@cybedefend/vibedefend 1.7.0 → 1.8.1

package/README.md

@@ -59,29 +59,35 @@ npm  install -g @cybedefend/vibedefend && vibedefend install
 
 VibeDefend auto-detects and wires whichever of these you have installed.
 
-| Capability | Claude Code | Cursor | OpenAI Codex | Windsurf | VS Code Copilot |
-|---|:---:|:---:|:---:|:---:|:---:|
-| **MCP server install** | ✅ | ✅ | ✅ | ✅ | ✅ |
-| **Business + Security Rules** *(injected pre-write)* | ✅ edit + shell⁴ | ✅ | ✅ edit + shell⁴ | ⚠️ writes only | ✅ |
-| **Action Guards** *(hard block on deny)* | ✅ all tools | ✅ all tools | ✅ all tools | ⚠️ writes + MCP fallback¹ | ❌ not yet wired |
-| **Session Start** *(loads doctrine + proposals inbox)* | ✅ | ✅ | ✅ | ⚠️ proxied² | ✅ |
-| **Session Review** *(end-of-session gap analysis + pre-commit diff scan)* | ✅ | ✅ | ✅ | ✅ | ✅ |
-| **PreCompact** *(long-session gap analysis)* | ✅ | ✅ | ❌ no event | ❌ no event | ✅ |
-| **Doctrine backstop** *(per-prompt reminder)* | ✅ | ❌ | ✱ via MCP³ | ❌ | ❌ |
-| **Min version** | latest | ≥ 1.7 | latest | latest | ≥ 1.110 |
+| Capability | Claude Code | Cursor | OpenAI Codex | Windsurf | VS Code Copilot | Google Antigravity |
+|---|:---:|:---:|:---:|:---:|:---:|:---:|
+| **MCP server install** | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
+| **Business + Security Rules** *(injected pre-write)* | ✅ edit + shell⁴ | ✅ | ✅ edit + shell⁴ | ⚠️ writes only | ✅ | ⚠️ edit + shell⁴, after the edit⁵ |
+| **Action Guards** *(hard block on deny)* | ✅ all tools | ✅ all tools | ✅ all tools | ⚠️ writes, reads, shell + MCP fallback¹ | ❌ not yet wired | ✅ all tools⁶ |
+| **Session Start** *(loads doctrine + proposals inbox)* | ✅ | ✅ | ✅ | ⚠️ proxied² | ✅ | ✅ |
+| **Session Review** *(end-of-session gap analysis + pre-commit diff scan)* | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
+| **PreCompact** *(long-session gap analysis)* | ✅ | ✅ | ❌ no event | ❌ no event | ✅ | ❌ no event |
+| **Doctrine backstop** *(per-prompt reminder)* | ✅ | ❌ | ✱ via MCP³ | ❌ | ❌ | ❌ |
+| **Min version** | latest | ≥ 1.7 | latest | latest | ≥ 1.110 | ≥ 2.0 (app / IDE) |
 
 **Legend** — ✅ supported · ⚠️ supported with caveats · ❌ not exposed by the agent · ✱ alternate mechanism
 
-¹ Windsurf's `pre_write_code` hook hard-blocks on file writes only. For non-write tool calls (Read / Bash / WebFetch) the installer drops a snippet into `.windsurfrules` instructing the agent to call `cybe_guards_check` via MCP before sensitive actions — soft enforcement that relies on the model following its rules file.
+¹ Windsurf hard-blocks file writes (`pre_write_code`), file reads (`pre_read_code`) and shell commands (`pre_run_command`): the hook exits 2 and Cascade shows the agent the reason. A warning lets the action through unseen by the agent, since Cascade only shows it a hook's output on a block. Cascade has no hook for web fetches, and MCP tool calls are not gated: for those the installer drops a snippet into `.windsurfrules` instructing the agent to call `cybe_guards_check` via MCP before sensitive actions — soft enforcement that relies on the model following its rules file.
 
 ² Windsurf has no native SessionStart event. We wire `pre_user_prompt`, which fires on every turn. The hook is idempotent and cheap (one GET to the proposals endpoint, returns "0 pending" once the inbox is empty), so the per-turn cost is negligible.
 
 ³ Codex follows the doctrine via the MCP server's `Server.instructions` field on each session, removing the need for a per-prompt reminder hook.
 
-⁴ On Claude Code and Codex the rules hook also fires on shell commands that write files (`>` / `>>` redirections, heredocs, `tee`, `sed -i`, `perl -pi`, `cp` / `mv`, `dd of=`, `bash -c '…'`), so an agent that edits through the shell gets the same rules as one using the edit tool. Read-only commands fetch nothing. Inline interpreters (`python -c`, `node -e`) and `git apply` / `patch` are not inspected. Cursor, Windsurf and VS Code Copilot: edit tools only.
+⁴ On Claude Code, Codex and Antigravity (its `run_command` tool) the rules hook also fires on shell commands that write files (`>` / `>>` redirections, heredocs, `tee`, `sed -i`, `perl -pi`, `cp` / `mv`, `dd of=`, `bash -c '…'`), so an agent that edits through the shell gets the same rules as one using the edit tool. Read-only commands fetch nothing. Inline interpreters (`python -c`, `node -e`) and `git apply` / `patch` are not inspected. Cursor, Windsurf and VS Code Copilot: edit tools only.
+
+⁵ Antigravity has no channel to inject context into the model from its PreToolUse hook, so rules fetched before a write are held and delivered at the agent's next model call (its PreInvocation event) instead — one step later than on every other client, but before the agent acts on what it just read.
+
+⁶ `agy --dangerously-skip-permissions` runs no hook at all, on any event. On Windows, a home path with a space in it is not supported — Antigravity has no way to quote the hook command it runs, so the installer detects this and refuses to wire a dead command rather than silently blocking every tool call. Antigravity's MCP servers are **not** wrapped by the VibeDefend MCP proxy (like Codex today): the CybeDefend server is registered directly against the region's URL.
 
 **Codex setup gotcha:** Codex 0.131+ requires you to approve each hook via the `/hooks` panel inside Codex *before* they fire. After running `vibedefend install`, open Codex, run `/hooks`, and trust the `cybedefend` entries — until you do that the panel will show `Installed N / Active 0`.
 
+**Antigravity sign-in:** Antigravity does not open the CybeDefend sign-in on its own, and `agy` has no login command the installer could run for you (as it runs `codex mcp login` for Codex). Until you sign in once, the `cybedefend` server answers *Unauthorized*. In the Antigravity app, open **Customizations → Installed → MCP Servers** and click **Authenticate** next to `cybedefend`. In the `agy` CLI, run `/mcp`, pick `cybedefend`, then **Authenticate**. The app, the IDE and the CLI each keep their own sign-in. The installer prints these steps under *Next steps*.
+
 **Pre-commit diff scan (on by default):** when Session Review fires, the agent
 is also asked to run a quick **diff scan** (SAST / IaC / secrets) on the files
 it changed this session, via the `cybe_scan_diff` MCP tool — a best-effort
@@ -276,7 +282,10 @@ deletes `~/.cybedefend/`, keeping only your own `~/.cybedefend/regions.json`.
 Repositories keep their committed `.cybedefend/config.json`. A Windsurf
 `.windsurfrules` block is removed from the current directory only: in any other
 repo you wired for Windsurf, delete it by hand. Codex's `[features] hooks = true`
-flag stays set, since other hooks may rely on it.
+flag stays set, since other hooks may rely on it. Antigravity's `hooks.json` and
+`mcp_config.json` are user-global (shared by the app, the IDE extension and
+`agy`, never per-project), so uninstall drops our `cybedefend-*` groups and MCP
+server from there once, for every project — there is no per-repo cleanup to do.
 
 ## Sibling: `cybedefend-cli`
 

package/dist/clients/antigravity.js

@@ -0,0 +1,342 @@
+/**
+ * Google Antigravity adapter.
+ *
+ * Antigravity shares one hooks file between the app, the IDE extension and
+ * `agy` — global, never per-project: `~/.gemini/config/hooks.json` (Windows:
+ * `%USERPROFILE%\.gemini\config\hooks.json`). Its top-level keys are hook
+ * GROUP names, not event names (contrast Cursor/Codex/Windsurf, which key by
+ * event). Each group nests its handlers under the events it fires on:
+ *
+ *   PreToolUse (and other tool events):
+ *     { "<group>": { "PreToolUse": [{ "matcher": "<regex>", "hooks": [
+ *         { "type": "command", "command": "…", "timeout": 30 } ] }] } }
+ *   Every other event (SessionStart, PreInvocation, Stop, …) lists the
+ *   handler directly, with no matcher/hooks nesting:
+ *     { "<group>": { "SessionStart": [
+ *         { "type": "command", "command": "…", "timeout": 30 } ] } }
+ * A group may also carry a sibling `"enabled"` boolean, which the user can
+ * flip in the Antigravity UI; `writeSettings` preserves it across a
+ * reinstall (see `writeSettings` below).
+ *
+ * We write 5 groups, one per moment, all prefixed `cybedefend-`:
+ *   - cybedefend-session-start   SessionStart  → session-start
+ *   - cybedefend-rules           PreToolUse    → fetch-rules   (matcher "*", self-filtered)
+ *   - cybedefend-rules-delivery  PreInvocation → pre-invocation (injects stashed rules)
+ *   - cybedefend-guards          PreToolUse    → guard-check   (matcher "*", every tool)
+ *   - cybedefend-session-review  Stop          → session-review (only when enabled)
+ *
+ * A top-level key is OURS when its name starts with `cybedefend-` AND its
+ * JSON references our managed hook dir (`textReferencesHookRunner`). That
+ * is a stronger bar than the prefix alone — a user's own `cybedefend-mine`
+ * group, wired to a command of their own, is never touched. `writeSettings`
+ * drops our groups wholesale and rewrites them fresh (so a re-install can
+ * never duplicate a handler inside a group — there's nothing to dedupe,
+ * each key is written exactly once, and an old group of ours under a
+ * command shape a previous version wrote is replaced, never kept alongside
+ * the new one), and `uninstall` only drops them.
+ *
+ * Hook commands: Antigravity runs a POSIX hook through `sh -c "<command>"`
+ * and a Windows one through `cmd /C "<command>"` — never execve directly —
+ * so:
+ *   - POSIX: `node <runner> <sub> --client antigravity || echo '<fallback>'`.
+ *     A missing `node`/runner (or any runner crash) then answers the same
+ *     fallback a healthy run would print on its own early-exit path, instead
+ *     of blocking every tool call fail-closed forever.
+ *   - Windows: `node <runner> <sub> --client antigravity`, no quoting and no
+ *     `|| echo '<fallback>'`. `agy` escapes embedded quotes, and the
+ *     fallback JSON (`{"decision":"allow"}`) is itself quote-bearing, so
+ *     there is no way to nest it inside the already-quoted `cmd /C "…"`
+ *     invocation without `agy` mangling it on the way in. The runner path
+ *     can't be quoted either, so a path containing whitespace can't be
+ *     spawned at all — `detect()`, AND `writeSettings()` itself (belt and
+ *     suspenders: a manually-ticked client that `detect()` never got to
+ *     veto, or `vibedefend doctor` re-wiring from `detect().installed`
+ *     alone), both check this (`antigravityWindowsBlock`) and refuse to
+ *     wire a command that would never run.
+ *
+ * The fallback is `{"decision":"allow"}` for the two PreToolUse subcommands
+ * (fetch-rules, guard-check) — a dead runner must fail OPEN there, exactly
+ * like every other client's hook does when it can't execute — and `{}` for
+ * every other subcommand, which Antigravity expects verbatim on success.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { readJson, writeJson } from '../json-file.js';
+import { home, log, stripBom } from '../utils.js';
+import { HOOK_RUNNER_PATH, toPosixPath, quoteCommandPath, textReferencesHookRunner } from '../hooks/install.js';
+import { PRE_TOOL_USE_SUBCOMMANDS } from '../hooks/runtime/emit.js';
+import { mcpStatus, readJsonServerEntry } from './mcp-url.js';
+import { deleteKeys, editJsonFile } from './unwire.js';
+import { configDirExists, probeBinaryVersion } from './detect.js';
+const ANTIGRAVITY_HOOKS = home('.gemini', 'config', 'hooks.json');
+const ANTIGRAVITY_MCP = home('.gemini', 'config', 'mcp_config.json');
+/**
+ * The `command` field of an Antigravity hook handler, targeting `sub` on
+ * `--client antigravity`. `--client` and `antigravity` are two separate
+ * argv tokens — the runner's arg parser skips anything before the
+ * subcommand and ignores a combined `--client=antigravity`.
+ */
+export function antigravityHookCommand(sub, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    // Forward-slash first (Windows-shell safe), as `hookCommand` does.
+    const runnerPath = toPosixPath(opts.runnerPath ?? HOOK_RUNNER_PATH);
+    if (platform === 'win32') {
+        // No quoting (a quoted path can't be spawned) and no `|| echo` fallback:
+        // the fallback JSON is quote-bearing and `agy` escapes embedded quotes,
+        // so nesting it inside the already-quoted `cmd /C "…"` invocation would
+        // be mangled rather than run.
+        return `node ${runnerPath} ${sub} --client antigravity`;
+    }
+    const fallback = PRE_TOOL_USE_SUBCOMMANDS.has(sub) ? '{"decision":"allow"}' : '{}';
+    return `node ${quoteCommandPath(runnerPath)} ${sub} --client antigravity || echo '${fallback}'`;
+}
+/**
+ * `null` unless Antigravity on Windows cannot spawn `runnerPath` at all — a
+ * whitespace path with no safe quoting mechanism available. Used by both
+ * `detect()` and `writeSettings()` (to report/refuse instead of wiring a
+ * dead command) and by tests.
+ */
+export function antigravityWindowsBlock(platform, runnerPath) {
+    if (platform !== 'win32')
+        return null;
+    if (!/\s/.test(runnerPath))
+        return null;
+    return `Antigravity on Windows cannot run a hook whose path contains a space: ${runnerPath}`;
+}
+/**
+ * The 5 (or 4, with session review off) `cybedefend-*` hook groups, keyed by
+ * group name — ready to be merged as whole top-level keys into `hooks.json`.
+ */
+export function buildAntigravityHookGroups(opts) {
+    const cmd = (sub) => antigravityHookCommand(sub, { platform: opts.platform, runnerPath: opts.runnerPath });
+    const groups = {
+        'cybedefend-session-start': {
+            SessionStart: [{ type: 'command', command: cmd('session-start'), timeout: 30 }],
+        },
+        'cybedefend-rules': {
+            PreToolUse: [
+                {
+                    // Every tool (Ruling R14): Antigravity's tool names change with the
+                    // model (`write_to_file` or `write_file`, `replace_file_content` or
+                    // `edit_file`, …), and a matcher that missed one silently dropped
+                    // the rules for every write. fetch-rules keeps only the write and
+                    // shell tools itself and answers `allow` at once on any other.
+                    matcher: '*',
+                    hooks: [{ type: 'command', command: cmd('fetch-rules'), timeout: 30 }],
+                },
+            ],
+        },
+        'cybedefend-rules-delivery': {
+            PreInvocation: [{ type: 'command', command: cmd('pre-invocation'), timeout: 10 }],
+        },
+        'cybedefend-guards': {
+            PreToolUse: [
+                {
+                    matcher: '*',
+                    hooks: [{ type: 'command', command: cmd('guard-check'), timeout: 30 }],
+                },
+            ],
+        },
+    };
+    if (opts.enableSessionReview) {
+        groups['cybedefend-session-review'] = {
+            Stop: [{ type: 'command', command: cmd('session-review'), timeout: 30 }],
+        };
+    }
+    return groups;
+}
+/** Top-level keys of `file` that are ours: prefix `cybedefend-` AND the JSON references our managed hook dir. */
+function ourGroupKeys(file) {
+    return Object.keys(file).filter((key) => key.startsWith('cybedefend-') && textReferencesHookRunner(JSON.stringify(file[key])));
+}
+/**
+ * Delete every top-level key of `file` that is ours (prefix `cybedefend-`
+ * AND its JSON references our managed hook dir). A user's own
+ * `cybedefend-*` group that doesn't mention our runner is left alone — the
+ * prefix alone is not a strong enough signal to delete someone else's
+ * config. Returns whether anything was removed.
+ */
+function dropOurGroups(file) {
+    const keys = ourGroupKeys(file);
+    for (const key of keys)
+        delete file[key];
+    return keys.length > 0;
+}
+/**
+ * The names of our groups the user has switched off (`"enabled": false`,
+ * Antigravity's own per-group toggle) before they get dropped and rewritten
+ * — so `writeSettings` can carry that flag over onto the fresh replacement
+ * instead of silently re-enabling a group the user turned off.
+ */
+function disabledOurGroups(file) {
+    const disabled = new Set();
+    for (const key of ourGroupKeys(file)) {
+        const group = file[key];
+        if (group && typeof group === 'object' && group.enabled === false) {
+            disabled.add(key);
+        }
+    }
+    return disabled;
+}
+function detect() {
+    const version = probeBinaryVersion('agy') ?? undefined;
+    const hasConfigDir = configDirExists(home('.gemini', 'antigravity')) ||
+        configDirExists(home('.gemini', 'antigravity-ide')) ||
+        configDirExists(home('.gemini', 'antigravity-cli'));
+    const hasApp = process.platform === 'darwin' && existsSync('/Applications/Antigravity.app');
+    const installed = version !== undefined || hasConfigDir || hasApp;
+    // Computed regardless of `installed`: a Windows home with a whitespace
+    // path is the more actionable reason to surface, and `writeSettings` is
+    // reachable even from a "not installed" detection (a client manually
+    // ticked in the install picker, or `vibedefend doctor` re-wiring from
+    // `detect().installed` alone without re-checking `supportsHooks`).
+    const windowsBlock = antigravityWindowsBlock(process.platform, HOOK_RUNNER_PATH);
+    if (!installed) {
+        return {
+            installed: false,
+            supportsHooks: false,
+            reason: windowsBlock ??
+                '`agy` CLI not on PATH, no ~/.gemini/antigravity(-ide|-cli)/ directory, ' +
+                    'and no /Applications/Antigravity.app.',
+        };
+    }
+    // No version gate — hooks shipped with Antigravity's first release.
+    if (windowsBlock) {
+        return { installed: true, version, supportsHooks: false, reason: windowsBlock };
+    }
+    return { installed: true, version, supportsHooks: true };
+}
+function supports(event) {
+    // Antigravity has no PreCompact and no UserPromptSubmit event. Action
+    // Guards (guard-check) and rules delivery (pre-invocation) are wired
+    // unconditionally below — they aren't part of the LifecycleEvent surface
+    // `supports()` is asked about.
+    return event === 'fetch-rules' || event === 'session-start' || event === 'stop';
+}
+function writeSettings(opts) {
+    // Belt and suspenders: `detect()` is what normally keeps this adapter out
+    // of the picker on an unspawnable Windows path, but `writeSettings` can
+    // still be reached directly (a client ticked by hand before `detect()`
+    // ran, or a re-wire driven only by `detect().installed`). Never wire a
+    // command that would block every Antigravity tool call for want of a
+    // runnable hook — and clean up anything an earlier, unguarded install
+    // left behind.
+    const windowsBlock = antigravityWindowsBlock(process.platform, HOOK_RUNNER_PATH);
+    if (windowsBlock) {
+        log.warn(windowsBlock);
+        editJsonFile(ANTIGRAVITY_HOOKS, dropOurGroups);
+        return;
+    }
+    const file = readJson(ANTIGRAVITY_HOOKS, {});
+    const disabled = disabledOurGroups(file);
+    dropOurGroups(file);
+    const groups = buildAntigravityHookGroups({ enableSessionReview: opts.enableSessionReview });
+    for (const key of disabled) {
+        const group = groups[key];
+        if (group && typeof group === 'object') {
+            group.enabled = false;
+        }
+    }
+    Object.assign(file, groups);
+    writeJson(ANTIGRAVITY_HOOKS, file);
+    log.ok(`Antigravity hooks wired into ${ANTIGRAVITY_HOOKS}`);
+    log.hint('`agy --dangerously-skip-permissions` runs no hook at all.');
+    log.hint('Rules reach the agent at its next model call (PreInvocation), not immediately after the edit that triggered them.');
+}
+/**
+ * Register the CybeDefend MCP server in `~/.gemini/config/mcp_config.json`.
+ * This is NOT wrapped by the VibeDefend MCP proxy (like Codex today) — the
+ * entry points straight at the region's URL.
+ */
+function registerMcp(opts) {
+    log.step(`Registering MCP "${opts.region.mcpName}" in Antigravity`);
+    log.hint(`URL: ${opts.region.mcpUrl}`);
+    const file = readJson(ANTIGRAVITY_MCP, {});
+    file.mcpServers ??= {};
+    file.mcpServers[opts.region.mcpName] = { serverUrl: opts.region.mcpUrl };
+    writeJson(ANTIGRAVITY_MCP, file);
+    log.ok(`MCP "${opts.region.mcpName}" registered in ${ANTIGRAVITY_MCP}`);
+    log.hint(`Sign in to it once: ${signInHowTo(opts.region)}`);
+    return true;
+}
+/**
+ * Antigravity opens no sign-in on its own: until the user authenticates,
+ * the server shows "Unauthorized" next to an Authenticate button (observed
+ * on Antigravity 2.28.2). `agy` has no login command the installer could
+ * run, unlike `codex mcp login`. The app, the IDE and the CLI each keep
+ * their own sign-in.
+ */
+function signInHowTo(region) {
+    return (`in Antigravity, open Customizations → Installed → MCP Servers and click Authenticate next to "${region.mcpName}"; ` +
+        `in the agy CLI, run /mcp, pick "${region.mcpName}", then Authenticate. Each of them keeps its own sign-in.`);
+}
+function mcpSignInStep(region) {
+    return `Google Antigravity: ${signInHowTo(region)}`;
+}
+/**
+ * Pure introspection — never throws, as Windsurf's does. `hooksWired` from a
+ * raw-text marker check on `hooks.json`, `mcpRegistered` from the
+ * `serverUrl` of our entry in `mcp_config.json` — it must point at this
+ * region, not just exist. Both reads strip a leading BOM first, since
+ * either file may carry one.
+ */
+function inspect(region) {
+    let hooksWired = false;
+    try {
+        if (existsSync(ANTIGRAVITY_HOOKS)) {
+            hooksWired = textReferencesHookRunner(stripBom(readFileSync(ANTIGRAVITY_HOOKS, 'utf8')));
+        }
+    }
+    catch {
+        /* missing/unreadable → false */
+    }
+    const entry = readJsonServerEntry(() => stripBom(readFileSync(ANTIGRAVITY_MCP, 'utf8')), 'mcpServers', region.mcpName);
+    return { hooksWired, ...mcpStatus(entry?.serverUrl, region) };
+}
+/**
+ * Drop our `cybedefend-*` groups from `hooks.json` (whole top-level keys —
+ * see `dropOurGroups`) and our servers from `mcp_config.json`. Every other
+ * key / server is left untouched.
+ *
+ * The two files are independent, so both steps always run even when one
+ * throws (a malformed `hooks.json` must not leave our MCP server behind) —
+ * only once both have been attempted does this re-throw the FIRST error, if
+ * any.
+ */
+function uninstall(opts) {
+    let hooksRemoved = false;
+    let hooksError;
+    try {
+        hooksRemoved = editJsonFile(ANTIGRAVITY_HOOKS, dropOurGroups);
+    }
+    catch (err) {
+        hooksError = err;
+    }
+    let mcpRemoved = [];
+    let mcpError;
+    try {
+        editJsonFile(ANTIGRAVITY_MCP, (file) => {
+            mcpRemoved = deleteKeys(file.mcpServers, opts.mcpNames);
+            return mcpRemoved.length > 0;
+        });
+    }
+    catch (err) {
+        mcpError = err;
+    }
+    if (hooksError)
+        throw hooksError;
+    if (mcpError)
+        throw mcpError;
+    return { hookFiles: hooksRemoved ? [ANTIGRAVITY_HOOKS] : [], mcpRemoved };
+}
+export const antigravityAdapter = {
+    id: 'antigravity',
+    label: 'Google Antigravity',
+    detect,
+    supports,
+    writeSettings,
+    registerMcp,
+    mcpSignInStep,
+    inspect,
+    uninstall,
+};
+//# sourceMappingURL=antigravity.js.map

package/dist/clients/antigravity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../src/clients/antigravity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAChH,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAYpE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAElE,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAcrE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAA0B,EAC1B,OAA4D,EAAE;IAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,mEAAmE;IACnE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;IAEpE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,8BAA8B;QAC9B,OAAO,QAAQ,UAAU,IAAI,GAAG,uBAAuB,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO,QAAQ,gBAAgB,CAAC,UAAU,CAAC,IAAI,GAAG,kCAAkC,QAAQ,GAAG,CAAC;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAyB,EACzB,UAAkB;IAElB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,yEAAyE,UAAU,EAAE,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAI1C;IACC,MAAM,GAAG,GAAG,CAAC,GAA0B,EAAU,EAAE,CACjD,sBAAsB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAExF,MAAM,MAAM,GAA4B;QACtC,0BAA0B,EAAE;YAC1B,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SAChF;QACD,kBAAkB,EAAE;YAClB,UAAU,EAAE;gBACV;oBACE,oEAAoE;oBACpE,oEAAoE;oBACpE,kEAAkE;oBAClE,kEAAkE;oBAClE,+DAA+D;oBAC/D,OAAO,EAAE,GAAG;oBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBACvE;aACF;SACF;QACD,2BAA2B,EAAE;YAC3B,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SAClF;QACD,mBAAmB,EAAE;YACnB,UAAU,EAAE;gBACV;oBACE,OAAO,EAAE,GAAG;oBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBACvE;aACF;SACF;KACF,CAAC;IAEF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,CAAC,2BAA2B,CAAC,GAAG;YACpC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iHAAiH;AACjH,SAAS,YAAY,CAAC,IAA6B;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAA6B;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAA6B;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAiC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC/F,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM;IACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IACvD,MAAM,YAAY,GAChB,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/C,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACnD,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,IAAI,MAAM,CAAC;IAElE,uEAAuE;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAEjF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EACJ,YAAY;gBACZ,yEAAyE;oBACvE,uCAAuC;SAC5C,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClF,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,+BAA+B;IAC/B,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,MAAM,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,eAAe;IACf,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACjF,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvB,YAAY,CAA0B,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAA0B,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,MAAM,MAAM,GAAG,0BAA0B,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC7F,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAiC,CAAC,OAAO,GAAG,KAAK,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEnC,GAAG,CAAC,EAAE,CAAC,gCAAgC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACtE,GAAG,CAAC,IAAI,CACN,mHAAmH,CACpH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAqB,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACzE,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,eAAe,EAAE,CAAC,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,uBAAuB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,MAAoB;IACvC,OAAO,CACL,iGAAiG,MAAM,CAAC,OAAO,KAAK;QACpH,mCAAmC,MAAM,CAAC,OAAO,2DAA2D,CAC7G,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,OAAO,uBAAuB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,MAAoB;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAC/B,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,EACrD,YAAY,EACZ,MAAM,CAAC,OAAO,CACf,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,IAAmB;IACpC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAA0B,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC;IAED,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,YAAY,CAAqB,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE;YACzD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,IAAI,UAAU;QAAE,MAAM,UAAU,CAAC;IACjC,IAAI,QAAQ;QAAE,MAAM,QAAQ,CAAC;IAE7B,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,oBAAoB;IAC3B,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,aAAa;IACb,OAAO;IACP,SAAS;CACV,CAAC"}

package/dist/clients/registry.js

@@ -6,6 +6,7 @@
  * order. Claude Code first because it has the most mature hook surface
  * and is the assumed default; the others follow alphabetically.
  */
+import { antigravityAdapter } from './antigravity.js';
 import { claudeCodeAdapter } from './claude-code.js';
 import { codexAdapter } from './codex.js';
 import { cursorAdapter } from './cursor.js';
@@ -17,6 +18,7 @@ export const ALL_ADAPTERS = [
     vscodeAdapter,
     windsurfAdapter,
     codexAdapter,
+    antigravityAdapter,
 ];
 /** Look up an adapter by ID. Throws if not found (programming error). */
 export function adapterFor(id) {

package/dist/clients/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/clients/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,eAAe;IACf,YAAY;CACJ,CAAC;AAEX,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS;IAIvB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/clients/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,eAAe;IACf,YAAY;IACZ,kBAAkB;CACV,CAAC;AAEX,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS;IAIvB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/clients/windsurf.js

@@ -10,6 +10,8 @@
  *   │ Our event        │ Windsurf event                              │
  *   ├──────────────────┼─────────────────────────────────────────────┤
  *   │ fetch-rules      │ pre_write_code                              │
+ *   │ guard-check      │ pre_write_code, pre_read_code,              │
+ *   │                  │ pre_run_command                             │
  *   │ session-start    │ pre_user_prompt (no SessionStart in Cascade)│
  *   │ stop             │ post_cascade_response                       │
  *   │ pre-compact      │ (not supported — Cascade has no equivalent) │
@@ -68,18 +70,27 @@ function dropOurs(entries) {
 function writeSettings(opts) {
     const file = readJson(WINDSURF_HOOKS, {});
     file.pre_write_code ??= [];
+    file.pre_read_code ??= [];
+    file.pre_run_command ??= [];
     file.pre_user_prompt ??= [];
     file.post_cascade_response ??= [];
     file.pre_write_code = dropOurs(file.pre_write_code);
+    file.pre_read_code = dropOurs(file.pre_read_code);
+    file.pre_run_command = dropOurs(file.pre_run_command);
     file.pre_user_prompt = dropOurs(file.pre_user_prompt);
     file.post_cascade_response = dropOurs(file.post_cascade_response);
     file.pre_write_code.push({ command: hookCommand('fetch-rules') });
     file.pre_user_prompt.push({ command: hookCommand('session-start') });
-    // Action Guards: pre_write_code fires before every write — closest
-    // Cascade equivalent to PreToolUse. Also fires guard-check on
-    // pre_user_prompt so shell / HTTP commands typed by the user are
-    // gated as well.
+    // Action Guards: Cascade has no single PreToolUse, it has one pre-hook per
+    // kind of action. guard-check runs on the three that carry a target to
+    // gate — a write (`tool_info.file_path`), a read (`tool_info.file_path`)
+    // and a shell command (`tool_info.command_line`) — and blocks with exit 2,
+    // the agent reading the reason on stderr. Not wired on pre_user_prompt
+    // (a prompt has no target) nor pre_mcp_tool_use (tools with arbitrary
+    // arguments; the .windsurfrules snippet below covers them).
     file.pre_write_code.push({ command: hookCommand('guard-check') });
+    file.pre_read_code.push({ command: hookCommand('guard-check') });
+    file.pre_run_command.push({ command: hookCommand('guard-check') });
     if (opts.enableSessionReview) {
         file.post_cascade_response.push({
             command: hookCommand('session-review'),
@@ -89,10 +100,11 @@ function writeSettings(opts) {
     log.ok(`Windsurf hooks wired into ${WINDSURF_HOOKS}`);
     log.hint('Note: Cascade has no PreCompact event, so long-session gap analysis only fires at end-of-response (post_cascade_response).');
     // Inject the soft-enforcement snippet into .windsurfrules in the project
-    // directory (process.cwd() at install time = repo root). Windsurf's
-    // Cascade pre_write_code hook fires on file writes but not on Read/Bash/
-    // WebFetch tool calls, so the snippet closes that gap by instructing the
-    // model to call cybe_guards_check before ANY sensitive action via MCP.
+    // directory (process.cwd() at install time = repo root). The hooks above
+    // gate writes, reads and shell commands; Cascade has no hook for web
+    // fetches, and MCP tool calls are not gated, so the snippet closes that gap
+    // by instructing the model to call cybe_guards_check before ANY sensitive
+    // action via MCP.
     const windsurfRulesPath = join(process.cwd(), '.windsurfrules');
     appendGuardSnippetIdempotent(windsurfRulesPath, WINDSURF_GUARDS_SNIPPET, '<see .cybedefend/config.json>');
     log.ok(`.windsurfrules updated at ${windsurfRulesPath}`);

package/dist/clients/windsurf.js.map

@@ -1 +1 @@
-{"version":3,"file":"windsurf.js","sourceRoot":"","sources":["../../src/clients/windsurf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAY7B,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAsBrE,SAAS,MAAM;IACb,4EAA4E;IAC5E,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IAC5D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC;IAExD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,OAAO;QACP,aAAa,EAAE,IAAI;QACnB,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,mEAAmE;IACnE,4DAA4D;IAC5D,OAAO,KAAK,KAAK,aAAa,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,OAA4B;IAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAoB,cAAc,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,cAAc,KAAK,EAAE,CAAC;IAC3B,IAAI,CAAC,eAAe,KAAK,EAAE,CAAC;IAC5B,IAAI,CAAC,qBAAqB,KAAK,EAAE,CAAC;IAElC,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAElE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAErE,mEAAmE;IACnE,8DAA8D;IAC9D,iEAAiE;IACjE,iBAAiB;IACjB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAElE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,CAAC,6BAA6B,cAAc,EAAE,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CACN,4HAA4H,CAC7H,CAAC;IAEF,yEAAyE;IACzE,oEAAoE;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAChE,4BAA4B,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,+BAA+B,CAAC,CAAC;IAC1G,GAAG,CAAC,EAAE,CAAC,6BAA6B,iBAAiB,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAkB,YAAY,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACzE,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,MAAoB;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,wBAAwB,CACnC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAC/B,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,EACxC,YAAY,EACZ,MAAM,CAAC,OAAO,CACf,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAmB;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IACE,YAAY,CAAoB,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACvD,mBAAmB,CAAoB,IAAI,EAAE,QAAQ,CAAC,CACvD,EACD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACpE,IAAI,kBAAkB,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE7D,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,YAAY,CAAkB,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;QACnD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,oBAAoB;IAC3B,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;IACP,SAAS;CACV,CAAC"}
+{"version":3,"file":"windsurf.js","sourceRoot":"","sources":["../../src/clients/windsurf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAY7B,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAwBrE,SAAS,MAAM;IACb,4EAA4E;IAC5E,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IAC5D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC;IAExD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI;QACf,OAAO;QACP,aAAa,EAAE,IAAI;QACnB,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,mEAAmE;IACnE,4DAA4D;IAC5D,OAAO,KAAK,KAAK,aAAa,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,OAA4B;IAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAoB,cAAc,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,cAAc,KAAK,EAAE,CAAC;IAC3B,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC;IAC1B,IAAI,CAAC,eAAe,KAAK,EAAE,CAAC;IAC5B,IAAI,CAAC,eAAe,KAAK,EAAE,CAAC;IAC5B,IAAI,CAAC,qBAAqB,KAAK,EAAE,CAAC;IAElC,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAElE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAErE,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,sEAAsE;IACtE,4DAA4D;IAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAEnE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,CAAC,6BAA6B,cAAc,EAAE,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CACN,4HAA4H,CAC7H,CAAC;IAEF,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,4EAA4E;IAC5E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAChE,4BAA4B,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,+BAA+B,CAAC,CAAC;IAC1G,GAAG,CAAC,EAAE,CAAC,6BAA6B,iBAAiB,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAkB,YAAY,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACzE,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,MAAoB;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,wBAAwB,CACnC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAC/B,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,EACxC,YAAY,EACZ,MAAM,CAAC,OAAO,CACf,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAmB;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IACE,YAAY,CAAoB,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACvD,mBAAmB,CAAoB,IAAI,EAAE,QAAQ,CAAC,CACvD,EACD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACpE,IAAI,kBAAkB,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE7D,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,YAAY,CAAkB,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;QACnD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,oBAAoB;IAC3B,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;IACP,SAAS;CACV,CAAC"}