coderifts 4.7.0 → 4.8.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # Changelog
 
+## 4.8.0
+
+### Fixed
+- **VS Code / Copilot PreToolUse camelCase (DRIFT 1).** VS Code Agent hooks
+  pass `toolName` / `toolInput` / `filePath` (and `targetFile`). The hook
+  already tolerated `toolName`/`toolInput` but missed several property
+  aliases, so flattened camelCase payloads and `targetFile` were refused as
+  unparseable (fail-closed, safe, unusable). Every Claude-shaped read site
+  now accepts snake_case and camelCase: `tool_name`/`toolName`,
+  `tool_input`/`toolInput`, `file_path`/`filePath`/`path`/`target_file`/`targetFile`,
+  `content`/`contents`. Snake_case behaviour is unchanged. Garbage is still
+  fail-closed.
+
+### Changed
+- **Matcher-inert hosts (DRIFT 2, documented, not a host fix).** VS Code
+  parses hook matchers but does not apply them — the hook fires on every
+  tool call. Non-Write/Edit/MultiEdit tools now exit **0** silently with no
+  network and **without requiring an API key** (parse → skip → key, so a
+  missing key cannot brick Read/Bash). Non-contract Write paths skip before
+  the key gate too. Garbage is still fail-closed (`stdin_unparseable`).
+  Spec-path Write/Edit/MultiEdit without a key is still fail-closed.
+
+### Added
+- **`copilot` MCP host (DRIFT 3).** `MCP_HOSTS` grows a third entry:
+  `.vscode/mcp.json`, root key **`servers`** (not `mcpServers`),
+  `type: "http"` + `url`. The writer special-cases the root key; Claude and
+  Cursor stay on `mcpServers`. `coderifts init --agents --hosts` accepts
+  `copilot` and includes it in `all`. Merge preserves other `servers` (and
+  any leftover keys). `--check` uses the same predicate.
+- README Copilot section: `hook install --claude` arms VS Code agent mode
+  (measured), matcher-inert behaviour, honest boundary (hooks gate the
+  agent, not the human; inline completions are not tool calls).
+
 ## 4.7.0
 
 ### Added

package/README.md

@@ -72,6 +72,7 @@ coderifts init --agents                  # all hosts, all four pieces
 coderifts init --agents --dry-run        # plan only — writes nothing
 coderifts init --agents --hosts=claude   # Claude Code only
 coderifts init --agents --hosts=cursor   # Cursor only
+coderifts init --agents --hosts=copilot  # GitHub Copilot / VS Code only
 coderifts init --agents --no-hook        # skip host hook install
 coderifts init --agents --no-workflow    # skip .github/workflows/coderifts.yml
 coderifts init --agents --check          # which of the four pieces are present
@@ -79,9 +80,9 @@ coderifts init --agents --check          # which of the four pieces are present
 
 | Piece | What it writes | Host-specific shape |
 |-------|----------------|---------------------|
-| **MCP config** | `.mcp.json` (Claude Code), `.cursor/mcp.json` (Cursor) | Claude: `mcpServers.coderifts` with `type: "http"` + `url`. Cursor: `url` only (no `type`). Never `httpUrl` (that is Gemini, extension-level — this command does not write it). |
-| **Agent rules** | generated host files via `agent-setup`'s writer | `AGENTS.md` is always written. Claude also gets `CLAUDE.md`; Cursor also gets `.cursor/rules/coderifts.mdc`. `--hosts=all` adds Copilot, LangGraph, and OpenAI instructions. (`coderifts init agent` is a different command — it writes a `.coderifts.yml` template.) |
-| **Host hook** | `.claude/settings.json`, `.cursor/hooks.json` | Reuses `hook install --claude` / `--cursor` (JSON-merge, backup, idempotent) |
+| **MCP config** | `.mcp.json` (Claude Code), `.cursor/mcp.json` (Cursor), `.vscode/mcp.json` (Copilot / VS Code) | Three shapes, never normalised into one: Claude `mcpServers` + `type: "http"` + `url`; Cursor `mcpServers` + `url` only (no `type`); Copilot **`servers`** (not `mcpServers`) + `type: "http"` + `url`. Never `httpUrl` (that is Gemini, extension-level — this command does not write it). |
+| **Agent rules** | generated host files via `agent-setup`'s writer | `AGENTS.md` is always written. Claude also gets `CLAUDE.md`; Cursor also gets `.cursor/rules/coderifts.mdc`; Copilot also gets `.github/copilot-instructions.md`. `--hosts=all` adds LangGraph and OpenAI instructions. (`coderifts init agent` is a different command — it writes a `.coderifts.yml` template.) |
+| **Host hook** | `.claude/settings.json`, `.cursor/hooks.json` | Reuses `hook install --claude` / `--cursor` (JSON-merge, backup, idempotent). Copilot shares Claude's `.claude/settings.json` — VS Code reads it by default. |
 | **CI workflow** | `.github/workflows/coderifts.yml` | `coderifts/contract-gate@v0`. `require-verified-monitoring` is commented (honest default: **false**) |
 
 **Next manual step:** add `CODERIFTS_API_KEY` to the repository secrets. The
@@ -347,6 +348,37 @@ weakened by `CODERIFTS_ADVISORY`.
 CODERIFTS_ADVISORY=1 coderifts claude-hook
 ```
 
+### GitHub Copilot / VS Code agent mode
+
+Measured (VS Code **1.110**, Agent hooks Preview, 2026-08-24): VS Code **reads
+`.claude/settings.json` by default**. `coderifts hook install --claude`
+therefore arms Copilot agent mode — there is no separate `--copilot` hook
+installer. VS Code Agent hooks **are deny-capable**: PreToolUse honours
+`permissionDecision` allow|deny|ask and **exit 2**.
+
+**Property names (CLI 4.8.0):** VS Code passes camelCase (`toolName` /
+`toolInput` / `filePath` / `targetFile`). The hook accepts those alongside
+Claude's snake_case (`tool_name` / `tool_input` / `file_path`). Flattened
+payloads (path on the root object) are accepted. Garbage input is still
+fail-closed.
+
+**Matcher limitation (host behaviour, not a CLI bug):** VS Code **parses** hook
+matchers (`Write|Edit|MultiEdit`) but **does not apply them**. The hook fires
+on every tool call. Non-governed tools (Read, Bash, …) and non-contract paths
+exit **0** silently with **no network** and **no API key required** — cheap
+and fail-open for anything that is not a Write/Edit/MultiEdit of the spec. It
+is noisy (every tool call invokes the process) and safe (irrelevant tools are
+not blocked). A spec-path write without a key is still fail-closed.
+
+**Honest boundary:** hooks gate the **agent**, not the human. Inline
+completions (ghost text) are not tool calls and are not governed. A developer
+typing in the editor is not a PreToolUse event.
+
+**MCP:** `coderifts init --agents` (and `--hosts=copilot`) writes
+`.vscode/mcp.json` with root key **`servers`** — a third shape. Claude Code and
+Cursor use `mcpServers`; Copilot cloud Settings paste also uses `mcpServers`.
+Do not copy one file onto another host.
+
 ### `coderifts status [repo]`
 
 **Read-only** cross-layer enforcement report (Runtime / Merge / Deploy, plus

package/bin/coderifts.js

@@ -92,7 +92,7 @@ program
   .command('init [template]')
   .description('Generate a .coderifts.yml from a policy template, or wire governed agent work (--agents)')
   .option('--agents', 'Wire this repo for governed agent work (MCP config, rule files, host hook, CI gate)')
-  .option('--hosts <list>', 'With --agents: claude, cursor, or all (default: all)', 'all')
+  .option('--hosts <list>', 'With --agents: claude, cursor, copilot, or all (default: all)', 'all')
   .option('--no-hook', 'With --agents: skip host hook install')
   .option('--no-workflow', 'With --agents: skip writing .github/workflows/coderifts.yml')
   .option('--dry-run', 'With --agents: print the plan without writing')

package/dist/cli.js

@@ -3028,7 +3028,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "coderifts",
-      version: "4.7.0",
+      version: "4.8.0",
       description: "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
       author: "CodeRifts <hello@coderifts.com>",
       license: "MIT",
@@ -74363,7 +74363,7 @@ var require_claude_hook = __commonJS({
       "Parse-gap DEFAULT (exit 2): unparseable stdin / missing file_path \u2014 refusing (fail-closed);",
       "  set CODERIFTS_ADVISORY=1 to soften. JSONL hook_blocked cause stdin_unparseable|missing_file_path.",
       "",
-      "Still exit 0 (nothing to govern): non-spec path, identical content.",
+      "Still exit 0 (nothing to govern): non-spec path, identical content, non-governed tool.",
       "",
       "CONTINUE_WITH_MONITORING: allow only if the host asserts a sink",
       "  (CODERIFTS_MONITORING_SINK_WIRED=1|true or git config coderifts.monitoringSinkWired).",
@@ -74504,6 +74504,42 @@ var require_claude_hook = __commonJS({
       if (fromGit) return fromGit;
       return DEFAULT_SPEC_PATH;
     }
+    var GOVERNED_TOOLS = /* @__PURE__ */ new Set(["write", "edit", "multiedit", "multi_edit"]);
+    function isGovernedTool(name) {
+      return GOVERNED_TOOLS.has(String(name || "").toLowerCase());
+    }
+    function pickToolField(obj, ...keys) {
+      if (!obj || typeof obj !== "object" || Array.isArray(obj)) return void 0;
+      for (const k of keys) {
+        if (!Object.prototype.hasOwnProperty.call(obj, k)) continue;
+        const v = obj[k];
+        if (v === void 0 || v === null) continue;
+        return v;
+      }
+      return void 0;
+    }
+    function filePathFromInput(toolInput) {
+      const v = pickToolField(toolInput, "file_path", "filePath", "path", "target_file", "targetFile");
+      return typeof v === "string" && v !== "" ? v : void 0;
+    }
+    function contentFromInput(toolInput) {
+      const v = pickToolField(toolInput, "content", "contents");
+      return typeof v === "string" ? v : void 0;
+    }
+    function coerceToolInput(value) {
+      if (value && typeof value === "object" && !Array.isArray(value)) return value;
+      if (typeof value === "string") {
+        const t = value.trim();
+        if (!t) return null;
+        try {
+          const parsed = JSON.parse(t);
+          if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
+        } catch {
+          return null;
+        }
+      }
+      return null;
+    }
     function parseStdinJson(raw) {
       if (raw == null || String(raw).trim() === "") {
         return { ok: false, reason: "empty stdin" };
@@ -74517,9 +74553,9 @@ var require_claude_hook = __commonJS({
       if (!obj || typeof obj !== "object" || Array.isArray(obj)) {
         return { ok: false, reason: "stdin JSON is not an object" };
       }
-      const toolName = obj.tool_name || obj.toolName || obj.name || null;
-      let toolInput = obj.tool_input || obj.toolInput || obj.input || null;
-      if (toolInput == null && obj.file_path) toolInput = obj;
+      const toolName = pickToolField(obj, "tool_name", "toolName", "name");
+      let toolInput = coerceToolInput(pickToolField(obj, "tool_input", "toolInput", "input"));
+      if (toolInput == null && filePathFromInput(obj)) toolInput = obj;
       if (!toolName || typeof toolName !== "string") {
         return { ok: false, reason: "missing tool_name" };
       }
@@ -74543,16 +74579,17 @@ var require_claude_hook = __commonJS({
       return false;
     }
     function deriveAfterContent(toolName, toolInput, diskBefore) {
-      const name = String(toolName || "");
-      if (name === "Write" || name === "write") {
-        if (typeof toolInput.content !== "string") {
+      const name = String(toolName || "").toLowerCase();
+      if (name === "write") {
+        const content = contentFromInput(toolInput);
+        if (typeof content !== "string") {
           return { ok: false, reason: "Write tool_input.content missing or not a string" };
         }
-        return { ok: true, after: toolInput.content };
+        return { ok: true, after: content };
       }
-      if (name === "Edit" || name === "edit") {
-        const oldS = toolInput.old_string != null ? toolInput.old_string : toolInput.oldString;
-        const newS = toolInput.new_string != null ? toolInput.new_string : toolInput.newString;
+      if (name === "edit") {
+        const oldS = pickToolField(toolInput, "old_string", "oldString");
+        const newS = pickToolField(toolInput, "new_string", "newString");
         if (typeof oldS !== "string" || typeof newS !== "string") {
           return { ok: false, reason: "Edit tool_input.old_string/new_string missing" };
         }
@@ -74561,16 +74598,16 @@ var require_claude_hook = __commonJS({
         }
         return { ok: true, after: diskBefore.replace(oldS, newS) };
       }
-      if (name === "MultiEdit" || name === "multi_edit" || name === "multiEdit") {
-        const edits = toolInput.edits || toolInput.Edits;
+      if (name === "multiedit" || name === "multi_edit") {
+        const edits = pickToolField(toolInput, "edits", "Edits");
         if (!Array.isArray(edits) || edits.length === 0) {
           return { ok: false, reason: "MultiEdit tool_input.edits missing or empty" };
         }
         let cur = diskBefore;
         for (let i = 0; i < edits.length; i++) {
           const e = edits[i] || {};
-          const oldS = e.old_string != null ? e.old_string : e.oldString;
-          const newS = e.new_string != null ? e.new_string : e.newString;
+          const oldS = pickToolField(e, "old_string", "oldString");
+          const newS = pickToolField(e, "new_string", "newString");
           if (typeof oldS !== "string" || typeof newS !== "string") {
             return { ok: false, reason: `MultiEdit edits[${i}] missing old_string/new_string` };
           }
@@ -74581,7 +74618,7 @@ var require_claude_hook = __commonJS({
         }
         return { ok: true, after: cur };
       }
-      return { ok: false, reason: `unsupported tool_name for content derive: ${name}` };
+      return { ok: false, reason: `unsupported tool_name for content derive: ${toolName}` };
     }
     function isV2DecisionBody(d, dr) {
       if (dr && typeof dr === "object") return true;
@@ -74742,18 +74779,6 @@ var require_claude_hook = __commonJS({
         }
         return r;
       };
-      const apiKey = resolveApiKey({ ...deps, cwd, env });
-      if (!apiKey) {
-        logEv({ type: "preflight_unavailable", cause: "missing_api_key" });
-        return emitTerminal(failClosedOrAdvisory({
-          advisory,
-          strict,
-          site: "missing_api_key",
-          why: "no API key",
-          softMsg: "CodeRifts claude-hook: no API key (coderifts login / CODERIFTS_API_KEY / git config coderifts.apiKey) \u2014 allowing",
-          errLog
-        }));
-      }
       const PARSE_GAP_STDERR = "unparseable input \u2014 refusing (fail-closed); set CODERIFTS_ADVISORY=1 to soften";
       const raw = typeof options.stdin === "string" ? options.stdin : readStdin();
       const parsed = parseStdinJson(raw);
@@ -74767,7 +74792,11 @@ var require_claude_hook = __commonJS({
       }
       const { toolName, toolInput } = parsed;
       tool = toolName;
-      const filePath = toolInput.file_path || toolInput.filePath || toolInput.path;
+      if (!isGovernedTool(toolName)) {
+        logEv({ type: "detection_skip", signals: ["not_governed_tool"], tool });
+        return emitTerminal({ exitCode: 0, reason: "not_governed_tool" });
+      }
+      const filePath = filePathFromInput(toolInput);
       if (!filePath || typeof filePath !== "string") {
         if (advisory && !strict) {
           errLog("CodeRifts claude-hook: tool_input.file_path missing \u2014 allowing (CODERIFTS_ADVISORY)");
@@ -74782,6 +74811,18 @@ var require_claude_hook = __commonJS({
         logEv({ type: "detection_skip", signals: ["not_spec_path"], tool, path: filePath });
         return emitTerminal({ exitCode: 0, reason: "not_spec_path" });
       }
+      const apiKey = resolveApiKey({ ...deps, cwd, env });
+      if (!apiKey) {
+        logEv({ type: "preflight_unavailable", cause: "missing_api_key" });
+        return emitTerminal(failClosedOrAdvisory({
+          advisory,
+          strict,
+          site: "missing_api_key",
+          why: "no API key",
+          softMsg: "CodeRifts claude-hook: no API key (coderifts login / CODERIFTS_API_KEY / git config coderifts.apiKey) \u2014 allowing",
+          errLog
+        }));
+      }
       const absPath = path.isAbsolute(filePath) ? filePath : path.resolve(cwd, filePath);
       let diskBefore = "";
       if (exists(absPath)) {
@@ -74941,6 +74982,11 @@ var require_claude_hook = __commonJS({
     module2.exports = {
       runClaudeHook,
       parseStdinJson,
+      pickToolField,
+      filePathFromInput,
+      contentFromInput,
+      isGovernedTool,
+      coerceToolInput,
       isSpecPath,
       deriveAfterContent,
       mapDecisionSeverity,
@@ -142589,6 +142635,13 @@ var require_key_store = __commonJS({
     function findByPrefix(prefix) {
       return keyRecords.find((r) => r.keyPrefix === prefix) || null;
     }
+    function findAllByPrefix(prefix) {
+      if (!prefix || typeof prefix !== "string") return [];
+      return keyRecords.filter((r) => r.keyPrefix === prefix);
+    }
+    function isFullKeyToken(token) {
+      return typeof token === "string" && token.length > 12;
+    }
     function findRecordByKey(key) {
       if (!key || typeof key !== "string") return null;
       const prefix = getKeyPrefix(key);
@@ -142672,14 +142725,38 @@ var require_key_store = __commonJS({
     function _setGenerateKeyStringForTest(fn) {
       _generateKeyStringForTest = typeof fn === "function" ? fn : null;
     }
-    function deleteByPrefix(prefix, ownerEmail) {
-      const idx = keyRecords.findIndex((r) => r.keyPrefix === prefix);
+    function deleteRecord(record, ownerEmail) {
+      const idx = keyRecords.indexOf(record);
       if (idx === -1) return false;
       if (ownerEmail && keyRecords[idx].owner !== ownerEmail) return false;
       keyRecords.splice(idx, 1);
       saveKeys();
       return true;
     }
+    function revokeKey({ token, ownerEmail } = {}) {
+      const raw = typeof token === "string" ? token : "";
+      if (!raw) return { ok: false, code: "not_found", count: 0 };
+      if (isFullKeyToken(raw)) {
+        const rec = findRecordByKey(raw);
+        if (!rec) return { ok: false, code: "not_found", count: 0 };
+        if (!deleteRecord(rec, ownerEmail || null)) {
+          return { ok: false, code: "unauthorized", count: 1, prefix: rec.keyPrefix };
+        }
+        return { ok: true, code: "deleted", count: 1, prefix: rec.keyPrefix };
+      }
+      const matches = findAllByPrefix(raw);
+      if (matches.length === 0) return { ok: false, code: "not_found", count: 0 };
+      if (matches.length > 1) {
+        return { ok: false, code: "ambiguous", count: matches.length, prefix: raw };
+      }
+      if (!deleteRecord(matches[0], ownerEmail || null)) {
+        return { ok: false, code: "unauthorized", count: 1, prefix: raw };
+      }
+      return { ok: true, code: "deleted", count: 1, prefix: raw };
+    }
+    function deleteByPrefix(prefix, ownerEmail) {
+      return revokeKey({ token: prefix, ownerEmail }).ok === true;
+    }
     module2.exports = {
       createKey,
       hasKey,
@@ -142689,7 +142766,9 @@ var require_key_store = __commonJS({
       listKeysByOwner,
       deleteByPrefix,
       findByPrefix,
+      findAllByPrefix,
       findRecordByKey,
+      revokeKey,
       FREE_TIER_REQUESTS_PER_MONTH,
       FREE_TIER_REQUESTS_PER_MINUTE,
       PREFIX_REGENERATE_ATTEMPTS,
@@ -198815,9 +198894,10 @@ var require_remediation_taxonomy = __commonJS({
           break;
         }
         case "COVERAGE_GAP": {
-          target = "analysis";
+          const detail = str(pattern && pattern.description) || str(pattern && pattern.error);
+          target = str(pattern && pattern.affected_path) || "analysis";
           target_ref = {};
-          instruction = "Do not treat this as a schema edit: restore analyzable artifacts / wait for coverage; re-preflight when analysis is complete.";
+          instruction = detail ? `fix the spec: ${detail}` : "Do not treat this as a schema edit: restore analyzable artifacts / wait for coverage; re-preflight when analysis is complete.";
           break;
         }
         default: {
@@ -198872,6 +198952,21 @@ var require_remediation_taxonomy = __commonJS({
       if (patterns.length > 0) {
         return patterns.map((pattern) => remediationFromDetection({ pattern, ir: null }));
       }
+      const degradedReasons = Array.isArray(verdict.degraded_reasons) ? verdict.degraded_reasons : [];
+      if (degradedReasons.length > 0) {
+        return degradedReasons.map((r) => {
+          const msg = r && (r.message || r.code) ? String(r.message || r.code) : "analysis incomplete";
+          return remediationFromDetection({
+            pattern: {
+              name: "COVERAGE_GAP",
+              degraded: true,
+              description: msg,
+              affected_path: r && r.code || "analysis"
+            },
+            ir: null
+          });
+        });
+      }
       if (verdict.coverage_gap === true || verdict.degraded === true) {
         return [remediationFromDetection({ pattern: { name: "COVERAGE_GAP", degraded: true }, ir: null })];
       }
@@ -206628,8 +206723,19 @@ var require_remediation_transaction = __commonJS({
       if (artifactIds.length > 0) scope.artifact_ids = artifactIds;
       return scope;
     }
+    function isDegradedContext(coreVerdict, context = {}) {
+      if (context.analysis_complete === false) return true;
+      if (Array.isArray(context.degraded_reasons) && context.degraded_reasons.length > 0) return true;
+      if (coreVerdict && coreVerdict.degraded === true) return true;
+      if (Array.isArray(coreVerdict && coreVerdict.degraded_reasons) && coreVerdict.degraded_reasons.length > 0) {
+        return true;
+      }
+      return false;
+    }
     function buildRemediationTransaction({ decision, fingerprint, coreVerdict, context = {} }) {
-      if (decision !== "BLOCK") return null;
+      const degraded = isDegradedContext(coreVerdict, context);
+      const emit = decision === "BLOCK" || decision === "REQUIRE_APPROVAL" || degraded;
+      if (!emit) return null;
       if (typeof fingerprint !== "string" || !fingerprint) return null;
       const verdictForTaxonomy = {
         ...coreVerdict && typeof coreVerdict === "object" ? coreVerdict : {}
@@ -206639,6 +206745,13 @@ var require_remediation_transaction = __commonJS({
           verdictForTaxonomy.detected_patterns = context.detectedPatterns;
         }
       }
+      if (degraded) {
+        verdictForTaxonomy.degraded = true;
+        const reasons = Array.isArray(context.degraded_reasons) && context.degraded_reasons.length ? context.degraded_reasons : verdictForTaxonomy.degraded_reasons;
+        if (Array.isArray(reasons) && reasons.length) {
+          verdictForTaxonomy.degraded_reasons = reasons;
+        }
+      }
       const required_changes = buildRemediations(verdictForTaxonomy);
       const profile = resolveFingerprintProfile(context);
       return {
@@ -206673,6 +206786,7 @@ var require_remediation_transaction = __commonJS({
       resolveFingerprintProfile,
       deriveRecheckScope,
       blockRequiredActionCore,
+      isDegradedContext,
       PROFILE_CRBUNDLE_V1,
       PROFILE_VERDICT_FP_V1,
       RESUBMISSION_UNCHANGED,
@@ -206848,7 +206962,7 @@ var require_decision_result = __commonJS({
       pattern_sources: null,
       // Control core for retrieval; null = not supplied (must never render as type none for BLOCK)
       required_action_core: null,
-      // ID850 v1 — BLOCK-only remediation transaction (null / omit on non-BLOCK)
+      // ID850 v1 — remediation transaction (null / omit on ALLOW/WARN with complete analysis)
       remediation_transaction: null,
       // ID637 v5 slice 4 — change-set completeness commitment (honest; not a proof on generic path).
       // SERVER-authored mode; body_hash covered. Never boolean completeness:true.
@@ -209804,6 +209918,7 @@ var require_mcp_repo_config = __commonJS({
         id: "claude",
         relPath: ".mcp.json",
         label: "Claude Code",
+        rootKey: "mcpServers",
         // Measured: type+url required. url-without-type is a config error.
         entry: Object.freeze({
           type: "http",
@@ -209818,6 +209933,7 @@ var require_mcp_repo_config = __commonJS({
         id: "cursor",
         relPath: ".cursor/mcp.json",
         label: "Cursor",
+        rootKey: "mcpServers",
         // Measured: url only — Cursor docs do not use type for remote HTTP.
         entry: Object.freeze({
           url: MCP_URL,
@@ -209826,8 +209942,24 @@ var require_mcp_repo_config = __commonJS({
           })
         }),
         shapeNote: "mcpServers.coderifts url (no type \u2014 Cursor remote form)"
+      }),
+      copilot: Object.freeze({
+        id: "copilot",
+        relPath: ".vscode/mcp.json",
+        label: "GitHub Copilot / VS Code",
+        // Measured: THIRD variant — root key is `servers`, not mcpServers.
+        rootKey: "servers",
+        entry: Object.freeze({
+          type: "http",
+          url: MCP_URL,
+          headers: Object.freeze({
+            Authorization: "Bearer ${env:CODERIFTS_API_KEY}"
+          })
+        }),
+        shapeNote: "servers.coderifts type=http url (root key servers, not mcpServers)"
       })
     });
+    var MCP_HOST_IDS = Object.freeze(Object.keys(MCP_HOSTS));
     function deepEqual(a, b) {
       if (a === b) return true;
       try {
@@ -209836,25 +209968,26 @@ var require_mcp_repo_config = __commonJS({
         return false;
       }
     }
-    function planMcpMerge(existing, entry) {
+    function planMcpMerge(existing, entry, rootKey = "mcpServers") {
+      const key = rootKey || "mcpServers";
       const hadFile = existing != null;
       const base = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
-      const servers = base.mcpServers && typeof base.mcpServers === "object" && !Array.isArray(base.mcpServers) ? base.mcpServers : {};
-      const current = Object.prototype.hasOwnProperty.call(servers, SERVER_NAME) ? servers[SERVER_NAME] : void 0;
+      const group = base[key] && typeof base[key] === "object" && !Array.isArray(base[key]) ? base[key] : {};
+      const current = Object.prototype.hasOwnProperty.call(group, SERVER_NAME) ? group[SERVER_NAME] : void 0;
       if (deepEqual(current, entry)) {
         return { action: "skip", next: null, reason: "already present, identical" };
       }
       const next = {
         ...base,
-        mcpServers: {
-          ...servers,
+        [key]: {
+          ...group,
           [SERVER_NAME]: entry
         }
       };
       if (!hadFile) {
         return { action: "create", next, reason: "created" };
       }
-      const reason = current === void 0 ? "added mcpServers.coderifts; preserved other servers" : "updated mcpServers.coderifts; preserved other servers";
+      const reason = current === void 0 ? `added ${key}.coderifts; preserved other servers` : `updated ${key}.coderifts; preserved other servers`;
       return { action: "merge", next, reason };
     }
     function serializeMcp(doc) {
@@ -209923,7 +210056,7 @@ var require_mcp_repo_config = __commonJS({
           existing = {};
         }
       }
-      const plan = planMcpMerge(existing, host.entry);
+      const plan = planMcpMerge(existing, host.entry, host.rootKey);
       if (plan.action === "skip") {
         return { action: "skip", relPath: host.relPath, reason: plan.reason, exitCode: 0 };
       }
@@ -209960,7 +210093,7 @@ var require_mcp_repo_config = __commonJS({
       if (!exists(fp)) return false;
       try {
         const doc = JSON.parse(readFile(fp));
-        return planMcpMerge(doc, host.entry).action === "skip";
+        return planMcpMerge(doc, host.entry, host.rootKey).action === "skip";
       } catch {
         return false;
       }
@@ -209969,6 +210102,7 @@ var require_mcp_repo_config = __commonJS({
       MCP_URL,
       SERVER_NAME,
       MCP_HOSTS,
+      MCP_HOST_IDS,
       planMcpMerge,
       serializeMcp,
       writeHostMcpConfig,
@@ -210084,6 +210218,7 @@ var require_init_agents = __commonJS({
     var { installClaudeHook, installCursorHook } = require_hook();
     var {
       MCP_HOSTS,
+      MCP_HOST_IDS,
       writeHostMcpConfig,
       mcpConfigPresent
     } = require_mcp_repo_config();
@@ -210095,15 +210230,15 @@ var require_init_agents = __commonJS({
       workflowPresent
     } = require_contract_gate_workflow();
     if (process.env.NO_COLOR) chalk.level = 0;
-    var USAGE = `Usage: coderifts init --agents [--hosts=claude,cursor,all] [--no-hook] [--no-workflow] [--dry-run] [--check] [--out <dir>]
+    var USAGE = `Usage: coderifts init --agents [--hosts=claude,cursor,copilot,all] [--no-hook] [--no-workflow] [--dry-run] [--check] [--out <dir>]
 
   Wire this repository for governed agent work in ONE command:
-    1. repo-level MCP config (per host: .mcp.json / .cursor/mcp.json)
+    1. repo-level MCP config (per host: .mcp.json / .cursor/mcp.json / .vscode/mcp.json)
     2. generated agent rule files (reuses agent-setup)
-    3. host hook (Claude Code today; Cursor when hook install --cursor is present)
+    3. host hook (Claude Code / VS Code Copilot via .claude/settings.json; Cursor via .cursor/hooks.json)
     4. .github/workflows/coderifts.yml (coderifts/contract-gate@v0)
 
-  --hosts <list>   claude, cursor, or all (default: all)
+  --hosts <list>   claude, cursor, copilot, or all (default: all)
   --no-hook        Skip host hook install
   --no-workflow    Skip writing the CI workflow
   --dry-run        Print the plan without writing
@@ -210114,7 +210249,8 @@ var require_init_agents = __commonJS({
     var SHARED_RULE = "AGENTS.md";
     var HOST_RULES = Object.freeze({
       claude: Object.freeze(["CLAUDE.md"]),
-      cursor: Object.freeze([".cursor/rules/coderifts.mdc"])
+      cursor: Object.freeze([".cursor/rules/coderifts.mdc"]),
+      copilot: Object.freeze([".github/copilot-instructions.md"])
     });
     var EXTRA_RULES_ON_ALL = Object.freeze([
       ".github/copilot-instructions.md",
@@ -210134,27 +210270,28 @@ var require_init_agents = __commonJS({
       "    \xB7 write Gemini MCP config (Gemini uses httpUrl at extension level, not a repo file)"
     ]);
     function parseHosts(raw) {
+      const allHosts = [...MCP_HOST_IDS];
       if (raw == null || raw === true || String(raw).trim() === "") {
-        return { hosts: ["claude", "cursor"], allRules: true };
+        return { hosts: allHosts, allRules: true };
       }
       const parts = String(raw).split(",").map((s) => s.trim().toLowerCase()).filter(Boolean);
       if (parts.length === 0) {
-        return { hosts: ["claude", "cursor"], allRules: true, error: `init --agents: --hosts requires a value
+        return { hosts: allHosts, allRules: true, error: `init --agents: --hosts requires a value
 ${USAGE}` };
       }
-      const allowed = /* @__PURE__ */ new Set(["claude", "cursor", "all"]);
+      const allowed = /* @__PURE__ */ new Set([...MCP_HOST_IDS, "all"]);
       for (const p of parts) {
         if (!allowed.has(p)) {
           return {
             hosts: [],
             allRules: false,
-            error: `init --agents: unknown host "${p}" (use claude, cursor, all)
+            error: `init --agents: unknown host "${p}" (use claude, cursor, copilot, all)
 ${USAGE}`
           };
         }
       }
       if (parts.includes("all")) {
-        return { hosts: ["claude", "cursor"], allRules: true };
+        return { hosts: allHosts, allRules: true };
       }
       const hosts = [];
       for (const p of parts) {
@@ -210186,7 +210323,25 @@ ${USAGE}`
       return hostId === "cursor" ? ".cursor/hooks.json" : ".claude/settings.json";
     }
     function hookNoteForHost(hostId) {
-      return hostId === "cursor" ? "preToolUse \u2192 coderifts cursor-hook" : "PreToolUse \u2192 coderifts claude-hook";
+      if (hostId === "cursor") return "preToolUse \u2192 coderifts cursor-hook";
+      if (hostId === "copilot") {
+        return "PreToolUse \u2192 coderifts claude-hook (VS Code reads .claude/settings.json by default)";
+      }
+      return "PreToolUse \u2192 coderifts claude-hook";
+    }
+    function hookInstallerForHost(hostId) {
+      return hostId === "cursor" ? installCursorHook : installClaudeHook;
+    }
+    function uniqueHookHosts(hosts) {
+      const seen = /* @__PURE__ */ new Set();
+      const out = [];
+      for (const h of hosts) {
+        const rel = hookRelForHost(h);
+        if (seen.has(rel)) continue;
+        seen.add(rel);
+        out.push(h);
+      }
+      return out;
     }
     function wantHook(options) {
       if (options.noHook === true) return false;
@@ -210233,9 +210388,9 @@ ${USAGE}`
       const hooksMissing = [];
       const hooksWanted = wantHook(options);
       if (hooksWanted) {
-        for (const h of hosts) {
+        for (const h of uniqueHookHosts(hosts)) {
           const rel = hookRelForHost(h);
-          const installer = h === "cursor" ? installCursorHook : installClaudeHook;
+          const installer = hookInstallerForHost(h);
           const r = installer({ cwd: outDir, silent: true, dryRun: true });
           if (r && r.code === "NOOP") hooksPresent.push(rel);
           else hooksMissing.push(rel);
@@ -210366,7 +210521,7 @@ ${USAGE}`
         items.push({ section: "rules", action: "skip", relPath: rel, note: "exists; installer does not overwrite" });
       }
       if (!wantHook(options)) {
-        for (const h of hosts) {
+        for (const h of uniqueHookHosts(hosts)) {
           items.push({
             section: "hooks",
             action: "skip",
@@ -210375,8 +210530,8 @@ ${USAGE}`
           });
         }
       } else {
-        for (const h of hosts) {
-          const installer = h === "cursor" ? installCursorHook : installClaudeHook;
+        for (const h of uniqueHookHosts(hosts)) {
+          const installer = hookInstallerForHost(h);
           const r = installer({
             cwd: outDir,
             silent: true,
@@ -238767,7 +238922,7 @@ var require_outcome = __commonJS({
 var require_cursor_hook = __commonJS({
   "src/commands/cursor-hook.js"(exports2, module2) {
     "use strict";
-    var { runClaudeHook } = require_claude_hook();
+    var { runClaudeHook, pickToolField, filePathFromInput, contentFromInput, coerceToolInput } = require_claude_hook();
     var USAGE = `Usage: coderifts cursor-hook
 
 Cursor preToolUse adapter. Reads Cursor's hook JSON on stdin, emits
@@ -238794,15 +238949,15 @@ Unparseable stdin denies (fail-closed).
       if (!obj || typeof obj !== "object" || Array.isArray(obj)) {
         return { ok: false, reason: "stdin JSON is not an object" };
       }
-      const toolName = typeof obj.tool_name === "string" ? obj.tool_name : null;
-      if (!toolName) return { ok: false, reason: "missing tool_name" };
-      const toolInput = obj.tool_input && typeof obj.tool_input === "object" && !Array.isArray(obj.tool_input) ? obj.tool_input : null;
+      const toolName = pickToolField(obj, "tool_name", "toolName", "name");
+      if (typeof toolName !== "string" || !toolName) return { ok: false, reason: "missing tool_name" };
+      const toolInput = coerceToolInput(pickToolField(obj, "tool_input", "toolInput", "input")) || (filePathFromInput(obj) ? obj : null);
       if (!toolInput) return { ok: false, reason: "missing tool_input" };
       return { ok: true, payload: obj, toolName, toolInput };
     }
     function toClaudeShape(toolName, toolInput) {
-      const filePath = toolInput.file_path || toolInput.path || toolInput.target_file || null;
-      const content = toolInput.content !== void 0 ? toolInput.content : toolInput.contents !== void 0 ? toolInput.contents : void 0;
+      const filePath = filePathFromInput(toolInput) || null;
+      const content = contentFromInput(toolInput);
       const out = { ...toolInput };
       if (filePath) out.file_path = filePath;
       if (content !== void 0) out.content = content;
@@ -240564,7 +240719,7 @@ program.command("registry-gate [dir]").description("Admit a directory of OpenAPI
   process.exitCode = code;
   process.exit(code);
 });
-program.command("init [template]").description("Generate a .coderifts.yml from a policy template, or wire governed agent work (--agents)").option("--agents", "Wire this repo for governed agent work (MCP config, rule files, host hook, CI gate)").option("--hosts <list>", "With --agents: claude, cursor, or all (default: all)", "all").option("--no-hook", "With --agents: skip host hook install").option("--no-workflow", "With --agents: skip writing .github/workflows/coderifts.yml").option("--dry-run", "With --agents: print the plan without writing").option("--check", "With --agents: report which of the four pieces are present (no write)").option("--out <dir>", "With --agents: target directory (default: cwd)").action(async (template, options) => {
+program.command("init [template]").description("Generate a .coderifts.yml from a policy template, or wire governed agent work (--agents)").option("--agents", "Wire this repo for governed agent work (MCP config, rule files, host hook, CI gate)").option("--hosts <list>", "With --agents: claude, cursor, copilot, or all (default: all)", "all").option("--no-hook", "With --agents: skip host hook install").option("--no-workflow", "With --agents: skip writing .github/workflows/coderifts.yml").option("--dry-run", "With --agents: print the plan without writing").option("--check", "With --agents: report which of the four pieces are present (no write)").option("--out <dir>", "With --agents: target directory (default: cwd)").action(async (template, options) => {
   const {
     runInitAgents,
     agentFlagsRequireAgents,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coderifts",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "description": "Detect breaking API changes from the command line. Works locally or with the CodeRifts cloud API.",
   "author": "CodeRifts <hello@coderifts.com>",
   "license": "MIT",