sessionpipe 0.6.1 → 0.9.0

package/dist/hook.js

@@ -1,36 +1,36 @@
 #!/usr/bin/env node
-// sessionpipe 0.6.1 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe 0.9.0 · Apache-2.0 · https://sessionpipe.org
 
 // src/hook.ts
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
-import { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, statSync, writeFileSync } from "node:fs";
 import os2 from "node:os";
 import path2 from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 
 // src/control/local.ts
 import net from "node:net";
 import os from "node:os";
 import path from "node:path";
-function socketPath(state2, env2 = process.env) {
-  if (env2.SESSIONPIPE_SOCKET) return env2.SESSIONPIPE_SOCKET;
+function socketPath(state, env = process.env) {
+  if (env.SESSIONPIPE_SOCKET) return env.SESSIONPIPE_SOCKET;
   if (process.platform === "win32") return `\\\\.\\pipe\\sessionpipe-control-${os.userInfo().username}`;
-  return path.join(state2, "control.sock");
+  return path.join(state, "control.sock");
 }
 function ask(sock, req, timeoutMs) {
   return new Promise((resolve) => {
     let buf = "";
     let done = false;
     const s = net.connect(sock);
-    const finish2 = (r) => {
+    const finish = (r) => {
       if (done) return;
       done = true;
       clearTimeout(t);
       s.destroy();
       resolve(r);
     };
-    const t = setTimeout(() => finish2(null), timeoutMs);
+    const t = setTimeout(() => finish(null), timeoutMs);
     s.on("connect", () => s.write(`${JSON.stringify(req)}
 `));
     s.on("data", (d) => {
@@ -38,181 +38,207 @@ function ask(sock, req, timeoutMs) {
       const i = buf.indexOf("\n");
       if (i < 0) return;
       try {
-        finish2(JSON.parse(buf.slice(0, i)));
+        finish(JSON.parse(buf.slice(0, i)));
       } catch {
-        finish2(null);
+        finish(null);
       }
     });
-    s.on("error", () => finish2(null));
-    s.on("close", () => finish2(null));
+    s.on("error", () => finish(null));
+    s.on("close", () => finish(null));
   });
 }
 
 // src/hook.ts
-var t0 = process.hrtime.bigint();
-var workMs = null;
-var [harness = "", event = "", ...rest] = process.argv.slice(2);
-var env = process.env;
-function stateDir() {
-  if (env.SESSIONPIPE_STATE) return path2.resolve(env.SESSIONPIPE_STATE);
-  const home = os2.homedir();
-  if (process.platform === "win32")
-    return path2.join(env.LOCALAPPDATA || path2.join(home, "AppData", "Local"), "sessionpipe");
-  return path2.join(env.XDG_STATE_HOME || path2.join(home, ".local", "state"), "sessionpipe");
-}
-function configFile() {
-  if (env.SESSIONPIPE_CONFIG) return path2.resolve(env.SESSIONPIPE_CONFIG);
-  const home = os2.homedir();
-  if (process.platform === "win32")
-    return path2.join(env.APPDATA || path2.join(home, "AppData", "Roaming"), "sessionpipe", "config.json");
-  return path2.join(env.XDG_CONFIG_HOME || path2.join(home, ".config"), "sessionpipe", "config.json");
-}
-if (harness === "antigravity") {
-  try {
-    writeFileSync(
-      1,
-      event === "PreToolUse" ? '{"decision":"ask","reason":"sessionpipe: an outdated PreToolUse hook is still loaded. Restart this conversation (or run sessionpipe install) to drop it."}\n' : "{}\n"
-    );
-  } catch {
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+async function hookMain(argv, env, io) {
+  const t0 = process.hrtime.bigint();
+  let workMs = null;
+  const [harness = "", event = "", ...rest] = argv;
+  function stateDir() {
+    if (env.SESSIONPIPE_STATE) return path2.resolve(env.SESSIONPIPE_STATE);
+    const home = os2.homedir();
+    if (process.platform === "win32")
+      return path2.join(env.LOCALAPPDATA || path2.join(home, "AppData", "Local"), "sessionpipe");
+    return path2.join(env.XDG_STATE_HOME || path2.join(home, ".local", "state"), "sessionpipe");
   }
-}
-var state = stateDir();
-try {
-  if (!harness || !event) throw new Error("usage: hook <harness> <event>");
-  let stdin = "";
-  if (harness !== "codex" || event !== "notify") {
-    try {
-      const buf = readFileSync(0);
-      stdin = buf.subarray(0, 1024 * 1024).toString("utf8");
-    } catch {
-    }
-  }
-  const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;
-  if (TOOL.test(event) && !anySinkAbove(0)) {
-    const id = sessionIdOf(stdin);
-    if (!id || !beatDue(id)) finish(false);
+  function configFile() {
+    if (env.SESSIONPIPE_CONFIG) return path2.resolve(env.SESSIONPIPE_CONFIG);
+    const home = os2.homedir();
+    if (process.platform === "win32")
+      return path2.join(env.APPDATA || path2.join(home, "AppData", "Roaming"), "sessionpipe", "config.json");
+    return path2.join(env.XDG_CONFIG_HOME || path2.join(home, ".config"), "sessionpipe", "config.json");
   }
-  const stopAnswer = event === "Stop" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;
-  mkdirSync(path2.join(state, "jobs"), { recursive: true, mode: 448 });
-  const job = {
-    harness,
-    event,
-    argv: [harness, event, ...rest],
-    stdin,
-    cwd: process.cwd(),
-    env: pick([
-      "CLAUDE_CODE_HOST_SESSION_ID",
-      "CLAUDE_CONFIG_DIR",
-      "CLAUDE_PROJECT_DIR",
-      "CODEX_HOME",
-      "GEMINI_CLI_HOME"
-    ]),
-    ppid: process.ppid,
-    at: Date.now()
-  };
-  const jobFile = path2.join(state, "jobs", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);
-  writeFileSync(jobFile, JSON.stringify(job), { mode: 384 });
-  if (!env.SESSIONPIPE_NO_WORKER) {
-    const worker = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "worker.js");
-    const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: "ignore", windowsHide: true, env });
-    p.unref();
-  }
-  if (stopAnswer) {
+  if (harness === "antigravity") {
     try {
-      writeFileSync(1, `${stopAnswer}
-`);
+      io.stdout(
+        event === "PreToolUse" ? '{"decision":"ask","reason":"sessionpipe: an outdated PreToolUse hook is still loaded. Restart this conversation (or run sessionpipe install) to drop it."}\n' : "{}\n"
+      );
     } catch {
     }
   }
-  const ctl = event === "PermissionRequest" ? controlAsk(stdin) : null;
-  if (ctl) {
-    workMs = Number(process.hrtime.bigint() - t0) / 1e6;
-    const out = await ctl;
-    if (out) {
+  const state = stateDir();
+  try {
+    if (!harness || !event) throw new Error("usage: hook <harness> <event>");
+    let stdin = "";
+    if (harness !== "codex" || event !== "notify") {
+      try {
+        const buf = io.stdin();
+        stdin = buf.subarray(0, 1024 * 1024).toString("utf8");
+      } catch {
+      }
+    }
+    const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;
+    if (TOOL.test(event) && !anySinkAbove(0)) {
+      const id = sessionIdOf(stdin);
+      if (!id || !beatDue(id)) return finish(false);
+    }
+    const stopAnswer = event === "Stop" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;
+    mkdirSync(path2.join(state, "jobs"), { recursive: true, mode: 448 });
+    const job = {
+      harness,
+      event,
+      argv: [harness, event, ...rest],
+      stdin,
+      cwd: process.cwd(),
+      env: pick([
+        // Where a harness keeps its config and its sessions, so a job swept by a worker
+        // some other harness's hook spawned still resolves this harness's own homes
+        // (run.ts sweepJobs runs any stale job file, whatever spawned the worker).
+        "APPDATA",
+        "CLAUDE_CODE_HOST_SESSION_ID",
+        "CLAUDE_CONFIG_DIR",
+        "CLAUDE_PROJECT_DIR",
+        "CODEX_HOME",
+        // Devin's payload names no folder at all; this is the only thing that does.
+        "DEVIN_PROJECT_DIR",
+        "GEMINI_CLI_HOME",
+        // Devin's config file and session store are both resolved through these.
+        "XDG_CONFIG_HOME",
+        "XDG_DATA_HOME"
+      ]),
+      ppid: process.ppid,
+      at: Date.now()
+    };
+    const jobFile = path2.join(
+      state,
+      "jobs",
+      `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`
+    );
+    writeFileSync(jobFile, JSON.stringify(job), { mode: 384 });
+    if (!env.SESSIONPIPE_NO_WORKER) {
+      const worker = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "worker.js");
+      const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: "ignore", windowsHide: true, env });
+      p.unref();
+    }
+    if (stopAnswer) {
       try {
-        writeFileSync(1, `${out}
+        io.stdout(`${stopAnswer}
 `);
       } catch {
       }
     }
-  }
-  finish(true);
-} catch {
-  finish(false);
-}
-function controlAsk(stdin) {
-  if (harness !== "claude-code" || event !== "Stop" && event !== "PermissionRequest") return null;
-  if (env.SESSIONPIPE_CONTROL_JOB) return null;
-  const sock = socketPath(state);
-  if (process.platform === "win32" ? !existsSync(path2.join(path2.dirname(configFile()), "control.json")) : !existsSync(sock))
-    return null;
-  let s;
-  try {
-    s = JSON.parse(stdin);
+    const ctl = event === "PermissionRequest" ? controlAsk(stdin) : null;
+    if (ctl) {
+      workMs = Number(process.hrtime.bigint() - t0) / 1e6;
+      const out = await ctl;
+      if (out) {
+        try {
+          io.stdout(`${out}
+`);
+        } catch {
+        }
+      }
+    }
+    return finish(true);
   } catch {
-    return null;
+    return finish(false);
   }
-  const id = typeof s.session_id === "string" ? s.session_id : "";
-  if (!id) return null;
-  const session = `claude-code:${id}`;
-  if (event === "Stop")
-    return ask(sock, { op: "stop", session, active: s.stop_hook_active === true }, 300).then(
-      (r) => r?.op === "block" ? JSON.stringify({ decision: "block", reason: r.reason }) : null
+  function controlAsk(stdin) {
+    if (harness !== "claude-code" || event !== "Stop" && event !== "PermissionRequest") return null;
+    if (env.SESSIONPIPE_CONTROL_JOB) return null;
+    const sock = socketPath(state, env);
+    if (process.platform === "win32" ? !existsSync(path2.join(path2.dirname(configFile()), "control.json")) : !existsSync(sock))
+      return null;
+    let s;
+    try {
+      s = JSON.parse(stdin);
+    } catch {
+      return null;
+    }
+    const id = typeof s.session_id === "string" ? s.session_id : "";
+    if (!id) return null;
+    if (typeof s.transcript_path !== "string" && !UUID.test(id)) return null;
+    const session = `claude-code:${id}`;
+    if (event === "Stop")
+      return ask(sock, { op: "stop", session, active: s.stop_hook_active === true }, 300).then(
+        (r) => r?.op === "block" ? JSON.stringify({ decision: "block", reason: r.reason }) : null
+      );
+    const tool = typeof s.tool_name === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : void 0;
+    const turn = typeof s.prompt_id === "string" ? s.prompt_id : void 0;
+    const attention = `perm-${createHash("sha256").update(`${turn ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
+    return ask(sock, { op: "permission", session, attention, ...tool ? { tool } : {} }, 125e3).then(
+      (r) => r?.op === "decision" ? JSON.stringify({
+        hookSpecificOutput: {
+          hookEventName: "PermissionRequest",
+          decision: r.behavior === "allow" ? { behavior: "allow" } : { behavior: "deny", message: r.message || "Denied by the owner (sessionpipe control)." }
+        }
+      }) : null
     );
-  const tool = typeof s.tool_name === "string" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : void 0;
-  const turn = typeof s.prompt_id === "string" ? s.prompt_id : void 0;
-  const attention = `perm-${createHash("sha256").update(`${turn ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
-  return ask(sock, { op: "permission", session, attention, ...tool ? { tool } : {} }, 125e3).then(
-    (r) => r?.op === "decision" ? JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: "PermissionRequest",
-        decision: r.behavior === "allow" ? { behavior: "allow" } : { behavior: "deny", message: r.message || "Denied by the owner (sessionpipe control)." }
-      }
-    }) : null
-  );
-}
-function finish(spawned) {
-  const total = Number(process.hrtime.bigint() - t0) / 1e6;
-  const ms = workMs ?? total;
-  try {
-    mkdirSync(state, { recursive: true });
-    appendFileSync(
-      path2.join(state, "timing.jsonl"),
-      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {} })}
+  }
+  function finish(spawned) {
+    const total = Number(process.hrtime.bigint() - t0) / 1e6;
+    const ms = workMs ?? total;
+    try {
+      mkdirSync(state, { recursive: true });
+      appendFileSync(
+        path2.join(state, "timing.jsonl"),
+        `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {} })}
 `
-    );
-  } catch {
+      );
+    } catch {
+    }
   }
-  process.exit(0);
-}
-function pick(names) {
-  const out = {};
-  for (const n of names) if (env[n] !== void 0) out[n] = env[n];
-  return out;
-}
-function anySinkAbove(tier) {
-  try {
-    const c = JSON.parse(readFileSync(configFile(), "utf8"));
-    return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);
-  } catch {
-    return false;
+  function pick(names) {
+    const out = {};
+    for (const n of names) if (env[n] !== void 0) out[n] = env[n];
+    return out;
   }
-}
-function sessionIdOf(stdin) {
-  const m = /"(?:session_id|sessionId|conversationId)"\s*:\s*"([^"]{1,128})"/.exec(stdin);
-  return m?.[1] ?? "";
-}
-function beatDue(id) {
-  const stamp = path2.join(state, "beats", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, "_")}`);
-  try {
-    if (Date.now() - statSync(stamp).mtimeMs < 6e4) return false;
-  } catch {
+  function anySinkAbove(tier) {
+    try {
+      const c = JSON.parse(readFileSync(configFile(), "utf8"));
+      return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);
+    } catch {
+      return false;
+    }
   }
-  try {
-    mkdirSync(path2.dirname(stamp), { recursive: true, mode: 448 });
-    writeFileSync(stamp, "", { mode: 384 });
-  } catch {
+  function sessionIdOf(stdin) {
+    const m = /"(?:session_id|sessionId|conversationId)"\s*:\s*"([^"]{1,128})"/.exec(stdin);
+    return m?.[1] ?? "";
+  }
+  function beatDue(id) {
+    const stamp = path2.join(state, "beats", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, "_")}`);
+    try {
+      if (Date.now() - statSync(stamp).mtimeMs < 6e4) return false;
+    } catch {
+    }
+    try {
+      mkdirSync(path2.dirname(stamp), { recursive: true, mode: 448 });
+      writeFileSync(stamp, "", { mode: 384 });
+    } catch {
+    }
+    return true;
   }
-  return true;
 }
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href)
+  hookMain(process.argv.slice(2), process.env, {
+    // fd 0 and 1 are the test runner's own (a read of 0 would block it); launcher.test.ts
+    // and the bench run these two through the real binary.
+    /* v8 ignore next -- see above */
+    stdin: () => readFileSync(0),
+    /* v8 ignore next -- see above */
+    stdout: (text) => writeFileSync(1, text)
+  }).then(() => process.exit(0));
+export {
+  hookMain
+};
 //# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/hook.ts", "../src/control/local.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n// SPDX-License-Identifier: Apache-2.0\n// The hook path. A harness runs `node hook.js <harness> <event>`; this reads stdin,\n// writes one job file, spawns the worker detached, prints what the harness needs\n// (Antigravity's answer) and exits 0 \u2014 in milliseconds, with nothing but node:\n// builtins imported (the build checks that). No network, no schema library, no\n// config parsing beyond one small file read for the throttle.\nimport { spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { ask, socketPath } from \"./control/local.js\";\n\nconst t0 = process.hrtime.bigint();\n/** The hook's own work, when a control wait follows it (the wait is not the hook's cost). */\nlet workMs: number | null = null;\nconst [harness = \"\", event = \"\", ...rest] = process.argv.slice(2);\nconst env = process.env;\n\nfunction stateDir(): string {\n  if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.LOCALAPPDATA || path.join(home, \"AppData\", \"Local\"), \"sessionpipe\");\n  return path.join(env.XDG_STATE_HOME || path.join(home, \".local\", \"state\"), \"sessionpipe\");\n}\nfunction configFile(): string {\n  if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);\n  const home = os.homedir();\n  if (process.platform === \"win32\")\n    return path.join(env.APPDATA || path.join(home, \"AppData\", \"Roaming\"), \"sessionpipe\", \"config.json\");\n  return path.join(env.XDG_CONFIG_HOME || path.join(home, \".config\"), \"sessionpipe\", \"config.json\");\n}\n\n// Antigravity parses stdout as the hook's answer; `{}` is \"carry on\" for every event we\n// register. PreToolUse is not one of them: `{}` there is a deny, so an entry an older\n// install left behind asks the person instead (core's AG_STALE_PRETOOL, same bytes).\nif (harness === \"antigravity\") {\n  try {\n    writeFileSync(\n      1,\n      event === \"PreToolUse\"\n        ? '{\"decision\":\"ask\",\"reason\":\"sessionpipe: an outdated PreToolUse hook is still loaded. Restart this conversation (or run sessionpipe install) to drop it.\"}\\n'\n        : \"{}\\n\",\n    );\n  } catch {}\n}\n\nconst state = stateDir();\ntry {\n  if (!harness || !event) throw new Error(\"usage: hook <harness> <event>\");\n  let stdin = \"\";\n  if (harness !== \"codex\" || event !== \"notify\") {\n    try {\n      const buf = readFileSync(0);\n      stdin = buf.subarray(0, 1024 * 1024).toString(\"utf8\");\n    } catch {}\n  }\n  // Tool events are the bulk of what a harness fires. When no sink takes tier \u2265 1\n  // they are only a \"still working\" signal: one heartbeat a minute per session.\n  const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;\n  if (TOOL.test(event) && !anySinkAbove(0)) {\n    const id = sessionIdOf(stdin);\n    if (!id || !beatDue(id)) finish(false);\n  }\n  // A Stop asks the daemon BEFORE its event goes to the worker: the worker reports the\n  // Stop to the daemon too, and a message queued for this Stop must be taken here,\n  // not rerouted because the event got there first.\n  const stopAnswer = event === \"Stop\" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;\n  mkdirSync(path.join(state, \"jobs\"), { recursive: true, mode: 0o700 });\n  const job = {\n    harness,\n    event,\n    argv: [harness, event, ...rest],\n    stdin,\n    cwd: process.cwd(),\n    env: pick([\n      \"CLAUDE_CODE_HOST_SESSION_ID\",\n      \"CLAUDE_CONFIG_DIR\",\n      \"CLAUDE_PROJECT_DIR\",\n      \"CODEX_HOME\",\n      \"GEMINI_CLI_HOME\",\n    ]),\n    ppid: process.ppid,\n    at: Date.now(),\n  };\n  const jobFile = path.join(state, \"jobs\", `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`);\n  writeFileSync(jobFile, JSON.stringify(job), { mode: 0o600 });\n  if (!env.SESSIONPIPE_NO_WORKER) {\n    const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), \"worker.js\");\n    const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: \"ignore\", windowsHide: true, env });\n    p.unref();\n  }\n  if (stopAnswer) {\n    try {\n      writeFileSync(1, `${stopAnswer}\\n`);\n    } catch {}\n  }\n  // A PermissionRequest waits AFTER its event is on its way, so the receiver already\n  // shows the Allow / Deny this answer is for.\n  const ctl = event === \"PermissionRequest\" ? controlAsk(stdin) : null;\n  if (ctl) {\n    workMs = Number(process.hrtime.bigint() - t0) / 1e6;\n    const out = await ctl;\n    if (out) {\n      try {\n        writeFileSync(1, `${out}\\n`);\n      } catch {}\n    }\n  }\n  finish(true);\n} catch {\n  finish(false); // the hook must be invisible to the harness\n}\n\n/** Control (spec/CONTROL.md \u00A76, \u00A79): only on a machine with control paired, and only\n *  for a message the daemon itself verified. A Stop hook asks for a queued message and\n *  answers a block with it; a PermissionRequest hook waits for the person's signed\n *  answer while the terminal shows its own prompt, first answer wins. Anything that\n *  goes wrong (no daemon, a timeout) prints nothing: the harness carries on as usual. */\nfunction controlAsk(stdin: string): Promise<string | null> | null {\n  if (harness !== \"claude-code\" || (event !== \"Stop\" && event !== \"PermissionRequest\")) return null;\n  if (env.SESSIONPIPE_CONTROL_JOB) return null; // a headless turn the daemon itself runs\n  const sock = socketPath(state);\n  if (\n    process.platform === \"win32\"\n      ? !existsSync(path.join(path.dirname(configFile()), \"control.json\"))\n      : !existsSync(sock)\n  )\n    return null;\n  let s: Record<string, unknown>;\n  try {\n    s = JSON.parse(stdin) as Record<string, unknown>;\n  } catch {\n    return null;\n  }\n  const id = typeof s.session_id === \"string\" ? s.session_id : \"\";\n  if (!id) return null;\n  const session = `claude-code:${id}`;\n  if (event === \"Stop\")\n    return ask(sock, { op: \"stop\", session, active: s.stop_hook_active === true }, 300).then((r) =>\n      r?.op === \"block\" ? JSON.stringify({ decision: \"block\", reason: r.reason }) : null,\n    );\n  // The attention id the adapter puts on attention.needed (claude-code.ts), so the\n  // receiver's Allow / Deny names this very prompt.\n  const tool =\n    typeof s.tool_name === \"string\" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : undefined;\n  const turn = typeof s.prompt_id === \"string\" ? s.prompt_id : undefined;\n  const attention = `perm-${createHash(\"sha256\")\n    .update(`${turn ?? \"\"}|${tool ?? \"\"}|${JSON.stringify(s.tool_input ?? null)}`)\n    .digest(\"hex\")\n    .slice(0, 16)}`;\n  return ask(sock, { op: \"permission\", session, attention, ...(tool ? { tool } : {}) }, 125_000).then((r) =>\n    r?.op === \"decision\"\n      ? JSON.stringify({\n          hookSpecificOutput: {\n            hookEventName: \"PermissionRequest\",\n            decision:\n              r.behavior === \"allow\"\n                ? { behavior: \"allow\" }\n                : { behavior: \"deny\", message: r.message || \"Denied by the owner (sessionpipe control).\" },\n          },\n        })\n      : null,\n  );\n}\n\nfunction finish(spawned: boolean): never {\n  const total = Number(process.hrtime.bigint() - t0) / 1e6;\n  const ms = workMs ?? total;\n  try {\n    mkdirSync(state, { recursive: true });\n    appendFileSync(\n      path.join(state, \"timing.jsonl\"),\n      `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...(workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {}) })}\\n`,\n    );\n  } catch {}\n  process.exit(0);\n}\nfunction pick(names: string[]): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const n of names) if (env[n] !== undefined) out[n] = env[n] as string;\n  return out;\n}\nfunction anySinkAbove(tier: number): boolean {\n  try {\n    const c = JSON.parse(readFileSync(configFile(), \"utf8\")) as { sinks?: { tier?: number; paused?: string }[] };\n    return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);\n  } catch {\n    return false;\n  }\n}\nfunction sessionIdOf(stdin: string): string {\n  const m = /\"(?:session_id|sessionId|conversationId)\"\\s*:\\s*\"([^\"]{1,128})\"/.exec(stdin);\n  return m?.[1] ?? \"\";\n}\n/** One heartbeat per minute per session: the stamp file's mtime is the clock. */\nfunction beatDue(id: string): boolean {\n  const stamp = path.join(state, \"beats\", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, \"_\")}`);\n  try {\n    if (Date.now() - statSync(stamp).mtimeMs < 60_000) return false;\n  } catch {}\n  try {\n    mkdirSync(path.dirname(stamp), { recursive: true, mode: 0o700 });\n    writeFileSync(stamp, \"\", { mode: 0o600 });\n  } catch {}\n  return true;\n}\n", "// SPDX-License-Identifier: Apache-2.0\n// The daemon's local socket (spec/CONTROL.md \u00A78): how the waiter, the Stop and\n// PermissionRequest hooks and the worker talk to the one daemon on this machine.\n// Line-delimited JSON, one request per connection. A Unix socket in the state\n// directory (0600, in a 0700 dir); a per-user named pipe on Windows. Only node:\n// builtins \u2014 the hook bundle imports this.\nimport net from \"node:net\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nexport type LocalRequest =\n  /** A waiter parks until a message for its session arrives. */\n  | { op: \"wait\"; session: string; pid?: number }\n  /** A Stop hook asks for a queued message (turn mode). */\n  | { op: \"stop\"; session: string; active: boolean }\n  /** A PermissionRequest hook parks until a verified answer, or until it's released. */\n  | { op: \"permission\"; session: string; attention: string; tool?: string }\n  /** The worker reports a hook event: turn state and attention closure. */\n  | { op: \"event\"; session: string; event: string; transcript?: string; cwd?: string }\n  /** `sessionpipe control status`. */\n  | { op: \"status\" }\n  /** `sessionpipe update` installed a new copy: restart onto it once nothing is in hand. */\n  | { op: \"restart\" };\n\nexport type LocalReply =\n  | { op: \"message\"; text: string; id: string }\n  | { op: \"block\"; reason: string; id: string }\n  | { op: \"decision\"; behavior: \"allow\" | \"deny\"; message?: string; id: string }\n  | { op: \"none\" }\n  /** A newer waiter for the same session took over; this one stops. */\n  | { op: \"replaced\" }\n  | { op: \"ok\" }\n  | { op: \"status\"; status: unknown };\n\n/** Where the daemon listens. `SESSIONPIPE_SOCKET` overrides (tests). */\nexport function socketPath(state: string, env: NodeJS.ProcessEnv = process.env): string {\n  if (env.SESSIONPIPE_SOCKET) return env.SESSIONPIPE_SOCKET;\n  if (process.platform === \"win32\") return `\\\\\\\\.\\\\pipe\\\\sessionpipe-control-${os.userInfo().username}`;\n  return path.join(state, \"control.sock\");\n}\n\n/** One request, one reply. `timeoutMs` bounds the whole exchange; null on any\n *  failure (no daemon, a timeout, a garbled reply) \u2014 callers treat that as \"none\". */\nexport function ask(sock: string, req: LocalRequest, timeoutMs: number): Promise<LocalReply | null> {\n  return new Promise((resolve) => {\n    let buf = \"\";\n    let done = false;\n    const s = net.connect(sock);\n    const finish = (r: LocalReply | null) => {\n      if (done) return;\n      done = true;\n      clearTimeout(t);\n      s.destroy();\n      resolve(r);\n    };\n    const t = setTimeout(() => finish(null), timeoutMs);\n    s.on(\"connect\", () => s.write(`${JSON.stringify(req)}\\n`));\n    s.on(\"data\", (d) => {\n      buf += d.toString(\"utf8\");\n      const i = buf.indexOf(\"\\n\");\n      if (i < 0) return;\n      try {\n        finish(JSON.parse(buf.slice(0, i)) as LocalReply);\n      } catch {\n        finish(null);\n      }\n    });\n    s.on(\"error\", () => finish(null));\n    s.on(\"close\", () => finish(null));\n  });\n}\n"],
-  "mappings": ";;;;AAOA,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,YAAY,WAAW,cAAc,UAAU,qBAAqB;AAC7F,OAAOA,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;;;ACN9B,OAAO,SAAS;AAChB,OAAO,QAAQ;AACf,OAAO,UAAU;AA2BV,SAAS,WAAWC,QAAeC,OAAyB,QAAQ,KAAa;AACtF,MAAIA,KAAI,mBAAoB,QAAOA,KAAI;AACvC,MAAI,QAAQ,aAAa,QAAS,QAAO,oCAAoC,GAAG,SAAS,EAAE,QAAQ;AACnG,SAAO,KAAK,KAAKD,QAAO,cAAc;AACxC;AAIO,SAAS,IAAI,MAAc,KAAmB,WAA+C;AAClG,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,MAAM;AACV,QAAI,OAAO;AACX,UAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAME,UAAS,CAAC,MAAyB;AACvC,UAAI,KAAM;AACV,aAAO;AACP,mBAAa,CAAC;AACd,QAAE,QAAQ;AACV,cAAQ,CAAC;AAAA,IACX;AACA,UAAM,IAAI,WAAW,MAAMA,QAAO,IAAI,GAAG,SAAS;AAClD,MAAE,GAAG,WAAW,MAAM,EAAE,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC;AAAA,CAAI,CAAC;AACzD,MAAE,GAAG,QAAQ,CAAC,MAAM;AAClB,aAAO,EAAE,SAAS,MAAM;AACxB,YAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAI,IAAI,EAAG;AACX,UAAI;AACF,QAAAA,QAAO,KAAK,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,CAAe;AAAA,MAClD,QAAQ;AACN,QAAAA,QAAO,IAAI;AAAA,MACb;AAAA,IACF,CAAC;AACD,MAAE,GAAG,SAAS,MAAMA,QAAO,IAAI,CAAC;AAChC,MAAE,GAAG,SAAS,MAAMA,QAAO,IAAI,CAAC;AAAA,EAClC,CAAC;AACH;;;ADvDA,IAAM,KAAK,QAAQ,OAAO,OAAO;AAEjC,IAAI,SAAwB;AAC5B,IAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAChE,IAAM,MAAM,QAAQ;AAEpB,SAAS,WAAmB;AAC1B,MAAI,IAAI,kBAAmB,QAAOC,MAAK,QAAQ,IAAI,iBAAiB;AACpE,QAAM,OAAOC,IAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAOD,MAAK,KAAK,IAAI,gBAAgBA,MAAK,KAAK,MAAM,WAAW,OAAO,GAAG,aAAa;AACzF,SAAOA,MAAK,KAAK,IAAI,kBAAkBA,MAAK,KAAK,MAAM,UAAU,OAAO,GAAG,aAAa;AAC1F;AACA,SAAS,aAAqB;AAC5B,MAAI,IAAI,mBAAoB,QAAOA,MAAK,QAAQ,IAAI,kBAAkB;AACtE,QAAM,OAAOC,IAAG,QAAQ;AACxB,MAAI,QAAQ,aAAa;AACvB,WAAOD,MAAK,KAAK,IAAI,WAAWA,MAAK,KAAK,MAAM,WAAW,SAAS,GAAG,eAAe,aAAa;AACrG,SAAOA,MAAK,KAAK,IAAI,mBAAmBA,MAAK,KAAK,MAAM,SAAS,GAAG,eAAe,aAAa;AAClG;AAKA,IAAI,YAAY,eAAe;AAC7B,MAAI;AACF;AAAA,MACE;AAAA,MACA,UAAU,eACN,iKACA;AAAA,IACN;AAAA,EACF,QAAQ;AAAA,EAAC;AACX;AAEA,IAAM,QAAQ,SAAS;AACvB,IAAI;AACF,MAAI,CAAC,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,+BAA+B;AACvE,MAAI,QAAQ;AACZ,MAAI,YAAY,WAAW,UAAU,UAAU;AAC7C,QAAI;AACF,YAAM,MAAM,aAAa,CAAC;AAC1B,cAAQ,IAAI,SAAS,GAAG,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,IACtD,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,OAAO;AACb,MAAI,KAAK,KAAK,KAAK,KAAK,CAAC,aAAa,CAAC,GAAG;AACxC,UAAM,KAAK,YAAY,KAAK;AAC5B,QAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAG,QAAO,KAAK;AAAA,EACvC;AAIA,QAAM,aAAa,UAAU,SAAS,OAAO,WAAW,KAAK,KAAK,QAAQ,QAAQ,IAAI,KAAK;AAC3F,YAAUA,MAAK,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpE,QAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA,MAAM,CAAC,SAAS,OAAO,GAAG,IAAI;AAAA,IAC9B;AAAA,IACA,KAAK,QAAQ,IAAI;AAAA,IACjB,KAAK,KAAK;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,QAAQ;AAAA,IACd,IAAI,KAAK,IAAI;AAAA,EACf;AACA,QAAM,UAAUA,MAAK,KAAK,OAAO,QAAQ,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO;AACpH,gBAAc,SAAS,KAAK,UAAU,GAAG,GAAG,EAAE,MAAM,IAAM,CAAC;AAC3D,MAAI,CAAC,IAAI,uBAAuB;AAC9B,UAAM,SAASA,MAAK,KAAKA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,WAAW;AAClF,UAAM,IAAI,MAAM,QAAQ,UAAU,CAAC,QAAQ,OAAO,GAAG,EAAE,UAAU,MAAM,OAAO,UAAU,aAAa,MAAM,IAAI,CAAC;AAChH,MAAE,MAAM;AAAA,EACV;AACA,MAAI,YAAY;AACd,QAAI;AACF,oBAAc,GAAG,GAAG,UAAU;AAAA,CAAI;AAAA,IACpC,QAAQ;AAAA,IAAC;AAAA,EACX;AAGA,QAAM,MAAM,UAAU,sBAAsB,WAAW,KAAK,IAAI;AAChE,MAAI,KAAK;AACP,aAAS,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AAChD,UAAM,MAAM,MAAM;AAClB,QAAI,KAAK;AACP,UAAI;AACF,sBAAc,GAAG,GAAG,GAAG;AAAA,CAAI;AAAA,MAC7B,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO,IAAI;AACb,QAAQ;AACN,SAAO,KAAK;AACd;AAOA,SAAS,WAAW,OAA8C;AAChE,MAAI,YAAY,iBAAkB,UAAU,UAAU,UAAU,oBAAsB,QAAO;AAC7F,MAAI,IAAI,wBAAyB,QAAO;AACxC,QAAM,OAAO,WAAW,KAAK;AAC7B,MACE,QAAQ,aAAa,UACjB,CAAC,WAAWA,MAAK,KAAKA,MAAK,QAAQ,WAAW,CAAC,GAAG,cAAc,CAAC,IACjE,CAAC,WAAW,IAAI;AAEpB,WAAO;AACT,MAAI;AACJ,MAAI;AACF,QAAI,KAAK,MAAM,KAAK;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,KAAK,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAC7D,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,UAAU,eAAe,EAAE;AACjC,MAAI,UAAU;AACZ,WAAO,IAAI,MAAM,EAAE,IAAI,QAAQ,SAAS,QAAQ,EAAE,qBAAqB,KAAK,GAAG,GAAG,EAAE;AAAA,MAAK,CAAC,MACxF,GAAG,OAAO,UAAU,KAAK,UAAU,EAAE,UAAU,SAAS,QAAQ,EAAE,OAAO,CAAC,IAAI;AAAA,IAChF;AAGF,QAAM,OACJ,OAAO,EAAE,cAAc,YAAY,2BAA2B,KAAK,EAAE,SAAS,IAAI,EAAE,YAAY;AAClG,QAAM,OAAO,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC7D,QAAM,YAAY,QAAQ,WAAW,QAAQ,EAC1C,OAAO,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU,EAAE,cAAc,IAAI,CAAC,EAAE,EAC5E,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACf,SAAO,IAAI,MAAM,EAAE,IAAI,cAAc,SAAS,WAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,GAAG,KAAO,EAAE;AAAA,IAAK,CAAC,MACnG,GAAG,OAAO,aACN,KAAK,UAAU;AAAA,MACb,oBAAoB;AAAA,QAClB,eAAe;AAAA,QACf,UACE,EAAE,aAAa,UACX,EAAE,UAAU,QAAQ,IACpB,EAAE,UAAU,QAAQ,SAAS,EAAE,WAAW,6CAA6C;AAAA,MAC/F;AAAA,IACF,CAAC,IACD;AAAA,EACN;AACF;AAEA,SAAS,OAAO,SAAyB;AACvC,QAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AACrD,QAAM,KAAK,UAAU;AACrB,MAAI;AACF,cAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AACpC;AAAA,MACEA,MAAK,KAAK,OAAO,cAAc;AAAA,MAC/B,GAAG,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,GAAG,SAAS,OAAO,IAAI,KAAK,MAAM,KAAK,EAAE,IAAI,IAAI,SAAS,GAAI,WAAW,OAAO,EAAE,iBAAiB,KAAK,MAAM,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;AAAA;AAAA,IAC3K;AAAA,EACF,QAAQ;AAAA,EAAC;AACT,UAAQ,KAAK,CAAC;AAChB;AACA,SAAS,KAAK,OAAyC;AACrD,QAAM,MAA8B,CAAC;AACrC,aAAW,KAAK,MAAO,KAAI,IAAI,CAAC,MAAM,OAAW,KAAI,CAAC,IAAI,IAAI,CAAC;AAC/D,SAAO;AACT;AACA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,UAAM,IAAI,KAAK,MAAM,aAAa,WAAW,GAAG,MAAM,CAAC;AACvD,YAAQ,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM;AAAA,EACvE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACA,SAAS,YAAY,OAAuB;AAC1C,QAAM,IAAI,kEAAkE,KAAK,KAAK;AACtF,SAAO,IAAI,CAAC,KAAK;AACnB;AAEA,SAAS,QAAQ,IAAqB;AACpC,QAAM,QAAQA,MAAK,KAAK,OAAO,SAAS,GAAG,OAAO,IAAI,GAAG,QAAQ,mBAAmB,GAAG,CAAC,EAAE;AAC1F,MAAI;AACF,QAAI,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE,UAAU,IAAQ,QAAO;AAAA,EAC5D,QAAQ;AAAA,EAAC;AACT,MAAI;AACF,cAAUA,MAAK,QAAQ,KAAK,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/D,kBAAc,OAAO,IAAI,EAAE,MAAM,IAAM,CAAC;AAAA,EAC1C,QAAQ;AAAA,EAAC;AACT,SAAO;AACT;",
-  "names": ["os", "path", "state", "env", "finish", "path", "os"]
+  "sourcesContent": ["#!/usr/bin/env node\n// SPDX-License-Identifier: Apache-2.0\n// The hook path. A harness runs `node hook.js <harness> <event>`; this reads stdin,\n// writes one job file, spawns the worker detached, prints what the harness needs\n// (Antigravity's answer) and exits 0 \u2014 in milliseconds, with nothing but node:\n// builtins imported (the build checks that). No network, no schema library, no\n// config parsing beyond one small file read for the throttle.\nimport { spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, statSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\nimport { ask, socketPath } from \"./control/local.js\";\n\n/** A Claude Code session id (the same test as core's notClaudeCode). */\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** The two streams the hook touches: stdin once, whole; stdout for an answer. */\nexport interface HookIO {\n  stdin(): Buffer;\n  stdout(text: string): void;\n}\n\n/** One hook run: `argv` is [harness, event, ...] as the harness invoked it, `env` the\n *  process environment. Resolves once the job is on its way and any answer printed;\n *  the process then exits 0, whatever happened (the hook is invisible to the harness). */\nexport async function hookMain(argv: string[], env: NodeJS.ProcessEnv, io: HookIO): Promise<void> {\n  const t0 = process.hrtime.bigint();\n  /** The hook's own work, when a control wait follows it (the wait is not the hook's cost). */\n  let workMs: number | null = null;\n  const [harness = \"\", event = \"\", ...rest] = argv;\n\n  function stateDir(): string {\n    if (env.SESSIONPIPE_STATE) return path.resolve(env.SESSIONPIPE_STATE);\n    const home = os.homedir();\n    if (process.platform === \"win32\")\n      return path.join(env.LOCALAPPDATA || path.join(home, \"AppData\", \"Local\"), \"sessionpipe\");\n    return path.join(env.XDG_STATE_HOME || path.join(home, \".local\", \"state\"), \"sessionpipe\");\n  }\n  function configFile(): string {\n    if (env.SESSIONPIPE_CONFIG) return path.resolve(env.SESSIONPIPE_CONFIG);\n    const home = os.homedir();\n    if (process.platform === \"win32\")\n      return path.join(env.APPDATA || path.join(home, \"AppData\", \"Roaming\"), \"sessionpipe\", \"config.json\");\n    return path.join(env.XDG_CONFIG_HOME || path.join(home, \".config\"), \"sessionpipe\", \"config.json\");\n  }\n\n  // Antigravity parses stdout as the hook's answer; `{}` is \"carry on\" for every event we\n  // register. PreToolUse is not one of them: `{}` there is a deny, so an entry an older\n  // install left behind asks the person instead (core's AG_STALE_PRETOOL, same bytes).\n  if (harness === \"antigravity\") {\n    try {\n      io.stdout(\n        event === \"PreToolUse\"\n          ? '{\"decision\":\"ask\",\"reason\":\"sessionpipe: an outdated PreToolUse hook is still loaded. Restart this conversation (or run sessionpipe install) to drop it.\"}\\n'\n          : \"{}\\n\",\n      );\n    } catch {}\n  }\n\n  const state = stateDir();\n  try {\n    if (!harness || !event) throw new Error(\"usage: hook <harness> <event>\");\n    let stdin = \"\";\n    if (harness !== \"codex\" || event !== \"notify\") {\n      try {\n        const buf = io.stdin();\n        stdin = buf.subarray(0, 1024 * 1024).toString(\"utf8\");\n      } catch {}\n    }\n    // Tool events are the bulk of what a harness fires. When no sink takes tier \u2265 1\n    // they are only a \"still working\" signal: one heartbeat a minute per session.\n    const TOOL = /^(PreToolUse|PostToolUse|PostToolUseFailure|BeforeTool|AfterTool|PostInvocation)$/;\n    if (TOOL.test(event) && !anySinkAbove(0)) {\n      const id = sessionIdOf(stdin);\n      if (!id || !beatDue(id)) return finish(false);\n    }\n    // A Stop asks the daemon BEFORE its event goes to the worker: the worker reports the\n    // Stop to the daemon too, and a message queued for this Stop must be taken here,\n    // not rerouted because the event got there first.\n    const stopAnswer = event === \"Stop\" ? await (controlAsk(stdin) ?? Promise.resolve(null)) : null;\n    mkdirSync(path.join(state, \"jobs\"), { recursive: true, mode: 0o700 });\n    const job = {\n      harness,\n      event,\n      argv: [harness, event, ...rest],\n      stdin,\n      cwd: process.cwd(),\n      env: pick([\n        // Where a harness keeps its config and its sessions, so a job swept by a worker\n        // some other harness's hook spawned still resolves this harness's own homes\n        // (run.ts sweepJobs runs any stale job file, whatever spawned the worker).\n        \"APPDATA\",\n        \"CLAUDE_CODE_HOST_SESSION_ID\",\n        \"CLAUDE_CONFIG_DIR\",\n        \"CLAUDE_PROJECT_DIR\",\n        \"CODEX_HOME\",\n        // Devin's payload names no folder at all; this is the only thing that does.\n        \"DEVIN_PROJECT_DIR\",\n        \"GEMINI_CLI_HOME\",\n        // Devin's config file and session store are both resolved through these.\n        \"XDG_CONFIG_HOME\",\n        \"XDG_DATA_HOME\",\n      ]),\n      ppid: process.ppid,\n      at: Date.now(),\n    };\n    const jobFile = path.join(\n      state,\n      \"jobs\",\n      `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}.json`,\n    );\n    writeFileSync(jobFile, JSON.stringify(job), { mode: 0o600 });\n    if (!env.SESSIONPIPE_NO_WORKER) {\n      const worker = path.join(path.dirname(fileURLToPath(import.meta.url)), \"worker.js\");\n      const p = spawn(process.execPath, [worker, jobFile], { detached: true, stdio: \"ignore\", windowsHide: true, env });\n      p.unref();\n    }\n    if (stopAnswer) {\n      try {\n        io.stdout(`${stopAnswer}\\n`);\n      } catch {}\n    }\n    // A PermissionRequest waits AFTER its event is on its way, so the receiver already\n    // shows the Allow / Deny this answer is for.\n    const ctl = event === \"PermissionRequest\" ? controlAsk(stdin) : null;\n    if (ctl) {\n      workMs = Number(process.hrtime.bigint() - t0) / 1e6;\n      const out = await ctl;\n      if (out) {\n        try {\n          io.stdout(`${out}\\n`);\n        } catch {}\n      }\n    }\n    return finish(true);\n  } catch {\n    return finish(false); // the hook must be invisible to the harness\n  }\n\n  /** Control (spec/CONTROL.md \u00A76, \u00A79): only on a machine with control paired, and only\n   *  for a message the daemon itself verified. A Stop hook asks for a queued message and\n   *  answers a block with it; a PermissionRequest hook waits for the person's signed\n   *  answer while the terminal shows its own prompt, first answer wins. Anything that\n   *  goes wrong (no daemon, a timeout) prints nothing: the harness carries on as usual. */\n  function controlAsk(stdin: string): Promise<string | null> | null {\n    if (harness !== \"claude-code\" || (event !== \"Stop\" && event !== \"PermissionRequest\")) return null;\n    if (env.SESSIONPIPE_CONTROL_JOB) return null; // a headless turn the daemon itself runs\n    const sock = socketPath(state, env);\n    if (\n      process.platform === \"win32\"\n        ? !existsSync(path.join(path.dirname(configFile()), \"control.json\"))\n        : !existsSync(sock)\n    )\n      return null;\n    let s: Record<string, unknown>;\n    try {\n      s = JSON.parse(stdin) as Record<string, unknown>;\n    } catch {\n      return null;\n    }\n    const id = typeof s.session_id === \"string\" ? s.session_id : \"\";\n    if (!id) return null;\n    // Our entry in ~/.claude/settings.json is run by every harness that imports that file\n    // \u2014 Devin's `claude` hooks provider is live, not a stub \u2014 and it arrives under the\n    // claude-code name. Every Claude Code payload names a transcript and a UUID session;\n    // a payload with neither is somebody else's, and must not be parked for up to 125 s\n    // waiting on an answer that is not coming. Same test as core's notClaudeCode\n    // (claude-code.ts), which the worker applies; repeated here because this file imports\n    // nothing but node builtins.\n    if (typeof s.transcript_path !== \"string\" && !UUID.test(id)) return null;\n    const session = `claude-code:${id}`;\n    if (event === \"Stop\")\n      return ask(sock, { op: \"stop\", session, active: s.stop_hook_active === true }, 300).then((r) =>\n        r?.op === \"block\" ? JSON.stringify({ decision: \"block\", reason: r.reason }) : null,\n      );\n    // The attention id the adapter puts on attention.needed (claude-code.ts), so the\n    // receiver's Allow / Deny names this very prompt.\n    const tool =\n      typeof s.tool_name === \"string\" && /^[A-Za-z0-9_.:-]{1,120}$/.test(s.tool_name) ? s.tool_name : undefined;\n    const turn = typeof s.prompt_id === \"string\" ? s.prompt_id : undefined;\n    const attention = `perm-${createHash(\"sha256\")\n      .update(`${turn ?? \"\"}|${tool ?? \"\"}|${JSON.stringify(s.tool_input ?? null)}`)\n      .digest(\"hex\")\n      .slice(0, 16)}`;\n    return ask(sock, { op: \"permission\", session, attention, ...(tool ? { tool } : {}) }, 125_000).then((r) =>\n      r?.op === \"decision\"\n        ? JSON.stringify({\n            hookSpecificOutput: {\n              hookEventName: \"PermissionRequest\",\n              decision:\n                r.behavior === \"allow\"\n                  ? { behavior: \"allow\" }\n                  : { behavior: \"deny\", message: r.message || \"Denied by the owner (sessionpipe control).\" },\n            },\n          })\n        : null,\n    );\n  }\n\n  /** The timing line; the process exits 0 right after. */\n  function finish(spawned: boolean): void {\n    const total = Number(process.hrtime.bigint() - t0) / 1e6;\n    const ms = workMs ?? total;\n    try {\n      mkdirSync(state, { recursive: true });\n      appendFileSync(\n        path.join(state, \"timing.jsonl\"),\n        `${JSON.stringify({ at: Date.now(), harness, event, ms: Math.round(ms * 10) / 10, spawned, ...(workMs !== null ? { control_wait_ms: Math.round(total - workMs) } : {}) })}\\n`,\n      );\n    } catch {}\n  }\n  function pick(names: string[]): Record<string, string> {\n    const out: Record<string, string> = {};\n    for (const n of names) if (env[n] !== undefined) out[n] = env[n] as string;\n    return out;\n  }\n  function anySinkAbove(tier: number): boolean {\n    try {\n      const c = JSON.parse(readFileSync(configFile(), \"utf8\")) as { sinks?: { tier?: number; paused?: string }[] };\n      return (c.sinks ?? []).some((s) => Number(s.tier) > tier && !s.paused);\n    } catch {\n      return false;\n    }\n  }\n  function sessionIdOf(stdin: string): string {\n    const m = /\"(?:session_id|sessionId|conversationId)\"\\s*:\\s*\"([^\"]{1,128})\"/.exec(stdin);\n    return m?.[1] ?? \"\";\n  }\n  /** One heartbeat per minute per session: the stamp file's mtime is the clock. */\n  function beatDue(id: string): boolean {\n    const stamp = path.join(state, \"beats\", `${harness}-${id.replace(/[^A-Za-z0-9_-]/g, \"_\")}`);\n    try {\n      if (Date.now() - statSync(stamp).mtimeMs < 60_000) return false;\n    } catch {}\n    try {\n      mkdirSync(path.dirname(stamp), { recursive: true, mode: 0o700 });\n      writeFileSync(stamp, \"\", { mode: 0o600 });\n    } catch {}\n    return true;\n  }\n}\n\n// Run as `node hook.js <harness> <event>`; importing this module runs nothing. The main\n// module is known by its real path: node resolves symlinks for import.meta.url, argv[1]\n// keeps the spelling it was given (/var \u2192 /private/var on macOS).\nif (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href)\n  hookMain(process.argv.slice(2), process.env, {\n    // fd 0 and 1 are the test runner's own (a read of 0 would block it); launcher.test.ts\n    // and the bench run these two through the real binary.\n    /* v8 ignore next -- see above */\n    stdin: () => readFileSync(0),\n    /* v8 ignore next -- see above */\n    stdout: (text) => writeFileSync(1, text),\n  }).then(() => process.exit(0));\n", "// SPDX-License-Identifier: Apache-2.0\n// The daemon's local socket (spec/CONTROL.md \u00A78): how the waiter, the Stop and\n// PermissionRequest hooks and the worker talk to the one daemon on this machine.\n// Line-delimited JSON, one request per connection. A Unix socket in the state\n// directory (0600, in a 0700 dir); a per-user named pipe on Windows. Only node:\n// builtins \u2014 the hook bundle imports this.\nimport net from \"node:net\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nexport type LocalRequest =\n  /** A waiter parks until a message for its session arrives. */\n  | { op: \"wait\"; session: string; pid?: number }\n  /** A Stop hook asks for a queued message (turn mode). */\n  | { op: \"stop\"; session: string; active: boolean }\n  /** A PermissionRequest hook parks until a verified answer, or until it's released. */\n  | { op: \"permission\"; session: string; attention: string; tool?: string }\n  /** The worker reports a hook event: turn state and attention closure. */\n  | { op: \"event\"; session: string; event: string; transcript?: string; cwd?: string }\n  /** `sessionpipe control status`. */\n  | { op: \"status\" }\n  /** `sessionpipe update` installed a new copy: restart onto it once nothing is in hand. */\n  | { op: \"restart\" };\n\nexport type LocalReply =\n  | { op: \"message\"; text: string; id: string }\n  | { op: \"block\"; reason: string; id: string }\n  | { op: \"decision\"; behavior: \"allow\" | \"deny\"; message?: string; id: string }\n  | { op: \"none\" }\n  /** A newer waiter for the same session took over; this one stops. */\n  | { op: \"replaced\" }\n  | { op: \"ok\" }\n  | { op: \"status\"; status: unknown };\n\n/** Where the daemon listens. `SESSIONPIPE_SOCKET` overrides (tests). */\nexport function socketPath(state: string, env: NodeJS.ProcessEnv = process.env): string {\n  if (env.SESSIONPIPE_SOCKET) return env.SESSIONPIPE_SOCKET;\n  if (process.platform === \"win32\") return `\\\\\\\\.\\\\pipe\\\\sessionpipe-control-${os.userInfo().username}`;\n  return path.join(state, \"control.sock\");\n}\n\n/** One request, one reply. `timeoutMs` bounds the whole exchange; null on any\n *  failure (no daemon, a timeout, a garbled reply) \u2014 callers treat that as \"none\". */\nexport function ask(sock: string, req: LocalRequest, timeoutMs: number): Promise<LocalReply | null> {\n  return new Promise((resolve) => {\n    let buf = \"\";\n    let done = false;\n    const s = net.connect(sock);\n    const finish = (r: LocalReply | null) => {\n      if (done) return;\n      done = true;\n      clearTimeout(t);\n      s.destroy();\n      resolve(r);\n    };\n    const t = setTimeout(() => finish(null), timeoutMs);\n    s.on(\"connect\", () => s.write(`${JSON.stringify(req)}\\n`));\n    s.on(\"data\", (d) => {\n      buf += d.toString(\"utf8\");\n      const i = buf.indexOf(\"\\n\");\n      if (i < 0) return;\n      try {\n        finish(JSON.parse(buf.slice(0, i)) as LocalReply);\n      } catch {\n        finish(null);\n      }\n    });\n    s.on(\"error\", () => finish(null));\n    s.on(\"close\", () => finish(null));\n  });\n}\n"],
+  "mappings": ";;;;AAOA,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,YAAY,WAAW,cAAc,cAAc,UAAU,qBAAqB;AAC3G,OAAOA,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,eAAe,qBAAqB;;;ACN7C,OAAO,SAAS;AAChB,OAAO,QAAQ;AACf,OAAO,UAAU;AA2BV,SAAS,WAAW,OAAe,MAAyB,QAAQ,KAAa;AACtF,MAAI,IAAI,mBAAoB,QAAO,IAAI;AACvC,MAAI,QAAQ,aAAa,QAAS,QAAO,oCAAoC,GAAG,SAAS,EAAE,QAAQ;AACnG,SAAO,KAAK,KAAK,OAAO,cAAc;AACxC;AAIO,SAAS,IAAI,MAAc,KAAmB,WAA+C;AAClG,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,MAAM;AACV,QAAI,OAAO;AACX,UAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAM,SAAS,CAAC,MAAyB;AACvC,UAAI,KAAM;AACV,aAAO;AACP,mBAAa,CAAC;AACd,QAAE,QAAQ;AACV,cAAQ,CAAC;AAAA,IACX;AACA,UAAM,IAAI,WAAW,MAAM,OAAO,IAAI,GAAG,SAAS;AAClD,MAAE,GAAG,WAAW,MAAM,EAAE,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC;AAAA,CAAI,CAAC;AACzD,MAAE,GAAG,QAAQ,CAAC,MAAM;AAClB,aAAO,EAAE,SAAS,MAAM;AACxB,YAAM,IAAI,IAAI,QAAQ,IAAI;AAC1B,UAAI,IAAI,EAAG;AACX,UAAI;AACF,eAAO,KAAK,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,CAAe;AAAA,MAClD,QAAQ;AACN,eAAO,IAAI;AAAA,MACb;AAAA,IACF,CAAC;AACD,MAAE,GAAG,SAAS,MAAM,OAAO,IAAI,CAAC;AAChC,MAAE,GAAG,SAAS,MAAM,OAAO,IAAI,CAAC;AAAA,EAClC,CAAC;AACH;;;ADtDA,IAAM,OAAO;AAWb,eAAsB,SAAS,MAAgB,KAAwB,IAA2B;AAChG,QAAM,KAAK,QAAQ,OAAO,OAAO;AAEjC,MAAI,SAAwB;AAC5B,QAAM,CAAC,UAAU,IAAI,QAAQ,IAAI,GAAG,IAAI,IAAI;AAE5C,WAAS,WAAmB;AAC1B,QAAI,IAAI,kBAAmB,QAAOC,MAAK,QAAQ,IAAI,iBAAiB;AACpE,UAAM,OAAOC,IAAG,QAAQ;AACxB,QAAI,QAAQ,aAAa;AACvB,aAAOD,MAAK,KAAK,IAAI,gBAAgBA,MAAK,KAAK,MAAM,WAAW,OAAO,GAAG,aAAa;AACzF,WAAOA,MAAK,KAAK,IAAI,kBAAkBA,MAAK,KAAK,MAAM,UAAU,OAAO,GAAG,aAAa;AAAA,EAC1F;AACA,WAAS,aAAqB;AAC5B,QAAI,IAAI,mBAAoB,QAAOA,MAAK,QAAQ,IAAI,kBAAkB;AACtE,UAAM,OAAOC,IAAG,QAAQ;AACxB,QAAI,QAAQ,aAAa;AACvB,aAAOD,MAAK,KAAK,IAAI,WAAWA,MAAK,KAAK,MAAM,WAAW,SAAS,GAAG,eAAe,aAAa;AACrG,WAAOA,MAAK,KAAK,IAAI,mBAAmBA,MAAK,KAAK,MAAM,SAAS,GAAG,eAAe,aAAa;AAAA,EAClG;AAKA,MAAI,YAAY,eAAe;AAC7B,QAAI;AACF,SAAG;AAAA,QACD,UAAU,eACN,iKACA;AAAA,MACN;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,QAAQ,SAAS;AACvB,MAAI;AACF,QAAI,CAAC,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,+BAA+B;AACvE,QAAI,QAAQ;AACZ,QAAI,YAAY,WAAW,UAAU,UAAU;AAC7C,UAAI;AACF,cAAM,MAAM,GAAG,MAAM;AACrB,gBAAQ,IAAI,SAAS,GAAG,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,MACtD,QAAQ;AAAA,MAAC;AAAA,IACX;AAGA,UAAM,OAAO;AACb,QAAI,KAAK,KAAK,KAAK,KAAK,CAAC,aAAa,CAAC,GAAG;AACxC,YAAM,KAAK,YAAY,KAAK;AAC5B,UAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAG,QAAO,OAAO,KAAK;AAAA,IAC9C;AAIA,UAAM,aAAa,UAAU,SAAS,OAAO,WAAW,KAAK,KAAK,QAAQ,QAAQ,IAAI,KAAK;AAC3F,cAAUA,MAAK,KAAK,OAAO,MAAM,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpE,UAAM,MAAM;AAAA,MACV;AAAA,MACA;AAAA,MACA,MAAM,CAAC,SAAS,OAAO,GAAG,IAAI;AAAA,MAC9B;AAAA,MACA,KAAK,QAAQ,IAAI;AAAA,MACjB,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA,QAIR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA;AAAA,QAEA;AAAA,QACA;AAAA;AAAA,QAEA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,MACD,MAAM,QAAQ;AAAA,MACd,IAAI,KAAK,IAAI;AAAA,IACf;AACA,UAAM,UAAUA,MAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,IACtE;AACA,kBAAc,SAAS,KAAK,UAAU,GAAG,GAAG,EAAE,MAAM,IAAM,CAAC;AAC3D,QAAI,CAAC,IAAI,uBAAuB;AAC9B,YAAM,SAASA,MAAK,KAAKA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,WAAW;AAClF,YAAM,IAAI,MAAM,QAAQ,UAAU,CAAC,QAAQ,OAAO,GAAG,EAAE,UAAU,MAAM,OAAO,UAAU,aAAa,MAAM,IAAI,CAAC;AAChH,QAAE,MAAM;AAAA,IACV;AACA,QAAI,YAAY;AACd,UAAI;AACF,WAAG,OAAO,GAAG,UAAU;AAAA,CAAI;AAAA,MAC7B,QAAQ;AAAA,MAAC;AAAA,IACX;AAGA,UAAM,MAAM,UAAU,sBAAsB,WAAW,KAAK,IAAI;AAChE,QAAI,KAAK;AACP,eAAS,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AAChD,YAAM,MAAM,MAAM;AAClB,UAAI,KAAK;AACP,YAAI;AACF,aAAG,OAAO,GAAG,GAAG;AAAA,CAAI;AAAA,QACtB,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AACA,WAAO,OAAO,IAAI;AAAA,EACpB,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AAOA,WAAS,WAAW,OAA8C;AAChE,QAAI,YAAY,iBAAkB,UAAU,UAAU,UAAU,oBAAsB,QAAO;AAC7F,QAAI,IAAI,wBAAyB,QAAO;AACxC,UAAM,OAAO,WAAW,OAAO,GAAG;AAClC,QACE,QAAQ,aAAa,UACjB,CAAC,WAAWA,MAAK,KAAKA,MAAK,QAAQ,WAAW,CAAC,GAAG,cAAc,CAAC,IACjE,CAAC,WAAW,IAAI;AAEpB,aAAO;AACT,QAAI;AACJ,QAAI;AACF,UAAI,KAAK,MAAM,KAAK;AAAA,IACtB,QAAQ;AACN,aAAO;AAAA,IACT;AACA,UAAM,KAAK,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAC7D,QAAI,CAAC,GAAI,QAAO;AAQhB,QAAI,OAAO,EAAE,oBAAoB,YAAY,CAAC,KAAK,KAAK,EAAE,EAAG,QAAO;AACpE,UAAM,UAAU,eAAe,EAAE;AACjC,QAAI,UAAU;AACZ,aAAO,IAAI,MAAM,EAAE,IAAI,QAAQ,SAAS,QAAQ,EAAE,qBAAqB,KAAK,GAAG,GAAG,EAAE;AAAA,QAAK,CAAC,MACxF,GAAG,OAAO,UAAU,KAAK,UAAU,EAAE,UAAU,SAAS,QAAQ,EAAE,OAAO,CAAC,IAAI;AAAA,MAChF;AAGF,UAAM,OACJ,OAAO,EAAE,cAAc,YAAY,2BAA2B,KAAK,EAAE,SAAS,IAAI,EAAE,YAAY;AAClG,UAAM,OAAO,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAC7D,UAAM,YAAY,QAAQ,WAAW,QAAQ,EAC1C,OAAO,GAAG,QAAQ,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU,EAAE,cAAc,IAAI,CAAC,EAAE,EAC5E,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE,CAAC;AACf,WAAO,IAAI,MAAM,EAAE,IAAI,cAAc,SAAS,WAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,GAAG,KAAO,EAAE;AAAA,MAAK,CAAC,MACnG,GAAG,OAAO,aACN,KAAK,UAAU;AAAA,QACb,oBAAoB;AAAA,UAClB,eAAe;AAAA,UACf,UACE,EAAE,aAAa,UACX,EAAE,UAAU,QAAQ,IACpB,EAAE,UAAU,QAAQ,SAAS,EAAE,WAAW,6CAA6C;AAAA,QAC/F;AAAA,MACF,CAAC,IACD;AAAA,IACN;AAAA,EACF;AAGA,WAAS,OAAO,SAAwB;AACtC,UAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,IAAI,EAAE,IAAI;AACrD,UAAM,KAAK,UAAU;AACrB,QAAI;AACF,gBAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AACpC;AAAA,QACEA,MAAK,KAAK,OAAO,cAAc;AAAA,QAC/B,GAAG,KAAK,UAAU,EAAE,IAAI,KAAK,IAAI,GAAG,SAAS,OAAO,IAAI,KAAK,MAAM,KAAK,EAAE,IAAI,IAAI,SAAS,GAAI,WAAW,OAAO,EAAE,iBAAiB,KAAK,MAAM,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;AAAA;AAAA,MAC3K;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,WAAS,KAAK,OAAyC;AACrD,UAAM,MAA8B,CAAC;AACrC,eAAW,KAAK,MAAO,KAAI,IAAI,CAAC,MAAM,OAAW,KAAI,CAAC,IAAI,IAAI,CAAC;AAC/D,WAAO;AAAA,EACT;AACA,WAAS,aAAa,MAAuB;AAC3C,QAAI;AACF,YAAM,IAAI,KAAK,MAAM,aAAa,WAAW,GAAG,MAAM,CAAC;AACvD,cAAQ,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,EAAE,MAAM;AAAA,IACvE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,WAAS,YAAY,OAAuB;AAC1C,UAAM,IAAI,kEAAkE,KAAK,KAAK;AACtF,WAAO,IAAI,CAAC,KAAK;AAAA,EACnB;AAEA,WAAS,QAAQ,IAAqB;AACpC,UAAM,QAAQA,MAAK,KAAK,OAAO,SAAS,GAAG,OAAO,IAAI,GAAG,QAAQ,mBAAmB,GAAG,CAAC,EAAE;AAC1F,QAAI;AACF,UAAI,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE,UAAU,IAAQ,QAAO;AAAA,IAC5D,QAAQ;AAAA,IAAC;AACT,QAAI;AACF,gBAAUA,MAAK,QAAQ,KAAK,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC/D,oBAAc,OAAO,IAAI,EAAE,MAAM,IAAM,CAAC;AAAA,IAC1C,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT;AACF;AAKA,IAAI,QAAQ,KAAK,CAAC,KAAK,YAAY,QAAQ,cAAc,aAAa,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE;AACtF,WAAS,QAAQ,KAAK,MAAM,CAAC,GAAG,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAI3C,OAAO,MAAM,aAAa,CAAC;AAAA;AAAA,IAE3B,QAAQ,CAAC,SAAS,cAAc,GAAG,IAAI;AAAA,EACzC,CAAC,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC;",
+  "names": ["os", "path", "path", "os"]
 }

package/dist/http-sink.d.ts

@@ -3,6 +3,9 @@ import type { DeliveryResult, Event, Sink, SinkConfig, Tier } from "@sessionpipe
  *  the same id, so a receiver that dedupes on webhook-id sees a retry as one message.
  *  Derived from the events' own ids, which the outbox keeps across retries. */
 export declare function webhookId(events: Pick<Event, "id">[]): string;
+/** HTTP.md §2 429: wait as `retry-after` says, seconds or an HTTP date (RFC 9110
+ *  §10.2.3); a minute when the header is missing or unreadable. */
+export declare function retryAfterMs(header: string | null, now?: number): number;
 export declare class HttpSink implements Sink {
     private readonly cfg;
     readonly tier: Tier;

package/dist/http-sink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-sink.d.ts","sourceRoot":"","sources":["../src/http-sink.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIvF;;+EAE+E;AAC/E,wBAAgB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,CAK7D;AAED,qBAAa,QAAS,YAAW,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI;IALrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEV,GAAG,EAAE,UAAU,EACvB,IAAI,EAAE,IAAI;IAOrB,OAAO,CAAC,SAAS;IAOX,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;CA8DrD"}
+{"version":3,"file":"http-sink.d.ts","sourceRoot":"","sources":["../src/http-sink.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAIvF;;+EAE+E;AAC/E,wBAAgB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,CAK7D;AAED;mEACmE;AACnE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,SAAa,GAAG,MAAM,CAM5E;AAED,qBAAa,QAAS,YAAW,IAAI;IAKjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI;IALrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,YACmB,GAAG,EAAE,UAAU,EACvB,IAAI,EAAE,IAAI,EAKpB;IAED,OAAO,CAAC,SAAS;IAOX,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CA6DnD;CACF"}