@ory/cursor 1.0.1 → 1.2.0

package/README.md

@@ -94,7 +94,7 @@ Everything the plugin does is observable out of the box:
 Once connected, the deny posture lives on the Ory project: when the observe-mode activity looks right, an admin promotes it to **enforce** in the **Ory Console** (Agent Security). Every session reads that posture live, so nothing has to be reinstalled.
 
 ```bash
-npx -y -p @ory/cursor ory-cursor permissions   # what the project grants, and the live mode
+npx -y -p @ory/cursor ory-cursor permissions   # native allowed/blocked state and live mode
 ```
 
 Then a denied tool is actually blocked (`preToolUse` returns `permission: "deny"`) and Cursor shows why.
@@ -136,7 +136,7 @@ npx -y -p @ory/cursor ory-cursor configure \
 
 **Ory Network or OEL.** Either works. For an Ory Network project the URL is `https://<slug>.projects.oryapis.com`; for a self-hosted **Ory Enterprise License** deployment, point `--project-url` at that deployment's base URL and use the sign-in client id from its Agent Security configuration. Everything downstream — sign-in, checks, delegation — is identical.
 
-**There is nothing else for you to create.** The sign-in client, the permission model, the per-tool grants and blocks, and the observe/enforce posture are all provisioned in the Console by someone with project access. At runtime the plugin only *reads* permissions — it has no write path into your project, which is why installing it needs no workspace privilege. Each Cursor session registers its own identity automatically on first use.
+**There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP grants, and observe/enforce posture are provisioned in the Console by someone with project access. At runtime the plugin only *reads* permissions, so installing it needs no workspace privilege. Each Cursor session registers its own identity automatically on first use.
 
 Sign-in runs at the start of every session and never blocks — a declined, skipped, or timed-out login simply leaves that session without a user identity.
 
@@ -146,8 +146,8 @@ Settings are saved to `~/.config/ory-agent-plugins/config.json` and shared acros
 
 ```
 ory-cursor install | uninstall        Install (add --project-url to also connect Agent Security) / remove
-ory-cursor status                     Show configuration, identities, permission coverage, recent activity
-ory-cursor permissions <cmd>          status  (read-only; grants + posture live in the Ory Console)
+ory-cursor status                     Show configuration, identities, native tool access, recent activity
+ory-cursor permissions <cmd>          status  (read-only; blocks + posture live in the Ory Console)
 ory-cursor configure <flags>          Connect a project (--project-url) or --disconnect
 ory-cursor agent <status|unregister>  Manage Cursor's own auto-created identity
 ory-cursor local <up|down|status|…>   Run / manage a local Ory in Docker

package/dist/cli/main.d.ts

@@ -6,7 +6,7 @@
  *   npx -y -p @ory/cursor ory-cursor install [--project]   Install hooks/MCP/rules
  *   npx -y -p @ory/cursor ory-cursor uninstall [--project] Remove them
  *   npx -y -p @ory/cursor ory-cursor configure             Set Ory project URL / API key
- *   npx -y -p @ory/cursor ory-cursor permissions           Show permission mode and per-tool coverage
+ *   npx -y -p @ory/cursor ory-cursor permissions           Show mode and native allowed/blocked state
  *   npx -y -p @ory/cursor ory-cursor status                Show plugin status
  *   npx -y -p @ory/cursor ory-cursor local <cmd>           Manage the local Ory stack
  */

package/dist/cli/main.js

@@ -7,7 +7,7 @@
  *   npx -y -p @ory/cursor ory-cursor install [--project]   Install hooks/MCP/rules
  *   npx -y -p @ory/cursor ory-cursor uninstall [--project] Remove them
  *   npx -y -p @ory/cursor ory-cursor configure             Set Ory project URL / API key
- *   npx -y -p @ory/cursor ory-cursor permissions           Show permission mode and per-tool coverage
+ *   npx -y -p @ory/cursor ory-cursor permissions           Show mode and native allowed/blocked state
  *   npx -y -p @ory/cursor ory-cursor status                Show plugin status
  *   npx -y -p @ory/cursor ory-cursor local <cmd>           Manage the local Ory stack
  */
@@ -149,7 +149,7 @@ Commands:
   uninstall [--project] Remove them
   configure             Set or view Ory project URL and API key
   agent <cmd>           Manage the agent's OAuth2 (DCR) identity (status, unregister)
-  permissions           Show the live permission mode and per-tool coverage
+  permissions           Show live mode and native allowed/blocked state
   status                Show plugin status and configuration
   watch [--json] [--lines <count>]
                         Follow the live activity/debug log

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ory/cursor",
-  "version": "1.0.1",
+  "version": "1.2.0",
   "description": "Ory plugin for Cursor: scaffolding rules, a local Ory instance, and authentication, authorization, and audit for every tool call",
   "license": "Apache-2.0",
   "homepage": "https://github.com/ory/ory-agent-plugins/tree/main/packages/cursor",
@@ -57,7 +57,7 @@
   ],
   "dependencies": {
     "reova": "^0.7.0",
-    "@ory/argus": "1.0.1"
+    "@ory/argus": "1.2.0"
   },
   "devDependencies": {
     "typescript": "^6.0.2",