yenop 0.0.0 → 0.1.0

package/dist/adapters/codex/hook.js

@@ -0,0 +1,134 @@
+/**
+ * Codex CLI hooks adapter (`yenop hook codex`).
+ *
+ * Codex's hooks are modelled on Claude Code's (learn.chatgpt.com/docs/hooks): hooks.json in ~/.codex or
+ * <repo>/.codex, a snake_case JSON event on stdin, a camelCase answer on stdout. PreToolUse fires for Bash,
+ * for file edits made through `apply_patch`, for MCP tools (`mcp__server__tool`) and other local tools.
+ *
+ * Three facts about Codex shape the security decisions here:
+ *  - Codex has no "ask". A hook answering `permissionDecision: "ask"` is recorded as a FAILED hook and the call
+ *    proceeds. So every ask becomes a deny with a message; "ask" is never emitted.
+ *  - A deny is honoured two ways: exit code 2 with the reason on stderr (the documented block path), or the
+ *    JSON deny on stdout. We do both, so whichever Codex reads, it blocks.
+ *  - A hook that crashes, times out, or prints invalid JSON FAILS OPEN in Codex, and there is no failClosed
+ *    option. That is Codex's design; Yenop cannot change it. What Yenop can do is be reliable (daemon fast
+ *    path, in-process fallback), print nothing at all on allow (silence is unambiguous), and say so in docs.
+ *
+ * apply_patch touches several files in one call. The patch text names them (`*** Update File: path` and
+ * friends); every path is judged and the strictest verdict wins, through args.paths.
+ */
+import { classifyTool } from "../../core/tools.js";
+import { safeUser } from "../hooks/pipeline.js";
+const PATCH_TOOL = /^(apply_patch|edit|write)$/i;
+const PATCH_LINE = /^\*\*\* (?:Add|Update|Delete) File: (.+)$/gm;
+const PATCH_MOVE = /^\*\*\* Move to: (.+)$/gm;
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+function obj(v) {
+    return v && typeof v === "object" && !Array.isArray(v) ? v : {};
+}
+/** The files a patch touches, from its headers. Exported so a recorded apply_patch event can be checked against it. */
+export function pathsInPatch(patch) {
+    const out = new Set();
+    for (const m of patch.matchAll(PATCH_LINE))
+        out.add(m[1].trim());
+    for (const m of patch.matchAll(PATCH_MOVE))
+        out.add(m[1].trim());
+    return [...out];
+}
+function request(e, tool, args) {
+    const req = {
+        runId: `codex:${str(e.session_id) ?? "unknown"}`,
+        principal: { runtime: "codex", agent: "main", user: safeUser() },
+        tool,
+        args,
+    };
+    const cwd = str(e.cwd);
+    if (cwd !== undefined)
+        req.cwd = cwd;
+    const pm = str(e.permission_mode);
+    if (pm !== undefined)
+        req.permissionMode = pm;
+    const id = str(e.tool_use_id);
+    if (id !== undefined)
+        req.callId = id;
+    return req;
+}
+export function parseCodex(raw) {
+    const e = JSON.parse(raw); // throws → deny
+    const event = str(e.hook_event_name);
+    if (!event)
+        throw new Error("codex hook event without hook_event_name");
+    const runId = `codex:${str(e.session_id) ?? "unknown"}`;
+    switch (event) {
+        case "PreToolUse": {
+            const name = str(e.tool_name);
+            if (name === undefined)
+                throw new Error("PreToolUse without tool_name");
+            const input = e.tool_input;
+            if (PATCH_TOOL.test(name)) {
+                // apply_patch: Codex (recorded 2026-09-20, v0.155) sends the patch text as tool_input.command; older or
+                // other shapes use a bare string, or `patch` / `input`. The files the patch names are the targets.
+                const o = obj(input);
+                const patch = typeof input === "string" ? input : (str(o["command"]) ?? str(o["patch"]) ?? str(o["input"]) ?? "");
+                const paths = patch ? pathsInPatch(patch) : [];
+                const single = str(o["file_path"]) ?? str(o["path"]);
+                const all = single ? [single, ...paths] : paths;
+                // A file edit whose targets cannot be determined must not slip past the path rules. Refuse it, loudly,
+                // rather than judge an edit of unknown files as harmless: that is exactly how the hook file got edited.
+                if (all.length === 0)
+                    throw new Error(`apply_patch with no recognizable target files (input keys: ${Object.keys(o).join(",") || typeof input})`);
+                const tool = { name, kind: "write", readOnly: false };
+                const args = { ...o, patch: patch.slice(0, 2000), file_path: all[0], paths: all };
+                return { kind: "decision", event, askCapable: false, request: request(e, tool, args) };
+            }
+            return { kind: "decision", event, askCapable: false, request: request(e, classifyTool(name), obj(input)) };
+        }
+        case "PostToolUse": {
+            const callId = str(e.tool_use_id);
+            const tool = str(e.tool_name);
+            if (!callId || !tool)
+                return { kind: "ignore" };
+            const cwd = str(e.cwd);
+            return cwd !== undefined ? { kind: "outcome", runId, callId, tool, outcome: "ran", cwd } : { kind: "outcome", runId, callId, tool, outcome: "ran" };
+        }
+        case "SessionEnd": {
+            const cwd = str(e.cwd);
+            return cwd !== undefined ? { kind: "session-end", runId, cwd } : { kind: "session-end", runId };
+        }
+        default:
+            return { kind: "ignore" };
+    }
+}
+function denyBody(reason) {
+    return { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } };
+}
+export function codexBody(effect, message, mode) {
+    if (mode === "observe" || effect === "allow")
+        return null; // silence: Codex proceeds, and nothing can be misread
+    if (effect === "deny")
+        return denyBody(`Yenop: ${message}`);
+    // ask: Codex cannot ask a person, and "ask" would make it proceed. Tighten, never loosen.
+    return denyBody(`Yenop: ${message} Codex cannot ask a person for this step, so it is blocked: do it yourself, or allow it in policy.`);
+}
+function reasonOf(body) {
+    const h = body["hookSpecificOutput"];
+    return h?.permissionDecisionReason ?? "blocked by Yenop";
+}
+export const codexTranslator = {
+    runtime: "codex",
+    parse: parseCodex,
+    body: (effect, message, mode) => codexBody(effect, message, mode),
+    result(body) {
+        if (body === null || Object.keys(body).length === 0)
+            return { stdout: "", exitCode: 0 };
+        // exit 2 + stderr is the block path Codex documents; the JSON on stdout serves anything that reads it instead
+        return { stdout: JSON.stringify(body), stderr: reasonOf(body), exitCode: 2 };
+    },
+    failure(reason) {
+        const text = `Yenop failed and refuses by default: ${reason}. Run "yenop status".`;
+        return { stdout: JSON.stringify(denyBody(text)), stderr: text, exitCode: 2 };
+    },
+};
+//# sourceMappingURL=hook.js.map

package/dist/adapters/codex/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/adapters/codex/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EAAE,QAAQ,EAAwE,MAAM,sBAAsB,CAAC;AAatH,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,UAAU,GAAG,6CAA6C,CAAC;AACjE,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AACD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,CAAa,EAAE,IAAa,EAAE,IAA6B;IAC1E,MAAM,GAAG,GAAoB;QAC3B,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,SAAS,EAAE;QAChD,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAChE,IAAI;QACJ,IAAI;KACL,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACrC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAClC,IAAI,EAAE,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,EAAE,CAAC;IAC9C,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC9B,IAAI,EAAE,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC,gBAAgB;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,SAAS,EAAE,CAAC;IAExD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;YAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,wGAAwG;gBACxG,mGAAmG;gBACnG,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrB,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAChD,uGAAuG;gBACvG,wGAAwG;gBACxG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;gBACjJ,MAAM,IAAI,GAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAA4B,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;gBAC3G,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7G,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtJ,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAClG,CAAC;QACD;YACE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE,CAAC;AAC/H,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,OAAe,EAAE,IAAU;IACnE,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,sDAAsD;IACjH,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;IAC5D,0FAA0F;IAC1F,OAAO,QAAQ,CAAC,UAAU,OAAO,oGAAoG,CAAC,CAAC;AACzI,CAAC;AAED,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAsD,CAAC;IAC1F,OAAO,CAAC,EAAE,wBAAwB,IAAI,kBAAkB,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;IACjE,MAAM,CAAC,IAAI;QACT,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxF,8GAA8G;QAC9G,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,MAAM;QACZ,MAAM,IAAI,GAAG,wCAAwC,MAAM,uBAAuB,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;CACF,CAAC"}

package/dist/adapters/codex/install.d.ts

@@ -0,0 +1,18 @@
+export declare const CODEX_MARKER = "hook codex";
+export declare const CODEX_DECISION_EVENT = "PreToolUse";
+export declare const CODEX_REPORT_EVENTS: readonly ["PostToolUse", "SessionEnd"];
+export declare function codexHooksPath(scope: "project" | "user", projectDir?: string): string;
+export declare function codexDetected(projectDir: string): boolean;
+export declare function installCodexHooks(path: string, command: string): {
+    changed: boolean;
+    path: string;
+};
+/**
+ * Codex decides per hook whether it is trusted and enabled, and writes that into ~/.codex/config.toml as
+ * [hooks.state."<file>:<event>:<i>:<j>"] with trusted_hash and an optional `enabled = false`. A hook that is
+ * untrusted or disabled never runs, and a disabled PreToolUse means Yenop is not enforcing on Codex at all,
+ * silently. This reads that state so `yenop status` can say so. Found in the first live Codex session, where
+ * PreToolUse was left disabled while the two report hooks ran.
+ */
+export type CodexHookState = "active" | "disabled" | "untrusted" | "unknown";
+export declare function codexHookState(hooksPath: string, event: "PreToolUse" | "PostToolUse" | "SessionEnd", configPath?: string): CodexHookState;

package/dist/adapters/codex/install.js

@@ -0,0 +1,66 @@
+/**
+ * Install the Yenop hooks into a Codex hooks.json (project: <root>/.codex/hooks.json, user: ~/.codex/hooks.json).
+ * Same shape as Claude Code's settings: matcher groups, each with a list of command hooks. Idempotent: our
+ * entries are replaced, anyone else's are kept. Written atomically, since a half-written file would make Codex
+ * skip hooks entirely (it fails open).
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+export const CODEX_MARKER = "hook codex";
+export const CODEX_DECISION_EVENT = "PreToolUse";
+export const CODEX_REPORT_EVENTS = ["PostToolUse", "SessionEnd"];
+export function codexHooksPath(scope, projectDir) {
+    return scope === "user" ? join(homedir(), ".codex", "hooks.json") : join(projectDir ?? process.cwd(), ".codex", "hooks.json");
+}
+export function codexDetected(projectDir) {
+    return existsSync(join(homedir(), ".codex")) || existsSync(join(projectDir, ".codex"));
+}
+const isOurs = (h) => typeof h.command === "string" && h.command.trim().endsWith(CODEX_MARKER);
+function writeAtomic(path, text) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, text);
+    renameSync(tmp, path);
+}
+export function installCodexHooks(path, command) {
+    const file = existsSync(path) ? JSON.parse(readFileSync(path, "utf8")) : {};
+    const before = JSON.stringify(file);
+    file.hooks ??= {};
+    const put = (event, hook) => {
+        const groups = (file.hooks[event] ??= []);
+        const mine = groups.find((g) => g.hooks?.some(isOurs));
+        if (mine)
+            mine.hooks = [...mine.hooks.filter((h) => !isOurs(h)), hook];
+        else
+            groups.push({ hooks: [hook] }); // no matcher: every tool
+    };
+    put(CODEX_DECISION_EVENT, { type: "command", command, timeout: 15, statusMessage: "Yenop is checking this action" });
+    put("PostToolUse", { type: "command", command, timeout: 5, async: true });
+    // Codex runs SessionEnd synchronously and clamps its timeout to 3 s; writing anything else earns a warning on every start
+    put("SessionEnd", { type: "command", command, timeout: 3 });
+    const after = JSON.stringify(file);
+    if (after === before)
+        return { changed: false, path };
+    writeAtomic(path, JSON.stringify(file, null, 2) + "\n");
+    return { changed: true, path };
+}
+export function codexHookState(hooksPath, event, configPath = join(homedir(), ".codex", "config.toml")) {
+    if (!existsSync(configPath))
+        return "unknown";
+    const snake = event.replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
+    const key = `${hooksPath}:${snake}:`;
+    const text = readFileSync(configPath, "utf8");
+    // find the [hooks.state."<key>..."] table for this file+event and read its body
+    const re = new RegExp(`\\[hooks\\.state\\."${key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}[^"]*"\\]([^[]*)`);
+    const m = re.exec(text);
+    if (!m)
+        return "untrusted";
+    const body = m[1] ?? "";
+    if (/^\s*enabled\s*=\s*false/m.test(body))
+        return "disabled";
+    if (/trusted_hash\s*=/.test(body))
+        return "active";
+    return "untrusted";
+}
+//# sourceMappingURL=install.js.map

package/dist/adapters/codex/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/adapters/codex/install.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,YAAY,CAAU,CAAC;AAkB1E,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,UAAmB;IAC3E,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAChI,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAErG,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe;IAC7D,MAAM,IAAI,GAAc,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC,CAAC,CAAC,EAAE,CAAC;IACtG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,IAAU,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;;YAClE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;IAChE,CAAC,CAAC;IACF,GAAG,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACrH,GAAG,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,0HAA0H;IAC1H,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACtD,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAUD,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAkD,EAAE,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC;IACzJ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,KAAK,GAAG,CAAC;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,gFAAgF;IAChF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,uBAAuB,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC3G,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7D,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/adapters/cursor/hook.d.ts

@@ -0,0 +1,25 @@
+import type { Mode } from "../../core/config.js";
+import { type Effect, type HookEvent, type HookTranslator } from "../hooks/pipeline.js";
+/**
+ * Whether preToolUse may answer "allow" on an ask, leaving the ask to the specialised hook that follows and
+ * can show a person a prompt. Only for a kind whose specialised hook has been SEEN to fire after preToolUse
+ * allowed, in a live session; until then an ask in preToolUse is a deny, never an allow.
+ *  - shell: proven 2026-09-23 with Cursor 3.21.18: preToolUse → beforeShellExecution → postToolUse, same call.
+ *  - mcp: beforeMCPExecution is documented the same way but has not been seen live; stays strict.
+ */
+export declare const DEFER_ASK_TO_SPECIALISED: Record<"shell" | "mcp", boolean>;
+interface CursorBase {
+    conversation_id?: unknown;
+    generation_id?: unknown;
+    hook_event_name?: unknown;
+    workspace_roots?: unknown;
+    cwd?: unknown;
+}
+/** One id for one call, whichever hook carries it: preToolUse, the specialised hook, and the outcome agree. */
+export declare function cursorCallId(base: CursorBase, kind: "shell" | "read" | "mcp", key: string): string;
+export declare function parseCursor(raw: string): HookEvent;
+export declare function cursorBody(effect: Effect, message: string, mode: Mode, ev: Extract<HookEvent, {
+    kind: "decision";
+}>): Record<string, unknown>;
+export declare const cursorTranslator: HookTranslator;
+export {};

package/dist/adapters/cursor/hook.js

@@ -0,0 +1,228 @@
+/**
+ * Cursor hooks adapter (`yenop hook cursor`).
+ *
+ * Cursor runs a command before acting and reads a JSON answer. The contract (cursor.com/docs/hooks, and what
+ * Cursor 3.21 really sends, recorded 2026-09-23):
+ *  - preToolUse            {tool_name, tool_input, tool_use_id, cwd}   → {permission: allow|deny, user_message}
+ *                          fires FIRST, for EVERY tool: Shell, Read, Write, Edit, Delete, Grep, Task, MCP:<tool>...
+ *  - beforeShellExecution  {command, cwd}                              → {permission: allow|ask|deny, user_message}
+ *  - beforeMCPExecution    {tool_name, tool_input (JSON string), mcp_server_name, url?, command?}
+ *                                                                       → {permission: allow|ask|deny, user_message}
+ *  - beforeReadFile        {file_path, content, attachments}           → {permission: allow|deny, user_message}
+ *  - postToolUse / postToolUseFailure                                   observe-only, carry tool_use_id
+ *  - sessionEnd                                                         fire-and-forget
+ *  Every event also carries conversation_id, generation_id, hook_event_name, workspace_roots, ...
+ *
+ * Security decisions baked in here:
+ *  - A permission hook that prints invalid or empty JSON makes Cursor block (with failClosed), so for a decision
+ *    we ALWAYS print a full answer, including in observe mode (where it is allow). Silence is never an answer.
+ *    Found live: the first version ignored Shell in preToolUse, expecting beforeShellExecution to judge it, and
+ *    Cursor blocked every command with "hook returned no output". Fail-closed held; the adapter was wrong.
+ *  - preToolUse cannot ask. An ask there becomes a deny with a message saying why, never an allow. The
+ *    specialised hooks that can ask fire only after preToolUse allowed, so deferring an ask to them is only
+ *    safe once it is proven live that they fire; see DEFER_ASK_TO_SPECIALISED.
+ *  - The same call reaches Yenop through preToolUse and then its specialised hook. Both derive the same call id
+ *    from the conversation, generation and the command or path, so the second is a replay of the first: one
+ *    decision, one receipt, and the outcome from postToolUse attaches to it.
+ *  - Every tool name is judged. Known world-touching tools by what they do; a tool with no command, path or
+ *    URL in its input is an internal tool (Task, Todo, ...) and judged as read-only rather than left silent.
+ *  - tool_input on MCP events is a JSON string from the model's side of the fence: parsed defensively.
+ *  - Malformed input throws; the pipeline turns that into a deny with exit 2. failClosed:true is set by the
+ *    installer so a crash or timeout also blocks.
+ */
+import { createHash } from "node:crypto";
+import { classifyTool, mcpToolRef } from "../../core/tools.js";
+import { safeUser } from "../hooks/pipeline.js";
+/**
+ * Whether preToolUse may answer "allow" on an ask, leaving the ask to the specialised hook that follows and
+ * can show a person a prompt. Only for a kind whose specialised hook has been SEEN to fire after preToolUse
+ * allowed, in a live session; until then an ask in preToolUse is a deny, never an allow.
+ *  - shell: proven 2026-09-23 with Cursor 3.21.18: preToolUse → beforeShellExecution → postToolUse, same call.
+ *  - mcp: beforeMCPExecution is documented the same way but has not been seen live; stays strict.
+ */
+export const DEFER_ASK_TO_SPECIALISED = { shell: true, mcp: false };
+const MUTATING_TOOL = /(write|edit|create|delete|remove|replace|move|rename|patch|apply)/i;
+const SHELL_TOOL = /^(shell|bash|terminal|run_terminal|run_terminal_cmd|runterminal)$/i;
+const READ_TOOL = /^(read|read_file|readfile)$/i;
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+function obj(v) {
+    return v && typeof v === "object" && !Array.isArray(v) ? v : {};
+}
+/** MCP tool_input arrives as a JSON string. A string that is not JSON becomes an empty object, never a crash. */
+function jsonArgs(v) {
+    if (typeof v === "string") {
+        try {
+            return obj(JSON.parse(v));
+        }
+        catch {
+            return {};
+        }
+    }
+    return obj(v);
+}
+function firstRoot(v) {
+    return Array.isArray(v) && typeof v[0] === "string" ? v[0] : undefined;
+}
+function cwdOf(base, input) {
+    return (input && str(input["cwd"])) ?? str(base.cwd) ?? firstRoot(base.workspace_roots);
+}
+/** One id for one call, whichever hook carries it: preToolUse, the specialised hook, and the outcome agree. */
+export function cursorCallId(base, kind, key) {
+    return "c_" + createHash("sha256").update(str(base.conversation_id) ?? "").update("\0").update(str(base.generation_id) ?? "").update("\0").update(kind).update("\0").update(key).digest("hex").slice(0, 32);
+}
+function request(base, tool, args, callId, cwd) {
+    const conv = str(base.conversation_id) ?? "unknown";
+    const req = { runId: `cursor:${conv}`, principal: { runtime: "cursor", agent: "main", user: safeUser() }, tool, args };
+    const at = cwd ?? cwdOf(base);
+    if (at !== undefined)
+        req.cwd = at;
+    if (callId !== undefined)
+        req.callId = callId;
+    return req;
+}
+/** preToolUse: what this tool is, from its name and what its input names. Never silent. */
+function preToolUse(m, name, input, useId) {
+    const event = "preToolUse";
+    if (SHELL_TOOL.test(name)) {
+        const command = str(input["command"]);
+        if (command === undefined)
+            throw new Error("preToolUse Shell without command");
+        return { kind: "decision", event, askCapable: false, request: request(m, classifyTool("Bash"), { ...input, command }, cursorCallId(m, "shell", command), cwdOf(m, input)) };
+    }
+    const path = str(input["file_path"]) ?? str(input["path"]) ?? str(input["target_file"]);
+    if (READ_TOOL.test(name)) {
+        if (path === undefined)
+            throw new Error("preToolUse Read without file_path");
+        return { kind: "decision", event, askCapable: false, request: request(m, classifyTool("Read"), { ...input, file_path: path }, cursorCallId(m, "read", path)) };
+    }
+    const mcp = /^MCP:(.+)$/.exec(name);
+    if (mcp) {
+        const args = jsonArgs(input["args"] ?? input["arguments"] ?? input);
+        return { kind: "decision", event, askCapable: false, request: request(m, mcpToolRef(str(input["server"]) ?? str(input["mcp_server_name"]) ?? "mcp", mcp[1]), args, cursorCallId(m, "mcp", mcp[1] + JSON.stringify(args))) };
+    }
+    if (MUTATING_TOOL.test(name) && path !== undefined) {
+        const tool = { name, kind: "write", readOnly: false };
+        return { kind: "decision", event, askCapable: false, request: request(m, tool, { ...input, file_path: path }, useId) };
+    }
+    const url = str(input["url"]);
+    if (url !== undefined)
+        return { kind: "decision", event, askCapable: false, request: request(m, { name, kind: "web", readOnly: !MUTATING_TOOL.test(name) }, input, useId) };
+    // Grep, Glob, ListDir, Search, Task, Todo, ...: reads inside the workspace or Cursor's own bookkeeping.
+    const tool = { name, kind: "read", readOnly: true };
+    return { kind: "decision", event, askCapable: false, request: request(m, tool, path !== undefined ? { ...input, file_path: path } : input, useId) };
+}
+export function parseCursor(raw) {
+    const m = JSON.parse(raw); // throws → deny
+    const event = str(m.hook_event_name);
+    if (!event)
+        throw new Error("cursor hook event without hook_event_name");
+    switch (event) {
+        case "beforeShellExecution": {
+            const command = str(m["command"]);
+            if (command === undefined)
+                throw new Error("beforeShellExecution without command");
+            return { kind: "decision", event, askCapable: true, request: request(m, classifyTool("Bash"), { command }, cursorCallId(m, "shell", command)) };
+        }
+        case "beforeMCPExecution": {
+            const name = str(m["tool_name"]);
+            const server = str(m["mcp_server_name"]) ?? "mcp";
+            if (name === undefined)
+                throw new Error("beforeMCPExecution without tool_name");
+            const args = jsonArgs(m["tool_input"]);
+            return { kind: "decision", event, askCapable: true, request: request(m, mcpToolRef(server, name), args, cursorCallId(m, "mcp", name + JSON.stringify(args))) };
+        }
+        case "beforeReadFile": {
+            const file = str(m["file_path"]);
+            if (file === undefined)
+                throw new Error("beforeReadFile without file_path");
+            return { kind: "decision", event, askCapable: false, request: request(m, classifyTool("Read"), { file_path: file }, cursorCallId(m, "read", file)) };
+        }
+        case "preToolUse": {
+            const name = str(m["tool_name"]);
+            if (name === undefined)
+                throw new Error("preToolUse without tool_name");
+            return preToolUse(m, name, obj(m["tool_input"]), str(m["tool_use_id"]));
+        }
+        case "postToolUse":
+        case "postToolUseFailure": {
+            const useId = str(m["tool_use_id"]);
+            const tool = str(m["tool_name"]);
+            if (!useId || !tool)
+                return { kind: "ignore" };
+            const input = obj(m["tool_input"]);
+            const command = str(input["command"]);
+            const path = str(input["file_path"]) ?? str(input["path"]) ?? str(input["target_file"]);
+            const callId = SHELL_TOOL.test(tool) && command !== undefined ? cursorCallId(m, "shell", command) : READ_TOOL.test(tool) && path !== undefined ? cursorCallId(m, "read", path) : useId;
+            const conv = str(m.conversation_id) ?? "unknown";
+            const failed = event === "postToolUseFailure";
+            const denied = failed && str(m["failure_type"]) === "permission_denied";
+            const out = { kind: "outcome", runId: `cursor:${conv}`, callId, tool, outcome: denied ? "denied" : failed ? "failed" : "ran" };
+            const detail = str(m["error_message"]);
+            if (failed && detail)
+                out.detail = detail;
+            const cwd = cwdOf(m, input);
+            if (cwd !== undefined)
+                out.cwd = cwd;
+            return out;
+        }
+        case "afterShellExecution": {
+            // Fires after a shell command actually executed (to be confirmed live: Cursor's postToolUse also fires for
+            // a command the person skipped). Carries the command and, when known, its exit code.
+            const command = str(m["command"]) ?? str(obj(m["tool_input"])["command"]);
+            if (command === undefined)
+                return { kind: "ignore" };
+            const code = m["exit_code"] ?? m["exitCode"] ?? obj(m["result"])["exitCode"];
+            const failed = typeof code === "number" && code !== 0;
+            const conv = str(m.conversation_id) ?? "unknown";
+            const out = { kind: "outcome", runId: `cursor:${conv}`, callId: cursorCallId(m, "shell", command), tool: "Shell", outcome: failed ? "failed" : "ran" };
+            if (failed)
+                out.detail = `exit code ${code}`;
+            const cwd = cwdOf(m);
+            if (cwd !== undefined)
+                out.cwd = cwd;
+            return out;
+        }
+        case "sessionEnd": {
+            const end = { kind: "session-end", runId: `cursor:${str(m["session_id"]) ?? str(m.conversation_id) ?? "unknown"}` };
+            const cwd = cwdOf(m);
+            if (cwd !== undefined)
+                end.cwd = cwd;
+            return end;
+        }
+        default:
+            return { kind: "ignore" };
+    }
+}
+function answer(permission, message) {
+    return message ? { permission, user_message: message } : { permission };
+}
+export function cursorBody(effect, message, mode, ev) {
+    if (mode === "observe")
+        return answer("allow"); // recorded, never blocked; and Cursor needs a real answer
+    if (effect === "allow")
+        return answer("allow");
+    if (effect === "deny")
+        return answer("deny", `Yenop: ${message}`);
+    if (ev.askCapable)
+        return answer("ask", `Yenop: ${message}`);
+    const kind = ev.request.tool.kind;
+    if (ev.event === "preToolUse" && (kind === "shell" || kind === "mcp") && DEFER_ASK_TO_SPECIALISED[kind])
+        return answer("allow"); // the hook that can ask comes next, with the same call id
+    return answer("deny", `Yenop: ${message} Cursor cannot ask a person for this step, so it is blocked: do it yourself, or allow it in policy.`);
+}
+export const cursorTranslator = {
+    runtime: "cursor",
+    parse: parseCursor,
+    body: cursorBody,
+    result(body) {
+        if (body === null || Object.keys(body).length === 0)
+            return { stdout: "", exitCode: 0 };
+        return { stdout: JSON.stringify(body), exitCode: 0 };
+    },
+    failure(reason) {
+        return { stdout: JSON.stringify(answer("deny", `Yenop failed and refuses by default: ${reason}. Run "yenop status".`)), exitCode: 2 };
+    },
+};
+//# sourceMappingURL=hook.js.map

package/dist/adapters/cursor/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/adapters/cursor/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAG/D,OAAO,EAAE,QAAQ,EAAwE,MAAM,sBAAsB,CAAC;AAEtH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAqC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAUtG,MAAM,aAAa,GAAG,oEAAoE,CAAC;AAC3F,MAAM,UAAU,GAAG,oEAAoE,CAAC;AACxF,MAAM,SAAS,GAAG,8BAA8B,CAAC;AAEjD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AACD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/F,CAAC;AACD,iHAAiH;AACjH,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AACD,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AACD,SAAS,KAAK,CAAC,IAAgB,EAAE,KAA+B;IAC9D,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAC1F,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,IAA8B,EAAE,GAAW;IACxF,OAAO,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9M,CAAC;AAED,SAAS,OAAO,CAAC,IAAgB,EAAE,IAAa,EAAE,IAA6B,EAAE,MAAe,EAAE,GAAY;IAC5G,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;IACpD,MAAM,GAAG,GAAoB,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxI,MAAM,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,EAAE,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,SAAS,UAAU,CAAC,CAAa,EAAE,IAAY,EAAE,KAA8B,EAAE,KAAyB;IACxG,MAAM,KAAK,GAAG,YAAY,CAAC;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;IAC9K,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IACxF,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;IACjK,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChO,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,GAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;IAC5K,wGAAwG;IACxG,MAAM,IAAI,GAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;AACtJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyC,CAAC,CAAC,gBAAgB;IACnF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAEzE,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACnF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAClJ,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,CAAC;YAClD,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjK,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACvJ,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACxE,OAAO,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,aAAa,CAAC;QACnB,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;YACxF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACvL,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;YACjD,MAAM,MAAM,GAAG,KAAK,KAAK,oBAAoB,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,mBAAmB,CAAC;YACxE,MAAM,GAAG,GAAc,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC1I,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YACvC,IAAI,MAAM,IAAI,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;YAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;YACrC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,2GAA2G;YAC3G,qFAAqF;YACrF,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1E,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;YACjD,MAAM,GAAG,GAAc,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAClK,IAAI,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,aAAa,IAAI,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;YACrC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,GAAG,GAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,SAAS,EAAE,EAAE,CAAC;YAC/H,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;YACrC,OAAO,GAAG,CAAC;QACb,CAAC;QACD;YACE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,UAAoC,EAAE,OAAgB;IACpE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe,EAAE,IAAU,EAAE,EAA4C;IAClH,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0DAA0D;IAC1G,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC;IAClE,IAAI,EAAE,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0DAA0D;IAC3L,OAAO,MAAM,CAAC,MAAM,EAAE,UAAU,OAAO,qGAAqG,CAAC,CAAC;AAChJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,UAAU;IAChB,MAAM,CAAC,IAAI;QACT,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,MAAM;QACZ,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,wCAAwC,MAAM,uBAAuB,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxI,CAAC;CACF,CAAC"}

package/dist/adapters/cursor/install.d.ts

@@ -0,0 +1,10 @@
+export declare const CURSOR_MARKER = "hook cursor";
+export declare const CURSOR_DECISION_EVENTS: readonly ["beforeShellExecution", "beforeMCPExecution", "beforeReadFile", "preToolUse"];
+export declare const CURSOR_REPORT_EVENTS: readonly ["postToolUse", "postToolUseFailure", "afterShellExecution", "sessionEnd"];
+export declare function cursorHooksPath(scope: "project" | "user", projectDir?: string): string;
+export declare function installCursorHooks(path: string, command: string): {
+    changed: boolean;
+    path: string;
+};
+/** Is Cursor present on this machine or in this project? Used by `yenop init` to decide what to hook. */
+export declare function cursorDetected(projectDir: string): boolean;

package/dist/adapters/cursor/install.js

@@ -0,0 +1,57 @@
+/**
+ * Install the Yenop hooks into a Cursor hooks.json (project: <root>/.cursor/hooks.json, user: ~/.cursor/hooks.json).
+ *
+ * Decision events get failClosed:true so a crash or timeout of the hook blocks the action instead of letting it
+ * through; that is the only safe default for a guard. Report events are observe-only and left fail-open so a
+ * hiccup never stalls the agent for a record-keeping call. Idempotent: our entries are replaced, anyone else's
+ * are kept.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+export const CURSOR_MARKER = "hook cursor";
+export const CURSOR_DECISION_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "beforeReadFile", "preToolUse"];
+// afterShellExecution: seen live 2026-09-23 that Cursor reports a command the person SKIPPED as a normal
+// postToolUse with empty output and exit code 0, so postToolUse alone cannot say whether a shell call ran.
+export const CURSOR_REPORT_EVENTS = ["postToolUse", "postToolUseFailure", "afterShellExecution", "sessionEnd"];
+export function cursorHooksPath(scope, projectDir) {
+    return scope === "user" ? join(homedir(), ".cursor", "hooks.json") : join(projectDir ?? process.cwd(), ".cursor", "hooks.json");
+}
+function readHooks(path) {
+    if (!existsSync(path))
+        return { version: 1, hooks: {} };
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    return { version: typeof parsed.version === "number" ? parsed.version : 1, hooks: parsed.hooks && typeof parsed.hooks === "object" ? parsed.hooks : {} };
+}
+function isOurs(e) {
+    return typeof e.command === "string" && e.command.endsWith(CURSOR_MARKER);
+}
+/** Write the file atomically so a crash mid-write never leaves Cursor with a half file (which would fail open). */
+function writeAtomic(path, text) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, text);
+    renameSync(tmp, path);
+}
+export function installCursorHooks(path, command) {
+    const file = readHooks(path);
+    const before = JSON.stringify(file);
+    for (const ev of CURSOR_DECISION_EVENTS) {
+        const rest = (file.hooks[ev] ?? []).filter((e) => !isOurs(e));
+        file.hooks[ev] = [...rest, { command, type: "command", timeout: 15, failClosed: true }];
+    }
+    for (const ev of CURSOR_REPORT_EVENTS) {
+        const rest = (file.hooks[ev] ?? []).filter((e) => !isOurs(e));
+        file.hooks[ev] = [...rest, { command, type: "command", timeout: 5 }];
+    }
+    const after = JSON.stringify(file);
+    if (after === before)
+        return { changed: false, path };
+    writeAtomic(path, JSON.stringify(file, null, 2) + "\n");
+    return { changed: true, path };
+}
+/** Is Cursor present on this machine or in this project? Used by `yenop init` to decide what to hook. */
+export function cursorDetected(projectDir) {
+    return existsSync(join(homedir(), ".cursor")) || existsSync(join(projectDir, ".cursor"));
+}
+//# sourceMappingURL=install.js.map

package/dist/adapters/cursor/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/adapters/cursor/install.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,CAAU,CAAC;AAC9H,yGAAyG;AACzG,2GAA2G;AAC3G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,CAAU,CAAC;AAcxH,MAAM,UAAU,eAAe,CAAC,KAAyB,EAAE,UAAmB;IAC5E,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA6B,CAAC;IAClF,OAAO,EAAE,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3J,CAAC;AAED,SAAS,MAAM,CAAC,CAAkB;IAChC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED,mHAAmH;AACnH,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,sBAAsB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACtD,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAC3F,CAAC"}

package/dist/adapters/gemini/hook.d.ts

@@ -0,0 +1,20 @@
+import type { Mode } from "../../core/config.js";
+import { type Effect, type HookEvent, type HookTranslator } from "../hooks/pipeline.js";
+interface GeminiBase {
+    session_id?: unknown;
+    cwd?: unknown;
+    hook_event_name?: unknown;
+    tool_name?: unknown;
+    tool_input?: unknown;
+    mcp_context?: unknown;
+    tool_response?: unknown;
+}
+export declare function runIdOf(m: GeminiBase): string;
+/** Gemini sends no call id. Derive one from what identifies the call, so the AfterTool outcome finds its decision. */
+export declare function geminiCallId(sessionId: string, tool: string, input: unknown): string;
+/** The URLs named in a web_fetch prompt, external ones first, so the judged `url` is the one that leaves the machine. */
+export declare function urlsInPrompt(prompt: string): string[];
+export declare function parseGemini(raw: string): HookEvent;
+export declare function geminiBody(effect: Effect, message: string, mode: Mode): Record<string, unknown> | null;
+export declare const geminiTranslator: HookTranslator;
+export {};