@privacyscrubber/mcp-server 2.4.4 → 2.4.6

package/install.js

@@ -234,6 +234,8 @@ export function parseArgs(rawArgs = process.argv.slice(2)) {
     dryRun: false,
     remove: false,
     all: false,
+    rules: false,
+    hooks: false,
     targets: [],
     help: false
   };
@@ -242,6 +244,8 @@ export function parseArgs(rawArgs = process.argv.slice(2)) {
     if (arg === '--dry-run') options.dryRun = true;
     else if (arg === '--remove' || arg === '--uninstall') options.remove = true;
     else if (arg === '--all') options.all = true;
+    else if (arg === '--rules') options.rules = true;
+    else if (arg === '--hooks') options.hooks = true;
     else if (arg === '--claude') options.targets.push('claude');
     else if (arg === '--claude-code') options.targets.push('claude-code', 'claude-code-project');
     else if (arg === '--cursor') options.targets.push('cursor', 'cursor-storage', 'cursor-workspace');
@@ -249,7 +253,11 @@ export function parseArgs(rawArgs = process.argv.slice(2)) {
     else if (arg === '--zed') options.targets.push('zed');
     else if (arg === '--windsurf') options.targets.push('windsurf');
     else if (arg === '--cline') options.targets.push('cline', 'roo');
-    else if (arg === '--workspace') options.targets.push('cursor-workspace', 'claude-code-project', 'vscode');
+    else if (arg === '--workspace') {
+      options.targets.push('cursor-workspace', 'claude-code-project', 'vscode');
+      options.rules = true;
+      options.hooks = true;
+    }
     else if (arg === '--help' || arg === '-h') options.help = true;
   }
 
@@ -327,7 +335,8 @@ Options:
   --zed           Configure Zed IDE (~/.config/zed/settings.json)
   --windsurf      Configure Windsurf only
   --cline         Configure Cline / Roo-Code only
-  --workspace     Configure workspace paths (.cursor, .mcp.json, .vscode)
+  --workspace     Configure workspace paths (.cursor, .mcp.json, .vscode) & agent rules
+  --rules         Scaffold native AI agent rules (.cursor/rules/privacyscrubber.mdc, AGENTS.md)
   --dry-run       Preview configuration changes without writing files
   --remove        Remove PrivacyScrubber from all target client configurations
   -h, --help      Display this help guide
@@ -400,6 +409,88 @@ Options:
     console.log('');
   }
 
+  if (options.rules && !options.remove) {
+    const cwd = process.cwd();
+    const mdcPath = path.join(cwd, '.cursor', 'rules', 'privacyscrubber.mdc');
+    const agentsMdPath = path.join(cwd, 'AGENTS.md');
+    const ruleBody = [
+      '# PrivacyScrubber Zero-Trust Agentic Guard (ZTDS)',
+      '1. Never read `.env`, `*secret*`, `*credentials*`, `*.pem`, `*.key`, or database dumps with native `read_file` / `cat`. Call `guard_read_file` or `sanitize_file`.',
+      '2. Route shell commands that may print credentials or PII through `guard_exec`, and inspect git diffs via `guard_git_diff`.',
+      '3. Keep tokens like `[API_KEY_1]`, `[EMAIL_1]` intact during reasoning. Restore final answers via `reveal_text` or write to disk via `guard_apply_patch`.'
+    ].join('\n');
+    const mdcContent = `---\ndescription: PrivacyScrubber Zero-Trust Data Sanitization (ZTDS) — Mandatory PII & Secret Guard\nglobs: "**/*"\nalwaysApply: true\n---\n\n${ruleBody}\n`;
+
+    if (options.dryRun) {
+      console.log(`[DRY-RUN OK]: Would scaffold agent rules in ${mdcPath} and ${agentsMdPath}\n`);
+    } else {
+      try {
+        fs.mkdirSync(path.dirname(mdcPath), { recursive: true });
+        if (!fs.existsSync(mdcPath) || !fs.readFileSync(mdcPath, 'utf8').includes('PrivacyScrubber Zero-Trust Agentic Guard')) {
+          fs.writeFileSync(mdcPath, mdcContent, 'utf8');
+          console.log(`[RULES] Created ${mdcPath}`);
+        }
+        if (!fs.existsSync(agentsMdPath)) {
+          fs.writeFileSync(agentsMdPath, ruleBody + '\n', 'utf8');
+          console.log(`[RULES] Created ${agentsMdPath}`);
+        } else {
+          const existingAgents = fs.readFileSync(agentsMdPath, 'utf8');
+          if (!existingAgents.includes('PrivacyScrubber Zero-Trust Agentic Guard')) {
+            fs.writeFileSync(agentsMdPath, existingAgents.trimEnd() + '\n\n' + ruleBody + '\n', 'utf8');
+            console.log(`[RULES] Updated ${agentsMdPath}`);
+          }
+        }
+      } catch (_) {}
+    }
+  }
+
+  if (options.hooks && !options.remove) {
+    const cwd = process.cwd();
+    const cursorHooksPath = path.join(cwd, '.cursor', 'hooks.json');
+    const claudeSettingsPath = path.join(cwd, '.claude', 'settings.json');
+    const hookCmd = 'npx -y @privacyscrubber/mcp-server --hook';
+
+    if (options.dryRun) {
+      console.log(`[DRY-RUN OK]: Would scaffold IDE lifecycle hooks in ${cursorHooksPath} and ${claudeSettingsPath}\n`);
+    } else {
+      try {
+        fs.mkdirSync(path.dirname(cursorHooksPath), { recursive: true });
+        let cursorHooks = { version: 1, hooks: {} };
+        if (fs.existsSync(cursorHooksPath)) {
+          try { cursorHooks = JSON.parse(fs.readFileSync(cursorHooksPath, 'utf8')); } catch (_) {}
+        }
+        if (!cursorHooks.hooks || typeof cursorHooks.hooks !== 'object') cursorHooks.hooks = {};
+        for (const ev of ['beforeReadFile', 'beforeShellExecution']) {
+          if (!Array.isArray(cursorHooks.hooks[ev])) cursorHooks.hooks[ev] = [];
+          if (!cursorHooks.hooks[ev].some(h => h && h.command && h.command.includes('privacyscrubber'))) {
+            cursorHooks.hooks[ev].push({ command: hookCmd });
+          }
+        }
+        fs.writeFileSync(cursorHooksPath, JSON.stringify(cursorHooks, null, 2) + '\n', 'utf8');
+        console.log(`[HOOKS] Configured ${cursorHooksPath}`);
+
+        fs.mkdirSync(path.dirname(claudeSettingsPath), { recursive: true });
+        let claudeSettings = {};
+        if (fs.existsSync(claudeSettingsPath)) {
+          try { claudeSettings = JSON.parse(fs.readFileSync(claudeSettingsPath, 'utf8')); } catch (_) {}
+        }
+        if (!claudeSettings.hooks || typeof claudeSettings.hooks !== 'object') claudeSettings.hooks = {};
+        if (!Array.isArray(claudeSettings.hooks.PreToolUse)) claudeSettings.hooks.PreToolUse = [];
+        const hasClaudeHook = claudeSettings.hooks.PreToolUse.some(entry =>
+          Array.isArray(entry?.hooks) && entry.hooks.some(h => h && h.command && h.command.includes('privacyscrubber'))
+        );
+        if (!hasClaudeHook) {
+          claudeSettings.hooks.PreToolUse.push({
+            matcher: 'Read|Bash',
+            hooks: [{ type: 'command', command: hookCmd }]
+          });
+        }
+        fs.writeFileSync(claudeSettingsPath, JSON.stringify(claudeSettings, null, 2) + '\n', 'utf8');
+        console.log(`[HOOKS] Configured ${claudeSettingsPath}`);
+      } catch (_) {}
+    }
+  }
+
   console.log('--------------------------------------------------');
   if (configuredCount > 0) {
     console.log(`[SUMMARY] ${options.remove ? 'Cleaned' : 'Configured'} ${configuredCount} AI client(s) successfully.`);

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": "0.3",
   "name": "privacyscrubber/pii-masking-mcp",
-  "version": "2.4.4",
+  "version": "2.4.6",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "author": {
     "name": "PrivacyScrubber",
@@ -30,21 +30,17 @@
       "description": "STEP 3: Call this last. Restores masked tokens back with original private data from the local volatile RAM-only session map."
     },
     {
-      "name": "audit_context",
-      "description": "STEP 0 (Pre-Flight): Non-destructive security inspection of raw prompts or document chunks before sending to LLMs. Evaluates PII, secrets, risk severity, and triggered regulatory frameworks."
+      "name": "stream_reveal_text",
+      "description": "STEP 3 (Streaming): Real-time streaming token detokenizer for LLM Server-Sent Events (SSE) and stdio chunk pipelines."
     },
     {
-      "name": "scrub_text",
-      "description": "Alias for sanitize_text."
+      "name": "audit_context",
+      "description": "STEP 0 (Pre-Flight): Non-destructive security inspection of raw prompts or document chunks before sending to LLMs. Evaluates PII, secrets, risk severity, and triggered regulatory frameworks."
     },
     {
       "name": "sanitize_file",
       "description": "Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory."
     },
-    {
-      "name": "scrub_file",
-      "description": "Alias for sanitize_file."
-    },
     {
       "name": "audit_directory_for_pii",
       "description": "Scans a local directory for leaks of secrets, keys, and PII. Returns a structured security summary report."
@@ -116,7 +112,9 @@
     {
       "name": "generate_procurement_memo",
       "description": "Zero-Trust Enterprise Procurement: Generates an executive-ready Procurement & ROI Memorandum for CISOs, DPOs, and VP of Engineering."
-    },
+    }
+  ],
+  "prompts": [
     {
       "name": "secure_ai_workflow",
       "description": "Zero-Trust Data Sanitization workflow instruction to automatically scrub PII before processing data."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privacyscrubber/mcp-server",
-  "version": "2.4.4",
+  "version": "2.4.6",
   "mcpName": "io.github.moxno/privacyscrubber-mcp",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "main": "index.js",
@@ -13,10 +13,8 @@
     "install.js",
     "pii-masking-run.js",
     "scrubber-core.cjs",
-    "ps-license-manager.js",
     "ps-license-manager.cjs",
     "ps-pii-engine.cjs",
-    "ps-pii-engine.js",
     "config-schema.json",
     "smithery.yaml",
     "server.json",

package/pii-masking-run.js

@@ -27,7 +27,7 @@ const cmdIndex = args.indexOf("--");
 
 if (args.includes("--version") || args.includes("-v")) {
   const pkgPath = path.resolve(__dirname, './package.json');
-  let version = '2.4.4';
+  let version = '2.4.6';
   try { version = JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version; } catch (_) {}
   console.log(`ps-guard / pii-masking-run v${version} (PrivacyScrubber MCP)`);
   process.exit(0);
@@ -35,6 +35,7 @@ if (args.includes("--version") || args.includes("-v")) {
 
 const isDiffMode = args.includes("--diff");
 const isRulesMode = args.includes("--rules");
+const isHookMode = args.includes("--hook");
 const isJsonMode = args.includes("--json");
 const isRestoreMode = args.includes("--restore") || args.includes("--unscrub");
 let tokenMapInput = null;
@@ -42,10 +43,15 @@ const tokenMapIdx = args.indexOf("--token-map");
 if (tokenMapIdx !== -1 && args[tokenMapIdx + 1]) {
   tokenMapInput = args[tokenMapIdx + 1];
 }
+let hookPayloadArg = null;
+const payloadIdx = args.indexOf("--payload");
+if (payloadIdx !== -1 && args[payloadIdx + 1]) {
+  hookPayloadArg = args[payloadIdx + 1];
+}
 const hasCommand = cmdIndex !== -1 && args.slice(cmdIndex + 1).length > 0;
 const hasStdin = !process.stdin.isTTY;
 
-if (args.includes("-h") || args.includes("--help") || (!hasCommand && !isDiffMode && !isRulesMode && !isRestoreMode && !hasStdin)) {
+if (args.includes("-h") || args.includes("--help") || (!hasCommand && !isDiffMode && !isRulesMode && !isHookMode && !isRestoreMode && !hasStdin)) {
   console.log("PrivacyScrubber CLI & Agentic Guard: ps-guard / pii-masking-run");
   console.log("\nUsage:");
   console.log("  npx ps-guard [options] -- <command> [args...]");
@@ -53,6 +59,7 @@ if (args.includes("-h") || args.includes("--help") || (!hasCommand && !isDiffMod
   console.log("  npx ps-guard --diff [--staged] [options]");
   console.log("  npx ps-guard --restore --token-map <file|json> [options]");
   console.log("  npx ps-guard --rules [targets]");
+  console.log("  npx ps-guard --hook               (Claude Code & Cursor IDE PreToolUse / beforeReadFile hook)");
   console.log("\nOptions:");
   console.log("  --profile <name>  Specify detection profile (e.g. General, Dev, Medical, Legal, HR)");
   console.log("  --key <licKey>    PrivacyScrubber PRO License Key");
@@ -62,6 +69,7 @@ if (args.includes("-h") || args.includes("--help") || (!hasCommand && !isDiffMod
   console.log("  --diff            Sanitize git diff output before committing or sending to AI");
   console.log("  --staged          Use staged git changes with --diff");
   console.log("  --rules [targets] Generate AI agent rules (.cursorrules, .windsurfrules, CLAUDE.md, copilot, cline)");
+  console.log("  --hook            Evaluate IDE lifecycle hook JSON from stdin (Claude Code & Cursor)");
   console.log("  -q, --quiet       Suppress stderr proof telemetry");
   console.log("  -v, --version     Print version");
   console.log("  -h, --help        Show this help screen");
@@ -75,6 +83,98 @@ if (args.includes("-h") || args.includes("--help") || (!hasCommand && !isDiffMod
   process.exit(0);
 }
 
+// Fast-path Mode 0: Deterministic IDE Lifecycle Hook (--hook) for Claude Code & Cursor v1.7+
+if (isHookMode) {
+  const SENSITIVE_FILE_RX = /(?:^|[\\/])(?:\.env(?:\.[a-zA-Z0-9_-]+)?|id_rsa|id_ed25519|id_ecdsa|.*\.pem|.*\.key|.*\.p12|.*\.pfx|.*credentials.*\.json|.*secret.*\.(?:json|ya?ml|env|txt)|\.npmrc|\.pypirc|\.netrc)$/i;
+  const SAFE_TEMPLATE_RX = /\.(?:example|sample|template|dist|schema)$/i;
+  const SENSITIVE_CMD_RX = /(?:^|[;&|]\s*)(?:cat|head|tail|less|more|bat|sed|awk|grep)\s+[^\n|;&]*(?:\.env\b|id_rsa|\.pem\b|\.key\b|credentials\.json|\bsecrets?\.)|(?:^|[;&|]\s*)(?:printenv|env\s*$|export\s+-p|aws\s+configure\s+get|gcloud\s+auth\s+print-access-token)/i;
+
+  const evaluateHookPayload = (rawStr) => {
+    let payload = {};
+    try {
+      payload = rawStr && rawStr.trim() ? JSON.parse(rawStr) : {};
+    } catch (_) {
+      process.stdout.write(JSON.stringify({ permission: "allow", continue: true }) + "\n");
+      process.exit(0);
+    }
+
+    const eventName = String(payload.hook_event_name || payload.hookEventName || payload.event || "");
+    const toolName = String(payload.tool_name || payload.toolName || "");
+    const toolInput = (payload.tool_input || payload.toolInput || payload) || {};
+
+    const candidatePath = String(
+      toolInput.file_path || toolInput.path || toolInput.target_file || payload.file_path || payload.path || ""
+    ).trim();
+    const candidateCmd = String(
+      toolInput.command || toolInput.cmd || payload.command || ""
+    ).trim();
+
+    const isCursorEvent = /^(?:beforeReadFile|beforeShellExecution|beforeSubmitPrompt|beforeMCPExecution)$/i.test(eventName) ||
+      (!toolName && (payload.file_path !== undefined || payload.command !== undefined || payload.attachments !== undefined));
+
+    const isReadTool = /^(?:Read|View|read_file|view_file|ReadFile)$/i.test(toolName) || /^beforeReadFile$/i.test(eventName) || (!toolName && Boolean(candidatePath));
+    const isShellTool = /^(?:Bash|Execute|run_command| run_terminal_cmd)$/i.test(toolName) || /^beforeShellExecution$/i.test(eventName) || (!toolName && Boolean(candidateCmd));
+
+    if (isReadTool && candidatePath && SENSITIVE_FILE_RX.test(candidatePath) && !SAFE_TEMPLATE_RX.test(candidatePath)) {
+      const reason = `Blocked by PrivacyScrubber ZTDS policy: Direct read of sensitive file '${path.basename(candidatePath)}' is prohibited. Call the PrivacyScrubber MCP tool 'guard_read_file' or 'sanitize_file' instead so secrets are tokenized in local RAM.`;
+      if (isCursorEvent) {
+        process.stdout.write(JSON.stringify({
+          permission: "deny",
+          userMessage: `[PrivacyScrubber ZTDS] Direct read of ${path.basename(candidatePath)} blocked to prevent cloud egress.`,
+          agentMessage: reason
+        }) + "\n");
+        process.exit(0);
+      }
+      process.stdout.write(JSON.stringify({
+        permission: "deny",
+        hookSpecificOutput: {
+          hookEventName: eventName || "PreToolUse",
+          permissionDecision: "deny",
+          permissionDecisionReason: reason
+        }
+      }) + "\n");
+      process.stderr.write(reason + "\n");
+      process.exit(2);
+    }
+
+    if (isShellTool && candidateCmd && SENSITIVE_CMD_RX.test(candidateCmd)) {
+      const reason = `Blocked by PrivacyScrubber ZTDS policy: Shell command exposing raw credentials ('${candidateCmd.slice(0, 60)}') is prohibited. Call the PrivacyScrubber MCP tool 'guard_exec' instead so stdout/stderr are sanitized in local RAM.`;
+      if (isCursorEvent) {
+        process.stdout.write(JSON.stringify({
+          permission: "deny",
+          userMessage: `[PrivacyScrubber ZTDS] Shell command exposing raw credentials blocked.`,
+          agentMessage: reason
+        }) + "\n");
+        process.exit(0);
+      }
+      process.stdout.write(JSON.stringify({
+        permission: "deny",
+        hookSpecificOutput: {
+          hookEventName: eventName || "PreToolUse",
+          permissionDecision: "deny",
+          permissionDecisionReason: reason
+        }
+      }) + "\n");
+      process.stderr.write(reason + "\n");
+      process.exit(2);
+    }
+
+    process.stdout.write(JSON.stringify({ permission: "allow", continue: true }) + "\n");
+    process.exit(0);
+  };
+
+  if (hookPayloadArg !== null) {
+    evaluateHookPayload(hookPayloadArg);
+  } else if (!process.stdin.isTTY) {
+    let buf = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (c) => { buf += c; });
+    process.stdin.on("end", () => evaluateHookPayload(buf));
+  } else {
+    evaluateHookPayload("{}");
+  }
+}
+
 // Import the production core engine
 const scrubberCorePath = path.resolve(__dirname, './scrubber-core.cjs');
 const PrivacyScrubberCore = require(scrubberCorePath);
@@ -154,6 +254,13 @@ function resolveConfigPath() {
   return configPath;
 }
 
+function isCatastrophicRegex(pattern) {
+  if (!pattern || typeof pattern !== 'string' || pattern.length > 500) return true;
+  if (/(\([^)]*[+*][^)]*\))[+*?{]/.test(pattern)) return true;
+  if (/(\.\*){3,}/.test(pattern)) return true;
+  return false;
+}
+
 function loadCustomRules() {
   const license = checkLicenseStatus();
   const configPath = resolveConfigPath();
@@ -164,12 +271,20 @@ function loadCustomRules() {
       const rules = config.customRules || [];
       if (rules.length > 0) {
         if (license.isPro) {
-          return rules.map(r => ({
-            pattern: r.pattern || r.regex || "",
-            label: (r.label || r.category || "CUSTOM").toUpperCase(),
-            regex: r.pattern || r.regex || "",
-            category: (r.label || r.category || "CUSTOM").toUpperCase()
-          })).filter(r => r.pattern);
+          return rules.map(r => {
+            const pat = r.pattern || r.regex || "";
+            if (!pat || isCatastrophicRegex(pat)) return null;
+            try {
+              return {
+                pattern: pat,
+                label: (r.label || r.category || "CUSTOM").toUpperCase(),
+                regex: new RegExp(pat, "gi"),
+                category: (r.label || r.category || "CUSTOM").toUpperCase()
+              };
+            } catch (_) {
+              return null;
+            }
+          }).filter(Boolean);
         } else {
           process.stderr.write(`⚠️  [PrivacyScrubber] Custom rules detected in privacyscrubber.json, but are ignored in the Free Tier.\n👉  Set PRIVACYSCRUBBER_KEY to your PRO license key.\n`);
         }
@@ -246,34 +361,6 @@ function performSanitization(text) {
   if (result && result.tokenMap) {
     Object.assign(localSessionMap, result.tokenMap);
   }
-  
-  if (!license.isPro && result.tokenMap) {
-    // Free tier: check for secrets and warn
-    let hasSecrets = false;
-    const SECRET_TOKEN_RE = /^\[(?:SECRET|API_TOKEN|AWS_KEY|JWT_TOKEN|STRIPE_KEY|OPENAI_KEY|DB_URI)_\d+\]$/;
-    Object.entries(result.tokenMap).forEach(([token, original]) => {
-      let isSecret = SECRET_TOKEN_RE.test(token);
-      if (!isSecret) {
-        for (const detector of DEVOPS_SECRETS_DETECTOR) {
-          detector.regex.lastIndex = 0;
-          if (detector.regex.test(original)) {
-            isSecret = true;
-            break;
-          }
-        }
-      }
-      if (isSecret) {
-        hasSecrets = true;
-        result.scrubbedText = result.scrubbedText.replaceAll(token, '[SECRET_BLOCKED_UPGRADE_TO_PRO]');
-        delete result.tokenMap[token];
-        delete localSessionMap[token];
-      }
-    });
-
-    if (hasSecrets) {
-      process.stderr.write(`\x1b[1;31m🚫  [PrivacyScrubber] Secrets/Keys detected in output. Replaced with [SECRET_BLOCKED_UPGRADE_TO_PRO] to protect your data (Requires PRO tier).\x1b[0m\n`);
-    }
-  }
 
   return result.scrubbedText + (wasTruncated ? `\n\n[PrivacyScrubber Free Tier: Payload truncated to ${limit.toLocaleString()} characters. Upgrade to PRO ($15/mo or $110 Lifetime) or Developer SDK ($299/mo) for unlimited payload processing: https://privacyscrubber.com/pricing]` : '');
 }
@@ -453,10 +540,26 @@ if (isRestoreMode) {
   let tokenMap = {};
   if (tokenMapInput) {
     try {
+      const safeReviver = (k, v) => (k === '__proto__' || k === 'constructor' || k === 'prototype') ? undefined : v;
       if (tokenMapInput.trim().startsWith('{')) {
-        tokenMap = JSON.parse(tokenMapInput);
-      } else if (fs.existsSync(tokenMapInput)) {
-        tokenMap = JSON.parse(fs.readFileSync(tokenMapInput, 'utf8'));
+        tokenMap = JSON.parse(tokenMapInput, safeReviver);
+      } else {
+        const workspaceRoot = fs.existsSync(process.cwd()) ? fs.realpathSync(process.cwd()) : path.resolve(process.cwd());
+        const resolvedMapPath = path.resolve(workspaceRoot, tokenMapInput);
+        const relToRoot = path.relative(workspaceRoot, resolvedMapPath);
+        if (relToRoot.startsWith('..') || path.isAbsolute(relToRoot)) {
+          throw new Error('Security policy violation: --token-map path resolves outside active workspace.');
+        }
+        if (fs.existsSync(resolvedMapPath)) {
+          const lstat = fs.lstatSync(resolvedMapPath);
+          if (lstat.isSymbolicLink() || !lstat.isFile()) {
+            throw new Error('Security policy violation: --token-map must be a regular non-symlink file.');
+          }
+          if (lstat.size > 10 * 1024 * 1024) {
+            throw new Error('Token map file exceeds 10MB limit.');
+          }
+          tokenMap = JSON.parse(fs.readFileSync(resolvedMapPath, 'utf8'), safeReviver);
+        }
       }
     } catch (e) {
       console.error(`Error parsing token map: ${e.message}`);
@@ -526,6 +629,11 @@ Before reading sensitive files, running terminal commands that may print credent
   if (targets.includes("cursor")) {
     fs.writeFileSync(path.join(targetDir, '.cursorrules'), RULE_TEXT, 'utf8');
     generatedFiles.push('.cursorrules');
+    const cursorRulesDir = path.join(targetDir, '.cursor', 'rules');
+    if (!fs.existsSync(cursorRulesDir)) fs.mkdirSync(cursorRulesDir, { recursive: true });
+    const mdcContent = `---\ndescription: PrivacyScrubber Zero-Trust Data Sanitization (ZTDS) — Mandatory PII & Secret Guard\nglobs: "**/*"\nalwaysApply: true\n---\n\n${RULE_TEXT}`;
+    fs.writeFileSync(path.join(cursorRulesDir, 'privacyscrubber.mdc'), mdcContent, 'utf8');
+    generatedFiles.push('.cursor/rules/privacyscrubber.mdc');
   }
   if (targets.includes("windsurf")) {
     fs.writeFileSync(path.join(targetDir, '.windsurfrules'), RULE_TEXT, 'utf8');
@@ -546,6 +654,21 @@ Before reading sensitive files, running terminal commands that may print credent
       generatedFiles.push('CLAUDE.md');
     }
   }
+  if (targets.includes("agents_md") || targets.includes("codex") || rulesTargets.includes("all")) {
+    const agentsPath = path.join(targetDir, 'AGENTS.md');
+    if (fs.existsSync(agentsPath)) {
+      const existing = fs.readFileSync(agentsPath, 'utf8');
+      if (!existing.includes("Zero-Trust Agentic Guard")) {
+        fs.writeFileSync(agentsPath, existing.trimEnd() + "\n\n" + RULE_TEXT, 'utf8');
+        generatedFiles.push('AGENTS.md (appended)');
+      } else {
+        generatedFiles.push('AGENTS.md (already present)');
+      }
+    } else {
+      fs.writeFileSync(agentsPath, RULE_TEXT, 'utf8');
+      generatedFiles.push('AGENTS.md');
+    }
+  }
   if (targets.includes("copilot")) {
     const copilotDir = path.join(targetDir, '.github');
     if (!fs.existsSync(copilotDir)) fs.mkdirSync(copilotDir, { recursive: true });
@@ -556,6 +679,46 @@ Before reading sensitive files, running terminal commands that may print credent
     fs.writeFileSync(path.join(targetDir, '.clinerules'), RULE_TEXT, 'utf8');
     generatedFiles.push('.clinerules');
   }
+  if (args.includes("--hooks") || targets.includes("hooks") || rulesTargets.includes("all")) {
+    try {
+      const cursorHooksPath = path.join(targetDir, '.cursor', 'hooks.json');
+      fs.mkdirSync(path.dirname(cursorHooksPath), { recursive: true });
+      let cursorHooks = { version: 1, hooks: {} };
+      if (fs.existsSync(cursorHooksPath)) {
+        try { cursorHooks = JSON.parse(fs.readFileSync(cursorHooksPath, 'utf8')); } catch (_) {}
+      }
+      if (!cursorHooks.hooks || typeof cursorHooks.hooks !== 'object') cursorHooks.hooks = {};
+      const hookCmd = "npx -y @privacyscrubber/mcp-server --hook";
+      for (const ev of ['beforeReadFile', 'beforeShellExecution']) {
+        if (!Array.isArray(cursorHooks.hooks[ev])) cursorHooks.hooks[ev] = [];
+        if (!cursorHooks.hooks[ev].some(h => h && h.command && h.command.includes('privacyscrubber'))) {
+          cursorHooks.hooks[ev].push({ command: hookCmd });
+        }
+      }
+      fs.writeFileSync(cursorHooksPath, JSON.stringify(cursorHooks, null, 2) + '\n', 'utf8');
+      generatedFiles.push('.cursor/hooks.json');
+
+      const claudeSettingsPath = path.join(targetDir, '.claude', 'settings.json');
+      fs.mkdirSync(path.dirname(claudeSettingsPath), { recursive: true });
+      let claudeSettings = {};
+      if (fs.existsSync(claudeSettingsPath)) {
+        try { claudeSettings = JSON.parse(fs.readFileSync(claudeSettingsPath, 'utf8')); } catch (_) {}
+      }
+      if (!claudeSettings.hooks || typeof claudeSettings.hooks !== 'object') claudeSettings.hooks = {};
+      if (!Array.isArray(claudeSettings.hooks.PreToolUse)) claudeSettings.hooks.PreToolUse = [];
+      const hasClaudeHook = claudeSettings.hooks.PreToolUse.some(entry =>
+        Array.isArray(entry?.hooks) && entry.hooks.some(h => h && h.command && h.command.includes('privacyscrubber'))
+      );
+      if (!hasClaudeHook) {
+        claudeSettings.hooks.PreToolUse.push({
+          matcher: "Read|Bash",
+          hooks: [{ type: "command", command: hookCmd }]
+        });
+      }
+      fs.writeFileSync(claudeSettingsPath, JSON.stringify(claudeSettings, null, 2) + '\n', 'utf8');
+      generatedFiles.push('.claude/settings.json');
+    } catch (_) {}
+  }
 
   console.log(`[Zero-Trust Agentic Guard: Agent Rules Generated]`);
   console.log(`Workspace: ${targetDir}`);