588e194d59
Removes 9×20 LOC duplication of KEI_DISABLED_HOOKS gate logic from each hook into hooks/_lib/gate.sh. Next CVE in gate path fixes in ONE file, not 9. hooks/_lib/gate.sh (new, 57 LOC) — POSIX sh library, single kei_hook_gate() function. Exact-token tokenize on comma OR space (RED-1 fix preserved). Minimal-profile whitelist baked in: no-hand-edit-agents, assemble-validate, agent-fork-logger, session-end-dump. Idempotent re-source guard. hooks/_lib/test-gate.sh (new, 47 LOC) — 11 test cases covering empty/comma/space/whitespace/substring-NOT-match/literal 'all'/ minimal-profile included+excluded/minimal+disabled combo. Per-hook shim (exactly 2 LOC, same in all 9): _KEI_LIB="$(dirname "$0")/_lib/gate.sh" if [ -r "$_KEI_LIB" ]; then . "$_KEI_LIB"; kei_hook_gate "<name>" || exit 0; fi Net LOC delta: −171 (hooks) +104 (lib new) +15 (installer) = −52. Gate semantics bit-identical to v0.15.1 hotfix on the 6 enumerated behaviors; off/advisory-off profile values dropped per spec (only 'minimal' recognized, any other = full). Fail-open on missing lib — if _lib/gate.sh absent (old install pre-v0.17), hook falls through to normal operation. install.sh — +15 LOC copies hooks/_lib/*.sh to $HOOKS_DIR/_lib/, preserving relative path the shim expects. Note: v0.16 split this file; A1 worktree was based on pre-split main — merge into current main required resolving conflict so _lib-copy logic moved to install/lib-hooks.sh. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
48 lines
1.6 KiB
Bash
Executable file
48 lines
1.6 KiB
Bash
Executable file
#!/bin/sh
|
|
# PostToolUse(Edit|Write) — auto-regenerate agent .md files.
|
|
#
|
|
# Trigger logic:
|
|
# - manifest edited (_manifests/<name>.toml) → rebuild that one agent
|
|
# - block edited (_blocks/<name>.md) → rebuild ALL agents
|
|
# - otherwise → no-op
|
|
#
|
|
# Stdin: JSON with tool_input.file_path
|
|
# Exit 0 always (non-blocking advisory)
|
|
|
|
# Silent fall-through if jq is absent; otherwise `set -eu` would abort and
|
|
# Claude Code would refuse the tool call system-wide.
|
|
command -v jq >/dev/null 2>&1 || exit 0
|
|
|
|
_KEI_LIB="$(dirname "$0")/_lib/gate.sh"
|
|
if [ -r "$_KEI_LIB" ]; then . "$_KEI_LIB"; kei_hook_gate "assemble-agents" || exit 0; fi
|
|
|
|
set -eu
|
|
|
|
ASSEMBLER="$HOME/.claude/agents/_assembler/target/release/assemble"
|
|
[ -x "$ASSEMBLER" ] || exit 0
|
|
|
|
FILE=$(jq -r '.tool_input.file_path // empty')
|
|
[ -n "$FILE" ] || exit 0
|
|
|
|
case "$FILE" in
|
|
*/agents/_manifests/*.toml)
|
|
# Single-manifest rebuild
|
|
"$ASSEMBLER" --in-place "$FILE" 2>&1 | sed 's/^/[assemble-agents] /'
|
|
;;
|
|
*/agents/_blocks/*.md)
|
|
# Block changed → rebuild everything (block is shared).
|
|
# Always surface FAIL/ERROR lines; truncate only the OK tail.
|
|
echo "[assemble-agents] block changed, rebuilding all agents..."
|
|
OUTPUT=$("$ASSEMBLER" --in-place 2>&1 || true)
|
|
FAILS=$(printf '%s\n' "$OUTPUT" | grep -E '^(FAIL|ERROR)' || true)
|
|
if [ -n "$FAILS" ]; then
|
|
printf '%s\n' "$FAILS" | sed 's/^/[assemble-agents] /'
|
|
fi
|
|
printf '%s\n' "$OUTPUT" | sed 's/^/[assemble-agents] /' | head -40
|
|
;;
|
|
*)
|
|
exit 0
|
|
;;
|
|
esac
|
|
|
|
exit 0
|