@scopebond/hook 0.6.0 → 0.7.0

package/dist/index.d.ts

@@ -2,9 +2,15 @@ export { mapClaudeToolUse, mapCodexToolUse, mapCursorEvent, fillPushBranch } fro
 export type { Mapped, NormalizedIntent } from "./map.js";
 export { createHookRuntime, starterPolicy, upgradeStarterPolicy } from "./runtime.js";
 export type { RuntimeConfig, Decision } from "./runtime.js";
+export { compile, defaultRules, describeRules, loadRules, saveRules, rulesPath, pathRuleFor, RULES_FILE, } from "./rules.js";
+export type { RuleSet, PathRule } from "./rules.js";
 export { scaffold, harnessSnippet, installHarness } from "./init.js";
-export { userHome, userHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig, cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome, readHarnessConfig, trustProjectPolicy, isTrustedProject, untrustedProjectPolicy, trustedProjectsFile, } from "./install.js";
-export type { Harness } from "./install.js";
+export { userHome, userHarnessFile, projectHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig, cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome, readHarnessConfig, trustProjectPolicy, isTrustedProject, untrustedProjectPolicy, trustedProjectsFile, harnessScopes, harnessScopeLabel, configuredHookCommands, hookCommandResolves, isScopebondHookCommand, harnessEntryMatches, } from "./install.js";
+export type { Harness, HarnessScopes } from "./install.js";
+export { explainDeny, describeAction, findClause } from "./explain.js";
+export type { ExplainDenyInput, ExplainIntent, ExplainPolicy, ExplainClause } from "./explain.js";
+export { ensureDurableRuntime, isEphemeralPath, nodeModulesRootOf, runtimeRoot, runtimeDirFor, pinnedCliPath, } from "./runtime-install.js";
+export type { PinResult } from "./runtime-install.js";
 export { connectCloud, loadConnection, attachExporter, flushBounded, connectionPath } from "./cloud.js";
 export type { HookConnection } from "./cloud.js";
 export { scrubSecrets, scrubParam, redactCommand, digest, sha256 } from "./minimize.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC7F,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EACpF,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,SAAS,EAClF,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,GACrG,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxG,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC7F,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EACL,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,GAC/F,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EACxG,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,SAAS,EAClF,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EACpG,aAAa,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAC7E,sBAAsB,EAAE,mBAAmB,GAC5C,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACvE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,EACL,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,GACpG,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxG,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -3,8 +3,11 @@
 // binary is the thin harness adapter over them.
 export { mapClaudeToolUse, mapCodexToolUse, mapCursorEvent, fillPushBranch } from "./map.js";
 export { createHookRuntime, starterPolicy, upgradeStarterPolicy } from "./runtime.js";
+export { compile, defaultRules, describeRules, loadRules, saveRules, rulesPath, pathRuleFor, RULES_FILE, } from "./rules.js";
 export { scaffold, harnessSnippet, installHarness } from "./init.js";
-export { userHome, userHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig, cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome, readHarnessConfig, trustProjectPolicy, isTrustedProject, untrustedProjectPolicy, trustedProjectsFile, } from "./install.js";
+export { userHome, userHarnessFile, projectHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig, cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome, readHarnessConfig, trustProjectPolicy, isTrustedProject, untrustedProjectPolicy, trustedProjectsFile, harnessScopes, harnessScopeLabel, configuredHookCommands, hookCommandResolves, isScopebondHookCommand, harnessEntryMatches, } from "./install.js";
+export { explainDeny, describeAction, findClause } from "./explain.js";
+export { ensureDurableRuntime, isEphemeralPath, nodeModulesRootOf, runtimeRoot, runtimeDirFor, pinnedCliPath, } from "./runtime-install.js";
 export { connectCloud, loadConnection, attachExporter, flushBounded, connectionPath } from "./cloud.js";
 export { scrubSecrets, scrubParam, redactCommand, digest, sha256 } from "./minimize.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,4EAA4E;AAC5E,gDAAgD;AAEhD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE7F,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EACpF,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,SAAS,EAClF,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,GACrG,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAExG,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC","sourcesContent":["// @scopebond/hook — the Claude Code, Cursor + Codex connector. The library surface is\n// the deterministic mapper and the check-only runtime; the `scopebond-hook`\n// binary is the thin harness adapter over them.\n\nexport { mapClaudeToolUse, mapCodexToolUse, mapCursorEvent, fillPushBranch } from \"./map.js\";\nexport type { Mapped, NormalizedIntent } from \"./map.js\";\nexport { createHookRuntime, starterPolicy, upgradeStarterPolicy } from \"./runtime.js\";\nexport type { RuntimeConfig, Decision } from \"./runtime.js\";\nexport { scaffold, harnessSnippet, installHarness } from \"./init.js\";\nexport {\n  userHome, userHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig,\n  cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome,\n  readHarnessConfig, trustProjectPolicy, isTrustedProject, untrustedProjectPolicy, trustedProjectsFile,\n} from \"./install.js\";\nexport type { Harness } from \"./install.js\";\nexport { connectCloud, loadConnection, attachExporter, flushBounded, connectionPath } from \"./cloud.js\";\nexport type { HookConnection } from \"./cloud.js\";\nexport { scrubSecrets, scrubParam, redactCommand, digest, sha256 } from \"./minimize.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,4EAA4E;AAC5E,gDAAgD;AAEhD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE7F,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEtF,OAAO,EACL,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,GAC/F,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EACxG,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,SAAS,EAClF,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EACpG,aAAa,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAC7E,sBAAsB,EAAE,mBAAmB,GAC5C,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EACL,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,GACpG,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAExG,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC","sourcesContent":["// @scopebond/hook — the Claude Code, Cursor + Codex connector. The library surface is\n// the deterministic mapper and the check-only runtime; the `scopebond-hook`\n// binary is the thin harness adapter over them.\n\nexport { mapClaudeToolUse, mapCodexToolUse, mapCursorEvent, fillPushBranch } from \"./map.js\";\nexport type { Mapped, NormalizedIntent } from \"./map.js\";\nexport { createHookRuntime, starterPolicy, upgradeStarterPolicy } from \"./runtime.js\";\nexport type { RuntimeConfig, Decision } from \"./runtime.js\";\nexport {\n  compile, defaultRules, describeRules, loadRules, saveRules, rulesPath, pathRuleFor, RULES_FILE,\n} from \"./rules.js\";\nexport type { RuleSet, PathRule } from \"./rules.js\";\nexport { scaffold, harnessSnippet, installHarness } from \"./init.js\";\nexport {\n  userHome, userHarnessFile, projectHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig,\n  cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome,\n  readHarnessConfig, trustProjectPolicy, isTrustedProject, untrustedProjectPolicy, trustedProjectsFile,\n  harnessScopes, harnessScopeLabel, configuredHookCommands, hookCommandResolves,\n  isScopebondHookCommand, harnessEntryMatches,\n} from \"./install.js\";\nexport type { Harness, HarnessScopes } from \"./install.js\";\nexport { explainDeny, describeAction, findClause } from \"./explain.js\";\nexport type { ExplainDenyInput, ExplainIntent, ExplainPolicy, ExplainClause } from \"./explain.js\";\nexport {\n  ensureDurableRuntime, isEphemeralPath, nodeModulesRootOf, runtimeRoot, runtimeDirFor, pinnedCliPath,\n} from \"./runtime-install.js\";\nexport type { PinResult } from \"./runtime-install.js\";\nexport { connectCloud, loadConnection, attachExporter, flushBounded, connectionPath } from \"./cloud.js\";\nexport type { HookConnection } from \"./cloud.js\";\nexport { scrubSecrets, scrubParam, redactCommand, digest, sha256 } from \"./minimize.js\";\n"]}

package/dist/init.d.ts

@@ -3,12 +3,18 @@ export declare function scaffold(dir: string, opts?: {
 }): {
     agentKid: string;
     policyPath: string;
+    rulesPath: string;
 };
 /** Install the hook into the agent's own config file, merging with anything already
  *  there (idempotent — safe to run twice). Returns the file it wrote. This is what
  *  lets `connect` finish setup without the user hand-editing JSON.
  *  `cwd` defaults to the current directory (the project root the user runs it in). */
-export declare function installHarness(harness: "claude" | "cursor" | "codex", cwd?: string): string;
-/** The harness configuration snippet to install the hook (version-pinned npx). */
-export declare function harnessSnippet(harness: "claude" | "cursor" | "codex"): string;
+export declare function installHarness(harness: "claude" | "cursor" | "codex", cwd?: string, 
+/** The command to run per tool call. Defaults to the portable `npx` form; `init`
+ *  passes a pinned absolute path when it has one, which is ~7x faster to start. */
+command?: string): string;
+/** The harness configuration snippet to install the hook by hand. Defaults to the
+ *  version-pinned `npx` form; `init --no-install` passes the pinned path it chose, so
+ *  the printed snippet matches what `init` would have written. */
+export declare function harnessSnippet(harness: "claude" | "cursor" | "codex", command?: string): string;
 //# sourceMappingURL=init.d.ts.map

package/dist/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAYA,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAgB9G;AAED;;;sFAGsF;AACtF,wBAAgB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAkC1G;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CA2B7E"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAYA,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAuBjI;AAED;;;sFAGsF;AACtF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,EACtC,GAAG,GAAE,MAAsB;AAC3B;mFACmF;AACnF,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,CAmCR;AAED;;kEAEkE;AAClE,wBAAgB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CA6B/F"}

package/dist/init.js

@@ -5,8 +5,8 @@ import { mkdirSync, writeFileSync, existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { loadOrCreateAttester } from "@scopebond/gateway/node";
 import { createSigner } from "@scopebond/sdk";
-import { starterPolicy } from "./runtime.js";
-import { readHarnessConfig } from "./install.js";
+import { compile, defaultRules, loadRules, saveRules, rulesPath } from "./rules.js";
+import { readHarnessConfig, projectHarnessFile, harnessEntryMatches, backupHarnessConfig } from "./install.js";
 import { hookCommand } from "./version.js";
 export function scaffold(dir, opts = {}) {
     mkdirSync(dir, { recursive: true });
@@ -21,30 +21,42 @@ export function scaffold(dir, opts = {}) {
     loadOrCreateAttester({ file: keyPath });
     loadOrCreateAttester({ file: attesterPath });
     const agent = createSigner({ privateKeyPem: readFileSync(keyPath, "utf8") });
+    // The editable rule set beside the compiled policy, so "edit the limits" means editing a
+    // readable list rather than a 700-character lookahead. `compile(defaultRules())` produces
+    // the starter policy's exact patterns — `rules.test.mjs` pins that — so writing either
+    // form enforces the same thing.
+    const rulesFile = rulesPath(dir);
+    if (!existsSync(rulesFile) || opts.force)
+        saveRules(dir, defaultRules());
     if (!existsSync(policyPath) || opts.force) {
-        writeFileSync(policyPath, JSON.stringify(starterPolicy(agent.kid), null, 2) + "\n");
+        const rules = loadRules(dir) ?? defaultRules();
+        writeFileSync(policyPath, JSON.stringify(compile(rules, agent.kid), null, 2) + "\n");
     }
-    return { agentKid: agent.kid, policyPath };
+    return { agentKid: agent.kid, policyPath, rulesPath: rulesFile };
 }
 /** Install the hook into the agent's own config file, merging with anything already
  *  there (idempotent — safe to run twice). Returns the file it wrote. This is what
  *  lets `connect` finish setup without the user hand-editing JSON.
  *  `cwd` defaults to the current directory (the project root the user runs it in). */
-export function installHarness(harness, cwd = process.cwd()) {
+export function installHarness(harness, cwd = process.cwd(), 
+/** The command to run per tool call. Defaults to the portable `npx` form; `init`
+ *  passes a pinned absolute path when it has one, which is ~7x faster to start. */
+command) {
     const isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-    const file = harness === "cursor" ? join(cwd, ".cursor", "hooks.json")
-        : harness === "codex" ? join(cwd, ".codex", "hooks.json")
-            : join(cwd, ".claude", "settings.json");
+    const file = projectHarnessFile(harness, cwd);
     const config = readHarnessConfig(file); // throws, leaving the file intact, if it is not a JSON object
+    backupHarnessConfig(file); // keep the user's original beside it before the first change
     mkdirSync(dirname(file), { recursive: true });
     const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});
-    const cursorCmd = hookCommand("cursor");
-    const claudeCmd = hookCommand("claude");
-    const codexCmd = hookCommand("codex");
-    // Match any existing Scopebond hook entry (pinned or a legacy bare `scopebond-hook`)
-    // so re-running never appends a duplicate and an old bare command is replaced.
-    const isScopebond = (cmd) => typeof cmd === "string" && /(^|\s)(npx\s+.*)?@scopebond\/hook|(^|\s)scopebond-hook(\s|$)/.test(cmd);
-    const entryMatches = (e) => isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));
+    const forHarness = (h) => command ? command.replace(/\b(claude|cursor|codex)$/, h) : hookCommand(h);
+    const cursorCmd = forHarness("cursor");
+    const claudeCmd = forHarness("claude");
+    const codexCmd = forHarness("codex");
+    // Match any existing Scopebond hook entry — npx, pinned absolute (either path
+    // separator) or a legacy bare `scopebond-hook` — so re-running replaces the entry
+    // instead of appending a second one. One shared matcher with `install`: a private
+    // copy here missed the pinned Windows form and duplicated the hook.
+    const entryMatches = harnessEntryMatches;
     if (harness === "cursor") {
         config.version = config.version ?? 1;
         for (const event of ["beforeShellExecution", "beforeMCPExecution", "beforeReadFile", "afterFileEdit"]) {
@@ -71,10 +83,13 @@ export function installHarness(harness, cwd = process.cwd()) {
     writeFileSync(file, JSON.stringify(config, null, 2) + "\n");
     return file;
 }
-/** The harness configuration snippet to install the hook (version-pinned npx). */
-export function harnessSnippet(harness) {
+/** The harness configuration snippet to install the hook by hand. Defaults to the
+ *  version-pinned `npx` form; `init --no-install` passes the pinned path it chose, so
+ *  the printed snippet matches what `init` would have written. */
+export function harnessSnippet(harness, command) {
+    const cmdFor = (h) => command ? command.replace(/\b(claude|cursor|codex)$/, h) : hookCommand(h);
     if (harness === "cursor") {
-        const cmd = hookCommand("cursor");
+        const cmd = cmdFor("cursor");
         return JSON.stringify({
             version: 1,
             hooks: {
@@ -89,14 +104,14 @@ export function harnessSnippet(harness) {
         return JSON.stringify({
             hooks: {
                 PreToolUse: [{
-                        hooks: [{ type: "command", command: hookCommand("codex"), timeout: 30, statusMessage: "Checking this action with Scopebond" }],
+                        hooks: [{ type: "command", command: cmdFor("codex"), timeout: 30, statusMessage: "Checking this action with Scopebond" }],
                     }],
             },
         }, null, 2);
     }
     return JSON.stringify({
         hooks: {
-            PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command: hookCommand("claude") }] }],
+            PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command: cmdFor("claude") }] }],
         },
     }, null, 2);
 }

package/dist/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,iFAAiF;AACjF,uCAAuC;AAEvC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,OAA4B,EAAE;IAClE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,kFAAkF;IAClF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACpE,0FAA0F;IAC1F,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,oBAAoB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;AAC7C,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,cAAc,CAAC,OAAsC,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAChG,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC;QACpE,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC;YACzD,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;IACtG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,qFAAqF;IACrF,+EAA+E;IAC/E,MAAM,WAAW,GAAG,CAAC,GAAY,EAAW,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,8DAA8D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnJ,MAAM,YAAY,GAAG,CAAC,CAAU,EAAW,EAAE,CAC3C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACzK,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,QAAQ,IAAI,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;;gBAAM,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACrL,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,gFAAgF;QAChF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAAC,EAAE;YACxH,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,QAAQ,IAAI,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;;YAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,OAAsC;IACnE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,KAAK,EAAE;gBACL,oBAAoB,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBACxC,kBAAkB,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBACtC,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAClC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;aAClC;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC;wBACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAAC;qBAC/H,CAAC;aACH;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;SAC7F;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC","sourcesContent":["// `scopebond-hook init` — scaffold the local enrollment: a machine signing key, a\n// gateway countersigning key and a starter policy. Keys and receipts stay on the\n// machine; no credentials are handled.\n\nimport { mkdirSync, writeFileSync, existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { loadOrCreateAttester } from \"@scopebond/gateway/node\";\nimport { createSigner } from \"@scopebond/sdk\";\nimport { starterPolicy } from \"./runtime.js\";\nimport { readHarnessConfig } from \"./install.js\";\nimport { hookCommand } from \"./version.js\";\n\nexport function scaffold(dir: string, opts: { force?: boolean } = {}): { agentKid: string; policyPath: string } {\n  mkdirSync(dir, { recursive: true });\n  const keyPath = join(dir, \"agent.key\");\n  const attesterPath = join(dir, \"attester.key\");\n  const policyPath = join(dir, \"policy.json\");\n  // Never let the signing keys, the Cloud credential or the local log be committed.\n  const gitignorePath = join(dir, \".gitignore\");\n  if (!existsSync(gitignorePath)) writeFileSync(gitignorePath, \"*\\n\");\n  // Machine signing key (agent) + gateway countersigning key (attester). Reused if present.\n  loadOrCreateAttester({ file: keyPath });\n  loadOrCreateAttester({ file: attesterPath });\n  const agent = createSigner({ privateKeyPem: readFileSync(keyPath, \"utf8\") });\n  if (!existsSync(policyPath) || opts.force) {\n    writeFileSync(policyPath, JSON.stringify(starterPolicy(agent.kid), null, 2) + \"\\n\");\n  }\n  return { agentKid: agent.kid, policyPath };\n}\n\n/** Install the hook into the agent's own config file, merging with anything already\n *  there (idempotent — safe to run twice). Returns the file it wrote. This is what\n *  lets `connect` finish setup without the user hand-editing JSON.\n *  `cwd` defaults to the current directory (the project root the user runs it in). */\nexport function installHarness(harness: \"claude\" | \"cursor\" | \"codex\", cwd: string = process.cwd()): string {\n  const isRecord = (v: unknown): v is Record<string, unknown> => typeof v === \"object\" && v !== null && !Array.isArray(v);\n  const file = harness === \"cursor\" ? join(cwd, \".cursor\", \"hooks.json\")\n    : harness === \"codex\" ? join(cwd, \".codex\", \"hooks.json\")\n    : join(cwd, \".claude\", \"settings.json\");\n  const config = readHarnessConfig(file); // throws, leaving the file intact, if it is not a JSON object\n  mkdirSync(dirname(file), { recursive: true });\n  const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});\n  const cursorCmd = hookCommand(\"cursor\");\n  const claudeCmd = hookCommand(\"claude\");\n  const codexCmd = hookCommand(\"codex\");\n  // Match any existing Scopebond hook entry (pinned or a legacy bare `scopebond-hook`)\n  // so re-running never appends a duplicate and an old bare command is replaced.\n  const isScopebond = (cmd: unknown): boolean => typeof cmd === \"string\" && /(^|\\s)(npx\\s+.*)?@scopebond\\/hook|(^|\\s)scopebond-hook(\\s|$)/.test(cmd);\n  const entryMatches = (e: unknown): boolean =>\n    isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));\n  if (harness === \"cursor\") {\n    config.version = config.version ?? 1;\n    for (const event of [\"beforeShellExecution\", \"beforeMCPExecution\", \"beforeReadFile\", \"afterFileEdit\"]) {\n      const list = Array.isArray((hooks as Record<string, unknown>)[event]) ? (hooks as Record<string, unknown[]>)[event] : ((hooks as Record<string, unknown[]>)[event] = []);\n      const existing = list.findIndex(entryMatches);\n      if (existing >= 0) list[existing] = { command: cursorCmd }; else list.push({ command: cursorCmd });\n    }\n  } else {\n    const list = Array.isArray((hooks as Record<string, unknown>).PreToolUse) ? (hooks as Record<string, unknown[]>).PreToolUse : ((hooks as Record<string, unknown[]>).PreToolUse = []);\n    const existing = list.findIndex(entryMatches);\n    // Codex matchers are regular expressions. No matcher means all supported tools.\n    const entry = harness === \"codex\"\n      ? { hooks: [{ type: \"command\", command: codexCmd, timeout: 30, statusMessage: \"Checking this action with Scopebond\" }] }\n      : { matcher: \"*\", hooks: [{ type: \"command\", command: claudeCmd }] };\n    if (existing >= 0) list[existing] = entry; else list.push(entry);\n  }\n  writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\");\n  return file;\n}\n\n/** The harness configuration snippet to install the hook (version-pinned npx). */\nexport function harnessSnippet(harness: \"claude\" | \"cursor\" | \"codex\"): string {\n  if (harness === \"cursor\") {\n    const cmd = hookCommand(\"cursor\");\n    return JSON.stringify({\n      version: 1,\n      hooks: {\n        beforeShellExecution: [{ command: cmd }],\n        beforeMCPExecution: [{ command: cmd }],\n        beforeReadFile: [{ command: cmd }],\n        afterFileEdit: [{ command: cmd }],\n      },\n    }, null, 2);\n  }\n  if (harness === \"codex\") {\n    return JSON.stringify({\n      hooks: {\n        PreToolUse: [{\n          hooks: [{ type: \"command\", command: hookCommand(\"codex\"), timeout: 30, statusMessage: \"Checking this action with Scopebond\" }],\n        }],\n      },\n    }, null, 2);\n  }\n  return JSON.stringify({\n    hooks: {\n      PreToolUse: [{ matcher: \"*\", hooks: [{ type: \"command\", command: hookCommand(\"claude\") }] }],\n    },\n  }, null, 2);\n}\n"]}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,iFAAiF;AACjF,uCAAuC;AAEvC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,OAA4B,EAAE;IAClE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,kFAAkF;IAClF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACpE,0FAA0F;IAC1F,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,oBAAoB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,yFAAyF;IACzF,0FAA0F;IAC1F,uFAAuF;IACvF,gCAAgC;IAChC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;QAC/C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACnE,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,cAAc,CAC5B,OAAsC,EACtC,MAAc,OAAO,CAAC,GAAG,EAAE;AAC3B;mFACmF;AACnF,OAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;IACtG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,6DAA6D;IACxF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,CAAC,CAAgC,EAAU,EAAE,CAC9D,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,8EAA8E;IAC9E,kFAAkF;IAClF,kFAAkF;IAClF,oEAAoE;IACpE,MAAM,YAAY,GAAG,mBAAmB,CAAC;IACzC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACzK,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,QAAQ,IAAI,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;;gBAAM,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,KAAmC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACrL,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,gFAAgF;QAChF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAAC,EAAE;YACxH,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,QAAQ,IAAI,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;;YAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,cAAc,CAAC,OAAsC,EAAE,OAAgB;IACrF,MAAM,MAAM,GAAG,CAAC,CAAgC,EAAU,EAAE,CAC1D,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,KAAK,EAAE;gBACL,oBAAoB,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBACxC,kBAAkB,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBACtC,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAClC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;aAClC;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC;wBACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAAC;qBAC1H,CAAC;aACH;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;SACxF;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC","sourcesContent":["// `scopebond-hook init` — scaffold the local enrollment: a machine signing key, a\n// gateway countersigning key and a starter policy. Keys and receipts stay on the\n// machine; no credentials are handled.\n\nimport { mkdirSync, writeFileSync, existsSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { loadOrCreateAttester } from \"@scopebond/gateway/node\";\nimport { createSigner } from \"@scopebond/sdk\";\nimport { compile, defaultRules, loadRules, saveRules, rulesPath } from \"./rules.js\";\nimport { readHarnessConfig, projectHarnessFile, harnessEntryMatches, backupHarnessConfig } from \"./install.js\";\nimport { hookCommand } from \"./version.js\";\n\nexport function scaffold(dir: string, opts: { force?: boolean } = {}): { agentKid: string; policyPath: string; rulesPath: string } {\n  mkdirSync(dir, { recursive: true });\n  const keyPath = join(dir, \"agent.key\");\n  const attesterPath = join(dir, \"attester.key\");\n  const policyPath = join(dir, \"policy.json\");\n  // Never let the signing keys, the Cloud credential or the local log be committed.\n  const gitignorePath = join(dir, \".gitignore\");\n  if (!existsSync(gitignorePath)) writeFileSync(gitignorePath, \"*\\n\");\n  // Machine signing key (agent) + gateway countersigning key (attester). Reused if present.\n  loadOrCreateAttester({ file: keyPath });\n  loadOrCreateAttester({ file: attesterPath });\n  const agent = createSigner({ privateKeyPem: readFileSync(keyPath, \"utf8\") });\n  // The editable rule set beside the compiled policy, so \"edit the limits\" means editing a\n  // readable list rather than a 700-character lookahead. `compile(defaultRules())` produces\n  // the starter policy's exact patterns — `rules.test.mjs` pins that — so writing either\n  // form enforces the same thing.\n  const rulesFile = rulesPath(dir);\n  if (!existsSync(rulesFile) || opts.force) saveRules(dir, defaultRules());\n  if (!existsSync(policyPath) || opts.force) {\n    const rules = loadRules(dir) ?? defaultRules();\n    writeFileSync(policyPath, JSON.stringify(compile(rules, agent.kid), null, 2) + \"\\n\");\n  }\n  return { agentKid: agent.kid, policyPath, rulesPath: rulesFile };\n}\n\n/** Install the hook into the agent's own config file, merging with anything already\n *  there (idempotent — safe to run twice). Returns the file it wrote. This is what\n *  lets `connect` finish setup without the user hand-editing JSON.\n *  `cwd` defaults to the current directory (the project root the user runs it in). */\nexport function installHarness(\n  harness: \"claude\" | \"cursor\" | \"codex\",\n  cwd: string = process.cwd(),\n  /** The command to run per tool call. Defaults to the portable `npx` form; `init`\n   *  passes a pinned absolute path when it has one, which is ~7x faster to start. */\n  command?: string,\n): string {\n  const isRecord = (v: unknown): v is Record<string, unknown> => typeof v === \"object\" && v !== null && !Array.isArray(v);\n  const file = projectHarnessFile(harness, cwd);\n  const config = readHarnessConfig(file); // throws, leaving the file intact, if it is not a JSON object\n  backupHarnessConfig(file); // keep the user's original beside it before the first change\n  mkdirSync(dirname(file), { recursive: true });\n  const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});\n  const forHarness = (h: \"claude\" | \"cursor\" | \"codex\"): string =>\n    command ? command.replace(/\\b(claude|cursor|codex)$/, h) : hookCommand(h);\n  const cursorCmd = forHarness(\"cursor\");\n  const claudeCmd = forHarness(\"claude\");\n  const codexCmd = forHarness(\"codex\");\n  // Match any existing Scopebond hook entry — npx, pinned absolute (either path\n  // separator) or a legacy bare `scopebond-hook` — so re-running replaces the entry\n  // instead of appending a second one. One shared matcher with `install`: a private\n  // copy here missed the pinned Windows form and duplicated the hook.\n  const entryMatches = harnessEntryMatches;\n  if (harness === \"cursor\") {\n    config.version = config.version ?? 1;\n    for (const event of [\"beforeShellExecution\", \"beforeMCPExecution\", \"beforeReadFile\", \"afterFileEdit\"]) {\n      const list = Array.isArray((hooks as Record<string, unknown>)[event]) ? (hooks as Record<string, unknown[]>)[event] : ((hooks as Record<string, unknown[]>)[event] = []);\n      const existing = list.findIndex(entryMatches);\n      if (existing >= 0) list[existing] = { command: cursorCmd }; else list.push({ command: cursorCmd });\n    }\n  } else {\n    const list = Array.isArray((hooks as Record<string, unknown>).PreToolUse) ? (hooks as Record<string, unknown[]>).PreToolUse : ((hooks as Record<string, unknown[]>).PreToolUse = []);\n    const existing = list.findIndex(entryMatches);\n    // Codex matchers are regular expressions. No matcher means all supported tools.\n    const entry = harness === \"codex\"\n      ? { hooks: [{ type: \"command\", command: codexCmd, timeout: 30, statusMessage: \"Checking this action with Scopebond\" }] }\n      : { matcher: \"*\", hooks: [{ type: \"command\", command: claudeCmd }] };\n    if (existing >= 0) list[existing] = entry; else list.push(entry);\n  }\n  writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\");\n  return file;\n}\n\n/** The harness configuration snippet to install the hook by hand. Defaults to the\n *  version-pinned `npx` form; `init --no-install` passes the pinned path it chose, so\n *  the printed snippet matches what `init` would have written. */\nexport function harnessSnippet(harness: \"claude\" | \"cursor\" | \"codex\", command?: string): string {\n  const cmdFor = (h: \"claude\" | \"cursor\" | \"codex\"): string =>\n    command ? command.replace(/\\b(claude|cursor|codex)$/, h) : hookCommand(h);\n  if (harness === \"cursor\") {\n    const cmd = cmdFor(\"cursor\");\n    return JSON.stringify({\n      version: 1,\n      hooks: {\n        beforeShellExecution: [{ command: cmd }],\n        beforeMCPExecution: [{ command: cmd }],\n        beforeReadFile: [{ command: cmd }],\n        afterFileEdit: [{ command: cmd }],\n      },\n    }, null, 2);\n  }\n  if (harness === \"codex\") {\n    return JSON.stringify({\n      hooks: {\n        PreToolUse: [{\n          hooks: [{ type: \"command\", command: cmdFor(\"codex\"), timeout: 30, statusMessage: \"Checking this action with Scopebond\" }],\n        }],\n      },\n    }, null, 2);\n  }\n  return JSON.stringify({\n    hooks: {\n      PreToolUse: [{ matcher: \"*\", hooks: [{ type: \"command\", command: cmdFor(\"claude\") }] }],\n    },\n  }, null, 2);\n}\n"]}

package/dist/install.d.ts

@@ -4,6 +4,20 @@ export declare function userHome(): string;
 /** The user-level agent config file for a harness. `HOME`/`USERPROFILE` (via homedir)
  *  roots it; SCOPEBOND_HOME does not move the agent's own config. */
 export declare function userHarnessFile(harness: Harness): string;
+/** The project-level agent config file for a harness — what `init` writes, so the
+ *  hook travels with the repository rather than the machine. */
+export declare function projectHarnessFile(harness: Harness, cwd?: string): string;
+/** Which config files actually carry a Scopebond hook for this harness. There are two
+ *  places it can live — the project config `init` writes and the user config `install`
+ *  writes — and `status`/`doctor` must look at both: checking only the user one told
+ *  everyone who ran `init` that their install had failed. */
+export interface HarnessScopes {
+    project: string | null;
+    user: string | null;
+}
+export declare function harnessScopes(harness: Harness, cwd?: string): HarnessScopes;
+/** One word for where a harness is wired, for a status line. */
+export declare function harnessScopeLabel(scopes: HarnessScopes): string;
 /** The file in the user home that pins trusted project policies: absolute project
  *  config dir → SHA-256 of its policy.json. It lives under the protected home, so the
  *  governed agent cannot write it. */
@@ -22,10 +36,23 @@ export declare function isTrustedProject(dir: string): boolean;
 export declare function resolveConfigDir(payloadCwd: string | undefined): string;
 /** A project policy present but ignored because it is not trusted (for status/doctor). */
 export declare function untrustedProjectPolicy(payloadCwd: string | undefined): string | null;
+export declare const isScopebondHookCommand: (cmd: unknown) => boolean;
+/** Whether a harness hook entry (either shape: a bare command, or a group with a
+ *  nested `hooks` array) is a Scopebond entry. */
+export declare const harnessEntryMatches: (e: unknown) => boolean;
 /** Read an agent's JSON config for merging. A missing file is an empty config; a file
  *  that exists but does not parse as a JSON object is an error — rewriting it would
  *  silently delete the user's other settings, so the installer stops instead. */
 export declare function readHarnessConfig(file: string): Record<string, unknown>;
+/** Copy an agent config aside before changing it, once. Re-running an installer must not
+ *  overwrite the backup with the already-modified file, or the original is lost on the
+ *  second run — so an existing backup is left alone. Returns the backup path when one was
+ *  written.
+ *
+ *  This exists because these installers rewrite files the user did not create and may not
+ *  know are involved (`~/.claude/settings.json` holds their theme, plugins and
+ *  permissions), and the undo was previously "hope the merge was right". */
+export declare function backupHarnessConfig(file: string): string | null;
 /** Write (idempotently) a harness hook entry pointing at an explicit command string.
  *  Shared by the project installer (npx command) and the user installer (absolute path). */
 export declare function writeHarnessConfig(file: string, harness: Harness, command: string): string;
@@ -36,10 +63,26 @@ export declare function removeHarnessConfig(file: string): boolean;
 export declare function cursorDetected(): boolean;
 /** Detect a Codex install by its user config directory. */
 export declare function codexDetected(): boolean;
-/** The absolute command a user-level harness entry runs: the current Node executable
- *  and the absolute path to this CLI, so it does not depend on PATH. */
+/** The absolute command a harness entry runs: the current Node executable and the
+ *  absolute path to this CLI, so it does not depend on PATH.
+ *
+ *  Both paths are always quoted on Windows, even without a space in them. A harness
+ *  runs this string through a shell, and that shell may be bash (Git Bash, WSL, a
+ *  dev container), where an unquoted Windows path loses every backslash and the
+ *  hook dies with MODULE_NOT_FOUND. Inside double quotes bash leaves a backslash
+ *  alone unless it precedes $ ` " \ or a newline — none of which occur in a Windows
+ *  path — and cmd.exe and PowerShell accept quoted paths too. */
 export declare function absoluteHookCommand(cliPath: string, harness: Harness): string;
 export declare function isHarnessConfigured(file: string): boolean;
+/** Every Scopebond command string a harness config currently runs. `doctor` uses it to
+ *  check that a pinned command still resolves: a hook entry that cannot start is worse
+ *  than none, because a harness can read the failure as "no hook". */
+export declare function configuredHookCommands(file: string): string[];
+/** Whether a configured hook command can actually start. An `npx` form always can
+ *  (npm resolves it); a pinned command names two absolute paths — the Node binary and
+ *  the CLI — and either can go away: a Node version manager switching versions, or the
+ *  Scopebond home being cleared. Both are exactly what this check exists to catch. */
+export declare function hookCommandResolves(command: string): boolean;
 /** Remove the user-level home (keys, policy, receipts). */
 export declare function purgeHome(): void;
 //# sourceMappingURL=install.d.ts.map

package/dist/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEpD,gFAAgF;AAChF,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED;qEACqE;AACrE,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAIxD;AAED;;sCAEsC;AACtC,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAYD;uFACuF;AACvF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED;;;;;iFAKiF;AACjF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAavE;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIpF;AAaD;;iFAEiF;AACjF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUvE;AAED;4FAC4F;AAC5F,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAwB1F;AAED;gDACgD;AAChD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUzD;AAED,4DAA4D;AAC5D,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,2DAA2D;AAC3D,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;wEACwE;AACxE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAG7E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOzD;AAED,2DAA2D;AAC3D,wBAAgB,SAAS,IAAI,IAAI,CAEhC"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEpD,gFAAgF;AAChF,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED;qEACqE;AACrE,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAIxD;AAED;gEACgE;AAChE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAIxF;AAED;;;6DAG6D;AAC7D,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAE9E,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,GAAE,MAAsB,GAAG,aAAa,CAO1F;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAK/D;AAED;;sCAEsC;AACtC,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAYD;uFACuF;AACvF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED;;;;;iFAKiF;AACjF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAavE;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIpF;AAyBD,eAAO,MAAM,sBAAsB,GAAI,KAAK,OAAO,KAAG,OAgBrD,CAAC;AAGF;kDACkD;AAClD,eAAO,MAAM,mBAAmB,GAAI,GAAG,OAAO,KAAG,OACkF,CAAC;AAGpI;;iFAEiF;AACjF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUvE;AAED;;;;;;;4EAO4E;AAC5E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/D;AAED;4FAC4F;AAC5F,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAyB1F;AAED;gDACgD;AAChD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUzD;AAED,4DAA4D;AAC5D,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,2DAA2D;AAC3D,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;;;;;;iEAQiE;AACjE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAG7E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOzD;AAED;;sEAEsE;AACtE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAc7D;AAED;;;sFAGsF;AACtF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAa5D;AAED,2DAA2D;AAC3D,wBAAgB,SAAS,IAAI,IAAI,CAEhC"}

package/dist/install.js

@@ -6,7 +6,7 @@
 // trusted that exact policy (`scopebond trust`, or `init` in the project): a cloned
 // repository, or an agent inside it, must not be able to swap in its own policy.
 import { createHash } from "node:crypto";
-import { mkdirSync, writeFileSync, existsSync, readFileSync, rmSync } from "node:fs";
+import { mkdirSync, writeFileSync, existsSync, readFileSync, rmSync, copyFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 /** The user-level Scopebond home. `SCOPEBOND_HOME` overrides it (tests, CI). */
@@ -22,6 +22,33 @@ export function userHarnessFile(harness) {
         return join(homedir(), ".codex", "hooks.json");
     return join(homedir(), ".claude", "settings.json");
 }
+/** The project-level agent config file for a harness — what `init` writes, so the
+ *  hook travels with the repository rather than the machine. */
+export function projectHarnessFile(harness, cwd = process.cwd()) {
+    if (harness === "cursor")
+        return join(cwd, ".cursor", "hooks.json");
+    if (harness === "codex")
+        return join(cwd, ".codex", "hooks.json");
+    return join(cwd, ".claude", "settings.json");
+}
+export function harnessScopes(harness, cwd = process.cwd()) {
+    const project = projectHarnessFile(harness, cwd);
+    const user = userHarnessFile(harness);
+    return {
+        project: isHarnessConfigured(project) ? project : null,
+        user: isHarnessConfigured(user) ? user : null,
+    };
+}
+/** One word for where a harness is wired, for a status line. */
+export function harnessScopeLabel(scopes) {
+    if (scopes.project && scopes.user)
+        return "configured (project + user)";
+    if (scopes.project)
+        return "configured (this project)";
+    if (scopes.user)
+        return "configured (user-level)";
+    return "";
+}
 /** The file in the user home that pins trusted project policies: absolute project
  *  config dir → SHA-256 of its policy.json. It lives under the protected home, so the
  *  governed agent cannot write it. */
@@ -96,11 +123,52 @@ export function untrustedProjectPolicy(payloadCwd) {
     return dirs.find((d) => existsSync(join(d, "policy.json")) && !isTrustedProject(d)) ?? null;
 }
 const isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-const isScopebond = (cmd) => typeof cmd === "string" && (/@scopebond\/hook|scopebond-hook(\s|$)/.test(cmd) ||
-    // the user-level absolute form: `<node> <…/cli.js> claude|cursor|codex`
-    /cli\.js["']?\s+(claude|cursor|codex)\s*$/.test(cmd) ||
-    /(^|["\s])scopebond(["'\s]).*\b(claude|cursor|codex)\b/.test(cmd));
-const entryMatches = (e) => isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));
+/** Whether a harness command string is one of ours. This is the single matcher for
+ *  every form the installer has ever written, and it is what makes re-running `init`
+ *  or `install` replace the entry instead of appending a second one:
+ *    - `npx -y @scopebond/hook@0.6.0 claude`          (portable)
+ *    - `"<node>" "<…/@scopebond/hook/dist/cli.js>" claude`  (pinned, POSIX)
+ *    - `"<node>" "<…\@scopebond\hook\dist\cli.js>" claude`  (pinned, Windows)
+ *    - `scopebond-hook claude`                        (legacy global binary)
+ *  The separator class matters: a Windows pinned path spells the scope
+ *  `@scopebond\hook`, and matching only `@scopebond/hook` let a second `init`
+ *  install a duplicate hook — which would double-check every tool call.
+ *
+ *  Written with substring and token tests rather than one regular expression: the
+ *  previous `(^|["\s])scopebond(["'\s]).*\b(claude|cursor|codex)\b` backtracked
+ *  polynomially on a long run of `\tscopebond\t` (CodeQL js/polynomial-redos). The
+ *  input is a command out of a config file rather than a request, so this was not
+ *  reachable by an attacker — but a linear check is also the clearer one. */
+const HARNESS_SUBCOMMANDS = new Set(["claude", "cursor", "codex"]);
+/** Long enough for any real command; a bound keeps the work linear and small. */
+const MAX_COMMAND = 4096;
+const unquote = (token) => token.replace(/^["']+|["']+$/g, "");
+export const isScopebondHookCommand = (cmd) => {
+    if (typeof cmd !== "string" || cmd.length === 0 || cmd.length > MAX_COMMAND)
+        return false;
+    const lower = cmd.toLowerCase();
+    // The package itself, in either path spelling (`@scopebond/hook`, `@scopebond\hook`).
+    if (lower.includes("@scopebond/hook") || lower.includes("@scopebond\\hook"))
+        return true;
+    // The legacy global binary, as a whole token.
+    if (/(^|[\s"'])scopebond-hook([\s"']|$)/.test(cmd))
+        return true;
+    // An absolute or bare form whose last argument is one of our harness subcommands:
+    // `<node> <…/cli.js> claude`, `scopebond cursor`.
+    const tokens = cmd.split(/\s+/).filter(Boolean);
+    const last = unquote(tokens[tokens.length - 1] ?? "");
+    if (!HARNESS_SUBCOMMANDS.has(last))
+        return false;
+    return tokens.some((token) => {
+        const t = unquote(token).toLowerCase();
+        return t.includes("scopebond") || /cli\.(m|c)?js$/.test(t);
+    });
+};
+const isScopebond = isScopebondHookCommand;
+/** Whether a harness hook entry (either shape: a bare command, or a group with a
+ *  nested `hooks` array) is a Scopebond entry. */
+export const harnessEntryMatches = (e) => isRecord(e) && (isScopebond(e.command) || (Array.isArray(e.hooks) && e.hooks.some((h) => isRecord(h) && isScopebond(h.command))));
+const entryMatches = harnessEntryMatches;
 /** Read an agent's JSON config for merging. A missing file is an empty config; a file
  *  that exists but does not parse as a JSON object is an error — rewriting it would
  *  silently delete the user's other settings, so the installer stops instead. */
@@ -121,10 +189,33 @@ export function readHarnessConfig(file) {
         throw new Error(`${file} is not a JSON object; fix or move it, then run this again — it was left unchanged`);
     return parsed;
 }
+/** Copy an agent config aside before changing it, once. Re-running an installer must not
+ *  overwrite the backup with the already-modified file, or the original is lost on the
+ *  second run — so an existing backup is left alone. Returns the backup path when one was
+ *  written.
+ *
+ *  This exists because these installers rewrite files the user did not create and may not
+ *  know are involved (`~/.claude/settings.json` holds their theme, plugins and
+ *  permissions), and the undo was previously "hope the merge was right". */
+export function backupHarnessConfig(file) {
+    if (!existsSync(file))
+        return null;
+    const backup = `${file}.scopebond-backup`;
+    if (existsSync(backup))
+        return null;
+    try {
+        copyFileSync(file, backup);
+        return backup;
+    }
+    catch {
+        return null;
+    }
+}
 /** Write (idempotently) a harness hook entry pointing at an explicit command string.
  *  Shared by the project installer (npx command) and the user installer (absolute path). */
 export function writeHarnessConfig(file, harness, command) {
     const config = readHarnessConfig(file);
+    backupHarnessConfig(file);
     mkdirSync(dirname(file), { recursive: true });
     const hooks = isRecord(config.hooks) ? config.hooks : (config.hooks = {});
     if (harness === "cursor") {
@@ -183,10 +274,17 @@ export function cursorDetected() {
 export function codexDetected() {
     return existsSync(join(homedir(), ".codex"));
 }
-/** The absolute command a user-level harness entry runs: the current Node executable
- *  and the absolute path to this CLI, so it does not depend on PATH. */
+/** The absolute command a harness entry runs: the current Node executable and the
+ *  absolute path to this CLI, so it does not depend on PATH.
+ *
+ *  Both paths are always quoted on Windows, even without a space in them. A harness
+ *  runs this string through a shell, and that shell may be bash (Git Bash, WSL, a
+ *  dev container), where an unquoted Windows path loses every backslash and the
+ *  hook dies with MODULE_NOT_FOUND. Inside double quotes bash leaves a backslash
+ *  alone unless it precedes $ ` " \ or a newline — none of which occur in a Windows
+ *  path — and cmd.exe and PowerShell accept quoted paths too. */
 export function absoluteHookCommand(cliPath, harness) {
-    const quote = (s) => (/\s/.test(s) ? `"${s}"` : s);
+    const quote = (s) => (process.platform === "win32" || /\s/.test(s) ? `"${s}"` : s);
     return `${quote(process.execPath)} ${quote(cliPath)} ${harness}`;
 }
 export function isHarnessConfigured(file) {
@@ -202,6 +300,57 @@ export function isHarnessConfigured(file) {
         return false;
     }
 }
+/** Every Scopebond command string a harness config currently runs. `doctor` uses it to
+ *  check that a pinned command still resolves: a hook entry that cannot start is worse
+ *  than none, because a harness can read the failure as "no hook". */
+export function configuredHookCommands(file) {
+    if (!existsSync(file))
+        return [];
+    const found = [];
+    const collect = (entry) => {
+        if (!isRecord(entry))
+            return;
+        if (isScopebond(entry.command))
+            found.push(String(entry.command));
+        if (Array.isArray(entry.hooks))
+            for (const h of entry.hooks)
+                collect(h);
+    };
+    try {
+        const p = JSON.parse(readFileSync(file, "utf8"));
+        if (!isRecord(p) || !isRecord(p.hooks))
+            return [];
+        for (const list of Object.values(p.hooks))
+            if (Array.isArray(list))
+                for (const e of list)
+                    collect(e);
+    }
+    catch {
+        return [];
+    }
+    return found;
+}
+/** Whether a configured hook command can actually start. An `npx` form always can
+ *  (npm resolves it); a pinned command names two absolute paths — the Node binary and
+ *  the CLI — and either can go away: a Node version manager switching versions, or the
+ *  Scopebond home being cleared. Both are exactly what this check exists to catch. */
+export function hookCommandResolves(command) {
+    if (/(^|\s)npx(\.cmd)?\s/.test(command))
+        return true;
+    // `"<node>" "<cli.js>" claude`: check every token that names a file on disk.
+    const tokens = command.match(/"[^"]+"|\S+/g) ?? [];
+    let checked = 0;
+    for (const raw of tokens) {
+        const candidate = raw.replace(/^"|"$/g, "");
+        if (!/\.(m|c)?js$|\.exe$/i.test(candidate))
+            continue;
+        checked += 1;
+        if (!existsSync(candidate))
+            return false;
+    }
+    // A bare `node cli.js` form on POSIX has no .exe to check; the .js still counted.
+    return checked > 0 || !/[\\/]/.test(command.split(/\s+/)[0] ?? "");
+}
 /** Remove the user-level home (keys, policy, receipts). */
 export function purgeHome() {
     rmSync(userHome(), { recursive: true, force: true });