0xray 4.0.20 → 4.0.22

package/dist/integrations/cursor/hooks/hooks.json

@@ -3,17 +3,27 @@
   "hooks": {
     "preToolUse": [
       {
-        "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/cursor/hooks/pre-tool-use.js\""
+        "command": ".cursor/hooks/pre-tool-use.sh"
       }
     ],
     "preCompact": [
       {
-        "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/cursor/hooks/pre-compact.js\""
+        "command": ".cursor/hooks/pre-compact.sh"
       }
     ],
     "afterFileEdit": [
       {
-        "command": "XRAY_AI_PATH=\"${XRAY_AI_PATH:-node_modules/0xray}\" node \"${XRAY_AI_PATH:-node_modules/0xray}/dist/integrations/cursor/hooks/after-file-edit.js\""
+        "command": ".cursor/hooks/after-file-edit.sh"
+      }
+    ],
+    "beforeShellExecution": [
+      {
+        "command": ".cursor/hooks/before-shell-execution.sh"
+      }
+    ],
+    "beforeReadFile": [
+      {
+        "command": ".cursor/hooks/before-read-file.sh"
       }
     ]
   }

package/dist/integrations/cursor/hooks/pre-compact.js

@@ -9,6 +9,7 @@ import {
   appendHookActivity,
   buildSessionBootPayload,
   classifyPreCompactEvent,
+  cursorGenerationId,
   cursorHeatRoots,
   cursorSessionId,
   cursorWorkspaceRoot,
@@ -40,6 +41,7 @@ async function main() {
     eventClass = classifyPreCompactEvent(event);
     const eventRoot = cursorWorkspaceRoot(event);
     const sessionId = cursorSessionId(event);
+    const generationId = cursorGenerationId(event);
     const intent = extractIntent(event);
     let bootPath = null;
     let receiptPath = null;
@@ -60,6 +62,13 @@ async function main() {
         hookEvent: 'pre_compact',
         trigger: event.trigger || 'synthetic',
         sessionId,
+        conversation_id: sessionId,
+        generation_id: generationId,
+        is_first_compaction:
+          typeof event.is_first_compaction === 'boolean' ? event.is_first_compaction : null,
+        message_count: typeof event.message_count === 'number' ? event.message_count : null,
+        messages_to_compact:
+          typeof event.messages_to_compact === 'number' ? event.messages_to_compact : null,
         bootPath,
         timestamp: new Date().toISOString(),
       });

package/dist/integrations/cursor/hooks/pre-compact.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+HERE="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)"
+exec /bin/sh "${HERE}/xray-cloud-hook.sh" preCompact pre-compact.js

package/dist/integrations/cursor/hooks/pre-tool-use.js

@@ -9,6 +9,7 @@ import {
   appendHookActivity,
   checkCodexPatterns,
   checkFullTestSuite,
+  cursorGateRoot,
   cursorHeatRoots,
   cursorSessionId,
   cursorToolContext,
@@ -49,56 +50,60 @@ async function main() {
     const event = await readStdinJson();
     const eventRoot = cursorWorkspaceRoot(event);
     const sessionId = cursorSessionId(event);
-    for (const root of cursorHeatRoots(event)) {
+    const heatRoots = cursorHeatRoots(event);
+    for (const root of heatRoots) {
       ensureCursorSessionBoot(root, '0xray/cursor-pre-tool-use-boot', { sessionId });
     }
+    const gateRoot = cursorGateRoot(heatRoots, eventRoot);
 
-    const features = loadFeatures(eventRoot);
-    const gateFeatures = loadDelegationGateFeatures(eventRoot, 'cursor');
+    const features = loadFeatures(gateRoot);
+    const gateFeatures = loadDelegationGateFeatures(gateRoot, 'cursor');
     const ctx = cursorToolContext(event);
     toolName = ctx.toolName;
     const { content, cmd, toolInput } = ctx;
 
     const gateBlock = evaluatePreToolGate(toolName, toolInput, {
-      projectRoot: eventRoot,
+      projectRoot: gateRoot,
       sessionId,
       features: gateFeatures,
       host: 'cursor',
     });
     if (!gateBlock.allow) {
-      finish(eventRoot, 'deny', gateBlock.reason, gateBlock.hint, toolName, { gate: gateBlock.gate });
+      finish(gateRoot, 'deny', gateBlock.reason, gateBlock.hint, toolName, { gate: gateBlock.gate });
     }
 
     if (isWriteTool(toolName) && content) {
       const extraBlock = checkCodexPatterns(content, { terms: [11, 29] });
-      if (extraBlock) finish(eventRoot, 'deny', extraBlock, null, toolName);
+      if (extraBlock) finish(gateRoot, 'deny', extraBlock, null, toolName);
     }
 
     if (isShellTool(toolName) && cmd) {
       const testHint = checkFullTestSuite(cmd, features);
-      if (testHint) finish(eventRoot, 'allow', null, testHint, toolName);
+      if (testHint) finish(gateRoot, 'allow', null, testHint, toolName);
     }
 
     if (gateBlock.reason) {
-      finish(eventRoot, 'allow', gateBlock.reason, gateBlock.hint, toolName, {
+      finish(gateRoot, 'allow', gateBlock.reason, gateBlock.hint, toolName, {
         gate: gateBlock.gate,
         warn: true,
       });
     }
 
-    finish(eventRoot, 'allow', null, null, toolName);
+    finish(gateRoot, 'allow', null, null, toolName);
   } catch (err) {
     appendHookActivity(fallbackRoot, 'cursor-pre-tool-use', 'hook-error', 'error', {
       tool: toolName,
       error: err.message,
+      failOpen: true,
     });
+    // Dest EACCES on a Cloud workspace wrapper must not deny every tool.
     finish(
       fallbackRoot,
-      'deny',
-      `preToolUse hook error — blocked for safety: ${err.message}`,
+      'allow',
+      `preToolUse hook error — fail open: ${err.message}`,
       null,
       toolName,
-      { gate: 'hook-error' },
+      { gate: 'hook-error-fail-open' },
     );
   }
 }

package/dist/integrations/cursor/hooks/pre-tool-use.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+HERE="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)"
+exec /bin/sh "${HERE}/xray-cloud-hook.sh" preToolUse pre-tool-use.js

package/dist/integrations/cursor/hooks/xray-cloud-hook.sh

@@ -0,0 +1,63 @@
+#!/bin/sh
+# Cloud-safe Cursor hook runner. Command in hooks.json must be a relative path.
+# Do not put env-assignment in hooks.json — Cloud execs argv[0] without a shell.
+set -eu
+
+EVENT="${1:-preToolUse}"
+JS="${2:-pre-tool-use.js}"
+MILL=""
+REL=""
+
+pick_mill() {
+  mill="$1"
+  rel="$2"
+  if [ -f "${mill}/${rel}" ]; then
+    MILL="$mill"
+    REL="$rel"
+    return 0
+  fi
+  return 1
+}
+
+if [ -n "${XRAY_AI_PATH:-}" ]; then
+  pick_mill "${XRAY_AI_PATH}" "src/integrations/cursor/hooks/${JS}" || \
+    pick_mill "${XRAY_AI_PATH}" "dist/integrations/cursor/hooks/${JS}" || true
+fi
+if [ -z "$MILL" ]; then
+  pick_mill "$(pwd)" "src/integrations/cursor/hooks/${JS}" || \
+    pick_mill "$(pwd)/../xray" "src/integrations/cursor/hooks/${JS}" || \
+    pick_mill "$(pwd)/repos/xray" "src/integrations/cursor/hooks/${JS}" || \
+    pick_mill "${CURSOR_PROJECT_DIR:-}/repos/xray" "src/integrations/cursor/hooks/${JS}" || \
+    pick_mill "$(pwd)/node_modules/0xray" "dist/integrations/cursor/hooks/${JS}" || \
+    pick_mill "$(pwd)/node_modules/0xray" "src/integrations/cursor/hooks/${JS}" || true
+fi
+
+if [ -n "$MILL" ] && [ -d "$MILL" ]; then
+  MILL="$(cd "$MILL" && pwd)"
+fi
+
+NODE_BIN="$(command -v node 2>/dev/null || true)"
+
+log_invoke() {
+  dest="$1"
+  mkdir -p "${dest}/.xray/state" 2>/dev/null || true
+  {
+    printf 'ts=%s event=%s cwd=%s mill=%s node=%s\n' \
+      "$(date -Iseconds)" "$EVENT" "$(pwd)" "${MILL:-MISSING}" "${NODE_BIN:-MISSING}"
+  } >> "${dest}/.xray/state/cursor-hook-invoke.log" 2>/dev/null || true
+}
+
+log_invoke "$(pwd)"
+if [ -n "$MILL" ]; then
+  log_invoke "$MILL"
+fi
+
+if [ -z "$NODE_BIN" ] || [ -z "$MILL" ] || [ ! -f "${MILL}/${REL}" ]; then
+  printf '{"permission":"allow","user_message":"xray-cloud-hook: mill missing — fail open"}\n'
+  exit 0
+fi
+
+export XRAY_HOOK_EVENT="$EVENT"
+export XRAY_AI_PATH="$MILL"
+export XRAY_ROOT="$MILL"
+exec "$NODE_BIN" "${MILL}/${REL}"

package/dist/integrations/grok/hooks/grok-hook-utils.js

@@ -25,6 +25,7 @@ import {
   applyStationHeat,
   buildRepertoireResume as stationRepertoireResume,
   readExistingBoot,
+  retainCompactFields,
   writeStationMarkdown,
 } from '../../hooks/station-hook-runtime.mjs';
 
@@ -285,8 +286,8 @@ export function buildSessionBootPayload(root, source = '0xray/grok-session-start
   const frontier = gateFeatures.ceremony === 'lite';
   const existing = readExistingBoot(root);
   const heat = applyStationHeat(root, extra.host || 'grok', extra, existing);
+  const compactHold = retainCompactFields(existing, extra);
   return {
-    hook: source,
     lead_dev_mode: features.lead_dev_mode,
     no_new_surface: features.no_new_surface,
     host: extra.host || 'grok',
@@ -306,9 +307,9 @@ export function buildSessionBootPayload(root, source = '0xray/grok-session-start
     ...(conferPending ? { conferPending: true, conferTrigger: 'analyze-complexity at synthesis checkpoint' } : {}),
     ...(userAsideBoot ?? {}),
     sessionId,
-    source,
     ...extra,
     ...heat,
+    ...compactHold,
     hook: source,
     source,
     timestamp: new Date().toISOString(),