@ironbee-ai/cli 0.1.1 → 0.2.0

package/dist/clients/claude/skill.md

@@ -4,13 +4,14 @@ description: >
   MANDATORY browser verification after code changes. Activates when: implementing features,
   fixing bugs, modifying UI components, changing API endpoints, updating styles, refactoring code,
   or completing ANY task that changes application behavior. After writing or editing code files,
-  you MUST verify changes through the browser-devtools MCP server before reporting task completion.
+  you MUST verify changes through the browser-devtools MCP server and submit a verdict (pass or fail)
+  before reporting task completion. If verification fails, submit the fail verdict before fixing.
 ---
 
 # IronBee Browser Verification
 
 ## Rule
-No task is complete until changes are verified in the browser — visually AND functionally.
+No task is complete until changes are verified in the browser — visually AND functionally. After verification, you MUST submit a verdict (pass or fail) before doing anything else. If verification fails, submit the fail verdict first, then fix.
 
 ## MCP Server
 Verification is performed using the **browser-devtools** MCP server (`browser-devtools-mcp` package).
@@ -35,8 +36,11 @@ If the application is already running, skip the start step. If the build fails,
    - **Console**: `mcp__browser-devtools__o11y_get-console-messages` — check for errors
    Navigate, Screenshot, Accessibility, and Console tools are MANDATORY (the Stop hook checks the transcript for each one). Functional interaction is expected for every verification.
 4. **Stop** the dev server when verification is complete
-5. Write your verdict using the Write tool to the path provided at session start (`.ironbee/sessions/<session-id>/verdict.json`). The SessionStart hook outputs the exact path at the beginning of your session — use that path.
-6. If failed → fix the code → rebuild → re-verify → update verdict → repeat until pass
+5. **IMMEDIATELY submit your verdict** — do NOT edit any code before submitting: `echo '<verdict-json>' | ironbee hook submit-verdict`
+   - If everything works → submit pass verdict
+   - If something is broken → submit fail verdict with issues describing what failed
+   - **Never skip this step.** Every verification attempt must be recorded, pass or fail.
+6. If you submitted a fail verdict → fix the code → rebuild → go back to step 2 → submit again → repeat until pass
 
 ## What good verification looks like
 - Changed a form handler? → Start the app, fill the form, submit it, verify the response
@@ -46,9 +50,10 @@ If the application is already running, skip the start step. If the build fails,
 - Changed styling? → Take a screenshot AND interact to ensure layout didn't break functionality
 
 ## How it works
-- At session start, the SessionStart hook outputs your verdict file path — use it
-- After verification, write your verdict to that path using the Write tool
-- When you stop, the Stop hook checks that browser tools were used AND the verdict file exists
+- At session start, the SessionStart hook outputs your session ID
+- After verification, submit your verdict: `echo '<verdict-json>' | ironbee hook submit-verdict`
+- The submit-verdict command validates your verdict and records it
+- When you stop, the Stop hook checks that browser tools were used AND a valid verdict exists
 - If something is missing, the hook blocks you and gives you instructions
 
 ## Agent Teams
@@ -56,8 +61,26 @@ If the application is already running, skip the start step. If the build fails,
 - The main orchestrator agent verifies ALL changes after subagents complete
 - Each session's verification is isolated via session-specific verdict files
 
+## Verdict format
+
+On pass:
+```json
+{"session_id":"<your-session-id>","status":"pass","pages_tested":["http://localhost:3000/page"],"checks":["feature works"],"console_errors":0,"network_failures":0}
+```
+
+On fail (issues is required):
+```json
+{"session_id":"<your-session-id>","status":"fail","pages_tested":["http://localhost:3000/page"],"checks":["feature broken"],"console_errors":1,"network_failures":0,"issues":["button click handler not firing"]}
+```
+
+On pass after a previous fail (fixes is required):
+```json
+{"session_id":"<your-session-id>","status":"pass","pages_tested":["http://localhost:3000/page"],"checks":["feature works"],"console_errors":0,"network_failures":0,"fixes":["reattached click handler to submit button"]}
+```
+
 ## Important
-- The Stop hook checks BOTH that browser-devtools MCP tools were used AND a verdict file exists
-- Write the verdict to the path given at session start — do NOT guess the path
+- **Always submit a verdict after every verification attempt** — both pass AND fail. Fail verdicts are tracked for analytics.
+- The Stop hook checks BOTH that browser-devtools MCP tools were used AND a valid verdict exists
+- Submit verdicts via `ironbee hook submit-verdict`, do NOT write verdict.json directly
 - Every code edit (Write/Edit) automatically clears your session's verdict
 - After 3 failed verification attempts, you may complete but must report issues

package/dist/clients/cursor/hooks/clear-verdict.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Cursor — clear-verdict hook adapter
+ *
+ * afterFileEdit hook — records file_edit and clears verdict
+ * when a code file is edited. Cursor provides file_path
+ * directly in the stdin payload.
+ *
+ * NOTE: afterFileEdit is fire-and-forget — output is ignored by Cursor.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=clear-verdict.d.ts.map

package/dist/clients/cursor/hooks/clear-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/clear-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA4C5C"}

package/dist/clients/cursor/hooks/clear-verdict.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * Cursor — clear-verdict hook adapter
+ *
+ * afterFileEdit hook — records file_edit and clears verdict
+ * when a code file is edited. Cursor provides file_path
+ * directly in the stdin payload.
+ *
+ * NOTE: afterFileEdit is fire-and-forget — output is ignored by Cursor.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const clear_verdict_1 = require("../../../hooks/core/clear-verdict");
+const actions_1 = require("../../../hooks/core/actions");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const writtenFile = input.file_path;
+    // skip clear if the write target is the verdict file itself
+    if (writtenFile && writtenFile.includes(".ironbee/sessions/") && writtenFile.endsWith("verdict.json")) {
+        logger_1.logger.debug(`skipping clear-verdict: write target is verdict file ${writtenFile}`);
+        process.exit(0);
+    }
+    // skip if file does not require verification
+    if (writtenFile) {
+        const config = (0, config_1.loadConfig)(projectDir);
+        if (!(0, config_1.requiresVerification)(writtenFile, config)) {
+            logger_1.logger.debug(`skipping clear-verdict: file does not require verification (${writtenFile})`);
+            process.exit(0);
+        }
+    }
+    // record file edit in actions.jsonl
+    const fileEditEntry = {
+        type: "file_edit",
+        timestamp: new Date().toISOString(),
+        tool_name: "file_edit",
+        file_path: writtenFile,
+    };
+    (0, actions_1.appendAction)(`${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`, fileEditEntry);
+    (0, clear_verdict_1.runClearVerdict)({
+        verdictFile: `${projectDir}/.ironbee/sessions/${sessionId}/verdict.json`,
+        retryFile: `${projectDir}/.ironbee/sessions/${sessionId}/retries`,
+    });
+    process.exit(0);
+}
+//# sourceMappingURL=clear-verdict.js.map

package/dist/clients/cursor/hooks/clear-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/clear-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAeH,kBA4CC;AAzDD,qEAAoE;AACpE,yDAA2E;AAC3E,gDAAsF;AACtF,gDAAyD;AACzD,8CAA+C;AAS/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA6B,CAAC;IAChE,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAuB,KAAK,CAAC,SAAS,CAAC;IAExD,4DAA4D;IAC5D,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpG,eAAM,CAAC,KAAK,CAAC,wDAAwD,WAAW,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,6CAA6C;IAC7C,IAAI,WAAW,EAAE,CAAC;QACd,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,IAAA,6BAAoB,EAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,eAAM,CAAC,KAAK,CAAC,+DAA+D,WAAW,GAAG,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACL,CAAC;IAED,oCAAoC;IACpC,MAAM,aAAa,GAAmB;QAClC,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,WAAW;QACtB,SAAS,EAAE,WAAW;KACzB,CAAC;IACF,IAAA,sBAAY,EAAC,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE1F,IAAA,+BAAe,EAAC;QACZ,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,eAAe;QACxE,SAAS,EAAE,GAAG,UAAU,sBAAsB,SAAS,UAAU;KACpE,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/require-verdict.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Cursor — require-verdict hook adapter
+ *
+ * preToolUse hook for Write — blocks file edits if the agent
+ * used browser-devtools tools but hasn't submitted a verdict yet.
+ * Forces the agent to submit a fail verdict before fixing code.
+ *
+ * Returns { permission: "deny", agent_message: "..." } to block,
+ * or { permission: "allow" } to proceed.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=require-verdict.d.ts.map

package/dist/clients/cursor/hooks/require-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verdict.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/require-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAiC5C"}

package/dist/clients/cursor/hooks/require-verdict.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * Cursor — require-verdict hook adapter
+ *
+ * preToolUse hook for Write — blocks file edits if the agent
+ * used browser-devtools tools but hasn't submitted a verdict yet.
+ * Forces the agent to submit a fail verdict before fixing code.
+ *
+ * Returns { permission: "deny", agent_message: "..." } to block,
+ * or { permission: "allow" } to proceed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        const output = { permission: "allow" };
+        process.stdout.write(JSON.stringify(output));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    if ((0, actions_1.hasToolCallsSinceLastVerdict)(actionsFile)) {
+        const output = {
+            permission: "deny",
+            agent_message: `BLOCKED: You used browser-devtools tools but did not submit a verdict. You MUST submit a verdict (pass or fail) before editing code.
+
+Submit your verdict first:
+  echo '{"session_id":"${sessionId}","status":"fail","pages_tested":[...],"checks":[...],"console_errors":0,"network_failures":0,"issues":["describe what failed"]}' | ironbee hook submit-verdict
+
+Then you can edit code to fix the issues.`,
+        };
+        process.stdout.write(JSON.stringify(output));
+        process.exit(2);
+    }
+    const output = { permission: "allow" };
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+//# sourceMappingURL=require-verdict.js.map

package/dist/clients/cursor/hooks/require-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verdict.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/require-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAkBH,kBAiCC;AAjDD,yDAA2E;AAC3E,gDAAyD;AACzD,8CAA+C;AAc/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA4B,CAAC;IACjC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA0B,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAA2B,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IAEzF,IAAI,IAAA,sCAA4B,EAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA2B;YACnC,UAAU,EAAE,MAAM;YAClB,aAAa,EAAE;;;yBAGF,SAAS;;0CAEQ;SACjC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/session-start.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Cursor — session-start hook adapter
+ *
+ * sessionStart hook — appends a session_start entry to actions.jsonl
+ * and outputs the session ID and submit-verdict instructions via
+ * additional_context (Cursor's field for injecting into agent context).
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/clients/cursor/hooks/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAiE5C"}

package/dist/clients/cursor/hooks/session-start.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * Cursor — session-start hook adapter
+ *
+ * sessionStart hook — appends a session_start entry to actions.jsonl
+ * and outputs the session ID and submit-verdict instructions via
+ * additional_context (Cursor's field for injecting into agent context).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.stdout.write(JSON.stringify({}));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const entry = {
+        type: "session_start",
+        timestamp: new Date().toISOString(),
+        session_id: sessionId,
+        source: "cursor",
+    };
+    (0, actions_1.appendAction)(actionsFile, entry);
+    logger_1.logger.debug(`session-start: ${sessionId}`);
+    const verdictPass = JSON.stringify({
+        session_id: sessionId,
+        status: "pass",
+        pages_tested: ["http://localhost:3000/affected-page"],
+        checks: ["form submits successfully", "new item appears in list"],
+        console_errors: 0,
+        network_failures: 0,
+    });
+    const verdictFail = JSON.stringify({
+        session_id: sessionId,
+        status: "fail",
+        pages_tested: ["http://localhost:3000/affected-page"],
+        checks: ["form renders", "submit button unresponsive"],
+        console_errors: 2,
+        network_failures: 0,
+        issues: ["button click handler not firing", "TypeError in console"],
+    });
+    const context = `IRONBEE VERIFICATION — SESSION ACTIVE
+Session ID: ${sessionId}
+
+You MUST verify all code changes in the browser before completing any task.
+After EVERY verification attempt, you MUST submit a verdict BEFORE doing anything else.
+- If pass → submit pass verdict
+- If fail → submit fail verdict FIRST, then fix. Do NOT skip to fixing code without submitting.
+
+Submit via terminal:
+  echo '${verdictPass}' | ironbee hook submit-verdict
+
+On fail (issues is required):
+  echo '${verdictFail}' | ironbee hook submit-verdict
+
+Required fields: session_id, status, pages_tested, checks, console_errors, network_failures
+On fail, include: issues (array of strings describing what failed)
+On pass after a previous fail, include: fixes (array of strings describing what was fixed)`;
+    const output = {
+        additional_context: context,
+    };
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+//# sourceMappingURL=session-start.js.map

package/dist/clients/cursor/hooks/session-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/session-start.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAgBH,kBAiEC;AA/ED,yDAA+E;AAC/E,gDAAyD;AACzD,8CAA+C;AAY/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA4B,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IACzF,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAuB;QAC9B,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,QAAQ;KACnB,CAAC;IAEF,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IAE5C,MAAM,WAAW,GAAW,IAAI,CAAC,SAAS,CAAC;QACvC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,CAAC,qCAAqC,CAAC;QACrD,MAAM,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC;QACjE,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,WAAW,GAAW,IAAI,CAAC,SAAS,CAAC;QACvC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,CAAC,qCAAqC,CAAC;QACrD,MAAM,EAAE,CAAC,cAAc,EAAE,4BAA4B,CAAC;QACtD,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,iCAAiC,EAAE,sBAAsB,CAAC;KACtE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAW;cACd,SAAS;;;;;;;;UAQb,WAAW;;;UAGX,WAAW;;;;2FAIsE,CAAC;IAExF,MAAM,MAAM,GAA6B;QACrC,kBAAkB,EAAE,OAAO;KAC9B,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/track-action.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Cursor — track-action hook adapter
+ *
+ * postToolUse hook for browser-devtools MCP tool calls.
+ * Filtered by matcher in hooks.json so only browser-devtools
+ * tools trigger this hook — no script-level filtering needed.
+ *
+ * Cursor's postToolUse uses `MCP:<tool_name>` format for tool_name.
+ * We normalize to `mcp__browser-devtools__<tool_name>` so that
+ * core verify-gate logic can match them consistently.
+ *
+ * Handles both direct tool calls and nested callTool() invocations
+ * inside the execute tool.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=track-action.d.ts.map

package/dist/clients/cursor/hooks/track-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/track-action.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAmDH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA6C5C"}

package/dist/clients/cursor/hooks/track-action.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Cursor — track-action hook adapter
+ *
+ * postToolUse hook for browser-devtools MCP tool calls.
+ * Filtered by matcher in hooks.json so only browser-devtools
+ * tools trigger this hook — no script-level filtering needed.
+ *
+ * Cursor's postToolUse uses `MCP:<tool_name>` format for tool_name.
+ * We normalize to `mcp__browser-devtools__<tool_name>` so that
+ * core verify-gate logic can match them consistently.
+ *
+ * Handles both direct tool calls and nested callTool() invocations
+ * inside the execute tool.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+const CALL_TOOL_PATTERN = /callTool\(\s*['"]([^'"]+)['"]/g;
+const MCP_PREFIX = "mcp__browser-devtools__";
+const CURSOR_MCP_PREFIX = "MCP:";
+const EXECUTE_TOOL = `${MCP_PREFIX}execute`;
+/** Convert Cursor's MCP:<name> format to mcp__browser-devtools__<name>. */
+function normalizeMcpToolName(cursorName) {
+    if (cursorName.startsWith(CURSOR_MCP_PREFIX)) {
+        return `${MCP_PREFIX}${cursorName.slice(CURSOR_MCP_PREFIX.length)}`;
+    }
+    if (cursorName.startsWith(MCP_PREFIX)) {
+        return cursorName;
+    }
+    return `${MCP_PREFIX}${cursorName}`;
+}
+function toFullName(shortName) {
+    return shortName.startsWith(MCP_PREFIX) ? shortName : `${MCP_PREFIX}${shortName}`;
+}
+function extractNestedToolNames(toolInput) {
+    const inputStr = typeof toolInput === "string"
+        ? toolInput
+        : JSON.stringify(toolInput ?? "");
+    const names = new Set();
+    let match = CALL_TOOL_PATTERN.exec(inputStr);
+    while (match !== null) {
+        names.add(toFullName(match[1]));
+        match = CALL_TOOL_PATTERN.exec(inputStr);
+    }
+    return [...names];
+}
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.stdout.write(JSON.stringify({}));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const rawToolName = input.tool_name ?? "unknown";
+    const toolName = normalizeMcpToolName(rawToolName);
+    const timestamp = new Date().toISOString();
+    // record the direct tool call
+    const entry = {
+        type: "tool_call",
+        timestamp,
+        tool_name: toolName,
+        tool_input: input.tool_input,
+        tool_response: input.tool_output,
+    };
+    (0, actions_1.appendAction)(actionsFile, entry);
+    logger_1.logger.debug(`track-action: ${rawToolName} → ${toolName}`);
+    // for execute tool, extract and record nested callTool() invocations
+    if (toolName === EXECUTE_TOOL) {
+        const nested = extractNestedToolNames(input.tool_input);
+        for (const name of nested) {
+            const nestedEntry = {
+                type: "tool_call",
+                timestamp,
+                tool_name: name,
+            };
+            (0, actions_1.appendAction)(actionsFile, nestedEntry);
+            logger_1.logger.debug(`track-action (nested): ${name}`);
+        }
+    }
+    process.stdout.write(JSON.stringify({}));
+    process.exit(0);
+}
+//# sourceMappingURL=track-action.js.map

package/dist/clients/cursor/hooks/track-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/track-action.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAmDH,kBA6CC;AA9FD,yDAA2E;AAC3E,gDAAyD;AACzD,8CAA+C;AAE/C,MAAM,iBAAiB,GAAW,gCAAgC,CAAC;AACnE,MAAM,UAAU,GAAW,yBAAyB,CAAC;AACrD,MAAM,iBAAiB,GAAW,MAAM,CAAC;AACzC,MAAM,YAAY,GAAW,GAAG,UAAU,SAAS,CAAC;AAapD,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,UAAkB;IAC5C,IAAI,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACjC,OAAO,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAkB;IAC9C,MAAM,QAAQ,GAAW,OAAO,SAAS,KAAK,QAAQ;QAClD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAgB,IAAI,GAAG,EAAU,CAAC;IAC7C,IAAI,KAAK,GAA2B,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA6B,CAAC;IAClC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA2B,CAAC;IAC9D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IACzF,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAW,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;IACzD,MAAM,QAAQ,GAAW,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEnD,8BAA8B;IAC9B,MAAM,KAAK,GAAmB;QAC1B,IAAI,EAAE,WAAW;QACjB,SAAS;QACT,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,WAAW;KACnC,CAAC;IACF,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,iBAAiB,WAAW,MAAM,QAAQ,EAAE,CAAC,CAAC;IAE3D,qEAAqE;IACrE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,WAAW,GAAmB;gBAChC,IAAI,EAAE,WAAW;gBACjB,SAAS;gBACT,SAAS,EAAE,IAAI;aAClB,CAAC;YACF,IAAA,sBAAY,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACvC,eAAM,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/verify-gate.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Cursor — verify-gate hook adapter
+ *
+ * stop hook — runs verification checks and outputs result.
+ * Uses `followup_message` to force the agent back into a new
+ * iteration when verification is missing or failed. Cursor's
+ * stop hook cannot return "permission": "deny", but
+ * followup_message auto-submits a new prompt to the agent,
+ * mechanically preventing completion until verification passes
+ * (up to Cursor's loop_limit, default 5).
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=verify-gate.d.ts.map

package/dist/clients/cursor/hooks/verify-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/verify-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAmBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkC5C"}

package/dist/clients/cursor/hooks/verify-gate.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * Cursor — verify-gate hook adapter
+ *
+ * stop hook — runs verification checks and outputs result.
+ * Uses `followup_message` to force the agent back into a new
+ * iteration when verification is missing or failed. Cursor's
+ * stop hook cannot return "permission": "deny", but
+ * followup_message auto-submits a new prompt to the agent,
+ * mechanically preventing completion until verification passes
+ * (up to Cursor's loop_limit, default 5).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const verify_gate_1 = require("../../../hooks/core/verify-gate");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.stdout.write(JSON.stringify({}));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const config = (0, config_1.loadConfig)(projectDir);
+    const result = (0, verify_gate_1.runVerifyGate)({
+        sessionId,
+        actionsFile: `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`,
+        verdictFile: `${projectDir}/.ironbee/sessions/${sessionId}/verdict.json`,
+        retryFile: `${projectDir}/.ironbee/sessions/${sessionId}/retries`,
+        maxRetries: (0, config_1.getMaxRetries)(config),
+    });
+    const output = {};
+    // If verification blocks (action === "block"), send a followup_message
+    // to force the agent back into a new iteration. The agent cannot complete
+    // until it resolves the verification issue or loop_limit is reached.
+    if (result.action === "block" && result.message) {
+        output.followup_message = result.message;
+    }
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+//# sourceMappingURL=verify-gate.js.map

package/dist/clients/cursor/hooks/verify-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/verify-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAmBH,kBAkCC;AAnDD,iEAAkF;AAClF,gDAA+E;AAC/E,gDAAyD;AACzD,8CAA+C;AAc/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAAwB,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;IAErD,MAAM,MAAM,GAAqB,IAAA,2BAAa,EAAC;QAC3C,SAAS;QACT,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,gBAAgB;QACzE,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,eAAe;QACxE,SAAS,EAAE,GAAG,UAAU,sBAAsB,SAAS,UAAU;QACjE,UAAU,EAAE,IAAA,sBAAa,EAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC;IAC7C,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/index.d.ts

@@ -0,0 +1,20 @@
+import { IClient } from "../base";
+export declare class CursorClient implements IClient {
+    readonly name: string;
+    detect(projectDir: string): boolean;
+    resolveProjectDir(): string;
+    install(projectDir: string): void;
+    uninstall(projectDir: string): void;
+    runVerifyGate(projectDir: string): void;
+    runClearVerdict(projectDir: string): void;
+    runTrackAction(projectDir: string): void;
+    runSessionStart(projectDir: string): void;
+    runRequireVerdict(projectDir: string): void;
+    private isIronBeeHook;
+    private mergeHooksConfig;
+    private removeIronBeeHooks;
+    private removeMcpServer;
+    private removeFile;
+    private writeMcpConfig;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/clients/cursor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/clients/cursor/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAwClC,qBAAa,YAAa,YAAW,OAAO;IACxC,SAAgB,IAAI,EAAE,MAAM,CAAY;IAEjC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAInC,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAiCjC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAsBnC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIzC,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIzC,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIlD,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,gBAAgB;IAqExB,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,cAAc;CAyBzB"}