@massa-ai/cursor-plugin 1.7.1 → 1.8.0

package/.cursor-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "massa-ai",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "massa-ai — semantic code search, memory, and context compression for Cursor"
 }

package/hooks/massa-ai-hook

@@ -29,6 +29,7 @@
 
 import { spawnSync } from "child_process";
 import { readFileSync, writeFileSync, mkdirSync, existsSync, fstatSync } from "fs";
+import { homedir } from "os";
 import path from "path";
 
 // ── Event type mapping ──────────────────────────────────────────────────────
@@ -132,6 +133,60 @@ export function readStdin(): string {
   }
 }
 
+// ── API key resolution (SEC-06) ─────────────────────────────────────────────
+
+/**
+ * Path to the runtime config file, resolved the same way
+ * `packages/shared/src/config/xdg.ts` resolves it: `XDG_CONFIG_HOME` when set
+ * and non-blank, else `~/.config`.
+ *
+ * Duplicated rather than imported on purpose. This binary's entire dependency
+ * surface is `child_process`/`fs`/`os`/`path`; pulling in `@massa-ai/shared`
+ * would drag the config loader, its Prisma-adjacent transitive graph, and its
+ * startup cost into a process that runs on every single tool call and is
+ * budgeted in milliseconds. The duplication is nine lines and is pinned by
+ * tests on both sides.
+ */
+export function getHookConfigPath(): string {
+  const xdg = process.env.XDG_CONFIG_HOME;
+  const base = xdg && xdg.trim() ? xdg : path.join(homedir(), ".config");
+  return path.join(base, "massa-ai", "config.json");
+}
+
+/**
+ * Resolve the Tools API key: `MASSA_AI_API_KEY` → `config.json`
+ * `security.apiKey` → none. Returns "" when no key is available.
+ *
+ * SEC-01 auto-provisions the key into config.json on first API start, and this
+ * binary never runs the `env.ts` seeding that puts it in the environment for
+ * everything else — so without reading the file it would send unauthenticated
+ * POSTs forever. Because the hook silent-degrades by contract, that failure
+ * has no symptom: observation capture just stops.
+ *
+ * Whitespace-only values count as unset, matching `usable()` in
+ * `packages/shared/src/config/api-key.ts`. Every failure mode (missing file,
+ * unreadable, malformed JSON, wrong shape) degrades to "" rather than throwing:
+ * a hook must never block the agent.
+ *
+ * Deliberately not memoised. A hook process handles exactly one event and
+ * exits, so there is no second call to amortise, and a module-level cache would
+ * make the resolution untestable without a reset seam.
+ */
+export function resolveHookApiKey(): string {
+  const fromEnv = process.env.MASSA_AI_API_KEY;
+  if (fromEnv && fromEnv.trim()) return fromEnv.trim();
+
+  try {
+    const parsed = JSON.parse(readFileSync(getHookConfigPath(), "utf8"));
+    const stored = parsed?.security?.apiKey;
+    if (typeof stored === "string" && stored.trim()) return stored.trim();
+  } catch {
+    // Missing, unreadable, or malformed config → no key (silent-degrade).
+  }
+
+  return "";
+}
+
 // ── POST helper ─────────────────────────────────────────────────────────────
 
 export function postObservation(
@@ -149,7 +204,7 @@ export function postObservation(
     const headers: Record<string, string> = {
       "Content-Type": "application/json",
     };
-    const apiKey = process.env.MASSA_AI_API_KEY;
+    const apiKey = resolveHookApiKey();
     if (apiKey) {
       headers["x-api-key"] = apiKey;
     }

package/install.sh

@@ -57,7 +57,18 @@ if [[ "$SCOPE" == "project" ]]; then
 else
   CURSOR_DIR="$HOME/.cursor"
 fi
-PLUGIN_DIR="$CURSOR_DIR/plugins/massa-ai"
+# Cursor discovers locally-installed plugins under plugins/local/<name>/, not
+# plugins/<name>/. Installing to the latter is why massa-ai never appeared in
+# Cursor's plugin list even though every file was written correctly.
+#
+# UNVERIFIED against a running Cursor.app — this path comes from Cursor's
+# plugin documentation, not from an observed load, because Cursor is not
+# installed on the machine this was developed on. Treat it as lower confidence
+# than the Claude/Codex routes, which were verified end-to-end.
+PLUGIN_DIR="$CURSOR_DIR/plugins/local/massa-ai"
+# Pre-fix installs wrote here; removed on install so the two cannot both be
+# discovered and register duplicate hooks.
+LEGACY_PLUGIN_DIR="$CURSOR_DIR/plugins/massa-ai"
 HOOKS_JSON="$CURSOR_DIR/hooks.json"
 
 # The 7 Cursor events → binary subcommands. The command path uses the
@@ -294,6 +305,10 @@ if [[ "$UNINSTALL" -eq 1 ]]; then
     echo "  - removed massa-ai hook entries from $HOOKS_JSON"
   fi
   # Remove plugin directory
+  if [[ -d "$LEGACY_PLUGIN_DIR" ]]; then
+    rm -rf "$LEGACY_PLUGIN_DIR"
+    echo "  - removed $LEGACY_PLUGIN_DIR (pre-fix location)"
+  fi
   if [[ -d "$PLUGIN_DIR" ]]; then
     rm -rf "$PLUGIN_DIR"
     echo "  - removed $PLUGIN_DIR"
@@ -305,6 +320,13 @@ fi
 
 # ── Install ──────────────────────────────────────────────────────────────────
 vecho "Installing massa-ai Cursor plugin to: $PLUGIN_DIR"
+# Migration: a pre-fix install left a copy at plugins/massa-ai. Leaving it in
+# place risks Cursor discovering both and firing every hook twice, so it goes
+# before the new location is written.
+if [[ -d "$LEGACY_PLUGIN_DIR" ]]; then
+  rm -rf "$LEGACY_PLUGIN_DIR"
+  echo -e "  - removed pre-fix plugin copy at $LEGACY_PLUGIN_DIR"
+fi
 mkdir -p "$PLUGIN_DIR/.cursor-plugin" "$PLUGIN_DIR/skills" "$PLUGIN_DIR/hooks" "$PLUGIN_DIR/agents"
 
 # Copy manifest

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massa-ai/cursor-plugin",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "massa-ai plugin for Cursor — semantic code search, memory, and context compression",
   "files": [
     "agents",