@ironbee-ai/cli 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,5 @@
+# Changelog
+
+## 0.1.1 (2026-03-14)
+
+All notable changes to this project will be documented in this file.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 IronBee
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,159 @@
+<h1 align="center">
+  <img src="assets/icon.svg" alt="IronBee" width="128" /><br />
+  IronBee CLI
+</h1>
+
+<p align="center">
+  <strong>The CLI for <a href="https://ironbee.ai">IronBee</a> — The Verification Layer for Agentic Development</strong>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@ironbee-ai/cli"><img src="https://img.shields.io/npm/v/@ironbee-ai/cli.svg" alt="npm version" /></a>
+  <a href="https://www.npmjs.com/package/@ironbee-ai/cli"><img src="https://img.shields.io/npm/dm/@ironbee-ai/cli.svg" alt="npm downloads" /></a>
+  <a href="https://github.com/ironbee-ai/ironbee-cli/blob/main/LICENSE"><img src="https://img.shields.io/npm/l/@ironbee-ai/cli.svg" alt="license" /></a>
+  <a href="https://github.com/ironbee-ai/ironbee-cli/actions"><img src="https://img.shields.io/github/actions/workflow/status/ironbee-ai/@ironbee-ai/cli/build.yml?branch=main" alt="CI" /></a>
+</p>
+
+---
+
+[IronBee](https://ironbee.ai) ensures that AI agents verify their code changes before completing a task. When an agent edits code, it cannot finish until it navigates to the affected pages, functionally tests the changes, and writes a passing verdict.
+
+No more "it should work" — every change is tested.
+
+Powered by [browser-devtools-mcp](https://browser-devtools.com) — the agent navigates pages, clicks buttons, fills forms, takes screenshots, checks console errors, and writes a structured verdict.
+
+## Supported Clients
+
+| Client | Status |
+|--------|--------|
+| [Claude Code](https://docs.anthropic.com/en/docs/claude-code) | Supported |
+| Cursor | Planned |
+| Codex | Planned |
+| OpenCode | Planned |
+
+## Quick Start
+
+### Install IronBee globally
+
+```bash
+npm install -g @ironbee-ai/cli
+```
+
+### Set up a project
+
+```bash
+cd your-project
+ironbee install
+```
+
+This auto-detects your AI client and writes:
+- Hook configuration (so the client calls IronBee automatically)
+- Verification skill/rules (so the agent knows the workflow)
+- MCP server config (so the agent has browser access)
+- Browser-devtools permissions
+
+### That's it
+
+The next time your AI agent edits code, IronBee will require browser verification before the task can complete.
+
+## Commands
+
+```
+ironbee install [project-dir] [--client <name>]   Set up hooks and config
+ironbee uninstall [project-dir] [--client <name>] Remove hooks and config
+ironbee status [project-dir]                      Show verdict status for active sessions
+ironbee verify [session-id]                       Dry-run verdict validation
+```
+
+## Configuration
+
+IronBee loads config from two locations (project overrides global):
+
+- **Global:** `~/.ironbee/config.json`
+- **Project:** `<project>/.ironbee/config.json`
+
+```json
+{
+  "verifyPatterns": ["*.ts", "*.tsx", "*.css"],
+  "additionalVerifyPatterns": ["*.mdx"],
+  "ignoredVerifyPatterns": ["*.test.ts", "*.spec.ts"],
+  "maxRetries": 5
+}
+```
+
+| Key | Description | Default |
+|-----|-------------|---------|
+| `verifyPatterns` | Glob patterns for files that require verification (replaces defaults) | 40+ code extensions |
+| `additionalVerifyPatterns` | Extra patterns added on top of defaults | `[]` |
+| `ignoredVerifyPatterns` | Patterns to exclude from verification (checked first) | `[]` |
+| `maxRetries` | Max retry attempts before allowing completion | `3` |
+
+### Default verify patterns
+
+By default, IronBee requires verification for common code file extensions: `.ts`, `.tsx`, `.js`, `.jsx`, `.css`, `.scss`, `.html`, `.py`, `.go`, `.rs`, `.java`, `.vue`, `.svelte`, and [many more](src/lib/config.ts).
+
+Non-code files like `README.md`, `package.json`, or `.gitignore` do not trigger verification.
+
+## Verification Flow
+
+When the agent tries to complete a task, IronBee runs these checks:
+
+1. **Were code files edited?** — If no matching files were changed, the agent completes normally.
+2. **Were browser tools used?** — The agent must have called: navigate, screenshot, accessibility snapshot, and console check.
+3. **Does a verdict file exist?** — The agent must write a JSON verdict after testing.
+4. **Is the verdict valid?** — Must include `status`, `pages_tested`, `checks`, `console_errors`, and `network_failures`.
+5. **Pass or fail?** — Pass allows completion. Fail blocks the agent and asks it to fix the issues and re-verify.
+6. **Retry limit** — After `maxRetries` failed attempts (default 3), the agent is allowed to complete but must report unresolved issues.
+
+### Verdict format
+
+```json
+{
+  "status": "pass",
+  "pages_tested": ["http://localhost:3000/dashboard"],
+  "checks": ["form submits successfully", "new item appears in list"],
+  "console_errors": 0,
+  "network_failures": 0
+}
+```
+
+On failure, include an `errors` array describing what went wrong:
+
+```json
+{
+  "status": "fail",
+  "pages_tested": ["http://localhost:3000/dashboard"],
+  "checks": ["form renders", "submit button unresponsive"],
+  "console_errors": 2,
+  "network_failures": 0,
+  "errors": ["button click handler not firing", "TypeError in console"]
+}
+```
+
+## Session Isolation
+
+Each AI session gets its own directory under `.ironbee/sessions/<session-id>/`:
+
+```
+.ironbee/sessions/<session-id>/
+  actions.jsonl    # Event log (file edits, tool calls, verification markers)
+  verdict.json     # Written by agent after verification
+  retries          # Retry counter
+  session.log      # Debug log
+```
+
+This means parallel sessions (e.g., multiple Claude Code instances) don't interfere with each other.
+
+## Development
+
+```bash
+npm install
+npm run build       # Compile TypeScript
+npm run lint        # ESLint
+npm run test        # Jest (unit + integration + client tests)
+npm run dev         # Run via ts-node
+```
+
+## License
+
+MIT

package/dist/assets/banner.txt

@@ -0,0 +1,6 @@
+ ██╗ ██████╗   ██████╗  ███╗   ██╗ ██████╗  ███████╗ ███████╗
+ ██║ ██╔══██╗ ██╔═══██╗ ████╗  ██║ ██╔══██╗ ██╔════╝ ██╔════╝
+ ██║ ██████╔╝ ██║   ██║ ██╔██╗ ██║ ██████╔╝ █████╗   █████╗  
+ ██║ ██╔══██╗ ██║   ██║ ██║╚██╗██║ ██╔══██╗ ██╔══╝   ██╔══╝  
+ ██║ ██║  ██║ ╚██████╔╝ ██║ ╚████║ ██████╔╝ ███████╗ ███████╗
+ ╚═╝ ╚═╝  ╚═╝  ╚═════╝  ╚═╝  ╚═══╝ ╚═════╝  ╚══════╝ ╚══════╝

package/dist/assets/icon.svg

@@ -0,0 +1,59 @@
+<svg width="500" height="500" viewBox="0 0 500 500" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M217.557 138.711C211.185 166.725 218.839 188.038 224.039 201.771L249.307 154.531L275.674 201.771C285.561 179.579 286.328 161.013 281.167 135.964C277.431 117.837 259.744 95.3889 249.307 84C241.91 92.6058 222.355 117.618 217.557 138.711Z" fill="url(#paint0_linear_103_132)"/>
+<path d="M249.527 416C223.951 394.731 206.425 358.067 202.396 343.052L249.527 381.394L272.378 362.937L295.559 343.052C290.988 371.089 262.417 403.805 249.527 416Z" fill="url(#paint1_linear_103_132)"/>
+<path d="M220.854 231.434L250.077 171.12L279.629 231.434L250.077 256.153L220.854 231.434Z" fill="url(#paint2_linear_103_132)"/>
+<path d="M298.525 286.804C302.568 301.218 299.258 322.399 297.097 331.188L273.587 350.303L249.857 369.749L225.907 349.754L202.397 331.188C197.387 320.465 200.31 297.131 202.397 286.804L249.857 324.486L298.525 286.804Z" fill="url(#paint3_linear_103_132)"/>
+<path d="M249.856 313.609L203.495 275.268C203.495 263.315 211.552 247.29 215.58 240.771L249.856 267.028L284.573 240.771C291.955 248.066 296.071 266.809 297.207 275.268L249.856 313.609Z" fill="url(#paint4_linear_103_132)"/>
+<path d="M215.909 165.298C215.36 179.579 220.853 193.752 224.039 201.771L236.563 178.481L249.307 154.531L275.674 201.881C280.947 190.785 284.902 174.526 284.133 167.275C281.277 147.061 274.136 138.052 264.138 125.638C255.679 132.01 244.847 132.141 235.355 125.638C223.38 137.613 216.568 156.289 215.909 165.298Z" fill="url(#paint5_linear_103_132)" fill-opacity="0.7"/>
+<path d="M249.856 347.996L202.396 286.804L249.856 324.486L298.525 286.804L249.856 347.996Z" fill="#333941" fill-opacity="0.64"/>
+<path d="M249.527 292.296L215.58 240.771L249.857 267.028L284.573 240.771L249.527 292.296Z" fill="#333941" fill-opacity="0.35"/>
+<path d="M249.419 404.685L202.396 343.053L249.419 381.614L295.559 343.053L249.419 404.685Z" fill="#0F0F0F" fill-opacity="0.1"/>
+<path d="M285.482 209.139C297.06 183.136 300.205 166.929 294.24 132.4L346.304 224.989L319.38 218.541L350.314 284.253C319.826 267.918 305.852 251.479 285.482 209.139Z" fill="url(#paint6_linear_103_132)"/>
+<path d="M214.785 209.139C203.206 183.136 200.062 166.929 206.027 132.4L153.963 224.989L180.887 218.541L149.953 284.253C180.44 267.918 194.414 251.479 214.785 209.139Z" fill="url(#paint7_linear_103_132)"/>
+<path d="M458.055 281.287L306.25 134.086L375.851 242.958L344.516 235.599L359.745 289.281C390.46 298.849 431.254 294.285 458.055 281.287Z" fill="url(#paint8_linear_103_132)"/>
+<path d="M42.2112 281.287L194.017 134.086L124.415 242.958L155.75 235.599L140.521 289.281C109.807 298.849 69.0124 294.285 42.2112 281.287Z" fill="url(#paint9_linear_103_132)"/>
+<path d="M155.707 235.608C120.279 262.873 94.8569 272.188 42.5488 281.311C69.9036 294.823 110.553 298.339 140.546 289.221L155.707 235.608Z" fill="black" fill-opacity="0.16"/>
+<path d="M344.558 235.608C380.054 262.765 405.526 272.042 457.935 281.129C430.527 294.588 389.799 298.089 359.748 289.007L344.558 235.608Z" fill="black" fill-opacity="0.16"/>
+<defs>
+<linearGradient id="paint0_linear_103_132" x1="248.978" y1="84" x2="248.978" y2="416" gradientUnits="userSpaceOnUse">
+<stop stop-color="#E5E5E5"/>
+<stop offset="1" stop-color="#272F39"/>
+</linearGradient>
+<linearGradient id="paint1_linear_103_132" x1="248.978" y1="84" x2="248.978" y2="416" gradientUnits="userSpaceOnUse">
+<stop stop-color="#E5E5E5"/>
+<stop offset="1" stop-color="#272F39"/>
+</linearGradient>
+<linearGradient id="paint2_linear_103_132" x1="250.032" y1="171.12" x2="250.032" y2="369.749" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#272F39"/>
+</linearGradient>
+<linearGradient id="paint3_linear_103_132" x1="250.032" y1="171.12" x2="250.032" y2="369.749" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#272F39"/>
+</linearGradient>
+<linearGradient id="paint4_linear_103_132" x1="250.351" y1="240.771" x2="250.351" y2="313.609" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#272F39"/>
+</linearGradient>
+<linearGradient id="paint5_linear_103_132" x1="250.05" y1="125.638" x2="250.05" y2="201.881" gradientUnits="userSpaceOnUse">
+<stop stop-color="#B1B1B2"/>
+<stop offset="1" stop-color="#343B43"/>
+</linearGradient>
+<linearGradient id="paint6_linear_103_132" x1="315.879" y1="132.019" x2="318.569" y2="284.812" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#454B54"/>
+</linearGradient>
+<linearGradient id="paint7_linear_103_132" x1="184.387" y1="132.019" x2="181.698" y2="284.812" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#454B54"/>
+</linearGradient>
+<linearGradient id="paint8_linear_103_132" x1="380.834" y1="132.773" x2="383.683" y2="294.632" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#4A5159"/>
+</linearGradient>
+<linearGradient id="paint9_linear_103_132" x1="119.433" y1="132.773" x2="116.583" y2="294.632" gradientUnits="userSpaceOnUse">
+<stop stop-color="#D9D9D9"/>
+<stop offset="1" stop-color="#4A5159"/>
+</linearGradient>
+</defs>
+</svg>

package/dist/clients/base.d.ts

@@ -0,0 +1,20 @@
+export interface IClient {
+    readonly name: string;
+    /** Returns true if this client is detected in the project directory. */
+    detect(projectDir: string): boolean;
+    /** Installs hooks and guidance files into the project directory. */
+    install(projectDir: string, ironbeePath: string): void;
+    /** Removes IronBee hooks and guidance files from the project directory. */
+    uninstall(projectDir: string): void;
+    /** Resolves the project directory from client-specific env vars, falling back to cwd. */
+    resolveProjectDir(): string;
+    /** Runs the verify-gate Stop hook for this client. */
+    runVerifyGate(projectDir: string): void;
+    /** Runs the clear-verdict PostToolUse hook for this client. */
+    runClearVerdict(projectDir: string): void;
+    /** Runs the track-action PostToolUse hook for this client. */
+    runTrackAction(projectDir: string): void;
+    /** Runs the session-start hook for this client. */
+    runSessionStart(projectDir: string): void;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/clients/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/clients/base.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,wEAAwE;IACxE,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAEpC,oEAAoE;IACpE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvD,2EAA2E;IAC3E,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAEpC,yFAAyF;IACzF,iBAAiB,IAAI,MAAM,CAAC;IAE5B,sDAAsD;IACtD,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAExC,+DAA+D;IAC/D,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1C,8DAA8D;IAC9D,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzC,mDAAmD;IACnD,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C"}

package/dist/clients/base.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=base.js.map

package/dist/clients/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/clients/base.ts"],"names":[],"mappings":""}

package/dist/clients/claude/hooks/clear-verdict.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Claude Code — clear-verdict hook adapter
+ *
+ * Reads Claude Code's stdin format, extracts session_id,
+ * then delegates to the shared core logic.
+ *
+ * Only records file_edit and clears verdict for files with
+ * extensions in the verifyExtensions whitelist.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=clear-verdict.d.ts.map

package/dist/clients/claude/hooks/clear-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.d.ts","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/clear-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA2C5C"}

package/dist/clients/claude/hooks/clear-verdict.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Claude Code — clear-verdict hook adapter
+ *
+ * Reads Claude Code's stdin format, extracts session_id,
+ * then delegates to the shared core logic.
+ *
+ * Only records file_edit and clears verdict for files with
+ * extensions in the verifyExtensions whitelist.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const clear_verdict_1 = require("../../../hooks/core/clear-verdict");
+const actions_1 = require("../../../hooks/core/actions");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let sessionId = "default";
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+        sessionId = input.session_id ?? "default";
+        (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.exit(0);
+    }
+    // skip clear if the write target is the verdict file itself
+    const writtenFile = input.tool_input?.file_path;
+    if (writtenFile && writtenFile.includes(".ironbee/sessions/") && writtenFile.endsWith("verdict.json")) {
+        logger_1.logger.debug(`skipping clear-verdict: write target is verdict file ${writtenFile}`);
+        process.exit(0);
+    }
+    // skip if file does not require verification
+    if (writtenFile) {
+        const config = (0, config_1.loadConfig)(projectDir);
+        if (!(0, config_1.requiresVerification)(writtenFile, config)) {
+            logger_1.logger.debug(`skipping clear-verdict: file does not require verification (${writtenFile})`);
+            process.exit(0);
+        }
+    }
+    // record file edit in actions.jsonl
+    const fileEditEntry = {
+        type: "file_edit",
+        timestamp: new Date().toISOString(),
+        tool_name: input.tool_name ?? "unknown",
+        file_path: writtenFile,
+    };
+    (0, actions_1.appendAction)(`${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`, fileEditEntry);
+    (0, clear_verdict_1.runClearVerdict)({
+        verdictFile: `${projectDir}/.ironbee/sessions/${sessionId}/verdict.json`,
+        retryFile: `${projectDir}/.ironbee/sessions/${sessionId}/retries`,
+    });
+    process.exit(0);
+}
+//# sourceMappingURL=clear-verdict.js.map

package/dist/clients/claude/hooks/clear-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.js","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/clear-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAgBH,kBA2CC;AAzDD,qEAAoE;AACpE,yDAA2E;AAC3E,gDAAsF;AACtF,gDAAyD;AACzD,8CAA+C;AAU/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,SAAS,GAAW,SAAS,CAAC;IAClC,IAAI,KAA6B,CAAC;IAClC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA2B,CAAC;QAC1D,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QAC1C,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,4DAA4D;IAC5D,MAAM,WAAW,GAAuB,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC;IACpE,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpG,eAAM,CAAC,KAAK,CAAC,wDAAwD,WAAW,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,6CAA6C;IAC7C,IAAI,WAAW,EAAE,CAAC;QACd,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,IAAA,6BAAoB,EAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,eAAM,CAAC,KAAK,CAAC,+DAA+D,WAAW,GAAG,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACL,CAAC;IAED,oCAAoC;IACpC,MAAM,aAAa,GAAmB;QAClC,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;QACvC,SAAS,EAAE,WAAW;KACzB,CAAC;IACF,IAAA,sBAAY,EAAC,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE1F,IAAA,+BAAe,EAAC;QACZ,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,eAAe;QACxE,SAAS,EAAE,GAAG,UAAU,sBAAsB,SAAS,UAAU;KACpE,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/claude/hooks/session-start.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Claude Code — session-start hook adapter
+ *
+ * SessionStart hook — appends a session_start entry to actions.jsonl
+ * and outputs the session verdict path to stdout so Claude knows
+ * where to write the verdict without waiting for the Stop hook.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/clients/claude/hooks/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA8D5C"}

package/dist/clients/claude/hooks/session-start.js

@@ -0,0 +1,72 @@
+"use strict";
+/**
+ * Claude Code — session-start hook adapter
+ *
+ * SessionStart hook — appends a session_start entry to actions.jsonl
+ * and outputs the session verdict path to stdout so Claude knows
+ * where to write the verdict without waiting for the Stop hook.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.exit(0);
+    }
+    const sessionId = input.session_id ?? "default";
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const entry = {
+        type: "session_start",
+        timestamp: new Date().toISOString(),
+        session_id: sessionId,
+        source: input.source,
+    };
+    (0, actions_1.appendAction)(actionsFile, entry);
+    logger_1.logger.debug(`session-start: ${sessionId} (${input.source ?? "unknown"})`);
+    // output verdict path + format to stdout — Claude receives this as context
+    const verdictPath = `.ironbee/sessions/${sessionId}/verdict.json`;
+    const verdictFormatPass = JSON.stringify({
+        status: "pass",
+        pages_tested: ["http://localhost:3000/affected-page"],
+        checks: ["form submits successfully", "new item appears in list", "no console errors"],
+        console_errors: 0,
+        network_failures: 0,
+    });
+    const verdictFormatFail = JSON.stringify({
+        status: "fail",
+        pages_tested: ["http://localhost:3000/affected-page"],
+        checks: ["form renders", "submit button unresponsive"],
+        console_errors: 2,
+        network_failures: 0,
+        errors: ["button click handler not firing", "TypeError in console"],
+    });
+    process.stdout.write(`
+=====================================
+IRONBEE VERIFICATION — SESSION ACTIVE
+=====================================
+Verdict file path: ${verdictPath}
+
+After browser verification, use the Write tool to write your verdict JSON to exactly this path:
+  ${verdictPath}
+
+Verdict format:
+  On pass: ${verdictFormatPass}
+  On fail: ${verdictFormatFail}
+
+Required fields: status, pages_tested, checks, console_errors, network_failures
+On fail, include: errors (array of issue descriptions)
+
+Do NOT guess or change this path. This is your session-specific verdict file.
+=====================================
+`);
+    process.exit(0);
+}
+//# sourceMappingURL=session-start.js.map

package/dist/clients/claude/hooks/session-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.js","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/session-start.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAWH,kBA8DC;AAvED,yDAA+E;AAC/E,gDAAyD;AACzD,8CAA+C;AAO/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA4B,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IACzF,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAuB;QAC9B,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;KACvB,CAAC;IAEF,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,CAAC;IAE3E,2EAA2E;IAC3E,MAAM,WAAW,GAAW,qBAAqB,SAAS,eAAe,CAAC;IAC1E,MAAM,iBAAiB,GAAW,IAAI,CAAC,SAAS,CAAC;QAC7C,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,CAAC,qCAAqC,CAAC;QACrD,MAAM,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,EAAE,mBAAmB,CAAC;QACtF,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAW,IAAI,CAAC,SAAS,CAAC;QAC7C,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,CAAC,qCAAqC,CAAC;QACrD,MAAM,EAAE,CAAC,cAAc,EAAE,4BAA4B,CAAC;QACtD,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,iCAAiC,EAAE,sBAAsB,CAAC;KACtE,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;qBAIJ,WAAW;;;IAG5B,WAAW;;;aAGF,iBAAiB;aACjB,iBAAiB;;;;;;;CAO7B,CAAC,CAAC;IAEC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/claude/hooks/track-action.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Claude Code — track-action hook adapter
+ *
+ * PostToolUse hook for mcp__browser-devtools__ tool calls.
+ * Appends tool_call entries to actions.jsonl for the session.
+ *
+ * Handles both direct tool calls and nested callTool() invocations
+ * inside the execute tool (mcp__browser-devtools__execute).
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=track-action.d.ts.map

package/dist/clients/claude/hooks/track-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.d.ts","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/track-action.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmCH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA0C5C"}

package/dist/clients/claude/hooks/track-action.js

@@ -0,0 +1,73 @@
+"use strict";
+/**
+ * Claude Code — track-action hook adapter
+ *
+ * PostToolUse hook for mcp__browser-devtools__ tool calls.
+ * Appends tool_call entries to actions.jsonl for the session.
+ *
+ * Handles both direct tool calls and nested callTool() invocations
+ * inside the execute tool (mcp__browser-devtools__execute).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+const CALL_TOOL_PATTERN = /callTool\(\s*['"]([^'"]+)['"]/g;
+const MCP_PREFIX = "mcp__browser-devtools__";
+const EXECUTE_TOOL = `${MCP_PREFIX}execute`;
+function toFullName(shortName) {
+    return shortName.startsWith(MCP_PREFIX) ? shortName : `${MCP_PREFIX}${shortName}`;
+}
+function extractNestedToolNames(toolInput) {
+    const inputStr = typeof toolInput === "string"
+        ? toolInput
+        : JSON.stringify(toolInput ?? "");
+    const names = new Set();
+    let match = CALL_TOOL_PATTERN.exec(inputStr);
+    while (match !== null) {
+        names.add(toFullName(match[1]));
+        match = CALL_TOOL_PATTERN.exec(inputStr);
+    }
+    return [...names];
+}
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.exit(0);
+    }
+    const sessionId = input.session_id ?? "default";
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const toolName = input.tool_name ?? "unknown";
+    const timestamp = new Date().toISOString();
+    // record the direct tool call
+    const entry = {
+        type: "tool_call",
+        timestamp,
+        tool_name: toolName,
+        tool_input: input.tool_input,
+        tool_response: input.tool_response,
+    };
+    (0, actions_1.appendAction)(actionsFile, entry);
+    logger_1.logger.debug(`track-action: ${toolName}`);
+    // for execute tool, extract and record nested callTool() invocations
+    if (toolName === EXECUTE_TOOL) {
+        const nested = extractNestedToolNames(input.tool_input);
+        for (const name of nested) {
+            const nestedEntry = {
+                type: "tool_call",
+                timestamp,
+                tool_name: name,
+            };
+            (0, actions_1.appendAction)(actionsFile, nestedEntry);
+            logger_1.logger.debug(`track-action (nested): ${name}`);
+        }
+    }
+    process.exit(0);
+}
+//# sourceMappingURL=track-action.js.map

package/dist/clients/claude/hooks/track-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.js","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/track-action.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAmCH,kBA0CC;AA3ED,yDAA2E;AAC3E,gDAAyD;AACzD,8CAA+C;AAE/C,MAAM,iBAAiB,GAAW,gCAAgC,CAAC;AACnE,MAAM,UAAU,GAAW,yBAAyB,CAAC;AACrD,MAAM,YAAY,GAAW,GAAG,UAAU,SAAS,CAAC;AASpD,SAAS,UAAU,CAAC,SAAiB;IACjC,OAAO,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAkB;IAC9C,MAAM,QAAQ,GAAW,OAAO,SAAS,KAAK,QAAQ;QAClD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAgB,IAAI,GAAG,EAAU,CAAC;IAC7C,IAAI,KAAK,GAA2B,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA6B,CAAC;IAClC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA2B,CAAC;IAC9D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IACzF,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAW,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;IACtD,MAAM,SAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEnD,8BAA8B;IAC9B,MAAM,KAAK,GAAmB;QAC1B,IAAI,EAAE,WAAW;QACjB,SAAS;QACT,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;KACrC,CAAC;IACF,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IAE1C,qEAAqE;IACrE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,WAAW,GAAmB;gBAChC,IAAI,EAAE,WAAW;gBACjB,SAAS;gBACT,SAAS,EAAE,IAAI;aAClB,CAAC;YACF,IAAA,sBAAY,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACvC,eAAM,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/claude/hooks/verify-gate.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Claude Code — verify-gate hook adapter
+ *
+ * Reads Claude Code's stdin format, extracts session_id,
+ * then delegates to the shared core logic and translates
+ * the result into Claude Code exit codes:
+ *   0 = allow completion
+ *   2 = block completion (stderr fed back to Claude)
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=verify-gate.d.ts.map

package/dist/clients/claude/hooks/verify-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.d.ts","sourceRoot":"","sources":["../../../../src/clients/claude/hooks/verify-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkC5C"}

package/dist/clients/claude/hooks/verify-gate.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * Claude Code — verify-gate hook adapter
+ *
+ * Reads Claude Code's stdin format, extracts session_id,
+ * then delegates to the shared core logic and translates
+ * the result into Claude Code exit codes:
+ *   0 = allow completion
+ *   2 = block completion (stderr fed back to Claude)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const verify_gate_1 = require("../../../hooks/core/verify-gate");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.exit(0);
+    }
+    const sessionId = input.session_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const config = (0, config_1.loadConfig)(projectDir);
+    const result = (0, verify_gate_1.runVerifyGate)({
+        sessionId,
+        actionsFile: `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`,
+        verdictFile: `${projectDir}/.ironbee/sessions/${sessionId}/verdict.json`,
+        retryFile: `${projectDir}/.ironbee/sessions/${sessionId}/retries`,
+        maxRetries: (0, config_1.getMaxRetries)(config),
+    });
+    if (result.action === "allow") {
+        if (result.message) {
+            process.stderr.write(result.message + "\n");
+        }
+        process.exit(0);
+    }
+    // block: exit 2 with stderr feedback to Claude
+    if (result.message) {
+        process.stderr.write(result.message + "\n");
+    }
+    process.exit(2);
+}
+//# sourceMappingURL=verify-gate.js.map