAM,cAAc,GAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AACpF,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,MAAM;IACX,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,MAAM;CACf,CAAA;AAED,gDAAgD;AAChD,SAAgB,eAAe,CAAC,UAA2B;IACzD,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/F,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,MAAM,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG;QACxE,SAAS,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,aAAa,GAAG,CAC5F,CAAA;IACH,OAAO,CACL,2CAA2C;QAC3C,oBAAoB;QACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAChB,iDAAiD,CAClD,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,aAAa,EAAE,iBAAiB;IAChC,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,YAAY;IACzB,cAAc,EAAE,YAAY;IAC5B,WAAW,EAAE,WAAW;IACxB,iBAAiB,EAAE,SAAS;IAC5B,GAAG,EAAE,KAAK;IACV,YAAY,EAAE,aAAa;IAC3B,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,QAAQ;IACrB,mBAAmB,EAAE,MAAM;IAC3B,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,YAAY;IACzB,KAAK,EAAE,SAAS;CACjB,CAAA;AACD,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;AAC7B,CAAC;AAcD;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,KAAgB,EAChB,KAAgB,EAChB,QAAwB;IAExB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAEpD,2CAA2C;IAC3C,6CAA6C;IAC7C,iCAAiC;IACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAA;IAEhE,IAAI,KAAK,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU;YACV,MAAM,EAAE;gBACN,kBAAkB,EAAE;oBAClB,aAAa,EAAE,YAAY;oBAC3B,kBAAkB,EAAE,MAAM;oBAC1B,wBAAwB,EAAE,eAAe,CAAC,QAAQ,CAAC;iBACpD;aACF;YACD,QAAQ,EAAE,CAAC;SACZ,CAAA;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AAClE,CAAC"}