rivetplane 0.4.2 → 0.6.0

package/dist/hook-bridge-install.js

@@ -0,0 +1,133 @@
+import { randomBytes } from "node:crypto";
+import { chmod, lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { HOOK_DISCOVERY_VERSION, HOOK_OWNER } from "./hook-discovery.js";
+export const HOOK_BRIDGE_VERSION = 1;
+const BRIDGE_MARKER = `${HOOK_OWNER}:bridge-v${HOOK_BRIDGE_VERSION}`;
+export function defaultHookBridgePath(env = process.env, home = homedir()) {
+    const root = env.XDG_CONFIG_HOME || join(home, ".config");
+    return join(root, "harness-cp", "hooks", `v${HOOK_BRIDGE_VERSION}`, "bridge.cjs");
+}
+export function hookBridgeInstallation(options = {}) {
+    const env = options.env ?? process.env;
+    const bridge = defaultHookBridgePath(env, options.home ?? homedir());
+    const statusline = join(dirname(bridge), "claude-statusline.cjs");
+    const node = options.node ?? process.execPath;
+    const platform = options.platform ?? process.platform;
+    return { node, bridge, statusline, command: (harness, event) => [node, bridge, "--owner", HOOK_OWNER, "--harness", harness, "--event", event].map((value) => shellQuote(value, platform)).join(" "), statusLineCommand: (original) => [node, statusline, Buffer.from(JSON.stringify(original ?? null)).toString("base64url")].map((value) => shellQuote(value, platform)).join(" ") };
+}
+export async function installHookBridge(options = {}) {
+    const installation = hookBridgeInstallation(options);
+    const parent = dirname(installation.bridge);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    const parentInfo = await lstat(parent);
+    if (!parentInfo.isDirectory() || parentInfo.isSymbolicLink())
+        throw new Error("Hook bridge directory must be a regular directory");
+    assertCurrentUser(parentInfo, "Hook bridge directory");
+    if (process.platform !== "win32")
+        await chmod(parent, 0o700);
+    let prior;
+    try {
+        const info = await lstat(installation.bridge);
+        if (!info.isFile() || info.isSymbolicLink())
+            throw new Error("Refused to replace a non-regular hook bridge");
+        assertCurrentUser(info, "Hook bridge");
+        if (process.platform !== "win32" && (info.mode & 0o077) !== 0)
+            throw new Error("Hook bridge permissions are not private");
+        prior = await readFile(installation.bridge, "utf8");
+        if (!prior.includes(BRIDGE_MARKER))
+            throw new Error("Refused to overwrite an unmarked hook bridge");
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const source = durableHookBridgeSource().replace("configuredTimeout : actionable ? 125000 : 3000", "configuredTimeout : harness === \"opencode\" && actionable ? 1805000 : actionable ? 125000 : 3000");
+    if (prior !== source) {
+        const temporary = `${installation.bridge}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+        await writeFile(temporary, source, { encoding: "utf8", mode: 0o600, flag: "wx" });
+        if (process.platform !== "win32")
+            await chmod(temporary, 0o600);
+        await rename(temporary, installation.bridge);
+    }
+    if (process.platform !== "win32")
+        await chmod(installation.bridge, 0o600);
+    await writeOwnedStatusLine(installation.statusline, durableClaudeStatusLineSource(installation));
+    return installation;
+}
+export async function uninstallHookBridge(options = {}) {
+    const path = defaultHookBridgePath(options.env ?? process.env, options.home ?? homedir());
+    try {
+        const info = await lstat(path);
+        if (!info.isFile() || info.isSymbolicLink())
+            throw new Error("Refused to remove a non-regular hook bridge");
+        assertCurrentUser(info, "Hook bridge");
+        const source = await readFile(path, "utf8");
+        if (!source.includes(BRIDGE_MARKER))
+            throw new Error("Refused to remove an unmarked hook bridge");
+        await rm(path);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const statusline = join(dirname(path), "claude-statusline.cjs");
+    try {
+        const source = await readFile(statusline, "utf8");
+        if (!source.includes(`${HOOK_OWNER}:claude-statusline-v1`))
+            throw new Error("Refused to remove an unmarked status-line wrapper");
+        await rm(statusline);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+async function writeOwnedStatusLine(path, source) {
+    let prior;
+    try {
+        const info = await lstat(path);
+        if (!info.isFile() || info.isSymbolicLink())
+            throw new Error("Refused to replace a non-regular status-line wrapper");
+        assertCurrentUser(info, "Status-line wrapper");
+        prior = await readFile(path, "utf8");
+        if (!prior.includes(`${HOOK_OWNER}:claude-statusline-v1`))
+            throw new Error("Refused to overwrite an unmarked status-line wrapper");
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    if (prior === source)
+        return;
+    const temporary = `${path}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+    await writeFile(temporary, source, { encoding: "utf8", mode: 0o600, flag: "wx" });
+    if (process.platform !== "win32")
+        await chmod(temporary, 0o600);
+    await rename(temporary, path);
+}
+function durableClaudeStatusLineSource(installation) {
+    return `// ${HOOK_OWNER}:claude-statusline-v1\n"use strict";\nconst { spawn } = require("node:child_process");\nconst original = JSON.parse(Buffer.from(process.argv[2] || "bnVsbA", "base64url").toString("utf8"));\nasync function read() { let value = ""; for await (const chunk of process.stdin) value += String(chunk); return value; }\nasync function main() { const input = await read(); const telemetry = spawn(${JSON.stringify(installation.node)}, [${JSON.stringify(installation.bridge)}, "--owner", ${JSON.stringify(HOOK_OWNER)}, "--harness", "claude-code", "--event", "StatusLine"], { stdio: ["pipe", "ignore", "ignore"], windowsHide: true }); telemetry.stdin.end(input); telemetry.unref(); if (!original || original.type !== "command" || typeof original.command !== "string") return; const child = spawn(original.command, { shell: true, stdio: ["pipe", "pipe", "inherit"], windowsHide: true }); child.stdin.end(input); for await (const chunk of child.stdout) process.stdout.write(chunk); await new Promise((resolve) => child.once("close", resolve)); }\nmain().catch(() => {});\n`;
+}
+function shellQuote(value, platform) {
+    if (/[\0\r\n]/.test(value))
+        throw new Error("Hook command path contains an invalid character");
+    if (platform === "win32")
+        return `"${value.replace(/%/g, "%%").replace(/"/g, '""')}"`;
+    return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+function assertCurrentUser(info, label) {
+    const uid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (uid !== undefined && info.uid !== uid)
+        throw new Error(`${label} is not owned by the current user`);
+}
+function durableHookBridgeSourceBase() {
+    return `// ${BRIDGE_MARKER}\n"use strict";\nconst fs = require("node:fs/promises");\nconst os = require("node:os");\nconst path = require("node:path");\nconst crypto = require("node:crypto");\nconst OWNER = ${JSON.stringify(HOOK_OWNER)};\nconst VERSION = ${HOOK_DISCOVERY_VERSION};\nconst MAX_STDIN = 1000000;\nfunction flag(name) { const offset = process.argv.indexOf(name); return offset >= 0 ? process.argv[offset + 1] : undefined; }\nfunction object(value) { return value && typeof value === "object" && !Array.isArray(value) ? value : {}; }\nfunction first(input, names) { for (const name of names) if (typeof input[name] === "string" && input[name]) return input[name]; }\nfunction endpoint(value) { const url = new URL(value); if (url.protocol !== "http:" || !["127.0.0.1", "[::1]", "::1"].includes(url.hostname) || url.pathname !== "/v1/hooks/events" || url.username || url.password || url.search || url.hash) throw new Error("invalid endpoint"); return url.toString(); }\nasync function input() { let raw = ""; for await (const chunk of process.stdin) { raw += String(chunk); if (raw.length > MAX_STDIN) throw new Error("input too large"); } return object(raw ? JSON.parse(raw) : {}); }\nasync function discovery() { const root = process.env.XDG_CONFIG_HOME || path.join(os.homedir(), ".config"); const file = process.env.RIVETPLANE_HOOK_DISCOVERY || path.join(root, "harness-cp", "hook-endpoint.json"); const info = await fs.lstat(file); if (!info.isFile() || info.isSymbolicLink()) throw new Error("unsafe discovery"); if (typeof process.getuid === "function" && info.uid !== process.getuid()) throw new Error("wrong owner"); if (process.platform !== "win32" && (info.mode & 0o077) !== 0) throw new Error("broad permissions"); const value = JSON.parse(await fs.readFile(file, "utf8")); if (value.version !== VERSION || value.owner !== OWNER || typeof value.token !== "string" || value.token.length < 32 || !Number.isSafeInteger(value.pid) || typeof value.started_at !== "string") throw new Error("invalid discovery"); try { process.kill(value.pid, 0); } catch (error) { if (error.code !== "EPERM") throw new Error("stale discovery"); } return { endpoint: endpoint(value.endpoint), token: value.token }; }\nfunction envelope(harness, configuredEvent, payload) { const session = first(payload, ["session_id", "sessionId", "sessionID", "thread-id", "thread_id", "threadId"]); if (!session) throw new Error("no session"); const event = first(payload, ["hook_event_name", "event", "type"]) || configuredEvent; const request = first(payload, ["request_id", "requestId", "requestID", "permission_request_id", "tool_use_id", "toolUseId", "tool_call_id", "toolCallId"].concat(harness === "opencode" ? ["id"] : [])) || (harness === "claude-code" && event === "PermissionRequest" ? "rivetplane-" + crypto.randomUUID() : undefined); return { version: 1, harness, event, session_id: session, cwd: first(payload, ["cwd", "directory", "working_directory"]) || process.cwd(), transport: harness === "opencode" ? "opencode-plugin" : harness + "-hook-command", payload, ...(request ? { request_id: request } : {}) }; }\nfunction native(harness, event, payload, result) { if (!result || result.decision === "neutral") return {}; if (harness === "claude-code" && event === "PermissionRequest") return { hookSpecificOutput: { hookEventName: "PermissionRequest", decision: result.decision === "deny" ? { behavior: "deny", message: "Denied through Rivetplane" } : { behavior: "allow", updatedInput: { ...object(payload.tool_input), ...object(result.updated_input) } } } }; return result; }\nasync function main() { const owner = flag("--owner"); const harness = flag("--harness"); const event = flag("--event"); if (owner !== OWNER) throw new Error("Hook ownership marker is invalid"); if (!harness || !event) throw new Error("--harness and --event are required"); try { if (process.env.RIVETPLANE_HOOKS_DISABLED === "1") return {}; const payload = await input(); const record = await discovery(); const actionable = (harness === "claude-code" && event === "PermissionRequest") || (harness === "opencode" && (event === "permission.asked" || event === "question.asked")); const configuredTimeout = Number(process.env.RIVETPLANE_HOOK_TIMEOUT_MS); const timeout = Number.isSafeInteger(configuredTimeout) && configuredTimeout > 0 ? configuredTimeout : actionable ? 125000 : 3000; const response = await fetch(record.endpoint, { method: "POST", headers: { "content-type": "application/json", "x-rivetplane-hook-owner": OWNER, "x-rivetplane-hook-token": record.token }, body: JSON.stringify(envelope(harness, event, payload)), signal: AbortSignal.timeout(timeout) }); if (!response.ok) return {}; return native(harness, event, payload, await response.json()); } catch { return {}; } }\nmain().then((value) => process.stdout.write(JSON.stringify(value) + "\\n")).catch((error) => { process.stderr.write("rivetplane hook bridge: " + error.message + "\\n"); process.exitCode = 1; });\n`;
+}
+export function durableHookBridgeSource() {
+    return durableHookBridgeSourceBase()
+        .replace("function native(harness, event, payload, result)", 'function usagePayload(payload) { return { session_id: first(payload, ["session_id", "sessionId"]), cwd: first(payload, ["cwd"]), hook_event_name: "StatusLine", model: payload.model, context_window: object(payload.context_window || payload.contextWindow), cost: object(payload.cost), rate_limits: object(payload.rate_limits || payload.rateLimits) }; }\nfunction native(harness, event, payload, result)')
+        .replace("const payload = await input(); const record = await discovery();", 'let payload = await input(); if (harness === "claude-code" && event === "StatusLine") payload = usagePayload(payload); const record = await discovery();');
+}
+//# sourceMappingURL=hook-bridge-install.js.map

package/dist/hook-bridge-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge-install.js","sourceRoot":"","sources":["../src/hook-bridge-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAU,CAAC;AAC9C,MAAM,aAAa,GAAG,GAAG,UAAU,YAAY,mBAAmB,EAAE,CAAC;AAIrE,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,EAAE;IAC1F,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,mBAAmB,EAAE,EAAE,YAAY,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAO,GAA0F,EAAE;IACxI,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACxX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAO,GAA0F,EAAE;IACzI,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACnI,iBAAiB,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7G,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC1H,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACxF,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC,OAAO,CAC9C,gDAAgD,EAChD,mGAAmG,CACpG,CAAC;IACF,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,GAAG,YAAY,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAChG,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,oBAAoB,CAAC,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC,CAAC;IACjG,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAO,GAA+C,EAAE;IAChG,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC5G,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAClG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAChE,IAAI,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,uBAAuB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;AAC3S,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAAc;IAC9D,IAAI,KAAyB,CAAC;IAAC,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAAC,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAAC,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,UAAU,uBAAuB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IAC7e,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO;IAAC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAAC,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACpS,CAAC;AAED,SAAS,6BAA6B,CAAC,YAAoC;IACzE,OAAO,MAAM,UAAU,uYAAuY,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,0iBAA0iB,CAAC;AAC/jC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,QAAyB;IAC1D,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC/F,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IACtF,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB,EAAE,KAAa;IAC7D,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,2BAA2B;IAClC,OAAO,MAAM,aAAa,uLAAuL,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,sBAAsB,sBAAsB,8kJAA8kJ,CAAC;AACx2J,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,2BAA2B,EAAE;SACjC,OAAO,CAAC,kDAAkD,EAAE,kZAAkZ,CAAC;SAC/c,OAAO,CAAC,kEAAkE,EAAE,0JAA0J,CAAC,CAAC;AAC7O,CAAC"}

package/dist/hook-bridge.js

@@ -0,0 +1,79 @@
+import { createHash, randomUUID } from "node:crypto";
+import { defaultHookDiscoveryPath, HOOK_OWNER, readHookDiscovery, validateHookEndpoint } from "./hook-discovery.js";
+const MAX_STDIN = 1_000_000;
+function object(value) { return value && typeof value === "object" && !Array.isArray(value) ? value : {}; }
+function firstString(input, names) { for (const name of names)
+    if (typeof input[name] === "string" && input[name])
+        return input[name]; return undefined; }
+export async function readHookInput(stream = process.stdin) {
+    const argument = process.argv.at(-1);
+    if (argument?.trimStart().startsWith("{"))
+        return object(JSON.parse(argument));
+    let raw = "";
+    for await (const chunk of stream) {
+        raw += String(chunk);
+        if (raw.length > MAX_STDIN)
+            throw new Error("Hook input is too large");
+    }
+    return object(raw ? JSON.parse(raw) : {});
+}
+export function toHookEnvelope(harness, configuredEvent, payload) {
+    const session_id = firstString(payload, ["session_id", "sessionId", "sessionID", "thread-id", "thread_id", "threadId"]);
+    if (!session_id)
+        throw new Error("Native hook input has no session ID");
+    const event = firstString(payload, ["hook_event_name", "event", "type"]) ?? configuredEvent;
+    const cwd = firstString(payload, ["cwd", "directory", "working_directory"]) ?? process.cwd();
+    const nativeRequestId = firstString(payload, ["request_id", "requestId", "requestID", "permission_request_id", "tool_use_id", "toolUseId", "tool_call_id", "toolCallId", ...(harness === "opencode" ? ["id"] : [])]);
+    const telemetryIdentity = !nativeRequestId && harness === "codex" && event === "PermissionRequest"
+        ? `codex-telemetry-${createHash("sha256").update(session_id).update("\0").update(String(payload.turn_id ?? "")).update("\0").update(String(payload.tool_name ?? "")).update("\0").update(JSON.stringify(payload.tool_input ?? null)).digest("hex").slice(0, 32)}`
+        : undefined;
+    const request_id = nativeRequestId ?? (harness === "claude-code" && event === "PermissionRequest" ? `rivetplane-${randomUUID()}` : telemetryIdentity);
+    return { version: 1, harness, event, session_id, cwd, transport: harness === "opencode" ? "opencode-plugin" : `${harness}-hook-command`, payload,
+        ...(request_id ? { request_id } : {}), ...(telemetryIdentity ? { request_id_kind: "telemetry" } : nativeRequestId ? { request_id_kind: "native" } : {}), ...(firstString(payload, ["model", "model_id"]) ? { model: firstString(payload, ["model", "model_id"]) } : {}),
+        ...(firstString(payload, ["agent", "agent_name"]) ? { agent: firstString(payload, ["agent", "agent_name"]) } : {}),
+        ...(firstString(payload, ["timestamp"]) ? { timestamp: firstString(payload, ["timestamp"]) } : {}) };
+}
+export async function emitHook(harness, event, options = {}) {
+    if (options.owner !== HOOK_OWNER)
+        throw new Error("Hook ownership marker is invalid");
+    try {
+        if (process.env.RIVETPLANE_HOOKS_DISABLED === "1")
+            return {};
+        const payload = options.payload ?? await readHookInput();
+        const envelope = toHookEnvelope(harness, event, payload);
+        const configuredEndpoint = options.endpoint ?? process.env.RIVETPLANE_HOOK_ENDPOINT;
+        const configuredToken = options.token ?? process.env.RIVETPLANE_HOOK_TOKEN;
+        const discovery = configuredEndpoint && configuredToken ? undefined : await readHookDiscovery(options.discovery_path ?? process.env.RIVETPLANE_HOOK_DISCOVERY ?? defaultHookDiscoveryPath());
+        const endpoint = validateHookEndpoint(configuredEndpoint ?? discovery?.endpoint);
+        const token = configuredToken ?? discovery?.token;
+        if (!token)
+            return {};
+        const actionable = (harness === "claude-code" && event === "PermissionRequest") || (harness === "opencode" && (event === "permission.asked" || event === "question.asked"));
+        const environmentTimeout = Number(process.env.RIVETPLANE_HOOK_TIMEOUT_MS);
+        const timeout = options.timeout_ms ?? (Number.isSafeInteger(environmentTimeout) && environmentTimeout > 0
+            ? environmentTimeout
+            : harness === "opencode" && actionable ? 30 * 60_000 + 5_000 : actionable ? 125_000 : 3_000);
+        const response = await fetch(endpoint, { method: "POST", headers: { "content-type": "application/json", "x-rivetplane-hook-owner": HOOK_OWNER, "x-rivetplane-hook-token": token }, body: JSON.stringify(envelope), signal: AbortSignal.timeout(timeout) });
+        if (!response.ok)
+            return {};
+        return formatNativeResult(harness, event, payload, await response.json());
+    }
+    catch {
+        return {};
+    }
+}
+export function formatNativeResult(harness, event, input, result) {
+    if (result.decision === "neutral")
+        return {};
+    if (harness === "opencode")
+        return result;
+    if (harness === "claude-code" && event === "PermissionRequest") {
+        const decision = result.decision === "deny" ? { behavior: "deny", message: "Denied through Rivetplane" } : { behavior: "allow", updatedInput: { ...object(input.tool_input), ...object(result.updated_input) } };
+        return { hookSpecificOutput: { hookEventName: "PermissionRequest", decision } };
+    }
+    if (harness === "claude-code" && (event === "AskUserQuestion" || (event === "PreToolUse" && input.tool_name === "AskUserQuestion")) && result.decision === "answer") {
+        return { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow", updatedInput: { ...object(input.tool_input), ...result.updated_input } } };
+    }
+    return {};
+}
+//# sourceMappingURL=hook-bridge.js.map

package/dist/hook-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-bridge.js","sourceRoot":"","sources":["../src/hook-bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEpH,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B,SAAS,MAAM,CAAC,KAAc,IAA6B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxK,SAAS,WAAW,CAAC,KAA8B,EAAE,KAAe,IAAwB,KAAK,MAAM,IAAI,IAAI,KAAK;IAAE,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAW,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;AAE3N,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAM,GAA0B,OAAO,CAAC,KAAK;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/E,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;IACnI,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,eAAuB,EAAE,OAAgC;IACvG,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACxH,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,eAAe,CAAC;IAC5F,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7F,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,uBAAuB,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrN,MAAM,iBAAiB,GAAG,CAAC,eAAe,IAAI,OAAO,KAAK,OAAO,IAAI,KAAK,KAAK,mBAAmB;QAChG,CAAC,CAAC,mBAAmB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjQ,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,UAAU,GAAG,eAAe,IAAI,CAAC,OAAO,KAAK,aAAa,IAAI,KAAK,KAAK,mBAAmB,CAAC,CAAC,CAAC,cAAc,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACtJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,eAAe,EAAE,OAAO;QAC9I,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,WAAoB,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1R,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,KAAa,EAAE,OAAO,GAA2I,EAAE;IACjN,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;YAAE,OAAO,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,aAAa,EAAE,CAAC;QAAC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACnH,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACpF,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAC3E,MAAM,SAAS,GAAG,kBAAkB,IAAI,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,wBAAwB,EAAE,CAAC,CAAC;QAC7L,MAAM,QAAQ,GAAG,oBAAoB,CAAC,kBAAkB,IAAI,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,eAAe,IAAI,SAAS,EAAE,KAAK,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,CAAC,OAAO,KAAK,aAAa,IAAI,KAAK,KAAK,mBAAmB,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC;QAC5K,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;YACvG,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,UAAU,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3P,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAC,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa,EAAE,KAA8B,EAAE,MAAwB;IACzH,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,OAAO,KAAK,aAAa,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACjN,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,IAAI,CAAC,KAAK,KAAK,iBAAiB,IAAI,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpK,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC;IACtK,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/hook-discovery.js

@@ -0,0 +1,115 @@
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { chmod, lstat, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+export const HOOK_OWNER = "rivetplane-hook-v1";
+export const HOOK_DISCOVERY_VERSION = 1;
+export function defaultHookDiscoveryPath(env = process.env, home = homedir()) {
+    const root = env.XDG_CONFIG_HOME || join(home, ".config");
+    return join(root, "harness-cp", "hook-endpoint.json");
+}
+export function createHookToken() { return randomBytes(32).toString("base64url"); }
+export async function writeHookDiscovery(path, record) {
+    await assertSafeParent(path);
+    try {
+        const info = await lstat(path);
+        if (!info.isFile() || info.isSymbolicLink())
+            throw new Error("Hook discovery file must be a regular file");
+        assertOwnedAndPrivate(info, "Hook discovery file");
+        const prior = JSON.parse(await readFile(path, "utf8"));
+        if (prior.owner !== HOOK_OWNER || typeof prior.token !== "string")
+            throw new Error("Refused to replace a discovery file not owned by Rivetplane");
+        if (await authenticatedHookEndpointAlive(prior))
+            throw new Error(`Another Rivetplane hook endpoint is active (process ${prior.pid ?? "unknown"})`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const temporary = `${path}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(record, null, 2)}\n`, { encoding: "utf8", mode: 0o600, flag: "wx" });
+    await chmod(temporary, 0o600);
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+}
+export async function readHookDiscovery(path = defaultHookDiscoveryPath()) {
+    const info = await lstat(path);
+    if (!info.isFile() || info.isSymbolicLink())
+        throw new Error("Hook discovery path is not a regular file");
+    assertOwnedAndPrivate(info, "Hook discovery file");
+    const value = JSON.parse(await readFile(path, "utf8"));
+    if (value.version !== HOOK_DISCOVERY_VERSION || value.owner !== HOOK_OWNER || typeof value.token !== "string" || value.token.length < 32 || !Number.isSafeInteger(value.pid) || typeof value.started_at !== "string")
+        throw new Error("Hook discovery file is invalid");
+    const endpoint = validateHookEndpoint(value.endpoint);
+    if (!processExists(value.pid)) {
+        await removeHookDiscovery(path, value.token);
+        throw new Error("Hook discovery process is not running");
+    }
+    return { version: HOOK_DISCOVERY_VERSION, owner: HOOK_OWNER, endpoint, token: value.token, pid: value.pid, started_at: value.started_at };
+}
+export async function removeHookDiscovery(path, token) {
+    try {
+        const current = JSON.parse(await readFile(path, "utf8"));
+        if (current.owner === HOOK_OWNER && secretEquals(current.token, token))
+            await rm(path);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+export function validateHookEndpoint(value) {
+    if (typeof value !== "string")
+        throw new Error("Hook endpoint is invalid");
+    const url = new URL(value);
+    if (url.protocol !== "http:" || (url.hostname !== "127.0.0.1" && url.hostname !== "[::1]" && url.hostname !== "::1") || url.pathname !== "/v1/hooks/events" || url.username || url.password || url.search || url.hash)
+        throw new Error("Hook endpoint must be the loopback ingestion endpoint");
+    return url.toString();
+}
+export function secretEquals(actual, expected) {
+    if (typeof actual !== "string")
+        return false;
+    const left = Buffer.from(actual);
+    const right = Buffer.from(expected);
+    return left.length === right.length && timingSafeEqual(left, right);
+}
+export async function authenticatedHookEndpointAlive(record, timeout_ms = 750) {
+    try {
+        const events = new URL(validateHookEndpoint(record.endpoint));
+        events.pathname = "/v1/hooks/health";
+        const response = await fetch(events, { headers: { "x-rivetplane-hook-owner": HOOK_OWNER, "x-rivetplane-hook-token": record.token ?? "" }, signal: AbortSignal.timeout(timeout_ms) });
+        if (!response.ok)
+            return false;
+        const value = await response.json();
+        return value.owner === HOOK_OWNER && value.version === HOOK_DISCOVERY_VERSION && value.pid === record.pid;
+    }
+    catch {
+        return false;
+    }
+}
+async function assertSafeParent(path) {
+    const parent = dirname(path);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    await chmod(parent, 0o700);
+    const info = await stat(parent);
+    if (!info.isDirectory())
+        throw new Error("Hook discovery parent is not a directory");
+    assertOwnedAndPrivate(info, "Hook discovery directory");
+}
+function assertOwnedAndPrivate(info, label) {
+    const uid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (uid !== undefined && info.uid !== uid)
+        throw new Error(`${label} is not owned by the current user`);
+    if (process.platform !== "win32" && (info.mode & 0o077) !== 0)
+        throw new Error(`${label} permissions are not private`);
+}
+function processExists(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+//# sourceMappingURL=hook-discovery.js.map

package/dist/hook-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-discovery.js","sourceRoot":"","sources":["../src/hook-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAU,CAAC;AAWjD,MAAM,UAAU,wBAAwB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,EAAE;IAC7F,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,eAAe,KAAa,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAE3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,MAA2B;IAChF,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3G,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiC,CAAC;QACvF,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAClJ,IAAI,MAAM,8BAA8B,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,KAAK,CAAC,GAAG,IAAI,SAAS,GAAG,CAAC,CAAC;IACrJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACxF,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACjF,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClH,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,GAAG,wBAAwB,EAAE;IACvE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1G,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxQ,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AAC7I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiC,CAAC;QACzF,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAChS,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAe,EAAE,QAAgB;IAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,MAAoC,EAAE,UAAU,GAAG,GAAG;IACzG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,GAAG,kBAAkB,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,yBAAyB,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACrL,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA2D,CAAC;QAC7F,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACrF,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAmC,EAAE,KAAa;IAC/E,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IACxG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;AACzH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC7E,CAAC"}