overlord-cli 0.2605121033.0 → 0.2605121205.0

package/README.md

@@ -121,7 +121,7 @@ Agents can find docs here: https://www.ovld.ai/docs/for-agents
 - `record-change-rationales` - persist structured change rationales without a normal progress update
 - `ask` - post a blocking question and move the ticket to review
 - `permission-request` - notify Overlord that the agent is requesting tool permission
-- `hook-event` - record lifecycle hook events such as `UserPromptSubmit` without a session key
+- `hook-event` - record lifecycle hook events such as `UserPromptSubmit` / Cursor `beforeSubmitPrompt` without a session key
 - `read-context` - read shared persistent context for this ticket
 - `write-context` - write shared persistent context for future sessions
 - `deliver` - create a local JJ/Git checkpoint when available, send artifacts/rationales, and move the ticket to review

package/bin/_cli/setup.mjs

@@ -809,10 +809,57 @@ function cursorPaths() {
       'plugin.json'
     ),
     rulesFile: path.join(base, 'rules', 'overlord-local.mdc'),
-    settingsFile: path.join(base, 'settings.json')
+    settingsFile: path.join(base, 'settings.json'),
+    hooksFile: path.join(base, 'hooks.json')
   };
 }
 
+const CURSOR_USER_PROMPT_HOOK_RELATIVE = 'plugins/local/overlord/hooks/overlord-user-prompt-submit.sh';
+
+function isOverlordCursorBeforeSubmitHook(entry) {
+  if (!entry || typeof entry !== 'object') return false;
+  const cmd = typeof entry.command === 'string' ? entry.command : '';
+  return cmd.includes('overlord-user-prompt-submit');
+}
+
+function mergeCursorBeforeSubmitHook(paths) {
+  const hooksFile = paths.hooksFile;
+  const base = fs.existsSync(hooksFile)
+    ? readJsonFile(hooksFile)
+    : { version: 1, hooks: {} };
+  const hooks = base.hooks && typeof base.hooks === 'object' && !Array.isArray(base.hooks) ? base.hooks : {};
+  const existing = Array.isArray(hooks.beforeSubmitPrompt) ? hooks.beforeSubmitPrompt : [];
+  hooks.beforeSubmitPrompt = [
+    ...existing.filter(entry => !isOverlordCursorBeforeSubmitHook(entry)),
+    { command: CURSOR_USER_PROMPT_HOOK_RELATIVE }
+  ];
+  writeJsonFile(hooksFile, {
+    ...base,
+    version: typeof base.version === 'number' ? base.version : 1,
+    hooks
+  });
+}
+
+function removeCursorBeforeSubmitHook(paths) {
+  const hooksFile = paths.hooksFile;
+  if (!fs.existsSync(hooksFile)) return;
+  const base = readJsonFile(hooksFile);
+  const hooks = base.hooks && typeof base.hooks === 'object' && !Array.isArray(base.hooks) ? base.hooks : {};
+  if (!Array.isArray(hooks.beforeSubmitPrompt)) return;
+  hooks.beforeSubmitPrompt = hooks.beforeSubmitPrompt.filter(
+    entry => !isOverlordCursorBeforeSubmitHook(entry)
+  );
+  if (hooks.beforeSubmitPrompt.length === 0) {
+    delete hooks.beforeSubmitPrompt;
+  }
+  if (Object.keys(hooks).length === 0) {
+    delete base.hooks;
+  } else {
+    base.hooks = hooks;
+  }
+  writeJsonFile(hooksFile, base);
+}
+
 function geminiPaths() {
   const base = path.join(os.homedir(), '.gemini');
   return {
@@ -945,6 +992,7 @@ function installCodex() {
 
 function installCursor() {
   const paths = cursorPaths();
+  const backups = [];
   const sourceDir = cursorSourcePluginDir();
   fs.mkdirSync(path.dirname(paths.pluginDir), { recursive: true });
   fs.rmSync(paths.pluginDir, { recursive: true, force: true });
@@ -961,6 +1009,14 @@ function installCursor() {
     for (const filePath of removedLegacySlash.removedFiles) console.log(`      ${filePath}`);
   }
 
+  const hooksBackup = backupFile(paths.hooksFile);
+  if (hooksBackup) {
+    backups.push(hooksBackup);
+    console.log(`  ✓ Backed up: ${paths.hooksFile} → ${path.basename(hooksBackup)}`);
+  }
+  mergeCursorBeforeSubmitHook(paths);
+  console.log(`  ✓ Registered Cursor beforeSubmitPrompt hook: ${paths.hooksFile}`);
+
   const existingSettings = readJsonFile(paths.settingsFile);
   const permissions =
     existingSettings.permissions && typeof existingSettings.permissions === 'object'
@@ -983,11 +1039,11 @@ function installCursor() {
     version: pluginVersion(paths.pluginManifest) ?? '0.0.0',
     contentHash: currentContentHashForAgent('cursor'),
     installedAt: new Date().toISOString(),
-    files: [...listFilesRecursive(paths.pluginDir), paths.settingsFile]
+    files: [...listFilesRecursive(paths.pluginDir), paths.settingsFile, paths.hooksFile]
   };
   writeManifest(manifest);
 
-  return { ok: true };
+  return { ok: true, backups };
 }
 
 function installGemini() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord-cli",
-  "version": "0.2605121033.0",
+  "version": "0.2605121205.0",
   "description": "Overlord CLI — launch AI agents on tickets from anywhere",
   "homepage": "https://www.ovld.ai/docs/",
   "type": "module",

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "overlord",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Local Overlord workflow plugin for Cursor terminal agents.",
   "author": {
     "name": "Cooperativ",

package/plugins/cursor/hooks/overlord-user-prompt-submit.sh

@@ -0,0 +1,60 @@
+#!/bin/bash
+# Overlord Cursor beforeSubmitPrompt hook — posts user composer prompts to the ticket activity feed.
+# Cursor does not expose Claude's turn_number; we send a monotonic turnIndex per conversation (always >= 1)
+# so POST /api/protocol/hook-event records the event (the API skips only turnIndex === 0).
+
+BODY=$(cat -)
+
+OVERLORD_BASE_URL="${OVERLORD_URL:-${OVERLORD_CONNECTOR_URL:-}}"
+OVERLORD_TOKEN="${OVERLORD_ACCESS_TOKEN:-}"
+TICKET_ID="${TICKET_ID:-}"
+OVERLORD_LOCAL_SECRET="${OVERLORD_LOCAL_SECRET:-}"
+
+if [ -n "$OVERLORD_BASE_URL" ] && [ -n "$OVERLORD_TOKEN" ] && [ -n "$TICKET_ID" ]; then
+  PAYLOAD=$(
+    printf '%s' "$BODY" | python3 -c "
+import hashlib
+import json
+import os
+import sys
+
+try:
+    body = json.load(sys.stdin)
+except Exception:
+    sys.exit(0)
+
+text = (body.get('prompt') or body.get('message') or '').strip()
+if not text:
+    sys.exit(0)
+
+cid = body.get('conversation_id') or 'unknown'
+state_dir = os.path.join(os.path.expanduser('~'), '.ovld', 'cursor-user-prompt-hook')
+os.makedirs(state_dir, exist_ok=True)
+path = os.path.join(state_dir, hashlib.sha256(cid.encode()).hexdigest())
+try:
+    with open(path, encoding='utf-8') as handle:
+        n = int((handle.read() or '0').strip() or '0')
+except Exception:
+    n = 0
+n += 1
+with open(path, 'w', encoding='utf-8') as handle:
+    handle.write(str(n))
+
+tid = os.environ.get('TICKET_ID', '')
+print(json.dumps({'hookType': 'UserPromptSubmit', 'ticketId': tid, 'prompt': text, 'turnIndex': n}))
+" 2>/dev/null
+  )
+  if [ -n "$PAYLOAD" ]; then
+    curl -sf -m 5 \
+      -X POST "$OVERLORD_BASE_URL/api/protocol/hook-event" \
+      -H "Authorization: Bearer $OVERLORD_TOKEN" \
+      -H "X-Overlord-Local-Secret: $OVERLORD_LOCAL_SECRET" \
+      -H "Content-Type: application/json" \
+      -d "$PAYLOAD" \
+      >/dev/null 2>&1 &
+    disown
+  fi
+fi
+
+printf '%s\n' '{"continue":true}'
+exit 0

package/plugins/cursor/skills/overlord-ticket/SKILL.md

@@ -13,7 +13,7 @@ Use this skill whenever Cursor needs to work with Overlord, whether the session
 2. Keep the returned `session.sessionKey` for all follow-up calls.
 3. Treat the Overlord ticket prompt as authoritative for the objective, constraints, and delivery target.
 4. Post updates while working with `ovld protocol update --phase execute`.
-5. If the user sends a follow-up message after the initial ticket, publish it immediately with `--event-type user_follow_up`.
+5. Follow-up messages after the initial ticket are captured automatically by the installed Cursor `beforeSubmitPrompt` hook (see `~/.cursor/hooks.json`). Do not post `user_follow_up` manually unless the hook is unavailable.
 6. If blocked, call `ovld protocol ask` and stop.
 7. Deliver last with `ovld protocol deliver`, including `changeRationales` for each meaningful behavioral file change.
 
@@ -42,7 +42,7 @@ Supported `--phase` values:
 
 Event types:
 - `update` for standard progress updates
-- `user_follow_up` for human follow-up messages after the initial ticket
+- `user_follow_up` — only when the Cursor `beforeSubmitPrompt` hook is unavailable; the hook normally posts follow-ups to the activity feed
 - `alert` for warnings or non-blocking issues
 
 Ask when blocked:
@@ -152,4 +152,4 @@ Objective attachment uploads also expose two-step variants — `attachment-prepa
 - If you must run `ovld auth login`, always include `--organization-id <id>` — use the organization ID from the ticket prompt context to select the organization non-interactively and avoid a blocking TTY prompt.
 - Delivery is the concluding step. After delivering, stop unless the user follows up or the ticket is reopened.
 
-<!-- version: 0.4.7 -->
+<!-- version: 0.4.8 -->