@ken-jo/agent-connector 0.4.44 → 0.4.67

package/README.md

@@ -11,10 +11,10 @@
 ![platforms](https://img.shields.io/badge/platforms-35-2563eb)
 ![surfaces](https://img.shields.io/badge/surfaces-MCP%20%7C%20hooks%20%7C%20commands%20%7C%20tools%20%7C%20memory%20%7C%20status%20line-2563eb)
 ![hook paradigms](https://img.shields.io/badge/hook%20paradigms-3-2563eb)
-![install verified](https://img.shields.io/badge/install%20verified-29%2F29-22c55e)
-![headless runtime](https://img.shields.io/badge/headless%20runtime-10%20CLIs%20activated-22c55e)
+![install verified](https://img.shields.io/badge/install%20verified-35%2F35-22c55e)
+![headless runtime](https://img.shields.io/badge/headless%20runtime-20%20CLIs%20activated-22c55e)
 ![marketplace](https://img.shields.io/badge/package-9%20marketplace%20formats-2563eb)
-![tests](https://img.shields.io/badge/tests-1916%20passing-22c55e)
+![tests](https://img.shields.io/badge/tests-passing-22c55e)
 
 ## Who this is for
 
@@ -677,11 +677,24 @@ defineConnector({
 ```bash
 npm install
 npm run typecheck
-npm test
 npm run build
 npm run dev -- detect     # run the CLI from source via tsx
+
+# Tests: scope + single-fork (NOT bare `npm test` — it OOMs low-RAM machines).
+npx vitest run --pool=forks --poolOptions.forks.singleFork=true --poolOptions.forks.maxForks=1 \
+  tests/adapters/<host>.test.ts
 ```
 
+## Contributing
+
+PRs welcome — especially new host adapters and fixes verified against a host's
+primary source. See **[CONTRIBUTING.md](CONTRIBUTING.md)** for the dev workflow,
+the single-fork test discipline, the **verify-first** rule for adapters, and the
+new-host checklist. Want a new agent CLI supported? Open a
+[host adapter request](https://github.com/ken-jo/agent-connector/issues/new?template=host_adapter_request.yml).
+
+Security reports: see [SECURITY.md](SECURITY.md).
+
 ## License
 
 Apache-2.0 © 2026 KenJo

package/dist/{action-72J2TCKQ.js → action-RUM6GP23.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   fail
-} from "./chunk-IKEXNI2W.js";
+} from "./chunk-NXR4HM5N.js";
 import {
   runAction
-} from "./chunk-CFM3JKIR.js";
+} from "./chunk-CSRBMJLU.js";
 import "./chunk-OP4KBXUO.js";
 import "./chunk-7QRUZAUG.js";
-import "./chunk-5M2SMDA4.js";
-import "./chunk-B47MDOV3.js";
-import "./chunk-F4DSMVZ7.js";
+import "./chunk-GCRRX4MO.js";
+import "./chunk-E45SUUD7.js";
+import "./chunk-D6ZJS4ND.js";
 import "./chunk-KHO5WNTP.js";
-import "./chunk-UXG64P6R.js";
-import "./chunk-WZWK4ICE.js";
-import "./chunk-SBV2QJ5C.js";
-import "./chunk-L7ESV37V.js";
+import "./chunk-RQCBBLTA.js";
+import "./chunk-UVBAH263.js";
+import "./chunk-LS65GL2P.js";
+import "./chunk-7CZKXXBD.js";
 import "./chunk-TO57WYBB.js";
-import "./chunk-ZY25RG4Y.js";
-import "./chunk-QY42WGBX.js";
+import "./chunk-ALVXORZM.js";
+import "./chunk-2HCJV6UO.js";
 
 // src/cli/commands/action.ts
 import { parseArgs } from "util";
@@ -52,4 +52,4 @@ async function run(argv) {
 export {
   run
 };
-//# sourceMappingURL=action-72J2TCKQ.js.map
+//# sourceMappingURL=action-RUM6GP23.js.map

package/dist/{amazon-q-UFLBUSHG.js → amazon-q-KXVJFT7Q.js}

@@ -1,19 +1,16 @@
 #!/usr/bin/env node
-import {
-  normalizeSessionSource
-} from "./chunk-H53QZQJI.js";
 import {
   resolveEnvRefsDeep
 } from "./chunk-DBQMX75U.js";
 import {
   BaseAdapter
-} from "./chunk-A767JFHW.js";
+} from "./chunk-RHML2NOB.js";
 import {
   buildWrappedStdio,
   isHomeBinHookCommand
 } from "./chunk-TO57WYBB.js";
-import "./chunk-ZY25RG4Y.js";
-import "./chunk-QY42WGBX.js";
+import "./chunk-ALVXORZM.js";
+import "./chunk-2HCJV6UO.js";
 
 // src/adapters/amazon-q/index.ts
 import { existsSync, statSync } from "fs";
@@ -476,7 +473,7 @@ var AmazonQAdapter = class extends BaseAdapter {
   parseEvent(event, raw) {
     const input = raw ?? {};
     const connectorId = typeof input.connector === "string" ? input.connector : "";
-    const sessionId = typeof input.session_id === "string" ? input.session_id : "";
+    const sessionId = "";
     const projectDir = typeof input.cwd === "string" ? input.cwd : void 0;
     const base = {
       hostPlatform: HOST,
@@ -506,7 +503,7 @@ var AmazonQAdapter = class extends BaseAdapter {
       case "SessionStart": {
         const ev = {
           ...base,
-          source: normalizeSessionSource(input.source)
+          source: "startup"
         };
         return ev;
       }
@@ -519,8 +516,7 @@ var AmazonQAdapter = class extends BaseAdapter {
       }
       case "Stop": {
         const ev = {
-          ...base,
-          ...typeof input.stop_hook_active === "boolean" ? { stopHookActive: input.stop_hook_active } : {}
+          ...base
         };
         return ev;
       }
@@ -567,4 +563,4 @@ export {
   adapter,
   amazon_q_default as default
 };
-//# sourceMappingURL=amazon-q-UFLBUSHG.js.map
+//# sourceMappingURL=amazon-q-KXVJFT7Q.js.map

package/dist/amazon-q-KXVJFT7Q.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/amazon-q/index.ts"],"sourcesContent":["/**\n * adapters/amazon-q — Amazon Q Developer CLI platform adapter.\n *\n * Amazon Q Developer CLI (`q` / `qchat`) is a **json-stdio** host. It exposes a\n * real hooks layer (agentSpawn / userPromptSubmit / preToolUse / postToolUse /\n * stop, JSON-over-STDIN, exit-code 0/2 contract — primary-verified via\n * aws.github.io/amazon-q-developer-cli agent-format → Hooks Field). The hook\n * STDIN+exit contract is IDENTICAL to the sibling AWS host kiro; only the WRITE\n * shape differs (see below).\n *\n * Hooks live ONLY in per-agent config JSON files — there is NO global hooks.json:\n *   user    → ~/.aws/amazonq/cli-agents/<name>.json\n *   project → <projectDir>/.amazonq/cli-agents/<name>.json\n * Because hooks have no global file, AC must target a SPECIFIC agent file. We\n * mirror kiro's per-agent selection rule and write the built-in default agent\n * file — `cli-agents/q_cli_default.json`. Amazon Q auto-loads the built-in\n * `q_cli_default` agent for a new chat session (the built-in default is otherwise\n * in-memory); a file literally named `default.json` would be an INACTIVE custom\n * agent named `default` the user must explicitly select (`q chat --agent default`),\n * so hooks there would never fire — exactly the trap kiro avoids with\n * `kiro_default.json`. Primary-verified via the agent-format default\n * knowledge-base dir `~/.aws/amazonq/knowledge_bases/q_cli_default/`.\n *   A PROJECT install writes a project-scoped `q_cli_default` agent file\n *   (<projectDir>/.amazonq/cli-agents/q_cli_default.json) that SHADOWS the\n *   user-global one — a local `q_cli_default` takes precedence and auto-loads.\n *\n * The `hooks` field is an OBJECT keyed by trigger name (NOT kiro's matcher-grouped\n * array). Each entry is `{ command, matcher? }` — NO `type` field; `matcher` is\n * only meaningful for preToolUse/postToolUse:\n *   \"hooks\": {\n *     \"agentSpawn\":       [{ \"command\": \"<cmd>\" }],\n *     \"userPromptSubmit\": [{ \"command\": \"<cmd>\" }],\n *     \"preToolUse\":       [{ \"command\": \"<cmd>\", \"matcher\": \"<toolNamePattern?>\" }],\n *     \"postToolUse\":      [{ \"command\": \"<cmd>\", \"matcher\": \"<optional>\" }],\n *     \"stop\":             [{ \"command\": \"<cmd>\" }]\n *   }\n * AC MERGES into this object: it preserves ALL other agent fields (name /\n * description / mcpServers / tools / resources / user hooks) and only upserts its\n * own home-bin command into each mapped trigger array, identified by the command\n * string for idempotent re-install and clean uninstall (an emptied trigger key is\n * dropped). The shared object-map hook-array merge engine (base.ts\n * upsertHookEntries / removeHookEntries) handles this FLAT object-of-arrays shape\n * directly — the descriptor renders a flat `{ command, matcher? }` entry.\n *\n * Canonical AC event → Amazon Q trigger:\n *   SessionStart     → agentSpawn\n *   UserPromptSubmit → userPromptSubmit\n *   PreToolUse       → preToolUse\n *   PostToolUse      → postToolUse\n *   Stop             → stop\n * Events with no Amazon Q trigger (PreCompact / SessionEnd / Notification and the\n * E1 extension events) warn-skip at install time.\n *\n * Hook protocol is EXIT-CODE based (identical to kiro): exit 0 = allow, exit 2 =\n * block (preToolUse only; STDERR is returned to the LLM). Amazon Q cannot rewrite\n * tool args or output, so canModifyArgs / canModifyOutput are false.\n *   Context injection → exit 0 with the guidance written as PLAIN STDOUT (NOT a\n *   JSON envelope). Amazon Q adds a hook's STDOUT to the agent's context ONLY for\n *   agentSpawn and userPromptSubmit (\"STDOUT is added to agent's context\"); for\n *   preToolUse / postToolUse / stop the docs say STDOUT is \"captured but not shown\n *   to user\" — no context channel — so a `context` decision on those degrades to a\n *   plain exit-0 pass-through. Primary-verified via aws/amazon-q-developer-cli\n *   docs/hooks.md (Hook Output + per-event Exit Code Behavior); there is NO\n *   hookSpecificOutput / hookEventName / additionalContext envelope anywhere in\n *   Amazon Q's schema.\n *\n * MCP config (legacy files, primary-verified via AWS docs) — UNCHANGED by the\n * hooks wiring; the MCP server surface still targets the global/workspace mcp.json:\n *   - user scope    → ~/.aws/amazonq/mcp.json   (global; applies to all workspaces)\n *   - project scope → <projectDir>/.amazonq/mcp.json   (local workspace)\n *   Both are JSON, root key \"mcpServers\". Amazon Q reads BOTH when both exist\n *   and merges them (union); workspace wins on same-name conflict with a warning.\n *\n * Server entry shape (primary-verified):\n *   - stdio: { command: string; args?: string[]; env?: { [k: string]: string };\n *              timeout?: number }   (timeout in MILLISECONDS, e.g. 60000;\n *              transport inferred from presence of `command` — no `type` key)\n *   - http:  { type: \"http\"; url: string }\n *             (the remote/HTTP shape is written with an explicit `type: \"http\"`\n *              discriminator + `url`, per command-line-mcp-config-CLI.html. No\n *              `headers` field — Amazon Q remote auth is OAuth, not static\n *              headers — and no `disabled` flag.)\n *\n * Path resolution — NOTE the nested user scope:\n *   - user:    join(homedir(), \".aws\", \"amazonq\")  (two path segments)\n *   - project: join(projectDir, \".amazonq\")         (single dotDir, no .aws)\n *   homedir() handles USERPROFILE on Windows automatically; no manual branch.\n *\n * Env interpolation: Amazon Q has no documented native ${env:VAR} token;\n * resolve all references to literals at install time (the safe path, same as\n * droid/crush).\n *\n * Memory / rules (primary-verified — docs.aws.amazon.com context-project-rules):\n *   Project rules are plain Markdown files in <projectDir>/.amazonq/rules; Amazon\n *   Q \"will automatically use them as context whenever a developer chats with\n *   Amazon Q within your project\". NO frontmatter required. We write a DEDICATED\n *   agent-connector-owned file there (`.amazonq/rules/agent-connector.md`),\n *   mirroring the cline `.clinerules/agent-connector.md` approach: memoryTargets()\n *   points at the dedicated file and the base managed-block engine performs the\n *   surgical, hash-stamped, uninstall-reversible write. PROJECT SCOPE ONLY — the\n *   AWS docs do not cleanly document a user/global rules directory for the CLI\n *   (a `~/.aws/amazonq/.../rules` path is unverified), so user scope returns [] →\n *   the base installMemory skip-warns rather than writing into an unread path.\n *\n * Hook config path targets the built-in default agent file\n * (cli-agents/q_cli_default.json), which is a DIFFERENT file from the MCP mcp.json\n * (getHookConfigPath ≠ getServerConfigPath), mirroring kiro's split surfaces.\n */\n\nimport { existsSync, statSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter, type HookMergeDescriptor } from \"../base.js\";\nimport type { Adapter, HookReply, InstallContext, MemoryTarget, NormalizedEvent } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  PostToolUseEvent,\n  PreToolUseEvent,\n  ServerDef,\n  SessionStartEvent,\n  StopEvent,\n  SubagentDef,\n  Transport,\n  UserPromptSubmitEvent,\n} from \"../../core/types.js\";\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\nimport {\n  buildWrappedStdio,\n  isHomeBinHookCommand,\n} from \"../../core/spawn.js\";\n\nconst HOST: PlatformId = \"amazon-q\";\nconst MCP_ROOT_KEY = \"mcpServers\";\n\n/**\n * The built-in default agent file AC registers hooks on. Amazon Q auto-loads the\n * built-in `q_cli_default` agent for a new chat session (the built-in default is\n * otherwise in-memory). A file literally named `default.json` would be an INACTIVE\n * custom agent named `default` that the user must explicitly select\n * (`q chat --agent default`), so hooks merged there would never fire — we register\n * on `q_cli_default.json` instead (mirrors kiro's `kiro_default.json` selection;\n * primary-verified via the agent-format default knowledge-base dir\n * `knowledge_bases/q_cli_default/`).\n */\nconst DEFAULT_AGENT_FILE = \"q_cli_default.json\";\n\n/**\n * The agent NAME (filename stem) AC reserves for the hooks / built-in default\n * agent (`cli-agents/q_cli_default.json`). A connector subagent declared with\n * this exact name would resolve to the SAME file and clobber the hooks agent, so\n * installSubagents REFUSES it (skip-warn) and uninstallSubagents never touches it.\n */\nconst RESERVED_AGENT_NAME = \"q_cli_default\";\n\n/**\n * Amazon Q native hook trigger names (the keys under an agent file's `hooks`\n * object). Only the triggers Amazon Q fires for the json-stdio command paradigm.\n */\nconst Q_TRIGGER = {\n  preToolUse: \"preToolUse\",\n  postToolUse: \"postToolUse\",\n  agentSpawn: \"agentSpawn\",\n  userPromptSubmit: \"userPromptSubmit\",\n  stop: \"stop\",\n} as const;\n\n/**\n * Map canonical event names → Amazon Q's native trigger names. Only mapped\n * events are present; PreCompact / SessionEnd / Notification and the E1\n * extension events have no Amazon Q equivalent → warn-skip at install time.\n */\nconst EVENT_MAP: Partial<Record<HookEventName, string>> = {\n  SessionStart: Q_TRIGGER.agentSpawn,\n  UserPromptSubmit: Q_TRIGGER.userPromptSubmit,\n  PreToolUse: Q_TRIGGER.preToolUse,\n  PostToolUse: Q_TRIGGER.postToolUse,\n  Stop: Q_TRIGGER.stop,\n};\n\n/** Triggers whose `matcher` is meaningful (tool-name pattern). Others omit it. */\nconst MATCHER_TRIGGERS: ReadonlySet<string> = new Set([\n  Q_TRIGGER.preToolUse,\n  Q_TRIGGER.postToolUse,\n]);\n\n/**\n * Amazon Q triggers whose hook STDOUT is added to the agent's context: agentSpawn\n * (≈ SessionStart) and userPromptSubmit (docs/hooks.md — both say \"STDOUT is added\n * to agent's context\"). For preToolUse / postToolUse / stop the docs say STDOUT is\n * \"captured but not shown to user\" — no context channel — so a `context` decision\n * on those degrades to a plain exit-0 pass-through.\n * Ref: aws/amazon-q-developer-cli docs/hooks.md (per-event Exit Code Behavior).\n */\nconst CONTEXT_TRIGGERS: ReadonlySet<string> = new Set([\n  Q_TRIGGER.agentSpawn,\n  Q_TRIGGER.userPromptSubmit,\n]);\n\n/**\n * A single Amazon Q native hook entry: FLAT `{ command, matcher? }` (NO `type`\n * field — unlike kiro's matcher-grouped nested shape).\n */\ninterface AmazonQHookEntry {\n  command: string;\n  matcher?: string;\n}\n\n/** The shape of an Amazon Q agent file (only the parts we touch). */\ninterface AmazonQAgentFile {\n  hooks?: Record<string, AmazonQHookEntry[]>;\n  [key: string]: unknown;\n}\n\n/**\n * Raw Amazon Q CLI hook stdin payload (snake_case wire fields).\n *\n * PRIMARY-VERIFIED against aws/amazon-q-developer-cli\n * crates/chat-cli/src/cli/chat/cli/hooks.rs:300-321 (run_hook builds `hook_input`)\n * and docs/hooks.md:14-107 (per-event input examples). The host serializes ONLY:\n *   - hook_event_name + cwd            (always)\n *   - prompt                           (userPromptSubmit only)\n *   - tool_name + tool_input + tool_response  (pre/postToolUse only; response optional)\n * `connector` is injected by AC's own hook-command argv, not the host.\n *\n * Host GAPS (fields the host NEVER serializes — do NOT add reads for these):\n *   - session_id      : no session id on stdin → sessionId stays \"\".\n *   - source          : agentSpawn carries no start-reason discriminator; the Rust\n *                       hook::Source enum is config-grouping, never serialized.\n *   - stop_hook_active: stop payload is exactly {hook_event_name, cwd}.\n */\ninterface AmazonQWireInput {\n  connector?: unknown;\n  hook_event_name?: string;\n  cwd?: string;\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  tool_response?: unknown;\n  prompt?: string;\n}\n\n/**\n * Native MCP server entry shapes Amazon Q accepts under `mcpServers`.\n *   - stdio: BARE shape — NO `type` discriminator and NO `disabled` flag; the\n *     transport is inferred from the presence of `command`. timeout is in\n *     MILLISECONDS (pass timeoutMs through unchanged, do NOT divide).\n *   - http: REMOTE shape — explicit `type: \"http\"` + `url`\n *     (command-line-mcp-config-CLI.html). NO `headers` (remote auth is OAuth,\n *     not static headers) and NO `disabled` flag.\n */\ninterface AmazonQStdioServer {\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n  timeout?: number;\n}\ninterface AmazonQHttpServer {\n  type: \"http\";\n  url: string;\n}\n\nexport class AmazonQAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Amazon Q Developer CLI\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: WIRED. Amazon Q reads `.amazonq/rules` (NOT AGENTS.md), so\n    // the AGENTS.md-first BaseAdapter default does not apply — memoryTargets()\n    // below overrides it to write a DEDICATED agent-connector-owned file\n    // (<projectDir>/.amazonq/rules/agent-connector.md, plain Markdown, no\n    // frontmatter — auto-applied as context per the AWS docs). Project scope\n    // only; user scope skip-warns (no verified user/global rules dir).\n    supportsMemory: true,\n    //\n    // Hooks: Amazon Q fires agentSpawn / userPromptSubmit / preToolUse /\n    // postToolUse / stop (mapped from SessionStart / UserPromptSubmit /\n    // PreToolUse / PostToolUse / Stop). It has no PreCompact / SessionEnd /\n    // Notification equivalent, nor the E1 extension events (PermissionRequest /\n    // PostToolUseFailure / SubagentStart / SubagentStop) — those warn-skip.\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: false,\n    sessionStart: true,\n    sessionEnd: false,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // Exit-code protocol only — a hook can allow (0) or block (2), but it CANNOT\n    // rewrite tool args or output.\n    canModifyArgs: false,\n    canModifyOutput: false,\n    // agentSpawn / userPromptSubmit add a hook's plain STDOUT to the agent's\n    // context (no JSON envelope) — primary-verified via docs/hooks.md.\n    canInjectSessionContext: true,\n    // Amazon Q registers stdio + Streamable HTTP MCP servers (primary-verified).\n    transports: [\"stdio\", \"http\"],\n    // Content surfaces:\n    //   subagents: WIRED. Amazon Q's \"agents\" are per-agent JSON files where the\n    //   FILENAME (minus .json) IS the agent name (primary-verified via the CLI\n    //   repo docs/agent-file-locations.md + docs/agent-format.md). AC maps each\n    //   connector SubagentDef → cli-agents/<name>.json = { name, description,\n    //   prompt } (+ model when non-\"inherit\"; + tools/allowedTools when the\n    //   SubagentDef carries a tool policy — see renderSubagent). Both scopes:\n    //     user    → ~/.aws/amazonq/cli-agents/<name>.json\n    //     project → <projectDir>/.amazonq/cli-agents/<name>.json\n    //   A subagent named `q_cli_default` would resolve to the hooks/default-agent\n    //   file — the SDK already rejects it (non-kebab name), and installSubagents\n    //   refuses it as defense-in-depth so a subagent write can never clobber it.\n    supportsSubagents: true,\n    //   commands (prompt library): DEFERRED — format unverified. The only primary\n    //   doc for the ~/.aws/amazonq/prompts/*.md prompt library is the IDE prompt-\n    //   library page (q-in-IDE-chat → ide-chat-context: prompts saved in\n    //   ~/.aws/amazonq/prompts, invoked via @<name> inside the IDE chat). The Q\n    //   CLI repo (aws/amazon-q-developer-cli/docs) ships NO prompts/saved-prompts\n    //   doc, so whether the `q`/`qchat` CLI reads that folder — and whether a\n    //   project-scoped prompts dir exists — is NOT primary-verified for the CLI\n    //   host this adapter targets. supportsCommands stays UNSET (base skip-warns)\n    //   rather than render an unverified surface (the continue per-server-YAML /\n    //   other deferred-unverified precedent).\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".aws\", \"amazonq\");\n    const userMcp = join(userDir, \"mcp.json\");\n    const projDir = join(projectDir, \".amazonq\");\n    const projMcp = join(projDir, \"mcp.json\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userMcp);\n    const projInstalled = existsSync(projDir) || existsSync(projMcp);\n    const installed = userInstalled || projInstalled;\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projMcp : userMcp;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `found Amazon Q config (${scope}) at ${configPath}`\n        : `no Amazon Q mcp.json at ${userDir} or ${projDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  /**\n   * Config directory per scope. Amazon Q uses DIFFERENT basenames:\n   *   user:    ~/.aws/amazonq   (two segments — NOT a single dotDir)\n   *   project: <projectDir>/.amazonq\n   * This is the ONE deviation from droid/cursor's single-basename getConfigDir.\n   */\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".amazonq\")\n      : join(homedir(), \".aws\", \"amazonq\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"mcp.json\");\n  }\n\n  /**\n   * Hooks live in a per-agent file, NOT the mcp.json. Amazon Q hooks have no\n   * global file, so AC targets the built-in `q_cli_default` agent file at the\n   * install scope (mirroring kiro's default-agent selection):\n   *   user    → ~/.aws/amazonq/cli-agents/q_cli_default.json\n   *   project → <projectDir>/.amazonq/cli-agents/q_cli_default.json\n   * A project install writes a project-scoped `q_cli_default` that SHADOWS the\n   * user-global one (a local `q_cli_default` takes precedence and auto-loads).\n   */\n  getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"cli-agents\", DEFAULT_AGENT_FILE);\n  }\n\n  // ── Memory surface: the `.amazonq/rules` content tree ─────────────────────\n  // Amazon Q uses `.amazonq/rules` (NOT AGENTS.md) for its OWN project rules, so\n  // this override replaces the AGENTS.md base default entirely:\n  //   project → <projectDir>/.amazonq/rules/agent-connector.md  (DEDICATED file\n  //             AC owns; plain Markdown, auto-applied — no frontmatter needed)\n  //   user    → [] (no verified user/global rules dir → base installMemory\n  //             skip-warns rather than guessing a path the CLI may not read)\n  // When `.amazonq/rules` exists as a single FILE (not a directory) we must NOT\n  // create `.amazonq/rules/agent-connector.md` underneath it (that would throw\n  // ENOTDIR), so memoryTargets() returns [] and installMemory() emits a precise\n  // skip-warn rather than crashing (the cline `.clinerules`-is-a-file precedent).\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\n    // An explicit platforms[amazon-q].memory.path override wins (escape hatch).\n    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);\n    if (ctx.scope === \"project\") {\n      if (this.rulesDirIsFile(ctx.projectDir)) return [];\n      return [\n        {\n          path: join(ctx.projectDir, \".amazonq\", \"rules\", \"agent-connector.md\"),\n          reason: \"amazon-q project rules dir (.amazonq/rules; agent-connector-owned file)\",\n        },\n      ];\n    }\n    // user scope: no primary-verified user/global rules dir → [] → skip-warn.\n    return [];\n  }\n\n  /**\n   * Override installMemory ONLY to surface a precise warn when `.amazonq/rules`\n   * exists as a single FILE at project scope (so memoryTargets() returned []):\n   * we never write under it. All other behavior delegates to the base\n   * implementation (the cline `.clinerules`-is-a-file precedent).\n   */\n  override installMemory(ctx: InstallContext): ChangeRecord[] {\n    if (\n      ctx.scope === \"project\" &&\n      !this.memoryOverride(ctx)?.path &&\n      (ctx.connector.memory ?? []).length > 0 &&\n      ctx.connector.platforms[this.id]?.memory !== false &&\n      this.rulesDirIsFile(ctx.projectDir)\n    ) {\n      return [\n        {\n          platform: this.id,\n          action: \"warn\",\n          path: join(ctx.projectDir, \".amazonq\", \"rules\"),\n          detail:\n            \"existing .amazonq/rules is a file, not a directory; left untouched — \" +\n            \"convert it to a .amazonq/rules/ directory to receive agent-connector memory\",\n        },\n      ];\n    }\n    return super.installMemory(ctx);\n  }\n\n  /** True when `<dir>/.amazonq/rules` exists and is a regular FILE (not a dir). */\n  private rulesDirIsFile(dir: string): boolean {\n    const p = join(dir, \".amazonq\", \"rules\");\n    if (!existsSync(p)) return false;\n    try {\n      return statSync(p).isFile();\n    } catch {\n      return false;\n    }\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for amazon-q\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Amazon Q's native mcpServers entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): AmazonQStdioServer | AmazonQHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      // Amazon Q has no documented native interpolation token — resolve every\n      // ${env:VAR} to a literal at install time (safe path, matches droid/crush).\n      const entry: AmazonQStdioServer = {\n        command: resolveEnvRefsDeep(command),\n      };\n      if (args.length > 0) entry.args = resolveEnvRefsDeep(args);\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      // timeout: Amazon Q uses MILLISECONDS — pass timeoutMs through unchanged.\n      // Only emit when the connector explicitly sets one (do NOT invent a default).\n      if (server.timeoutMs !== undefined) entry.timeout = server.timeoutMs;\n      return entry;\n    }\n\n    // http (and any other remote transport) — Amazon Q registers a remote URL.\n    // REMOTE shape: { type: \"http\", url } — explicit `type` discriminator, NO\n    // `headers` (OAuth auth, not static headers), NO `disabled`.\n    return {\n      type: \"http\",\n      url: resolveEnvRefsDeep(server.url ?? \"\"),\n    };\n  }\n\n  /**\n   * Render stdio env values. Amazon Q has no documented native interpolation\n   * token, so resolve `${env:VAR}` references to literals at install time.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    return resolveEnvRefsDeep({ ...env });\n  }\n\n  // ── Hook install / uninstall (merge into the default agent file) ──────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.hooks === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"hooks disabled for amazon-q\" }];\n    }\n    if (connector.hookEvents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no hooks\" }];\n    }\n\n    const pending = connector.hookEvents.map((event) => ({\n      event,\n      matcher: connector.hooks[event]?.matcher ?? \"\",\n    }));\n    return this.upsertHookEntries(\n      ctx,\n      this.getHookConfigPath(ctx),\n      pending,\n      this.hookDescriptor(),\n    );\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    return this.removeHookEntries(ctx, this.getHookConfigPath(ctx), this.hookDescriptor());\n  }\n\n  /**\n   * Amazon Q's hook-merge descriptor (FLAT object-of-arrays shape — each entry is\n   * `{ command, matcher? }`, NO `type` field, unlike kiro's nested\n   * `{ matcher, hooks:[...] }`).\n   *  - mapEvent = EVENT_MAP (canonical → Amazon Q trigger); unmapped events\n   *    (PreCompact / SessionEnd / Notification + the E1 set) warn-skip.\n   *  - renderEntry emits `{ command }`, adding `matcher` ONLY for the\n   *    matcher-meaningful triggers (preToolUse/postToolUse) when one is declared;\n   *    an empty matcher = all tools, so it is OMITTED (no `matcher: \"\"` noise).\n   *  - entryOwnsCommand / ownsEntryForRemove match the home-bin command string\n   *    (idempotency on re-install; whole-entry removal on uninstall). FLAT host →\n   *    no stripInner; an emptied trigger key is dropped by the engine.\n   */\n  private hookDescriptor(): HookMergeDescriptor<AmazonQHookEntry> {\n    return {\n      mapEvent: (e) => EVENT_MAP[e as HookEventName],\n      unmappedWarnDetail: (e) => `${e} has no Amazon Q hook equivalent — skipped`,\n      renderEntry: (trigger, matcher, command) => {\n        const entry: AmazonQHookEntry = { command };\n        if (matcher && MATCHER_TRIGGERS.has(trigger)) entry.matcher = matcher;\n        return entry;\n      },\n      entryOwnsCommand: (entry, command) => entry.command === command,\n      ownsEntryForRemove: (c) => (entry) => this.isOurCommand(entry.command, c),\n      skipDetail: (trigger) => `hooks.${trigger} already registered`,\n      removeDetail: (trigger, removed) => `hooks.${trigger} (${removed})`,\n      absentDetail: \"no hooks section present\",\n      noMatchDetail: \"no matching hook entries\",\n    };\n  }\n\n  /** True when a hook command references our home binary AND this connector id\n   *  (anchored so a shared-prefix id can't collide — see isHomeBinHookCommand). */\n  private isOurCommand(command: string | undefined, ctx: InstallContext): boolean {\n    return isHomeBinHookCommand(command, ctx.homeBinPath, ctx.connector.id);\n  }\n\n  // ── Content surface: subagents → cli-agents/<name>.json ───────────────────\n  // CONTENT-ONLY: a pure native-file writer — no runtime dispatch, no home-bin\n  // pointer, no telemetry wrap. Amazon Q \"agents\" are per-agent JSON files where\n  // the FILENAME (minus .json) IS the agent name (agent-file-locations.md). Each\n  // file is a STANDALONE agent definition: we write only { name, description,\n  // prompt } (+ model / tools / allowedTools when the SubagentDef carries them)\n  // and NEVER inject hooks (those live in q_cli_default.json) or mcpServers (those\n  // live in mcp.json). The whole file is AC-owned, so idempotency + reversibility\n  // come from writeContentFile/removeContentFile (byte-identical → skip; uninstall\n  // removes the file → NO_RESIDUE).\n  //   user    → ~/.aws/amazonq/cli-agents/<name>.json\n  //   project → <projectDir>/.amazonq/cli-agents/<name>.json\n\n  /** Native subagent file path: <configDir>/cli-agents/<name>.json. */\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.getConfigDir(ctx), \"cli-agents\", `${name}.json`);\n  }\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for amazon-q\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) => {\n      // COLLISION GUARD: a subagent named `q_cli_default` resolves to the SAME\n      // file as the hooks/built-in default agent — refuse it so a subagent write\n      // can never clobber the hooks agent.\n      if (agent.name === RESERVED_AGENT_NAME) {\n        return {\n          platform: this.id,\n          action: \"warn\",\n          detail:\n            `subagent \"${agent.name}\" collides with the built-in default agent file ` +\n            `(cli-agents/${DEFAULT_AGENT_FILE}); skipped — rename the subagent`,\n        };\n      }\n      return this.writeContentFile(\n        this.subagentPath(ctx, agent.name),\n        this.renderSubagent(agent),\n        ctx.dryRun,\n      );\n    });\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) => {\n      // Never remove the hooks/default-agent file under the collision name.\n      if (agent.name === RESERVED_AGENT_NAME) {\n        return {\n          platform: this.id,\n          action: \"warn\",\n          detail:\n            `subagent \"${agent.name}\" was never installed (collides with ` +\n            `cli-agents/${DEFAULT_AGENT_FILE}); left untouched`,\n        };\n      }\n      return this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun);\n    });\n  }\n\n  /**\n   * Render a connector subagent into an Amazon Q agent JSON file\n   * (agent-format.md):\n   *   { name, description, prompt }  — prompt is the INLINE system-prompt string\n   *   (Amazon Q's `prompt` field is \"high-level context … similar to a system\n   *   prompt\"; we use the inline-text form, NOT a file:// ref).\n   * Plus, when the SubagentDef carries them:\n   *   - model:        only when set and not the platform-agnostic \"inherit\"\n   *     sentinel (Amazon Q has no \"inherit\" — omitting it applies the default).\n   *   - tools:        SurfaceToolPolicy.allow → the `tools` array (the tools the\n   *     agent can use). Amazon Q's `tools` accepts plain tool-name strings and\n   *     `*`, the same vocabulary the portable allow-list carries.\n   *   - allowedTools: SurfaceToolPolicy.allow → the `allowedTools` array (tools\n   *     usable WITHOUT a permission prompt) — BUT only when the allow-list holds\n   *     no `*` (Amazon Q's allowedTools does NOT accept the `\"*\"` wildcard;\n   *     agent-format.md \"AllowedTools Field\"). When allow is exactly [\"*\"] we set\n   *     `tools` but omit `allowedTools` (every tool available, none auto-allowed).\n   *   `deny` has no clean Amazon Q analog (there is no disallowedTools field —\n   *   access is an allow-list), so a deny-only policy maps to no tool keys.\n   *   `readonly` is likewise dropped — Amazon Q has no read-only-agent field; the\n   *   permission model IS the allowedTools allow-list (no separate analog).\n   *   `extra` is shallow-merged last (per-platform escape hatch).\n   */\n  private renderSubagent(agent: SubagentDef): string {\n    const obj: Record<string, unknown> = {\n      name: agent.name,\n      description: agent.description,\n      prompt: agent.prompt,\n    };\n    if (agent.model !== undefined && agent.model !== \"inherit\") obj.model = agent.model;\n\n    const allow = agent.tools?.allow;\n    if (allow && allow.length > 0) {\n      obj.tools = [...allow];\n      // allowedTools rejects the \"*\" wildcard — only emit it for concrete patterns.\n      const allowed = allow.filter((t) => t !== \"*\");\n      if (allowed.length > 0) obj.allowedTools = allowed;\n    }\n    if (agent.extra) Object.assign(obj, agent.extra);\n\n    // Match writeJson's serialization (2-space indent + trailing newline) so the\n    // bytes are stable for writeContentFile's idempotent skip.\n    return `${JSON.stringify(obj, null, 2)}\\n`;\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const mcpPath = this.getServerConfigPath(ctx);\n    const agentPath = this.getHookConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    const homeBin = ctx.homeBinPath;\n    const hookEvents = ctx.connector.hookEvents;\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: mcp.json present`,\n        check: () =>\n          existsSync(mcpPath)\n            ? { status: \"OK\", detail: mcpPath }\n            : { status: \"FAIL\", detail: `not found: ${mcpPath}` },\n      },\n      {\n        name: `${this.name}: server entry registered`,\n        check: () => {\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readJson<{ [k: string]: Record<string, unknown> }>(mcpPath);\n          const bucket = cfg?.[MCP_ROOT_KEY];\n          if (!cfg || !bucket) {\n            return { status: \"FAIL\", detail: `no ${MCP_ROOT_KEY} in ${mcpPath}` };\n          }\n          return connectorId in bucket\n            ? { status: \"OK\", detail: `${MCP_ROOT_KEY}.${connectorId} present` }\n            : {\n                status: \"FAIL\",\n                detail: `no ${MCP_ROOT_KEY}.${connectorId} in ${mcpPath}`,\n              };\n        },\n      },\n      {\n        name: `${this.name}: hook command registered`,\n        check: () => {\n          if (hookEvents.length === 0) {\n            return { status: \"OK\", detail: \"no hooks declared\" };\n          }\n          const agent = this.readJson<AmazonQAgentFile>(agentPath);\n          if (!agent) return { status: \"FAIL\", detail: `cannot read ${agentPath}` };\n          const hooks = agent.hooks ?? {};\n          const registered = Object.values(hooks).some((entries) =>\n            (entries ?? []).some((e) => isHomeBinHookCommand(e.command, homeBin, connectorId)),\n          );\n          return registered\n            ? { status: \"OK\", detail: \"hook command present\" }\n            : { status: \"FAIL\", detail: `no hook for ${connectorId} in ${agentPath}` };\n        },\n      },\n    ];\n\n    // Content-surface checks: assert each declared subagent's JSON file exists.\n    // Skip the reserved collision name (never written by installSubagents).\n    for (const agent of ctx.connector.subagents) {\n      if (agent.name === RESERVED_AGENT_NAME) continue;\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Runtime: parse Amazon Q stdin JSON → normalized event ─────────────────\n  // Amazon Q's stdin payload shape and exit-code contract are IDENTICAL to kiro's\n  // (both AWS hosts in the same hook family); this parse + the formatReply context\n  // channel below follow Amazon Q's own primary-verified schema (docs/hooks.md):\n  // exit-code reply + PLAIN STDOUT context, gated to agentSpawn / userPromptSubmit.\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as AmazonQWireInput;\n    const connectorId = typeof input.connector === \"string\" ? input.connector : \"\";\n    // Host gap: Amazon Q never serializes a session id onto hook stdin — the only\n    // always-present fields are hook_event_name + cwd (hooks.rs:300-304). sessionId\n    // stays \"\" rather than reading a non-existent input.session_id.\n    // Ref: aws/amazon-q-developer-cli crates/chat-cli/src/cli/chat/cli/hooks.rs:300-321\n    const sessionId = \"\";\n    const projectDir = typeof input.cwd === \"string\" ? input.cwd : undefined;\n\n    const base = {\n      hostPlatform: HOST,\n      connectorId,\n      sessionId,\n      raw,\n      ...(projectDir !== undefined ? { projectDir } : {}),\n    } as const;\n\n    switch (event) {\n      case \"PreToolUse\": {\n        const ev: PreToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n        return ev;\n      }\n      case \"PostToolUse\": {\n        const ev: PostToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          ...(toolResponseToString(input.tool_response) !== undefined\n            ? { toolOutput: toolResponseToString(input.tool_response) }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SessionStart\": {\n        // Host gap: agentSpawn stdin is exactly {hook_event_name, cwd} — Amazon Q\n        // serializes no start-reason discriminator (the Rust hook::Source enum is\n        // config-grouping, never written to the payload), so resume/compact/clear\n        // are indistinguishable. Default to \"startup\" rather than reading a\n        // non-existent input.source.\n        // Ref: aws/amazon-q-developer-cli crates/chat-cli/src/cli/chat/cli/hooks.rs:300-304\n        //      + docs/hooks.md:14-17 (agentSpawn input example)\n        const ev: SessionStartEvent = {\n          ...base,\n          source: \"startup\",\n        };\n        return ev;\n      }\n      case \"UserPromptSubmit\": {\n        const ev: UserPromptSubmitEvent = {\n          ...base,\n          prompt: typeof input.prompt === \"string\" ? input.prompt : \"\",\n        };\n        return ev;\n      }\n      case \"Stop\": {\n        // Host gap: stop stdin is exactly {hook_event_name, cwd} — Amazon Q never\n        // serializes a stop_hook_active boolean, so the field is omitted (never set\n        // from a non-existent input.stop_hook_active).\n        // Ref: aws/amazon-q-developer-cli crates/chat-cli/src/cli/chat/cli/hooks.rs:300-321\n        //      + docs/hooks.md:106-107 (stop input example)\n        const ev: StopEvent = {\n          ...base,\n        };\n        return ev;\n      }\n      default: {\n        // Amazon Q never delivers PreCompact / SessionEnd / Notification nor the\n        // E1 extension events (no native triggers). If the runtime dispatches one\n        // anyway, surface it loudly rather than silently mis-parse.\n        throw new Error(`unsupported amazon-q hook event: ${String(event)}`);\n      }\n    }\n  }\n\n  // ── Runtime: normalized response → Amazon Q native (exit-code) hook reply ──\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    const decision = response.decision ?? \"allow\";\n\n    // deny → block the action: exit 2 with the reason on stderr.\n    if (decision === \"deny\") {\n      return { exitCode: 2, stderr: response.reason ?? \"Blocked by hook\" };\n    }\n\n    // ask → Amazon Q has no native \"ask\"; degrade to deny (exit 2) to stay fail-safe.\n    if (decision === \"ask\") {\n      return {\n        exitCode: 2,\n        stderr: response.reason ?? \"Action requires user confirmation (security policy)\",\n      };\n    }\n\n    // Stop → exit-code only (deny already handled above). No context channel on a\n    // Stop hook, so anything non-deny passes through with exit 0.\n    if (event === \"Stop\") {\n      return { exitCode: 0 };\n    }\n\n    // context → inject soft guidance. Amazon Q adds a hook's PLAIN STDOUT to the\n    // agent's context (NO JSON envelope), but ONLY for agentSpawn and\n    // userPromptSubmit; preToolUse / postToolUse / stop have no context channel\n    // (their STDOUT is \"captured but not shown\"). So emit the raw text on stdout\n    // only when the FIRING event maps to a context-supporting Amazon Q trigger;\n    // otherwise the context decision degrades to a plain exit-0 pass-through rather\n    // than a mislabeled/ineffective payload. exit 0 = allow.\n    // Ref: aws/amazon-q-developer-cli docs/hooks.md\n    const trigger = EVENT_MAP[event as HookEventName];\n    if (\n      decision === \"context\" &&\n      response.additionalContext &&\n      trigger !== undefined &&\n      CONTEXT_TRIGGERS.has(trigger)\n    ) {\n      return { exitCode: 0, stdout: response.additionalContext };\n    }\n\n    // modify is unsupported (exit-code protocol — cannot rewrite args/output);\n    // allow / void → pass through with exit 0.\n    return { exitCode: 0 };\n  }\n}\n\n/** Coerce an Amazon Q PostToolUse `tool_response` into a string for the normalized event. */\nfunction toolResponseToString(value: unknown): string | undefined {\n  if (value == null) return undefined;\n  if (typeof value === \"string\") return value;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nexport const adapter = new AmazonQAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;AA6GA,SAAS,YAAY,gBAAgB;AACrC,SAAS,eAAe;AACxB,SAAS,YAAY;AA4BrB,IAAM,OAAmB;AACzB,IAAM,eAAe;AAYrB,IAAM,qBAAqB;AAQ3B,IAAM,sBAAsB;AAM5B,IAAM,YAAY;AAAA,EAChB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,kBAAkB;AAAA,EAClB,MAAM;AACR;AAOA,IAAM,YAAoD;AAAA,EACxD,cAAc,UAAU;AAAA,EACxB,kBAAkB,UAAU;AAAA,EAC5B,YAAY,UAAU;AAAA,EACtB,aAAa,UAAU;AAAA,EACvB,MAAM,UAAU;AAClB;AAGA,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EACpD,UAAU;AAAA,EACV,UAAU;AACZ,CAAC;AAUD,IAAM,mBAAwC,oBAAI,IAAI;AAAA,EACpD,UAAU;AAAA,EACV,UAAU;AACZ,CAAC;AAgEM,IAAM,iBAAN,cAA6B,YAA+B;AAAA,EACxD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO5C,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA,IAGd,eAAe;AAAA,IACf,iBAAiB;AAAA;AAAA;AAAA,IAGjB,yBAAyB;AAAA;AAAA,IAEzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAa5B,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,QAAQ,SAAS;AACjD,UAAM,UAAU,KAAK,SAAS,UAAU;AACxC,UAAM,UAAU,KAAK,YAAY,UAAU;AAC3C,UAAM,UAAU,KAAK,SAAS,UAAU;AAExC,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,0BAA0B,KAAK,QAAQ,UAAU,KACjD,2BAA2B,OAAO,OAAO,OAAO;AAAA,MACpD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,UAAU,IAC/B,KAAK,QAAQ,GAAG,QAAQ,SAAS;AAAA,EACvC;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,cAAc,kBAAkB;AAAA,EACtE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAamB,cAAc,KAAqC;AAEpE,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO,MAAM,cAAc,GAAG;AAClE,QAAI,IAAI,UAAU,WAAW;AAC3B,UAAI,KAAK,eAAe,IAAI,UAAU,EAAG,QAAO,CAAC;AACjD,aAAO;AAAA,QACL;AAAA,UACE,MAAM,KAAK,IAAI,YAAY,YAAY,SAAS,oBAAoB;AAAA,UACpE,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,WAAO,CAAC;AAAA,EACV;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQS,cAAc,KAAqC;AAC1D,QACE,IAAI,UAAU,aACd,CAAC,KAAK,eAAe,GAAG,GAAG,SAC1B,IAAI,UAAU,UAAU,CAAC,GAAG,SAAS,KACtC,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG,WAAW,SAC7C,KAAK,eAAe,IAAI,UAAU,GAClC;AACA,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM,KAAK,IAAI,YAAY,YAAY,OAAO;AAAA,UAC9C,QACE;AAAA,QAEJ;AAAA,MACF;AAAA,IACF;AACA,WAAO,MAAM,cAAc,GAAG;AAAA,EAChC;AAAA;AAAA,EAGQ,eAAe,KAAsB;AAC3C,UAAM,IAAI,KAAK,KAAK,YAAY,OAAO;AACvC,QAAI,CAAC,WAAW,CAAC,EAAG,QAAO;AAC3B,QAAI;AACF,aAAO,SAAS,CAAC,EAAE,OAAO;AAAA,IAC5B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,8CACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QACwC;AACxC,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAI1E,YAAM,QAA4B;AAAA,QAChC,SAAS,mBAAmB,OAAO;AAAA,MACrC;AACA,UAAI,KAAK,SAAS,EAAG,OAAM,OAAO,mBAAmB,IAAI;AACzD,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,OAAM,MAAM;AAGrB,UAAI,OAAO,cAAc,OAAW,OAAM,UAAU,OAAO;AAC3D,aAAO;AAAA,IACT;AAKA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,mBAAmB,OAAO,OAAO,EAAE;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,WAAO,mBAAmB,EAAE,GAAG,IAAI,CAAC;AAAA,EACtC;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,UAAU,OAAO;AAC9C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC;AAAA,IACtF;AACA,QAAI,UAAU,WAAW,WAAW,GAAG;AACrC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC;AAAA,IACtF;AAEA,UAAM,UAAU,UAAU,WAAW,IAAI,CAAC,WAAW;AAAA,MACnD;AAAA,MACA,SAAS,UAAU,MAAM,KAAK,GAAG,WAAW;AAAA,IAC9C,EAAE;AACF,WAAO,KAAK;AAAA,MACV;AAAA,MACA,KAAK,kBAAkB,GAAG;AAAA,MAC1B;AAAA,MACA,KAAK,eAAe;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,eAAe,KAAqC;AAClD,WAAO,KAAK,kBAAkB,KAAK,KAAK,kBAAkB,GAAG,GAAG,KAAK,eAAe,CAAC;AAAA,EACvF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,iBAAwD;AAC9D,WAAO;AAAA,MACL,UAAU,CAAC,MAAM,UAAU,CAAkB;AAAA,MAC7C,oBAAoB,CAAC,MAAM,GAAG,CAAC;AAAA,MAC/B,aAAa,CAAC,SAAS,SAAS,YAAY;AAC1C,cAAM,QAA0B,EAAE,QAAQ;AAC1C,YAAI,WAAW,iBAAiB,IAAI,OAAO,EAAG,OAAM,UAAU;AAC9D,eAAO;AAAA,MACT;AAAA,MACA,kBAAkB,CAAC,OAAO,YAAY,MAAM,YAAY;AAAA,MACxD,oBAAoB,CAAC,MAAM,CAAC,UAAU,KAAK,aAAa,MAAM,SAAS,CAAC;AAAA,MACxE,YAAY,CAAC,YAAY,SAAS,OAAO;AAAA,MACzC,cAAc,CAAC,SAAS,YAAY,SAAS,OAAO,KAAK,OAAO;AAAA,MAChE,cAAc;AAAA,MACd,eAAe;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA,EAIQ,aAAa,SAA6B,KAA8B;AAC9E,WAAO,qBAAqB,SAAS,IAAI,aAAa,IAAI,UAAU,EAAE;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,cAAc,GAAG,IAAI,OAAO;AAAA,EAClE;AAAA,EAES,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,cAAc,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU,IAAI,CAAC,UAAU;AAIxC,UAAI,MAAM,SAAS,qBAAqB;AACtC,eAAO;AAAA,UACL,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,aAAa,MAAM,IAAI,+DACR,kBAAkB;AAAA,QACrC;AAAA,MACF;AACA,aAAO,KAAK;AAAA,QACV,KAAK,aAAa,KAAK,MAAM,IAAI;AAAA,QACjC,KAAK,eAAe,KAAK;AAAA,QACzB,IAAI;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU,IAAI,CAAC,UAAU;AAExC,UAAI,MAAM,SAAS,qBAAqB;AACtC,eAAO;AAAA,UACL,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,aAAa,MAAM,IAAI,mDACT,kBAAkB;AAAA,QACpC;AAAA,MACF;AACA,aAAO,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IAC9E,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBQ,eAAe,OAA4B;AACjD,UAAM,MAA+B;AAAA,MACnC,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,QAAQ,MAAM;AAAA,IAChB;AACA,QAAI,MAAM,UAAU,UAAa,MAAM,UAAU,UAAW,KAAI,QAAQ,MAAM;AAE9E,UAAM,QAAQ,MAAM,OAAO;AAC3B,QAAI,SAAS,MAAM,SAAS,GAAG;AAC7B,UAAI,QAAQ,CAAC,GAAG,KAAK;AAErB,YAAM,UAAU,MAAM,OAAO,CAAC,MAAM,MAAM,GAAG;AAC7C,UAAI,QAAQ,SAAS,EAAG,KAAI,eAAe;AAAA,IAC7C;AACA,QAAI,MAAM,MAAO,QAAO,OAAO,KAAK,MAAM,KAAK;AAI/C,WAAO,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA;AAAA,EACxC;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,UAAU,KAAK,oBAAoB,GAAG;AAC5C,UAAM,YAAY,KAAK,kBAAkB,GAAG;AAC5C,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,UAAU,IAAI;AACpB,UAAM,aAAa,IAAI,UAAU;AACjC,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,OAAO,IACd,EAAE,QAAQ,MAAM,QAAQ,QAAQ,IAChC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,OAAO,GAAG;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAmD,OAAO;AAC3E,gBAAM,SAAS,MAAM,YAAY;AACjC,cAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,mBAAO,EAAE,QAAQ,QAAQ,QAAQ,MAAM,YAAY,OAAO,OAAO,GAAG;AAAA,UACtE;AACA,iBAAO,eAAe,SAClB,EAAE,QAAQ,MAAM,QAAQ,GAAG,YAAY,IAAI,WAAW,WAAW,IACjE;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,MAAM,YAAY,IAAI,WAAW,OAAO,OAAO;AAAA,UACzD;AAAA,QACN;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,cAAI,WAAW,WAAW,GAAG;AAC3B,mBAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,UACrD;AACA,gBAAM,QAAQ,KAAK,SAA2B,SAAS;AACvD,cAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,QAAQ,QAAQ,eAAe,SAAS,GAAG;AACxE,gBAAM,QAAQ,MAAM,SAAS,CAAC;AAC9B,gBAAM,aAAa,OAAO,OAAO,KAAK,EAAE;AAAA,YAAK,CAAC,aAC3C,WAAW,CAAC,GAAG,KAAK,CAAC,MAAM,qBAAqB,EAAE,SAAS,SAAS,WAAW,CAAC;AAAA,UACnF;AACA,iBAAO,aACH,EAAE,QAAQ,MAAM,QAAQ,uBAAuB,IAC/C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,WAAW,OAAO,SAAS,GAAG;AAAA,QAC7E;AAAA,MACF;AAAA,IACF;AAIA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,UAAI,MAAM,SAAS,oBAAqB;AACxC,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,cAAc,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAK5E,UAAM,YAAY;AAClB,UAAM,aAAa,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAE/D,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,IACnD;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAClB,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,GAAI,qBAAqB,MAAM,aAAa,MAAM,SAC9C,EAAE,YAAY,qBAAqB,MAAM,aAAa,EAAE,IACxD,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AAQnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,QAAQ;AAAA,QACV;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,oBAAoB;AACvB,cAAM,KAA4B;AAAA,UAChC,GAAG;AAAA,UACH,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,QAAQ;AAMX,cAAM,KAAgB;AAAA,UACpB,GAAG;AAAA,QACL;AACA,eAAO;AAAA,MACT;AAAA,MACA,SAAS;AAIP,cAAM,IAAI,MAAM,oCAAoC,OAAO,KAAK,CAAC,EAAE;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,YAAY,OAAsB,UAAmC;AACnE,UAAM,WAAW,SAAS,YAAY;AAGtC,QAAI,aAAa,QAAQ;AACvB,aAAO,EAAE,UAAU,GAAG,QAAQ,SAAS,UAAU,kBAAkB;AAAA,IACrE;AAGA,QAAI,aAAa,OAAO;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,SAAS,UAAU;AAAA,MAC7B;AAAA,IACF;AAIA,QAAI,UAAU,QAAQ;AACpB,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAUA,UAAM,UAAU,UAAU,KAAsB;AAChD,QACE,aAAa,aACb,SAAS,qBACT,YAAY,UACZ,iBAAiB,IAAI,OAAO,GAC5B;AACA,aAAO,EAAE,UAAU,GAAG,QAAQ,SAAS,kBAAkB;AAAA,IAC3D;AAIA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AACF;AAGA,SAAS,qBAAqB,OAAoC;AAChE,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEO,IAAM,UAAU,IAAI,eAAe;AAC1C,IAAO,mBAAQ;","names":[]}

package/dist/{amp-5DJK7VAL.js → amp-WAPHJYTK.js}

@@ -8,24 +8,17 @@ import {
 import {
   BaseAdapter,
   renderSkillMd
-} from "./chunk-A767JFHW.js";
+} from "./chunk-RHML2NOB.js";
 import {
   buildWrappedStdio
 } from "./chunk-TO57WYBB.js";
-import "./chunk-ZY25RG4Y.js";
-import "./chunk-QY42WGBX.js";
+import "./chunk-ALVXORZM.js";
+import "./chunk-2HCJV6UO.js";
 
 // src/adapters/amp/index.ts
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  rmSync,
-  writeFileSync
-} from "fs";
+import { existsSync } from "fs";
 import { homedir } from "os";
-import { dirname, join } from "path";
+import { join } from "path";
 var HOST = "amp";
 var MCP_ROOT_KEY = "amp.mcpServers";
 var EVENT_TO_AMP = {
@@ -292,45 +285,22 @@ var AmpAdapter = class extends BaseAdapter {
     const files = this.synthesizePlugin(ctx);
     const changes = [];
     for (const file of files) {
-      const before = existsSync(file.path) ? this.safeRead(file.path) : void 0;
-      let action;
-      if (before === void 0) action = "create";
-      else if (before === file.contents) action = "skip";
-      else action = "update";
-      if (action !== "skip" && !ctx.dryRun) {
-        ensureDir(dirname(file.path));
-        writeFileSync(file.path, file.contents, "utf8");
-        chmodSync(file.path, file.executable ? 493 : 420);
-      }
-      changes.push({
-        platform: this.id,
-        action,
-        path: file.path,
-        detail: `amp plugin module (${this.hookDetail(ctx)})`
-      });
+      changes.push(
+        this.writeManagedFile(
+          file.path,
+          file.contents,
+          ctx.dryRun,
+          `amp plugin module (${this.hookDetail(ctx)})`,
+          file.executable
+        )
+      );
     }
     return changes;
   }
   uninstallHooks(ctx) {
     const pluginPath = this.getHookConfigPath(ctx);
-    if (!existsSync(pluginPath)) {
-      return [
-        {
-          platform: this.id,
-          action: "skip",
-          path: pluginPath,
-          detail: "no amp plugin module present"
-        }
-      ];
-    }
-    if (!ctx.dryRun) rmSync(pluginPath, { force: true });
     return [
-      {
-        platform: this.id,
-        action: "remove",
-        path: pluginPath,
-        detail: "amp plugin module"
-      }
+      this.removeManagedFile(pluginPath, ctx.dryRun, "amp plugin module", "no amp plugin module present")
     ];
   }
   /**
@@ -419,11 +389,13 @@ let SESSION_ID = "";
     }
     if (has("UserPromptSubmit")) {
       handlers.push(`  // UserPromptSubmit \u2192 agent.start "fires when the user submits a prompt"
-  // (ampcode.com/manual). The manual's example takes (_event) and documents no
-  // prompt field or return surface, so this is observe-only \u2014 the raw event is
-  // forwarded for the connector to inspect; any deny/context decision is a no-op.
+  // (ampcode.com/manual). The host DOES carry the prompt: AgentStartEvent.message
+  // is "The user's prompt message" (@ampcode/plugin index.d.ts:1011-1012), so we
+  // PROJECT event.message into the bridge payload's prompt key (the prior version
+  // dropped it). Observe-only return surface \u2014 any deny/context decision is a no-op.
   amp.on("agent.start", async (event) => {
     bridge("UserPromptSubmit", {
+      prompt: (event && typeof event.message === "string" && event.message) || "",
       sessionId: SESSION_ID,
       projectDir: PROJECT_DIR,
       raw: event,
@@ -458,13 +430,16 @@ let SESSION_ID = "";
     if (has("PostToolUse")) {
       handlers.push(`  // PostToolUse \u2192 tool.result "fires after a tool finishes and before the result
   // is sent back to the model" (ampcode.com/manual). The tool name is event.tool
-  // and the error signal is event.status === "error" (both verified). The manual
-  // says a replacement status/output CAN be returned but never documents the
-  // replacement object shape, so this is observe-only (canModifyOutput:false) \u2014
-  // the raw event is forwarded; we never return a guessed replacement.
+  // and the error signal is event.status === "error" (both verified). The host DOES
+  // carry the output: ToolResultEvent extends ToolResult.output (typed unknown \u2014
+  // "Tool output/result if available", @ampcode/plugin index.d.ts:946-947,976), so
+  // we PROJECT event.output into the bridge payload's toolOutput (prior version
+  // dropped it). Replacement still observe-only (canModifyOutput:false) \u2014 the
+  // replacement OBJECT shape is undocumented, so we never return a guessed mutation.
   amp.on("tool.result", async (event) => {
     bridge("PostToolUse", {
       toolName: (event && event.tool) || "",
+      toolOutput: event && event.output,
       isError: !!(event && event.status === "error"),
       sessionId: SESSION_ID,
       projectDir: PROJECT_DIR,
@@ -518,11 +493,12 @@ ${handlers.join("\n\n")}
         return ev;
       }
       case "PostToolUse": {
+        const out = coerceToolOutput(input.toolOutput);
         const ev = {
           ...base,
           toolName: input.toolName ?? "",
           toolInput: input.toolInput ?? {},
-          ...typeof input.toolOutput === "string" ? { toolOutput: input.toolOutput } : {},
+          ...out !== void 0 ? { toolOutput: out } : {},
           ...typeof input.isError === "boolean" ? { isError: input.isError } : {}
         };
         return ev;
@@ -604,16 +580,15 @@ ${handlers.join("\n\n")}
     ];
   }
   /** Read a file, returning undefined on any error (idempotency compare). */
-  safeRead(path) {
-    try {
-      return readFileSync(path, "utf8");
-    } catch {
-      return void 0;
-    }
-  }
 };
-function ensureDir(dir) {
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+function coerceToolOutput(value) {
+  if (typeof value === "string") return value;
+  if (value === void 0 || value === null) return void 0;
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return String(value);
+  }
 }
 function ampEnvToken(name, def) {
   if (def !== void 0) {
@@ -629,4 +604,4 @@ export {
   adapter,
   amp_default as default
 };
-//# sourceMappingURL=amp-5DJK7VAL.js.map
+//# sourceMappingURL=amp-WAPHJYTK.js.map

package/dist/amp-WAPHJYTK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/amp/index.ts"],"sourcesContent":["/**\n * adapters/amp — Amp (Sourcegraph / AmpCode) platform adapter for agent-connector.\n *\n * Amp is a **ts-plugin** host: alongside MCP it loads TypeScript plugin modules\n * from `.amp/plugins/<name>.ts`, each default-exporting a function `(amp) => void`\n * that registers lifecycle handlers via `amp.on(\"<event>\", async (event, ctx) =>\n * …)` (ampcode.com/manual → Plugins). This adapter wires the five amp.on events\n * that have a canonical analog and bridges them to the universal home-bin\n * entrypoint, exactly like the OMP / OpenCode ts-plugin adapters.\n *\n * Event mapping (only events the connector declares are subscribed):\n *   SessionStart     → amp.on(\"session.start\", …)  (thread begins; id = event.thread.id)\n *   UserPromptSubmit → amp.on(\"agent.start\",  …)   (user submits a prompt; observe-only)\n *   PreToolUse       → amp.on(\"tool.call\",     …)   (before a tool runs; deny → return\n *                       { action: \"reject-and-continue\" }, else { action: \"allow\" })\n *   PostToolUse      → amp.on(\"tool.result\",   …)   (after a tool finishes; observe-only)\n *   Stop             → amp.on(\"agent.end\",     …)   (turn ends; observe-only)\n * Amp documents NO session.end event, so SessionEnd is an honest gap (warn-skip\n * via the unsupported-here detail). tool.call's decision surface is the\n * { action } union (canModifyArgs:false — the \"modify\" input shape is not\n * documented); tool.result CAN return a replacement but the manual never\n * documents its object shape, so PostToolUse is observe-only (canModifyOutput:\n * false) rather than ship a guessed mutation; session.start has no documented\n * context-injection surface (canInjectSessionContext:false).\n *\n * Why we SYNTHESIZE a self-contained module instead of importing handlers:\n *   the connector's hook handlers are arbitrary developer code we must not import\n *   into Amp's (Bun) runtime — wrong cwd, wrong deps, version skew. So, like the\n *   OMP / OpenCode adapters, we generate a tiny ESM/TS plugin that imports NOTHING\n *   from agent-connector: each `amp.on(...)` handler shells out to the ONE stable\n *   home binary's universal entrypoint (`<homeBin> hook amp <event> --connector\n *   <id>`) over child_process, feeds it the amp-shaped payload as JSON on stdin,\n *   and JSON.parses the normalized HookResponse back from stdout. Fail-open: any\n *   bridge error → no-op. One entrypoint, every paradigm.\n *\n * Plugin scope: the `.amp/plugins/` dir is documented at PROJECT scope only; Amp\n * documents no user-scope plugins dir, so installHooks writes the plugin for\n * project scope and warn-skips user scope (the MCP + skills surfaces keep their\n * own user-scope paths). MCP config (report §2 / §5.3):\n *   - user scope    → ~/.config/amp/settings.json\n *   - project scope → <projectDir>/.amp/settings.json\n *   Both are JSONC (we write plain JSON, which is valid JSONC). The settings file\n *   is SHARED with the rest of Amp's configuration, so we MERGE our entry into\n *   the existing object and never clobber unrelated keys.\n *\n * QUIRK 1 — dotted top-level key: Amp does NOT use a nested `mcpServers` object.\n * The MCP registry is a single FLAT settings key literally named\n * `\"amp.mcpServers\"`, whose value is an object of `{ id: { command, args, env } }`.\n * We therefore set `settings[\"amp.mcpServers\"][connectorId] = entry`. Because the\n * base JSON helpers index `config[rootKey][serverId]`, passing the dotted string\n * as the root key writes exactly that flat key while preserving every sibling\n * setting (true merge).\n *\n * QUIRK 2 — native interpolation: Amp expands `${VAR_NAME}` in stdio entries at\n * runtime, so we KEEP env/header/url refs native by rewriting the portable\n * `${env:VAR}` syntax to Amp's `${VAR}` token rather than resolving to literals\n * (secrets stay out of the settings file).\n *\n * Skills surface: Amp reads SKILL.md files (dir-per-skill, same shape as\n * claude-code) from a skill root that is NOT under the config dir\n * (`~/.config/amp`):\n *   - user scope    → ~/.config/agents/skills/<name>/SKILL.md  (the sibling\n *     cross-agent `agents` dir — `~/.config/amp/skills/` is also documented-native,\n *     but the `agents` root is the cross-agent standard we standardize on)\n *   - project scope → <projectDir>/.agents/skills/<name>/SKILL.md\n * Because that root differs from getConfigDir, skills use a dedicated skillDir()\n * helper rather than reusing getConfigDir.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type {\n  Adapter,\n  GeneratedPluginFile,\n  HookReply,\n  InstallContext,\n  NormalizedEvent,\n} from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  PostToolUseEvent,\n  PreToolUseEvent,\n  ServerDef,\n  SessionStartEvent,\n  SkillDef,\n  StopEvent,\n  Transport,\n  UserPromptSubmitEvent,\n} from \"../../core/types.js\";\nimport { rewriteEnvRefs } from \"../../core/interpolate.js\";\nimport { renderBridgePrelude } from \"../../core/ts-plugin-bridge.js\";\nimport {\n  buildWrappedStdio,\n} from \"../../core/spawn.js\";\nimport { renderSkillMd } from \"../claude-code/render.js\";\n\nconst HOST: PlatformId = \"amp\";\n/**\n * QUIRK: a single FLAT, dotted settings key — NOT a nested object. The base\n * JSON helpers treat this as `config[\"amp.mcpServers\"][serverId]`.\n */\nconst MCP_ROOT_KEY = \"amp.mcpServers\";\n\n/**\n * Canonical → Amp plugin event name map. A connector hook event is only\n * subscribed by the generated plugin when it appears here AND is declared by the\n * connector. Names verified against ampcode.com/manual (Plugins → amp.on events).\n * Amp documents NO `session.end`, so SessionEnd has no entry (honest gap).\n */\nconst EVENT_TO_AMP: Partial<Record<HookEventName, string>> = {\n  SessionStart: \"session.start\",\n  UserPromptSubmit: \"agent.start\",\n  PreToolUse: \"tool.call\",\n  PostToolUse: \"tool.result\",\n  Stop: \"agent.end\",\n};\n\n/** Raw payload the generated plugin posts to the universal hook entrypoint. */\ninterface AmpBridgePayload {\n  toolName?: string;\n  toolInput?: Record<string, unknown>;\n  // ToolResultEvent.output is typed `unknown` by the host (@ampcode/plugin\n  // index.d.ts:947 — \"Tool output/result if available\"), so the bridge may\n  // forward a string OR a structured value; parseEvent stringifies non-strings.\n  toolOutput?: unknown;\n  isError?: boolean;\n  prompt?: string;\n  sessionId?: string;\n  projectDir?: string;\n}\n\n/** Native MCP server entry shapes Amp accepts under `amp.mcpServers`. */\ninterface AmpStdioServer {\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\ninterface AmpHttpServer {\n  url: string;\n  headers?: Record<string, string>;\n}\n\nexport class AmpAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Amp\";\n  readonly paradigm: HookParadigm = \"ts-plugin\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\n    supportsMemory: true,\n    // amp.on lifecycle events with a canonical analog (EVENT_TO_AMP):\n    // tool.call / tool.result / session.start / agent.start / agent.end.\n    preToolUse: true,\n    postToolUse: true,\n    // Amp has no documented compaction hook.\n    preCompact: false,\n    sessionStart: true,\n    // Amp documents NO session.end event — SessionEnd is an honest gap.\n    sessionEnd: false,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // Newer events: Amp documents no permission/approval, post-tool-failure, or\n    // subagent lifecycle hook with a canonical analog, so permissionRequest /\n    // postToolUseFailure / subagentStart / subagentStop stay unset — the\n    // generated bridge never references them and install reports them as\n    // \"unsupported here\".\n    // tool.call's documented decision surface is { action: \"allow\" |\n    // \"reject-and-continue\" | \"modify\" | \"synthesize\" } (ampcode.com/manual →\n    // Plugins → tool.call). We wire allow + reject-and-continue (block); the\n    // \"modify\" input-rewrite shape is not byte-documented, so canModifyArgs:false.\n    canModifyArgs: false,\n    // tool.result says \"return a replacement status/output\" but the manual never\n    // documents the replacement OBJECT SHAPE (which keys). Rather than guess it,\n    // PostToolUse is observe-only and canModifyOutput stays false until the shape\n    // is primary-source-verified (honesty bar: under-claim, never emit a guessed\n    // mutation contract).\n    canModifyOutput: false,\n    // session.start has no documented context-injection surface.\n    canInjectSessionContext: false,\n    // Amp registers stdio and Streamable HTTP MCP servers.\n    transports: [\"stdio\", \"http\"],\n    // Skills: Amp reads SKILL.md from ~/.config/agents/skills/<name>/SKILL.md\n    // (user) and <projectDir>/.agents/skills/<name>/SKILL.md (project) — a root\n    // OUTSIDE the config dir, so the skillDir() helper resolves it explicitly.\n    supportsSkills: true,\n    // Native passthrough hooks: amp.on events with no canonical HookEventName\n    // analog are reachable via platforms[\"amp\"].nativeHooks; the generated plugin\n    // registers + bridges each declared native event verbatim and the home-bin\n    // runtime dispatches it host-generically via runNativeHook.\n    supportsNativeHooks: true,\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".config\", \"amp\");\n    const userSettings = join(userDir, \"settings.json\");\n    const projectDirAmp = join(projectDir, \".amp\");\n    const projectSettings = join(projectDirAmp, \"settings.json\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userSettings);\n    const projectInstalled = existsSync(projectDirAmp) || existsSync(projectSettings);\n    const installed = userInstalled || projectInstalled;\n    const scope = projectInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projectSettings : userSettings;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `found Amp config (${scope}) at ${configPath}`\n        : `no Amp config at ${userSettings} or ${projectSettings}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".amp\")\n      : join(homedir(), \".config\", \"amp\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"settings.json\");\n  }\n\n  /**\n   * For this ts-plugin host the \"hook config path\" is the generated plugin\n   * MODULE. Amp loads every `.ts` file in `.amp/plugins/`, so writing this file\n   * IS the registration. The `.amp/plugins/` dir is documented at PROJECT scope\n   * (Amp documents no user-scope plugins dir — see pluginsDir); the user-scope\n   * path is returned for doctor/uninstall symmetry but installHooks warn-skips it.\n   */\n  getHookConfigPath(ctx: InstallContext): string {\n    return join(this.pluginsDir(ctx), `${ctx.connector.id}.ts`);\n  }\n\n  /**\n   * Plugin directory Amp auto-loads `.ts` modules from. PROJECT scope is the\n   * documented `<projectDir>/.amp/plugins`; user scope mirrors the MCP config dir\n   * (`~/.config/amp/plugins`) for path symmetry only — installHooks never writes\n   * there because Amp documents no user-scope plugins dir.\n   */\n  private pluginsDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".amp\", \"plugins\")\n      : join(this.getConfigDir(ctx), \"plugins\");\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for amp\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    // Upsert into the flat \"amp.mcpServers\" key, merging into existing settings.\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Amp's native `amp.mcpServers` entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): AmpStdioServer | AmpHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      // Amp expands ${VAR_NAME} natively, so keep refs native (no literals).\n      const entry: AmpStdioServer = { command: this.rewrite(command) };\n      if (args.length > 0) entry.args = args.map((a) => this.rewrite(a));\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      return entry;\n    }\n\n    // http (and any other remote transport we surface) — Amp registers a URL.\n    const entry: AmpHttpServer = { url: this.rewrite(server.url ?? \"\") };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Amp supports native `${VAR_NAME}` interpolation,\n   * so translate `${env:VAR}` refs to that native token rather than baking\n   * secrets into the file. Literals pass through unchanged.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    const out: Record<string, string> = {};\n    for (const [k, v] of Object.entries(env)) out[k] = this.rewrite(v);\n    return out;\n  }\n\n  /** Translate `${env:VAR(:-default)}` to Amp's native `${VAR}` token. */\n  private rewrite(value: string): string {\n    return rewriteEnvRefs(value, ampEnvToken);\n  }\n\n  // ── Skills surface ───────────────────────────────────────────────────────\n  // CONTENT-ONLY: pure native-file writers under the skill root. No runtime\n  // dispatch, no home-bin pointer, no telemetry wrap. Idempotent (byte-identical\n  // → skip) via writeContentFile and reversible via removeContentFile. Honors\n  // platforms[\"amp\"].skills === false to skip.\n  //\n  // QUIRK: the skill root is NOT under getConfigDir (~/.config/amp). Amp reads\n  // SKILL.md from the sibling cross-agent `agents` tree:\n  //   user scope    → ~/.config/agents/skills/<name>/SKILL.md\n  //   project scope → <projectDir>/.agents/skills/<name>/SKILL.md\n  // so skillDir() resolves it explicitly rather than reusing getConfigDir.\n\n  /** Skill root: user `~/.config/agents/skills`, project `<projectDir>/.agents/skills`. */\n  private skillsDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".agents\", \"skills\")\n      : join(homedir(), \".config\", \"agents\", \"skills\");\n  }\n\n  /** Native skill dir: <skillRoot>/<name>. */\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.skillsDir(ctx), name);\n  }\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for amp\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), this.renderSkill(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  /** Render a skill's SKILL.md (delegates to the shared renderer). */\n  private renderSkill(skill: SkillDef): string {\n    return renderSkillMd(skill);\n  }\n\n  // ── Hook install / uninstall (ts-plugin module) ──────────────────────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const pluginPath = this.getHookConfigPath(ctx);\n\n    // Amp documents no user-scope plugins dir — only `.amp/plugins/` at project\n    // scope. Degradation is never silent: warn-skip rather than write to an\n    // unverified user path.\n    if (ctx.scope !== \"project\") {\n      return [\n        {\n          platform: this.id,\n          action: \"warn\",\n          path: pluginPath,\n          detail:\n            \"amp plugins are project-scoped (.amp/plugins/) — no user-scope plugins dir is documented; skipped\",\n        },\n      ];\n    }\n\n    // Native passthrough events are a sibling, amp-scoped declaration: `hooks:\n    // false` disables only the CANONICAL events, and the generated native loop\n    // reads platforms.amp.nativeHooks directly (independent of hookEvents). So\n    // whenever native events exist the plugin must still be synthesized.\n    const canonicalDisabled = ctx.connector.platforms[HOST]?.hooks === false;\n    const hasCanonical = !canonicalDisabled && ctx.connector.hookEvents.length > 0;\n    const hasNative = this.nativeHookEvents(ctx).length > 0;\n\n    if (!hasCanonical && !hasNative) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path: pluginPath,\n          detail: canonicalDisabled\n            ? \"hooks disabled for amp\"\n            : \"connector declares no hooks\",\n        },\n      ];\n    }\n\n    const files = this.synthesizePlugin(ctx);\n    const changes: ChangeRecord[] = [];\n\n    for (const file of files) {\n      changes.push(\n        this.writeManagedFile(\n          file.path,\n          file.contents,\n          ctx.dryRun,\n          `amp plugin module (${this.hookDetail(ctx)})`,\n          file.executable,\n        ),\n      );\n    }\n\n    return changes;\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    const pluginPath = this.getHookConfigPath(ctx);\n    return [\n      this.removeManagedFile(pluginPath, ctx.dryRun, \"amp plugin module\", \"no amp plugin module present\"),\n    ];\n  }\n\n  /**\n   * Human-facing summary of which declared events the synthesized module ACTUALLY\n   * wires. Only events present in EVENT_TO_AMP are mapped/wired; any declared\n   * event with no Amp mapping (e.g. SessionEnd) is reported separately as\n   * \"unsupported here\" so the detail never overstates coverage.\n   */\n  private hookDetail(ctx: InstallContext): string {\n    // `hooks: false` suppresses the canonical handlers, so the detail must not\n    // claim them; native events are still reported below.\n    const canonicalOff = ctx.connector.platforms[HOST]?.hooks === false;\n    const declared = canonicalOff ? [] : ctx.connector.hookEvents;\n    const mapped = declared.filter((e) => EVENT_TO_AMP[e] !== undefined);\n    const unsupported = declared.filter((e) => EVENT_TO_AMP[e] === undefined);\n    const native = this.nativeHookEvents(ctx);\n    const parts: string[] = [];\n    if (mapped.length > 0) parts.push(mapped.join(\",\"));\n    if (native.length > 0) parts.push(`native: ${native.join(\",\")}`);\n    const base = parts.join(\"; \") || \"no canonical hooks\";\n    return unsupported.length > 0\n      ? `${base}; unsupported here: ${unsupported.join(\",\")}`\n      : base;\n  }\n\n  /**\n   * Amp-native passthrough events declared on platforms[\"amp\"].nativeHooks\n   * (amp.on event names with no canonical HookEventName analog). Emitted as\n   * generic bridge registrations and dispatched host-generically by the home-bin's\n   * runNativeHook.\n   */\n  private nativeHookEvents(ctx: InstallContext): string[] {\n    return Object.keys(ctx.connector.platforms[HOST]?.nativeHooks ?? {});\n  }\n\n  // ── ts-plugin synthesis ──────────────────────────────────────────────────\n\n  /**\n   * Build ONE self-contained Amp plugin module (`.amp/plugins/<id>.ts`). It\n   * imports nothing from agent-connector; each `amp.on(...)` handler shells out to\n   * the universal hook entrypoint via child_process and applies the normalized\n   * HookResponse. Its default export is the Amp plugin function `(amp) => void`.\n   */\n  synthesizePlugin(ctx: InstallContext): GeneratedPluginFile[] {\n    const path = this.getHookConfigPath(ctx);\n    const contents = this.buildPluginSource(ctx);\n    return [{ path, contents, executable: false }];\n  }\n\n  /** Compose the generated plugin source with plain string concatenation. */\n  private buildPluginSource(ctx: InstallContext): string {\n    // `platforms.amp.hooks === false` disables only the CANONICAL events (the\n    // native loop below reads platforms.amp.nativeHooks directly and is a sibling,\n    // unaffected). When canonical hooks are off the module may still be\n    // synthesized for native events, so the canonical handler set collapses to\n    // empty here rather than short-circuiting the whole plugin.\n    const canonicalOff = ctx.connector.platforms[HOST]?.hooks === false;\n    const events = canonicalOff\n      ? []\n      : ctx.connector.hookEvents.filter(\n          (e): e is HookEventName => EVENT_TO_AMP[e] !== undefined,\n        );\n    const has = (e: HookEventName) => events.includes(e);\n\n    const header = `/**\n * AUTO-GENERATED by agent-connector — DO NOT EDIT.\n *\n * Self-contained Amp plugin for connector ${ctx.connector.id}.\n * It imports nothing from agent-connector: every hook invocation shells out to\n * the stable home binary's universal entrypoint and JSON-parses the normalized\n * response. Fail-open: any bridge error degrades to a no-op (never wedges Amp).\n *\n * Amp loads this module from .amp/plugins/${ctx.connector.id}.ts; the default\n * export is the plugin function (amp) => void called once with the PluginAPI.\n */\nimport type { PluginAPI } from \"@ampcode/plugin\";\nimport { execFileSync, execSync } from \"node:child_process\";\n\n${renderBridgePrelude({\n  homeBin: ctx.homeBinPath,\n  connectorId: ctx.connector.id,\n  hookSlug: \"amp\",\n  payloadNoun: \"amp\",\n  failOpenComment: \"Fail-open — never wedge an Amp tool call / lifecycle event.\",\n})}\n\n// Amp documents no project-dir env var; the plugin process runs in the workspace\n// root, so resolve once at load. Session id is rebound on each session.start.\nconst PROJECT_DIR = process.cwd();\nlet SESSION_ID = \"\";\n`;\n\n    const handlers: string[] = [];\n\n    if (has(\"SessionStart\")) {\n      handlers.push(`  // SessionStart → rebind the session id and notify the connector.\n  // Amp's session.start event carries event.thread.id (ampcode.com/manual →\n  // Plugins → session.start: \"Example session.start for \\${event.thread.id}\").\n  amp.on(\"session.start\", async (event) => {\n    SESSION_ID =\n      (event && event.thread && event.thread.id) || \"amp-session\";\n    bridge(\"SessionStart\", { sessionId: SESSION_ID, projectDir: PROJECT_DIR });\n  });`);\n    }\n\n    if (has(\"UserPromptSubmit\")) {\n      handlers.push(`  // UserPromptSubmit → agent.start \"fires when the user submits a prompt\"\n  // (ampcode.com/manual). The host DOES carry the prompt: AgentStartEvent.message\n  // is \"The user's prompt message\" (@ampcode/plugin index.d.ts:1011-1012), so we\n  // PROJECT event.message into the bridge payload's prompt key (the prior version\n  // dropped it). Observe-only return surface — any deny/context decision is a no-op.\n  amp.on(\"agent.start\", async (event) => {\n    bridge(\"UserPromptSubmit\", {\n      prompt: (event && typeof event.message === \"string\" && event.message) || \"\",\n      sessionId: SESSION_ID,\n      projectDir: PROJECT_DIR,\n      raw: event,\n    });\n  });`);\n    }\n\n    if (has(\"PreToolUse\")) {\n      handlers.push(`  // PreToolUse → Amp's tool.call returns a decision union (ampcode.com/manual →\n  // Plugins → tool.call): { action: \"allow\" } to run, or { action:\n  // \"reject-and-continue\", message } to block and let the agent continue. The\n  // tool name is event.tool (verified); the input field is not byte-documented,\n  // so event.input is a best-effort hint for the connector's matcher (the matcher\n  // keys on the verified tool name). A deny/ask decision maps to reject-and-\n  // continue; everything else allows.\n  amp.on(\"tool.call\", async (event) => {\n    const payload = {\n      toolName: (event && event.tool) || \"\",\n      toolInput: (event && event.input) || {},\n      sessionId: SESSION_ID,\n      projectDir: PROJECT_DIR,\n    };\n    const res = bridge(\"PreToolUse\", payload);\n    if (res && (res.decision === \"deny\" || res.decision === \"ask\")) {\n      return {\n        action: \"reject-and-continue\",\n        message: res.reason || \"Blocked by ${ctx.connector.id}\",\n      };\n    }\n    return { action: \"allow\" };\n  });`);\n    }\n\n    if (has(\"PostToolUse\")) {\n      handlers.push(`  // PostToolUse → tool.result \"fires after a tool finishes and before the result\n  // is sent back to the model\" (ampcode.com/manual). The tool name is event.tool\n  // and the error signal is event.status === \"error\" (both verified). The host DOES\n  // carry the output: ToolResultEvent extends ToolResult.output (typed unknown —\n  // \"Tool output/result if available\", @ampcode/plugin index.d.ts:946-947,976), so\n  // we PROJECT event.output into the bridge payload's toolOutput (prior version\n  // dropped it). Replacement still observe-only (canModifyOutput:false) — the\n  // replacement OBJECT shape is undocumented, so we never return a guessed mutation.\n  amp.on(\"tool.result\", async (event) => {\n    bridge(\"PostToolUse\", {\n      toolName: (event && event.tool) || \"\",\n      toolOutput: event && event.output,\n      isError: !!(event && event.status === \"error\"),\n      sessionId: SESSION_ID,\n      projectDir: PROJECT_DIR,\n      raw: event,\n    });\n  });`);\n    }\n\n    if (has(\"Stop\")) {\n      handlers.push(`  // Stop → observe turn end. Amp's agent.end exposes no decision surface, so\n  // this is observe-only (a deny decision degrades to a no-op).\n  amp.on(\"agent.end\", async (event) => {\n    bridge(\"Stop\", { sessionId: SESSION_ID, projectDir: PROJECT_DIR, raw: event });\n  });`);\n    }\n\n    // NATIVE passthrough events: amp.on event names with no canonical analog,\n    // declared on platforms.amp.nativeHooks (independent of hookEvents, so they\n    // install even with hooks:false). Each bridges the NATIVE event name verbatim\n    // to the home-bin → runNativeHook dispatches it host-generically.\n    for (const ev of this.nativeHookEvents(ctx)) {\n      const key = JSON.stringify(ev);\n      handlers.push(`  // nativeHooks passthrough → ${ev}\n  amp.on(${key}, async (event) => {\n    bridge(${key}, { sessionId: SESSION_ID, projectDir: PROJECT_DIR, raw: event });\n  });`);\n    }\n\n    const factory = `\nexport default function plugin(amp: PluginAPI) {\n${handlers.join(\"\\n\\n\")}\n}\n`;\n\n    return header + factory;\n  }\n\n  // ── Runtime: parse OUR bridge payload → normalized event ─────────────────\n\n  /**\n   * `raw` is the payload OUR generated plugin posts (NOT a host-native shape):\n   *   { toolName?, toolInput?, toolOutput?, isError?, prompt?, sessionId?, projectDir? }\n   * so this maps straight through.\n   */\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as AmpBridgePayload;\n    const base = {\n      hostPlatform: HOST,\n      connectorId: \"\",\n      sessionId: typeof input.sessionId === \"string\" ? input.sessionId : \"\",\n      raw,\n      ...(typeof input.projectDir === \"string\"\n        ? { projectDir: input.projectDir }\n        : {}),\n    } as const;\n\n    switch (event) {\n      case \"PreToolUse\": {\n        const ev: PreToolUseEvent = {\n          ...base,\n          toolName: input.toolName ?? \"\",\n          toolInput: input.toolInput ?? {},\n        };\n        return ev;\n      }\n      case \"PostToolUse\": {\n        // ToolResultEvent.output is typed `unknown` by the host (@ampcode/plugin\n        // index.d.ts:947), so the bridge can forward a string OR a structured value.\n        // Accept both: pass strings through, JSON-stringify other non-nullish\n        // values (the old `typeof === \"string\"` guard silently dropped the latter).\n        const out = coerceToolOutput(input.toolOutput);\n        const ev: PostToolUseEvent = {\n          ...base,\n          toolName: input.toolName ?? \"\",\n          toolInput: input.toolInput ?? {},\n          ...(out !== undefined ? { toolOutput: out } : {}),\n          ...(typeof input.isError === \"boolean\"\n            ? { isError: input.isError }\n            : {}),\n        };\n        return ev;\n      }\n      case \"UserPromptSubmit\": {\n        const ev: UserPromptSubmitEvent = {\n          ...base,\n          prompt: typeof input.prompt === \"string\" ? input.prompt : \"\",\n        };\n        return ev;\n      }\n      case \"Stop\": {\n        const ev: StopEvent = { ...base };\n        return ev;\n      }\n      case \"SessionStart\": {\n        const ev: SessionStartEvent = { ...base, source: \"startup\" };\n        return ev;\n      }\n      default:\n        // Other canonical events are not surfaced by Amp; treat as a\n        // session-start-shaped no-op so the dispatcher fails open gracefully.\n        return { ...base, source: \"startup\" } satisfies SessionStartEvent;\n    }\n  }\n\n  // ── Runtime: normalized response → reply the generated bridge parses ─────\n\n  /**\n   * Unlike json-stdio hosts (whose reply is the host's NATIVE control payload),\n   * OUR generated bridge consumes this stdout directly. So the reply body is the\n   * NORMALIZED HookResponse itself — the bridge JSON.parses it and, for tool.call,\n   * maps a deny/ask decision → { action: \"reject-and-continue\" } (else allow).\n   * Other events are observe-only, so their reply is ignored by the handler.\n   */\n  formatReply(_event: HookEventName, response: HookResponse): HookReply {\n    return {\n      exitCode: 0,\n      stdout: JSON.stringify(response ?? { decision: \"allow\" }),\n    };\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const settingsPath = this.getServerConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    return [\n      {\n        name: `${this.name}: settings.json present`,\n        check: () =>\n          existsSync(settingsPath)\n            ? { status: \"OK\", detail: settingsPath }\n            : { status: \"FAIL\", detail: `not found: ${settingsPath}` },\n      },\n      {\n        name: `${this.name}: server entry registered`,\n        check: () => {\n          // Only assert what the connector declares: a server-less connector\n          // never writes a server entry, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readJson<{ [k: string]: Record<string, unknown> }>(settingsPath);\n          const bucket = cfg?.[MCP_ROOT_KEY];\n          if (!cfg || !bucket) {\n            return { status: \"FAIL\", detail: `no \"${MCP_ROOT_KEY}\" in ${settingsPath}` };\n          }\n          return connectorId in bucket\n            ? { status: \"OK\", detail: `\"${MCP_ROOT_KEY}\".${connectorId} present` }\n            : {\n                status: \"FAIL\",\n                detail: `no \"${MCP_ROOT_KEY}\".${connectorId} in ${settingsPath}`,\n              };\n        },\n      },\n      {\n        name: `${this.name}: plugin module present`,\n        check: () => {\n          const hasHooks =\n            ctx.connector.hookEvents.length > 0 ||\n            this.nativeHookEvents(ctx).length > 0;\n          if (!hasHooks) return { status: \"OK\", detail: \"no hooks declared\" };\n          // Amp plugins are project-scoped; a user-scope install warn-skips the\n          // plugin, so its absence there is healthy.\n          if (ctx.scope !== \"project\") {\n            return {\n              status: \"OK\",\n              detail: \"amp plugins are project-scoped (user scope skipped)\",\n            };\n          }\n          const pluginPath = this.getHookConfigPath(ctx);\n          return existsSync(pluginPath)\n            ? { status: \"OK\", detail: pluginPath }\n            : { status: \"FAIL\", detail: `not found: ${pluginPath}` };\n        },\n      },\n    ];\n  }\n\n  /** Read a file, returning undefined on any error (idempotency compare). */\n}\n\n/**\n * Coerce Amp's `ToolResultEvent.output` (typed `unknown` upstream) into the\n * normalized event's `toolOutput: string`. Strings pass through; other\n * non-nullish values (objects / arrays / numbers) are JSON-stringified so a\n * structured tool result is no longer silently dropped. `undefined`/`null`\n * yields `undefined` (the key is omitted by the caller).\n */\nfunction coerceToolOutput(value: unknown): string | undefined {\n  if (typeof value === \"string\") return value;\n  if (value === undefined || value === null) return undefined;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\n/**\n * Amp native interpolation token: `${env:VAR}` → `${VAR}`.\n *\n * When the portable ref carried a default (`${env:VAR:-fallback}`), Amp's native\n * `${VAR}` token has no way to express it — so a bare native token would silently\n * DROP the default. Instead, resolve the default at install time: emit the live\n * value when VAR is set and non-empty, else the literal fallback. The native\n * token is only emitted when there is no default to preserve.\n */\nfunction ampEnvToken(name: string, def?: string): string {\n  if (def !== undefined) {\n    const v = process.env[name];\n    return v != null && v !== \"\" ? v : def;\n  }\n  return `\\${${name}}`;\n}\n\nexport const adapter = new AmpAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqEA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAmCrB,IAAM,OAAmB;AAKzB,IAAM,eAAe;AAQrB,IAAM,eAAuD;AAAA,EAC3D,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,MAAM;AACR;AA2BO,IAAM,aAAN,cAAyB,YAA+B;AAAA,EACpD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA;AAAA,IAGhB,YAAY;AAAA,IACZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA,IACZ,cAAc;AAAA;AAAA,IAEd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUd,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMf,iBAAiB;AAAA;AAAA,IAEjB,yBAAyB;AAAA;AAAA,IAEzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAI5B,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKhB,qBAAqB;AAAA,EACvB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,WAAW,KAAK;AAChD,UAAM,eAAe,KAAK,SAAS,eAAe;AAClD,UAAM,gBAAgB,KAAK,YAAY,MAAM;AAC7C,UAAM,kBAAkB,KAAK,eAAe,eAAe;AAE3D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,YAAY;AACpE,UAAM,mBAAmB,WAAW,aAAa,KAAK,WAAW,eAAe;AAChF,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,oBAAoB,CAAC,gBAAgB,YAAY;AAC/D,UAAM,aAAa,UAAU,YAAY,kBAAkB;AAE3D,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,qBAAqB,KAAK,QAAQ,UAAU,KAC5C,oBAAoB,YAAY,OAAO,eAAe;AAAA,MAC1D,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,MAAM,IAC3B,KAAK,QAAQ,GAAG,WAAW,KAAK;AAAA,EACtC;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,eAAe;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,KAAK,WAAW,GAAG,GAAG,GAAG,IAAI,UAAU,EAAE,KAAK;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAA6B;AAC9C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,QAAQ,SAAS,IACtC,KAAK,KAAK,aAAa,GAAG,GAAG,SAAS;AAAA,EAC5C;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,yCACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAGhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QACgC;AAChC,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAG1E,YAAMA,SAAwB,EAAE,SAAS,KAAK,QAAQ,OAAO,EAAE;AAC/D,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACjE,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,aAAOA;AAAA,IACT;AAGA,UAAM,QAAuB,EAAE,KAAK,KAAK,QAAQ,OAAO,OAAO,EAAE,EAAE;AACnE,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,UAAM,MAA8B,CAAC;AACrC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,EAAG,KAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;AACjE,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,QAAQ,OAAuB;AACrC,WAAO,eAAe,OAAO,WAAW;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,UAAU,KAA6B;AAC7C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,WAAW,QAAQ,IACxC,KAAK,QAAQ,GAAG,WAAW,UAAU,QAAQ;AAAA,EACnD;AAAA;AAAA,EAGQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,IAAI;AAAA,EACvC;AAAA,EAES,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,0BAA0B,CAAC;AAAA,IAClF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,KAAK,YAAY,KAAK,GAAG,IAAI,MAAM;AAAA,MAClF;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,YAAY,OAAyB;AAC3C,WAAO,cAAc,KAAK;AAAA,EAC5B;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,aAAa,KAAK,kBAAkB,GAAG;AAK7C,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QACE;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAMA,UAAM,oBAAoB,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU;AACnE,UAAM,eAAe,CAAC,qBAAqB,IAAI,UAAU,WAAW,SAAS;AAC7E,UAAM,YAAY,KAAK,iBAAiB,GAAG,EAAE,SAAS;AAEtD,QAAI,CAAC,gBAAgB,CAAC,WAAW;AAC/B,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,oBACJ,2BACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,KAAK,iBAAiB,GAAG;AACvC,UAAM,UAA0B,CAAC;AAEjC,eAAW,QAAQ,OAAO;AACxB,cAAQ;AAAA,QACN,KAAK;AAAA,UACH,KAAK;AAAA,UACL,KAAK;AAAA,UACL,IAAI;AAAA,UACJ,sBAAsB,KAAK,WAAW,GAAG,CAAC;AAAA,UAC1C,KAAK;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,eAAe,KAAqC;AAClD,UAAM,aAAa,KAAK,kBAAkB,GAAG;AAC7C,WAAO;AAAA,MACL,KAAK,kBAAkB,YAAY,IAAI,QAAQ,qBAAqB,8BAA8B;AAAA,IACpG;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAA6B;AAG9C,UAAM,eAAe,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU;AAC9D,UAAM,WAAW,eAAe,CAAC,IAAI,IAAI,UAAU;AACnD,UAAM,SAAS,SAAS,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,MAAS;AACnE,UAAM,cAAc,SAAS,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,MAAS;AACxE,UAAM,SAAS,KAAK,iBAAiB,GAAG;AACxC,UAAM,QAAkB,CAAC;AACzB,QAAI,OAAO,SAAS,EAAG,OAAM,KAAK,OAAO,KAAK,GAAG,CAAC;AAClD,QAAI,OAAO,SAAS,EAAG,OAAM,KAAK,WAAW,OAAO,KAAK,GAAG,CAAC,EAAE;AAC/D,UAAM,OAAO,MAAM,KAAK,IAAI,KAAK;AACjC,WAAO,YAAY,SAAS,IACxB,GAAG,IAAI,uBAAuB,YAAY,KAAK,GAAG,CAAC,KACnD;AAAA,EACN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,iBAAiB,KAA+B;AACtD,WAAO,OAAO,KAAK,IAAI,UAAU,UAAU,IAAI,GAAG,eAAe,CAAC,CAAC;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,iBAAiB,KAA4C;AAC3D,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,WAAW,KAAK,kBAAkB,GAAG;AAC3C,WAAO,CAAC,EAAE,MAAM,UAAU,YAAY,MAAM,CAAC;AAAA,EAC/C;AAAA;AAAA,EAGQ,kBAAkB,KAA6B;AAMrD,UAAM,eAAe,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU;AAC9D,UAAM,SAAS,eACX,CAAC,IACD,IAAI,UAAU,WAAW;AAAA,MACvB,CAAC,MAA0B,aAAa,CAAC,MAAM;AAAA,IACjD;AACJ,UAAM,MAAM,CAAC,MAAqB,OAAO,SAAS,CAAC;AAEnD,UAAM,SAAS;AAAA;AAAA;AAAA,6CAG0B,IAAI,UAAU,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,6CAKhB,IAAI,UAAU,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3D,oBAAoB;AAAA,MACpB,SAAS,IAAI;AAAA,MACb,aAAa,IAAI,UAAU;AAAA,MAC3B,UAAU;AAAA,MACV,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQE,UAAM,WAAqB,CAAC;AAE5B,QAAI,IAAI,cAAc,GAAG;AACvB,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOd;AAAA,IACF;AAEA,QAAI,IAAI,kBAAkB,GAAG;AAC3B,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYd;AAAA,IACF;AAEA,QAAI,IAAI,YAAY,GAAG;AACrB,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6CAkByB,IAAI,UAAU,EAAE;AAAA;AAAA;AAAA;AAAA,MAIvD;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,GAAG;AACtB,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBd;AAAA,IACF;AAEA,QAAI,IAAI,MAAM,GAAG;AACf,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA,MAId;AAAA,IACF;AAMA,eAAW,MAAM,KAAK,iBAAiB,GAAG,GAAG;AAC3C,YAAM,MAAM,KAAK,UAAU,EAAE;AAC7B,eAAS,KAAK,uCAAkC,EAAE;AAAA,WAC7C,GAAG;AAAA,aACD,GAAG;AAAA,MACV;AAAA,IACF;AAEA,UAAM,UAAU;AAAA;AAAA,EAElB,SAAS,KAAK,MAAM,CAAC;AAAA;AAAA;AAInB,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd,aAAa;AAAA,MACb,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,MACnE;AAAA,MACA,GAAI,OAAO,MAAM,eAAe,WAC5B,EAAE,YAAY,MAAM,WAAW,IAC/B,CAAC;AAAA,IACP;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,UAAU,MAAM,YAAY;AAAA,UAC5B,WAAW,MAAM,aAAa,CAAC;AAAA,QACjC;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAKlB,cAAM,MAAM,iBAAiB,MAAM,UAAU;AAC7C,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,UAAU,MAAM,YAAY;AAAA,UAC5B,WAAW,MAAM,aAAa,CAAC;AAAA,UAC/B,GAAI,QAAQ,SAAY,EAAE,YAAY,IAAI,IAAI,CAAC;AAAA,UAC/C,GAAI,OAAO,MAAM,YAAY,YACzB,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,oBAAoB;AACvB,cAAM,KAA4B;AAAA,UAChC,GAAG;AAAA,UACH,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,QAAQ;AACX,cAAM,KAAgB,EAAE,GAAG,KAAK;AAChC,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,KAAwB,EAAE,GAAG,MAAM,QAAQ,UAAU;AAC3D,eAAO;AAAA,MACT;AAAA,MACA;AAGE,eAAO,EAAE,GAAG,MAAM,QAAQ,UAAU;AAAA,IACxC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,YAAY,QAAuB,UAAmC;AACpE,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,KAAK,UAAU,YAAY,EAAE,UAAU,QAAQ,CAAC;AAAA,IAC1D;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,eAAe,KAAK,oBAAoB,GAAG;AACjD,UAAM,cAAc,IAAI,UAAU;AAClC,WAAO;AAAA,MACL;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,YAAY,IACnB,EAAE,QAAQ,MAAM,QAAQ,aAAa,IACrC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,YAAY,GAAG;AAAA,MAC/D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAGX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAmD,YAAY;AAChF,gBAAM,SAAS,MAAM,YAAY;AACjC,cAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,mBAAO,EAAE,QAAQ,QAAQ,QAAQ,OAAO,YAAY,QAAQ,YAAY,GAAG;AAAA,UAC7E;AACA,iBAAO,eAAe,SAClB,EAAE,QAAQ,MAAM,QAAQ,IAAI,YAAY,KAAK,WAAW,WAAW,IACnE;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,OAAO,YAAY,KAAK,WAAW,OAAO,YAAY;AAAA,UAChE;AAAA,QACN;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,gBAAM,WACJ,IAAI,UAAU,WAAW,SAAS,KAClC,KAAK,iBAAiB,GAAG,EAAE,SAAS;AACtC,cAAI,CAAC,SAAU,QAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAGlE,cAAI,IAAI,UAAU,WAAW;AAC3B,mBAAO;AAAA,cACL,QAAQ;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,UACF;AACA,gBAAM,aAAa,KAAK,kBAAkB,GAAG;AAC7C,iBAAO,WAAW,UAAU,IACxB,EAAE,QAAQ,MAAM,QAAQ,WAAW,IACnC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,UAAU,GAAG;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAGF;AASA,SAAS,iBAAiB,OAAoC;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAWA,SAAS,YAAY,MAAc,KAAsB;AACvD,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,QAAQ,IAAI,IAAI;AAC1B,WAAO,KAAK,QAAQ,MAAM,KAAK,IAAI;AAAA,EACrC;AACA,SAAO,MAAM,IAAI;AACnB;AAEO,IAAM,UAAU,IAAI,WAAW;AACtC,IAAO,cAAQ;","names":["entry"]}

package/dist/{antigravity-NWP2TUG6.js → antigravity-GF3RU42A.js}

@@ -3,16 +3,16 @@ import {
   AntigravityAdapter,
   adapter,
   antigravity_default
-} from "./chunk-ERV4TKRV.js";
+} from "./chunk-3Y23ZYYF.js";
 import "./chunk-H53QZQJI.js";
 import "./chunk-DBQMX75U.js";
-import "./chunk-A767JFHW.js";
+import "./chunk-RHML2NOB.js";
 import "./chunk-TO57WYBB.js";
-import "./chunk-ZY25RG4Y.js";
-import "./chunk-QY42WGBX.js";
+import "./chunk-ALVXORZM.js";
+import "./chunk-2HCJV6UO.js";
 export {
   AntigravityAdapter,
   adapter,
   antigravity_default as default
 };
-//# sourceMappingURL=antigravity-NWP2TUG6.js.map
+//# sourceMappingURL=antigravity-GF3RU42A.js.map

package/dist/{antigravity-cli-KPNLE7X4.js → antigravity-cli-OH27IFH5.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   AntigravityAdapter
-} from "./chunk-ERV4TKRV.js";
+} from "./chunk-3Y23ZYYF.js";
 import "./chunk-H53QZQJI.js";
 import "./chunk-DBQMX75U.js";
-import "./chunk-A767JFHW.js";
+import "./chunk-RHML2NOB.js";
 import "./chunk-TO57WYBB.js";
-import "./chunk-ZY25RG4Y.js";
-import "./chunk-QY42WGBX.js";
+import "./chunk-ALVXORZM.js";
+import "./chunk-2HCJV6UO.js";
 
 // src/adapters/antigravity-cli/index.ts
 import { existsSync } from "fs";
@@ -84,4 +84,4 @@ export {
   adapter,
   antigravity_cli_default as default
 };
-//# sourceMappingURL=antigravity-cli-KPNLE7X4.js.map
+//# sourceMappingURL=antigravity-cli-OH27IFH5.js.map