True for models that reject the budget_tokens thinking form (4.6+).

Read a YAML or JSON config file. Returns None on missing/malformed.

Encode plugin.json version "M.m.p" as M*10000 + m*100 + p so it fits the bool|number metrics constraint. Returns 0 if unreadable.

Check if pattern matches text using regex. Args: pattern: Regex pattern text: Text to match against Returns:

For a `git commit --amend` we just ran, return the pre-amend SHA via reflog, or None if it can't be safely determined. expected_post_sha: the

Check if rule matches input data. Args: rule: Rule to evaluate input_data: Hook input data Returns:

Snapshot the accumulator as metric keys. Returns {} when no API calls were made so skip-path emits don't burn key budget. cost_usd rounded to

Validate one user pattern entry. Returns a rule dict in the same shape as the built-in SECURITY_PATTERNS, or None if invalid (logged).

Atomically check if a warning has been shown and mark it as shown if not. Returns True if this is the first time seeing this warning (should

Cap per-file and total diff bytes; return (capped_files, bytes_dropped). Truncation markers are written inside the content so the reviewer kn

Capture a git ref representing the current working tree state. Uses `git stash create` which creates a commit object for the current state

Remove state files and lock files older than 30 days.

Compile regex pattern with caching. Args: pattern: Regex pattern string Returns: Compiled regex pattern

v2 diff strategy: derive the review set from git state alone. review_set = (files dirty vs current HEAD, plus files committed this turn when

Atomically snapshot all state the Stop hook needs and clear touched_paths. The Stop hook is asyncRewake — it runs in the background after Claude'

Extract content to check from tool input based on tool type.

Filter out pre-existing content from diff files. When a file is fully rewritten (Write tool replaces entire content), git shows all lines

Get the content of a file at the baseline SHA. Returns None if unavailable.

Get the git diff between the baseline SHA and the current working tree, including untracked (new) files. Uses a temporary copy of the gi

Get session-specific lock file path.

PostToolUse handler for Bash — reviews git commits for security issues. Runs as asyncRewake: detects `git commit` in the Bash command, parses

Review the just-pushed range as one diff, advancing the base past the contiguous prefix of already-per-commit-reviewed shas. Spec: review `gi

Handle the Stop hook — final security check using git diff. Diffs against the baseline SHA captured at UserPromptSubmit to review only co

Handle UserPromptSubmit — capture git baseline SHA. Called on every user prompt. Updates the baseline so the stop hook only reviews chang

Gate for the commit-review PostToolUse[Bash] hook. Commit review is enabled by default; ENABLE_COMMIT_REVIEW=0 remains the unconditional kill

Gate for the push-sweep PostToolUse[Bash] hook. Enabled by default. ENABLE_COMMIT_REVIEW=0 remains the unconditional kill switch (push-sweep

Load the git baseline SHA from state.

Load a single rule file. Returns: Rule object or None if file is invalid.

Load the full state dict from file.

Run the bootstrap. Returns (outcome, err_phase, err_kind). err_phase / err_kind are non-empty only on BUILD_FAILED — they let telemetry split

Main hook function.

Main entry point for PostToolUse hook.

Main entry point for PreToolUse hook.

Main entry point for UserPromptSubmit hook.

Main entry point for Stop hook.