It created a config folder for MCP under /home/user/project/~/.cursor/mcp.json Best guess: We asked Composer to copy this file to “the correct location”.

It moved it and then attempted to delete the incorrect file. However, it got confused and somehow ran a delete on the ~ path which ended up deleting everything on our mac.

Privacy mode prevented the team from retrieving detailed logs to confirm exact commands. We’re now isolating AI coding tools in containers and tightening local safeguards.