@intutic/sync-daemon 1.9.0 → 1.10.1

package/dist/harness/continueHooks.d.ts

@@ -1,9 +1,44 @@
 /**
- * continueHooks.ts — Continue.dev governance via proxy routing.
+ * continueHooks.ts — Continue governance: proxy routing + CLI PreToolUse gate.
  *
- * Continue.dev has no native hook system. Governance is applied by routing
- * all model API calls through the Intutic proxy: each model's `apiBase`
- * field is set to `proxyUrl` in `~/.continue/config.json`.
+ * Two mechanisms, for two different Continue surfaces:
+ *
+ * 1. **Proxy routing** (both surfaces): each model's `apiBase` field in
+ *    `~/.continue/config.json` is set to `proxyUrl`, so LLM egress traverses
+ *    the Intutic proxy.
+ *
+ * 2. **PreToolUse gate** (Continue **CLI `cn` only** — the IDE extension has
+ *    no hook system): the CLI executes PreToolUse hooks registered in
+ *    `~/.continue/settings.json` (user) and `<repo>/.continue/settings.json`
+ *    (project), with a Claude-Code-compatible stdin contract —
+ *    {tool_name, tool_input, tool_use_id} — refused via exit code 2 (or a
+ *    stdout `{"permissionDecision":"deny"}`; exit 2 is used here, the contract
+ *    every other exit-2 harness shares).
+ *
+ *    **LIVE-VERIFIED LIMITS (cn 1.5.47, 2026-08-10), do not oversell this
+ *    gate:**
+ *    - **Headless `-p`/`--print` mode does not execute PreToolUse hooks at
+ *      all.** Verified against a real install with a bare marker hook: the
+ *      terminal tool ran, the marker never fired, with the hook registered in
+ *      every path the bundle's own search list names. The hooks engine (and
+ *      this exact search list, including `.claude/settings.json`) is present
+ *      in the shipped bundle — headless mode simply bypasses it. Interactive
+ *      TUI sessions are the mode this registration targets; a headless `cn
+ *      -p` run is governed by the proxy layer only.
+ *    - **cn's hook engine fails OPEN on hook errors by its own design** —
+ *      the bundled dispatcher catches a failed hook event and returns
+ *      `{blocked: false}`. Our gate's own crash posture (fail-closed exit 2)
+ *      cannot override the harness swallowing the failure; that is cn's
+ *      contract, recorded here so the security matrix can say it honestly.
+ *
+ *    **Overlap, stated so nobody "fixes" it:** the Continue CLI ALSO reads
+ *    `.claude/settings.json`, so on a machine where claude-code is governed,
+ *    `cn` may already run the claude-code gate by accident. This writer makes
+ *    that deliberate by registering in Continue's own settings files — the
+ *    dedicated registration is still correct because a user who runs continue
+ *    but not claude-code has no `.claude/settings.json` and would otherwise
+ *    get no gate at all. Double registration is harmless: both gates evaluate
+ *    the same rules, and an allow/allow or block/block pair is idempotent.
  *
  * JSONC handling: ~/.continue/config.json allows `// comments`. We strip
  * single-line comments with a regex before parsing, then write back as
@@ -15,13 +50,18 @@
  * @module
  */
 /**
- * Configure Continue.dev to route all model API calls through the Intutic proxy.
+ * Configure Continue: proxy routing for both surfaces, and the CLI's
+ * PreToolUse gate.
  *
  *  1. Reads `~/.continue/config.json` (JSONC — strips // comments before parsing).
  *  2. Sets `apiBase = proxyUrl` on each model that doesn't already use it.
  *  3. Adds a `customInstructions` governance notice.
  *  4. Writes the merged result back atomically.
  *  5. Writes `.intutic/env/continue.env` with the proxy URL.
+ *  6. Writes the gate script `.intutic/hooks/continue-check.js` and registers
+ *     it in `~/.continue/settings.json` and `<root>/.continue/settings.json`
+ *     (Continue CLI PreToolUse — see the module header for the
+ *     `.claude/settings.json` overlap).
  *
  * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
  *

package/dist/harness/continueHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"continueHooks.d.ts","sourceRoot":"","sources":["../../src/harness/continueHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmCH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAqFf"}
+{"version":3,"file":"continueHooks.d.ts","sourceRoot":"","sources":["../../src/harness/continueHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AA2MH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,OAAO,CAAC,IAAI,CAAC,CAoHf"}

package/dist/harness/continueHooks.js

@@ -1,9 +1,44 @@
 /**
- * continueHooks.ts — Continue.dev governance via proxy routing.
+ * continueHooks.ts — Continue governance: proxy routing + CLI PreToolUse gate.
  *
- * Continue.dev has no native hook system. Governance is applied by routing
- * all model API calls through the Intutic proxy: each model's `apiBase`
- * field is set to `proxyUrl` in `~/.continue/config.json`.
+ * Two mechanisms, for two different Continue surfaces:
+ *
+ * 1. **Proxy routing** (both surfaces): each model's `apiBase` field in
+ *    `~/.continue/config.json` is set to `proxyUrl`, so LLM egress traverses
+ *    the Intutic proxy.
+ *
+ * 2. **PreToolUse gate** (Continue **CLI `cn` only** — the IDE extension has
+ *    no hook system): the CLI executes PreToolUse hooks registered in
+ *    `~/.continue/settings.json` (user) and `<repo>/.continue/settings.json`
+ *    (project), with a Claude-Code-compatible stdin contract —
+ *    {tool_name, tool_input, tool_use_id} — refused via exit code 2 (or a
+ *    stdout `{"permissionDecision":"deny"}`; exit 2 is used here, the contract
+ *    every other exit-2 harness shares).
+ *
+ *    **LIVE-VERIFIED LIMITS (cn 1.5.47, 2026-08-10), do not oversell this
+ *    gate:**
+ *    - **Headless `-p`/`--print` mode does not execute PreToolUse hooks at
+ *      all.** Verified against a real install with a bare marker hook: the
+ *      terminal tool ran, the marker never fired, with the hook registered in
+ *      every path the bundle's own search list names. The hooks engine (and
+ *      this exact search list, including `.claude/settings.json`) is present
+ *      in the shipped bundle — headless mode simply bypasses it. Interactive
+ *      TUI sessions are the mode this registration targets; a headless `cn
+ *      -p` run is governed by the proxy layer only.
+ *    - **cn's hook engine fails OPEN on hook errors by its own design** —
+ *      the bundled dispatcher catches a failed hook event and returns
+ *      `{blocked: false}`. Our gate's own crash posture (fail-closed exit 2)
+ *      cannot override the harness swallowing the failure; that is cn's
+ *      contract, recorded here so the security matrix can say it honestly.
+ *
+ *    **Overlap, stated so nobody "fixes" it:** the Continue CLI ALSO reads
+ *    `.claude/settings.json`, so on a machine where claude-code is governed,
+ *    `cn` may already run the claude-code gate by accident. This writer makes
+ *    that deliberate by registering in Continue's own settings files — the
+ *    dedicated registration is still correct because a user who runs continue
+ *    but not claude-code has no `.claude/settings.json` and would otherwise
+ *    get no gate at all. Double registration is harmless: both gates evaluate
+ *    the same rules, and an allow/allow or block/block pair is idempotent.
  *
  * JSONC handling: ~/.continue/config.json allows `// comments`. We strip
  * single-line comments with a regex before parsing, then write back as
@@ -19,6 +54,7 @@ import * as path from 'node:path';
 import * as os from 'node:os';
 import { createLogger } from '@intutic/logger';
 import { newIso } from '@intutic/id';
+import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
 const log = createLogger('sync-continue-hooks');
 /** Default path to the Continue.dev global config file. */
 const CONTINUE_CONFIG_PATH = path.join(os.homedir(), '.continue', 'config.json');
@@ -39,15 +75,177 @@ function stripJsoncComments(raw) {
     // Simple approach: replace // up to end-of-line (acceptable for Continue config).
     return raw.replace(/\/\/[^\n]*/g, '');
 }
+// ─── PreToolUse gate (Continue CLI `cn`) ──────────────────────────────────────
+/**
+ * The pre-tool gate script — receives the Continue CLI's Claude-Code-compatible
+ * PreToolUse JSON on stdin, exits 0 to allow or 2 to block.
+ */
+function buildHookScript(proxyUrl, workspaceRoot, workspaceId) {
+    const hookEventsLog = path.join(workspaceRoot, '.intutic', 'events', 'hook-events.jsonl');
+    return `#!/usr/bin/env node
+/**
+ * Intutic Continue CLI governance gate.
+ * Auto-generated by intutic sync-daemon. DO NOT EDIT.
+ *
+ * Applies to the Continue CLI (cn) only — the IDE extension has no hook
+ * system. Note the CLI also reads .claude/settings.json, so a machine governed
+ * for claude-code may run that gate too; both evaluate the same rules.
+ *
+ * Proxy: ${proxyUrl}
+ * Generated: ${newIso()}
+ */
+${emitJsFailClosedPrelude({ harness: 'continue', contract: 'exit2' })}
+const path = require('path');
+const os = require('os');
+const fs = require('fs');
+const crypto = require('crypto');
+const https = require('https');
+
+// Runtime credentials
+const _runtimeEnvPath = path.join(os.homedir(), '.intutic', 'env', 'runtime.env');
+let _intuticHost = 'https://api.intutic.ai', _intuticKey = '', _intuticWsId = ${JSON.stringify(workspaceId)};
+try {
+  fs.readFileSync(_runtimeEnvPath, 'utf-8').split('\\n').forEach(line => {
+    const eq = line.indexOf('='); if (eq < 0) return;
+    const k = line.slice(0, eq).trim(), v = line.slice(eq + 1).trim();
+    if (k === 'INTUTIC_HOST' && v) _intuticHost = v;
+    if (k === 'INTUTIC_API_KEY' && v) _intuticKey = v;
+    if (k === 'INTUTIC_WORKSPACE_ID' && v) _intuticWsId = v;
+  });
+} catch {}
+
+${emitJsGate({ harness: 'continue', contract: 'exit2' })}
+
+let _intuticSessionId = '';
+function logEvent(verdict, toolName, reason) {
+  try {
+    const ts = new Date().toISOString();
+    const incidentId = crypto.createHash('sha1').update(ts + toolName + _intuticWsId).digest('hex').slice(0, 16);
+    const entry = JSON.stringify({
+      // Passed through, not collapsed to two values: the advisory tier emits
+      // 'tool_flagged', and a ternary here silently recorded it as an allow.
+      event: verdict,
+      toolName, reason: reason || '',
+      workspaceId: _intuticWsId,
+      harnessType: 'continue',
+      timestamp: ts,
+      incidentId,
+      ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
+    }) + '\\n';
+    fs.appendFileSync(${JSON.stringify(hookEventsLog)}, entry, { flag: 'a' });
+    if (_intuticKey) {
+      try {
+        const body = JSON.stringify({ events: [JSON.parse(entry)] });
+        const urlObj = new URL('/api/v1/hook-events', _intuticHost);
+        const mod = urlObj.protocol === 'https:' ? https : require('http');
+        const req = mod.request({ hostname: urlObj.hostname, port: urlObj.port || 443, path: urlObj.pathname, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body), 'Authorization': 'Bearer ' + _intuticKey } });
+        req.on('error', () => { /* fire-and-forget */ });
+        req.write(body); req.end();
+      } catch { /* never crash the hook */ }
+    }
+  } catch { /* never crash the hook */ }
+}
+
+let raw = '';
+process.stdin.on('data', (c) => { raw += c; });
+process.stdin.on('end', () => {
+  try {
+    const ctx = JSON.parse(raw);
+    _intuticSessionId = ctx.session_id || ctx.sessionId || '';
+    // Verified during the v5 audit: this writer did NOT have the envelope
+    // guard its Claude-Code-compatible contract implied it inherited — a
+    // payload with neither a tool name nor a tool_input defaulted to toolName
+    // 'tool' with empty fields, matched no rule, and was allowed. Refused now.
+    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput'], logEvent);
+    const input = ctx.tool_input || ctx.toolInput || {};
+    const toolName = ctx.tool_name || ctx.toolName || 'tool';
+
+    // Every spelling any harness uses, matching the bash extractor. A field
+    // name this list misses is a path guard that silently does not run — and
+    // the caller controls which spelling it sends.
+    const targetPath = input.path || input.file_path || input.filePath || input.file ||
+      input.target || input.notebook_path || '';
+    const command = input.command || input.cmd || input.script || '';
+
+    intuticGate(toolName, targetPath, command, logEvent, _intuticWsId, input);
+
+    // Allow
+    logEvent('tool_allowed', toolName, '');
+    process.exit(0);
+  } catch (err) {
+    // Fail CLOSED
+    const errMsg = String(err);
+    process.stderr.write('[Intutic Governance] Hook error (fail-closed): ' + errMsg + '\\n');
+    logEvent('tool_blocked', 'unknown', errMsg);
+    process.exit(2);
+  }
+});
+`;
+}
+/**
+ * Merge the Intutic PreToolUse entry into a Continue settings.json, preserving
+ * everything the user registered themselves.
+ *
+ * De-duplication is by command (any entry whose hooks all invoke this gate
+ * script is ours and is replaced) — the claudeDesktopHooks convention — so
+ * repeated syncs never stack duplicate entries.
+ */
+async function mergeContinueSettings(settingsPath, hookScriptPath) {
+    let existing = {};
+    try {
+        existing = JSON.parse(stripJsoncComments(await fs.readFile(settingsPath, 'utf-8')));
+    }
+    catch {
+        // File doesn't exist or is malformed — start fresh
+    }
+    const existingHooks = existing.hooks ?? {};
+    const existingPreToolUse = Array.isArray(existingHooks.PreToolUse)
+        ? existingHooks.PreToolUse
+        : [];
+    const intuticCmd = `node "${hookScriptPath}"`;
+    const filtered = existingPreToolUse.filter((entry) => {
+        if (typeof entry !== 'object' || entry === null)
+            return true;
+        const inner = entry.hooks ?? [];
+        return !(inner.length > 0 &&
+            inner.every((h) => typeof h === 'object' && h !== null && h.command === intuticCmd));
+    });
+    const merged = {
+        ...existing,
+        _intutic_comment: 'Intutic governance PreToolUse hook (Continue CLI) — auto-managed entries only; your own hooks are preserved.',
+        _intutic_last_sync: newIso(),
+        hooks: {
+            ...existingHooks,
+            PreToolUse: [
+                ...filtered,
+                {
+                    // One catch-all matcher rather than a tool list: the gate itself
+                    // decides from the arguments, so a tool name nobody anticipated is
+                    // still evaluated rather than silently unmatched.
+                    matcher: '.*',
+                    hooks: [{ type: 'command', command: intuticCmd }],
+                },
+            ],
+        },
+    };
+    const tmp = settingsPath + '.intutic-tmp';
+    await fs.writeFile(tmp, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
+    await fs.rename(tmp, settingsPath);
+}
 // ─── Main export ──────────────────────────────────────────────────────────────
 /**
- * Configure Continue.dev to route all model API calls through the Intutic proxy.
+ * Configure Continue: proxy routing for both surfaces, and the CLI's
+ * PreToolUse gate.
  *
  *  1. Reads `~/.continue/config.json` (JSONC — strips // comments before parsing).
  *  2. Sets `apiBase = proxyUrl` on each model that doesn't already use it.
  *  3. Adds a `customInstructions` governance notice.
  *  4. Writes the merged result back atomically.
  *  5. Writes `.intutic/env/continue.env` with the proxy URL.
+ *  6. Writes the gate script `.intutic/hooks/continue-check.js` and registers
+ *     it in `~/.continue/settings.json` and `<root>/.continue/settings.json`
+ *     (Continue CLI PreToolUse — see the module header for the
+ *     `.claude/settings.json` overlap).
  *
  * Safe to call repeatedly — uses atomic rename (`.intutic-tmp` → final path).
  *
@@ -120,5 +318,27 @@ export async function writeContinueHooks(workspaceRoot, proxyUrl, workspaceId =
     await fs.writeFile(tmpEnv, envContent, 'utf-8');
     await fs.rename(tmpEnv, envFilePath);
     log.info({ action: 'continue_env_written', path: envFilePath }, 'Continue.dev env snippet written');
+    // ── 7. PreToolUse gate for the Continue CLI (cn) ──────────────────────────
+    const hookScriptDir = path.join(workspaceRoot, '.intutic', 'hooks');
+    await fs.mkdir(hookScriptDir, { recursive: true });
+    await fs.mkdir(path.join(workspaceRoot, '.intutic', 'events'), { recursive: true });
+    // Named after its writer — see the note in claudeCodeHooks.ts about two
+    // writers overwriting one `pre-tool-check.js`.
+    const hookScriptPath = path.join(hookScriptDir, 'continue-check.js');
+    const tmpScript = hookScriptPath + '.intutic-tmp';
+    await fs.writeFile(tmpScript, buildHookScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
+    await fs.rename(tmpScript, hookScriptPath);
+    await fs.chmod(hookScriptPath, 0o755);
+    // Project-level: <root>/.continue/settings.json
+    const projectContinueDir = path.join(workspaceRoot, '.continue');
+    await fs.mkdir(projectContinueDir, { recursive: true });
+    await mergeContinueSettings(path.join(projectContinueDir, 'settings.json'), hookScriptPath);
+    // User-level: ~/.continue/settings.json. homedir() read at call time (not the
+    // module-scope constant above) so tests that move HOME before invoking are
+    // honoured — see the gooseHooks note in generatedShellIntegrity.test.ts.
+    const userContinueDir = path.join(os.homedir(), '.continue');
+    await fs.mkdir(userContinueDir, { recursive: true });
+    await mergeContinueSettings(path.join(userContinueDir, 'settings.json'), hookScriptPath);
+    log.info({ action: 'continue_gate_written', path: hookScriptPath }, 'Continue CLI PreToolUse gate written and registered (project + user settings.json)');
 }
 //# sourceMappingURL=continueHooks.js.map

package/dist/harness/continueHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"continueHooks.js","sourceRoot":"","sources":["../../src/harness/continueHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;AAEhF,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG;IACxB,qDAAqD;IACrD,uEAAuE;IACvE,oEAAoE;CACrE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAEX,iFAAiF;AAEjF;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,kDAAkD;IAClD,kFAAkF;IAClF,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAE1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACtC,CAAC,CAAA;IAEF,6EAA6E;IAE7E,IAAI,SAAS,GAA4B,EAAE,CAAA;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACxC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,yDAAyD,CAAC,CAAA;IAC5I,CAAC;IAED,6EAA6E;IAE7E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAA,CAAC,sBAAsB;QAC3D,aAAa,EAAE,CAAA;QACf,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,YAAY,GAA4B;QAC5C,GAAG,SAAS;QACZ,6DAA6D;QAC7D,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,0DAA0D;QAC1D,kBAAkB,EAAE,iBAAiB;QACrC,kBAAkB;QAClB,gBAAgB,EAAE,IAAI;QACtB,kBAAkB,EAAE,MAAM,EAAE;QAC5B,qBAAqB,EAAE,WAAW;KACnC,CAAA;IAED,6EAA6E;IAE7E,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,aAAa,GAAG,sDAAsD,MAAM,EAAE,uEAAuE,CAAA;IAC3J,MAAM,UAAU,GAAG,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;IAE/E,MAAM,SAAS,GAAG,oBAAoB,GAAG,cAAc,CAAA;IACvD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAClD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;IAEhD,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,EAChG,wDAAwD,CACzD,CAAA;IAED,6EAA6E;IAE7E,MAAM,UAAU,GAAG;QACjB,0DAA0D,MAAM,EAAE,EAAE;QACpE,iEAAiE;QACjE,sBAAsB,QAAQ,EAAE;QAChC,WAAW,CAAC,CAAC,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;QACxD,0EAA0E;KAC3E,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrD,kCAAkC,CACnC,CAAA;AACH,CAAC"}
+{"version":3,"file":"continueHooks.js","sourceRoot":"","sources":["../../src/harness/continueHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAA;AAE/C,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;AAEhF,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG;IACxB,qDAAqD;IACrD,uEAAuE;IACvE,oEAAoE;CACrE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAEX,iFAAiF;AAEjF;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,kDAAkD;IAClD,kFAAkF;IAClF,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;;;;;;YASG,QAAQ;gBACJ,MAAM,EAAE;;EAEtB,uBAAuB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;gFASW,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;wBAkBhC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDpD,CAAA;AACD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,qBAAqB,CAAC,YAAoB,EAAE,cAAsB;IAC/E,IAAI,QAAQ,GAA4B,EAAE,CAAA;IAC1C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IAED,MAAM,aAAa,GAAI,QAAQ,CAAC,KAAiC,IAAI,EAAE,CAAA;IACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC;QAChE,CAAC,CAAE,aAAa,CAAC,UAAwB;QACzC,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,UAAU,GAAG,SAAS,cAAc,GAAG,CAAA;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAc,EAAE,EAAE;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC5D,MAAM,KAAK,GAAK,KAAiC,CAAC,KAAmB,IAAI,EAAE,CAAA;QAC3E,OAAO,CAAC,CACN,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,KAAK,CACT,CAAC,CAAU,EAAE,EAAE,CACb,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAA6B,CAAC,OAAO,KAAK,UAAU,CAC/F,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG;QACb,GAAG,QAAQ;QACX,gBAAgB,EAAE,8GAA8G;QAChI,kBAAkB,EAAE,MAAM,EAAE;QAC5B,KAAK,EAAE;YACL,GAAG,aAAa;YAChB,UAAU,EAAE;gBACV,GAAG,QAAQ;gBACX;oBACE,iEAAiE;oBACjE,mEAAmE;oBACnE,kDAAkD;oBAClD,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;iBAClD;aACF;SACF;KACF,CAAA;IAED,MAAM,GAAG,GAAG,YAAY,GAAG,cAAc,CAAA;IACzC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACxE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;AACpC,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE;IAEhB,8EAA8E;IAE9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAE1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACtC,CAAC,CAAA;IAEF,6EAA6E;IAE7E,IAAI,SAAS,GAA4B,EAAE,CAAA;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACxC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,yDAAyD,CAAC,CAAA;IAC5I,CAAC;IAED,6EAA6E;IAE7E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAA,CAAC,sBAAsB;QAC3D,aAAa,EAAE,CAAA;QACf,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAE7E,MAAM,YAAY,GAA4B;QAC5C,GAAG,SAAS;QACZ,6DAA6D;QAC7D,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,0DAA0D;QAC1D,kBAAkB,EAAE,iBAAiB;QACrC,kBAAkB;QAClB,gBAAgB,EAAE,IAAI;QACtB,kBAAkB,EAAE,MAAM,EAAE;QAC5B,qBAAqB,EAAE,WAAW;KACnC,CAAA;IAED,6EAA6E;IAE7E,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,aAAa,GAAG,sDAAsD,MAAM,EAAE,uEAAuE,CAAA;IAC3J,MAAM,UAAU,GAAG,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;IAE/E,MAAM,SAAS,GAAG,oBAAoB,GAAG,cAAc,CAAA;IACvD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAClD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;IAEhD,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,EAChG,wDAAwD,CACzD,CAAA;IAED,6EAA6E;IAE7E,MAAM,UAAU,GAAG;QACjB,0DAA0D,MAAM,EAAE,EAAE;QACpE,iEAAiE;QACjE,sBAAsB,QAAQ,EAAE;QAChC,WAAW,CAAC,CAAC,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;QACxD,0EAA0E;KAC3E,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,WAAW,GAAG,cAAc,CAAA;IAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAEpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,EACrD,kCAAkC,CACnC,CAAA;IAED,6EAA6E;IAE7E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IACpE,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,CAAA;IACjD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,gDAAgD;IAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAChE,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,EAAE,cAAc,CAAC,CAAA;IAE3F,8EAA8E;IAC9E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,cAAc,CAAC,CAAA;IAExF,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,cAAc,EAAE,EACzD,oFAAoF,CACrF,CAAA;AACH,CAAC"}

package/dist/harness/cursorHooks.d.ts

@@ -14,6 +14,37 @@
  *
  * @module
  */
+/**
+ * Where system-level hooks.json lives for a given platform. Exported (not
+ * just inlined in `writeCursorHooks` below) so `mdmManifest.ts` can target
+ * the SAME path this file actually writes to — otherwise the MDM manifest's
+ * `target_path` and this file's real write path are two hand-typed copies
+ * of the same fact, which is exactly how they drifted before (see the
+ * `hookScriptPath` note below).
+ */
+export declare function systemHooksDirFor(platform: NodeJS.Platform): string;
+/**
+ * Build a Cursor hooks.json config object.
+ *
+ * Exported so `enterprise install` (`tools/cli/src/lib/mdmManifest.ts`) can
+ * populate its generated MDM hooks manifest from the SAME shape this file
+ * writes, rather than a hand-retyped literal — which is exactly how that
+ * manifest drifted before (it named `pre-tool-check.js`, this file's real
+ * script is `cursor-check.js`; see the note in `writeCursorHooks` below).
+ *
+ * @param hookScriptPath - Absolute path to the pre-tool-check script.
+ */
+export declare function buildHooksConfig(hookScriptPath: string): {
+    _comment: string;
+    _lastSync: string;
+    failClosed: boolean;
+    hooks: {
+        [k: string]: {
+            command: string;
+            failClosed: boolean;
+        };
+    };
+};
 /**
  * Write Cursor hooks at user-level and project-level.
  * System-level (/etc/cursor) is handled by the corporate policy installer.

package/dist/harness/cursorHooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursorHooks.d.ts","sourceRoot":"","sources":["../../src/harness/cursorHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqKH;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,EAChB,gBAAgB,UAAQ,GACvB,OAAO,CAAC,IAAI,CAAC,CAwCf"}
+{"version":3,"file":"cursorHooks.d.ts","sourceRoot":"","sources":["../../src/harness/cursorHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkBH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAEnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM;;;;;;;;;;EAetD;AAoID;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,EAChB,gBAAgB,UAAQ,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Cf"}

package/dist/harness/cursorHooks.js

@@ -19,6 +19,7 @@ import * as path from 'node:path';
 import * as os from 'node:os';
 import { createLogger } from '@intutic/logger';
 import { newIso } from '@intutic/id';
+import { emitJsGate, emitJsFailClosedPrelude } from './gateBody.js';
 const log = createLogger('sync-cursor-hooks');
 /** Hook events Cursor fires before execution. */
 const HOOK_EVENTS = [
@@ -26,12 +27,29 @@ const HOOK_EVENTS = [
     'beforeMCPExecution',
     'beforeFileEdit',
 ];
+/**
+ * Where system-level hooks.json lives for a given platform. Exported (not
+ * just inlined in `writeCursorHooks` below) so `mdmManifest.ts` can target
+ * the SAME path this file actually writes to — otherwise the MDM manifest's
+ * `target_path` and this file's real write path are two hand-typed copies
+ * of the same fact, which is exactly how they drifted before (see the
+ * `hookScriptPath` note below).
+ */
+export function systemHooksDirFor(platform) {
+    return platform === 'darwin' ? '/Library/Application Support/Cursor' : '/etc/cursor';
+}
 /**
  * Build a Cursor hooks.json config object.
  *
+ * Exported so `enterprise install` (`tools/cli/src/lib/mdmManifest.ts`) can
+ * populate its generated MDM hooks manifest from the SAME shape this file
+ * writes, rather than a hand-retyped literal — which is exactly how that
+ * manifest drifted before (it named `pre-tool-check.js`, this file's real
+ * script is `cursor-check.js`; see the note in `writeCursorHooks` below).
+ *
  * @param hookScriptPath - Absolute path to the pre-tool-check script.
  */
-function buildHooksConfig(hookScriptPath) {
+export function buildHooksConfig(hookScriptPath) {
     return {
         _comment: 'Intutic governance hooks — auto-generated. DO NOT EDIT.',
         _lastSync: newIso(),
@@ -45,20 +63,6 @@ function buildHooksConfig(hookScriptPath) {
         ])),
     };
 }
-/**
- * Governance-sensitive paths — mirrors the list in claudeCodeHooks.ts.
- * Any write/edit targeting these paths is blocked.
- */
-const PROTECTED_PATHS = [
-    '.cursor/hooks.json',
-    '.claude/settings.json',
-    '.cline/hooks',
-    '.intutic/hooks',
-    '.intutic/integrity.json',
-    '.codeium/windsurf/hooks.json',
-    '.agents/plugins/intutic-governance',
-    '.openhands/hooks.json',
-];
 /**
  * The pre-tool-check.js script content — receives JSON context from Cursor
  * on stdin, exits 0 to allow or exits 2 to block.
@@ -72,6 +76,7 @@ function buildHookScript(proxyUrl, workspaceRoot, workspaceId) {
  * Proxy: ${proxyUrl}
  * Generated: ${newIso()}
  */
+${emitJsFailClosedPrelude({ harness: 'cursor', contract: 'exit2' })}
 const path = require('path');
 const os = require('os');
 const fs = require('fs');
@@ -91,19 +96,23 @@ try {
   });
 } catch {}
 
-const PROTECTED_PATHS = ${JSON.stringify(PROTECTED_PATHS)};
+${emitJsGate({ harness: 'cursor', contract: 'exit2' })}
 
+let _intuticSessionId = '';
 function logEvent(verdict, toolName, reason) {
   try {
     const ts = new Date().toISOString();
     const incidentId = crypto.createHash('sha1').update(ts + toolName + _intuticWsId).digest('hex').slice(0, 16);
     const entry = JSON.stringify({
-      event: verdict === 'blocked' ? 'tool_blocked' : 'tool_allowed',
+      // Passed through, not collapsed to two values: the advisory tier emits
+      // 'tool_flagged', and a ternary here silently recorded it as an allow.
+      event: verdict,
       toolName, reason: reason || '',
       workspaceId: _intuticWsId,
       harnessType: 'cursor',
       timestamp: ts,
       incidentId,
+      ...(_intuticSessionId ? { sessionId: _intuticSessionId } : {}),
     }) + '\\n';
     fs.appendFileSync(${JSON.stringify(hookEventsLog)}, entry, { flag: 'a' });
     if (_intuticKey) {
@@ -124,46 +133,60 @@ process.stdin.on('data', (c) => { raw += c; });
 process.stdin.on('end', () => {
   try {
     const ctx = JSON.parse(raw);
-    const event = (ctx.event || '').toLowerCase();
+    _intuticSessionId = ctx.session_id || ctx.sessionId || ctx.conversation_id || ctx.conversationId || ctx.task_id || ctx.taskId || '';
+    // Cursor accepts FLAT payloads (fields at the top level, no tool_input
+    // wrapper — that is what the \`|| ctx\` fallback below reads), so the
+    // recognisable-envelope set is exactly the extractor's field set. Narrower
+    // would refuse real traffic; an envelope with none of these extracts to
+    // empty strings, matches no rule, and used to be allowed.
+    intuticGuardEnvelope(ctx, ['tool_name', 'toolName', 'tool_input', 'toolInput', 'input', 'event', 'hook_event_name',
+      'command', 'cmd', 'script', 'path', 'file_path', 'filePath', 'file', 'target', 'notebook_path'], logEvent);
+    // Cursor's real field is \`hook_event_name\` (confirmed against Cursor's
+    // hooks documentation and a live \`beforeMCPExecution\` payload example
+    // from Cursor's own bug tracker, 2026-08 — \`ctx.event\` is not a field
+    // Cursor actually sends). Both are read: the correct name, and the one
+    // this file read alone before, so a future payload shape carrying \`event\`
+    // instead is not silently dropped.
+    const event = (ctx.hook_event_name || ctx.event || '').toLowerCase();
     const input = ctx.input || ctx.tool_input || ctx;
 
-    // For file edits: check target path
-    const targetPath = input.path || input.file || input.target || '';
-    if (event === 'beforefileedit' || (input.path && input.path.length > 0)) {
-      for (const p of PROTECTED_PATHS) {
-        if (String(targetPath).includes(p)) {
-          const reason = 'Attempt to modify governance-protected path "' + targetPath + '"';
-          process.stderr.write('[Intutic Governance] BLOCKED: ' + reason + '\\n');
-          logEvent('blocked', 'edit', reason);
-          process.exit(2);
-        }
-      }
-    }
+    // Every spelling any harness uses, matching the bash extractor. A field name
+    // this list misses is a path guard that silently does not run — and the
+    // caller controls which spelling it sends.
+    const targetPath = input.path || input.file_path || input.filePath || input.file ||
+      input.target || input.notebook_path || '';
+    const command = input.command || input.cmd || input.script || '';
+    let toolName = ctx.tool_name || ctx.toolName || event || 'tool';
 
-    // Shell execution: scan command for dangerous patterns
-    const command = input.command || input.cmd || '';
-    const dangerPatterns = [
-      /chmod\\s+[0-9]*7[0-9]*\\s+.*hooks/,  // chmod on hook files
-      /chattr\\s+-i\\s+/,                    // remove immutable flag
-      /chflags\\s+nouchg/,                   // macOS remove uchg
-    ];
-    for (const pat of dangerPatterns) {
-      if (pat.test(command)) {
-        const reason = 'Command matches governance bypass pattern: "' + command + '"';
-        process.stderr.write('[Intutic Governance] BLOCKED: ' + reason + '\\n');
-        logEvent('blocked', 'bash', reason);
-        process.exit(2);
-      }
+    // M3: a \`beforeMCPExecution\` payload's \`tool_name\` is the BARE MCP tool
+    // name (e.g. "create_issue"), never "beforeMCPExecution" itself — but it
+    // was never composed into the \`mcp__<server>__<tool>\` shape every other
+    // harness's MCP tool name already takes, so an allowlist rule or a
+    // workspace's own \`mcp__github__.*\`-shaped SOP rule silently never fired
+    // on a Cursor MCP call. The server is a TOP-LEVEL sibling field —
+    // \`command\` for a stdio server, \`url\` for a remote one (per Cursor's
+    // hooks documentation; verified live payload: \`{tool_name, command,
+    // hook_event_name: "beforeMCPExecution", ...}\`) — composed in here, once,
+    // before anything reads \`toolName\`.
+    if (event === 'beforemcpexecution' && ctx.tool_name) {
+      const mcpServer = ctx.command || ctx.url || ctx.server_name || ctx.serverName;
+      if (mcpServer) toolName = 'mcp__' + mcpServer + '__' + ctx.tool_name;
     }
 
+    // The protected-path check used to be gated on \`event === 'beforefileedit'
+    // || input.path\`, so a shell command naming a protected path was only
+    // caught if it also carried a path argument. The shared gate tests the
+    // command and the target independently.
+    intuticGate(toolName, targetPath, command, logEvent, _intuticWsId, input);
+
     // Allow
-    logEvent('allowed', event || 'tool', '');
+    logEvent('tool_allowed', toolName, '');
     process.exit(0);
   } catch (err) {
     // Fail CLOSED
     const errMsg = String(err);
     process.stderr.write('[Intutic Governance] Hook error (fail-closed): ' + errMsg + '\\n');
-    logEvent('blocked', 'unknown', errMsg);
+    logEvent('tool_blocked', 'unknown', errMsg);
     process.exit(2);
   }
 });
@@ -183,7 +206,9 @@ export async function writeCursorHooks(workspaceRoot, proxyUrl, workspaceId = ''
     await fs.mkdir(hookScriptDir, { recursive: true });
     // Ensure hook events log directory exists
     await fs.mkdir(path.join(workspaceRoot, '.intutic', 'events'), { recursive: true });
-    const hookScriptPath = path.join(hookScriptDir, 'pre-tool-check.js');
+    // Named after its writer — see the note in claudeCodeHooks.ts. Both emitted
+    // `pre-tool-check.js` here and silently overwrote each other.
+    const hookScriptPath = path.join(hookScriptDir, 'cursor-check.js');
     // Write the hook script
     const tmpScript = hookScriptPath + '.cursor-tmp';
     await fs.writeFile(tmpScript, buildHookScript(proxyUrl, workspaceRoot, workspaceId), 'utf-8');
@@ -200,9 +225,13 @@ export async function writeCursorHooks(workspaceRoot, proxyUrl, workspaceId = ''
     await fs.mkdir(userCursorDir, { recursive: true });
     await atomicWriteJson(path.join(userCursorDir, 'hooks.json'), config);
     log.info({ action: 'cursor_hooks_written', level: 'user', path: userCursorDir }, 'Cursor user-level hooks written');
-    // 3. System-level: /etc/cursor/hooks.json (system administrator installation only)
+    // 3. System-level (system administrator installation only). macOS has no
+    // /etc/cursor convention Cursor itself reads — its own app-support
+    // directory is the closest machine-wide location. This branch was missing
+    // until now: the success log below always claimed "system-level hooks
+    // written" for a write that, on macOS, went to a path Cursor never reads.
     if (writeSystemLevel) {
-        const systemCursorDir = '/etc/cursor';
+        const systemCursorDir = systemHooksDirFor(process.platform);
         try {
             await fs.mkdir(systemCursorDir, { recursive: true });
             await atomicWriteJson(path.join(systemCursorDir, 'hooks.json'), config);

package/dist/harness/cursorHooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursorHooks.js","sourceRoot":"","sources":["../../src/harness/cursorHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C,iDAAiD;AACjD,MAAM,WAAW,GAAG;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;CACR,CAAA;AAEV;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,cAAsB;IAC9C,OAAO;QACL,QAAQ,EAAE,yDAAyD;QACnE,SAAS,EAAE,MAAM,EAAE;QACnB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACzB,KAAK;YACL;gBACE,OAAO,EAAE,SAAS,cAAc,GAAG;gBACnC,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CACH;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,cAAc;IACd,gBAAgB;IAChB,yBAAyB;IACzB,8BAA8B;IAC9B,oCAAoC;IACpC,uBAAuB;CACxB,CAAA;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;YAIG,QAAQ;gBACJ,MAAM,EAAE;;;;;;;;;;gFAUwD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;0BAWjF,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;;;;;;wBAcjC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DpD,CAAA;AACD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE,EAChB,gBAAgB,GAAG,KAAK;IAExB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAElD,0CAA0C;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;IAEpE,wBAAwB;IACxB,MAAM,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAE/C,uCAAuC;IACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACxE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAE5H,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACrE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,iCAAiC,CAAC,CAAA;IAEnH,mFAAmF;IACnF,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,eAAe,GAAG,aAAa,CAAA;QACrC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;YACvE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,mCAAmC,CAAC,CAAA;QAC3H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,EAAE,EAAE,mDAAmD,CAAC,CAAA;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;IACrC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAChC,CAAC"}
+{"version":3,"file":"cursorHooks.js","sourceRoot":"","sources":["../../src/harness/cursorHooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAE7C,iDAAiD;AACjD,MAAM,WAAW,GAAG;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,gBAAgB;CACR,CAAA;AAEV;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IACzD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,aAAa,CAAA;AACtF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,OAAO;QACL,QAAQ,EAAE,yDAAyD;QACnE,SAAS,EAAE,MAAM,EAAE;QACnB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACzB,KAAK;YACL;gBACE,OAAO,EAAE,SAAS,cAAc,GAAG;gBACnC,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CACH;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,aAAqB,EAAE,WAAmB;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAA;IACzF,OAAO;;;;YAIG,QAAQ;gBACJ,MAAM,EAAE;;EAEtB,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;gFASa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;;;;;;;;;EAWzG,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;wBAkB9B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4EpD,CAAA;AACD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,QAAgB,EAChB,WAAW,GAAG,EAAE,EAChB,gBAAgB,GAAG,KAAK;IAExB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACnE,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAElD,0CAA0C;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEnF,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;IAElE,wBAAwB;IACxB,MAAM,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;IAChD,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAErC,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAE/C,uCAAuC;IACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACxE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,oCAAoC,CAAC,CAAA;IAE5H,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACrE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,iCAAiC,CAAC,CAAA;IAEnH,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;YACvE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,mCAAmC,CAAC,CAAA;QAC3H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,EAAE,EAAE,mDAAmD,CAAC,CAAA;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAA;IACrC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAChC,CAAC"}