78 lines
2.6 KiB
JavaScript
78 lines
2.6 KiB
JavaScript
#!/usr/bin/env node
|
|
// ponytail — Claude Code SubagentStart hook
|
|
//
|
|
// SessionStart context is parent-thread only and never reaches subagents, so
|
|
// without this every Task-spawned agent runs ponytail-unaware (issue #252).
|
|
// When ponytail mode is active, inject the same ruleset into each subagent.
|
|
//
|
|
// Scoping (opt-in, issue #506): set PONYTAIL_SUBAGENT_MATCHER to a regex and
|
|
// the ruleset is injected only into subagents whose agent_type matches. The
|
|
// regex is unanchored and case-insensitive — "explore|general" matches either,
|
|
// "^general$" is exact. Unset means inject into every subagent, as before.
|
|
|
|
const { getPonytailInstructions } = require('./ponytail-instructions');
|
|
const { readMode, writeHookOutput } = require('./ponytail-runtime');
|
|
|
|
const mode = readMode();
|
|
|
|
// Absent flag or off → ponytail isn't active; inject nothing.
|
|
if (!mode || mode === 'off') {
|
|
process.exit(0);
|
|
}
|
|
|
|
function inject() {
|
|
try {
|
|
writeHookOutput('SubagentStart', mode, getPonytailInstructions(mode));
|
|
} catch (e) {
|
|
// Silent fail — a stdout error at hook exit must not surface as a hook failure.
|
|
}
|
|
}
|
|
|
|
// A bad regex must never crash the hook; treat it as "no matcher" and inject.
|
|
let matcherRe = null;
|
|
try {
|
|
if (process.env.PONYTAIL_SUBAGENT_MATCHER) {
|
|
matcherRe = new RegExp(process.env.PONYTAIL_SUBAGENT_MATCHER, 'i');
|
|
}
|
|
} catch (e) {
|
|
matcherRe = null;
|
|
}
|
|
|
|
// No matcher → keep the original synchronous, stdin-independent path. On Windows
|
|
// the PowerShell `if {}` wrapper can swallow the piped JSON so stdin 'end' never
|
|
// fires (#443); the default path must not wait on stdin or it would stall every
|
|
// subagent spawn.
|
|
if (!matcherRe) {
|
|
inject();
|
|
process.exit(0);
|
|
}
|
|
|
|
// Matcher set → read agent_type from stdin and skip only on a definite
|
|
// mismatch. Missing/unparseable agent_type, a stdin error, or the timeout all
|
|
// fail open (inject), so scoping never silently drops the persona.
|
|
let input = '';
|
|
let done = false;
|
|
|
|
function finish() {
|
|
if (done) return;
|
|
done = true;
|
|
|
|
let agentType = '';
|
|
try {
|
|
// Strip UTF-8 BOM some shells prepend when piping (breaks JSON.parse)
|
|
agentType = String(JSON.parse(input.replace(/^\uFEFF/, '')).agent_type || '').trim();
|
|
} catch (e) {
|
|
// Unparseable payload — fall through and inject to be safe.
|
|
}
|
|
if (agentType && !matcherRe.test(agentType)) {
|
|
process.exit(0);
|
|
}
|
|
inject();
|
|
}
|
|
|
|
process.stdin.on('data', chunk => { input += chunk; });
|
|
process.stdin.on('end', finish);
|
|
// Never block the session (#443): recover on stdin error or a short fallback.
|
|
process.stdin.on('error', () => { finish(); process.exit(0); });
|
|
setTimeout(() => { finish(); process.exit(0); }, 1000).unref();
|