@weave_protocol/adapter-cursor 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,68 @@
-# Temporary Holding Version
+# 🛡️ @weave_protocol/adapter-cursor
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+> Enforce [WARD.md](https://github.com/Tyox-all/Weave_Protocol/tree/main/ward) in **Cursor** with its agent hooks. Shell commands, file reads and writes, and MCP calls are checked against your policy before they run.
+
+[![npm](https://img.shields.io/npm/v/@weave_protocol/adapter-cursor?color=000&style=flat-square)](https://www.npmjs.com/package/@weave_protocol/adapter-cursor)
+
+The same WARD.md you use with Claude Code, Antigravity, Microsoft Agent Framework, Gemini CLI, Codex CLI and OpenCode.
+
+## Quick start
+
+```bash
+npm i -g @weave_protocol/adapter-cursor
+weave-ward-cursor init        # adds the hook to ~/.cursor/hooks.json
+weave-ward-cursor status
+```
+
+Cursor reloads `hooks.json` when it changes. Add a `WARD.md` to your project (`npx @weave_protocol/ward init`), or a user-wide one at `~/.cursor/WARD.md`.
+
+## How it hooks in
+
+One command, `weave-ward-cursor hook`, is registered on four of Cursor's [agent hook events](https://cursor.com/docs/agent/hooks). It decides each call with Ward's shared evaluator (`evaluateToolCall`), so the rules match the other adapters exactly:
+
+| Event | Checked |
+|---|---|
+| `beforeShellExecution` | `shell_exec`, the command's `cwd` (as a read), and every URL and absolute or `~` path in the command |
+| `beforeReadFile` | the `file_path` (as a read) |
+| `beforeMCPExecution` | `mcp__<server>__<tool>`, plus every path and URL argument in its `tool_input` |
+| `preToolUse` | every other tool (`Write`, `Delete`, `Grep`, `Task`, …), by capability and every path-named argument. Shell, Read and MCP are left to the events above, which carry richer fields. |
+
+## Decisions
+
+| WARD decision | What Cursor sees |
+|---|---|
+| allow | nothing: the call continues, and Cursor's own approval settings still apply |
+| deny | `permission: "deny"`, with the reason in `user_message` and `agent_message` |
+| require_approval | `permission: "ask"` for shell and MCP calls, where Cursor enforces it. Elsewhere it's a deny whose reason says approval is needed, because `preToolUse` doesn't enforce "ask" and `beforeReadFile` has none. |
+
+**Failure modes:**
+- **An invalid WARD.md always denies**, so a typo can't silently switch enforcement off.
+- **No WARD.md anywhere means no enforcement.**
+- **Malformed payloads and evaluator errors** allow by default. `init --fail-closed` makes them deny.
+
+WARD.md is looked up in this order:
+1. `$WEAVE_WARD_PATH`
+2. `<workspace>/WARD.md`
+3. `<workspace>/.cursor/WARD.md`
+4. `<workspace>/.weave/WARD.md`
+5. `~/.cursor/WARD.md`
+
+## Commands
+
+```bash
+weave-ward-cursor init [--timeout=SECONDS] [--fail-closed]
+weave-ward-cursor disable
+weave-ward-cursor status
+weave-ward-cursor test Read --input='{"file_path":"secrets/key"}'   # dry run
+weave-ward-cursor hook                                               # what Cursor runs
+```
+
+`init` backs up `hooks.json` and edits it atomically. It adds one entry per event and leaves your other hooks alone. The command is `weave-ward-cursor`, matching `weave-ward-codex` and `weave-ward-opencode`.
+
+## Verified
+
+Built against Cursor's [agent hooks documentation](https://cursor.com/docs/agent/hooks), with 11 fixture tests. It hasn't been live-checked in Cursor yet. Cursor's docs don't say whether the `cursor-agent` CLI runs agent hooks, so for now treat this as an IDE adapter.
+
+## License
+
+Apache-2.0

package/dist/cli.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/**
+ * weave-ward-cursor CLI
+ *
+ *   weave-ward-cursor init [--timeout=SECONDS] [--fail-closed]   Install the WARD hook on four events
+ *   weave-ward-cursor disable                                    Remove it
+ *   weave-ward-cursor status                                     Hook + active WARD.md
+ *   weave-ward-cursor test <tool> [--input=JSON]                 Dry-run a tool call (Shell, Read, Write, ...)
+ *   weave-ward-cursor hook [--fail-closed]                       Hook handler (run by Cursor)
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG"}

package/dist/cli.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+/**
+ * weave-ward-cursor CLI
+ *
+ *   weave-ward-cursor init [--timeout=SECONDS] [--fail-closed]   Install the WARD hook on four events
+ *   weave-ward-cursor disable                                    Remove it
+ *   weave-ward-cursor status                                     Hook + active WARD.md
+ *   weave-ward-cursor test <tool> [--input=JSON]                 Dry-run a tool call (Shell, Read, Write, ...)
+ *   weave-ward-cursor hook [--fail-closed]                       Hook handler (run by Cursor)
+ */
+import { installHook, removeHook, isHookInstalled, readHooks, hooksJsonPath, userWardPath } from './config.js';
+import { resolveWardForRoot, evaluateCall, runHook } from './hook.js';
+const tty = process.stderr.isTTY && !process.env.NO_COLOR;
+const c = {
+    reset: tty ? '\x1b[0m' : '', bold: tty ? '\x1b[1m' : '', red: tty ? '\x1b[31m' : '',
+    green: tty ? '\x1b[32m' : '', yellow: tty ? '\x1b[33m' : '', cyan: tty ? '\x1b[36m' : '', gray: tty ? '\x1b[90m' : '',
+};
+const say = (s = '') => console.error(s);
+const flag = (args, name) => args.includes(`--${name}`);
+const option = (args, name) => args.find((a) => a.startsWith(`--${name}=`))?.slice(name.length + 3);
+function help() {
+    say(`\n${c.cyan}${c.bold}🛡️  weave-ward-cursor${c.reset} ${c.gray}WARD.md enforcement for Cursor${c.reset}\n`);
+    say(`${c.bold}Commands:${c.reset}`);
+    say(`  ${c.cyan}init${c.reset} ${c.gray}[--timeout=SECONDS] [--fail-closed]${c.reset}  Install the hook in ~/.cursor/hooks.json`);
+    say(`  ${c.cyan}disable${c.reset}                                              Remove the hook`);
+    say(`  ${c.cyan}status${c.reset}                                               Show the hook and the active WARD.md`);
+    say(`  ${c.cyan}test${c.reset} ${c.gray}<tool> [--input=JSON]${c.reset}                           Dry-run a tool call against WARD.md`);
+    say(`  ${c.cyan}hook${c.reset} ${c.gray}[--fail-closed]${c.reset}                    Hook handler (Cursor runs this)\n`);
+    return 0;
+}
+function init(args) {
+    const timeout = option(args, 'timeout');
+    installHook({
+        timeoutSeconds: timeout ? Number(timeout) : undefined,
+        failClosed: flag(args, 'fail-closed'),
+    });
+    say(`${c.green}✓${c.reset} WARD hook installed in ${hooksJsonPath()} (beforeShellExecution, beforeMCPExecution, beforeReadFile, preToolUse)`);
+    say(`${c.gray}Cursor reloads hooks.json on save.${c.reset}`);
+    const ward = safeResolve(process.cwd());
+    if (!ward) {
+        say(`${c.yellow}!${c.reset} No WARD.md found here or at ${userWardPath()}; calls are allowed until you add one.`);
+    }
+    return 0;
+}
+function disable() {
+    const { removed } = removeHook();
+    say(removed ? `${c.green}✓${c.reset} Removed the WARD hook from ${hooksJsonPath()}` : 'No WARD hook was installed.');
+    return 0;
+}
+function safeResolve(cwd) {
+    try {
+        return resolveWardForRoot(cwd);
+    }
+    catch (err) {
+        say(`${c.red}✗${c.reset} ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+function status() {
+    const installed = isHookInstalled(readHooks());
+    say(`Hook:     ${installed ? `${c.green}installed${c.reset}` : `${c.yellow}not installed${c.reset}`} (${hooksJsonPath()})`);
+    const ward = safeResolve(process.cwd());
+    say(`WARD.md:  ${ward ? ward.source : `${c.yellow}none found${c.reset}`}`);
+    return installed && ward ? 0 : 1;
+}
+function test(args) {
+    const tool = args.find((a) => !a.startsWith('--'));
+    if (!tool) {
+        say('Usage: weave-ward-cursor test <tool> [--input=JSON]');
+        return 2;
+    }
+    const ward = safeResolve(process.cwd());
+    if (!ward) {
+        say('No WARD.md found; nothing to test against.');
+        return 2;
+    }
+    const input = JSON.parse(option(args, 'input') ?? '{}');
+    const result = evaluateCall(ward.policy, { tool, args: input, cwd: process.cwd(), canAsk: false });
+    const color = result.decision === 'allow' ? c.green : result.decision === 'deny' ? c.red : c.yellow;
+    say(`${color}${result.decision}${c.reset} ${tool}`);
+    for (const r of result.reasons)
+        say(`  ${c.gray}${r}${c.reset}`);
+    return result.decision === 'allow' ? 0 : 1;
+}
+async function main() {
+    const [cmd, ...rest] = process.argv.slice(2);
+    switch (cmd) {
+        case 'init': return init(rest);
+        case 'disable':
+        case 'uninstall': return disable();
+        case 'status': return status();
+        case 'test': return test(rest);
+        case 'hook':
+            return runHook(flag(rest, 'fail-closed'));
+        default: return help();
+    }
+}
+main().then((code) => process.exit(code), (err) => {
+    say(`weave-ward-cursor: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1D,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IACnF,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;CACtH,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEzC,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC1E,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEtH,SAAS,IAAI;IACX,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,yBAAyB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,iCAAiC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAChH,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,sCAAsC,CAAC,CAAC,KAAK,4CAA4C,CAAC,CAAC;IAClI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,+DAA+D,CAAC,CAAC;IACjG,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,qFAAqF,CAAC,CAAC;IACtH,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,KAAK,gEAAgE,CAAC,CAAC;IACxI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,uDAAuD,CAAC,CAAC;IACzH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC;QACV,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;KACtC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,2BAA2B,aAAa,EAAE,yEAAyE,CAAC,CAAC;IAC9I,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,gCAAgC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IACpH,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO;IACd,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,+BAA+B,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACrH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM;IACb,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,GAAG,CAAC,aAAa,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,KAAK,EAAE,KAAK,aAAa,EAAE,GAAG,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpG,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,EAAE,OAAO,OAAO,EAAE,CAAC;QACnC,KAAK,QAAQ,EAAE,OAAO,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5C,SAAS,OAAO,IAAI,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IAChD,GAAG,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Manage ~/.cursor/hooks.json — install, remove, inspect the WARD hook on
+ * the four events it handles. Cursor reloads hooks.json on save.
+ *
+ * Safety rules:
+ *  - Back up hooks.json before changing it, and write atomically
+ *  - Idempotent: init twice leaves one entry per event
+ *  - Our entries are found by their command; other hooks are untouched
+ */
+import { type CursorHookEntry } from './types.js';
+export declare function cursorDir(): string;
+export declare function hooksJsonPath(): string;
+/** User-global WARD.md, used when a project has none. */
+export declare function userWardPath(): string;
+export interface HooksFile {
+    version?: number;
+    hooks?: Record<string, CursorHookEntry[] | undefined>;
+    [other: string]: unknown;
+}
+export declare function readHooks(path?: string): HooksFile;
+export declare function writeHooks(file: HooksFile, path?: string): void;
+export interface InstallOptions {
+    /** Command that runs this CLI. Default: "weave-ward-cursor" */
+    binary?: string;
+    /** Hook timeout in seconds. Default 10 */
+    timeoutSeconds?: number;
+    /** Deny on malformed payloads and evaluator errors. Default: allow */
+    failClosed?: boolean;
+}
+export declare function isHookInstalled(file?: HooksFile): boolean;
+export declare function installHook(opts?: InstallOptions): HooksFile;
+export declare function removeHook(): {
+    removed: number;
+    file: HooksFile;
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAU,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAE1D,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,yDAAyD;AACzD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC,CAAC;IACtD,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,wBAAgB,SAAS,CAAC,IAAI,SAAkB,GAAG,SAAS,CAS3D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,SAAkB,GAAG,IAAI,CAMxE;AAKD,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAMD,wBAAgB,eAAe,CAAC,IAAI,GAAE,SAAuB,GAAG,OAAO,CAEtE;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,cAAmB,GAAG,SAAS,CAYhE;AAED,wBAAgB,UAAU,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAajE"}

package/dist/config.js

@@ -0,0 +1,80 @@
+/**
+ * Manage ~/.cursor/hooks.json — install, remove, inspect the WARD hook on
+ * the four events it handles. Cursor reloads hooks.json on save.
+ *
+ * Safety rules:
+ *  - Back up hooks.json before changing it, and write atomically
+ *  - Idempotent: init twice leaves one entry per event
+ *  - Our entries are found by their command; other hooks are untouched
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync, copyFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { EVENTS } from './types.js';
+export function cursorDir() {
+    return join(homedir(), '.cursor');
+}
+export function hooksJsonPath() {
+    return join(cursorDir(), 'hooks.json');
+}
+/** User-global WARD.md, used when a project has none. */
+export function userWardPath() {
+    return join(cursorDir(), 'WARD.md');
+}
+export function readHooks(path = hooksJsonPath()) {
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (err) {
+        throw new Error(`Failed to parse ${path}; fix the JSON or move it aside and re-run. ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export function writeHooks(file, path = hooksJsonPath()) {
+    mkdirSync(dirname(path), { recursive: true });
+    if (existsSync(path))
+        copyFileSync(path, `${path}.weave-backup`);
+    const tmp = `${path}.tmp`;
+    writeFileSync(tmp, JSON.stringify(file, null, 2) + '\n', 'utf8');
+    renameSync(tmp, path);
+}
+/** The command marker: our entries run "<binary> hook". */
+const HOOK_ARGS = ' hook';
+/** Our entries: the published bin, or this package's built CLI run by path. */
+const anyOurs = (e) => typeof e.command === 'string' && /(^|[\s/])weave-ward-cursor hook\b|adapter-cursor\/dist\/cli\.js hook\b/.test(e.command);
+export function isHookInstalled(file = readHooks()) {
+    return EVENTS.every((ev) => (file.hooks?.[ev] ?? []).some(anyOurs));
+}
+export function installHook(opts = {}) {
+    const binary = opts.binary ?? 'weave-ward-cursor';
+    const file = readHooks();
+    file.version ??= 1;
+    const hooks = (file.hooks ??= {});
+    const command = `${binary}${HOOK_ARGS}${opts.failClosed ? ' --fail-closed' : ''}`;
+    for (const ev of EVENTS) {
+        const keep = (hooks[ev] ?? []).filter((e) => !anyOurs(e));
+        hooks[ev] = [...keep, { command, timeout: opts.timeoutSeconds ?? 10 }];
+    }
+    writeHooks(file);
+    return file;
+}
+export function removeHook() {
+    const file = readHooks();
+    let removed = 0;
+    for (const ev of EVENTS) {
+        const before = file.hooks?.[ev];
+        if (!before)
+            continue;
+        const after = before.filter((e) => !anyOurs(e));
+        removed += before.length - after.length;
+        if (after.length)
+            file.hooks[ev] = after;
+        else
+            delete file.hooks[ev];
+    }
+    if (removed > 0)
+        writeHooks(file);
+    return { removed, file };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAwB,MAAM,YAAY,CAAC;AAE1D,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAQD,MAAM,UAAU,SAAS,CAAC,IAAI,GAAG,aAAa,EAAE;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,IAAI,GAAG,aAAa,EAAE;IAChE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACjE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,2DAA2D;AAC3D,MAAM,SAAS,GAAG,OAAO,CAAC;AAW1B,+EAA+E;AAC/E,MAAM,OAAO,GAAG,CAAC,CAAkB,EAAE,EAAE,CACrC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,wEAAwE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAE5H,MAAM,UAAU,eAAe,CAAC,IAAI,GAAc,SAAS,EAAE;IAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAI,GAAmB,EAAE;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClF,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,KAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;;YACrC,OAAO,IAAI,CAAC,KAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/hook.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Hook handler for Cursor's agent hooks. Reads the payload from stdin, finds
+ * the active WARD.md, decides with Ward's shared evaluator, and prints
+ * Cursor's permission output.
+ *
+ * WARD.md resolution (root = the first workspace root, else cwd):
+ *   1. $WEAVE_WARD_PATH
+ *   2. <root>/WARD.md
+ *   3. <root>/.cursor/WARD.md
+ *   4. <root>/.weave/WARD.md
+ *   5. ~/.cursor/WARD.md (user-global)
+ *
+ * Output: an allowed call prints nothing, so Cursor's own approval settings
+ * still apply. A deny prints permission "deny" with the reason. A WARD
+ * require_approval prints "ask" on shell and MCP calls, where Cursor
+ * enforces it, and "deny" elsewhere (preToolUse doesn't enforce "ask", and
+ * beforeReadFile has none).
+ *
+ * Failure modes:
+ *   - A WARD.md that exists but is invalid always denies.
+ *   - Malformed payloads and evaluator errors allow by default (with a note
+ *     on stderr); --fail-closed denies instead.
+ */
+import { type WardPolicy } from '@weave_protocol/ward';
+import { type CursorHookInput, type CursorHookOutput } from './types.js';
+export interface ResolvedWard {
+    policy: WardPolicy;
+    source: string;
+}
+export interface HookDecision {
+    decision: 'allow' | 'deny' | 'require_approval';
+    reasons: string[];
+}
+/** A tool call extracted from one of the four events, or null to skip it. */
+export interface ToolCall {
+    tool: string;
+    args: Record<string, unknown>;
+    cwd: string;
+    /** Whether Cursor enforces "ask" for this event */
+    canAsk: boolean;
+}
+export declare function resolveWardForRoot(root: string): ResolvedWard | null;
+/** Turn a Cursor hook payload into the tool call Ward should decide. */
+export declare function toToolCall(payload: CursorHookInput, fallbackCwd?: string): ToolCall | null;
+/** Decide a Cursor tool call against a WARD policy. */
+export declare function evaluateCall(policy: WardPolicy, call: ToolCall): HookDecision;
+/** WARD decision → Cursor output; undefined means print nothing. */
+export declare function toHookOutput(result: HookDecision, source: string, canAsk: boolean): CursorHookOutput | undefined;
+export declare function runHook(failClosed: boolean): Promise<never>;
+//# sourceMappingURL=hook.d.ts.map

package/dist/hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAiB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGxF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAmBpE;AAaD,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,SAAgB,GAAG,QAAQ,GAAG,IAAI,CAqBjG;AAED,uDAAuD;AACvD,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,GAAG,YAAY,CAG7E;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAUhH;AAiBD,wBAAsB,OAAO,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAoCjE"}

package/dist/hook.js

@@ -0,0 +1,157 @@
+/**
+ * Hook handler for Cursor's agent hooks. Reads the payload from stdin, finds
+ * the active WARD.md, decides with Ward's shared evaluator, and prints
+ * Cursor's permission output.
+ *
+ * WARD.md resolution (root = the first workspace root, else cwd):
+ *   1. $WEAVE_WARD_PATH
+ *   2. <root>/WARD.md
+ *   3. <root>/.cursor/WARD.md
+ *   4. <root>/.weave/WARD.md
+ *   5. ~/.cursor/WARD.md (user-global)
+ *
+ * Output: an allowed call prints nothing, so Cursor's own approval settings
+ * still apply. A deny prints permission "deny" with the reason. A WARD
+ * require_approval prints "ask" on shell and MCP calls, where Cursor
+ * enforces it, and "deny" elsewhere (preToolUse doesn't enforce "ask", and
+ * beforeReadFile has none).
+ *
+ * Failure modes:
+ *   - A WARD.md that exists but is invalid always denies.
+ *   - Malformed payloads and evaluator errors allow by default (with a note
+ *     on stderr); --fail-closed denies instead.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { parseAndValidate, evaluateToolCall } from '@weave_protocol/ward';
+import { TOOL_MAPPINGS } from './types.js';
+import { userWardPath } from './config.js';
+export function resolveWardForRoot(root) {
+    const candidates = [
+        process.env.WEAVE_WARD_PATH,
+        root && join(root, 'WARD.md'),
+        root && join(root, '.cursor', 'WARD.md'),
+        root && join(root, '.weave', 'WARD.md'),
+        userWardPath(),
+    ].filter((p) => !!p);
+    for (const path of candidates) {
+        const full = resolve(path);
+        if (!existsSync(full))
+            continue;
+        const result = parseAndValidate(readFileSync(full, 'utf8'));
+        if (!result.valid || !result.policy) {
+            throw new Error(`Invalid WARD.md at ${full}: ${result.errors.map((e) => e.message).join('; ')}`);
+        }
+        return { policy: result.policy, source: full };
+    }
+    return null;
+}
+const asObject = (v) => {
+    if (typeof v === 'string') {
+        try {
+            v = JSON.parse(v);
+        }
+        catch {
+            return {};
+        }
+    }
+    return v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+};
+/** Turn a Cursor hook payload into the tool call Ward should decide. */
+export function toToolCall(payload, fallbackCwd = process.cwd()) {
+    const root = payload.workspace_roots?.[0] || fallbackCwd;
+    const cwd = payload.cwd || root;
+    switch (payload.hook_event_name) {
+        case 'beforeShellExecution':
+            return { tool: 'Shell', args: { command: payload.command ?? '', cwd }, cwd, canAsk: true };
+        case 'beforeMCPExecution': {
+            const server = (payload.mcp_server_name ?? 'unknown').replace(/[^A-Za-z0-9_-]/g, '_');
+            return { tool: `mcp__${server}__${payload.tool_name ?? ''}`, args: asObject(payload.tool_input), cwd, canAsk: true };
+        }
+        case 'beforeReadFile':
+            return { tool: 'Read', args: { file_path: payload.file_path ?? '' }, cwd, canAsk: false };
+        case 'preToolUse': {
+            const tool = payload.tool_name ?? '';
+            // Shell, Read and MCP calls are decided by the dedicated events above
+            if (tool === 'Shell' || tool === 'Read' || tool.startsWith('MCP:'))
+                return null;
+            return { tool, args: asObject(payload.tool_input), cwd, canAsk: false };
+        }
+        default:
+            return null;
+    }
+}
+/** Decide a Cursor tool call against a WARD policy. */
+export function evaluateCall(policy, call) {
+    const { decision, reasons } = evaluateToolCall(policy, call.tool, call.args, { mappings: TOOL_MAPPINGS, cwd: call.cwd });
+    return { decision, reasons };
+}
+/** WARD decision → Cursor output; undefined means print nothing. */
+export function toHookOutput(result, source, canAsk) {
+    if (result.decision === 'allow')
+        return undefined;
+    if (result.decision === 'require_approval' && canAsk) {
+        const msg = `WARD requires approval: ${result.reasons.join(' | ')} (policy: ${source})`;
+        return { permission: 'ask', user_message: msg, agent_message: msg };
+    }
+    const msg = result.decision === 'deny'
+        ? `WARD: ${result.reasons.join(' | ')} (policy: ${source})`
+        : `WARD requires approval before this call: ${result.reasons.join(' | ')} (policy: ${source}). Ask the user to approve it or update WARD.md.`;
+    return { permission: 'deny', user_message: msg, agent_message: msg };
+}
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return '';
+    let data = '';
+    process.stdin.setEncoding('utf8');
+    for await (const chunk of process.stdin)
+        data += chunk;
+    return data;
+}
+function emit(output) {
+    if (output)
+        process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+const denyWith = (msg) => ({ permission: 'deny', user_message: msg, agent_message: msg });
+export async function runHook(failClosed) {
+    const raw = await readStdin();
+    if (!raw.trim())
+        emit();
+    let payload;
+    try {
+        payload = JSON.parse(raw);
+    }
+    catch {
+        if (failClosed)
+            emit(denyWith('WARD hook: malformed payload from Cursor'));
+        process.stderr.write('weave-ward-cursor: malformed hook payload, allowing\n');
+        emit();
+    }
+    const call = toToolCall(payload);
+    if (!call)
+        emit();
+    let resolved;
+    try {
+        resolved = resolveWardForRoot(payload.workspace_roots?.[0] || call.cwd);
+    }
+    catch (err) {
+        // A policy exists but can't be used: deny rather than run unprotected.
+        emit(denyWith(`WARD policy could not be loaded: ${err instanceof Error ? err.message : String(err)}. Fix WARD.md to continue.`));
+    }
+    if (!resolved)
+        emit();
+    let result;
+    try {
+        result = evaluateCall(resolved.policy, call);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (failClosed)
+            emit(denyWith(`WARD evaluation failed: ${msg}`));
+        process.stderr.write(`weave-ward-cursor: WARD evaluation failed (${msg}), allowing\n`);
+        emit();
+    }
+    emit(toHookOutput(result, resolved.source, call.canAsk));
+}
+//# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAmB,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAA+C,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAqB3C,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC;QACxC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC;QACvC,YAAY,EAAE;KACf,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE;IACvD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/F,CAAC,CAAC;AAEF,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAwB,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;IAChC,QAAQ,OAAO,CAAC,eAAe,EAAE,CAAC;QAChC,KAAK,sBAAsB;YACzB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7F,KAAK,oBAAoB,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YACtF,OAAO,EAAE,IAAI,EAAE,QAAQ,MAAM,KAAK,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACvH,CAAC;QACD,KAAK,gBAAgB;YACnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC5F,KAAK,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;YACrC,sEAAsE;YACtE,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1E,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,IAAc;IAC7D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,MAAc,EAAE,MAAe;IAChF,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,IAAI,MAAM,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,2BAA2B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,GAAG,CAAC;QACxF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM;QACpC,CAAC,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,GAAG;QAC3D,CAAC,CAAC,4CAA4C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,kDAAkD,CAAC;IAChJ,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,MAAyB;IACrC,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAoB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;AAEpH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAAmB;IAC/C,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,CAAC;IAExB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC9E,IAAI,EAAE,CAAC;IACT,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,IAAI,EAAE,CAAC;IAElB,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,IAAI,CAAC,QAAQ,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,IAAI,EAAE,CAAC;IAEtB,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,GAAG,eAAe,CAAC,CAAC;QACvF,IAAI,EAAE,CAAC;IACT,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @weave_protocol/adapter-cursor — WARD.md enforcement for Cursor's agent hooks.
+ */
+export * from './types.js';
+export { cursorDir, hooksJsonPath, userWardPath, readHooks, writeHooks, installHook, removeHook, isHookInstalled, } from './config.js';
+export type { HooksFile, InstallOptions } from './config.js';
+export { resolveWardForRoot, toToolCall, evaluateCall, toHookOutput } from './hook.js';
+export type { ResolvedWard, HookDecision, ToolCall } from './hook.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,aAAa,EACb,YAAY,EACZ,SAAS,EACT,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACvF,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * @weave_protocol/adapter-cursor — WARD.md enforcement for Cursor's agent hooks.
+ */
+export * from './types.js';
+export { cursorDir, hooksJsonPath, userWardPath, readHooks, writeHooks, installHook, removeHook, isHookInstalled, } from './config.js';
+export { resolveWardForRoot, toToolCall, evaluateCall, toHookOutput } from './hook.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,aAAa,EACb,YAAY,EACZ,SAAS,EACT,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Cursor agent hooks (https://cursor.com/docs/agent/hooks).
+ *
+ * One command is registered on four events and tells them apart by
+ * hook_event_name:
+ *
+ *   beforeShellExecution  { command, cwd }                       → Shell
+ *   beforeMCPExecution    { tool_name, tool_input (JSON string),
+ *                           mcp_server_name }                    → mcp__<server>__<tool>
+ *   beforeReadFile        { file_path }                          → Read
+ *   preToolUse            { tool_name, tool_input, cwd }         → every other tool
+ *                         (Shell, Read and MCP:* are left to the events above,
+ *                          which carry richer fields)
+ *
+ * Output: { permission: "allow" | "deny" | "ask", user_message, agent_message }.
+ * Common fields: workspace_roots, conversation_id, hook_event_name, ...
+ */
+import type { ToolMapping } from '@weave_protocol/ward';
+export type CursorEvent = 'beforeShellExecution' | 'beforeMCPExecution' | 'beforeReadFile' | 'preToolUse';
+export declare const EVENTS: CursorEvent[];
+export interface CursorHookInput {
+    hook_event_name?: string;
+    conversation_id?: string;
+    workspace_roots?: string[];
+    cwd?: string;
+    command?: string;
+    tool_name?: string;
+    tool_input?: unknown;
+    mcp_server_name?: string;
+    file_path?: string;
+}
+export interface CursorHookOutput {
+    permission?: 'allow' | 'deny' | 'ask';
+    user_message?: string;
+    agent_message?: string;
+}
+/**
+ * Cursor's tool names (preToolUse matcher values: Shell, Read, Write, Grep,
+ * Delete, Task). Write and Delete arguments aren't documented, so Ward checks
+ * every path-named argument they carry (file_path, path, target_file, ...).
+ */
+export declare const TOOL_MAPPINGS: Record<string, ToolMapping>;
+/** One hooks.json entry. */
+export interface CursorHookEntry {
+    command: string;
+    type?: 'command' | 'prompt';
+    timeout?: number;
+    matcher?: string;
+    failClosed?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,MAAM,WAAW,GAAG,sBAAsB,GAAG,oBAAoB,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAE1G,eAAO,MAAM,MAAM,EAAE,WAAW,EAAmF,CAAC;AAEpH,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CASrD,CAAC;AAEF,4BAA4B;AAC5B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB"}

package/dist/types.js

@@ -0,0 +1,34 @@
+/**
+ * Cursor agent hooks (https://cursor.com/docs/agent/hooks).
+ *
+ * One command is registered on four events and tells them apart by
+ * hook_event_name:
+ *
+ *   beforeShellExecution  { command, cwd }                       → Shell
+ *   beforeMCPExecution    { tool_name, tool_input (JSON string),
+ *                           mcp_server_name }                    → mcp__<server>__<tool>
+ *   beforeReadFile        { file_path }                          → Read
+ *   preToolUse            { tool_name, tool_input, cwd }         → every other tool
+ *                         (Shell, Read and MCP:* are left to the events above,
+ *                          which carry richer fields)
+ *
+ * Output: { permission: "allow" | "deny" | "ask", user_message, agent_message }.
+ * Common fields: workspace_roots, conversation_id, hook_event_name, ...
+ */
+export const EVENTS = ['beforeShellExecution', 'beforeMCPExecution', 'beforeReadFile', 'preToolUse'];
+/**
+ * Cursor's tool names (preToolUse matcher values: Shell, Read, Write, Grep,
+ * Delete, Task). Write and Delete arguments aren't documented, so Ward checks
+ * every path-named argument they carry (file_path, path, target_file, ...).
+ */
+export const TOOL_MAPPINGS = {
+    // cwd is where the command runs: checked as a read, like the other adapters' workdir
+    Shell: { capability: 'shell_exec', commandField: 'command', pathField: 'cwd', fsOp: 'read' },
+    Read: { capability: 'file_read', pathField: 'file_path', fsOp: 'read' },
+    Write: { capability: 'file_write', fsOp: 'write' },
+    Delete: { capability: 'file_delete', fsOp: 'delete' },
+    Grep: { capability: 'file_read', fsOp: 'read' },
+    Glob: { capability: 'file_list', fsOp: 'list' },
+    Task: { capability: 'subagent' },
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,MAAM,CAAC,MAAM,MAAM,GAAkB,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AAuBpH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,qFAAqF;IACrF,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IAC5F,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;IACvE,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IAClD,MAAM,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrD,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;IAC/C,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;IAC/C,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;CACjC,CAAC"}

package/package.json

@@ -1,6 +1,54 @@
 {
   "name": "@weave_protocol/adapter-cursor",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Weave Protocol adapter for Cursor - enforces WARD.md policies via Cursor's agent hooks",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "weave-ward-cursor": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "weave-protocol",
+    "ward",
+    "cursor",
+    "cursor-agent",
+    "agent-security",
+    "ai-security",
+    "hooks",
+    "harness-adapter",
+    "policy-enforcement",
+    "ward-md"
+  ],
+  "author": "Trent Yoxall",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Tyox-all/Weave_Protocol.git",
+    "directory": "adapter-cursor"
+  },
+  "homepage": "https://github.com/Tyox-all/Weave_Protocol/tree/main/adapter-cursor#readme",
+  "bugs": {
+    "url": "https://github.com/Tyox-all/Weave_Protocol/issues"
+  },
+  "dependencies": {
+    "@weave_protocol/ward": "^0.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.6",
+    "typescript": "^7.0.2"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/",
+    "README.md"
+  ]
+}