cursor-guard 4.7.6 → 4.8.1

package/references/vscode-extension/dist/package.json

@@ -2,7 +2,7 @@
   "name": "cursor-guard-ide",
   "displayName": "Cursor Guard",
   "description": "AI code protection dashboard embedded in your IDE — real-time alerts, backup history, one-click snapshots",
-  "version": "4.7.5",
+  "version": "4.8.1",
   "publisher": "zhangqiang8vipp",
   "license": "BUSL-1.1",
   "engines": {
@@ -55,6 +55,30 @@
         "category": "Cursor Guard",
         "icon": "$(eye-closed)"
       },
+      {
+        "command": "cursorGuard.quickRestore",
+        "title": "Quick Restore",
+        "category": "Cursor Guard",
+        "icon": "$(history)"
+      },
+      {
+        "command": "cursorGuard.doctor",
+        "title": "Run Diagnostics",
+        "category": "Cursor Guard",
+        "icon": "$(search)"
+      },
+      {
+        "command": "cursorGuard.addToProtect",
+        "title": "Add to Protected",
+        "category": "Cursor Guard",
+        "icon": "$(shield)"
+      },
+      {
+        "command": "cursorGuard.addToIgnore",
+        "title": "Exclude from Protection",
+        "category": "Cursor Guard",
+        "icon": "$(circle-slash)"
+      },
       {
         "command": "cursorGuard.refreshTree",
         "title": "Refresh",
@@ -96,7 +120,30 @@
           "when": "view == cursorGuardProjects",
           "group": "navigation"
         }
+      ],
+      "explorer/context": [
+        {
+          "command": "cursorGuard.addToProtect",
+          "group": "cursorGuard@1",
+          "when": "explorerResourceIsFolder || resourceScheme == file"
+        },
+        {
+          "command": "cursorGuard.addToIgnore",
+          "group": "cursorGuard@2",
+          "when": "explorerResourceIsFolder || resourceScheme == file"
+        }
+      ],
+      "editor/title/context": [
+        {
+          "command": "cursorGuard.addToProtect",
+          "group": "cursorGuard@1"
+        },
+        {
+          "command": "cursorGuard.addToIgnore",
+          "group": "cursorGuard@2"
+        }
       ]
-    }
+    },
+    "submenus": []
   }
 }

package/references/vscode-extension/dist/skill/ROADMAP.md

@@ -3,8 +3,8 @@
 > 本文档描述 cursor-guard 从 V2 到 V7 的长期演进方向。
 > 每一代向下兼容，低版本功能永远不废弃。
 >
-> **当前版本**：`V4.7.5`  
-> **文档状态**：`V2` ~ `V4.7.5` 已完成交付（含 V5 intent/audit 基础），`V5` 主体规划中
+> **当前版本**：`V4.8.1`  
+> **文档状态**：`V2` ~ `V4.8.1` 已完成交付（含 V5 intent/audit 基础），`V5` 主体规划中
 
 ## 阅读导航
 
@@ -734,6 +734,53 @@ V4 经过 4 轮系统性代码审查，修复了以下关键问题：
 }
 ```
 
+### V4.8.1：MCP Server esbuild 单文件打包 ✅
+
+| 修复/增强 | 说明 |
+|----------|------|
+| **esbuild 单文件 bundle** | 彻底解决 VSIX MCP 依赖缺失问题。不再手动拷贝 `vendor/` 目录（`@modelcontextprotocol/sdk`、`zod`、`zod-to-json-schema`、`ajv` 等），改用 esbuild 将 `mcp/server.js` 及其所有依赖打成一个自包含的 CJS bundle（~1.5 MB）。任何新增的 SDK 传递依赖都会自动包含 |
+| **VSIX 体积大幅缩减** | 从 1543 文件 / 3.18 MB 缩减到 42 文件 / 1.27 MB（-60%）。vendor/ 目录完全移除 |
+| **auto-setup.js 简化** | MCP server 注册不再需要 `NODE_PATH` 环境变量（bundle 自包含），命令从 `{ command: "node", args: [...], env: { NODE_PATH: "..." } }` 简化为 `{ command: "node", args: [...] }` |
+| **build-vsix.js 容错** | esbuild 失败时自动 fallback 到源码拷贝，不会中断打包流程 |
+
+### V4.8.0：VSIX MCP 依赖补全 ✅
+
+| 修复 | 说明 |
+|------|------|
+| **`zod-to-json-schema` 缺失修复** | MCP server 启动时报 `Cannot find module 'zod-to-json-schema'`。`@modelcontextprotocol/sdk` 内部依赖 `zod-to-json-schema`，但 `build-vsix.js` 只打包了 `zod`，遗漏了此包。修复后 vendor 打包列表改为循环写法，包含 `zod` 和 `zod-to-json-schema` 两个依赖 |
+
+### V4.7.8：告警倒计时实时更新 + Open Dashboard CORS/Fallback 修复 ✅
+
+| 修复/增强 | 说明 |
+|----------|------|
+| **告警倒计时秒级实时更新** | 侧边栏告警 "Expires: Xm Ys" 之前只在 poller 推数据时（每 5 秒）刷新一次。新增独立 `setInterval(1000)` 定时器，每秒从 DOM `data-expires` 属性读取 `expiresAt` 时间戳并实时更新 `.alert-countdown` 文本 |
+| **Dashboard Server CORS 支持** | API 响应头新增 `Access-Control-Allow-Origin: *`；新增 `OPTIONS` preflight 处理（204 响应 + 完整 CORS 头）。解决 WebView 跨域 fetch 被浏览器/IDE 安全策略拦截的问题 |
+| **WebView CSP 策略放宽** | `connect-src` 从只允许固定 `baseUrl` 改为 `http://127.0.0.1:* http://localhost:*`；`script-src` 增加 `'unsafe-inline'` 兼容旧 Cursor 版本 |
+| **Open Dashboard 启动容错** | Server 未运行时提供 "Start Server" 按钮自动启动，不再直接报错退出。`DashboardManager` 新增 `ensureRunning()` 方法 |
+| **WebView Fetch 错误降级** | 前端 `fetchJson` 连续 3 次失败后通过 `postMessage({ type: 'fetchError' })` 通知 host，自动关闭 WebView 面板并 fallback 到浏览器打开 |
+| **侧边栏 Protection Scope 卡片** | 新增独立保护范围卡片：顶部三 chip 显示 🛡️ N protected / 🚫 N excluded / N total；下方按 Protect/Ignore 分组展示匹配模式标签（绿色/红色），最多 6 个，超出显示 "+N more"。后端 `getDashboard` 新增 `totalFiles`、`excludedCount` 字段 |
+| **protect 匹配语义修正（破坏性修复）** | `matchesAny` 新增 `{ strict: true }` 模式。**protect 规则不再匹配 basename**（仅匹配完整相对路径），`*.js` 只保护根目录 js 文件，要保护所有深度需写 `**/*.js`。**ignore 保留 basename 匹配**（宽松排除更安全）。修复了 `*.json` / `*.js` 意外保护 `node_modules/`、`.cursor/` 等无关目录的问题。`filterFiles`、`pruneIndexFiles`（snapshot.js）、`doctor.js` 统一使用 strict 模式。新增 4 组 strict 模式单元测试 |
+
+### V4.7.7：右键菜单动态 Protect/Ignore ✅
+
+| 组件 | 说明 |
+|------|------|
+| **Explorer 右键菜单** | 文件资源管理器中右键文件或文件夹，出现 "Cursor Guard: Add to Protected" 和 "Cursor Guard: Exclude from Protection" 两个菜单项 |
+| **编辑器标签右键** | 编辑器标签页右键同样支持 Protect/Ignore 操作 |
+| **模式选择 QuickPick** | 点击后弹出 QuickPick，提供 4 种模式选择：精确路径（`src/auth.ts`）、目录 glob（`src/**`）、文件名匹配（`auth.ts`）、扩展名匹配（`*.ts`）、自定义 glob 输入 |
+| **配置自动写入** | 选择后自动写入 `.cursor-guard.json` 的 `protect` 或 `ignore` 数组，不覆盖已有配置，重复检测 |
+| **即时生效** | 修改后自动触发 Poller 刷新，侧边栏实时更新保护范围 |
+
+### V4.7.6：侧边栏 UX 重构 + Health 修复 + Open Dashboard 修复 ✅
+
+| 修复/增强 | 说明 |
+|----------|------|
+| **Health 阈值逻辑修复** | 移除"Last backup too old"健康警告。Watcher 在跑但无文件变更时不备份是正常行为，不应报警。Health 判定改为：watcher 在跑 + 无磁盘问题 = healthy；watcher 停 = warning；磁盘不足/非 Git = critical |
+| **侧边栏 Dashboard 重构** | 从"报表"改为"仪表盘"：顶部单个大状态指示器（🟢 Protected / 🔴 Alert / 🟡 Watcher Stopped）替代四个小卡片。移除 Recent Backups 列表、Protection Scope 标签、Health Issues 重复区。只保留 Quick Stats（last backup / git backups / disk free）。浮点数取整（49.4 GB 而非 49.356...） |
+| **操作按钮重构** | 2×2 网格布局：📸 Snapshot + ⏪ Restore（一存一取配对），🟢 Watcher Toggle + 🔍 Doctor，📊 Open Dashboard 居中。新增 Quick Restore 命令（QuickPick 选最近 8 条备份）和 Doctor 命令（显示诊断摘要） |
+| **Open Dashboard 修复** | `PUBLIC_DIR` 从模块加载时求值改为懒加载（避免路径解析失败导致整个模块崩溃）；找不到前端文件时 fallback 到浏览器打开；CSP `connect-src` 空值修复 |
+| **新命令** | `cursorGuard.quickRestore`（Quick Restore）、`cursorGuard.doctor`（Run Diagnostics） |
+
 ### V4.7.5：VSIX 独立打包 + 自动配置 Skill/MCP ✅
 
 | 组件 | 说明 |

package/references/vscode-extension/extension.js

@@ -1,6 +1,8 @@
 'use strict';
 
 const vscode = require('vscode');
+const fs = require('fs');
+const path = require('path');
 const { DashboardManager } = require('./lib/dashboard-manager');
 const { WebViewProvider } = require('./lib/webview-provider');
 const { StatusBarController } = require('./lib/status-bar');
@@ -25,10 +27,24 @@ async function activate(context) {
   context.subscriptions.push(
     vscode.window.registerWebviewViewProvider('cursorGuardDashboard', sidebarProvider),
 
-    vscode.commands.registerCommand('cursorGuard.openDashboard', () => {
+    vscode.commands.registerCommand('cursorGuard.openDashboard', async () => {
       if (!dashMgr.running) {
-        vscode.window.showWarningMessage('Cursor Guard: no projects detected. Add .cursor-guard.json to your workspace.');
-        return;
+        const action = await vscode.window.showWarningMessage(
+          'Cursor Guard: Dashboard server not running.',
+          'Start Server', 'Cancel'
+        );
+        if (action === 'Start Server') {
+          const folders = vscode.workspace.workspaceFolders;
+          if (folders) {
+            await dashMgr.ensureRunning(folders.map(f => f.uri.fsPath));
+          }
+          if (!dashMgr.running) {
+            vscode.window.showErrorMessage('Cursor Guard: failed to start dashboard server.');
+            return;
+          }
+        } else {
+          return;
+        }
       }
       webviewProvider.show();
     }),
@@ -152,6 +168,14 @@ async function activate(context) {
       }
     }),
 
+    vscode.commands.registerCommand('cursorGuard.addToProtect', (uri) => {
+      _modifyGuardConfig(uri, 'protect');
+    }),
+
+    vscode.commands.registerCommand('cursorGuard.addToIgnore', (uri) => {
+      _modifyGuardConfig(uri, 'ignore');
+    }),
+
     statusBar,
     poller,
     treeView,
@@ -174,6 +198,80 @@ async function activate(context) {
   );
 }
 
+async function _modifyGuardConfig(uri, field) {
+  const folders = vscode.workspace.workspaceFolders;
+  if (!folders || folders.length === 0) {
+    vscode.window.showWarningMessage('Cursor Guard: no workspace folder open.');
+    return;
+  }
+
+  let targetUri = uri;
+  if (!targetUri) {
+    const editor = vscode.window.activeTextEditor;
+    if (editor) targetUri = editor.document.uri;
+  }
+  if (!targetUri) {
+    vscode.window.showWarningMessage('Cursor Guard: no file or folder selected.');
+    return;
+  }
+
+  const wsRoot = folders[0].uri.fsPath;
+  const configPath = path.join(wsRoot, '.cursor-guard.json');
+  const targetPath = targetUri.fsPath;
+
+  const relative = path.relative(wsRoot, targetPath).replace(/\\/g, '/');
+  if (!relative || relative.startsWith('..')) {
+    vscode.window.showWarningMessage('Cursor Guard: selected path is outside the workspace.');
+    return;
+  }
+
+  let isDir = false;
+  try { isDir = fs.statSync(targetPath).isDirectory(); } catch { /* file */ }
+  const pattern = isDir ? `${relative}/**` : relative;
+
+  const action = field === 'protect' ? 'Add to Protected' : 'Exclude from Protection';
+  const pick = await vscode.window.showQuickPick(
+    [
+      { label: pattern, description: isDir ? 'directory glob' : 'exact file' },
+      { label: `${path.basename(targetPath)}`, description: 'filename only (matches anywhere)' },
+      ...(isDir ? [] : [{ label: `*.${path.extname(targetPath).slice(1)}`, description: 'file extension' }]),
+      { label: '$(edit) Custom pattern...', description: 'enter your own glob', custom: true },
+    ],
+    { placeHolder: `${action}: choose a pattern`, title: `Cursor Guard: ${action}` }
+  );
+  if (!pick) return;
+
+  let chosenPattern = pick.label;
+  if (pick.custom) {
+    const input = await vscode.window.showInputBox({
+      prompt: `Enter a glob pattern to ${field === 'protect' ? 'protect' : 'exclude'}`,
+      value: pattern,
+    });
+    if (!input) return;
+    chosenPattern = input;
+  }
+
+  let config = {};
+  if (fs.existsSync(configPath)) {
+    try { config = JSON.parse(fs.readFileSync(configPath, 'utf-8')); } catch { config = {}; }
+  }
+
+  if (!Array.isArray(config[field])) config[field] = [];
+
+  if (config[field].includes(chosenPattern)) {
+    vscode.window.showInformationMessage(`Cursor Guard: "${chosenPattern}" already in ${field} list.`);
+    return;
+  }
+
+  config[field].push(chosenPattern);
+  fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+
+  const label = field === 'protect' ? 'Protected' : 'Excluded';
+  vscode.window.showInformationMessage(`Cursor Guard: "${chosenPattern}" added to ${label} list.`);
+
+  if (poller) poller.forceRefresh();
+}
+
 function deactivate() {
   if (poller) poller.dispose();
   if (statusBar) statusBar.dispose();

package/references/vscode-extension/lib/auto-setup.js

@@ -122,18 +122,10 @@ function autoRegisterMcp(extRoot, homePath, wsRoot) {
     if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
     if (mcpConfig.mcpServers['cursor-guard']) return actions;
 
-    const vendorDir = path.join(extRoot, 'vendor');
-    const nmDir = path.join(extRoot, 'node_modules');
-    const nodePath = fs.existsSync(vendorDir) ? vendorDir : fs.existsSync(nmDir) ? nmDir : '';
-
-    const entry = {
+    mcpConfig.mcpServers['cursor-guard'] = {
       command: 'node',
       args: [mcpServerPath.replace(/\\/g, '/')],
     };
-    if (nodePath) {
-      entry.env = { NODE_PATH: nodePath.replace(/\\/g, '/') };
-    }
-    mcpConfig.mcpServers['cursor-guard'] = entry;
 
     fs.writeFileSync(mcpJsonPath, JSON.stringify(mcpConfig, null, 2));
     actions.push('MCP registered');

package/references/vscode-extension/lib/dashboard-manager.js

@@ -29,6 +29,13 @@ class DashboardManager {
     return this.start(paths);
   }
 
+  async ensureRunning(paths) {
+    if (this._instance) return true;
+    const configPaths = paths.filter(p => fs.existsSync(path.join(p, CONFIG_FILE)));
+    if (configPaths.length === 0) return false;
+    return this.start(configPaths);
+  }
+
   async start(paths) {
     if (!this._serverModule) {
       this._serverModule = require(guardPath('dashboard', 'server'));

package/references/vscode-extension/lib/sidebar-webview.js

@@ -170,6 +170,73 @@ body {
 .action-btn.full { grid-column: 1 / -1; }
 .action-btn .icon { margin-right: 3px; }
 
+/* ── Scope display ── */
+.scope-summary {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  margin-bottom: 8px;
+}
+.scope-chip {
+  font-size: 11px;
+  font-weight: 600;
+  padding: 3px 8px;
+  border-radius: 10px;
+}
+.scope-chip.protected {
+  background: rgba(166,227,161,0.12);
+  color: var(--green);
+}
+.scope-chip.excluded {
+  background: rgba(243,139,168,0.12);
+  color: var(--red);
+}
+.scope-chip.total {
+  background: rgba(108,112,134,0.15);
+  color: var(--dim);
+}
+.scope-block { margin-bottom: 6px; }
+.scope-label {
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.5px;
+  display: block;
+  margin-bottom: 4px;
+}
+.scope-label.green { color: var(--green); }
+.scope-label.red { color: var(--red); }
+.scope-tags {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 4px;
+}
+.scope-tag {
+  font-size: 10px;
+  padding: 2px 6px;
+  border-radius: 4px;
+  font-family: 'Cascadia Code', 'Fira Code', monospace;
+  max-width: 100%;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.scope-tag.green {
+  background: rgba(166,227,161,0.1);
+  color: var(--green);
+  border: 1px solid rgba(166,227,161,0.2);
+}
+.scope-tag.red {
+  background: rgba(243,139,168,0.08);
+  color: var(--red);
+  border: 1px solid rgba(243,139,168,0.2);
+}
+.scope-tag.dim {
+  background: rgba(108,112,134,0.1);
+  color: var(--dim);
+  border: 1px solid var(--border);
+}
+
 .empty-state {
   text-align: center; padding: 24px 10px;
   color: var(--dim); font-size: 12px;
@@ -182,11 +249,26 @@ body {
 </div>
 <script>
 const vscode = acquireVsCodeApi();
+let _alertExpiresAt = 0;
+
 window.addEventListener('message', e => {
   if (e.data.type === 'update') render(e.data.data);
 });
 vscode.postMessage({ cmd: 'ready' });
 
+setInterval(() => {
+  if (!_alertExpiresAt) return;
+  const el = document.querySelector('.alert-countdown');
+  if (!el) return;
+  const remain = Math.max(0, Math.ceil((_alertExpiresAt - Date.now()) / 1000));
+  if (remain <= 0) {
+    el.textContent = '0s';
+    _alertExpiresAt = 0;
+    return;
+  }
+  el.textContent = remain > 60 ? Math.floor(remain / 60) + 'm ' + (remain % 60) + 's' : remain + 's';
+}, 1000);
+
 function render(projects) {
   const ids = Object.keys(projects);
   if (ids.length === 0) {
@@ -202,6 +284,10 @@ function render(projects) {
   }
   html += renderActions(projects);
   root.innerHTML = html;
+
+  const alertCard = root.querySelector('.alert-card[data-expires]');
+  _alertExpiresAt = alertCard ? parseInt(alertCard.dataset.expires, 10) || 0 : 0;
+
   root.querySelectorAll('[data-cmd]').forEach(btn => {
     btn.addEventListener('click', () => vscode.postMessage({ cmd: 'exec', command: btn.dataset.cmd }));
   });
@@ -245,11 +331,12 @@ function renderProject(d) {
   // ── Alert detail card (only when active) ──
   if (hasAlert) {
     const a = d.alerts.latest;
-    const remain = a.expiresAt ? Math.max(0, Math.ceil((new Date(a.expiresAt).getTime() - Date.now()) / 1000)) : 0;
+    const expiresTs = a.expiresAt ? new Date(a.expiresAt).getTime() : 0;
+    const remain = expiresTs ? Math.max(0, Math.ceil((expiresTs - Date.now()) / 1000)) : 0;
     const display = remain > 60 ? Math.floor(remain/60) + 'm ' + (remain%60) + 's' : remain + 's';
-    h += '<div class="alert-card">';
-    h += '<div class="title">⚠ ' + (a.fileCount||'?') + ' files in ' + (a.windowSeconds||'?') + 's</div>';
-    h += '<div class="detail">Threshold: ' + (a.threshold||'?') + ' · Expires: ' + display + '</div>';
+    h += '<div class="alert-card" data-expires="' + expiresTs + '">';
+    h += '<div class="title">\u26a0 ' + (a.fileCount||'?') + ' files in ' + (a.windowSeconds||'?') + 's</div>';
+    h += '<div class="detail">Threshold: ' + (a.threshold||'?') + ' \xb7 Expires: <span class="alert-countdown">' + display + '</span></div>';
     h += '<div class="actions">';
     h += '<button class="btn-sm" data-cmd="cursorGuard.openDashboard">View Details</button>';
     h += '</div>';
@@ -270,7 +357,44 @@ function renderProject(d) {
   h += statRow('Git backups', gitC, 'blue');
   if (shadowC > 0) h += statRow('Shadow copies', shadowC, 'blue');
   h += statRow('Disk free', freeDisplay, diskWarn ? 'yellow' : 'green');
-  h += statRow('Protected files', d.protectionScope?.fileCount || 0, '');
+  h += '</div>';
+
+  // ── Protection Scope ──
+  const scope = d.protectionScope || {};
+  const pCount = scope.fileCount || 0;
+  const exCount = scope.excludedCount || 0;
+  const totalF = scope.totalFiles || 0;
+  const protectPats = scope.protect || [];
+  const ignorePats = scope.ignore || [];
+
+  h += '<div class="stats-card">';
+  h += '<div class="label-sm">Protection Scope</div>';
+  h += '<div class="scope-summary">';
+  h += '<span class="scope-chip protected">\u{1f6e1}\ufe0f ' + pCount + ' protected</span>';
+  if (exCount > 0) h += '<span class="scope-chip excluded">\u{1f6ab} ' + exCount + ' excluded</span>';
+  h += '<span class="scope-chip total">' + totalF + ' total</span>';
+  h += '</div>';
+
+  if (protectPats.length > 0) {
+    h += '<div class="scope-block">';
+    h += '<span class="scope-label green">Protect (' + protectPats.length + ')</span>';
+    h += '<div class="scope-tags">';
+    const showP = protectPats.slice(0, 6);
+    for (const p of showP) h += '<span class="scope-tag green">' + esc(p) + '</span>';
+    if (protectPats.length > 6) h += '<span class="scope-tag dim">+' + (protectPats.length - 6) + ' more</span>';
+    h += '</div></div>';
+  }
+
+  if (ignorePats.length > 0) {
+    h += '<div class="scope-block">';
+    h += '<span class="scope-label red">Ignore (' + ignorePats.length + ')</span>';
+    h += '<div class="scope-tags">';
+    const showI = ignorePats.slice(0, 6);
+    for (const ig of showI) h += '<span class="scope-tag red">' + esc(ig) + '</span>';
+    if (ignorePats.length > 6) h += '<span class="scope-tag dim">+' + (ignorePats.length - 6) + ' more</span>';
+    h += '</div></div>';
+  }
+
   h += '</div>';
 
   return h;

package/references/vscode-extension/lib/webview-provider.js

@@ -32,41 +32,59 @@ class WebViewProvider {
 
     const publicDir = getPublicDirLazy();
     const htmlPath = path.join(publicDir, 'index.html');
+    const baseUrl = this._dashMgr.baseUrl || '';
+    const token = this._dashMgr.token || '';
 
     if (!fs.existsSync(htmlPath)) {
-      const baseUrl = this._dashMgr.baseUrl;
-      if (baseUrl) {
-        vscode.env.openExternal(vscode.Uri.parse(baseUrl + '?token=' + (this._dashMgr.token || '')));
-        return;
-      }
-      vscode.window.showErrorMessage(
-        `Cursor Guard: dashboard files not found at ${publicDir}. Try reinstalling the extension.`
-      );
+      this._openInBrowser(baseUrl, token, `Dashboard files not found at ${publicDir}`);
       return;
     }
 
-    this._panel = vscode.window.createWebviewPanel(
-      'cursorGuardDashboard',
-      'Cursor Guard Dashboard',
-      vscode.ViewColumn.One,
-      {
-        enableScripts: true,
-        retainContextWhenHidden: true,
-        localResourceRoots: [vscode.Uri.file(publicDir)],
-      }
-    );
-
-    this._panel.webview.html = this._buildHtml(this._panel.webview, publicDir);
-    this._panel.iconPath = new vscode.ThemeIcon('shield');
+    try {
+      this._panel = vscode.window.createWebviewPanel(
+        'cursorGuardDashboard',
+        'Cursor Guard Dashboard',
+        vscode.ViewColumn.One,
+        {
+          enableScripts: true,
+          retainContextWhenHidden: true,
+          localResourceRoots: [vscode.Uri.file(publicDir)],
+        }
+      );
 
-    this._panel.onDidDispose(() => { this._panel = null; });
+      this._panel.webview.html = this._buildHtml(this._panel.webview, publicDir);
+      this._panel.iconPath = new vscode.ThemeIcon('shield');
+
+      this._panel.onDidDispose(() => { this._panel = null; });
+
+      this._panel.webview.onDidReceiveMessage(msg => {
+        if (msg.type === 'copy') {
+          vscode.env.clipboard.writeText(msg.text);
+          vscode.window.showInformationMessage('Copied to clipboard');
+        }
+        if (msg.type === 'fetchError') {
+          this._panel?.dispose();
+          this._panel = null;
+          this._openInBrowser(baseUrl, token, 'WebView fetch failed, opening in browser');
+        }
+      });
+    } catch (err) {
+      this._openInBrowser(baseUrl, token, `WebView creation failed: ${err.message}`);
+    }
+  }
 
-    this._panel.webview.onDidReceiveMessage(msg => {
-      if (msg.type === 'copy') {
-        vscode.env.clipboard.writeText(msg.text);
-        vscode.window.showInformationMessage('Copied to clipboard');
+  _openInBrowser(baseUrl, token, reason) {
+    if (baseUrl) {
+      const url = baseUrl + (token ? '?token=' + token : '');
+      vscode.env.openExternal(vscode.Uri.parse(url));
+      if (reason) {
+        vscode.window.showInformationMessage(`Cursor Guard: ${reason}. Opened in browser.`);
       }
-    });
+    } else {
+      vscode.window.showErrorMessage(
+        `Cursor Guard: Dashboard server not running. Try starting the watcher first.`
+      );
+    }
   }
 
   _buildHtml(webview, publicDir) {
@@ -86,10 +104,10 @@ class WebViewProvider {
     const csp = [
       `default-src 'none'`,
       `style-src ${webview.cspSource} 'unsafe-inline'`,
-      `script-src 'nonce-${nonce}' ${webview.cspSource}`,
+      `script-src 'nonce-${nonce}' ${webview.cspSource} 'unsafe-inline'`,
       `font-src ${webview.cspSource}`,
-      `img-src ${webview.cspSource} data:`,
-      `connect-src ${baseUrl || 'http://127.0.0.1:*'}`,
+      `img-src ${webview.cspSource} data: http://127.0.0.1:*`,
+      `connect-src http://127.0.0.1:* http://localhost:* ws://127.0.0.1:* ws://localhost:*`,
     ].join('; ');
 
     html = html.replace(

package/references/vscode-extension/package.json

@@ -2,7 +2,7 @@
   "name": "cursor-guard-ide",
   "displayName": "Cursor Guard",
   "description": "AI code protection dashboard embedded in your IDE — real-time alerts, backup history, one-click snapshots",
-  "version": "4.7.6",
+  "version": "4.8.1",
   "publisher": "zhangqiang8vipp",
   "license": "BUSL-1.1",
   "engines": {
@@ -58,6 +58,18 @@
         "category": "Cursor Guard",
         "icon": "$(search)"
       },
+      {
+        "command": "cursorGuard.addToProtect",
+        "title": "Add to Protected",
+        "category": "Cursor Guard",
+        "icon": "$(shield)"
+      },
+      {
+        "command": "cursorGuard.addToIgnore",
+        "title": "Exclude from Protection",
+        "category": "Cursor Guard",
+        "icon": "$(circle-slash)"
+      },
       {
         "command": "cursorGuard.refreshTree",
         "title": "Refresh",
@@ -99,7 +111,30 @@
           "when": "view == cursorGuardProjects",
           "group": "navigation"
         }
+      ],
+      "explorer/context": [
+        {
+          "command": "cursorGuard.addToProtect",
+          "group": "cursorGuard@1",
+          "when": "explorerResourceIsFolder || resourceScheme == file"
+        },
+        {
+          "command": "cursorGuard.addToIgnore",
+          "group": "cursorGuard@2",
+          "when": "explorerResourceIsFolder || resourceScheme == file"
+        }
+      ],
+      "editor/title/context": [
+        {
+          "command": "cursorGuard.addToProtect",
+          "group": "cursorGuard@1"
+        },
+        {
+          "command": "cursorGuard.addToIgnore",
+          "group": "cursorGuard@2"
+        }
       ]
-    }
+    },
+    "submenus": []
   }
 }

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2024 Anthropic, PBC
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.