@kyun.si/agent2cursor 0.0.0-stage → 0.1.0

package/dist/scan/safety.js

@@ -0,0 +1,105 @@
+import { constants } from "node:fs";
+import { lstat, open, readdir, realpath } from "node:fs/promises";
+import path from "node:path";
+export const MAX_TEXT_BYTES = 1024 * 1024;
+export const MAX_ASSET_BYTES = 16 * 1024 * 1024;
+export const MAX_FILES = 5000;
+export const SKIP_DIRECTORIES = new Set([".git", "node_modules", ".validation", "dist", "build", ".cache", "__pycache__"]);
+export function isSensitiveName(name) {
+    return /^(?:\.env(?:\..*)?|\.envrc|\.npmrc|\.netrc|\.pypirc|\.git-credentials|\.ssh|\.aws|\.kube|\.?credentials?(?:\..*)?|\.?secrets?(?:\..*)?|\.?tokens?(?:\..*)?|\.?auth(?:entication)?\.(?:json|ya?ml|toml)|cookies?(?:\..*)?|id_(?:rsa|dsa|ed25519|ecdsa)(?:\..*)?)$/i.test(name)
+        || /\.(?:pem|p12|pfx|key|keystore)$/i.test(name);
+}
+/** Never resolve a symlink before deciding whether it is safe to read. */
+export async function assertSafePath(file) {
+    let absolute = path.resolve(file);
+    // Match the writer's treatment of platform-owned macOS aliases. User-created
+    // symlinks anywhere after these aliases are still rejected component by component.
+    if (process.platform === "darwin") {
+        for (const alias of ["/var", "/tmp"]) {
+            if (absolute === alias || absolute.startsWith(`${alias}/`)) {
+                absolute = path.join(await realpath(alias), path.relative(alias, absolute));
+                break;
+            }
+        }
+    }
+    const parts = absolute.slice(path.parse(absolute).root.length).split(path.sep).filter(Boolean);
+    if (parts.some(isSensitiveName))
+        throw new Error(`Sensitive input path is not permitted: ${absolute}`);
+    if (parts.some((part) => /clash/i.test(part)) && /\.ya?ml$/i.test(absolute)) {
+        throw new Error("Reading local Clash YAML is not permitted.");
+    }
+    let current = path.parse(absolute).root;
+    for (const part of parts) {
+        current = path.join(current, part);
+        const stat = await lstat(current);
+        if (stat.isSymbolicLink())
+            throw new Error(`Symbolic links are not permitted: ${current}`);
+    }
+    return absolute;
+}
+export async function readSafeFile(file, maxBytes = MAX_ASSET_BYTES) {
+    const absolute = await assertSafePath(file);
+    const handle = await open(absolute, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile())
+            throw new Error(`Expected a regular file: ${absolute}`);
+        if (stat.size > maxBytes)
+            throw new Error(`Input exceeds ${maxBytes} bytes: ${absolute}`);
+        // Bounded reads also handle files growing after stat(), without loading the excess.
+        const buffer = Buffer.alloc(Math.min(stat.size + 1, maxBytes + 1));
+        let length = 0;
+        while (length < buffer.length) {
+            const { bytesRead } = await handle.read(buffer, length, buffer.length - length, null);
+            if (!bytesRead)
+                break;
+            length += bytesRead;
+        }
+        if (length > stat.size || length > maxBytes)
+            throw new Error(`Input changed or exceeded its size limit: ${absolute}`);
+        return buffer.subarray(0, length);
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function readSafeText(file, maxBytes = MAX_TEXT_BYTES) {
+    const bytes = await readSafeFile(file, maxBytes);
+    if (bytes.includes(0))
+        throw new Error(`Expected UTF-8 text: ${path.resolve(file)}`);
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+}
+/** Absolute, sorted regular files. Sensitive files fail closed instead of being copied. */
+export async function listSafeFiles(directory, onSkip) {
+    const root = await assertSafePath(directory);
+    if (!(await lstat(root)).isDirectory())
+        throw new Error(`Expected a directory: ${root}`);
+    const files = [];
+    async function walk(dir, depth) {
+        if (depth > 32)
+            throw new Error(`Input nesting exceeds 32 directories: ${root}`);
+        for (const entry of (await readdir(dir, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name))) {
+            const file = path.join(dir, entry.name);
+            if (entry.isSymbolicLink())
+                throw new Error(`Symbolic links are not permitted: ${file}`);
+            if (isSensitiveName(entry.name))
+                throw new Error(`Sensitive input path is not permitted: ${file}`);
+            if (entry.isDirectory()) {
+                if (!SKIP_DIRECTORIES.has(entry.name))
+                    await walk(file, depth + 1);
+                else
+                    onSkip?.(file, "Generated, dependency, cache, or version-control directory omitted.");
+            }
+            else if (entry.isFile()) {
+                if (files.length >= MAX_FILES)
+                    throw new Error(`Input exceeds ${MAX_FILES} files: ${root}`);
+                files.push(file);
+            }
+            else {
+                throw new Error(`Special files are not permitted: ${file}`);
+            }
+        }
+    }
+    await walk(root, 0);
+    return files;
+}

package/dist/scan/tstack.d.ts

@@ -0,0 +1,9 @@
+export declare const TSTACK_COMMIT = "7de017b3fc9d50c03cf3ecb98fb71e0ca65a78bd";
+/** Verified against the README at the pinned commit, also stored in fixtures/tstack. */
+export declare const TSTACK_DEPENDENCIES: Readonly<Record<string, readonly string[]>>;
+export declare function parseTstackDependencies(readme: string): Record<string, string[]>;
+export declare function dependencyInfo(directory: string, id: string): Promise<{
+    names: readonly string[];
+    basis: string;
+    fallback: boolean;
+}>;

package/dist/scan/tstack.js

@@ -0,0 +1,42 @@
+import path from "node:path";
+import { lstat } from "node:fs/promises";
+import { readSafeText } from "./safety.js";
+export const TSTACK_COMMIT = "7de017b3fc9d50c03cf3ecb98fb71e0ca65a78bd";
+/** Verified against the README at the pinned commit, also stored in fixtures/tstack. */
+export const TSTACK_DEPENDENCIES = {
+    "full-send": ["sol-loop", "file-pr", "babysit-pr"],
+    "full-stop": ["full-send"],
+    takeover: ["modernize", "file-pr", "babysit-pr", "leaving-pr-comments"],
+    "file-pr": ["leaving-pr-comments"],
+    "babysit-pr": ["leaving-pr-comments"],
+    modernize: ["leaving-pr-comments"],
+    council: [], "sol-loop": [], "leaving-pr-comments": [],
+};
+export function parseTstackDependencies(readme) {
+    const dependencies = Object.create(null);
+    for (const line of readme.split(/\r?\n/)) {
+        const match = /^-\s+(.+?)\s+uses?\s+(.+)$/.exec(line);
+        if (!match)
+            continue;
+        const sources = [...match[1].matchAll(/`([a-z0-9_-]+)`/g)].map((value) => value[1]);
+        const targets = [...match[2].matchAll(/`([a-z0-9_-]+)`/g)].map((value) => value[1]);
+        for (const source of sources)
+            dependencies[source] = targets;
+    }
+    return dependencies;
+}
+export async function dependencyInfo(directory, id) {
+    const readmePath = path.join(path.dirname(path.dirname(directory)), "README.md");
+    try {
+        await lstat(readmePath);
+        const readme = await readSafeText(readmePath);
+        if (/^#\s+tstack\s*$/m.test(readme) && readme.includes("t3dotgg/tstack")) {
+            return { names: parseTstackDependencies(readme)[id] ?? [], basis: readmePath, fallback: false };
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    return { names: Object.hasOwn(TSTACK_DEPENDENCIES, id) ? TSTACK_DEPENDENCIES[id] : [], basis: `t3dotgg/tstack@${TSTACK_COMMIT}`, fallback: true };
+}

package/dist/validate.d.ts

@@ -0,0 +1,5 @@
+import type { Language, ValidationResult } from "./ir.js";
+export declare function supportedNode(version?: string): boolean;
+export declare function findSdk(dir: string): Promise<string | undefined>;
+export declare function validationMessage(result: ValidationResult, lang: Language): string;
+export declare function validateProject(dir: string, sdk?: string): Promise<ValidationResult>;

package/dist/validate.js

@@ -0,0 +1,135 @@
+import { access, readFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { createRequire } from "node:module";
+import { delimiter, join, resolve } from "node:path";
+import { spawn } from "node:child_process";
+export function supportedNode(version = process.versions.node) {
+    const [major = 0, minor = 0] = version.replace(/^v/, "").split(".").map(Number);
+    return major > 22 || (major === 22 && minor >= 13);
+}
+export async function findSdk(dir) {
+    const filename = process.platform === "win32" ? "agent-sdk.cmd" : "agent-sdk";
+    const candidates = [join(resolve(dir), "node_modules", ".bin", filename),
+        ...((process.env.PATH ?? "").split(delimiter).filter(Boolean).map(p => join(p, filename)))];
+    for (const candidate of candidates) {
+        try {
+            await access(candidate, constants.X_OK);
+            return candidate;
+        }
+        catch { /* next installed CLI */ }
+    }
+}
+// Resolve only the converter's known dependencies. Resolution never imports or executes them.
+// Hoisted dependencies are valid; integration tests must use an independent directory.
+async function missingDependencies(dir) {
+    const manifestPath = join(resolve(dir), "package.json");
+    let source;
+    try {
+        source = await readFile(manifestPath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    const manifest = JSON.parse(source);
+    if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Invalid package.json");
+    const dependencies = manifest.dependencies;
+    if (!dependencies || typeof dependencies !== "object" || Array.isArray(dependencies))
+        return [];
+    const require = createRequire(manifestPath);
+    return ["@grok/agent-sdk", "zod"].filter(name => {
+        if (!Object.hasOwn(dependencies, name))
+            return false;
+        try {
+            require.resolve(name);
+            return false;
+        }
+        catch (error) {
+            if (error.code === "MODULE_NOT_FOUND")
+                return true;
+            throw error; // Broken exports/configuration are validation failures, not missing installs.
+        }
+    });
+}
+export function validationMessage(result, lang) {
+    if (lang !== "zh" || result.status !== "dependencies-missing" || !result.missingDependencies?.length)
+        return result.message;
+    return `SDK 自检尚未执行：缺少项目依赖 ${result.missingDependencies.join(", ")}。请先在项目目录运行 npm install，再运行 agent2cursor doctor --dir .。`;
+}
+// Never relay SDK stdout/stderr: source modules and runtime errors may contain credentials.
+// Only diagnostic counts and a closed set of status fields cross the process boundary.
+export async function validateProject(dir, sdk) {
+    const command = `agent-sdk validate --dir ${JSON.stringify(resolve(dir))}`;
+    let missing;
+    try {
+        missing = await missingDependencies(dir);
+    }
+    catch {
+        return { status: "failed", command, message: "Could not resolve project dependencies. Check package.json and installed package configuration; raw details withheld." };
+    }
+    if (missing.length)
+        return { status: "dependencies-missing", command, missingDependencies: missing,
+            message: `SDK validation has not run: missing project dependencies ${missing.join(", ")}. Run npm install in the project, then \`agent2cursor doctor --dir .\`.` };
+    const executable = sdk ?? await findSdk(dir);
+    if (!executable)
+        return { status: "unavailable", command,
+            message: "Agent SDK CLI is not installed. Run npm install in the generated project, then agent2cursor doctor --dir <project>." };
+    return new Promise(resolveResult => {
+        let stdout = "";
+        let overflow = false;
+        let timedOut = false;
+        const child = spawn(executable, ["validate", "--dir", resolve(dir), "--json"], {
+            stdio: ["ignore", "pipe", "ignore"],
+            env: { ...process.env, AGENT_SERVE_NO_UPDATE_CHECK: "1", NO_UPDATE_NOTIFIER: "1" },
+            shell: false,
+        });
+        const timer = setTimeout(() => { timedOut = true; child.kill("SIGKILL"); }, 60_000);
+        child.stdout.on("data", (chunk) => {
+            if (stdout.length + chunk.length > 2 * 1024 * 1024) {
+                overflow = true;
+                child.kill("SIGKILL");
+            }
+            else
+                stdout += chunk.toString("utf8");
+        });
+        child.on("error", () => { clearTimeout(timer); resolveResult({ status: "failed", command, message: "Could not start Agent SDK CLI." }); });
+        child.on("close", code => {
+            clearTimeout(timer);
+            if (timedOut || overflow)
+                return resolveResult({ status: "failed", command,
+                    message: timedOut ? "Validation exceeded 60 seconds." : "Validation output exceeded the safe limit." });
+            let parsed;
+            try {
+                parsed = JSON.parse(stdout);
+            }
+            catch { /* no raw output fallback */ }
+            let errors = 0, warnings = 0;
+            const count = (value) => {
+                if (!value || typeof value !== "object")
+                    return;
+                if (Array.isArray(value)) {
+                    value.forEach(count);
+                    return;
+                }
+                const record = value;
+                if (record.severity === "error")
+                    errors++;
+                if (record.severity === "warning")
+                    warnings++;
+                Object.values(record).forEach(count);
+            };
+            count(parsed);
+            const document = parsed && typeof parsed === "object" && !Array.isArray(parsed)
+                ? parsed : undefined;
+            const sdkShape = document?.ok === true && Array.isArray(document.agents)
+                && document.agents.length > 0 && document.agents.every(agent => agent && typeof agent === "object"
+                && Array.isArray(agent.diagnostics));
+            const status = code === 0 && sdkShape && errors === 0 ? "passed" : "failed";
+            resolveResult({ status, command, message: status === "passed"
+                    ? `SDK validation passed: ${errors} errors, ${warnings} warnings. This does not prove live model or deployment behavior.`
+                    : `SDK validation failed (exit ${code ?? "signal"}; ${errors} errors, ${warnings} warnings). Raw diagnostics withheld. Check installed project dependencies and run the SDK locally for details.` });
+        });
+    });
+}

package/dist/write.d.ts

@@ -0,0 +1,19 @@
+interface FileIdentity {
+    dev: bigint;
+    ino: bigint;
+    birthtimeNs: bigint;
+}
+interface ReportIdentity extends FileIdentity {
+    size: bigint;
+    mtimeNs: bigint;
+    ctimeNs: bigint;
+}
+export interface WrittenProject {
+    readonly directory: string;
+    readonly directories: ReadonlyMap<string, FileIdentity>;
+    readonly reports: ReadonlyMap<string, ReportIdentity>;
+}
+export declare function writeProject(out: string, files: Map<string, string | Buffer>): Promise<WrittenProject>;
+/** Update only the report created by this conversion, never a replacement reached by a path. */
+export declare function updateProjectReport(project: WrittenProject, name: string, contents: string): Promise<void>;
+export {};

package/dist/write.js

@@ -0,0 +1,134 @@
+import { constants } from "node:fs";
+import { lstat, mkdir, mkdtemp, open, realpath, rename, rm, rmdir } from "node:fs/promises";
+import { dirname, isAbsolute, join, parse, relative, resolve } from "node:path";
+function identity(stat) {
+    return { dev: stat.dev, ino: stat.ino, birthtimeNs: stat.birthtimeNs };
+}
+function sameIdentity(stat, expected) {
+    return stat.dev === expected.dev && stat.ino === expected.ino && stat.birthtimeNs === expected.birthtimeNs;
+}
+async function safeParents(path) {
+    const root = parse(path).root;
+    let current = root;
+    const directories = new Map([[root, identity(await lstat(root, { bigint: true }))]]);
+    for (const segment of relative(root, path).split(/[\\/]/).filter(Boolean)) {
+        current = join(current, segment);
+        try {
+            const stat = await lstat(current);
+            if (stat.isSymbolicLink() || !stat.isDirectory())
+                throw new Error("Output ancestors must be real directories, not symlinks.");
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            try {
+                await mkdir(current);
+            }
+            catch (creationError) {
+                if (creationError.code !== "EEXIST")
+                    throw creationError;
+                const stat = await lstat(current);
+                if (!stat.isDirectory() || stat.isSymbolicLink())
+                    throw new Error("Output parent changed during creation.");
+            }
+        }
+        const stat = await lstat(current, { bigint: true });
+        if (stat.isSymbolicLink() || !stat.isDirectory())
+            throw new Error("Output parent changed during creation.");
+        directories.set(current, identity(stat));
+    }
+    return directories;
+}
+export async function writeProject(out, files) {
+    let destination = resolve(out);
+    // macOS system aliases are platform-owned; arbitrary user symlinks still fail.
+    if (process.platform === "darwin") {
+        for (const alias of ["/var", "/tmp"]) {
+            if (destination === alias || destination.startsWith(`${alias}/`)) {
+                destination = join(await realpath(alias), relative(alias, destination));
+                break;
+            }
+        }
+    }
+    for (const name of files.keys()) {
+        if (!name || isAbsolute(name) || name.includes("\\") || name.split("/").some(p => p === ".." || p === "." || !p)) {
+            throw new Error("Unsafe generated output path.");
+        }
+    }
+    const directories = await safeParents(dirname(destination));
+    try {
+        await lstat(destination);
+        throw new Error(`Output already exists; choose a new directory: ${destination}`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const staging = await mkdtemp(join(dirname(destination), ".agent2cursor-"));
+    directories.set(destination, identity(await lstat(staging, { bigint: true })));
+    const reports = new Map();
+    let reserved = false;
+    try {
+        for (const [name, contents] of files) {
+            const target = join(staging, name);
+            await mkdir(dirname(target), { recursive: true });
+            const handle = await open(target, "wx");
+            try {
+                await handle.writeFile(contents);
+                if (name === "MIGRATION.zh-CN.md" || name === "MIGRATION.en.md") {
+                    const stat = await handle.stat({ bigint: true });
+                    reports.set(name, { ...identity(stat), size: stat.size, mtimeNs: stat.mtimeNs, ctimeNs: stat.ctimeNs });
+                }
+            }
+            finally {
+                await handle.close();
+            }
+        }
+        // Reserve the destination exclusively before publishing the completed tree.
+        await mkdir(destination);
+        reserved = true;
+        await rename(staging, destination);
+        reserved = false;
+        return { directory: destination, directories, reports };
+    }
+    finally {
+        await rm(staging, { recursive: true, force: true });
+        if (reserved)
+            await rmdir(destination);
+    }
+}
+/** Update only the report created by this conversion, never a replacement reached by a path. */
+export async function updateProjectReport(project, name, contents) {
+    const expected = project.reports.get(name);
+    if (!expected)
+        throw new Error("Report was not created by this conversion.");
+    const verifyDirectories = async () => {
+        for (const [path, expectedDirectory] of project.directories) {
+            const stat = await lstat(path, { bigint: true });
+            if (!stat.isDirectory() || stat.isSymbolicLink() || !sameIdentity(stat, expectedDirectory)) {
+                throw new Error("Output directory changed before report update; refusing to write.");
+            }
+        }
+    };
+    await verifyDirectories();
+    const target = join(project.directory, name);
+    // Do not truncate while resolving the path. Even if an ancestor changes after
+    // verification, fstat must identify our original regular file before any write.
+    const handle = await open(target, constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    try {
+        const stat = await handle.stat({ bigint: true });
+        const entry = await lstat(target, { bigint: true });
+        if (!stat.isFile() || stat.nlink !== 1n || !sameIdentity(stat, expected)
+            || stat.size !== expected.size || stat.mtimeNs !== expected.mtimeNs || stat.ctimeNs !== expected.ctimeNs
+            || entry.isSymbolicLink() || !sameIdentity(entry, expected)) {
+            throw new Error("Generated report changed before update; refusing to write.");
+        }
+        await verifyDirectories();
+        // The verified descriptor stays attached to our file even if paths move now.
+        await handle.writeFile(contents, "utf8");
+        await handle.truncate(Buffer.byteLength(contents, "utf8"));
+    }
+    finally {
+        await handle.close();
+    }
+}

package/docs/acceptance.md

@@ -0,0 +1,86 @@
+# agent2cursor 验收记录
+
+更新日期：2026-10-28。版本：`0.1.0`。目标 SDK：`@grok/agent-sdk@0.3.0`。用户已确定项目名为 `agent2cursor`。
+
+当前用户决定（2026-10-28）：GitHub 仓库 `mreasonyang/agent2cursor` 公开，并授权将 `@kyun.si/agent2cursor@0.1.0` 发布到 npm。根 package.json 保持 `private: true`，单独构建公开消费者归档；安装后的命令仍为 `agent2cursor`。npm 发布结果单独验证。
+
+## agent2cursor 更名（2026-10-28）
+
+项目由 `cc-to-cursor-agent` 更名为 `agent2cursor`，覆盖包名与锁文件、CLI、生成源码及报告、两个 demo 与生成模板、测试、双语文档、GitHub 仓库链接，以及 README 动图、海报和可编辑源文件。版本保持 `0.1.0`。
+
+新命令为 `agent2cursor`；示例快照路径为 `.agent2cursor/pr-review.json`，禁用存根错误码为 `AGENT2CURSOR_STUB_DISABLED`，可选合并开关为 `AGENT2CURSOR_ALLOW_MERGE`。旧命令不安装别名，旧开关不作为回退读取；合并仍默认关闭。
+
+更名前的独立评测原文、`docs/evidence/` 中既有 JSON 和固定 tstack 上游快照保留原始名称、路径与哈希；本次检查另行记录，不把历史真实模型结果算作更名后重跑。
+
+本次 `npm run check` 通过 74 项测试（含工作区原有的 Codex 引用 skill 不加载测试）。`npm run test:sdk` 的 Claude、Codex、tstack、full-send、pr-review 五类工程通过独立安装前后检查、SDK 结构校验、严格 TypeScript 和 eval 发现，证据位于 `.validation/acceptance-XieMEy/evidence.json`。本轮未执行真实模型或部署。
+
+`npm pack` 产物为 `agent2cursor-0.1.0.tgz`，在仓库外的干净 consumer 安装后验证了真实 `agent2cursor` bin 的帮助、版本、混合 Claude/Codex/skill 转换、两个 demo 和缺依赖时的 doctor 状态；运行源码与输出不再含旧项目标识。README 动图重新渲染为 960×540、10 fps、14 秒（140 帧），并核对海报画面和 [SOURCE.json](demo-video/SOURCE.json) 的新哈希。GitHub 仓库与 origin、本地目录均已更名，更名当时仍为私有；该轮没有发布到 npm。
+
+## 已验证
+
+| 项目 | 结果 | 证据边界 |
+| --- | --- | --- |
+| TypeScript 构建 | PASS | 本次本机 Node 26.11.0 与生成项目严格类型检查通过；历史私有 CI Node 22.13 / 24 已通过，当前提交 CI 见工作流 |
+| 自动测试 | PASS，73 项 | 2026-10-28 重跑 npm run check；新增 Codex TOML、混合输入、逐字段元数据、权限提示、敏感字段拒绝、解析错误不回显及打包前 CLI 回归 |
+| Codex 转换 | PASS，2 个子代理、1 个 skill | 合成 TOML 与 openai.yaml 样例；配置发现、类型检查与 SDK 结构校验通过，未跑真实模型 |
+| 四类 Claude 示例 | PASS，4 个子代理 | 独立编写的官方示例模式 fixture；不是官方示例逐字副本 |
+| 官方原始示例 | PASS，4 个子代理，零诊断 | 从官方 Markdown 下载并提取 code-reviewer/debugger/data-scientist/db-reader，在忽略目录转换；不把官方原文作为 fixture 再分发，哈希见 official-examples.provenance.json |
+| tstack 全量转换 | PASS | 9 个 skill，1 个 pr_wait agent tool；SDK info 核对数量和 execution 字段 |
+| 依赖闭包 | PASS | 单独 full-send 输入生成 5 个 skill，含 4 个依赖 |
+| SDK 结构验证 | PASS | 5 类生成项目均零 error；full-send demo 有 1 条预期禁用脚本 warning |
+| Eval 发现 | PASS | Claude 4 条、Codex 3 条、tstack 9 条、full-send 6 条、pr-review 3 条；只表示发现，不表示模型执行通过 |
+| 干净 tarball 安装（既有验收） | PASS | npm pack 后在独立 consumer 安装；真实 bin 的 convert、demo、doctor 均通过 SDK 自检 |
+| 许可 | PASS | 固定 tstack 提交、逐文件哈希、完整 MIT；普通 tstack 转换也保留 LICENSE-tstack |
+
+可重现命令：
+
+```sh
+npm ci --ignore-scripts
+npm run check
+npm install --prefix .validation --ignore-scripts --no-audit --no-fund @grok/agent-sdk@0.3.0
+npm run test:sdk
+```
+
+本机最终结构和类型检查证据在忽略目录 `.validation/acceptance-JjGsx6/evidence.json`；生成工程位于仓库外的系统临时目录，分别安装自身依赖，不再借用 `.validation` 的依赖。不包含凭证或真实模型轨迹。官方原始示例的历史产物保留在旧验收目录下的 `.validation/official-converted/`。首轮 [GitHub CI](https://github.com/mreasonyang/agent2cursor/actions/runs/40473284090) 已通过；最终提交状态以 [check 工作流](https://github.com/mreasonyang/agent2cursor/actions/workflows/check.yml) 为准。
+
+## Codex 适配验收（2026-10-28）
+
+支持独立 `.codex/agents/*.toml`、显式选择的 TOML 文件、Codex 通用 skill 及 `agents/openai.yaml`；输出仍是 Cursor Agent SDK。旧式角色注册和父会话配置不在本次转换范围。映射边界见 [上游核实](upstream-verification.md#codex-input-adapter-2026-10-28)，本次测试结果及源码哈希见 [Codex 证据](evidence/codex-adapter.json)。
+
+73 项本地测试和 5 类 SDK 工程集成检查通过；Codex 的 3 条路由 eval 仅完成发现，没有执行真实模型。此前 Claude/tstack 的在线运行记录不能作为 Codex 运行行为等价的证据。
+
+## 独立评测问题修复
+
+复测基于 `evaluation/20261027-1822/给作者.md` 指出的用例，修复前基线为 `e63b662`。脱敏结果和源码哈希见 [回归证据](evidence/evaluation-fixes.json)。
+
+- `N-SK-05` / `B-12`：默认转换退出 0，状态为 `dependencies-missing`，列出 SDK / zod 缺失，未声称通过校验。安装各自依赖后 SDK validate 均为零诊断。doctor 在依赖缺失时仍退出 1，真实语法错误仍被拒绝。
+- `N-MX-02` / `B-07`：保留原文及已有提示；追加提示时，正文结论明确降级。inspect 与 convert 使用相同的最终映射结论，不保留矛盾的“原样迁移”记录。
+- `N-AG-05` / `B-12`：报告分别列出 WebFetch 等工具名引用，源正文逐字保留。新增 WebSearch 覆盖与标识符边界测试，说明扫描采用固定名单。
+- `N-AG-04`：权限损失显示在终端摘要第一行和报告开头，JSON 摘要也包含 permissionWarning；未向子代理配置伪造 tools / disallowedTools / permissionMode。
+- `B-11` 继续拒绝敏感文件；输入脚本执行哨兵仍未出现。58 项单测通过；四类生成工程在独立目录中通过依赖安装前后、SDK 结构、严格类型和 eval 发现检查。
+
+此次修复不改变历史真实模型和线上验收的证据范围。
+
+## 线上验收
+
+修复后的独立评测见 [最终报告](../evaluation/20261027-2216/复测结论.md) 和 [汇总证据](evidence/independent-evaluation.json)：正常转换与安装后校验均为 24/24；3 个真实任务各重复 3 次，与直接复制/插件对照结果一致。生成的路由 eval 初次为 35/41，修改提示词与超时后为 41/41。汇总记录修复源码的哈希，不把旧提交的结果与新提示词混为一轮。
+
+以下是较早的 demo 验收。重复的 `deployments/pr-review` 本地验收副本已移除，维护入口统一为 `demos/pr-review`；原始证据里的历史路径和哈希仍可在下述历史提交中查验。
+
+以下结果来自更名前的 `cc2agent`。原始 [JSON 证据](evidence/online-2026-10-27.json) 中的仓库名和源码哈希保留不变；对应源码可在更名前提交 `f9fc7fe682252b82bce904f6df0d3da0f3d62de5` 中查验。本次更名重跑本地构建、测试、SDK 结构校验和打包验证，不把历史线上结果算作更名后重新运行。
+
+已通过官方远程浏览器登录流程完成 Cursor SDK 认证；用户不需要在运行电脑旁操作。认证信息仅由 SDK 管理，未写入代码或证据。
+
+- 真实模型 loadedSkill eval：PASS，转换生成的 migration-smoke，1 case / 2 assertions。
+- full-send 安全触发回合：PASS，配置私有仓库和默认未配置仓库各一次真实 `run`，均成功加载 full-send；每次 1 tool call、0 写入/执行调用、未调用 merge_pr。该场景仅检查 skill 加载与用途说明，不代表完整自动送 PR 流程。
+- 三视角 Council eval：PASS，1 case / 9 assertions（成功、三次完成委派、Council review 标题、降级声明、三行评分表）；默认同模型，不能声称三厂商或完整隔离已验证。
+- 测试 PR 事件：PASS，[私有验收 PR #1](https://github.com/mreasonyang/agent2cursor/pull/1) 经 HMAC 签名回放进入本地会话并完成。服务端读取只读快照，模型在 sandbox 内完成三次委派及中文评分表：8 次工具调用、0 工具错误、0 写入/执行调用。GitHub 评论、reaction、review 均为零。测试 PR 已关闭且未合并。回放不是 GitHub 实际 webhook 投递或托管验收。
+- 托管部署与 URL：BLOCKED；SDK `deploy --dry-run` 明确返回账号没有默认团队。需要用户提供已开通 hosting 的团队 ID；未执行实际部署，没有 URL。
+- GitHub CI：已通过 Node 22.13 / 24 单测和 npm pack，以及 SDK 兼容性任务。
+- 该轮历史验收未执行 npm / 公开 GitHub / 社交发布；本次新增的 GitHub 公开与 npm 发布授权单独执行和验收。
+
+## 不能混同的边界
+
+脚本存根明确禁用，不能以 validate 成功声称原脚本可执行。工具名扫描不自动改写任意输入 prompt。SDK 子代理权限与根白名单不等价；多代理隔离须独立验证。full-send 默认准备本地修改和 PR 草稿，自动测试、push、建 PR 尚未实现；合并 server tool 默认关闭并有审批和 head SHA 门禁。本地 sandbox 可能阻止 MCP server tool；pr-review 使用经过 SHA 校验的服务端快照解决本场景，不关闭 sandbox，也不声称 pr_wait 在 sandbox 模型回合中已经通过。
+
+两个 demo 显式关闭 SDK 的自动回帖、reaction 和 mention 触发。未配置仓库时禁用 GitHub channel。上述运行证据只覆盖具体用例，不能推广为所有输入下均无写入副作用。脱敏结果及源文件哈希见 [线上验收证据](evidence/online-2026-10-27.json)。