arkgate 4.5.6 → 4.6.0

package/CHANGELOG.md

@@ -5,6 +5,52 @@ in the immutable pre-2.0 archive linked below.
 
 ## Unreleased
 
+## 4.6.0 — 2026-08-12
+
+**Minor** over **4.5.7**. Understandable Ark: doctor, HTML, skills, and public docs use common
+software words (import rules, leftover design work, pre-write block) while **ArkGate** and
+**ArkRules** stay as product names. Shared Claude/Grok agent homes get the same monotonic
+“always latest” floor Codex already had. **No required config migration.** JSON field names
+and `ruleId`s stay stable. No new skill names, sensors, or scores.
+
+**Status: prepared** (not yet on npm `latest`; see `docs/releases/4.6.0.md`).
+
+### Added
+
+- **Shared Claude/Grok home skills:** `--claude-home`, `--grok-home`, and `--agent-homes`
+  write monotonic home catalogs (Codex-parity lock + floor). Doctor reports stale
+  `~/.claude/skills` / `~/.grok/skills` when those catalogs exist. Temp/upgrade `--root`
+  never mutates default user homes.
+
+### Changed
+
+- **Human language:** doctor, HTML report, compact router, skills, and public lanes prefer
+  common terms. Leftover design work replaces “design-weak” in human copy; JSON `designWeak`
+  is unchanged.
+
+## 4.5.7 — 2026-08-12
+
+**Patch** over **4.5.6**. Cursor hard write path: project `.cursor/hooks.json` `preToolUse`
+gate for `Write` / `StrReplace` (failClosed), host matrix + doctor honesty, payload mapping
+(`contents` / `StrReplace`), install/merge without wiping sibling hooks. Repair envelope may
+emit; Write `updated_input` reinjection is **not** claimed. Codex/OpenCode stay advisory at
+write. Shell/Tab/human edits still rely on required CI. **No required config migration.**
+
+**Status: published** (on npm `latest`; see `docs/releases/4.5.7.md`).
+
+### Added
+
+- **Cursor hard write (CH01):** install writes `.cursor/hooks.json` with
+  `preToolUse` matcher `Write|StrReplace`, `failClosed: true`, `--hook --hook-repair`,
+  `--root-env CURSOR_PROJECT_DIR`. Merge preserves sibling Cursor hooks.
+- **Hook runtime:** Cursor payload normalization (`contents` → `content`, `StrReplace` → Edit)
+  and stdout `{ permission: "deny", agent_message, user_message }` on block.
+
+### Changed
+
+- Host support matrix: Cursor `hard-write: true` for listed ops; soft hosts are Codex/OpenCode.
+- Docs: `docs/ai-gates.md`, agent guide, README matrix, CLI help.
+
 ## 4.5.6 — 2026-08-11
 
 **Patch** over **4.5.5**. Field upgrade & multi-project MCP truth (Phase FX): registry-aware
@@ -12,7 +58,7 @@ package install, structured skip recovery, skill drift + opt-in refresh, post-up
 MCP process package honesty, host selection notes, early whatsNew, inventory UX-copy quieting.
 **No required config migration.** No new skill names, sensors, or scores. Freezes held.
 
-**Status: prepared** (not on npm `latest` until publish train completes; see
+**Status: published** (on npm `latest`; see
 `docs/releases/4.5.6.md`).
 
 ### Added

package/README.md

@@ -2,7 +2,7 @@
 
 # ArkGate — Architecture Co-pilot for AI TypeScript
 
-**One contract. One gate. One co-pilot.**
+**One architecture config. One check. One coach.**
 
 Your AI writes most of the code. ArkGate keeps that work inside an architecture you can trust —
 and makes sure a “green” check means something real.
@@ -16,8 +16,8 @@ and makes sure a “green” check means something real.
 
 </div>
 
-> **ArkGate 4.5.5** is on npm `latest` — deep-module coach, upgrade what’s new, session honesty.
-> [4.5.5 notes](docs/releases/4.5.5.md) · [4.5.0](docs/releases/4.5.0.md) · [4.4.0](docs/releases/4.4.0.md) · [Docs hub](docs/README.md) · [Product voice](docs/product-voice.md)
+> **ArkGate 4.6.0** is prepared — clearer language + shared agent home skills.
+> [4.6.0 notes](docs/releases/4.6.0.md) · [4.5.7](docs/releases/4.5.7.md) (npm `latest`) · [4.5.6](docs/releases/4.5.6.md) · [Docs hub](docs/README.md) · [Product voice](docs/product-voice.md)
 
 ---
 
@@ -43,9 +43,9 @@ npx arkgate-check --doctor        # control plane: status light + primary next a
 ```
 
 That is the product. Doctor is the control plane — when stuck, do **primary next action #1**.
-Doctor also shows an **improvement compass** (architecture lenses such as separation of concerns and
-dependency inversion — **not a score**). Residual lenses mean Shape work may remain even when edges
-are green. Details: [use.md — Improvement compass](docs/use.md#improvement-compass-not-a-score).
+Doctor also shows **what to improve next** (architecture lenses such as separation of concerns and
+dependency inversion — **not a score**). Leftover lenses mean design work may remain even when
+imports are green. Details: [use.md — Improvement compass](docs/use.md#improvement-compass-not-a-score).
 
 ```text
 start → doctor (+ compass) → day-to-day (place + gate)
@@ -64,15 +64,15 @@ A machine-readable architecture file (`ark.config.json`) plus enforcement:
 
 | When | Tool |
 |------|------|
-| **While the AI writes** | Hard PreToolUse on supported hosts; advisory MCP elsewhere |
+| **While the AI writes** | Pre-write block on supported hosts; warning only elsewhere |
 | **Before merge** | `arkgate-check` as a **required** CI status |
 
 ### Two planes (4.0)
 
 | Plane | What it guards | Config |
 |-------|----------------|--------|
-| **Layers** (always) | Who may talk to whom — imports, placement, purity, isolation | `ark.config.json` layers + rules |
-| **ArkRules** (opt-in) | Habits *inside* a layer — structure sensors + domain invariants as data | `arkRules` → `arkrules/<Layer>.json` |
+| **Layers** (always) | Who may import whom — imports, placement, purity, isolation | `ark.config.json` layers + rules |
+| **ArkRules** (opt-in; structure rules inside a layer) | Habits *inside* a layer — structure sensors + domain invariants as data | `arkRules` → `arkrules/<Layer>.json` |
 
 Absence of ArkRules changes no inter-layer verdict. Label residual **`[Layer]`** vs **`[ArkRules]`**.  
 Details: [configuration](docs/configuration.md#arkrules-intra-layer-opt-in) · [use path](docs/use.md).
@@ -113,16 +113,16 @@ Details: [docs/use.md](docs/use.md).
 | Claude Code | **Hard** block for listed ops (PreToolUse `Write` / `Edit` / `MultiEdit`) when installed + trusted | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | Emitted on hook deny; host must re-inject (hard path when installed + trusted) |
 | Grok Build | **Hard** block for listed ops (PreToolUse `write` / `search_replace` (plus aliases)) when installed + trusted | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | Emitted on hook deny; host must re-inject (hard path when installed + trusted) |
 | Google Antigravity | **Hard** block for listed ops (PreToolUse `write_to_file` / `replace_file_content` / `multi_replace_file_content`) when installed + trusted | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | Emitted on hook deny; host must re-inject (hard path when installed + trusted) |
-| Cursor | **Advisory only** at write (no hard hook) | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | No hard-boundary payload |
-| OpenAI Codex | **Advisory / best-effort** at write (not equivalent to Claude/Grok hard block) | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | Envelope may emit (`--hook-repair`); reinjection **not** guaranteed (advisory host) |
+| Cursor | **Hard** block for listed ops (preToolUse `Write` / `StrReplace`) when installed + trusted | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | Envelope may emit (`--hook-repair`); reinjection **not** guaranteed (advisory host) |
+| OpenAI Codex | **Advisory / best-effort** at write (not equivalent to Claude/Grok/Cursor hard block) | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | Envelope may emit (`--hook-repair`); reinjection **not** guaranteed (advisory host) |
 | OpenCode | **Advisory / best-effort** at write (MCP + optional plugin; not a hard boundary) | Advisory; the agent must call it | **Required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`) | No hard-boundary payload |
 
 **Read the CI column:** for every host, the repository-wide hard guarantee is a **required**
 GitHub **status context** that runs the CLI — not “CI file present,” and not the CLI binary name alone.
-Cursor/Codex/OpenCode never get a fake hard write claim.
+Codex/OpenCode never get a fake hard write claim. Cursor hard write covers only listed
+`preToolUse` ops when `.cursor/hooks.json` is installed and trusted — Shell/Tab/human edits still rely on CI.
 
 This table describes the supported profile **after its files are installed and the host loads/trusts them**. A hard local boundary covers only the listed hook operations; alternate tools, direct filesystem writes, and human edits still rely on CI. MCP validation is advisory because the agent must call it. The CI check blocks a merge only when the repository makes that status required. Repair **envelopes** may be emitted without reinjection being guaranteed; silent auto-apply never happens. Run `arkgate-check --doctor` (or `ark-check --doctor`) for the evidence actually detected in the current repository.
-
 <!-- arkgate-host-support:end -->
 
 #### Why the hard guarantee lives at the merge gate
@@ -175,6 +175,8 @@ npx arkgate-check --plan
 npx arkgate-check --coverage
 npx arkgate-check --strict-merge   # CI / required status
 npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok
+# optional: refresh shared home skills (Claude/Grok/Codex; never downgrades)
+# npx arkgate-check --install-agent-gates --skills-only --agent-homes --force
 # optional: same 13 skills via Agent Skills ecosystem (no new names)
 # npx skills add ./node_modules/arkgate/templates/agent-skills
 ```
@@ -208,7 +210,7 @@ for real systems. Details: [docs/production-hardening.md](docs/production-harden
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Current release (4.5.5 on npm `latest`) | [docs/releases/4.5.5.md](docs/releases/4.5.5.md) · [CHANGELOG](CHANGELOG.md) |
+| Current release (4.5.7 on npm `latest`) | [docs/releases/4.5.7.md](docs/releases/4.5.7.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior (4.5.0) | [docs/releases/4.5.0.md](docs/releases/4.5.0.md) |
 | Prior (4.4.0) | [docs/releases/4.4.0.md](docs/releases/4.4.0.md) |
 | Prior (4.3.0) | [docs/releases/4.3.0.md](docs/releases/4.3.0.md) |

package/bin/ark-check-runtime.mjs

@@ -213,6 +213,14 @@ function parseArgs(argv) {
     else if (arg === '--watch') args.watch = true;
     else if (arg === '--beginner') args.beginner = true;
     else if (arg === '--codex-home') args.codexHome = true;
+    else if (arg === '--claude-home') args.claudeHome = true;
+    else if (arg === '--grok-home') args.grokHome = true;
+    else if (arg === '--agent-homes') {
+      args.agentHomes = true;
+      args.codexHome = true;
+      args.claudeHome = true;
+      args.grokHome = true;
+    }
     else if (arg === '--migrate-commands') args.migrateCommands = true;
     else if (arg === '--no-cache') args.noCache = true;
     else if (arg === '--resident') args.resident = true;
@@ -275,7 +283,7 @@ function usage() {
     '           Best-effort open in browser (local TTY). No-op if open fails. --no-open / ARK_NO_OPEN_REPORT=1 to skip; --open forces open.',
     '       ark-check --init [--preset hexagonal|layered|feature-sliced|monorepo|ui-surface|vertical-slice|ddd-bounded-contexts|vite-vercel-spa|clean-architecture|onion-architecture] [--force] [--follow-config-root]',
     '       --follow-config-root  On writes (init/install-agent-gates/migrate --write/…), adopt walked-up monorepo config root (default: keep explicit --root)',
-    '       ark-check --install-agent-gates [--tools claude,cursor,codex,grok] [--require-write-hook <host>] [--skills-only] [--codex-home] [--force]',
+    '       ark-check --install-agent-gates [--tools claude,cursor,codex,grok] [--require-write-hook <host>] [--skills-only] [--codex-home] [--claude-home] [--grok-home] [--agent-homes] [--force]',
     '       ark-check --update-baseline [file]     freeze current violations (default .ark-baseline.json)',
     '       ark-check --print-config eleven-layer',
     '',
@@ -322,9 +330,10 @@ function usage() {
     'transition. Weakening or judgment-required findings fail unless --policy-ack names',
     'every finding and is bound to both policy hashes. Use --policy-base/--policy-base-ref',
     'for an explicit comparison; ARK_POLICY_BASE_REF is the CI environment equivalent.',
-    'Add --require-write-hook claude|grok to validate a hard local write boundary for that',
-    'specific host. Cursor and Codex expose advisory MCP tools plus the shared CI check;',
-    'merge blocking requires repository policy to make that status required.',
+    'Add --require-write-hook claude|grok|antigravity|cursor to validate a hard local write',
+    'boundary for that specific host. Codex and OpenCode expose advisory MCP (plus best-effort',
+    'hooks where applicable) and the shared CI check; merge blocking requires repository policy',
+    'to make that status required.',
     '',
     '--require-gates implies --strict-config and fails when the Ark contract in AGENTS.md,',
     'the project-rooted Ark server in .mcp.json, or fail-closed CI is missing/invalid.',
@@ -332,7 +341,8 @@ function usage() {
     '',
     '--install-agent-gates writes AGENTS.md, .mcp.json, and the CI workflow for every',
     'project, plus tool-specific templates. Known tools: claude, cursor, codex, grok',
-    '(Claude/Grok hard-write hooks; Cursor/Codex advisory MCP; shared CI check for all) and',
+    '(Claude/Grok/Antigravity/Cursor hard-write hooks when covered; Codex advisory MCP;',
+    'shared CI check for all) and',
     'windsurf, cline, copilot, kiro, roo, continue, gemini',
     '(instruction-tier rule files derived from the same contract).',
     'It also installs the /ark-* skills shipped in templates/skills/ into each',

package/bin/ark-mcp-runtime.mjs

@@ -5,8 +5,11 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { createHash, randomUUID } from 'node:crypto';
 import { spawnSync } from 'node:child_process';
-import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
+import {
+  buildProcessPackageHonesty,
+  readProjectInstalledArkgateVersion,
+} from './lib/mcp-process-package.mjs';
 import {
   DEFAULT_INTENT_PREFIXES,
   DEFAULT_LAYER_DIRECTORIES,
@@ -351,6 +354,8 @@ function mapAntigravityToolCall(toolCall) {
  * Grok Build:  { toolName, toolInput:  { file_path, content | old_string/new_string } }
  *              (aliases Write/Edit/MultiEdit → write/search_replace; matcher keeps both)
  * Antigravity: { toolCall: { name, args: { TargetFile, CodeContent, … } } }
+ * Cursor:      { tool_name, tool_input, hook_event_name?, workspace_roots? }
+ *              Write uses `contents`; StrReplace maps to Edit (path/old_string/new_string).
  */
 function normalizeHookPayload(payload, grokHookEvent = Boolean(process.env.GROK_HOOK_EVENT)) {
   const antigravityStyle =
@@ -367,17 +372,25 @@ function normalizeHookPayload(payload, grokHookEvent = Boolean(process.env.GROK_
       toolInput: { ...(mapped?.toolInput ?? {}), file_path: filePath },
       grokStyle: true, // decision JSON on stdout (deny)
       antigravityStyle: true,
+      cursorStyle: false,
       operation: mapped?.operation ?? mapped?.toolName ?? null,
     };
   }
 
   const rawName = payload?.tool_name ?? payload?.toolName ?? '';
-  const toolInput = payload?.tool_input ?? payload?.toolInput ?? {};
+  const toolInputRaw = payload?.tool_input ?? payload?.toolInput ?? {};
+  const toolInput =
+    toolInputRaw && typeof toolInputRaw === 'object' ? { ...toolInputRaw } : {};
+  // Cursor Write uses `contents`; Claude/Grok use `content`.
+  if (toolInput.content == null && typeof toolInput.contents === 'string') {
+    toolInput.content = toolInput.contents;
+  }
   const nameMap = {
     Write: 'Write',
     write: 'Write',
     Edit: 'Edit',
     search_replace: 'Edit',
+    StrReplace: 'Edit',
     MultiEdit: 'MultiEdit',
     ApplyPatch: 'ApplyPatch',
     apply_patch: 'ApplyPatch',
@@ -388,6 +401,15 @@ function normalizeHookPayload(payload, grokHookEvent = Boolean(process.env.GROK_
   const toolName = nameMap[rawName] ?? rawName;
   const filePath =
     toolInput.file_path ?? toolInput.filePath ?? toolInput.path ?? toolInput.target_file;
+  const cursorStyle =
+    Boolean(process.env.CURSOR_PROJECT_DIR) ||
+    Boolean(process.env.CURSOR_VERSION) ||
+    (payload != null &&
+      typeof payload === 'object' &&
+      (payload.hook_event_name === 'preToolUse' ||
+        Array.isArray(payload.workspace_roots) ||
+        rawName === 'StrReplace' ||
+        (rawName === 'Write' && typeof toolInputRaw?.contents === 'string')));
   return {
     toolName,
     toolInput: { ...toolInput, file_path: filePath },
@@ -396,7 +418,8 @@ function normalizeHookPayload(payload, grokHookEvent = Boolean(process.env.GROK_
       grokHookEvent ||
       (payload != null && typeof payload === 'object' && 'toolName' in payload),
     antigravityStyle: false,
-    operation: null,
+    cursorStyle,
+    operation: rawName === 'StrReplace' ? 'StrReplace' : null,
   };
 }
 
@@ -551,7 +574,7 @@ function designDeltaViolations(delta) {
  * generated code are inserted literally, never interpreted as replacement patterns.
  */
 function proposedSource(toolName, toolInput) {
-  if (toolName === 'Write') return toolInput.content;
+  if (toolName === 'Write') return toolInput.content ?? toolInput.contents;
 
   let text = '';
   try {
@@ -607,18 +630,30 @@ function emitAntigravityAllow(output, antigravityStyle) {
   output.stdout(`${JSON.stringify({ decision: 'allow' })}\n`);
 }
 
+/** Cursor preToolUse accepts explicit allow; exit 0 alone also works. */
+function emitCursorAllow(output, cursorStyle) {
+  if (!cursorStyle) return;
+  output.stdout(`${JSON.stringify({ permission: 'allow' })}\n`);
+}
+
+function emitHostAllow(output, { antigravityStyle, cursorStyle }) {
+  emitAntigravityAllow(output, antigravityStyle);
+  emitCursorAllow(output, cursorStyle);
+}
+
 function runHookPayload(payload, gate, config, args, ts, attemptContext, output = processHookOutput()) {
-  const { toolName, toolInput, grokStyle, antigravityStyle, operation } = normalizeHookPayload(
-    payload,
-    attemptContext?.grokHookEvent ?? Boolean(process.env.GROK_HOOK_EVENT)
-  );
+  const { toolName, toolInput, grokStyle, antigravityStyle, cursorStyle, operation } =
+    normalizeHookPayload(
+      payload,
+      attemptContext?.grokHookEvent ?? Boolean(process.env.GROK_HOOK_EVENT)
+    );
   if (toolName === 'ApplyPatch') {
     const patch = toolInput.patch ?? toolInput.input ?? toolInput.content;
     const parsedPatch = codexPatchWrites(patch, args.root);
     // Codex ApplyPatch is only preflighted when Ark can reconstruct every file operation.
     // An incomplete reconstruction must not be mislabeled as atomic or hard enforcement.
     if (!parsedPatch.complete) {
-      emitAntigravityAllow(output, antigravityStyle);
+      emitHostAllow(output, { antigravityStyle, cursorStyle });
       return;
     }
     const patchWrites = parsedPatch.writes;
@@ -684,7 +719,7 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
         );
       }
       if (changes.length === 0) {
-        emitAntigravityAllow(output, antigravityStyle);
+        emitHostAllow(output, { antigravityStyle, cursorStyle });
         return;
       }
       result = prepareChangeFromRoot({
@@ -742,7 +777,7 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
       ? evaluateWriteDesignDelta({ root: args.root, config, changes, ts })
       : null;
     if (result.valid && (designDelta?.valid ?? true)) {
-      emitAntigravityAllow(output, antigravityStyle);
+      emitHostAllow(output, { antigravityStyle, cursorStyle });
       return;
     }
     const message = [
@@ -776,23 +811,23 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
   const filePath = toolInput.file_path;
   if (!['Write', 'Edit', 'MultiEdit'].includes(toolName)) {
     // Non-file tools: fail-open. Antigravity still needs an explicit allow decision.
-    emitAntigravityAllow(output, antigravityStyle);
+    emitHostAllow(output, { antigravityStyle, cursorStyle });
     return;
   }
   if (typeof filePath !== 'string' || !SOURCE_FILE.test(filePath) || filePath.endsWith('.d.ts')) {
-    emitAntigravityAllow(output, antigravityStyle);
+    emitHostAllow(output, { antigravityStyle, cursorStyle });
     return;
   }
   const rel = path.relative(args.root, path.resolve(filePath));
   const segments = rel.split(path.sep);
   if (segments[0] === '..' || segments.includes('node_modules')) {
-    emitAntigravityAllow(output, antigravityStyle);
+    emitHostAllow(output, { antigravityStyle, cursorStyle });
     return;
   }
 
   const source = proposedSource(toolName, toolInput);
   if (typeof source !== 'string') {
-    emitAntigravityAllow(output, antigravityStyle);
+    emitHostAllow(output, { antigravityStyle, cursorStyle });
     return;
   }
 
@@ -830,7 +865,7 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
       })
     : null;
   if (result.valid && (designDelta?.valid ?? true)) {
-    emitAntigravityAllow(output, antigravityStyle);
+    emitHostAllow(output, { antigravityStyle, cursorStyle });
     return;
   }
 
@@ -861,7 +896,7 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
     return false;
   });
   if (newViolations.length === 0 && (designDelta?.valid ?? true)) {
-    emitAntigravityAllow(output, antigravityStyle);
+    emitHostAllow(output, { antigravityStyle, cursorStyle });
     return;
   }
   const combinedViolations = [...newViolations, ...designDeltaViolations(designDelta)];
@@ -923,7 +958,13 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
       enforcement: hookEnforcement(
         args.root,
         attemptContext?.host ??
-          (antigravityStyle ? 'antigravity' : grokStyle ? 'grok' : 'claude'),
+          (antigravityStyle
+            ? 'antigravity'
+            : cursorStyle
+              ? 'cursor'
+              : grokStyle
+                ? 'grok'
+                : 'claude'),
         attemptContext?.operation ??
           operation ??
           (antigravityStyle
@@ -932,11 +973,15 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
               : toolName === 'MultiEdit'
                 ? 'multi_replace_file_content'
                 : 'write_to_file'
-            : grokStyle
+            : cursorStyle
               ? toolName === 'Edit'
-                ? 'search_replace'
-                : 'write'
-              : toolName),
+                ? 'StrReplace'
+                : 'Write'
+              : grokStyle
+                ? toolName === 'Edit'
+                  ? 'search_replace'
+                  : 'write'
+                : toolName),
         toolName === 'Write' || Boolean(attemptContext?.completePatch)
       ),
       ...(layer ? { layer } : {}),
@@ -968,6 +1013,16 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
       }) + '\n'
     );
   }
+  // Cursor preToolUse: permission deny + agent_message (exit 2 also blocks).
+  if (cursorStyle) {
+    output.stdout(
+      JSON.stringify({
+        permission: 'deny',
+        agent_message: message,
+        user_message: `ArkGate blocked write to ${rel}`,
+      }) + '\n'
+    );
+  }
   output.status(2);
 }
 
@@ -1852,47 +1907,13 @@ export async function runArkMcp({ hookInput } = {}) {
    * FX06 — process package vs project install honesty (multi-project field truth).
    * Process arkgateVersion is startup-loaded; after consumer `npm i arkgate@newer`,
    * long-lived MCP can report a stale process version until restart.
+   * Algorithm lives in bin/lib/mcp-process-package.mjs for unit coverage.
    */
-  function readProjectInstalledArkgateVersion() {
-    try {
-      const shallow = path.join(resolvedRoot, 'node_modules', 'arkgate', 'package.json');
-      if (fs.existsSync(shallow)) {
-        const v = JSON.parse(fs.readFileSync(shallow, 'utf8')).version;
-        return typeof v === 'string' && v.trim() ? v.trim() : null;
-      }
-    } catch {
-      /* fall through */
-    }
-    try {
-      const requireFromProject = createRequire(path.join(resolvedRoot, 'package.json'));
-      const pkgJson = requireFromProject.resolve('arkgate/package.json');
-      const v = JSON.parse(fs.readFileSync(pkgJson, 'utf8')).version;
-      return typeof v === 'string' && v.trim() ? v.trim() : null;
-    } catch {
-      return null;
-    }
-  }
-
   function processPackageHonesty() {
-    const processVersion = typeof ark.version === 'string' ? ark.version : null;
-    const projectInstalledVersion = readProjectInstalledArkgateVersion();
-    const mismatch =
-      processVersion != null &&
-      projectInstalledVersion != null &&
-      processVersion !== projectInstalledVersion;
-    return {
-      schemaVersion: '1.0',
-      notAScore: true,
-      processArkgateVersion: processVersion,
-      projectInstalledVersion,
-      processPackageMismatch: mismatch,
-      processStale: mismatch,
-      nextAction: mismatch
-        ? 'Restart or retarget the Ark MCP server so process arkgateVersion matches the project install. Prefer project-local CLI (`npx arkgate` / `npx arkgate-check`) until identity is matched and versions align. Multi-checkout users: one expectedRoot per project; never reuse another checkout’s projectId.'
-        : projectInstalledVersion == null
-          ? 'Project has no resolvable node_modules/arkgate; install the package or use CLI from a project that pins arkgate.'
-          : 'Process package version matches project install for this MCP root.',
-    };
+    return buildProcessPackageHonesty({
+      processVersion: typeof ark.version === 'string' ? ark.version : null,
+      root: resolvedRoot,
+    });
   }
 
   function contextFor(binding) {

package/bin/ark.mjs

@@ -207,8 +207,8 @@ Options:
   --remove-host <host>
                Preview or apply removal of that compact host integration; re-add it with --tools <host>.
   --require-write-hook <host>
-               Require and verify a hard local write hook for Claude or Grok. Cursor/Codex are
-               advisory-write plus hard CI merge only; impossible requests fail before any write.
+               Require and verify a hard local write hook for Claude, Grok, Antigravity, or Cursor.
+               Codex/OpenCode are advisory-write plus hard CI merge only; impossible requests fail before any write.
 
 Interactive mode (TTY, no --yes): asks what application shape you are building and maps it to a preset.
 Non-interactive (no TTY): uses the same defaults as --yes — never calls readline on a null interface.

package/bin/lib/agent-gates.mjs

@@ -26,9 +26,11 @@ export {
   antigravityHooks,
   claudeSettings,
   codexProjectConfig,
+  cursorHooks,
   grokHooks,
   grokProjectConfig,
   mergeAntigravityArkHook,
+  mergeCursorArkHook,
   mergeOpencodeArkMcp,
   opencodeProjectConfig,
 } from './hook-templates.mjs';