Commit Graph
4 Commits
Author SHA1 Message Date
Affaan Mustafa c1ac0acfab fix: harden Hookify review follow-ups 2026-07-26 05:49:36 -04:00
Affaan Mustafa ca26e35e9c fix: close Hookify runtime review gaps 2026-07-26 05:38:49 -04:00
Affaan Mustafa 396fadc784 fix: pin Hookify rules before path inspection
Open rule files before trusting path metadata, compare the descriptor identity to the live path, and only then validate containment and read bytes. Replace the unsafe temp-file race simulation with an open-first descriptor/path-swap regression.
2026-07-26 05:16:06 -04:00
Affaan Mustafa 504261d069 fix: wire Hookify runtime enforcement
Load bounded project-local Hookify rules, evaluate untrusted regexes in a resource-limited worker, and emit event-correct structured warn/block outputs for PreToolUse, PostToolUse, UserPromptSubmit, and Stop. Register bounded entrypoints, prevent recursive Stop loops, document the runtime contract, and package the implementation.\n\nCloses #2561
2026-07-26 05:07:34 -04:00