Find the project root by walking up from cwd looking for .claude/. Mimics how Claude Code discovers its project root, so the command file we

Create Rule from frontmatter dict and message body.

Generate the complete standalone HTML page with embedded data.

Get the git diff between the baseline SHA and the current working tree, including untracked (new) files. Uses a temporary copy of the gi

Get session-specific state file path.

Call Claude to improve the description based on eval results.

Load the full state dict from file.

Put consumed touched_paths back so the next Stop reviews them. consume_stop_state cleared touched_paths on disk; if Stop then exits early for

Pack a set of rule names into a bitmask. Bit N set means RuleId(N) matched. User-defined patterns (rule_name starting with "user:") have no static

Run the full eval set and return results.

Save the full state dict to file.

Basic validation of a skill

Manually replicate the pywin32 `.pth` bootstrap so a venv added via `sys.path.insert()` (not site.py) can still import `pywintypes`. No-op whe

Fallback install when `python -m venv` can't bootstrap pip (ensurepip missing — Debian python3-venv absent, or a python.org/pyenv build without

Single-turn SDK call as a substitute for the HTTP _call_claude path on 3P providers. Uses the same `output_format` JSON-schema contract so the

Check if a single condition matches. Args: condition: Condition to check tool_name: Tool being used tool_

De-dupe across hooks.json `if` matchers firing for the same Bash call. `git commit -m x && git push` matches both `Bash(git commit:*)` and `B

Advance the diff base past the contiguous reviewed prefix. Spec: review `git diff B..HEAD` where `B` is the newest commit such that `prev_ups

Seconds left in the signal-kill cooldown (0 if none/expired). Reads the marker's mtime; a missing/unreadable marker means not in cooldown.

Where the remote was BEFORE this push. Preference order: 1. Parse `abc..def` from push stdout — authoritative, exact. 2. `<branch>@{u

Convert absolute touched-paths to repo-relative pathspec args for git diff. Paths outside cwd (e.g. ~/.claude/…) are dropped. Returns the list

Gate for the two-call dual_or review path. Default OFF — the second call roughly doubles API spend for the review. For users paying their own

Extract the OS errno from an "exc:<TypeName>:<errno>" err_kind. OSError-family exceptions embed their errno (ENOENT=2, EACCES=13, ENOSPC=28, …

Map an "exc:<TypeName>[:errno]" err_kind to its exception-type code (SDK_BOOTSTRAP_EXC_CODES). Returns 0 for non-exc err_kinds (so the sdk_boo

Map err_phase string to its telemetry integer code, or 0 if unset. Empty/None → 0 lets `if encoded:` cleanly skip emission. Per SDK_BOOTSTRAP_

Extract the subprocess returncode embedded in a 'signal_killed:<rc>' err_kind (e.g. -11 SIGSEGV / -9 SIGKILL / 139 shell-wrapped). Emitted as

Bounded integer hash of the stderr tail captured in "other:<tail>" err_kinds. Lets us distinguish patterns INSIDE the _uncategorized (code 99)

Extract field value from tool input or hook input data. Args: field: Field name like "command", "new_text", "file_path", "reason"

Find the real index file for a git repo. Handles worktrees where .git is a file pointing to the main repo's gitdir. Returns the absolute

`git diff -p base head` as text on success, None on error. Distinguishing failure from success-with-empty-diff matters: the push-sweep caller

Return (fresh_commit_shas, stale_count) from the HEAD reflog. Scans the last `max_n` reflog entries and returns the SHAs whose action is `com

Shas in `base..head`, oldest→newest. Empty list on error.

One `git status --porcelain=v1 -z` → (tracked_dirty, untracked) sets of repo-root-relative paths, or (None, None) on error. Replaces the `_tem

Match a path against include/exclude globs. ``**`` matches any depth.

Heuristic catastrophic-backtracking check. Not a proof. Catches: - nested quantifiers ((a+)*, (a*b)+) - wildcard groups under repetition (

True iff a 3P provider env var is set to a truthy value. Mirrors how the CC harness itself decides 1P vs 3P at startup. Cheap to call — no ne

True if `maybe_ancestor` is reachable from `descendant` (i.e. HEAD moved forward via commit/merge, not sideways via checkout).

Kill any process listening on the given port.

Repo-root-relative untracked (and not-ignored) path → mtime_ns, or {} on error. Used at UPS to snapshot the pre-turn untracked set so the Stop

Check if tool_name matches the matcher pattern. Args: matcher: Pattern like "Bash", "Edit|Write", "*" tool_name: Actu

Fire-and-forget SDK bootstrap, for remote-pod environments. Under CLAUDE_CODE_SYNC_PLUGIN_INSTALL=true (CCR-style remote pods), plugins are s

Return a one-time user-visible notice when the agentic reviewer is in a persistent broken state on this machine, or None if we've already show

True for models that reject the budget_tokens thinking form (4.6+).

Categorize a pip-install stderr into a known err_kind (the pip subset of SDK_BOOTSTRAP_ERR_CODES). Used by the --target fallback; mirrors the

True iff the current interpreter can run pip (`-m pip --version`). Probed only on the venv_ensurepip_fail path (see __main__), NOT on the hap

Read a YAML or JSON config file. Returns None on missing/malformed.

Encode plugin.json version "M.m.p" as M*10000 + m*100 + p so it fits the bool|number metrics constraint. Returns 0 if unreadable.

Check if pattern matches text using regex. Args: pattern: Regex pattern text: Text to match against Returns:

For a `git commit --amend` we just ran, return the pre-amend SHA via reflog, or None if it can't be safely determined. expected_post_sha: the

Check if rule matches input data. Args: rule: Rule to evaluate input_data: Hook input data Returns:

True iff the --target libs dir has an importable claude_agent_sdk, probed with THIS interpreter (the one llm.py will import it from) and the t

Snapshot the accumulator as metric keys. Returns {} when no API calls AND no HTTP errors were made so skip-path emits don't burn key budget. c

Validate one user pattern entry. Returns a rule dict in the same shape as the built-in SECURITY_PATTERNS, or None if invalid (logged).

Aggregate run results into summary statistics. Returns run_summary with stats for each configuration and delta.

Atomically check if a warning has been shown and mark it as shown if not. Returns True if this is the first time seeing this warning (should

Build a run dict with prompt, outputs, and grading data.

Cap per-file and total diff bytes; return (capped_files, bytes_dropped). Truncation markers are written inside the content so the reviewer kn

Capture a git ref representing the current working tree state. Uses `git stash create` which creates a commit object for the current state

Remove state files and lock files older than 30 days.

Compile regex pattern with caching. Args: pattern: Regex pattern string Returns: Compiled regex pattern

v2 diff strategy: derive the review set from git state alone. review_set = (files dirty vs current HEAD, plus files committed this turn when

Atomically snapshot all state the Stop hook needs and clear touched_paths. The Stop hook is asyncRewake — it runs in the background after Claude'

Read a file and return an embedded representation.