Extract content to check from tool input based on tool type.

Filter out pre-existing content from diff files. When a file is fully rewritten (Write tool replaces entire content), git shows all lines

Get the content of a file at the baseline SHA. Returns None if unavailable.

Get the git diff between the baseline SHA and the current working tree, including untracked (new) files. Uses a temporary copy of the gi

Get session-specific lock file path.

PostToolUse handler for Bash — reviews git commits for security issues. Runs as asyncRewake: detects `git commit` in the Bash command, parses

Review the just-pushed range as one diff, advancing the base past the contiguous prefix of already-per-commit-reviewed shas. Spec: review `gi

Handle the Stop hook — final security check using git diff. Diffs against the baseline SHA captured at UserPromptSubmit to review only co

Handle UserPromptSubmit — capture git baseline SHA. Called on every user prompt. Updates the baseline so the stop hook only reviews chang

Gate for the commit-review PostToolUse[Bash] hook. Commit review is enabled by default; ENABLE_COMMIT_REVIEW=0 remains the unconditional kill

Gate for the push-sweep PostToolUse[Bash] hook. Enabled by default. ENABLE_COMMIT_REVIEW=0 remains the unconditional kill switch (push-sweep

Load the git baseline SHA from state.

Load a single rule file. Returns: Rule object or None if file is invalid.

Load the full state dict from file.

Run the bootstrap. Returns (outcome, err_phase, err_kind). err_phase / err_kind are non-empty only on BUILD_FAILED — they let telemetry split

Main hook function.

Main entry point for PostToolUse hook.

Main entry point for PreToolUse hook.

Main entry point for UserPromptSubmit hook.

Main entry point for Stop hook.

Mark file:rule pairs as pending for the Stop-hook outcome sweep.

Append a file path to the touched_paths list (deduped, capped at 200). Stop is the consumer and clears under the same lock it reads with; UPS