chore(ci): add vet stop hook and isolate Playwright e2e

Run bun vet on agent stop with follow-up when it fails. Pin devalue and ws for clean audit, and serve e2e from a dedicated preview port so astro dev on 4321 cannot skew results.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: graffhyrum

.changeset/cursor-vet-stop-hook.md

@@ -0,0 +1,5 @@
+---
+'pendragon-coding': patch
+---
+
+Add Cursor `stop` hook that runs `bun vet` and reopens the agent with fix instructions when the quality gate fails (up to 3 follow-up loops, 15 min timeout). Pin `devalue` and `ws` via overrides so `bun audit` passes. Run Playwright e2e on port 3456 against a fresh preview build so vet does not collide with `astro dev` on 4321.

.cursor/hooks.json

@@ -0,0 +1,12 @@
+{
+	"version": 1,
+	"hooks": {
+		"stop": [
+			{
+				"command": "bun run .cursor/hooks/vet-stop.ts",
+				"timeout": 900,
+				"loop_limit": 3
+			}
+		]
+	}
+}

.cursor/hooks/vet-stop.ts

@@ -0,0 +1,69 @@
+/// <reference types="bun-types-no-globals/lib/index.d.ts" />
+
+import { stdin } from 'bun';
+
+const MAX_OUTPUT_CHARS = 8000;
+
+interface StopHookInput {
+	status: string;
+	loop_count: number;
+}
+
+async function main(): Promise<number> {
+	try {
+		const input = JSON.parse(await stdin.text()) as StopHookInput;
+
+		if (input.status !== 'completed') {
+			console.log(JSON.stringify({}));
+			return 0;
+		}
+
+		const proc = Bun.spawn(['bun', 'vet'], {
+			stdout: 'pipe',
+			stderr: 'pipe',
+		});
+
+		const [stdout, stderr, exitCode] = await Promise.all([
+			new Response(proc.stdout).text(),
+			new Response(proc.stderr).text(),
+			proc.exited,
+		]);
+
+		if (exitCode === 0) {
+			console.log(JSON.stringify({}));
+			return 0;
+		}
+
+		const combined = [stdout, stderr]
+			.filter((chunk) => chunk.length > 0)
+			.join('\n')
+			.trim();
+		const output =
+			combined.length > MAX_OUTPUT_CHARS
+				? combined.slice(-MAX_OUTPUT_CHARS)
+				: combined;
+
+		console.log(
+			JSON.stringify({
+				followup_message: [
+					'Quality gate failed: `bun vet` must exit 0 before this session can end.',
+					'Fix every error and warning, then run `bun vet` again.',
+					output.length > 0 ? `\n\`\`\`\n${output}\n\`\`\`` : '',
+				].join(' '),
+			}),
+		);
+		return 0;
+	} catch (error) {
+		console.error('[vet-stop] failed', error);
+		console.log(
+			JSON.stringify({
+				followup_message:
+					'Quality gate error: the vet stop hook crashed. Run `bun vet` manually, fix failures, and retry.',
+			}),
+		);
+		return 0;
+	}
+}
+
+const exitCode = await main();
+process.exit(exitCode);

bun.lock

@@ -34,9 +34,9 @@
 		"@happy-dom/global-registrator": "^20.9.0",
 		"@playwright/test": "^1.60.0",
 		"@types/bun": "^1.3.14",
-		"@typescript/native-preview": "^7.0.0-dev.20260514.1",
-		"astro": "^6.3.3",
-		"caniuse-lite": "^1.0.30001792",
+		"@typescript/native-preview": "^7.0.0-dev.20260519.1",
+		"astro": "^6.3.6",
+		"caniuse-lite": "^1.0.30001793",
 		"happy-dom": "^20.9.0",
 		"oxfmt": "0.43.0",
 		"oxlint": "1.58.0",
@@ -46,13 +46,15 @@
 	"overrides": {
 		"ajv": ">=8.20.0",
 		"defu": ">=6.1.5",
+		"devalue": ">=5.8.1",
 		"fast-uri": ">=3.1.2",
 		"js-yaml": ">=3.14.2",
 		"mdast-util-to-hast": ">=13.2.1",
 		"picomatch": ">=4.0.4",
 		"postcss": ">=8.5.10",
 		"rollup": ">=4.59.0",
 		"svgo": ">=4.0.1",
+		"ws": ">=8.20.1",
 		"yaml": ">=2.8.3"
 	},
 	"engines": {

package.json

@@ -1,6 +1,8 @@
 import { defineConfig } from '@playwright/test';
 
-const baseURL = 'http://localhost:4321';
+const port = Number(process.env.PLAYWRIGHT_PORT ?? 3456);
+const baseURL = `http://localhost:${port}`;
+
 export default defineConfig({
 	testDir: 'src/e2e',
 	testMatch: '**/*.spec.ts',
@@ -10,8 +12,8 @@ export default defineConfig({
 	},
 	reporter: [['html', { open: 'never' }], ['list']],
 	webServer: {
-		command: 'bun run build && bun run preview',
+		command: `bun run build && bunx astro preview --port ${port}`,
 		url: baseURL,
-		reuseExistingServer: !process.env.CI,
+		reuseExistingServer: false,
 	},
 });