Append debug message to log file with timestamp.

Execute callback with exclusive access to the state file. The callback receives the state dict and can modify it in place. State is saved

Render a vuln list into the user-facing guidance block. Shared by analyze_code_security, agentic_review, and the late-dedup paths in the Stop

Absolute repo root for `cwd`, or None if not in a work tree.

Write a SyncHookJSONOutput line to stdout for Claude Code to pick up. For asyncRewake (Stop) hooks, CC scans stdout for the first {-prefixed

Evaluate all rules and return combined results. Checks all rules and accumulates matches. Blocking rules take priority over warning r

Use Haiku to perform a security review of code. files: list of (file_path, content_or_diff) tuples is_diff: if True, the content is a uni

Load all hookify rules from .claude directory. Args: event: Optional event filter ("bash", "file", "stop", etc.) Returns: Li

Cap per-file and total content bytes before they're packed into the review prompt. Returns the capped (path, content) list. Sets module-level

Drop vulns that a CONCURRENT asyncRewake hook wrote to previous_findings while this hook's LLM was running. `prompted` is the (filePath, cate

One-liner for the user-facing task-notification summary. The full guidance goes to the model via stderr; this is the line the user actually s

When `diff_files` exceeds `cap`, return the top-`cap` by security relevance plus the count dropped. Otherwise return (diff_files, 0). Score =

Parse unified diff output into a list of (file_path, diff_content) tuples. Only includes files with source code extensions.

Agentic commit review gate. Enabled by default. SG_AGENTIC_COMMIT_REVIEW (=1/on or =0/off) remains as an explicit per-user override for opt-o

Race the agentic reviewer against a delayed single-shot fallback. Agentic starts at t=0. After SG_AGENTIC_RACE_DELAY_S (default 180s), the si

Resolve the Anthropic-protocol endpoint base URL. Honors ANTHROPIC_BASE_URL (the convention the Anthropic SDK and CC itself use) so customers

Record that `shas` were reviewed. Best-effort; never raises. Uses fcntl.flock for the read-gc-write; appends are O_APPEND-atomic but GC needs

Call the configured LLM model with extended thinking and structured outputs. Model defaults to Sonnet 4.6 but can be overridden via SECURITY_

Run prompt through the model 2× in parallel and OR-merge the results. The second look samples the model again on the same prompt — independent

Existing config file paths, lowest precedence first (so concat reads in precedence order user → project → project-local). Truncation is done on

Absolute shared `.git` directory for repo_root. Uses `rev-parse --git-common-dir` so linked worktrees resolve to the SHARED gitdir, not the p

Return the current HEAD SHA, or None if not a git repo / no commits.

Set of full 40-hex shas previously reviewed in this clone.

Return the slice of `bash_output` that contains the push's range lines. `_PUSH_RANGE_RE` is not push-specific — `git fetch` and `git pull` print

Accumulate one API response's token usage. `usage` is the Anthropic `usage` dict (HTTP) or the SDK ResultMessage.usage dict — both use the sam

Yield an env dict pointing GIT_INDEX_FILE at a throwaway copy of the repo's index with `git add --intent-to-add` applied, so untracked files s

Two-stage Agent-SDK review: investigate (Read/Grep/Glob over the repo) then a self-refute filter pass. Returns (guidance_or_None, vulns, metri

Rolling-window rate limit: allow at most `max_per_window` calls per `window_s` seconds, per (session_id, key). Returns (allowed: bool, count_

Check if file path or content matches any security patterns. Returns ALL matches.

Run once. Under a remote/proxied environment, probe api.anthropic.com; if blackholed, scrub NO_PROXY and re-probe. Returns True if reachable (

Extract YAML frontmatter and message body from markdown. Returns (frontmatter_dict, message_body). Supports multi-line dictionary items in l

Create Rule from frontmatter dict and message body.

Get session-specific state file path.

Put consumed touched_paths back so the next Stop reviews them. consume_stop_state cleared touched_paths on disk; if Stop then exits early for

Pack a set of rule names into a bitmask. Bit N set means RuleId(N) matched. User-defined patterns (rule_name starting with "user:") have no static

opts.env for the SDK-spawned inner `claude` CLI. Always neutralizes the fd-passing vars (a stale/closed fd makes the inner CLI runaway-alloca