rulesync 16.10.0 → 16.11.0

package/dist/{import-danhPI2x.cjs → import--_2cfZlH.cjs}

@@ -2501,14 +2501,23 @@ const CLINE_HOOK_EVENTS = [
 /**
 * Hook events supported by GitHub Copilot (cloud coding agent).
 *
-* GitHub now documents an eight-event surface for `.github/hooks/*.json`:
+* The events rulesync writes to `.github/hooks/*.json`:
 * `sessionStart`, `sessionEnd`, `userPromptSubmitted` ← `beforeSubmitPrompt`,
-* `preToolUse`, `postToolUse`, `agentStop` ← `stop`, `subagentStop`, and
-* `errorOccurred` ← `afterError`. `subagentStart` is intentionally absent: it is
-* not part of the documented cloud-agent surface.
+* `preToolUse`, `postToolUse`, `agentStop` ← `stop`, `subagentStart`,
+* `subagentStop`, `errorOccurred` ← `afterError`, and `preCompact`.
 *
-* @see https://docs.github.com/en/copilot/concepts/agents/coding-agent/about-hooks
-* @see https://docs.github.com/en/copilot/concepts/agents/hooks
+* `preCompact` and `subagentStart` are authorable because the unified hooks
+* reference's per-event "Cloud agent" column says both fire there. That column
+* is the authority for this set: the older cloud-agent concept page still
+* lists only the eight events this set began as, and re-narrowing to it would
+* undo that. `notification` and `permissionRequest` stay out because the same
+* column is explicit that they do not fire on the cloud agent.
+*
+* Two further CLI events — `postToolUseFailure` and `userPromptTransformed`
+* ({@link COPILOTCLI_HOOK_EVENTS}) — are documented as firing on the cloud
+* agent as well but are not modelled here yet.
+*
+* @see https://docs.github.com/en/copilot/reference/hooks-reference
 */
 const COPILOT_HOOK_EVENTS = [
 	"sessionStart",
@@ -2517,8 +2526,10 @@ const COPILOT_HOOK_EVENTS = [
 	"preToolUse",
 	"postToolUse",
 	"stop",
+	"subagentStart",
 	"subagentStop",
-	"afterError"
+	"afterError",
+	"preCompact"
 ];
 /**
 * Hook events supported by the GitHub Copilot CLI (`copilotcli-hooks.ts`).
@@ -3254,8 +3265,10 @@ const CANONICAL_TO_COPILOT_EVENT_NAMES = {
 	preToolUse: "preToolUse",
 	postToolUse: "postToolUse",
 	stop: "agentStop",
+	subagentStart: "subagentStart",
 	subagentStop: "subagentStop",
-	afterError: "errorOccurred"
+	afterError: "errorOccurred",
+	preCompact: "preCompact"
 };
 /**
 * Map Copilot camelCase event names to canonical camelCase.
@@ -17070,6 +17083,13 @@ var GrokcliHooks = class GrokcliHooks extends ToolHooks {
 * @see https://github.com/NousResearch/hermes-agent/blob/main/website/docs/user-guide/features/hooks.md
 */
 const HERMESAGENT_MATCHER_EVENTS = /* @__PURE__ */ new Set(["pre_tool_call", "post_tool_call"]);
+/**
+* The only Hermes event that can block, and therefore the only one whose
+* entries accept `fail_closed`. Upstream warns and ignores the key on every
+* other event ("only blocking-capable events can fail closed").
+* @see https://github.com/NousResearch/hermes-agent/blob/main/website/docs/user-guide/features/hooks.md
+*/
+const HERMESAGENT_FAIL_CLOSED_EVENT = "pre_tool_call";
 const HERMESAGENT_CANONICAL_EVENTS = new Set(HERMESAGENT_HOOK_EVENTS);
 const HERMESAGENT_NATIVE_EVENTS = new Set(HERMESAGENT_NATIVE_HOOK_EVENTS);
 /**
@@ -17103,7 +17123,9 @@ function isHermesHookEventEntry(key, value) {
 * unsupported hook types centrally). `matcher` is only carried through for
 * `pre_tool_call`/`post_tool_call`; on any other event it is dropped with a
 * warning, mirroring how other adapters (e.g. AugmentCode) handle
-* matcher-less lifecycle events.
+* matcher-less lifecycle events. The canonical `failClosed` field (shared with
+* Cursor, whose semantics Hermes copied) becomes `fail_closed`, which upstream
+* only honours on `pre_tool_call`.
 */
 function definitionsToHermesEntries({ event, sourceEvent = event, definitions, logger }) {
 	const supportsMatcher = HERMESAGENT_MATCHER_EVENTS.has(event);
@@ -17114,6 +17136,10 @@ function definitionsToHermesEntries({ event, sourceEvent = event, definitions, l
 		if (typeof definition.matcher === "string" && definition.matcher !== "") if (supportsMatcher) entry.matcher = definition.matcher;
 		else logger?.warn(`matcher "${definition.matcher}" on "${sourceEvent}" hook will be ignored — Hermes Agent only supports matchers on pre_tool_call/post_tool_call`);
 		if (typeof definition.timeout === "number") entry.timeout = definition.timeout;
+		if (typeof definition.failClosed === "boolean") {
+			if (event === HERMESAGENT_FAIL_CLOSED_EVENT) entry.fail_closed = definition.failClosed;
+			else if (definition.failClosed) logger?.warn(`failClosed on "${sourceEvent}" hook will be ignored — Hermes Agent only supports fail_closed on pre_tool_call`);
+		}
 		entries.push(entry);
 	}
 	return entries;
@@ -17165,6 +17191,37 @@ function canonicalToHermesHooks({ config, toolOverrideHooks, logger }) {
 	return result;
 }
 /**
+* Reads a hook entry's fail-closed flag. Upstream accepts its own `fail_closed`
+* and the Cursor/Claude Code `failClosed` spelling alike, so both have to be
+* read back into the single canonical field.
+*/
+function readHermesFailClosed(entry) {
+	if (typeof entry.fail_closed === "boolean") return entry.fail_closed;
+	if (typeof entry.failClosed === "boolean") return entry.failClosed;
+}
+/**
+* Converts one serialized Hermes hook entry back into a canonical definition,
+* or `undefined` when it is not a hook rulesync models (no string `command`).
+* `matcher` and `fail_closed` are read only on the events upstream honours them
+* on, so an imported value is never one the next generate warns about and drops.
+*/
+function hermesEntryToDefinition({ nativeEvent, raw }) {
+	if (!isRecord$1(raw)) return;
+	const entry = raw;
+	if (typeof entry.command !== "string") return;
+	const def = {
+		type: "command",
+		command: entry.command
+	};
+	if (HERMESAGENT_MATCHER_EVENTS.has(nativeEvent) && typeof entry.matcher === "string" && entry.matcher !== "") def.matcher = entry.matcher;
+	if (typeof entry.timeout === "number") def.timeout = entry.timeout;
+	if (nativeEvent === HERMESAGENT_FAIL_CLOSED_EVENT) {
+		const failClosed = readHermesFailClosed(entry);
+		if (failClosed !== void 0) def.failClosed = failClosed;
+	}
+	return def;
+}
+/**
 * Reverse {@link canonicalToHermesHooks}: parse Hermes's native
 * `hooks: { <event>: [...] }` map back into a canonical event → definition[]
 * record. Native events with no canonical equivalent (`pre_verify`,
@@ -17178,19 +17235,10 @@ function hermesHooksToCanonical(hooks) {
 		if (PROTOTYPE_POLLUTION_KEYS.has(nativeEvent) || !Array.isArray(entries)) continue;
 		if (!isHermesHookEventEntry(nativeEvent, entries)) continue;
 		const rulesyncEvent = HERMESAGENT_TO_CANONICAL_EVENT_NAMES[nativeEvent] ?? nativeEvent;
-		const defs = [];
-		for (const raw of entries) {
-			if (raw === null || typeof raw !== "object" || Array.isArray(raw)) continue;
-			const entry = raw;
-			if (typeof entry.command !== "string") continue;
-			const def = {
-				type: "command",
-				command: entry.command
-			};
-			if (HERMESAGENT_MATCHER_EVENTS.has(nativeEvent) && typeof entry.matcher === "string" && entry.matcher !== "") def.matcher = entry.matcher;
-			if (typeof entry.timeout === "number") def.timeout = entry.timeout;
-			defs.push(def);
-		}
+		const defs = entries.map((raw) => hermesEntryToDefinition({
+			nativeEvent,
+			raw
+		})).filter((def) => def !== void 0);
 		if (defs.length > 0) canonical[rulesyncEvent] = defs;
 	}
 	return canonical;
@@ -23871,7 +23919,7 @@ function resolveHermesTimeout(config) {
 * alias — `auth` (`oauth` for OAuth 2.1/PKCE), mTLS `client_cert` (string PEM
 * path, or `[cert, key]`/`[cert, key, password]` list) and `client_key`,
 * `connect_timeout` (seconds), `supports_parallel_tool_calls`,
-* `keepalive_interval`, and `elicitation` — verbatim
+* `keepalive_interval`, `elicitation`, `trust`, and `identity_header` — verbatim
 * from `source` to `target`. Field names are identical on both sides (the
 * canonical `McpServerSchema` is a `looseObject`), so this serves export and
 * import alike. See the Hermes mcp-config-reference.
@@ -23940,6 +23988,14 @@ function copyHermesAdvancedFields(source, target) {
 		target.elicitation = omitPrototypePollutionKeys(structuredClone(source.elicitation));
 		copied = true;
 	}
+	if (typeof source.trust === "string") {
+		target.trust = source.trust;
+		copied = true;
+	}
+	if (isPlainObject$1(source.identity_header)) {
+		target.identity_header = omitPrototypePollutionKeys(structuredClone(source.identity_header));
+		copied = true;
+	}
 	return copied;
 }
 /**

package/dist/{import-CXJwVed1.js → import-Bgkf_jVN.js}

@@ -2476,14 +2476,23 @@ const CLINE_HOOK_EVENTS = [
 /**
 * Hook events supported by GitHub Copilot (cloud coding agent).
 *
-* GitHub now documents an eight-event surface for `.github/hooks/*.json`:
+* The events rulesync writes to `.github/hooks/*.json`:
 * `sessionStart`, `sessionEnd`, `userPromptSubmitted` ← `beforeSubmitPrompt`,
-* `preToolUse`, `postToolUse`, `agentStop` ← `stop`, `subagentStop`, and
-* `errorOccurred` ← `afterError`. `subagentStart` is intentionally absent: it is
-* not part of the documented cloud-agent surface.
+* `preToolUse`, `postToolUse`, `agentStop` ← `stop`, `subagentStart`,
+* `subagentStop`, `errorOccurred` ← `afterError`, and `preCompact`.
 *
-* @see https://docs.github.com/en/copilot/concepts/agents/coding-agent/about-hooks
-* @see https://docs.github.com/en/copilot/concepts/agents/hooks
+* `preCompact` and `subagentStart` are authorable because the unified hooks
+* reference's per-event "Cloud agent" column says both fire there. That column
+* is the authority for this set: the older cloud-agent concept page still
+* lists only the eight events this set began as, and re-narrowing to it would
+* undo that. `notification` and `permissionRequest` stay out because the same
+* column is explicit that they do not fire on the cloud agent.
+*
+* Two further CLI events — `postToolUseFailure` and `userPromptTransformed`
+* ({@link COPILOTCLI_HOOK_EVENTS}) — are documented as firing on the cloud
+* agent as well but are not modelled here yet.
+*
+* @see https://docs.github.com/en/copilot/reference/hooks-reference
 */
 const COPILOT_HOOK_EVENTS = [
 	"sessionStart",
@@ -2492,8 +2501,10 @@ const COPILOT_HOOK_EVENTS = [
 	"preToolUse",
 	"postToolUse",
 	"stop",
+	"subagentStart",
 	"subagentStop",
-	"afterError"
+	"afterError",
+	"preCompact"
 ];
 /**
 * Hook events supported by the GitHub Copilot CLI (`copilotcli-hooks.ts`).
@@ -3229,8 +3240,10 @@ const CANONICAL_TO_COPILOT_EVENT_NAMES = {
 	preToolUse: "preToolUse",
 	postToolUse: "postToolUse",
 	stop: "agentStop",
+	subagentStart: "subagentStart",
 	subagentStop: "subagentStop",
-	afterError: "errorOccurred"
+	afterError: "errorOccurred",
+	preCompact: "preCompact"
 };
 /**
 * Map Copilot camelCase event names to canonical camelCase.
@@ -17045,6 +17058,13 @@ var GrokcliHooks = class GrokcliHooks extends ToolHooks {
 * @see https://github.com/NousResearch/hermes-agent/blob/main/website/docs/user-guide/features/hooks.md
 */
 const HERMESAGENT_MATCHER_EVENTS = /* @__PURE__ */ new Set(["pre_tool_call", "post_tool_call"]);
+/**
+* The only Hermes event that can block, and therefore the only one whose
+* entries accept `fail_closed`. Upstream warns and ignores the key on every
+* other event ("only blocking-capable events can fail closed").
+* @see https://github.com/NousResearch/hermes-agent/blob/main/website/docs/user-guide/features/hooks.md
+*/
+const HERMESAGENT_FAIL_CLOSED_EVENT = "pre_tool_call";
 const HERMESAGENT_CANONICAL_EVENTS = new Set(HERMESAGENT_HOOK_EVENTS);
 const HERMESAGENT_NATIVE_EVENTS = new Set(HERMESAGENT_NATIVE_HOOK_EVENTS);
 /**
@@ -17078,7 +17098,9 @@ function isHermesHookEventEntry(key, value) {
 * unsupported hook types centrally). `matcher` is only carried through for
 * `pre_tool_call`/`post_tool_call`; on any other event it is dropped with a
 * warning, mirroring how other adapters (e.g. AugmentCode) handle
-* matcher-less lifecycle events.
+* matcher-less lifecycle events. The canonical `failClosed` field (shared with
+* Cursor, whose semantics Hermes copied) becomes `fail_closed`, which upstream
+* only honours on `pre_tool_call`.
 */
 function definitionsToHermesEntries({ event, sourceEvent = event, definitions, logger }) {
 	const supportsMatcher = HERMESAGENT_MATCHER_EVENTS.has(event);
@@ -17089,6 +17111,10 @@ function definitionsToHermesEntries({ event, sourceEvent = event, definitions, l
 		if (typeof definition.matcher === "string" && definition.matcher !== "") if (supportsMatcher) entry.matcher = definition.matcher;
 		else logger?.warn(`matcher "${definition.matcher}" on "${sourceEvent}" hook will be ignored — Hermes Agent only supports matchers on pre_tool_call/post_tool_call`);
 		if (typeof definition.timeout === "number") entry.timeout = definition.timeout;
+		if (typeof definition.failClosed === "boolean") {
+			if (event === HERMESAGENT_FAIL_CLOSED_EVENT) entry.fail_closed = definition.failClosed;
+			else if (definition.failClosed) logger?.warn(`failClosed on "${sourceEvent}" hook will be ignored — Hermes Agent only supports fail_closed on pre_tool_call`);
+		}
 		entries.push(entry);
 	}
 	return entries;
@@ -17140,6 +17166,37 @@ function canonicalToHermesHooks({ config, toolOverrideHooks, logger }) {
 	return result;
 }
 /**
+* Reads a hook entry's fail-closed flag. Upstream accepts its own `fail_closed`
+* and the Cursor/Claude Code `failClosed` spelling alike, so both have to be
+* read back into the single canonical field.
+*/
+function readHermesFailClosed(entry) {
+	if (typeof entry.fail_closed === "boolean") return entry.fail_closed;
+	if (typeof entry.failClosed === "boolean") return entry.failClosed;
+}
+/**
+* Converts one serialized Hermes hook entry back into a canonical definition,
+* or `undefined` when it is not a hook rulesync models (no string `command`).
+* `matcher` and `fail_closed` are read only on the events upstream honours them
+* on, so an imported value is never one the next generate warns about and drops.
+*/
+function hermesEntryToDefinition({ nativeEvent, raw }) {
+	if (!isRecord$1(raw)) return;
+	const entry = raw;
+	if (typeof entry.command !== "string") return;
+	const def = {
+		type: "command",
+		command: entry.command
+	};
+	if (HERMESAGENT_MATCHER_EVENTS.has(nativeEvent) && typeof entry.matcher === "string" && entry.matcher !== "") def.matcher = entry.matcher;
+	if (typeof entry.timeout === "number") def.timeout = entry.timeout;
+	if (nativeEvent === HERMESAGENT_FAIL_CLOSED_EVENT) {
+		const failClosed = readHermesFailClosed(entry);
+		if (failClosed !== void 0) def.failClosed = failClosed;
+	}
+	return def;
+}
+/**
 * Reverse {@link canonicalToHermesHooks}: parse Hermes's native
 * `hooks: { <event>: [...] }` map back into a canonical event → definition[]
 * record. Native events with no canonical equivalent (`pre_verify`,
@@ -17153,19 +17210,10 @@ function hermesHooksToCanonical(hooks) {
 		if (PROTOTYPE_POLLUTION_KEYS.has(nativeEvent) || !Array.isArray(entries)) continue;
 		if (!isHermesHookEventEntry(nativeEvent, entries)) continue;
 		const rulesyncEvent = HERMESAGENT_TO_CANONICAL_EVENT_NAMES[nativeEvent] ?? nativeEvent;
-		const defs = [];
-		for (const raw of entries) {
-			if (raw === null || typeof raw !== "object" || Array.isArray(raw)) continue;
-			const entry = raw;
-			if (typeof entry.command !== "string") continue;
-			const def = {
-				type: "command",
-				command: entry.command
-			};
-			if (HERMESAGENT_MATCHER_EVENTS.has(nativeEvent) && typeof entry.matcher === "string" && entry.matcher !== "") def.matcher = entry.matcher;
-			if (typeof entry.timeout === "number") def.timeout = entry.timeout;
-			defs.push(def);
-		}
+		const defs = entries.map((raw) => hermesEntryToDefinition({
+			nativeEvent,
+			raw
+		})).filter((def) => def !== void 0);
 		if (defs.length > 0) canonical[rulesyncEvent] = defs;
 	}
 	return canonical;
@@ -23846,7 +23894,7 @@ function resolveHermesTimeout(config) {
 * alias — `auth` (`oauth` for OAuth 2.1/PKCE), mTLS `client_cert` (string PEM
 * path, or `[cert, key]`/`[cert, key, password]` list) and `client_key`,
 * `connect_timeout` (seconds), `supports_parallel_tool_calls`,
-* `keepalive_interval`, and `elicitation` — verbatim
+* `keepalive_interval`, `elicitation`, `trust`, and `identity_header` — verbatim
 * from `source` to `target`. Field names are identical on both sides (the
 * canonical `McpServerSchema` is a `looseObject`), so this serves export and
 * import alike. See the Hermes mcp-config-reference.
@@ -23915,6 +23963,14 @@ function copyHermesAdvancedFields(source, target) {
 		target.elicitation = omitPrototypePollutionKeys(structuredClone(source.elicitation));
 		copied = true;
 	}
+	if (typeof source.trust === "string") {
+		target.trust = source.trust;
+		copied = true;
+	}
+	if (isPlainObject$1(source.identity_header)) {
+		target.identity_header = omitPrototypePollutionKeys(structuredClone(source.identity_header));
+		copied = true;
+	}
 	return copied;
 }
 /**
@@ -54666,4 +54722,4 @@ async function importChecksCore(params) {
 //#endregion
 export { JsonLogger as $, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME as $t, RulesyncRuleFrontmatterSchema as A, ALL_TOOL_TARGETS_WITH_WILDCARD as At, RulesyncCheck as B, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as Bt, CODEXCLI_DIR as C, removeTempDirectory as Ct, RulesyncSkill as D, writeFileBuffer as Dt, RulesyncSubagentFrontmatterSchema as E, toPosixPath as Et, getRulesyncSourceCandidates as F, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as Ft, SKILL_FILE_NAME as G, RULESYNC_IGNORE_RELATIVE_FILE_PATH as Gt, stringifyFrontmatter as H, RULESYNC_HOOKS_FILE_NAME as Ht, resolveRulesyncSourceWritePath as I, RULESYNC_CHECKS_RELATIVE_DIR_PATH as It, ConfigFileSchema as J, RULESYNC_MCP_LEGACY_FILE_NAME as Jt, ConfigResolver as K, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as Kt, parseJsonc as L, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as Lt, RulesyncMcp as M, ToolTargetSchema as Mt, RulesyncIgnore as N, MAX_FILE_SIZE as Nt, RulesyncSkillFrontmatterSchema as O, writeFileContent as Ot, RulesyncHooks as P, RULESYNC_AIIGNORE_FILE_NAME as Pt, ConsoleLogger as Q, RULESYNC_PERMISSIONS_FILE_NAME as Qt, RulesyncCommand as R, RULESYNC_CONFIG_RELATIVE_FILE_PATH as Rt, CODEXCLI_BASH_RULES_FILE_NAME as S, removeFileStrict as St, RulesyncSubagent as T, runWithDirectoryRollback as Tt, loadYaml as U, RULESYNC_HOOKS_LEGACY_FILE_NAME as Ut, RulesyncCheckFrontmatterSchema as V, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as Vt, SHARED_USER_MANAGED_CONFIG_PATHS as W, RULESYNC_HOOKS_RELATIVE_FILE_PATH as Wt, SourceEntrySchema as X, RULESYNC_MCP_SCHEMA_URL as Xt, GITIGNORE_DESTINATION_KEY as Y, RULESYNC_MCP_RELATIVE_FILE_PATH as Yt, findControlCharacter as Z, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as Zt, CLAUDECODE_LOCAL_RULE_FILE_NAME as _, readFileContent as _t, convertFromTool as a, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as an, assertTreeContainsNoSymlinks as at, CLAUDECODE_SKILLS_DIR_PATH as b, removeDirectoryStrict as bt, SubagentsProcessor as c, ALL_FEATURES_WITH_WILDCARD as cn, createTempDirectory as ct, IgnoreProcessor as d, fileExists as dt, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as en, fallbackLogger as et, HooksProcessor as f, findFilesByGlobs as ft, CLAUDECODE_DIR as g, listDirectoryFiles as gt, QWENCODE_LOCAL_RULE_FILE_NAME as h, isSymlink as ht, getProcessorRegistryEntry as i, RULESYNC_SKILLS_RELATIVE_DIR_PATH as in, assertDirectoryIfExists as it, RulesyncPermissions as j, PACKAGING_TOOL_TARGETS as jt, RulesyncRule as k, ALL_TOOL_TARGETS as kt, SkillsProcessor as l, DEPRECATED_FEATURE_REPLACEMENTS as ln, directoryExists as lt, QWENCODE_DIR as m, getHomeDirectory as mt, checkRulesyncDirExists as n, RULESYNC_RELATIVE_DIR_PATH as nn, CLIError as nt, isPackagingToolTarget as o, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as on, assertWritablePathInsideRoot as ot, CommandsProcessor as p, getFileSize as pt, CONFLICTING_TARGET_PAIRS as q, RULESYNC_MCP_FILE_NAME as qt, generate as r, RULESYNC_RULES_RELATIVE_DIR_PATH as rn, ErrorCodes as rt, RulesProcessor as s, ALL_FEATURES as sn, checkPathTraversal as st, importFromTool as t, RULESYNC_PERMISSIONS_SCHEMA_URL as tn, warnOnConflictingFlags as tt, McpProcessor as u, formatError as un, ensureDir as ut, CLAUDECODE_MEMORIES_DIR_NAME as v, readFileContentOrNull as vt, getLocalSkillDirNames as w, resolvePath as wt, ChecksProcessor as x, removeFile as xt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as y, removeDirectory as yt, RulesyncCommandFrontmatterSchema as z, RULESYNC_CONFIG_SCHEMA_URL as zt };
 
-//# sourceMappingURL=import-CXJwVed1.js.map
+//# sourceMappingURL=import-Bgkf_jVN.js.map