@ken-jo/agent-connector 0.4.67 → 0.4.75

package/dist/{chunk-RQCBBLTA.js → chunk-5LAFKXFM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   defineConnector
-} from "./chunk-UVBAH263.js";
+} from "./chunk-7ITLLYWB.js";
 import {
   assertNoSymlinkInPath,
   connectorDir,
@@ -181,4 +181,4 @@ export {
   connectorFromMeta,
   listRegisteredConnectors
 };
-//# sourceMappingURL=chunk-RQCBBLTA.js.map
+//# sourceMappingURL=chunk-5LAFKXFM.js.map

package/dist/{chunk-UVBAH263.js → chunk-7ITLLYWB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   REGISTERED_PLATFORM_IDS
-} from "./chunk-LS65GL2P.js";
+} from "./chunk-Q5LECKZL.js";
 import {
   CONFIG_PATCH_SEGMENT_RE,
   configPatchNamespaceViolation,
@@ -498,4 +498,4 @@ export {
   defineConfigPatch,
   defineNativeHook
 };
-//# sourceMappingURL=chunk-UVBAH263.js.map
+//# sourceMappingURL=chunk-7ITLLYWB.js.map

package/dist/{chunk-DBQMX75U.js → chunk-BEFVJ2OE.js}

@@ -27,10 +27,36 @@ function rewriteEnvRefs(input, render) {
     (_m, name, def) => render(name, def)
   );
 }
+function findUnsetEnvRefs(value, env = process.env) {
+  const seen = /* @__PURE__ */ new Set();
+  const order = [];
+  const scanString = (input) => {
+    const re = new RegExp(ENV_REF_RE.source, "g");
+    for (const m of input.matchAll(re)) {
+      const name = m[1];
+      const def = m[2];
+      const v = env[name];
+      if (v != null && v !== "") continue;
+      if (def !== void 0) continue;
+      if (!seen.has(name)) {
+        seen.add(name);
+        order.push(name);
+      }
+    }
+  };
+  const walk = (v) => {
+    if (typeof v === "string") scanString(v);
+    else if (Array.isArray(v)) v.forEach(walk);
+    else if (v && typeof v === "object") Object.values(v).forEach(walk);
+  };
+  walk(value);
+  return order;
+}
 
 export {
   resolveEnvRefs,
   resolveEnvRefsDeep,
-  rewriteEnvRefs
+  rewriteEnvRefs,
+  findUnsetEnvRefs
 };
-//# sourceMappingURL=chunk-DBQMX75U.js.map
+//# sourceMappingURL=chunk-BEFVJ2OE.js.map

package/dist/chunk-BEFVJ2OE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/interpolate.ts"],"sourcesContent":["/**\n * core/interpolate — universal ${env:VAR} interpolation.\n *\n * The developer writes one portable syntax in their connector config:\n *   \"${env:ACME_KEY}\"            → value of process.env.ACME_KEY\n *   \"${env:ACME_URL:-https://x}\" → value, or the default after \":-\" if unset/empty\n *\n * Two consumers:\n *   • resolveEnvRefs / resolveEnvRefsDeep — resolve to literals at INSTALL time,\n *     for hosts with NO native interpolation (e.g. Codex TOML).\n *   • rewriteEnvRefs — translate to a host's NATIVE interpolation token (e.g.\n *     Cursor/VS Code \"${env:VAR}\", Claude \"${VAR}\") so secrets are never baked\n *     into config files. Adapters choose which to use.\n */\n\n/** Matches ${env:NAME} and ${env:NAME:-default}. NAME is [A-Za-z_][A-Za-z0-9_]*. */\nexport const ENV_REF_RE = /\\$\\{env:([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\\}/g;\n\n/** Resolve every ${env:VAR} in `input` to a literal from `env`. */\nexport function resolveEnvRefs(\n  input: string,\n  env: NodeJS.ProcessEnv = process.env,\n): string {\n  return input.replace(ENV_REF_RE, (_m, name: string, def?: string) => {\n    const v = env[name];\n    if (v != null && v !== \"\") return v;\n    return def ?? \"\";\n  });\n}\n\n/** Recursively resolve ${env:VAR} in all strings of a JSON-ish value. */\nexport function resolveEnvRefsDeep<T>(value: T, env: NodeJS.ProcessEnv = process.env): T {\n  if (typeof value === \"string\") return resolveEnvRefs(value, env) as unknown as T;\n  if (Array.isArray(value)) {\n    return value.map((v) => resolveEnvRefsDeep(v, env)) as unknown as T;\n  }\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(value)) out[k] = resolveEnvRefsDeep(v, env);\n    return out as T;\n  }\n  return value;\n}\n\n/**\n * Translate every ${env:VAR(:-default)} via `render` into a host-native token.\n * The renderer receives the var name and optional default and returns the\n * replacement string (e.g. `(name) => \"${\" + name + \"}\"` for Claude).\n */\nexport function rewriteEnvRefs(\n  input: string,\n  render: (name: string, def?: string) => string,\n): string {\n  return input.replace(ENV_REF_RE, (_m, name: string, def?: string) =>\n    render(name, def),\n  );\n}\n\n/** True if the string contains at least one ${env:...} reference. */\nexport function hasEnvRef(input: string): boolean {\n  ENV_REF_RE.lastIndex = 0;\n  return ENV_REF_RE.test(input);\n}\n\n/**\n * Names of every ${env:VAR} reference in a JSON-ish value that\n * {@link resolveEnvRefsDeep} would bake to an EMPTY literal — i.e. the var is\n * unset/empty in `env` AND the reference carries no `:-default`. These are the\n * silent-empty-secret bakes on hosts WITHOUT native interpolation: the install\n * succeeds but writes `\"\"` where a secret was meant, surfacing only as a\n * runtime auth failure inside the MCP server. Returns deduped names in\n * first-seen order; uses the SAME unset/default semantics as resolveEnvRefs so\n * the two can never disagree. A ref WITH a `:-default` is intentional and never\n * reported (even when the default itself is empty — the dev opted into \"\").\n */\nexport function findUnsetEnvRefs<T>(\n  value: T,\n  env: NodeJS.ProcessEnv = process.env,\n): string[] {\n  const seen = new Set<string>();\n  const order: string[] = [];\n  const scanString = (input: string): void => {\n    // A FRESH regex per scan — the shared ENV_REF_RE carries /g lastIndex state\n    // (hasEnvRef / matchAll would otherwise start mid-string and miss matches).\n    const re = new RegExp(ENV_REF_RE.source, \"g\");\n    for (const m of input.matchAll(re)) {\n      const name = m[1] as string;\n      const def = m[2] as string | undefined;\n      // Mirrors resolveEnvRefs: a present, non-empty value resolves to itself;\n      // otherwise the default is used (no bake of \"\"). Only an unset/empty var\n      // WITHOUT a default bakes \"\" — the case we report.\n      const v = env[name];\n      if (v != null && v !== \"\") continue;\n      if (def !== undefined) continue;\n      if (!seen.has(name)) {\n        seen.add(name);\n        order.push(name);\n      }\n    }\n  };\n  const walk = (v: unknown): void => {\n    if (typeof v === \"string\") scanString(v);\n    else if (Array.isArray(v)) v.forEach(walk);\n    else if (v && typeof v === \"object\") Object.values(v).forEach(walk);\n  };\n  walk(value);\n  return order;\n}\n"],"mappings":";;;AAgBO,IAAM,aAAa;AAGnB,SAAS,eACd,OACA,MAAyB,QAAQ,KACzB;AACR,SAAO,MAAM,QAAQ,YAAY,CAAC,IAAI,MAAc,QAAiB;AACnE,UAAM,IAAI,IAAI,IAAI;AAClB,QAAI,KAAK,QAAQ,MAAM,GAAI,QAAO;AAClC,WAAO,OAAO;AAAA,EAChB,CAAC;AACH;AAGO,SAAS,mBAAsB,OAAU,MAAyB,QAAQ,KAAQ;AACvF,MAAI,OAAO,UAAU,SAAU,QAAO,eAAe,OAAO,GAAG;AAC/D,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAAA,EACpD;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,EAAG,KAAI,CAAC,IAAI,mBAAmB,GAAG,GAAG;AAC9E,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAOO,SAAS,eACd,OACA,QACQ;AACR,SAAO,MAAM;AAAA,IAAQ;AAAA,IAAY,CAAC,IAAI,MAAc,QAClD,OAAO,MAAM,GAAG;AAAA,EAClB;AACF;AAmBO,SAAS,iBACd,OACA,MAAyB,QAAQ,KACvB;AACV,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,QAAkB,CAAC;AACzB,QAAM,aAAa,CAAC,UAAwB;AAG1C,UAAM,KAAK,IAAI,OAAO,WAAW,QAAQ,GAAG;AAC5C,eAAW,KAAK,MAAM,SAAS,EAAE,GAAG;AAClC,YAAM,OAAO,EAAE,CAAC;AAChB,YAAM,MAAM,EAAE,CAAC;AAIf,YAAM,IAAI,IAAI,IAAI;AAClB,UAAI,KAAK,QAAQ,MAAM,GAAI;AAC3B,UAAI,QAAQ,OAAW;AACvB,UAAI,CAAC,KAAK,IAAI,IAAI,GAAG;AACnB,aAAK,IAAI,IAAI;AACb,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,CAAC,MAAqB;AACjC,QAAI,OAAO,MAAM,SAAU,YAAW,CAAC;AAAA,aAC9B,MAAM,QAAQ,CAAC,EAAG,GAAE,QAAQ,IAAI;AAAA,aAChC,KAAK,OAAO,MAAM,SAAU,QAAO,OAAO,CAAC,EAAE,QAAQ,IAAI;AAAA,EACpE;AACA,OAAK,KAAK;AACV,SAAO;AACT;","names":[]}

package/dist/{chunk-ZSMGHEB5.js → chunk-DI6OWKH2.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-H53QZQJI.js";
 import {
   rewriteEnvRefs
-} from "./chunk-DBQMX75U.js";
+} from "./chunk-BEFVJ2OE.js";
 import {
   BaseAdapter,
   renderSkillMd
-} from "./chunk-RHML2NOB.js";
+} from "./chunk-NUGMVVV2.js";
 import {
   buildWrappedStdio,
   isHomeBinHookCommand
@@ -80,6 +80,10 @@ var CursorAdapter = class extends BaseAdapter {
     canModifyOutput: false,
     canInjectSessionContext: true,
     transports: ["stdio", "http"],
+    // Server env/url use Cursor's NATIVE ${env:VAR} interpolation (rewriteEnvRefs)
+    // — the token survives into mcp.json, never a baked literal — so the
+    // installer's unset-env-ref bake warn does not apply here.
+    nativeServerEnvInterpolation: true,
     // Content surfaces: Cursor supports all three (commands, skills, subagents).
     supportsCommands: true,
     supportsSkills: true,
@@ -646,4 +650,4 @@ export {
   adapter,
   cursor_default
 };
-//# sourceMappingURL=chunk-ZSMGHEB5.js.map
+//# sourceMappingURL=chunk-DI6OWKH2.js.map

package/dist/chunk-DI6OWKH2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/cursor/index.ts"],"sourcesContent":["/**\n * adapters/cursor — Cursor platform adapter for agent-connector.\n *\n * Generalized from context-mode's proven Cursor adapter: the served identity is\n * now `ctx.connector` (not a hardcoded \"context-mode\"), and every hook command\n * points at the single stable home binary (the shared hook-merge engine builds\n * the command) so one framework update propagates everywhere.\n *\n * Cursor is a json-stdio host:\n *   - MCP servers: user scope → ~/.cursor/mcp.json (\"mcpServers\"); project scope\n *     → <projectDir>/.cursor/mcp.json (\"mcpServers\").\n *   - Hooks: <configDir>/hooks.json with shape `{ version, hooks: { <cursorEvent>:\n *     [ { command, matcher? } ] } }`. Unlike Claude, each entry is a FLAT command\n *     object (no `{ matcher, hooks:[...] }` wrapper).\n *   - Reply: a JSON object on stdout (exit 0). deny/ask carry `permission` +\n *     `user_message`; modify carries `updated_input`; context injects via\n *     `agent_message` (PreToolUse) or `additional_context` (Post/SessionStart).\n *\n * Cursor supports its own `${env:VAR}` native interpolation, so env/header/url\n * values are rewritten to that native token rather than baked into the file.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter, type HookMergeDescriptor } from \"../base.js\";\nimport type { Adapter, HookReply, InstallContext, NormalizedEvent } from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  CommandDef,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  PostToolUseEvent,\n  PostToolUseFailureEvent,\n  PreCompactEvent,\n  PreToolUseEvent,\n  ServerDef,\n  SessionEndEvent,\n  SessionStartEvent,\n  StopEvent,\n  SubagentDef,\n  SubagentStartEvent,\n  SubagentStopEvent,\n  Transport,\n  UserPromptSubmitEvent,\n} from \"../../core/types.js\";\nimport { rewriteEnvRefs } from \"../../core/interpolate.js\";\nimport {\n  buildWrappedStdio,\n  isHomeBinHookCommand,\n} from \"../../core/spawn.js\";\nimport { renderSkillMd } from \"../claude-code/render.js\";\nimport { normalizeSessionSource } from \"../claude-code/wire.js\";\n\nconst HOST: PlatformId = \"cursor\";\nconst MCP_ROOT_KEY = \"mcpServers\";\n\n/**\n * Native hooks.json version Cursor expects. Exported as the SINGLE source of\n * truth for Cursor's hooks-file version, shared with the `cursor-plugin`\n * package emitter so the live install + the packaged bundle can never stamp\n * different versions (see core/package-formats/cursor.ts).\n */\nexport const CURSOR_HOOKS_VERSION = 1;\n\n/**\n * Cursor-native hook event names, in the lower-camel form Cursor reads from\n * hooks.json. The first four are the events the proven context-mode adapter\n * registers; postToolUseFailure / subagentStart / subagentStop are Cursor's\n * documented \"Subagent (Task tool) lifecycle\" + tool-failure hooks.\n */\nconst CURSOR_EVENT = {\n  PreToolUse: \"preToolUse\",\n  PostToolUse: \"postToolUse\",\n  SessionStart: \"sessionStart\",\n  Stop: \"stop\",\n  PostToolUseFailure: \"postToolUseFailure\",\n  SubagentStart: \"subagentStart\",\n  SubagentStop: \"subagentStop\",\n  // Lifecycle/prompt events Cursor 1.7+ documents (cursor.com/docs/hooks):\n  // sessionEnd is fire-and-forget; preCompact is observational (cannot block);\n  // beforeSubmitPrompt fires before a prompt is sent and CAN prevent submission\n  // (Cursor itself matches beforeSubmitPrompt against the value \"UserPromptSubmit\").\n  SessionEnd: \"sessionEnd\",\n  PreCompact: \"preCompact\",\n  UserPromptSubmit: \"beforeSubmitPrompt\",\n} as const;\n\n/**\n * Map our normalized event names to Cursor's native hook event names. Only the\n * events Cursor actually supports are present; everything else has no Cursor\n * equivalent and is reported as a skip/warn at install time.\n *\n * PermissionRequest is deliberately ABSENT: Cursor has no permission-dialog\n * event — its permission gate is the OUTPUT field `permission: \"allow\"|\"deny\"|\n * \"ask\"` of the before* hooks (beforeShellExecution / beforeMCPExecution /\n * beforeReadFile / preToolUse), not an observable event. Install reports the\n * standard skip-warn for it.\n *\n * Exported as the SINGLE source of truth for canonical→Cursor-native event\n * mapping, shared with the `cursor-plugin` package emitter (see\n * core/package-formats/cursor.ts) so the packaged bundle's hooks.json keys can\n * never silently diverge from the live install adapter's.\n */\nexport const CURSOR_EVENT_MAP: Partial<Record<HookEventName, string>> = {\n  PreToolUse: CURSOR_EVENT.PreToolUse,\n  PostToolUse: CURSOR_EVENT.PostToolUse,\n  SessionStart: CURSOR_EVENT.SessionStart,\n  Stop: CURSOR_EVENT.Stop,\n  PostToolUseFailure: CURSOR_EVENT.PostToolUseFailure,\n  SubagentStart: CURSOR_EVENT.SubagentStart,\n  SubagentStop: CURSOR_EVENT.SubagentStop,\n  SessionEnd: CURSOR_EVENT.SessionEnd,\n  PreCompact: CURSOR_EVENT.PreCompact,\n  UserPromptSubmit: CURSOR_EVENT.UserPromptSubmit,\n};\n\n/** A single Cursor native hook entry — a flat command object. */\ninterface CursorHookEntry {\n  command: string;\n  matcher?: string;\n}\n\n/** Native MCP server entry shapes Cursor accepts under `mcpServers`. */\ninterface CursorStdioServer {\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n  cwd?: string;\n}\ninterface CursorHttpServer {\n  url: string;\n  headers?: Record<string, string>;\n}\n\n/** Raw Cursor hook stdin payload (snake_case wire fields). */\ninterface CursorWireInput {\n  connector?: unknown;\n  tool_name?: string;\n  tool_input?: Record<string, unknown>;\n  tool_output?: string;\n  error_message?: string;\n  cwd?: string;\n  workspace_roots?: string[];\n  conversation_id?: string;\n  session_id?: string;\n  generation_id?: string;\n  trigger?: string;\n  status?: string;\n  loop_count?: number;\n  stop_hook_active?: boolean;\n\n  // sessionStart — Cursor's stdin is EXACTLY { session_id, is_background_agent,\n  // composer_mode } (cursor.com/docs/hooks ~1278-1297): there is NO source/trigger\n  // start-source discriminator. composer_mode is the editor MODE (agent|ask|edit),\n  // NOT our normalized SessionStart.source enum (startup|compact|resume|clear), so\n  // it does not map; surfaced here only so the host shape is documented (no\n  // normalized field exists for either — see core/types.ts SessionStartEvent).\n  is_background_agent?: boolean;\n  composer_mode?: string;\n\n  // beforeSubmitPrompt (UserPromptSubmit) — the submitted prompt text.\n  // sessionEnd — the documented end reason. Both field names are taken\n  // verbatim from cursor.com/docs/hooks (snake_case wire).\n  prompt?: string;\n  reason?: string;\n\n  // postToolUseFailure — Cursor's existing error vocabulary is error_message;\n  // the Claude-compatible names are accepted defensively (unverified wire).\n  error?: string;\n  tool_use_id?: string;\n  is_interrupt?: boolean;\n  // postToolUse / postToolUseFailure carry a BARE `duration` (ms), not\n  // `duration_ms` (cursor.com/docs/hooks ~870,883,904,918). `duration_ms` is the\n  // distinct field on sessionEnd (~1315) and subagentStop (~973,994), kept below.\n  duration?: number;\n  duration_ms?: number;\n\n  // subagentStart / subagentStop (Task-tool lifecycle). Both name families are\n  // parsed defensively: agent_* (Claude-compatible) and subagent_* (Cursor-ish).\n  agent_id?: string;\n  agent_type?: string;\n  subagent_id?: string;\n  subagent_type?: string;\n  // subagentStop carries the subagent's output text under `summary`, NOT\n  // last_assistant_message (cursor.com/docs/hooks ~972,993). This is read into\n  // the normalized lastAssistantMessage.\n  summary?: string;\n}\n\nexport class CursorAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Cursor\";\n  readonly paradigm: HookParadigm = \"json-stdio\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\n    supportsMemory: true,\n    // Cursor natively supports pre/post tool-use, session start/end, prompt\n    // submission, context compaction, and stop (cursor.com/docs/hooks, v1.7+).\n    preToolUse: true,\n    postToolUse: true,\n    preCompact: true,\n    sessionStart: true,\n    sessionEnd: true,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // Newer events: Cursor has dedicated postToolUseFailure + subagentStart/\n    // subagentStop hooks. permissionRequest stays unset — Cursor's permission\n    // gate is an OUTPUT field of its before* hooks, not an observable event\n    // (see the EVENT_MAP note).\n    postToolUseFailure: true,\n    subagentStart: true,\n    subagentStop: true,\n    // Cursor's preToolUse can rewrite tool input (updated_input) but cannot\n    // rewrite already-emitted tool output.\n    canModifyArgs: true,\n    canModifyOutput: false,\n    canInjectSessionContext: true,\n    transports: [\"stdio\", \"http\"],\n    // Server env/url use Cursor's NATIVE ${env:VAR} interpolation (rewriteEnvRefs)\n    // — the token survives into mcp.json, never a baked literal — so the\n    // installer's unset-env-ref bake warn does not apply here.\n    nativeServerEnvInterpolation: true,\n    // Content surfaces: Cursor supports all three (commands, skills, subagents).\n    supportsCommands: true,\n    supportsSkills: true,\n    supportsSubagents: true,\n    // Native passthrough hooks: Cursor documents many granular hooks with NO\n    // canonical analog — beforeShellExecution / afterShellExecution /\n    // beforeMCPExecution / afterMCPExecution / beforeReadFile / afterFileEdit /\n    // beforeTabFileRead / afterTabFileEdit / workspaceOpen / afterAgentResponse /\n    // afterAgentThought (cursor.com/docs/hooks). They are\n    // host-specific (below the >=3-host core bar; see\n    // docs/research/host-specific-hook-events-design.md). A connector reaches them\n    // by declaring platforms[\"cursor\"].nativeHooks; installHooks writes those\n    // event-name keys verbatim into hooks.json, and the generic uninstall reverses\n    // them.\n    supportsNativeHooks: true,\n    // Cursor has a command-driven status line (`/statusline` → `statusLine` in\n    // ~/.cursor/cli-config.json, GLOBAL scope only) per the Cursor changelog, but\n    // the config-key shape + the Claude-parity stdin payload are sourced from a\n    // community tool (agent-status-pills), not first-party Cursor docs — payload\n    // field names unverified. Deferred pending a live cursor-agent capture; not a\n    // permanent gap; user-scope only when wired.\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".cursor\");\n    const userMcp = join(userDir, \"mcp.json\");\n    const userHooks = join(userDir, \"hooks.json\");\n    const projectDirCursor = join(projectDir, \".cursor\");\n    const installed =\n      existsSync(userDir) ||\n      existsSync(userMcp) ||\n      existsSync(userHooks) ||\n      existsSync(projectDirCursor);\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath: userMcp,\n      scope: \"user\",\n      reason: installed\n        ? `found Cursor config under ${userDir}`\n        : `no Cursor config at ${userDir}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".cursor\")\n      : join(homedir(), \".cursor\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"mcp.json\");\n  }\n\n  getHookConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"hooks.json\");\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for cursor\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Cursor's native mcpServers entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): CursorStdioServer | CursorHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      const entry: CursorStdioServer = { command: this.rewrite(command) };\n      if (args.length > 0) entry.args = args.map((a) => this.rewrite(a));\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      if (server.cwd) entry.cwd = this.rewrite(server.cwd);\n      return entry;\n    }\n\n    // http (and any other remote transport we surface) — Cursor registers a URL.\n    const entry: CursorHttpServer = { url: this.rewrite(server.url ?? \"\") };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Cursor supports its own `${env:VAR}` native\n   * interpolation, so translate `${env:VAR}` refs to that native token rather\n   * than baking secrets into the file. Literals pass through unchanged.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    const out: Record<string, string> = {};\n    for (const [k, v] of Object.entries(env)) out[k] = this.rewrite(v);\n    return out;\n  }\n\n  /** Translate `${env:VAR(:-default)}` to Cursor's native `${env:VAR}` token. */\n  private rewrite(value: string): string {\n    return rewriteEnvRefs(value, cursorEnvToken);\n  }\n\n  // ── Hook install / uninstall ─────────────────────────────────────────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST];\n\n    // `hooks: false` disables only the NORMALIZED events. nativeHooks is a\n    // sibling, cursor-scoped declaration on the same override and installs\n    // regardless.\n    const normalizedEvents = override?.hooks === false ? [] : connector.hookEvents;\n    const nativeHooks = override?.nativeHooks ?? {};\n    const nativeEvents = Object.keys(nativeHooks);\n\n    if (normalizedEvents.length === 0 && nativeEvents.length === 0) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: override?.hooks === false ? \"hooks disabled for cursor\" : \"connector declares no hooks\",\n        },\n      ];\n    }\n\n    // Normalized events go through the engine's mapEvent/warn path; native\n    // event-name keys ride the separate `native` pass (verbatim keys, EXACT\n    // command, the `(native)` detail) — see the descriptor + base.upsertHookEntries.\n    const pending = normalizedEvents.map((event) => ({\n      event,\n      matcher: connector.hooks[event]?.matcher ?? \"\",\n    }));\n    const native = nativeEvents.map((event) => ({\n      event,\n      matcher: nativeHooks[event]?.matcher ?? \"\",\n    }));\n    return this.upsertHookEntries(\n      ctx,\n      this.getHookConfigPath(ctx),\n      pending,\n      this.hookDescriptor(ctx),\n      native,\n    );\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    return this.removeHookEntries(ctx, this.getHookConfigPath(ctx), this.hookDescriptor(ctx));\n  }\n\n  /**\n   * Cursor's hook-merge descriptor (FLAT shape `{ command, matcher? }`):\n   *  - mapEvent renames canonical → Cursor's lower-camel native key\n   *    (CURSOR_EVENT_MAP); an unmapped event warn-skips (no Cursor equivalent).\n   *  - renderEntry omits the `matcher` key when the matcher is falsy — this\n   *    `{command}` vs `{command,matcher}` distinction is load-bearing on-disk\n   *    bytes (Cursor's flat entry shape), reproduced exactly here.\n   *  - install find is connector-generic (ANY of our commands at the flat\n   *    `entry.command`); uninstall drops whole owned entries (flat — NO\n   *    stripInner). The version stamp is install-only via onMutate.\n   *  - the native pass uses EXACT-command ownership so a native key coinciding\n   *    with a normalized event's mapped key adds a SECOND distinct command\n   *    rather than clobbering the normalized entry.\n   */\n  private hookDescriptor(ctx: InstallContext): HookMergeDescriptor<CursorHookEntry> {\n    return {\n      mapEvent: (e) => CURSOR_EVENT_MAP[e as HookEventName],\n      unmappedWarnDetail: (e) => `${e} has no Cursor hook equivalent — skipped`,\n      renderEntry: (_event, matcher, command) =>\n        matcher ? { command, matcher } : { command },\n      entryOwnsCommand: (entry, _command) => this.isOurCommand(entry.command, ctx),\n      ownsEntryForRemove: (c) => (entry) => this.isOurCommand(entry.command, c),\n      skipDetail: (e) => `hooks.${e} already registered`,\n      removeDetail: (e, n) => `hooks.${e} (${n})`,\n      absentDetail: \"no hooks section present\",\n      noMatchDetail: \"no matching hook entries\",\n      onMutate: (file) => {\n        (file as { version?: number }).version = CURSOR_HOOKS_VERSION;\n      },\n      nativeOwnsCommand: (entry, command) => entry.command === command,\n      nativeSkipDetail: (e) => `hooks.${e} (native) already registered`,\n      nativeMutateDetail: (e) => `hooks.${e} (native)`,\n    };\n  }\n\n  /** True when a hook command references our home binary AND this connector id\n   *  (anchored so a shared-prefix id can't collide — see isHomeBinHookCommand). */\n  private isOurCommand(command: string | undefined, ctx: InstallContext): boolean {\n    return isHomeBinHookCommand(command, ctx.homeBinPath, ctx.connector.id);\n  }\n\n  // ── Content surfaces: commands / skills / subagents ──────────────────────\n  // CONTENT-ONLY: pure native-file writers under <configDir>/{commands,skills,\n  // agents}. No runtime dispatch, no home-bin pointer, no telemetry wrap. Each\n  // method is idempotent (byte-identical → skip) via BaseAdapter.writeContentFile\n  // and reversible via removeContentFile. Honors platforms[\"cursor\"] per-surface\n  // false to skip. Cursor commands are BODY-ONLY markdown (no frontmatter);\n  // skills are the uniform <name>/SKILL.md + resources; subagents are md+fm.\n\n  private commandsDir(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"commands\");\n  }\n  private skillsDir(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"skills\");\n  }\n  private agentsDir(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"agents\");\n  }\n\n  /** Native command file path: <configDir>/commands/<name>.md. */\n  private commandPath(ctx: InstallContext, name: string): string {\n    return join(this.commandsDir(ctx), `${name}.md`);\n  }\n  /** Native skill dir: <configDir>/skills/<name>. */\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.skillsDir(ctx), name);\n  }\n  /** Native subagent file path: <configDir>/agents/<name>.md. */\n  private subagentPath(ctx: InstallContext, name: string): string {\n    return join(this.agentsDir(ctx), `${name}.md`);\n  }\n\n  // ── Commands ──────────────────────────────────────────────────────────────\n\n  override installCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.commands === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"commands disabled for cursor\" }];\n    }\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.writeContentFile(\n        this.commandPath(ctx, cmd.name),\n        this.renderCommand(cmd),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallCommands(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.commands.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\n    }\n    return connector.commands.map((cmd) =>\n      this.removeContentFile(this.commandPath(ctx, cmd.name), ctx.dryRun),\n    );\n  }\n\n  /**\n   * Render a Cursor command: BODY-ONLY markdown (no frontmatter). Cursor reads\n   * the file as the command prompt verbatim. We prepend the one-line description\n   * as an HTML comment header when present so authoring intent survives the\n   * round-trip without leaking into the rendered prompt. A description containing\n   * \"-->\" would prematurely CLOSE the HTML comment and leak the remainder into\n   * the prompt, so we neutralize that sequence before embedding it.\n   */\n  private renderCommand(cmd: CommandDef): string {\n    if (!cmd.description) return `${cmd.prompt}\\n`;\n    // Break any literal comment-close so it cannot terminate our header early.\n    const safe = cmd.description.replace(/--+>/g, (m) => m.replace(/>/g, \"&gt;\"));\n    return `<!-- ${safe} -->\\n\\n${cmd.prompt}\\n`;\n  }\n\n  // ── Skills ────────────────────────────────────────────────────────────────\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for cursor\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), renderSkillMd(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  // ── Subagents ───────────────────────────────────────────────────────────────\n\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.subagents === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for cursor\" }];\n    }\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.writeContentFile(\n        this.subagentPath(ctx, agent.name),\n        this.renderSubagent(agent),\n        ctx.dryRun,\n      ),\n    );\n  }\n\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.subagents.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\n    }\n    return connector.subagents.map((agent) =>\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\n    );\n  }\n\n  /** Render a Cursor subagent to md+frontmatter (name, description, model, readonly) + prompt body. */\n  private renderSubagent(agent: SubagentDef): string {\n    const frontmatter: Record<string, unknown> = {\n      name: agent.name,\n      description: agent.description,\n    };\n    if (agent.model !== undefined) frontmatter.model = agent.model;\n    if (agent.readonly !== undefined) frontmatter.readonly = agent.readonly;\n    if (agent.extra) Object.assign(frontmatter, agent.extra);\n    return this.renderFrontmatterMd(frontmatter, agent.prompt);\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const mcpPath = this.getServerConfigPath(ctx);\n    const hooksPath = this.getHookConfigPath(ctx);\n    const checks: HealthCheck[] = [\n      {\n        name: `${this.name}: mcp.json present`,\n        check: () =>\n          existsSync(mcpPath)\n            ? { status: \"OK\", detail: mcpPath }\n            : { status: \"FAIL\", detail: `not found: ${mcpPath}` },\n      },\n      {\n        name: `${this.name}: hooks.json present`,\n        check: () => {\n          // Same \"only assert what the connector declares\" rule as the\n          // content-surface checks below: a hookless connector never writes\n          // hooks.json, so its absence is healthy, not a failure.\n          if (ctx.connector.hookEvents.length === 0) {\n            return { status: \"OK\", detail: \"no hooks declared\" };\n          }\n          return existsSync(hooksPath)\n            ? { status: \"OK\", detail: hooksPath }\n            : { status: \"FAIL\", detail: `not found: ${hooksPath}` };\n        },\n      },\n    ];\n\n    // Content-surface checks: only assert presence of the files this connector\n    // declares (skip silently for surfaces it never asked for).\n    for (const cmd of ctx.connector.commands) {\n      const p = this.commandPath(ctx, cmd.name);\n      checks.push({\n        name: `${this.name}: command ${cmd.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const skill of ctx.connector.skills) {\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\n      checks.push({\n        name: `${this.name}: skill ${skill.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    for (const agent of ctx.connector.subagents) {\n      const p = this.subagentPath(ctx, agent.name);\n      checks.push({\n        name: `${this.name}: subagent ${agent.name} present`,\n        check: () =>\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\n      });\n    }\n    return checks;\n  }\n\n  // ── Runtime: parse Cursor stdin JSON → normalized event ──────────────────\n\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as CursorWireInput;\n    const connectorId = typeof input.connector === \"string\" ? input.connector : \"\";\n    const sessionId = extractSessionId(input);\n    const projectDir = this.getProjectDir(input);\n\n    const base = {\n      hostPlatform: HOST,\n      connectorId,\n      sessionId,\n      raw,\n      ...(projectDir !== undefined ? { projectDir } : {}),\n    } as const;\n\n    switch (event) {\n      case \"PreToolUse\": {\n        const ev: PreToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n        };\n        return ev;\n      }\n      case \"PostToolUse\": {\n        const toolOutput = input.tool_output ?? input.error_message;\n        const ev: PostToolUseEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          ...(toolOutput !== undefined ? { toolOutput } : {}),\n          ...(input.error_message ? { isError: true } : {}),\n        };\n        return ev;\n      }\n      case \"SessionStart\": {\n        // Cursor's sessionStart stdin is exactly { session_id, is_background_agent,\n        // composer_mode } — there is NO source/trigger start-source discriminator\n        // (cursor.com/docs/hooks ~1278-1297). composer_mode is the editor MODE\n        // (agent|ask|edit), a different concept from our normalized source enum\n        // (startup|compact|resume|clear), so it does NOT map. With no discriminator\n        // available, the normalized source stays at its 'startup' default (via\n        // normalizeSessionSource(undefined)). is_background_agent / composer_mode\n        // ride along on base.raw; there is no normalized field for either.\n        const ev: SessionStartEvent = {\n          ...base,\n          source: normalizeSessionSource(undefined),\n        };\n        return ev;\n      }\n      case \"Stop\": {\n        const ev: StopEvent = {\n          ...base,\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SessionEnd\": {\n        // Cursor sessionEnd: { session_id, reason, duration_ms, ... }. session_id\n        // is already folded into base.sessionId via extractSessionId; only the\n        // documented `reason` enum maps onto the normalized SessionEnd shape.\n        const ev: SessionEndEvent = {\n          ...base,\n          ...(typeof input.reason === \"string\" ? { reason: input.reason } : {}),\n        };\n        return ev;\n      }\n      case \"UserPromptSubmit\": {\n        // Cursor beforeSubmitPrompt: { prompt, attachments }. attachments has no\n        // normalized field and is preserved via base.raw; only `prompt` maps.\n        const ev: UserPromptSubmitEvent = {\n          ...base,\n          prompt: typeof input.prompt === \"string\" ? input.prompt : \"\",\n        };\n        return ev;\n      }\n      case \"PreCompact\": {\n        // Cursor preCompact: { trigger: \"auto\"|\"manual\", context_*… }. Only the\n        // documented `trigger` enum maps onto the normalized PreCompact shape.\n        const ev: PreCompactEvent = {\n          ...base,\n          ...(input.trigger === \"auto\" || input.trigger === \"manual\"\n            ? { trigger: input.trigger }\n            : {}),\n        };\n        return ev;\n      }\n      case \"PostToolUseFailure\": {\n        // Cursor's established error field is error_message; fall back to the\n        // Claude-compatible `error` defensively.\n        const error = input.error_message ?? input.error ?? \"\";\n        const ev: PostToolUseFailureEvent = {\n          ...base,\n          toolName: input.tool_name ?? \"\",\n          toolInput: input.tool_input ?? {},\n          error,\n          ...(typeof input.tool_use_id === \"string\"\n            ? { toolUseId: input.tool_use_id }\n            : {}),\n          ...(typeof input.is_interrupt === \"boolean\"\n            ? { isInterrupt: input.is_interrupt }\n            : {}),\n          // postToolUseFailure reports a BARE `duration` (ms), not `duration_ms`\n          // (cursor.com/docs/hooks ~904,918). duration_ms only exists on\n          // sessionEnd/subagentStop.\n          ...(typeof input.duration === \"number\"\n            ? { durationMs: input.duration }\n            : {}),\n        };\n        return ev;\n      }\n      case \"SubagentStart\": {\n        const agentId = input.agent_id ?? input.subagent_id;\n        const agentType = input.agent_type ?? input.subagent_type;\n        const ev: SubagentStartEvent = {\n          ...base,\n          ...(typeof agentId === \"string\" ? { agentId } : {}),\n          ...(typeof agentType === \"string\" ? { agentType } : {}),\n        };\n        return ev;\n      }\n      case \"SubagentStop\": {\n        const agentId = input.agent_id ?? input.subagent_id;\n        const agentType = input.agent_type ?? input.subagent_type;\n        const ev: SubagentStopEvent = {\n          ...base,\n          ...(typeof agentId === \"string\" ? { agentId } : {}),\n          ...(typeof agentType === \"string\" ? { agentType } : {}),\n          // Cursor's subagentStop carries the subagent's output text under\n          // `summary`, NOT last_assistant_message (cursor.com/docs/hooks ~972,993).\n          ...(typeof input.summary === \"string\"\n            ? { lastAssistantMessage: input.summary }\n            : {}),\n          ...(typeof input.stop_hook_active === \"boolean\"\n            ? { stopHookActive: input.stop_hook_active }\n            : {}),\n        };\n        return ev;\n      }\n      default: {\n        // Cursor never delivers Notification / PermissionRequest (no native\n        // equivalent — permission is an OUTPUT field of its before* hooks, not\n        // an event). If the runtime dispatches one anyway, fail loudly.\n        throw new Error(`unsupported cursor hook event: ${String(event)}`);\n      }\n    }\n  }\n\n  private getProjectDir(input: CursorWireInput): string | undefined {\n    return input.cwd ?? input.workspace_roots?.[0] ?? undefined;\n  }\n\n  // ── Runtime: normalized response → Cursor native hook reply ──────────────\n\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\n    const decision = response.decision ?? \"allow\";\n\n    // postToolUseFailure (feedback beside the error) and subagentStart (context\n    // injected into the SUBAGENT's conversation) are observe/context-only on\n    // Cursor: \"context\" emits additional_context, and a \"deny\" DEGRADES to the\n    // same shape carrying the reason (the tool already failed / the spawn is\n    // not blockable). Everything else is a minimal no-op payload (Cursor\n    // rejects empty stdout as \"no valid response\").\n    if (event === \"PostToolUseFailure\" || event === \"SubagentStart\") {\n      const context =\n        decision === \"context\"\n          ? response.additionalContext\n          : decision === \"deny\"\n            ? response.reason ?? response.additionalContext\n            : undefined;\n      return this.stdout({ additional_context: context ?? \"\" });\n    }\n\n    // beforeSubmitPrompt (UserPromptSubmit) is a BLOCK gate, not a permission/\n    // context surface: its only documented output is { continue, user_message }\n    // (cursor.com/docs/hooks). A \"deny\" prevents submission (continue:false +\n    // reason); it cannot inject context (no additional_context/agent_message\n    // field), so every non-deny decision is a no-op continue:true.\n    if (event === \"UserPromptSubmit\") {\n      if (decision === \"deny\") {\n        return this.stdout({\n          continue: false,\n          user_message: response.reason ?? \"Blocked by hook\",\n        });\n      }\n      return this.stdout({ continue: true });\n    }\n\n    // sessionEnd is fire-and-forget (the response is logged but not used) and\n    // preCompact is observational (cannot block or modify compaction) per\n    // cursor.com/docs/hooks — neither carries a decision Cursor honors, so both\n    // are an unconditional no-op passthrough (mirrors Stop).\n    if (event === \"SessionEnd\" || event === \"PreCompact\") {\n      return { exitCode: 0 };\n    }\n\n    // deny → block the action with a user-facing message. (On SubagentStop\n    // this follows the adapter's Stop idiom — the deny carries Stop semantics.)\n    if (decision === \"deny\") {\n      return this.stdout({\n        permission: \"deny\",\n        user_message: response.reason ?? \"Blocked by hook\",\n      });\n    }\n\n    // ask → prompt the user to confirm.\n    if (decision === \"ask\") {\n      return this.stdout({\n        permission: \"ask\",\n        user_message: response.reason ?? \"Confirmation required by hook\",\n      });\n    }\n\n    // modify → rewrite PreToolUse input (only where Cursor supports it).\n    if (decision === \"modify\") {\n      if (event === \"PreToolUse\" && response.updatedInput) {\n        return this.stdout({ updated_input: response.updatedInput });\n      }\n      // Output rewrite is unsupported on Cursor; fall through to allow.\n    }\n\n    // context → inject soft guidance. PreToolUse uses `agent_message`; Post and\n    // SessionStart use `additional_context`.\n    if (decision === \"context\" && response.additionalContext) {\n      return event === \"PreToolUse\"\n        ? this.stdout({ agent_message: response.additionalContext })\n        : this.stdout({ additional_context: response.additionalContext });\n    }\n\n    // SessionStart always emits valid JSON even on a no-op (Cursor rejects empty\n    // stdout as \"no valid response\").\n    if (event === \"SessionStart\") {\n      return this.stdout({ additional_context: response.additionalContext ?? \"\" });\n    }\n\n    // allow / void → minimal no-op payload (Cursor rejects empty stdout).\n    if (event === \"PreToolUse\") return this.stdout({ agent_message: \"\" });\n    if (event === \"PostToolUse\") return this.stdout({ additional_context: \"\" });\n    return { exitCode: 0 };\n  }\n\n  private stdout(payload: unknown): HookReply {\n    return { exitCode: 0, stdout: JSON.stringify(payload) };\n  }\n}\n\n/** Cursor native interpolation token: `${env:VAR}` → `${env:VAR}` (passthrough). */\nfunction cursorEnvToken(name: string): string {\n  return `\\${env:${name}}`;\n}\n\nfunction extractSessionId(input: CursorWireInput): string {\n  if (typeof input.conversation_id === \"string\") return input.conversation_id;\n  if (typeof input.session_id === \"string\") return input.session_id;\n  return \"\";\n}\n\nexport const adapter = new CursorAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;AAsBA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAoCrB,IAAM,OAAmB;AACzB,IAAM,eAAe;AAQd,IAAM,uBAAuB;AAQpC,IAAM,eAAe;AAAA,EACnB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,cAAc;AAAA,EACd,MAAM;AAAA,EACN,oBAAoB;AAAA,EACpB,eAAe;AAAA,EACf,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,EAKd,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,kBAAkB;AACpB;AAkBO,IAAM,mBAA2D;AAAA,EACtE,YAAY,aAAa;AAAA,EACzB,aAAa,aAAa;AAAA,EAC1B,cAAc,aAAa;AAAA,EAC3B,MAAM,aAAa;AAAA,EACnB,oBAAoB,aAAa;AAAA,EACjC,eAAe,aAAa;AAAA,EAC5B,cAAc,aAAa;AAAA,EAC3B,YAAY,aAAa;AAAA,EACzB,YAAY,aAAa;AAAA,EACzB,kBAAkB,aAAa;AACjC;AA2EO,IAAM,gBAAN,cAA4B,YAA+B;AAAA,EACvD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA;AAAA,IAGhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,IAKd,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,cAAc;AAAA;AAAA;AAAA,IAGd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA,IACzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAI5B,8BAA8B;AAAA;AAAA,IAE9B,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAWnB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOvB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,SAAS;AACzC,UAAM,UAAU,KAAK,SAAS,UAAU;AACxC,UAAM,YAAY,KAAK,SAAS,YAAY;AAC5C,UAAM,mBAAmB,KAAK,YAAY,SAAS;AACnD,UAAM,YACJ,WAAW,OAAO,KAClB,WAAW,OAAO,KAClB,WAAW,SAAS,KACpB,WAAW,gBAAgB;AAC7B,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB,YAAY;AAAA,MACZ,OAAO;AAAA,MACP,QAAQ,YACJ,6BAA6B,OAAO,KACpC,uBAAuB,OAAO;AAAA,MAClC,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,SAAS,IAC9B,KAAK,QAAQ,GAAG,SAAS;AAAA,EAC/B;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA,EAEA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,YAAY;AAAA,EAClD;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,4CACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QACsC;AACtC,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAE1E,YAAMA,SAA2B,EAAE,SAAS,KAAK,QAAQ,OAAO,EAAE;AAClE,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACjE,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,UAAI,OAAO,IAAK,CAAAA,OAAM,MAAM,KAAK,QAAQ,OAAO,GAAG;AACnD,aAAOA;AAAA,IACT;AAGA,UAAM,QAA0B,EAAE,KAAK,KAAK,QAAQ,OAAO,OAAO,EAAE,EAAE;AACtE,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,UAAM,MAA8B,CAAC;AACrC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,EAAG,KAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;AACjE,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,QAAQ,OAAuB;AACrC,WAAO,eAAe,OAAO,cAAc;AAAA,EAC7C;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI;AAKzC,UAAM,mBAAmB,UAAU,UAAU,QAAQ,CAAC,IAAI,UAAU;AACpE,UAAM,cAAc,UAAU,eAAe,CAAC;AAC9C,UAAM,eAAe,OAAO,KAAK,WAAW;AAE5C,QAAI,iBAAiB,WAAW,KAAK,aAAa,WAAW,GAAG;AAC9D,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,UAAU,QAAQ,8BAA8B;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AAKA,UAAM,UAAU,iBAAiB,IAAI,CAAC,WAAW;AAAA,MAC/C;AAAA,MACA,SAAS,UAAU,MAAM,KAAK,GAAG,WAAW;AAAA,IAC9C,EAAE;AACF,UAAM,SAAS,aAAa,IAAI,CAAC,WAAW;AAAA,MAC1C;AAAA,MACA,SAAS,YAAY,KAAK,GAAG,WAAW;AAAA,IAC1C,EAAE;AACF,WAAO,KAAK;AAAA,MACV;AAAA,MACA,KAAK,kBAAkB,GAAG;AAAA,MAC1B;AAAA,MACA,KAAK,eAAe,GAAG;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,eAAe,KAAqC;AAClD,WAAO,KAAK,kBAAkB,KAAK,KAAK,kBAAkB,GAAG,GAAG,KAAK,eAAe,GAAG,CAAC;AAAA,EAC1F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,eAAe,KAA2D;AAChF,WAAO;AAAA,MACL,UAAU,CAAC,MAAM,iBAAiB,CAAkB;AAAA,MACpD,oBAAoB,CAAC,MAAM,GAAG,CAAC;AAAA,MAC/B,aAAa,CAAC,QAAQ,SAAS,YAC7B,UAAU,EAAE,SAAS,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,kBAAkB,CAAC,OAAO,aAAa,KAAK,aAAa,MAAM,SAAS,GAAG;AAAA,MAC3E,oBAAoB,CAAC,MAAM,CAAC,UAAU,KAAK,aAAa,MAAM,SAAS,CAAC;AAAA,MACxE,YAAY,CAAC,MAAM,SAAS,CAAC;AAAA,MAC7B,cAAc,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC;AAAA,MACxC,cAAc;AAAA,MACd,eAAe;AAAA,MACf,UAAU,CAAC,SAAS;AAClB,QAAC,KAA8B,UAAU;AAAA,MAC3C;AAAA,MACA,mBAAmB,CAAC,OAAO,YAAY,MAAM,YAAY;AAAA,MACzD,kBAAkB,CAAC,MAAM,SAAS,CAAC;AAAA,MACnC,oBAAoB,CAAC,MAAM,SAAS,CAAC;AAAA,IACvC;AAAA,EACF;AAAA;AAAA;AAAA,EAIQ,aAAa,SAA6B,KAA8B;AAC9E,WAAO,qBAAqB,SAAS,IAAI,aAAa,IAAI,UAAU,EAAE;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,YAAY,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA,EACQ,UAAU,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,QAAQ;AAAA,EAC9C;AAAA,EACQ,UAAU,KAA6B;AAC7C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,QAAQ;AAAA,EAC9C;AAAA;AAAA,EAGQ,YAAY,KAAqB,MAAsB;AAC7D,WAAO,KAAK,KAAK,YAAY,GAAG,GAAG,GAAG,IAAI,KAAK;AAAA,EACjD;AAAA;AAAA,EAEQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,IAAI;AAAA,EACvC;AAAA;AAAA,EAEQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,GAAG,IAAI,KAAK;AAAA,EAC/C;AAAA;AAAA,EAIS,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,aAAa,OAAO;AACjD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK;AAAA,QACH,KAAK,YAAY,KAAK,IAAI,IAAI;AAAA,QAC9B,KAAK,cAAc,GAAG;AAAA,QACtB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,kBAAkB,KAAqC;AAC9D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,kBAAkB,KAAK,YAAY,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,IACpE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,KAAyB;AAC7C,QAAI,CAAC,IAAI,YAAa,QAAO,GAAG,IAAI,MAAM;AAAA;AAE1C,UAAM,OAAO,IAAI,YAAY,QAAQ,SAAS,CAAC,MAAM,EAAE,QAAQ,MAAM,MAAM,CAAC;AAC5E,WAAO,QAAQ,IAAI;AAAA;AAAA,EAAW,IAAI,MAAM;AAAA;AAAA,EAC1C;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,6BAA6B,CAAC;AAAA,IACrF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,cAAc,KAAK,GAAG,IAAI,MAAM;AAAA,MAC/E;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,cAAc,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,gCAAgC,CAAC;AAAA,IACxF;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK;AAAA,QACH,KAAK,aAAa,KAAK,MAAM,IAAI;AAAA,QACjC,KAAK,eAAe,KAAK;AAAA,QACzB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA,EAGQ,eAAe,OAA4B;AACjD,UAAM,cAAuC;AAAA,MAC3C,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,IACrB;AACA,QAAI,MAAM,UAAU,OAAW,aAAY,QAAQ,MAAM;AACzD,QAAI,MAAM,aAAa,OAAW,aAAY,WAAW,MAAM;AAC/D,QAAI,MAAM,MAAO,QAAO,OAAO,aAAa,MAAM,KAAK;AACvD,WAAO,KAAK,oBAAoB,aAAa,MAAM,MAAM;AAAA,EAC3D;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,UAAU,KAAK,oBAAoB,GAAG;AAC5C,UAAM,YAAY,KAAK,kBAAkB,GAAG;AAC5C,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,OAAO,IACd,EAAE,QAAQ,MAAM,QAAQ,QAAQ,IAChC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,OAAO,GAAG;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAIX,cAAI,IAAI,UAAU,WAAW,WAAW,GAAG;AACzC,mBAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,UACrD;AACA,iBAAO,WAAW,SAAS,IACvB,EAAE,QAAQ,MAAM,QAAQ,UAAU,IAClC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,SAAS,GAAG;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAIA,eAAW,OAAO,IAAI,UAAU,UAAU;AACxC,YAAM,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI;AACxC,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,aAAa,IAAI,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,cAAc,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAC5E,UAAM,YAAY,iBAAiB,KAAK;AACxC,UAAM,aAAa,KAAK,cAAc,KAAK;AAE3C,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,IACnD;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAClB,cAAM,aAAa,MAAM,eAAe,MAAM;AAC9C,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,UACjD,GAAI,MAAM,gBAAgB,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QACjD;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AASnB,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,QAAQ,uBAAuB,MAAS;AAAA,QAC1C;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,QAAQ;AACX,cAAM,KAAgB;AAAA,UACpB,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,cAAc;AAIjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,oBAAoB;AAGvB,cAAM,KAA4B;AAAA,UAChC,GAAG;AAAA,UACH,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,cAAc;AAGjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,GAAI,MAAM,YAAY,UAAU,MAAM,YAAY,WAC9C,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,sBAAsB;AAGzB,cAAM,QAAQ,MAAM,iBAAiB,MAAM,SAAS;AACpD,cAAM,KAA8B;AAAA,UAClC,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC;AAAA,UACA,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,WAAW,MAAM,YAAY,IAC/B,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,iBAAiB,YAC9B,EAAE,aAAa,MAAM,aAAa,IAClC,CAAC;AAAA;AAAA;AAAA;AAAA,UAIL,GAAI,OAAO,MAAM,aAAa,WAC1B,EAAE,YAAY,MAAM,SAAS,IAC7B,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,iBAAiB;AACpB,cAAM,UAAU,MAAM,YAAY,MAAM;AACxC,cAAM,YAAY,MAAM,cAAc,MAAM;AAC5C,cAAM,KAAyB;AAAA,UAC7B,GAAG;AAAA,UACH,GAAI,OAAO,YAAY,WAAW,EAAE,QAAQ,IAAI,CAAC;AAAA,UACjD,GAAI,OAAO,cAAc,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,QACvD;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,UAAU,MAAM,YAAY,MAAM;AACxC,cAAM,YAAY,MAAM,cAAc,MAAM;AAC5C,cAAM,KAAwB;AAAA,UAC5B,GAAG;AAAA,UACH,GAAI,OAAO,YAAY,WAAW,EAAE,QAAQ,IAAI,CAAC;AAAA,UACjD,GAAI,OAAO,cAAc,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA;AAAA;AAAA,UAGrD,GAAI,OAAO,MAAM,YAAY,WACzB,EAAE,sBAAsB,MAAM,QAAQ,IACtC,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,SAAS;AAIP,cAAM,IAAI,MAAM,kCAAkC,OAAO,KAAK,CAAC,EAAE;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,cAAc,OAA4C;AAChE,WAAO,MAAM,OAAO,MAAM,kBAAkB,CAAC,KAAK;AAAA,EACpD;AAAA;AAAA,EAIA,YAAY,OAAsB,UAAmC;AACnE,UAAM,WAAW,SAAS,YAAY;AAQtC,QAAI,UAAU,wBAAwB,UAAU,iBAAiB;AAC/D,YAAM,UACJ,aAAa,YACT,SAAS,oBACT,aAAa,SACX,SAAS,UAAU,SAAS,oBAC5B;AACR,aAAO,KAAK,OAAO,EAAE,oBAAoB,WAAW,GAAG,CAAC;AAAA,IAC1D;AAOA,QAAI,UAAU,oBAAoB;AAChC,UAAI,aAAa,QAAQ;AACvB,eAAO,KAAK,OAAO;AAAA,UACjB,UAAU;AAAA,UACV,cAAc,SAAS,UAAU;AAAA,QACnC,CAAC;AAAA,MACH;AACA,aAAO,KAAK,OAAO,EAAE,UAAU,KAAK,CAAC;AAAA,IACvC;AAMA,QAAI,UAAU,gBAAgB,UAAU,cAAc;AACpD,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAIA,QAAI,aAAa,QAAQ;AACvB,aAAO,KAAK,OAAO;AAAA,QACjB,YAAY;AAAA,QACZ,cAAc,SAAS,UAAU;AAAA,MACnC,CAAC;AAAA,IACH;AAGA,QAAI,aAAa,OAAO;AACtB,aAAO,KAAK,OAAO;AAAA,QACjB,YAAY;AAAA,QACZ,cAAc,SAAS,UAAU;AAAA,MACnC,CAAC;AAAA,IACH;AAGA,QAAI,aAAa,UAAU;AACzB,UAAI,UAAU,gBAAgB,SAAS,cAAc;AACnD,eAAO,KAAK,OAAO,EAAE,eAAe,SAAS,aAAa,CAAC;AAAA,MAC7D;AAAA,IAEF;AAIA,QAAI,aAAa,aAAa,SAAS,mBAAmB;AACxD,aAAO,UAAU,eACb,KAAK,OAAO,EAAE,eAAe,SAAS,kBAAkB,CAAC,IACzD,KAAK,OAAO,EAAE,oBAAoB,SAAS,kBAAkB,CAAC;AAAA,IACpE;AAIA,QAAI,UAAU,gBAAgB;AAC5B,aAAO,KAAK,OAAO,EAAE,oBAAoB,SAAS,qBAAqB,GAAG,CAAC;AAAA,IAC7E;AAGA,QAAI,UAAU,aAAc,QAAO,KAAK,OAAO,EAAE,eAAe,GAAG,CAAC;AACpE,QAAI,UAAU,cAAe,QAAO,KAAK,OAAO,EAAE,oBAAoB,GAAG,CAAC;AAC1E,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA,EAEQ,OAAO,SAA6B;AAC1C,WAAO,EAAE,UAAU,GAAG,QAAQ,KAAK,UAAU,OAAO,EAAE;AAAA,EACxD;AACF;AAGA,SAAS,eAAe,MAAsB;AAC5C,SAAO,UAAU,IAAI;AACvB;AAEA,SAAS,iBAAiB,OAAgC;AACxD,MAAI,OAAO,MAAM,oBAAoB,SAAU,QAAO,MAAM;AAC5D,MAAI,OAAO,MAAM,eAAe,SAAU,QAAO,MAAM;AACvD,SAAO;AACT;AAEO,IAAM,UAAU,IAAI,cAAc;AACzC,IAAO,iBAAQ;","names":["entry"]}

package/dist/chunk-ECSRTK4M.js

@@ -0,0 +1,386 @@
+#!/usr/bin/env node
+import {
+  compileMatcher,
+  eventMatcherSubject
+} from "./chunk-24K6JOKV.js";
+import {
+  SURFACE_PREDICATES,
+  hostCanFireEvent
+} from "./chunk-MDZG5QHB.js";
+import {
+  allAdapters,
+  loadAdapter
+} from "./chunk-Q5LECKZL.js";
+
+// src/sdk/test-harness.ts
+function declaredGlobalSurfaces(connector) {
+  const out = [];
+  if (connector.server) out.push("server");
+  if (Object.keys(connector.hooks).length > 0) out.push("hooks");
+  if (connector.commands.length > 0) out.push("commands");
+  if (connector.skills.length > 0) out.push("skills");
+  if (connector.subagents.length > 0) out.push("subagents");
+  if (connector.memory.length > 0) out.push("memory");
+  if (connector.statusline) out.push("statusline");
+  if (connector.actions.length > 0) out.push("actions");
+  return out;
+}
+function platformScopedSurfacesFor(override) {
+  const out = [];
+  if (!override) return out;
+  if ((override.configPatch?.length ?? 0) > 0) out.push("configPatch");
+  if (override.nativeHooks != null && Object.keys(override.nativeHooks).length > 0) {
+    out.push("nativeHooks");
+  }
+  return out;
+}
+function isDisabledForHost(connector, host, surface) {
+  const override = connector.platforms[host];
+  if (!override) return false;
+  switch (surface) {
+    case "server":
+      return override.server === false;
+    case "hooks":
+      return override.hooks === false;
+    case "commands":
+      return override.commands === false;
+    case "skills":
+      return override.skills === false;
+    case "subagents":
+      return override.subagents === false;
+    case "memory":
+      return override.memory === false;
+    case "statusline":
+      return override.statusline === false;
+    case "actions":
+    case "configPatch":
+    case "nativeHooks":
+      return false;
+  }
+}
+async function explain(connector) {
+  const globalSurfaces = declaredGlobalSurfaces(connector);
+  const adapters = await allAdapters();
+  const rows = [];
+  for (const adapter of adapters) {
+    const override = connector.platforms[adapter.id];
+    const surfaces = [
+      ...globalSurfaces,
+      ...platformScopedSurfacesFor(override)
+    ];
+    for (const surface of surfaces) {
+      if (isDisabledForHost(connector, adapter.id, surface)) {
+        rows.push({
+          host: adapter.id,
+          surface,
+          support: "disabled",
+          reason: `connector opted out for ${adapter.id} (platforms.${adapter.id}.${surface} = false)`
+        });
+        continue;
+      }
+      if (surface === "hooks") {
+        rows.push(hooksRow(connector, adapter.id, adapter.capabilities));
+        continue;
+      }
+      const native = SURFACE_PREDICATES[surface](adapter.capabilities);
+      rows.push({
+        host: adapter.id,
+        surface,
+        support: native ? "native" : "skip-warn",
+        reason: explainReason(adapter.id, surface, native)
+      });
+    }
+  }
+  rows.sort(
+    (a, b) => a.host === b.host ? a.surface.localeCompare(b.surface) : a.host.localeCompare(b.host)
+  );
+  return rows;
+}
+function hooksRow(connector, host, capabilities) {
+  const declared = connector.hookEvents;
+  const dead = declared.filter((e) => !hostCanFireEvent(capabilities, e));
+  if (dead.length === 0) {
+    return {
+      host,
+      surface: "hooks",
+      support: "native",
+      reason: `${host} can fire every declared hook event (${declared.join(", ")})`
+    };
+  }
+  const fireable = declared.filter((e) => hostCanFireEvent(capabilities, e));
+  const reason = fireable.length === 0 ? `${host} cannot fire any declared hook event (${dead.join(", ")}); install skip-warns each` : `${host} cannot fire ${dead.join(", ")} (install skip-warns these); honors ${fireable.join(", ")}`;
+  return { host, surface: "hooks", support: "skip-warn", reason };
+}
+function explainReason(host, surface, native) {
+  if (surface === "server") {
+    return native ? `${host} advertises an MCP transport (capability-based; registration may be host-managed)` : `${host} advertises no MCP transport; install skip-warns`;
+  }
+  return native ? `${host} natively supports ${surface}` : `${host} cannot honor ${surface}; install skip-warns`;
+}
+function coerceInput(input) {
+  if (input == null) return {};
+  if (typeof input === "string") {
+    const trimmed = input.trim();
+    if (trimmed === "") return {};
+    try {
+      return JSON.parse(trimmed);
+    } catch {
+      return {};
+    }
+  }
+  return input;
+}
+function normalizeResponse(value) {
+  if (value == null || typeof value !== "object") return {};
+  return value;
+}
+function parseReplyStdout(stdout) {
+  if (stdout == null || stdout.trim() === "") return void 0;
+  try {
+    const value = JSON.parse(stdout);
+    return value != null && typeof value === "object" ? value : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function deepEqual(a, b) {
+  if (a === b) return true;
+  if (typeof a !== typeof b || a == null || b == null) return false;
+  if (typeof a !== "object") return false;
+  const aArr = Array.isArray(a);
+  if (aArr !== Array.isArray(b)) return false;
+  if (aArr) {
+    const x2 = a;
+    const y2 = b;
+    return x2.length === y2.length && x2.every((v, i) => deepEqual(v, y2[i]));
+  }
+  const x = a;
+  const y = b;
+  const xk = Object.keys(x);
+  const yk = Object.keys(y);
+  return xk.length === yk.length && xk.every((k) => deepEqual(x[k], y[k]));
+}
+function judgeHookHonor(host, event, response, stdout) {
+  const decision = response.decision;
+  if (decision === void 0 || decision === "allow") {
+    return { honored: true, reason: "pass-through allow" };
+  }
+  const reply = parseReplyStdout(stdout);
+  const hso = reply?.hookSpecificOutput;
+  if (decision === "context") {
+    const want = response.additionalContext;
+    const got = hso?.additionalContext ?? reply?.systemMessage;
+    if (reply && got === want) {
+      return { honored: true, reason: `${host} injects context on ${event}` };
+    }
+    return {
+      honored: false,
+      reason: `${host} drops context on ${event} (no stdout path)`
+    };
+  }
+  if (decision === "deny") {
+    if (!reply) {
+      return {
+        honored: false,
+        reason: `${host} drops deny on ${event} (deny not honored; fails open to allow)`
+      };
+    }
+    if (hso?.permissionDecision === "deny" || hso?.decision?.behavior === "deny") {
+      return { honored: true, reason: `${host} blocks ${event}` };
+    }
+    if (reply.decision === "block") {
+      return {
+        honored: true,
+        reason: `${host} continues the session/subagent on ${event} (persistence) \u2014 NOT a block`
+      };
+    }
+    if (hso?.additionalContext != null) {
+      return {
+        honored: false,
+        reason: `${host} degrades deny to a context note on ${event}; spawn/failure not blocked`
+      };
+    }
+    return {
+      honored: false,
+      reason: `${host} drops deny on ${event} (deny not honored; fails open to allow)`
+    };
+  }
+  if (decision === "ask") {
+    if (hso?.permissionDecision === "ask") {
+      return { honored: true, reason: `${host} asks on ${event}` };
+    }
+    if (event === "PermissionRequest" && !reply) {
+      return {
+        honored: true,
+        reason: `${host} shows the native confirmation dialog on ${event} (the ask)`
+      };
+    }
+    return {
+      honored: false,
+      reason: `${host} drops ask on ${event} (no ask path)`
+    };
+  }
+  const wrote = hso?.updatedInput ?? hso?.decision?.updatedInput;
+  if (reply && wrote !== void 0 && deepEqual(wrote, response.updatedInput)) {
+    return { honored: true, reason: `${host} rewrites tool input on ${event}` };
+  }
+  return {
+    honored: false,
+    reason: `${host} drops modify on ${event} (modify not honored)`
+  };
+}
+async function simulate(connector, opts) {
+  try {
+    const adapter = await loadAdapter(opts.host);
+    if (!adapter) {
+      return { honored: false, reason: `unknown host "${opts.host}"` };
+    }
+    if (opts.surface === "statusline") {
+      if (!(adapter.capabilities.supportsStatusline ?? false) || !adapter.parseStatusInput || !adapter.formatStatusOutput) {
+        return { honored: false, reason: `${opts.host} has no statusline surface` };
+      }
+      if (!connector.statusline || typeof connector.statusline.render !== "function") {
+        return { honored: false, reason: "connector declares no statusline" };
+      }
+      const ctx = adapter.parseStatusInput(coerceInput(opts.input));
+      ctx.connectorId = connector.id;
+      if (ctx.capabilities == null) ctx.capabilities = adapter.capabilities;
+      const perHost2 = connector.statusline.hosts?.[opts.host]?.render;
+      const render = typeof perHost2 === "function" ? perHost2 : connector.statusline.render;
+      const rendered = await render(ctx);
+      const line = rendered == null ? "" : String(rendered);
+      const reply2 = adapter.formatStatusOutput(line);
+      return {
+        honored: true,
+        ...reply2.stdout !== void 0 ? { hostReply: reply2.stdout } : {},
+        reason: "rendered"
+      };
+    }
+    const event = opts.event;
+    if (!event) {
+      return { honored: false, reason: 'event is required when surface === "hooks"' };
+    }
+    if (!adapter.parseEvent || !adapter.formatReply) {
+      return { honored: false, reason: `${opts.host} has no hook runtime (mcp-only)` };
+    }
+    const evt = adapter.parseEvent(event, coerceInput(opts.input));
+    evt.connectorId = connector.id;
+    evt.capabilities = adapter.capabilities;
+    const definition = connector.hooks[event];
+    if (!definition || typeof definition.handler !== "function") {
+      return { honored: false, reason: `connector declares no ${event} handler` };
+    }
+    const subject = eventMatcherSubject(evt);
+    if (subject !== void 0) {
+      const re = compileMatcher(definition.matcher);
+      if (re && !re.test(subject)) {
+        return {
+          honored: true,
+          reason: `matcher excludes ${subject} (handler not run)`
+        };
+      }
+    }
+    const perHost = definition.hosts?.[opts.host]?.handler;
+    const handler = typeof perHost === "function" ? perHost : definition.handler;
+    const response = normalizeResponse(
+      await handler(evt)
+    );
+    const reply = adapter.formatReply(event, response);
+    const verdict = judgeHookHonor(String(opts.host), event, response, reply.stdout);
+    return {
+      honored: verdict.honored,
+      ...reply.stdout !== void 0 ? { hostReply: reply.stdout } : {},
+      reason: verdict.reason
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const verb = opts.surface === "statusline" ? "render" : "handler";
+    return { honored: false, reason: `${verb} threw: ${message}` };
+  }
+}
+function matchingSubject(matcher, fallback) {
+  if (!matcher || matcher === "") return fallback;
+  return /^[\w.-]+$/.test(matcher) ? matcher : fallback;
+}
+function syntheticPayloadFor(event, matcher) {
+  switch (event) {
+    case "PreToolUse":
+    case "PostToolUse":
+    case "PostToolUseFailure":
+    case "PermissionRequest": {
+      const tool = matchingSubject(matcher, "Bash");
+      return { tool_name: tool, tool_input: { command: "echo hi" } };
+    }
+    case "SubagentStart":
+    case "SubagentStop": {
+      const agent = matchingSubject(matcher, "general");
+      return { agent_type: agent, subagent_type: agent };
+    }
+    case "UserPromptSubmit":
+      return { prompt: "hello" };
+    default:
+      return {};
+  }
+}
+async function explainHooks(connector, hosts) {
+  const events = connector.hookEvents;
+  const rows = [];
+  for (const host of hosts) {
+    const adapter = await loadAdapter(host);
+    if (!adapter) {
+      for (const event of events) {
+        rows.push({
+          host,
+          event,
+          verdict: "dropped",
+          reason: `unknown host "${host}"`
+        });
+      }
+      continue;
+    }
+    const hasHookRuntime = !!adapter.parseEvent && !!adapter.formatReply;
+    for (const event of events) {
+      if (!hasHookRuntime) {
+        rows.push({
+          host: adapter.id,
+          event,
+          verdict: "dropped",
+          reason: `${adapter.id} has no hook runtime (mcp-only) \u2014 ${event} never fires`
+        });
+        continue;
+      }
+      if (!hostCanFireEvent(adapter.capabilities, event)) {
+        rows.push({
+          host: adapter.id,
+          event,
+          verdict: "dropped",
+          reason: `${adapter.id} has no ${event} equivalent \u2014 install skip-warns it; never fires`
+        });
+        continue;
+      }
+      const sim = await simulate(connector, {
+        surface: "hooks",
+        host: adapter.id,
+        event,
+        input: syntheticPayloadFor(event, connector.hooks[event]?.matcher)
+      });
+      rows.push({
+        host: adapter.id,
+        event,
+        verdict: sim.honored ? "honored" : "degraded",
+        reason: sim.reason
+      });
+    }
+  }
+  rows.sort(
+    (a, b) => a.host === b.host ? a.event.localeCompare(b.event) : a.host.localeCompare(b.host)
+  );
+  return rows;
+}
+
+export {
+  explain,
+  simulate,
+  explainHooks
+};
+//# sourceMappingURL=chunk-ECSRTK4M.js.map