Append debug message to log file with timestamp.

Write a SyncHookJSONOutput line to stdout for Claude Code to pick up. For asyncRewake (Stop) hooks, CC scans stdout for the first {-prefixed

Execute callback with exclusive access to the state file. The callback receives the state dict and can modify it in place. State is saved

Render a vuln list into the user-facing guidance block. Shared by analyze_code_security, agentic_review, and the late-dedup paths in the Stop

Absolute repo root for `cwd`, or None if not in a work tree.

Record an HTTP error from an LLM API call. `status` is the HTTP status code (integer 400–599) or -1 for network/timeout errors. Stored in `_US

Use Haiku to perform a security review of code. files: list of (file_path, content_or_diff) tuples is_diff: if True, the content is a uni

Evaluate all rules and return combined results. Checks all rules and accumulates matches. Blocking rules take priority over warning r

Call the configured LLM model with extended thinking and structured outputs. Model defaults to Sonnet 4.6 but can be overridden via SECURITY_

Generate HTML report from loop output data. If auto_refresh is True, adds a meta refresh tag.

Load all hookify rules from .claude directory. Args: event: Optional event filter ("bash", "file", "stop", etc.) Returns: Li

Parse a SKILL.md file, returning (name, description, full_content).

Record that `shas` were reviewed. Best-effort; never raises. Uses fcntl.flock for the read-gc-write; appends are O_APPEND-atomic but GC needs

Cap per-file and total content bytes before they're packed into the review prompt. Returns the capped (path, content) list. Sets module-level

Drop vulns that a CONCURRENT asyncRewake hook wrote to previous_findings while this hook's LLM was running. `prompted` is the (filePath, cate

One-liner for the user-facing task-notification summary. The full guidance goes to the model via stderr; this is the line the user actually s

When `diff_files` exceeds `cap`, return the top-`cap` by security relevance plus the count dropped. Otherwise return (diff_files, 0). Score =

Accumulate one API response's token usage. `usage` is the Anthropic `usage` dict (HTTP) or the SDK ResultMessage.usage dict — both use the sam

Calculate mean, stddev, min, max for a list of values.

Check if file path or content matches any security patterns. Returns ALL matches.

Recursively find directories that contain an outputs/ subdirectory.

Parse unified diff output into a list of (file_path, diff_content) tuples. Only includes files with source code extensions.

Agentic commit review gate. Enabled by default. SG_AGENTIC_COMMIT_REVIEW (=1/on or =0/off) remains as an explicit per-user override for opt-o

Race the agentic reviewer against a delayed single-shot fallback. Agentic starts at t=0. After SG_AGENTIC_RACE_DELAY_S (default 180s), the si

opts.env for the SDK-spawned inner `claude` CLI. Always neutralizes the fd-passing vars (a stale/closed fd makes the inner CLI runaway-alloca

Resolve the Anthropic-protocol endpoint base URL. Honors ANTHROPIC_BASE_URL (the convention the Anthropic SDK and CC itself use) so customers

Run `claude -p` with the prompt on stdin and return the text response. Prompt goes over stdin (not argv) because it embeds the full SKILL.md

Run prompt through the model 2× in parallel and OR-merge the results. The second look samples the model again on the same prompt — independent

Existing config file paths, lowest precedence first (so concat reads in precedence order user → project → project-local). Truncation is done on

Map err_kind string to its telemetry integer code, or 0 if unset. Direct hits use the static map; "exc:<X>" and "other:<tail>" both collapse t

Absolute shared `.git` directory for repo_root. Uses `rev-parse --git-common-dir` so linked worktrees resolve to the SHARED gitdir, not the p

Return the set of repo-root-relative paths that differ from `base`, or None if git failed (unresolvable ref, not a repo, timeout). Callers mus

Return the current HEAD SHA, or None if not a git repo / no commits.

Prepend the agent-SDK venv's site-packages to sys.path so the SDK import below picks it up when the user's system Python doesn't have it. Cal

A subprocess killed by a signal rather than a clean non-zero exit. subprocess.run (no shell, as used here) reports negative rc = -signum (SIGK

Set of full 40-hex shas previously reviewed in this clone.

Return the slice of `bash_output` that contains the push's range lines. `_PUSH_RANGE_RE` is not push-specific — `git fetch` and `git pull` print

Yield an env dict pointing GIT_INDEX_FILE at a throwaway copy of the repo's index with `git add --intent-to-add` applied, so untracked files s

Start/refresh the signal-kill cooldown so we stop re-attempting a build that keeps getting killed every session. Best-effort.

Two-stage Agent-SDK review: investigate (Read/Grep/Glob over the repo) then a self-refute filter pass. Returns (guidance_or_None, vulns, metri

Rolling-window rate limit: allow at most `max_per_window` calls per `window_s` seconds, per (session_id, key). Returns (allowed: bool, count_

Run once. Under a remote/proxied environment, probe api.anthropic.com; if blackholed, scrub NO_PROXY and re-probe. Returns True if reachable (

Extract YAML frontmatter and message body from markdown. Returns (frontmatter_dict, message_body). Supports multi-line dictionary items in l