log-llm-config-staging 1.3.92 → 1.3.93

package/dist/log_config_files/readers/vscdb_reader.js

@@ -25,6 +25,27 @@ function querySqlite(dbPath, key) {
         stdio: ['pipe', 'pipe', 'pipe'],
     }).trim();
 }
+/**
+ * Cursor keeps live agent settings (e.g. yoloCommandAllowlist) on nested composerState inside
+ * the reactive blob while the legacy ItemTable `composerState` row is often stale/partial.
+ * Merge nested fields so compliance/autofix match policy scans on uploaded reactive data.
+ */
+function mergeLegacyComposerStateWithReactiveNested(dbPath, reactiveKey, legacyComposerState) {
+    try {
+        const reactive = querySqlite(dbPath, reactiveKey);
+        if (!reactive)
+            return legacyComposerState;
+        const root = JSON.parse(reactive);
+        const nested = root.composerState;
+        if (nested === null || typeof nested !== 'object' || Array.isArray(nested)) {
+            return legacyComposerState;
+        }
+        return { ...legacyComposerState, ...nested };
+    }
+    catch {
+        return legacyComposerState;
+    }
+}
 /**
  * Fallback if the API omits vscdb_composer_contract (older server): derive from vscdb_read_queries.
  */
@@ -113,6 +134,10 @@ export function readVscdbItemTableJson(dbPath, itemKey) {
         }
         const parsed = JSON.parse(raw);
         if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            if (itemKey === 'composerState' && reactiveKey) {
+                const merged = mergeLegacyComposerStateWithReactiveNested(dbPath, reactiveKey, parsed);
+                return { [itemKey]: merged };
+            }
             return { [itemKey]: parsed };
         }
         // Bare JSON arrays (e.g. cursor/disabledMcpServers) — wrap under itemKey so ops-based

package/dist/log_config_files/runtime/remediation_sync.js

@@ -645,6 +645,35 @@ function mergeSqliteOpIntoJson(currentJson, sqliteOp) {
         currentJson[key] = arr;
         return;
     }
+    if (sqliteOp.array_remove?.length) {
+        const jp = (sqliteOp.json_path ?? '').trim();
+        const removeSet = new Set(sqliteOp.array_remove.map((v) => String(v)));
+        if (!jp) {
+            const key = sqliteOp.target_key;
+            const existing = currentJson[key];
+            const arr = Array.isArray(existing) ? [...existing] : [];
+            currentJson[key] = arr.filter((x) => !removeSet.has(String(x)));
+            return;
+        }
+        const parts = jp.split('.').filter(Boolean);
+        if (parts.length === 0)
+            return;
+        let node = currentJson;
+        for (const p of parts.slice(0, -1)) {
+            if (node == null || typeof node !== 'object' || Array.isArray(node))
+                return;
+            node = node[p];
+        }
+        if (node == null || typeof node !== 'object' || Array.isArray(node))
+            return;
+        const container = node;
+        const arrayKey = parts[parts.length - 1];
+        const existing = container[arrayKey];
+        if (!Array.isArray(existing))
+            return;
+        container[arrayKey] = existing.filter((x) => !removeSet.has(String(x)));
+        return;
+    }
     const where = sqliteOp.array_item_where;
     const jp = sqliteOp.json_path ?? '';
     if (where && typeof where === 'object' && Object.keys(where).length > 0 && jp) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "log-llm-config-staging",
-  "version": "1.3.92",
+  "version": "1.3.93",
   "description": "CLI helpers for logging hardware UUIDs and posting startup payloads to Optimus Security.",
   "type": "module",
   "bin": {