sessionpipe 0.1.1 → 0.2.0

package/dist/hook.js

@@ -1,28 +1,71 @@
 #!/usr/bin/env node
-// sessionpipe 0.1.1 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe 0.2.0 · Apache-2.0 · https://sessionpipe.org
 
 // src/hook.ts
 import { spawn } from "node:child_process";
-import { appendFileSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import os2 from "node:os";
+import path2 from "node:path";
+import { fileURLToPath } from "node:url";
+
+// src/control/local.ts
+import net from "node:net";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+function socketPath(state2, env2 = process.env) {
+  if (env2.SESSIONPIPE_SOCKET) return env2.SESSIONPIPE_SOCKET;
+  if (process.platform === "win32") return `\\\\.\\pipe\\sessionpipe-control-${os.userInfo().username}`;
+  return path.join(state2, "control.sock");
+}
+function ask(sock, req, timeoutMs) {
+  return new Promise((resolve) => {
+    let buf = "";
+    let done = false;
+    const s = net.connect(sock);
+    const finish2 = (r) => {
+      if (done) return;
+      done = true;
+      clearTimeout(t);
+      s.destroy();
+      resolve(r);
+    };
+    const t = setTimeout(() => finish2(null), timeoutMs);
+    s.on("connect", () => s.write(`${JSON.stringify(req)}
+`));
+    s.on("data", (d) => {
+      buf += d.toString("utf8");
+      const i = buf.indexOf("\n");
+      if (i < 0) return;
+      try {
+        finish2(JSON.parse(buf.slice(0, i)));
+      } catch {
+        finish2(null);
+      }
+    });
+    s.on("error", () => finish2(null));
+    s.on("close", () => finish2(null));
+  });
+}
+
+// src/hook.ts
 var t0 = process.hrtime.bigint();
+var workMs = null;
 var [harness = "", event = "", ...rest] = process.argv.slice(2);
 var env = process.env;
 function stateDir() {
-  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);
-  const home = os.homedir();
+  if (env.SESSIONPIPE_STATE) return path2.resolve(env.SESSIONPIPE_STATE);
+  const home = os2.homedir();
   if (process.platform === "win32")
-    return path.join(env.LOCALAPPDATA || path.join(home, "AppData", "Local"), "sessionpipe");
-  return path.join(env.XDG_STATE_HOME || path.join(home, ".local", "state"), "sessionpipe");
+    return path2.join(env.LOCALAPPDATA || path2.join(home, "AppData", "Local"), "sessionpipe");
+  return path2.join(env.XDG_STATE_HOME || path2.join(home, ".local", "state"), "sessionpipe");
 }
 function configFile() {
-  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);
-  const home = os.homedir();
+  if (env.SESSIONPIPE_CONFIG) return path2.resolve(env.SESSIONPIPE_CONFIG);
+  const home = os2.homedir();
   if (process.platform === "win32")
-    return path.join(env.APPDATA || path.join(home, "AppData", "Roaming"), "sessionpipe", "config.json");
-  return path.join(env.XDG_CONFIG_HOME || path.join(home, ".config"), "sessionpipe", "config.json");
+    return path2.join(env.APPDATA || path2.join(home, "AppData", "Roaming"), "sessionpipe", "config.json");
+  return path2.join(env.XDG_CONFIG_HOME || path2.join(home, ".config"), "sessionpipe", "config.json");
 }
 if (harness === "antigravity") {
   try {
@@ -46,7 +89,8 @@ try {
     const id = sessionIdOf(stdin);
     if (!id || !beatDue(id)) finish(false);
   }
-  mkdirSync(path.join(state, "jobs"), { recursive: true, mode: 448 });
+  const stopAnswer = event === "Stop" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;
+  mkdirSync(path2.join(state, "jobs"), { recursive: true, mode: 448 });
   const job = {
     harness,
     event,
@@ -63,24 +107,75 @@ try {
     ppid: process.ppid,
     at: Date.now()
   };
-  const jobFile = path.join(state, "jobs", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
+  const jobFile = path2.join(state, "jobs", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
   writeFileSync(jobFile, JSON.stringify(job), { mode: 384 });
   if (!env.SESSIONPIPE_NO_WORKER) {
-    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), "worker.js");
+    const worker = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "worker.js");
     const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: "ignore", windowsHide: true, env });
     p.unref();
   }
+  if (stopAnswer) {
+    try {
+      writeFileSync(1, `${stopAnswer}
+`);
+    } catch {
+    }
+  }
+  const ctl = event === "PermissionRequest" ? controlAsk(stdin) : null;
+  if (ctl) {
+    workMs = Number(process.hrtime.bigint() - t0) / 1e6;
+    const out = await ctl;
+    if (out) {
+      try {
+        writeFileSync(1, `${out}
+`);
+      } catch {
+      }
+    }
+  }
   finish(true);
 } catch {
   finish(false);
 }
+function controlAsk(stdin) {
+  if (harness !== "claude-code" || event !== "Stop" && event !== "PermissionRequest") return null;
+  if (env.SESSIONPIPE_CONTROL_JOB) return null;
+  const sock = socketPath(state);
+  if (process.platform === "win32" ? !existsSync(path2.join(path2.dirname(configFile()), "control.json")) : !existsSync(sock))
+    return null;
+  let s;
+  try {
+    s = JSON.parse(stdin);
+  } catch {
+    return null;
+  }
+  const id = typeof s.session_id === "string" ? s.session_id : "";
+  if (!id) return null;
+  const session = `claude-code:${id}`;
+  if (event === "Stop")
+    return ask(sock, { op: "stop", session, active: s.stop_hook_active === true }, 300).then(
+      (r) => r?.op === "block" ? JSON.stringify({ decision: "block", reason: r.reason }) : null
+    );
+  const tool = typeof s.tool_name === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : void 0;
+  const turn = typeof s.prompt_id === "string" ? s.prompt_id : void 0;
+  const attention = `perm-${createHash("sha256").update(`${turn ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
+  return ask(sock, { op: "permission", session, attention, ...tool ? { tool } : {} }, 125e3).then(
+    (r) => r?.op === "decision" ? JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "PermissionRequest",
+        decision: r.behavior === "allow" ? { behavior: "allow" } : { behavior: "deny", message: r.message || "Denied by the owner (sessionpipe control)." }
+      }
+    }) : null
+  );
+}
 function finish(spawned) {
-  const ms = Number(process.hrtime.bigint() - t0) / 1e6;
+  const total = Number(process.hrtime.bigint() - t0) / 1e6;
+  const ms = workMs ?? total;
   try {
     mkdirSync(state, { recursive: true });
     appendFileSync(
-      path.join(state, "timing.jsonl"),
-      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned })}
+      path2.join(state, "timing.jsonl"),
+      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {} })}
 `
     );
   } catch {
@@ -105,13 +200,13 @@ function sessionIdOf(stdin) {
   return m?.[1] ?? "";
 }
 function beatDue(id) {
-  const stamp = path.join(state, "beats", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, "_")}`);
+  const stamp = path2.join(state, "beats", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, "_")}`);
   try {
     if (Date.now() - statSync(stamp).mtimeMs < 6e4) return false;
   } catch {
   }
   try {
-    mkdirSync(path.dirname(stamp), { recursive: true, mode: 448 });
+    mkdirSync(path2.dirname(stamp), { recursive: true, mode: 448 });
     writeFileSync(stamp, "", { mode: 384 });
   } catch {
   }

package/dist/hook.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/hook.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n// SPDX-License-Identifier: Apache-2.0\n// The hook path. A harness runs `node hook.js <harness> <event>`; this reads stdin,\n// writes one job file, spawns the worker detached, prints what the harness needs\n// ({} for Antigravity) and exits 0 \u2014 in milliseconds, with nothing but node:\n// builtins imported (the build checks that). No network, no schema library, no\n// config parsing beyond one small file read for the throttle.\nimport { spawn } from \"node:child_process\";\nimport { appendFileSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst t0 = process.hrtime.bigint();\nconst [harness = \"\", event = \"\", ...rest] = process.argv.slice(2);\nconst env = process.env;\n\nfunction stateDir(): string {\n  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.LOCALAPPDATA || path.join(home, \"AppData\", \"Local\"), \"sessionpipe\");\n  return path.join(env.XDG_STATE_HOME || path.join(home, \".local\", \"state\"), \"sessionpipe\");\n}\nfunction configFile(): string {\n  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.APPDATA || path.join(home, \"AppData\", \"Roaming\"), \"sessionpipe\", \"config.json\");\n  return path.join(env.XDG_CONFIG_HOME || path.join(home, \".config\"), \"sessionpipe\", \"config.json\");\n}\n\n// Antigravity parses stdout as the hook's answer; `{}` is \"carry on\" for every event.\nif (harness === \"antigravity\") {\n  try {\n    writeFileSync(1, \"{}\\n\");\n  } catch {}\n}\n\nconst state = stateDir();\ntry {\n  if (!harness || !event) throw new Error(\"usage: hook <harness> <event>\");\n  let stdin = \"\";\n  if (harness !== \"codex\" || event !== \"notify\") {\n    try {\n      const buf = readFileSync(0);\n      stdin = buf.subarray(0, 1024 * 1024).toString(\"utf8\");\n    } catch {}\n  }\n  // Tool events are the bulk of what a harness fires. When no sink takes tier \u2265 1\n  // they are only a \"still working\" signal: one heartbeat a minute per session.\n  const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;\n  if (TOOL.test(event) && !anySinkAbove(0)) {\n    const id = sessionIdOf(stdin);\n    if (!id || !beatDue(id)) finish(false);\n  }\n  mkdirSync(path.join(state, \"jobs\"), { recursive: true, mode: 0o700 });\n  const job = {\n    harness,\n    event,\n    argv: [harness, event, ...rest],\n    stdin,\n    cwd: process.cwd(),\n    env: pick([\n      \"CLAUDE_CODE_HOST_SESSION_ID\",\n      \"CLAUDE_CONFIG_DIR\",\n      \"CLAUDE_PROJECT_DIR\",\n      \"CODEX_HOME\",\n      \"GEMINI_CLI_HOME\",\n    ]),\n    ppid: process.ppid,\n    at: Date.now(),\n  };\n  const jobFile = path.join(state, \"jobs\", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);\n  writeFileSync(jobFile, JSON.stringify(job), { mode: 0o600 });\n  if (!env.SESSIONPIPE_NO_WORKER) {\n    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), \"worker.js\");\n    const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: \"ignore\", windowsHide: true, env });\n    p.unref();\n  }\n  finish(true);\n} catch {\n  finish(false); // the hook must be invisible to the harness\n}\n\nfunction finish(spawned: boolean): never {\n  const ms = Number(process.hrtime.bigint() - t0) / 1e6;\n  try {\n    mkdirSync(state, { recursive: true });\n    appendFileSync(\n      path.join(state, \"timing.jsonl\"),\n      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned })}\\n`,\n    );\n  } catch {}\n  process.exit(0);\n}\nfunction pick(names: string[]): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const n of names) if (env[n] !== undefined) out[n] = env[n] as string;\n  return out;\n}\nfunction anySinkAbove(tier: number): boolean {\n  try {\n    const c = JSON.parse(readFileSync(configFile(), \"utf8\")) as { sinks?: { tier?: number; paused?: string }[] };\n    return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);\n  } catch {\n    return false;\n  }\n}\nfunction sessionIdOf(stdin: string): string {\n  const m = /\"(?:session_id|sessionId|conversationId)\"\\s*:\\s*\"([^\"]{1,128})\"/.exec(stdin);\n  return m?.[1] ?? \"\";\n}\n/** One heartbeat per minute per session: the stamp file's mtime is the clock. */\nfunction beatDue(id: string): boolean {\n  const stamp = path.join(state, \"beats\", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, \"_\")}`);\n  try {\n    if (Date.now() - statSync(stamp).mtimeMs < 60_000) return false;\n  } catch {}\n  try {\n    mkdirSync(path.dirname(stamp), { recursive: true, mode: 0o700 });\n    writeFileSync(stamp, \"\", { mode: 0o600 });\n  } catch {}\n  return true;\n}\n"],
-  "mappings": ";;;;AAOA,SAAS,aAAa;AACtB,SAAS,gBAAgB,WAAW,cAAc,UAAU,qBAAqB;AACjF,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,IAAM,KAAK,QAAQ,OAAO,OAAO;AACjC,IAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAChE,IAAM,MAAM,QAAQ;AAEpB,SAAS,WAAmB;AAC1B,MAAI,IAAI,kBAAmB,QAAO,KAAK,QAAQ,IAAI,iBAAiB;AACpE,QAAM,OAAO,GAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAO,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK,MAAM,WAAW,OAAO,GAAG,aAAa;AACzF,SAAO,KAAK,KAAK,IAAI,kBAAkB,KAAK,KAAK,MAAM,UAAU,OAAO,GAAG,aAAa;AAC1F;AACA,SAAS,aAAqB;AAC5B,MAAI,IAAI,mBAAoB,QAAO,KAAK,QAAQ,IAAI,kBAAkB;AACtE,QAAM,OAAO,GAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAO,KAAK,KAAK,IAAI,WAAW,KAAK,KAAK,MAAM,WAAW,SAAS,GAAG,eAAe,aAAa;AACrG,SAAO,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK,MAAM,SAAS,GAAG,eAAe,aAAa;AAClG;AAGA,IAAI,YAAY,eAAe;AAC7B,MAAI;AACF,kBAAc,GAAG,MAAM;AAAA,EACzB,QAAQ;AAAA,EAAC;AACX;AAEA,IAAM,QAAQ,SAAS;AACvB,IAAI;AACF,MAAI,CAAC,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,+BAA+B;AACvE,MAAI,QAAQ;AACZ,MAAI,YAAY,WAAW,UAAU,UAAU;AAC7C,QAAI;AACF,YAAM,MAAM,aAAa,CAAC;AAC1B,cAAQ,IAAI,SAAS,GAAG,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,IACtD,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,OAAO;AACb,MAAI,KAAK,KAAK,KAAK,KAAK,CAAC,aAAa,CAAC,GAAG;AACxC,UAAM,KAAK,YAAY,KAAK;AAC5B,QAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAG,QAAO,KAAK;AAAA,EACvC;AACA,YAAU,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpE,QAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA,MAAM,CAAC,SAAS,OAAO,GAAG,IAAI;AAAA,IAC9B;AAAA,IACA,KAAK,QAAQ,IAAI;AAAA,IACjB,KAAK,KAAK;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,QAAQ;AAAA,IACd,IAAI,KAAK,IAAI;AAAA,EACf;AACA,QAAM,UAAU,KAAK,KAAK,OAAO,QAAQ,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO;AACpH,gBAAc,SAAS,KAAK,UAAU,GAAG,GAAG,EAAE,MAAM,IAAM,CAAC;AAC3D,MAAI,CAAC,IAAI,uBAAuB;AAC9B,UAAM,SAAS,KAAK,KAAK,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,WAAW;AAClF,UAAM,IAAI,MAAM,QAAQ,UAAU,CAAC,QAAQ,OAAO,GAAG,EAAE,UAAU,MAAM,OAAO,UAAU,aAAa,MAAM,IAAI,CAAC;AAChH,MAAE,MAAM;AAAA,EACV;AACA,SAAO,IAAI;AACb,QAAQ;AACN,SAAO,KAAK;AACd;AAEA,SAAS,OAAO,SAAyB;AACvC,QAAM,KAAK,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AAClD,MAAI;AACF,cAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AACpC;AAAA,MACE,KAAK,KAAK,OAAO,cAAc;AAAA,MAC/B,GAAG,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,GAAG,SAAS,OAAO,IAAI,KAAK,MAAM,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC;AAAA;AAAA,IAC9F;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,UAAQ,KAAK,CAAC;AAChB;AACA,SAAS,KAAK,OAAyC;AACrD,QAAM,MAA8B,CAAC;AACrC,aAAW,KAAK,MAAO,KAAI,IAAI,CAAC,MAAM,OAAW,KAAI,CAAC,IAAI,IAAI,CAAC;AAC/D,SAAO;AACT;AACA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,UAAM,IAAI,KAAK,MAAM,aAAa,WAAW,GAAG,MAAM,CAAC;AACvD,YAAQ,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,SAAS,YAAY,OAAuB;AAC1C,QAAM,IAAI,kEAAkE,KAAK,KAAK;AACtF,SAAO,IAAI,CAAC,KAAK;AACnB;AAEA,SAAS,QAAQ,IAAqB;AACpC,QAAM,QAAQ,KAAK,KAAK,OAAO,SAAS,GAAG,OAAO,IAAI,GAAG,QAAQ,mBAAmB,GAAG,CAAC,EAAE;AAC1F,MAAI;AACF,QAAI,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE,UAAU,IAAQ,QAAO;AAAA,EAC5D,QAAQ;AAAA,EAAC;AACT,MAAI;AACF,cAAU,KAAK,QAAQ,KAAK,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/D,kBAAc,OAAO,IAAI,EAAE,MAAM,IAAM,CAAC;AAAA,EAC1C,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;",
-  "names": []
+  "sources": ["../src/hook.ts", "../src/control/local.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\n// SPDX-License-Identifier: Apache-2.0\n// The hook path. A harness runs `node hook.js <harness> <event>`; this reads stdin,\n// writes one job file, spawns the worker detached, prints what the harness needs\n// ({} for Antigravity) and exits 0 \u2014 in milliseconds, with nothing but node:\n// builtins imported (the build checks that). No network, no schema library, no\n// config parsing beyond one small file read for the throttle.\nimport { spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { ask, socketPath } from \"./control/local.js\";\n\nconst t0 = process.hrtime.bigint();\n/** The hook's own work, when a control wait follows it (the wait is not the hook's cost). */\nlet workMs: number | null = null;\nconst [harness = \"\", event = \"\", ...rest] = process.argv.slice(2);\nconst env = process.env;\n\nfunction stateDir(): string {\n  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.LOCALAPPDATA || path.join(home, \"AppData\", \"Local\"), \"sessionpipe\");\n  return path.join(env.XDG_STATE_HOME || path.join(home, \".local\", \"state\"), \"sessionpipe\");\n}\nfunction configFile(): string {\n  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.APPDATA || path.join(home, \"AppData\", \"Roaming\"), \"sessionpipe\", \"config.json\");\n  return path.join(env.XDG_CONFIG_HOME || path.join(home, \".config\"), \"sessionpipe\", \"config.json\");\n}\n\n// Antigravity parses stdout as the hook's answer; `{}` is \"carry on\" for every event.\nif (harness === \"antigravity\") {\n  try {\n    writeFileSync(1, \"{}\\n\");\n  } catch {}\n}\n\nconst state = stateDir();\ntry {\n  if (!harness || !event) throw new Error(\"usage: hook <harness> <event>\");\n  let stdin = \"\";\n  if (harness !== \"codex\" || event !== \"notify\") {\n    try {\n      const buf = readFileSync(0);\n      stdin = buf.subarray(0, 1024 * 1024).toString(\"utf8\");\n    } catch {}\n  }\n  // Tool events are the bulk of what a harness fires. When no sink takes tier \u2265 1\n  // they are only a \"still working\" signal: one heartbeat a minute per session.\n  const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;\n  if (TOOL.test(event) && !anySinkAbove(0)) {\n    const id = sessionIdOf(stdin);\n    if (!id || !beatDue(id)) finish(false);\n  }\n  // A Stop asks the daemon BEFORE its event goes to the worker: the worker reports the\n  // Stop to the daemon too, and a message queued for this Stop must be taken here,\n  // not rerouted because the event got there first.\n  const stopAnswer = event === \"Stop\" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;\n  mkdirSync(path.join(state, \"jobs\"), { recursive: true, mode: 0o700 });\n  const job = {\n    harness,\n    event,\n    argv: [harness, event, ...rest],\n    stdin,\n    cwd: process.cwd(),\n    env: pick([\n      \"CLAUDE_CODE_HOST_SESSION_ID\",\n      \"CLAUDE_CONFIG_DIR\",\n      \"CLAUDE_PROJECT_DIR\",\n      \"CODEX_HOME\",\n      \"GEMINI_CLI_HOME\",\n    ]),\n    ppid: process.ppid,\n    at: Date.now(),\n  };\n  const jobFile = path.join(state, \"jobs\", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);\n  writeFileSync(jobFile, JSON.stringify(job), { mode: 0o600 });\n  if (!env.SESSIONPIPE_NO_WORKER) {\n    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), \"worker.js\");\n    const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: \"ignore\", windowsHide: true, env });\n    p.unref();\n  }\n  if (stopAnswer) {\n    try {\n      writeFileSync(1, `${stopAnswer}\\n`);\n    } catch {}\n  }\n  // A PermissionRequest waits AFTER its event is on its way, so the receiver already\n  // shows the Allow / Deny this answer is for.\n  const ctl = event === \"PermissionRequest\" ? controlAsk(stdin) : null;\n  if (ctl) {\n    workMs = Number(process.hrtime.bigint() - t0) / 1e6;\n    const out = await ctl;\n    if (out) {\n      try {\n        writeFileSync(1, `${out}\\n`);\n      } catch {}\n    }\n  }\n  finish(true);\n} catch {\n  finish(false); // the hook must be invisible to the harness\n}\n\n/** Control (spec/CONTROL.md \u00A76, \u00A79): only on a machine with control paired, and only\n *  for a message the daemon itself verified. A Stop hook asks for a queued message and\n *  answers a block with it; a PermissionRequest hook waits for the person's signed\n *  answer while the terminal shows its own prompt, first answer wins. Anything that\n *  goes wrong (no daemon, a timeout) prints nothing: the harness carries on as usual. */\nfunction controlAsk(stdin: string): Promise<string | null> | null {\n  if (harness !== \"claude-code\" || (event !== \"Stop\" && event !== \"PermissionRequest\")) return null;\n  if (env.SESSIONPIPE_CONTROL_JOB) return null; // a headless turn the daemon itself runs\n  const sock = socketPath(state);\n  if (\n    process.platform === \"win32\"\n      ? !existsSync(path.join(path.dirname(configFile()), \"control.json\"))\n      : !existsSync(sock)\n  )\n    return null;\n  let s: Record<string, unknown>;\n  try {\n    s = JSON.parse(stdin) as Record<string, unknown>;\n  } catch {\n    return null;\n  }\n  const id = typeof s.session_id === \"string\" ? s.session_id : \"\";\n  if (!id) return null;\n  const session = `claude-code:${id}`;\n  if (event === \"Stop\")\n    return ask(sock, { op: \"stop\", session, active: s.stop_hook_active === true }, 300).then((r) =>\n      r?.op === \"block\" ? JSON.stringify({ decision: \"block\", reason: r.reason }) : null,\n    );\n  // The attention id the adapter puts on attention.needed (claude-code.ts), so the\n  // receiver's Allow / Deny names this very prompt.\n  const tool =\n    typeof s.tool_name === \"string\" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : undefined;\n  const turn = typeof s.prompt_id === \"string\" ? s.prompt_id : undefined;\n  const attention = `perm-${createHash(\"sha256\")\n    .update(`${turn ?? \"\"}|${tool ?? \"\"}|${JSON.stringify(s.tool_input ?? null)}`)\n    .digest(\"hex\")\n    .slice(0, 16)}`;\n  return ask(sock, { op: \"permission\", session, attention, ...(tool ? { tool } : {}) }, 125_000).then((r) =>\n    r?.op === \"decision\"\n      ? JSON.stringify({\n          hookSpecificOutput: {\n            hookEventName: \"PermissionRequest\",\n            decision:\n              r.behavior === \"allow\"\n                ? { behavior: \"allow\" }\n                : { behavior: \"deny\", message: r.message || \"Denied by the owner (sessionpipe control).\" },\n          },\n        })\n      : null,\n  );\n}\n\nfunction finish(spawned: boolean): never {\n  const total = Number(process.hrtime.bigint() - t0) / 1e6;\n  const ms = workMs ?? total;\n  try {\n    mkdirSync(state, { recursive: true });\n    appendFileSync(\n      path.join(state, \"timing.jsonl\"),\n      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...(workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {}) })}\\n`,\n    );\n  } catch {}\n  process.exit(0);\n}\nfunction pick(names: string[]): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const n of names) if (env[n] !== undefined) out[n] = env[n] as string;\n  return out;\n}\nfunction anySinkAbove(tier: number): boolean {\n  try {\n    const c = JSON.parse(readFileSync(configFile(), \"utf8\")) as { sinks?: { tier?: number; paused?: string }[] };\n    return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);\n  } catch {\n    return false;\n  }\n}\nfunction sessionIdOf(stdin: string): string {\n  const m = /\"(?:session_id|sessionId|conversationId)\"\\s*:\\s*\"([^\"]{1,128})\"/.exec(stdin);\n  return m?.[1] ?? \"\";\n}\n/** One heartbeat per minute per session: the stamp file's mtime is the clock. */\nfunction beatDue(id: string): boolean {\n  const stamp = path.join(state, \"beats\", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, \"_\")}`);\n  try {\n    if (Date.now() - statSync(stamp).mtimeMs < 60_000) return false;\n  } catch {}\n  try {\n    mkdirSync(path.dirname(stamp), { recursive: true, mode: 0o700 });\n    writeFileSync(stamp, \"\", { mode: 0o600 });\n  } catch {}\n  return true;\n}\n", "// SPDX-License-Identifier: Apache-2.0\n// The daemon's local socket (spec/CONTROL.md \u00A78): how the waiter, the Stop and\n// PermissionRequest hooks and the worker talk to the one daemon on this machine.\n// Line-delimited JSON, one request per connection. A Unix socket in the state\n// directory (0600, in a 0700 dir); a per-user named pipe on Windows. Only node:\n// builtins \u2014 the hook bundle imports this.\nimport net from \"node:net\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nexport type LocalRequest =\n  /** A waiter parks until a message for its session arrives. */\n  | { op: \"wait\"; session: string; pid?: number }\n  /** A Stop hook asks for a queued message (turn mode). */\n  | { op: \"stop\"; session: string; active: boolean }\n  /** A PermissionRequest hook parks until a verified answer, or until it's released. */\n  | { op: \"permission\"; session: string; attention: string; tool?: string }\n  /** The worker reports a hook event: turn state and attention closure. */\n  | { op: \"event\"; session: string; event: string; transcript?: string; cwd?: string }\n  /** `sessionpipe control status`. */\n  | { op: \"status\" };\n\nexport type LocalReply =\n  | { op: \"message\"; text: string; id: string }\n  | { op: \"block\"; reason: string; id: string }\n  | { op: \"decision\"; behavior: \"allow\" | \"deny\"; message?: string; id: string }\n  | { op: \"none\" }\n  /** A newer waiter for the same session took over; this one stops. */\n  | { op: \"replaced\" }\n  | { op: \"ok\" }\n  | { op: \"status\"; status: unknown };\n\n/** Where the daemon listens. `SESSIONPIPE_SOCKET` overrides (tests). */\nexport function socketPath(state: string, env: NodeJS.ProcessEnv = process.env): string {\n  if (env.SESSIONPIPE_SOCKET) return env.SESSIONPIPE_SOCKET;\n  if (process.platform === \"win32\") return `\\\\\\\\.\\\\pipe\\\\sessionpipe-control-${os.userInfo().username}`;\n  return path.join(state, \"control.sock\");\n}\n\n/** One request, one reply. `timeoutMs` bounds the whole exchange; null on any\n *  failure (no daemon, a timeout, a garbled reply) \u2014 callers treat that as \"none\". */\nexport function ask(sock: string, req: LocalRequest, timeoutMs: number): Promise<LocalReply | null> {\n  return new Promise((resolve) => {\n    let buf = \"\";\n    let done = false;\n    const s = net.connect(sock);\n    const finish = (r: LocalReply | null) => {\n      if (done) return;\n      done = true;\n      clearTimeout(t);\n      s.destroy();\n      resolve(r);\n    };\n    const t = setTimeout(() => finish(null), timeoutMs);\n    s.on(\"connect\", () => s.write(`${JSON.stringify(req)}\\n`));\n    s.on(\"data\", (d) => {\n      buf += d.toString(\"utf8\");\n      const i = buf.indexOf(\"\\n\");\n      if (i < 0) return;\n      try {\n        finish(JSON.parse(buf.slice(0, i)) as LocalReply);\n      } catch {\n        finish(null);\n      }\n    });\n    s.on(\"error\", () => finish(null));\n    s.on(\"close\", () => finish(null));\n  });\n}\n"],
+  "mappings": ";;;;AAOA,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,YAAY,WAAW,cAAc,UAAU,qBAAqB;AAC7F,OAAOA,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;;;ACN9B,OAAO,SAAS;AAChB,OAAO,QAAQ;AACf,OAAO,UAAU;AAyBV,SAAS,WAAWC,QAAeC,OAAyB,QAAQ,KAAa;AACtF,MAAIA,KAAI,mBAAoB,QAAOA,KAAI;AACvC,MAAI,QAAQ,aAAa,QAAS,QAAO,oCAAoC,GAAG,SAAS,EAAE,QAAQ;AACnG,SAAO,KAAK,KAAKD,QAAO,cAAc;AACxC;AAIO,SAAS,IAAI,MAAc,KAAmB,WAA+C;AAClG,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,MAAM;AACV,QAAI,OAAO;AACX,UAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAME,UAAS,CAAC,MAAyB;AACvC,UAAI,KAAM;AACV,aAAO;AACP,mBAAa,CAAC;AACd,QAAE,QAAQ;AACV,cAAQ,CAAC;AAAA,IACX;AACA,UAAM,IAAI,WAAW,MAAMA,QAAO,IAAI,GAAG,SAAS;AAClD,MAAE,GAAG,WAAW,MAAM,EAAE,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC;AAAA,CAAI,CAAC;AACzD,MAAE,GAAG,QAAQ,CAAC,MAAM;AAClB,aAAO,EAAE,SAAS,MAAM;AACxB,YAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAI,IAAI,EAAG;AACX,UAAI;AACF,QAAAA,QAAO,KAAK,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,CAAe;AAAA,MAClD,QAAQ;AACN,QAAAA,QAAO,IAAI;AAAA,MACb;AAAA,IACF,CAAC;AACD,MAAE,GAAG,SAAS,MAAMA,QAAO,IAAI,CAAC;AAChC,MAAE,GAAG,SAAS,MAAMA,QAAO,IAAI,CAAC;AAAA,EAClC,CAAC;AACH;;;ADrDA,IAAM,KAAK,QAAQ,OAAO,OAAO;AAEjC,IAAI,SAAwB;AAC5B,IAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAChE,IAAM,MAAM,QAAQ;AAEpB,SAAS,WAAmB;AAC1B,MAAI,IAAI,kBAAmB,QAAOC,MAAK,QAAQ,IAAI,iBAAiB;AACpE,QAAM,OAAOC,IAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAOD,MAAK,KAAK,IAAI,gBAAgBA,MAAK,KAAK,MAAM,WAAW,OAAO,GAAG,aAAa;AACzF,SAAOA,MAAK,KAAK,IAAI,kBAAkBA,MAAK,KAAK,MAAM,UAAU,OAAO,GAAG,aAAa;AAC1F;AACA,SAAS,aAAqB;AAC5B,MAAI,IAAI,mBAAoB,QAAOA,MAAK,QAAQ,IAAI,kBAAkB;AACtE,QAAM,OAAOC,IAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAOD,MAAK,KAAK,IAAI,WAAWA,MAAK,KAAK,MAAM,WAAW,SAAS,GAAG,eAAe,aAAa;AACrG,SAAOA,MAAK,KAAK,IAAI,mBAAmBA,MAAK,KAAK,MAAM,SAAS,GAAG,eAAe,aAAa;AAClG;AAGA,IAAI,YAAY,eAAe;AAC7B,MAAI;AACF,kBAAc,GAAG,MAAM;AAAA,EACzB,QAAQ;AAAA,EAAC;AACX;AAEA,IAAM,QAAQ,SAAS;AACvB,IAAI;AACF,MAAI,CAAC,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,+BAA+B;AACvE,MAAI,QAAQ;AACZ,MAAI,YAAY,WAAW,UAAU,UAAU;AAC7C,QAAI;AACF,YAAM,MAAM,aAAa,CAAC;AAC1B,cAAQ,IAAI,SAAS,GAAG,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,IACtD,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,OAAO;AACb,MAAI,KAAK,KAAK,KAAK,KAAK,CAAC,aAAa,CAAC,GAAG;AACxC,UAAM,KAAK,YAAY,KAAK;AAC5B,QAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAG,QAAO,KAAK;AAAA,EACvC;AAIA,QAAM,aAAa,UAAU,SAAS,OAAO,WAAW,KAAK,KAAK,QAAQ,QAAQ,IAAI,KAAK;AAC3F,YAAUA,MAAK,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpE,QAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA,MAAM,CAAC,SAAS,OAAO,GAAG,IAAI;AAAA,IAC9B;AAAA,IACA,KAAK,QAAQ,IAAI;AAAA,IACjB,KAAK,KAAK;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,QAAQ;AAAA,IACd,IAAI,KAAK,IAAI;AAAA,EACf;AACA,QAAM,UAAUA,MAAK,KAAK,OAAO,QAAQ,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO;AACpH,gBAAc,SAAS,KAAK,UAAU,GAAG,GAAG,EAAE,MAAM,IAAM,CAAC;AAC3D,MAAI,CAAC,IAAI,uBAAuB;AAC9B,UAAM,SAASA,MAAK,KAAKA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,WAAW;AAClF,UAAM,IAAI,MAAM,QAAQ,UAAU,CAAC,QAAQ,OAAO,GAAG,EAAE,UAAU,MAAM,OAAO,UAAU,aAAa,MAAM,IAAI,CAAC;AAChH,MAAE,MAAM;AAAA,EACV;AACA,MAAI,YAAY;AACd,QAAI;AACF,oBAAc,GAAG,GAAG,UAAU;AAAA,CAAI;AAAA,IACpC,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,MAAM,UAAU,sBAAsB,WAAW,KAAK,IAAI;AAChE,MAAI,KAAK;AACP,aAAS,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AAChD,UAAM,MAAM,MAAM;AAClB,QAAI,KAAK;AACP,UAAI;AACF,sBAAc,GAAG,GAAG,GAAG;AAAA,CAAI;AAAA,MAC7B,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO,IAAI;AACb,QAAQ;AACN,SAAO,KAAK;AACd;AAOA,SAAS,WAAW,OAA8C;AAChE,MAAI,YAAY,iBAAkB,UAAU,UAAU,UAAU,oBAAsB,QAAO;AAC7F,MAAI,IAAI,wBAAyB,QAAO;AACxC,QAAM,OAAO,WAAW,KAAK;AAC7B,MACE,QAAQ,aAAa,UACjB,CAAC,WAAWA,MAAK,KAAKA,MAAK,QAAQ,WAAW,CAAC,GAAG,cAAc,CAAC,IACjE,CAAC,WAAW,IAAI;AAEpB,WAAO;AACT,MAAI;AACJ,MAAI;AACF,QAAI,KAAK,MAAM,KAAK;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAC7D,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,UAAU,eAAe,EAAE;AACjC,MAAI,UAAU;AACZ,WAAO,IAAI,MAAM,EAAE,IAAI,QAAQ,SAAS,QAAQ,EAAE,qBAAqB,KAAK,GAAG,GAAG,EAAE;AAAA,MAAK,CAAC,MACxF,GAAG,OAAO,UAAU,KAAK,UAAU,EAAE,UAAU,SAAS,QAAQ,EAAE,OAAO,CAAC,IAAI;AAAA,IAChF;AAGF,QAAM,OACJ,OAAO,EAAE,cAAc,YAAY,2BAA2B,KAAK,EAAE,SAAS,IAAI,EAAE,YAAY;AAClG,QAAM,OAAO,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC7D,QAAM,YAAY,QAAQ,WAAW,QAAQ,EAC1C,OAAO,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU,EAAE,cAAc,IAAI,CAAC,EAAE,EAC5E,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACf,SAAO,IAAI,MAAM,EAAE,IAAI,cAAc,SAAS,WAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,GAAG,KAAO,EAAE;AAAA,IAAK,CAAC,MACnG,GAAG,OAAO,aACN,KAAK,UAAU;AAAA,MACb,oBAAoB;AAAA,QAClB,eAAe;AAAA,QACf,UACE,EAAE,aAAa,UACX,EAAE,UAAU,QAAQ,IACpB,EAAE,UAAU,QAAQ,SAAS,EAAE,WAAW,6CAA6C;AAAA,MAC/F;AAAA,IACF,CAAC,IACD;AAAA,EACN;AACF;AAEA,SAAS,OAAO,SAAyB;AACvC,QAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AACrD,QAAM,KAAK,UAAU;AACrB,MAAI;AACF,cAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AACpC;AAAA,MACEA,MAAK,KAAK,OAAO,cAAc;AAAA,MAC/B,GAAG,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,GAAG,SAAS,OAAO,IAAI,KAAK,MAAM,KAAK,EAAE,IAAI,IAAI,SAAS,GAAI,WAAW,OAAO,EAAE,iBAAiB,KAAK,MAAM,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;AAAA;AAAA,IAC3K;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,UAAQ,KAAK,CAAC;AAChB;AACA,SAAS,KAAK,OAAyC;AACrD,QAAM,MAA8B,CAAC;AACrC,aAAW,KAAK,MAAO,KAAI,IAAI,CAAC,MAAM,OAAW,KAAI,CAAC,IAAI,IAAI,CAAC;AAC/D,SAAO;AACT;AACA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,UAAM,IAAI,KAAK,MAAM,aAAa,WAAW,GAAG,MAAM,CAAC;AACvD,YAAQ,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,SAAS,YAAY,OAAuB;AAC1C,QAAM,IAAI,kEAAkE,KAAK,KAAK;AACtF,SAAO,IAAI,CAAC,KAAK;AACnB;AAEA,SAAS,QAAQ,IAAqB;AACpC,QAAM,QAAQA,MAAK,KAAK,OAAO,SAAS,GAAG,OAAO,IAAI,GAAG,QAAQ,mBAAmB,GAAG,CAAC,EAAE;AAC1F,MAAI;AACF,QAAI,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE,UAAU,IAAQ,QAAO;AAAA,EAC5D,QAAQ;AAAA,EAAC;AACT,MAAI;AACF,cAAUA,MAAK,QAAQ,KAAK,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/D,kBAAc,OAAO,IAAI,EAAE,MAAM,IAAM,CAAC;AAAA,EAC1C,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;",
+  "names": ["os", "path", "state", "env", "finish", "path", "os"]
 }

package/dist/http-sink.d.ts

@@ -1,4 +1,8 @@
 import type { DeliveryResult, Event, Sink, SinkConfig, Tier } from "@sessionpipe/core";
+/** The Standard Webhooks message id (HTTP.md §2): the same batch sent again carries
+ *  the same id, so a receiver that dedupes on webhook-id sees a retry as one message.
+ *  Derived from the events' own ids, which the outbox keeps across retries. */
+export declare function webhookId(events: Pick<Event, "id">[]): string;
 export declare class HttpSink implements Sink {
     private readonly cfg;
     readonly tier: Tier;

package/dist/http-sink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-sink.d.ts","sourceRoot":"","sources":["../src/http-sink.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIvF,qBAAa,QAAS,YAAW,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI;IALrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEV,GAAG,EAAE,UAAU,EACvB,IAAI,EAAE,IAAI;IAOrB,OAAO,CAAC,SAAS;IAOX,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;CA8DrD"}
+{"version":3,"file":"http-sink.d.ts","sourceRoot":"","sources":["../src/http-sink.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIvF;;+EAE+E;AAC/E,wBAAgB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,CAK7D;AAED,qBAAa,QAAS,YAAW,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI;IALrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEV,GAAG,EAAE,UAAU,EACvB,IAAI,EAAE,IAAI;IAOrB,OAAO,CAAC,SAAS;IAOX,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;CA8DrD"}

package/dist/index.js

@@ -1,8 +1,11 @@
-// sessionpipe 0.1.1 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe 0.2.0 · Apache-2.0 · https://sessionpipe.org
 
 // src/http-sink.ts
-import { createHmac, randomUUID } from "node:crypto";
+import { createHash, createHmac } from "node:crypto";
 var TIMEOUT_MS = 15e3;
+function webhookId(events) {
+  return `msg_${createHash("sha256").update(events.map((e) => e.id).join(",")).digest("base64url").slice(0, 32)}`;
+}
 var HttpSink = class {
   constructor(cfg, tier) {
     this.cfg = cfg;
@@ -25,7 +28,7 @@ var HttpSink = class {
     const headers = { "content-type": "application/json", "sessionpipe-protocol": "1" };
     if (this.cfg.token) headers.authorization = `Bearer ${this.cfg.token}`;
     if (this.cfg.secret?.startsWith("whsec_")) {
-      const id = `msg_${randomUUID()}`;
+      const id = webhookId(events);
       const ts = Math.floor(Date.now() / 1e3);
       const key = Buffer.from(this.cfg.secret.slice(6), "base64");
       const sig = createHmac("sha256", key).update(`${id}.${ts}.${body}`).digest("base64");
@@ -97,8 +100,8 @@ import {
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync6
 } from "node:fs";
-import os2 from "node:os";
-import path11 from "node:path";
+import os3 from "node:os";
+import path12 from "node:path";
 
 // ../core/src/adapters/antigravity.ts
 import {
@@ -378,7 +381,7 @@ function entryFor(event, harness, cmd, o) {
   const matcher = o.matcherFor(event);
   return {
     ...matcher !== void 0 ? { matcher } : {},
-    hooks: [{ type: "command", command: cmd([harness, event]).command, timeout: o.timeout }]
+    hooks: [{ type: "command", command: cmd([harness, event]).command, timeout: o.timeoutFor?.(event) ?? o.timeout }]
   };
 }
 function installClaudeShaped(file, harness, events, cmd, o) {
@@ -745,7 +748,7 @@ function antigravityFacts(file, opts) {
 
 // ../core/src/adapters/claude-code.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync3, readdirSync as readdirSync3, readFileSync as readFileSync3, statSync as statSync3 } from "node:fs";
 import path5 from "node:path";
 
@@ -802,7 +805,13 @@ var CLAUDE_EVENTS = [
 ];
 var LEAN_SKIP = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUseFailure"]);
 var eventsFor = (lean) => lean ? CLAUDE_EVENTS.filter((e) => !LEAN_SKIP.has(e)) : [...CLAUDE_EVENTS];
-var OPTS = { matcherFor: (e) => /Tool|Permission/.test(e) ? "" : void 0, timeout: 5 };
+var OPTS = {
+  matcherFor: (e) => /Tool|Permission/.test(e) ? "" : void 0,
+  timeout: 5,
+  // The hook waits up to 125 s for a verified control answer, and only when control
+  // is paired on this machine; everywhere else it exits in milliseconds as before.
+  timeoutFor: (e) => e === "PermissionRequest" ? 130 : void 0
+};
 var DESKTOP_ID = /^local_[A-Za-z0-9-]{1,64}$/;
 function claudeDirs(env = process.env, home = HOME) {
   const out = [];
@@ -859,7 +868,7 @@ var claudeCode = {
     const call_id = typeof s.tool_use_id === "string" ? s.tool_use_id : void 0;
     const ms = typeof s.duration_ms === "number" ? Math.round(s.duration_ms) : void 0;
     const agent_id = typeof s.agent_id === "string" ? s.agent_id : void 0;
-    const permissionId = () => `perm-${createHash("sha256").update(`${turn_id ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
+    const permissionId = () => `perm-${createHash2("sha256").update(`${turn_id ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
     const ev = (type, data) => ({ type, data: prune2(data), harnessEvent: event });
     const events = [];
     switch (event) {
@@ -1246,9 +1255,9 @@ function claudeFacts(file, sessionId, hints, state) {
   }
   const name = live?.name ? { title: live.name, source: live.name_source } : typeof mem.name === "string" ? { title: mem.name, source: mem.name_source } : null;
   const pick = name && name.source === "custom" && name || custom && { title: custom, source: "custom" } || name || ai && { title: ai, source: "harness" };
-  let ask = typeof mem.first_ask === "string" ? mem.first_ask : firstAsk(H);
-  if (!ask && size > 64 * 1024 && !mem.first_ask_none) {
-    ask = scanLines(file, (l) => {
+  let ask2 = typeof mem.first_ask === "string" ? mem.first_ask : firstAsk(H);
+  if (!ask2 && size > 64 * 1024 && !mem.first_ask_none) {
+    ask2 = scanLines(file, (l) => {
       try {
         const t = askText(JSON.parse(l));
         return t ? appTitle(t) : null;
@@ -1256,17 +1265,17 @@ function claudeFacts(file, sessionId, hints, state) {
         return null;
       }
     });
-    if (!ask && size > 16 * 1024 * 1024) state.save(NAME2, id, { first_ask_none: true });
+    if (!ask2 && size > 16 * 1024 * 1024) state.save(NAME2, id, { first_ask_none: true });
   }
-  if (ask) {
-    out.first_ask = ask;
-    if (!mem.first_ask) state.save(NAME2, id, { first_ask: ask });
+  if (ask2) {
+    out.first_ask = ask2;
+    if (!mem.first_ask) state.save(NAME2, id, { first_ask: ask2 });
   }
   if (pick) {
     out.title = String(pick.title).slice(0, 120);
     out.title_source = pick.source;
-  } else if (ask) {
-    out.title = ask;
+  } else if (ask2) {
+    out.title = ask2;
     out.title_source = "first-ask";
   }
   const acct = claudeAccount(dir);
@@ -2227,7 +2236,7 @@ function takeLock(root, ref, staleMs = 5 * 6e4) {
 }
 
 // ../core/src/privacy/pii.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 var RULESET_PII = "pii@1";
 var EMAIL = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
 var PHONE = /(?<![\w.])(?:\+\d{1,3}[ .-]?)?(?:\(\d{2,4}\)[ .-]?)?\d{2,4}(?:[ .-]?\d{2,4}){1,3}(?!\w)/g;
@@ -2249,7 +2258,7 @@ function reducePii(text, home) {
   return out;
 }
 function hashMachine(name) {
-  return createHash2("sha256").update(name).digest("hex").slice(0, 8);
+  return createHash3("sha256").update(name).digest("hex").slice(0, 8);
 }
 function reducePiiDeep(v, home) {
   if (typeof v === "string") return reducePii(v, home);
@@ -2566,18 +2575,72 @@ var StdoutSink = class {
   }
 };
 
+// src/control/local.ts
+import net from "node:net";
+import os2 from "node:os";
+import path11 from "node:path";
+function socketPath(state, env = process.env) {
+  if (env.SESSIONPIPE_SOCKET) return env.SESSIONPIPE_SOCKET;
+  if (process.platform === "win32") return `\\\\.\\pipe\\sessionpipe-control-${os2.userInfo().username}`;
+  return path11.join(state, "control.sock");
+}
+function ask(sock, req, timeoutMs) {
+  return new Promise((resolve) => {
+    let buf = "";
+    let done = false;
+    const s = net.connect(sock);
+    const finish = (r) => {
+      if (done) return;
+      done = true;
+      clearTimeout(t);
+      s.destroy();
+      resolve(r);
+    };
+    const t = setTimeout(() => finish(null), timeoutMs);
+    s.on("connect", () => s.write(`${JSON.stringify(req)}
+`));
+    s.on("data", (d) => {
+      buf += d.toString("utf8");
+      const i = buf.indexOf("\n");
+      if (i < 0) return;
+      try {
+        finish(JSON.parse(buf.slice(0, i)));
+      } catch {
+        finish(null);
+      }
+    });
+    s.on("error", () => finish(null));
+    s.on("close", () => finish(null));
+  });
+}
+
 // src/run.ts
+async function tellDaemon(state, job, session, transcript) {
+  const sock = socketPath(state);
+  if (process.platform !== "win32" && !existsSync8(sock)) return;
+  await ask(
+    sock,
+    {
+      op: "event",
+      session: `claude-code:${session}`,
+      event: job.event,
+      cwd: job.cwd,
+      ...transcript ? { transcript } : {}
+    },
+    300
+  );
+}
 function enqueueJob(state, job) {
   const jobs = jobsDir(state);
   mkdirSync7(jobs, { recursive: true, mode: 448 });
-  const f = path11.join(jobs, `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
+  const f = path12.join(jobs, `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
   writeFileSync6(f, JSON.stringify(job), { mode: 384 });
   return f;
 }
 function log(state, line) {
   try {
     mkdirSync7(state, { recursive: true, mode: 448 });
-    const f = path11.join(state, "log");
+    const f = path12.join(state, "log");
     try {
       if (statSync5(f).size > 1024 * 1024) renameSync2(f, `${f}.1`);
     } catch {
@@ -2588,7 +2651,7 @@ function log(state, line) {
   }
 }
 function factsState(state) {
-  const file = (h, s) => path11.join(state, "facts", safeId(h), `${safeId(s)}.json`);
+  const file = (h, s) => path12.join(state, "facts", safeId(h), `${safeId(s)}.json`);
   return {
     get(h, s) {
       try {
@@ -2601,7 +2664,7 @@ function factsState(state) {
       const cur = this.get(h, s);
       const next = { ...cur, ...patch };
       if (JSON.stringify(next) === JSON.stringify(cur)) return;
-      mkdirSync7(path11.dirname(file(h, s)), { recursive: true, mode: 448 });
+      mkdirSync7(path12.dirname(file(h, s)), { recursive: true, mode: 448 });
       writeFileSync6(file(h, s), JSON.stringify(next), { mode: 384 });
     }
   };
@@ -2613,7 +2676,7 @@ function buildSinks(sinks) {
     const tier = Math.min(s.tier, s.max_tier ?? 3);
     if (s.url === "stdout") out.push(new StdoutSink(s.name, tier, !!s.pii));
     else if (s.url.startsWith("file:"))
-      out.push(new FileSink(s.name, s.url.slice(5).replace(/^~(?=\/|$)/, os2.homedir()), tier, !!s.pii));
+      out.push(new FileSink(s.name, s.url.slice(5).replace(/^~(?=\/|$)/, os3.homedir()), tier, !!s.pii));
     else if (/^https?:\/\//.test(s.url)) out.push(new HttpSink(s, tier));
   }
   return out;
@@ -2625,6 +2688,7 @@ async function runJob(job, opts = {}) {
   if (!adapter) return { events: [], delivered: {} };
   const r = adapter.fromHook({ argv: job.argv, stdin: job.stdin, env: { ...process.env, ...job.env }, cwd: job.cwd });
   if (!r || !r.session.id) return { events: [], delivered: {} };
+  if (job.harness === "claude-code") await tellDaemon(state, job, r.session.id, r.transcript);
   const outbox = new Outbox(state);
   const ref = { harness: job.harness, session: r.session.id };
   let release = takeLock(state, ref);
@@ -2659,7 +2723,7 @@ async function runJob(job, opts = {}) {
       ...learned.branch ? { branch: learned.branch } : {},
       id: r.session.id,
       seq: 0,
-      machine: machineName(cfg, os2.hostname()),
+      machine: machineName(cfg, os3.hostname()),
       ...cwdRaw ? { cwd: tilde(cwdRaw) } : {},
       ...r.session.model ? { model: r.session.model } : {}
     };
@@ -2762,7 +2826,7 @@ async function flush(state, sinkConfigs, outbox, first) {
         const { events, offset: next } = outbox.read(ref, offset, room);
         if (!events.length) break;
         for (const e of events) {
-          const f = filterEvent(e, sink.tier, sink.pii, { home: os2.homedir() });
+          const f = filterEvent(e, sink.tier, sink.pii, { home: os3.homedir() });
           if (f) batch.push(f);
         }
         offset = next;
@@ -2794,7 +2858,7 @@ function applySinkVerdict(name, res) {
   } catch {
   }
 }
-var jobsDir = (state) => path11.join(state, "jobs");
+var jobsDir = (state) => path12.join(state, "jobs");
 export {
   HttpSink,
   buildSinks,