cursorfleet 0.1.0__tar.gz

cursorfleet-0.1.0/.cursor/rules/privacy-and-hooks.mdc

@@ -0,0 +1,12 @@
+---
+description: Privacy and hook hot-path constraints; apply when touching events, adapters or hooks
+globs: src/cursorfleet/events/**,src/cursorfleet/adapters/**,templates/cursor/hooks/**
+alwaysApply: false
+---
+
+- Hook entrypoint code is **stdlib-only** with lazy imports and must always fail open (exit 0; print `{"permission":"allow"}` for permission hooks, `{}` for the rest).
+- Parse hook payloads through an allowlist at the boundary. Never persist prompts, thinking or response text, file contents, command output, env, `user_email` or `transcript_path`.
+- Do not register `beforeSubmitPrompt`, `afterAgentThought`, `afterAgentResponse` or `beforeReadFile` in v0.1; keep a test that generated hook config never contains them.
+- Hooks only append to per-session JSONL spools; only the indexer writes SQLite.
+- Runtime dir is `<git-common-dir>/cursorfleet/` with 0700 dirs and 0600 files.
+- No network calls anywhere in the hook path.

cursorfleet-0.1.0/.cursor/rules/python-conventions.mdc

@@ -0,0 +1,12 @@
+---
+description: Python style and typing conventions for CursorFleet source and tests
+globs: src/**/*.py,tests/**/*.py
+alwaysApply: false
+---
+
+- Python >=3.11, fully typed (`mypy --strict`), formatted/linted with ruff (line length 100).
+- Use `from __future__ import annotations` in new modules.
+- Subprocess calls: argv list, explicit `timeout=`, never `shell=True`.
+- Tests: no `time.sleep`; prefer deterministic fakes, `tmp_path`, and Textual `run_test()` for TUI.
+- Tests live in `tests/{unit,integration,tui,security}`; fixtures in `tests/fixtures/cursor` must be sanitized.
+- CLI command groups: one module per group in `src/cursorfleet/cli/commands/` exposing `register(app)`.

cursorfleet-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,95 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+# Least privilege: every job only reads the repository. No job has a token that can write.
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+# Third-party actions are pinned by major version. Pinning them to full commit SHAs (with
+# Dependabot to bump them) is a documented follow-up: docs/security-review-v0.1.md (SO-02).
+
+jobs:
+  lint:
+    name: lint, format, types
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - run: uv sync --locked --all-extras
+      - run: uv run ruff check .
+      - run: uv run ruff format --check .
+      - run: uv run mypy src
+
+  test:
+    name: test ${{ matrix.os }} / py${{ matrix.python-version }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          enable-cache: true
+      - run: uv sync --locked --all-extras
+      # Benchmark-marked tests are excluded by default (pyproject addopts).
+      - run: uv run pytest --cov=cursorfleet --cov-report=term-missing --cov-report=xml
+      - name: Hook benchmark smoke (records timings, no assertions on speed)
+        if: matrix.python-version == '3.12'
+        continue-on-error: true
+        run: uv run pytest -m benchmark -q
+      - uses: actions/upload-artifact@v4
+        if: matrix.python-version == '3.12'
+        with:
+          name: coverage-${{ matrix.os }}
+          path: coverage.xml
+          if-no-files-found: ignore
+
+  package:
+    name: build and smoke-test the wheel on ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    needs: lint
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - name: Build sdist and wheel
+        run: uv build
+      - name: Verify the distributions (templates, scripts, license, long description)
+        run: uv run --no-project python scripts/check_dist.py dist
+      - name: Install the wheel into a clean venv outside the checkout
+        run: |
+          uv venv "$RUNNER_TEMP/smoke-venv"
+          uv pip install --python "$RUNNER_TEMP/smoke-venv" dist/*.whl
+      - name: Smoke test the installed scripts (synthetic payloads; Cursor is never started)
+        run: uv run --no-project python scripts/smoke_wheel.py "$RUNNER_TEMP/smoke-venv"
+      - uses: actions/upload-artifact@v4
+        if: matrix.os == 'ubuntu-latest'
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error

cursorfleet-0.1.0/.github/workflows/pages.yml

@@ -0,0 +1,56 @@
+# Public docs site (Zensical → GitHub Pages).
+#
+# Build runs on pull requests and on main. Deploy is off by default so a push
+# cannot publish. The owner must later: (1) enable Pages with source
+# "GitHub Actions", (2) set the repository variable PAGES_ENABLED=true.
+# Official Pages actions: https://docs.github.com/en/pages/getting-started-with-github-pages/using-custom-workflows-with-github-pages
+# Zensical build: https://zensical.org/docs/publish-your-site/
+
+name: Pages
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+# Least privilege: every job starts read-only. Only deploy elevates.
+permissions:
+  contents: read
+
+concurrency:
+  group: pages-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  build:
+    name: build docs site
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - run: uv sync --locked --all-extras
+      - run: uv run zensical build --clean
+      - uses: actions/configure-pages@v6
+      - uses: actions/upload-pages-artifact@v5
+        with:
+          path: site
+
+  deploy:
+    name: deploy to GitHub Pages
+    # Kill switch: unset/false keeps this workflow build-only.
+    if: github.event_name != 'pull_request' && vars.PAGES_ENABLED == 'true'
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    permissions:
+      pages: write
+      id-token: write
+    steps:
+      - uses: actions/deploy-pages@v5
+        id: deployment

cursorfleet-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,106 @@
+name: Release
+
+# INACTIVE until the owner acts: this workflow only runs when a tag named v* is pushed, and
+# the PyPI publish job additionally requires the repository variable RELEASE_ENABLED=true and
+# the protected `pypi` environment. Nothing here has ever been run. See
+# docs/release-checklist.md for the exact owner steps (and which are blocking).
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+
+# Third-party actions are pinned by major version; SHA pinning is a documented follow-up
+# (docs/security-review-v0.1.md, SO-02).
+
+jobs:
+  checks:
+    name: checks ${{ matrix.os }} / py${{ matrix.python-version }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: true
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        python-version: ["3.11", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          enable-cache: true
+      - run: uv sync --locked --all-extras
+      - run: uv run ruff check .
+      - run: uv run ruff format --check .
+      - run: uv run mypy src
+      - run: uv run pytest
+
+  build:
+    name: build distributions
+    runs-on: ubuntu-latest
+    needs: checks
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+      - name: The tag must match the version in pyproject.toml
+        run: |
+          version="$(uv run --no-project python -c "import tomllib;print(tomllib.load(open('pyproject.toml','rb'))['project']['version'])")"
+          if [ "v${version}" != "${GITHUB_REF_NAME}" ]; then
+            echo "tag ${GITHUB_REF_NAME} does not match pyproject version ${version}" >&2
+            exit 1
+          fi
+      - run: uv build
+      - run: uv run --no-project python scripts/check_dist.py dist
+      - name: Smoke test the wheel in a clean venv
+        run: |
+          uv venv "$RUNNER_TEMP/smoke-venv"
+          uv pip install --python "$RUNNER_TEMP/smoke-venv" dist/*.whl
+          uv run --no-project python scripts/smoke_wheel.py "$RUNNER_TEMP/smoke-venv"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  github-release:
+    name: draft GitHub release
+    runs-on: ubuntu-latest
+    needs: build
+    permissions:
+      contents: write # only this job can create the (draft) release
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      # A DRAFT: the owner reviews the notes and publishes it by hand.
+      - name: Create the draft release with the sdist and wheel attached
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "${GITHUB_REF_NAME}" dist/* \
+            --draft --verify-tag \
+            --title "CursorFleet ${GITHUB_REF_NAME}" \
+            --notes "Draft. Copy the matching section of CHANGELOG.md here before publishing. Unofficial: not affiliated with or endorsed by Anysphere or Cursor."
+
+  publish-pypi:
+    name: publish to PyPI (Trusted Publishing)
+    runs-on: ubuntu-latest
+    needs: build
+    # Kill switch: set the repository variable RELEASE_ENABLED=true to allow publishing.
+    if: vars.RELEASE_ENABLED == 'true'
+    environment:
+      name: pypi # protected environment: configure required reviewers in the repository settings
+      url: https://pypi.org/project/cursorfleet/
+    permissions:
+      id-token: write # OIDC token for Trusted Publishing; granted to this job only
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1

cursorfleet-0.1.0/.gitignore

@@ -0,0 +1,34 @@
+# Generated public docs site (zensical.toml site_dir)
+site/
+
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+build/
+dist/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.hypothesis/
+.coverage
+coverage.xml
+htmlcov/
+
+# Environments
+.venv/
+venv/
+.env
+
+# CursorFleet runtime state (committed config in .cursorfleet/ is config.toml, roster.toml, work/)
+.cursorfleet/runtime/
+.cursorfleet/*.sqlite*
+.cursorfleet/*.jsonl
+.cursorfleet/*.lock
+
+# OS / editor
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/

cursorfleet-0.1.0/AGENTS.md

@@ -0,0 +1,22 @@
+# CursorFleet: developer conventions
+
+CursorFleet is a local TUI and workflow harness for Cursor agent teams. v0.1 is **Observe** only: no enforcement, no forced approvals, no cloud-agent visibility. Cursor is the only officially supported IDE; keep internals adapter-ready (`cursorfleet.adapters.*`, normalized events).
+
+## Layout
+- `src/cursorfleet/`: package (`cli`, `config`, `adapters/cursor`, `events`, `state`, `git`, `policy`, `workflow`, `tui`).
+- `tests/{unit,integration,tui,security}`, `tests/fixtures/cursor` (sanitized real payloads only).
+- `schemas/` JSON Schemas, `templates/cursor/` generated-kit templates, `docs/` documentation.
+- Committed config: `.cursorfleet/`. Runtime state lives under `<git-common-dir>/cursorfleet/`, never in the working tree.
+
+## Commands
+- `uv sync` then `uv run ruff check .`, `uv run mypy src`, `uv run pytest`.
+
+## Rules
+- **Hook hot path is stdlib-only.** No pydantic/typer/textual imports (even transitively) in hook entrypoints; lazy-import everything else. Hooks must fail open: always exit 0 on any internal error, printing the right reply for the hook type: `{"permission":"allow"}` for permission hooks (`preToolUse`, `subagentStart`, `beforeShellExecution`, and `beforeMCPExecution`/`beforeReadFile` should they ever be wired), `{}` for all others (see `hook_policy.fail_open_response` and ADR 0004). An invalid reply from a permission hook blocks the action.
+- **Every subprocess** uses an argv list (never `shell=True`) and an explicit `timeout=`.
+- **Never persist** prompts, thinking/response text, file contents, command output, env vars, user emails or transcript paths. Drop them at the parser boundary using an allowlist. Never register `beforeSubmitPrompt`, `afterAgentThought`, `afterAgentResponse` or `beforeReadFile` hooks in v0.1.
+- Paths stored are workspace-relative; anything outside workspace roots becomes `<external>`.
+- **No sleeps in tests.** Use events, polling with deadlines on fakes, or Textual `run_test()` pilots.
+- New CLI command groups go in their own module under `cli/commands/` exposing `register(app)`; do not edit `cli/main.py`.
+- Rules in `.cursor/rules/` must be `.mdc` with frontmatter and under 500 lines.
+- Python >=3.11; type-annotate everything (`mypy --strict`); keep Windows/macOS/Linux parity.

cursorfleet-0.1.0/CHANGELOG.md

@@ -0,0 +1,121 @@
+# Changelog
+
+All notable changes to CursorFleet are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project intends to follow
+[Semantic Versioning](https://semver.org/) once a first release exists.
+
+CursorFleet is an unofficial tool: it is not affiliated with or endorsed by Anysphere or Cursor.
+
+## [Unreleased]
+
+Development version `0.1.1.dev0` (post-v0.1.0). Planned: TUI attach picker, external alpha metrics.
+
+## [0.1.0] - 2026-10-12
+
+First public pre-alpha on PyPI (when `RELEASE_ENABLED` is approved). **Observe-only:** no
+enforcement, no cloud-agent visibility. External user validation and B0 live scenarios 1/2/5
+remain documented in [docs/evidence/v01-release-ready.md](docs/evidence/v01-release-ready.md).
+
+### Added
+
+- **Active run TUI** (default): participant groups/instances, runs list (`u`), sessions archive (`o`).
+- **`cursorfleet run`** start/list/attach/archive; run files under git common dir ([ADR 0013](docs/adr/0013-run-metadata-and-association.md)).
+- **`status --json` `runs[]`** when telemetry exists (`cursorfleet.status/0.2`).
+- Legacy spool **`test.completed`** fixture + migration integration test; sanitized corpus under `tests/fixtures/cursor/`.
+
+### Process
+
+- **M2.5 charter (2026-10-05).** Task-centric local observer work is active; M0a capture kit
+  and product hooks are tracked separately ([docs/evidence/live-validation-index.md](docs/evidence/live-validation-index.md)).
+  Linux Cursor IDE 3.22.7 product-hook smoke confirmed telemetry; Q1/Q2 remain OPEN.
+  See [docs/status.md](docs/status.md).
+- **M0a freeze (2026-10-04, superseded for product direction).** Formal ADR 0001 matrix and
+  spike kit remain for Q1–Q6; see [spike/README.md](spike/README.md).
+
+### Documentation
+
+- ADR process and template accepted as ADR 0000, with required fields on every ADR
+  (supersession, related ADRs, implementation status, review trigger, release gate) and an
+  indexed list of release gates in [docs/adr/README.md](docs/adr/README.md).
+- New ADRs: 0007 narrower v0.1 hook policy (supersedes 0004; nine hooks), 0008 enforcement
+  boundaries, 0009 install and uninstall ownership, 0010 reducer state semantics, 0011
+  evidence trust model, 0012 roster and worktree ownership.
+- Decisions recorded that the code does **not** yet follow (tracked in
+  [docs/follow-ups.md](docs/follow-ups.md), to be done after the spike): nine registered
+  hooks, event schema version `0.1`, `verification.observed` instead of `test.completed`,
+  command display off by default, BLAKE2s segment fingerprints, HMAC worktree ids, a
+  maintenance lock, TOML artifact frontmatter, no gate derived from heuristic events, and
+  `init`/`uninstall` repository-root preconditions (exit 2; no `--allow-non-git`), and
+  runtime inheritance of an initialized enclosing repository for nested non-Git directories
+  (ADR 0002; `init` still refuses ordinary subdirectories).
+- ADR 0001 stays provisional and now carries an empirical test matrix; the local Cursor IDE
+  (desktop) is the only supported v0.1 surface, and the CLI, Agents Window and worktrees are
+  not claimed. See [docs/empirical-test-plan.md](docs/empirical-test-plan.md).
+- ADR 0005: `CursorFleet` is a working name; the public name, registry availability and a
+  trademark review are release gates. `fleet-for-cursor` is withdrawn as a fallback because
+  it still contains the Cursor mark.
+- Docs-site plan only ([docs/docs-site-plan.md](docs/docs-site-plan.md)); no site, workflow or
+  dependency was added.
+- ADR 0002 / 0009: a nested non-Git directory inherits an already initialized enclosing
+  repository for runtime event attribution; `init` from an ordinary subdirectory still
+  exits 2 (documentation only).
+
+### Added
+
+- **M0 foundations:** project scaffold, ADRs 0001 to 0006, product contract, threat model,
+  privacy statement, JSON Schemas for events, config, roster and policy (reserved), a throwaway
+  capture kit under `spike/` and a Linux hook-latency benchmark (27.7 ms steady-state p95).
+- **M1 kit:** `cursorfleet init --cursor`, `uninstall`, `doctor` and `validate`. Deterministic
+  generation of subagent files, rules, skills, `AGENTS.md` blocks and a merged
+  `.cursor/hooks.json` of twelve passive hooks (ADR 0007 later narrowed this to nine; code not yet changed), with a visible diff, confirmation, an install
+  lockfile and byte-for-byte uninstall.
+- **M2 observer:** a stdlib-only, fail-open hook entry point (`cursorfleet-hook`) with an
+  allowlist parser, command and path sanitizer, per-writer append-only JSONL spool with CRC and
+  size caps, a single-writer SQLite projection with quarantine and rebuild, deterministic
+  reducer and `replay`, a read-only git/worktree collector, retention and `events export` /
+  `events purge`, and `status --json` (`cursorfleet.status/1`).
+- **M3 dashboard:** the Textual TUI (`cursorfleet tui`) with overview, agent detail, timeline,
+  worktrees, gates (display-only), evidence and tiles views, filtering, pinning, and a degraded
+  mode for missing telemetry.
+- **M4 release preparation:**
+  - security and privacy review ([docs/security-review-v0.1.md](docs/security-review-v0.1.md))
+    with regression tests, including a no-network test;
+  - cross-platform CI (Linux, macOS, Windows; Python 3.11 to 3.14) with lint, format, types,
+    coverage, and a wheel build-and-smoke-test job; inactive release workflow
+    (`.github/workflows/release.yml`) using PyPI Trusted Publishing and a draft GitHub release;
+  - `docs/quickstart.md`, `governance.md`, `demo.md`, `platform-support.md`,
+    `release-checklist.md` and a reproducible synthetic demo (`scripts/demo.sh`).
+
+### Security
+
+- Bounded redaction window removes a regular-expression denial of service in the hook's command
+  and text redaction (SR-01).
+- The runtime directory is refused when it is a symlink, a reparse point, owned by another user
+  or group/other-writable (SR-02).
+- Tools (`git`, `cursor`) are resolved from absolute `PATH` entries only, never the current
+  directory (SR-03); NTFS junctions count as links (SR-04); the workspace resolver uses the same
+  hostile-repository git hardening as the collector (SR-05); paths inside `.git` are rejected in
+  config and lockfile (SR-06).
+- Lower-severity hardening: planted-database recovery, no local variables in tracebacks,
+  escaped terminal control characters in error and doctor output, `O_NOFOLLOW` artifact reads,
+  non-blocking spool open, drive-letter refs refused, attached `mysql -p` passwords redacted.
+
+### Known limitations (0.1.0)
+
+- Run association requires explicit `cursorfleet run` / env attach; TUI picker planned for 0.1.1.
+- Observations screen is non-authoritative (ADR 0011); artifacts are self-reported (ADR 0006 amendment).
+- Twelve passive observe hooks (ADR 0007 amendment 2026-10-12).
+- ADR 0001 Q1/Q2 OPEN; end-to-end latency 13B may be OPEN — see evidence index.
+- SO-01 live permission-hook confirmation may be pending — see [so01-permission-hooks.md](docs/evidence/so01-permission-hooks.md).
+
+### Known limitations (historical pre-0.1.0 notes)
+
+- The TUI derives PASS/FAIL gate tiles from heuristic command classification. This is
+  non-authoritative and contradicts ADR 0003 rule R1; fix pending after the spike.
+- The code registers twelve hooks; ADR 0007 decides nine.
+- Hook payload shapes come from documentation, not captures. Agent attribution on tool events,
+  custom subagent names, CLI and Agents Window behaviour, and macOS/Windows hook latency are
+  unverified (see [docs/platform-support.md](docs/platform-support.md)).
+- Windows ACLs are not set on the runtime directory.
+- GitHub Actions are pinned by major version, not by commit SHA.
+- `cursorfleet emit` (ADR 0006 fallback) is not implemented.

cursorfleet-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,58 @@
+# Contributing to CursorFleet
+
+CursorFleet is pre-alpha and unofficial. Issues and small PRs are welcome; for larger changes
+please open an issue first. For security problems do **not** open a public issue: see
+[SECURITY.md](SECURITY.md).
+
+## Setup
+
+```bash
+uv sync --all-extras
+uv run cursorfleet --version
+```
+
+## Checks (must pass before a PR)
+
+```bash
+uv run ruff check .
+uv run ruff format --check .      # `uv run ruff format .` fixes it
+uv run mypy src
+uv run pytest                     # benchmark-marked tests are excluded by default
+```
+
+CI runs the same on Linux, macOS and Windows with Python 3.11 to 3.14, plus a job that builds
+the wheel and smoke-tests it in a clean venv. To reproduce that locally:
+
+```bash
+uv build && python scripts/check_dist.py dist
+uv venv /tmp/cf-venv && uv pip install --python /tmp/cf-venv dist/*.whl
+python scripts/smoke_wheel.py /tmp/cf-venv
+python scripts/demo.py --venv /tmp/cf-venv      # synthetic demo, no Cursor
+```
+
+Coverage: `uv run pytest --cov=cursorfleet --cov-report=term-missing`. Hook timings:
+`uv run pytest -m benchmark` or `uv run python scripts/bench_hook.py`.
+
+Without uv: `python -m venv .venv && .venv/bin/pip install -e ".[watch]" --group dev` (pip >= 25.1),
+then run the tools from `.venv/bin`.
+
+## Conventions
+
+Read [`AGENTS.md`](AGENTS.md). Highlights:
+
+- the hook hot path is stdlib-only and fails open (exit 0 with the right reply);
+- every subprocess uses an argv list and an explicit `timeout=`; resolve tools with
+  `cursorfleet.safeexe.find_executable`, never from the current directory;
+- never persist prompts, thinking, file contents, command output, env, emails or transcript
+  paths; drop them at the parser boundary with an allowlist;
+- no sleeps in tests; keep Windows, macOS and Linux behaviour in step and skip a test only with
+  an explicit `reason=`;
+- security-relevant changes get a regression test under `tests/security/`;
+- documentation must stay honest: mark anything that depends on unverified Cursor behaviour
+  as PROVISIONAL, and do not claim enforcement.
+
+Do not commit real Cursor payloads. Fixtures under `tests/fixtures/cursor` must be captured,
+reviewed and sanitized, with the Cursor version recorded; doc-derived examples live in
+`spike/doc_examples` and are not fixtures.
+
+By contributing you agree your work is licensed under the MIT License.

cursorfleet-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mounir Al-Suroji
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.