5 Commits

• fix(.cursor/hooks): route block-no-verify through local hook to fix message-body false positives (#2107) (#2177)

  Cursor hooks still called `npx block-no-verify@1.1.2`, the broken external
  package whose matcher over-matches: it blocks legitimate `git commit`
  whenever `--no-verify` (or `no-verify`) appears anywhere in the command
  string, including inside the commit message body. The Claude Code surface
  already routes through the in-repo `scripts/hooks/block-no-verify.js`,
  which performs flag-position-aware tokenisation and passes 25 regression
  tests covering every false-positive case from #2107.
  
  Add a thin Cursor wrapper (`before-shell-execution-block-no-verify.js`)
  that reads Cursor stdin, transforms to the Claude Code `tool_input.command`
  shape, delegates to the local hook's exported `run()`, and forwards exit
  code and stderr. Update `.cursor/hooks.json` to call the wrapper instead
  of the npx package. New 14-case test file pins the false-positive cases
  from the issue plus the still-blocked real bypass attempts.
  
  Fixes #2107

  Gaurav Dubey · 2026-06-07 13:01:36 +08:00
  d8a84b5f7b
• fix: install native Cursor hook and MCP config (#1543)

  * fix: install native cursor hook and MCP config
  
  * fix: avoid false healthy stdio mcp probes

  Affaan Mustafa · 2026-04-21 18:35:21 -04:00
  92e0c7e9ff
• feat: add web frontend rules and design quality hook
  Affaan Mustafa · 2026-04-02 17:33:17 -07:00
  31c9f7c33e
• feat: add block-no-verify hook for Claude Code and Cursor (#649)

  Adds npx block-no-verify@1.1.2 as a PreToolUse Bash hook in hooks/hooks.json
  and a beforeShellExecution hook in .cursor/hooks.json to prevent AI agents
  from bypassing git hooks via the hook-bypass flag.
  
  This closes the last enforcement gap in the ECC security stack — the bypass
  flag silently skips pre-commit, commit-msg, and pre-push hooks.
  
  Closes #648
  
  Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

  Ofek Gabay · 2026-03-20 01:50:31 -07:00
  c8f631b046
• feat: add Cursor, Codex, and OpenCode harnesses — maximize every AI coding tool

  - AGENTS.md: universal cross-tool file read by Claude Code, Cursor, Codex, and OpenCode
  - .cursor/: 15 hook events via hooks.json, 16 hook scripts with DRY adapter pattern,
    29 rules (9 common + 20 language-specific) with Cursor YAML frontmatter
  - .codex/: reference config.toml, Codex-specific AGENTS.md supplement,
    10 skills ported to .agents/skills/ with openai.yaml metadata
  - .opencode/: 3 new tools (format-code, lint-check, git-summary), 3 new hooks
    (shell.env, experimental.session.compacting, permission.ask), expanded instructions,
    version bumped to 1.6.0
  - README: fixed Cursor section, added Codex section, added cross-tool parity table
  - install.sh: now copies hooks.json + hooks/ for --target cursor

  Affaan Mustafa · 2026-02-25 10:45:29 -08:00
  d70bab85e3