@ironbee-ai/cli 0.1.1 → 0.2.1

package/dist/clients/claude/rule.md

@@ -1,4 +1,4 @@
-You MUST verify all code changes in the browser before completing any task.
+You MUST verify all code changes in the browser before completing any task. After every verification attempt, you MUST submit a verdict (pass or fail) via `ironbee hook submit-verdict` before doing anything else. If verification fails, submit the fail verdict first, then fix.
 
 Verification is NOT just visual — you must functionally test the changes by interacting with the application through the browser-devtools MCP server. Click buttons, fill forms, trigger the flows you changed, and confirm things actually work end-to-end.
 
@@ -16,20 +16,22 @@ Required verification steps:
 5. Check accessibility with `mcp__browser-devtools__a11y_take-aria-snapshot`
 6. Check console for errors with `mcp__browser-devtools__o11y_get-console-messages`
 7. Stop the dev server when done
-8. Write your verdict to the path provided at session start using the Write tool
+8. **IMMEDIATELY submit your verdict** — do NOT edit any code before submitting: `echo '<verdict-json>' | ironbee hook submit-verdict`
+   - Pass → submit pass verdict
+   - Fail → submit fail verdict with issues, THEN fix the code and re-verify
 
 Steps 2, 4, 5, and 6 are enforced by the Stop hook. Step 3 is expected — do not just take a screenshot and call it done.
 
-The SessionStart hook outputs your verdict file path at the beginning of your session. After verification, write your verdict to that exact path using the Write tool. The Stop hook will validate it when you stop.
+The SessionStart hook outputs your session ID at the beginning of your session. After EVERY verification attempt, you MUST submit a verdict before doing anything else — even if it failed. Do not skip to fixing code. The submit-verdict command validates and records the verdict.
 
-If verification fails, fix the code and re-verify.
+If verification fails: submit fail verdict → fix the code → re-verify → submit again.
 
 Every code edit (Write/Edit) automatically clears your verdict, requiring re-verification.
 
 ## BANNED
 
-- Writing a verdict to any path other than the one provided at session start
-- Writing a verdict file without actually performing browser verification
-- Writing a verdict based on assumptions, code reading, or prior knowledge
+- Writing verdict.json directly — always use `ironbee hook submit-verdict`
+- Skipping the fail verdict — always submit fail before fixing, so issues are tracked
+- Submitting a verdict without actually performing browser verification
+- Submitting a verdict based on assumptions, code reading, or prior knowledge
 - Copying example verdicts from hook messages without doing real verification first
-- Using Bash echo to write verdict files — always use the Write tool

package/dist/clients/claude/skill.md

@@ -4,13 +4,14 @@ description: >
   MANDATORY browser verification after code changes. Activates when: implementing features,
   fixing bugs, modifying UI components, changing API endpoints, updating styles, refactoring code,
   or completing ANY task that changes application behavior. After writing or editing code files,
-  you MUST verify changes through the browser-devtools MCP server before reporting task completion.
+  you MUST verify changes through the browser-devtools MCP server and submit a verdict (pass or fail)
+  before reporting task completion. If verification fails, submit the fail verdict before fixing.
 ---
 
 # IronBee Browser Verification
 
 ## Rule
-No task is complete until changes are verified in the browser — visually AND functionally.
+No task is complete until changes are verified in the browser — visually AND functionally. After verification, you MUST submit a verdict (pass or fail) before doing anything else. If verification fails, submit the fail verdict first, then fix.
 
 ## MCP Server
 Verification is performed using the **browser-devtools** MCP server (`browser-devtools-mcp` package).
@@ -35,8 +36,11 @@ If the application is already running, skip the start step. If the build fails,
    - **Console**: `mcp__browser-devtools__o11y_get-console-messages` — check for errors
    Navigate, Screenshot, Accessibility, and Console tools are MANDATORY (the Stop hook checks the transcript for each one). Functional interaction is expected for every verification.
 4. **Stop** the dev server when verification is complete
-5. Write your verdict using the Write tool to the path provided at session start (`.ironbee/sessions/<session-id>/verdict.json`). The SessionStart hook outputs the exact path at the beginning of your session — use that path.
-6. If failed → fix the code → rebuild → re-verify → update verdict → repeat until pass
+5. **IMMEDIATELY submit your verdict** — do NOT edit any code before submitting: `echo '<verdict-json>' | ironbee hook submit-verdict`
+   - If everything works → submit pass verdict
+   - If something is broken → submit fail verdict with issues describing what failed
+   - **Never skip this step.** Every verification attempt must be recorded, pass or fail.
+6. If you submitted a fail verdict → fix the code → rebuild → go back to step 2 → submit again → repeat until pass
 
 ## What good verification looks like
 - Changed a form handler? → Start the app, fill the form, submit it, verify the response
@@ -46,9 +50,10 @@ If the application is already running, skip the start step. If the build fails,
 - Changed styling? → Take a screenshot AND interact to ensure layout didn't break functionality
 
 ## How it works
-- At session start, the SessionStart hook outputs your verdict file path — use it
-- After verification, write your verdict to that path using the Write tool
-- When you stop, the Stop hook checks that browser tools were used AND the verdict file exists
+- At session start, the SessionStart hook outputs your session ID
+- After verification, submit your verdict: `echo '<verdict-json>' | ironbee hook submit-verdict`
+- The submit-verdict command validates your verdict and records it
+- When you stop, the Stop hook checks that browser tools were used AND a valid verdict exists
 - If something is missing, the hook blocks you and gives you instructions
 
 ## Agent Teams
@@ -56,8 +61,26 @@ If the application is already running, skip the start step. If the build fails,
 - The main orchestrator agent verifies ALL changes after subagents complete
 - Each session's verification is isolated via session-specific verdict files
 
+## Verdict format
+
+On pass:
+```json
+{"session_id":"<your-session-id>","status":"pass","pages_tested":["http://localhost:3000/page"],"checks":["feature works"],"console_errors":0,"network_failures":0}
+```
+
+On fail (issues is required):
+```json
+{"session_id":"<your-session-id>","status":"fail","pages_tested":["http://localhost:3000/page"],"checks":["feature broken"],"console_errors":1,"network_failures":0,"issues":["button click handler not firing"]}
+```
+
+On pass after a previous fail (fixes is required):
+```json
+{"session_id":"<your-session-id>","status":"pass","pages_tested":["http://localhost:3000/page"],"checks":["feature works"],"console_errors":0,"network_failures":0,"fixes":["reattached click handler to submit button"]}
+```
+
 ## Important
-- The Stop hook checks BOTH that browser-devtools MCP tools were used AND a verdict file exists
-- Write the verdict to the path given at session start — do NOT guess the path
+- **Always submit a verdict after every verification attempt** — both pass AND fail. Fail verdicts are tracked for analytics.
+- The Stop hook checks BOTH that browser-devtools MCP tools were used AND a valid verdict exists
+- Submit verdicts via `ironbee hook submit-verdict`, do NOT write verdict.json directly
 - Every code edit (Write/Edit) automatically clears your session's verdict
 - After 3 failed verification attempts, you may complete but must report issues

package/dist/clients/cursor/hooks/clear-verdict.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Cursor — clear-verdict hook adapter
+ *
+ * afterFileEdit hook — records file_edit and clears verdict
+ * when a code file is edited. Cursor provides file_path
+ * directly in the stdin payload.
+ *
+ * NOTE: afterFileEdit is fire-and-forget — output is ignored by Cursor.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=clear-verdict.d.ts.map

package/dist/clients/cursor/hooks/clear-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/clear-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA4C5C"}

package/dist/clients/cursor/hooks/clear-verdict.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * Cursor — clear-verdict hook adapter
+ *
+ * afterFileEdit hook — records file_edit and clears verdict
+ * when a code file is edited. Cursor provides file_path
+ * directly in the stdin payload.
+ *
+ * NOTE: afterFileEdit is fire-and-forget — output is ignored by Cursor.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const clear_verdict_1 = require("../../../hooks/core/clear-verdict");
+const actions_1 = require("../../../hooks/core/actions");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const writtenFile = input.file_path;
+    // skip clear if the write target is the verdict file itself
+    if (writtenFile && writtenFile.includes(".ironbee/sessions/") && writtenFile.endsWith("verdict.json")) {
+        logger_1.logger.debug(`skipping clear-verdict: write target is verdict file ${writtenFile}`);
+        process.exit(0);
+    }
+    // skip if file does not require verification
+    if (writtenFile) {
+        const config = (0, config_1.loadConfig)(projectDir);
+        if (!(0, config_1.requiresVerification)(writtenFile, config)) {
+            logger_1.logger.debug(`skipping clear-verdict: file does not require verification (${writtenFile})`);
+            process.exit(0);
+        }
+    }
+    // record file edit in actions.jsonl
+    const fileEditEntry = {
+        type: "file_edit",
+        timestamp: new Date().toISOString(),
+        tool_name: "file_edit",
+        file_path: writtenFile,
+    };
+    (0, actions_1.appendAction)(`${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`, fileEditEntry);
+    (0, clear_verdict_1.runClearVerdict)({
+        verdictFile: `${projectDir}/.ironbee/sessions/${sessionId}/verdict.json`,
+        retryFile: `${projectDir}/.ironbee/sessions/${sessionId}/retries`,
+    });
+    process.exit(0);
+}
+//# sourceMappingURL=clear-verdict.js.map

package/dist/clients/cursor/hooks/clear-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/clear-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAeH,kBA4CC;AAzDD,qEAAoE;AACpE,yDAA2E;AAC3E,gDAAsF;AACtF,gDAAyD;AACzD,8CAA+C;AAS/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA6B,CAAC;IAChE,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAuB,KAAK,CAAC,SAAS,CAAC;IAExD,4DAA4D;IAC5D,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpG,eAAM,CAAC,KAAK,CAAC,wDAAwD,WAAW,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,6CAA6C;IAC7C,IAAI,WAAW,EAAE,CAAC;QACd,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,IAAA,6BAAoB,EAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,eAAM,CAAC,KAAK,CAAC,+DAA+D,WAAW,GAAG,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACL,CAAC;IAED,oCAAoC;IACpC,MAAM,aAAa,GAAmB;QAClC,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,WAAW;QACtB,SAAS,EAAE,WAAW;KACzB,CAAC;IACF,IAAA,sBAAY,EAAC,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE1F,IAAA,+BAAe,EAAC;QACZ,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,eAAe;QACxE,SAAS,EAAE,GAAG,UAAU,sBAAsB,SAAS,UAAU;KACpE,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/require-verdict.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Cursor — require-verdict hook adapter
+ *
+ * preToolUse hook for Write — blocks file edits if the agent
+ * used browser-devtools tools but hasn't submitted a verdict yet.
+ * Forces the agent to submit a fail verdict before fixing code.
+ *
+ * Returns { permission: "deny", agent_message: "..." } to block,
+ * or { permission: "allow" } to proceed.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=require-verdict.d.ts.map

package/dist/clients/cursor/hooks/require-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verdict.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/require-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAiC5C"}

package/dist/clients/cursor/hooks/require-verdict.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * Cursor — require-verdict hook adapter
+ *
+ * preToolUse hook for Write — blocks file edits if the agent
+ * used browser-devtools tools but hasn't submitted a verdict yet.
+ * Forces the agent to submit a fail verdict before fixing code.
+ *
+ * Returns { permission: "deny", agent_message: "..." } to block,
+ * or { permission: "allow" } to proceed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        const output = { permission: "allow" };
+        process.stdout.write(JSON.stringify(output));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    if ((0, actions_1.hasToolCallsSinceLastVerdict)(actionsFile)) {
+        const output = {
+            permission: "deny",
+            agent_message: `BLOCKED: You used browser-devtools tools but did not submit a verdict. You MUST submit a verdict (pass or fail) before editing code.
+
+Submit your verdict first:
+  echo '{"session_id":"${sessionId}","status":"fail","pages_tested":[...],"checks":[...],"console_errors":0,"network_failures":0,"issues":["describe what failed"]}' | ironbee hook submit-verdict
+
+Then you can edit code to fix the issues.`,
+        };
+        process.stdout.write(JSON.stringify(output));
+        process.exit(2);
+    }
+    const output = { permission: "allow" };
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+//# sourceMappingURL=require-verdict.js.map

package/dist/clients/cursor/hooks/require-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verdict.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/require-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAkBH,kBAiCC;AAjDD,yDAA2E;AAC3E,gDAAyD;AACzD,8CAA+C;AAc/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA4B,CAAC;IACjC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA0B,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAA2B,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IAEzF,IAAI,IAAA,sCAA4B,EAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA2B;YACnC,UAAU,EAAE,MAAM;YAClB,aAAa,EAAE;;;yBAGF,SAAS;;0CAEQ;SACjC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/session-start.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Cursor — session-start hook adapter
+ *
+ * sessionStart hook — appends a session_start entry to actions.jsonl
+ * and outputs the session ID and submit-verdict instructions via
+ * additional_context (Cursor's field for injecting into agent context).
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/clients/cursor/hooks/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAiE5C"}

package/dist/clients/cursor/hooks/session-start.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * Cursor — session-start hook adapter
+ *
+ * sessionStart hook — appends a session_start entry to actions.jsonl
+ * and outputs the session ID and submit-verdict instructions via
+ * additional_context (Cursor's field for injecting into agent context).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.stdout.write(JSON.stringify({}));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const entry = {
+        type: "session_start",
+        timestamp: new Date().toISOString(),
+        session_id: sessionId,
+        source: "cursor",
+    };
+    (0, actions_1.appendAction)(actionsFile, entry);
+    logger_1.logger.debug(`session-start: ${sessionId}`);
+    const verdictPass = JSON.stringify({
+        session_id: sessionId,
+        status: "pass",
+        pages_tested: ["http://localhost:3000/affected-page"],
+        checks: ["form submits successfully", "new item appears in list"],
+        console_errors: 0,
+        network_failures: 0,
+    });
+    const verdictFail = JSON.stringify({
+        session_id: sessionId,
+        status: "fail",
+        pages_tested: ["http://localhost:3000/affected-page"],
+        checks: ["form renders", "submit button unresponsive"],
+        console_errors: 2,
+        network_failures: 0,
+        issues: ["button click handler not firing", "TypeError in console"],
+    });
+    const context = `IRONBEE VERIFICATION — SESSION ACTIVE
+Session ID: ${sessionId}
+
+You MUST verify all code changes in the browser before completing any task.
+After EVERY verification attempt, you MUST submit a verdict BEFORE doing anything else.
+- If pass → submit pass verdict
+- If fail → submit fail verdict FIRST, then fix. Do NOT skip to fixing code without submitting.
+
+Submit via terminal:
+  echo '${verdictPass}' | ironbee hook submit-verdict
+
+On fail (issues is required):
+  echo '${verdictFail}' | ironbee hook submit-verdict
+
+Required fields: session_id, status, pages_tested, checks, console_errors, network_failures
+On fail, include: issues (array of strings describing what failed)
+On pass after a previous fail, include: fixes (array of strings describing what was fixed)`;
+    const output = {
+        additional_context: context,
+    };
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+//# sourceMappingURL=session-start.js.map

package/dist/clients/cursor/hooks/session-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/session-start.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAgBH,kBAiEC;AA/ED,yDAA+E;AAC/E,gDAAyD;AACzD,8CAA+C;AAY/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA4B,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IACzF,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAuB;QAC9B,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,QAAQ;KACnB,CAAC;IAEF,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IAE5C,MAAM,WAAW,GAAW,IAAI,CAAC,SAAS,CAAC;QACvC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,CAAC,qCAAqC,CAAC;QACrD,MAAM,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC;QACjE,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,WAAW,GAAW,IAAI,CAAC,SAAS,CAAC;QACvC,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,CAAC,qCAAqC,CAAC;QACrD,MAAM,EAAE,CAAC,cAAc,EAAE,4BAA4B,CAAC;QACtD,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,iCAAiC,EAAE,sBAAsB,CAAC;KACtE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAW;cACd,SAAS;;;;;;;;UAQb,WAAW;;;UAGX,WAAW;;;;2FAIsE,CAAC;IAExF,MAAM,MAAM,GAA6B;QACrC,kBAAkB,EAAE,OAAO;KAC9B,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/track-action.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Cursor — track-action hook adapter
+ *
+ * postToolUse hook for browser-devtools MCP tool calls.
+ * Filtered by matcher in hooks.json so only browser-devtools
+ * tools trigger this hook — no script-level filtering needed.
+ *
+ * Cursor's postToolUse uses `MCP:<tool_name>` format for tool_name.
+ * We normalize to `mcp__browser-devtools__<tool_name>` so that
+ * core verify-gate logic can match them consistently.
+ *
+ * Handles both direct tool calls and nested callTool() invocations
+ * inside the execute tool.
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=track-action.d.ts.map

package/dist/clients/cursor/hooks/track-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/track-action.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAmDH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CA6C5C"}

package/dist/clients/cursor/hooks/track-action.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Cursor — track-action hook adapter
+ *
+ * postToolUse hook for browser-devtools MCP tool calls.
+ * Filtered by matcher in hooks.json so only browser-devtools
+ * tools trigger this hook — no script-level filtering needed.
+ *
+ * Cursor's postToolUse uses `MCP:<tool_name>` format for tool_name.
+ * We normalize to `mcp__browser-devtools__<tool_name>` so that
+ * core verify-gate logic can match them consistently.
+ *
+ * Handles both direct tool calls and nested callTool() invocations
+ * inside the execute tool.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+const CALL_TOOL_PATTERN = /callTool\(\s*['"]([^'"]+)['"]/g;
+const MCP_PREFIX = "mcp__browser-devtools__";
+const CURSOR_MCP_PREFIX = "MCP:";
+const EXECUTE_TOOL = `${MCP_PREFIX}execute`;
+/** Convert Cursor's MCP:<name> format to mcp__browser-devtools__<name>. */
+function normalizeMcpToolName(cursorName) {
+    if (cursorName.startsWith(CURSOR_MCP_PREFIX)) {
+        return `${MCP_PREFIX}${cursorName.slice(CURSOR_MCP_PREFIX.length)}`;
+    }
+    if (cursorName.startsWith(MCP_PREFIX)) {
+        return cursorName;
+    }
+    return `${MCP_PREFIX}${cursorName}`;
+}
+function toFullName(shortName) {
+    return shortName.startsWith(MCP_PREFIX) ? shortName : `${MCP_PREFIX}${shortName}`;
+}
+function extractNestedToolNames(toolInput) {
+    const inputStr = typeof toolInput === "string"
+        ? toolInput
+        : JSON.stringify(toolInput ?? "");
+    const names = new Set();
+    let match = CALL_TOOL_PATTERN.exec(inputStr);
+    while (match !== null) {
+        names.add(toFullName(match[1]));
+        match = CALL_TOOL_PATTERN.exec(inputStr);
+    }
+    return [...names];
+}
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.stdout.write(JSON.stringify({}));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    const actionsFile = `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const rawToolName = input.tool_name ?? "unknown";
+    const toolName = normalizeMcpToolName(rawToolName);
+    const timestamp = new Date().toISOString();
+    // record the direct tool call
+    const entry = {
+        type: "tool_call",
+        timestamp,
+        tool_name: toolName,
+        tool_input: input.tool_input,
+        tool_response: input.tool_output,
+    };
+    (0, actions_1.appendAction)(actionsFile, entry);
+    logger_1.logger.debug(`track-action: ${rawToolName} → ${toolName}`);
+    // for execute tool, extract and record nested callTool() invocations
+    if (toolName === EXECUTE_TOOL) {
+        const nested = extractNestedToolNames(input.tool_input);
+        for (const name of nested) {
+            const nestedEntry = {
+                type: "tool_call",
+                timestamp,
+                tool_name: name,
+            };
+            (0, actions_1.appendAction)(actionsFile, nestedEntry);
+            logger_1.logger.debug(`track-action (nested): ${name}`);
+        }
+    }
+    process.stdout.write(JSON.stringify({}));
+    process.exit(0);
+}
+//# sourceMappingURL=track-action.js.map

package/dist/clients/cursor/hooks/track-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/track-action.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAmDH,kBA6CC;AA9FD,yDAA2E;AAC3E,gDAAyD;AACzD,8CAA+C;AAE/C,MAAM,iBAAiB,GAAW,gCAAgC,CAAC;AACnE,MAAM,UAAU,GAAW,yBAAyB,CAAC;AACrD,MAAM,iBAAiB,GAAW,MAAM,CAAC;AACzC,MAAM,YAAY,GAAW,GAAG,UAAU,SAAS,CAAC;AAapD,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,UAAkB;IAC5C,IAAI,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACjC,OAAO,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAkB;IAC9C,MAAM,QAAQ,GAAW,OAAO,SAAS,KAAK,QAAQ;QAClD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAgB,IAAI,GAAG,EAAU,CAAC;IAC7C,IAAI,KAAK,GAA2B,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA6B,CAAC;IAClC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAA2B,CAAC;IAC9D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,MAAM,WAAW,GAAW,GAAG,UAAU,sBAAsB,SAAS,gBAAgB,CAAC;IACzF,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAW,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;IACzD,MAAM,QAAQ,GAAW,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEnD,8BAA8B;IAC9B,MAAM,KAAK,GAAmB;QAC1B,IAAI,EAAE,WAAW;QACjB,SAAS;QACT,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,WAAW;KACnC,CAAC;IACF,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,iBAAiB,WAAW,MAAM,QAAQ,EAAE,CAAC,CAAC;IAE3D,qEAAqE;IACrE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,WAAW,GAAmB;gBAChC,IAAI,EAAE,WAAW;gBACjB,SAAS;gBACT,SAAS,EAAE,IAAI;aAClB,CAAC;YACF,IAAA,sBAAY,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACvC,eAAM,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/hooks/verify-gate.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Cursor — verify-gate hook adapter
+ *
+ * stop hook — runs verification checks and outputs result.
+ * Uses `followup_message` to force the agent back into a new
+ * iteration when verification is missing or failed. Cursor's
+ * stop hook cannot return "permission": "deny", but
+ * followup_message auto-submits a new prompt to the agent,
+ * mechanically preventing completion until verification passes
+ * (up to Cursor's loop_limit, default 5).
+ */
+export declare function run(projectDir: string): void;
+//# sourceMappingURL=verify-gate.d.ts.map

package/dist/clients/cursor/hooks/verify-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.d.ts","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/verify-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAmBH,wBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkC5C"}

package/dist/clients/cursor/hooks/verify-gate.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * Cursor — verify-gate hook adapter
+ *
+ * stop hook — runs verification checks and outputs result.
+ * Uses `followup_message` to force the agent back into a new
+ * iteration when verification is missing or failed. Cursor's
+ * stop hook cannot return "permission": "deny", but
+ * followup_message auto-submits a new prompt to the agent,
+ * mechanically preventing completion until verification passes
+ * (up to Cursor's loop_limit, default 5).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const verify_gate_1 = require("../../../hooks/core/verify-gate");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+function run(projectDir) {
+    let input;
+    try {
+        input = JSON.parse((0, stdin_1.readStdin)());
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to parse stdin: ${e}`);
+        process.stdout.write(JSON.stringify({}));
+        process.exit(0);
+    }
+    const sessionId = input.conversation_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const config = (0, config_1.loadConfig)(projectDir);
+    const result = (0, verify_gate_1.runVerifyGate)({
+        sessionId,
+        actionsFile: `${projectDir}/.ironbee/sessions/${sessionId}/actions.jsonl`,
+        verdictFile: `${projectDir}/.ironbee/sessions/${sessionId}/verdict.json`,
+        retryFile: `${projectDir}/.ironbee/sessions/${sessionId}/retries`,
+        maxRetries: (0, config_1.getMaxRetries)(config),
+    });
+    const output = {};
+    // If verification blocks (action === "block"), send a followup_message
+    // to force the agent back into a new iteration. The agent cannot complete
+    // until it resolves the verification issue or loop_limit is reached.
+    if (result.action === "block" && result.message) {
+        output.followup_message = result.message;
+    }
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+//# sourceMappingURL=verify-gate.js.map

package/dist/clients/cursor/hooks/verify-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.js","sourceRoot":"","sources":["../../../../src/clients/cursor/hooks/verify-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAmBH,kBAkCC;AAnDD,iEAAkF;AAClF,gDAA+E;AAC/E,gDAAyD;AACzD,8CAA+C;AAc/C,SAAgB,GAAG,CAAC,UAAkB;IAClC,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAS,GAAE,CAAwB,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAW,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;IAC7D,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;IAErD,MAAM,MAAM,GAAqB,IAAA,2BAAa,EAAC;QAC3C,SAAS;QACT,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,gBAAgB;QACzE,WAAW,EAAE,GAAG,UAAU,sBAAsB,SAAS,eAAe;QACxE,SAAS,EAAE,GAAG,UAAU,sBAAsB,SAAS,UAAU;QACjE,UAAU,EAAE,IAAA,sBAAa,EAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC;IAC7C,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/cursor/index.d.ts

@@ -0,0 +1,20 @@
+import { IClient } from "../base";
+export declare class CursorClient implements IClient {
+    readonly name: string;
+    detect(projectDir: string): boolean;
+    resolveProjectDir(): string;
+    install(projectDir: string): void;
+    uninstall(projectDir: string): void;
+    runVerifyGate(projectDir: string): void;
+    runClearVerdict(projectDir: string): void;
+    runTrackAction(projectDir: string): void;
+    runSessionStart(projectDir: string): void;
+    runRequireVerdict(projectDir: string): void;
+    private isIronBeeHook;
+    private mergeHooksConfig;
+    private removeIronBeeHooks;
+    private removeMcpServer;
+    private removeFile;
+    private writeMcpConfig;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/clients/cursor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/clients/cursor/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAwClC,qBAAa,YAAa,YAAW,OAAO;IACxC,SAAgB,IAAI,EAAE,MAAM,CAAY;IAEjC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAInC,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAiCjC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAsBnC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIvC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIzC,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIzC,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIlD,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,gBAAgB;IAqExB,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,cAAc;CAyBzB"}