cursor-guard 4.2.1 → 4.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cursor-guard",
-  "version": "4.2.1",
+  "version": "4.2.2",
   "description": "Protects code from accidental AI overwrite or deletion in Cursor IDE — mandatory pre-write snapshots, review-before-apply, local Git safety net, and deterministic recovery. | 保护代码免受 Cursor AI 代理意外覆写或删除——强制写前快照、预览再执行、本地 Git 安全网、确定性恢复。",
   "keywords": [
     "cursor",

package/references/bin/cursor-guard-init.js

@@ -110,7 +110,16 @@ console.log(`        MCP server: ${serverExists ? 'OK' : 'MISSING'}`);
 console.log(`        MCP SDK:    ${sdkExists ? 'OK' : 'MISSING — run npm install in skill dir'}`);
 
 console.log(`\n  Installation complete!\n`);
-console.log('  ⚠  If MCP was already configured, restart Cursor (or Ctrl+Shift+P →');
+
+// Detect git repo and recommend committing
+let isGitRepoDir = false;
+try { isGitRepoDir = fs.existsSync(path.join(projectDir, '.git')); } catch { /* ignore */ }
+if (!isGlobal && isGitRepoDir) {
+  console.log('  ** Important: commit now to prevent restore from reverting the skill **');
+  console.log(`     git add .cursor/ .cursor-guard.json && git commit -m "chore: install cursor-guard"\n`);
+}
+
+console.log('  If MCP was already configured, restart Cursor (or Ctrl+Shift+P ->');
 console.log('     "Developer: Reload Window") to load the updated MCP server.\n');
 console.log('  Next steps:');
 console.log('  1. The skill activates automatically in Cursor Agent conversations.');

package/references/lib/core/restore.js

@@ -21,10 +21,13 @@ function validateRelativePath(file) {
 const VALID_SHADOW_SOURCE = /^\d{8}_\d{6}(_\d{3})?$|^pre-restore-\d{8}_\d{6}(_\d{3})?$/;
 
 const TOOL_DIRS = ['.cursor/', '.cursor\\'];
+const GUARD_CONFIGS = ['.cursor-guard.json'];
 
 function isToolPath(filePath) {
   const normalized = filePath.replace(/\\/g, '/');
-  return TOOL_DIRS.some(d => normalized.startsWith(d));
+  if (TOOL_DIRS.some(d => normalized.startsWith(d))) return true;
+  if (GUARD_CONFIGS.includes(normalized)) return true;
+  return false;
 }
 
 function validateShadowSource(source) {
@@ -217,7 +220,7 @@ function previewProjectRestore(projectDir, source) {
 
     for (const f of files) {
       if (isToolPath(f.path)) {
-        f.warning = 'tool directory — restoring may downgrade cursor-guard or other tools';
+        f.warning = 'protected path — will be preserved from HEAD to prevent tool/config downgrade';
       }
     }
 
@@ -282,14 +285,16 @@ function executeProjectRestore(projectDir, source, opts = {}) {
       cwd: projectDir, stdio: 'pipe',
     });
 
-    // Restore .cursor/ back from HEAD to prevent tool/skill downgrade
+    // Restore protected paths from HEAD to prevent tool/skill/config downgrade
     const head = git(['rev-parse', 'HEAD'], { cwd: projectDir, allowFail: true });
     if (head) {
-      try {
-        execFileSync('git', ['restore', `--source=HEAD`, '--', '.cursor/'], {
-          cwd: projectDir, stdio: 'pipe',
-        });
-      } catch { /* .cursor/ may not exist in HEAD, that's fine */ }
+      for (const p of ['.cursor/', ...GUARD_CONFIGS]) {
+        try {
+          execFileSync('git', ['restore', `--source=HEAD`, '--', p], {
+            cwd: projectDir, stdio: 'pipe',
+          });
+        } catch { /* may not exist in HEAD, that's fine */ }
+      }
     }
 
     let untrackedCleaned = 0;