@shnitzel/plugscout 0.3.9 → 0.3.11

package/dist/catalog/adapters/cursor-extensions-v1.js

@@ -0,0 +1,60 @@
+import { dedupe, extractStringArray, readString, toCount, toScore } from './shared.js';
+export function adaptCursorExtensionsEntries(sourceId, entries) {
+    return entries
+        .map((entry) => mapCursorExtensionEntry(sourceId, entry))
+        .filter((entry) => entry !== null);
+}
+function mapCursorExtensionEntry(sourceId, entry) {
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+        return null;
+    }
+    const record = entry;
+    const slug = readString(record, ['slug', 'id', 'name']);
+    if (!slug) {
+        return null;
+    }
+    const name = readString(record, ['title', 'name']) ?? slug;
+    const description = readString(record, ['description', 'summary']) ?? `Cursor extension ${name}`;
+    const capabilities = dedupe(extractStringArray(record, ['capabilities', 'tools']).concat(extractStringArray(record, ['tags'])));
+    const compatibility = dedupe(extractStringArray(record, ['compatibility']).concat(['cursor']));
+    const metadata = record.metadata && typeof record.metadata === 'object' && !Array.isArray(record.metadata)
+        ? record.metadata
+        : {};
+    const vsixId = typeof record.vsixId === 'string' ? record.vsixId : typeof metadata.vsixId === 'string' ? metadata.vsixId : undefined;
+    const installInstructions = readString(record, ['install', 'instructions']) ??
+        (vsixId
+            ? `Install via Cursor Marketplace: open Extensions panel (Cmd+Shift+X) and search for ${name}.`
+            : `Install via Cursor Marketplace: open Extensions panel (Cmd+Shift+X) and search for ${name}.`);
+    const installUrl = readString(record, ['install', 'url']) ??
+        (vsixId ? `https://marketplace.visualstudio.com/items?itemName=${vsixId}` : undefined);
+    return {
+        id: slug.startsWith('cursor-extension:') ? slug : `cursor-extension:${slug}`,
+        kind: 'cursor-extension',
+        provider: readString(record, ['provider']) ?? 'cursor',
+        name,
+        description,
+        capabilities,
+        compatibility,
+        source: sourceId,
+        install: {
+            kind: 'manual',
+            instructions: installInstructions,
+            ...(installUrl ? { url: installUrl } : {})
+        },
+        adoptionSignal: toScore(record.adoptionSignal, 50),
+        maintenanceSignal: toScore(record.maintenanceSignal, 50),
+        provenanceSignal: toScore(record.provenanceSignal, 70),
+        freshnessSignal: toScore(record.freshnessSignal, 60),
+        securitySignals: {
+            knownVulnerabilities: toCount(record.knownVulnerabilities),
+            suspiciousPatterns: toCount(record.suspiciousPatterns),
+            injectionFindings: toCount(record.injectionFindings),
+            exfiltrationSignals: toCount(record.exfiltrationSignals),
+            integrityAlerts: toCount(record.integrityAlerts)
+        },
+        metadata: {
+            ...metadata,
+            ...(vsixId ? { vsixId } : {})
+        }
+    };
+}

package/dist/catalog/adapters/gemini-extensions-v1.js

@@ -0,0 +1,64 @@
+import { dedupe, extractStringArray, readString, toCount, toScore } from './shared.js';
+export function adaptGeminiExtensionsEntries(sourceId, entries) {
+    return entries
+        .map((entry) => mapGeminiExtensionEntry(sourceId, entry))
+        .filter((entry) => entry !== null);
+}
+function mapGeminiExtensionEntry(sourceId, entry) {
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+        return null;
+    }
+    const record = entry;
+    const slug = readString(record, ['slug', 'id', 'name']);
+    if (!slug) {
+        return null;
+    }
+    const name = readString(record, ['title', 'name']) ?? slug;
+    const description = readString(record, ['description', 'summary']) ?? `Gemini CLI extension ${name}`;
+    const capabilities = dedupe(extractStringArray(record, ['capabilities', 'tools']).concat(extractStringArray(record, ['tags'])));
+    const compatibility = dedupe(extractStringArray(record, ['compatibility']).concat(['gemini', 'gemini-cli']));
+    const metadata = record.metadata && typeof record.metadata === 'object' && !Array.isArray(record.metadata)
+        ? record.metadata
+        : {};
+    const npmPkg = typeof record.npmPackage === 'string'
+        ? record.npmPackage
+        : typeof metadata.npmPackage === 'string'
+            ? metadata.npmPackage
+            : undefined;
+    const installInstructions = readString(record, ['install', 'instructions']) ??
+        (npmPkg
+            ? `Add to ~/.gemini/settings.json under mcpServers: { "${slug.replace('gemini-extension:', '')}": { "command": "npx", "args": ["-y", "${npmPkg}"] } }`
+            : `Configure in ~/.gemini/settings.json under mcpServers.`);
+    const installUrl = readString(record, ['install', 'url']) ??
+        (npmPkg ? `https://www.npmjs.com/package/${npmPkg}` : undefined);
+    return {
+        id: slug.startsWith('gemini-extension:') ? slug : `gemini-extension:${slug}`,
+        kind: 'gemini-extension',
+        provider: readString(record, ['provider']) ?? 'google',
+        name,
+        description,
+        capabilities,
+        compatibility,
+        source: sourceId,
+        install: {
+            kind: 'manual',
+            instructions: installInstructions,
+            ...(installUrl ? { url: installUrl } : {})
+        },
+        adoptionSignal: toScore(record.adoptionSignal, 50),
+        maintenanceSignal: toScore(record.maintenanceSignal, 50),
+        provenanceSignal: toScore(record.provenanceSignal, 75),
+        freshnessSignal: toScore(record.freshnessSignal, 60),
+        securitySignals: {
+            knownVulnerabilities: toCount(record.knownVulnerabilities),
+            suspiciousPatterns: toCount(record.suspiciousPatterns),
+            injectionFindings: toCount(record.injectionFindings),
+            exfiltrationSignals: toCount(record.exfiltrationSignals),
+            integrityAlerts: toCount(record.integrityAlerts)
+        },
+        metadata: {
+            ...metadata,
+            ...(npmPkg ? { npmPackage: npmPkg } : {})
+        }
+    };
+}

package/dist/catalog/remote-registry.js

@@ -132,6 +132,12 @@ function defaultCatalogKeyByKind(kind) {
     if (kind === 'copilot-extension') {
         return 'extensions';
     }
+    if (kind === 'cursor-extension') {
+        return 'extensions';
+    }
+    if (kind === 'gemini-extension') {
+        return 'extensions';
+    }
     return 'skills';
 }
 function resolveByPath(value, path) {
@@ -192,5 +198,10 @@ function validateRemoteHost(registry) {
     }
 }
 function requiresSafeHostAllowlist(kind) {
-    return kind === 'claude-plugin' || kind === 'claude-connector' || kind === 'copilot-extension' || kind === 'mcp';
+    return (kind === 'claude-plugin' ||
+        kind === 'claude-connector' ||
+        kind === 'copilot-extension' ||
+        kind === 'cursor-extension' ||
+        kind === 'gemini-extension' ||
+        kind === 'mcp');
 }

package/dist/catalog/sync.js

@@ -38,7 +38,7 @@ export async function syncCatalogs(today = new Date().toISOString().slice(0, 10)
     await Promise.all([saveCatalogItems(mergedItems), saveLegacyCatalogViews(mergedItems)]);
     await saveSyncState(syncState);
     const kindCounts = countByKind(mergedItems);
-    logger.info(`Synced ${mergedItems.length} items (${kindCounts.skill} skills, ${kindCounts.mcp} MCPs, ${kindCounts['claude-plugin']} Claude plugins, ${kindCounts['claude-connector']} Claude connectors, ${kindCounts['copilot-extension']} Copilot extensions)`);
+    logger.info(`Synced ${mergedItems.length} items (${kindCounts.skill} skills, ${kindCounts.mcp} MCPs, ${kindCounts['claude-plugin']} Claude plugins, ${kindCounts['claude-connector']} Claude connectors, ${kindCounts['copilot-extension']} Copilot extensions, ${kindCounts['cursor-extension']} Cursor extensions, ${kindCounts['gemini-extension']} Gemini extensions)`);
     const staleRegistries = getStaleRegistries(syncState);
     if (staleRegistries.length > 0) {
         logger.warn(`Stale registries (>48h without success): ${staleRegistries.join(', ')}`);
@@ -84,7 +84,9 @@ function normalizeId(id, kind) {
         mcp: 'mcp',
         'claude-plugin': 'claude-plugin',
         'claude-connector': 'claude-connector',
-        'copilot-extension': 'copilot-extension'
+        'copilot-extension': 'copilot-extension',
+        'cursor-extension': 'cursor-extension',
+        'gemini-extension': 'gemini-extension'
     };
     return `${prefixMap[kind]}:${id.replace(/^([a-z-]+):/, '')}`;
 }
@@ -101,6 +103,12 @@ function inferProviderFromKind(kind) {
     if (kind === 'copilot-extension') {
         return 'github';
     }
+    if (kind === 'cursor-extension') {
+        return 'cursor';
+    }
+    if (kind === 'gemini-extension') {
+        return 'google';
+    }
     return 'openai';
 }
 function mergeItemsById(items) {
@@ -142,7 +150,9 @@ function countByKind(items) {
         mcp: 0,
         'claude-plugin': 0,
         'claude-connector': 0,
-        'copilot-extension': 0
+        'copilot-extension': 0,
+        'cursor-extension': 0,
+        'gemini-extension': 0
     });
 }
 function defaultSourceConfidence(sourceType) {

package/dist/interfaces/cli/client-setup.js

@@ -0,0 +1,144 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+const PLUGSCOUT_MCP_STDIO = { command: 'npx', args: ['plugscout', 'mcp'] };
+const PLUGSCOUT_MCP_ZED = { command: { path: 'npx', args: ['plugscout', 'mcp'] } };
+function claudeDesktopConfigPath() {
+    if (process.platform === 'win32') {
+        return path.join(process.env['APPDATA'] ?? os.homedir(), 'Claude', 'claude_desktop_config.json');
+    }
+    if (process.platform === 'darwin') {
+        return path.join(os.homedir(), 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');
+    }
+    return path.join(os.homedir(), '.config', 'claude-desktop', 'claude_desktop_config.json');
+}
+function openCodeConfigPath() {
+    if (process.platform === 'win32') {
+        return path.join(process.env['APPDATA'] ?? os.homedir(), 'opencode', 'config.json');
+    }
+    return path.join(os.homedir(), '.config', 'opencode', 'config.json');
+}
+export const CLIENT_DEFS = {
+    cursor: {
+        label: 'Cursor IDE',
+        supportsProjectScope: true,
+        getConfigPath(scope) {
+            return scope === 'project'
+                ? path.join(process.cwd(), '.cursor', 'mcp.json')
+                : path.join(os.homedir(), '.cursor', 'mcp.json');
+        },
+        containerPath: ['mcpServers'],
+        entryValue: PLUGSCOUT_MCP_STDIO,
+    },
+    gemini: {
+        label: 'Gemini CLI',
+        supportsProjectScope: false,
+        getConfigPath() {
+            return path.join(os.homedir(), '.gemini', 'settings.json');
+        },
+        containerPath: ['mcpServers'],
+        entryValue: PLUGSCOUT_MCP_STDIO,
+    },
+    'claude-desktop': {
+        label: 'Claude Desktop',
+        supportsProjectScope: false,
+        getConfigPath() {
+            return claudeDesktopConfigPath();
+        },
+        containerPath: ['mcpServers'],
+        entryValue: PLUGSCOUT_MCP_STDIO,
+    },
+    windsurf: {
+        label: 'Windsurf',
+        supportsProjectScope: false,
+        getConfigPath() {
+            return path.join(os.homedir(), '.codeium', 'windsurf', 'mcp_config.json');
+        },
+        containerPath: ['mcpServers'],
+        entryValue: PLUGSCOUT_MCP_STDIO,
+    },
+    opencode: {
+        label: 'OpenCode',
+        supportsProjectScope: false,
+        getConfigPath() {
+            return openCodeConfigPath();
+        },
+        containerPath: ['mcp'],
+        entryValue: PLUGSCOUT_MCP_STDIO,
+    },
+    zed: {
+        label: 'Zed',
+        supportsProjectScope: false,
+        getConfigPath() {
+            return path.join(os.homedir(), '.config', 'zed', 'settings.json');
+        },
+        containerPath: ['context_servers'],
+        entryValue: PLUGSCOUT_MCP_ZED,
+    },
+};
+export const VALID_CLIENT_KINDS = Object.keys(CLIENT_DEFS);
+export function getConfigPath(client, scope) {
+    return CLIENT_DEFS[client].getConfigPath(scope);
+}
+function navigateContainer(obj, keys) {
+    let current = obj;
+    for (const key of keys) {
+        const next = current[key];
+        if (next === undefined || next === null || typeof next !== 'object' || Array.isArray(next)) {
+            current[key] = {};
+        }
+        current = current[key];
+    }
+    return current;
+}
+export async function getClientMcpConfigStatus(client, scope) {
+    const def = CLIENT_DEFS[client];
+    const configPath = def.getConfigPath(scope);
+    try {
+        const raw = await fs.readFile(configPath, 'utf8');
+        const config = JSON.parse(raw);
+        let container = config;
+        for (const key of def.containerPath) {
+            const next = container[key];
+            if (next === undefined || typeof next !== 'object' || next === null || Array.isArray(next)) {
+                return { configured: false, configPath };
+            }
+            container = next;
+        }
+        return { configured: !!container['plugscout'], configPath };
+    }
+    catch {
+        return { configured: false, configPath };
+    }
+}
+export async function writeClientMcpConfig(options) {
+    const { client, force = false } = options;
+    const def = CLIENT_DEFS[client];
+    const scope = def.supportsProjectScope ? options.scope : 'user';
+    const configPath = def.getConfigPath(scope);
+    let existing = {};
+    try {
+        const raw = await fs.readFile(configPath, 'utf8');
+        existing = JSON.parse(raw);
+    }
+    catch {
+        // file doesn't exist yet — start empty
+    }
+    const container = navigateContainer(existing, def.containerPath);
+    const current = container['plugscout'];
+    if (current !== undefined) {
+        const isSame = JSON.stringify(current) === JSON.stringify(def.entryValue);
+        if (isSame)
+            return { status: 'already-configured', configPath };
+        if (!force) {
+            throw new Error(`plugscout already exists in ${configPath} with a different value. Use --force to overwrite.`);
+        }
+    }
+    container['plugscout'] = def.entryValue;
+    const dir = path.dirname(configPath);
+    await fs.mkdir(dir, { recursive: true });
+    const tmpPath = `${configPath}.plugscout.tmp`;
+    await fs.writeFile(tmpPath, `${JSON.stringify(existing, null, 2)}\n`, 'utf8');
+    await fs.rename(tmpPath, configPath);
+    return { status: 'written', configPath };
+}

package/dist/interfaces/cli/doctor.js

@@ -1,9 +1,11 @@
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
+import os from 'node:os';
 import fs from 'node:fs/promises';
 import { getStaleRegistries, loadSyncState } from '../../catalog/sync-state.js';
 import { loadCatalogItems } from '../../catalog/repository.js';
 import { hasLegacySkillSh, resolveSkillsRuntime } from '../../install/dependencies.js';
+import { getClientMcpConfigStatus, CLIENT_DEFS } from './client-setup.js';
 export async function runDoctorChecks(projectPath = '.') {
     const checks = [];
     checks.push(checkSkillsRuntime());
@@ -58,6 +60,92 @@ export async function runDoctorChecks(projectPath = '.') {
             suggestion: 'Run: npm run dev -- init'
         });
     }
+    // Cursor IDE check
+    const cursorInstalled = spawnSync('which', ['cursor'], { encoding: 'utf8' }).status === 0 ||
+        await fs.access(path.join(os.homedir(), '.cursor')).then(() => true).catch(() => false);
+    checks.push(cursorInstalled
+        ? { name: 'Cursor IDE', status: 'pass', message: 'Cursor detected' }
+        : { name: 'Cursor IDE', status: 'warn', message: 'Cursor not detected', suggestion: 'Install Cursor from https://cursor.sh' });
+    // Gemini CLI check
+    checks.push(checkBinary('gemini', { suggestion: 'Install Gemini CLI: npm install -g @google/gemini-cli' }));
+    // Cursor MCP config check
+    try {
+        const cursorStatus = await getClientMcpConfigStatus('cursor', 'user');
+        checks.push(cursorStatus.configured
+            ? { name: 'Cursor MCP config', status: 'pass', message: `plugscout wired in ${cursorStatus.configPath}` }
+            : { name: 'Cursor MCP config', status: 'warn', message: 'plugscout not in Cursor MCP config', suggestion: 'Run: plugscout client setup --client cursor' });
+    }
+    catch {
+        checks.push({ name: 'Cursor MCP config', status: 'warn', message: 'Could not read Cursor MCP config', suggestion: 'Run: plugscout client setup --client cursor' });
+    }
+    // Gemini MCP config check
+    try {
+        const geminiStatus = await getClientMcpConfigStatus('gemini', 'user');
+        checks.push(geminiStatus.configured
+            ? { name: 'Gemini MCP config', status: 'pass', message: `plugscout wired in ${geminiStatus.configPath}` }
+            : { name: 'Gemini MCP config', status: 'warn', message: 'plugscout not in Gemini MCP config', suggestion: 'Run: plugscout client setup --client gemini' });
+    }
+    catch {
+        checks.push({ name: 'Gemini MCP config', status: 'warn', message: 'Could not read Gemini MCP config', suggestion: 'Run: plugscout client setup --client gemini' });
+    }
+    // Claude Desktop check
+    const claudeDesktopConfigPath = CLIENT_DEFS['claude-desktop'].getConfigPath('user');
+    const claudeDesktopPresent = spawnSync('which', ['claude'], { encoding: 'utf8' }).status === 0 ||
+        await fs.access(path.dirname(claudeDesktopConfigPath)).then(() => true).catch(() => false) ||
+        await fs.access(path.join('/', 'Applications', 'Claude.app')).then(() => true).catch(() => false);
+    checks.push(claudeDesktopPresent
+        ? { name: 'Claude Desktop', status: 'pass', message: 'Claude Desktop detected' }
+        : { name: 'Claude Desktop', status: 'warn', message: 'Claude Desktop not detected', suggestion: 'Install from https://claude.ai/download' });
+    // Claude Desktop MCP config check
+    try {
+        const claudeStatus = await getClientMcpConfigStatus('claude-desktop', 'user');
+        checks.push(claudeStatus.configured
+            ? { name: 'Claude Desktop MCP', status: 'pass', message: `plugscout wired in ${claudeStatus.configPath}` }
+            : { name: 'Claude Desktop MCP', status: 'warn', message: 'plugscout not in Claude Desktop config', suggestion: 'Run: plugscout client setup --client claude-desktop' });
+    }
+    catch {
+        checks.push({ name: 'Claude Desktop MCP', status: 'warn', message: 'Could not read Claude Desktop config', suggestion: 'Run: plugscout client setup --client claude-desktop' });
+    }
+    // Windsurf check
+    checks.push(checkBinary('windsurf', { suggestion: 'Install Windsurf from https://windsurf.ai' }));
+    // Windsurf MCP config check
+    try {
+        const windsurfStatus = await getClientMcpConfigStatus('windsurf', 'user');
+        checks.push(windsurfStatus.configured
+            ? { name: 'Windsurf MCP config', status: 'pass', message: `plugscout wired in ${windsurfStatus.configPath}` }
+            : { name: 'Windsurf MCP config', status: 'warn', message: 'plugscout not in Windsurf MCP config', suggestion: 'Run: plugscout client setup --client windsurf' });
+    }
+    catch {
+        checks.push({ name: 'Windsurf MCP config', status: 'warn', message: 'Could not read Windsurf MCP config', suggestion: 'Run: plugscout client setup --client windsurf' });
+    }
+    // OpenCode check
+    checks.push(checkBinary('opencode', { suggestion: 'Install OpenCode: npm install -g opencode-ai' }));
+    // OpenCode MCP config check
+    try {
+        const opencodeStatus = await getClientMcpConfigStatus('opencode', 'user');
+        checks.push(opencodeStatus.configured
+            ? { name: 'OpenCode MCP config', status: 'pass', message: `plugscout wired in ${opencodeStatus.configPath}` }
+            : { name: 'OpenCode MCP config', status: 'warn', message: 'plugscout not in OpenCode config', suggestion: 'Run: plugscout client setup --client opencode' });
+    }
+    catch {
+        checks.push({ name: 'OpenCode MCP config', status: 'warn', message: 'Could not read OpenCode config', suggestion: 'Run: plugscout client setup --client opencode' });
+    }
+    // Zed check
+    const zedInstalled = spawnSync('which', ['zed'], { encoding: 'utf8' }).status === 0 ||
+        await fs.access(path.join('/', 'Applications', 'Zed.app')).then(() => true).catch(() => false);
+    checks.push(zedInstalled
+        ? { name: 'Zed', status: 'pass', message: 'Zed detected' }
+        : { name: 'Zed', status: 'warn', message: 'Zed not detected', suggestion: 'Install Zed from https://zed.dev' });
+    // Zed MCP config check
+    try {
+        const zedStatus = await getClientMcpConfigStatus('zed', 'user');
+        checks.push(zedStatus.configured
+            ? { name: 'Zed MCP config', status: 'pass', message: `plugscout wired in ${zedStatus.configPath}` }
+            : { name: 'Zed MCP config', status: 'warn', message: 'plugscout not in Zed settings', suggestion: 'Run: plugscout client setup --client zed' });
+    }
+    catch {
+        checks.push({ name: 'Zed MCP config', status: 'warn', message: 'Could not read Zed settings', suggestion: 'Run: plugscout client setup --client zed' });
+    }
     return checks;
 }
 function checkSkillsRuntime() {

package/dist/interfaces/cli/index.js

@@ -62,6 +62,7 @@ const COMMAND_ALIASES = {
     setup: 'setup',
     help: 'help',
     mcp: 'mcp',
+    client: 'client',
 };
 export async function runCli(argv) {
     const noUpdateCheck = hasFlag(argv, '--no-update-check');
@@ -136,6 +137,9 @@ export async function runCli(argv) {
         case 'mcp':
             await handleMcp(rest);
             return; // intentional: MCP server is long-lived; update banner would corrupt JSON-RPC stream
+        case 'client':
+            await handleClient(rest);
+            break;
         case 'help':
             printHelp();
             break;
@@ -166,7 +170,7 @@ async function handleAbout() {
     if (pkg.author) {
         console.log(`Author: ${pkg.author}`);
     }
-    console.log('Scope: Claude plugins, Claude connectors, Copilot extensions, Skills, MCP servers');
+    console.log('Scope: Claude plugins, Claude connectors, Copilot extensions, Cursor extensions, Gemini extensions, Skills, MCP servers');
     console.log('Ranking: trust-first (fit + trust - risk penalties + freshness bonus)');
     console.log('Meaning: top/recommend output is repo-aware guidance, not a global popularity leaderboard.');
     console.log('Install discipline: review each suggestion, check provenance and risk, and do not install blindly from rank alone.');
@@ -190,7 +194,7 @@ async function handleStatus(args) {
     });
     console.log('Catalog Status');
     console.log(`Items: ${items.length}`);
-    console.log(`Kinds: skill=${kindCounts.get('skill') ?? 0}, mcp=${kindCounts.get('mcp') ?? 0}, claude-plugin=${kindCounts.get('claude-plugin') ?? 0}, claude-connector=${kindCounts.get('claude-connector') ?? 0}, copilot-extension=${kindCounts.get('copilot-extension') ?? 0}`);
+    console.log(`Kinds: skill=${kindCounts.get('skill') ?? 0}, mcp=${kindCounts.get('mcp') ?? 0}, claude-plugin=${kindCounts.get('claude-plugin') ?? 0}, claude-connector=${kindCounts.get('claude-connector') ?? 0}, copilot-extension=${kindCounts.get('copilot-extension') ?? 0}, cursor-extension=${kindCounts.get('cursor-extension') ?? 0}, gemini-extension=${kindCounts.get('gemini-extension') ?? 0}`);
     console.log(`Providers: ${Array.from(providerCounts.entries())
         .sort((a, b) => a[0].localeCompare(b[0]))
         .map(([name, count]) => `${name}=${count}`)
@@ -228,7 +232,7 @@ async function handleInit(args) {
     const root = path.resolve(project);
     const [items, policy] = await Promise.all([loadCatalogItems(), loadSecurityPolicy()]);
     const providers = Array.from(new Set(items.map((item) => item.provider))).sort((a, b) => a.localeCompare(b));
-    const defaultKinds = ['skill', 'mcp', 'claude-plugin', 'claude-connector', 'copilot-extension'];
+    const defaultKinds = ['skill', 'mcp', 'claude-plugin', 'claude-connector', 'copilot-extension', 'cursor-extension', 'gemini-extension'];
     const defaults = {
         defaultKinds,
         defaultProviders: providers,
@@ -298,7 +302,7 @@ async function handleSetup(args) {
     console.log('Step 2/3: Initializing local config...');
     const [items, policy] = await Promise.all([loadCatalogItems(), loadSecurityPolicy()]);
     const providers = Array.from(new Set(items.map((item) => item.provider))).sort((a, b) => a.localeCompare(b));
-    const defaultKinds = ['skill', 'mcp', 'claude-plugin', 'claude-connector', 'copilot-extension'];
+    const defaultKinds = ['skill', 'mcp', 'claude-plugin', 'claude-connector', 'copilot-extension', 'cursor-extension', 'gemini-extension'];
     const defaults = {
         defaultKinds,
         defaultProviders: providers,
@@ -853,6 +857,38 @@ async function handleQuarantine(args) {
     const result = await applyQuarantineFromReport(report);
     console.log(renderJson(result));
 }
+async function handleClient(args) {
+    const subcommand = args[0];
+    if (subcommand !== 'setup') {
+        throw new Error('Usage: client setup --client cursor|gemini|claude-desktop|windsurf|opencode|zed [--scope user|project] [--force]');
+    }
+    const { writeClientMcpConfig, CLIENT_DEFS, VALID_CLIENT_KINDS } = await import('./client-setup.js');
+    const clientFlag = readFlag(args, '--client');
+    if (!clientFlag || !VALID_CLIENT_KINDS.includes(clientFlag)) {
+        throw new Error(`Usage: client setup --client ${VALID_CLIENT_KINDS.join('|')}`);
+    }
+    const scopeFlag = readFlag(args, '--scope') ?? 'user';
+    if (scopeFlag !== 'user' && scopeFlag !== 'project') {
+        throw new Error('--scope must be user or project');
+    }
+    const def = CLIENT_DEFS[clientFlag];
+    if (!def.supportsProjectScope && scopeFlag === 'project') {
+        logger.warn(`${def.label} only supports user scope; falling back to user scope.`);
+    }
+    const force = hasFlag(args, '--force');
+    const result = await writeClientMcpConfig({
+        client: clientFlag,
+        scope: scopeFlag,
+        force
+    });
+    if (result.status === 'already-configured') {
+        console.log(`plugscout already configured in ${result.configPath}`);
+    }
+    else {
+        console.log(`plugscout MCP config written: ${result.configPath}`);
+        printHint(`Restart ${def.label} for the change to take effect.`);
+    }
+}
 async function handleUpgrade(args) {
     const subcommand = args[0] ?? 'check';
     if (subcommand !== 'check') {
@@ -980,7 +1016,7 @@ function printHelp() {
     console.log('  init [--project .]');
     console.log('  doctor [--project .] [--install-deps]');
     console.log('  status [--verbose]');
-    console.log('  sync [--kind skill,mcp,claude-plugin,claude-connector,copilot-extension] [--dry-run]');
+    console.log('  sync [--kind skill,mcp,claude-plugin,claude-connector,copilot-extension,cursor-extension,gemini-extension] [--dry-run]');
     console.log('');
     console.log('Explore');
     console.log('  list [--kind ...] [--provider ...] [--risk-tier low|medium|high|critical] [--blocked true|false] [--search q] [--limit n] [--sort name|risk|trust] [--format json|table] [--readable] [--details]');
@@ -1005,6 +1041,7 @@ function printHelp() {
     console.log('Other');
     console.log('  about');
     console.log('  web [--out .plugscout/report.html] [--kind ...] [--limit n] [--open]');
+    console.log('  client setup --client cursor|gemini|claude-desktop|windsurf|opencode|zed [--scope user|project] [--force]');
     console.log('  upgrade check');
     console.log('  help');
     console.log('');
@@ -1014,11 +1051,22 @@ function printHelp() {
     console.log('  plugins -> claude-plugin');
     console.log('  connectors -> claude-connector');
     console.log('  extensions, copilot -> copilot-extension');
+    console.log('  cursor, cursor-extensions -> cursor-extension');
+    console.log('  gemini, gemini-extensions -> gemini-extension');
     console.log('');
     console.log('Examples');
     console.log('  plugscout recommend --project . --only-safe --limit 10');
+    console.log('  plugscout list --kind cursor --limit 15');
+    console.log('  plugscout list --kind gemini --limit 11');
     console.log('  plugscout list --kind connectors --limit 10');
     console.log('  plugscout show --id claude-connector:asana');
+    console.log('  plugscout client setup --client cursor');
+    console.log('  plugscout client setup --client gemini');
+    console.log('  plugscout client setup --client claude-desktop');
+    console.log('  plugscout client setup --client windsurf');
+    console.log('  plugscout client setup --client opencode');
+    console.log('  plugscout client setup --client zed');
+    console.log('  plugscout sync --kind cursor-extension,gemini-extension');
     console.log('');
     console.log('Global options');
     console.log('  --no-update-check');
@@ -1032,7 +1080,7 @@ async function loadLocalCliConfig(projectRoot) {
             return null;
         }
         return {
-            defaultKinds: Array.isArray(parsed.defaultKinds) ? parsed.defaultKinds : ['skill', 'mcp', 'claude-plugin', 'claude-connector', 'copilot-extension'],
+            defaultKinds: Array.isArray(parsed.defaultKinds) ? parsed.defaultKinds : ['skill', 'mcp', 'claude-plugin', 'claude-connector', 'copilot-extension', 'cursor-extension', 'gemini-extension'],
             defaultProviders: Array.isArray(parsed.defaultProviders) ? parsed.defaultProviders : [],
             riskPosture: parsed.riskPosture,
             outputStyle: parsed.outputStyle === 'json' ? 'json' : 'rich-table',

package/dist/interfaces/cli/mcp.js

@@ -18,7 +18,7 @@ export function createMcpServer(version = '0.0.0') {
                     type: 'object',
                     properties: {
                         query: { type: 'string', description: 'Search term' },
-                        kind: { type: 'string', description: 'Filter by kind: skill, mcp, claude-plugin, claude-connector, copilot-extension' },
+                        kind: { type: 'string', description: 'Filter by kind: skill, mcp, claude-plugin, claude-connector, copilot-extension, cursor-extension, gemini-extension' },
                         provider: { type: 'string', description: 'Filter by provider' },
                         limit: { type: 'number', description: 'Max results (default: 20)' },
                     },

package/dist/interfaces/cli/options.js

@@ -24,7 +24,13 @@ const KIND_ALIASES = {
     'copilot extensions': 'copilot-extension',
     extension: 'copilot-extension',
     extensions: 'copilot-extension',
-    copilot: 'copilot-extension'
+    copilot: 'copilot-extension',
+    'cursor-extension': 'cursor-extension',
+    'cursor-extensions': 'cursor-extension',
+    cursor: 'cursor-extension',
+    'gemini-extension': 'gemini-extension',
+    'gemini-extensions': 'gemini-extension',
+    gemini: 'gemini-extension'
 };
 export function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -57,7 +63,7 @@ export function normalizeKind(raw) {
         return CatalogKindSchema.parse(normalized);
     }
     catch {
-        throw new Error(`Invalid --kind value: ${raw}. Expected one of: skill, mcp, claude-plugin, claude-connector, copilot-extension. Aliases also supported: skills, mcps, plugins, connectors, extensions.`);
+        throw new Error(`Invalid --kind value: ${raw}. Expected one of: skill, mcp, claude-plugin, claude-connector, copilot-extension, cursor-extension, gemini-extension. Aliases also supported: skills, mcps, plugins, connectors, extensions, cursor, gemini.`);
     }
 }
 export function readCsvList(args, flag) {

package/dist/interfaces/cli/ui/web-report.js

@@ -205,13 +205,15 @@ function renderHtml(rows, stats, policy) {
 <body>
   <div class="wrap">
     <h1>PlugScout Web Report</h1>
-    <p class="sub">Claude plugins · Claude connectors · Copilot extensions · Skills · MCP servers</p>
+    <p class="sub">Claude plugins · Claude connectors · Copilot extensions · Cursor extensions · Gemini extensions · Skills · MCP servers</p>
 
     <div class="stat-cards">
       <div class="stat-card"><div class="k">Total</div><div class="v">${stats.totalItems}</div></div>
       <div class="stat-card"><div class="k">Plugins</div><div class="v">${kindCounts['claude-plugin']}</div></div>
       <div class="stat-card"><div class="k">Connectors</div><div class="v">${kindCounts['claude-connector']}</div></div>
       <div class="stat-card"><div class="k">Copilot Ext</div><div class="v">${kindCounts['copilot-extension']}</div></div>
+      <div class="stat-card"><div class="k">Cursor Ext</div><div class="v">${kindCounts['cursor-extension']}</div></div>
+      <div class="stat-card"><div class="k">Gemini Ext</div><div class="v">${kindCounts['gemini-extension']}</div></div>
       <div class="stat-card"><div class="k">Skills</div><div class="v">${kindCounts.skill}</div></div>
       <div class="stat-card"><div class="k">MCP Servers</div><div class="v">${kindCounts.mcp}</div></div>
       <div class="stat-card"><div class="k">Whitelist / Quarantine</div><div class="v">${stats.whitelist} / ${stats.quarantined}</div></div>
@@ -232,6 +234,8 @@ function renderHtml(rows, stats, policy) {
         <option value="claude-plugin">Claude plugin</option>
         <option value="claude-connector">Claude connector</option>
         <option value="copilot-extension">Copilot extension</option>
+        <option value="cursor-extension">Cursor extension</option>
+        <option value="gemini-extension">Gemini extension</option>
         <option value="skill">Skill</option>
         <option value="mcp">MCP server</option>
       </select>
@@ -440,6 +444,8 @@ function countByKind(items) {
         mcp: 0,
         'claude-plugin': 0,
         'claude-connector': 0,
-        'copilot-extension': 0
+        'copilot-extension': 0,
+        'cursor-extension': 0,
+        'gemini-extension': 0
     });
 }