cursor-guard 4.3.0 → 4.3.1

package/SKILL.md

@@ -146,6 +146,15 @@ When the target file of an edit **falls outside the protected scope**, the agent
 **Before any High-risk operation on a protected file:**
 
 > **MCP shortcut**: if `snapshot_now` tool is available, call it with `{ "path": "<project>", "strategy": "git" }` instead of the shell commands below. The tool handles temp index, secrets exclusion, and ref creation internally, and returns `{ "git": { "status": "created", "commitHash": "...", "shortHash": "..." } }`. Report the `shortHash` to the user and proceed.
+>
+> **Best practice — descriptive messages**: Always provide a meaningful `message` parameter that describes *why* this snapshot is being created and *what* changes are at risk. This message appears in the dashboard restore-point list, helping users identify which snapshot to restore from. Example:
+> ```json
+> {
+>   "path": "/project",
+>   "strategy": "git",
+>   "message": "guard: before refactoring auth middleware — moving session logic from app.js to middleware/auth.js"
+> }
+> ```
 
 Use a **temporary index and dedicated ref** so the user's staged/unstaged state is never touched:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cursor-guard",
-  "version": "4.3.0",
+  "version": "4.3.1",
   "description": "Protects code from accidental AI overwrite or deletion in Cursor IDE — mandatory pre-write snapshots, review-before-apply, local Git safety net, and deterministic recovery. | 保护代码免受 Cursor AI 代理意外覆写或删除——强制写前快照、预览再执行、本地 Git 安全网、确定性恢复。",
   "keywords": [
     "cursor",

package/references/dashboard/public/app.js

@@ -95,6 +95,11 @@ const I18N = {
     'trigger.manual':       'Manual (agent)',
     'trigger.pre-restore':  'Pre-Restore',
     'backups.col.summary':  'Changes',
+    'summary.modified':     'Modified',
+    'summary.added':        'Added',
+    'summary.deleted':      'Deleted',
+    'summary.renamed':      'Renamed',
+    'summary.files':        'files',
 
     'error.fetchFailed':    'Failed to fetch data',
     'error.sectionFailed':  'This section failed to load',
@@ -268,6 +273,11 @@ const I18N = {
     'trigger.manual':       '手动（Agent）',
     'trigger.pre-restore':  '恢复前快照',
     'backups.col.summary':  '变更',
+    'summary.modified':     '修改',
+    'summary.added':        '新增',
+    'summary.deleted':      '删除',
+    'summary.renamed':      '重命名',
+    'summary.files':        '个文件',
 
     'error.fetchFailed':    '数据拉取失败',
     'error.sectionFailed':  '此区块加载失败',
@@ -793,14 +803,28 @@ function renderFilterBar() {
   ).join('');
 }
 
+function translateSummary(raw) {
+  if (!raw) return raw;
+  return raw
+    .replace(/\bModified (\d+)/g, (_, n) => `${t('summary.modified')} ${n}`)
+    .replace(/\bAdded (\d+)/g, (_, n) => `${t('summary.added')} ${n}`)
+    .replace(/\bDeleted (\d+)/g, (_, n) => `${t('summary.deleted')} ${n}`)
+    .replace(/\bRenamed (\d+)/g, (_, n) => `${t('summary.renamed')} ${n}`);
+}
+
 function formatSummaryCell(b) {
   const parts = [];
-  if (b.filesChanged != null) parts.push(`<span class="text-sm">${b.filesChanged} files</span>`);
+  if (b.filesChanged != null) parts.push(`<span class="text-sm">${b.filesChanged} ${t('summary.files')}</span>`);
   if (b.trigger) parts.push(`<span class="badge badge-trigger">${t('trigger.' + b.trigger)}</span>`);
   if (b.summary) {
-    const short = b.summary.length > 60 ? b.summary.substring(0, 57) + '...' : b.summary;
+    const translated = translateSummary(b.summary);
+    const short = translated.length > 80 ? translated.substring(0, 77) + '...' : translated;
     parts.push(`<span class="text-muted text-sm">${esc(short)}</span>`);
   }
+  if (b.message && !b.message.startsWith('guard:')) {
+    const msgShort = b.message.length > 50 ? b.message.substring(0, 47) + '...' : b.message;
+    parts.push(`<span class="text-muted text-sm">${esc(msgShort)}</span>`);
+  }
   return parts.length > 0 ? parts.join(' ') : '<span class="text-muted text-sm">-</span>';
 }
 
@@ -929,7 +953,7 @@ function openRestoreDrawer(backup) {
   if (backup.commitHash) fields.push({ key: 'drawer.field.hash', val: backup.commitHash });
   if (backup.path) fields.push({ key: 'drawer.field.path', val: backup.path });
   if (backup.message) fields.push({ key: 'drawer.field.message', val: backup.message });
-  if (backup.summary) fields.push({ key: 'drawer.field.summary', val: backup.summary });
+  if (backup.summary) fields.push({ key: 'drawer.field.summary', val: translateSummary(backup.summary) });
 
   const refText = backup.ref || backup.shortHash || backup.timestamp || '';
   const jsonText = JSON.stringify(backup, null, 2);

package/references/lib/auto-backup.js

@@ -262,8 +262,37 @@ async function runBackup(projectDir, intervalOverride) {
     if ((cfg.backup_strategy === 'git' || cfg.backup_strategy === 'both') && repo) {
       const context = { trigger: 'auto', changedFileCount };
       if (porcelain) {
-        const pLines = porcelain.split('\n').filter(Boolean).slice(0, 20);
-        context.summary = pLines.map(l => l.substring(0, 2).trim() + ' ' + l.substring(3)).join(', ');
+        let pLines = porcelain.split('\n').filter(Boolean);
+        if (cfg.protect.length > 0 || cfg.ignore.length > 0) {
+          pLines = pLines.filter(line => {
+            const filePart = line.substring(3);
+            const arrowIdx = filePart.indexOf(' -> ');
+            const raw = arrowIdx >= 0 ? filePart.substring(arrowIdx + 4) : filePart;
+            const rel = unquoteGitPath(raw);
+            const fakeFile = { rel, full: path.join(projectDir, rel) };
+            return filterFiles([fakeFile], cfg).length > 0;
+          });
+        }
+        if (pLines.length > 0) {
+          const groups = { M: [], A: [], D: [], R: [] };
+          for (const l of pLines) {
+            const code = l.substring(0, 2).trim();
+            const filePart = l.substring(3);
+            const arrowIdx = filePart.indexOf(' -> ');
+            const file = arrowIdx >= 0 ? filePart.substring(arrowIdx + 4) : filePart;
+            const key = code.startsWith('R') ? 'R'
+              : code.includes('D') ? 'D'
+              : code.includes('A') || code === '??' ? 'A'
+              : 'M';
+            groups[key].push(file);
+          }
+          const parts = [];
+          if (groups.M.length) parts.push(`Modified ${groups.M.length}: ${groups.M.slice(0, 5).join(', ')}`);
+          if (groups.A.length) parts.push(`Added ${groups.A.length}: ${groups.A.slice(0, 5).join(', ')}`);
+          if (groups.D.length) parts.push(`Deleted ${groups.D.length}: ${groups.D.slice(0, 5).join(', ')}`);
+          if (groups.R.length) parts.push(`Renamed ${groups.R.length}: ${groups.R.slice(0, 5).join(', ')}`);
+          context.summary = parts.join('; ');
+        }
       }
       const snapResult = createGitSnapshot(projectDir, cfg, { branchRef, context });
       if (snapResult.status === 'created') {

package/references/lib/core/restore.js

@@ -21,7 +21,7 @@ function validateRelativePath(file) {
 const VALID_SHADOW_SOURCE = /^\d{8}_\d{6}(_\d{3})?$|^pre-restore-\d{8}_\d{6}(_\d{3})?$/;
 
 const TOOL_DIRS = ['.cursor/', '.cursor\\'];
-const GUARD_CONFIGS = ['.cursor-guard.json'];
+const GUARD_CONFIGS = ['.cursor-guard.json', '.gitignore'];
 
 function isToolPath(filePath) {
   const normalized = filePath.replace(/\\/g, '/');

package/references/lib/core/snapshot.js

@@ -94,9 +94,11 @@ function createGitSnapshot(projectDir, cfg, opts = {}) {
   if (!gDir) return { status: 'error', error: 'not a git repository' };
 
   const guardIndex = path.join(gDir, 'cursor-guard-index');
+  const guardIndexLock = guardIndex + '.lock';
   const env = { ...process.env, GIT_INDEX_FILE: guardIndex };
 
   try { fs.unlinkSync(guardIndex); } catch { /* doesn't exist */ }
+  try { fs.unlinkSync(guardIndexLock); } catch { /* doesn't exist */ }
 
   try {
     const parentHash = git(['rev-parse', '--verify', branchRef], { cwd, allowFail: true });
@@ -164,6 +166,7 @@ function createGitSnapshot(projectDir, cfg, opts = {}) {
     return { status: 'error', error: e.message };
   } finally {
     try { fs.unlinkSync(guardIndex); } catch { /* ignore */ }
+    try { fs.unlinkSync(guardIndexLock); } catch { /* ignore */ }
   }
 }