@mnemonik/cursor-hooks 0.7.7 → 0.7.9

package/dist/lib/mcpOwnership.d.ts

@@ -1,19 +0,0 @@
-export declare function isCursorMcpToolEvent(tool: string): boolean;
-/** Canonical server-facing name; call only after ownership has been proved. */
-export declare function canonicalMnemonikMcpTool(tool: string): string | null;
-export interface CursorMcpOwnershipInput {
-    tool: string;
-    command?: string;
-    url?: string;
-    cwd: string;
-    workspaceRoots?: string[];
-    hookServer: string;
-}
-/**
- * Prove that a globally observed Cursor MCP event belongs to Mnemonik.
- * A namespace is only a user-configurable server key, not authentication.
- * Without exact event URL/command metadata, that extracted key must be bound
- * to the configured Mnemonik endpoint in Cursor's MCP config. Missing,
- * unreadable, or conflicting bindings fail closed.
- */
-export declare function isMnemonikMcpCall(input: CursorMcpOwnershipInput): Promise<boolean>;

package/dist/lib/mcpOwnership.js

@@ -1,127 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-const BARE_MNEMONIK_TOOLS = new Set(['memory_tools', 'memory_discover', 'session_bootstrap']);
-const CURSOR_NAMESPACED_TOOL = /^(?:MCP:)?(.+)\.(memory_tools|memory_discover|session_bootstrap)$/;
-const CLAUDE_STYLE_NAMESPACED_TOOL = /^mcp__(.+)__(memory_tools|memory_discover|session_bootstrap)$/;
-export function isCursorMcpToolEvent(tool) {
-    return tool.startsWith('MCP:') || tool.startsWith('mcp__') || BARE_MNEMONIK_TOOLS.has(tool);
-}
-/** Canonical server-facing name; call only after ownership has been proved. */
-export function canonicalMnemonikMcpTool(tool) {
-    if (BARE_MNEMONIK_TOOLS.has(tool))
-        return tool;
-    const match = CURSOR_NAMESPACED_TOOL.exec(tool) ?? CLAUDE_STYLE_NAMESPACED_TOOL.exec(tool);
-    return match?.[2] ?? null;
-}
-function normalizeUrl(raw) {
-    try {
-        const url = new URL(raw);
-        url.hash = '';
-        if (url.pathname.length > 1)
-            url.pathname = url.pathname.replace(/\/+$/, '');
-        return url.toString();
-    }
-    catch {
-        return null;
-    }
-}
-function expectedMcpUrl(hookServer) {
-    return normalizeUrl(`${hookServer.replace(/\/+$/, '')}/mcp`);
-}
-function namespacedServerKey(tool) {
-    const match = CURSOR_NAMESPACED_TOOL.exec(tool) ?? CLAUDE_STYLE_NAMESPACED_TOOL.exec(tool);
-    return match?.[1]?.trim() || null;
-}
-function definitionTargetsMnemonik(definition, expectedUrl) {
-    for (const candidate of [definition.url, definition.serverUrl]) {
-        if (typeof candidate === 'string' && normalizeUrl(candidate) === expectedUrl)
-            return true;
-    }
-    // Older Cursor installations sometimes use mcp-remote over stdio. Accept
-    // that only when the exact expected endpoint is an argument to the known
-    // wrapper; a generic command or a coincidental bare tool name proves nothing.
-    if (typeof definition.command === 'string' &&
-        /^(?:npx(?:\.cmd)?|bunx|pnpx)$/.test(definition.command) &&
-        Array.isArray(definition.args) &&
-        definition.args.some((arg) => typeof arg === 'string' && /(?:^|\/)mcp-remote(?:@[^/]*)?$/.test(arg)) &&
-        definition.args.some((arg) => typeof arg === 'string' && normalizeUrl(arg) === expectedUrl)) {
-        return true;
-    }
-    return false;
-}
-async function readServerBinding(path, serverKey) {
-    try {
-        const parsed = JSON.parse(await readFile(path, 'utf8'));
-        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
-            return undefined;
-        const mcpServers = parsed.mcpServers;
-        if (!mcpServers || typeof mcpServers !== 'object' || Array.isArray(mcpServers)) {
-            return undefined;
-        }
-        if (!Object.prototype.hasOwnProperty.call(mcpServers, serverKey))
-            return undefined;
-        const definition = mcpServers[serverKey];
-        if (!definition || typeof definition !== 'object' || Array.isArray(definition)) {
-            return {};
-        }
-        return definition;
-    }
-    catch {
-        return undefined;
-    }
-}
-async function configuredServerKeyTargetsMnemonik(input, serverKey, expectedUrl) {
-    const serverKeys = new Set([serverKey]);
-    if (serverKey.startsWith('user-') && serverKey.length > 'user-'.length) {
-        // Older Cursor builds exposed their internal `user-<mcp.json key>` id in
-        // the command field. Current builds expose the config key itself.
-        serverKeys.add(serverKey.slice('user-'.length));
-    }
-    const roots = new Set([input.cwd, ...(input.workspaceRoots ?? [])]);
-    const paths = [...roots].map((root) => join(root, '.cursor', 'mcp.json'));
-    paths.push(join(homedir(), '.cursor', 'mcp.json'));
-    let found = false;
-    for (const path of new Set(paths)) {
-        for (const candidateKey of serverKeys) {
-            const definition = await readServerBinding(path, candidateKey);
-            if (definition === undefined)
-                continue;
-            found = true;
-            // Ambiguous project/user bindings fail closed. Cursor's precedence and
-            // payload have regressed more than once; a conflicting shadow key must not
-            // authorize forwarding another server's arguments or result.
-            if (!definitionTargetsMnemonik(definition, expectedUrl))
-                return false;
-        }
-    }
-    return found;
-}
-/**
- * Prove that a globally observed Cursor MCP event belongs to Mnemonik.
- * A namespace is only a user-configurable server key, not authentication.
- * Without exact event URL/command metadata, that extracted key must be bound
- * to the configured Mnemonik endpoint in Cursor's MCP config. Missing,
- * unreadable, or conflicting bindings fail closed.
- */
-export async function isMnemonikMcpCall(input) {
-    const serverKey = namespacedServerKey(input.tool);
-    if (!serverKey && !BARE_MNEMONIK_TOOLS.has(input.tool))
-        return false;
-    const expectedUrl = expectedMcpUrl(input.hookServer);
-    if (!expectedUrl)
-        return false;
-    // Cursor namespaces tools from a user-configurable server key, not an
-    // authenticated identity. When the event supplies stronger server metadata,
-    // it must agree even for a namespaced tool. Namespace is a compatibility
-    // fallback only for legacy payloads that carry neither field.
-    if (input.url !== undefined)
-        return normalizeUrl(input.url) === expectedUrl;
-    if (input.command) {
-        if (normalizeUrl(input.command) === expectedUrl)
-            return true;
-        return configuredServerKeyTargetsMnemonik(input, input.command, expectedUrl);
-    }
-    return serverKey ? configuredServerKeyTargetsMnemonik(input, serverKey, expectedUrl) : false;
-}
-//# sourceMappingURL=mcpOwnership.js.map

package/dist/lib/mcpOwnership.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcpOwnership.js","sourceRoot":"","sources":["../../src/lib/mcpOwnership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC9F,MAAM,sBAAsB,GAAG,mEAAmE,CAAC;AACnG,MAAM,4BAA4B,GAChC,+DAA+D,CAAC;AAElE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAsBD,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,OAAO,YAAY,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,yBAAyB,CAAC,UAA+B,EAAE,WAAmB;IACrF,KAAK,MAAM,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;IAC5F,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,8EAA8E;IAC9E,IACE,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QACtC,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACxD,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,IAAI,CAClB,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC/E;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,EAC3F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACnE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACrF,MAAM,UAAU,GAAI,MAAwB,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACnF,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,KAA8B,EAC9B,SAAiB,EACjB,WAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QACvE,yEAAyE;QACzE,kEAAkE;QAClE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAEnD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,YAAY,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC/D,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAS;YACvC,KAAK,GAAG,IAAI,CAAC;YACb,uEAAuE;YACvE,2EAA2E;YAC3E,6DAA6D;YAC7D,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA8B;IACpE,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAErE,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,8DAA8D;IAC9D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO,kCAAkC,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/F,CAAC"}