Function annotateHookSpan

pkg/hooks/executor.go:238–276

annotateHookSpan stamps the aggregated verdict onto the hook.{event} span so dashboards can answer "did the hook block this?" and "why?" without re-running the hook. Prior to this the span only carried the event type and hook count — a denied call looked identical to an allowed one. The verdict bool

(span trace.Span, event EventType, r *Result)

// PII or LLM output (Message, AdditionalContext, SystemMessage,
// Summary) are gated on the GenAI content-capture opt-in.
func annotateHookSpan(span trace.Span, event EventType, r *Result) {
	if span == nil || r == nil {
		return
	}
	attrs := []attribute.KeyValue{
		attribute.Bool("cagent.hook.allowed", r.Allowed),
		attribute.Int("cagent.hook.exit_code", r.ExitCode),
	}
	if r.Decision != "" {
		attrs = append(attrs, attribute.String("cagent.hook.decision", string(r.Decision)))
	}
	if r.DecisionReason != "" {
		attrs = append(attrs, attribute.String("cagent.hook.decision_reason", r.DecisionReason))
	}
	if event == EventPermissionRequest {
		attrs = append(attrs, attribute.Bool("cagent.hook.permission_allowed", r.PermissionAllowed))
	}
	if r.ModifiedInput != nil {
		attrs = append(attrs, attribute.Bool("cagent.hook.modified_input", true))
	}
	if r.Summary != "" {
		attrs = append(attrs, attribute.Bool("cagent.hook.summary_provided", true))
	}
	if genai.IsContentCaptureEnabled() {
		if r.Message != "" {
			attrs = append(attrs, attribute.String("cagent.hook.message", r.Message))
		}
		if r.AdditionalContext != "" {
			attrs = append(attrs, attribute.String("cagent.hook.additional_context", r.AdditionalContext))
		}
		if r.SystemMessage != "" {
			attrs = append(attrs, attribute.String("cagent.hook.system_message", r.SystemMessage))
		}
		if r.Summary != "" {
			attrs = append(attrs, attribute.String("cagent.hook.summary", r.Summary))
		}
	}
	span.SetAttributes(attrs...)
}

// hooksFor returns the deduplicated list of hooks that should run for
// (event, toolName). Dedup by (type, command, args) catches the common