sepehr
89a3474512
All checks were successful
Deploy to Production / Build and Deploy (push) Successful in 2m19s
80 lines
2.7 KiB
JavaScript
80 lines
2.7 KiB
JavaScript
#!/usr/bin/env node
|
|
/**
|
|
* Impeccable design hook — PostToolUse + Stop entry point.
|
|
*
|
|
* Reads the Claude Code / Codex / Cursor / Grok Build hook event from stdin
|
|
* and routes by Stop vs everything else. Claude uses `hook_event_name:
|
|
* "Stop"`; Grok uses `hookEventName: "stop"`.
|
|
*
|
|
* - PostToolUse: runs the immediate-tier detector rules against the touched
|
|
* file and emits a system reminder via
|
|
* `hookSpecificOutput.additionalContext` when findings exist. Grok
|
|
* discards that stdout; the scan still warms the session cache for Stop.
|
|
* - Stop: runs the FULL detector rule set over every UI file touched this
|
|
* session (the deep pass), deduped against what the per-edit pass already
|
|
* surfaced, and emits once via the harness-specific continuation channel.
|
|
*
|
|
* Contract: never break a turn. Always exit 0. Clean files emit a small ack
|
|
* unless quiet mode is enabled; a clean Stop pass is silent.
|
|
*
|
|
* Most logic lives in `hook-lib.mjs` so it is unit-testable without a
|
|
* subprocess. This file is the thin stdin/stdout adapter.
|
|
*/
|
|
|
|
import { runHook, runStopHook, writeAuditLog, isStopEvent } from './hook-lib.mjs';
|
|
|
|
async function readStdin() {
|
|
if (process.stdin.isTTY) return '';
|
|
const chunks = [];
|
|
for await (const chunk of process.stdin) chunks.push(chunk);
|
|
return Buffer.concat(chunks).toString('utf-8');
|
|
}
|
|
|
|
function stdinIsStop(stdinJson) {
|
|
try {
|
|
return isStopEvent(JSON.parse(stdinJson));
|
|
} catch {
|
|
// Malformed stdin falls through to runHook, which audits the skip.
|
|
return false;
|
|
}
|
|
}
|
|
|
|
async function main() {
|
|
// Snapshot the inherited env FIRST so the re-entrancy guard checks the
|
|
// parent's value, not the value we are about to export for any child
|
|
// processes the hook might ever spawn.
|
|
const inheritedEnv = { ...process.env };
|
|
process.env.IMPECCABLE_HOOK_DEPTH = process.env.IMPECCABLE_HOOK_DEPTH || '1';
|
|
|
|
let stdinJson = '';
|
|
try { stdinJson = await readStdin(); } catch { /* fall through */ }
|
|
|
|
const run = stdinIsStop(stdinJson) ? runStopHook : runHook;
|
|
const result = await run({
|
|
stdinJson,
|
|
env: inheritedEnv,
|
|
cwd: process.cwd(),
|
|
});
|
|
|
|
writeAuditLog(process.env, result.audit, process.cwd());
|
|
|
|
if (result.stdout) process.stdout.write(result.stdout);
|
|
process.exit(result.exitCode || 0);
|
|
}
|
|
|
|
main().catch((err) => {
|
|
// Last-ditch: never break the agent's turn even if something we did not
|
|
// anticipate goes wrong. Audit-log the failure if logging is enabled.
|
|
try {
|
|
writeAuditLog(process.env, {
|
|
ts: new Date().toISOString(),
|
|
event: 'hook-error',
|
|
error: String(err && err.message ? err.message : err),
|
|
});
|
|
} catch { /* swallow */ }
|
|
if (process.env.IMPECCABLE_HOOK_DEBUG) {
|
|
process.stderr.write(`[impeccable-hook] ${err}\n`);
|
|
}
|
|
process.exit(0);
|
|
});
|