plumbbob 0.9.3 → 0.10.0

package/node_modules/checkride/dist/agent-setup/hook.d.ts

@@ -1,63 +1,56 @@
 /**
- * Claude Code Stop hook — the mechanical half of the agent contract.
+ * Agent hooks — the mechanical half of the agent contract.
  *
- * `init` and `checkride agent-setup` write an idempotent Stop hook into
- * `.claude/settings.json`. It runs the project's `check` script as a hard gate:
- * exit 2 blocks the agent from finishing while the pipeline is red, so "exit 0 =
- * done" becomes enforcement, not just advice. The command uses the *detected*
- * package manager's run form (`pnpm run check`, `npm run check`, `yarn run
- * check`, `bun run check`) so the hook works in any repo, not only pnpm ones
- * (b7). Merging is surgical: unrelated hooks, other Stop groups, and every other
- * settings key are preserved, and re-applying with the same PM is a no-op.
+ * `init` and `checkride agent-setup` write a small registry of hooks into every
+ * selected harness's config. The load-bearing one is the gate: it runs the
+ * project's `check` script when the turn ends and refuses to let the agent
+ * finish while the pipeline is red, so "exit 0 = done" becomes enforcement, not
+ * just advice.
  *
- * This module owns only the hook; the AGENTS.md stanza and the higher-level
- * `agent-setup` command live in `init.ts`, which imports the writer here — a
- * single direction, so there is no cycle.
- */
-import { type PackageManager } from '../pm/index.js';
-/** Project-shared Claude Code settings (committed), relative to the repo root. */
-export declare const CLAUDE_SETTINGS_FILE = ".claude/settings.json";
-/** A single Claude Code command hook (fields optional — settings.json is untrusted). */
-type CommandHook = {
-    type?: string;
-    command?: string;
-};
-/** A Stop-hook group. Only `hooks` is meaningful for Stop; other keys pass through. */
-type StopGroup = {
-    hooks?: CommandHook[];
-} & Record<string, unknown>;
-/** The subset of `.claude/settings.json` we touch; every other key is preserved. */
-type ClaudeSettings = {
-    hooks?: {
-        Stop?: StopGroup[];
-    } & Record<string, unknown>;
-} & Record<string, unknown>;
-/**
- * The Stop-hook command for `pm`: run the gate, and on red print guidance and
- * exit 2 (the blocking code — a plain exit 1 lets the agent stop anyway).
+ * This module is the harness-neutral half — which hooks exist, which harnesses a
+ * repo wants, and the fan-out. Everything harness-shaped lives in a sibling:
+ * `./claude.ts` and `./cursor.ts` own their config schemas, `./scripts.ts` owns
+ * the generated scripts, and `../gate.ts` owns the verdict those scripts hand
+ * back. Adding a third harness means one more sibling and one more entry in
+ * `HARNESS_NAMES`, not a change here.
+ *
+ * The AGENTS.md stanza and the higher-level `agent-setup` command live in
+ * `init.ts`, which imports the writers here — a single direction, so there is no
+ * cycle.
  */
-export declare function stopHookCommand(pm: PackageManager): string;
+import { type HarnessName } from '../gate.js';
+import type { PackageManager } from '../pm/index.js';
+import type { HookFile } from './files.js';
+import { HOOK_NAMES, type HookName } from './harness.js';
+export { HOOK_NAMES, type HookName };
 /**
- * Merge checkride's Stop hook into parsed settings, idempotently. An existing
- * checkride hook (found by its sentinel) has its command refreshed in place;
- * otherwise a new Stop group is appended. Sibling hooks in the same group, other
- * Stop groups, and every unrelated settings key are left untouched, so applying
- * twice with the same command yields deep-equal settings.
+ * Which harnesses to wire up when `--harness` was not given.
+ *
+ * Claude Code is always included: it is the harness checkride was built against,
+ * and writing its hooks into a repo that never opens Claude costs two ignored
+ * files. Cursor is included only on evidence (`.cursor/` exists), because the
+ * inverse — seeding `.cursor/` into every repo checkride touches — would put
+ * config in front of people who never asked for it.
  */
-export declare function applyStopHook(settings: ClaudeSettings, command: string): ClaudeSettings;
-export type StopHookResult = {
-    path: string;
-    changed: boolean;
-};
+export declare function detectHarnesses(cwd: string): HarnessName[];
 /**
- * Write or refresh the Stop hook in `cwd/.claude/settings.json` for the detected
- * (or provided) package manager, preserving any other settings. Returns whether
- * the file changed: a second run with the same PM leaves it byte-identical, so
- * `changed` is `false`. `dryRun` computes the result without writing.
+ * Write or refresh the selected hooks (default: all) for the selected harnesses
+ * (default: detected) in `cwd`, and tear out any named in `remove`. Every write
+ * is idempotent — a second run reports `changed: false` per file — and `dryRun`
+ * computes the result without writing.
+ *
+ * Removal is how a hook goes away *after the fact*: unselecting one with
+ * `hooks` only declines to refresh it, which leaves an already-installed gate
+ * firing. The two compose — `{ hooks: [], remove: ['gate'] }` removes the gate
+ * and leaves everything else exactly as it stands.
  */
-export declare function writeStopHook(cwd: string, opts?: {
+export declare function writeHooks(cwd: string, opts?: {
     pm?: PackageManager;
     dryRun?: boolean;
-}): Promise<StopHookResult>;
-export {};
+    hooks?: readonly HookName[];
+    remove?: readonly HookName[];
+    harnesses?: readonly HarnessName[];
+}): Promise<{
+    files: HookFile[];
+}>;
 //# sourceMappingURL=hook.d.ts.map

package/node_modules/checkride/dist/agent-setup/hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/agent-setup/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE3E,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAS5D,wFAAwF;AACxF,KAAK,WAAW,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACvD,uFAAuF;AACvF,KAAK,SAAS,GAAG;IAAE,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrE,oFAAoF;AACpF,KAAK,cAAc,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAO7G;;;GAGG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,GAAG,MAAM,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAcvF;AAwBD,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhE;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACnD,OAAO,CAAC,cAAc,CAAC,CAazB"}
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/agent-setup/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAqB,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,CAAC;AAcrC;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAE1D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IACJ,EAAE,CAAC,EAAE,cAAc,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CAC/B,GACL,OAAO,CAAC;IAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;CAAE,CAAC,CAahC"}

package/node_modules/checkride/dist/agent-setup/hook.js

@@ -1,106 +1,75 @@
 /**
- * Claude Code Stop hook — the mechanical half of the agent contract.
+ * Agent hooks — the mechanical half of the agent contract.
  *
- * `init` and `checkride agent-setup` write an idempotent Stop hook into
- * `.claude/settings.json`. It runs the project's `check` script as a hard gate:
- * exit 2 blocks the agent from finishing while the pipeline is red, so "exit 0 =
- * done" becomes enforcement, not just advice. The command uses the *detected*
- * package manager's run form (`pnpm run check`, `npm run check`, `yarn run
- * check`, `bun run check`) so the hook works in any repo, not only pnpm ones
- * (b7). Merging is surgical: unrelated hooks, other Stop groups, and every other
- * settings key are preserved, and re-applying with the same PM is a no-op.
+ * `init` and `checkride agent-setup` write a small registry of hooks into every
+ * selected harness's config. The load-bearing one is the gate: it runs the
+ * project's `check` script when the turn ends and refuses to let the agent
+ * finish while the pipeline is red, so "exit 0 = done" becomes enforcement, not
+ * just advice.
  *
- * This module owns only the hook; the AGENTS.md stanza and the higher-level
- * `agent-setup` command live in `init.ts`, which imports the writer here — a
- * single direction, so there is no cycle.
- */
-import { mkdir, readFile, writeFile } from 'node:fs/promises';
-import { dirname, join } from 'node:path';
-import { detectPackageManager } from '../pm/index.js';
-/** Project-shared Claude Code settings (committed), relative to the repo root. */
-export const CLAUDE_SETTINGS_FILE = '.claude/settings.json';
-/**
- * Stable, package-manager-independent marker identifying checkride's Stop hook
- * inside a settings file. The run prefix varies by PM, so identity keys on the
- * guidance message, which does not.
- */
-const HOOK_SENTINEL = 'checkride: the gate is red';
-/** True when a hook entry is checkride's (matched by the PM-independent sentinel). */
-function isCheckrideHook(hook) {
-    return hook.type === 'command' && typeof hook.command === 'string' && hook.command.includes(HOOK_SENTINEL);
-}
-/**
- * The Stop-hook command for `pm`: run the gate, and on red print guidance and
- * exit 2 (the blocking code — a plain exit 1 lets the agent stop anyway).
- */
-export function stopHookCommand(pm) {
-    const run = `${pm} run check`;
-    const guidance = `${HOOK_SENTINEL} — read .check/summary.json, fix the failing slot, then finish (do not stop while checkride is red).`;
-    return `${run} || { echo '${guidance}' >&2; exit 2; }`;
-}
-/**
- * Merge checkride's Stop hook into parsed settings, idempotently. An existing
- * checkride hook (found by its sentinel) has its command refreshed in place;
- * otherwise a new Stop group is appended. Sibling hooks in the same group, other
- * Stop groups, and every unrelated settings key are left untouched, so applying
- * twice with the same command yields deep-equal settings.
+ * This module is the harness-neutral half — which hooks exist, which harnesses a
+ * repo wants, and the fan-out. Everything harness-shaped lives in a sibling:
+ * `./claude.ts` and `./cursor.ts` own their config schemas, `./scripts.ts` owns
+ * the generated scripts, and `../gate.ts` owns the verdict those scripts hand
+ * back. Adding a third harness means one more sibling and one more entry in
+ * `HARNESS_NAMES`, not a change here.
+ *
+ * The AGENTS.md stanza and the higher-level `agent-setup` command live in
+ * `init.ts`, which imports the writers here — a single direction, so there is no
+ * cycle.
  */
-export function applyStopHook(settings, command) {
-    const hooks = { ...settings.hooks };
-    const stop = Array.isArray(hooks.Stop) ? hooks.Stop.map((g) => ({ ...g })) : [];
-    const idx = stop.findIndex((g) => (g.hooks ?? []).some(isCheckrideHook));
-    const existing = idx >= 0 ? stop[idx] : undefined;
-    if (existing) {
-        stop[idx] = {
-            ...existing,
-            hooks: (existing.hooks ?? []).map((h) => (isCheckrideHook(h) ? { ...h, command } : h)),
-        };
-    }
-    else {
-        stop.push({ hooks: [{ type: 'command', command }] });
-    }
-    return { ...settings, hooks: { ...hooks, Stop: stop } };
-}
-async function readIfExists(path) {
-    try {
-        return await readFile(path, 'utf8');
-    }
-    catch {
-        return null;
-    }
-}
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { HARNESS_NAMES } from '../gate.js';
+import { writeClaudeHooks } from './claude.js';
+import { writeCursorHooks } from './cursor.js';
+import { HOOK_NAMES } from './harness.js';
+export { HOOK_NAMES };
+/** The per-harness writers, keyed so the fan-out is a lookup, not a switch. */
+const WRITERS = {
+    claude: writeClaudeHooks,
+    cursor: writeCursorHooks,
+};
+/** The directory whose presence means a repo is already using that harness. */
+const HARNESS_MARKER = {
+    claude: '.claude',
+    cursor: '.cursor',
+};
 /**
- * Parse an existing settings file, naming the file on malformed JSON so a
- * consumer sees `invalid .claude/settings.json: <reason>` instead of a bare
- * `SyntaxError` stack (mirrors `invalidConfig` in `config.ts`).
+ * Which harnesses to wire up when `--harness` was not given.
+ *
+ * Claude Code is always included: it is the harness checkride was built against,
+ * and writing its hooks into a repo that never opens Claude costs two ignored
+ * files. Cursor is included only on evidence (`.cursor/` exists), because the
+ * inverse — seeding `.cursor/` into every repo checkride touches — would put
+ * config in front of people who never asked for it.
  */
-function parseSettings(raw) {
-    try {
-        return JSON.parse(raw);
-    }
-    catch (err) {
-        const reason = err instanceof Error ? err.message : String(err);
-        throw new Error(`invalid ${CLAUDE_SETTINGS_FILE}: ${reason}`, { cause: err });
-    }
+export function detectHarnesses(cwd) {
+    return HARNESS_NAMES.filter((h) => h === 'claude' || existsSync(join(cwd, HARNESS_MARKER[h])));
 }
 /**
- * Write or refresh the Stop hook in `cwd/.claude/settings.json` for the detected
- * (or provided) package manager, preserving any other settings. Returns whether
- * the file changed: a second run with the same PM leaves it byte-identical, so
- * `changed` is `false`. `dryRun` computes the result without writing.
+ * Write or refresh the selected hooks (default: all) for the selected harnesses
+ * (default: detected) in `cwd`, and tear out any named in `remove`. Every write
+ * is idempotent — a second run reports `changed: false` per file — and `dryRun`
+ * computes the result without writing.
+ *
+ * Removal is how a hook goes away *after the fact*: unselecting one with
+ * `hooks` only declines to refresh it, which leaves an already-installed gate
+ * firing. The two compose — `{ hooks: [], remove: ['gate'] }` removes the gate
+ * and leaves everything else exactly as it stands.
  */
-export async function writeStopHook(cwd, opts = {}) {
-    const path = join(cwd, CLAUDE_SETTINGS_FILE);
-    const pm = opts.pm ?? detectPackageManager({ cwd });
-    const raw = await readIfExists(path);
-    const settings = raw ? parseSettings(raw) : {};
-    const next = applyStopHook(settings, stopHookCommand(pm));
-    const nextRaw = `${JSON.stringify(next, null, 2)}\n`;
-    const changed = raw !== nextRaw;
-    if (changed && !opts.dryRun) {
-        await mkdir(dirname(path), { recursive: true });
-        await writeFile(path, nextRaw);
-    }
-    return { path: CLAUDE_SETTINGS_FILE, changed };
+export async function writeHooks(cwd, opts = {}) {
+    const hooks = opts.hooks ?? HOOK_NAMES;
+    const harnesses = opts.harnesses ?? detectHarnesses(cwd);
+    const write = {
+        ...(opts.pm ? { pm: opts.pm } : {}),
+        ...(opts.remove ? { remove: opts.remove } : {}),
+        dryRun: opts.dryRun ?? false,
+        hooks,
+    };
+    // Concurrent: no two harnesses share a path, and `Promise.all` keeps the
+    // reported order tied to the selection rather than to who finished first.
+    const perHarness = await Promise.all(harnesses.map((h) => WRITERS[h](cwd, write)));
+    return { files: perHarness.flat() };
 }
 //# sourceMappingURL=hook.js.map

package/node_modules/checkride/dist/agent-setup/hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/agent-setup/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAuB,MAAM,gBAAgB,CAAC;AAE3E,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,aAAa,GAAG,4BAA4B,CAAC;AASnD,sFAAsF;AACtF,SAAS,eAAe,CAAC,IAAiB;IACxC,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC7G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAkB;IAChD,MAAM,GAAG,GAAG,GAAG,EAAE,YAAY,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,aAAa,sGAAsG,CAAC;IACxI,OAAO,GAAG,GAAG,eAAe,QAAQ,kBAAkB,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,OAAe;IACrE,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;IACpC,MAAM,IAAI,GAAgB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,GAAG;YACV,GAAG,QAAQ;YACX,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,WAAW,oBAAoB,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAID;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,OAAkD,EAAE;IAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAmB,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC;IAChC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC"}
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/agent-setup/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAoB,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAoC,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAiB,CAAC;AAErC,+EAA+E;AAC/E,MAAM,OAAO,GAAkF;IAC7F,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;CACzB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,cAAc,GAAgC;IAClD,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,OAMI,EAAE;IAEN,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,KAAK,GAAiB;QAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,KAAK;KACN,CAAC;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACnF,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;AACtC,CAAC"}

package/node_modules/checkride/dist/agent-setup/index.d.ts

@@ -1,7 +1,13 @@
 /**
- * Agent-setup module — the Claude Code Stop hook (step 12). This barrel is the
- * module's only public surface (C2): siblings import from `../agent-setup`,
- * never from `./hook.js` directly.
+ * Agent-setup module — the hooks every supported harness gets (the stop gate and
+ * kin). This barrel is the module's only public surface: siblings import from
+ * `../agent-setup`, never from `./hook.js` or a per-harness writer directly.
  */
-export { applyStopHook, CLAUDE_SETTINGS_FILE, stopHookCommand, writeStopHook } from './hook.js';
+export { applyHooks, CLAUDE_SETTINGS_FILE, GATE_SCRIPT_FILE, PROTECT_SCRIPT_FILE, removeHooks, } from './claude.js';
+export { type HooksOptions, runHooks } from './command.js';
+export { applyCursorHooks, CURSOR_HOOKS_FILE, removeCursorHooks } from './cursor.js';
+export type { HookFile } from './files.js';
+export { detectHarnesses, HOOK_NAMES, type HookName, writeHooks } from './hook.js';
+export { dirtyScript, gateScript, protectScript } from './scripts.js';
+export { CURSOR_SKILLS_DIR, renameSkill, writeCursorSkills } from './skills.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/checkride/dist/agent-setup/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-setup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-setup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,KAAK,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/node_modules/checkride/dist/agent-setup/index.js

@@ -1,7 +1,12 @@
 /**
- * Agent-setup module — the Claude Code Stop hook (step 12). This barrel is the
- * module's only public surface (C2): siblings import from `../agent-setup`,
- * never from `./hook.js` directly.
+ * Agent-setup module — the hooks every supported harness gets (the stop gate and
+ * kin). This barrel is the module's only public surface: siblings import from
+ * `../agent-setup`, never from `./hook.js` or a per-harness writer directly.
  */
-export { applyStopHook, CLAUDE_SETTINGS_FILE, stopHookCommand, writeStopHook } from './hook.js';
+export { applyHooks, CLAUDE_SETTINGS_FILE, GATE_SCRIPT_FILE, PROTECT_SCRIPT_FILE, removeHooks, } from './claude.js';
+export { runHooks } from './command.js';
+export { applyCursorHooks, CURSOR_HOOKS_FILE, removeCursorHooks } from './cursor.js';
+export { detectHarnesses, HOOK_NAMES, writeHooks } from './hook.js';
+export { dirtyScript, gateScript, protectScript } from './scripts.js';
+export { CURSOR_SKILLS_DIR, renameSkill, writeCursorSkills } from './skills.js';
 //# sourceMappingURL=index.js.map

package/node_modules/checkride/dist/agent-setup/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent-setup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent-setup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAqB,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIrF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAiB,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/node_modules/checkride/dist/agent-setup/scripts.d.ts

@@ -0,0 +1,81 @@
+/**
+ * The hook scripts checkride generates into a consumer repo.
+ *
+ * checkride owns these files and overwrites them on every `agent-setup`/`init`,
+ * so consumer customization belongs beside them, never in them. That is also why
+ * the settings entry each harness gets is a stable one-liner invoking a script
+ * rather than the behavior inline: a refresh rewrites the script freely without
+ * ever clobbering an entry a human may have edited.
+ *
+ * **Every script here is one a harness's configuration could not express.** A
+ * generated file in someone's repo is a standing cost — reviewed, kept in sync,
+ * wondered about — so it is written only where config falls short. Claude Code
+ * takes just the gate: its `protect` is a `permissions.deny` rule and its
+ * `dirty` an inline command. Cursor, whose config is hooks and nothing else,
+ * still takes all three. The gate is the one both need, because it alone has a
+ * branch neither config can carry (see {@link gateTail}).
+ */
+import { type HarnessName } from '../gate.js';
+import { type PackageManager } from '../pm/index.js';
+/**
+ * The gate script: `cd` to the repo, hand off to `checkride gate`, and translate
+ * the result into the harness's protocol.
+ *
+ * `dirtyGuard` (on when the `dirty` hook is written alongside — the default)
+ * makes the gate conditional on the edit marker, so pure-conversation turns
+ * don't pay for a full pipeline run. Without the marker hook the guard would
+ * disarm the gate entirely, so a `--hook gate` selection writes it unguarded.
+ *
+ * `preflight` is the repo's own script, from `gate.preflight` in
+ * checkride.config.json, baked in here rather than looked up at run time — see
+ * {@link preflight} and `../gate.ts` `gatePreflight`. It runs *before* the edit
+ * marker is consulted, because a repo that cannot run the gate at all wants to
+ * say so on every turn, not only on the ones that edited a file.
+ */
+export declare function gateScript(pm: PackageManager, opts: {
+    harness: HarnessName;
+    dirtyGuard?: boolean;
+    preflight?: string;
+}): string;
+/**
+ * The dirty script: mark that this turn edited a file. A stop hook fires on
+ * every turn, including pure-conversation ones; the marker is what lets the gate
+ * skip those instead of taxing every reply with a full pipeline run.
+ *
+ * It exits 0 unconditionally. A failure to record an edit must never block the
+ * edit itself — the cost of a missed marker is one skipped gate, and the cost of
+ * a hard failure here is a repo where no file can be written.
+ */
+export declare function dirtyScript(): string;
+/**
+ * The `protect` deny script: "never add to the baseline to make a check pass" as
+ * enforcement, not README advice. A Node script (not sh) because the hook
+ * protocol is JSON on stdin, and every checkride repo has node by construction;
+ * `.cjs` so it runs regardless of the repo's module type. Only edit tools are
+ * matched — reads are never denied, because triage depends on reading `.check/`
+ * artifacts.
+ *
+ * Two Cursor events land here. `preToolUse` carries a file-tool call, whose
+ * target is read from {@link PATH_KEYS}. `beforeShellExecution` carries a
+ * command line, which is scanned for a write *to* an accounting path — the gap
+ * a tool-name matcher cannot close, since `echo … > checkride.baseline.json` is
+ * a shell call and not a `Write`.
+ *
+ * The command scan is deliberately timid, because a guard that fires on a wrong
+ * parse is worse than a known hole. It denies only on demonstrated write intent
+ * — a `>`/`>>` redirect target, or a positional argument of a known mutating
+ * verb — and anything it cannot read that way is allowed. `cat`, `grep`, `jq`
+ * and `cp … /tmp/x` over `.check/` all pass, which they must: triage reads those
+ * artifacts. The hook's own `matcher` narrows the input further, so a command
+ * that never names an accounting path is not parsed at all.
+ *
+ * **Cursor only.** Claude Code enforces the same paths through
+ * `permissions.deny`, which is checked below the hook layer and costs nothing
+ * per tool call, so it needs no script. Cursor has no documented equivalent —
+ * its config is hooks — so the script survives for the harness that still
+ * requires one. If Cursor grows a file-path deny list, this file goes away.
+ * (Claude Code's deny rules have the same shell-redirect hole and no script to
+ * close it with; that half of the gap is still open. See docs/cursor.md.)
+ */
+export declare function protectScript(): string;
+//# sourceMappingURL=scripts.d.ts.map

package/node_modules/checkride/dist/agent-setup/scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scripts.d.ts","sourceRoot":"","sources":["../../src/agent-setup/scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAe,KAAK,cAAc,EAAa,MAAM,gBAAgB,CAAC;AA4T7E;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CACxB,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,MAAM,CAuBR;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAepC;AA6DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,aAAa,IAAI,MAAM,CA+ItC"}