"""Claude PostToolUse entry — credential scanner. Mirrors hooks/credential-scanner.py output."""
import json
import os
import sys

# Ensure repo root is on sys.path before importing hooks.lib
_here = os.path.dirname(os.path.abspath(__file__))
_root = (
    os.environ.get("CLAUDE_PLUGIN_ROOT")
    or os.environ.get("CURSOR_PLUGIN_ROOT")
    or os.path.abspath(os.path.join(_here, "..", ".."))
)
if _root not in sys.path:
    sys.path.insert(0, _root)

from hooks.lib.credential_scanner import scan_content, build_warning  # noqa: E402


def main() -> int:
    try:
        data = json.load(sys.stdin)
    except Exception:
        return 0
    tool_input = data.get("tool_input", {})
    if not isinstance(tool_input, dict):
        return 0
    content = tool_input.get("content", "")
    file_path = tool_input.get("file_path", "")
    findings = scan_content(content, file_path)
    if findings:
        print(json.dumps({"systemMessage": build_warning(file_path, findings)}))
    return 0


if __name__ == "__main__":
    sys.exit(main())