@cybedefend/vibedefend 1.1.1

package/dist/clients/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/clients/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,OAAO,CAAC;AAwB5B,SAAS,MAAM;IACb,2EAA2E;IAC3E,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAC1D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC;IAExD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,uDAAuD;SAChE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,wEAAwE;QACxE,gDAAgD;QAChD,OAAO;YACL,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,MAAM,EACJ,oFAAoF;SACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,UAAU,OAAO,yBAAyB,WAAW,qCAAqC;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,0DAA0D;IAC1D,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CACrE,KAAK,CACN,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,OAA0B;IAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAkB,YAAY,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC;IACrB,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;IAClB,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;IAE7B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAExD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC;QACnC,OAAO,EAAE,sBAAsB;QAC/B,gEAAgE;QAChE,kEAAkE;KACnE,CAAC,CAAC;IAEH,wEAAwE;IACxE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAExE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;IAElD,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,2BAA2B;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;IAC/D,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAgB,UAAU,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACnE,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,UAAU,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,MAAoB;IAInC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CACtD,sBAAsB,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,aAAa,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,QAAQ;IACf,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;CACR,CAAC"}

package/dist/clients/detect.js

@@ -0,0 +1,86 @@
+/**
+ * Shared detection utilities for client adapters.
+ *
+ * Each adapter calls `probeBinaryVersion()` with the name of its CLI
+ * (e.g. `cursor`, `code`, `windsurf`, `codex`) and gets back either a
+ * parsed semver string or `null` if not on PATH / version flag failed.
+ *
+ * Why so cautious: we run detection serially for every adapter at
+ * install time. A single hung probe (binary that prints to a pager,
+ * waits for input, etc.) would freeze the installer. We bound every
+ * spawn with a hard timeout and treat any non-zero exit as "not
+ * detected" rather than re-raising.
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { which } from '../utils.js';
+const VERSION_PROBE_TIMEOUT_MS = 3000;
+/**
+ * Run `<binary> <versionFlag>` and parse a semver-ish version from the
+ * first line of stdout. Returns `null` if the binary isn't on PATH,
+ * the spawn timed out, or no version could be extracted.
+ *
+ * `firstLineParser` lets each adapter tweak which line/regex it cares
+ * about — VS Code's `code --version` prints 3 lines (version, commit,
+ * arch); Cursor prints just the version; Codex prints "codex 0.1.0".
+ */
+export function probeBinaryVersion(binary, args = ['--version'], firstLineParser = defaultParser) {
+    if (which(binary) === null)
+        return null;
+    const result = spawnSync(binary, args, {
+        encoding: 'utf8',
+        timeout: VERSION_PROBE_TIMEOUT_MS,
+        stdio: ['ignore', 'pipe', 'ignore'],
+        shell: false,
+    });
+    if (result.status !== 0 || !result.stdout)
+        return null;
+    return firstLineParser(result.stdout);
+}
+/**
+ * Default semver parser — pulls the first `X.Y.Z` substring out of the
+ * stdout. Handles common shapes:
+ *   "0.1.0"                     → "0.1.0"
+ *   "claude-code 0.1.0"         → "0.1.0"
+ *   "Cursor v1.7.3 (build ...)" → "1.7.3"
+ *   "1.111.0\n<commit>\n<arch>" → "1.111.0"
+ */
+function defaultParser(stdout) {
+    const match = /(\d+\.\d+\.\d+(?:-[a-z0-9.-]+)?)/i.exec(stdout);
+    return match ? match[1] : null;
+}
+/**
+ * Compare two semver-ish strings. Returns:
+ *   < 0  if `a < b`
+ *   = 0  if `a == b`
+ *   > 0  if `a > b`
+ *
+ * Ignores pre-release suffixes (-rc.1 etc.) — we only care about the
+ * numeric (major.minor.patch) for the "is hooks supported?" gate, which
+ * was added in a specific minor version.
+ */
+export function compareVersions(a, b) {
+    const pa = a.split('-')[0].split('.').map((n) => parseInt(n, 10) || 0);
+    const pb = b.split('-')[0].split('.').map((n) => parseInt(n, 10) || 0);
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+/** True iff `version >= minVersion` under {@link compareVersions}. */
+export function versionAtLeast(version, minVersion) {
+    return compareVersions(version, minVersion) >= 0;
+}
+/**
+ * Check whether a known config directory exists. Used as a secondary
+ * signal: e.g. Cursor on macOS may live as an `.app` bundle not on PATH,
+ * but its `~/.cursor/` directory is reliably present after first launch.
+ */
+export function configDirExists(...parts) {
+    if (parts.length === 0)
+        return false;
+    return existsSync(parts.join('/'));
+}
+//# sourceMappingURL=detect.js.map

package/dist/clients/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/clients/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,OAAiB,CAAC,WAAW,CAAC,EAC9B,kBAAqD,aAAa;IAElE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE;QACrC,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAAkB;IAChE,OAAO,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAG,KAAe;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/clients/registry.js

@@ -0,0 +1,41 @@
+/**
+ * Client adapter registry. Single source of truth for "which clients
+ * does VibeDefend support?".
+ *
+ * Order matters — adapters appear in the multi-select prompt in this
+ * order. Claude Code first because it has the most mature hook surface
+ * and is the assumed default; the others follow alphabetically.
+ */
+import { claudeCodeAdapter } from './claude-code.js';
+import { codexAdapter } from './codex.js';
+import { cursorAdapter } from './cursor.js';
+import { vscodeAdapter } from './vscode.js';
+import { windsurfAdapter } from './windsurf.js';
+export const ALL_ADAPTERS = [
+    claudeCodeAdapter,
+    cursorAdapter,
+    vscodeAdapter,
+    windsurfAdapter,
+    codexAdapter,
+];
+/** Look up an adapter by ID. Throws if not found (programming error). */
+export function adapterFor(id) {
+    const adapter = ALL_ADAPTERS.find((a) => a.id === id);
+    if (!adapter) {
+        throw new Error(`No adapter registered for client id "${id}".`);
+    }
+    return adapter;
+}
+/**
+ * Run detection on every adapter, returning a structured list.
+ * Pure — no side effects. Used by the multi-select prompt to populate
+ * its initial state ("which clients are installed + support hooks?")
+ * and by tests.
+ */
+export function detectAll() {
+    return ALL_ADAPTERS.map((adapter) => ({
+        adapter,
+        detection: adapter.detect(),
+    }));
+}
+//# sourceMappingURL=registry.js.map

package/dist/clients/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/clients/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,eAAe;IACf,YAAY;CACJ,CAAC;AAEX,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS;IAIvB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/clients/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/clients/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/clients/types.ts"],"names":[],"mappings":""}

package/dist/clients/vscode.js

@@ -0,0 +1,187 @@
+/**
+ * VS Code Copilot adapter.
+ *
+ * Wires our universal hook scripts into `~/.copilot/hooks/cybedefend.json`
+ * (per decision 2 = B: write a dedicated config rather than relying on the
+ * `~/.claude/settings.json` fallback). Format mirrors Claude Code's
+ * `{ "hooks": { "EventName": [...] } }` shape — VS Code Copilot reads
+ * both layouts.
+ *
+ * Caveats called out by the VS Code docs (and surfaced to the user via
+ * `reason`):
+ *  - Hooks are **preview** as of v1.110; format may change.
+ *  - VS Code IGNORES the `matcher` field — every PreToolUse hook fires
+ *    on every tool call. Our universal hook script self-filters via the
+ *    `case "$TOOL_NAME" in Edit|Write|MultiEdit|apply_patch)` early-exit
+ *    so the runtime cost is sub-millisecond per ignored call.
+ *
+ * Min version: 1.110.0 (February 2026 — first release with hook support).
+ */
+import { existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { platform } from 'node:os';
+import { home, log, readJson, writeJson } from '../utils.js';
+import { hookCommand, VIBEDEFEND_PATH_MARKER, isVibedefendOwnedHookCommand, } from '../hooks/install.js';
+import { probeBinaryVersion, versionAtLeast } from './detect.js';
+const COPILOT_HOOKS = home('.copilot', 'hooks', 'cybedefend.json');
+const MIN_VERSION = '1.110.0';
+/**
+ * Resolve the user-profile `mcp.json` path for the current platform.
+ *
+ * VS Code stores user-level MCP config in its user-data directory, which
+ * differs per OS (and per build flavor — Insiders / Code-OSS use different
+ * subfolders, but we only target stable `Code` for V1):
+ *   - macOS:   ~/Library/Application Support/Code/User/mcp.json
+ *   - Linux:   ~/.config/Code/User/mcp.json
+ *   - Windows: %APPDATA%/Code/User/mcp.json
+ *
+ * Resolution honours `process.env.HOME` (set by tests for sandboxing).
+ */
+function vscodeUserMcpPath() {
+    const p = platform();
+    if (p === 'darwin') {
+        return home('Library', 'Application Support', 'Code', 'User', 'mcp.json');
+    }
+    if (p === 'linux') {
+        return home('.config', 'Code', 'User', 'mcp.json');
+    }
+    if (p === 'win32') {
+        const appData = process.env.APPDATA || home('AppData', 'Roaming');
+        return join(appData, 'Code', 'User', 'mcp.json');
+    }
+    // Unknown OS — fall back under HOME so tests still work.
+    return home('.vscode', 'mcp.json');
+}
+function detect() {
+    const version = probeBinaryVersion('code') ?? undefined;
+    if (version === undefined) {
+        return {
+            installed: false,
+            supportsHooks: false,
+            reason: '`code` CLI not on PATH. Install VS Code and run "Shell Command: Install \'code\' command" from the Command Palette.',
+        };
+    }
+    if (!versionAtLeast(version, MIN_VERSION)) {
+        return {
+            installed: true,
+            version,
+            supportsHooks: false,
+            reason: `VS Code ${version} is below the minimum ${MIN_VERSION} required for Copilot hooks. Update VS Code.`,
+        };
+    }
+    return {
+        installed: true,
+        version,
+        supportsHooks: true,
+        // Don't bake "preview" warnings into reason when supportsHooks is true —
+        // the multi-select prompt prints reasons only when supportsHooks is false.
+    };
+}
+function supports(event) {
+    // VS Code Copilot mirrors Claude Code's event surface per the docs.
+    return ['fetch-rules', 'session-start', 'stop', 'pre-compact'].includes(event);
+}
+function dropOurs(entries) {
+    return entries.filter((e) => !(e.hooks ?? []).some((h) => isVibedefendOwnedHookCommand(h.command)));
+}
+function writeSettings(opts) {
+    // Ensure the parent directory exists — VS Code doesn't create
+    // ~/.copilot/hooks/ on first launch like ~/.claude/ does.
+    mkdirSync(dirname(COPILOT_HOOKS), { recursive: true });
+    const file = readJson(COPILOT_HOOKS, {});
+    file.hooks ??= {};
+    file.hooks.PreToolUse ??= [];
+    file.hooks.SessionStart ??= [];
+    file.hooks.Stop ??= [];
+    file.hooks.PreCompact ??= [];
+    file.hooks.PreToolUse = dropOurs(file.hooks.PreToolUse);
+    file.hooks.SessionStart = dropOurs(file.hooks.SessionStart);
+    file.hooks.Stop = dropOurs(file.hooks.Stop);
+    file.hooks.PreCompact = dropOurs(file.hooks.PreCompact);
+    // Matcher is set but VS Code ignores it (per docs). The Node runner
+    // self-filters via its INTERESTED_TOOLS set. We keep the matcher so
+    // a future VS Code release that respects it Just Works.
+    file.hooks.PreToolUse.push({
+        matcher: 'Edit|Write|MultiEdit',
+        hooks: [{ type: 'command', command: hookCommand('fetch-rules') }],
+    });
+    file.hooks.SessionStart.push({
+        hooks: [{ type: 'command', command: hookCommand('session-start') }],
+    });
+    if (opts.enableSessionReview) {
+        file.hooks.Stop.push({
+            matcher: 'Stop',
+            hooks: [{ type: 'command', command: hookCommand('session-review') }],
+        });
+        file.hooks.PreCompact.push({
+            hooks: [{ type: 'command', command: hookCommand('pre-compact') }],
+        });
+    }
+    writeJson(COPILOT_HOOKS, file);
+    log.ok(`VS Code Copilot hooks wired into ${COPILOT_HOOKS}`);
+}
+/**
+ * Register the CybeDefend MCP server in VS Code's user-level `mcp.json`.
+ *
+ * Schema (per code.visualstudio.com/docs/copilot/customization/mcp-servers):
+ *   { "servers": { "<name>": { "type": "http", "url": "<url>" } } }
+ *
+ * Note the field name `servers` (NOT `mcpServers` — that's Cursor/Windsurf).
+ * VS Code also offers a `code --add-mcp '<json>'` CLI but writing the file
+ * directly is more reliable and avoids spawning a process that may take
+ * time to start up.
+ */
+function registerMcp(opts) {
+    const path = vscodeUserMcpPath();
+    log.step(`Registering MCP "${opts.region.mcpName}" in VS Code Copilot`);
+    log.hint(`URL: ${opts.region.mcpUrl}`);
+    log.hint(`Config: ${path}`);
+    mkdirSync(dirname(path), { recursive: true });
+    const file = readJson(path, {});
+    file.servers ??= {};
+    file.servers[opts.region.mcpName] = {
+        type: 'http',
+        url: opts.region.mcpUrl,
+    };
+    writeJson(path, file);
+    log.ok(`MCP "${opts.region.mcpName}" registered in ${path}`);
+    return true;
+}
+/**
+ * Pure introspection — never throws. `hooksWired` from
+ * `~/.copilot/hooks/cybedefend.json`, `mcpRegistered` from the per-OS
+ * user-profile `mcp.json` (same path `registerMcp` writes to). Raw-text
+ * substring checks keep the never-throw guarantee.
+ */
+function inspect(region) {
+    let hooksWired = false;
+    try {
+        if (existsSync(COPILOT_HOOKS)) {
+            hooksWired = readFileSync(COPILOT_HOOKS, 'utf8').includes(VIBEDEFEND_PATH_MARKER);
+        }
+    }
+    catch {
+        /* missing/unreadable → false */
+    }
+    let mcpRegistered = false;
+    try {
+        const mcpPath = vscodeUserMcpPath();
+        if (existsSync(mcpPath)) {
+            mcpRegistered = readFileSync(mcpPath, 'utf8').includes(region.mcpName);
+        }
+    }
+    catch {
+        /* → false */
+    }
+    return { hooksWired, mcpRegistered };
+}
+export const vscodeAdapter = {
+    id: 'vscode',
+    label: 'VS Code Copilot',
+    detect,
+    supports,
+    writeSettings,
+    registerMcp,
+    inspect,
+};
+//# sourceMappingURL=vscode.js.map

package/dist/clients/vscode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vscode.js","sourceRoot":"","sources":["../../src/clients/vscode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEjE,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB;IACxB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IACD,yDAAyD;IACzD,OAAO,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AA0BD,SAAS,MAAM;IACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,qHAAqH;SAC9H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,SAAS,EAAE,IAAI;YACf,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,WAAW,OAAO,yBAAyB,WAAW,8CAA8C;SAC7G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,OAAO;QACP,aAAa,EAAE,IAAI;QACnB,yEAAyE;QACzE,2EAA2E;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,oEAAoE;IACpE,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CACrE,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,OAA0B;IAC1C,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,8DAA8D;IAC9D,0DAA0D;IAC1D,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvD,MAAM,IAAI,GAAG,QAAQ,CAAkB,aAAa,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;IAClB,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;IAE7B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAExD,oEAAoE;IACpE,oEAAoE;IACpE,wDAAwD;IACxD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,sBAAsB;QAC/B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YACzB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC/B,GAAG,CAAC,EAAE,CAAC,oCAAoC,aAAa,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAE5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAgB,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC;IACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG;QAClC,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;KACxB,CAAC;IACF,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtB,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,MAAoB;IAInC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,UAAU,GAAG,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,QAAQ,CACvD,sBAAsB,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,iBAAiB;IACxB,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;CACR,CAAC"}

package/dist/clients/windsurf.js

@@ -0,0 +1,151 @@
+/**
+ * Windsurf Cascade adapter.
+ *
+ * Wires our universal hook scripts into `~/.codeium/windsurf/hooks.json`.
+ * Windsurf's 12 lifecycle events are listed in
+ * https://docs.windsurf.com/windsurf/cascade/hooks. We map our 4 logical
+ * moments to the closest Cascade events:
+ *
+ *   ┌──────────────────┬─────────────────────────────────────────────┐
+ *   │ Our event        │ Windsurf event                              │
+ *   ├──────────────────┼─────────────────────────────────────────────┤
+ *   │ fetch-rules      │ pre_write_code                              │
+ *   │ session-start    │ pre_user_prompt (no SessionStart in Cascade)│
+ *   │ stop             │ post_cascade_response                       │
+ *   │ pre-compact      │ (not supported — Cascade has no equivalent) │
+ *   └──────────────────┴─────────────────────────────────────────────┘
+ *
+ * `pre_user_prompt` as a stand-in for SessionStart fires on EVERY user
+ * turn (not just the first). Our session-start hook is idempotent and
+ * cheap (a single GET to the proposals endpoint that returns "0 pending"
+ * after the inbox is empty) so the cost is acceptable. A future Cascade
+ * release exposing a true session-start event will let us swap this.
+ *
+ * No version min documented — Windsurf added hooks recently but the doc
+ * doesn't pin a number. We soft-warn the user to ensure they're on a
+ * current build.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { home, log, readJson, writeJson } from '../utils.js';
+import { WINDSURF_GUARDS_SNIPPET, appendGuardSnippetIdempotent, } from './cursor-guards-rules.js';
+import { hookCommand, VIBEDEFEND_PATH_MARKER, isVibedefendOwnedHookCommand, } from '../hooks/install.js';
+import { configDirExists, probeBinaryVersion, } from './detect.js';
+const WINDSURF_HOOKS = home('.codeium', 'windsurf', 'hooks.json');
+const WINDSURF_MCP = home('.codeium', 'windsurf', 'mcp_config.json');
+function detect() {
+    // Windsurf binary names: `windsurf` (CLI shim) or check for the config dir.
+    const version = probeBinaryVersion('windsurf') ?? undefined;
+    const hasConfigDir = configDirExists(home('.codeium', 'windsurf'));
+    const installed = version !== undefined || hasConfigDir;
+    if (!installed) {
+        return {
+            installed: false,
+            supportsHooks: false,
+            reason: '`windsurf` CLI not on PATH and no ~/.codeium/windsurf/ directory.',
+        };
+    }
+    return {
+        installed: true,
+        version,
+        supportsHooks: true,
+        // No version gate — Cascade added hooks in a recent release but the
+        // doc doesn't pin a version. We assume a current install supports
+        // them; a too-old Windsurf will silently ignore the hook file.
+    };
+}
+function supports(event) {
+    // Cascade has no PreCompact equivalent. Skip it — the orchestrator
+    // surfaces this gap to the user in the multi-select prompt.
+    return event !== 'pre-compact';
+}
+function dropOurs(entries) {
+    return entries.filter((e) => !isVibedefendOwnedHookCommand(e.command));
+}
+function writeSettings(opts) {
+    const file = readJson(WINDSURF_HOOKS, {});
+    file.pre_write_code ??= [];
+    file.pre_user_prompt ??= [];
+    file.post_cascade_response ??= [];
+    file.pre_write_code = dropOurs(file.pre_write_code);
+    file.pre_user_prompt = dropOurs(file.pre_user_prompt);
+    file.post_cascade_response = dropOurs(file.post_cascade_response);
+    file.pre_write_code.push({ command: hookCommand('fetch-rules') });
+    file.pre_user_prompt.push({ command: hookCommand('session-start') });
+    // Action Guards: pre_write_code fires before every write — closest
+    // Cascade equivalent to PreToolUse. Also fires guard-check on
+    // pre_user_prompt so shell / HTTP commands typed by the user are
+    // gated as well.
+    file.pre_write_code.push({ command: hookCommand('guard-check') });
+    if (opts.enableSessionReview) {
+        file.post_cascade_response.push({
+            command: hookCommand('session-review'),
+        });
+    }
+    writeJson(WINDSURF_HOOKS, file);
+    log.ok(`Windsurf hooks wired into ${WINDSURF_HOOKS}`);
+    log.hint('Note: Cascade has no PreCompact event, so long-session gap analysis only fires at end-of-response (post_cascade_response).');
+    // Inject the soft-enforcement snippet into .windsurfrules in the project
+    // directory (process.cwd() at install time = repo root). Windsurf's
+    // Cascade pre_write_code hook fires on file writes but not on Read/Bash/
+    // WebFetch tool calls, so the snippet closes that gap by instructing the
+    // model to call cybe_guards_check before ANY sensitive action via MCP.
+    const windsurfRulesPath = join(process.cwd(), '.windsurfrules');
+    appendGuardSnippetIdempotent(windsurfRulesPath, WINDSURF_GUARDS_SNIPPET, '<see .cybedefend/config.json>');
+    log.ok(`.windsurfrules updated at ${windsurfRulesPath}`);
+}
+/**
+ * Register the CybeDefend MCP server in `~/.codeium/windsurf/mcp_config.json`.
+ *
+ * Windsurf's MCP config (per docs.windsurf.com/windsurf/cascade/mcp) uses
+ * `serverUrl` (camelCase, distinct from Cursor's `url`) for remote HTTP
+ * servers. Schema:
+ *   { "mcpServers": { "<name>": { "serverUrl": "<url>" } } }
+ */
+function registerMcp(opts) {
+    log.step(`Registering MCP "${opts.region.mcpName}" in Windsurf`);
+    log.hint(`URL: ${opts.region.mcpUrl}`);
+    const file = readJson(WINDSURF_MCP, {});
+    file.mcpServers ??= {};
+    file.mcpServers[opts.region.mcpName] = { serverUrl: opts.region.mcpUrl };
+    writeJson(WINDSURF_MCP, file);
+    log.ok(`MCP "${opts.region.mcpName}" registered in ${WINDSURF_MCP}`);
+    return true;
+}
+/**
+ * Pure introspection — never throws. `hooksWired` from
+ * `~/.codeium/windsurf/hooks.json`, `mcpRegistered` from
+ * `~/.codeium/windsurf/mcp_config.json`. Raw-text substring checks keep
+ * the never-throw guarantee.
+ */
+function inspect(region) {
+    let hooksWired = false;
+    try {
+        if (existsSync(WINDSURF_HOOKS)) {
+            hooksWired = readFileSync(WINDSURF_HOOKS, 'utf8').includes(VIBEDEFEND_PATH_MARKER);
+        }
+    }
+    catch {
+        /* missing/unreadable → false */
+    }
+    let mcpRegistered = false;
+    try {
+        if (existsSync(WINDSURF_MCP)) {
+            mcpRegistered = readFileSync(WINDSURF_MCP, 'utf8').includes(region.mcpName);
+        }
+    }
+    catch {
+        /* → false */
+    }
+    return { hooksWired, mcpRegistered };
+}
+export const windsurfAdapter = {
+    id: 'windsurf',
+    label: 'Windsurf (Cascade)',
+    detect,
+    supports,
+    writeSettings,
+    registerMcp,
+    inspect,
+};
+//# sourceMappingURL=windsurf.js.map

package/dist/clients/windsurf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windsurf.js","sourceRoot":"","sources":["../../src/clients/windsurf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAsBrE,SAAS,MAAM;IACb,4EAA4E;IAC5E,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IAC5D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC;IAExD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,OAAO;QACP,aAAa,EAAE,IAAI;QACnB,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,mEAAmE;IACnE,4DAA4D;IAC5D,OAAO,KAAK,KAAK,aAAa,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,OAA4B;IAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAoB,cAAc,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,cAAc,KAAK,EAAE,CAAC;IAC3B,IAAI,CAAC,eAAe,KAAK,EAAE,CAAC;IAC5B,IAAI,CAAC,qBAAqB,KAAK,EAAE,CAAC;IAElC,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAElE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAErE,mEAAmE;IACnE,8DAA8D;IAC9D,iEAAiE;IACjE,iBAAiB;IACjB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAElE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,CAAC,6BAA6B,cAAc,EAAE,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CACN,4HAA4H,CAC7H,CAAC;IAEF,yEAAyE;IACzE,oEAAoE;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAChE,4BAA4B,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,+BAA+B,CAAC,CAAC;IAC1G,GAAG,CAAC,EAAE,CAAC,6BAA6B,iBAAiB,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAkB,YAAY,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACzE,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,MAAoB;IAInC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,QAAQ,CACxD,sBAAsB,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,aAAa,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CACzD,MAAM,CAAC,OAAO,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,oBAAoB;IAC3B,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;CACR,CAAC"}

package/dist/config.js

@@ -0,0 +1,32 @@
+export const REGIONS = [
+    {
+        id: 'eu',
+        label: 'Production — EU',
+        description: 'EU production cluster. Pick this if your team is GDPR-scoped or based in Europe.',
+        mcpUrl: 'https://mcp.cybedefend.com/mcp',
+        apiBase: 'https://api.cybedefend.com',
+        mcpName: 'cybedefend',
+        dev: false,
+    },
+    {
+        id: 'us',
+        label: 'Production — US',
+        description: 'US production cluster. Pick this if your team is based in North America.',
+        mcpUrl: 'https://mcp-us.cybedefend.com/mcp',
+        apiBase: 'https://api-us.cybedefend.com',
+        mcpName: 'cybedefend',
+        dev: false,
+    },
+];
+/**
+ * Defaults the installer pre-fills for the hook config step. Tuned from the
+ * earlier debug sessions: threshold=3 hides typo-fix noise without missing
+ * meaningful work; auto-propose stays OFF because policy mutations need an
+ * explicit user "yes" in the chat by default.
+ */
+export const HOOK_DEFAULTS = {
+    enableSessionReview: true,
+    reviewThreshold: 3,
+    autoProposeMode: false,
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAgCA,MAAM,CAAC,MAAM,OAAO,GAA4B;IAC9C;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,kFAAkF;QACpF,MAAM,EAAE,gCAAgC;QACxC,OAAO,EAAE,4BAA4B;QACrC,OAAO,EAAE,YAAY;QACrB,GAAG,EAAE,KAAK;KACX;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,0EAA0E;QAC5E,MAAM,EAAE,mCAAmC;QAC3C,OAAO,EAAE,+BAA+B;QACxC,OAAO,EAAE,YAAY;QACrB,GAAG,EAAE,KAAK;KACX;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,CAAC;IAClB,eAAe,EAAE,KAAK;CACd,CAAC"}