patchcord 0.6.23 → 0.6.24

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "patchcord",
   "description": "Cross-machine agent messaging. Messages from other agents land in the inbox and wake the agent to reply.",
-  "version": "0.6.23",
+  "version": "0.6.24",
   "author": {
     "name": "ppravdin"
   },

package/bin/patchcord.mjs

@@ -4,6 +4,7 @@ import { existsSync, mkdirSync, cpSync, readdirSync, readFileSync, writeFileSync
 import { join, dirname, basename } from "path";
 import { fileURLToPath } from "url";
 import { execSync } from "child_process";
+import { createHash } from "crypto";
 import { homedir } from "os";
 
 const HOME = homedir();
@@ -28,6 +29,85 @@ function run(cmd) {
   }
 }
 
+/**
+ * Cursor CLI gates project MCP behind per-project approval
+ * (`mcp list` → "not loaded (needs approval)"). permissions.json mcpAllowlist
+ * only covers IDE auto-run AFTER the server is loaded — it does not clear that
+ * gate. Approve via `cursor-agent mcp enable` (+ CLI allowlist + approvals file).
+ */
+function _approveCursorProjectMcp(projectDir) {
+  if (!projectDir || !existsSync(join(projectDir, ".cursor", "mcp.json"))) return false;
+  let changed = false;
+
+  // CLI tool allow — official format in cli-config.json (separate from permissions.json).
+  const cliConfigPath = join(HOME, ".cursor", "cli-config.json");
+  try {
+    mkdirSync(dirname(cliConfigPath), { recursive: true });
+    let obj = {};
+    if (existsSync(cliConfigPath)) {
+      try { obj = JSON.parse(readFileSync(cliConfigPath, "utf-8")); } catch { obj = {}; }
+    }
+    obj.permissions = obj.permissions || {};
+    if (!Array.isArray(obj.permissions.allow)) obj.permissions.allow = [];
+    const pat = "Mcp(patchcord:*)";
+    if (!obj.permissions.allow.includes(pat)) {
+      obj.permissions.allow.push(pat);
+      writeFileSync(cliConfigPath, JSON.stringify(obj, null, 2) + "\n");
+      changed = true;
+    }
+  } catch {}
+
+  // Official CLI API: records approval under ~/.cursor/projects/<slug>/mcp-approvals.json
+  if (run("which cursor-agent")) {
+    try {
+      execSync("cursor-agent mcp enable patchcord", {
+        cwd: projectDir,
+        stdio: "pipe",
+        encoding: "utf-8",
+        timeout: 20000,
+      });
+      changed = true;
+    } catch {
+      // Fall through to writing mcp-approvals.json directly.
+    }
+  }
+
+  // Fallback: write the same approval key cursor-agent expects (URL MCP servers).
+  try {
+    const mcpPath = join(projectDir, ".cursor", "mcp.json");
+    const cfg = JSON.parse(readFileSync(mcpPath, "utf-8"));
+    const server = cfg?.mcpServers?.patchcord;
+    const url = server?.url;
+    if (url) {
+      const slug = projectDir.replace(/[^A-Za-z0-9]+/g, "-").replace(/^-|-$/g, "");
+      const approvalsDir = join(HOME, ".cursor", "projects", slug);
+      mkdirSync(approvalsDir, { recursive: true });
+      const approvalsPath = join(approvalsDir, "mcp-approvals.json");
+      let approvals = [];
+      if (existsSync(approvalsPath)) {
+        try {
+          const raw = JSON.parse(readFileSync(approvalsPath, "utf-8"));
+          if (Array.isArray(raw)) approvals = raw;
+        } catch {}
+      }
+      // Cursor hashes { path, server: { url } } and sometimes the full server object.
+      const keys = [
+        `patchcord-${createHash("sha256").update(JSON.stringify({ path: projectDir, server: { url } })).digest("hex").slice(0, 16)}`,
+        `patchcord-${createHash("sha256").update(JSON.stringify({ path: projectDir, server })).digest("hex").slice(0, 16)}`,
+      ];
+      for (const key of keys) {
+        if (!approvals.includes(key)) {
+          approvals.push(key);
+          changed = true;
+        }
+      }
+      writeFileSync(approvalsPath, JSON.stringify(approvals, null, 2) + "\n");
+    }
+  } catch {}
+
+  return changed;
+}
+
 function isSafeToken(t) {
   return /^[A-Za-z0-9_\-=+/.]+$/.test(t) && t.length < 200;
 }
@@ -1900,6 +1980,11 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
       } else if (allowlistChanged) {
         globalChanges.push("Cursor MCP allowlist configured");
       }
+
+      // Existing projects: clear "not loaded (needs approval)" on update.
+      if (_approveCursorProjectMcp(process.cwd())) {
+        globalChanges.push("Cursor MCP approved for this project");
+      }
     }
   }
 
@@ -2729,6 +2814,9 @@ if (!cmd || cmd === "install" || cmd === "agent" || cmd?.startsWith("--")) {
       console.log(`\n  ${green}✓${r} Cursor configured: ${dim}${cursorPath}${r}`);
       console.log(`  ${dim}Per-project only — other projects won't see this agent.${r}`);
     }
+    if (_approveCursorProjectMcp(cwd)) {
+      console.log(`  ${green}✓${r} Cursor MCP approved (cursor-agent mcp enable)`);
+    }
   } else if (isGrok) {
     // Grok CLI: project-scoped .grok/config.toml. Grok loads this file from
     // the current directory up through the git root, so the bearer remains

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchcord",
-  "version": "0.6.23",
+  "version": "0.6.24",
   "description": "Cross-machine agent messaging for Claude Code and Codex",
   "scripts": {
     "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin/plugin.json"