Function run

hooks_src/external-action-gate.js:69–188

(input)

    `[Citadel] External-action policy check failed closed (${reason}).\n` +
    `The command was not run. Repair the hook input or policy configuration before retrying.\n`,
    { reason }
  );
  process.exit(2);
}

function readGatePolicy() {
  const sourcePath = path.join(health.PROJECT_ROOT, '.claude', 'harness.json');
  if (fs.existsSync(sourcePath)) {
    const raw = JSON.parse(fs.readFileSync(sourcePath, 'utf8'));
    // Validate the source policy even if activation later falls back to an
    // effective/default receipt. A malformed safety policy must not disappear.
    readExternalActionPolicy(raw);
  }
  return readExternalActionPolicy(health.readConfig());
}

function main() {
  let input = '';
  process.stdin.setEncoding('utf8');
  process.stdin.on('data', (chunk) => { input += chunk; });
  process.stdin.on('end', () => {
    try {
      run(input);
    } catch (error) {
      failClosed('runtime-failure', error);
    }
  });
}

function run(input) {
  let event;
  try {
    event = JSON.parse(input);
  } catch (error) {
    failClosed('parse-failure', error);
  }

  if (!event || typeof event !== 'object' || Array.isArray(event)) {
    failClosed('invalid-input', new TypeError('hook input must be an object'));
  }

  if (typeof event.tool_name !== 'string' || !event.tool_name) {
    failClosed('invalid-input', new TypeError('tool_name must be a non-empty string'));
  }

  if (event.tool_name !== 'Bash') process.exit(0);

  if (!event.tool_input || typeof event.tool_input !== 'object' || Array.isArray(event.tool_input)) {
    failClosed('invalid-input', new TypeError('Bash tool_input must be an object'));
  }
  const command = event.tool_input.command;
  if (typeof command !== 'string' || !command.trim()) {
    failClosed('invalid-input', new TypeError('Bash command must be a non-empty string'));
  }

  const policy = readGatePolicy();
  const action = detectExternalAction(command, policy);