Portable agent hooks: one committed launcher, and gates that refuse when they cannot judge by jothimani-rajendran · Pull Request #172 · open-coder-ai/chock

Judge a pre-tool write by its repository-relative path

claude

committed

6656cad

Run guards under Git's bash, and ask when none could run

claude

committed

611f369

Refuse when the gate or guard a hook names is missing

claude

committed

eb6f44d

Never judge a gate's own policy folder or the generated tree

claude

committed

3b12fb6

Decode gate subprocess output as UTF-8 on every console

claude

committed

291f653

Probe PowerShell hook interpreters without terminating on a miss

claude

committed

e83229f

Parse each YAML text and extract each bundled module once

claude

committed

27a87b7

Run every agent hook through a committed launcher, not a baked interpreter

claude

committed

f8c8652

Lint the launcher change: import spacing, line length, S603 reason

claude

committed

70ff1af

Regenerate chock's own hook wiring and emitter goldens in the launcher form

claude

committed

42b266e

Test the launcher hook contract instead of the baked interpreter

claude

committed

330c9c3

Report a missing or ignored hook launcher as a dangling target

claude

committed

9e54596

Document the launcher hook form and Cursor's failClosed entries

claude

committed

ca1112e

Hoist chock's runtime imports after `import sys`, however agentseam orders its block

claude

committed

b4b9e06

Fail sync when an agent's hooks could not be wired

claude

committed

8ebfd9e

Merge branch 'fix/gate-hardening' into fix/portable-hooks

claude

committed

e0c0717

Exempt only sync's generated tree from gates, not the adopter's own .chock files

claude

committed

3482083

Install the write gate for every vendor that records a write vocabulary

claude

committed

43ae2bc

Tell the user when a wired agent will skip the hooks until trusted

claude

committed

5f2fe44

Merge remote-tracking branch 'origin/main' into fix/portable-hooks

claude

committed

6b27bd1

Record this branch's changes under Unreleased, not the shipped 0.11.4

claude

committed

8a2cc1e

Merge origin/main into fix/portable-hooks

claude

committed

fc49d31

Run the launcher hook command under every shell an agent uses

claude

committed

fbefa30

Exempt a gate from its own policy's folders only, not the generated tree

claude

committed

f9e057e

Judge a pre-tool write under its resolved path as well as the one named

claude

committed

edb436a

Send the Cursor plugin test's payload as UTF-8 on Windows

claude

committed

bddd915

Make the launcher refuse whenever it cannot start a verdict

claude

committed

8970f94

Say a gate is missing without echoing its path to stderr

claude

committed

735a4cf

Navigation Menu

Portable agent hooks: one committed launcher, and gates that refuse when they cannot judge - #172

Portable agent hooks: one committed launcher, and gates that refuse when they cannot judge#172
jothimani-rajendran merged 28 commits into
mainfrom
fix/portable-hooks

Commits on Sep 27, 2026

Judge a pre-tool write by its repository-relative path

Run guards under Git's bash, and ask when none could run

Refuse when the gate or guard a hook names is missing

Never judge a gate's own policy folder or the generated tree

Decode gate subprocess output as UTF-8 on every console

Probe PowerShell hook interpreters without terminating on a miss

Parse each YAML text and extract each bundled module once

Run every agent hook through a committed launcher, not a baked interpreter

Lint the launcher change: import spacing, line length, S603 reason

Regenerate chock's own hook wiring and emitter goldens in the launcher form

Test the launcher hook contract instead of the baked interpreter

Report a missing or ignored hook launcher as a dangling target

Document the launcher hook form and Cursor's failClosed entries

Hoist chock's runtime imports after `import sys`, however agentseam orders its block

Fail sync when an agent's hooks could not be wired

Merge branch 'fix/gate-hardening' into fix/portable-hooks

Exempt only sync's generated tree from gates, not the adopter's own .chock files

Install the write gate for every vendor that records a write vocabulary

Tell the user when a wired agent will skip the hooks until trusted

Merge remote-tracking branch 'origin/main' into fix/portable-hooks

Record this branch's changes under Unreleased, not the shipped 0.11.4

Merge origin/main into fix/portable-hooks

Run the launcher hook command under every shell an agent uses

Exempt a gate from its own policy's folders only, not the generated tree

Judge a pre-tool write under its resolved path as well as the one named

Send the Cursor plugin test's payload as UTF-8 on Windows

Make the launcher refuse whenever it cannot start a verdict

Say a gate is missing without echoing its path to stderr