bvandeusenandClaude Opus 5.5
c6cdfc2172
CI & Build / Python lint (push) Successful in 2s
CI & Build / Plugin hooks (push) Successful in 14s
CI & Build / TypeScript typecheck (push) Successful in 55s
CI & Build / integration (push) Successful in 1m1s
CI & Build / Python tests (push) Failing after 1m25s
CI & Build / Build & push image (push) Skipped
The reply is the one act no tool call marks, and it is where "let me know if it works" gets said. A new Stop hook (scribe_reply_check.sh) sends the finished reply to POST /api/plugin/reply-rules, which checks it twice: - mounted: every unopened RULE on reply.report, plus reply.ask when the reply asks a question. Deterministic. - semantic: the reply's head and tail against every rule's trigger, on a new ranked surface, reply_rule. It is the backstop for whatever the earlier arms missed. Its floor is its stop bar (default 0.80, budget 1), with its own Settings dials. The new stop_only stage records surfacing for the rule that holds and nothing else, because nothing else reached anyone. Following the operator's ruling from 456 step 8, a rule that holds blocks once, in the server's words. The hook blocks only on a reason it was given, so an unreachable instance never stops a session, and it never holds the rewrite. The ledger is the act checkpoint's own, so a rule holds a session once across both doors and the per-session cap counts both. The turn reader moved from the report check into scribe_defs.sh (scribe_turn_facts / scribe_turn_fact), so the two Stop hooks read a turn the same way. The output was checked identical on a real transcript. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
92 lines
3.9 KiB
Bash
92 lines
3.9 KiB
Bash
#!/usr/bin/env bash
|
|
# Scribe — Stop hook: the reply moment (milestone 458 step 4, folded in from
|
|
# milestone 456 step 8).
|
|
#
|
|
# A reply is the one act no tool call marks, and it is where "please check
|
|
# this on your end" or "it's done" gets said — so every arm that fires on a
|
|
# tool call misses it. This hook sends the finished reply to the server, which
|
|
# checks it twice over: the rules MOUNTED on the reply moments, and the reply
|
|
# text against every rule's trigger, as the backstop for whatever the earlier
|
|
# arms missed. An unopened rule from either half holds the reply for one read.
|
|
#
|
|
# THE SAME CONTRACT AS scribe_report_check.sh, and for its reasons:
|
|
# - the server decides and supplies the words; this hook blocks only on a
|
|
# reason it was given, so an unconfigured or unreachable instance never
|
|
# stops a session;
|
|
# - the rewrite is never held (`stop_hook_active`), so a hold costs one turn
|
|
# at most;
|
|
# - a rule holds a session once. The ledger is the act checkpoint's own
|
|
# (`<sid>.checkpoint.ids`), so a rule that already stopped a command does
|
|
# not stop the reply about it, and the per-session cap counts both doors.
|
|
#
|
|
# Env:
|
|
# SCRIBE_URL / SCRIBE_TOKEN override for the settings.json dogfooding path.
|
|
|
|
command -v curl >/dev/null 2>&1 || exit 0
|
|
|
|
# shellcheck source=plugin/hooks/scribe_defs.sh
|
|
. "$(dirname "${BASH_SOURCE[0]}")/scribe_defs.sh"
|
|
|
|
event=$(cat 2>/dev/null || true)
|
|
event_flat=$(printf '%s' "$event" | scribe_json_flat)
|
|
transcript=$(scribe_json_pick "$event_flat" '.transcript_path')
|
|
session_id=$(scribe_json_pick "$event_flat" '.session_id')
|
|
active=$(scribe_json_pick "$event_flat" '.stop_hook_active')
|
|
event_cwd=$(scribe_json_pick "$event_flat" '.cwd')
|
|
|
|
# The rewrite after a hold goes out as written.
|
|
[ "$active" = "true" ] && exit 0
|
|
[ -n "$transcript" ] && [ -f "$transcript" ] && [ -n "$session_id" ] || exit 0
|
|
scribe_config || exit 0
|
|
|
|
facts=$(scribe_turn_facts "$transcript")
|
|
[ "$(scribe_turn_fact "$facts" bounded)" = "1" ] || exit 0
|
|
reply=$(scribe_turn_fact "$facts" reply | scribe_json_unescape)
|
|
[ -n "$(printf '%s' "$reply" | tr -d '[:space:]')" ] || exit 0
|
|
|
|
# Bounded before encoding. The server reads the head and the tail — the part
|
|
# of a report that asks something of the reader is at its end — so a very
|
|
# long reply keeps both.
|
|
if [ "${#reply}" -gt 12000 ]; then
|
|
reply="${reply:0:4000} … ${reply: -8000}"
|
|
fi
|
|
reply_esc=$(printf '%s' "$reply" | scribe_json_escape) || exit 0
|
|
|
|
state_dir="${TMPDIR:-/tmp}/scribe-priorart"
|
|
mkdir -p "$state_dir" 2>/dev/null || true
|
|
safe_sid=$(printf '%s' "$session_id" | tr -c 'A-Za-z0-9._-' '_')
|
|
rulefile="$state_dir/${safe_sid}.rules.ids"
|
|
stopfile="$state_dir/${safe_sid}.checkpoint.ids"
|
|
|
|
query=""
|
|
scope=$(scribe_scope_query "${event_cwd:-${CLAUDE_PROJECT_DIR:-$PWD}}")
|
|
[ -n "$scope" ] && query="&${scope}"
|
|
rule_seen=$(scribe_rules_live "$rulefile")
|
|
[ -n "$rule_seen" ] && query="${query}&exclude_rule_ids=${rule_seen}"
|
|
query="${query}$(scribe_held_query "$state_dir/${safe_sid}.opened.ids")"
|
|
if [ -f "$stopfile" ]; then
|
|
stopped=$(grep -E '^[0-9]+$' "$stopfile" 2>/dev/null | paste -sd, -)
|
|
[ -n "$stopped" ] && query="${query}&stopped_rule_ids=${stopped}"
|
|
fi
|
|
query=${query#&}
|
|
|
|
answer=$(printf '{"reply":"%s"}' "$reply_esc" | curl -fsS --max-time 6 \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-H "Content-Type: application/json" \
|
|
--data-binary @- \
|
|
"${url%/}/api/plugin/reply-rules${query:+?$query}" 2>/dev/null) || exit 0
|
|
|
|
answer_flat=$(printf '%s' "$answer" | scribe_json_flat)
|
|
reason=$(scribe_json_pick "$answer_flat" '.reason')
|
|
[ -n "$reason" ] || exit 0
|
|
|
|
# Recorded BEFORE the block is emitted, for the act checkpoint's reason: a
|
|
# hold that is shown and not recorded is one that can be shown again.
|
|
for id in $(scribe_json_list "$answer_flat" '.rule_ids'); do
|
|
scribe_checkpoint_allowed "$stopfile" "$id" || true
|
|
done
|
|
scribe_json_list "$answer_flat" '.rule_ids' | scribe_rules_append "$rulefile"
|
|
|
|
printf '{"decision":"block","reason":"%s"}\n' "$(printf '%s' "$reason" | scribe_json_escape)"
|
|
exit 0
|