engine

Build an inherited environment safe to pass to hook subprocesses.

Strips values whose names look like secrets. Hooks are user-authored trusted code, but secret values should not be ambiently available.

Run one hook command with bounded time and captured output.

Adapt hook invocations and handler output across the wire boundary.

Origin and environment for groups one enabled plugin contributed.

Validated output and diagnostics from one command handler.

One ordered command handler in a configuration snapshot.

Immutable, declaration-ordered Hooks v2 runtime configuration.

Execute Hooks v2 invocations against one immutable snapshot.