@frostbridge/imdl 0.1.6 → 0.1.8

package/dist/index.js

@@ -726,6 +726,23 @@ function setPaused(paused) {
     }
   }
 }
+var SESSION_FILE = join3(IMDL_DIR, ".last-session");
+function getLastSessionId() {
+  try {
+    if (existsSync4(SESSION_FILE)) {
+      return readFileSync(SESSION_FILE, "utf-8").trim() || "unknown";
+    }
+  } catch {
+  }
+  return "unknown";
+}
+function saveLastSessionId(sessionId) {
+  try {
+    ensureImdlDir();
+    writeFileSync(SESSION_FILE, sessionId, { mode: 384 });
+  } catch {
+  }
+}
 
 // src/mcp/reporter.ts
 var THROTTLE_FILE = join4(getImdlDir(), "last-mcp-report");
@@ -2671,7 +2688,7 @@ function resumeCommand() {
 import pc6 from "picocolors";
 
 // src/adapters/index.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync13, writeFileSync as writeFileSync6 } from "fs";
 import { join as join17 } from "path";
 
 // src/transport/buffer.ts
@@ -3180,7 +3197,7 @@ var ClaudeCodeAdapter = class {
 };
 
 // src/adapters/cursor.ts
-import { existsSync as existsSync17, readdirSync as readdirSync4, statSync as statSync9 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync4, readFileSync as readFileSync12, statSync as statSync9 } from "fs";
 import { join as join16 } from "path";
 import { homedir as homedir13 } from "os";
 import { createRequire } from "module";
@@ -3196,7 +3213,9 @@ var CHAT_DATA_KEYS = [
   "workbench.panel.aichat.view.aichat.chatdata",
   "workbench.panel.aichat.view.aichat.chatdata.v2",
   "composer.composerData",
-  "composer.allComposers"
+  "composer.allComposers",
+  "aiService.prompts",
+  "aiService.generations"
 ];
 var CursorAdapter = class _CursorAdapter {
   agentType = "cursor";
@@ -3233,6 +3252,11 @@ var CursorAdapter = class _CursorAdapter {
    */
   findVscdbFiles(baseDir) {
     const files = [];
+    const directDb = join16(baseDir, "state.vscdb");
+    if (existsSync17(directDb)) {
+      files.push(directDb);
+      return files;
+    }
     try {
       const entries = readdirSync4(baseDir);
       for (const entry of entries) {
@@ -3263,9 +3287,23 @@ var CursorAdapter = class _CursorAdapter {
     try {
       db = new Database(dbPath, { readonly: true, fileMustExist: true });
       const rows = this.queryAIChatRows(db);
+      let hasGenerations = false;
       for (const row of rows) {
         const parsed = this.parseJsonValue(row.value);
         if (!parsed) continue;
+        if (row.key === "aiService.generations") {
+          const genEvents = this.extractFromGenerations(parsed, dbPath, since);
+          events.push(...genEvents);
+          if (genEvents.length > 0) hasGenerations = true;
+          continue;
+        }
+        if (row.key === "aiService.prompts") {
+          if (!hasGenerations) {
+            const promptEvents = this.extractFromPrompts(parsed, dbPath, since);
+            events.push(...promptEvents);
+          }
+          continue;
+        }
         const conversations = this.extractConversations(parsed);
         for (const conv of conversations) {
           const convEvents = this.conversationToEvents(conv, dbPath, since);
@@ -3281,6 +3319,57 @@ var CursorAdapter = class _CursorAdapter {
     }
     return events;
   }
+  /**
+   * Extract events from aiService.generations format:
+   * [{unixMs, generationUUID, type, textDescription}, ...]
+   */
+  extractFromGenerations(data, dbPath, since) {
+    if (!Array.isArray(data)) return [];
+    const events = [];
+    const sessionId = this.sessionIdFromPath(dbPath);
+    for (const gen of data) {
+      if (!gen || typeof gen !== "object") continue;
+      const { unixMs, textDescription, type } = gen;
+      if (!textDescription || typeof textDescription !== "string") continue;
+      if (!unixMs || typeof unixMs !== "number") continue;
+      if (since && unixMs <= since.getTime()) continue;
+      const genType = type;
+      if (genType === "apply") continue;
+      if (this.isNoisePrompt(textDescription)) continue;
+      events.push({
+        sessionId,
+        type: "user_prompt",
+        prompt: textDescription.slice(0, 1e4),
+        timestamp: new Date(unixMs).toISOString(),
+        agentType: "cursor"
+      });
+    }
+    return events;
+  }
+  /**
+   * Extract events from aiService.prompts format:
+   * [{text, commandType}, ...]
+   * No timestamps — only use if generations is empty.
+   */
+  extractFromPrompts(data, dbPath, _since) {
+    if (!Array.isArray(data) || data.length === 0) return [];
+    const events = [];
+    const sessionId = this.sessionIdFromPath(dbPath);
+    for (const prompt of data) {
+      if (!prompt || typeof prompt !== "object") continue;
+      const { text } = prompt;
+      if (!text || typeof text !== "string") continue;
+      if (this.isNoisePrompt(text)) continue;
+      events.push({
+        sessionId,
+        type: "user_prompt",
+        prompt: text.slice(0, 1e4),
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        agentType: "cursor"
+      });
+    }
+    return events;
+  }
   /**
    * Query the ItemTable for rows with AI-related keys.
    */
@@ -3490,6 +3579,80 @@ var CursorAdapter = class _CursorAdapter {
     }
     return `cursor-${parts[parts.length - 2] || "unknown"}`;
   }
+  /**
+   * Scan Cursor's agent-transcripts JSONL files (real-time, like Claude Code).
+   * Path: ~/.cursor/projects/{project}/agent-transcripts/{session}/{session}.jsonl
+   * Uses offsets to only read new lines since last scan.
+   */
+  extractFromTranscripts(since, offsets) {
+    const projectsDir = join16(homedir13(), ".cursor", "projects");
+    if (!existsSync17(projectsDir)) return { events: [], newOffsets: offsets };
+    const events = [];
+    const newOffsets = { ...offsets };
+    try {
+      const projects = readdirSync4(projectsDir);
+      for (const proj of projects) {
+        const transcriptsDir = join16(projectsDir, proj, "agent-transcripts");
+        if (!existsSync17(transcriptsDir)) continue;
+        let sessionDirs;
+        try {
+          sessionDirs = readdirSync4(transcriptsDir);
+        } catch {
+          continue;
+        }
+        for (const sessionDir of sessionDirs) {
+          const jsonlPath = join16(transcriptsDir, sessionDir, `${sessionDir}.jsonl`);
+          if (!existsSync17(jsonlPath)) continue;
+          if (since) {
+            try {
+              const stat = statSync9(jsonlPath);
+              if (stat.mtimeMs < since.getTime()) continue;
+            } catch {
+              continue;
+            }
+          }
+          try {
+            const content = readFileSync12(jsonlPath, "utf-8");
+            const lines = content.split("\n").filter((l) => l.trim());
+            const lastOffset = offsets[jsonlPath] || 0;
+            if (lines.length <= lastOffset) continue;
+            const newLines = lines.slice(lastOffset);
+            newOffsets[jsonlPath] = lines.length;
+            const projectPath = "/" + proj.replace(/-/g, "/").replace(/^\//, "");
+            for (const line of newLines) {
+              let entry;
+              try {
+                entry = JSON.parse(line);
+              } catch {
+                continue;
+              }
+              if (entry.role !== "user") continue;
+              const msg = entry.message?.content;
+              if (!Array.isArray(msg)) continue;
+              let text = "";
+              for (const block of msg) {
+                if (block?.type === "text" && block.text) {
+                  text += block.text.replace(/<user_query>\n?/g, "").replace(/\n?<\/user_query>/g, "").trim();
+                }
+              }
+              if (!text || this.isNoisePrompt(text)) continue;
+              events.push({
+                sessionId: `cursor-${sessionDir.slice(0, 8)}`,
+                type: "user_prompt",
+                prompt: text.slice(0, 1e4),
+                timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+                cwd: projectPath,
+                agentType: "cursor"
+              });
+            }
+          } catch {
+          }
+        }
+      }
+    } catch {
+    }
+    return { events, newOffsets };
+  }
   /**
    * Returns the workspace storage path for Cursor, or null if not found.
    */
@@ -3521,6 +3684,13 @@ var CursorAdapter = class _CursorAdapter {
       return [];
     }
   }
+  /**
+   * Returns the Cursor projects directory for transcript scanning.
+   */
+  static getProjectsDir() {
+    const dir = join16(homedir13(), ".cursor", "projects");
+    return existsSync17(dir) ? dir : null;
+  }
 };
 
 // src/adapters/index.ts
@@ -3528,7 +3698,7 @@ var STATE_FILE = join17(getImdlDir(), "adapter-state.json");
 function loadState() {
   try {
     if (existsSync18(STATE_FILE)) {
-      return JSON.parse(readFileSync12(STATE_FILE, "utf-8"));
+      return JSON.parse(readFileSync13(STATE_FILE, "utf-8"));
     }
   } catch {
   }
@@ -3609,6 +3779,71 @@ async function collectPrompts() {
       }
     }
   }
+  const cursorAdapter = new CursorAdapter();
+  if (CursorAdapter.getProjectsDir()) {
+    try {
+      const { events: transcriptEvents, newOffsets } = cursorAdapter.extractFromTranscripts(new Date(state.lastRun), state.offsets);
+      state.offsets = newOffsets;
+      for (const event of transcriptEvents) {
+        let violation;
+        if (event.prompt) {
+          const scan = scanPromptForSecrets(event.prompt);
+          if (scan.hasSecrets) {
+            violation = createPromptViolation(scan.findings);
+          }
+        }
+        const buffered = {
+          sessionId: event.sessionId,
+          type: event.type,
+          toolName: event.toolName,
+          toolInput: event.toolInput ? redactObject(event.toolInput) : void 0,
+          prompt: event.prompt ? redactObject(event.prompt) : void 0,
+          timestamp: event.timestamp,
+          cwd: event.cwd,
+          agentType: "cursor",
+          violation
+        };
+        appendEvent(buffered);
+        collected++;
+      }
+    } catch {
+    }
+  }
+  const cursorWorkspaces = CursorAdapter.getAllWorkspaces();
+  if (cursorWorkspaces.length > 0) {
+    for (const ws of cursorWorkspaces) {
+      try {
+        const events = await cursorAdapter.extractEvents({
+          kind: "directory",
+          path: ws,
+          since: new Date(state.lastRun)
+        });
+        for (const event of events) {
+          let violation;
+          if (event.prompt) {
+            const scan = scanPromptForSecrets(event.prompt);
+            if (scan.hasSecrets) {
+              violation = createPromptViolation(scan.findings);
+            }
+          }
+          const buffered = {
+            sessionId: event.sessionId,
+            type: event.type,
+            toolName: event.toolName,
+            toolInput: event.toolInput ? redactObject(event.toolInput) : void 0,
+            prompt: event.prompt ? redactObject(event.prompt) : void 0,
+            timestamp: event.timestamp,
+            cwd: event.cwd,
+            agentType: "cursor",
+            violation
+          };
+          appendEvent(buffered);
+          collected++;
+        }
+      } catch {
+      }
+    }
+  }
   if (collected > 0) {
     try {
       await tryFlush();
@@ -3633,7 +3868,7 @@ async function collectCommand() {
 
 // src/commands/daemon.ts
 import pc7 from "picocolors";
-import { existsSync as existsSync19, readFileSync as readFileSync13, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
 import { join as join18 } from "path";
 var INTERVAL_MS = 3e4;
 async function daemonCommand() {
@@ -3658,7 +3893,7 @@ async function daemonCommand() {
 async function ingestShellEvents() {
   const shellLog = join18(getBufferDir(), "shell-events.ndjson");
   if (!existsSync19(shellLog)) return 0;
-  const content = readFileSync13(shellLog, "utf-8").trim();
+  const content = readFileSync14(shellLog, "utf-8").trim();
   if (!content) return 0;
   const config = loadConfig();
   const lines = content.split("\n");
@@ -3763,7 +3998,7 @@ async function requestCommand(options) {
 // src/commands/lock.ts
 import pc9 from "picocolors";
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, existsSync as existsSync20 } from "fs";
+import { readFileSync as readFileSync15, writeFileSync as writeFileSync8, existsSync as existsSync20 } from "fs";
 import { join as join19, resolve as resolve3 } from "path";
 var LOCKFILE_NAME = "mcp-lock.json";
 function computeIntegrity(server, identity) {
@@ -3861,7 +4096,7 @@ async function verifyCommand(options) {
   }
   let lockfile;
   try {
-    lockfile = JSON.parse(readFileSync14(lockPath, "utf-8"));
+    lockfile = JSON.parse(readFileSync15(lockPath, "utf-8"));
   } catch {
     console.log(pc9.red("Failed to parse lockfile."));
     process.exit(1);
@@ -4270,7 +4505,7 @@ async function checkCompliance(developerId) {
 }
 
 // src/permissions/fixer.ts
-import { existsSync as existsSync21, readFileSync as readFileSync15, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
 import { join as join20 } from "path";
 import { homedir as homedir14 } from "os";
 function buildFixesFromChanges(changes) {
@@ -4288,7 +4523,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, ".claude", "settings.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync16(configPath, "utf-8"));
       const tools = settings.allowedTools || [];
       if (category === "shell") {
         if (!tools.includes("Bash") && !tools.some((t) => t.startsWith("Bash("))) return null;
@@ -4319,7 +4554,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, ".cursor", "settings.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync16(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && settings["cursor.composer.yoloMode"] === true) {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Disable YOLO mode" };
       }
@@ -4331,7 +4566,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, ".codex", "config.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const config = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const config = JSON.parse(readFileSync16(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && config.sandbox_mode === "full_auto") {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Switch to supervised mode" };
       }
@@ -4343,7 +4578,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, "Library", "Application Support", "Code", "User", "settings.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync16(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && (settings["github.copilot.chat.agent.autoApprove"] || settings["chat.agent.autoApprove"])) {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Disable autoApprove" };
       }
@@ -4356,7 +4591,7 @@ function buildFixForAgent(change, home) {
       const configPath = join20(home, ".windsurf", "mcp.json");
       if (!existsSync21(configPath)) return null;
       try {
-        const config = JSON.parse(readFileSync15(configPath, "utf-8"));
+        const config = JSON.parse(readFileSync16(configPath, "utf-8"));
         const servers = Object.keys(config.mcpServers || {});
         if (servers.length === 0) return null;
         return { agentType, category, currentGrant: "unrestricted", newGrant: "denied", configPath, description: `Remove MCP servers (${servers.join(", ")})` };
@@ -4369,7 +4604,7 @@ function buildFixForAgent(change, home) {
 }
 function applyFix(fix) {
   try {
-    const content = readFileSync15(fix.configPath, "utf-8");
+    const content = readFileSync16(fix.configPath, "utf-8");
     const config = JSON.parse(content);
     let modified = false;
     if (fix.agentType === "claude-code") {
@@ -4660,7 +4895,7 @@ function grantLevel(grant) {
 
 // src/commands/gateway.ts
 import pc12 from "picocolors";
-import { existsSync as existsSync22, readFileSync as readFileSync16, writeFileSync as writeFileSync10, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync17, writeFileSync as writeFileSync10, mkdirSync as mkdirSync3 } from "fs";
 import { join as join21 } from "path";
 import { homedir as homedir15 } from "os";
 import { execSync as execSync2, spawn } from "child_process";
@@ -4806,7 +5041,7 @@ async function gatewayAlertsCommand(opts) {
     console.log(pc12.dim("No alerts logged yet."));
     return;
   }
-  const lines = readFileSync16(logPath, "utf-8").split("\n").filter(Boolean);
+  const lines = readFileSync17(logPath, "utf-8").split("\n").filter(Boolean);
   const limit = opts.limit ? parseInt(opts.limit, 10) : 20;
   const recent = lines.slice(-limit);
   if (opts.json) {
@@ -4910,7 +5145,7 @@ async function getGatewayStatus() {
 function getRunningPid() {
   if (!existsSync22(GATEWAY_PID_FILE)) return null;
   try {
-    const pid = parseInt(readFileSync16(GATEWAY_PID_FILE, "utf-8").trim(), 10);
+    const pid = parseInt(readFileSync17(GATEWAY_PID_FILE, "utf-8").trim(), 10);
     return isNaN(pid) ? null : pid;
   } catch {
     return null;
@@ -4927,7 +5162,7 @@ function isProcessAlive(pid) {
 function getConfiguredPort() {
   if (!existsSync22(GATEWAY_CONFIG)) return DEFAULT_PORT;
   try {
-    const content = readFileSync16(GATEWAY_CONFIG, "utf-8");
+    const content = readFileSync17(GATEWAY_CONFIG, "utf-8");
     const match = content.match(/listen_port\s*=\s*(\d+)/);
     return match ? parseInt(match[1], 10) : DEFAULT_PORT;
   } catch {
@@ -4999,7 +5234,7 @@ function loadGatewayToml() {
   if (!existsSync22(GATEWAY_CONFIG)) {
     ensureConfig(DEFAULT_PORT);
   }
-  return readFileSync16(GATEWAY_CONFIG, "utf-8");
+  return readFileSync17(GATEWAY_CONFIG, "utf-8");
 }
 function saveGatewayToml(content) {
   writeFileSync10(GATEWAY_CONFIG, content, { mode: 384 });
@@ -5332,7 +5567,7 @@ function ruleTypeToCategory(type) {
 }
 
 // src/transport/sync.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync11, existsSync as existsSync23 } from "fs";
+import { readFileSync as readFileSync18, writeFileSync as writeFileSync11, existsSync as existsSync23 } from "fs";
 import { join as join22 } from "path";
 var SYNC_INTERVAL = 6e4;
 var SYNC_TIMEOUT = 3e3;
@@ -5343,7 +5578,7 @@ function getLastSyncTime() {
   try {
     const file = getSyncStateFile();
     if (existsSync23(file)) {
-      const data = JSON.parse(readFileSync17(file, "utf-8"));
+      const data = JSON.parse(readFileSync18(file, "utf-8"));
       return data.lastSync || 0;
     }
   } catch {
@@ -5691,8 +5926,9 @@ async function handleHook(type) {
       behaviorRiskScore = computeRiskScore(signals);
     }
   }
+  const sessionId = event.session_id || getLastSessionId();
   const buffered = {
-    sessionId: event.session_id,
+    sessionId,
     type: hookType,
     toolName: event.tool_name,
     toolInput: redactObject(event.tool_input),
@@ -5704,6 +5940,9 @@ async function handleHook(type) {
     behaviorSignals,
     behaviorRiskScore
   };
+  if (event.session_id) {
+    saveLastSessionId(event.session_id);
+  }
   appendEvent(buffered);
   try {
     await tryFlush();

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "restricted"
   },
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "IMDL — Intelligent Mediation & Detection Layer. AI agent security CLI.",
   "files": [
     "dist"