@fusengine/harness 0.1.90 → 0.1.92

package/dist/{hermes-kP6NUQlG.mjs → hermes-B9-p_3IF.mjs}

@@ -1,6 +1,7 @@
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-5bC8TDAz.mjs";
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { c as readClaudeInput } from "./claude-Ckv2_TgP.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/{index-DBgnIZn9.d.mts → index-B8PG82su.d.mts}

@@ -1,4 +1,4 @@
-import { t as Prompt } from "./types-C0-igRKr.mjs";
+import { t as Prompt } from "./types-Bh0jEF3_.mjs";
 import { t as AuthEntry } from "./doc-helpers-BGCzP9VF.mjs";
 import { t as RefMeta } from "./types-CY5qT2X1.mjs";
 //#region src/policy/detect-project.d.ts

package/dist/{index-D4C2-IIc.d.mts → index-SmKYkk2N.d.mts}

@@ -1,4 +1,4 @@
-import { t as Prompt } from "./types-C0-igRKr.mjs";
+import { t as Prompt } from "./types-Bh0jEF3_.mjs";
 //#region src/adapters/claude/index.d.ts
 /** Subset of the Claude Code hook stdin payload we consume. */
 interface ClaudeHookInput {

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-C0-igRKr.mjs";
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-Bh0jEF3_.mjs";
 import { _ as queryHash, a as cacheLookupSubstringMeta, c as mcpCacheKey, d as extractText, f as IndexSummary, g as jaccardSimilar, h as compactMarkdown, i as cacheLookupSubstring, l as mcpCacheWrite, m as summarizeIndex, n as cacheLookup, o as cachePath, p as loadIndex, r as cacheLookupMeta, s as cacheStore, t as CacheHit, u as webfetchCacheWrite } from "./index-DhmV2MPh.mjs";
 import { _ as DEFAULT_TTL_SEC, a as ProjectLayout, b as ttlLabel, c as projectLayout, d as MAX_LINES_ENV_KEY, f as hookBudget, g as storeBudget, h as splitTarget, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as resolveStdinMaxBytes, n as envCandidates, o as STATE_GITIGNORE, p as resolveMaxLines, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as DEFAULT_STDIN_MAX_BYTES, v as TTL_ENV_KEY, x as parseEnvInt, y as resolveTtlSec } from "./index-oXXPs2xl.mjs";
 import { i as HarnessVia, n as HarnessInfo, r as HarnessMode, t as HarnessId } from "./types-DvXTI71X.mjs";
@@ -6,7 +6,7 @@ import { n as detectMode, r as modeFor, t as detectHarness } from "./index-CigBu
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-BGCzP9VF.mjs";
 import { t as incrementTrivialEditCounter } from "./index-84heAAm_.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-p9fLrSOD.mjs";
-import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "./index-DBgnIZn9.mjs";
+import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "./index-B8PG82su.mjs";
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "./types-CY5qT2X1.mjs";
 import { a as ReminderState, c as readState, d as throttleMs, i as registryFile, l as setStateField, n as addRoot, o as lessonsFileFor, r as readRoots, s as nowStamp, t as ensureMemoryGitignore, u as stateFileFor } from "./index-DLYhervv.mjs";
 import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "./index-DEfz82BP.mjs";

package/dist/index.mjs

@@ -4,11 +4,11 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-C1VSI5pb.mjs";
+import { $ as isRalphMode, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as ASK_PATTERNS, I as SAFE_PREFIXES, J as GIT_ASK, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as SYSTEM_INSTALL, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as CRITICAL_PATTERNS, W as securityGuard, X as PROJECT_INSTALL, Y as GIT_BLOCKED, Z as RALPH_SAFE, a as registerGuard, at as maskCommentsOnly, b as interfaceDeclLevel, c as GO_DECL_RE, ct as detectProjectType, d as PY_MODEL_RE, et as matchPatterns, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsAndStrings, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as isApexCommand, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as DEV_KEYWORDS, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, st as detectModularArchitecture, t as evaluate, tt as detectFramework, u as PHP_DECL_RE, ut as requiredArchSkill, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-CMiIqHeH.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-DZFtAbLP.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-KjZ1X9tH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-IhHk2KlT.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/init/index.d.mts

@@ -15,7 +15,7 @@ interface InitFile {
 declare function claudeInit(command: string): InitFile[];
 /** Codex CLI: `.codex/hooks.json` (Claude-compatible shape). */
 declare function codexInit(command: string): InitFile[];
-/** Cursor: `.cursor/hooks.json` (version 1) — shell + tool gate + file-edit observe. */
+/** Cursor: `.cursor/hooks.json` (version 1) — supported pre gates and post observers. */
 declare function cursorInit(command: string): InitFile[];
 /** Gemini CLI: `.gemini/settings.json` — BeforeTool(edits) + AfterTool(all, regex). */
 declare function geminiInit(command: string): InitFile[];

package/dist/init/index.mjs

@@ -1,2 +1,2 @@
-import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-TAXNRSpD.mjs";
+import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-GHAMqcOn.mjs";
 export { claudeInit, clineInit, codexInit, cursorInit, geminiInit, initFor, writeInitFile };

package/dist/{kimi-D6X7b8wF.mjs → kimi-G2wcSh5-.mjs}

@@ -1,6 +1,7 @@
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-5bC8TDAz.mjs";
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { c as readClaudeInput } from "./claude-Ckv2_TgP.mjs";
 //#region src/adapters/kimi/index.ts
 /**
 * Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,

package/dist/normalize-Dy8g9Ybl.mjs

@@ -0,0 +1,397 @@
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { isAbsolute, normalize, relative } from "node:path";
+import { realpathSync } from "node:fs";
+//#region src/adapters/cursor/events.ts
+const EVENT_CONTRACTS = {
+	sessionStart: {
+		phase: "pre",
+		lifecycle: "SessionStart",
+		response: "session-context",
+		blockable: false,
+		known: true
+	},
+	sessionEnd: {
+		phase: "post",
+		lifecycle: "SessionEnd",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeSubmitPrompt: {
+		phase: "pre",
+		lifecycle: "UserPromptSubmit",
+		response: "submit-control",
+		blockable: true,
+		known: true
+	},
+	preCompact: {
+		phase: "pre",
+		lifecycle: "PreCompact",
+		response: "compact-notice",
+		blockable: false,
+		known: true
+	},
+	subagentStart: {
+		phase: "pre",
+		lifecycle: "SubagentStart",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	subagentStop: {
+		phase: "post",
+		lifecycle: "SubagentStop",
+		response: "followup",
+		blockable: false,
+		known: true
+	},
+	preToolUse: {
+		phase: "pre",
+		lifecycle: "PreToolUse",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	postToolUse: {
+		phase: "post",
+		lifecycle: "PostToolUse",
+		response: "post-context",
+		blockable: false,
+		known: true
+	},
+	postToolUseFailure: {
+		phase: "post",
+		lifecycle: "PostToolUseFailure",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeShellExecution: {
+		phase: "pre",
+		lifecycle: "BeforeShellExecution",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterShellExecution: {
+		phase: "post",
+		lifecycle: "AfterShellExecution",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeMCPExecution: {
+		phase: "pre",
+		lifecycle: "BeforeMCPExecution",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterMCPExecution: {
+		phase: "post",
+		lifecycle: "AfterMCPExecution",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeReadFile: {
+		phase: "pre",
+		lifecycle: "BeforeReadFile",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterFileEdit: {
+		phase: "post",
+		lifecycle: "AfterFileEdit",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeTabFileRead: {
+		phase: "pre",
+		lifecycle: "BeforeTabFileRead",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterTabFileEdit: {
+		phase: "post",
+		lifecycle: "AfterTabFileEdit",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	afterAgentResponse: {
+		phase: "post",
+		lifecycle: "AfterAgentResponse",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	afterAgentThought: {
+		phase: "post",
+		lifecycle: "AfterAgentThought",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	stop: {
+		phase: "post",
+		lifecycle: "Stop",
+		response: "followup",
+		blockable: false,
+		known: true
+	},
+	workspaceOpen: {
+		phase: "pre",
+		lifecycle: "WorkspaceOpen",
+		response: "plugin-paths",
+		blockable: false,
+		known: true
+	}
+};
+const UNKNOWN_EVENT = {
+	phase: "post",
+	lifecycle: null,
+	response: "neutral",
+	blockable: false,
+	known: false
+};
+/** Return explicit routing and response metadata for a Cursor event name. */
+function cursorEventContract(eventName) {
+	return EVENT_CONTRACTS[eventName] ?? UNKNOWN_EVENT;
+}
+//#endregion
+//#region src/adapters/cursor/context.ts
+/** Preserve a Cursor path value only when it is non-empty and NUL-free. */
+function cursorPath(value) {
+	return typeof value === "string" && value.length > 0 && !value.includes("\0") ? value : void 0;
+}
+/** Validate and normalize an absolute path supplied by Cursor. */
+function cursorAbsolutePath(value) {
+	const candidate = cursorPath(value);
+	if (!candidate || !isAbsolute(candidate)) return void 0;
+	const path = normalize(candidate);
+	try {
+		return realpathSync.native(path);
+	} catch {
+		return path;
+	}
+}
+/** Preserve distinct, validated Cursor workspace roots in wire order. */
+function cursorWorkspaceRoots(value) {
+	if (!Array.isArray(value)) return [];
+	const roots = value.map(cursorAbsolutePath).filter((root) => root !== void 0);
+	return [...new Set(roots)];
+}
+function contains(root, filePath) {
+	const rel = relative(root, filePath);
+	return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+/**
+* Select Cursor's project scope without replacing a valid payload cwd. Order:
+* payload `cwd` -> longest workspace root containing `filePath` ->
+* `workspaceRoots[0]` -> `CURSOR_PROJECT_DIR` env -> `CLAUDE_PROJECT_DIR` env
+* -> `fallback`. Both env vars are validated the same way as any other Cursor
+* path (`cursorAbsolutePath`: absolute, NUL-free, realpath-resolved), so an
+* unset or malformed value is silently skipped rather than trusted.
+* @param cwd - Cursor payload `cwd`, when present.
+* @param workspaceRoots - Validated, deduped Cursor `workspace_roots`.
+* @param filePath - The file the current event targets, when present.
+* @param fallback - Caller-supplied last resort (never `process.cwd()`).
+* @param env - Environment (defaults to `process.env`).
+* @returns The resolved project root.
+*/
+function cursorProjectCwd(cwd, workspaceRoots, filePath, fallback, env = process.env) {
+	if (cwd) return cwd;
+	if (filePath) {
+		const matches = workspaceRoots.filter((root) => contains(root, filePath));
+		if (matches.length > 0) return matches.sort((a, b) => b.length - a.length)[0];
+	}
+	if (workspaceRoots[0]) return workspaceRoots[0];
+	const fromCursorEnv = cursorAbsolutePath(env.CURSOR_PROJECT_DIR);
+	if (fromCursorEnv) return fromCursorEnv;
+	const fromClaudeEnv = cursorAbsolutePath(env.CLAUDE_PROJECT_DIR);
+	if (fromClaudeEnv) return fromClaudeEnv;
+	return fallback;
+}
+//#endregion
+//#region src/adapters/cursor/normalize.ts
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function str(value) {
+	return typeof value === "string" ? value : void 0;
+}
+function inputRecord(value) {
+	const direct = record(value);
+	if (direct || typeof value !== "string") return direct;
+	try {
+		return record(JSON.parse(value));
+	} catch {
+		return;
+	}
+}
+const MCP_ROOT_FIELDS = [
+	"mcp_server_name",
+	"mcp_server_url",
+	"url",
+	"result_json",
+	"duration"
+];
+function cursorMcpInput(raw, input) {
+	const merged = { ...input };
+	for (const field of MCP_ROOT_FIELDS) if (Object.hasOwn(raw, field)) merged[field] = raw[field];
+	return merged;
+}
+function sanitizedCursorInput(input) {
+	const safe = { ...input };
+	if (typeof safe.file_path === "string" && cursorPath(safe.file_path) === void 0) delete safe.file_path;
+	if (typeof safe.path === "string" && cursorPath(safe.path) === void 0) delete safe.path;
+	if (Object.hasOwn(safe, "cwd")) {
+		const cwd = cursorAbsolutePath(safe.cwd);
+		if (cwd) safe.cwd = cwd;
+		else delete safe.cwd;
+	}
+	if (Object.hasOwn(safe, "workspace_roots")) if (Array.isArray(safe.workspace_roots)) safe.workspace_roots = cursorWorkspaceRoots(safe.workspace_roots);
+	else delete safe.workspace_roots;
+	return safe;
+}
+/**
+* Closed table: Cursor's `MCP:<tool>` tool_name form on preToolUse/
+* postToolUse/postToolUseFailure LOSES the MCP server name (ground truth:
+* Cursor CLI 3.18.25 + official docs — only beforeMCPExecution/
+* afterMCPExecution carry `mcp_server_name`). This reconstructs the real
+* server for the closed set of tool names this repo's gates actually depend
+* on (GATED_TOOLS in doc-cache-gate.ts, CONTEXT7_SOURCE, RESEARCH_TOOLS,
+* SHOT_TOOLS, gemini-mcp-gate, shadcn-skill-gate) — same closed-table
+* philosophy as `mcp-tool-name.ts`'s Codex aliasing, never a blanket
+* reversal. Coordinator decision: a tool name OUTSIDE this table (server
+* genuinely unrecoverable, and no safe placeholder) is left as Cursor's raw
+* `MCP:<tool>` string — `test/cursor-followup-normalize.test.ts` pins this
+* as the committed contract ("commandless MCP tools keep their name"), so a
+* fabricated `mcp__cursor__<tool>` placeholder is never introduced for the
+* unknown case.
+*/
+const CURSOR_MCP_TOOL_SERVERS = Object.assign(Object.create(null), {
+	"query-docs": "context7",
+	"resolve-library-id": "context7",
+	web_search_exa: "exa",
+	get_code_context_exa: "exa",
+	deep_researcher_start: "exa",
+	deep_researcher_check: "exa",
+	create_frontend: "gemini-design",
+	modify_frontend: "gemini-design",
+	snippet_frontend: "gemini-design",
+	search_items_in_registries: "shadcn",
+	view_items_in_registries: "shadcn",
+	get_item_examples_from_registries: "shadcn",
+	get_add_command_for_items: "shadcn",
+	get_audit_checklist: "shadcn"
+});
+/**
+* The real MCP server for a bare Cursor tool name (the part after `MCP:`),
+* or `undefined` when it isn't in the closed table. fuse-browser is inferred
+* from the `browser_*` prefix — every fuse-browser tool is named that way
+* and no other server in this ecosystem uses it — the remaining,
+* non-distinctive tool names go through {@link CURSOR_MCP_TOOL_SERVERS}.
+* NO placeholder fallback (coordinator decision, see {@link CURSOR_MCP_TOOL_SERVERS}):
+* an unknown tool name means the server is genuinely unrecoverable, so the
+* caller leaves the raw `MCP:<tool>` string untouched instead of fabricating one.
+*/
+function cursorMcpServer(bareTool) {
+	if (bareTool.startsWith("browser_")) return "fuse-browser";
+	return CURSOR_MCP_TOOL_SERVERS[bareTool];
+}
+/**
+* Canonicalize Cursor's `MCP:<tool>` tool_name (preToolUse/postToolUse/
+* postToolUseFailure) into the shared `mcp__<server>__<tool>` shape every
+* other harness/gate expects. Returns `undefined` — meaning "leave the raw
+* `MCP:<tool>` string as-is" — both when `tool` isn't the `MCP:` form and
+* when the bare tool name is outside the closed {@link CURSOR_MCP_TOOL_SERVERS}
+* table (server unrecoverable, no placeholder fabricated).
+*/
+function cursorBareMcpToolName(tool) {
+	if (!tool || !tool.startsWith("MCP:")) return void 0;
+	const bare = tool.slice(4);
+	const server = cursorMcpServer(bare);
+	return server ? `mcp__${server}__${bare}` : void 0;
+}
+function cursorToolName(raw, event, tool, hasCommand) {
+	if (hasCommand) return "Bash";
+	const server = str(raw.mcp_server_name)?.trim().replace(/[^A-Za-z0-9_-]+/g, "_");
+	if (/^(before|after)MCPExecution$/i.test(event) && server && tool && !tool.startsWith("mcp__")) return `mcp__${server}__${tool}`;
+	const bareMcp = cursorBareMcpToolName(tool);
+	if (bareMcp) return bareMcp;
+	if (tool === "Write") return "Edit";
+	return tool ?? "";
+}
+function cursorCommands(raw, input) {
+	const candidates = [commandToString(raw.command), commandToString(input.command)].filter((candidate) => candidate !== void 0);
+	return [...new Set(candidates)];
+}
+/**
+* Extract one Cursor hook payload into the shared runtime shape.
+*
+* @param payload - Cursor hook stdin payload.
+* @returns Cursor-specific phase, tool, command, and edit fields.
+*/
+function extractCursorEvent(payload) {
+	const raw = payload;
+	const hookEvent = str(raw.hook_event_name) ?? "";
+	const parsedInput = inputRecord(raw.tool_input);
+	const input = sanitizedCursorInput((parsedInput && /^(before|after)MCPExecution$/i.test(hookEvent) ? cursorMcpInput(raw, parsedInput) : parsedInput) ?? raw);
+	const contract = cursorEventContract(hookEvent);
+	const metadata = {
+		eventName: hookEvent,
+		lifecycleEvent: contract.lifecycle,
+		responseKind: contract.response,
+		blockable: contract.blockable,
+		cwd: cursorAbsolutePath(raw.cwd),
+		workspaceRoots: cursorWorkspaceRoots(raw.workspace_roots)
+	};
+	if (!contract.known) return {
+		...metadata,
+		phase: contract.phase,
+		tool: "",
+		input
+	};
+	const afterFileEdit = /^afterFileEdit$/i.test(hookEvent);
+	const beforeReadFile = /^beforeReadFile$/i.test(hookEvent);
+	const beforeTabFileRead = /^beforeTabFileRead$/i.test(hookEvent);
+	const edits = Array.isArray(raw.edits) ? raw.edits.map(record).filter((edit) => edit !== void 0) : [];
+	const filePath = cursorPath(raw.file_path);
+	if (filePath && edits.length > 0) {
+		const files = edits.map((edit) => ({
+			filePath,
+			oldString: str(edit.old_string),
+			content: str(edit.new_string) ?? "",
+			op: "update"
+		}));
+		return {
+			...metadata,
+			phase: contract.phase,
+			tool: "Edit",
+			input,
+			filePath,
+			content: files.map((file) => file.content).join("\n"),
+			files
+		};
+	}
+	const commands = cursorCommands(raw, input);
+	const command = commands[0];
+	return {
+		...metadata,
+		phase: contract.phase,
+		tool: afterFileEdit ? "Edit" : beforeReadFile || beforeTabFileRead ? "Read" : cursorToolName(raw, hookEvent, str(raw.tool_name), command !== void 0),
+		input,
+		filePath: cursorPath(input.file_path) ?? cursorPath(input.path),
+		content: str(input.content) ?? str(input.new_string),
+		oldString: str(input.old_string),
+		command,
+		commandCandidates: /^beforeMCPExecution$/i.test(hookEvent) && commands.length > 0 ? commands : void 0
+	};
+}
+//#endregion
+export { cursorProjectCwd as n, cursorEventContract as r, extractCursorEvent as t };

package/dist/policy/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "../index-DBgnIZn9.mjs";
+import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "../index-B8PG82su.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, ApexContext, ApexGate, ApexTaskState, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, Guard, GuardContext, InterfaceDeclLevel, JAVA_DECL_RE, LabeledPattern, LangFamily, LexProfile, MAX_EXA_RESULTS, MAX_TOKENS, ModularArchitecture, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, type PolicyContext, type PolicyResult, ProjectType, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, StoreLib, TS_DECL_RE, TreeEntry, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/policy/index.mjs

@@ -1,5 +1,5 @@
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-C1VSI5pb.mjs";
+import { $ as isRalphMode, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as ASK_PATTERNS, I as SAFE_PREFIXES, J as GIT_ASK, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as SYSTEM_INSTALL, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as CRITICAL_PATTERNS, W as securityGuard, X as PROJECT_INSTALL, Y as GIT_BLOCKED, Z as RALPH_SAFE, a as registerGuard, at as maskCommentsOnly, b as interfaceDeclLevel, c as GO_DECL_RE, ct as detectProjectType, d as PY_MODEL_RE, et as matchPatterns, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsAndStrings, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as isApexCommand, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as DEV_KEYWORDS, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, st as detectModularArchitecture, t as evaluate, tt as detectFramework, u as PHP_DECL_RE, ut as requiredArchSkill, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-CMiIqHeH.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "../home-state-oUGFB4ds.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-DZFtAbLP.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-KjZ1X9tH.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/prompt/index.d.mts

@@ -1,3 +1,3 @@
-import { n as PromptKind, r as formatPrompt, t as Prompt } from "../types-C0-igRKr.mjs";
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "../types-Bh0jEF3_.mjs";
 import "../index-CaxrMD1A.mjs";
 export { Prompt, PromptKind, formatPrompt };

package/dist/{run-CdIlUtjv.mjs → run-DkrzC0gb.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execFileSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/{run-TAXNRSpD.mjs → run-GHAMqcOn.mjs}

@@ -45,19 +45,42 @@ function codexInit(command) {
 					type: "command",
 					command
 				}]
+			}],
+			UserPromptSubmit: [{
+				matcher: "",
+				hooks: [{
+					type: "command",
+					command
+				}]
 			}]
 		} })
 	}];
 }
-/** Cursor: `.cursor/hooks.json` (version 1) — shell + tool gate + file-edit observe. */
+/** Cursor: `.cursor/hooks.json` (version 1) — supported pre gates and post observers. */
 function cursorInit(command) {
 	return [{
 		path: ".cursor/hooks.json",
 		content: json({
 			version: 1,
 			hooks: {
-				beforeShellExecution: [{ command }],
-				preToolUse: [{ command }],
+				beforeShellExecution: [{
+					command,
+					failClosed: true
+				}],
+				preToolUse: [{
+					command,
+					failClosed: true
+				}],
+				beforeMCPExecution: [{
+					command,
+					failClosed: true
+				}],
+				beforeReadFile: [{
+					command,
+					failClosed: true
+				}],
+				afterShellExecution: [{ command }],
+				postToolUse: [{ command }],
 				afterFileEdit: [{ command }]
 			}
 		})