@pushary/agent-hooks 0.18.2 → 0.18.3

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -324,7 +324,14 @@ const main = async () => {
       diag('no input on stdin. Cursor did not pipe the command to this hook (a known Cursor issue on Windows). Handing off to Cursor\'s own prompt; the push approval cannot run without the command.')
       return respond(ask())
     }
-    input = JSON.parse(raw)
+    // Windows: Cursor prepends a BOM/encoding prefix to the hook's stdin, so raw
+    // arrives as e.g. "���{...}" and a bare JSON.parse throws,
+    // silently dropping us to "ask" with no push (the script works when run
+    // manually because there is no BOM). The payload is always a JSON object, so
+    // parse from the first "{" — robust to a BOM or whatever prefix bytes Cursor
+    // emits. Verified on Windows + Cursor 3.8.11.
+    const jsonStart = raw.indexOf('{')
+    input = JSON.parse(jsonStart > 0 ? raw.slice(jsonStart) : raw)
   } catch {
     diag('stdin was not valid JSON (often empty or corrupted, a known Cursor Windows stdin issue). Handing off to Cursor\'s own prompt.')
     return respond(ask())

package/dist/bin/pushary-setup.js

@@ -720,6 +720,15 @@ var installCursorUserHooks = (gateScript) => {
   hooks.beforeShellExecution = [...others, entry];
   writeJson(CURSOR_USER_HOOKS, { ...userHooks, version: userHooks.version ?? 1, hooks });
 };
+var neutralizePluginGate = () => {
+  const path = join(CURSOR_PLUGIN_DIR, "hooks", "hooks.json");
+  if (!existsSync(path)) return;
+  const data = readJson(path);
+  if (data.hooks && "beforeShellExecution" in data.hooks) {
+    delete data.hooks.beforeShellExecution;
+    writeJson(path, { version: data.version ?? 1, hooks: data.hooks });
+  }
+};
 var setupCursor = async (apiKey) => {
   console.log(`
   ${bold2("Setting up Cursor")}
@@ -745,13 +754,14 @@ var setupCursor = async (apiKey) => {
   });
   await spinner("Registering permission gate (~/.cursor/hooks.json)", async () => {
     installCursorUserHooks(join(CURSOR_PLUGIN_DIR, "scripts", "pushary-gate.mjs"));
+    neutralizePluginGate();
   });
   console.log();
   console.log(`  ${dim2("What this configured:")}`);
   console.log(`  ${dim2("\u2022")} Plugin installed to ~/.cursor/plugins/local/pushary (MCP tools, rule, skill)`);
-  console.log(`  ${dim2("\u2022")} Permission gate registered in ~/.cursor/hooks.json \u2014 where Cursor reads hooks`);
+  console.log(`  ${dim2("\u2022")} Permission gate registered once in ~/.cursor/hooks.json`);
   console.log(`  ${dim2("\u2022")} Risky shell commands route to push approval before they run`);
-  console.log(`  ${dim2("\u2022")} Restart Cursor (or run Developer: Reload Window) to load it`);
+  console.log(`  ${dim2("\u2022")} Fully quit and reopen Cursor to load it (a Reload Window may not be enough)`);
 };
 var saveApiKey = async (apiKey) => {
   await spinner("Saving your API key", async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.18.2",
+  "version": "0.18.3",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "author": "Pushary <business@pushary.com>",
   "homepage": "https://pushary.com",