wotann 0.5.0

package/dist/claude/hooks/server.js

@@ -0,0 +1,396 @@
+/**
+ * HTTP transport for the WOTANN ↔ Claude SDK hook bridge — V9 T3.3 Wave 2.
+ *
+ * The Claude binary's `--hooks-config` flag accepts JSON describing one or
+ * more hook URLs per event. When an event fires, the binary makes a POST
+ * to the URL with the payload as the request body and awaits the response
+ * (with a configurable timeout). Response shape determines the binary's
+ * next action: allow, block, modifyInput, inject, defer.
+ *
+ * This module owns ONLY the HTTP + JSON wire. It dispatches to per-event
+ * handlers from sibling files. Handlers receive a `WaveDeps` injected at
+ * server construction.
+ *
+ * Loopback-bound by default — the URL emitted via `getHookConfig()` is
+ * `http://127.0.0.1:<port>`. The Claude binary runs in the same process
+ * tree as WOTANN, so non-loopback bindings would only widen the attack
+ * surface without enabling a real use case.
+ *
+ * Quality bars
+ *   - QB #6 honest stubs: a handler that throws is converted to a decision
+ *     consistent with the event's contract (PreToolUse defaults to allow
+ *     with a warning logged; Stop defaults to allow). We never silently
+ *     swallow.
+ *   - QB #13 env guard: deps come from constructor arg, not module state.
+ *   - QB #15 verify before claim: integration is exercised by the matrix
+ *     in `MASTER_PLAN_V9.md` Tier 3.
+ */
+import { createServer } from "node:http";
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { createSessionStartHandler } from "./session-start.js";
+import { createUserPromptSubmitHandler } from "./user-prompt-submit.js";
+import { createPreToolUseHandler } from "./pre-tool-use.js";
+import { createPostToolUseHandler } from "./post-tool-use.js";
+import { createStopHandler } from "./stop.js";
+import { createPreCompactHandler } from "./pre-compact.js";
+// V9 Wave 6-RR (H-3): per-session shared secret used to authenticate
+// every POST hitting the loopback hook server. Generated fresh per
+// startHookServer() call so no two sessions share a secret. Embedded in
+// the URL path we hand to the `claude` binary via getHookConfig — the
+// binary just calls the URL it was told to call, so URL-embedded secret
+// works without requiring the binary to support custom headers.
+const SECRET_BYTES = 32;
+function generateHookSecret() {
+    return randomBytes(SECRET_BYTES).toString("hex");
+}
+/**
+ * Constant-time comparison of two hex strings of equal length. Falls
+ * through to false on any length mismatch or buffer error rather than
+ * throwing — fail-CLOSED per QB#6.
+ */
+function safeEqualHex(a, b) {
+    if (a.length !== b.length)
+        return false;
+    try {
+        const ab = Buffer.from(a, "hex");
+        const bb = Buffer.from(b, "hex");
+        if (ab.length === 0 || ab.length !== bb.length)
+            return false;
+        return timingSafeEqual(ab, bb);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify the optional X-WOTANN-HMAC header. Format:
+ *   "sha256=<hex>"
+ * where hex = HMAC-SHA256(secret, `${timestamp}.${rawBody}`).
+ * The X-WOTANN-Timestamp header carries the timestamp (ms since epoch);
+ * stale timestamps (older than 5 min) are rejected to limit replay.
+ *
+ * Returns true if both headers are present AND verify; false if they
+ * verify fail; null if not present (caller falls back to path-token).
+ */
+function verifyHmac(req, rawBody, secret) {
+    const hmacHeader = req.headers["x-wotann-hmac"];
+    const tsHeader = req.headers["x-wotann-timestamp"];
+    if (typeof hmacHeader !== "string" || typeof tsHeader !== "string") {
+        return null; // No HMAC presented — caller decides if path-token alone is enough.
+    }
+    const tsNum = Number(tsHeader);
+    if (!Number.isFinite(tsNum))
+        return false;
+    // 5-minute clock skew tolerance limits replay window.
+    if (Math.abs(Date.now() - tsNum) > 5 * 60 * 1000)
+        return false;
+    const expectedHex = createHmac("sha256", secret).update(`${tsHeader}.${rawBody}`).digest("hex");
+    const expected = `sha256=${expectedHex}`;
+    if (hmacHeader.length !== expected.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(hmacHeader, "utf-8"), Buffer.from(expected, "utf-8"));
+    }
+    catch {
+        return false;
+    }
+}
+// ── Per-event route → handler map ──────────────────────────────
+//
+// V9 Wave 6-RR (H-3): the path prefix is now `/wotann/hooks/<secret>/`
+// — every request must include the per-session secret in the path.
+// Anyone scanning loopback ports without the secret gets 401. The
+// secret is generated at startHookServer() time and only handed to the
+// `claude` binary via the hook config file (which is on disk with mode
+// 0o600 in tmpdir). See SLUG_TO_EVENT for the trailing event slug.
+const SLUG_TO_EVENT = {
+    "session-start": "SessionStart",
+    "user-prompt-submit": "UserPromptSubmit",
+    "pre-tool-use": "PreToolUse",
+    "post-tool-use": "PostToolUse",
+    stop: "Stop",
+    "pre-compact": "PreCompact",
+};
+const EVENT_TO_SLUG = {
+    SessionStart: "session-start",
+    UserPromptSubmit: "user-prompt-submit",
+    PreToolUse: "pre-tool-use",
+    PostToolUse: "post-tool-use",
+    Stop: "stop",
+    PreCompact: "pre-compact",
+    SessionEnd: null,
+    UserPromptExpansion: null,
+    PostCompact: null,
+    ToolError: null,
+    AgentStart: null,
+    AgentEnd: null,
+    ChannelMessage: null,
+    ChannelOutbound: null,
+    PermissionRequest: null,
+    PermissionDecision: null,
+    Elicitation: null,
+    ElicitationResult: null,
+    ModelChange: null,
+    TurnStart: null,
+    TurnEnd: null,
+    Notification: null,
+    ApiError: null,
+    RateLimit: null,
+    ContextWarning: null,
+    QuotaWarning: null,
+};
+/**
+ * Parse a request URL of the form `/wotann/hooks/<secret>/<event-slug>`
+ * and return both pieces. Returns null on any structural mismatch — the
+ * caller responds 404 in that case so a curious port-scanner cannot
+ * distinguish "wrong secret" from "wrong path" timing-wise.
+ */
+function parseHookUrl(url) {
+    // Strip query string (we don't currently use one but defensive).
+    const pathOnly = url.split("?")[0] ?? url;
+    const parts = pathOnly.split("/").filter(Boolean);
+    // Expect exactly: ["wotann", "hooks", <secret>, <slug>]
+    if (parts.length !== 4)
+        return null;
+    if (parts[0] !== "wotann" || parts[1] !== "hooks")
+        return null;
+    const secret = parts[2];
+    const slug = parts[3];
+    if (!secret || !slug)
+        return null;
+    return { secret, slug };
+}
+// ── Server factory ─────────────────────────────────────────────
+/**
+ * Start an HTTP server bound to loopback that handles every wired hook
+ * event. Returns a handle with URL + close method.
+ *
+ * The server's `address` is observed via `Server.address()` after listen,
+ * so callers using `port: 0` can read back the OS-assigned port from the
+ * returned `port` field and pass it to `getHookConfig`.
+ */
+export async function startHookServer(opts) {
+    const host = opts.host ?? "127.0.0.1";
+    const handlerTimeoutMs = opts.handlerTimeoutMs ?? 5000;
+    const log = opts.log ?? (() => { });
+    const sessionStart = createSessionStartHandler();
+    const userPromptSubmit = createUserPromptSubmitHandler();
+    const preToolUse = createPreToolUseHandler();
+    const postToolUse = createPostToolUseHandler();
+    const stop = createStopHandler();
+    const preCompact = createPreCompactHandler();
+    // V9 Wave 6-RR (H-3): per-server shared secret. Generated fresh per
+    // startHookServer() call so a leaked secret from one session cannot
+    // attack another. Held in closure scope (per-process state, never
+    // module-global per QB#7).
+    const sharedSecret = generateHookSecret();
+    // H-K7 fix: per-peer token-bucket rate limiter so a runaway/buggy
+    // hook producer can't flood the server. 100 requests / 60s window per
+    // remote IP — tuned for Claude CLI burst patterns (each tool call
+    // fires PreToolUse + PostToolUse so a 50-tool-call session generates
+    // ~100 hook invocations in normal use). The window is per-instance
+    // (closure-scoped) per QB#7, never module-global.
+    const RATE_WINDOW_MS = 60_000;
+    const RATE_MAX_REQUESTS = opts.rateLimitMax ?? 100;
+    const rateLimitBuckets = new Map();
+    function checkRateLimit(remoteAddr) {
+        const now = Date.now();
+        const bucket = rateLimitBuckets.get(remoteAddr);
+        if (!bucket || bucket.resetAt <= now) {
+            rateLimitBuckets.set(remoteAddr, { count: 1, resetAt: now + RATE_WINDOW_MS });
+            return { allowed: true, retryAfterSeconds: 0 };
+        }
+        bucket.count += 1;
+        if (bucket.count > RATE_MAX_REQUESTS) {
+            return { allowed: false, retryAfterSeconds: Math.ceil((bucket.resetAt - now) / 1000) };
+        }
+        return { allowed: true, retryAfterSeconds: 0 };
+    }
+    // Periodic cleanup of stale buckets so memory doesn't grow unbounded
+    // when many short-lived peers connect (test fixtures, CI runs).
+    const rateLimitSweepHandle = setInterval(() => {
+        const now = Date.now();
+        for (const [addr, bucket] of rateLimitBuckets) {
+            if (bucket.resetAt <= now)
+                rateLimitBuckets.delete(addr);
+        }
+    }, RATE_WINDOW_MS);
+    rateLimitSweepHandle.unref();
+    const server = createServer(async (req, res) => {
+        if (req.method !== "POST" || !req.url) {
+            sendJson(res, 405, { error: "method_not_allowed" });
+            return;
+        }
+        // H-K7 rate limit check — cheap, runs before HMAC + body parse so a
+        // flood can be rejected without spending CPU on cryptographic verify.
+        const remoteAddr = req.socket.remoteAddress ?? "unknown";
+        const rl = checkRateLimit(remoteAddr);
+        if (!rl.allowed) {
+            log("warn", `rate-limit: ${remoteAddr} exceeded ${RATE_MAX_REQUESTS}/${RATE_WINDOW_MS}ms`);
+            res.setHeader("Retry-After", String(rl.retryAfterSeconds));
+            sendJson(res, 429, { error: "too_many_requests", retryAfterSeconds: rl.retryAfterSeconds });
+            return;
+        }
+        const parsed = parseHookUrl(req.url);
+        if (!parsed) {
+            // Always 404 on malformed paths so a scanner cannot distinguish
+            // structurally-wrong from secret-wrong via response code alone.
+            sendJson(res, 404, { error: "not_found" });
+            return;
+        }
+        // QB#6 fail-CLOSED: secret check via constant-time comparison.
+        if (!safeEqualHex(parsed.secret, sharedSecret)) {
+            log("warn", `hook auth failed: bad secret on ${parsed.slug}`);
+            sendJson(res, 401, { error: "unauthorized" });
+            return;
+        }
+        const route = SLUG_TO_EVENT[parsed.slug];
+        if (!route) {
+            sendJson(res, 404, { error: "unknown_event" });
+            return;
+        }
+        // Read raw body once so we can both HMAC-verify it and parse it.
+        let raw = "";
+        try {
+            raw = await readRaw(req);
+        }
+        catch (err) {
+            log("warn", `bad body on ${parsed.slug}: ${err instanceof Error ? err.message : String(err)}`);
+            sendJson(res, 400, { error: "bad_body" });
+            return;
+        }
+        // Optional X-WOTANN-HMAC header — defense in depth. If the caller
+        // includes the header it MUST verify; if they omit, the secret-in-
+        // path check above is sufficient (the binary doesn't sign by default
+        // because the public hooks-config spec doesn't expose a header field).
+        const hmacResult = verifyHmac(req, raw, sharedSecret);
+        if (hmacResult === false) {
+            log("warn", `hook auth failed: bad HMAC on ${parsed.slug}`);
+            sendJson(res, 401, { error: "unauthorized" });
+            return;
+        }
+        let body;
+        try {
+            body = raw.trim().length === 0 ? {} : JSON.parse(raw);
+        }
+        catch (err) {
+            log("warn", `bad json on ${parsed.slug}: ${err instanceof Error ? err.message : String(err)}`);
+            sendJson(res, 400, { error: "bad_json" });
+            return;
+        }
+        try {
+            const decision = await runWithTimeout(dispatchHookByEvent(route, body, opts.deps, {
+                sessionStart,
+                userPromptSubmit,
+                preToolUse,
+                postToolUse,
+                stop,
+                preCompact,
+            }), handlerTimeoutMs);
+            sendJson(res, 200, decision);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            log("error", `${route} handler failed: ${message}`);
+            sendJson(res, 200, fallbackDecisionForEvent(route));
+        }
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(opts.port ?? 0, host, () => {
+            server.removeListener("error", reject);
+            resolve();
+        });
+    });
+    const port = server.address().port;
+    // Base URL exposed to callers ALREADY embeds the per-session secret
+    // path prefix. Downstream config-builder appends `/<event-slug>` to
+    // produce per-event hook URLs.
+    const url = `http://${host}:${port}/wotann/hooks/${sharedSecret}`;
+    return {
+        url,
+        port,
+        close: () => closeServer(server),
+    };
+}
+async function dispatchHookByEvent(event, body, deps, handlers) {
+    // The body shape is event-specific; cast after a permissive validation.
+    const payload = body;
+    if (!payload || typeof payload !== "object") {
+        throw new Error("payload_not_object");
+    }
+    const stamped = {
+        ...payload,
+        event,
+        sessionId: typeof payload.sessionId === "string" ? payload.sessionId : "unknown",
+        timestamp: typeof payload.timestamp === "number" ? payload.timestamp : Date.now(),
+    };
+    switch (event) {
+        case "SessionStart":
+            return handlers.sessionStart(stamped, deps);
+        case "UserPromptSubmit":
+            return handlers.userPromptSubmit(stamped, deps);
+        case "PreToolUse":
+            return handlers.preToolUse(stamped, deps);
+        case "PostToolUse":
+            return handlers.postToolUse(stamped, deps);
+        case "Stop":
+            return handlers.stop(stamped, deps);
+        case "PreCompact":
+            return handlers.preCompact(stamped, deps);
+        default:
+            // Other events are passively logged; we don't dispatch a handler.
+            return { action: "allow" };
+    }
+}
+function fallbackDecisionForEvent(event) {
+    if (event === "Stop")
+        return { decision: "allow" };
+    return { action: "allow" };
+}
+async function runWithTimeout(p, ms) {
+    return await Promise.race([
+        p,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`handler_timeout_${ms}ms`)), ms)),
+    ]);
+}
+/**
+ * Read the raw request body as a UTF-8 string. The H-3 HMAC verifier
+ * needs the raw bytes BEFORE JSON parsing — re-serializing parsed JSON
+ * does not always reproduce the exact byte sequence (key ordering,
+ * whitespace), so HMAC must verify the wire bytes the sender actually
+ * signed.
+ */
+async function readRaw(req) {
+    const chunks = [];
+    for await (const chunk of req) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString("utf-8");
+}
+function sendJson(res, code, body) {
+    res.statusCode = code;
+    res.setHeader("content-type", "application/json");
+    res.end(JSON.stringify(body));
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        server.close((err) => (err ? reject(err) : resolve()));
+    });
+}
+// ── Convenience: expose route → URL map for config-builder ────
+/**
+ * Build per-event URL map for the Claude binary's --hooks-config file.
+ *
+ * `baseUrl` is what `startHookServer()` returns in `.url` — it ALREADY
+ * includes the per-session secret prefix (`/wotann/hooks/<secret>`),
+ * so we just append the trailing event slug per route.
+ */
+export function getHookRoutes(baseUrl) {
+    const out = {};
+    for (const [event, slug] of Object.entries(EVENT_TO_SLUG)) {
+        out[event] = slug ? `${baseUrl}/${slug}` : null;
+    }
+    return out;
+}
+//# sourceMappingURL=server.js.map

package/dist/claude/hooks/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/claude/hooks/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAgBvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,gEAAgE;AAChE,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,SAAS,kBAAkB;IACzB,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7D,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,GAAoB,EAAE,OAAe,EAAE,MAAc;IACvE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,CAAC,oEAAoE;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,sDAAsD;IACtD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,UAAU,WAAW,EAAE,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AA2BD,kEAAkE;AAClE,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,kEAAkE;AAClE,uEAAuE;AACvE,uEAAuE;AACvE,mEAAmE;AAEnE,MAAM,aAAa,GAAoC;IACrD,eAAe,EAAE,cAAc;IAC/B,oBAAoB,EAAE,kBAAkB;IACxC,cAAc,EAAE,YAAY;IAC5B,eAAe,EAAE,aAAa;IAC9B,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,YAAY;CAC5B,CAAC;AAEF,MAAM,aAAa,GAA2C;IAC5D,YAAY,EAAE,eAAe;IAC7B,gBAAgB,EAAE,oBAAoB;IACtC,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,eAAe;IAC5B,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,aAAa;IACzB,UAAU,EAAE,IAAI;IAChB,mBAAmB,EAAE,IAAI;IACzB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;IACd,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,IAAI;IACvB,kBAAkB,EAAE,IAAI;IACxB,WAAW,EAAE,IAAI;IACjB,iBAAiB,EAAE,IAAI;IACvB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE,IAAI;CACnB,CAAC;AAEF;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,iEAAiE;IACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,wDAAwD;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,kEAAkE;AAElE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,6BAA6B,EAAE,CAAC;IACzD,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;IAE7C,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,2BAA2B;IAC3B,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAE1C,kEAAkE;IAClE,sEAAsE;IACtE,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,kDAAkD;IAClD,MAAM,cAAc,GAAG,MAAM,CAAC;IAC9B,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC;IACnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA8C,CAAC;IAC/E,SAAS,cAAc,CAAC,UAAkB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACrC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,cAAc,EAAE,CAAC,CAAC;YAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,KAAK,GAAG,iBAAiB,EAAE,CAAC;YACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG;gBAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,EAAE,cAAc,CAAC,CAAC;IACnB,oBAAoB,CAAC,KAAK,EAAE,CAAC;IAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACtC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACzD,MAAM,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,EAAE,eAAe,UAAU,aAAa,iBAAiB,IAAI,cAAc,IAAI,CAAC,CAAC;YAC3F,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gEAAgE;YAChE,gEAAgE;YAChE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,EAAE,mCAAmC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CACD,MAAM,EACN,eAAe,MAAM,CAAC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;YACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,EAAE,iCAAiC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CACD,MAAM,EACN,eAAe,MAAM,CAAC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;YACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBAC1C,YAAY;gBACZ,gBAAgB;gBAChB,UAAU;gBACV,WAAW;gBACX,IAAI;gBACJ,UAAU;aACX,CAAC,EACF,gBAAgB,CACjB,CAAC;YACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAkB,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACpD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACpD,oEAAoE;IACpE,oEAAoE;IACpE,+BAA+B;IAC/B,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,IAAI,iBAAiB,YAAY,EAAE,CAAC;IAElE,OAAO;QACL,GAAG;QACH,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;KACjC,CAAC;AACJ,CAAC;AAaD,KAAK,UAAU,mBAAmB,CAChC,KAAsB,EACtB,IAAa,EACb,IAAc,EACd,QAAoB;IAEpB,wEAAwE;IACxE,MAAM,OAAO,GAAG,IAA+B,CAAC;IAChD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,OAAO,GAAG;QACd,GAAI,OAAmC;QACvC,KAAK;QACL,SAAS,EAAE,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAChF,SAAS,EAAE,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;KAClF,CAAC;IAEF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,YAAY,CAAC,OAAyC,EAAE,IAAI,CAAC,CAAC;QAChF,KAAK,kBAAkB;YACrB,OAAO,QAAQ,CAAC,gBAAgB,CAAC,OAA6C,EAAE,IAAI,CAAC,CAAC;QACxF,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAuC,EAAE,IAAI,CAAC,CAAC;QAC5E,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC,WAAW,CAAC,OAAwC,EAAE,IAAI,CAAC,CAAC;QAC9E,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAiC,EAAE,IAAI,CAAC,CAAC;QAChE,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAuC,EAAE,IAAI,CAAC,CAAC;QAC5E;YACE,kEAAkE;YAClE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAsB;IACtD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,cAAc,CAAI,CAAa,EAAE,EAAU;IACxD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CACnE;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CAAC,GAAoB;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,IAAY,EAAE,IAAY;IAC/D,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AAEjE;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,GAAG,GAAoD,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,KAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,GAA6C,CAAC;AACvD,CAAC"}

package/dist/claude/hooks/session-start.d.ts

@@ -0,0 +1,20 @@
+/**
+ * SessionStart hook — V9 T3.3 Wave 2.
+ *
+ * Fires when a Claude session begins. WOTANN uses this to:
+ *   1. Inject persona / role context if a customSystemPrompt is configured.
+ *   2. Replay any WAL state from a prior crashed session (per WAL Protocol
+ *      `~/.claude/rules/wal-protocol.md`).
+ *   3. Record the session id for downstream telemetry correlation.
+ *
+ * Returns `inject` with the recovered context if WAL recovery hits anything,
+ * else `allow`. The Claude SDK threads `additionalContext` into the model's
+ * first system turn.
+ */
+import type { HookHandler, SessionStartPayload, HookDecision } from "../types.js";
+/**
+ * Build the SessionStart handler. Closes over deps so the HTTP server can
+ * register it with `(payload) => handler(payload, deps)`.
+ */
+export declare function createSessionStartHandler(): HookHandler<SessionStartPayload, HookDecision>;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/claude/hooks/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../../src/claude/hooks/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAY,MAAM,aAAa,CAAC;AAE5F;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,WAAW,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAwC1F"}

package/dist/claude/hooks/session-start.js

@@ -0,0 +1,55 @@
+/**
+ * SessionStart hook — V9 T3.3 Wave 2.
+ *
+ * Fires when a Claude session begins. WOTANN uses this to:
+ *   1. Inject persona / role context if a customSystemPrompt is configured.
+ *   2. Replay any WAL state from a prior crashed session (per WAL Protocol
+ *      `~/.claude/rules/wal-protocol.md`).
+ *   3. Record the session id for downstream telemetry correlation.
+ *
+ * Returns `inject` with the recovered context if WAL recovery hits anything,
+ * else `allow`. The Claude SDK threads `additionalContext` into the model's
+ * first system turn.
+ */
+/**
+ * Build the SessionStart handler. Closes over deps so the HTTP server can
+ * register it with `(payload) => handler(payload, deps)`.
+ */
+export function createSessionStartHandler() {
+    return async function sessionStart(payload, deps) {
+        const recovered = [];
+        // 1) WAL replay — only on a resumed session. Fresh sessions skip this.
+        if (payload.resumed && deps.memoryRecall) {
+            try {
+                const wal = await deps.memoryRecall(`__wal__:${payload.sessionId}`, payload.sessionId);
+                if (wal.hits > 0 && wal.contextBlock.trim().length > 0) {
+                    recovered.push(`## Recovered session state (WAL replay)\n\n${wal.contextBlock.trim()}`);
+                }
+            }
+            catch {
+                // Swallow — WAL read failure is recoverable; session continues.
+            }
+        }
+        // 2) Boot-time memory recall — pull recent session summaries so the
+        //    model knows where it left off across the long-context window.
+        if (deps.memoryRecall) {
+            try {
+                const recent = await deps.memoryRecall("session_summary", payload.sessionId);
+                if (recent.hits > 0) {
+                    recovered.push(`## Recent session memory (top ${recent.hits})\n\n${recent.contextBlock.trim()}`);
+                }
+            }
+            catch {
+                // Swallow — boot recall is advisory.
+            }
+        }
+        if (recovered.length === 0) {
+            return { action: "allow" };
+        }
+        return {
+            action: "inject",
+            additionalContext: recovered.join("\n\n---\n\n"),
+        };
+    };
+}
+//# sourceMappingURL=session-start.js.map

package/dist/claude/hooks/session-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.js","sourceRoot":"","sources":["../../../src/claude/hooks/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,KAAK,UAAU,YAAY,CAAC,OAAO,EAAE,IAAc;QACxD,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,uEAAuE;QACvE,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACvF,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvD,SAAS,CAAC,IAAI,CAAC,8CAA8C,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,mEAAmE;QACnE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7E,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBACpB,SAAS,CAAC,IAAI,CACZ,iCAAiC,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CACjF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,iBAAiB,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/claude/hooks/stop.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Stop hook — V9 T3.3 Wave 2.
+ *
+ * Fires when the model wants to terminate the turn (assistant has no tool
+ * calls pending, no further reasoning to do). WOTANN's Reflector inspects
+ * the turn for completion verification:
+ *
+ *   - If Reflector says "complete", the model is allowed to stop.
+ *   - If Reflector says "incomplete", we return `decision: "block"` with an
+ *     `additionalContext` that nudges the model to keep working. The model
+ *     receives this as a system message before its next turn.
+ *
+ * This is the V9 verify-before-done bar in action — the model can't
+ * unilaterally claim "done" until the Reflector confirms the requested work
+ * is actually verified.
+ */
+import type { HookHandler, StopPayload, StopDecision } from "../types.js";
+export declare function createStopHandler(): HookHandler<StopPayload, StopDecision>;
+//# sourceMappingURL=stop.d.ts.map

package/dist/claude/hooks/stop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.d.ts","sourceRoot":"","sources":["../../../src/claude/hooks/stop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAY,MAAM,aAAa,CAAC;AAEpF,wBAAgB,iBAAiB,IAAI,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CA0C1E"}

package/dist/claude/hooks/stop.js

@@ -0,0 +1,57 @@
+/**
+ * Stop hook — V9 T3.3 Wave 2.
+ *
+ * Fires when the model wants to terminate the turn (assistant has no tool
+ * calls pending, no further reasoning to do). WOTANN's Reflector inspects
+ * the turn for completion verification:
+ *
+ *   - If Reflector says "complete", the model is allowed to stop.
+ *   - If Reflector says "incomplete", we return `decision: "block"` with an
+ *     `additionalContext` that nudges the model to keep working. The model
+ *     receives this as a system message before its next turn.
+ *
+ * This is the V9 verify-before-done bar in action — the model can't
+ * unilaterally claim "done" until the Reflector confirms the requested work
+ * is actually verified.
+ */
+export function createStopHandler() {
+    return async function stop(payload, deps) {
+        if (!deps.reflect) {
+            // No reflector wired — allow termination (honest stub).
+            return { decision: "allow" };
+        }
+        let verdict;
+        try {
+            verdict = await deps.reflect(payload);
+        }
+        catch (err) {
+            // Reflector crashed — allow termination rather than trapping the
+            // model in a forever-loop. The error is surfaced through the
+            // Observer subsystem (PostToolUse → recordError side-effect) for
+            // post-mortem analysis.
+            void err;
+            return { decision: "allow" };
+        }
+        if (verdict.complete) {
+            return { decision: "allow" };
+        }
+        const hint = verdict.hint ? `\n\n**Hint**: ${verdict.hint}` : "";
+        const additionalContext = [
+            "## Verification check failed",
+            "",
+            `WOTANN's Reflector inspected your turn and concluded the requested`,
+            `work is **not yet complete**.`,
+            "",
+            `**Reason**: ${verdict.reason}${hint}`,
+            "",
+            `Continue working — run the missing verification step (test / build`,
+            `/ lint), surface evidence, then close the turn.`,
+        ].join("\n");
+        return {
+            decision: "block",
+            additionalContext,
+            reason: verdict.reason,
+        };
+    };
+}
+//# sourceMappingURL=stop.js.map

package/dist/claude/hooks/stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.js","sourceRoot":"","sources":["../../../src/claude/hooks/stop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,UAAU,IAAI,CAAC,OAAoB,EAAE,IAAc;QAC7D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,wDAAwD;YACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,OAA8D,CAAC;QACnE,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iEAAiE;YACjE,6DAA6D;YAC7D,iEAAiE;YACjE,wBAAwB;YACxB,KAAK,GAAG,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,iBAAiB,GAAG;YACxB,8BAA8B;YAC9B,EAAE;YACF,oEAAoE;YACpE,+BAA+B;YAC/B,EAAE;YACF,eAAe,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE;YACtC,EAAE;YACF,oEAAoE;YACpE,iDAAiD;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,iBAAiB;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/claude/hooks/user-prompt-submit.d.ts

@@ -0,0 +1,20 @@
+/**
+ * UserPromptSubmit hook — V9 T3.3 Wave 2.
+ *
+ * Fires when the user types a message and presses Enter. WOTANN uses this to:
+ *   1. Run the MemoryInjector — pull TEMPR-ranked memory hits and prepend
+ *      them as `additionalContext`.
+ *   2. Run the SkillDispatcher — match keywords / intent and load any
+ *      relevant skill bodies into the same context block.
+ *
+ * Returns `inject` with the combined context. If both subsystems return
+ * empty, returns `allow` so Claude proceeds with the raw prompt.
+ *
+ * Two-phase rationale: MemoryInjector and SkillDispatcher are dispatched
+ * concurrently because they read disjoint subsystems (FTS5 vs skill
+ * registry) and have no inter-dependency. Combined latency budget is
+ * ≤200ms p50; either one alone is ~80ms.
+ */
+import type { HookHandler, UserPromptSubmitPayload, HookDecision } from "../types.js";
+export declare function createUserPromptSubmitHandler(): HookHandler<UserPromptSubmitPayload, HookDecision>;
+//# sourceMappingURL=user-prompt-submit.d.ts.map

package/dist/claude/hooks/user-prompt-submit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-prompt-submit.d.ts","sourceRoot":"","sources":["../../../src/claude/hooks/user-prompt-submit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,uBAAuB,EAAE,YAAY,EAAY,MAAM,aAAa,CAAC;AAEhG,wBAAgB,6BAA6B,IAAI,WAAW,CAC1D,uBAAuB,EACvB,YAAY,CACb,CAkCA"}