cursor-guard 4.2.0 → 4.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cursor-guard",
-  "version": "4.2.0",
+  "version": "4.2.2",
   "description": "Protects code from accidental AI overwrite or deletion in Cursor IDE — mandatory pre-write snapshots, review-before-apply, local Git safety net, and deterministic recovery. | 保护代码免受 Cursor AI 代理意外覆写或删除——强制写前快照、预览再执行、本地 Git 安全网、确定性恢复。",
   "keywords": [
     "cursor",

package/references/bin/cursor-guard-init.js

@@ -110,7 +110,16 @@ console.log(`        MCP server: ${serverExists ? 'OK' : 'MISSING'}`);
 console.log(`        MCP SDK:    ${sdkExists ? 'OK' : 'MISSING — run npm install in skill dir'}`);
 
 console.log(`\n  Installation complete!\n`);
-console.log('  ⚠  If MCP was already configured, restart Cursor (or Ctrl+Shift+P →');
+
+// Detect git repo and recommend committing
+let isGitRepoDir = false;
+try { isGitRepoDir = fs.existsSync(path.join(projectDir, '.git')); } catch { /* ignore */ }
+if (!isGlobal && isGitRepoDir) {
+  console.log('  ** Important: commit now to prevent restore from reverting the skill **');
+  console.log(`     git add .cursor/ .cursor-guard.json && git commit -m "chore: install cursor-guard"\n`);
+}
+
+console.log('  If MCP was already configured, restart Cursor (or Ctrl+Shift+P ->');
 console.log('     "Developer: Reload Window") to load the updated MCP server.\n');
 console.log('  Next steps:');
 console.log('  1. The skill activates automatically in Cursor Agent conversations.');

package/references/dashboard/public/app.js

@@ -166,7 +166,7 @@ const I18N = {
     'detail.node_ok':                   '{v}',
     'detail.node_old':                  '{v} — recommended >=18',
     'detail.mcp_ok':                    'server.js found, SDK {v}',
-    'detail.mcp_no_sdk':                'server.js found but @modelcontextprotocol/sdk not installed — run: cd <skill-dir> && npm install',
+    'detail.mcp_no_sdk':                'server.js found but @modelcontextprotocol/sdk not installed — run: cd <skill-dir>; npm install',
     'detail.mcp_no_server':             'SDK installed ({v}) but server.js not found at expected path',
     'detail.mcp_not_configured':        'MCP not configured (optional — cursor-guard works without it)',
     'detail.mcp_version_mismatch':      'running v{mem} but disk has v{disk} — restart Cursor to load the new version',
@@ -332,7 +332,7 @@ const I18N = {
     'detail.node_ok':                   '{v}',
     'detail.node_old':                  '{v}——建议 >=18',
     'detail.mcp_ok':                    'server.js 已找到，SDK {v}',
-    'detail.mcp_no_sdk':                'server.js 已找到但 @modelcontextprotocol/sdk 未安装——请运行：cd <skill-dir> && npm install',
+    'detail.mcp_no_sdk':                'server.js 已找到但 @modelcontextprotocol/sdk 未安装——请运行：cd <skill-dir>; npm install',
     'detail.mcp_no_server':             'SDK 已安装（{v}）但 server.js 未在预期路径找到',
     'detail.mcp_not_configured':        'MCP 未配置（可选——cursor-guard 无需 MCP 也能工作）',
     'detail.mcp_version_mismatch':      '运行中 v{mem}，磁盘为 v{disk}——请重启 Cursor 加载新版本',
@@ -378,7 +378,7 @@ function t(key, params) {
   let text = dict[key] || I18N['en-US'][key] || key;
   if (params) {
     for (const [k, v] of Object.entries(params)) {
-      text = text.replace(`{${k}}`, v);
+      text = text.replaceAll(`{${k}}`, String(v));
     }
   }
   return text;
@@ -770,6 +770,7 @@ function renderFilterBar() {
     { key: 'all',                label: 'backups.filterAll' },
     { key: 'git-auto-backup',   label: 'type.git-auto-backup' },
     { key: 'git-pre-restore',   label: 'type.git-pre-restore' },
+    { key: 'git-snapshot',      label: 'type.git-snapshot' },
     { key: 'shadow',            label: 'type.shadow' },
     { key: 'shadow-pre-restore',label: 'type.shadow-pre-restore' },
   ];

package/references/dashboard/server.js

@@ -8,7 +8,6 @@ const path = require('path');
 const { getDashboard } = require('../lib/core/dashboard');
 const { runDiagnostics } = require('../lib/core/doctor');
 const { listBackups } = require('../lib/core/backups');
-const { loadActiveAlert } = require('../lib/core/anomaly');
 
 const PUBLIC_DIR = path.join(__dirname, 'public');
 const DEFAULT_PORT = 3120;

package/references/lib/core/doctor.js

@@ -221,7 +221,6 @@ function runDiagnostics(projectDir) {
   // Search multiple candidate locations for SDK package.json
   const sdkCandidates = [
     path.join(skillRoot, 'node_modules', '@modelcontextprotocol', 'sdk', 'package.json'),
-    path.join(__dirname, '..', '..', '..', 'node_modules', '@modelcontextprotocol', 'sdk', 'package.json'),
   ];
   for (const candidate of sdkCandidates) {
     try {

package/references/lib/core/restore.js

@@ -21,10 +21,13 @@ function validateRelativePath(file) {
 const VALID_SHADOW_SOURCE = /^\d{8}_\d{6}(_\d{3})?$|^pre-restore-\d{8}_\d{6}(_\d{3})?$/;
 
 const TOOL_DIRS = ['.cursor/', '.cursor\\'];
+const GUARD_CONFIGS = ['.cursor-guard.json'];
 
 function isToolPath(filePath) {
   const normalized = filePath.replace(/\\/g, '/');
-  return TOOL_DIRS.some(d => normalized.startsWith(d));
+  if (TOOL_DIRS.some(d => normalized.startsWith(d))) return true;
+  if (GUARD_CONFIGS.includes(normalized)) return true;
+  return false;
 }
 
 function validateShadowSource(source) {
@@ -217,7 +220,7 @@ function previewProjectRestore(projectDir, source) {
 
     for (const f of files) {
       if (isToolPath(f.path)) {
-        f.warning = 'tool directory — restoring may downgrade cursor-guard or other tools';
+        f.warning = 'protected path — will be preserved from HEAD to prevent tool/config downgrade';
       }
     }
 
@@ -282,14 +285,16 @@ function executeProjectRestore(projectDir, source, opts = {}) {
       cwd: projectDir, stdio: 'pipe',
     });
 
-    // Restore .cursor/ back from HEAD to prevent tool/skill downgrade
+    // Restore protected paths from HEAD to prevent tool/skill/config downgrade
     const head = git(['rev-parse', 'HEAD'], { cwd: projectDir, allowFail: true });
     if (head) {
-      try {
-        execFileSync('git', ['restore', `--source=HEAD`, '--', '.cursor/'], {
-          cwd: projectDir, stdio: 'pipe',
-        });
-      } catch { /* .cursor/ may not exist in HEAD, that's fine */ }
+      for (const p of ['.cursor/', ...GUARD_CONFIGS]) {
+        try {
+          execFileSync('git', ['restore', `--source=HEAD`, '--', p], {
+            cwd: projectDir, stdio: 'pipe',
+          });
+        } catch { /* may not exist in HEAD, that's fine */ }
+      }
     }
 
     let untrackedCleaned = 0;