@mnemonik/cursor-hooks 0.7.5 → 0.7.7

package/dist/lib/mcpOwnership.js

@@ -0,0 +1,127 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const BARE_MNEMONIK_TOOLS = new Set(['memory_tools', 'memory_discover', 'session_bootstrap']);
+const CURSOR_NAMESPACED_TOOL = /^(?:MCP:)?(.+)\.(memory_tools|memory_discover|session_bootstrap)$/;
+const CLAUDE_STYLE_NAMESPACED_TOOL = /^mcp__(.+)__(memory_tools|memory_discover|session_bootstrap)$/;
+export function isCursorMcpToolEvent(tool) {
+    return tool.startsWith('MCP:') || tool.startsWith('mcp__') || BARE_MNEMONIK_TOOLS.has(tool);
+}
+/** Canonical server-facing name; call only after ownership has been proved. */
+export function canonicalMnemonikMcpTool(tool) {
+    if (BARE_MNEMONIK_TOOLS.has(tool))
+        return tool;
+    const match = CURSOR_NAMESPACED_TOOL.exec(tool) ?? CLAUDE_STYLE_NAMESPACED_TOOL.exec(tool);
+    return match?.[2] ?? null;
+}
+function normalizeUrl(raw) {
+    try {
+        const url = new URL(raw);
+        url.hash = '';
+        if (url.pathname.length > 1)
+            url.pathname = url.pathname.replace(/\/+$/, '');
+        return url.toString();
+    }
+    catch {
+        return null;
+    }
+}
+function expectedMcpUrl(hookServer) {
+    return normalizeUrl(`${hookServer.replace(/\/+$/, '')}/mcp`);
+}
+function namespacedServerKey(tool) {
+    const match = CURSOR_NAMESPACED_TOOL.exec(tool) ?? CLAUDE_STYLE_NAMESPACED_TOOL.exec(tool);
+    return match?.[1]?.trim() || null;
+}
+function definitionTargetsMnemonik(definition, expectedUrl) {
+    for (const candidate of [definition.url, definition.serverUrl]) {
+        if (typeof candidate === 'string' && normalizeUrl(candidate) === expectedUrl)
+            return true;
+    }
+    // Older Cursor installations sometimes use mcp-remote over stdio. Accept
+    // that only when the exact expected endpoint is an argument to the known
+    // wrapper; a generic command or a coincidental bare tool name proves nothing.
+    if (typeof definition.command === 'string' &&
+        /^(?:npx(?:\.cmd)?|bunx|pnpx)$/.test(definition.command) &&
+        Array.isArray(definition.args) &&
+        definition.args.some((arg) => typeof arg === 'string' && /(?:^|\/)mcp-remote(?:@[^/]*)?$/.test(arg)) &&
+        definition.args.some((arg) => typeof arg === 'string' && normalizeUrl(arg) === expectedUrl)) {
+        return true;
+    }
+    return false;
+}
+async function readServerBinding(path, serverKey) {
+    try {
+        const parsed = JSON.parse(await readFile(path, 'utf8'));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return undefined;
+        const mcpServers = parsed.mcpServers;
+        if (!mcpServers || typeof mcpServers !== 'object' || Array.isArray(mcpServers)) {
+            return undefined;
+        }
+        if (!Object.prototype.hasOwnProperty.call(mcpServers, serverKey))
+            return undefined;
+        const definition = mcpServers[serverKey];
+        if (!definition || typeof definition !== 'object' || Array.isArray(definition)) {
+            return {};
+        }
+        return definition;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function configuredServerKeyTargetsMnemonik(input, serverKey, expectedUrl) {
+    const serverKeys = new Set([serverKey]);
+    if (serverKey.startsWith('user-') && serverKey.length > 'user-'.length) {
+        // Older Cursor builds exposed their internal `user-<mcp.json key>` id in
+        // the command field. Current builds expose the config key itself.
+        serverKeys.add(serverKey.slice('user-'.length));
+    }
+    const roots = new Set([input.cwd, ...(input.workspaceRoots ?? [])]);
+    const paths = [...roots].map((root) => join(root, '.cursor', 'mcp.json'));
+    paths.push(join(homedir(), '.cursor', 'mcp.json'));
+    let found = false;
+    for (const path of new Set(paths)) {
+        for (const candidateKey of serverKeys) {
+            const definition = await readServerBinding(path, candidateKey);
+            if (definition === undefined)
+                continue;
+            found = true;
+            // Ambiguous project/user bindings fail closed. Cursor's precedence and
+            // payload have regressed more than once; a conflicting shadow key must not
+            // authorize forwarding another server's arguments or result.
+            if (!definitionTargetsMnemonik(definition, expectedUrl))
+                return false;
+        }
+    }
+    return found;
+}
+/**
+ * Prove that a globally observed Cursor MCP event belongs to Mnemonik.
+ * A namespace is only a user-configurable server key, not authentication.
+ * Without exact event URL/command metadata, that extracted key must be bound
+ * to the configured Mnemonik endpoint in Cursor's MCP config. Missing,
+ * unreadable, or conflicting bindings fail closed.
+ */
+export async function isMnemonikMcpCall(input) {
+    const serverKey = namespacedServerKey(input.tool);
+    if (!serverKey && !BARE_MNEMONIK_TOOLS.has(input.tool))
+        return false;
+    const expectedUrl = expectedMcpUrl(input.hookServer);
+    if (!expectedUrl)
+        return false;
+    // Cursor namespaces tools from a user-configurable server key, not an
+    // authenticated identity. When the event supplies stronger server metadata,
+    // it must agree even for a namespaced tool. Namespace is a compatibility
+    // fallback only for legacy payloads that carry neither field.
+    if (input.url !== undefined)
+        return normalizeUrl(input.url) === expectedUrl;
+    if (input.command) {
+        if (normalizeUrl(input.command) === expectedUrl)
+            return true;
+        return configuredServerKeyTargetsMnemonik(input, input.command, expectedUrl);
+    }
+    return serverKey ? configuredServerKeyTargetsMnemonik(input, serverKey, expectedUrl) : false;
+}
+//# sourceMappingURL=mcpOwnership.js.map

package/dist/lib/mcpOwnership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpOwnership.js","sourceRoot":"","sources":["../../src/lib/mcpOwnership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC9F,MAAM,sBAAsB,GAAG,mEAAmE,CAAC;AACnG,MAAM,4BAA4B,GAChC,+DAA+D,CAAC;AAElE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAsBD,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,OAAO,YAAY,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,yBAAyB,CAAC,UAA+B,EAAE,WAAmB;IACrF,KAAK,MAAM,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;IAC5F,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,8EAA8E;IAC9E,IACE,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QACtC,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACxD,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,IAAI,CAClB,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC/E;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,EAC3F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACnE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACrF,MAAM,UAAU,GAAI,MAAwB,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACnF,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,KAA8B,EAC9B,SAAiB,EACjB,WAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QACvE,yEAAyE;QACzE,kEAAkE;QAClE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAEnD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC/D,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAS;YACvC,KAAK,GAAG,IAAI,CAAC;YACb,uEAAuE;YACvE,2EAA2E;YAC3E,6DAA6D;YAC7D,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA8B;IACpE,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAErE,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,8DAA8D;IAC9D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO,kCAAkC,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/F,CAAC"}

package/dist/lib/retiredCursorRule.d.ts

@@ -0,0 +1,9 @@
+export declare const RETIRED_CURSOR_RULE_PATH: string;
+export type RetiredRuleMigration = 'absent' | 'preserved' | 'removed' | 'failed';
+export declare function isRetiredMnemonikManagedRule(content: string): boolean;
+/**
+ * Remove only an exact historical server-generated Cursor rule. Modified and
+ * user-authored files are preserved; unreadable/unremovable files report a
+ * distinct failure so the explicit installer cannot claim a clean migration.
+ */
+export declare function migrateRetiredCursorRule(cwd: string): Promise<RetiredRuleMigration>;

package/dist/lib/retiredCursorRule.js

@@ -0,0 +1,87 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { atomicRemoveText } from './installerSupport.js';
+export const RETIRED_CURSOR_RULE_PATH = join('.cursor', 'rules', 'memory_tools.mdc');
+function historicalRuleSuffix({ mcpServer, codeSearch, unlockTool, }) {
+    return [
+        ...(mcpServer
+            ? [
+                'mcpServer: user-mnemonik',
+                '',
+                'Pass cwd verbatim in every call; never search for it.',
+                'CallMcpTool server is mcpServer (Cursor prefixed internal id), not the mcp.json key — e.g. user-mnemonik not mnemonik.',
+                `Tier-1 toolNames on that server: memory_tools, memory_discover, session_bootstrap${unlockTool ? ', __unlock_memory_tools__' : ''}.`,
+            ]
+            : ['', 'Pass cwd verbatim in every call; never search for it.']),
+        'memory_search, file_context, checkpoint run INSIDE memory_tools — async () => mnemonik.X({...}) — never as top-level tools (a direct call fails).',
+        "To use memory_tools, or any mnemonik.* method you don't already know: call memory_discover first for the exact method, schema, and runnable example.",
+        '',
+        unlockTool
+            ? '- Start: __unlock_memory_tools__, then session_bootstrap({cwd}) once — skip if context already has a "Mnemonik project context (cached" block.'
+            : '- Start: session_bootstrap({cwd}) once — skip if context already has a "Mnemonik project context (cached" block.',
+        '- Before non-trivially editing a file: mnemonik.file_context({cwd, filePaths:[...]}).',
+        "- After meaningful changes / before saying you're done: mnemonik.checkpoint({cwd, summary}).",
+        '- Unsure of a project fact or past decision: mnemonik.memory_search({cwd, query}).',
+        ...(codeSearch
+            ? [
+                "- For where-is-X code queries, mnemonik.code_search({cwd, query}) adds what Cursor's built-in search cannot: forbidden/disputed-pattern warnings, drift flags, and cross-session project memory — use it when correctness or project history matters, not just location.",
+            ]
+            : []),
+        '',
+    ].join('\n');
+}
+// These are the four byte-exact static suffixes emitted by the retired server
+// renderer across commits 4e1d033e, ca2d1c72, 89a5c4ff, and 3d57f946. The
+// project name/id/cwd header fields were dynamic; every other byte must match a
+// known renderer version or the file is treated as user-authored and preserved.
+const HISTORICAL_RULE_SUFFIXES = new Set([
+    historicalRuleSuffix({ mcpServer: false, codeSearch: false, unlockTool: true }),
+    historicalRuleSuffix({ mcpServer: true, codeSearch: false, unlockTool: true }),
+    historicalRuleSuffix({ mcpServer: true, codeSearch: true, unlockTool: true }),
+    historicalRuleSuffix({ mcpServer: true, codeSearch: true, unlockTool: false }),
+]);
+function hasGeneratedField(line, prefix) {
+    return line?.startsWith(prefix) === true && line.length > prefix.length;
+}
+export function isRetiredMnemonikManagedRule(content) {
+    const lines = content.split('\n');
+    if (lines[0] !== '---' ||
+        lines[1] !== 'alwaysApply: true' ||
+        lines[2] !== '---' ||
+        lines[3] !== '# Mnemonik Memory Tools' ||
+        !hasGeneratedField(lines[4], 'project: ') ||
+        !hasGeneratedField(lines[5], 'projectId: ') ||
+        !hasGeneratedField(lines[6], 'cwd: ')) {
+        return false;
+    }
+    return HISTORICAL_RULE_SUFFIXES.has(lines.slice(7).join('\n'));
+}
+/**
+ * Remove only an exact historical server-generated Cursor rule. Modified and
+ * user-authored files are preserved; unreadable/unremovable files report a
+ * distinct failure so the explicit installer cannot claim a clean migration.
+ */
+export async function migrateRetiredCursorRule(cwd) {
+    const path = join(cwd, RETIRED_CURSOR_RULE_PATH);
+    let content;
+    try {
+        content = await readFile(path, 'utf8');
+    }
+    catch (err) {
+        if (err && typeof err === 'object' && 'code' in err && err.code === 'ENOENT')
+            return 'absent';
+        return 'failed';
+    }
+    if (!isRetiredMnemonikManagedRule(content))
+        return 'preserved';
+    try {
+        await atomicRemoveText(path, content);
+        return 'removed';
+    }
+    catch (err) {
+        if (err && typeof err === 'object' && 'code' in err && err.code === 'ENOENT')
+            return 'absent';
+        return 'failed';
+    }
+}
+//# sourceMappingURL=retiredCursorRule.js.map

package/dist/lib/retiredCursorRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retiredCursorRule.js","sourceRoot":"","sources":["../../src/lib/retiredCursorRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AASrF,SAAS,oBAAoB,CAAC,EAC5B,SAAS,EACT,UAAU,EACV,UAAU,GACY;IACtB,OAAO;QACL,GAAG,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,0BAA0B;gBAC1B,EAAE;gBACF,uDAAuD;gBACvD,wHAAwH;gBACxH,oFAAoF,UAAU,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,GAAG;aACrI;YACH,CAAC,CAAC,CAAC,EAAE,EAAE,uDAAuD,CAAC,CAAC;QAClE,mJAAmJ;QACnJ,sJAAsJ;QACtJ,EAAE;QACF,UAAU;YACR,CAAC,CAAC,gJAAgJ;YAClJ,CAAC,CAAC,kHAAkH;QACtH,uFAAuF;QACvF,8FAA8F;QAC9F,oFAAoF;QACpF,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC;gBACE,0QAA0Q;aAC3Q;YACH,CAAC,CAAC,EAAE,CAAC;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,gFAAgF;AAChF,gFAAgF;AAChF,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC/E,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9E,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7E,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;CAC/E,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,IAAwB,EAAE,MAAc;IACjE,OAAO,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IACE,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,mBAAmB;QAChC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,yBAAyB;QACtC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;QACzC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;QAC3C,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACjD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9F,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/lib/types.d.ts

@@ -22,13 +22,24 @@ export interface CursorHookInput {
     messages_to_compact?: number;
     is_first_compaction?: boolean;
     tool_name?: string;
-    tool_input?: Record<string, unknown>;
+    tool_use_id?: string;
+    /** Object for tool hooks; JSON string for Cursor's documented MCP hook payloads. */
+    tool_input?: Record<string, unknown> | string;
     tool_output?: unknown;
     command?: string;
+    /** Remote MCP endpoint on Cursor versions that populate the documented field. */
+    url?: string;
     mcp_tool?: string;
     mcp_args?: Record<string, unknown>;
     mcp_result?: unknown;
+    /** JSON-encoded MCP result in Cursor's documented afterMCPExecution payload. */
+    result_json?: string;
     file_path?: string;
+    /** afterFileEdit only. That event deliberately has no tool_use_id. */
+    edits?: Array<{
+        old_string?: string;
+        new_string?: string;
+    }>;
     followup_count?: number;
     /** Stop-loop counter Cursor actually sends (docs say followup_count; real payloads carry loop_count). */
     loop_count?: number;
@@ -162,16 +173,6 @@ export interface InjectionsResponse {
      * MNEMONIK_CURSOR_INJECTION_CHANNEL so a rollback needs no republish.
      */
     deliveryChannel?: 'legacy' | 'agent_message';
-    /**
-     * Files the server asks the hook to write to the workspace, idempotently
-     * (skip-if-unchanged). Currently only the Cursor memory-tools rule file on
-     * SessionStart. Independent of `injections` — present even when `injections`
-     * is empty, which is the common Cursor case.
-     */
-    filesToWrite?: Array<{
-        path: string;
-        content: string;
-    }>;
 }
 /**
  * Server response from /api/v1/hooks/jit — JIT Knowledge Injector gate

package/dist/lib/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAwNA,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAyNA,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemonik/cursor-hooks",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "description": "Cursor IDE hooks for Mnemonik memory awareness and host-side grounding gates. Hooks only: does not install skills, rules, AGENTS.md, .mnemonik.json, or MCP config.",
   "type": "module",
   "bin": {

package/dist/lib/files.d.ts

@@ -1,20 +0,0 @@
-export interface ProjectFile {
-    path: string;
-    content: string;
-}
-export interface WriteProjectFilesResult {
-    written: string[];
-    skipped: string[];
-    rejected: string[];
-}
-/**
- * Write server-provided files into the workspace idempotently.
- *
- * For each entry: resolve under `cwd`, refuse anything that escapes `cwd`
- * (absolute path or a `..` traversal), skip the write when the on-disk content
- * already matches byte-for-byte (no churn, no mtime bump — keeps git clean
- * across sessions), else create parent dirs and write. Fail-open per file: a
- * single bad/locked path never aborts the others, and the caller wraps the whole
- * call so a write error never breaks the hook session.
- */
-export declare function writeProjectFiles(cwd: string, files: ProjectFile[]): Promise<WriteProjectFilesResult>;

package/dist/lib/files.js

@@ -1,52 +0,0 @@
-import { mkdir, readFile, writeFile } from 'node:fs/promises';
-import { dirname, isAbsolute, relative, resolve } from 'node:path';
-/**
- * Write server-provided files into the workspace idempotently.
- *
- * For each entry: resolve under `cwd`, refuse anything that escapes `cwd`
- * (absolute path or a `..` traversal), skip the write when the on-disk content
- * already matches byte-for-byte (no churn, no mtime bump — keeps git clean
- * across sessions), else create parent dirs and write. Fail-open per file: a
- * single bad/locked path never aborts the others, and the caller wraps the whole
- * call so a write error never breaks the hook session.
- */
-export async function writeProjectFiles(cwd, files) {
-    const result = { written: [], skipped: [], rejected: [] };
-    for (const file of files) {
-        const relPath = file.path;
-        // Reject absolute or empty paths outright — the server only ever asks for
-        // workspace-relative paths.
-        if (!relPath || isAbsolute(relPath)) {
-            result.rejected.push(relPath);
-            continue;
-        }
-        const target = resolve(cwd, relPath);
-        const rel = relative(cwd, target);
-        // Refuse anything that resolves to cwd itself or climbs out of it.
-        if (rel === '' || rel.startsWith('..') || isAbsolute(rel)) {
-            result.rejected.push(relPath);
-            continue;
-        }
-        try {
-            let existing = null;
-            try {
-                existing = await readFile(target, 'utf8');
-            }
-            catch {
-                existing = null; // missing/unreadable → (over)write
-            }
-            if (existing === file.content) {
-                result.skipped.push(relPath);
-                continue;
-            }
-            await mkdir(dirname(target), { recursive: true });
-            await writeFile(target, file.content, 'utf8');
-            result.written.push(relPath);
-        }
-        catch {
-            result.rejected.push(relPath);
-        }
-    }
-    return result;
-}
-//# sourceMappingURL=files.js.map

package/dist/lib/files.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/lib/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAanE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,KAAoB;IAEpB,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEnF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,0EAA0E;QAC1E,4BAA4B;QAC5B,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,mEAAmE;QACnE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC,CAAC,mCAAmC;YACtD,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}