@fusengine/harness 0.1.90 → 0.1.91

package/dist/{hermes-kP6NUQlG.mjs → hermes-B9-p_3IF.mjs}

@@ -1,6 +1,7 @@
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-5bC8TDAz.mjs";
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { c as readClaudeInput } from "./claude-Ckv2_TgP.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/{index-DBgnIZn9.d.mts → index-B8PG82su.d.mts}

@@ -1,4 +1,4 @@
-import { t as Prompt } from "./types-C0-igRKr.mjs";
+import { t as Prompt } from "./types-Bh0jEF3_.mjs";
 import { t as AuthEntry } from "./doc-helpers-BGCzP9VF.mjs";
 import { t as RefMeta } from "./types-CY5qT2X1.mjs";
 //#region src/policy/detect-project.d.ts

package/dist/{index-D4C2-IIc.d.mts → index-SmKYkk2N.d.mts}

@@ -1,4 +1,4 @@
-import { t as Prompt } from "./types-C0-igRKr.mjs";
+import { t as Prompt } from "./types-Bh0jEF3_.mjs";
 //#region src/adapters/claude/index.d.ts
 /** Subset of the Claude Code hook stdin payload we consume. */
 interface ClaudeHookInput {

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-C0-igRKr.mjs";
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-Bh0jEF3_.mjs";
 import { _ as queryHash, a as cacheLookupSubstringMeta, c as mcpCacheKey, d as extractText, f as IndexSummary, g as jaccardSimilar, h as compactMarkdown, i as cacheLookupSubstring, l as mcpCacheWrite, m as summarizeIndex, n as cacheLookup, o as cachePath, p as loadIndex, r as cacheLookupMeta, s as cacheStore, t as CacheHit, u as webfetchCacheWrite } from "./index-DhmV2MPh.mjs";
 import { _ as DEFAULT_TTL_SEC, a as ProjectLayout, b as ttlLabel, c as projectLayout, d as MAX_LINES_ENV_KEY, f as hookBudget, g as storeBudget, h as splitTarget, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as resolveStdinMaxBytes, n as envCandidates, o as STATE_GITIGNORE, p as resolveMaxLines, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as DEFAULT_STDIN_MAX_BYTES, v as TTL_ENV_KEY, x as parseEnvInt, y as resolveTtlSec } from "./index-oXXPs2xl.mjs";
 import { i as HarnessVia, n as HarnessInfo, r as HarnessMode, t as HarnessId } from "./types-DvXTI71X.mjs";
@@ -6,7 +6,7 @@ import { n as detectMode, r as modeFor, t as detectHarness } from "./index-CigBu
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-BGCzP9VF.mjs";
 import { t as incrementTrivialEditCounter } from "./index-84heAAm_.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-p9fLrSOD.mjs";
-import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "./index-DBgnIZn9.mjs";
+import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "./index-B8PG82su.mjs";
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "./types-CY5qT2X1.mjs";
 import { a as ReminderState, c as readState, d as throttleMs, i as registryFile, l as setStateField, n as addRoot, o as lessonsFileFor, r as readRoots, s as nowStamp, t as ensureMemoryGitignore, u as stateFileFor } from "./index-DLYhervv.mjs";
 import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "./index-DEfz82BP.mjs";

package/dist/index.mjs

@@ -4,11 +4,11 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-C1VSI5pb.mjs";
+import { $ as isRalphMode, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as ASK_PATTERNS, I as SAFE_PREFIXES, J as GIT_ASK, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as SYSTEM_INSTALL, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as CRITICAL_PATTERNS, W as securityGuard, X as PROJECT_INSTALL, Y as GIT_BLOCKED, Z as RALPH_SAFE, a as registerGuard, at as maskCommentsOnly, b as interfaceDeclLevel, c as GO_DECL_RE, ct as detectProjectType, d as PY_MODEL_RE, et as matchPatterns, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsAndStrings, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as isApexCommand, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as DEV_KEYWORDS, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, st as detectModularArchitecture, t as evaluate, tt as detectFramework, u as PHP_DECL_RE, ut as requiredArchSkill, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-CMiIqHeH.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-DZFtAbLP.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-KjZ1X9tH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-IhHk2KlT.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/init/index.d.mts

@@ -15,7 +15,7 @@ interface InitFile {
 declare function claudeInit(command: string): InitFile[];
 /** Codex CLI: `.codex/hooks.json` (Claude-compatible shape). */
 declare function codexInit(command: string): InitFile[];
-/** Cursor: `.cursor/hooks.json` (version 1) — shell + tool gate + file-edit observe. */
+/** Cursor: `.cursor/hooks.json` (version 1) — supported pre gates and post observers. */
 declare function cursorInit(command: string): InitFile[];
 /** Gemini CLI: `.gemini/settings.json` — BeforeTool(edits) + AfterTool(all, regex). */
 declare function geminiInit(command: string): InitFile[];

package/dist/init/index.mjs

@@ -1,2 +1,2 @@
-import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-TAXNRSpD.mjs";
+import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-GHAMqcOn.mjs";
 export { claudeInit, clineInit, codexInit, cursorInit, geminiInit, initFor, writeInitFile };

package/dist/{kimi-D6X7b8wF.mjs → kimi-G2wcSh5-.mjs}

@@ -1,6 +1,7 @@
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-5bC8TDAz.mjs";
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { c as readClaudeInput } from "./claude-Ckv2_TgP.mjs";
 //#region src/adapters/kimi/index.ts
 /**
 * Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,

package/dist/normalize-BjG6unTj.mjs

@@ -0,0 +1,317 @@
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { isAbsolute, normalize, relative } from "node:path";
+import { realpathSync } from "node:fs";
+//#region src/adapters/cursor/events.ts
+const EVENT_CONTRACTS = {
+	sessionStart: {
+		phase: "pre",
+		lifecycle: "SessionStart",
+		response: "session-context",
+		blockable: false,
+		known: true
+	},
+	sessionEnd: {
+		phase: "post",
+		lifecycle: "SessionEnd",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeSubmitPrompt: {
+		phase: "pre",
+		lifecycle: "UserPromptSubmit",
+		response: "submit-control",
+		blockable: true,
+		known: true
+	},
+	preCompact: {
+		phase: "pre",
+		lifecycle: "PreCompact",
+		response: "compact-notice",
+		blockable: false,
+		known: true
+	},
+	subagentStart: {
+		phase: "pre",
+		lifecycle: "SubagentStart",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	subagentStop: {
+		phase: "post",
+		lifecycle: "SubagentStop",
+		response: "followup",
+		blockable: false,
+		known: true
+	},
+	preToolUse: {
+		phase: "pre",
+		lifecycle: "PreToolUse",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	postToolUse: {
+		phase: "post",
+		lifecycle: "PostToolUse",
+		response: "post-context",
+		blockable: false,
+		known: true
+	},
+	postToolUseFailure: {
+		phase: "post",
+		lifecycle: "PostToolUseFailure",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeShellExecution: {
+		phase: "pre",
+		lifecycle: "BeforeShellExecution",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterShellExecution: {
+		phase: "post",
+		lifecycle: "AfterShellExecution",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeMCPExecution: {
+		phase: "pre",
+		lifecycle: "BeforeMCPExecution",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterMCPExecution: {
+		phase: "post",
+		lifecycle: "AfterMCPExecution",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeReadFile: {
+		phase: "pre",
+		lifecycle: "BeforeReadFile",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterFileEdit: {
+		phase: "post",
+		lifecycle: "AfterFileEdit",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeTabFileRead: {
+		phase: "pre",
+		lifecycle: "BeforeTabFileRead",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterTabFileEdit: {
+		phase: "post",
+		lifecycle: "AfterTabFileEdit",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	afterAgentResponse: {
+		phase: "post",
+		lifecycle: "AfterAgentResponse",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	afterAgentThought: {
+		phase: "post",
+		lifecycle: "AfterAgentThought",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	stop: {
+		phase: "post",
+		lifecycle: "Stop",
+		response: "followup",
+		blockable: false,
+		known: true
+	},
+	workspaceOpen: {
+		phase: "pre",
+		lifecycle: "WorkspaceOpen",
+		response: "plugin-paths",
+		blockable: false,
+		known: true
+	}
+};
+const UNKNOWN_EVENT = {
+	phase: "post",
+	lifecycle: null,
+	response: "neutral",
+	blockable: false,
+	known: false
+};
+/** Return explicit routing and response metadata for a Cursor event name. */
+function cursorEventContract(eventName) {
+	return EVENT_CONTRACTS[eventName] ?? UNKNOWN_EVENT;
+}
+//#endregion
+//#region src/adapters/cursor/context.ts
+/** Preserve a Cursor path value only when it is non-empty and NUL-free. */
+function cursorPath(value) {
+	return typeof value === "string" && value.length > 0 && !value.includes("\0") ? value : void 0;
+}
+/** Validate and normalize an absolute path supplied by Cursor. */
+function cursorAbsolutePath(value) {
+	const candidate = cursorPath(value);
+	if (!candidate || !isAbsolute(candidate)) return void 0;
+	const path = normalize(candidate);
+	try {
+		return realpathSync.native(path);
+	} catch {
+		return path;
+	}
+}
+/** Preserve distinct, validated Cursor workspace roots in wire order. */
+function cursorWorkspaceRoots(value) {
+	if (!Array.isArray(value)) return [];
+	const roots = value.map(cursorAbsolutePath).filter((root) => root !== void 0);
+	return [...new Set(roots)];
+}
+function contains(root, filePath) {
+	const rel = relative(root, filePath);
+	return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+/** Select Cursor's project scope without replacing a valid payload cwd. */
+function cursorProjectCwd(cwd, workspaceRoots, filePath, fallback) {
+	if (cwd) return cwd;
+	if (filePath) {
+		const matches = workspaceRoots.filter((root) => contains(root, filePath));
+		if (matches.length > 0) return matches.sort((a, b) => b.length - a.length)[0];
+	}
+	return workspaceRoots[0] ?? fallback;
+}
+//#endregion
+//#region src/adapters/cursor/normalize.ts
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function str(value) {
+	return typeof value === "string" ? value : void 0;
+}
+function inputRecord(value) {
+	const direct = record(value);
+	if (direct || typeof value !== "string") return direct;
+	try {
+		return record(JSON.parse(value));
+	} catch {
+		return;
+	}
+}
+const MCP_ROOT_FIELDS = [
+	"mcp_server_name",
+	"mcp_server_url",
+	"url",
+	"result_json",
+	"duration"
+];
+function cursorMcpInput(raw, input) {
+	const merged = { ...input };
+	for (const field of MCP_ROOT_FIELDS) if (Object.hasOwn(raw, field)) merged[field] = raw[field];
+	return merged;
+}
+function sanitizedCursorInput(input) {
+	const safe = { ...input };
+	if (typeof safe.file_path === "string" && cursorPath(safe.file_path) === void 0) delete safe.file_path;
+	if (typeof safe.path === "string" && cursorPath(safe.path) === void 0) delete safe.path;
+	if (Object.hasOwn(safe, "cwd")) {
+		const cwd = cursorAbsolutePath(safe.cwd);
+		if (cwd) safe.cwd = cwd;
+		else delete safe.cwd;
+	}
+	if (Object.hasOwn(safe, "workspace_roots")) if (Array.isArray(safe.workspace_roots)) safe.workspace_roots = cursorWorkspaceRoots(safe.workspace_roots);
+	else delete safe.workspace_roots;
+	return safe;
+}
+function cursorToolName(raw, event, tool, hasCommand) {
+	if (hasCommand) return "Bash";
+	const server = str(raw.mcp_server_name)?.trim().replace(/[^A-Za-z0-9_-]+/g, "_");
+	if (/^(before|after)MCPExecution$/i.test(event) && server && tool && !tool.startsWith("mcp__")) return `mcp__${server}__${tool}`;
+	if (tool === "Write") return "Edit";
+	return tool ?? "";
+}
+function cursorCommands(raw, input) {
+	const candidates = [commandToString(raw.command), commandToString(input.command)].filter((candidate) => candidate !== void 0);
+	return [...new Set(candidates)];
+}
+/**
+* Extract one Cursor hook payload into the shared runtime shape.
+*
+* @param payload - Cursor hook stdin payload.
+* @returns Cursor-specific phase, tool, command, and edit fields.
+*/
+function extractCursorEvent(payload) {
+	const raw = payload;
+	const hookEvent = str(raw.hook_event_name) ?? "";
+	const parsedInput = inputRecord(raw.tool_input);
+	const input = sanitizedCursorInput((parsedInput && /^(before|after)MCPExecution$/i.test(hookEvent) ? cursorMcpInput(raw, parsedInput) : parsedInput) ?? raw);
+	const contract = cursorEventContract(hookEvent);
+	const metadata = {
+		eventName: hookEvent,
+		lifecycleEvent: contract.lifecycle,
+		responseKind: contract.response,
+		blockable: contract.blockable,
+		cwd: cursorAbsolutePath(raw.cwd),
+		workspaceRoots: cursorWorkspaceRoots(raw.workspace_roots)
+	};
+	if (!contract.known) return {
+		...metadata,
+		phase: contract.phase,
+		tool: "",
+		input
+	};
+	const afterFileEdit = /^afterFileEdit$/i.test(hookEvent);
+	const beforeReadFile = /^beforeReadFile$/i.test(hookEvent);
+	const beforeTabFileRead = /^beforeTabFileRead$/i.test(hookEvent);
+	const edits = Array.isArray(raw.edits) ? raw.edits.map(record).filter((edit) => edit !== void 0) : [];
+	const filePath = cursorPath(raw.file_path);
+	if (filePath && edits.length > 0) {
+		const files = edits.map((edit) => ({
+			filePath,
+			oldString: str(edit.old_string),
+			content: str(edit.new_string) ?? "",
+			op: "update"
+		}));
+		return {
+			...metadata,
+			phase: contract.phase,
+			tool: "Edit",
+			input,
+			filePath,
+			content: files.map((file) => file.content).join("\n"),
+			files
+		};
+	}
+	const commands = cursorCommands(raw, input);
+	const command = commands[0];
+	return {
+		...metadata,
+		phase: contract.phase,
+		tool: afterFileEdit ? "Edit" : beforeReadFile || beforeTabFileRead ? "Read" : cursorToolName(raw, hookEvent, str(raw.tool_name), command !== void 0),
+		input,
+		filePath: cursorPath(input.file_path) ?? cursorPath(input.path),
+		content: str(input.content) ?? str(input.new_string),
+		oldString: str(input.old_string),
+		command,
+		commandCandidates: /^beforeMCPExecution$/i.test(hookEvent) && commands.length > 0 ? commands : void 0
+	};
+}
+//#endregion
+export { cursorProjectCwd as n, cursorEventContract as r, extractCursorEvent as t };

package/dist/policy/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "../index-DBgnIZn9.mjs";
+import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "../index-B8PG82su.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, ApexContext, ApexGate, ApexTaskState, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, Guard, GuardContext, InterfaceDeclLevel, JAVA_DECL_RE, LabeledPattern, LangFamily, LexProfile, MAX_EXA_RESULTS, MAX_TOKENS, ModularArchitecture, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, type PolicyContext, type PolicyResult, ProjectType, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, StoreLib, TS_DECL_RE, TreeEntry, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/policy/index.mjs

@@ -1,5 +1,5 @@
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-C1VSI5pb.mjs";
+import { $ as isRalphMode, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as ASK_PATTERNS, I as SAFE_PREFIXES, J as GIT_ASK, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as SYSTEM_INSTALL, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as CRITICAL_PATTERNS, W as securityGuard, X as PROJECT_INSTALL, Y as GIT_BLOCKED, Z as RALPH_SAFE, a as registerGuard, at as maskCommentsOnly, b as interfaceDeclLevel, c as GO_DECL_RE, ct as detectProjectType, d as PY_MODEL_RE, et as matchPatterns, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsAndStrings, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as isApexCommand, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as DEV_KEYWORDS, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, st as detectModularArchitecture, t as evaluate, tt as detectFramework, u as PHP_DECL_RE, ut as requiredArchSkill, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-CMiIqHeH.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "../home-state-oUGFB4ds.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-DZFtAbLP.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-KjZ1X9tH.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/prompt/index.d.mts

@@ -1,3 +1,3 @@
-import { n as PromptKind, r as formatPrompt, t as Prompt } from "../types-C0-igRKr.mjs";
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "../types-Bh0jEF3_.mjs";
 import "../index-CaxrMD1A.mjs";
 export { Prompt, PromptKind, formatPrompt };

package/dist/{run-CdIlUtjv.mjs → run-DkrzC0gb.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execFileSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/{run-TAXNRSpD.mjs → run-GHAMqcOn.mjs}

@@ -45,19 +45,42 @@ function codexInit(command) {
 					type: "command",
 					command
 				}]
+			}],
+			UserPromptSubmit: [{
+				matcher: "",
+				hooks: [{
+					type: "command",
+					command
+				}]
 			}]
 		} })
 	}];
 }
-/** Cursor: `.cursor/hooks.json` (version 1) — shell + tool gate + file-edit observe. */
+/** Cursor: `.cursor/hooks.json` (version 1) — supported pre gates and post observers. */
 function cursorInit(command) {
 	return [{
 		path: ".cursor/hooks.json",
 		content: json({
 			version: 1,
 			hooks: {
-				beforeShellExecution: [{ command }],
-				preToolUse: [{ command }],
+				beforeShellExecution: [{
+					command,
+					failClosed: true
+				}],
+				preToolUse: [{
+					command,
+					failClosed: true
+				}],
+				beforeMCPExecution: [{
+					command,
+					failClosed: true
+				}],
+				beforeReadFile: [{
+					command,
+					failClosed: true
+				}],
+				afterShellExecution: [{ command }],
+				postToolUse: [{ command }],
 				afterFileEdit: [{ command }]
 			}
 		})

package/dist/runtime/index.d.mts

@@ -1,4 +1,4 @@
-import { t as Prompt } from "../types-C0-igRKr.mjs";
+import { t as Prompt } from "../types-Bh0jEF3_.mjs";
 import { t as RefMeta } from "../types-CY5qT2X1.mjs";
 import { t as AgentQuality } from "../session-state-D5gLr66m.mjs";
 //#region src/runtime/paths.d.ts
@@ -124,6 +124,12 @@ declare const TRIVIAL_BUDGET = 4;
  * {@link withDenyLoop} rewrite an identical retried deny (decision unchanged).
  */
 declare function gate(input: GateInput): Promise<Prompt | null>;
+/**
+ * Gate independent Cursor command candidates without merging their shell syntax.
+ * Stateful outcome bookkeeping runs once, against the command that decided the
+ * aggregate result. A single distinct candidate follows {@link gate} verbatim.
+ */
+declare function gateCommandCandidates(input: GateInput, candidates: readonly string[]): Promise<Prompt | null>;
 //#endregion
 //#region src/runtime/dry.d.ts
 /** Extract long (>12 char) declared symbol names from new file content. */
@@ -153,14 +159,17 @@ declare function dryGate(tool: string, filePath: string, content: string | undef
 declare function preCommitGate(tool: string, command: string | undefined, cwd: string | undefined): Prompt | null;
 //#endregion
 //#region src/runtime/normalize.d.ts
-/** One file fanned out of a multi-file edit primitive (Codex `apply_patch`). */
+/** One file/edit fanned out from Codex `apply_patch` or Cursor `afterFileEdit`. */
 interface NormalizedFile {
   filePath: string;
   content: string;
+  oldString?: string;
   op: "add" | "update" | "delete";
 }
 /** A hook event normalized across harnesses. */
 interface NormalizedEvent {
+  /** Native event name when the adapter exposes one explicitly (Cursor). */
+  eventName?: string;
   phase: "pre" | "post";
   tool: string;
   input: Record<string, unknown>;
@@ -170,22 +179,26 @@ interface NormalizedEvent {
   /** Edit only: the tool_input.old_string being replaced — lets the file-size gate (policy/evaluate.ts + policy/edit-outcome.ts) compute the post-edit outcome instead of judging the stale on-disk count alone. Undefined for Write (no such field) and for cline/apply_patch (parsed separately, no equivalent field). */
   oldString?: string;
   command?: string;
+  /** Cursor-only independent command candidates from beforeMCPExecution. */
+  commandCandidates?: string[];
   /** Subagent type, if the tool-use came from one (Explore/Plan are file-size-exempt). */
   agentType?: string;
   /** Harness-resolved permission mode (Claude emits it natively; Codex maps `AskForApproval::Never` to the same "bypassPermissions" string — see adapters/codex/permission-mode.ts). Generic field, Codex-only consumer today. */
   permissionMode?: string;
+  /** Codex logical tool-use identity, shared by sibling hook callbacks. */
+  toolUseId?: string;
+  /** Harness-reported working directory used to scope Codex authorization. */
+  cwd?: string;
+  /** Validated Cursor multi-root workspace paths in wire order. */
+  workspaceRoots?: string[];
   /**
-   * Per-file changes when the tool is a multi-file edit primitive (Codex
-   * `apply_patch`). Present ONLY for `apply_patch`; the file gates OR each
-   * entry's verdict so one violating hunk blocks the whole envelope. Left
-   * undefined for every other tool/harness (single-file `filePath`/`content`).
+   * Per-file changes for Codex `apply_patch` and per-edit changes for Cursor
+   * `afterFileEdit`; undefined for single-file events.
    */
   files?: NormalizedFile[];
 }
 /**
- * Normalize a harness hook payload into a uniform event. Handles Cline's nested
- * `preToolUse`/`postToolUse` shape and the top-level `tool_name`/`tool_input`
- * shape used by Claude, Codex, Gemini, and Cursor.
+ * Normalize a hook payload, including Cline nesting and native Cursor events.
  */
 declare function normalizeEvent(id: string, payload: Record<string, unknown>): NormalizedEvent;
 //#endregion
@@ -201,8 +214,8 @@ declare function normalizeEvent(id: string, payload: Record<string, unknown>): N
  * - gemini-cli/cline: their real hook schemas have no interactive "ask"
  *   state (deny is the only blocking outcome), so `ask` and `inform` already
  *   both resolve to non-blocking context injection — unchanged.
- * - cursor: `ask` keeps its current best-effort `permission:"ask"` shape;
- *   only `inform` is fixed to a non-blocking `permission:"allow"` note.
+ * - cursor: `ask` degrades to a native `permission:"deny"` because Cursor does
+ *   not reliably apply `ask` on `preToolUse`; `inform` stays non-blocking.
  * - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
  *   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
  *   `{context}` (Hermes has no interactive "ask" state).
@@ -891,10 +904,8 @@ interface HandleOutcome {
 //#endregion
 //#region src/runtime/handle.d.ts
 /**
- * The full hook handler: on a PRE event it gates the tool-use (stateless guards
- * then APEX gates from the session track) and returns the native response; on a
- * POST event it records the activity into the track. The loop that makes the
- * package behave like the Claude plugin, on any harness.
+ * Run one hook and adapt every Cursor scope outcome at the common runtime exit.
+ * Other harnesses retain the core handler's stdout and exit status unchanged.
  */
 declare function handleHook(id: string, payload: Record<string, unknown>, opts: HandleOptions): Promise<HandleOutcome>;
 //#endregion
@@ -923,4 +934,4 @@ interface PreContext {
  */
 declare function handlePre(ctx: PreContext): Promise<HandleOutcome>;
 //#endregion
-export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, type HandleOptions, type HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, NormalizedFile, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, WEBFETCH_TTL_MS, activityFor, aipilotPostToolUse, cacheQueryOf, cartoSessionStart, checkFileSize, claudeHome, claudeMdKey, cleanupSession, countFiles, countLoc, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fuseHarnessHome, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsArchiveFileFor, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityAdvisoryForPatch, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateSolidGate, validateTailwind, validateTeammateOutput, writePluginMap, writeTree };
+export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, type HandleOptions, type HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, NormalizedFile, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, WEBFETCH_TTL_MS, activityFor, aipilotPostToolUse, cacheQueryOf, cartoSessionStart, checkFileSize, claudeHome, claudeMdKey, cleanupSession, countFiles, countLoc, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fuseHarnessHome, fusengineCache, gate, gateCommandCandidates, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsArchiveFileFor, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityAdvisoryForPatch, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateSolidGate, validateTailwind, validateTeammateOutput, writePluginMap, writeTree };