[tumberger]

ENG-624 CLI stack 1/6.

Makes UserPromptSubmit a first-class synchronous hook event across the domain and local wire, preserves compatibility mirrors, and gives prompt processing a 65-second budget while keeping normal tool-call budgets unchanged.

The prompt itself is always accepted. Subsequent tool use waits for the corresponding session policy set.

[tumberger]

• fix: harden prompt policy activation #471
• feat(claude): install synchronous prompt policy hook #470
• feat(policy): enforce synchronous prompt policy barrier #469
• feat(policy): activate prompt policy sets per session #468
• feat(policy): validate prompt policy bundles #467
• feat(hooks): add synchronous prompt submission plumbing #466 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[greptile-apps]

Greptile Summary

The PR makes UserPromptSubmit a first-class synchronous hook event across agent codecs and the local runtime protocol.

• Adds first-class prompt transport while retaining the ToolInput compatibility mirror.
• Encodes prompt denials for Claude and preserves Codex prompt handling.
• Introduces protocol version 2 fields on local evaluate requests and results.
• Gives managed prompt evaluation a 60-second lifecycle budget and Codex prompt hooks a 65-second timeout while retaining existing budgets for other events.

Confidence Score: 5/5

The PR appears safe to merge with no concrete blocking or independently actionable non-blocking defects identified.

The prompt is preserved across both agent adapters and the local runtime transport, blocking prompt hooks remain synchronous, and the investigated timeout and compatibility paths do not produce an established failure with current consumers.

Important Files Changed

Filename	Overview
internal/hook/domain.go	Adds the first-class Prompt field while documenting the temporary ToolInput compatibility mirror.
internal/hookruntime/claude.go	Preserves Claude prompt input and adds event-specific synchronous UserPromptSubmit result encoding.
internal/hookruntime/codex.go	Populates the first-class Prompt field alongside the existing normalized Codex input.
internal/localruntime/protocol.go	Extends the local wire structs with protocol versioning and first-class prompt transport.
internal/localruntime/conversions.go	Round-trips Prompt and emits protocol version 2 for evaluate requests and results.
internal/managedobserve/lifecycle.go	Routes UserPromptSubmit through synchronous daemon kickstart processing with a 60-second budget.
internal/codexmanaged/hooks.go	Applies a 65-second timeout only to installed Codex prompt hooks.

Sequence Diagram

sequenceDiagram
  participant Agent as Claude Code / Codex
  participant Hook as Hook codec
  participant Client as Managed lifecycle
  participant Socket as localruntime.Service
  participant Policy as Runtime policy
  Agent->>Hook: UserPromptSubmit(prompt)
  Hook->>Client: "hook.Event{Prompt, ToolInput mirror}"
  Client->>Socket: EvaluateRequest v2
  Socket->>Policy: synchronous evaluation
  Policy-->>Socket: allow / deny
  Socket-->>Client: EvaluateResult v2
  Client-->>Hook: hook.Result
  Hook-->>Agent: allow context or block reason

Loading

_{Reviews (1): Last reviewed commit: "feat(hooks): add synchronous prompt subm..." | Re-trigger Greptile}