test(cursor): fix hook CI without committed .cursor/hooks.json

Test plugin manifest and install-project-hooks output instead of
gitignored project hooks; add audit/gate coverage. Docs: hooks are generated locally, not committed.

Author: orenlab

docs/book/25-cursor-plugin.md

@@ -122,10 +122,12 @@ Cursor’s **Hooks** settings page lists hooks from `.cursor/hooks.json` (projec
 and `~/.cursor/hooks.json` (user) only. Hooks declared in the plugin manifest
 (`hooks/hooks.json` via `plugin.json`) are not included in that count.
 
-Ship or install a **project** `.cursor/hooks.json` that invokes the plugin
-scripts (see `plugins/cursor-codeclone/scripts/install-project-hooks.py`). The
-CodeClone monorepo commits `.cursor/hooks.json` invoking
-`python …/hooks/run_hook.py` (cross-platform; no shell scripts).
+Install a **project** `.cursor/hooks.json` with
+`plugins/cursor-codeclone/scripts/install-project-hooks.py` (writes
+`.cursor/hooks.json` and `codeclone-hooks.json` under the target root). Do not
+commit generated hook files — they embed machine-local interpreter paths. This
+monorepo ignores `/.cursor/`; tests cover the plugin manifest `hooks/hooks.json`
+and the installer output.
 
 Hooks follow these invariants:
 

docs/cursor-plugin.md

@@ -145,9 +145,11 @@ The Hooks panel counts **project** and **user** hook files only:
 | User            | `~/.cursor/hooks.json`               | yes                                                                           |
 | Plugin manifest | `hooks/hooks.json` in the plugin dir | **no** (may still run when the plugin is enabled; do not rely on the counter) |
 
-For the CodeClone repository, commit `.cursor/hooks.json` (see
-`plugins/cursor-codeclone/scripts/install-project-hooks.py`). For other
-projects, run that script once per repo (`python`, not bash — Windows-safe).
+Generate `.cursor/hooks.json` per workspace with
+`plugins/cursor-codeclone/scripts/install-project-hooks.py` (uses the current
+interpreter; paths are machine-specific — **do not commit**). This monorepo
+ignores `/.cursor/` in `.gitignore`; CI tests the plugin manifest and installer
+instead of a checked-in project hook file.
 
 ### Hook events
 

tests/test_audit_writer.py

@@ -523,6 +523,19 @@ def test_compact_payload_intent_checked() -> None:
     assert result["unexpected_files"] == 1
 
 
+def test_compact_payload_intent_queue_blocked() -> None:
+    from codeclone.audit.events import (
+        EVENT_INTENT_QUEUE_BLOCKED,
+        compact_payload_for_event,
+    )
+
+    result = compact_payload_for_event(
+        event_type=EVENT_INTENT_QUEUE_BLOCKED,
+        payload={"intent_id": "intent-abc", "blocking_count": 2},
+    )
+    assert result == {"intent_id": "intent-abc", "blocking_count": 2}
+
+
 def test_compact_payload_intent_cleared() -> None:
     """Exercise intent cleared branch (lines 107-108)."""
     from codeclone.audit.events import EVENT_INTENT_CLEARED, compact_payload_for_event

tests/test_cursor_plugin_hooks.py

@@ -453,18 +453,48 @@ def test_run_hook_dispatches_post_tool_use() -> None:
     assert "additional_context" in out
 
 
-def test_hooks_json_use_python_launcher_not_python3() -> None:
+def _assert_hook_commands_avoid_python3(payload: dict[str, object]) -> None:
+    hooks = payload["hooks"]
+    assert isinstance(hooks, dict)
+    for entries in hooks.values():
+        assert isinstance(entries, list)
+        for entry in entries:
+            assert isinstance(entry, dict)
+            cmd = str(entry["command"])
+            first = cmd.split()[0].strip('"')
+            assert first not in {"python3", "python3.exe"}, cmd
+            assert "run_hook.py" in cmd
+
+
+def test_plugin_hooks_json_use_python_launcher_not_python3() -> None:
+    """Plugin manifest hooks.json — not repo .cursor/hooks.json (local, gitignored)."""
     hooks_json = json.loads((_HOOKS_DIR / "hooks.json").read_text(encoding="utf-8"))
+    _assert_hook_commands_avoid_python3(hooks_json)
+
+
+def test_install_project_hooks_writes_launcher_commands(tmp_path: Path) -> None:
+    """Project hooks are generated by install-project-hooks.py, not committed."""
+    install_script = (
+        _REPO_ROOT
+        / "plugins"
+        / "cursor-codeclone"
+        / "scripts"
+        / ("install-project-hooks.py")
+    )
+    result = subprocess.run(
+        [sys.executable, str(install_script), str(tmp_path)],
+        capture_output=True,
+        text=True,
+        timeout=10,
+    )
+    assert result.returncode == 0, result.stderr
     project_hooks = json.loads(
-        (_REPO_ROOT / ".cursor" / "hooks.json").read_text(encoding="utf-8")
-    )
-    for payload in (hooks_json, project_hooks):
-        for entries in payload["hooks"].values():
-            for entry in entries:
-                cmd = entry["command"]
-                first = cmd.split()[0].strip('"')
-                assert first not in {"python3", "python3.exe"}, cmd
-                assert "run_hook.py" in cmd
+        (tmp_path / ".cursor" / "hooks.json").read_text(encoding="utf-8")
+    )
+    _assert_hook_commands_avoid_python3(project_hooks)
+    pre_cmd = project_hooks["hooks"]["preToolUse"][0]["command"]
+    assert "pre-tool-use-gate" in pre_cmd
+    assert "run_hook.py" in pre_cmd
 
 
 def test_hooks_no_bash_scripts_remain() -> None:

tests/test_workspace_intent_gate_errors.py

@@ -68,6 +68,7 @@ class _Config:
         )
 
     assert gate_mod._record_from_payload(123) is None
+    assert gate_mod._record_from_payload('{"version": 99}') is None
 
 
 def test_gate_decision_ignores_terminal_and_non_active_records() -> None: