silentlake 2026.3.24

package/dist/hooks-cli-DUYK4RM1.js

@@ -0,0 +1,1102 @@
+import "./src-CmXHIz5f.js";
+import "./redact-BDinS1q9.js";
+import "./errors-BxyFnvP3.js";
+import "./unhandled-rejections-CDJ8dOVP.js";
+import "./logger-CoEtkjhn.js";
+import "./paths-GHJ97ebE.js";
+import "./tmp-openclaw-dir-idKIOMmb.js";
+import { r as theme } from "./theme-CdOoMzRk.js";
+import "./globals-41sdSaKv.js";
+import { n as defaultRuntime } from "./runtime-CT2LIJZu.js";
+import "./ansi-BEJF8NKS.js";
+import "./subsystem-CUp-6QQf.js";
+import "./boolean-DKtCJu_W.js";
+import "./env-BP70DGuy.js";
+import "./warning-filter-CgvLQB4Y.js";
+import { S as shortenHomePath, t as CONFIG_DIR, y as resolveUserPath } from "./utils-Bxk6BLTg.js";
+import { t as formatDocsLink } from "./links-Bilm-v0z.js";
+import "./paths-nCHyK08H.js";
+import "./auth-profiles-CWEIQV77.js";
+import "./boundary-path-B3FFLYNx.js";
+import "./boundary-file-read-BP6VMpqH.js";
+import "./logger-Cqy7-Maj.js";
+import "./exec-Dmex2w_d.js";
+import "./workspace-BH7CXmrr.js";
+import { m as resolveDefaultAgentId, p as resolveAgentWorkspaceDir } from "./agent-scope-DPP4Z_UU.js";
+import "./model-selection-BTpJnslv.js";
+import { g as writeConfigFile, s as loadConfig } from "./io-jOnQRia2.js";
+import "./host-env-security-BogNN146.js";
+import "./shell-env-cD92jEyV.js";
+import "./safe-text-B_CQuica.js";
+import "./version-DCY9_obP.js";
+import "./env-substitution-D6t_sLS_.js";
+import { n as isPathInside, r as isPathInsideWithRealpath } from "./scan-paths-BJmvUZ1E.js";
+import "./includes-7XyL3p1c.js";
+import "./zod-schema.providers-core-Dgq7MTqU.js";
+import "./legacy-web-search-BgZjNG2h.js";
+import "./registry-rgYi7KoO.js";
+import "./config-state-CE0CGjey.js";
+import { n as MANIFEST_KEY } from "./legacy-names-CUNZ4vHN.js";
+import "./manifest-registry-B90TyTWl.js";
+import "./avatar-policy-Ds9e6uHI.js";
+import "./ip-C8vmzVu0.js";
+import "./zod-schema.agent-runtime-T_EC_6fg.js";
+import "./zod-schema.core-BdgRr-F1.js";
+import "./config-pn7LKJdW.js";
+import "./file-lock-WbEmczmY.js";
+import "./audit-fs-oDMUa5N_.js";
+import "./resolve-T2q_0ARF.js";
+import "./profiles-D17eMKQZ.js";
+import "./repair-qXnOAvDy.js";
+import { t as formatCliCommand } from "./command-format-CYK9XiUC.js";
+import { u as promptYesNo } from "./tailscale-Cbsx-2HB.js";
+import "./tailnet-ofqBrXzu.js";
+import "./net-DlJFp95v.js";
+import "./auth-O6LQFLHJ.js";
+import "./credentials-BPwBlm1X.js";
+import "./message-channel-Cy-gN4K2.js";
+import "./store-CvL8MPei.js";
+import "./runtime-CuvWMN7E.js";
+import "./registry-C3q59Qj0.js";
+import "./plugins-1Z50ecJ6.js";
+import "./sessions-DaSBVNwD.js";
+import "./paths-CTjJI9l0.js";
+import "./session-write-lock-DNKvpjKf.js";
+import "./method-scopes-DgypDW23.js";
+import "./call-BmLt3xO1.js";
+import "./ports-lsof-DtJqhFOr.js";
+import "./restart-stale-pids-CLGiqU2E.js";
+import "./ports-DFiK_Jc-.js";
+import "./logging-CbTTfADU.js";
+import "./commands-Bb9xUwz9.js";
+import "./identity-cyBYcoXS.js";
+import "./secret-input-4REZ4sHo.js";
+import "./bindings-kjwuC11Q.js";
+import "./resolve-route-vEY3ONZ2.js";
+import "./routing-Y3m0o-kB.js";
+import "./base-session-key-Cf2rkwag.js";
+import "./token-Bgv8XEsC.js";
+import "./pi-embedded-CSQySvOV.js";
+import "./identity-file-EndG1nfc.js";
+import "./identity-DovQV4zD.js";
+import "./provider-env-vars-CsQlY7bF.js";
+import "./model-auth-env-CF9ts7Th.js";
+import "./anthropic-vertex-provider-Dd5agCN9.js";
+import "./model-auth-B__TJTPw.js";
+import "./kilocode-shared-DS7_0IMs.js";
+import "./provider-models-C2EjYMwW.js";
+import "./provider-model-allowlist-4HSOnlX-.js";
+import "./retry-D15TD1S3.js";
+import "./models-config.providers.discovery-BaIk1NKL.js";
+import "./state-paths-DJIGEFq_.js";
+import "./cli-runtime-aAVwbEYy.js";
+import "./runtime-env-a_iwdJIv.js";
+import "./diagnostic-DqJXx_4Q.js";
+import "./text-runtime-C_Roi_Je.js";
+import "./config-presence-BmUF_5K9.js";
+import "./thread-bindings-messages-Cdo8jSa9.js";
+import "./conversation-runtime-1O0Aaolb.js";
+import "./registry-CPsHw6xU.js";
+import "./internal-hooks-0uipqzRY.js";
+import "./http-registry-WFFbLYRd.js";
+import "./runtime-whatsapp-boundary-xZem0NyQ.js";
+import "./provider-catalog-D7QvsUXS.js";
+import "./provider-catalog-C5vmXjmb.js";
+import "./provider-catalog--18-pW5t.js";
+import "./tool-catalog-BV6FcEWS.js";
+import "./docker-XFNiArwM.js";
+import "./sandbox-CUUouiKs.js";
+import "./common-CUBlLRXB.js";
+import "./image-ops-j01UkxEv.js";
+import "./thinking-BBD_0HSp.js";
+import "./path-alias-guards-ZTKqurNH.js";
+import "./sandbox-paths-fqp_TZdO.js";
+import "./typebox-D0SHDJST.js";
+import "./mime-C4vVTBso.js";
+import "./ssrf-Dk9XaoKN.js";
+import "./fetch-guard-DIyN1HW5.js";
+import "./provider-web-search-NzK8ep1E.js";
+import "./manager-ChTGDe87.js";
+import "./heartbeat-7aHh0m3d.js";
+import "./typing-DG_YqWJ7.js";
+import "./target-registry-krAVlXi_.js";
+import "./external-content-BUdUOqkv.js";
+import "./brave-CkimJe4j.js";
+import "./channel-config-helpers-CieQWILI.js";
+import "./whatsapp-DXbWlm3A.js";
+import "./delegate-D4ql5N70.js";
+import "./config-schema-B1UGMwZ8.js";
+import "./secret-file-DYJtH6kf.js";
+import "./core-C7aHA4Aq.js";
+import "./security-runtime-BuEhpJVE.js";
+import "./pairing-store-C4lsd4pO.js";
+import "./json-store-O1LwpnBH.js";
+import "./dm-policy-shared-6bCJzHOS.js";
+import "./provider-auth-ref-BS3gwrNr.js";
+import "./provider-auth-input-BftBdgvW.js";
+import "./provider-auth-Bw8x1a3o.js";
+import "./provider-auth-helpers-B0dS-1WK.js";
+import "./provider-api-key-auth-BE0taXiB.js";
+import "./image-generation-CNKc-mFK.js";
+import "./shared-LeP8iUTz.js";
+import "./provider-usage-ClDVmkhl.js";
+import "./media-understanding-DD2uMjK8.js";
+import "./provider-onboard-CjOfyeQG.js";
+import "./perplexity-Beshd9zu.js";
+import "./provider-auth-api-key-BrQYvdxi.js";
+import "./command-secret-targets-COcwhn-D.js";
+import "./whatsapp-heartbeat-CSWnPQ7q.js";
+import "./fs-safe-D3qzH-ab.js";
+import "./web-media-CtU6jM5V.js";
+import "./local-roots-DAzCjWbC.js";
+import "./frontmatter-S5vS-I4a.js";
+import { g as validateRegistryNpmSpec } from "./env-overrides-JneV60sd.js";
+import "./skills-CCgKs_NJ.js";
+import "./skill-commands-CiSwTFBQ.js";
+import "./workspace-dirs-_O4V3xCR.js";
+import "./pairing-token-gKj4SNFJ.js";
+import "./model-selection-Ci9cPkL2.js";
+import "./system-events-mAu6Ap6K.js";
+import "./pi-model-discovery-CuX5CDyZ.js";
+import "./message-hook-mappers-BBTV3JRQ.js";
+import "./delivery-queue-DrrqB4Hi.js";
+import "./channel-plugin-common-BhTxCE5t.js";
+import "./shared-BU0QgVMZ.js";
+import "./status-helpers-Cda-rGLX.js";
+import "./config-runtime-CstET7fq.js";
+import "./routes-TpLEcKO8.js";
+import "./media-limits-Cuvmmhop.js";
+import "./axios-xDDnM0KG.js";
+import "./manager-DuwFn87U.js";
+import "./web-media-BfBb8i48.js";
+import "./mentions-Bxys_va0.js";
+import "./commands-registry.data-XyUTELK9.js";
+import "./commands-registry-ChCep1KJ.js";
+import "./channel-inbound-DwzVf2PK.js";
+import "./config-DdDLrP_v.js";
+import "./ssh-tunnel-Cz51VBAt.js";
+import "./server-middleware-CCqKhKUb.js";
+import "./read-only-account-inspect-DPJzadPo.js";
+import "./channel-summary-CdYLGMVt.js";
+import "./channel-policy-C4GKHvhz.js";
+import "./resolve-utils-CbqJY2bs.js";
+import "./allow-from-C4iBpqFI.js";
+import "./channel-actions-DU2CR3xW.js";
+import "./exec-approvals-BJhuySBz.js";
+import "./exec-approvals-allowlist-B_wPddCb.js";
+import "./http-body-CCiSfloA.js";
+import "./ssrf-policy-Dk6oMa20.js";
+import "./history-CHjo8B5W.js";
+import "./reply-history-CVCD5oE9.js";
+import "./channel-reply-pipeline-CPTuaW8n.js";
+import "./exec-safe-bin-runtime-policy-BZkObC8r.js";
+import "./nodes-screen-CQ7IvP62.js";
+import "./system-run-command-Cxq2F1MB.js";
+import "./stagger-DU7FjHYo.js";
+import "./tool-policy-match-CHqTCSdK.js";
+import "./setup-binary-BOJA7zdN.js";
+import { a as resolveArchiveKind, i as readJsonFile, r as fileExists } from "./archive-Tr0wIUO-.js";
+import "./signal-cli-install-DxoL8CgF.js";
+import "./directory-runtime-DhC8QkMq.js";
+import "./timeouts-BwR1sGom.js";
+import "./outbound-runtime-ic_7ulJJ.js";
+import "./acp-runtime-BdLdT-QY.js";
+import "./gateway-runtime-ih2e7a2K.js";
+import "./connection-auth-BSQJeDOU.js";
+import "./discord-core-5tkl-BzP.js";
+import "./with-timeout-2AKTISee.js";
+import "./multimodal-DC43jYNv.js";
+import "./memory-search-Das1tiuB.js";
+import "./query-expansion-Do45hILP.js";
+import "./search-manager-r8Cw4ZRv.js";
+import "./memory-DBjQ0TPd.js";
+import "./mcp-config-Coky4zS4.js";
+import { i as parseFrontmatter } from "./config-6sZwvXJD.js";
+import { a as buildPluginStatusReport } from "./status-CoUFSBgt.js";
+import { a as installPackageDir, c as resolveTimedInstallModeOptions, f as resolveArchiveSourcePath, i as resolveCanonicalInstallTarget, l as resolveExistingInstallPath, n as installFromNpmSpecArchiveWithInstaller, o as installPackageDirWithManifestDeps, r as ensureInstallTargetAvailable, s as resolveInstallModeOptions, t as finalizeNpmSpecArchiveInstall, u as withExtractedArchiveRoot } from "./npm-pack-install-CYNRv-vM.js";
+import { a as unscopedPackageName, n as resolveSafeInstallDir } from "./install-safe-path-Rwbw1XCZ.js";
+import { n as renderTable, t as getTerminalTableWidth } from "./table-DFMOhmNZ.js";
+import { t as loadWorkspaceHookEntries } from "./workspace-v5XppK5M.js";
+import { t as buildWorkspaceHookStatus } from "./hooks-status-gzNmo3li.js";
+import { n as resolvePinnedNpmInstallRecordForCli, r as looksLikeLocalInstallSpec, t as buildNpmInstallRecordFields } from "./npm-resolution-Ml2aA6Nu.js";
+import fs from "node:fs";
+import path from "node:path";
+import fs$1 from "node:fs/promises";
+//#region src/infra/install-from-npm-spec.ts
+async function installFromValidatedNpmSpecArchive(params) {
+	const spec = params.spec.trim();
+	const specError = validateRegistryNpmSpec(spec);
+	if (specError) return {
+		ok: false,
+		error: specError
+	};
+	return finalizeNpmSpecArchiveInstall(await installFromNpmSpecArchiveWithInstaller({
+		tempDirPrefix: params.tempDirPrefix,
+		spec,
+		timeoutMs: params.timeoutMs,
+		expectedIntegrity: params.expectedIntegrity,
+		onIntegrityDrift: params.onIntegrityDrift,
+		warn: params.warn,
+		installFromArchive: params.installFromArchive,
+		archiveInstallParams: params.archiveInstallParams
+	}));
+}
+//#endregion
+//#region src/hooks/install.ts
+const defaultLogger = {};
+function buildHookInstallForwardParams(params) {
+	return {
+		hooksDir: params.hooksDir,
+		timeoutMs: params.timeoutMs,
+		logger: params.logger,
+		mode: params.mode,
+		dryRun: params.dryRun,
+		expectedHookPackId: params.expectedHookPackId
+	};
+}
+function validateHookId(hookId) {
+	if (!hookId) return "invalid hook name: missing";
+	if (hookId === "." || hookId === "..") return "invalid hook name: reserved path segment";
+	if (hookId.includes("/") || hookId.includes("\\")) return "invalid hook name: path separators not allowed";
+	return null;
+}
+function resolveHookInstallDir(hookId, hooksDir) {
+	const hooksBase = hooksDir ? resolveUserPath(hooksDir) : path.join(CONFIG_DIR, "hooks");
+	const hookIdError = validateHookId(hookId);
+	if (hookIdError) throw new Error(hookIdError);
+	const targetDirResult = resolveSafeInstallDir({
+		baseDir: hooksBase,
+		id: hookId,
+		invalidNameMessage: "invalid hook name: path traversal detected"
+	});
+	if (!targetDirResult.ok) throw new Error(targetDirResult.error);
+	return targetDirResult.path;
+}
+async function ensureOpenClawHooks(manifest) {
+	const hooks = manifest[MANIFEST_KEY]?.hooks;
+	if (!Array.isArray(hooks)) throw new Error("package.json missing openclaw.hooks");
+	const list = hooks.map((e) => typeof e === "string" ? e.trim() : "").filter(Boolean);
+	if (list.length === 0) throw new Error("package.json openclaw.hooks is empty");
+	return list;
+}
+async function resolveInstallTargetDir(id, hooksDir) {
+	return await resolveCanonicalInstallTarget({
+		baseDir: hooksDir ? resolveUserPath(hooksDir) : path.join(CONFIG_DIR, "hooks"),
+		id,
+		invalidNameMessage: "invalid hook name: path traversal detected",
+		boundaryLabel: "hooks directory"
+	});
+}
+async function resolveAvailableHookInstallTarget(params) {
+	const targetDirResult = await resolveInstallTargetDir(params.id, params.hooksDir);
+	if (!targetDirResult.ok) return targetDirResult;
+	const targetDir = targetDirResult.targetDir;
+	const availability = await ensureInstallTargetAvailable({
+		mode: params.mode,
+		targetDir,
+		alreadyExistsError: params.alreadyExistsError(targetDir)
+	});
+	if (!availability.ok) return availability;
+	return {
+		ok: true,
+		targetDir
+	};
+}
+async function installFromResolvedHookDir(resolvedDir, params) {
+	if (await fileExists(path.join(resolvedDir, "package.json"))) return await installHookPackageFromDir({
+		packageDir: resolvedDir,
+		hooksDir: params.hooksDir,
+		timeoutMs: params.timeoutMs,
+		logger: params.logger,
+		mode: params.mode,
+		dryRun: params.dryRun,
+		expectedHookPackId: params.expectedHookPackId
+	});
+	return await installHookFromDir({
+		hookDir: resolvedDir,
+		hooksDir: params.hooksDir,
+		logger: params.logger,
+		mode: params.mode,
+		dryRun: params.dryRun,
+		expectedHookPackId: params.expectedHookPackId
+	});
+}
+async function resolveHookNameFromDir(hookDir) {
+	const hookMdPath = path.join(hookDir, "HOOK.md");
+	if (!await fileExists(hookMdPath)) throw new Error(`HOOK.md missing in ${hookDir}`);
+	return parseFrontmatter(await fs$1.readFile(hookMdPath, "utf-8")).name || path.basename(hookDir);
+}
+async function validateHookDir(hookDir) {
+	if (!await fileExists(path.join(hookDir, "HOOK.md"))) throw new Error(`HOOK.md missing in ${hookDir}`);
+	if (!await Promise.all([
+		"handler.ts",
+		"handler.js",
+		"index.ts",
+		"index.js"
+	].map(async (candidate) => fileExists(path.join(hookDir, candidate)))).then((results) => results.some(Boolean))) throw new Error(`handler.ts/handler.js/index.ts/index.js missing in ${hookDir}`);
+}
+async function installHookPackageFromDir(params) {
+	const { logger, timeoutMs, mode, dryRun } = resolveTimedInstallModeOptions(params, defaultLogger);
+	const manifestPath = path.join(params.packageDir, "package.json");
+	if (!await fileExists(manifestPath)) return {
+		ok: false,
+		error: "package.json missing"
+	};
+	let manifest;
+	try {
+		manifest = await readJsonFile(manifestPath);
+	} catch (err) {
+		return {
+			ok: false,
+			error: `invalid package.json: ${String(err)}`
+		};
+	}
+	let hookEntries;
+	try {
+		hookEntries = await ensureOpenClawHooks(manifest);
+	} catch (err) {
+		return {
+			ok: false,
+			error: String(err)
+		};
+	}
+	const pkgName = typeof manifest.name === "string" ? manifest.name : "";
+	const hookPackId = pkgName ? unscopedPackageName(pkgName) : path.basename(params.packageDir);
+	const hookIdError = validateHookId(hookPackId);
+	if (hookIdError) return {
+		ok: false,
+		error: hookIdError
+	};
+	if (params.expectedHookPackId && params.expectedHookPackId !== hookPackId) return {
+		ok: false,
+		error: `hook pack id mismatch: expected ${params.expectedHookPackId}, got ${hookPackId}`
+	};
+	const target = await resolveAvailableHookInstallTarget({
+		id: hookPackId,
+		hooksDir: params.hooksDir,
+		mode,
+		alreadyExistsError: (targetDir) => `hook pack already exists: ${targetDir} (delete it first)`
+	});
+	if (!target.ok) return target;
+	const targetDir = target.targetDir;
+	const resolvedHooks = [];
+	for (const entry of hookEntries) {
+		const hookDir = path.resolve(params.packageDir, entry);
+		if (!isPathInside(params.packageDir, hookDir)) return {
+			ok: false,
+			error: `openclaw.hooks entry escapes package directory: ${entry}`
+		};
+		await validateHookDir(hookDir);
+		if (!isPathInsideWithRealpath(params.packageDir, hookDir, { requireRealpath: true })) return {
+			ok: false,
+			error: `openclaw.hooks entry resolves outside package directory: ${entry}`
+		};
+		const hookName = await resolveHookNameFromDir(hookDir);
+		resolvedHooks.push(hookName);
+	}
+	if (dryRun) return {
+		ok: true,
+		hookPackId,
+		hooks: resolvedHooks,
+		targetDir,
+		version: typeof manifest.version === "string" ? manifest.version : void 0
+	};
+	const installRes = await installPackageDirWithManifestDeps({
+		sourceDir: params.packageDir,
+		targetDir,
+		mode,
+		timeoutMs,
+		logger,
+		copyErrorPrefix: "failed to copy hook pack",
+		depsLogMessage: "Installing hook pack dependencies…",
+		manifestDependencies: manifest.dependencies
+	});
+	if (!installRes.ok) return installRes;
+	return {
+		ok: true,
+		hookPackId,
+		hooks: resolvedHooks,
+		targetDir,
+		version: typeof manifest.version === "string" ? manifest.version : void 0
+	};
+}
+async function installHookFromDir(params) {
+	const { logger, mode, dryRun } = resolveInstallModeOptions(params, defaultLogger);
+	await validateHookDir(params.hookDir);
+	const hookName = await resolveHookNameFromDir(params.hookDir);
+	const hookIdError = validateHookId(hookName);
+	if (hookIdError) return {
+		ok: false,
+		error: hookIdError
+	};
+	if (params.expectedHookPackId && params.expectedHookPackId !== hookName) return {
+		ok: false,
+		error: `hook id mismatch: expected ${params.expectedHookPackId}, got ${hookName}`
+	};
+	const target = await resolveAvailableHookInstallTarget({
+		id: hookName,
+		hooksDir: params.hooksDir,
+		mode,
+		alreadyExistsError: (targetDir) => `hook already exists: ${targetDir} (delete it first)`
+	});
+	if (!target.ok) return target;
+	const targetDir = target.targetDir;
+	if (dryRun) return {
+		ok: true,
+		hookPackId: hookName,
+		hooks: [hookName],
+		targetDir
+	};
+	const installRes = await installPackageDir({
+		sourceDir: params.hookDir,
+		targetDir,
+		mode,
+		timeoutMs: 12e4,
+		logger,
+		copyErrorPrefix: "failed to copy hook",
+		hasDeps: false,
+		depsLogMessage: "Installing hook dependencies…"
+	});
+	if (!installRes.ok) return installRes;
+	return {
+		ok: true,
+		hookPackId: hookName,
+		hooks: [hookName],
+		targetDir
+	};
+}
+async function installHooksFromArchive(params) {
+	const logger = params.logger ?? defaultLogger;
+	const timeoutMs = params.timeoutMs ?? 12e4;
+	const archivePathResult = await resolveArchiveSourcePath(params.archivePath);
+	if (!archivePathResult.ok) return archivePathResult;
+	const archivePath = archivePathResult.path;
+	return await withExtractedArchiveRoot({
+		archivePath,
+		tempDirPrefix: "openclaw-hook-",
+		timeoutMs,
+		logger,
+		onExtracted: async (rootDir) => await installFromResolvedHookDir(rootDir, buildHookInstallForwardParams({
+			hooksDir: params.hooksDir,
+			timeoutMs,
+			logger,
+			mode: params.mode,
+			dryRun: params.dryRun,
+			expectedHookPackId: params.expectedHookPackId
+		}))
+	});
+}
+async function installHooksFromNpmSpec(params) {
+	const { logger, timeoutMs, mode, dryRun } = resolveTimedInstallModeOptions(params, defaultLogger);
+	const expectedHookPackId = params.expectedHookPackId;
+	const spec = params.spec;
+	logger.info?.(`Downloading ${spec.trim()}…`);
+	return await installFromValidatedNpmSpecArchive({
+		tempDirPrefix: "openclaw-hook-pack-",
+		spec,
+		timeoutMs,
+		expectedIntegrity: params.expectedIntegrity,
+		onIntegrityDrift: params.onIntegrityDrift,
+		warn: (message) => {
+			logger.warn?.(message);
+		},
+		installFromArchive: installHooksFromArchive,
+		archiveInstallParams: buildHookInstallForwardParams({
+			hooksDir: params.hooksDir,
+			timeoutMs,
+			logger,
+			mode,
+			dryRun,
+			expectedHookPackId
+		})
+	});
+}
+async function installHooksFromPath(params) {
+	const pathResult = await resolveExistingInstallPath(params.path);
+	if (!pathResult.ok) return pathResult;
+	const { resolvedPath: resolved, stat } = pathResult;
+	const forwardParams = buildHookInstallForwardParams({
+		hooksDir: params.hooksDir,
+		timeoutMs: params.timeoutMs,
+		logger: params.logger,
+		mode: params.mode,
+		dryRun: params.dryRun,
+		expectedHookPackId: params.expectedHookPackId
+	});
+	if (stat.isDirectory()) return await installFromResolvedHookDir(resolved, forwardParams);
+	if (!resolveArchiveKind(resolved)) return {
+		ok: false,
+		error: `unsupported hook file: ${resolved}`
+	};
+	return await installHooksFromArchive({
+		archivePath: resolved,
+		...forwardParams
+	});
+}
+//#endregion
+//#region src/hooks/installs.ts
+function recordHookInstall(cfg, update) {
+	const { hookId, ...record } = update;
+	const installs = {
+		...cfg.hooks?.internal?.installs,
+		[hookId]: {
+			...cfg.hooks?.internal?.installs?.[hookId],
+			...record,
+			installedAt: record.installedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+		}
+	};
+	return {
+		...cfg,
+		hooks: {
+			...cfg.hooks,
+			internal: {
+				...cfg.hooks?.internal,
+				installs: {
+					...installs,
+					[hookId]: installs[hookId]
+				}
+			}
+		}
+	};
+}
+//#endregion
+//#region src/cli/hooks-cli.ts
+function mergeHookEntries(pluginEntries, workspaceEntries) {
+	const merged = /* @__PURE__ */ new Map();
+	for (const entry of pluginEntries) merged.set(entry.hook.name, entry);
+	for (const entry of workspaceEntries) merged.set(entry.hook.name, entry);
+	return Array.from(merged.values());
+}
+function buildHooksReport(config) {
+	const workspaceDir = resolveAgentWorkspaceDir(config, resolveDefaultAgentId(config));
+	const workspaceEntries = loadWorkspaceHookEntries(workspaceDir, { config });
+	return buildWorkspaceHookStatus(workspaceDir, {
+		config,
+		entries: mergeHookEntries(buildPluginStatusReport({
+			config,
+			workspaceDir
+		}).hooks.map((hook) => hook.entry), workspaceEntries)
+	});
+}
+function resolveHookForToggle(report, hookName, opts) {
+	const hook = report.hooks.find((h) => h.name === hookName);
+	if (!hook) throw new Error(`Hook "${hookName}" not found`);
+	if (hook.managedByPlugin) throw new Error(`Hook "${hookName}" is managed by plugin "${hook.pluginId ?? "unknown"}" and cannot be enabled/disabled.`);
+	if (opts?.requireEligible && !hook.eligible) throw new Error(`Hook "${hookName}" is not eligible (missing requirements)`);
+	return hook;
+}
+function buildConfigWithHookEnabled(params) {
+	const entries = { ...params.config.hooks?.internal?.entries };
+	entries[params.hookName] = {
+		...entries[params.hookName],
+		enabled: params.enabled
+	};
+	const internal = {
+		...params.config.hooks?.internal,
+		...params.ensureHooksEnabled ? { enabled: true } : {},
+		entries
+	};
+	return {
+		...params.config,
+		hooks: {
+			...params.config.hooks,
+			internal
+		}
+	};
+}
+function formatHookStatus(hook) {
+	if (hook.eligible) return theme.success("✓ ready");
+	if (hook.disabled) return theme.warn("⏸ disabled");
+	return theme.error("✗ missing");
+}
+function formatHookName(hook) {
+	return `${hook.emoji ?? "🔗"} ${theme.command(hook.name)}`;
+}
+function formatHookSource(hook) {
+	if (!hook.managedByPlugin) return hook.source;
+	return `plugin:${hook.pluginId ?? "unknown"}`;
+}
+function formatHookMissingSummary(hook) {
+	const missing = [];
+	if (hook.missing.bins.length > 0) missing.push(`bins: ${hook.missing.bins.join(", ")}`);
+	if (hook.missing.anyBins.length > 0) missing.push(`anyBins: ${hook.missing.anyBins.join(", ")}`);
+	if (hook.missing.env.length > 0) missing.push(`env: ${hook.missing.env.join(", ")}`);
+	if (hook.missing.config.length > 0) missing.push(`config: ${hook.missing.config.join(", ")}`);
+	if (hook.missing.os.length > 0) missing.push(`os: ${hook.missing.os.join(", ")}`);
+	return missing.join("; ");
+}
+function exitHooksCliWithError(err) {
+	defaultRuntime.error(`${theme.error("Error:")} ${err instanceof Error ? err.message : String(err)}`);
+	process.exit(1);
+}
+async function runHooksCliAction(action) {
+	try {
+		await action();
+	} catch (err) {
+		exitHooksCliWithError(err);
+	}
+}
+function createInstallLogger() {
+	return {
+		info: (msg) => defaultRuntime.log(msg),
+		warn: (msg) => defaultRuntime.log(theme.warn(msg))
+	};
+}
+function logGatewayRestartHint() {
+	defaultRuntime.log("Restart the gateway to load hooks.");
+}
+function logIntegrityDriftWarning(hookId, drift) {
+	const specLabel = drift.resolution.resolvedSpec ?? drift.spec;
+	defaultRuntime.log(theme.warn(`Integrity drift detected for "${hookId}" (${specLabel})\nExpected: ${drift.expectedIntegrity}\nActual:   ${drift.actualIntegrity}`));
+}
+async function readInstalledPackageVersion(dir) {
+	try {
+		const raw = await fs$1.readFile(path.join(dir, "package.json"), "utf-8");
+		const parsed = JSON.parse(raw);
+		return typeof parsed.version === "string" ? parsed.version : void 0;
+	} catch {
+		return;
+	}
+}
+function enableInternalHookEntries(config, hookNames) {
+	const entries = { ...config.hooks?.internal?.entries };
+	for (const hookName of hookNames) entries[hookName] = {
+		...entries[hookName],
+		enabled: true
+	};
+	return {
+		...config,
+		hooks: {
+			...config.hooks,
+			internal: {
+				...config.hooks?.internal,
+				enabled: true,
+				entries
+			}
+		}
+	};
+}
+/**
+* Format the hooks list output
+*/
+function formatHooksList(report, opts) {
+	const hooks = opts.eligible ? report.hooks.filter((h) => h.eligible) : report.hooks;
+	if (opts.json) {
+		const jsonReport = {
+			workspaceDir: report.workspaceDir,
+			managedHooksDir: report.managedHooksDir,
+			hooks: hooks.map((h) => ({
+				name: h.name,
+				description: h.description,
+				emoji: h.emoji,
+				eligible: h.eligible,
+				disabled: h.disabled,
+				source: h.source,
+				pluginId: h.pluginId,
+				events: h.events,
+				homepage: h.homepage,
+				missing: h.missing,
+				managedByPlugin: h.managedByPlugin
+			}))
+		};
+		return JSON.stringify(jsonReport, null, 2);
+	}
+	if (hooks.length === 0) return opts.eligible ? `No eligible hooks found. Run \`${formatCliCommand("openclaw hooks list")}\` to see all hooks.` : "No hooks found.";
+	const eligible = hooks.filter((h) => h.eligible);
+	const tableWidth = getTerminalTableWidth();
+	const rows = hooks.map((hook) => {
+		const missing = formatHookMissingSummary(hook);
+		return {
+			Status: formatHookStatus(hook),
+			Hook: formatHookName(hook),
+			Description: theme.muted(hook.description),
+			Source: formatHookSource(hook),
+			Missing: missing ? theme.warn(missing) : ""
+		};
+	});
+	const columns = [
+		{
+			key: "Status",
+			header: "Status",
+			minWidth: 10
+		},
+		{
+			key: "Hook",
+			header: "Hook",
+			minWidth: 18,
+			flex: true
+		},
+		{
+			key: "Description",
+			header: "Description",
+			minWidth: 24,
+			flex: true
+		},
+		{
+			key: "Source",
+			header: "Source",
+			minWidth: 12,
+			flex: true
+		}
+	];
+	if (opts.verbose) columns.push({
+		key: "Missing",
+		header: "Missing",
+		minWidth: 18,
+		flex: true
+	});
+	const lines = [];
+	lines.push(`${theme.heading("Hooks")} ${theme.muted(`(${eligible.length}/${hooks.length} ready)`)}`);
+	lines.push(renderTable({
+		width: tableWidth,
+		columns,
+		rows
+	}).trimEnd());
+	return lines.join("\n");
+}
+/**
+* Format detailed info for a single hook
+*/
+function formatHookInfo(report, hookName, opts) {
+	const hook = report.hooks.find((h) => h.name === hookName || h.hookKey === hookName);
+	if (!hook) {
+		if (opts.json) return JSON.stringify({
+			error: "not found",
+			hook: hookName
+		}, null, 2);
+		return `Hook "${hookName}" not found. Run \`${formatCliCommand("openclaw hooks list")}\` to see available hooks.`;
+	}
+	if (opts.json) return JSON.stringify(hook, null, 2);
+	const lines = [];
+	const emoji = hook.emoji ?? "🔗";
+	const status = hook.eligible ? theme.success("✓ Ready") : hook.disabled ? theme.warn("⏸ Disabled") : theme.error("✗ Missing requirements");
+	lines.push(`${emoji} ${theme.heading(hook.name)} ${status}`);
+	lines.push("");
+	lines.push(hook.description);
+	lines.push("");
+	lines.push(theme.heading("Details:"));
+	if (hook.managedByPlugin) lines.push(`${theme.muted("  Source:")} ${hook.source} (${hook.pluginId ?? "unknown"})`);
+	else lines.push(`${theme.muted("  Source:")} ${hook.source}`);
+	lines.push(`${theme.muted("  Path:")} ${shortenHomePath(hook.filePath)}`);
+	lines.push(`${theme.muted("  Handler:")} ${shortenHomePath(hook.handlerPath)}`);
+	if (hook.homepage) lines.push(`${theme.muted("  Homepage:")} ${hook.homepage}`);
+	if (hook.events.length > 0) lines.push(`${theme.muted("  Events:")} ${hook.events.join(", ")}`);
+	if (hook.managedByPlugin) lines.push(theme.muted("  Managed by plugin; enable/disable via hooks CLI not available."));
+	if (hook.requirements.bins.length > 0 || hook.requirements.anyBins.length > 0 || hook.requirements.env.length > 0 || hook.requirements.config.length > 0 || hook.requirements.os.length > 0) {
+		lines.push("");
+		lines.push(theme.heading("Requirements:"));
+		if (hook.requirements.bins.length > 0) {
+			const binsStatus = hook.requirements.bins.map((bin) => {
+				return hook.missing.bins.includes(bin) ? theme.error(`✗ ${bin}`) : theme.success(`✓ ${bin}`);
+			});
+			lines.push(`${theme.muted("  Binaries:")} ${binsStatus.join(", ")}`);
+		}
+		if (hook.requirements.anyBins.length > 0) {
+			const anyBinsStatus = hook.missing.anyBins.length > 0 ? theme.error(`✗ (any of: ${hook.requirements.anyBins.join(", ")})`) : theme.success(`✓ (any of: ${hook.requirements.anyBins.join(", ")})`);
+			lines.push(`${theme.muted("  Any binary:")} ${anyBinsStatus}`);
+		}
+		if (hook.requirements.env.length > 0) {
+			const envStatus = hook.requirements.env.map((env) => {
+				return hook.missing.env.includes(env) ? theme.error(`✗ ${env}`) : theme.success(`✓ ${env}`);
+			});
+			lines.push(`${theme.muted("  Environment:")} ${envStatus.join(", ")}`);
+		}
+		if (hook.requirements.config.length > 0) {
+			const configStatus = hook.configChecks.map((check) => {
+				return check.satisfied ? theme.success(`✓ ${check.path}`) : theme.error(`✗ ${check.path}`);
+			});
+			lines.push(`${theme.muted("  Config:")} ${configStatus.join(", ")}`);
+		}
+		if (hook.requirements.os.length > 0) {
+			const osStatus = hook.missing.os.length > 0 ? theme.error(`✗ (${hook.requirements.os.join(", ")})`) : theme.success(`✓ (${hook.requirements.os.join(", ")})`);
+			lines.push(`${theme.muted("  OS:")} ${osStatus}`);
+		}
+	}
+	return lines.join("\n");
+}
+/**
+* Format check output
+*/
+function formatHooksCheck(report, opts) {
+	if (opts.json) {
+		const eligible = report.hooks.filter((h) => h.eligible);
+		const notEligible = report.hooks.filter((h) => !h.eligible);
+		return JSON.stringify({
+			total: report.hooks.length,
+			eligible: eligible.length,
+			notEligible: notEligible.length,
+			hooks: {
+				eligible: eligible.map((h) => h.name),
+				notEligible: notEligible.map((h) => ({
+					name: h.name,
+					missing: h.missing
+				}))
+			}
+		}, null, 2);
+	}
+	const eligible = report.hooks.filter((h) => h.eligible);
+	const notEligible = report.hooks.filter((h) => !h.eligible);
+	const lines = [];
+	lines.push(theme.heading("Hooks Status"));
+	lines.push("");
+	lines.push(`${theme.muted("Total hooks:")} ${report.hooks.length}`);
+	lines.push(`${theme.success("Ready:")} ${eligible.length}`);
+	lines.push(`${theme.warn("Not ready:")} ${notEligible.length}`);
+	if (notEligible.length > 0) {
+		lines.push("");
+		lines.push(theme.heading("Hooks not ready:"));
+		for (const hook of notEligible) {
+			const reasons = [];
+			if (hook.disabled) reasons.push("disabled");
+			if (hook.missing.bins.length > 0) reasons.push(`bins: ${hook.missing.bins.join(", ")}`);
+			if (hook.missing.anyBins.length > 0) reasons.push(`anyBins: ${hook.missing.anyBins.join(", ")}`);
+			if (hook.missing.env.length > 0) reasons.push(`env: ${hook.missing.env.join(", ")}`);
+			if (hook.missing.config.length > 0) reasons.push(`config: ${hook.missing.config.join(", ")}`);
+			if (hook.missing.os.length > 0) reasons.push(`os: ${hook.missing.os.join(", ")}`);
+			lines.push(`  ${hook.emoji ?? "🔗"} ${hook.name} - ${reasons.join("; ")}`);
+		}
+	}
+	return lines.join("\n");
+}
+async function enableHook(hookName) {
+	const config = loadConfig();
+	const hook = resolveHookForToggle(buildHooksReport(config), hookName, { requireEligible: true });
+	await writeConfigFile(buildConfigWithHookEnabled({
+		config,
+		hookName,
+		enabled: true,
+		ensureHooksEnabled: true
+	}));
+	defaultRuntime.log(`${theme.success("✓")} Enabled hook: ${hook.emoji ?? "🔗"} ${theme.command(hookName)}`);
+}
+async function disableHook(hookName) {
+	const config = loadConfig();
+	const hook = resolveHookForToggle(buildHooksReport(config), hookName);
+	await writeConfigFile(buildConfigWithHookEnabled({
+		config,
+		hookName,
+		enabled: false
+	}));
+	defaultRuntime.log(`${theme.warn("⏸")} Disabled hook: ${hook.emoji ?? "🔗"} ${theme.command(hookName)}`);
+}
+function registerHooksCli(program) {
+	const hooks = program.command("hooks").description("Manage internal agent hooks").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/hooks", "docs.openclaw.ai/cli/hooks")}\n`);
+	hooks.command("list").description("List all hooks").option("--eligible", "Show only eligible hooks", false).option("--json", "Output as JSON", false).option("-v, --verbose", "Show more details including missing requirements", false).action(async (opts) => runHooksCliAction(async () => {
+		const report = buildHooksReport(loadConfig());
+		defaultRuntime.log(formatHooksList(report, opts));
+	}));
+	hooks.command("info <name>").description("Show detailed information about a hook").option("--json", "Output as JSON", false).action(async (name, opts) => runHooksCliAction(async () => {
+		const report = buildHooksReport(loadConfig());
+		defaultRuntime.log(formatHookInfo(report, name, opts));
+	}));
+	hooks.command("check").description("Check hooks eligibility status").option("--json", "Output as JSON", false).action(async (opts) => runHooksCliAction(async () => {
+		const report = buildHooksReport(loadConfig());
+		defaultRuntime.log(formatHooksCheck(report, opts));
+	}));
+	hooks.command("enable <name>").description("Enable a hook").action(async (name) => runHooksCliAction(async () => {
+		await enableHook(name);
+	}));
+	hooks.command("disable <name>").description("Disable a hook").action(async (name) => runHooksCliAction(async () => {
+		await disableHook(name);
+	}));
+	hooks.command("install").description("Install a hook pack (path, archive, or npm spec)").argument("<path-or-spec>", "Path to a hook pack or npm package spec").option("-l, --link", "Link a local path instead of copying", false).option("--pin", "Record npm installs as exact resolved <name>@<version>", false).action(async (raw, opts) => {
+		const resolved = resolveUserPath(raw);
+		const cfg = loadConfig();
+		if (fs.existsSync(resolved)) {
+			if (opts.link) {
+				if (!fs.statSync(resolved).isDirectory()) {
+					defaultRuntime.error("Linked hook paths must be directories.");
+					process.exit(1);
+				}
+				const existing = cfg.hooks?.internal?.load?.extraDirs ?? [];
+				const merged = Array.from(new Set([...existing, resolved]));
+				const probe = await installHooksFromPath({
+					path: resolved,
+					dryRun: true
+				});
+				if (!probe.ok) {
+					defaultRuntime.error(probe.error);
+					process.exit(1);
+				}
+				let next = {
+					...cfg,
+					hooks: {
+						...cfg.hooks,
+						internal: {
+							...cfg.hooks?.internal,
+							enabled: true,
+							load: {
+								...cfg.hooks?.internal?.load,
+								extraDirs: merged
+							}
+						}
+					}
+				};
+				next = enableInternalHookEntries(next, probe.hooks);
+				next = recordHookInstall(next, {
+					hookId: probe.hookPackId,
+					source: "path",
+					sourcePath: resolved,
+					installPath: resolved,
+					version: probe.version,
+					hooks: probe.hooks
+				});
+				await writeConfigFile(next);
+				defaultRuntime.log(`Linked hook path: ${shortenHomePath(resolved)}`);
+				logGatewayRestartHint();
+				return;
+			}
+			const result = await installHooksFromPath({
+				path: resolved,
+				logger: createInstallLogger()
+			});
+			if (!result.ok) {
+				defaultRuntime.error(result.error);
+				process.exit(1);
+			}
+			let next = enableInternalHookEntries(cfg, result.hooks);
+			const source = resolveArchiveKind(resolved) ? "archive" : "path";
+			next = recordHookInstall(next, {
+				hookId: result.hookPackId,
+				source,
+				sourcePath: resolved,
+				installPath: result.targetDir,
+				version: result.version,
+				hooks: result.hooks
+			});
+			await writeConfigFile(next);
+			defaultRuntime.log(`Installed hooks: ${result.hooks.join(", ")}`);
+			logGatewayRestartHint();
+			return;
+		}
+		if (opts.link) {
+			defaultRuntime.error("`--link` requires a local path.");
+			process.exit(1);
+		}
+		if (looksLikeLocalInstallSpec(raw, [
+			".zip",
+			".tgz",
+			".tar.gz",
+			".tar"
+		])) {
+			defaultRuntime.error(`Path not found: ${resolved}`);
+			process.exit(1);
+		}
+		const result = await installHooksFromNpmSpec({
+			spec: raw,
+			logger: createInstallLogger()
+		});
+		if (!result.ok) {
+			defaultRuntime.error(result.error);
+			process.exit(1);
+		}
+		let next = enableInternalHookEntries(cfg, result.hooks);
+		const installRecord = resolvePinnedNpmInstallRecordForCli(raw, Boolean(opts.pin), result.targetDir, result.version, result.npmResolution, defaultRuntime.log, theme.warn);
+		next = recordHookInstall(next, {
+			hookId: result.hookPackId,
+			...installRecord,
+			hooks: result.hooks
+		});
+		await writeConfigFile(next);
+		defaultRuntime.log(`Installed hooks: ${result.hooks.join(", ")}`);
+		logGatewayRestartHint();
+	});
+	hooks.command("update").description("Update installed hooks (npm installs only)").argument("[id]", "Hook pack id (omit with --all)").option("--all", "Update all tracked hooks", false).option("--dry-run", "Show what would change without writing", false).action(async (id, opts) => {
+		const cfg = loadConfig();
+		const installs = cfg.hooks?.internal?.installs ?? {};
+		const targets = opts.all ? Object.keys(installs) : id ? [id] : [];
+		if (targets.length === 0) {
+			defaultRuntime.error("Provide a hook id or use --all.");
+			process.exit(1);
+		}
+		let nextCfg = cfg;
+		let updatedCount = 0;
+		for (const hookId of targets) {
+			const record = installs[hookId];
+			if (!record) {
+				defaultRuntime.log(theme.warn(`No install record for "${hookId}".`));
+				continue;
+			}
+			if (record.source !== "npm") {
+				defaultRuntime.log(theme.warn(`Skipping "${hookId}" (source: ${record.source}).`));
+				continue;
+			}
+			if (!record.spec) {
+				defaultRuntime.log(theme.warn(`Skipping "${hookId}" (missing npm spec).`));
+				continue;
+			}
+			let installPath;
+			try {
+				installPath = record.installPath ?? resolveHookInstallDir(hookId);
+			} catch (err) {
+				defaultRuntime.log(theme.error(`Invalid install path for "${hookId}": ${String(err)}`));
+				continue;
+			}
+			const currentVersion = await readInstalledPackageVersion(installPath);
+			if (opts.dryRun) {
+				const probe = await installHooksFromNpmSpec({
+					spec: record.spec,
+					mode: "update",
+					dryRun: true,
+					expectedHookPackId: hookId,
+					expectedIntegrity: record.integrity,
+					onIntegrityDrift: async (drift) => {
+						logIntegrityDriftWarning(hookId, drift);
+						return true;
+					},
+					logger: createInstallLogger()
+				});
+				if (!probe.ok) {
+					defaultRuntime.log(theme.error(`Failed to check ${hookId}: ${probe.error}`));
+					continue;
+				}
+				const nextVersion = probe.version ?? "unknown";
+				const currentLabel = currentVersion ?? "unknown";
+				if (currentVersion && probe.version && currentVersion === probe.version) defaultRuntime.log(`${hookId} is up to date (${currentLabel}).`);
+				else defaultRuntime.log(`Would update ${hookId}: ${currentLabel} → ${nextVersion}.`);
+				continue;
+			}
+			const result = await installHooksFromNpmSpec({
+				spec: record.spec,
+				mode: "update",
+				expectedHookPackId: hookId,
+				expectedIntegrity: record.integrity,
+				onIntegrityDrift: async (drift) => {
+					logIntegrityDriftWarning(hookId, drift);
+					return await promptYesNo(`Continue updating "${hookId}" with this artifact?`);
+				},
+				logger: createInstallLogger()
+			});
+			if (!result.ok) {
+				defaultRuntime.log(theme.error(`Failed to update ${hookId}: ${result.error}`));
+				continue;
+			}
+			const nextVersion = result.version ?? await readInstalledPackageVersion(result.targetDir);
+			nextCfg = recordHookInstall(nextCfg, {
+				hookId,
+				...buildNpmInstallRecordFields({
+					spec: record.spec,
+					installPath: result.targetDir,
+					version: nextVersion,
+					resolution: result.npmResolution
+				}),
+				hooks: result.hooks
+			});
+			updatedCount += 1;
+			const currentLabel = currentVersion ?? "unknown";
+			const nextLabel = nextVersion ?? "unknown";
+			if (currentVersion && nextVersion && currentVersion === nextVersion) defaultRuntime.log(`${hookId} already at ${currentLabel}.`);
+			else defaultRuntime.log(`Updated ${hookId}: ${currentLabel} → ${nextLabel}.`);
+		}
+		if (updatedCount > 0) {
+			await writeConfigFile(nextCfg);
+			logGatewayRestartHint();
+		}
+	});
+	hooks.action(async () => runHooksCliAction(async () => {
+		const report = buildHooksReport(loadConfig());
+		defaultRuntime.log(formatHooksList(report, {}));
+	}));
+}
+//#endregion
+export { registerHooksCli };