feat(invariants): implement package runtime checks

packages/hooks/hooks-codex/src/invariant.ts

@@ -1,14 +1,7 @@
-/**
- * Generated invariant ownership companion for `@deepseek-ai/dsh-hooks-codex`.
- * Replace this file with package-owned checks while preserving its registration.
- *
- * @generated scripts/gen-package-invariants.ts
- * @module @deepseek-ai/dsh-hooks-codex/invariant
- */
+/** Package-owned runtime contract checks for `@deepseek-ai/dsh-hooks-codex`. @module @deepseek-ai/dsh-hooks-codex/invariant */
 
-/* jscpd:ignore-start */
 import type { Context } from 'cordis'
-import type { InvariantInstaller } from '@deepseek-ai/dsh-invariants'
+import { observePluginInvariant, type InvariantInstaller } from '@deepseek-ai/dsh-invariants'
 
 const PACKAGE_NAME = '@deepseek-ai/dsh-hooks-codex'
 
@@ -17,8 +10,29 @@ export const name = 'hooks-codex-invariant'
 /** Services required before the companion can register. */
 export const inject = ['invariants']
 
-/** Reserve this package's invariant ownership until it adds relational checks. */
-const install: InvariantInstaller = () => {}
+/** Install checks for this package's active plugin fibers. */
+const install: InvariantInstaller = (ctx, fail) => {
+  observePluginInvariant(ctx, fail, {
+    name: 'hooks-codex',
+    inject: [
+      'bash',
+    ],
+    validate: (_fiber, effectLabels) => {
+      const hookEffects = [
+        'hooks-codex: drain detached hook runs',
+        'ctx.on("agent/session-start")',
+        'ctx.on("agent/prompt-submit")',
+        'ctx.on("tools/pre-execute")',
+        'ctx.on("tools/post-execute")',
+        'ctx.on("agent/turn-continuation")',
+      ]
+      const installed = hookEffects.filter(label => effectLabels.has(label)).length
+      return installed === 0 || installed === hookEffects.length
+        ? undefined
+        : 'a readable Codex hook config must install its complete listener set atomically'
+    },
+  })
+}
 
 /**
  * Register this package's invariant companion.
@@ -27,4 +41,3 @@ const install: InvariantInstaller = () => {}
  */
 export const apply = (ctx: Context): Promise<() => void> =>
   Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install))
-/* jscpd:ignore-end */

packages/hooks/hooks-codex/tests/invariant.spec.ts

@@ -0,0 +1,26 @@
+import { describe, expect, it } from 'vitest'
+import { Context } from 'cordis'
+import type { BashExecutor } from '@deepseek-ai/dsh-bash'
+
+describe('Codex hook package invariant', () => {
+  it('rejects a partially installed hook listener set', async () => {
+    const ctx = new Context()
+    await ctx.plugin({
+      name: 'codex-invariant-bash',
+      apply(child: Context) {
+        child.provide('bash', {
+          resolve() {},
+          async run() {},
+          start() {},
+        } as unknown as BashExecutor)
+      },
+    })
+    await expect(ctx.plugin({
+      name: 'hooks-codex',
+      inject: ['bash'],
+      apply(child: Context) {
+        child.effect(() => () => {}, 'ctx.on("agent/session-start")')
+      },
+    })).rejects.toThrow(/must install its complete listener set atomically/)
+  })
+})