@scopebond/hook 0.5.0 → 0.7.0

package/dist/install.js

@@ -1,11 +1,14 @@
 // SB112 — the user-level installer. One install per developer machine (not per repo):
 // keys and a starter policy live in a user-level home (~/.scopebond, override
 // SCOPEBOND_HOME), and the hook is registered by absolute path in the user-level agent
-// config (~/.claude/settings.json, ~/.cursor/hooks.json, ~/.codex/hooks.json). A project-local `.scopebond`
-// still wins when present, so per-project policies keep working.
-import { mkdirSync, writeFileSync, existsSync, readFileSync, rmSync } from "node:fs";
+// config (~/.claude/settings.json, ~/.cursor/hooks.json, ~/.codex/hooks.json). When a
+// user-level install exists, a project-local `.scopebond` is used only if the user
+// trusted that exact policy (`scopebond trust`, or `init` in the project): a cloned
+// repository, or an agent inside it, must not be able to swap in its own policy.
+import { createHash } from "node:crypto";
+import { mkdirSync, writeFileSync, existsSync, readFileSync, rmSync, copyFileSync } from "node:fs";
 import { homedir } from "node:os";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 /** The user-level Scopebond home. `SCOPEBOND_HOME` overrides it (tests, CI). */
 export function userHome() {
     return process.env.SCOPEBOND_HOME ?? join(homedir(), ".scopebond");
@@ -19,10 +22,80 @@ export function userHarnessFile(harness) {
         return join(homedir(), ".codex", "hooks.json");
     return join(homedir(), ".claude", "settings.json");
 }
+/** The project-level agent config file for a harness — what `init` writes, so the
+ *  hook travels with the repository rather than the machine. */
+export function projectHarnessFile(harness, cwd = process.cwd()) {
+    if (harness === "cursor")
+        return join(cwd, ".cursor", "hooks.json");
+    if (harness === "codex")
+        return join(cwd, ".codex", "hooks.json");
+    return join(cwd, ".claude", "settings.json");
+}
+export function harnessScopes(harness, cwd = process.cwd()) {
+    const project = projectHarnessFile(harness, cwd);
+    const user = userHarnessFile(harness);
+    return {
+        project: isHarnessConfigured(project) ? project : null,
+        user: isHarnessConfigured(user) ? user : null,
+    };
+}
+/** One word for where a harness is wired, for a status line. */
+export function harnessScopeLabel(scopes) {
+    if (scopes.project && scopes.user)
+        return "configured (project + user)";
+    if (scopes.project)
+        return "configured (this project)";
+    if (scopes.user)
+        return "configured (user-level)";
+    return "";
+}
+/** The file in the user home that pins trusted project policies: absolute project
+ *  config dir → SHA-256 of its policy.json. It lives under the protected home, so the
+ *  governed agent cannot write it. */
+export function trustedProjectsFile() {
+    return join(userHome(), "trusted-projects.json");
+}
+function policyDigest(dir) {
+    try {
+        return createHash("sha256").update(readFileSync(join(dir, "policy.json"))).digest("hex");
+    }
+    catch {
+        return null;
+    }
+}
+function readTrusted() {
+    try {
+        const p = JSON.parse(readFileSync(trustedProjectsFile(), "utf8"));
+        return isRecord(p) ? p : {};
+    }
+    catch {
+        return {};
+    }
+}
+const trustKey = (dir) => resolve(dir).replace(/\\/g, "/").toLowerCase();
+/** Pin the project's current policy as trusted. Editing the policy afterwards un-trusts
+ *  it until the user trusts it again, so a rewrite by the agent never takes effect. */
+export function trustProjectPolicy(dir) {
+    const digest = policyDigest(dir);
+    if (!digest)
+        throw new Error(`no policy at ${join(dir, "policy.json")}`);
+    const trusted = readTrusted();
+    trusted[trustKey(dir)] = digest;
+    mkdirSync(userHome(), { recursive: true });
+    writeFileSync(trustedProjectsFile(), JSON.stringify(trusted, null, 2) + "\n");
+    return digest;
+}
+/** Whether the project's policy is exactly the one the user trusted. */
+export function isTrustedProject(dir) {
+    const digest = policyDigest(dir);
+    return !!digest && readTrusted()[trustKey(dir)] === digest;
+}
 /** Resolve the config dir for a hook event, most specific first:
  *  explicit override → the payload's project → $CLAUDE_PROJECT_DIR → the user home.
  *  A project dir counts only when it has been scaffolded (a policy.json), so a bare
- *  working directory never shadows the user-level install. */
+ *  working directory never shadows the user-level install — and, once a user-level
+ *  install exists, only when its policy is trusted (`isTrustedProject`). Otherwise the
+ *  user's own policy governs: a repository cannot bring a weaker one with it. */
 export function resolveConfigDir(payloadCwd) {
     if (process.env.SCOPEBOND_HOOK_DIR)
         return process.env.SCOPEBOND_HOOK_DIR;
@@ -31,35 +104,119 @@ export function resolveConfigDir(payloadCwd) {
         candidates.push(join(payloadCwd, ".scopebond"));
     if (process.env.CLAUDE_PROJECT_DIR)
         candidates.push(join(process.env.CLAUDE_PROJECT_DIR, ".scopebond"));
+    const home = userHome();
+    const homeInstalled = existsSync(join(home, "policy.json"));
     for (const dir of candidates) {
-        if (existsSync(join(dir, "policy.json")))
+        if (existsSync(join(dir, "policy.json")) && (!homeInstalled || isTrustedProject(dir)))
             return dir;
     }
-    const home = userHome();
-    if (existsSync(join(home, "policy.json")))
+    if (homeInstalled)
         return home;
     // Nothing scaffolded yet: prefer the payload project, else the user home.
     return candidates[0] ?? home;
 }
+/** A project policy present but ignored because it is not trusted (for status/doctor). */
+export function untrustedProjectPolicy(payloadCwd) {
+    if (process.env.SCOPEBOND_HOOK_DIR || !existsSync(join(userHome(), "policy.json")))
+        return null;
+    const dirs = [payloadCwd, process.env.CLAUDE_PROJECT_DIR].filter(Boolean).map((d) => join(d, ".scopebond"));
+    return dirs.find((d) => existsSync(join(d, "policy.json")) && !isTrustedProject(d)) ?? null;
+}
 const isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-const isScopebond = (cmd) => typeof cmd === "string" && (/@scopebond\/hook|scopebond-hook(\s|$)/.test(cmd) ||
-    // the user-level absolute form: `<node> <…/cli.js> claude|cursor|codex`
-    /cli\.js["']?\s+(claude|cursor|codex)\s*$/.test(cmd) ||
-    /(^|["\s])scopebond(["'\s]).*\b(claude|cursor|codex)\b/.test(cmd));
-const entryMatches = (e) => isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));
+/** Whether a harness command string is one of ours. This is the single matcher for
+ *  every form the installer has ever written, and it is what makes re-running `init`
+ *  or `install` replace the entry instead of appending a second one:
+ *    - `npx -y @scopebond/hook@0.6.0 claude`          (portable)
+ *    - `"<node>" "<…/@scopebond/hook/dist/cli.js>" claude`  (pinned, POSIX)
+ *    - `"<node>" "<…\@scopebond\hook\dist\cli.js>" claude`  (pinned, Windows)
+ *    - `scopebond-hook claude`                        (legacy global binary)
+ *  The separator class matters: a Windows pinned path spells the scope
+ *  `@scopebond\hook`, and matching only `@scopebond/hook` let a second `init`
+ *  install a duplicate hook — which would double-check every tool call.
+ *
+ *  Written with substring and token tests rather than one regular expression: the
+ *  previous `(^|["\s])scopebond(["'\s]).*\b(claude|cursor|codex)\b` backtracked
+ *  polynomially on a long run of `\tscopebond\t` (CodeQL js/polynomial-redos). The
+ *  input is a command out of a config file rather than a request, so this was not
+ *  reachable by an attacker — but a linear check is also the clearer one. */
+const HARNESS_SUBCOMMANDS = new Set(["claude", "cursor", "codex"]);
+/** Long enough for any real command; a bound keeps the work linear and small. */
+const MAX_COMMAND = 4096;
+const unquote = (token) => token.replace(/^["']+|["']+$/g, "");
+export const isScopebondHookCommand = (cmd) => {
+    if (typeof cmd !== "string" || cmd.length === 0 || cmd.length > MAX_COMMAND)
+        return false;
+    const lower = cmd.toLowerCase();
+    // The package itself, in either path spelling (`@scopebond/hook`, `@scopebond\hook`).
+    if (lower.includes("@scopebond/hook") || lower.includes("@scopebond\\hook"))
+        return true;
+    // The legacy global binary, as a whole token.
+    if (/(^|[\s"'])scopebond-hook([\s"']|$)/.test(cmd))
+        return true;
+    // An absolute or bare form whose last argument is one of our harness subcommands:
+    // `<node> <…/cli.js> claude`, `scopebond cursor`.
+    const tokens = cmd.split(/\s+/).filter(Boolean);
+    const last = unquote(tokens[tokens.length - 1] ?? "");
+    if (!HARNESS_SUBCOMMANDS.has(last))
+        return false;
+    return tokens.some((token) => {
+        const t = unquote(token).toLowerCase();
+        return t.includes("scopebond") || /cli\.(m|c)?js$/.test(t);
+    });
+};
+const isScopebond = isScopebondHookCommand;
+/** Whether a harness hook entry (either shape: a bare command, or a group with a
+ *  nested `hooks` array) is a Scopebond entry. */
+export const harnessEntryMatches = (e) => isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));
+const entryMatches = harnessEntryMatches;
+/** Read an agent's JSON config for merging. A missing file is an empty config; a file
+ *  that exists but does not parse as a JSON object is an error — rewriting it would
+ *  silently delete the user's other settings, so the installer stops instead. */
+export function readHarnessConfig(file) {
+    if (!existsSync(file))
+        return {};
+    const text = readFileSync(file, "utf8");
+    if (!text.trim())
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (error) {
+        throw new Error(`${file} is not valid JSON (${error.message}); fix or move it, then run this again — it was left unchanged`);
+    }
+    if (!isRecord(parsed))
+        throw new Error(`${file} is not a JSON object; fix or move it, then run this again — it was left unchanged`);
+    return parsed;
+}
+/** Copy an agent config aside before changing it, once. Re-running an installer must not
+ *  overwrite the backup with the already-modified file, or the original is lost on the
+ *  second run — so an existing backup is left alone. Returns the backup path when one was
+ *  written.
+ *
+ *  This exists because these installers rewrite files the user did not create and may not
+ *  know are involved (`~/.claude/settings.json` holds their theme, plugins and
+ *  permissions), and the undo was previously "hope the merge was right". */
+export function backupHarnessConfig(file) {
+    if (!existsSync(file))
+        return null;
+    const backup = `${file}.scopebond-backup`;
+    if (existsSync(backup))
+        return null;
+    try {
+        copyFileSync(file, backup);
+        return backup;
+    }
+    catch {
+        return null;
+    }
+}
 /** Write (idempotently) a harness hook entry pointing at an explicit command string.
  *  Shared by the project installer (npx command) and the user installer (absolute path). */
 export function writeHarnessConfig(file, harness, command) {
+    const config = readHarnessConfig(file);
+    backupHarnessConfig(file);
     mkdirSync(dirname(file), { recursive: true });
-    let config = {};
-    if (existsSync(file)) {
-        try {
-            const p = JSON.parse(readFileSync(file, "utf8"));
-            if (isRecord(p))
-                config = p;
-        }
-        catch { /* start fresh on unreadable */ }
-    }
     const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});
     if (harness === "cursor") {
         config.version = config.version ?? 1;
@@ -96,12 +253,11 @@ export function removeHarnessConfig(file) {
         return false;
     let config;
     try {
-        const p = JSON.parse(readFileSync(file, "utf8"));
-        config = isRecord(p) ? p : {};
+        config = readHarnessConfig(file);
     }
     catch {
         return true;
-    }
+    } // unreadable: leave it untouched
     const hooks = isRecord(config.hooks) ? config.hooks : {};
     for (const [event, value] of Object.entries(hooks)) {
         if (Array.isArray(value))
@@ -118,10 +274,17 @@ export function cursorDetected() {
 export function codexDetected() {
     return existsSync(join(homedir(), ".codex"));
 }
-/** The absolute command a user-level harness entry runs: the current Node executable
- *  and the absolute path to this CLI, so it does not depend on PATH. */
+/** The absolute command a harness entry runs: the current Node executable and the
+ *  absolute path to this CLI, so it does not depend on PATH.
+ *
+ *  Both paths are always quoted on Windows, even without a space in them. A harness
+ *  runs this string through a shell, and that shell may be bash (Git Bash, WSL, a
+ *  dev container), where an unquoted Windows path loses every backslash and the
+ *  hook dies with MODULE_NOT_FOUND. Inside double quotes bash leaves a backslash
+ *  alone unless it precedes $ ` " \ or a newline — none of which occur in a Windows
+ *  path — and cmd.exe and PowerShell accept quoted paths too. */
 export function absoluteHookCommand(cliPath, harness) {
-    const quote = (s) => (/\s/.test(s) ? `"${s}"` : s);
+    const quote = (s) => (process.platform === "win32" || /\s/.test(s) ? `"${s}"` : s);
     return `${quote(process.execPath)} ${quote(cliPath)} ${harness}`;
 }
 export function isHarnessConfigured(file) {
@@ -137,6 +300,57 @@ export function isHarnessConfigured(file) {
         return false;
     }
 }
+/** Every Scopebond command string a harness config currently runs. `doctor` uses it to
+ *  check that a pinned command still resolves: a hook entry that cannot start is worse
+ *  than none, because a harness can read the failure as "no hook". */
+export function configuredHookCommands(file) {
+    if (!existsSync(file))
+        return [];
+    const found = [];
+    const collect = (entry) => {
+        if (!isRecord(entry))
+            return;
+        if (isScopebond(entry.command))
+            found.push(String(entry.command));
+        if (Array.isArray(entry.hooks))
+            for (const h of entry.hooks)
+                collect(h);
+    };
+    try {
+        const p = JSON.parse(readFileSync(file, "utf8"));
+        if (!isRecord(p) || !isRecord(p.hooks))
+            return [];
+        for (const list of Object.values(p.hooks))
+            if (Array.isArray(list))
+                for (const e of list)
+                    collect(e);
+    }
+    catch {
+        return [];
+    }
+    return found;
+}
+/** Whether a configured hook command can actually start. An `npx` form always can
+ *  (npm resolves it); a pinned command names two absolute paths — the Node binary and
+ *  the CLI — and either can go away: a Node version manager switching versions, or the
+ *  Scopebond home being cleared. Both are exactly what this check exists to catch. */
+export function hookCommandResolves(command) {
+    if (/(^|\s)npx(\.cmd)?\s/.test(command))
+        return true;
+    // `"<node>" "<cli.js>" claude`: check every token that names a file on disk.
+    const tokens = command.match(/"[^"]+"|\S+/g) ?? [];
+    let checked = 0;
+    for (const raw of tokens) {
+        const candidate = raw.replace(/^"|"$/g, "");
+        if (!/\.(m|c)?js$|\.exe$/i.test(candidate))
+            continue;
+        checked += 1;
+        if (!existsSync(candidate))
+            return false;
+    }
+    // A bare `node cli.js` form on POSIX has no .exe to check; the .js still counted.
+    return checked > 0 || !/[\\/]/.test(command.split(/\s+/)[0] ?? "");
+}
 /** Remove the user-level home (keys, policy, receipts). */
 export function purgeHome() {
     rmSync(userHome(), { recursive: true, force: true });

package/dist/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,8EAA8E;AAC9E,uFAAuF;AACvF,4GAA4G;AAC5G,iEAAiE;AAEjE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAI1C,gFAAgF;AAChF,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED;;;8DAG8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,UAA8B;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC1E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,UAAU;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;IACxG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,0EAA0E;IAC1E,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACxH,MAAM,WAAW,GAAG,CAAC,GAAY,EAAW,EAAE,CAC5C,OAAO,GAAG,KAAK,QAAQ,IAAI,CACzB,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;IACjD,wEAAwE;IACxE,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC;IACpD,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC,CAClE,CAAC;AACJ,MAAM,YAAY,GAAG,CAAC,CAAU,EAAW,EAAE,CAC3C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpI;4FAC4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAgB,EAAE,OAAe;IAChF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAAC,CAAC;IAC1J,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACzK,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,IAAI,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;;gBAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACrL,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxC,iFAAiF;QACjF,sFAAsF;QACtF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAAC,EAAE;YAC9G,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,EAAE,IAAI,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;;YAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;gDACgD;AAChD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAG,KAAmC,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAgB;IACnE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,SAAS;IACvB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC","sourcesContent":["// SB112 — the user-level installer. One install per developer machine (not per repo):\n// keys and a starter policy live in a user-level home (~/.scopebond, override\n// SCOPEBOND_HOME), and the hook is registered by absolute path in the user-level agent\n// config (~/.claude/settings.json, ~/.cursor/hooks.json, ~/.codex/hooks.json). A project-local `.scopebond`\n// still wins when present, so per-project policies keep working.\n\nimport { mkdirSync, writeFileSync, existsSync, readFileSync, rmSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nexport type Harness = \"claude\" | \"cursor\" | \"codex\";\n\n/** The user-level Scopebond home. `SCOPEBOND_HOME` overrides it (tests, CI). */\nexport function userHome(): string {\n  return process.env.SCOPEBOND_HOME ?? join(homedir(), \".scopebond\");\n}\n\n/** The user-level agent config file for a harness. `HOME`/`USERPROFILE` (via homedir)\n *  roots it; SCOPEBOND_HOME does not move the agent's own config. */\nexport function userHarnessFile(harness: Harness): string {\n  if (harness === \"cursor\") return join(homedir(), \".cursor\", \"hooks.json\");\n  if (harness === \"codex\") return join(homedir(), \".codex\", \"hooks.json\");\n  return join(homedir(), \".claude\", \"settings.json\");\n}\n\n/** Resolve the config dir for a hook event, most specific first:\n *  explicit override → the payload's project → $CLAUDE_PROJECT_DIR → the user home.\n *  A project dir counts only when it has been scaffolded (a policy.json), so a bare\n *  working directory never shadows the user-level install. */\nexport function resolveConfigDir(payloadCwd: string | undefined): string {\n  if (process.env.SCOPEBOND_HOOK_DIR) return process.env.SCOPEBOND_HOOK_DIR;\n  const candidates: string[] = [];\n  if (payloadCwd) candidates.push(join(payloadCwd, \".scopebond\"));\n  if (process.env.CLAUDE_PROJECT_DIR) candidates.push(join(process.env.CLAUDE_PROJECT_DIR, \".scopebond\"));\n  for (const dir of candidates) {\n    if (existsSync(join(dir, \"policy.json\"))) return dir;\n  }\n  const home = userHome();\n  if (existsSync(join(home, \"policy.json\"))) return home;\n  // Nothing scaffolded yet: prefer the payload project, else the user home.\n  return candidates[0] ?? home;\n}\n\nconst isRecord = (v: unknown): v is Record<string, unknown> => typeof v === \"object\" && v !== null && !Array.isArray(v);\nconst isScopebond = (cmd: unknown): boolean =>\n  typeof cmd === \"string\" && (\n    /@scopebond\\/hook|scopebond-hook(\\s|$)/.test(cmd) ||\n    // the user-level absolute form: `<node> <…/cli.js> claude|cursor|codex`\n    /cli\\.js[\"']?\\s+(claude|cursor|codex)\\s*$/.test(cmd) ||\n    /(^|[\"\\s])scopebond([\"'\\s]).*\\b(claude|cursor|codex)\\b/.test(cmd)\n  );\nconst entryMatches = (e: unknown): boolean =>\n  isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));\n\n/** Write (idempotently) a harness hook entry pointing at an explicit command string.\n *  Shared by the project installer (npx command) and the user installer (absolute path). */\nexport function writeHarnessConfig(file: string, harness: Harness, command: string): string {\n  mkdirSync(dirname(file), { recursive: true });\n  let config: Record<string, unknown> = {};\n  if (existsSync(file)) { try { const p = JSON.parse(readFileSync(file, \"utf8\")); if (isRecord(p)) config = p; } catch { /* start fresh on unreadable */ } }\n  const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});\n  if (harness === \"cursor\") {\n    config.version = config.version ?? 1;\n    for (const event of [\"beforeShellExecution\", \"beforeMCPExecution\", \"beforeReadFile\", \"afterFileEdit\"]) {\n      const list = Array.isArray((hooks as Record<string, unknown>)[event]) ? (hooks as Record<string, unknown[]>)[event] : ((hooks as Record<string, unknown[]>)[event] = []);\n      const at = list.findIndex(entryMatches);\n      const entry = { command: command.replace(/\\bclaude$/, \"cursor\") };\n      if (at >= 0) list[at] = entry; else list.push(entry);\n    }\n  } else {\n    const list = Array.isArray((hooks as Record<string, unknown>).PreToolUse) ? (hooks as Record<string, unknown[]>).PreToolUse : ((hooks as Record<string, unknown[]>).PreToolUse = []);\n    const at = list.findIndex(entryMatches);\n    // Codex matchers are regular expressions; omitting the matcher means every tool.\n    // A literal \"*\" is not a valid regular expression and causes Codex to skip the group.\n    const entry = harness === \"codex\"\n      ? { hooks: [{ type: \"command\", command, timeout: 30, statusMessage: \"Checking this action with Scopebond\" }] }\n      : { matcher: \"*\", hooks: [{ type: \"command\", command }] };\n    if (at >= 0) list[at] = entry; else list.push(entry);\n  }\n  writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\");\n  return file;\n}\n\n/** Remove any Scopebond hook entry from a user-level harness config, leaving the rest\n *  intact. Returns true if the file existed. */\nexport function removeHarnessConfig(file: string): boolean {\n  if (!existsSync(file)) return false;\n  let config: Record<string, unknown>;\n  try { const p = JSON.parse(readFileSync(file, \"utf8\")); config = isRecord(p) ? p : {}; } catch { return true; }\n  const hooks = isRecord(config.hooks) ? config.hooks : {};\n  for (const [event, value] of Object.entries(hooks)) {\n    if (Array.isArray(value)) (hooks as Record<string, unknown[]>)[event] = value.filter((e) => !entryMatches(e));\n  }\n  writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\");\n  return true;\n}\n\n/** Detect a Cursor install by its user config directory. */\nexport function cursorDetected(): boolean {\n  return existsSync(join(homedir(), \".cursor\"));\n}\n\n/** Detect a Codex install by its user config directory. */\nexport function codexDetected(): boolean {\n  return existsSync(join(homedir(), \".codex\"));\n}\n\n/** The absolute command a user-level harness entry runs: the current Node executable\n *  and the absolute path to this CLI, so it does not depend on PATH. */\nexport function absoluteHookCommand(cliPath: string, harness: Harness): string {\n  const quote = (s: string) => (/\\s/.test(s) ? `\"${s}\"` : s);\n  return `${quote(process.execPath)} ${quote(cliPath)} ${harness}`;\n}\n\nexport function isHarnessConfigured(file: string): boolean {\n  if (!existsSync(file)) return false;\n  try {\n    const p = JSON.parse(readFileSync(file, \"utf8\"));\n    if (!isRecord(p) || !isRecord(p.hooks)) return false;\n    return Object.values(p.hooks).some((v) => Array.isArray(v) && v.some(entryMatches));\n  } catch { return false; }\n}\n\n/** Remove the user-level home (keys, policy, receipts). */\nexport function purgeHome(): void {\n  rmSync(userHome(), { recursive: true, force: true });\n}\n"]}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,8EAA8E;AAC9E,uFAAuF;AACvF,sFAAsF;AACtF,mFAAmF;AACnF,oFAAoF;AACpF,iFAAiF;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAInD,gFAAgF;AAChF,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9E,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAQD,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IACzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO;QACL,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACtD,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KAC9C,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,6BAA6B,CAAC;IACxE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,2BAA2B,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,yBAAyB,CAAC;IAClD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;sCAEsC;AACtC,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1H,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC1J,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAEzF;uFACuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAChC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,aAAa,CAAC,mBAAmB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC;AAC7D,CAAC;AAED;;;;;iFAKiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,UAA8B;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC1E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,UAAU;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IACpG,CAAC;IACD,IAAI,aAAa;QAAE,OAAO,IAAI,CAAC;IAC/B,0EAA0E;IAC1E,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,sBAAsB,CAAC,UAA8B;IACnE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IACtH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9F,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAExH;;;;;;;;;;;;;;;6EAe6E;AAC7E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACnE,iFAAiF;AACjF,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAY,EAAW,EAAE;IAC9D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,sFAAsF;IACtF,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,8CAA8C;IAC9C,IAAI,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,kFAAkF;IAClF,kDAAkD;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AACF,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C;kDACkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAU,EAAW,EAAE,CACzD,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACpI,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC;;iFAEiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAwB,KAAe,CAAC,OAAO,gEAAgE,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oFAAoF,CAAC,CAAC;IACpI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;4EAO4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,IAAI,mBAAmB,CAAC;IAC1C,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC3E,CAAC;AAED;4FAC4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAgB,EAAE,OAAe;IAChF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACzK,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,IAAI,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;;gBAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACrL,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACxC,iFAAiF;QACjF,sFAAsF;QACtF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAAC,EAAE;YAC9G,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,EAAE,IAAI,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;;YAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;gDACgD;AAChD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC,CAAC,iCAAiC;IAClG,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAG,KAAmC,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;iEAQiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAgB;IACnE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,KAAc,EAAQ,EAAE;QACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,6EAA6E;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QACrD,OAAO,IAAI,CAAC,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,kFAAkF;IAClF,OAAO,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,SAAS;IACvB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC","sourcesContent":["// SB112 — the user-level installer. One install per developer machine (not per repo):\n// keys and a starter policy live in a user-level home (~/.scopebond, override\n// SCOPEBOND_HOME), and the hook is registered by absolute path in the user-level agent\n// config (~/.claude/settings.json, ~/.cursor/hooks.json, ~/.codex/hooks.json). When a\n// user-level install exists, a project-local `.scopebond` is used only if the user\n// trusted that exact policy (`scopebond trust`, or `init` in the project): a cloned\n// repository, or an agent inside it, must not be able to swap in its own policy.\n\nimport { createHash } from \"node:crypto\";\nimport { mkdirSync, writeFileSync, existsSync, readFileSync, rmSync, copyFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\n\nexport type Harness = \"claude\" | \"cursor\" | \"codex\";\n\n/** The user-level Scopebond home. `SCOPEBOND_HOME` overrides it (tests, CI). */\nexport function userHome(): string {\n  return process.env.SCOPEBOND_HOME ?? join(homedir(), \".scopebond\");\n}\n\n/** The user-level agent config file for a harness. `HOME`/`USERPROFILE` (via homedir)\n *  roots it; SCOPEBOND_HOME does not move the agent's own config. */\nexport function userHarnessFile(harness: Harness): string {\n  if (harness === \"cursor\") return join(homedir(), \".cursor\", \"hooks.json\");\n  if (harness === \"codex\") return join(homedir(), \".codex\", \"hooks.json\");\n  return join(homedir(), \".claude\", \"settings.json\");\n}\n\n/** The project-level agent config file for a harness — what `init` writes, so the\n *  hook travels with the repository rather than the machine. */\nexport function projectHarnessFile(harness: Harness, cwd: string = process.cwd()): string {\n  if (harness === \"cursor\") return join(cwd, \".cursor\", \"hooks.json\");\n  if (harness === \"codex\") return join(cwd, \".codex\", \"hooks.json\");\n  return join(cwd, \".claude\", \"settings.json\");\n}\n\n/** Which config files actually carry a Scopebond hook for this harness. There are two\n *  places it can live — the project config `init` writes and the user config `install`\n *  writes — and `status`/`doctor` must look at both: checking only the user one told\n *  everyone who ran `init` that their install had failed. */\nexport interface HarnessScopes { project: string | null; user: string | null }\n\nexport function harnessScopes(harness: Harness, cwd: string = process.cwd()): HarnessScopes {\n  const project = projectHarnessFile(harness, cwd);\n  const user = userHarnessFile(harness);\n  return {\n    project: isHarnessConfigured(project) ? project : null,\n    user: isHarnessConfigured(user) ? user : null,\n  };\n}\n\n/** One word for where a harness is wired, for a status line. */\nexport function harnessScopeLabel(scopes: HarnessScopes): string {\n  if (scopes.project && scopes.user) return \"configured (project + user)\";\n  if (scopes.project) return \"configured (this project)\";\n  if (scopes.user) return \"configured (user-level)\";\n  return \"\";\n}\n\n/** The file in the user home that pins trusted project policies: absolute project\n *  config dir → SHA-256 of its policy.json. It lives under the protected home, so the\n *  governed agent cannot write it. */\nexport function trustedProjectsFile(): string {\n  return join(userHome(), \"trusted-projects.json\");\n}\n\nfunction policyDigest(dir: string): string | null {\n  try { return createHash(\"sha256\").update(readFileSync(join(dir, \"policy.json\"))).digest(\"hex\"); } catch { return null; }\n}\n\nfunction readTrusted(): Record<string, string> {\n  try { const p = JSON.parse(readFileSync(trustedProjectsFile(), \"utf8\")); return isRecord(p) ? (p as Record<string, string>) : {}; } catch { return {}; }\n}\n\nconst trustKey = (dir: string): string => resolve(dir).replace(/\\\\/g, \"/\").toLowerCase();\n\n/** Pin the project's current policy as trusted. Editing the policy afterwards un-trusts\n *  it until the user trusts it again, so a rewrite by the agent never takes effect. */\nexport function trustProjectPolicy(dir: string): string {\n  const digest = policyDigest(dir);\n  if (!digest) throw new Error(`no policy at ${join(dir, \"policy.json\")}`);\n  const trusted = readTrusted();\n  trusted[trustKey(dir)] = digest;\n  mkdirSync(userHome(), { recursive: true });\n  writeFileSync(trustedProjectsFile(), JSON.stringify(trusted, null, 2) + \"\\n\");\n  return digest;\n}\n\n/** Whether the project's policy is exactly the one the user trusted. */\nexport function isTrustedProject(dir: string): boolean {\n  const digest = policyDigest(dir);\n  return !!digest && readTrusted()[trustKey(dir)] === digest;\n}\n\n/** Resolve the config dir for a hook event, most specific first:\n *  explicit override → the payload's project → $CLAUDE_PROJECT_DIR → the user home.\n *  A project dir counts only when it has been scaffolded (a policy.json), so a bare\n *  working directory never shadows the user-level install — and, once a user-level\n *  install exists, only when its policy is trusted (`isTrustedProject`). Otherwise the\n *  user's own policy governs: a repository cannot bring a weaker one with it. */\nexport function resolveConfigDir(payloadCwd: string | undefined): string {\n  if (process.env.SCOPEBOND_HOOK_DIR) return process.env.SCOPEBOND_HOOK_DIR;\n  const candidates: string[] = [];\n  if (payloadCwd) candidates.push(join(payloadCwd, \".scopebond\"));\n  if (process.env.CLAUDE_PROJECT_DIR) candidates.push(join(process.env.CLAUDE_PROJECT_DIR, \".scopebond\"));\n  const home = userHome();\n  const homeInstalled = existsSync(join(home, \"policy.json\"));\n  for (const dir of candidates) {\n    if (existsSync(join(dir, \"policy.json\")) && (!homeInstalled || isTrustedProject(dir))) return dir;\n  }\n  if (homeInstalled) return home;\n  // Nothing scaffolded yet: prefer the payload project, else the user home.\n  return candidates[0] ?? home;\n}\n\n/** A project policy present but ignored because it is not trusted (for status/doctor). */\nexport function untrustedProjectPolicy(payloadCwd: string | undefined): string | null {\n  if (process.env.SCOPEBOND_HOOK_DIR || !existsSync(join(userHome(), \"policy.json\"))) return null;\n  const dirs = [payloadCwd, process.env.CLAUDE_PROJECT_DIR].filter(Boolean).map((d) => join(d as string, \".scopebond\"));\n  return dirs.find((d) => existsSync(join(d, \"policy.json\")) && !isTrustedProject(d)) ?? null;\n}\n\nconst isRecord = (v: unknown): v is Record<string, unknown> => typeof v === \"object\" && v !== null && !Array.isArray(v);\n\n/** Whether a harness command string is one of ours. This is the single matcher for\n *  every form the installer has ever written, and it is what makes re-running `init`\n *  or `install` replace the entry instead of appending a second one:\n *    - `npx -y @scopebond/hook@0.6.0 claude`          (portable)\n *    - `\"<node>\" \"<…/@scopebond/hook/dist/cli.js>\" claude`  (pinned, POSIX)\n *    - `\"<node>\" \"<…\\@scopebond\\hook\\dist\\cli.js>\" claude`  (pinned, Windows)\n *    - `scopebond-hook claude`                        (legacy global binary)\n *  The separator class matters: a Windows pinned path spells the scope\n *  `@scopebond\\hook`, and matching only `@scopebond/hook` let a second `init`\n *  install a duplicate hook — which would double-check every tool call.\n *\n *  Written with substring and token tests rather than one regular expression: the\n *  previous `(^|[\"\\s])scopebond([\"'\\s]).*\\b(claude|cursor|codex)\\b` backtracked\n *  polynomially on a long run of `\\tscopebond\\t` (CodeQL js/polynomial-redos). The\n *  input is a command out of a config file rather than a request, so this was not\n *  reachable by an attacker — but a linear check is also the clearer one. */\nconst HARNESS_SUBCOMMANDS = new Set([\"claude\", \"cursor\", \"codex\"]);\n/** Long enough for any real command; a bound keeps the work linear and small. */\nconst MAX_COMMAND = 4096;\nconst unquote = (token: string): string => token.replace(/^[\"']+|[\"']+$/g, \"\");\n\nexport const isScopebondHookCommand = (cmd: unknown): boolean => {\n  if (typeof cmd !== \"string\" || cmd.length === 0 || cmd.length > MAX_COMMAND) return false;\n  const lower = cmd.toLowerCase();\n  // The package itself, in either path spelling (`@scopebond/hook`, `@scopebond\\hook`).\n  if (lower.includes(\"@scopebond/hook\") || lower.includes(\"@scopebond\\\\hook\")) return true;\n  // The legacy global binary, as a whole token.\n  if (/(^|[\\s\"'])scopebond-hook([\\s\"']|$)/.test(cmd)) return true;\n  // An absolute or bare form whose last argument is one of our harness subcommands:\n  // `<node> <…/cli.js> claude`, `scopebond cursor`.\n  const tokens = cmd.split(/\\s+/).filter(Boolean);\n  const last = unquote(tokens[tokens.length - 1] ?? \"\");\n  if (!HARNESS_SUBCOMMANDS.has(last)) return false;\n  return tokens.some((token) => {\n    const t = unquote(token).toLowerCase();\n    return t.includes(\"scopebond\") || /cli\\.(m|c)?js$/.test(t);\n  });\n};\nconst isScopebond = isScopebondHookCommand;\n\n/** Whether a harness hook entry (either shape: a bare command, or a group with a\n *  nested `hooks` array) is a Scopebond entry. */\nexport const harnessEntryMatches = (e: unknown): boolean =>\n  isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));\nconst entryMatches = harnessEntryMatches;\n\n/** Read an agent's JSON config for merging. A missing file is an empty config; a file\n *  that exists but does not parse as a JSON object is an error — rewriting it would\n *  silently delete the user's other settings, so the installer stops instead. */\nexport function readHarnessConfig(file: string): Record<string, unknown> {\n  if (!existsSync(file)) return {};\n  const text = readFileSync(file, \"utf8\");\n  if (!text.trim()) return {};\n  let parsed: unknown;\n  try { parsed = JSON.parse(text); } catch (error) {\n    throw new Error(`${file} is not valid JSON (${(error as Error).message}); fix or move it, then run this again — it was left unchanged`);\n  }\n  if (!isRecord(parsed)) throw new Error(`${file} is not a JSON object; fix or move it, then run this again — it was left unchanged`);\n  return parsed;\n}\n\n/** Copy an agent config aside before changing it, once. Re-running an installer must not\n *  overwrite the backup with the already-modified file, or the original is lost on the\n *  second run — so an existing backup is left alone. Returns the backup path when one was\n *  written.\n *\n *  This exists because these installers rewrite files the user did not create and may not\n *  know are involved (`~/.claude/settings.json` holds their theme, plugins and\n *  permissions), and the undo was previously \"hope the merge was right\". */\nexport function backupHarnessConfig(file: string): string | null {\n  if (!existsSync(file)) return null;\n  const backup = `${file}.scopebond-backup`;\n  if (existsSync(backup)) return null;\n  try { copyFileSync(file, backup); return backup; } catch { return null; }\n}\n\n/** Write (idempotently) a harness hook entry pointing at an explicit command string.\n *  Shared by the project installer (npx command) and the user installer (absolute path). */\nexport function writeHarnessConfig(file: string, harness: Harness, command: string): string {\n  const config = readHarnessConfig(file);\n  backupHarnessConfig(file);\n  mkdirSync(dirname(file), { recursive: true });\n  const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});\n  if (harness === \"cursor\") {\n    config.version = config.version ?? 1;\n    for (const event of [\"beforeShellExecution\", \"beforeMCPExecution\", \"beforeReadFile\", \"afterFileEdit\"]) {\n      const list = Array.isArray((hooks as Record<string, unknown>)[event]) ? (hooks as Record<string, unknown[]>)[event] : ((hooks as Record<string, unknown[]>)[event] = []);\n      const at = list.findIndex(entryMatches);\n      const entry = { command: command.replace(/\\bclaude$/, \"cursor\") };\n      if (at >= 0) list[at] = entry; else list.push(entry);\n    }\n  } else {\n    const list = Array.isArray((hooks as Record<string, unknown>).PreToolUse) ? (hooks as Record<string, unknown[]>).PreToolUse : ((hooks as Record<string, unknown[]>).PreToolUse = []);\n    const at = list.findIndex(entryMatches);\n    // Codex matchers are regular expressions; omitting the matcher means every tool.\n    // A literal \"*\" is not a valid regular expression and causes Codex to skip the group.\n    const entry = harness === \"codex\"\n      ? { hooks: [{ type: \"command\", command, timeout: 30, statusMessage: \"Checking this action with Scopebond\" }] }\n      : { matcher: \"*\", hooks: [{ type: \"command\", command }] };\n    if (at >= 0) list[at] = entry; else list.push(entry);\n  }\n  writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\");\n  return file;\n}\n\n/** Remove any Scopebond hook entry from a user-level harness config, leaving the rest\n *  intact. Returns true if the file existed. */\nexport function removeHarnessConfig(file: string): boolean {\n  if (!existsSync(file)) return false;\n  let config: Record<string, unknown>;\n  try { config = readHarnessConfig(file); } catch { return true; } // unreadable: leave it untouched\n  const hooks = isRecord(config.hooks) ? config.hooks : {};\n  for (const [event, value] of Object.entries(hooks)) {\n    if (Array.isArray(value)) (hooks as Record<string, unknown[]>)[event] = value.filter((e) => !entryMatches(e));\n  }\n  writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\");\n  return true;\n}\n\n/** Detect a Cursor install by its user config directory. */\nexport function cursorDetected(): boolean {\n  return existsSync(join(homedir(), \".cursor\"));\n}\n\n/** Detect a Codex install by its user config directory. */\nexport function codexDetected(): boolean {\n  return existsSync(join(homedir(), \".codex\"));\n}\n\n/** The absolute command a harness entry runs: the current Node executable and the\n *  absolute path to this CLI, so it does not depend on PATH.\n *\n *  Both paths are always quoted on Windows, even without a space in them. A harness\n *  runs this string through a shell, and that shell may be bash (Git Bash, WSL, a\n *  dev container), where an unquoted Windows path loses every backslash and the\n *  hook dies with MODULE_NOT_FOUND. Inside double quotes bash leaves a backslash\n *  alone unless it precedes $ ` \" \\ or a newline — none of which occur in a Windows\n *  path — and cmd.exe and PowerShell accept quoted paths too. */\nexport function absoluteHookCommand(cliPath: string, harness: Harness): string {\n  const quote = (s: string) => (process.platform === \"win32\" || /\\s/.test(s) ? `\"${s}\"` : s);\n  return `${quote(process.execPath)} ${quote(cliPath)} ${harness}`;\n}\n\nexport function isHarnessConfigured(file: string): boolean {\n  if (!existsSync(file)) return false;\n  try {\n    const p = JSON.parse(readFileSync(file, \"utf8\"));\n    if (!isRecord(p) || !isRecord(p.hooks)) return false;\n    return Object.values(p.hooks).some((v) => Array.isArray(v) && v.some(entryMatches));\n  } catch { return false; }\n}\n\n/** Every Scopebond command string a harness config currently runs. `doctor` uses it to\n *  check that a pinned command still resolves: a hook entry that cannot start is worse\n *  than none, because a harness can read the failure as \"no hook\". */\nexport function configuredHookCommands(file: string): string[] {\n  if (!existsSync(file)) return [];\n  const found: string[] = [];\n  const collect = (entry: unknown): void => {\n    if (!isRecord(entry)) return;\n    if (isScopebond(entry.command)) found.push(String(entry.command));\n    if (Array.isArray(entry.hooks)) for (const h of entry.hooks) collect(h);\n  };\n  try {\n    const p = JSON.parse(readFileSync(file, \"utf8\"));\n    if (!isRecord(p) || !isRecord(p.hooks)) return [];\n    for (const list of Object.values(p.hooks)) if (Array.isArray(list)) for (const e of list) collect(e);\n  } catch { return []; }\n  return found;\n}\n\n/** Whether a configured hook command can actually start. An `npx` form always can\n *  (npm resolves it); a pinned command names two absolute paths — the Node binary and\n *  the CLI — and either can go away: a Node version manager switching versions, or the\n *  Scopebond home being cleared. Both are exactly what this check exists to catch. */\nexport function hookCommandResolves(command: string): boolean {\n  if (/(^|\\s)npx(\\.cmd)?\\s/.test(command)) return true;\n  // `\"<node>\" \"<cli.js>\" claude`: check every token that names a file on disk.\n  const tokens = command.match(/\"[^\"]+\"|\\S+/g) ?? [];\n  let checked = 0;\n  for (const raw of tokens) {\n    const candidate = raw.replace(/^\"|\"$/g, \"\");\n    if (!/\\.(m|c)?js$|\\.exe$/i.test(candidate)) continue;\n    checked += 1;\n    if (!existsSync(candidate)) return false;\n  }\n  // A bare `node cli.js` form on POSIX has no .exe to check; the .js still counted.\n  return checked > 0 || !/[\\\\/]/.test(command.split(/\\s+/)[0] ?? \"\");\n}\n\n/** Remove the user-level home (keys, policy, receipts). */\nexport function purgeHome(): void {\n  rmSync(userHome(), { recursive: true, force: true });\n}\n"]}

package/dist/map.d.ts

@@ -4,12 +4,21 @@ export interface NormalizedIntent {
 }
 export interface Mapped {
     intent: NormalizedIntent;
-    /** false when no taxonomy type applies (an unknown tool, or a shell command that
-     *  could not be parsed): emitted to the observation path (not_evaluated) in normal
-     *  mode and denied by the closed allowlist in strict mode — never granted. */
+    /** false when no taxonomy type applies (an unknown tool) or when the command's
+     *  effect cannot be judged from its text (`patch`, `git apply`, `tar x`): emitted to
+     *  the observation path (not_evaluated) in normal mode and denied by the closed
+     *  allowlist in strict mode — never granted. A shell command that could not be
+     *  parsed, or whose program is only known at run time, is evaluated with an empty
+     *  program, which the starter policy denies in every mode. */
     evaluated: boolean;
     /** The native tool/event name, for diagnostics. */
     source: string;
+    /** True when the harness only tells us about this action *after* it happened, so a
+     *  policy decision on it records and flags the action but did not prevent it. Cursor's
+     *  `afterFileEdit` is the case that exists today: it has no before-edit counterpart,
+     *  so a file write there is observed, not stopped. Callers must not describe such a
+     *  decision as prevention. */
+    postHoc?: boolean;
 }
 /** A bare `git push` (no ref) pushes the current branch. The mapper cannot know it,
  *  so the runtime resolves it and fills it in here, before evaluation — otherwise the

package/dist/map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AACD,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;kFAE8E;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB;AAiID;;;uCAGuC;AACvC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAM5F;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAuBzE;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAWxE;AAED,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAkBxF"}
+{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AACD,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;kEAK8D;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf;;;;kCAI8B;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAkpBD;;;uCAGuC;AACvC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAM5F;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAyBzE;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAaxE;AAED,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAqBxF"}