@mnemonik/cursor-hooks 0.1.0

package/dist/lib/behavior.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Package-level behaviour constants for the Cursor hook dispatcher.
+ *
+ * Why these are constants, not user config:
+ *
+ *   The dogfood-platform model: WE (the package maintainers) decide which
+ *   gates run in which mode at any given version. Customers install a
+ *   version of this package and get the contract that version ships with.
+ *   They do not reason about JSON settings files; they do not flip
+ *   advisory-vs-enforce switches; the only knobs they ever touch are
+ *   policy declarations (forbiddenCommand, mustConfirm) which describe
+ *   their INTENT — Mnemonik honours that intent automatically.
+ *
+ *   When a gate matures, the maintainers flip its constant here, bump
+ *   the package version, ship. Every customer on the new version gets
+ *   the new default. No JSON edits, no migration guides.
+ *
+ *   The one exception is MNEMONIK_BYPASS_HOOKS — that's an emergency
+ *   environment-variable escape hatch, not config.
+ *
+ *   Kept in sync with @mnemonik/codex-hooks and @mnemonik/claude-code-hooks.
+ */
+export type GateMode = 'advisory' | 'enforce' | 'off';
+export type SoftMode = 'advisory' | 'off';
+/**
+ * sessionStart + beforeSubmitPrompt context injection (Cursor-equivalent
+ * of codex-hooks PROMPT_CONTEXT and claude-code-hooks userPromptContext).
+ */
+export declare const PROMPT_CONTEXT: SoftMode;
+/** preToolUse Edit/Write gate (Cursor matcher "Write" covers all edit-class operations). */
+export declare const PRE_EDIT_GATE: GateMode;
+/** Auto-fetch file_context from the server in PreEdit advisory mode. */
+export declare const PRE_EDIT_ADVISORY_AUTO_FETCH = true;
+/** beforeShellExecution gate. Irreducible deny + server-side policy reminder. */
+export declare const PRE_BASH_GATE: GateMode;
+/**
+ * beforeMCPExecution gate. Calls /api/v1/hooks/mcp-precheck for Mnemonik
+ * MCP tool calls and forwards the server verdict. The endpoint enforces
+ * Cat 1-9 of the ordering-rule taxonomy. Cat 10 enrichment runs server-side
+ * via enrichArgs() and is invisible to the hook.
+ */
+export declare const PRE_MCP_GATE: GateMode;
+/**
+ * stop continuation pressure ("you made changes but didn't checkpoint").
+ * loop_limit: null on stop/subagentStop so this isn't capped at 5.
+ */
+export declare const CHECKPOINT_PRESSURE: SoftMode;
+/** subagentStart / subagentStop observability. */
+export declare const SUBAGENT_TRACK: SoftMode;
+/** preCompact observational telemetry. Cursor does not allow gating on this event. */
+export declare const PRECOMPACT_OBSERVE: SoftMode;

package/dist/lib/behavior.js

@@ -0,0 +1,50 @@
+/**
+ * Package-level behaviour constants for the Cursor hook dispatcher.
+ *
+ * Why these are constants, not user config:
+ *
+ *   The dogfood-platform model: WE (the package maintainers) decide which
+ *   gates run in which mode at any given version. Customers install a
+ *   version of this package and get the contract that version ships with.
+ *   They do not reason about JSON settings files; they do not flip
+ *   advisory-vs-enforce switches; the only knobs they ever touch are
+ *   policy declarations (forbiddenCommand, mustConfirm) which describe
+ *   their INTENT — Mnemonik honours that intent automatically.
+ *
+ *   When a gate matures, the maintainers flip its constant here, bump
+ *   the package version, ship. Every customer on the new version gets
+ *   the new default. No JSON edits, no migration guides.
+ *
+ *   The one exception is MNEMONIK_BYPASS_HOOKS — that's an emergency
+ *   environment-variable escape hatch, not config.
+ *
+ *   Kept in sync with @mnemonik/codex-hooks and @mnemonik/claude-code-hooks.
+ */
+/**
+ * sessionStart + beforeSubmitPrompt context injection (Cursor-equivalent
+ * of codex-hooks PROMPT_CONTEXT and claude-code-hooks userPromptContext).
+ */
+export const PROMPT_CONTEXT = 'advisory';
+/** preToolUse Edit/Write gate (Cursor matcher "Write" covers all edit-class operations). */
+export const PRE_EDIT_GATE = 'advisory';
+/** Auto-fetch file_context from the server in PreEdit advisory mode. */
+export const PRE_EDIT_ADVISORY_AUTO_FETCH = true;
+/** beforeShellExecution gate. Irreducible deny + server-side policy reminder. */
+export const PRE_BASH_GATE = 'advisory';
+/**
+ * beforeMCPExecution gate. Calls /api/v1/hooks/mcp-precheck for Mnemonik
+ * MCP tool calls and forwards the server verdict. The endpoint enforces
+ * Cat 1-9 of the ordering-rule taxonomy. Cat 10 enrichment runs server-side
+ * via enrichArgs() and is invisible to the hook.
+ */
+export const PRE_MCP_GATE = 'advisory';
+/**
+ * stop continuation pressure ("you made changes but didn't checkpoint").
+ * loop_limit: null on stop/subagentStop so this isn't capped at 5.
+ */
+export const CHECKPOINT_PRESSURE = 'advisory';
+/** subagentStart / subagentStop observability. */
+export const SUBAGENT_TRACK = 'advisory';
+/** preCompact observational telemetry. Cursor does not allow gating on this event. */
+export const PRECOMPACT_OBSERVE = 'advisory';
+//# sourceMappingURL=behavior.js.map

package/dist/lib/behavior.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior.js","sourceRoot":"","sources":["../../src/lib/behavior.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAa,UAAU,CAAC;AAEnD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,aAAa,GAAa,UAAU,CAAC;AAElD,wEAAwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAa,UAAU,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAa,UAAU,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAa,UAAU,CAAC;AAExD,kDAAkD;AAClD,MAAM,CAAC,MAAM,cAAc,GAAa,UAAU,CAAC;AAEnD,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAa,UAAU,CAAC"}

package/dist/lib/cursorOutput.d.ts

@@ -0,0 +1,23 @@
+import type { CursorHookOutput } from './types.js';
+/**
+ * Output builders for the Cursor hook contract. Cursor accepts a family
+ * of shapes depending on the hook event; we keep them as small builders
+ * so the dispatcher reads cleanly.
+ *
+ * Reference: cursor.com/docs/hooks (verified 2026-05-12, plan §3.2).
+ */
+export declare function allow(): CursorHookOutput;
+export declare function deny(reason: string, userMessage?: string): CursorHookOutput;
+export declare function ask(reason: string, userMessage?: string): CursorHookOutput;
+export declare function continueWith(message?: string): CursorHookOutput;
+export declare function stopWithFollowup(message: string): CursorHookOutput;
+/**
+ * sessionStart / postToolUse output. `additional_context` is the documented
+ * field for context injection on these events.
+ */
+export declare function additionalContext(text: string): CursorHookOutput;
+/**
+ * Truncate a context string to a byte budget while leaving a marker so the
+ * agent knows it was clipped.
+ */
+export declare function trimContext(text: string, maxBytes?: number): string;

package/dist/lib/cursorOutput.js

@@ -0,0 +1,58 @@
+/**
+ * Output builders for the Cursor hook contract. Cursor accepts a family
+ * of shapes depending on the hook event; we keep them as small builders
+ * so the dispatcher reads cleanly.
+ *
+ * Reference: cursor.com/docs/hooks (verified 2026-05-12, plan §3.2).
+ */
+export function allow() {
+    return { permission: 'allow' };
+}
+export function deny(reason, userMessage) {
+    return {
+        permission: 'deny',
+        agent_message: reason,
+        ...(userMessage ? { user_message: userMessage } : {}),
+    };
+}
+export function ask(reason, userMessage) {
+    return {
+        permission: 'ask',
+        agent_message: reason,
+        ...(userMessage ? { user_message: userMessage } : {}),
+    };
+}
+export function continueWith(message) {
+    return {
+        continue: true,
+        ...(message ? { user_message: message } : {}),
+    };
+}
+export function stopWithFollowup(message) {
+    return { followup_message: message };
+}
+/**
+ * sessionStart / postToolUse output. `additional_context` is the documented
+ * field for context injection on these events.
+ */
+export function additionalContext(text) {
+    return { additional_context: text };
+}
+/**
+ * Truncate a context string to a byte budget while leaving a marker so the
+ * agent knows it was clipped.
+ */
+export function trimContext(text, maxBytes = 12_000) {
+    if (Buffer.byteLength(text, 'utf8') <= maxBytes)
+        return text;
+    const suffix = '\n\n[Mnemonik: context exceeded hook budget. Call memory_get/file_context for full detail if needed.]';
+    const budget = Math.max(0, maxBytes - Buffer.byteLength(suffix, 'utf8'));
+    let out = '';
+    for (const ch of text) {
+        if (Buffer.byteLength(out + ch, 'utf8') > budget)
+            break;
+        out += ch;
+    }
+    return out + suffix;
+}
+//# sourceMappingURL=cursorOutput.js.map

package/dist/lib/cursorOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursorOutput.js","sourceRoot":"","sources":["../../src/lib/cursorOutput.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,UAAU,KAAK;IACnB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,MAAc,EAAE,WAAoB;IACvD,OAAO;QACL,UAAU,EAAE,MAAM;QAClB,aAAa,EAAE,MAAM;QACrB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,WAAoB;IACtD,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,MAAM;QACrB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAQ,GAAG,MAAM;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GACV,uGAAuG,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,MAAM;YAAE,MAAM;QACxD,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,GAAG,MAAM,CAAC;AACtB,CAAC"}

package/dist/lib/env.d.ts

@@ -0,0 +1,9 @@
+import { type BypassEnvelope, type HookConfig } from './types.js';
+export declare function isNonInteractive(env?: NodeJS.ProcessEnv): boolean;
+export declare function parseBypass(env?: NodeJS.ProcessEnv): BypassEnvelope;
+/**
+ * Resolve hook config: apiKey + server only. `.mnemonik.json` is NOT read
+ * here — gate enforcement modes are package-level constants in
+ * lib/behavior.ts (plug-and-play per cursor-hooks plan §10).
+ */
+export declare function resolveConfig(_cwd: string, env?: NodeJS.ProcessEnv): Promise<HookConfig>;

package/dist/lib/env.js

@@ -0,0 +1,77 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_SERVER } from './types.js';
+const VALID_BYPASS_TYPES = new Set([
+    'typo',
+    'formatting',
+    'regenerated',
+    'already_grounded',
+    'other',
+]);
+export function isNonInteractive(env = process.env) {
+    if (env.CI === 'true')
+        return true;
+    if (env.GITHUB_ACTIONS === 'true')
+        return true;
+    if (env.MNEMONIK_NONINTERACTIVE === '1')
+        return true;
+    return false;
+}
+export function parseBypass(env = process.env) {
+    if (env.MNEMONIK_BYPASS_HOOKS !== '1') {
+        return { active: false, type: null, detail: null, invalidReason: null };
+    }
+    const rawType = (env.MNEMONIK_BYPASS_TYPE ?? '').trim().toLowerCase();
+    if (!rawType) {
+        return {
+            active: false,
+            type: null,
+            detail: null,
+            invalidReason: 'MNEMONIK_BYPASS_TYPE is required when MNEMONIK_BYPASS_HOOKS=1',
+        };
+    }
+    if (!VALID_BYPASS_TYPES.has(rawType)) {
+        return {
+            active: false,
+            type: null,
+            detail: null,
+            invalidReason: `MNEMONIK_BYPASS_TYPE must be one of ${[...VALID_BYPASS_TYPES].join('|')}`,
+        };
+    }
+    const type = rawType;
+    if (type === 'other') {
+        const detail = (env.MNEMONIK_BYPASS_DETAIL ?? '').trim();
+        if (detail.length < 50 || detail.length > 200) {
+            return {
+                active: false,
+                type: null,
+                detail: null,
+                invalidReason: "MNEMONIK_BYPASS_TYPE='other' requires MNEMONIK_BYPASS_DETAIL of 50-200 chars",
+            };
+        }
+        return { active: true, type, detail, invalidReason: null };
+    }
+    return { active: true, type, detail: null, invalidReason: null };
+}
+async function readJson(path) {
+    try {
+        const raw = await readFile(path, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve hook config: apiKey + server only. `.mnemonik.json` is NOT read
+ * here — gate enforcement modes are package-level constants in
+ * lib/behavior.ts (plug-and-play per cursor-hooks plan §10).
+ */
+export async function resolveConfig(_cwd, env = process.env) {
+    const scanner = await readJson(join(homedir(), '.mnemonik', 'scanner.json'));
+    const apiKey = env.MNEMONIK_API_KEY?.trim() || scanner?.apiKey?.trim() || null;
+    const server = (env.MNEMONIK_SERVER?.trim() || scanner?.server?.trim() || DEFAULT_SERVER).replace(/\/$/, '');
+    return { apiKey, server };
+}
+//# sourceMappingURL=env.js.map

package/dist/lib/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAyD,MAAM,YAAY,CAAC;AAEnG,MAAM,kBAAkB,GAA4B,IAAI,GAAG,CAAC;IAC1D,MAAM;IACN,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,CAAC,uBAAuB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,+DAA+D;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAqB,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,uCAAuC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAqB,CAAC;IACnC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,aAAa,EACX,8EAA8E;aACjF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAOD,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAc,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1F,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC,CAAC,OAAO,CAC/F,KAAK,EACL,EAAE,CACH,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/lib/http.d.ts

@@ -0,0 +1,83 @@
+import type { HookContextResponse, McpPrecheckResponse, PolicyReminderResponse, SnapshotResponse } from './types.js';
+export interface FetchSnapshotInput {
+    server: string;
+    apiKey: string;
+    cwd: string;
+    cursorSessionId: string;
+}
+export declare function fetchSnapshot(input: FetchSnapshotInput): Promise<SnapshotResponse | null>;
+export interface FetchPolicyReminderInput {
+    server: string;
+    apiKey: string;
+    cwd: string;
+    cursorSessionId: string;
+    tool: string;
+    context: string;
+}
+export declare function fetchPolicyReminder(input: FetchPolicyReminderInput): Promise<PolicyReminderResponse | null>;
+export interface FetchHookContextInput {
+    server: string;
+    apiKey: string;
+    cwd: string;
+    cursorSessionId: string;
+    event: string;
+    prompt?: string;
+    toolName?: string;
+    filePaths?: string[];
+    lastAssistantMessage?: string | null;
+}
+export declare function fetchHookContext(input: FetchHookContextInput): Promise<HookContextResponse | null>;
+export interface FetchMcpPrecheckInput {
+    server: string;
+    apiKey: string;
+    cwd: string;
+    cursorSessionId: string;
+    tool: string;
+    args: Record<string, unknown>;
+    model?: string;
+}
+export declare function fetchMcpPrecheck(input: FetchMcpPrecheckInput): Promise<McpPrecheckResponse | null>;
+export interface ReportGateFiredInput {
+    server: string;
+    apiKey: string | null;
+    cwd: string;
+    cursorSessionId: string;
+    tool: string;
+    mode: 'advisory' | 'enforce' | 'off';
+    outcome: string;
+}
+export declare function reportGateFired(input: ReportGateFiredInput): Promise<void>;
+export interface ReportBypassInput {
+    server: string;
+    apiKey: string | null;
+    cwd: string;
+    cursorSessionId: string;
+    tool: string;
+    bypassType: string;
+    detail: string | null;
+}
+export declare function reportBypass(input: ReportBypassInput): Promise<void>;
+export declare function trackIdeEdit(input: {
+    server: string;
+    apiKey: string | null;
+    sessionId: string;
+    filePath: string;
+}): Promise<void>;
+export interface ReportSubagentInput {
+    server: string;
+    apiKey: string | null;
+    cwd: string;
+    cursorSessionId: string;
+    event: 'start' | 'stop';
+    subagentId: string;
+    subagentType?: string;
+    task?: string;
+    parentConversationId?: string;
+    toolCallId?: string;
+    subagentModel?: string;
+    isParallelWorker?: boolean;
+    gitBranch?: string;
+    status?: string;
+    durationMs?: number;
+}
+export declare function reportSubagent(input: ReportSubagentInput): Promise<void>;

package/dist/lib/http.js

@@ -0,0 +1,257 @@
+const FETCH_TIMEOUT_MS = 2000;
+const TELEMETRY_TIMEOUT_MS = 500;
+const POST_TOOL_TIMEOUT_MS = 1500;
+const MCP_PRECHECK_TIMEOUT_MS = 2000;
+function withTimeout(ms) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), ms);
+    return { signal: ac.signal, cleanup: () => clearTimeout(timer) };
+}
+const HOST = 'cursor';
+export async function fetchSnapshot(input) {
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/snapshot`;
+    const { signal, cleanup } = withTimeout(FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                // The snapshot endpoint accepts claudeSessionId as the historical field
+                // name; codex-hooks reuses it for host-agnostic session correlation.
+                claudeSessionId: input.cursorSessionId,
+                host: HOST,
+            }),
+            signal,
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function fetchPolicyReminder(input) {
+    if (!input.context.trim())
+        return null;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/policy-reminder`;
+    const { signal, cleanup } = withTimeout(FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                claudeSessionId: input.cursorSessionId,
+                tool: input.tool,
+                context: input.context,
+            }),
+            signal,
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function fetchHookContext(input) {
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/context`;
+    const { signal, cleanup } = withTimeout(FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                host: HOST,
+                event: input.event,
+                cwd: input.cwd,
+                sessionId: input.cursorSessionId,
+                prompt: input.prompt,
+                toolName: input.toolName,
+                filePaths: input.filePaths,
+                lastAssistantMessage: input.lastAssistantMessage,
+            }),
+            signal,
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function fetchMcpPrecheck(input) {
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/mcp-precheck`;
+    const { signal, cleanup } = withTimeout(MCP_PRECHECK_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                cursorSessionId: input.cursorSessionId,
+                tool: input.tool,
+                args: input.args,
+                model: input.model,
+                host: HOST,
+            }),
+            signal,
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function reportGateFired(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/gate-fired`;
+    const { signal, cleanup } = withTimeout(TELEMETRY_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                host: HOST,
+                cursorSessionId: input.cursorSessionId,
+                tool: input.tool,
+                mode: input.mode,
+                outcome: input.outcome,
+            }),
+            signal,
+        });
+    }
+    catch {
+        // Telemetry must not crash hooks.
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function reportBypass(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/bypass`;
+    const { signal, cleanup } = withTimeout(TELEMETRY_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                host: HOST,
+                cursorSessionId: input.cursorSessionId,
+                tool: input.tool,
+                bypassType: input.bypassType,
+                detail: input.detail,
+            }),
+            signal,
+        });
+    }
+    catch {
+        // Telemetry must not crash hooks.
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function trackIdeEdit(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/session/track-ide-edit`;
+    const { signal, cleanup } = withTimeout(POST_TOOL_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({ sessionId: input.sessionId, filePath: input.filePath, host: HOST }),
+            signal,
+        });
+    }
+    catch {
+        // Best effort only.
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function reportSubagent(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/subagent`;
+    const { signal, cleanup } = withTimeout(TELEMETRY_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                cursorSessionId: input.cursorSessionId,
+                host: HOST,
+                event: input.event,
+                subagentId: input.subagentId,
+                subagentType: input.subagentType,
+                task: input.task,
+                parentConversationId: input.parentConversationId,
+                toolCallId: input.toolCallId,
+                subagentModel: input.subagentModel,
+                isParallelWorker: input.isParallelWorker,
+                gitBranch: input.gitBranch,
+                status: input.status,
+                durationMs: input.durationMs,
+            }),
+            signal,
+        });
+    }
+    catch {
+        // Telemetry must not crash hooks.
+    }
+    finally {
+        cleanup();
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/lib/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAOA,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,IAAI,GAAG,QAAQ,CAAC;AAStB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC;IACvE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,wEAAwE;gBACxE,qEAAqE;gBACrE,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,+BAA+B,CAAC;IAC9E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC;IACtE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS,EAAE,KAAK,CAAC,eAAe;gBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;aACjD,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC;IAC3E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA2B;IAC/D,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC;IACzE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,IAAI;gBACV,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;YACF,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC;IACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,IAAI;gBACV,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;YACF,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAKlC;IACC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,CAAC;IAC/E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC1F,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B;IAC7D,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC;IACvE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;gBAChD,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;YACF,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/lib/shellTokens.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Irreducible deny-floor for catastrophic, irreversible commands.
+ * Kept in sync with @mnemonik/codex-hooks/src/lib/shellTokens.ts and
+ * @mnemonik/claude-code-hooks/src/lib/shellTokens.ts — see those files
+ * for the full rationale.
+ *
+ * Phase 1 / 0.1.0 of cursor-hooks: this is the ONE place the dispatcher
+ * does local pattern matching. Every other policy decision lives behind
+ * /api/v1/hooks/policy-reminder (Bash) or /api/v1/hooks/mcp-precheck (MCP).
+ */
+export declare const IRREDUCIBLE_DENY: ReadonlyArray<{
+    name: string;
+    pattern: RegExp;
+}>;
+export declare function matchIrreducibleDeny(command: string): string | null;