@brainervirus/workit-cursor 8.3.0 → 8.4.0

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "workit",
   "displayName": "Workit",
   "description": "Adaptive Workit workflow with shared MCP tools and native Cursor hooks",
-  "version": "8.3.0",
+  "version": "8.4.0",
   "author": {
     "name": "Cristhofer Pincetti"
   },

package/README.md

@@ -20,11 +20,29 @@ limits: [hosts guide](https://github.com/BrainerVirus/workit/blob/main/docs/guid
 
 ## Runtime
 
-The MCP server and hooks run through
+The MCP server runs through
 `npx -y --prefer-online --min-release-age=0 --package=@brainervirus/workit-cursor@latest …`,
-so manifests carry no repository-relative `dist` paths. The age override
-works around npm/cli#9765; `workit doctor` enforces this exact shape. MCP is
-read-only for unattested callers; mutations run through the `workit` CLI.
+so manifests carry no repository-relative `dist` paths (the age override works
+around npm/cli#9765). MCP is read-only for unattested callers; mutations run
+through the `workit` CLI.
+
+Hooks run through `node "${CURSOR_PLUGIN_ROOT}/hooks/launch.mjs" <bin>`, which
+picks the plugin's bundled `dist/` hook, else a global `workit-cursor-hook` on
+`PATH`, else `npx -y --prefer-offline` pinned to the plugin's own version. It
+never resolves `@latest` at hook time. Hooks are registered with
+`failClosed: false` and the launcher fails open: offline, a crash or a timeout
+lets the action through with a `[workit] Cursor hook unavailable` line on
+stderr, while the hook's own denials (exit 2) still block. A window with no
+folder open, or a payload without a conversation id, is allowed with a note.
+A local install (`workit init`, `install-cursor-plugin.sh`) writes the
+launcher's absolute path into every event, so only a Marketplace install
+relies on Cursor expanding `${CURSOR_PLUGIN_ROOT}`. On Windows the npx and
+global-bin fallbacks run their `.cmd` shims through `cmd.exe`.
+`workit doctor` reports the launcher mode (`local` with the runtime's version,
+`npx-pinned`, `missing` or `stale`) and the latency of one no-op hook. It
+also warns when Cursor started the Workit MCP server but no hook has run
+since: the launcher stamps `cursor-hook-last-run` and the MCP server stamps
+`cursor-session-last-start` in Workit's state directory.
 The `preToolUse` hook applies the [before-write gate](https://github.com/BrainerVirus/workit/blob/main/docs/guides/verification.md)
 to write tools while the branch task has an open product choice or needs a
 plan.