@hasna/instructions 0.4.33 → 0.4.34

package/dist/cli/index.js

@@ -10718,18 +10718,34 @@ function observeCursorGlobalAuthorityPath(authorityPath, readFile2) {
   return {
     ...base,
     fileType,
-    status: "unmanaged",
+    status: "managed",
     sha256: contentSha256,
     markers,
     markerSha256,
     provenance: {
       source: "filesystem",
-      authority: "unmanaged",
+      authority: "managed",
       observedPath: authorityPath,
-      detection: "unknown-content"
+      detection: "managed-marker"
     }
   };
 }
+function isCursorGlobalAuthorityPath(path) {
+  return resolve3(path) === resolve3(join5(homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
+}
+function stampCursorGlobalAuthorityMarker(content) {
+  if (CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN.test(content))
+    return content;
+  const digest = sha2564(content);
+  const markerLine = `<!-- ${CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER} hash=sha256:${digest} -->`;
+  const frontmatter = content.match(CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN)?.[0];
+  if (frontmatter) {
+    return `${frontmatter}${markerLine}
+${content.slice(frontmatter.length)}`;
+  }
+  return `${markerLine}
+${content}`;
+}
 function detectCursorAuthorityConflicts(observation = observeCursorGlobalAuthority()) {
   if (observation.status === "absent" || observation.status === "managed")
     return [];
@@ -10751,10 +10767,11 @@ function detectCursorAuthorityConflicts(observation = observeCursorGlobalAuthori
     reason: invalid ? `Cursor fixed global authority ${CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH} is not a verifiable regular managed file; refusing to render project rules.` : `Cursor fixed global authority ${CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH} is unmanaged; refusing to guess whether it conflicts with the managed project render.`
   }];
 }
-var CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH = ".cursor/rules/hasna-global.mdc", CURSOR_GLOBAL_AUTHORITY_MAX_BYTES, CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER = "Managed by @hasna/configs cursor global authority", CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN;
+var CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH = ".cursor/rules/hasna-global.mdc", CURSOR_GLOBAL_AUTHORITY_MAX_BYTES, CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER = "Managed by @hasna/configs cursor global authority", CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN, CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN;
 var init_cursor_authority = __esm(() => {
   CURSOR_GLOBAL_AUTHORITY_MAX_BYTES = 256 * 1024;
   CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN = /^<!-- Managed by @hasna\/configs cursor global authority hash=(sha256:[a-f0-9]{64}) -->$/m;
+  CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN = /^---\n[\s\S]*?\n---(?:\n|$)/;
 });
 
 // src/lib/session-render.ts
@@ -13979,8 +13996,9 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
     throw new ConfigApplyError(`Antigravity rule file ${renderedTargetPath} is ${renderedContent.length} characters; split it before applying because Antigravity limits rule files to ${ANTIGRAVITY_RULE_FILE_CHAR_LIMIT} characters.`);
   }
   const path = expandPath(renderedTargetPath);
+  const renderedForTarget = isCursorGlobalAuthorityPath(path) ? stampCursorGlobalAuthorityMarker(renderedContent) : renderedContent;
   const previousContent = existsSync7(path) ? readFileSync5(path, "utf-8") : null;
-  const changed = previousContent !== renderedContent;
+  const changed = previousContent !== renderedForTarget;
   if (!opts.dryRun) {
     const dir = dirname4(path);
     if (!existsSync7(dir)) {
@@ -13990,13 +14008,13 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
       const store = opts.store ?? resolveConfigStore();
       await store.createSnapshot(config.id, previousContent, config.version);
     }
-    writeFileSync2(path, renderedContent, "utf-8");
+    writeFileSync2(path, renderedForTarget, "utf-8");
   }
   return {
     config_id: config.id,
     path,
     previous_content: previousContent,
-    new_content: renderedContent,
+    new_content: renderedForTarget,
     dry_run: opts.dryRun ?? false,
     changed,
     primary_changed: changed,
@@ -14357,6 +14375,7 @@ var init_apply = __esm(() => {
   init_redact();
   init_template();
   init_transforms();
+  init_cursor_authority();
 });
 
 // src/lib/sync-dir.ts
@@ -18775,6 +18794,8 @@ sessionCmd.command("plan").description("Produce a dry-run render plan for profil
         ...planJsonForOutput(plan),
         ...globalCoverage ? { globalSourceCoverage: globalCoverage } : {}
       });
+      if (plan.blocked)
+        process.exitCode = 1;
       return;
     }
     console.log(chalk.bold(`${plan.tool} session render plan`) + chalk.dim(` (${plan.adapter.mode})`));
@@ -18801,6 +18822,8 @@ sessionCmd.command("plan").description("Produce a dry-run render plan for profil
       if (globalCoverage.complete)
         console.log(chalk.dim(`global source coverage: ${globalCoverage.expectedSlugs.length}/${globalCoverage.expectedSlugs.length} complete`));
     }
+    if (plan.blocked)
+      process.exitCode = 1;
     console.log(chalk.dim("Dry run only. No files were written."));
   } catch (e) {
     console.error(chalk.red(formatCliError(e)));

package/dist/index.js

@@ -8513,6 +8513,7 @@ var CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH = ".cursor/rules/hasna-global.mdc";
 var CURSOR_GLOBAL_AUTHORITY_MAX_BYTES = 256 * 1024;
 var CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER = "Managed by @hasna/configs cursor global authority";
 var CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN = /^<!-- Managed by @hasna\/configs cursor global authority hash=(sha256:[a-f0-9]{64}) -->$/m;
+var CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN = /^---\n[\s\S]*?\n---(?:\n|$)/;
 function sha2564(content) {
   return createHash4("sha256").update(content).digest("hex");
 }
@@ -8674,18 +8675,34 @@ function observeCursorGlobalAuthorityPath(authorityPath, readFile) {
   return {
     ...base,
     fileType,
-    status: "unmanaged",
+    status: "managed",
     sha256: contentSha256,
     markers,
     markerSha256,
     provenance: {
       source: "filesystem",
-      authority: "unmanaged",
+      authority: "managed",
       observedPath: authorityPath,
-      detection: "unknown-content"
+      detection: "managed-marker"
     }
   };
 }
+function isCursorGlobalAuthorityPath(path) {
+  return resolve3(path) === resolve3(join4(homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
+}
+function stampCursorGlobalAuthorityMarker(content) {
+  if (CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN.test(content))
+    return content;
+  const digest = sha2564(content);
+  const markerLine = `<!-- ${CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER} hash=sha256:${digest} -->`;
+  const frontmatter = content.match(CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN)?.[0];
+  if (frontmatter) {
+    return `${frontmatter}${markerLine}
+${content.slice(frontmatter.length)}`;
+  }
+  return `${markerLine}
+${content}`;
+}
 function detectCursorAuthorityConflicts(observation = observeCursorGlobalAuthority()) {
   if (observation.status === "absent" || observation.status === "managed")
     return [];
@@ -11957,8 +11974,9 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
     throw new ConfigApplyError(`Antigravity rule file ${renderedTargetPath} is ${renderedContent.length} characters; split it before applying because Antigravity limits rule files to ${ANTIGRAVITY_RULE_FILE_CHAR_LIMIT} characters.`);
   }
   const path = expandPath(renderedTargetPath);
+  const renderedForTarget = isCursorGlobalAuthorityPath(path) ? stampCursorGlobalAuthorityMarker(renderedContent) : renderedContent;
   const previousContent = existsSync6(path) ? readFileSync5(path, "utf-8") : null;
-  const changed = previousContent !== renderedContent;
+  const changed = previousContent !== renderedForTarget;
   if (!opts.dryRun) {
     const dir = dirname4(path);
     if (!existsSync6(dir)) {
@@ -11968,13 +11986,13 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
       const store = opts.store ?? resolveConfigStore();
       await store.createSnapshot(config.id, previousContent, config.version);
     }
-    writeFileSync2(path, renderedContent, "utf-8");
+    writeFileSync2(path, renderedForTarget, "utf-8");
   }
   return {
     config_id: config.id,
     path,
     previous_content: previousContent,
-    new_content: renderedContent,
+    new_content: renderedForTarget,
     dry_run: opts.dryRun ?? false,
     changed,
     primary_changed: changed,

package/dist/lib/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/lib/apply.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAA8B,MAAM,mBAAmB,CAAC;AAEzF,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAQ1D,OAAO,EAGL,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAM7B,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK5C;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBrD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,yBAAyB,GAAG,2BAA2B,GAAG,yBAAyB,GAAG,+BAA+B,CAAC;IACpI,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,yBAAyB,EAAE,CAAC;CACvC;AA+QD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA+BtB;AA2ED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,EAAE,CAAC,CAMxB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAM,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/lib/apply.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAA8B,MAAM,mBAAmB,CAAC;AAEzF,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAQ1D,OAAO,EAGL,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAO7B,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK5C;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBrD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,yBAAyB,GAAG,2BAA2B,GAAG,yBAAyB,GAAG,+BAA+B,CAAC;IACpI,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,QAAQ,EAAE,yBAAyB,EAAE,CAAC;CACvC;AAyRD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,CAAC,CA+BtB;AA2ED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,WAAW,EAAE,CAAC,CAMxB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAM,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/dist/lib/cursor-authority.d.ts

@@ -44,11 +44,34 @@ export interface CursorAuthorityObservationOptions {
  * Cursor reads this fixed global rule before project-scoped `.cursor/rules`
  * files. The session renderer owns only the project-scoped files, so an
  * unmanaged global rule is a second authority. A missing file is the clean
- * case. Existing content remains blocked unless a future registry-backed
- * migration contract proves package ownership; a self-declared marker is
- * intentionally insufficient.
+ * case. The package's own apply path stamps every write to this path with
+ * {@link stampCursorGlobalAuthorityMarker}; a regular file carrying that
+ * marker with a matching payload hash is the package's own output and is
+ * accepted as managed. Everything else — foreign content, a tampered marker,
+ * a non-regular file — remains blocked, because the renderer cannot guess
+ * whether it conflicts with the managed project render.
  */
 export declare function observeCursorGlobalAuthority(options?: CursorAuthorityObservationOptions): CursorAuthorityObservation;
 export declare function observeCursorGlobalAuthorityAtPath(authorityPath: string): CursorAuthorityObservation;
+/**
+ * Whether an expanded target path is the Cursor fixed global authority path
+ * under the current home. Used by the apply path to decide when to stamp the
+ * managed marker; the comparison mirrors {@link observeCursorGlobalAuthority}'s
+ * resolution so the writer and the observer always agree.
+ */
+export declare function isCursorGlobalAuthorityPath(path: string): boolean;
+/**
+ * Stamp the managed marker onto content destined for the Cursor fixed global
+ * authority path. The marker carries the sha256 of the payload AFTER the
+ * marker line, which is exactly the payload the observer recomputes in
+ * {@link observeCursorGlobalAuthorityPath} — so a stamped file round-trips as
+ * managed. Cursor requires YAML frontmatter to start the file, so content that
+ * opens with a `---` frontmatter block is stamped AFTER the closing `---`,
+ * matching how the package's own session-render cursor files place their
+ * managed marker; plain content without frontmatter is stamped at the top.
+ * Content that already carries a valid marker anywhere is returned unchanged
+ * (idempotent re-apply).
+ */
+export declare function stampCursorGlobalAuthorityMarker(content: string): string;
 export declare function detectCursorAuthorityConflicts(observation?: CursorAuthorityObservation): CursorAuthorityConflict[];
 //# sourceMappingURL=cursor-authority.d.ts.map

package/dist/lib/cursor-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-authority.d.ts","sourceRoot":"","sources":["../../src/lib/cursor-authority.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,qCAAqC,mCAAmC,CAAC;AACtF,eAAO,MAAM,iCAAiC,QAAa,CAAC;AAC5D,eAAO,MAAM,sCAAsC,sDAAsD,CAAC;AAK1G,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;AAChG,MAAM,MAAM,gCAAgC,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAC9F,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,gBAAgB,GAChB,iBAAiB,GACjB,2BAA2B,GAC3B,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY,EAAE,OAAO,qCAAqC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,gCAAgC,CAAC;IACzC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE;QACV,MAAM,EAAE,YAAY,CAAC;QACrB,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,wBAAwB,CAAC;KACrC,CAAC;CACH;AAED,MAAM,MAAM,2BAA2B,GACnC,6BAA6B,GAC7B,6BAA6B,CAAC;AAElC,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY,EAAE,OAAO,qCAAqC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,2BAA2B,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE;QACV,MAAM,EAAE,YAAY,CAAC;QACrB,SAAS,EAAE,WAAW,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC,wBAAwB,EAAE,SAAS,GAAG,gBAAgB,CAAC,CAAC;KAC5E,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAyBD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,iCAAsC,GAC9C,0BAA0B,CAI5B;AAED,wBAAgB,kCAAkC,CAChD,aAAa,EAAE,MAAM,GACpB,0BAA0B,CAK5B;AAoKD,wBAAgB,8BAA8B,CAC5C,WAAW,6BAAiC,GAC3C,uBAAuB,EAAE,CAsB3B"}
+{"version":3,"file":"cursor-authority.d.ts","sourceRoot":"","sources":["../../src/lib/cursor-authority.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,qCAAqC,mCAAmC,CAAC;AACtF,eAAO,MAAM,iCAAiC,QAAa,CAAC;AAC5D,eAAO,MAAM,sCAAsC,sDAAsD,CAAC;AAQ1G,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;AAChG,MAAM,MAAM,gCAAgC,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAC9F,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,gBAAgB,GAChB,iBAAiB,GACjB,2BAA2B,GAC3B,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY,EAAE,OAAO,qCAAqC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,gCAAgC,CAAC;IACzC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE;QACV,MAAM,EAAE,YAAY,CAAC;QACrB,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,wBAAwB,CAAC;KACrC,CAAC;CACH;AAED,MAAM,MAAM,2BAA2B,GACnC,6BAA6B,GAC7B,6BAA6B,CAAC;AAElC,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY,EAAE,OAAO,qCAAqC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,2BAA2B,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE;QACV,MAAM,EAAE,YAAY,CAAC;QACrB,SAAS,EAAE,WAAW,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC,wBAAwB,EAAE,SAAS,GAAG,gBAAgB,CAAC,CAAC;KAC5E,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAyBD;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,iCAAsC,GAC9C,0BAA0B,CAI5B;AAED,wBAAgB,kCAAkC,CAChD,aAAa,EAAE,MAAM,GACpB,0BAA0B,CAK5B;AAoKD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASxE;AAED,wBAAgB,8BAA8B,CAC5C,WAAW,6BAAiC,GAC3C,uBAAuB,EAAE,CAsB3B"}

package/dist/mcp/index.js

@@ -5602,9 +5602,36 @@ var init_asset_plan = __esm(() => {
 });
 
 // src/lib/cursor-authority.ts
-var CURSOR_GLOBAL_AUTHORITY_MAX_BYTES;
+import { createHash } from "crypto";
+import { homedir as homedir2 } from "os";
+import { join as join4, resolve as resolve2 } from "path";
+function sha256(content) {
+  return createHash("sha256").update(content).digest("hex");
+}
+function homeDir() {
+  return process.env["HOME"] || homedir2();
+}
+function isCursorGlobalAuthorityPath(path) {
+  return resolve2(path) === resolve2(join4(homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
+}
+function stampCursorGlobalAuthorityMarker(content) {
+  if (CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN.test(content))
+    return content;
+  const digest = sha256(content);
+  const markerLine = `<!-- ${CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER} hash=sha256:${digest} -->`;
+  const frontmatter = content.match(CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN)?.[0];
+  if (frontmatter) {
+    return `${frontmatter}${markerLine}
+${content.slice(frontmatter.length)}`;
+  }
+  return `${markerLine}
+${content}`;
+}
+var CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH = ".cursor/rules/hasna-global.mdc", CURSOR_GLOBAL_AUTHORITY_MAX_BYTES, CURSOR_GLOBAL_AUTHORITY_MANAGED_MARKER = "Managed by @hasna/configs cursor global authority", CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN, CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN;
 var init_cursor_authority = __esm(() => {
   CURSOR_GLOBAL_AUTHORITY_MAX_BYTES = 256 * 1024;
+  CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN = /^<!-- Managed by @hasna\/configs cursor global authority hash=(sha256:[a-f0-9]{64}) -->$/m;
+  CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN = /^---\n[\s\S]*?\n---(?:\n|$)/;
 });
 
 // src/lib/session-render.ts
@@ -6799,7 +6826,7 @@ var init_config_store = __esm(() => {
 
 // src/lib/session-render-ownership.ts
 import { existsSync as existsSync3, readFileSync, statSync } from "fs";
-import { dirname as dirname2, join as join4, parse as parse2, relative as relative2, sep } from "path";
+import { dirname as dirname2, join as join5, parse as parse2, relative as relative2, sep } from "path";
 function toSegments(absolutePath2) {
   return absolutePath2.replaceAll("\\", "/").split("/").filter(Boolean);
 }
@@ -6847,7 +6874,7 @@ function sessionRenderManifestClaimsPath(absolutePath2) {
   const root = parse2(absolutePath2).root;
   let home = dirname2(absolutePath2);
   for (let depth = 0;depth < MANIFEST_ANCESTOR_LIMIT; depth += 1) {
-    const manifestPath = join4(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
+    const manifestPath = join5(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
     const relativePaths = readManifestRelativePaths(manifestPath);
     if (relativePaths) {
       const claimed = relative2(home, absolutePath2).split(sep).join("/");
@@ -6883,16 +6910,16 @@ __export(exports_apply, {
   applyConfig: () => applyConfig
 });
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, realpathSync, writeFileSync } from "fs";
-import { basename as basename3, dirname as dirname3, join as join5, resolve as resolve2 } from "path";
-import { homedir as homedir2 } from "os";
+import { basename as basename3, dirname as dirname3, join as join6, resolve as resolve3 } from "path";
+import { homedir as homedir3 } from "os";
 function getConfigHome() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir2();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir3();
 }
 function expandPath(p) {
   if (p.startsWith("~/")) {
-    return resolve2(getConfigHome(), p.slice(2));
+    return resolve3(getConfigHome(), p.slice(2));
   }
-  return resolve2(p);
+  return resolve3(p);
 }
 function normalizeTargetPath(p) {
   const expanded = expandPath(p);
@@ -6904,7 +6931,7 @@ function normalizeTargetPath(p) {
     while (true) {
       if (existsSync4(current)) {
         try {
-          return resolve2(realpathSync(current), ...missingSegments);
+          return resolve3(realpathSync(current), ...missingSegments);
         } catch {
           return expanded;
         }
@@ -6932,8 +6959,9 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
     throw new ConfigApplyError(`Antigravity rule file ${renderedTargetPath} is ${renderedContent.length} characters; split it before applying because Antigravity limits rule files to ${ANTIGRAVITY_RULE_FILE_CHAR_LIMIT} characters.`);
   }
   const path = expandPath(renderedTargetPath);
+  const renderedForTarget = isCursorGlobalAuthorityPath(path) ? stampCursorGlobalAuthorityMarker(renderedContent) : renderedContent;
   const previousContent = existsSync4(path) ? readFileSync2(path, "utf-8") : null;
-  const changed = previousContent !== renderedContent;
+  const changed = previousContent !== renderedForTarget;
   if (!opts.dryRun) {
     const dir = dirname3(path);
     if (!existsSync4(dir)) {
@@ -6943,13 +6971,13 @@ async function writeConfigResult(config, targetPath, content, opts, meta = {}) {
       const store = opts.store ?? resolveConfigStore();
       await store.createSnapshot(config.id, previousContent, config.version);
     }
-    writeFileSync(path, renderedContent, "utf-8");
+    writeFileSync(path, renderedForTarget, "utf-8");
   }
   return {
     config_id: config.id,
     path,
     previous_content: previousContent,
-    new_content: renderedContent,
+    new_content: renderedForTarget,
     dry_run: opts.dryRun ?? false,
     changed,
     primary_changed: changed,
@@ -7296,7 +7324,7 @@ function sessionRendererOwnsCanonicalTarget(normalized, opts) {
     getConfigHome(),
     opts.vars?.["HOME_DIR"]
   ].filter((home) => typeof home === "string" && home.length > 0));
-  if ([...homes].some((home) => SESSION_RENDER_OWNED_CONFIG_TARGETS.some((relativePath) => normalized === normalizeTargetPath(join5(home, ...relativePath.split("/"))))))
+  if ([...homes].some((home) => SESSION_RENDER_OWNED_CONFIG_TARGETS.some((relativePath) => normalized === normalizeTargetPath(join6(home, ...relativePath.split("/"))))))
     return true;
   return sessionRenderOwnsPath(normalized);
 }
@@ -7310,6 +7338,7 @@ var init_apply = __esm(() => {
   init_redact();
   init_template();
   init_transforms();
+  init_cursor_authority();
 });
 
 // src/lib/sync.ts
@@ -7329,7 +7358,7 @@ __export(exports_sync, {
   CLAUDE_PROMPT_OUTPUTS: () => CLAUDE_PROMPT_OUTPUTS
 });
 import { existsSync as existsSync5, readdirSync, readFileSync as readFileSync3 } from "fs";
-import { basename as basename4, extname as extname2, join as join6 } from "path";
+import { basename as basename4, extname as extname2, join as join7 } from "path";
 function claudeRuleOutputs(fileName) {
   const stem = basename4(fileName, extname2(fileName));
   return [
@@ -7393,7 +7422,7 @@ async function syncProject(opts) {
   const allConfigs = await store.listConfigs();
   const machine = detectMachineContext();
   for (const pf of PROJECT_CONFIG_FILES) {
-    const abs = join6(absDir, pf.file);
+    const abs = join7(absDir, pf.file);
     if (!existsSync5(abs))
       continue;
     try {
@@ -7426,19 +7455,19 @@ async function syncProject(opts) {
     }
   }
   for (const ruleDir of [
-    { dir: join6(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
-    { dir: join6(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
-    { dir: join6(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
-    { dir: join6(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
-    { dir: join6(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
-    { dir: join6(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
-    { dir: join6(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
+    { dir: join7(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
+    { dir: join7(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
+    { dir: join7(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
+    { dir: join7(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
+    { dir: join7(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
+    { dir: join7(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
+    { dir: join7(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
   ]) {
     if (!existsSync5(ruleDir.dir))
       continue;
     const mdFiles = readdirSync(ruleDir.dir).filter((f) => f.endsWith(".md") || f.endsWith(".mdc"));
     for (const f of mdFiles) {
-      const abs = join6(ruleDir.dir, f);
+      const abs = join7(ruleDir.dir, f);
       const raw = readFileSync3(abs, "utf-8");
       const redacted = redactContent(raw, "markdown");
       const machineAware = templateizeMachineContent(redacted.content, machine);
@@ -7485,7 +7514,7 @@ async function syncKnown(opts = {}) {
       const extensions = known.rulesExtensions ?? [".md", ".mdc"];
       const ruleFiles = readdirSync(absDir).filter((f) => extensions.some((ext) => f.endsWith(ext)));
       for (const f of ruleFiles) {
-        const abs2 = join6(absDir, f);
+        const abs2 = join7(absDir, f);
         const targetPath = abs2.replace(home, "~");
         if (existingOutputOwners.has(normalizeTargetPath(targetPath)) || isKnownGeneratedTargetPath(targetPath)) {
           result.skipped.push(`${targetPath} (generated output)`);
@@ -7856,8 +7885,8 @@ var init_sync = __esm(() => {
 
 // src/lib/sync-dir.ts
 import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
-import { join as join7, relative as relative3 } from "path";
-import { homedir as homedir3 } from "os";
+import { join as join8, relative as relative3 } from "path";
+import { homedir as homedir4 } from "os";
 function shouldSkip(p) {
   return SKIP.some((s) => p.includes(s));
 }
@@ -7866,9 +7895,9 @@ async function syncFromDir(dir, opts = {}) {
   const absDir = expandPath(dir);
   if (!existsSync6(absDir))
     return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
-  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync2(absDir).map((f) => join7(absDir, f)).filter((f) => statSync2(f).isFile());
+  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync2(absDir).map((f) => join8(absDir, f)).filter((f) => statSync2(f).isFile());
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
-  const home = homedir3();
+  const home = homedir4();
   const allConfigs = await store.listConfigs();
   for (const file of files) {
     if (shouldSkip(file)) {
@@ -7902,7 +7931,7 @@ async function syncFromDir(dir, opts = {}) {
 }
 async function syncToDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
-  const home = homedir3();
+  const home = homedir4();
   const absDir = expandPath(dir);
   const normalized = dir.startsWith("~/") ? dir : absDir.replace(home, "~");
   const configs = (await store.listConfigs()).filter((c) => c.target_path && (c.target_path.startsWith(normalized) || c.target_path.startsWith(absDir)));
@@ -7926,7 +7955,7 @@ async function syncToDir(dir, opts = {}) {
 }
 function walkDir(dir, files = []) {
   for (const entry of readdirSync2(dir, { withFileTypes: true })) {
-    const full = join7(dir, entry.name);
+    const full = join8(dir, entry.name);
     if (shouldSkip(full))
       continue;
     if (entry.isDirectory())
@@ -7948,7 +7977,7 @@ var init_sync_dir = __esm(() => {
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "@hasna/instructions",
-    version: "0.4.33",
+    version: "0.4.34",
     description: "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
     type: "module",
     main: "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/instructions",
-  "version": "0.4.33",
+  "version": "0.4.34",
   "description": "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
   "type": "module",
   "main": "dist/index.js",