@ory/cursor 1.2.4 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +4 -4
  2. package/dist/cli/main.js +1 -1
  3. package/package.json +3 -4
package/README.md CHANGED
@@ -107,7 +107,7 @@ Then a denied tool is actually blocked (`preToolUse` returns `permission: "deny"
107
107
  | `preToolUse` | The permission gate — blocks with `permission: "deny"` in enforce mode |
108
108
  | `postToolUse` / `postToolUseFailure` | Record `tool.complete` / `tool.fail` activity |
109
109
  | `beforeSubmitPrompt` | Record `user.prompt` activity (never blocks the human) |
110
- | `subagentStart` / `subagentStop` | Sub-agent DCR identity + delegation activity |
110
+ | `subagentStart` / `subagentStop` | Spawn-scoped child Talos identity + delegation activity |
111
111
 
112
112
  The fine-grained `beforeShellExecution` / `beforeMCPExecution` / `beforeReadFile`
113
113
  hooks are **not** registered: `preToolUse` already gates those categories, so
@@ -136,7 +136,7 @@ npx -y -p @ory/cursor ory-cursor configure \
136
136
 
137
137
  **Ory Network or OEL.** Either works. For an Ory Network project the URL is `https://<slug>.projects.oryapis.com`; for a self-hosted **Ory Enterprise License** deployment, point `--project-url` at that deployment's base URL and use the sign-in client id from its Agent Security configuration. Everything downstream — sign-in, checks, delegation — is identical.
138
138
 
139
- **There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP grants, and observe/enforce posture are provisioned in the Console by someone with project access. At runtime the plugin only *reads* permissions, so installing it needs no workspace privilege. Each Cursor session registers its own identity automatically on first use.
139
+ **There is nothing else for you to create.** The sign-in client, permission model, native-tool blocks, MCP grants, and observe/enforce posture are provisioned in the Console by someone with project access. At session start the plugin loads or enrolls Cursor's Talos runtime credential in the OS credential store; tool paths only read it. Installing needs no workspace privilege.
140
140
 
141
141
  Sign-in runs at the start of every session and never blocks — a declined, skipped, or timed-out login simply leaves that session without a user identity.
142
142
 
@@ -149,7 +149,7 @@ ory-cursor install | uninstall Install (add --project-url to also connect
149
149
  ory-cursor status Show configuration, identities, native tool access, recent activity
150
150
  ory-cursor permissions <cmd> status (read-only; blocks + posture live in the Ory Console)
151
151
  ory-cursor configure <flags> Connect a project (--project-url) or --disconnect
152
- ory-cursor agent <status|unregister> Manage Cursor's own auto-created identity
152
+ ory-cursor agent <status|unregister> Inspect runtime status / clear legacy OAuth state
153
153
  ory-cursor local <up|down|status|…> Run / manage a local Ory in Docker
154
154
  ory-cursor version Print plugin, core, and Node versions (--json for machine-readable)
155
155
  ```
@@ -168,7 +168,7 @@ Removes only the Ory entries from `hooks.json` / `mcp.json` and the Ory rules, a
168
168
 
169
169
  - **Hooks didn't take effect** — restart Cursor or reload the window so it re-reads `hooks.json`.
170
170
  - **`local-up` fails** — make sure Docker is running and ports `4000`, `4100`, `4455`, and `16686` are free.
171
- - **Browser sign-in loops** (after connecting) — reset with `ory-cursor agent unregister` and try again.
171
+ - **Browser sign-in loops** (after connecting) — confirm the reserved login client has all four documented loopback redirect URIs; `agent unregister` only clears legacy agent OAuth state.
172
172
  - **Running an older CLI than expected** — `npx -p @ory/cursor` (no version pin) reuses a previously-downloaded copy instead of re-resolving to the latest. The install banner prints the running version; confirm it with `npx -y -p @ory/cursor ory-cursor version`. To force the current release, clear the cache and reinstall: `rm -rf ~/.npm/_npx` then `npx -y -p @ory/cursor ory-cursor install`. Pinning an exact version (`@ory/cursor@<version>`) also bypasses the cached copy.
173
173
 
174
174
  ## Learn more
package/dist/cli/main.js CHANGED
@@ -148,7 +148,7 @@ Commands:
148
148
  install [--project] Install Ory hooks, MCP server, and rules into ~/.cursor (or ./.cursor)
149
149
  uninstall [--project] Remove them
150
150
  configure Set or view Ory project URL and API key
151
- agent <cmd> Manage the agent's OAuth2 (DCR) identity (status, unregister)
151
+ agent <cmd> Inspect runtime status or clear legacy OAuth state
152
152
  permissions Show live mode and native allowed/blocked state
153
153
  status Show plugin status and configuration
154
154
  watch [--json] [--lines <count>]
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ory/cursor",
3
- "version": "1.2.4",
3
+ "version": "1.3.0",
4
4
  "description": "Ory plugin for Cursor: scaffolding rules, a local Ory instance, and authentication, authorization, and audit for every tool call",
5
5
  "license": "Apache-2.0",
6
6
  "homepage": "https://github.com/ory/ory-agent-plugins/tree/main/packages/cursor",
@@ -57,11 +57,10 @@
57
57
  ],
58
58
  "dependencies": {
59
59
  "reova": "^0.7.0",
60
- "@ory/argus": "1.2.4"
60
+ "@ory/argus": "1.3.0"
61
61
  },
62
62
  "devDependencies": {
63
- "typescript": "^6.0.2",
64
- "vitest": "4.1.4"
63
+ "typescript": "^6.0.2"
65
64
  },
66
65
  "engines": {
67
66
  "node": ">=22"