Need implementation details and public types?Open technical guide
How the implementation works
Host-specific JSON becomes a NormalizedAction: shell command, file write, file edit, file delete, file read, or unknown tool.
Agent CLI hook payload
↓
NormalizedAction
↓
Rule engine
↓
Plain-English preview
Rule engine
The current release covers common deletes, installs, tests, git commands, output redirection, file writes, file edits, and honest fallbacks for unfamiliar commands.
Privacy posture
- No network calls.
- No telemetry.
- No shell execution.
- No file reads based on hook payload paths.