@praxis.guard/auditor-cli 0.0.35 → 0.0.37

package/README.md

@@ -1,6 +1,6 @@
 # @praxis/auditor-cli
 
-Shared **guard runtime** for Praxis shell policy: argv parsing (`shell-quote`), `evaluateShellProposal` / `evaluateArgv` / `gateShellCommand`, JSONL audit append, and the **shell approval bridge** under `.cursor/guard/bridge`.
+Shared **guard runtime** for Praxis shell policy: argv parsing (`shell-quote`), `evaluateShellProposal` / `evaluateArgv` / `gateShellCommand`, JSONL audit append, and the **shell approval bridge** under `.praxis/guard/bridge`.
 
 ## Single entry: `auditor`
 
@@ -8,14 +8,25 @@ Use one built binary for **MCP stdio**, **Cursor hook**, and diagnostics:
 
 | Surface | Command |
 |--------|---------|
-| **MCP** (`mcp.json`) | `auditor` + args `["mcp"]`, or `node …/auditor-cli/dist/cli.js mcp` |
+| **MCP** (`mcp.json` / `claude_desktop_config.json`) | `auditor` + args `["mcp"]`, or `node …/auditor-cli/dist/cli.js mcp` |
 | **Hook** (`.cursor/hooks.json`) | `node …/auditor-cli/dist/cli.js hook before-shell` (or `auditor hook before-shell` if `auditor` is on `PATH`) |
 
 Legacy configs that still reference `guard-mcp` are migrated by `auditor setup all` / `auditor setup doctor`.
 
+## Supported agent hosts
+
+Each `auditor setup` command auto-detects installed agents and configures all of them. Use `--for=<agent>` (repeatable) to scope explicitly.
+
+| Agent | MCP | Pre-tool hooks | Cloud Agents |
+|-------|-----|----------------|--------------|
+| **Cursor** (`--for=cursor`) | `~/.cursor/mcp.json` | `~/.cursor/hooks.json` (or `.cursor/hooks.json` per-project) | `.cursor/environment.json` |
+| **Claude Desktop** (`--for=claude-desktop`) | `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) / `%APPDATA%/Claude/claude_desktop_config.json` (Windows) | — | — |
+
+The MCP server tags itself with `PRAXIS_AGENT_HOST=<agent>` in its registration env so heartbeats report which host launched it. See [docs/auditor-cli-multi-agent-adapter-design.md](../../docs/auditor-cli-multi-agent-adapter-design.md) for the full design.
+
 ## MUTATE human approval
 
-Hooks **enforce** (deny without bridge). MCP **`guard`** / **`guard_wait`** **coordinate**: create `approval_requests` in Cloud Functions, human approves in the Praxis app (or dev: `auditor approvals approve` with `GUARD_APPROVAL_DEV=1`), then redeem grant and write the one-shot `.cursor/guard/bridge` file.
+Hooks **enforce** (deny without bridge). MCP **`guard`** / **`guard_wait`** **coordinate**: create `approval_requests` in Cloud Functions, human approves in the Praxis app (or dev: `auditor approvals approve` with `GUARD_APPROVAL_DEV=1`), then redeem grant and write the one-shot `.praxis/guard/bridge` file.
 
 ### MCP `mode`: shadow vs enforce
 
@@ -43,7 +54,7 @@ Classification rules live in **`@praxis/auditor-policy`** (`loadPoliciesV1`, `cl
 
 One-shot approvals for terminal execution use:
 
-- **Directory:** `path.resolve(cwd, ".cursor/guard/bridge")`
+- **Directory:** `<workspace>/.praxis/guard/bridge` (auto-detected from the hook payload `cwd`; falls back to legacy `.cursor/guard/bridge` via one-shot migration)
 - **Files:** `${sha256(JSON.stringify(argv))}_${uuid}.json` with TTL **10 minutes** (`DEFAULT_SHELL_BRIDGE_TTL_MS`).
 
 Do not change this layout without updating Cursor + MCP flows that rely on it.

package/dist/adapters/claude-code.d.ts

@@ -0,0 +1,34 @@
+import type { AgentAdapter, AgentStatus, SetupResult, StatusOpts, UpsertHookOpts, UpsertMcpOpts } from "./types.js";
+/**
+ * Resolve the Claude Code settings file path.
+ *
+ * Set `PRAXIS_CLAUDE_CODE_SETTINGS` to override (used by tests).
+ */
+export declare function claudeCodeSettingsPath(): string;
+/**
+ * ClaudeCodeAdapter: hook (PreToolUse on Bash) + MCP, both in ~/.claude/settings.json.
+ *
+ * Unlike ClaudeDesktopAdapter (MCP-only), Claude Code exposes a PreToolUse hook that
+ * fires before every Bash tool call, giving Praxis shell governance.
+ *
+ * IMPORTANT — hook output format:
+ * Verify the exact format with a test script before relying on this adapter in production.
+ * Run docs/auditor-cli-claude-code-hook-format-test.sh and confirm Claude Code blocks.
+ * If the format is wrong, edit HOOK_BLOCK_RESPONSE in run-claude-code-pre-tool-use.ts.
+ *
+ * Binary path:
+ * The hook config uses the bare "auditor" command (consistent with Cursor's adapter),
+ * NOT an absolute path. Absolute paths break with mise/nvm node version upgrades.
+ * At setup time we warn if auditor is not on PATH, but do not abort.
+ *
+ * See docs/auditor-cli-multi-agent-adapter-design.md.
+ */
+export declare class ClaudeCodeAdapter implements AgentAdapter {
+    readonly id: "claude-code";
+    readonly label = "Claude Code";
+    detectInstalled(): boolean;
+    upsertHook(opts: UpsertHookOpts): Promise<SetupResult>;
+    upsertMcp(opts: UpsertMcpOpts): Promise<SetupResult>;
+    status(opts?: StatusOpts): Promise<AgentStatus>;
+}
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/adapters/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAEX,WAAW,EACX,UAAU,EACV,cAAc,EACd,aAAa,EACd,MAAM,YAAY,CAAC;AAQpB;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAI/C;AAyED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,QAAQ,CAAC,EAAE,EAAG,aAAa,CAAU;IACrC,QAAQ,CAAC,KAAK,iBAAiB;IAE/B,eAAe,IAAI,OAAO;IAOpB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAqDtD,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IA0CpD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAiCtD"}

package/dist/adapters/claude-code.js

@@ -0,0 +1,239 @@
+import { existsSync } from "node:fs";
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const MCP_SERVER_KEY = "praxis-guard";
+const AGENT_HOST = "claude-code";
+const HOOK_COMMAND = "auditor hook claude-code";
+/**
+ * Resolve the Claude Code settings file path.
+ *
+ * Set `PRAXIS_CLAUDE_CODE_SETTINGS` to override (used by tests).
+ */
+export function claudeCodeSettingsPath() {
+    const override = process.env.PRAXIS_CLAUDE_CODE_SETTINGS?.trim();
+    if (override)
+        return override;
+    return path.join(os.homedir(), ".claude", "settings.json");
+}
+async function readJson(pathname) {
+    try {
+        const raw = await readFile(pathname, "utf8");
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new Error("JSON root must be an object");
+        }
+        return parsed;
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (e.code === "ENOENT")
+            return null;
+        throw new Error([
+            `Invalid JSON at ${pathname}: ${msg}`,
+            "Refusing to overwrite existing file.",
+            "Fix the JSON manually or back up the file and re-run setup.",
+        ].join(" "));
+    }
+}
+/**
+ * Atomic write: write to a temp file then rename into place.
+ * Prevents partial writes from corrupting ~/.claude/settings.json.
+ */
+async function writeJsonAtomic(pathname, data) {
+    const dir = path.dirname(pathname);
+    await mkdir(dir, { recursive: true });
+    const tmp = path.join(dir, `.${path.basename(pathname)}.tmp.${Date.now()}`);
+    try {
+        await writeFile(tmp, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+        await rename(tmp, pathname);
+    }
+    catch (e) {
+        // Best-effort cleanup of the temp file on failure.
+        await writeFile(tmp, "", "utf8").catch(() => undefined);
+        throw e;
+    }
+}
+function hasConfiguredMcpServer(config) {
+    if (!config)
+        return false;
+    const servers = (config.mcpServers ?? {});
+    const server = servers[MCP_SERVER_KEY];
+    if (!server || typeof server !== "object")
+        return false;
+    const map = server;
+    if (map.command !== "auditor")
+        return false;
+    if (!Array.isArray(map.args) || map.args.length !== 1 || map.args[0] !== "mcp")
+        return false;
+    const env = map.env;
+    if (!env || typeof env !== "object")
+        return false;
+    return env.PRAXIS_AGENT_HOST === AGENT_HOST;
+}
+function hasConfiguredPreToolUseHook(config) {
+    if (!config)
+        return false;
+    const hooks = config.hooks;
+    if (!hooks || typeof hooks !== "object" || Array.isArray(hooks))
+        return false;
+    const preToolUse = hooks.PreToolUse;
+    if (!Array.isArray(preToolUse))
+        return false;
+    return preToolUse.some((entry) => {
+        if (!entry || typeof entry !== "object")
+            return false;
+        const e = entry;
+        if (e.matcher !== "Bash")
+            return false;
+        const innerHooks = e.hooks;
+        if (!Array.isArray(innerHooks))
+            return false;
+        return innerHooks.some((h) => {
+            if (!h || typeof h !== "object")
+                return false;
+            return h.command === HOOK_COMMAND;
+        });
+    });
+}
+/**
+ * ClaudeCodeAdapter: hook (PreToolUse on Bash) + MCP, both in ~/.claude/settings.json.
+ *
+ * Unlike ClaudeDesktopAdapter (MCP-only), Claude Code exposes a PreToolUse hook that
+ * fires before every Bash tool call, giving Praxis shell governance.
+ *
+ * IMPORTANT — hook output format:
+ * Verify the exact format with a test script before relying on this adapter in production.
+ * Run docs/auditor-cli-claude-code-hook-format-test.sh and confirm Claude Code blocks.
+ * If the format is wrong, edit HOOK_BLOCK_RESPONSE in run-claude-code-pre-tool-use.ts.
+ *
+ * Binary path:
+ * The hook config uses the bare "auditor" command (consistent with Cursor's adapter),
+ * NOT an absolute path. Absolute paths break with mise/nvm node version upgrades.
+ * At setup time we warn if auditor is not on PATH, but do not abort.
+ *
+ * See docs/auditor-cli-multi-agent-adapter-design.md.
+ */
+export class ClaudeCodeAdapter {
+    id = "claude-code";
+    label = "Claude Code";
+    detectInstalled() {
+        // Check for the ~/.claude directory that Claude Code creates on first run.
+        // This is the same heuristic used for Cursor (~/.cursor).
+        const settingsDir = path.dirname(claudeCodeSettingsPath());
+        return existsSync(settingsDir);
+    }
+    async upsertHook(opts) {
+        const dryRun = opts.dryRun ?? false;
+        const cfgPath = opts.explicitPath?.trim() || claudeCodeSettingsPath();
+        const existing = await readJson(cfgPath);
+        const before = JSON.stringify(existing ?? {});
+        const config = existing ? JSON.parse(JSON.stringify(existing)) : {};
+        if (!config.hooks || typeof config.hooks !== "object" || Array.isArray(config.hooks)) {
+            config.hooks = {};
+        }
+        const hooksMap = config.hooks;
+        if (!Array.isArray(hooksMap.PreToolUse)) {
+            hooksMap.PreToolUse = [];
+        }
+        const preToolUse = hooksMap.PreToolUse;
+        // Remove any existing Praxis PreToolUse[Bash] entry (idempotent upsert).
+        const filtered = preToolUse.filter((entry) => {
+            if (!entry || typeof entry !== "object")
+                return true;
+            const e = entry;
+            if (e.matcher !== "Bash")
+                return true;
+            const innerHooks = e.hooks;
+            if (!Array.isArray(innerHooks))
+                return true;
+            return !innerHooks.some((h) => {
+                if (!h || typeof h !== "object")
+                    return false;
+                return h.command === HOOK_COMMAND;
+            });
+        });
+        filtered.push({
+            matcher: "Bash",
+            hooks: [{ type: "command", command: HOOK_COMMAND }],
+        });
+        hooksMap.PreToolUse = filtered;
+        const changed = before !== JSON.stringify(config);
+        if (changed && !dryRun) {
+            await writeJsonAtomic(cfgPath, config);
+        }
+        return {
+            path: cfgPath,
+            changed,
+            message: changed
+                ? dryRun
+                    ? "would update Claude Code hook config (PreToolUse)"
+                    : "updated Claude Code hook config (PreToolUse)"
+                : "Claude Code hook config already up to date",
+        };
+    }
+    async upsertMcp(opts) {
+        const dryRun = opts.dryRun ?? false;
+        const cfgPath = opts.explicitPath?.trim() || claudeCodeSettingsPath();
+        const existing = await readJson(cfgPath);
+        const before = JSON.stringify(existing ?? {});
+        const config = existing ? JSON.parse(JSON.stringify(existing)) : {};
+        if (!config.mcpServers || typeof config.mcpServers !== "object" || Array.isArray(config.mcpServers)) {
+            config.mcpServers = {};
+        }
+        const servers = config.mcpServers;
+        const existingEntry = servers[MCP_SERVER_KEY] && typeof servers[MCP_SERVER_KEY] === "object"
+            ? servers[MCP_SERVER_KEY]
+            : {};
+        const existingEnv = existingEntry.env && typeof existingEntry.env === "object" && !Array.isArray(existingEntry.env)
+            ? existingEntry.env
+            : {};
+        servers[MCP_SERVER_KEY] = {
+            ...existingEntry,
+            command: "auditor",
+            args: ["mcp"],
+            env: { ...existingEnv, PRAXIS_AGENT_HOST: AGENT_HOST },
+        };
+        const changed = before !== JSON.stringify(config);
+        if (changed && !dryRun) {
+            await writeJsonAtomic(cfgPath, config);
+        }
+        return {
+            path: cfgPath,
+            changed,
+            message: changed
+                ? dryRun
+                    ? "would update Claude Code MCP config"
+                    : "updated Claude Code MCP config"
+                : "Claude Code MCP config already up to date",
+        };
+    }
+    async status(opts) {
+        const cfgPath = opts?.mcpConfigPath?.trim() || claudeCodeSettingsPath();
+        const config = await readJson(cfgPath).catch(() => null);
+        const hookConfigured = hasConfiguredPreToolUseHook(config);
+        const mcpConfigured = hasConfiguredMcpServer(config);
+        // Claude Code has one hook (PreToolUse) covering all tool calls.
+        // Report shell=true when PreToolUse is configured; mcp=true mirrors it
+        // (no separate MCP hook needed) so adapterReady() passes correctly.
+        const hook = {
+            global: {
+                shell: hookConfigured,
+                mcp: hookConfigured,
+                path: cfgPath,
+            },
+        };
+        const warnings = [];
+        if (hookConfigured && !mcpConfigured) {
+            warnings.push("Hook is configured but MCP is not. " +
+                "MUTATE approvals require both. Run: auditor setup mcp --for=claude-code");
+        }
+        return {
+            installed: this.detectInstalled(),
+            hook,
+            mcp: { configured: mcpConfigured, path: cfgPath },
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/adapters/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,UAAU,GAAG,aAAa,CAAC;AACjC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAIhD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAiB,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,IAAI,KAAK,CACb;YACE,mBAAmB,QAAQ,KAAK,GAAG,EAAE;YACrC,sCAAsC;YACtC,6DAA6D;SAC9D,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mDAAmD;QACnD,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsB;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAY,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,MAAiB,CAAC;IAC9B,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,OAAQ,GAAe,CAAC,iBAAiB,KAAK,UAAU,CAAC;AAC3D,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAsB;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,UAAU,GAAI,KAAiB,CAAC,UAAU,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,KAAgB,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC9C,OAAQ,CAAa,CAAC,OAAO,KAAK,YAAY,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,iBAAiB;IACnB,EAAE,GAAG,aAAsB,CAAC;IAC5B,KAAK,GAAG,aAAa,CAAC;IAE/B,eAAe;QACb,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,sBAAsB,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAY,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1F,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAgB,CAAC;QAEzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,UAAU,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAuB,CAAC;QAEpD,yEAAyE;QACzE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACrD,MAAM,CAAC,GAAG,KAAgB,CAAC;YAC3B,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC9C,OAAQ,CAAa,CAAC,OAAO,KAAK,YAAY,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC;QAE/B,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,mDAAmD;oBACrD,CAAC,CAAC,8CAA8C;gBAClD,CAAC,CAAC,4CAA4C;SACjD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,sBAAsB,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAY,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACpG,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAqB,CAAC;QAC7C,MAAM,aAAa,GACjB,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;YACpE,CAAC,CAAE,OAAO,CAAC,cAAc,CAAa;YACtC,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,WAAW,GACf,aAAa,CAAC,GAAG,IAAI,OAAO,aAAa,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC;YAC7F,CAAC,CAAE,aAAa,CAAC,GAAe;YAChC,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,GAAG;YACxB,GAAG,aAAa;YAChB,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE;SACvD,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,gCAAgC;gBACpC,CAAC,CAAC,2CAA2C;SAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAiB;QAC5B,MAAM,OAAO,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,sBAAsB,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAErD,iEAAiE;QACjE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,IAAI,GAAe;YACvB,MAAM,EAAE;gBACN,KAAK,EAAE,cAAc;gBACrB,GAAG,EAAE,cAAc;gBACnB,IAAI,EAAE,OAAO;aACd;SACF,CAAC;QAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CACX,qCAAqC;gBACnC,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE;YACjC,IAAI;YACJ,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;YACjD,QAAQ;SACT,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/claude-desktop.d.ts

@@ -0,0 +1,20 @@
+import type { AgentAdapter, AgentStatus, SetupResult, StatusOpts, UpsertMcpOpts } from "./types.js";
+/**
+ * Resolve the Claude Desktop config file path for this platform.
+ *
+ * Set `PRAXIS_CLAUDE_DESKTOP_CONFIG` to override (used by tests and edge cases).
+ */
+export declare function claudeDesktopConfigPath(): string;
+/**
+ * ClaudeDesktopAdapter: MCP-only adapter (no pre-tool hooks, no cloud agents).
+ *
+ * See docs/auditor-cli-multi-agent-adapter-design.md.
+ */
+export declare class ClaudeDesktopAdapter implements AgentAdapter {
+    readonly id: "claude-desktop";
+    readonly label = "Claude Desktop";
+    detectInstalled(): boolean;
+    upsertMcp(opts: UpsertMcpOpts): Promise<SetupResult>;
+    status(opts?: StatusOpts): Promise<AgentStatus>;
+}
+//# sourceMappingURL=claude-desktop.d.ts.map

package/dist/adapters/claude-desktop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-desktop.d.ts","sourceRoot":"","sources":["../../src/adapters/claude-desktop.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,aAAa,EACd,MAAM,YAAY,CAAC;AAOpB;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAchD;AAyCD;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,QAAQ,CAAC,EAAE,EAAG,gBAAgB,CAAU;IACxC,QAAQ,CAAC,KAAK,oBAAoB;IAElC,eAAe,IAAI,OAAO;IAQpB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IA4CpD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAStD"}

package/dist/adapters/claude-desktop.js

@@ -0,0 +1,133 @@
+import { existsSync } from "node:fs";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const MCP_SERVER_KEY = "praxis-guard";
+const AGENT_HOST = "claude-desktop";
+/**
+ * Resolve the Claude Desktop config file path for this platform.
+ *
+ * Set `PRAXIS_CLAUDE_DESKTOP_CONFIG` to override (used by tests and edge cases).
+ */
+export function claudeDesktopConfigPath() {
+    const override = process.env.PRAXIS_CLAUDE_DESKTOP_CONFIG?.trim();
+    if (override)
+        return override;
+    const home = os.homedir();
+    switch (process.platform) {
+        case "darwin":
+            return path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+        case "win32":
+            return path.join(process.env.APPDATA ?? path.join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+        default:
+            // Claude Desktop is not officially distributed for Linux; treat .config/Claude/
+            // as a forward-looking fallback so adapter behavior is testable on CI.
+            return path.join(home, ".config", "Claude", "claude_desktop_config.json");
+    }
+}
+async function readJson(pathname) {
+    try {
+        const raw = await readFile(pathname, "utf8");
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new Error("JSON root must be an object");
+        }
+        return parsed;
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (e.code === "ENOENT")
+            return null;
+        throw new Error([
+            `Invalid JSON at ${pathname}: ${msg}`,
+            "Refusing to overwrite existing file.",
+            "Fix the JSON manually or back up the file and re-run setup.",
+        ].join(" "));
+    }
+}
+async function writeJson(pathname, data) {
+    await mkdir(path.dirname(pathname), { recursive: true });
+    await writeFile(pathname, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+}
+function hasConfiguredMcpServer(config) {
+    if (!config)
+        return false;
+    const servers = (config.mcpServers ?? {});
+    const server = servers[MCP_SERVER_KEY];
+    if (!server || typeof server !== "object")
+        return false;
+    const map = server;
+    if (map.command !== "auditor")
+        return false;
+    if (!Array.isArray(map.args) || map.args.length !== 1 || map.args[0] !== "mcp")
+        return false;
+    const env = map.env;
+    if (!env || typeof env !== "object")
+        return false;
+    return env.PRAXIS_AGENT_HOST === AGENT_HOST;
+}
+/**
+ * ClaudeDesktopAdapter: MCP-only adapter (no pre-tool hooks, no cloud agents).
+ *
+ * See docs/auditor-cli-multi-agent-adapter-design.md.
+ */
+export class ClaudeDesktopAdapter {
+    id = "claude-desktop";
+    label = "Claude Desktop";
+    detectInstalled() {
+        // Treat the presence of (a directory holding) the config file as "installed".
+        // On a clean Claude Desktop install the directory exists even before our setup runs.
+        const cfg = claudeDesktopConfigPath();
+        if (existsSync(cfg))
+            return true;
+        return existsSync(path.dirname(cfg));
+    }
+    async upsertMcp(opts) {
+        const dryRun = opts.dryRun ?? false;
+        const cfgPath = opts.explicitPath?.trim() || claudeDesktopConfigPath();
+        const existing = await readJson(cfgPath);
+        const before = JSON.stringify(existing ?? {});
+        const config = existing
+            ? JSON.parse(JSON.stringify(existing))
+            : {};
+        if (!config.mcpServers || typeof config.mcpServers !== "object" || Array.isArray(config.mcpServers)) {
+            config.mcpServers = {};
+        }
+        const servers = config.mcpServers;
+        const existingEntry = servers[MCP_SERVER_KEY] && typeof servers[MCP_SERVER_KEY] === "object"
+            ? servers[MCP_SERVER_KEY]
+            : {};
+        const existingEnv = existingEntry.env && typeof existingEntry.env === "object" && !Array.isArray(existingEntry.env)
+            ? existingEntry.env
+            : {};
+        servers[MCP_SERVER_KEY] = {
+            ...existingEntry,
+            command: "auditor",
+            args: ["mcp"],
+            env: { ...existingEnv, PRAXIS_AGENT_HOST: AGENT_HOST },
+        };
+        const changed = before !== JSON.stringify(config);
+        if (changed && !dryRun) {
+            await writeJson(cfgPath, config);
+        }
+        return {
+            path: cfgPath,
+            changed,
+            message: changed
+                ? dryRun
+                    ? "would update Claude Desktop MCP config"
+                    : "updated Claude Desktop MCP config"
+                : "Claude Desktop MCP config already up to date",
+        };
+    }
+    async status(opts) {
+        const cfgPath = opts?.mcpConfigPath?.trim() || claudeDesktopConfigPath();
+        const config = await readJson(cfgPath).catch(() => null);
+        return {
+            installed: this.detectInstalled(),
+            mcp: { configured: hasConfiguredMcpServer(config), path: cfgPath },
+            warnings: [],
+        };
+    }
+}
+//# sourceMappingURL=claude-desktop.js.map

package/dist/adapters/claude-desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-desktop.js","sourceRoot":"","sources":["../../src/adapters/claude-desktop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAIpC;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QACnG,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QACzH;YACE,gFAAgF;YAChF,uEAAuE;YACvE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAiB,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,IAAI,KAAK,CACb;YACE,mBAAmB,QAAQ,KAAK,GAAG,EAAE;YACrC,sCAAsC;YACtC,6DAA6D;SAC9D,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAa;IACtD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsB;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAY,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,MAAiB,CAAC;IAC9B,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,OAAQ,GAAe,CAAC,iBAAiB,KAAK,UAAU,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IACtB,EAAE,GAAG,gBAAyB,CAAC;IAC/B,KAAK,GAAG,gBAAgB,CAAC;IAElC,eAAe;QACb,8EAA8E;QAC9E,qFAAqF;QACrF,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,uBAAuB,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAY,QAAQ;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAa;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACpG,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAqB,CAAC;QAC7C,MAAM,aAAa,GACjB,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;YACpE,CAAC,CAAE,OAAO,CAAC,cAAc,CAAa;YACtC,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,WAAW,GACf,aAAa,CAAC,GAAG,IAAI,OAAO,aAAa,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC;YAC7F,CAAC,CAAE,aAAa,CAAC,GAAe;YAChC,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,GAAG;YACxB,GAAG,aAAa;YAChB,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE;SACvD,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,wCAAwC;oBAC1C,CAAC,CAAC,mCAAmC;gBACvC,CAAC,CAAC,8CAA8C;SACnD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAiB;QAC5B,MAAM,OAAO,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,uBAAuB,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE;YACjC,GAAG,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;YAClE,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/cursor.d.ts

@@ -0,0 +1,18 @@
+import type { AgentAdapter, AgentStatus, SetupResult, StatusOpts, UpsertCloudOpts, UpsertHookOpts, UpsertMcpOpts } from "./types.js";
+/**
+ * CursorAdapter: hook + MCP + Cloud Agents (`.cursor/environment.json`) for Cursor.
+ *
+ * Delegates to the existing helpers in `cli/cursor-config.ts` so this is a
+ * pure structural refactor with no behavior change. See
+ * docs/auditor-cli-multi-agent-adapter-design.md.
+ */
+export declare class CursorAdapter implements AgentAdapter {
+    readonly id: "cursor";
+    readonly label = "Cursor";
+    detectInstalled(): boolean;
+    upsertHook(opts: UpsertHookOpts): Promise<SetupResult>;
+    upsertMcp(opts: UpsertMcpOpts): Promise<SetupResult>;
+    upsertCloud(opts: UpsertCloudOpts): Promise<SetupResult>;
+    status(opts?: StatusOpts): Promise<AgentStatus>;
+}
+//# sourceMappingURL=cursor.d.ts.map

package/dist/adapters/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../src/adapters/cursor.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,qBAAa,aAAc,YAAW,YAAY;IAChD,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAChC,QAAQ,CAAC,KAAK,YAAY;IAE1B,eAAe,IAAI,OAAO;IAI1B,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAStD,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAIpD,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAIlD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CA2CtD"}

package/dist/adapters/cursor.js

@@ -0,0 +1,72 @@
+import { existsSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { duplicatePraxisHooksWarning, readGlobalHooksConfigured, readMcpConfigured, readProjectHooksConfigured, readEnvironmentConfigured, resolveEnvironmentJsonPath, resolveProjectHooksPath, resolveUserHooksPath, resolveUserMcpConfigPath, upsertEnvironmentConfig, upsertHookConfig, upsertMcpConfig, } from "../cli/cursor-config.js";
+/**
+ * CursorAdapter: hook + MCP + Cloud Agents (`.cursor/environment.json`) for Cursor.
+ *
+ * Delegates to the existing helpers in `cli/cursor-config.ts` so this is a
+ * pure structural refactor with no behavior change. See
+ * docs/auditor-cli-multi-agent-adapter-design.md.
+ */
+export class CursorAdapter {
+    id = "cursor";
+    label = "Cursor";
+    detectInstalled() {
+        return existsSync(path.join(os.homedir(), ".cursor"));
+    }
+    upsertHook(opts) {
+        return upsertHookConfig({
+            scope: opts.scope,
+            projectDir: opts.projectDir,
+            explicitPath: opts.explicitPath,
+            dryRun: opts.dryRun,
+        });
+    }
+    upsertMcp(opts) {
+        return upsertMcpConfig(opts.explicitPath, opts.dryRun);
+    }
+    upsertCloud(opts) {
+        return upsertEnvironmentConfig(opts.projectDir, opts.dryRun);
+    }
+    async status(opts) {
+        const projectDir = opts?.projectDir;
+        const globalPath = resolveUserHooksPath();
+        const globalHook = await readGlobalHooksConfigured();
+        const projectHookEntry = projectDir
+            ? await (async () => {
+                const status = await readProjectHooksConfigured(projectDir);
+                return {
+                    shell: status.shell,
+                    mcp: status.mcp,
+                    path: resolveProjectHooksPath(projectDir),
+                };
+            })()
+            : undefined;
+        const mcpPath = resolveUserMcpConfigPath(opts?.mcpConfigPath);
+        const mcpConfigured = await readMcpConfigured(opts?.mcpConfigPath);
+        const cloudEntry = projectDir
+            ? {
+                configured: await readEnvironmentConfigured(projectDir),
+                path: resolveEnvironmentJsonPath(projectDir),
+            }
+            : undefined;
+        const warnings = [];
+        if (projectDir) {
+            const dup = await duplicatePraxisHooksWarning(projectDir);
+            if (dup)
+                warnings.push(dup);
+        }
+        return {
+            installed: this.detectInstalled(),
+            hook: {
+                global: { shell: globalHook.shell, mcp: globalHook.mcp, path: globalPath },
+                project: projectHookEntry,
+            },
+            mcp: { configured: mcpConfigured, path: mcpPath },
+            cloud: cloudEntry,
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=cursor.js.map

package/dist/adapters/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/adapters/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AAYjC;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACf,EAAE,GAAG,QAAiB,CAAC;IACvB,KAAK,GAAG,QAAQ,CAAC;IAE1B,eAAe;QACb,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,UAAU,CAAC,IAAoB;QAC7B,OAAO,gBAAgB,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAmB;QAC3B,OAAO,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,WAAW,CAAC,IAAqB;QAC/B,OAAO,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAiB;QAC5B,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC;QACpC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,yBAAyB,EAAE,CAAC;QAErD,MAAM,gBAAgB,GAAG,UAAU;YACjC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;gBAChB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,CAAC;gBAC5D,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,IAAI,EAAE,uBAAuB,CAAC,UAAU,CAAC;iBAC1C,CAAC;YACJ,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC;gBACE,UAAU,EAAE,MAAM,yBAAyB,CAAC,UAAU,CAAC;gBACvD,IAAI,EAAE,0BAA0B,CAAC,UAAU,CAAC;aAC7C;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;YAC1D,IAAI,GAAG;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE;YACjC,IAAI,EAAE;gBACJ,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC1E,OAAO,EAAE,gBAAgB;aAC1B;YACD,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;YACjD,KAAK,EAAE,UAAU;YACjB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/registry.d.ts

@@ -0,0 +1,10 @@
+import type { AgentAdapter, AgentId } from "./types.js";
+/**
+ * The set of agent adapters known to the CLI. Adding a new host is one append
+ * here plus the new adapter file.
+ */
+export declare const ALL_ADAPTERS: readonly AgentAdapter[];
+export declare function getAdapter(id: AgentId): AgentAdapter;
+/** Adapters whose `detectInstalled()` returns true. */
+export declare function detectInstalledAdapters(): AgentAdapter[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/adapters/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,YAAY,EAI/C,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,EAAE,OAAO,GAAG,YAAY,CAIpD;AAED,uDAAuD;AACvD,wBAAgB,uBAAuB,IAAI,YAAY,EAAE,CAQxD"}

package/dist/adapters/registry.js

@@ -0,0 +1,30 @@
+import { ClaudeCodeAdapter } from "./claude-code.js";
+import { ClaudeDesktopAdapter } from "./claude-desktop.js";
+import { CursorAdapter } from "./cursor.js";
+/**
+ * The set of agent adapters known to the CLI. Adding a new host is one append
+ * here plus the new adapter file.
+ */
+export const ALL_ADAPTERS = [
+    new CursorAdapter(),
+    new ClaudeDesktopAdapter(),
+    new ClaudeCodeAdapter(),
+];
+export function getAdapter(id) {
+    const found = ALL_ADAPTERS.find((a) => a.id === id);
+    if (!found)
+        throw new Error(`No agent adapter registered for id: ${id}`);
+    return found;
+}
+/** Adapters whose `detectInstalled()` returns true. */
+export function detectInstalledAdapters() {
+    return ALL_ADAPTERS.filter((a) => {
+        try {
+            return a.detectInstalled();
+        }
+        catch {
+            return false;
+        }
+    });
+}
+//# sourceMappingURL=registry.js.map