Cap per-file and total diff bytes; return (capped_files, bytes_dropped). Truncation markers are written inside the content so the reviewer kn

Capture a git ref representing the current working tree state. Uses `git stash create` which creates a commit object for the current state

Remove state files and lock files older than 30 days.

Compile regex pattern with caching. Args: pattern: Regex pattern string Returns: Compiled regex pattern

v2 diff strategy: derive the review set from git state alone. review_set = (files dirty vs current HEAD, plus files committed this turn when

Atomically snapshot all state the Stop hook needs and clear touched_paths. The Stop hook is asyncRewake — it runs in the background after Claude'

Extract content to check from tool input based on tool type.

Filter out pre-existing content from diff files. When a file is fully rewritten (Write tool replaces entire content), git shows all lines

Get the content of a file at the baseline SHA. Returns None if unavailable.

Get the git diff between the baseline SHA and the current working tree, including untracked (new) files. Uses a temporary copy of the gi

Get session-specific lock file path.

PostToolUse handler for Bash — reviews git commits for security issues. Runs as asyncRewake: detects `git commit` in the Bash command, parses

Review the just-pushed range as one diff, advancing the base past the contiguous prefix of already-per-commit-reviewed shas. Spec: review `gi

Handle the Stop hook — final security check using git diff. Diffs against the baseline SHA captured at UserPromptSubmit to review only co

Handle UserPromptSubmit — capture git baseline SHA. Called on every user prompt. Updates the baseline so the stop hook only reviews chang

Gate for the commit-review PostToolUse[Bash] hook. Commit review is enabled by default; ENABLE_COMMIT_REVIEW=0 remains the unconditional kill

Gate for the push-sweep PostToolUse[Bash] hook. Enabled by default. ENABLE_COMMIT_REVIEW=0 remains the unconditional kill switch (push-sweep

Load the git baseline SHA from state.

Load a single rule file. Returns: Rule object or None if file is invalid.

Load the full state dict from file.

Run the bootstrap. Returns (outcome, err_phase, err_kind). err_phase / err_kind are non-empty only on BUILD_FAILED — they let telemetry split

Main hook function.

Main entry point for PostToolUse hook.

Main entry point for PreToolUse hook.

Main entry point for UserPromptSubmit hook.

Main entry point for Stop hook.

Mark file:rule pairs as pending for the Stop-hook outcome sweep.

Append a file path to the touched_paths list (deduped, capped at 200). Stop is the consumer and clears under the same lock it reads with; UPS

Save the full state dict to file.

Stop-hook final sweep. Re-read every file in pending_warnings, re-check patterns, and return (fixed, unresolved, unresolved_mask). Clears sta

Initialize rule engine.

Run a higher-level security concerns analysis on files/diffs. Identifies AREAS OF CONCERN that the main model should investigate. Returns

Atomically check if a counter has reached its limit and increment if not. Returns True if the counter is below max_count (should proceed),

Extract file paths from unified diff output (without content). Only includes files with source code extensions. Returns a list of file pa

Medium-included is the validated default; the model's investigate-stage severity is conservative and dropping mediums before self-refute filters

Render findings as the same text block the CC plugin emits to Claude.

Create Condition from dict.

The wrapped <project-security-guidance> block, or empty string.

Load project-specific guidance and patterns once per hook invocation. Called from the hook's main() before dispatching. Failures are non-fatal —

Save the git baseline SHA to state.

SOFT diff-intersect: tag each candidate ``_diff_anchor: "in_diff" | "off_diff"`` and sort in_diff first; do NOT drop. Investigate reads full

User-supplied pattern rules in the same shape as SECURITY_PATTERNS.