@mnemonik/cursor-hooks 0.1.0

package/dist/lib/shellTokens.js

@@ -0,0 +1,32 @@
+/**
+ * Irreducible deny-floor for catastrophic, irreversible commands.
+ * Kept in sync with @mnemonik/codex-hooks/src/lib/shellTokens.ts and
+ * @mnemonik/claude-code-hooks/src/lib/shellTokens.ts — see those files
+ * for the full rationale.
+ *
+ * Phase 1 / 0.1.0 of cursor-hooks: this is the ONE place the dispatcher
+ * does local pattern matching. Every other policy decision lives behind
+ * /api/v1/hooks/policy-reminder (Bash) or /api/v1/hooks/mcp-precheck (MCP).
+ */
+export const IRREDUCIBLE_DENY = [
+    {
+        name: 'rm-rf-root-or-home',
+        pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f?[a-zA-Z]*\s+(?:\/|~|\$HOME)(?![A-Za-z0-9/_-])/,
+    },
+    {
+        name: 'dd-of-whole-disk',
+        pattern: /\bdd\b[^|;&]*\bof=\/dev\/(?:sd[a-z]|nvme\d+n\d+|hd[a-z]|vd[a-z])(?![A-Za-z0-9])/,
+    },
+    {
+        name: 'mkfs-whole-disk',
+        pattern: /\bmkfs(?:\.[a-z0-9]+)?\b[^|;&]*?\s\/dev\/(?:sd[a-z]|nvme\d+n\d+|hd[a-z]|vd[a-z])(?![A-Za-z0-9])/,
+    },
+];
+export function matchIrreducibleDeny(command) {
+    for (const { name, pattern } of IRREDUCIBLE_DENY) {
+        if (pattern.test(command))
+            return name;
+    }
+    return null;
+}
+//# sourceMappingURL=shellTokens.js.map

package/dist/lib/shellTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellTokens.js","sourceRoot":"","sources":["../../src/lib/shellTokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAqD;IAChF;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,4EAA4E;KACtF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,iFAAiF;KAC3F;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EACL,iGAAiG;KACpG;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,gBAAgB,EAAE,CAAC;QACjD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/types.d.ts

@@ -0,0 +1,125 @@
+export type CursorHookEvent = 'sessionStart' | 'beforeSubmitPrompt' | 'preToolUse' | 'postToolUse' | 'beforeShellExecution' | 'beforeMCPExecution' | 'afterMCPExecution' | 'afterFileEdit' | 'stop' | 'subagentStart' | 'subagentStop' | 'preCompact';
+/**
+ * Stdin payload Cursor delivers to a hook. Per cursor.com/docs/hooks (verified
+ * 2026-05-12). Common fields appear on every event; per-event fields are
+ * union-typed and accessed by the dispatcher branch that recognises them.
+ */
+export interface CursorHookInput {
+    conversation_id?: string;
+    generation_id?: string;
+    hook_event_name: CursorHookEvent;
+    model?: string;
+    cursor_version?: string;
+    workspace_roots?: string[];
+    user_email?: string;
+    transcript_path?: string;
+    cwd?: string;
+    prompt?: string;
+    context_usage_percent?: number;
+    messages_to_compact?: number;
+    is_first_compaction?: boolean;
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+    tool_output?: unknown;
+    command?: string;
+    mcp_tool?: string;
+    mcp_args?: Record<string, unknown>;
+    mcp_result?: unknown;
+    file_path?: string;
+    followup_count?: number;
+    subagent_id?: string;
+    subagent_type?: string;
+    task?: string;
+    parent_conversation_id?: string;
+    tool_call_id?: string;
+    subagent_model?: string;
+    is_parallel_worker?: boolean;
+    git_branch?: string;
+    status?: string;
+    duration_ms?: number;
+}
+/**
+ * Cursor accepts a small family of output shapes depending on the event.
+ * Rather than encode each precisely, we expose a permissive union and rely
+ * on the output builders in `cursorOutput.ts` to produce well-formed shapes
+ * per event.
+ */
+export interface CursorHookOutput {
+    permission?: 'allow' | 'deny' | 'ask';
+    user_message?: string;
+    agent_message?: string;
+    followup_message?: string;
+    additional_context?: string;
+    continue?: boolean;
+    env?: Record<string, string>;
+}
+export type BypassType = 'typo' | 'formatting' | 'regenerated' | 'already_grounded' | 'other';
+export interface BypassEnvelope {
+    active: boolean;
+    type: BypassType | null;
+    detail: string | null;
+    invalidReason: string | null;
+}
+/**
+ * Server snapshot response (existing /api/v1/hooks/snapshot endpoint —
+ * host-agnostic). Mirrors codex-hooks types.
+ */
+export interface SnapshotResponse {
+    ok: boolean;
+    reason?: 'unauthorized' | 'no_project' | 'no_active_session';
+    coveredFiles: string[];
+    editedFiles: string[];
+    policies?: {
+        forbiddenCommand: Array<{
+            pattern: string;
+            description: string;
+        }>;
+        mustConfirm: Array<{
+            pattern: string;
+            description: string;
+            replacement: string | null;
+        }>;
+    };
+    sessionsMerged: number;
+    now: number;
+}
+export interface HookContextResponse {
+    ok: boolean;
+    reason?: 'unauthorized' | 'no_project' | 'invalid' | 'unavailable';
+    additionalContext?: string;
+    systemMessage?: string;
+    continuationReason?: string;
+    contextBytes?: number;
+}
+export interface PolicyReminderResponse {
+    ok: boolean;
+    reason?: 'unauthorized' | 'no_project' | 'no_context' | 'lookup_failed';
+    policies: Array<{
+        id: string;
+        kind: string;
+        pattern: string;
+        description: string | null;
+        replacement: string | null;
+    }>;
+}
+/**
+ * Response from /api/v1/hooks/mcp-precheck (new in Phase 1).
+ */
+export interface McpPrecheckResponse {
+    ok: boolean;
+    verdict: 'allow' | 'deny' | 'ask';
+    reason: string | null;
+    agent_message: string | null;
+    cacheHint?: {
+        ttlSeconds: number;
+    } | null;
+}
+/**
+ * Minimal config — apiKey + server only. Gate enforcement modes are
+ * package-level constants in `behavior.ts`, NOT user config.
+ */
+export interface HookConfig {
+    apiKey: string | null;
+    server: string;
+}
+export declare const DEFAULT_SERVER = "https://api.mnemonik.dev";

package/dist/lib/types.js

@@ -0,0 +1,2 @@
+export const DEFAULT_SERVER = 'https://api.mnemonik.dev';
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAiJA,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@mnemonik/cursor-hooks",
+  "version": "0.1.0",
+  "description": "Cursor IDE hooks for Mnemonik memory awareness and host-side grounding gates. Hooks only: does not install skills, rules, AGENTS.md, .mnemonik.json, or MCP config.",
+  "type": "module",
+  "bin": {
+    "mnemonik-cursor-hooks": "dist/install.js"
+  },
+  "main": "dist/install.js",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "mnemonik",
+    "cursor",
+    "hooks"
+  ],
+  "license": "MIT",
+  "devDependencies": {
+    "@types/node": "^20.19.40",
+    "typescript": "^5.3.3",
+    "vitest": "^4.1.5"
+  }
+}