@claudexor/harness-cursor 1.0.0 → 2.1.2

package/dist/auth.d.ts

@@ -0,0 +1,55 @@
+import type { AuthPreference, CredentialProfile, CredentialProfileStatus } from "@claudexor/schema";
+import { runCapture } from "@claudexor/core";
+export interface CursorNativeAuthProbe {
+    authed: boolean;
+    probeError: string | null;
+}
+/** Probe only Cursor's vendor-owned native session in the supplied run env. */
+export declare function probeCursorNativeAuth(env?: Record<string, string | null | undefined>, abortSignal?: AbortSignal, capture?: typeof runCapture): Promise<CursorNativeAuthProbe>;
+export declare function cursorStatusAuthenticated(code: number | null, text: string): boolean;
+export declare function cursorStatusLoggedOut(text: string): boolean;
+export type CursorAuthRoute = "api_key" | "local_session" | "unavailable";
+/** Explicit preferences are strict; auto is invariantly native-first. */
+export declare function selectCursorAuthRoute(input: {
+    authPreference: AuthPreference;
+    hasKey: boolean;
+    apiKeyReady: boolean;
+    nativeAuthed: boolean;
+    scopedHome: boolean;
+}): CursorAuthRoute;
+export declare function shouldDiscloseCursorAutoApiRoute(input: {
+    authPreference: AuthPreference;
+    route: CursorAuthRoute;
+    nativeAuthed: boolean;
+}): boolean;
+/** A probe error is unknown, not proof that native is unavailable. */
+export declare function shouldSmokeCursorApiKey(input: {
+    hasKey: boolean;
+    authPreference: AuthPreference;
+    nativeAuthed: boolean;
+    nativeProbeError: string | null;
+}): boolean;
+/**
+ * INV-135: a cursor profile is exactly its secret-ref API key; other kinds,
+ * a non-namespaced or foreign-slot ref (which would alias the engine default
+ * or route another provider's key), and a missing secret are a typed refusal,
+ * never the default ladder. ONE owner for the run route and the doctor probe.
+ */
+export declare function cursorProfileKeyOrRefusal(profile: {
+    profile_id: string;
+    credential_kind: string;
+    secret_ref: string | null;
+}, resolve?: (ref: string) => string | null): {
+    key: string;
+} | {
+    refusal: string;
+    reason: "misconfigured" | "missing_secret";
+};
+/**
+ * Doctor projection for one cursor profile (INV-135, release wave round-15
+ * #1): the SAME resolution the run route uses, mapped to a status. PRESENCE
+ * is the honest doctor fact for a stored key; liveness stays the API-key
+ * smoke's job at run time.
+ */
+export declare function probeCursorCredentialProfile(profile: CredentialProfile, resolve?: (ref: string) => string | null): CredentialProfileStatus;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEpG,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAO7C,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,+EAA+E;AAC/E,wBAAsB,qBAAqB,CACzC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAC/C,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,GAAE,OAAO,UAAuB,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAuBhC;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAiBpF;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,aAAa,CAAC;AAE1E,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB,GAAG,eAAe,CAOlB;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAEV;AAED,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,OAAO,CAIV;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,EACD,OAAO,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAoB,GACtD;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB,CAAA;CAAE,CAmBnF;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,iBAAiB,EAC1B,OAAO,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAoB,GACtD,uBAAuB,CAyBzB"}

package/dist/auth.js

@@ -0,0 +1,137 @@
+import { namespacedSecretRefBase, resolveSecret } from "@claudexor/secrets";
+import { CredentialProfileStatus as CredentialProfileStatusSchema } from "@claudexor/schema";
+import { runCapture } from "@claudexor/core";
+import { redactSecrets } from "@claudexor/util";
+const BIN = process.env.CLAUDEXOR_CURSOR_BIN || "cursor-agent";
+const CURSOR_LOGGED_OUT = /not logged in|not authenticated|unauthenticated|authentication required|no account|account\s*:\s*(?:none|unknown|not configured|-)(?:\s|$)|authenticated\s*:\s*(?:false|no|none|0)|logged in\s*:\s*(?:false|no|none|0)/i;
+/** Probe only Cursor's vendor-owned native session in the supplied run env. */
+export async function probeCursorNativeAuth(env, abortSignal, capture = runCapture) {
+    try {
+        const result = await capture(BIN, ["status"], {
+            env,
+            timeoutMs: 10_000,
+            abortSignal,
+            cancelSignal: "SIGTERM",
+            cancelKillDelayMs: 0,
+        });
+        const text = `${result.stdout}\n${result.stderr}`;
+        if (cursorStatusAuthenticated(result.code, text))
+            return { authed: true, probeError: null };
+        if (cursorStatusLoggedOut(text))
+            return { authed: false, probeError: null };
+        // Status output can contain the signed-in account principal. Unknown
+        // output is not evidence and must not be copied into doctor/setup logs.
+        const verdict = result.code === 0 ? "returned unrecognized output" : "failed";
+        const detail = `cursor-agent status ${verdict} (${result.code ?? result.signal ?? "unknown result"})`;
+        return { authed: false, probeError: detail };
+    }
+    catch (err) {
+        return {
+            authed: false,
+            probeError: redactSecrets(err instanceof Error ? err.message : String(err)).slice(0, 500),
+        };
+    }
+}
+export function cursorStatusAuthenticated(code, text) {
+    if (code !== 0)
+        return false;
+    if (cursorStatusLoggedOut(text))
+        return false;
+    // Accepted grammar is intentionally narrow and vendor-facing: an explicit
+    // "logged in" / "authenticated" verdict, or an Account field containing an
+    // email-shaped principal. Bare "account" prose is never readiness proof.
+    return text
+        .replaceAll("\r", "")
+        .split("\n")
+        .some((rawLine) => {
+        const line = rawLine.trim().replace(/^✓\s+/, "");
+        return (/^logged in(?:\s+as\s+\S+)?[.!]?$/i.test(line) ||
+            /^authenticated[.!]?$/i.test(line) ||
+            /^account\s*:\s*[^\s@]+@[^\s@]+\.[^\s@]+$/i.test(line));
+    });
+}
+export function cursorStatusLoggedOut(text) {
+    return CURSOR_LOGGED_OUT.test(text);
+}
+/** Explicit preferences are strict; auto is invariantly native-first. */
+export function selectCursorAuthRoute(input) {
+    const keyRouteReady = input.hasKey && input.apiKeyReady;
+    if (input.authPreference === "api_key")
+        return keyRouteReady ? "api_key" : "unavailable";
+    if (input.authPreference === "subscription")
+        return input.nativeAuthed ? "local_session" : "unavailable";
+    if (input.nativeAuthed)
+        return "local_session";
+    return keyRouteReady ? "api_key" : "unavailable";
+}
+export function shouldDiscloseCursorAutoApiRoute(input) {
+    return input.authPreference === "auto" && input.route === "api_key";
+}
+/** A probe error is unknown, not proof that native is unavailable. */
+export function shouldSmokeCursorApiKey(input) {
+    if (!input.hasKey || input.authPreference === "subscription")
+        return false;
+    if (input.authPreference === "api_key")
+        return true;
+    return !input.nativeAuthed && input.nativeProbeError === null;
+}
+/**
+ * INV-135: a cursor profile is exactly its secret-ref API key; other kinds,
+ * a non-namespaced or foreign-slot ref (which would alias the engine default
+ * or route another provider's key), and a missing secret are a typed refusal,
+ * never the default ladder. ONE owner for the run route and the doctor probe.
+ */
+export function cursorProfileKeyOrRefusal(profile, resolve = resolveSecret) {
+    if (profile.credential_kind !== "api_key")
+        return {
+            refusal: `credential profile "${profile.profile_id}": cursor supports only the api_key transport`,
+            reason: "misconfigured",
+        };
+    const ref = profile.secret_ref ?? "";
+    if (namespacedSecretRefBase(ref) !== "cursor")
+        return {
+            refusal: `credential profile "${profile.profile_id}": api_key secret_ref must use a namespaced cursor slot (base:profile, e.g. cursor:${profile.profile_id}; got "${ref}")`,
+            reason: "misconfigured",
+        };
+    const key = resolve(ref);
+    if (!key)
+        return {
+            refusal: `credential profile "${profile.profile_id}": secret "${ref}" is not stored`,
+            reason: "missing_secret",
+        };
+    return { key };
+}
+/**
+ * Doctor projection for one cursor profile (INV-135, release wave round-15
+ * #1): the SAME resolution the run route uses, mapped to a status. PRESENCE
+ * is the honest doctor fact for a stored key; liveness stays the API-key
+ * smoke's job at run time.
+ */
+export function probeCursorCredentialProfile(profile, resolve = resolveSecret) {
+    const base = { profile_id: profile.profile_id, harness_id: "cursor" };
+    try {
+        const gate = cursorProfileKeyOrRefusal(profile, resolve);
+        if ("refusal" in gate)
+            return CredentialProfileStatusSchema.parse({
+                ...base,
+                availability: "unavailable",
+                verification: gate.reason === "missing_secret" ? "not_run" : "failed",
+                detail: gate.refusal,
+            });
+        return CredentialProfileStatusSchema.parse({
+            ...base,
+            availability: "available",
+            verification: "not_run",
+            detail: `secret "${profile.secret_ref}" is stored`,
+        });
+    }
+    catch (err) {
+        return CredentialProfileStatusSchema.parse({
+            ...base,
+            availability: "unavailable",
+            verification: "failed",
+            detail: redactSecrets(err instanceof Error ? err.message : String(err)).slice(0, 300),
+        });
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,EAAE,uBAAuB,IAAI,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,cAAc,CAAC;AAC/D,MAAM,iBAAiB,GACrB,yNAAyN,CAAC;AAO5N,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAA+C,EAC/C,WAAyB,EACzB,UAA6B,UAAU;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;YAC5C,GAAG;YACH,SAAS,EAAE,MAAM;YACjB,WAAW;YACX,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,CAAC;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,IAAI,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC5F,IAAI,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC5E,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,MAAM,MAAM,GAAG,uBAAuB,OAAO,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,gBAAgB,GAAG,CAAC;QACtG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAmB,EAAE,IAAY;IACzE,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,qBAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,OAAO,IAAI;SACR,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,CACL,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9C,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAID,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,KAMrC;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC;IACxD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IACzF,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;QACzC,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC;IAC9D,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,eAAe,CAAC;IAC/C,OAAO,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAIhD;IACC,OAAO,KAAK,CAAC,cAAc,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;AACtE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAIC,EACD,UAA0C,aAAa;IAEvD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QACvC,OAAO;YACL,OAAO,EAAE,uBAAuB,OAAO,CAAC,UAAU,+CAA+C;YACjG,MAAM,EAAE,eAAe;SACxB,CAAC;IACJ,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IACrC,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,QAAQ;QAC3C,OAAO;YACL,OAAO,EAAE,uBAAuB,OAAO,CAAC,UAAU,sFAAsF,OAAO,CAAC,UAAU,UAAU,GAAG,IAAI;YAC3K,MAAM,EAAE,eAAe;SACxB,CAAC;IACJ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG;QACN,OAAO;YACL,OAAO,EAAE,uBAAuB,OAAO,CAAC,UAAU,cAAc,GAAG,iBAAiB;YACpF,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,OAAO,EAAE,GAAG,EAAE,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA0B,EAC1B,UAA0C,aAAa;IAEvD,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,SAAS,IAAI,IAAI;YACnB,OAAO,6BAA6B,CAAC,KAAK,CAAC;gBACzC,GAAG,IAAI;gBACP,YAAY,EAAE,aAAa;gBAC3B,YAAY,EAAE,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACrE,MAAM,EAAE,IAAI,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,OAAO,6BAA6B,CAAC,KAAK,CAAC;YACzC,GAAG,IAAI;YACP,YAAY,EAAE,WAAW;YACzB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,WAAW,OAAO,CAAC,UAAU,aAAa;SACnD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,6BAA6B,CAAC,KAAK,CAAC;YACzC,GAAG,IAAI;YACP,YAAY,EAAE,aAAa;YAC3B,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACtF,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import type { AuthPreference, HarnessModel } from "@claudexor/schema";
+import type { HarnessModel } from "@claudexor/schema";
 import type { HarnessAdapter } from "@claudexor/core";
 import { runCapture, runCliHarness as runCliHarnessDefault } from "@claudexor/core";
-declare function detectVersion(): Promise<string | null>;
-declare function nativeAuthOk(env?: Record<string, string | null | undefined>): Promise<boolean>;
-export declare function cursorStatusAuthenticated(code: number | null, text: string): boolean;
+export { parseCursorModelList } from "./parse.js";
+import { probeCursorNativeAuth } from "./auth.js";
+export { cursorStatusAuthenticated, cursorStatusLoggedOut, selectCursorAuthRoute, shouldDiscloseCursorAutoApiRoute, } from "./auth.js";
+declare function detectVersion(abortSignal?: AbortSignal): Promise<string | null>;
 declare function cursorApiKey(env?: Record<string, string | null | undefined>): string | null;
-type CursorAuthRoute = "api_key" | "local_session" | "unavailable";
 type CursorApiSmokeResult = {
     ok: boolean;
     detail: string;
@@ -21,7 +21,7 @@ type CursorApiSmokeOptions = {
 };
 type CursorRuntimeDeps = {
     detectVersion: typeof detectVersion;
-    nativeAuthOk: typeof nativeAuthOk;
+    nativeAuthOk: typeof probeCursorNativeAuth;
     cursorApiKey: typeof cursorApiKey;
     listCursorModels: typeof listCursorModels;
     smokeIsolatedApiKey: typeof smokeIsolatedApiKey;
@@ -30,20 +30,9 @@ type CursorRuntimeDeps = {
     apiSmokeFailureCacheTtlMs: number;
     nowMs: () => number;
     runCliHarness: typeof runCliHarnessDefault;
+    /** INV-062: profile secrets are resolved transiently, never logged. */
+    resolveProfileSecret: (ref: string) => string | null;
 };
-export declare function selectCursorAuthRoute(input: {
-    authPreference: AuthPreference;
-    hasKey: boolean;
-    apiKeyReady: boolean;
-    nativeAuthed: boolean;
-    scopedHome: boolean;
-}): CursorAuthRoute;
-export declare function shouldDiscloseCursorAutoApiRoute(input: {
-    authPreference: AuthPreference;
-    route: CursorAuthRoute;
-    nativeAuthed: boolean;
-}): boolean;
-export declare function parseCursorModelList(text: string): HarnessModel[];
 export declare function cursorApiSmokeFinalText(stdout: string): string | null;
 export declare function cursorApiSmokeUsedEnvKey(stdout: string): boolean;
 export declare function cursorApiSmokePassed(code: number | null, stdout: string): boolean;
@@ -55,5 +44,4 @@ export declare function cleanupCursorSmokeBase(base: string, opts?: {
 export declare function smokeIsolatedApiKey(key?: string | null, options?: CursorApiSmokeOptions): Promise<CursorApiSmokeResult>;
 declare function listCursorModels(env?: Record<string, string | null | undefined>): Promise<HarnessModel[]>;
 export declare function createCursorAdapter(deps?: Partial<CursorRuntimeDeps>): HarnessAdapter;
-export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,cAAc,EAKd,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAM3B,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAIL,UAAU,EACV,aAAa,IAAI,oBAAoB,EACtC,MAAM,iBAAiB,CAAC;AA4CzB,iBAAe,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOrD;AAED,iBAAe,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7F;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAUpF;AAED,iBAAS,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,CAWpF;AAED,KAAK,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,aAAa,CAAC;AACnE,KAAK,oBAAoB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAC5D,KAAK,wBAAwB,GAAG;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AACtF,KAAK,qBAAqB,GAAG;IAC3B,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,sBAAsB,CAAC;CAC7C,CAAC;AACF,KAAK,iBAAiB,GAAG;IACvB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACrD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yBAAyB,EAAE,MAAM,CAAC;IAClC,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,oBAAoB,CAAC;CAC5C,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB,GAAG,eAAe,CAelB;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAEV;AAkCD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE,CAejE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+BrE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAehE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IACJ,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CACb,GACL,OAAO,CAAC,IAAI,CAAC,CAcf;AAmBD,wBAAsB,mBAAmB,CACvC,GAAG,GAAE,MAAM,GAAG,IAAqB,EACnC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAqBD,iBAAe,gBAAgB,CAC7B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAA6B,GACzE,OAAO,CAAC,YAAY,EAAE,CAAC,CAQzB;AA+GD,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,cAAc,CA4LzF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAQV,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAM3B,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAML,UAAU,EACV,aAAa,IAAI,oBAAoB,EACtC,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAGL,qBAAqB,EAMtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,WAAW,CAAC;AAyCnB,iBAAe,aAAa,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAY9E;AAED,iBAAS,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,CAWpF;AAED,KAAK,oBAAoB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAC5D,KAAK,wBAAwB,GAAG;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AACtF,KAAK,qBAAqB,GAAG;IAC3B,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,sBAAsB,CAAC;CAC7C,CAAC;AACF,KAAK,iBAAiB,GAAG;IACvB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,YAAY,EAAE,OAAO,qBAAqB,CAAC;IAC3C,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACrD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yBAAyB,EAAE,MAAM,CAAC;IAClC,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,oBAAoB,CAAC;IAC3C,uEAAuE;IACvE,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACtD,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+BrE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAehE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IACJ,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CACb,GACL,OAAO,CAAC,IAAI,CAAC,CAcf;AAmBD,wBAAsB,mBAAmB,CACvC,GAAG,GAAE,MAAM,GAAG,IAAqB,EACnC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAsBD,iBAAe,gBAAgB,CAC7B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAA6B,GACzE,OAAO,CAAC,YAAY,EAAE,CAAC,CAQzB;AAqID,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,cAAc,CA8PzF"}