patchcord 0.5.131 → 0.5.133

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "patchcord",
   "description": "Cross-machine agent messaging. Messages from other agents land in the inbox and wake the agent to reply.",
-  "version": "0.5.131",
+  "version": "0.5.133",
   "author": {
     "name": "ppravdin"
   },

package/README.md

@@ -23,6 +23,9 @@ npx patchcord@latest --token <token> --server https://patchcord.yourdomain.com
 - **Stop hook** — checks inbox between turns, notifies of pending messages
 - **Slash commands** — `/patchcord` and `/patchcord-wait` for Codex and Gemini CLI
 - **MCP config** — per-project or global config depending on tool
+- **Cursor CLI** — bearer-only MCP endpoint, `patchcord:*` pre-allowed in
+  `~/.cursor/permissions.json`, and inbox/wait skills installed when
+  `cursor-agent` is detected
 - **Kimi CLI** — global MCP config plus skills in `~/.kimi/skills/`
 
 ## How it works

package/bin/patchcord.mjs

@@ -1014,7 +1014,16 @@ if (cmd === "login" || cmd === "orchestrator" || cmd === "teamlead" || cmd === "
       const cdir = join(dir, ".cursor"); mkdirSync(cdir, { recursive: true });
       return writeJson(join(cdir, "mcp.json"), (o) => {
         o.mcpServers = o.mcpServers || {};
-        o.mcpServers.patchcord = { url: `${baseUrl}/mcp`, headers: hdr };
+        // NO "type" field — cursor-agent silently drops the entire server entry
+        // when "type" is set to any value here (verified: tools simply never
+        // load, ListMcpResources returns empty, no error surfaced anywhere).
+        // Confirmed via 3 headless `cursor-agent --print` variants: with "type"
+        // set, 0 tools; without it, all patchcord tools load correctly — both
+        // against /mcp/bearer and plain /mcp. Do not re-add this field.
+        o.mcpServers.patchcord = {
+          url: `${baseUrl}/mcp/bearer`,
+          headers: hdr,
+        };
       });
     }
     if (tool === "antigravity" || tool === "agy") {
@@ -1739,9 +1748,14 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
     }
   }
 
-  // Cursor
+  // Cursor.  Cursor CLI (cursor-agent) can be installed without creating the
+  // IDE's skills directory, so detect the executable as well as the directory.
+  // The bearer-only endpoint prevents Cursor from incorrectly starting OAuth
+  // discovery when the installer has supplied a static bearer header.
   const cursorSkillsRoot = join(HOME, ".cursor", "skills-cursor");
-  if (existsSync(cursorSkillsRoot)) {
+  const hasCursorAgent = run("which cursor-agent");
+  if (hasCursorAgent || existsSync(cursorSkillsRoot)) {
+    mkdirSync(cursorSkillsRoot, { recursive: true });
     const cursorSkillDir = join(cursorSkillsRoot, "patchcord");
     const cursorWaitDir = join(cursorSkillsRoot, "patchcord-wait");
     let cursorChanged = false;
@@ -1756,6 +1770,27 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
       cursorChanged = true;
     }
     if (cursorChanged) globalChanges.push("Cursor skills installed");
+
+    if (hasCursorAgent) {
+      const cursorPermissionsPath = join(HOME, ".cursor", "permissions.json");
+      let allowlistChanged = false;
+      const permissionsOk = updateJsonConfig(cursorPermissionsPath, (obj) => {
+        if (obj.mcpAllowlist === undefined) obj.mcpAllowlist = [];
+        if (!Array.isArray(obj.mcpAllowlist)) {
+          console.log(`\n  ${yellow}⚠${r} Skipped Cursor MCP allowlist — ${cursorPermissionsPath} has a non-array mcpAllowlist.`);
+          return;
+        }
+        if (!obj.mcpAllowlist.includes("patchcord:*")) {
+          obj.mcpAllowlist.push("patchcord:*");
+          allowlistChanged = true;
+        }
+      });
+      if (!permissionsOk) {
+        globalChanges.push("✗ Cursor permissions error");
+      } else if (allowlistChanged) {
+        globalChanges.push("Cursor MCP allowlist configured");
+      }
+    }
   }
 
   // Windsurf
@@ -2091,8 +2126,8 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
     }
   }
 
-  if (!hasClaude && !existsSync(codexConfig) && !hasKimi) {
-    console.log(`${dim}No Claude Code, Codex CLI, or Kimi Code detected — skipping global setup.${r}`);
+  if (!hasClaude && !existsSync(codexConfig) && !hasKimi && !hasCursorAgent && !existsSync(cursorSkillsRoot)) {
+    console.log(`${dim}No Claude Code, Codex CLI, Cursor, or Kimi Code detected — skipping global setup.${r}`);
     console.log(`${dim}  Kimi Code: https://kimi.moonshot.cn/download${r}`);
   }
 
@@ -2518,8 +2553,12 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
     const cursorPath = join(cursorDir, "mcp.json");
     const cursorConfig = {
       mcpServers: {
+        // NO "type" field — cursor-agent silently drops the entire server
+        // entry when "type" is set (verified: tools never load, no error
+        // surfaced anywhere). Confirmed via headless cursor-agent --print
+        // testing. Do not re-add this field.
         patchcord: {
-          url: `${serverUrl}/mcp`,
+          url: `${serverUrl}/mcp/bearer`,
           headers: {
             Authorization: `Bearer ${token}`,
             "X-Patchcord-Machine": hostname,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.5.131",
+  "version": "0.5.133",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "scripts": {
     "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin/plugin.json"