context-guard-cli 2.4.0__tar.gz → 2.5.0__tar.gz

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/.gitignore

@@ -8,3 +8,5 @@ dist/
 PLAN.md
 PLAN-2.1.md
 RUNBOOK_HUMANO.md
+.claude/*.local.json
+uv.lock

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/CHANGELOG.md

@@ -6,6 +6,28 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ---
 
+## [2.5.0] - 2026-09-03
+
+### Added
+
+- Support for Cursor as a host adapter: `cg setup --host cursor` installs
+  `.cursor/rules/context-guard.mdc` (both globally in `~/.cursor/rules` and
+  per-project) and optionally registers `context-guard-mcp` in `.cursor/mcp.json`
+  via `--with-mcp`.
+- `cg new` automatically detects Cursor and materialises `.cursor/rules/context-guard.mdc`
+  in newly created changes.
+- Documentation for Cursor's cooperative approval gate model in
+  `docs/adapters/cursor/PERMISSIONS.md`.
+
+### Changed
+
+- Unified Gemini/Antigravity global skill installation path to
+  `~/.gemini/config/skills/context-guard/SKILL.md` (the canonical machine-local
+  configuration root shared across Gemini CLI, IDE, Desktop, and ACP).
+  This fixes broken symlinks when `~/.gemini/config/skills/` was not yet created.
+  Any legacy owned skill file at `~/.gemini/antigravity-cli/skills/context-guard/SKILL.md`
+  is cleaned up automatically on setup.
+
 ## [2.4.0] - 2026-08-06
 
 The bridge between a plan and a change was copy-paste. A phased `PLAN-N.md`

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: context-guard-cli
-Version: 2.4.0
+Version: 2.5.0
 Summary: The transactional memory layer for AI coding agents — your context survives crashes, compaction, and session loss
 License-Expression: MIT
 License-File: LICENSE
@@ -95,7 +95,7 @@ context-guard-cli`**: that installs into whichever venv is currently active —
 a single project's, if you happen to be inside one — not onto the machine,
 which silently defeats the point of a global `cg setup`.
 
-`cg setup` detects Claude Code, OpenCode and Antigravity, installs the slash
+`cg setup` detects Claude Code, OpenCode, Antigravity and Cursor, installs the slash
 commands, and puts `cg approve` behind each one's permission prompt — see
 [Adapters](#adapters-and-permission-configuration). It prints every file it
 touched, and running it again changes nothing.
@@ -307,7 +307,7 @@ an open transaction). Activate it once per clone with
 ## Adapters and permission configuration
 
 Thin, per-harness wrappers ship inside the package under
-`context_guard/_data/hosts/{claude-code,opencode,antigravity}/` — each points
+`context_guard/_data/hosts/{claude-code,opencode,antigravity,cursor}/` — each points
 at `phases/{plan,execute,verify}.md` rather than duplicating them. How to put
 `cg approve` behind each harness's permission prompt is documented in
 [docs/adapters/](docs/adapters/), one `PERMISSIONS.md` per host, alongside the

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/README.es.md

@@ -80,7 +80,7 @@ en ese momento — el de un proyecto puntual, si estás parado adentro de
 uno — no en la máquina, lo que anula en silencio el sentido de un `cg setup`
 global.
 
-`cg setup` detecta Claude Code, OpenCode y Antigravity, instala los slash
+`cg setup` detecta Claude Code, OpenCode, Antigravity y Cursor, instala los slash
 commands, y deja `cg approve` detrás del permission prompt de cada uno — ver
 [Adapters](#adapters-y-configuración-de-permisos). Imprime cada archivo que
 tocó, y correrlo de nuevo no cambia nada.
@@ -297,7 +297,7 @@ fase completada o una transacción abierta). Activalo una vez por clon con
 ## Adapters y configuración de permisos
 
 Dentro del paquete, en `context_guard/_data/hosts/{claude-code,opencode,
-antigravity}/`, viven wrappers finos por harness — cada uno apunta a
+antigravity,cursor}/`, viven wrappers finos por harness — cada uno apunta a
 `phases/{plan,execute,verify}.md` en vez de duplicarlos. Cómo poner
 `cg approve` detrás del permission prompt de cada harness está documentado en
 [docs/adapters/](docs/adapters/), un `PERMISSIONS.md` por host, junto con el

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/README.md

@@ -82,7 +82,7 @@ context-guard-cli`**: that installs into whichever venv is currently active —
 a single project's, if you happen to be inside one — not onto the machine,
 which silently defeats the point of a global `cg setup`.
 
-`cg setup` detects Claude Code, OpenCode and Antigravity, installs the slash
+`cg setup` detects Claude Code, OpenCode, Antigravity and Cursor, installs the slash
 commands, and puts `cg approve` behind each one's permission prompt — see
 [Adapters](#adapters-and-permission-configuration). It prints every file it
 touched, and running it again changes nothing.
@@ -294,7 +294,7 @@ an open transaction). Activate it once per clone with
 ## Adapters and permission configuration
 
 Thin, per-harness wrappers ship inside the package under
-`context_guard/_data/hosts/{claude-code,opencode,antigravity}/` — each points
+`context_guard/_data/hosts/{claude-code,opencode,antigravity,cursor}/` — each points
 at `phases/{plan,execute,verify}.md` rather than duplicating them. How to put
 `cg approve` behind each harness's permission prompt is documented in
 [docs/adapters/](docs/adapters/), one `PERMISSIONS.md` per host, alongside the

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/TUTORIAL.es.md

@@ -1,6 +1,6 @@
 # Tutorial: memoria persistente para tu asistente de programación con context-guard
 
-*Para personas que usan asistentes de IA (Claude Code, OpenCode, Antigravity) y quieren que no se olviden de lo que estaban haciendo. No hace falta ser experto: si sabés abrir una terminal y copiar comandos, podés seguir esta guía.*
+*Para personas que usan asistentes de IA (Claude Code, OpenCode, Antigravity, Cursor) y quieren que no se olviden de lo que estaban haciendo. No hace falta ser experto: si sabés abrir una terminal y copiar comandos, podés seguir esta guía.*
 
 ---
 
@@ -27,7 +27,7 @@ Una aclaración honesta, porque este proyecto se toma en serio la honestidad: co
 - **Una computadora con terminal.** macOS, Linux, o Windows con WSL.
 - **Python 3.10 o más nuevo.** Verificalo con `python3 --version`. Si no lo tenés, instalalo desde [python.org](https://www.python.org/downloads/).
 - **git.** Verificalo con `git --version`.
-- **Un asistente de programación instalado**: Claude Code, OpenCode o Antigravity. Cualquiera de los tres funciona; los comandos del asistente son los mismos.
+- **Un asistente de programación instalado**: Claude Code, OpenCode, Antigravity o Cursor. Cualquiera funciona; los comandos del asistente son los mismos.
 - **Un proyecto** donde trabajar. Puede ser uno existente o una carpeta nueva; solo necesita ser un repositorio git (si no lo es, entrá a la carpeta y corré `git init`).
 
 ---

context_guard_cli-2.5.0/context_guard/_data/hosts/cursor/mcp.snippet.json

@@ -0,0 +1,7 @@
+{
+  "mcpServers": {
+    "context-guard": {
+      "command": "context-guard-mcp"
+    }
+  }
+}

context_guard_cli-2.5.0/context_guard/_data/hosts/cursor/rules/context-guard.mdc

@@ -0,0 +1,20 @@
+---
+description: Active persistence contract and phase discipline for context-guard
+globs: 
+alwaysApply: true
+---
+<!-- context-guard:begin -->
+## ACTIVE PERSISTENCE CONTRACT: context-guard
+MANDATORY BOOTSTRAP — read before responding to anything in a project that
+has a `.context-guard/` directory:
+1. Read `AGENTS.md` at the project root and follow it as your state contract.
+2. State manager binary: `cg` (or `context-guard`). Operative subcommands:
+   begin | commit | rollback | checkpoint | status | next-task | validate
+   Human-only subcommand (never run by the agent): `cg approve`.
+   If `commit` returns EXIT_APPROVAL_REQUIRED (6): stop and ask the user to
+   run `cg approve --change <name>` themselves.
+3. Check `.context-guard/changes/*/manifest.json` for an active change and
+   act accordingly (cold start, resume via `cg status`, or report a stuck
+   lock — never fix a stuck lock by editing the manifest by hand).
+4. Phase instructions live in `.context-guard/phases/{plan,execute,verify}.md`.
+<!-- context-guard:end -->

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/context_guard/guard/assets.py

@@ -17,7 +17,7 @@ from .errors import EXIT_GENERIC, GuardError
 
 PHASES = ("plan", "execute", "verify")
 
-HOSTS = ("claude-code", "opencode", "antigravity")
+HOSTS = ("claude-code", "opencode", "antigravity", "cursor")
 
 # Which snippets each host ships, keyed by the short name callers pass. The
 # file is always "<name>.snippet.json"; the mapping exists to be an allowlist,
@@ -26,6 +26,7 @@ SNIPPETS = {
     "claude-code": ("settings", "mcp"),
     "opencode": ("agent", "permissions", "mcp"),
     "antigravity": ("hooks",),
+    "cursor": ("mcp",),
 }
 
 
@@ -62,8 +63,7 @@ def iter_host_files(host):
     `relpath` is relative to the host's directory and always uses forward
     slashes, because callers join it onto a target directory to write the file
     out. Raises for an unknown host instead of yielding nothing: a `cg setup`
-    that installs zero files and exits 0 looks exactly like success.
-    """
+    that installs zero files and exits 0 looks exactly like success."""
     if host not in HOSTS:
         raise AssetNotFoundError(f"unknown host '{host}' (expected one of {', '.join(HOSTS)})")
 

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/context_guard/guard/cli.py

@@ -131,7 +131,7 @@ def parse_args(argv=None):
     p_new = subparsers.add_parser("new")
     p_new.add_argument("--context", default=".")
     p_new.add_argument("name")
-    p_new.add_argument("--host", choices=["claude", "opencode", "antigravity"],
+    p_new.add_argument("--host", choices=["claude", "opencode", "antigravity", "cursor"],
                        default=None,
                        help="Also materialise this host's workspace files "
                             "(Antigravity's rule file). Detected automatically "
@@ -148,7 +148,7 @@ def parse_args(argv=None):
     # setup takes no --context: it configures hosts, not a change. --project
     # opts back into 2.0's per-project install for teams committing the config.
     p_setup = subparsers.add_parser("setup")
-    p_setup.add_argument("--host", choices=["claude", "opencode", "antigravity", "all"],
+    p_setup.add_argument("--host", choices=["claude", "opencode", "antigravity", "cursor", "all"],
                          default="all")
     p_setup.add_argument("--with-mcp", action="store_true",
                          help="Also register the context-guard-mcp server. "

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/context_guard/guard/commands.py

@@ -37,8 +37,10 @@ from .plan_import import (
 )
 from .setup import (
     antigravity_detected,
+    cursor_detected,
     diverged_phases,
     materialise_antigravity_rule,
+    materialise_cursor_rule,
     materialise_phases,
     run_setup,
 )
@@ -143,6 +145,8 @@ def cmd_new(context, change, host=None):
     materialise_phases(context)
     if host == "antigravity" or (host is None and antigravity_detected()):
         materialise_antigravity_rule(context)
+    if host == "cursor" or (host is None and cursor_detected()):
+        materialise_cursor_rule(context)
 
     return CommandResult(f"SUCCESS|CHANGE_CREATED|{name}|phase=PLAN", EXIT_OK)
 

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/context_guard/guard/setup.py

@@ -27,6 +27,7 @@ HOST_DIRS = {
     "claude": "claude-code",
     "opencode": "opencode",
     "antigravity": "antigravity",
+    "cursor": "cursor",
 }
 VALID_HOSTS = tuple(HOST_DIRS) + ("all",)
 
@@ -214,12 +215,12 @@ def _install_opencode(root, with_mcp, global_scope):
     return touched
 
 
-# The path was confirmed against Antigravity CLI 1.1.9 via the /skills panel,
-# which lists ~/.gemini/antigravity-cli/skills/ as the user's global location;
-# builtin/ is the subtree with checksum, a sibling of this one, not its parent.
-# ANTIGRAVITY_GLOBAL_ROOT remains as is: hooks.json does reside in .gemini/config/.
+# ~/.gemini/config/ is the unified configuration root for all Gemini tools
+# (CLI, IDE, ACP, Desktop). Hooks live at ~/.gemini/config/hooks.json and
+# global skills at ~/.gemini/config/skills/<name>/SKILL.md.
+# (~/.gemini/antigravity-cli/skills is a symlink pointing to ~/.gemini/config/skills).
 ANTIGRAVITY_GLOBAL_ROOT = (".gemini", "config")
-ANTIGRAVITY_SKILL_REL = (".gemini", "antigravity-cli", "skills", "context-guard", "SKILL.md")
+ANTIGRAVITY_SKILL_REL = (".gemini", "config", "skills", "context-guard", "SKILL.md")
 
 # Both artifacts we write into a user's tree as whole files carry this marker,
 # so a later run can tell its own output from a file of the same name the user
@@ -320,12 +321,25 @@ def _install_antigravity(root, global_scope, no_hooks=False):
     skill_text = _embedded_antigravity_file("skills/context-guard/SKILL.md")
     if skill_text is not None:
         skill_rel = os.path.join(*ANTIGRAVITY_SKILL_REL)
-        written, skip = _write_owned(os.path.join(root, skill_rel), skill_text)
+        skill_dest = os.path.join(root, skill_rel)
+        written, skip = _write_owned(skill_dest, skill_text)
         if written:
             touched.append(skill_rel.replace(os.sep, "/"))
         if skip:
             skips.append(skip)
 
+        # Legacy skill path cleanup if it was installed as a real file previously
+        legacy_rel = os.path.join(".gemini", "antigravity-cli", "skills", "context-guard", "SKILL.md")
+        legacy_path = os.path.join(root, legacy_rel)
+        if (os.path.exists(legacy_path) and
+                os.path.realpath(legacy_path) != os.path.realpath(skill_dest)):
+            try:
+                with open(legacy_path, "r", encoding="utf-8") as f:
+                    if OWNERSHIP_MARKER in f.read():
+                        os.remove(legacy_path)
+            except OSError:
+                pass
+
     # `--no-hooks` declines the enforcement, not the discovery. A user who
     # does not want the deny hook still wants their agent to know the tool
     # is there.
@@ -368,6 +382,36 @@ def _install_antigravity(root, global_scope, no_hooks=False):
     return touched, None, skips
 
 
+def _install_cursor(root, with_mcp, global_scope):
+    """Cursor adapter installs .cursor/rules/context-guard.mdc (in both global
+    and project scopes) and optionally registers context-guard-mcp in .cursor/mcp.json.
+    """
+    touched = []
+    skips = []
+
+    for relpath, text in iter_host_files("cursor"):
+        if relpath == "rules/context-guard.mdc":
+            rule_rel = os.path.join(".cursor", "rules", "context-guard.mdc")
+            written, skip = _write_owned(os.path.join(root, rule_rel), text)
+            if written:
+                touched.append(rule_rel.replace(os.sep, "/"))
+            if skip:
+                skips.append(skip)
+            break
+
+    if with_mcp:
+        mcp_rel = os.path.join(".cursor", "mcp.json")
+        mcp_path = os.path.join(root, mcp_rel)
+        snippet = json.loads(read_snippet("cursor", "mcp"))
+        cfg = _read_json(mcp_path) or {}
+        cfg.setdefault("mcpServers", {}).setdefault(
+            "context-guard", snippet["mcpServers"]["context-guard"])
+        _write_json(mcp_path, cfg)
+        touched.append(mcp_rel.replace(os.sep, "/"))
+
+    return touched, skips
+
+
 # ---------------------------------------------------------------------------
 # Detection
 # ---------------------------------------------------------------------------
@@ -398,6 +442,9 @@ def _detected(host, home):
                 or os.path.isdir(os.path.join(home, ".gemini", "antigravity-cli"))
                 or _on_path("antigravity")
                 or _on_path("agy"))
+    if host == "cursor":
+        return (os.path.isdir(os.path.join(home, ".cursor"))
+                or _on_path("cursor"))
     return False
 
 
@@ -465,6 +512,15 @@ def run_setup(host="all", with_mcp=False, project=None, no_hooks=False):
             else:
                 lines.append("  -> Antigravity: skill installed, deny hook merged "
                              "into ~/.gemini/config/hooks.json")
+        elif name == "cursor":
+            cursor_touched, cursor_skips = _install_cursor(
+                root, with_mcp, global_scope)
+            touched += cursor_touched
+            skips += cursor_skips
+            if with_mcp:
+                lines.append("  -> Cursor: rule installed in .cursor/rules, MCP registered in .cursor/mcp.json")
+            else:
+                lines.append("  -> Cursor: rule installed in .cursor/rules (cooperative approval gate)")
 
     for name in HOST_DIRS:
         if name in selected:
@@ -549,6 +605,22 @@ def antigravity_detected():
     return _detected("antigravity", _home())
 
 
+def materialise_cursor_rule(context):
+    """Write Cursor rule file, unless the project already has one."""
+    path = os.path.join(context, ".cursor", "rules", "context-guard.mdc")
+    if os.path.exists(path):
+        return []
+    for relpath, text in iter_host_files("cursor"):
+        if relpath == "rules/context-guard.mdc":
+            _write_text(path, text)
+            return [path]
+    return []
+
+
+def cursor_detected():
+    return _detected("cursor", _home())
+
+
 def diverged_phases(context):
     """Phase files that exist but differ from the embedded copy."""
     from .assets import PHASES, get_phase

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/docs/adapters/VERIFY.md

@@ -17,7 +17,7 @@ that has to work first for 4-5 to mean anything.
 
 ```bash
 cd /path/to/toy-project
-cg setup --host <claude|opencode|antigravity>
+cg setup --host <claude|opencode|antigravity|cursor>
 ```
 
 Confirm the files land where the tests say they should:
@@ -88,3 +88,4 @@ today.
 - [x] Claude Code — verified by: fdomerlo on: 2026-08-02
 - [x] OpenCode — verified by: fdomerlo on: 2026-08-02
 - [x] Antigravity — verified by: fdomerlo on: 2026-08-02
+- [ ] Cursor — unverified

context_guard_cli-2.5.0/docs/adapters/cursor/PERMISSIONS.md

@@ -0,0 +1,42 @@
+# Cursor — permission configuration
+
+`cg approve` is the only command in context-guard that a human is supposed to
+run. Everything else the agent drives itself.
+
+## What this buys you
+
+The approval gate inside `cg` is **cooperative**: `commit --next-phase EXECUTE`
+refuses without a recorded approval (exit code 6), but an agent with a shell
+can run `cg approve` itself. A confirmation that happens outside the agent's
+process is the only hard control in the model — see PLAN.md 0.6.
+
+## How to configure it
+
+Cursor does not currently provide a per-command shell deny hook (like Antigravity's
+`PreToolUse` hook in `hooks.json`) or a fine-grained command permission list (like
+Claude Code's `permissions.ask`).
+
+Therefore, enforcement in Cursor is **cooperative**:
+
+1. **Keep terminal confirmation enabled.** Leave terminal command confirmation
+   enabled in Cursor settings so terminal commands — `cg approve` included —
+   surface for human confirmation before execution.
+2. **Keep the workspace rule installed.** `.cursor/rules/context-guard.mdc`
+   (installed by `cg setup --host cursor`) instructs the agent that `cg approve`
+   is human-only and directs it to pause and request human approval when `commit`
+   returns exit code 6.
+
+If auto-run terminal commands is enabled in Cursor, understand that enforcement
+becomes purely cooperative, and the manifest's `approval_history` records what
+the agent decided rather than what you explicitly gated.
+
+## MCP registration
+
+`cg setup --host cursor --with-mcp` automatically registers `context-guard-mcp`
+in `.cursor/mcp.json`. Registration is optional; `cg` works completely via CLI
+without MCP.
+
+## Unverified
+
+**This adapter is unverified.** It is covered by static tests and has not been
+tested in an interactive end-to-end Cursor session.

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "context-guard-cli"
-version = "2.4.0"
+version = "2.5.0"
 description = "The transactional memory layer for AI coding agents — your context survives crashes, compaction, and session loss"
 readme = "README.md"
 requires-python = ">=3.10"

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/tests/test_adapters.py

@@ -95,7 +95,7 @@ class TestPermissionDocsPerHarness(unittest.TestCase):
     it ships the cooperative half and calls it enforcement.
     """
 
-    HOSTS = ("claude-code", "opencode", "antigravity")
+    HOSTS = ("claude-code", "opencode", "antigravity", "cursor")
 
     def _permissions_doc(self, host):
         path = os.path.join(DOCS_DIR, host, "PERMISSIONS.md")
@@ -128,7 +128,7 @@ class TestPermissionDocsPerHarness(unittest.TestCase):
         """PLAN.md backlog: the OpenCode and Antigravity adapters were never run
         against a real host. Documenting them as if they were is the kind of
         claim the audits exist to falsify."""
-        for host in ("opencode", "antigravity"):
+        for host in ("opencode", "antigravity", "cursor"):
             text = self._permissions_doc(host).lower()
             self.assertIn("unverified", text)
 
@@ -416,3 +416,24 @@ class TestVerifyChecklist(unittest.TestCase):
         at all."""
         self.assertRegex(self.text, r"- \[[ x]\]")
 
+
+
+CURSOR_DIR = os.path.join(HOSTS_DIR, "cursor")
+
+
+class TestCursorAdapter(unittest.TestCase):
+    RULE_PATH = os.path.join(CURSOR_DIR, "rules", "context-guard.mdc")
+    MCP_PATH = os.path.join(CURSOR_DIR, "mcp.snippet.json")
+
+    def test_rule_file_exists(self):
+        self.assertTrue(os.path.exists(self.RULE_PATH), "cursor rule file missing")
+        with open(self.RULE_PATH, "r", encoding="utf-8") as f:
+            content = f.read()
+        self.assertIn("cg approve", content)
+        self.assertIn("AGENTS.md", content)
+
+    def test_mcp_snippet_is_valid_json(self):
+        self.assertTrue(os.path.exists(self.MCP_PATH), "cursor mcp snippet missing")
+        with open(self.MCP_PATH, "r", encoding="utf-8") as f:
+            data = json.load(f)
+        self.assertEqual(data["mcpServers"]["context-guard"]["command"], "context-guard-mcp")

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/tests/test_assets.py

@@ -41,6 +41,8 @@ EXPECTED_DATA_FILES = {
     "hosts/antigravity/rules/context-guard.md",
     "hosts/antigravity/skills/context-guard/SKILL.md",
     "hosts/antigravity/hooks.snippet.json",
+    "hosts/cursor/rules/context-guard.mdc",
+    "hosts/cursor/mcp.snippet.json",
 }
 
 EXPECTED_HOST_FILES = {
@@ -62,6 +64,10 @@ EXPECTED_HOST_FILES = {
         "skills/context-guard/SKILL.md",
         "hooks.snippet.json",
     },
+    "cursor": {
+        "rules/context-guard.mdc",
+        "mcp.snippet.json",
+    },
 }
 
 SNIPPETS = (
@@ -71,6 +77,7 @@ SNIPPETS = (
     ("opencode", "permissions"),
     ("opencode", "mcp"),
     ("antigravity", "hooks"),
+    ("cursor", "mcp"),
 )
 
 

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/tests/test_packaging.py

@@ -130,7 +130,7 @@ for name in ("plan", "execute", "verify"):
 for host, snippet in %(snippets)r:
     out["snippets"]["%%s/%%s" %% (host, snippet)] = assets.read_snippet(host, snippet)
 out["hosts"] = {h: sorted(r for r, _ in assets.iter_host_files(h))
-                for h in ("claude-code", "opencode", "antigravity")}
+                for h in ("claude-code", "opencode", "antigravity", "cursor")}
 json.dump(out, sys.stdout)
 """
 
@@ -238,7 +238,7 @@ json.dump(out, sys.stdout)
                         # three hosts must each end up with a *discoverable*
                         # entry point. Antigravity's is this skill; the hook
                         # above is enforcement, which nobody discovers.
-                        ".gemini/antigravity-cli/skills/context-guard/SKILL.md"):
+                        ".gemini/config/skills/context-guard/SKILL.md"):
             with self.subTest(path=relpath):
                 self.assertTrue(os.path.exists(os.path.join(home, relpath)),
                                 f"{relpath} was not configured by cg setup")

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/tests/test_release.py

@@ -23,18 +23,15 @@ SPANISH_INDICATORS = ["á", "é", "í", "ó", "ú", "ñ", "¿", "¡"]
 
 
 class TestPyprojectVersion(unittest.TestCase):
-    def test_version_is_2_4_0(self):
-        """A minor bump: `cg new --from-plan` is additive, nothing removed
-        from the public surface. Pinned here so the release tag and the
-        CHANGELOG cannot drift from what actually ships — which is exactly
-        what this caught: the first attempt at this release tagged v2.4.0
-        over a tree still pinned to 2.5.0, and the publish workflow's test
-        job would have refused to ship it."""
+    def test_version_is_2_5_0(self):
+        """A minor bump: Cursor adapter and unified Gemini config path.
+        Additive, nothing removed from the public surface. Pinned here so
+        the release tag and the CHANGELOG cannot drift from what actually ships."""
         with open(PYPROJECT_PATH, "r", encoding="utf-8") as f:
             text = f.read()
         match = re.search(r'^version\s*=\s*"([^"]+)"', text, re.MULTILINE)
         self.assertIsNotNone(match, "version not declared")
-        self.assertEqual(match.group(1), "2.4.0")
+        self.assertEqual(match.group(1), "2.5.0")
 
     def test_description_is_the_one_sentence_pitch(self):
         """PLAN.md 0.7's pitch doubles as the PyPI project description — the

{context_guard_cli-2.4.0 → context_guard_cli-2.5.0}/tests/test_setup.py

@@ -543,7 +543,7 @@ class SkillCase(SetupCase):
     """
 
     def skill_path(self):
-        return self.home_path(".gemini", "antigravity-cli", "skills", "context-guard", "SKILL.md")
+        return self.home_path(".gemini", "config", "skills", "context-guard", "SKILL.md")
 
     def skill_text(self):
         with open(self.skill_path(), "r", encoding="utf-8") as f:
@@ -594,7 +594,7 @@ class TestAntigravityGetsADiscoverableEntryPoint(SkillCase):
 
     def test_the_skill_is_listed_as_touched(self):
         res = self.setup(host="antigravity")
-        self.assertIn(".gemini/antigravity-cli/skills/context-guard/SKILL.md", res.message)
+        self.assertIn(".gemini/config/skills/context-guard/SKILL.md", res.message)
 
     def test_a_second_run_rewrites_it_byte_identically(self):
         self.setup(host="antigravity")
@@ -742,7 +742,7 @@ class TestEveryHostGetsADiscoveryEntryPoint(SetupCase):
     GLOBAL_DISCOVERY = {
         "claude": ".claude/commands/cg-new.md",
         "opencode": ".config/opencode/commands/cg-new.md",
-        "antigravity": ".gemini/antigravity-cli/skills/context-guard/SKILL.md",
+        "antigravity": ".gemini/config/skills/context-guard/SKILL.md",
     }
 
     PROJECT_DISCOVERY = {
@@ -1055,3 +1055,61 @@ class TestEmbeddedCommandsAreScopeAgnostic(unittest.TestCase):
 
 if __name__ == "__main__":
     unittest.main()
+
+
+
+class TestCursorSetup(SetupCase):
+    def rule_path(self, global_scope=True):
+        if global_scope:
+            return self.home_path(".cursor", "rules", "context-guard.mdc")
+        return self.project_path(".cursor", "rules", "context-guard.mdc")
+
+    def mcp_path(self, global_scope=True):
+        if global_scope:
+            return self.home_path(".cursor", "mcp.json")
+        return self.project_path(".cursor", "mcp.json")
+
+    def test_cursor_global_setup_installs_rule(self):
+        res = self.setup(host="cursor")
+        self.assertEqual(res.exit_code, EXIT_OK, res.message)
+        self.assertTrue(os.path.exists(self.rule_path(global_scope=True)))
+        with open(self.rule_path(global_scope=True), "r", encoding="utf-8") as f:
+            content = f.read()
+        self.assertIn("ACTIVE PERSISTENCE CONTRACT: context-guard", content)
+
+    def test_cursor_project_setup_installs_rule(self):
+        res = self.setup(host="cursor", project=self.project)
+        self.assertEqual(res.exit_code, EXIT_OK, res.message)
+        self.assertTrue(os.path.exists(self.rule_path(global_scope=False)))
+
+    def test_cursor_with_mcp_registers_server(self):
+        res = self.setup(host="cursor", with_mcp=True)
+        self.assertEqual(res.exit_code, EXIT_OK, res.message)
+        self.assertTrue(os.path.exists(self.mcp_path(global_scope=True)))
+        cfg = self.read_json(self.mcp_path(global_scope=True))
+        self.assertEqual(cfg["mcpServers"]["context-guard"]["command"], "context-guard-mcp")
+
+    def test_cursor_detection_via_dir(self):
+        os.makedirs(self.home_path(".cursor"), exist_ok=True)
+        self.setup(host="all")
+        self.assertTrue(os.path.exists(self.rule_path(global_scope=True)))
+
+    def test_cursor_detection_via_binary(self):
+        self.fake_binary("cursor")
+        self.setup(host="all")
+        self.assertTrue(os.path.exists(self.rule_path(global_scope=True)))
+
+    def test_cursor_not_detected_is_skipped(self):
+        res = self.setup(host="all")
+        self.assertFalse(os.path.exists(self.rule_path(global_scope=True)))
+        self.assertIn("cursor: not detected, skipped", res.message)
+
+    def test_foreign_cursor_rule_not_clobbered(self):
+        mine = "---\ndescription: custom\n---\n# custom rule\n"
+        os.makedirs(os.path.dirname(self.rule_path()), exist_ok=True)
+        with open(self.rule_path(), "w", encoding="utf-8") as f:
+            f.write(mine)
+        res = self.setup(host="cursor")
+        with open(self.rule_path(), "r", encoding="utf-8") as f:
+            self.assertEqual(f.read(), mine)
+        self.assertIn("SKIP|SKILL_EXISTS", res.message)