init claude-code

hooks/toolPermission/handlers/coordinatorHandler.ts

@@ -0,0 +1,65 @@
+import { feature } from 'bun:bundle'
+import type { PendingClassifierCheck } from '../../../types/permissions.js'
+import { logError } from '../../../utils/log.js'
+import type { PermissionDecision } from '../../../utils/permissions/PermissionResult.js'
+import type { PermissionUpdate } from '../../../utils/permissions/PermissionUpdateSchema.js'
+import type { PermissionContext } from '../PermissionContext.js'
+
+type CoordinatorPermissionParams = {
+  ctx: PermissionContext
+  pendingClassifierCheck?: PendingClassifierCheck | undefined
+  updatedInput: Record<string, unknown> | undefined
+  suggestions: PermissionUpdate[] | undefined
+  permissionMode: string | undefined
+}
+
+/**
+ * Handles the coordinator worker permission flow.
+ *
+ * For coordinator workers, automated checks (hooks and classifier) are
+ * awaited sequentially before falling through to the interactive dialog.
+ *
+ * Returns a PermissionDecision if the automated checks resolved the
+ * permission, or null if the caller should fall through to the
+ * interactive dialog.
+ */
+async function handleCoordinatorPermission(
+  params: CoordinatorPermissionParams,
+): Promise<PermissionDecision | null> {
+  const { ctx, updatedInput, suggestions, permissionMode } = params
+
+  try {
+    // 1. Try permission hooks first (fast, local)
+    const hookResult = await ctx.runHooks(
+      permissionMode,
+      suggestions,
+      updatedInput,
+    )
+    if (hookResult) return hookResult
+
+    // 2. Try classifier (slow, inference -- bash only)
+    const classifierResult = feature('BASH_CLASSIFIER')
+      ? await ctx.tryClassifier?.(params.pendingClassifierCheck, updatedInput)
+      : null
+    if (classifierResult) {
+      return classifierResult
+    }
+  } catch (error) {
+    // If automated checks fail unexpectedly, fall through to show the dialog
+    // so the user can decide manually. Non-Error throws get a context prefix
+    // so the log is traceable — intentionally NOT toError(), which would drop
+    // the prefix.
+    if (error instanceof Error) {
+      logError(error)
+    } else {
+      logError(new Error(`Automated permission check failed: ${String(error)}`))
+    }
+  }
+
+  // 3. Neither resolved (or checks failed) -- fall through to dialog below.
+  // Hooks already ran, classifier already consumed.
+  return null
+}
+
+export { handleCoordinatorPermission }
+export type { CoordinatorPermissionParams }