sessionpipe 0.1.0 → 0.2.0

package/dist/hook.js

@@ -1,28 +1,71 @@
 #!/usr/bin/env node
-// sessionpipe 0.1.0 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe 0.2.0 · Apache-2.0 · https://sessionpipe.org
 
 // src/hook.ts
 import { spawn } from "node:child_process";
-import { appendFileSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import os2 from "node:os";
+import path2 from "node:path";
+import { fileURLToPath } from "node:url";
+
+// src/control/local.ts
+import net from "node:net";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+function socketPath(state2, env2 = process.env) {
+  if (env2.SESSIONPIPE_SOCKET) return env2.SESSIONPIPE_SOCKET;
+  if (process.platform === "win32") return `\\\\.\\pipe\\sessionpipe-control-${os.userInfo().username}`;
+  return path.join(state2, "control.sock");
+}
+function ask(sock, req, timeoutMs) {
+  return new Promise((resolve) => {
+    let buf = "";
+    let done = false;
+    const s = net.connect(sock);
+    const finish2 = (r) => {
+      if (done) return;
+      done = true;
+      clearTimeout(t);
+      s.destroy();
+      resolve(r);
+    };
+    const t = setTimeout(() => finish2(null), timeoutMs);
+    s.on("connect", () => s.write(`${JSON.stringify(req)}
+`));
+    s.on("data", (d) => {
+      buf += d.toString("utf8");
+      const i = buf.indexOf("\n");
+      if (i < 0) return;
+      try {
+        finish2(JSON.parse(buf.slice(0, i)));
+      } catch {
+        finish2(null);
+      }
+    });
+    s.on("error", () => finish2(null));
+    s.on("close", () => finish2(null));
+  });
+}
+
+// src/hook.ts
 var t0 = process.hrtime.bigint();
+var workMs = null;
 var [harness = "", event = "", ...rest] = process.argv.slice(2);
 var env = process.env;
 function stateDir() {
-  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);
-  const home = os.homedir();
+  if (env.SESSIONPIPE_STATE) return path2.resolve(env.SESSIONPIPE_STATE);
+  const home = os2.homedir();
   if (process.platform === "win32")
-    return path.join(env.LOCALAPPDATA || path.join(home, "AppData", "Local"), "sessionpipe");
-  return path.join(env.XDG_STATE_HOME || path.join(home, ".local", "state"), "sessionpipe");
+    return path2.join(env.LOCALAPPDATA || path2.join(home, "AppData", "Local"), "sessionpipe");
+  return path2.join(env.XDG_STATE_HOME || path2.join(home, ".local", "state"), "sessionpipe");
 }
 function configFile() {
-  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);
-  const home = os.homedir();
+  if (env.SESSIONPIPE_CONFIG) return path2.resolve(env.SESSIONPIPE_CONFIG);
+  const home = os2.homedir();
   if (process.platform === "win32")
-    return path.join(env.APPDATA || path.join(home, "AppData", "Roaming"), "sessionpipe", "config.json");
-  return path.join(env.XDG_CONFIG_HOME || path.join(home, ".config"), "sessionpipe", "config.json");
+    return path2.join(env.APPDATA || path2.join(home, "AppData", "Roaming"), "sessionpipe", "config.json");
+  return path2.join(env.XDG_CONFIG_HOME || path2.join(home, ".config"), "sessionpipe", "config.json");
 }
 if (harness === "antigravity") {
   try {
@@ -46,7 +89,8 @@ try {
     const id = sessionIdOf(stdin);
     if (!id || !beatDue(id)) finish(false);
   }
-  mkdirSync(path.join(state, "jobs"), { recursive: true });
+  const stopAnswer = event === "Stop" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;
+  mkdirSync(path2.join(state, "jobs"), { recursive: true, mode: 448 });
   const job = {
     harness,
     event,
@@ -63,24 +107,75 @@ try {
     ppid: process.ppid,
     at: Date.now()
   };
-  const jobFile = path.join(state, "jobs", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
-  writeFileSync(jobFile, JSON.stringify(job));
+  const jobFile = path2.join(state, "jobs", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
+  writeFileSync(jobFile, JSON.stringify(job), { mode: 384 });
   if (!env.SESSIONPIPE_NO_WORKER) {
-    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), "worker.js");
+    const worker = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "worker.js");
     const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: "ignore", windowsHide: true, env });
     p.unref();
   }
+  if (stopAnswer) {
+    try {
+      writeFileSync(1, `${stopAnswer}
+`);
+    } catch {
+    }
+  }
+  const ctl = event === "PermissionRequest" ? controlAsk(stdin) : null;
+  if (ctl) {
+    workMs = Number(process.hrtime.bigint() - t0) / 1e6;
+    const out = await ctl;
+    if (out) {
+      try {
+        writeFileSync(1, `${out}
+`);
+      } catch {
+      }
+    }
+  }
   finish(true);
 } catch {
   finish(false);
 }
+function controlAsk(stdin) {
+  if (harness !== "claude-code" || event !== "Stop" && event !== "PermissionRequest") return null;
+  if (env.SESSIONPIPE_CONTROL_JOB) return null;
+  const sock = socketPath(state);
+  if (process.platform === "win32" ? !existsSync(path2.join(path2.dirname(configFile()), "control.json")) : !existsSync(sock))
+    return null;
+  let s;
+  try {
+    s = JSON.parse(stdin);
+  } catch {
+    return null;
+  }
+  const id = typeof s.session_id === "string" ? s.session_id : "";
+  if (!id) return null;
+  const session = `claude-code:${id}`;
+  if (event === "Stop")
+    return ask(sock, { op: "stop", session, active: s.stop_hook_active === true }, 300).then(
+      (r) => r?.op === "block" ? JSON.stringify({ decision: "block", reason: r.reason }) : null
+    );
+  const tool = typeof s.tool_name === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : void 0;
+  const turn = typeof s.prompt_id === "string" ? s.prompt_id : void 0;
+  const attention = `perm-${createHash("sha256").update(`${turn ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
+  return ask(sock, { op: "permission", session, attention, ...tool ? { tool } : {} }, 125e3).then(
+    (r) => r?.op === "decision" ? JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PermissionRequest",
+        decision: r.behavior === "allow" ? { behavior: "allow" } : { behavior: "deny", message: r.message || "Denied by the owner (sessionpipe control)." }
+      }
+    }) : null
+  );
+}
 function finish(spawned) {
-  const ms = Number(process.hrtime.bigint() - t0) / 1e6;
+  const total = Number(process.hrtime.bigint() - t0) / 1e6;
+  const ms = workMs ?? total;
   try {
     mkdirSync(state, { recursive: true });
     appendFileSync(
-      path.join(state, "timing.jsonl"),
-      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned })}
+      path2.join(state, "timing.jsonl"),
+      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {} })}
 `
     );
   } catch {
@@ -105,14 +200,14 @@ function sessionIdOf(stdin) {
   return m?.[1] ?? "";
 }
 function beatDue(id) {
-  const stamp = path.join(state, "beats", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, "_")}`);
+  const stamp = path2.join(state, "beats", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, "_")}`);
   try {
     if (Date.now() - statSync(stamp).mtimeMs < 6e4) return false;
   } catch {
   }
   try {
-    mkdirSync(path.dirname(stamp), { recursive: true });
-    writeFileSync(stamp, "");
+    mkdirSync(path2.dirname(stamp), { recursive: true, mode: 448 });
+    writeFileSync(stamp, "", { mode: 384 });
   } catch {
   }
   return true;

package/dist/hook.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/hook.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n// SPDX-License-Identifier: Apache-2.0\n// The hook path. A harness runs `node hook.js <harness> <event>`; this reads stdin,\n// writes one job file, spawns the worker detached, prints what the harness needs\n// ({} for Antigravity) and exits 0 \u2014 in milliseconds, with nothing but node:\n// builtins imported (the build checks that). No network, no schema library, no\n// config parsing beyond one small file read for the throttle.\nimport { spawn } from \"node:child_process\";\nimport { appendFileSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst t0 = process.hrtime.bigint();\nconst [harness = \"\", event = \"\", ...rest] = process.argv.slice(2);\nconst env = process.env;\n\nfunction stateDir(): string {\n  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.LOCALAPPDATA || path.join(home, \"AppData\", \"Local\"), \"sessionpipe\");\n  return path.join(env.XDG_STATE_HOME || path.join(home, \".local\", \"state\"), \"sessionpipe\");\n}\nfunction configFile(): string {\n  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.APPDATA || path.join(home, \"AppData\", \"Roaming\"), \"sessionpipe\", \"config.json\");\n  return path.join(env.XDG_CONFIG_HOME || path.join(home, \".config\"), \"sessionpipe\", \"config.json\");\n}\n\n// Antigravity parses stdout as the hook's answer; `{}` is \"carry on\" for every event.\nif (harness === \"antigravity\") {\n  try {\n    writeFileSync(1, \"{}\\n\");\n  } catch {}\n}\n\nconst state = stateDir();\ntry {\n  if (!harness || !event) throw new Error(\"usage: hook <harness> <event>\");\n  let stdin = \"\";\n  if (harness !== \"codex\" || event !== \"notify\") {\n    try {\n      const buf = readFileSync(0);\n      stdin = buf.subarray(0, 1024 * 1024).toString(\"utf8\");\n    } catch {}\n  }\n  // Tool events are the bulk of what a harness fires. When no sink takes tier \u2265 1\n  // they are only a \"still working\" signal: one heartbeat a minute per session.\n  const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;\n  if (TOOL.test(event) && !anySinkAbove(0)) {\n    const id = sessionIdOf(stdin);\n    if (!id || !beatDue(id)) finish(false);\n  }\n  mkdirSync(path.join(state, \"jobs\"), { recursive: true });\n  const job = {\n    harness,\n    event,\n    argv: [harness, event, ...rest],\n    stdin,\n    cwd: process.cwd(),\n    env: pick([\n      \"CLAUDE_CODE_HOST_SESSION_ID\",\n      \"CLAUDE_CONFIG_DIR\",\n      \"CLAUDE_PROJECT_DIR\",\n      \"CODEX_HOME\",\n      \"GEMINI_CLI_HOME\",\n    ]),\n    ppid: process.ppid,\n    at: Date.now(),\n  };\n  const jobFile = path.join(state, \"jobs\", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);\n  writeFileSync(jobFile, JSON.stringify(job));\n  if (!env.SESSIONPIPE_NO_WORKER) {\n    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), \"worker.js\");\n    const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: \"ignore\", windowsHide: true, env });\n    p.unref();\n  }\n  finish(true);\n} catch {\n  finish(false); // the hook must be invisible to the harness\n}\n\nfunction finish(spawned: boolean): never {\n  const ms = Number(process.hrtime.bigint() - t0) / 1e6;\n  try {\n    mkdirSync(state, { recursive: true });\n    appendFileSync(\n      path.join(state, \"timing.jsonl\"),\n      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned })}\\n`,\n    );\n  } catch {}\n  process.exit(0);\n}\nfunction pick(names: string[]): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const n of names) if (env[n] !== undefined) out[n] = env[n] as string;\n  return out;\n}\nfunction anySinkAbove(tier: number): boolean {\n  try {\n    const c = JSON.parse(readFileSync(configFile(), \"utf8\")) as { sinks?: { tier?: number; paused?: string }[] };\n    return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);\n  } catch {\n    return false;\n  }\n}\nfunction sessionIdOf(stdin: string): string {\n  const m = /\"(?:session_id|sessionId|conversationId)\"\\s*:\\s*\"([^\"]{1,128})\"/.exec(stdin);\n  return m?.[1] ?? \"\";\n}\n/** One heartbeat per minute per session: the stamp file's mtime is the clock. */\nfunction beatDue(id: string): boolean {\n  const stamp = path.join(state, \"beats\", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, \"_\")}`);\n  try {\n    if (Date.now() - statSync(stamp).mtimeMs < 60_000) return false;\n  } catch {}\n  try {\n    mkdirSync(path.dirname(stamp), { recursive: true });\n    writeFileSync(stamp, \"\");\n  } catch {}\n  return true;\n}\n"],
-  "mappings": ";;;;AAOA,SAAS,aAAa;AACtB,SAAS,gBAAgB,WAAW,cAAc,UAAU,qBAAqB;AACjF,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,IAAM,KAAK,QAAQ,OAAO,OAAO;AACjC,IAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAChE,IAAM,MAAM,QAAQ;AAEpB,SAAS,WAAmB;AAC1B,MAAI,IAAI,kBAAmB,QAAO,KAAK,QAAQ,IAAI,iBAAiB;AACpE,QAAM,OAAO,GAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAO,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK,MAAM,WAAW,OAAO,GAAG,aAAa;AACzF,SAAO,KAAK,KAAK,IAAI,kBAAkB,KAAK,KAAK,MAAM,UAAU,OAAO,GAAG,aAAa;AAC1F;AACA,SAAS,aAAqB;AAC5B,MAAI,IAAI,mBAAoB,QAAO,KAAK,QAAQ,IAAI,kBAAkB;AACtE,QAAM,OAAO,GAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAO,KAAK,KAAK,IAAI,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,GAAG,eAAe,aAAa;AACrG,SAAO,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK,MAAM,SAAS,GAAG,eAAe,aAAa;AAClG;AAGA,IAAI,YAAY,eAAe;AAC7B,MAAI;AACF,kBAAc,GAAG,MAAM;AAAA,EACzB,QAAQ;AAAA,EAAC;AACX;AAEA,IAAM,QAAQ,SAAS;AACvB,IAAI;AACF,MAAI,CAAC,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,+BAA+B;AACvE,MAAI,QAAQ;AACZ,MAAI,YAAY,WAAW,UAAU,UAAU;AAC7C,QAAI;AACF,YAAM,MAAM,aAAa,CAAC;AAC1B,cAAQ,IAAI,SAAS,GAAG,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,IACtD,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,OAAO;AACb,MAAI,KAAK,KAAK,KAAK,KAAK,CAAC,aAAa,CAAC,GAAG;AACxC,UAAM,KAAK,YAAY,KAAK;AAC5B,QAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAG,QAAO,KAAK;AAAA,EACvC;AACA,YAAU,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,QAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA,MAAM,CAAC,SAAS,OAAO,GAAG,IAAI;AAAA,IAC9B;AAAA,IACA,KAAK,QAAQ,IAAI;AAAA,IACjB,KAAK,KAAK;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,QAAQ;AAAA,IACd,IAAI,KAAK,IAAI;AAAA,EACf;AACA,QAAM,UAAU,KAAK,KAAK,OAAO,QAAQ,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO;AACpH,gBAAc,SAAS,KAAK,UAAU,GAAG,CAAC;AAC1C,MAAI,CAAC,IAAI,uBAAuB;AAC9B,UAAM,SAAS,KAAK,KAAK,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,WAAW;AAClF,UAAM,IAAI,MAAM,QAAQ,UAAU,CAAC,QAAQ,OAAO,GAAG,EAAE,UAAU,MAAM,OAAO,UAAU,aAAa,MAAM,IAAI,CAAC;AAChH,MAAE,MAAM;AAAA,EACV;AACA,SAAO,IAAI;AACb,QAAQ;AACN,SAAO,KAAK;AACd;AAEA,SAAS,OAAO,SAAyB;AACvC,QAAM,KAAK,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AAClD,MAAI;AACF,cAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AACpC;AAAA,MACE,KAAK,KAAK,OAAO,cAAc;AAAA,MAC/B,GAAG,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,GAAG,SAAS,OAAO,IAAI,KAAK,MAAM,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC;AAAA;AAAA,IAC9F;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,UAAQ,KAAK,CAAC;AAChB;AACA,SAAS,KAAK,OAAyC;AACrD,QAAM,MAA8B,CAAC;AACrC,aAAW,KAAK,MAAO,KAAI,IAAI,CAAC,MAAM,OAAW,KAAI,CAAC,IAAI,IAAI,CAAC;AAC/D,SAAO;AACT;AACA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,UAAM,IAAI,KAAK,MAAM,aAAa,WAAW,GAAG,MAAM,CAAC;AACvD,YAAQ,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,SAAS,YAAY,OAAuB;AAC1C,QAAM,IAAI,kEAAkE,KAAK,KAAK;AACtF,SAAO,IAAI,CAAC,KAAK;AACnB;AAEA,SAAS,QAAQ,IAAqB;AACpC,QAAM,QAAQ,KAAK,KAAK,OAAO,SAAS,GAAG,OAAO,IAAI,GAAG,QAAQ,mBAAmB,GAAG,CAAC,EAAE;AAC1F,MAAI;AACF,QAAI,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE,UAAU,IAAQ,QAAO;AAAA,EAC5D,QAAQ;AAAA,EAAC;AACT,MAAI;AACF,cAAU,KAAK,QAAQ,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAClD,kBAAc,OAAO,EAAE;AAAA,EACzB,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;",
-  "names": []
+  "sources": ["../src/hook.ts", "../src/control/local.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\n// SPDX-License-Identifier: Apache-2.0\n// The hook path. A harness runs `node hook.js <harness> <event>`; this reads stdin,\n// writes one job file, spawns the worker detached, prints what the harness needs\n// ({} for Antigravity) and exits 0 \u2014 in milliseconds, with nothing but node:\n// builtins imported (the build checks that). No network, no schema library, no\n// config parsing beyond one small file read for the throttle.\nimport { spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { ask, socketPath } from \"./control/local.js\";\n\nconst t0 = process.hrtime.bigint();\n/** The hook's own work, when a control wait follows it (the wait is not the hook's cost). */\nlet workMs: number | null = null;\nconst [harness = \"\", event = \"\", ...rest] = process.argv.slice(2);\nconst env = process.env;\n\nfunction stateDir(): string {\n  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.LOCALAPPDATA || path.join(home, \"AppData\", \"Local\"), \"sessionpipe\");\n  return path.join(env.XDG_STATE_HOME || path.join(home, \".local\", \"state\"), \"sessionpipe\");\n}\nfunction configFile(): string {\n  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.APPDATA || path.join(home, \"AppData\", \"Roaming\"), \"sessionpipe\", \"config.json\");\n  return path.join(env.XDG_CONFIG_HOME || path.join(home, \".config\"), \"sessionpipe\", \"config.json\");\n}\n\n// Antigravity parses stdout as the hook's answer; `{}` is \"carry on\" for every event.\nif (harness === \"antigravity\") {\n  try {\n    writeFileSync(1, \"{}\\n\");\n  } catch {}\n}\n\nconst state = stateDir();\ntry {\n  if (!harness || !event) throw new Error(\"usage: hook <harness> <event>\");\n  let stdin = \"\";\n  if (harness !== \"codex\" || event !== \"notify\") {\n    try {\n      const buf = readFileSync(0);\n      stdin = buf.subarray(0, 1024 * 1024).toString(\"utf8\");\n    } catch {}\n  }\n  // Tool events are the bulk of what a harness fires. When no sink takes tier \u2265 1\n  // they are only a \"still working\" signal: one heartbeat a minute per session.\n  const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;\n  if (TOOL.test(event) && !anySinkAbove(0)) {\n    const id = sessionIdOf(stdin);\n    if (!id || !beatDue(id)) finish(false);\n  }\n  // A Stop asks the daemon BEFORE its event goes to the worker: the worker reports the\n  // Stop to the daemon too, and a message queued for this Stop must be taken here,\n  // not rerouted because the event got there first.\n  const stopAnswer = event === \"Stop\" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;\n  mkdirSync(path.join(state, \"jobs\"), { recursive: true, mode: 0o700 });\n  const job = {\n    harness,\n    event,\n    argv: [harness, event, ...rest],\n    stdin,\n    cwd: process.cwd(),\n    env: pick([\n      \"CLAUDE_CODE_HOST_SESSION_ID\",\n      \"CLAUDE_CONFIG_DIR\",\n      \"CLAUDE_PROJECT_DIR\",\n      \"CODEX_HOME\",\n      \"GEMINI_CLI_HOME\",\n    ]),\n    ppid: process.ppid,\n    at: Date.now(),\n  };\n  const jobFile = path.join(state, \"jobs\", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);\n  writeFileSync(jobFile, JSON.stringify(job), { mode: 0o600 });\n  if (!env.SESSIONPIPE_NO_WORKER) {\n    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), \"worker.js\");\n    const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: \"ignore\", windowsHide: true, env });\n    p.unref();\n  }\n  if (stopAnswer) {\n    try {\n      writeFileSync(1, `${stopAnswer}\\n`);\n    } catch {}\n  }\n  // A PermissionRequest waits AFTER its event is on its way, so the receiver already\n  // shows the Allow / Deny this answer is for.\n  const ctl = event === \"PermissionRequest\" ? controlAsk(stdin) : null;\n  if (ctl) {\n    workMs = Number(process.hrtime.bigint() - t0) / 1e6;\n    const out = await ctl;\n    if (out) {\n      try {\n        writeFileSync(1, `${out}\\n`);\n      } catch {}\n    }\n  }\n  finish(true);\n} catch {\n  finish(false); // the hook must be invisible to the harness\n}\n\n/** Control (spec/CONTROL.md \u00A76, \u00A79): only on a machine with control paired, and only\n *  for a message the daemon itself verified. A Stop hook asks for a queued message and\n *  answers a block with it; a PermissionRequest hook waits for the person's signed\n *  answer while the terminal shows its own prompt, first answer wins. Anything that\n *  goes wrong (no daemon, a timeout) prints nothing: the harness carries on as usual. */\nfunction controlAsk(stdin: string): Promise<string | null> | null {\n  if (harness !== \"claude-code\" || (event !== \"Stop\" && event !== \"PermissionRequest\")) return null;\n  if (env.SESSIONPIPE_CONTROL_JOB) return null; // a headless turn the daemon itself runs\n  const sock = socketPath(state);\n  if (\n    process.platform === \"win32\"\n      ? !existsSync(path.join(path.dirname(configFile()), \"control.json\"))\n      : !existsSync(sock)\n  )\n    return null;\n  let s: Record<string, unknown>;\n  try {\n    s = JSON.parse(stdin) as Record<string, unknown>;\n  } catch {\n    return null;\n  }\n  const id = typeof s.session_id === \"string\" ? s.session_id : \"\";\n  if (!id) return null;\n  const session = `claude-code:${id}`;\n  if (event === \"Stop\")\n    return ask(sock, { op: \"stop\", session, active: s.stop_hook_active === true }, 300).then((r) =>\n      r?.op === \"block\" ? JSON.stringify({ decision: \"block\", reason: r.reason }) : null,\n    );\n  // The attention id the adapter puts on attention.needed (claude-code.ts), so the\n  // receiver's Allow / Deny names this very prompt.\n  const tool =\n    typeof s.tool_name === \"string\" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : undefined;\n  const turn = typeof s.prompt_id === \"string\" ? s.prompt_id : undefined;\n  const attention = `perm-${createHash(\"sha256\")\n    .update(`${turn ?? \"\"}|${tool ?? \"\"}|${JSON.stringify(s.tool_input ?? null)}`)\n    .digest(\"hex\")\n    .slice(0, 16)}`;\n  return ask(sock, { op: \"permission\", session, attention, ...(tool ? { tool } : {}) }, 125_000).then((r) =>\n    r?.op === \"decision\"\n      ? JSON.stringify({\n          hookSpecificOutput: {\n            hookEventName: \"PermissionRequest\",\n            decision:\n              r.behavior === \"allow\"\n                ? { behavior: \"allow\" }\n                : { behavior: \"deny\", message: r.message || \"Denied by the owner (sessionpipe control).\" },\n          },\n        })\n      : null,\n  );\n}\n\nfunction finish(spawned: boolean): never {\n  const total = Number(process.hrtime.bigint() - t0) / 1e6;\n  const ms = workMs ?? total;\n  try {\n    mkdirSync(state, { recursive: true });\n    appendFileSync(\n      path.join(state, \"timing.jsonl\"),\n      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...(workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {}) })}\\n`,\n    );\n  } catch {}\n  process.exit(0);\n}\nfunction pick(names: string[]): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const n of names) if (env[n] !== undefined) out[n] = env[n] as string;\n  return out;\n}\nfunction anySinkAbove(tier: number): boolean {\n  try {\n    const c = JSON.parse(readFileSync(configFile(), \"utf8\")) as { sinks?: { tier?: number; paused?: string }[] };\n    return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);\n  } catch {\n    return false;\n  }\n}\nfunction sessionIdOf(stdin: string): string {\n  const m = /\"(?:session_id|sessionId|conversationId)\"\\s*:\\s*\"([^\"]{1,128})\"/.exec(stdin);\n  return m?.[1] ?? \"\";\n}\n/** One heartbeat per minute per session: the stamp file's mtime is the clock. */\nfunction beatDue(id: string): boolean {\n  const stamp = path.join(state, \"beats\", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, \"_\")}`);\n  try {\n    if (Date.now() - statSync(stamp).mtimeMs < 60_000) return false;\n  } catch {}\n  try {\n    mkdirSync(path.dirname(stamp), { recursive: true, mode: 0o700 });\n    writeFileSync(stamp, \"\", { mode: 0o600 });\n  } catch {}\n  return true;\n}\n", "// SPDX-License-Identifier: Apache-2.0\n// The daemon's local socket (spec/CONTROL.md \u00A78): how the waiter, the Stop and\n// PermissionRequest hooks and the worker talk to the one daemon on this machine.\n// Line-delimited JSON, one request per connection. A Unix socket in the state\n// directory (0600, in a 0700 dir); a per-user named pipe on Windows. Only node:\n// builtins \u2014 the hook bundle imports this.\nimport net from \"node:net\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nexport type LocalRequest =\n  /** A waiter parks until a message for its session arrives. */\n  | { op: \"wait\"; session: string; pid?: number }\n  /** A Stop hook asks for a queued message (turn mode). */\n  | { op: \"stop\"; session: string; active: boolean }\n  /** A PermissionRequest hook parks until a verified answer, or until it's released. */\n  | { op: \"permission\"; session: string; attention: string; tool?: string }\n  /** The worker reports a hook event: turn state and attention closure. */\n  | { op: \"event\"; session: string; event: string; transcript?: string; cwd?: string }\n  /** `sessionpipe control status`. */\n  | { op: \"status\" };\n\nexport type LocalReply =\n  | { op: \"message\"; text: string; id: string }\n  | { op: \"block\"; reason: string; id: string }\n  | { op: \"decision\"; behavior: \"allow\" | \"deny\"; message?: string; id: string }\n  | { op: \"none\" }\n  /** A newer waiter for the same session took over; this one stops. */\n  | { op: \"replaced\" }\n  | { op: \"ok\" }\n  | { op: \"status\"; status: unknown };\n\n/** Where the daemon listens. `SESSIONPIPE_SOCKET` overrides (tests). */\nexport function socketPath(state: string, env: NodeJS.ProcessEnv = process.env): string {\n  if (env.SESSIONPIPE_SOCKET) return env.SESSIONPIPE_SOCKET;\n  if (process.platform === \"win32\") return `\\\\\\\\.\\\\pipe\\\\sessionpipe-control-${os.userInfo().username}`;\n  return path.join(state, \"control.sock\");\n}\n\n/** One request, one reply. `timeoutMs` bounds the whole exchange; null on any\n *  failure (no daemon, a timeout, a garbled reply) \u2014 callers treat that as \"none\". */\nexport function ask(sock: string, req: LocalRequest, timeoutMs: number): Promise<LocalReply | null> {\n  return new Promise((resolve) => {\n    let buf = \"\";\n    let done = false;\n    const s = net.connect(sock);\n    const finish = (r: LocalReply | null) => {\n      if (done) return;\n      done = true;\n      clearTimeout(t);\n      s.destroy();\n      resolve(r);\n    };\n    const t = setTimeout(() => finish(null), timeoutMs);\n    s.on(\"connect\", () => s.write(`${JSON.stringify(req)}\\n`));\n    s.on(\"data\", (d) => {\n      buf += d.toString(\"utf8\");\n      const i = buf.indexOf(\"\\n\");\n      if (i < 0) return;\n      try {\n        finish(JSON.parse(buf.slice(0, i)) as LocalReply);\n      } catch {\n        finish(null);\n      }\n    });\n    s.on(\"error\", () => finish(null));\n    s.on(\"close\", () => finish(null));\n  });\n}\n"],
+  "mappings": ";;;;AAOA,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,YAAY,WAAW,cAAc,UAAU,qBAAqB;AAC7F,OAAOA,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;;;ACN9B,OAAO,SAAS;AAChB,OAAO,QAAQ;AACf,OAAO,UAAU;AAyBV,SAAS,WAAWC,QAAeC,OAAyB,QAAQ,KAAa;AACtF,MAAIA,KAAI,mBAAoB,QAAOA,KAAI;AACvC,MAAI,QAAQ,aAAa,QAAS,QAAO,oCAAoC,GAAG,SAAS,EAAE,QAAQ;AACnG,SAAO,KAAK,KAAKD,QAAO,cAAc;AACxC;AAIO,SAAS,IAAI,MAAc,KAAmB,WAA+C;AAClG,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,MAAM;AACV,QAAI,OAAO;AACX,UAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAME,UAAS,CAAC,MAAyB;AACvC,UAAI,KAAM;AACV,aAAO;AACP,mBAAa,CAAC;AACd,QAAE,QAAQ;AACV,cAAQ,CAAC;AAAA,IACX;AACA,UAAM,IAAI,WAAW,MAAMA,QAAO,IAAI,GAAG,SAAS;AAClD,MAAE,GAAG,WAAW,MAAM,EAAE,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC;AAAA,CAAI,CAAC;AACzD,MAAE,GAAG,QAAQ,CAAC,MAAM;AAClB,aAAO,EAAE,SAAS,MAAM;AACxB,YAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAI,IAAI,EAAG;AACX,UAAI;AACF,QAAAA,QAAO,KAAK,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,CAAe;AAAA,MAClD,QAAQ;AACN,QAAAA,QAAO,IAAI;AAAA,MACb;AAAA,IACF,CAAC;AACD,MAAE,GAAG,SAAS,MAAMA,QAAO,IAAI,CAAC;AAChC,MAAE,GAAG,SAAS,MAAMA,QAAO,IAAI,CAAC;AAAA,EAClC,CAAC;AACH;;;ADrDA,IAAM,KAAK,QAAQ,OAAO,OAAO;AAEjC,IAAI,SAAwB;AAC5B,IAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAChE,IAAM,MAAM,QAAQ;AAEpB,SAAS,WAAmB;AAC1B,MAAI,IAAI,kBAAmB,QAAOC,MAAK,QAAQ,IAAI,iBAAiB;AACpE,QAAM,OAAOC,IAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAOD,MAAK,KAAK,IAAI,gBAAgBA,MAAK,KAAK,MAAM,WAAW,OAAO,GAAG,aAAa;AACzF,SAAOA,MAAK,KAAK,IAAI,kBAAkBA,MAAK,KAAK,MAAM,UAAU,OAAO,GAAG,aAAa;AAC1F;AACA,SAAS,aAAqB;AAC5B,MAAI,IAAI,mBAAoB,QAAOA,MAAK,QAAQ,IAAI,kBAAkB;AACtE,QAAM,OAAOC,IAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAOD,MAAK,KAAK,IAAI,WAAWA,MAAK,KAAK,MAAM,WAAW,SAAS,GAAG,eAAe,aAAa;AACrG,SAAOA,MAAK,KAAK,IAAI,mBAAmBA,MAAK,KAAK,MAAM,SAAS,GAAG,eAAe,aAAa;AAClG;AAGA,IAAI,YAAY,eAAe;AAC7B,MAAI;AACF,kBAAc,GAAG,MAAM;AAAA,EACzB,QAAQ;AAAA,EAAC;AACX;AAEA,IAAM,QAAQ,SAAS;AACvB,IAAI;AACF,MAAI,CAAC,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,+BAA+B;AACvE,MAAI,QAAQ;AACZ,MAAI,YAAY,WAAW,UAAU,UAAU;AAC7C,QAAI;AACF,YAAM,MAAM,aAAa,CAAC;AAC1B,cAAQ,IAAI,SAAS,GAAG,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,IACtD,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,OAAO;AACb,MAAI,KAAK,KAAK,KAAK,KAAK,CAAC,aAAa,CAAC,GAAG;AACxC,UAAM,KAAK,YAAY,KAAK;AAC5B,QAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAG,QAAO,KAAK;AAAA,EACvC;AAIA,QAAM,aAAa,UAAU,SAAS,OAAO,WAAW,KAAK,KAAK,QAAQ,QAAQ,IAAI,KAAK;AAC3F,YAAUA,MAAK,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpE,QAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA,MAAM,CAAC,SAAS,OAAO,GAAG,IAAI;AAAA,IAC9B;AAAA,IACA,KAAK,QAAQ,IAAI;AAAA,IACjB,KAAK,KAAK;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,QAAQ;AAAA,IACd,IAAI,KAAK,IAAI;AAAA,EACf;AACA,QAAM,UAAUA,MAAK,KAAK,OAAO,QAAQ,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO;AACpH,gBAAc,SAAS,KAAK,UAAU,GAAG,GAAG,EAAE,MAAM,IAAM,CAAC;AAC3D,MAAI,CAAC,IAAI,uBAAuB;AAC9B,UAAM,SAASA,MAAK,KAAKA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,WAAW;AAClF,UAAM,IAAI,MAAM,QAAQ,UAAU,CAAC,QAAQ,OAAO,GAAG,EAAE,UAAU,MAAM,OAAO,UAAU,aAAa,MAAM,IAAI,CAAC;AAChH,MAAE,MAAM;AAAA,EACV;AACA,MAAI,YAAY;AACd,QAAI;AACF,oBAAc,GAAG,GAAG,UAAU;AAAA,CAAI;AAAA,IACpC,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,MAAM,UAAU,sBAAsB,WAAW,KAAK,IAAI;AAChE,MAAI,KAAK;AACP,aAAS,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AAChD,UAAM,MAAM,MAAM;AAClB,QAAI,KAAK;AACP,UAAI;AACF,sBAAc,GAAG,GAAG,GAAG;AAAA,CAAI;AAAA,MAC7B,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO,IAAI;AACb,QAAQ;AACN,SAAO,KAAK;AACd;AAOA,SAAS,WAAW,OAA8C;AAChE,MAAI,YAAY,iBAAkB,UAAU,UAAU,UAAU,oBAAsB,QAAO;AAC7F,MAAI,IAAI,wBAAyB,QAAO;AACxC,QAAM,OAAO,WAAW,KAAK;AAC7B,MACE,QAAQ,aAAa,UACjB,CAAC,WAAWA,MAAK,KAAKA,MAAK,QAAQ,WAAW,CAAC,GAAG,cAAc,CAAC,IACjE,CAAC,WAAW,IAAI;AAEpB,WAAO;AACT,MAAI;AACJ,MAAI;AACF,QAAI,KAAK,MAAM,KAAK;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAC7D,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,UAAU,eAAe,EAAE;AACjC,MAAI,UAAU;AACZ,WAAO,IAAI,MAAM,EAAE,IAAI,QAAQ,SAAS,QAAQ,EAAE,qBAAqB,KAAK,GAAG,GAAG,EAAE;AAAA,MAAK,CAAC,MACxF,GAAG,OAAO,UAAU,KAAK,UAAU,EAAE,UAAU,SAAS,QAAQ,EAAE,OAAO,CAAC,IAAI;AAAA,IAChF;AAGF,QAAM,OACJ,OAAO,EAAE,cAAc,YAAY,2BAA2B,KAAK,EAAE,SAAS,IAAI,EAAE,YAAY;AAClG,QAAM,OAAO,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC7D,QAAM,YAAY,QAAQ,WAAW,QAAQ,EAC1C,OAAO,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU,EAAE,cAAc,IAAI,CAAC,EAAE,EAC5E,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACf,SAAO,IAAI,MAAM,EAAE,IAAI,cAAc,SAAS,WAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,GAAG,KAAO,EAAE;AAAA,IAAK,CAAC,MACnG,GAAG,OAAO,aACN,KAAK,UAAU;AAAA,MACb,oBAAoB;AAAA,QAClB,eAAe;AAAA,QACf,UACE,EAAE,aAAa,UACX,EAAE,UAAU,QAAQ,IACpB,EAAE,UAAU,QAAQ,SAAS,EAAE,WAAW,6CAA6C;AAAA,MAC/F;AAAA,IACF,CAAC,IACD;AAAA,EACN;AACF;AAEA,SAAS,OAAO,SAAyB;AACvC,QAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AACrD,QAAM,KAAK,UAAU;AACrB,MAAI;AACF,cAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AACpC;AAAA,MACEA,MAAK,KAAK,OAAO,cAAc;AAAA,MAC/B,GAAG,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,GAAG,SAAS,OAAO,IAAI,KAAK,MAAM,KAAK,EAAE,IAAI,IAAI,SAAS,GAAI,WAAW,OAAO,EAAE,iBAAiB,KAAK,MAAM,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;AAAA;AAAA,IAC3K;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,UAAQ,KAAK,CAAC;AAChB;AACA,SAAS,KAAK,OAAyC;AACrD,QAAM,MAA8B,CAAC;AACrC,aAAW,KAAK,MAAO,KAAI,IAAI,CAAC,MAAM,OAAW,KAAI,CAAC,IAAI,IAAI,CAAC;AAC/D,SAAO;AACT;AACA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,UAAM,IAAI,KAAK,MAAM,aAAa,WAAW,GAAG,MAAM,CAAC;AACvD,YAAQ,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,SAAS,YAAY,OAAuB;AAC1C,QAAM,IAAI,kEAAkE,KAAK,KAAK;AACtF,SAAO,IAAI,CAAC,KAAK;AACnB;AAEA,SAAS,QAAQ,IAAqB;AACpC,QAAM,QAAQA,MAAK,KAAK,OAAO,SAAS,GAAG,OAAO,IAAI,GAAG,QAAQ,mBAAmB,GAAG,CAAC,EAAE;AAC1F,MAAI;AACF,QAAI,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE,UAAU,IAAQ,QAAO;AAAA,EAC5D,QAAQ;AAAA,EAAC;AACT,MAAI;AACF,cAAUA,MAAK,QAAQ,KAAK,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/D,kBAAc,OAAO,IAAI,EAAE,MAAM,IAAM,CAAC;AAAA,EAC1C,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;",
+  "names": ["os", "path", "state", "env", "finish", "path", "os"]
 }

package/dist/http-sink.d.ts

@@ -1,4 +1,8 @@
 import type { DeliveryResult, Event, Sink, SinkConfig, Tier } from "@sessionpipe/core";
+/** The Standard Webhooks message id (HTTP.md §2): the same batch sent again carries
+ *  the same id, so a receiver that dedupes on webhook-id sees a retry as one message.
+ *  Derived from the events' own ids, which the outbox keeps across retries. */
+export declare function webhookId(events: Pick<Event, "id">[]): string;
 export declare class HttpSink implements Sink {
     private readonly cfg;
     readonly tier: Tier;

package/dist/http-sink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-sink.d.ts","sourceRoot":"","sources":["../src/http-sink.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIvF,qBAAa,QAAS,YAAW,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI;IALrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEV,GAAG,EAAE,UAAU,EACvB,IAAI,EAAE,IAAI;IAOrB,OAAO,CAAC,SAAS;IAOX,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;CA8DrD"}
+{"version":3,"file":"http-sink.d.ts","sourceRoot":"","sources":["../src/http-sink.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIvF;;+EAE+E;AAC/E,wBAAgB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,CAK7D;AAED,qBAAa,QAAS,YAAW,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI;IALrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEV,GAAG,EAAE,UAAU,EACvB,IAAI,EAAE,IAAI;IAOrB,OAAO,CAAC,SAAS;IAOX,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;CA8DrD"}