@praxis.guard/auditor-cli 0.0.1

package/dist/cli/policies-meta.js

@@ -0,0 +1,18 @@
+import { readFile } from "node:fs/promises";
+export async function readPoliciesMetaFile(metaPath) {
+    try {
+        const raw = await readFile(metaPath, "utf8");
+        const j = JSON.parse(raw);
+        if (typeof j.revision !== "number" || !Number.isFinite(j.revision)) {
+            return null;
+        }
+        return {
+            revision: j.revision,
+            syncedAt: typeof j.syncedAt === "string" ? j.syncedAt : undefined,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=policies-meta.js.map

package/dist/cli/policies-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies-meta.js","sourceRoot":"","sources":["../../src/cli/policies-meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAO5C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA+C,CAAC;QACxE,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/cli/policies-sync.d.ts

@@ -0,0 +1,2 @@
+export declare function runPoliciesSync(): Promise<void>;
+//# sourceMappingURL=policies-sync.d.ts.map

package/dist/cli/policies-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies-sync.d.ts","sourceRoot":"","sources":["../../src/cli/policies-sync.ts"],"names":[],"mappings":"AA8BA,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BrD"}

package/dist/cli/policies-sync.js

@@ -0,0 +1,40 @@
+import { writeFile, rename } from "node:fs/promises";
+import process from "node:process";
+import { defaultPoliciesMetaPath, defaultPoliciesV1Path, parsePoliciesV1Json, } from "../policy/index.js";
+import { fetchJson } from "./http-fetch.js";
+import { resolveGuardToken } from "./credentials.js";
+import { getInstallId } from "./install-id.js";
+import { functionsHttpUrl } from "./policies-callable-url.js";
+function policiesCallableBearer() {
+    const token = resolveGuardToken();
+    if (token)
+        return token;
+    const idToken = process.env.PRAXIS_FIREBASE_ID_TOKEN?.trim();
+    if (idToken)
+        return idToken;
+    throw new Error("Not authenticated. Run `auditor login`, or set PRAXIS_GUARD_TOKEN / PRAXIS_FIREBASE_ID_TOKEN.");
+}
+export async function runPoliciesSync() {
+    const bearer = policiesCallableBearer();
+    const url = functionsHttpUrl("policiesGetHttp");
+    const result = await fetchJson({
+        url,
+        bearerToken: bearer,
+        method: "POST",
+        body: { installId: getInstallId() },
+    });
+    const policies = parsePoliciesV1Json(result.policies);
+    const policyPath = process.env.PRAXIS_POLICIES_V1_PATH?.trim() || defaultPoliciesV1Path();
+    const metaPath = process.env.PRAXIS_POLICIES_META_PATH?.trim() || defaultPoliciesMetaPath();
+    const tmp = `${policyPath}.tmp.${process.pid}`;
+    const body = `${JSON.stringify(policies, null, 2)}\n`;
+    await writeFile(tmp, body, "utf8");
+    await rename(tmp, policyPath);
+    const meta = {
+        revision: result.revision,
+        syncedAt: new Date().toISOString(),
+    };
+    await writeFile(metaPath, `${JSON.stringify(meta, null, 2)}\n`, "utf8");
+    process.stdout.write(`Synced policies revision ${result.revision} to:\n  ${policyPath}\n  ${metaPath}\n`);
+}
+//# sourceMappingURL=policies-sync.js.map

package/dist/cli/policies-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies-sync.js","sourceRoot":"","sources":["../../src/cli/policies-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAQ9D,SAAS,sBAAsB;IAC7B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;IAExC,MAAM,GAAG,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAoB;QAChD,GAAG;QACH,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE;KACpC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,qBAAqB,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,uBAAuB,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,GAAG,UAAU,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAE9B,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAExE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4BAA4B,MAAM,CAAC,QAAQ,WAAW,UAAU,OAAO,QAAQ,IAAI,CACpF,CAAC;AACJ,CAAC"}

package/dist/cli/setup-all.d.ts

@@ -0,0 +1,9 @@
+type AllOptions = {
+    projectDir: string;
+    userConfigPath?: string;
+    dryRun: boolean;
+};
+export declare function parseSetupAllOptions(args: string[]): AllOptions;
+export declare function runSetupAll(args: string[]): Promise<void>;
+export {};
+//# sourceMappingURL=setup-all.d.ts.map

package/dist/cli/setup-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-all.d.ts","sourceRoot":"","sources":["../../src/cli/setup-all.ts"],"names":[],"mappings":"AAIA,KAAK,UAAU,GAAG;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA6B/D;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAU/D"}

package/dist/cli/setup-all.js

@@ -0,0 +1,43 @@
+import process from "node:process";
+import { upsertHookConfig, upsertMcpConfig } from "./cursor-config.js";
+export function parseSetupAllOptions(args) {
+    let projectDir = process.cwd();
+    let userConfigPath;
+    let dryRun = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (arg === "--project") {
+            const value = args[i + 1];
+            if (!value)
+                throw new Error("Missing value for --project");
+            projectDir = value;
+            i++;
+            continue;
+        }
+        if (arg === "--user-config") {
+            const value = args[i + 1];
+            if (!value)
+                throw new Error("Missing value for --user-config");
+            userConfigPath = value;
+            i++;
+            continue;
+        }
+        throw new Error(`Unknown setup all option: ${arg}`);
+    }
+    return { projectDir, userConfigPath, dryRun };
+}
+export async function runSetupAll(args) {
+    const opts = parseSetupAllOptions(args);
+    const hook = await upsertHookConfig(opts.projectDir, opts.dryRun);
+    const mcp = await upsertMcpConfig(opts.userConfigPath, opts.dryRun);
+    process.stdout.write("setup all:\n");
+    process.stdout.write(`  hook: ${hook.message}\n`);
+    process.stdout.write(`    path: ${hook.path}\n`);
+    process.stdout.write(`  mcp: ${mcp.message}\n`);
+    process.stdout.write(`    path: ${mcp.path}\n`);
+}
+//# sourceMappingURL=setup-all.js.map

package/dist/cli/setup-all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-all.js","sourceRoot":"","sources":["../../src/cli/setup-all.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAQvE,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,IAAI,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,cAAkC,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC3D,UAAU,GAAG,KAAK,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC/D,cAAc,GAAG,KAAK,CAAC;YACvB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/cli/setup-doctor.d.ts

@@ -0,0 +1,8 @@
+type SetupDoctorOptions = {
+    projectDir: string;
+    userConfigPath?: string;
+};
+export declare function parseSetupDoctorOptions(args: string[]): SetupDoctorOptions;
+export declare function runSetupDoctor(args: string[]): Promise<void>;
+export {};
+//# sourceMappingURL=setup-doctor.d.ts.map

package/dist/cli/setup-doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-doctor.d.ts","sourceRoot":"","sources":["../../src/cli/setup-doctor.ts"],"names":[],"mappings":"AASA,KAAK,kBAAkB,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAwB1E;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlE"}

package/dist/cli/setup-doctor.js

@@ -0,0 +1,42 @@
+import process from "node:process";
+import { readHookConfigured, readMcpConfigured, resolveProjectHooksPath, resolveUserMcpConfigPath, } from "./cursor-config.js";
+export function parseSetupDoctorOptions(args) {
+    let projectDir = process.cwd();
+    let userConfigPath;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--project") {
+            const value = args[i + 1];
+            if (!value)
+                throw new Error("Missing value for --project");
+            projectDir = value;
+            i++;
+            continue;
+        }
+        if (arg === "--user-config") {
+            const value = args[i + 1];
+            if (!value)
+                throw new Error("Missing value for --user-config");
+            userConfigPath = value;
+            i++;
+            continue;
+        }
+        throw new Error(`Unknown setup doctor option: ${arg}`);
+    }
+    return { projectDir, userConfigPath };
+}
+export async function runSetupDoctor(args) {
+    const opts = parseSetupDoctorOptions(args);
+    const hookPath = resolveProjectHooksPath(opts.projectDir);
+    const mcpPath = resolveUserMcpConfigPath(opts.userConfigPath);
+    const hookConfigured = await readHookConfigured(opts.projectDir).catch(() => false);
+    const mcpConfigured = await readMcpConfigured(opts.userConfigPath).catch(() => false);
+    process.stdout.write("setup doctor:\n");
+    process.stdout.write(`  hook: ${hookConfigured ? "configured" : "missing"} (${hookPath})\n`);
+    process.stdout.write(`  mcp: ${mcpConfigured ? "configured" : "missing"} (${mcpPath})\n`);
+    if (!hookConfigured || !mcpConfigured) {
+        process.stdout.write("  suggestion: run `auditor setup all`\n");
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=setup-doctor.js.map

package/dist/cli/setup-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-doctor.js","sourceRoot":"","sources":["../../src/cli/setup-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAO5B,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,IAAI,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,cAAkC,CAAC;IAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC3D,UAAU,GAAG,KAAK,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC/D,cAAc,GAAG,KAAK,CAAC;YACvB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAEtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,KAAK,CACvE,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,KAAK,CACpE,CAAC;IAEF,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/cli/setup-hook.d.ts

@@ -0,0 +1,8 @@
+type HookOptions = {
+    projectDir: string;
+    dryRun: boolean;
+};
+export declare function parseSetupHookOptions(args: string[]): HookOptions;
+export declare function runSetupHook(args: string[]): Promise<void>;
+export {};
+//# sourceMappingURL=setup-hook.d.ts.map

package/dist/cli/setup-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-hook.d.ts","sourceRoot":"","sources":["../../src/cli/setup-hook.ts"],"names":[],"mappings":"AAIA,KAAK,WAAW,GAAG;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CAqBjE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhE"}

package/dist/cli/setup-hook.js

@@ -0,0 +1,30 @@
+import process from "node:process";
+import { upsertHookConfig } from "./cursor-config.js";
+export function parseSetupHookOptions(args) {
+    let projectDir = process.cwd();
+    let dryRun = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (arg === "--project") {
+            const value = args[i + 1];
+            if (!value)
+                throw new Error("Missing value for --project");
+            projectDir = value;
+            i++;
+            continue;
+        }
+        throw new Error(`Unknown setup hook option: ${arg}`);
+    }
+    return { projectDir, dryRun };
+}
+export async function runSetupHook(args) {
+    const opts = parseSetupHookOptions(args);
+    const result = await upsertHookConfig(opts.projectDir, opts.dryRun);
+    process.stdout.write(`setup hook: ${result.message}\n`);
+    process.stdout.write(`path: ${result.path}\n`);
+}
+//# sourceMappingURL=setup-hook.js.map

package/dist/cli/setup-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-hook.js","sourceRoot":"","sources":["../../src/cli/setup-hook.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAOtD,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,IAAI,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC3D,UAAU,GAAG,KAAK,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/cli/setup-mcp.d.ts

@@ -0,0 +1,8 @@
+type McpOptions = {
+    userConfigPath?: string;
+    dryRun: boolean;
+};
+export declare function parseSetupMcpOptions(args: string[]): McpOptions;
+export declare function runSetupMcp(args: string[]): Promise<void>;
+export {};
+//# sourceMappingURL=setup-mcp.d.ts.map

package/dist/cli/setup-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-mcp.d.ts","sourceRoot":"","sources":["../../src/cli/setup-mcp.ts"],"names":[],"mappings":"AAIA,KAAK,UAAU,GAAG;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAqB/D;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAK/D"}

package/dist/cli/setup-mcp.js

@@ -0,0 +1,30 @@
+import process from "node:process";
+import { upsertMcpConfig } from "./cursor-config.js";
+export function parseSetupMcpOptions(args) {
+    let userConfigPath;
+    let dryRun = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (arg === "--user-config") {
+            const value = args[i + 1];
+            if (!value)
+                throw new Error("Missing value for --user-config");
+            userConfigPath = value;
+            i++;
+            continue;
+        }
+        throw new Error(`Unknown setup mcp option: ${arg}`);
+    }
+    return { userConfigPath, dryRun };
+}
+export async function runSetupMcp(args) {
+    const opts = parseSetupMcpOptions(args);
+    const result = await upsertMcpConfig(opts.userConfigPath, opts.dryRun);
+    process.stdout.write(`setup mcp: ${result.message}\n`);
+    process.stdout.write(`path: ${result.path}\n`);
+}
+//# sourceMappingURL=setup-mcp.js.map

package/dist/cli/setup-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-mcp.js","sourceRoot":"","sources":["../../src/cli/setup-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAOrD,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,IAAI,cAAkC,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC/D,cAAc,GAAG,KAAK,CAAC;YACvB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/cli/touch-last-seen.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Best-effort fire-and-forget heartbeat to keep `lastSeenAt` fresh.
+ * Debounced: skips if called again within 30s.
+ */
+export declare function touchLastSeen(): Promise<void>;
+//# sourceMappingURL=touch-last-seen.d.ts.map

package/dist/cli/touch-last-seen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"touch-last-seen.d.ts","sourceRoot":"","sources":["../../src/cli/touch-last-seen.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAkCnD"}

package/dist/cli/touch-last-seen.js

@@ -0,0 +1,46 @@
+import { resolveGuardToken } from "./credentials.js";
+import { getInstallId } from "./install-id.js";
+import { prodFunctionUrl } from "./function-url.js";
+const CLI_VERSION = "0.0.1";
+let lastTouchMs = 0;
+const MIN_TOUCH_INTERVAL_MS = 30_000;
+/**
+ * Best-effort fire-and-forget heartbeat to keep `lastSeenAt` fresh.
+ * Debounced: skips if called again within 30s.
+ */
+export async function touchLastSeen() {
+    const now = Date.now();
+    if (now - lastTouchMs < MIN_TOUCH_INTERVAL_MS)
+        return;
+    lastTouchMs = now;
+    const heartbeatUrl = process.env.PRAXIS_GUARD_HEARTBEAT_URL || prodFunctionUrl("guardHeartbeat");
+    const token = resolveGuardToken();
+    if (!token)
+        return;
+    const payload = {
+        installId: getInstallId(),
+        kind: "auditor-cli",
+        version: CLI_VERSION,
+        status: "active",
+        client: {
+            os: process.platform,
+            arch: process.arch,
+            node: process.version,
+        },
+    };
+    try {
+        await fetch(heartbeatUrl, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(3000),
+        });
+    }
+    catch {
+        // best-effort — never fails the caller
+    }
+}
+//# sourceMappingURL=touch-last-seen.js.map

package/dist/cli/touch-last-seen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"touch-last-seen.js","sourceRoot":"","sources":["../../src/cli/touch-last-seen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,WAAW,GAAG,qBAAqB;QAAE,OAAO;IACtD,WAAW,GAAG,GAAG,CAAC;IAElB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,YAAY,EAAE;QACzB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE;YACN,EAAE,EAAE,OAAO,CAAC,QAAQ;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,OAAO;SACtB;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,YAAY,EAAE;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC"}

package/dist/cli/version.d.ts

@@ -0,0 +1,2 @@
+export declare function runVersion(): void;
+//# sourceMappingURL=version.d.ts.map

package/dist/cli/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/cli/version.ts"],"names":[],"mappings":"AAMA,wBAAgB,UAAU,IAAI,IAAI,CAajC"}

package/dist/cli/version.js

@@ -0,0 +1,19 @@
+import { execSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import path from "node:path";
+import process from "node:process";
+export function runVersion() {
+    const pkgPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../package.json");
+    const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+    const version = pkg.version ?? "0.0.0";
+    let sha = "";
+    try {
+        sha = execSync("git rev-parse --short HEAD", { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    }
+    catch {
+        // Not a git checkout or git unavailable
+    }
+    process.stdout.write(sha ? `auditor ${version} (${sha})\n` : `auditor ${version}\n`);
+}
+//# sourceMappingURL=version.js.map

package/dist/cli/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/cli/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;IAC9E,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAEvC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,OAAO,IAAI,CAAC,CAAC;AACvF,CAAC"}

package/dist/cli/whoami.d.ts

@@ -0,0 +1,2 @@
+export declare function runWhoami(): Promise<void>;
+//# sourceMappingURL=whoami.d.ts.map

package/dist/cli/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../src/cli/whoami.ts"],"names":[],"mappings":"AAaA,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAgC/C"}

package/dist/cli/whoami.js

@@ -0,0 +1,36 @@
+import process from "node:process";
+import { fetchJson } from "./http-fetch.js";
+import { credentialsPath, resolveGuardToken } from "./credentials.js";
+import { getInstallId } from "./install-id.js";
+import { functionsHttpUrl } from "./policies-callable-url.js";
+export async function runWhoami() {
+    const token = resolveGuardToken() || process.env.PRAXIS_FIREBASE_ID_TOKEN?.trim();
+    if (!token) {
+        process.stderr.write("Not authenticated. Run `auditor login` or set PRAXIS_GUARD_TOKEN or PRAXIS_FIREBASE_ID_TOKEN.\n");
+        process.exitCode = 1;
+        return;
+    }
+    const tokenSource = process.env.PRAXIS_GUARD_TOKEN?.trim()
+        ? "env:PRAXIS_GUARD_TOKEN"
+        : process.env.PRAXIS_FIREBASE_ID_TOKEN?.trim()
+            ? "env:PRAXIS_FIREBASE_ID_TOKEN"
+            : `file:${credentialsPath()}`;
+    try {
+        const installId = getInstallId();
+        const me = await fetchJson({
+            url: functionsHttpUrl("guardWhoAmIHttp"),
+            bearerToken: token,
+        });
+        process.stdout.write(`uid:         ${me.uid}\n`);
+        process.stdout.write(`email:       ${me.email ?? "(none)"}\n`);
+        process.stdout.write(`displayName: ${me.displayName ?? "(none)"}\n`);
+        process.stdout.write(`installId:   ${installId}\n`);
+        process.stdout.write(`tokenSource: ${tokenSource}\n`);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        process.stderr.write(`whoami failed: ${msg}\n`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=whoami.js.map

package/dist/cli/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/cli/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAuB,MAAM,4BAA4B,CAAC;AAQnF,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,KAAK,GAAG,iBAAiB,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAClF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iGAAiG,CAClG,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE;QACxD,CAAC,CAAC,wBAAwB;QAC1B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;YAC5C,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,QAAQ,eAAe,EAAE,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,MAAM,SAAS,CAAe;YACvC,GAAG,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;YACxC,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,KAAK,IAAI,QAAQ,IAAI,CAAC,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,WAAW,IAAI,QAAQ,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,SAAS,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,WAAW,IAAI,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import process from "node:process";
+import { runCli } from "./cli/main.js";
+import { failClosedHookErrorResponse } from "./hooks/run-before-shell.js";
+const argv = process.argv.slice(2);
+const isBeforeShellHook = argv[0] === "hook" && argv[1] === "before-shell";
+if (isBeforeShellHook) {
+    void runCli(argv).catch((err) => {
+        process.stdout.write(JSON.stringify(failClosedHookErrorResponse(err), null, 2));
+        process.exit(0);
+    });
+}
+else {
+    void runCli(argv).catch((err) => {
+        console.error(err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC;AAE3E,IAAI,iBAAiB,EAAE,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/hooks/run-before-shell.d.ts

@@ -0,0 +1,16 @@
+export type BeforeShellExecutionPayload = {
+    command: string;
+    cwd?: string;
+    sandbox?: boolean;
+};
+export type BeforeShellExecutionResponse = {
+    permission: "allow" | "deny" | "ask";
+    user_message?: string;
+    agent_message?: string;
+};
+/**
+ * Cursor `beforeShellExecution` contract: read one JSON object from stdin, write one JSON object to stdout.
+ */
+export declare function runBeforeShellHookFromStdin(): Promise<void>;
+export declare function failClosedHookErrorResponse(err: unknown): BeforeShellExecutionResponse;
+//# sourceMappingURL=run-before-shell.d.ts.map

package/dist/hooks/run-before-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-before-shell.d.ts","sourceRoot":"","sources":["../../src/hooks/run-before-shell.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AA+BF;;GAEG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CA8FjE;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,4BAA4B,CAMtF"}