@code-yeongyu/senpi 2026.8.14 → 2026.8.17

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.js

@@ -0,0 +1,122 @@
+export const DEFAULT_RATE_LIMIT_BLOCK_MS = 60_000;
+export const MAX_RATE_LIMIT_BLOCK_MS = 48 * 60 * 60 * 1_000;
+/** Add each probe-observed Cursor context failure as one exact line. */
+export const CURSOR_CONTEXT_OVERFLOW_WORDINGS = [];
+const OTHER_ERROR = { kind: "other", retryable: false };
+const MAX_TEXT_DEPTH = 5;
+const MAX_TEXT_VALUES = 100;
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function collectText(value, output, seen, depth) {
+    if (output.length >= MAX_TEXT_VALUES || depth > MAX_TEXT_DEPTH)
+        return;
+    if (typeof value === "string") {
+        output.push(value);
+        return;
+    }
+    if (value instanceof Error) {
+        output.push(value.message);
+    }
+    if (value === null || typeof value !== "object" || seen.has(value))
+        return;
+    seen.add(value);
+    for (const nested of Object.values(value)) {
+        collectText(nested, output, seen, depth + 1);
+        if (output.length >= MAX_TEXT_VALUES)
+            return;
+    }
+}
+function errorText(input) {
+    const parts = [];
+    const seen = new Set();
+    collectText(input.stderr, parts, seen, 0);
+    collectText(input.resultEvent, parts, seen, 0);
+    collectText(input.thrown, parts, seen, 0);
+    return parts.join("\n");
+}
+function errorLines(text) {
+    return text
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}
+function hasExactLine(lines, wording) {
+    return lines.some((line) => line === wording);
+}
+function hasTypedKind(value, kind) {
+    return record(value)?.kind === kind;
+}
+function positiveNumber(value) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0)
+        return undefined;
+    return Math.ceil(value);
+}
+function findRetryAfterMs(value, seen, depth) {
+    if (depth > MAX_TEXT_DEPTH || value === null || typeof value !== "object" || seen.has(value))
+        return undefined;
+    seen.add(value);
+    const object = record(value);
+    if (object) {
+        const direct = positiveNumber(object.retryAfterMs) ?? positiveNumber(object.retry_after_ms);
+        if (direct !== undefined)
+            return direct;
+    }
+    for (const nested of Object.values(value)) {
+        const found = findRetryAfterMs(nested, seen, depth + 1);
+        if (found !== undefined)
+            return found;
+    }
+    return undefined;
+}
+function retryAfterMs(input, text) {
+    const structured = findRetryAfterMs(input.resultEvent, new Set(), 0) ?? findRetryAfterMs(input.thrown, new Set(), 0);
+    if (structured !== undefined)
+        return structured;
+    const milliseconds = text.match(/\bretry[-_ ]?after[-_ ]?ms\s*[:=]\s*(\d+(?:\.\d+)?)/i);
+    if (milliseconds)
+        return Math.ceil(Number(milliseconds[1]));
+    const seconds = text.match(/\bretry[-_ ]?after\s*[:=]\s*(\d+(?:\.\d+)?)/i);
+    return seconds ? Math.ceil(Number(seconds[1]) * 1_000) : undefined;
+}
+function rateLimitBlockMs(input, text) {
+    return Math.min(MAX_RATE_LIMIT_BLOCK_MS, retryAfterMs(input, text) ?? DEFAULT_RATE_LIMIT_BLOCK_MS);
+}
+/** Classifies observed cursor-agent stderr, result events, and typed transport failures. */
+export function classifyCursorCliError(input) {
+    if (!input || typeof input !== "object")
+        return OTHER_ERROR;
+    if (hasTypedKind(input.thrown, "binary_missing"))
+        return { kind: "binary_missing", retryable: false };
+    if (hasTypedKind(input.thrown, "malformed_stream") || hasTypedKind(input.resultEvent, "malformed_stream")) {
+        return { kind: "malformed_stream", retryable: false };
+    }
+    const text = errorText(input);
+    const lines = errorLines(text);
+    if (hasExactLine(lines, "The provided API key is invalid.") &&
+        hasExactLine(lines, "The API key was loaded from the CURSOR_API_KEY environment variable.")) {
+        return { kind: "invalid_api_key", retryable: false };
+    }
+    if (hasExactLine(lines, "Error: Your macOS login keychain is locked.")) {
+        return { kind: "keychain_locked", retryable: false };
+    }
+    if (lines.some((line) => /^(?:Error:\s*)?Invalid model value:\s+\S.*$/.test(line))) {
+        return { kind: "invalid_model", retryable: false };
+    }
+    if (/\b(?:HTTP\s*)?429\b|\brate[ _-]?limit(?:ed|ing)?\b|\btoo many requests\b/i.test(text)) {
+        return { kind: "rate_limit", retryable: true, blockMs: rateLimitBlockMs(input, text) };
+    }
+    if (/\b(?:HTTP\s*)?401\b|\bunauthori[sz]ed\b|\bauthentication (?:failed|required)\b|\bnot logged in\b/i.test(text)) {
+        return { kind: "auth_error", retryable: false };
+    }
+    if (CURSOR_CONTEXT_OVERFLOW_WORDINGS.some((wording) => hasExactLine(lines, wording) || hasExactLine(lines, `Error: ${wording}`))) {
+        return { kind: "context_overflow", retryable: false };
+    }
+    if (/\b(?:ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENETUNREACH|EHOSTUNREACH|ENOTFOUND|EAI_AGAIN)\b|\bnetwork error\b|\bconnection (?:reset|refused|lost)\b|\bsocket hang up\b|\bfetch failed\b/i.test(text)) {
+        return { kind: "network", retryable: true };
+    }
+    return OTHER_ERROR;
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/errors.ts"],"names":[],"mappings":"AAyBA,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE5D,wEAAwE;AACxE,MAAM,CAAC,MAAM,gCAAgC,GAAsB,EAAE,CAAC;AAEtE,MAAM,WAAW,GAAiC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtF,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAgB,EAAE,IAAiB,EAAE,KAAa;IACtF,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,IAAI,KAAK,GAAG,cAAc;QAAE,OAAO;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO;IACR,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IAC3E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe;YAAE,OAAO;IAC9C,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,KAA0B;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC/B,OAAO,IAAI;SACT,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,KAAwB,EAAE,OAAe;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAwB;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAiB,EAAE,KAAa;IACzE,IAAI,KAAK,GAAG,cAAc,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/G,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5F,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAA0B,EAAE,IAAY;IAC7D,MAAM,UAAU,GACf,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC,CAAC,CAAC;IACnH,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACxF,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA0B,EAAE,IAAY;IACjE,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,2BAA2B,CAAC,CAAC;AACpG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,KAA6C;IACnF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC5D,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtG,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC3G,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IACC,YAAY,CAAC,KAAK,EAAE,kCAAkC,CAAC;QACvD,YAAY,CAAC,KAAK,EAAE,sEAAsE,CAAC,EAC1F,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,EAAE,6CAA6C,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,2EAA2E,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,mGAAmG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,IACC,gCAAgC,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,OAAO,EAAE,CAAC,CACrF,EACA,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,IACC,qLAAqL,CAAC,IAAI,CACzL,IAAI,CACJ,EACA,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC","sourcesContent":["export type CursorCliErrorKind =\n\t| \"binary_missing\"\n\t| \"invalid_api_key\"\n\t| \"keychain_locked\"\n\t| \"invalid_model\"\n\t| \"rate_limit\"\n\t| \"auth_error\"\n\t| \"context_overflow\"\n\t| \"network\"\n\t| \"malformed_stream\"\n\t| \"other\";\n\nexport type CursorCliErrorClassification = {\n\tkind: CursorCliErrorKind;\n\tretryable: boolean;\n\tblockMs?: number;\n};\n\nexport type CursorCliErrorInput = {\n\texitCode?: unknown;\n\tstderr?: unknown;\n\tresultEvent?: unknown;\n\tthrown?: unknown;\n};\n\nexport const DEFAULT_RATE_LIMIT_BLOCK_MS = 60_000;\nexport const MAX_RATE_LIMIT_BLOCK_MS = 48 * 60 * 60 * 1_000;\n\n/** Add each probe-observed Cursor context failure as one exact line. */\nexport const CURSOR_CONTEXT_OVERFLOW_WORDINGS: readonly string[] = [];\n\nconst OTHER_ERROR: CursorCliErrorClassification = { kind: \"other\", retryable: false };\nconst MAX_TEXT_DEPTH = 5;\nconst MAX_TEXT_VALUES = 100;\n\nfunction record(value: unknown): Record<string, unknown> | undefined {\n\treturn value !== null && typeof value === \"object\" && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n\nfunction collectText(value: unknown, output: string[], seen: Set<object>, depth: number): void {\n\tif (output.length >= MAX_TEXT_VALUES || depth > MAX_TEXT_DEPTH) return;\n\tif (typeof value === \"string\") {\n\t\toutput.push(value);\n\t\treturn;\n\t}\n\tif (value instanceof Error) {\n\t\toutput.push(value.message);\n\t}\n\tif (value === null || typeof value !== \"object\" || seen.has(value)) return;\n\tseen.add(value);\n\tfor (const nested of Object.values(value)) {\n\t\tcollectText(nested, output, seen, depth + 1);\n\t\tif (output.length >= MAX_TEXT_VALUES) return;\n\t}\n}\n\nfunction errorText(input: CursorCliErrorInput): string {\n\tconst parts: string[] = [];\n\tconst seen = new Set<object>();\n\tcollectText(input.stderr, parts, seen, 0);\n\tcollectText(input.resultEvent, parts, seen, 0);\n\tcollectText(input.thrown, parts, seen, 0);\n\treturn parts.join(\"\\n\");\n}\n\nfunction errorLines(text: string): string[] {\n\treturn text\n\t\t.split(/\\r?\\n/)\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n}\n\nfunction hasExactLine(lines: readonly string[], wording: string): boolean {\n\treturn lines.some((line) => line === wording);\n}\n\nfunction hasTypedKind(value: unknown, kind: CursorCliErrorKind): boolean {\n\treturn record(value)?.kind === kind;\n}\n\nfunction positiveNumber(value: unknown): number | undefined {\n\tif (typeof value !== \"number\" || !Number.isFinite(value) || value <= 0) return undefined;\n\treturn Math.ceil(value);\n}\n\nfunction findRetryAfterMs(value: unknown, seen: Set<object>, depth: number): number | undefined {\n\tif (depth > MAX_TEXT_DEPTH || value === null || typeof value !== \"object\" || seen.has(value)) return undefined;\n\tseen.add(value);\n\tconst object = record(value);\n\tif (object) {\n\t\tconst direct = positiveNumber(object.retryAfterMs) ?? positiveNumber(object.retry_after_ms);\n\t\tif (direct !== undefined) return direct;\n\t}\n\tfor (const nested of Object.values(value)) {\n\t\tconst found = findRetryAfterMs(nested, seen, depth + 1);\n\t\tif (found !== undefined) return found;\n\t}\n\treturn undefined;\n}\n\nfunction retryAfterMs(input: CursorCliErrorInput, text: string): number | undefined {\n\tconst structured =\n\t\tfindRetryAfterMs(input.resultEvent, new Set<object>(), 0) ?? findRetryAfterMs(input.thrown, new Set<object>(), 0);\n\tif (structured !== undefined) return structured;\n\tconst milliseconds = text.match(/\\bretry[-_ ]?after[-_ ]?ms\\s*[:=]\\s*(\\d+(?:\\.\\d+)?)/i);\n\tif (milliseconds) return Math.ceil(Number(milliseconds[1]));\n\tconst seconds = text.match(/\\bretry[-_ ]?after\\s*[:=]\\s*(\\d+(?:\\.\\d+)?)/i);\n\treturn seconds ? Math.ceil(Number(seconds[1]) * 1_000) : undefined;\n}\n\nfunction rateLimitBlockMs(input: CursorCliErrorInput, text: string): number {\n\treturn Math.min(MAX_RATE_LIMIT_BLOCK_MS, retryAfterMs(input, text) ?? DEFAULT_RATE_LIMIT_BLOCK_MS);\n}\n\n/** Classifies observed cursor-agent stderr, result events, and typed transport failures. */\nexport function classifyCursorCliError(input: CursorCliErrorInput | null | undefined): CursorCliErrorClassification {\n\tif (!input || typeof input !== \"object\") return OTHER_ERROR;\n\tif (hasTypedKind(input.thrown, \"binary_missing\")) return { kind: \"binary_missing\", retryable: false };\n\tif (hasTypedKind(input.thrown, \"malformed_stream\") || hasTypedKind(input.resultEvent, \"malformed_stream\")) {\n\t\treturn { kind: \"malformed_stream\", retryable: false };\n\t}\n\n\tconst text = errorText(input);\n\tconst lines = errorLines(text);\n\tif (\n\t\thasExactLine(lines, \"The provided API key is invalid.\") &&\n\t\thasExactLine(lines, \"The API key was loaded from the CURSOR_API_KEY environment variable.\")\n\t) {\n\t\treturn { kind: \"invalid_api_key\", retryable: false };\n\t}\n\tif (hasExactLine(lines, \"Error: Your macOS login keychain is locked.\")) {\n\t\treturn { kind: \"keychain_locked\", retryable: false };\n\t}\n\tif (lines.some((line) => /^(?:Error:\\s*)?Invalid model value:\\s+\\S.*$/.test(line))) {\n\t\treturn { kind: \"invalid_model\", retryable: false };\n\t}\n\tif (/\\b(?:HTTP\\s*)?429\\b|\\brate[ _-]?limit(?:ed|ing)?\\b|\\btoo many requests\\b/i.test(text)) {\n\t\treturn { kind: \"rate_limit\", retryable: true, blockMs: rateLimitBlockMs(input, text) };\n\t}\n\tif (/\\b(?:HTTP\\s*)?401\\b|\\bunauthori[sz]ed\\b|\\bauthentication (?:failed|required)\\b|\\bnot logged in\\b/i.test(text)) {\n\t\treturn { kind: \"auth_error\", retryable: false };\n\t}\n\tif (\n\t\tCURSOR_CONTEXT_OVERFLOW_WORDINGS.some(\n\t\t\t(wording) => hasExactLine(lines, wording) || hasExactLine(lines, `Error: ${wording}`),\n\t\t)\n\t) {\n\t\treturn { kind: \"context_overflow\", retryable: false };\n\t}\n\tif (\n\t\t/\\b(?:ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENETUNREACH|EHOSTUNREACH|ENOTFOUND|EAI_AGAIN)\\b|\\bnetwork error\\b|\\bconnection (?:reset|refused|lost)\\b|\\bsocket hang up\\b|\\bfetch failed\\b/i.test(\n\t\t\ttext,\n\t\t)\n\t) {\n\t\treturn { kind: \"network\", retryable: true };\n\t}\n\treturn OTHER_ERROR;\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/executable.d.ts

@@ -0,0 +1,30 @@
+export type CursorAgentDirectoryEntry = {
+    name: string;
+    isDirectory: boolean;
+};
+export type CursorAgentExecutableDeps = {
+    env: (name: string) => string | undefined;
+    settings: {
+        executablePath?: string;
+    };
+    homeDirectory: string;
+    pathDelimiter: string;
+    isExecutableFile: (candidate: string) => boolean;
+    readDirectory: (directory: string) => CursorAgentDirectoryEntry[];
+};
+export type VersionProbeOptions = {
+    encoding: "utf8";
+    timeout: number;
+};
+export type VersionProbeCallback = (error: Error | null, stdout: string, stderr: string) => void;
+export type VersionProbeDeps = {
+    execFile: (file: string, args: string[], options: VersionProbeOptions, callback: VersionProbeCallback) => void;
+};
+export declare class CursorAgentNotInstalledError extends Error {
+    readonly kind = "binary_missing";
+    constructor();
+}
+export declare function resolveCursorAgentExecutable(deps: CursorAgentExecutableDeps): string;
+export declare function probeCursorAgentVersion(executable: string, deps?: VersionProbeDeps): Promise<string>;
+export declare function defaultCursorAgentExecutableDeps(): CursorAgentExecutableDeps;
+//# sourceMappingURL=executable.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/executable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/executable.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACvC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,yBAAyB,EAAE,CAAC;CAClE,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC/G,CAAC;AAEF,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,QAAQ,CAAC,IAAI,oBAAoB;;CASjC;AA6CD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAkBpF;AAUD,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,gBAA0C,GAC9C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAgB,gCAAgC,IAAI,yBAAyB,CAqB5E"}

package/dist/core/extensions/builtin/cursor-cli-oauth/executable.js

@@ -0,0 +1,117 @@
+import { execFile as nodeExecFile } from "node:child_process";
+import { accessSync, constants, readdirSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { delimiter, join } from "node:path";
+export class CursorAgentNotInstalledError extends Error {
+    constructor() {
+        super("Cursor CLI is not installed. Install it with `curl https://cursor.com/install -fsS | bash`, " +
+            "then ensure ~/.local/bin is on your PATH.");
+        this.kind = "binary_missing";
+        this.name = "CursorAgentNotInstalledError";
+    }
+}
+function executableCandidate(candidate, deps) {
+    if (!candidate)
+        return undefined;
+    try {
+        return deps.isExecutableFile(candidate) ? candidate : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function resolveFromPath(deps) {
+    const pathValue = deps.env("PATH");
+    if (!pathValue)
+        return undefined;
+    for (const directory of pathValue.split(deps.pathDelimiter)) {
+        if (!directory)
+            continue;
+        const candidate = executableCandidate(join(directory, "cursor-agent"), deps);
+        if (candidate)
+            return candidate;
+    }
+    return undefined;
+}
+function resolveFromInstalledVersions(deps) {
+    const versionsDirectory = join(deps.homeDirectory, ".local", "share", "cursor-agent", "versions");
+    let entries;
+    try {
+        entries = deps.readDirectory(versionsDirectory);
+    }
+    catch {
+        return undefined;
+    }
+    const directoryNames = entries
+        .filter((entry) => entry.isDirectory)
+        .map((entry) => entry.name)
+        .sort()
+        .reverse();
+    for (const directoryName of directoryNames) {
+        const candidate = executableCandidate(join(versionsDirectory, directoryName, "cursor-agent"), deps);
+        if (candidate)
+            return candidate;
+    }
+    return undefined;
+}
+export function resolveCursorAgentExecutable(deps) {
+    const orderedCandidates = [
+        deps.env("SENPI_CURSOR_CLI_OAUTH_EXECUTABLE"),
+        deps.env("CURSOR_AGENT_EXECUTABLE"),
+        deps.settings.executablePath,
+    ];
+    for (const candidate of orderedCandidates) {
+        const executable = executableCandidate(candidate, deps);
+        if (executable)
+            return executable;
+    }
+    const pathExecutable = resolveFromPath(deps);
+    if (pathExecutable)
+        return pathExecutable;
+    const installedExecutable = resolveFromInstalledVersions(deps);
+    if (installedExecutable)
+        return installedExecutable;
+    throw new CursorAgentNotInstalledError();
+}
+const defaultVersionProbeDeps = {
+    execFile: (file, args, options, callback) => {
+        nodeExecFile(file, args, options, (error, stdout, stderr) => {
+            callback(error, stdout, stderr);
+        });
+    },
+};
+export function probeCursorAgentVersion(executable, deps = defaultVersionProbeDeps) {
+    return new Promise((resolve, reject) => {
+        deps.execFile(executable, ["--version"], { encoding: "utf8", timeout: 10_000 }, (error, stdout) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve(stdout.trim());
+        });
+    });
+}
+export function defaultCursorAgentExecutableDeps() {
+    return {
+        env: (name) => process.env[name],
+        settings: {},
+        homeDirectory: homedir(),
+        pathDelimiter: delimiter,
+        isExecutableFile: (candidate) => {
+            try {
+                if (!statSync(candidate).isFile())
+                    return false;
+                accessSync(candidate, constants.X_OK);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        readDirectory: (directory) => readdirSync(directory, { withFileTypes: true }).map((entry) => ({
+            name: entry.name,
+            isDirectory: entry.isDirectory(),
+        })),
+    };
+}
+//# sourceMappingURL=executable.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/executable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/executable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA2B5C,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAGtD;QACC,KAAK,CACJ,8FAA8F;YAC7F,2CAA2C,CAC5C,CAAC;QANM,SAAI,GAAG,gBAAgB,CAAC;QAOhC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC5C,CAAC;CACD;AAED,SAAS,mBAAmB,CAAC,SAA6B,EAAE,IAA+B;IAC1F,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,IAA+B;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7E,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,4BAA4B,CAAC,IAA+B;IACpE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAClG,IAAI,OAAoC,CAAC;IACzC,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,OAAO;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,EAAE;SACN,OAAO,EAAE,CAAC;IAEZ,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;QACpG,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAA+B;IAC3E,MAAM,iBAAiB,GAAG;QACzB,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,cAAc;KAC5B,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACnC,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAE1C,MAAM,mBAAmB,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,mBAAmB;QAAE,OAAO,mBAAmB,CAAC;IAEpD,MAAM,IAAI,4BAA4B,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,uBAAuB,GAAqB;IACjD,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3C,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACtC,UAAkB,EAClB,OAAyB,uBAAuB;IAEhD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACjG,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACR,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC/C,OAAO;QACN,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAChC,QAAQ,EAAE,EAAE;QACZ,aAAa,EAAE,OAAO,EAAE;QACxB,aAAa,EAAE,SAAS;QACxB,gBAAgB,EAAE,CAAC,SAAS,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACJ,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAChD,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,IAAI,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAC5B,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;SAChC,CAAC,CAAC;KACJ,CAAC;AACH,CAAC","sourcesContent":["import { execFile as nodeExecFile } from \"node:child_process\";\nimport { accessSync, constants, readdirSync, statSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { delimiter, join } from \"node:path\";\n\nexport type CursorAgentDirectoryEntry = {\n\tname: string;\n\tisDirectory: boolean;\n};\n\nexport type CursorAgentExecutableDeps = {\n\tenv: (name: string) => string | undefined;\n\tsettings: { executablePath?: string };\n\thomeDirectory: string;\n\tpathDelimiter: string;\n\tisExecutableFile: (candidate: string) => boolean;\n\treadDirectory: (directory: string) => CursorAgentDirectoryEntry[];\n};\n\nexport type VersionProbeOptions = {\n\tencoding: \"utf8\";\n\ttimeout: number;\n};\n\nexport type VersionProbeCallback = (error: Error | null, stdout: string, stderr: string) => void;\n\nexport type VersionProbeDeps = {\n\texecFile: (file: string, args: string[], options: VersionProbeOptions, callback: VersionProbeCallback) => void;\n};\n\nexport class CursorAgentNotInstalledError extends Error {\n\treadonly kind = \"binary_missing\";\n\n\tconstructor() {\n\t\tsuper(\n\t\t\t\"Cursor CLI is not installed. Install it with `curl https://cursor.com/install -fsS | bash`, \" +\n\t\t\t\t\"then ensure ~/.local/bin is on your PATH.\",\n\t\t);\n\t\tthis.name = \"CursorAgentNotInstalledError\";\n\t}\n}\n\nfunction executableCandidate(candidate: string | undefined, deps: CursorAgentExecutableDeps): string | undefined {\n\tif (!candidate) return undefined;\n\ttry {\n\t\treturn deps.isExecutableFile(candidate) ? candidate : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction resolveFromPath(deps: CursorAgentExecutableDeps): string | undefined {\n\tconst pathValue = deps.env(\"PATH\");\n\tif (!pathValue) return undefined;\n\n\tfor (const directory of pathValue.split(deps.pathDelimiter)) {\n\t\tif (!directory) continue;\n\t\tconst candidate = executableCandidate(join(directory, \"cursor-agent\"), deps);\n\t\tif (candidate) return candidate;\n\t}\n\treturn undefined;\n}\n\nfunction resolveFromInstalledVersions(deps: CursorAgentExecutableDeps): string | undefined {\n\tconst versionsDirectory = join(deps.homeDirectory, \".local\", \"share\", \"cursor-agent\", \"versions\");\n\tlet entries: CursorAgentDirectoryEntry[];\n\ttry {\n\t\tentries = deps.readDirectory(versionsDirectory);\n\t} catch {\n\t\treturn undefined;\n\t}\n\n\tconst directoryNames = entries\n\t\t.filter((entry) => entry.isDirectory)\n\t\t.map((entry) => entry.name)\n\t\t.sort()\n\t\t.reverse();\n\n\tfor (const directoryName of directoryNames) {\n\t\tconst candidate = executableCandidate(join(versionsDirectory, directoryName, \"cursor-agent\"), deps);\n\t\tif (candidate) return candidate;\n\t}\n\treturn undefined;\n}\n\nexport function resolveCursorAgentExecutable(deps: CursorAgentExecutableDeps): string {\n\tconst orderedCandidates = [\n\t\tdeps.env(\"SENPI_CURSOR_CLI_OAUTH_EXECUTABLE\"),\n\t\tdeps.env(\"CURSOR_AGENT_EXECUTABLE\"),\n\t\tdeps.settings.executablePath,\n\t];\n\tfor (const candidate of orderedCandidates) {\n\t\tconst executable = executableCandidate(candidate, deps);\n\t\tif (executable) return executable;\n\t}\n\n\tconst pathExecutable = resolveFromPath(deps);\n\tif (pathExecutable) return pathExecutable;\n\n\tconst installedExecutable = resolveFromInstalledVersions(deps);\n\tif (installedExecutable) return installedExecutable;\n\n\tthrow new CursorAgentNotInstalledError();\n}\n\nconst defaultVersionProbeDeps: VersionProbeDeps = {\n\texecFile: (file, args, options, callback) => {\n\t\tnodeExecFile(file, args, options, (error, stdout, stderr) => {\n\t\t\tcallback(error, stdout, stderr);\n\t\t});\n\t},\n};\n\nexport function probeCursorAgentVersion(\n\texecutable: string,\n\tdeps: VersionProbeDeps = defaultVersionProbeDeps,\n): Promise<string> {\n\treturn new Promise((resolve, reject) => {\n\t\tdeps.execFile(executable, [\"--version\"], { encoding: \"utf8\", timeout: 10_000 }, (error, stdout) => {\n\t\t\tif (error) {\n\t\t\t\treject(error);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tresolve(stdout.trim());\n\t\t});\n\t});\n}\n\nexport function defaultCursorAgentExecutableDeps(): CursorAgentExecutableDeps {\n\treturn {\n\t\tenv: (name) => process.env[name],\n\t\tsettings: {},\n\t\thomeDirectory: homedir(),\n\t\tpathDelimiter: delimiter,\n\t\tisExecutableFile: (candidate) => {\n\t\t\ttry {\n\t\t\t\tif (!statSync(candidate).isFile()) return false;\n\t\t\t\taccessSync(candidate, constants.X_OK);\n\t\t\t\treturn true;\n\t\t\t} catch {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t},\n\t\treadDirectory: (directory) =>\n\t\t\treaddirSync(directory, { withFileTypes: true }).map((entry) => ({\n\t\t\t\tname: entry.name,\n\t\t\t\tisDirectory: entry.isDirectory(),\n\t\t\t})),\n\t};\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/failover.d.ts

@@ -0,0 +1,39 @@
+import type { CredentialStore } from "@earendil-works/pi-ai";
+import { type CursorCliAccountSlot } from "./accounts.ts";
+import { type CursorAffinityOptions } from "./affinity.ts";
+import { type CursorCliErrorClassification, type CursorCliErrorInput } from "./errors.ts";
+export type CursorCliFailoverNotice = {
+    type: "cursor_account_changed";
+    message: string;
+    fromAccount: string;
+    toAccount: string;
+    freshChat: true;
+    priorContextCarriedOver: false;
+};
+export type CursorCliAttemptOptions = {
+    /** Cross-account Cursor chats cannot be resumed because each account has its own HOME. */
+    freshChat: boolean;
+};
+export type CursorCliFailoverOptions<TEvent> = {
+    store: CredentialStore;
+    providerId: string;
+    affinity?: CursorAffinityOptions;
+    runAttempt: (account: CursorCliAccountSlot, options: CursorCliAttemptOptions) => AsyncIterable<TEvent> | Promise<AsyncIterable<TEvent>>;
+    now?: () => number;
+    classify?: (input: CursorCliErrorInput) => CursorCliErrorClassification;
+    errorFromEvent?: (event: TEvent) => CursorCliErrorInput | undefined;
+    isVisibleAssistantDelta?: (event: TEvent) => boolean;
+};
+export declare class CursorCliFailoverError extends Error {
+    readonly classification: CursorCliErrorClassification;
+    readonly original: unknown;
+    readonly visibleAssistantDeltaEmitted: boolean;
+    constructor(classification: CursorCliErrorClassification, original: unknown, visibleAssistantDeltaEmitted: boolean);
+}
+/**
+ * Runs one Cursor CLI stream at a time and rotates accounts only before any
+ * assistant text is visible. Replacement accounts always start a fresh chat;
+ * this module never accepts or transfers a chat id or transcript context.
+ */
+export declare function runCursorCliFailover<TEvent>(options: CursorCliFailoverOptions<TEvent>): AsyncGenerator<TEvent | CursorCliFailoverNotice>;
+//# sourceMappingURL=failover.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/failover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failover.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/failover.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,KAAK,oBAAoB,EAA+C,MAAM,eAAe,CAAC;AACvG,OAAO,EAAE,KAAK,qBAAqB,EAAiB,MAAM,eAAe,CAAC;AAC1E,OAAO,EACN,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EAIxB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,uBAAuB,EAAE,KAAK,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACrC,0FAA0F;IAC1F,SAAS,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,MAAM,IAAI;IAC9C,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,UAAU,EAAE,CACX,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,uBAAuB,KAC5B,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,4BAA4B,CAAC;IACxE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,mBAAmB,GAAG,SAAS,CAAC;IACpE,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;CACrD,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,KAAK;IAChD,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;gBAEnC,cAAc,EAAE,4BAA4B,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,EAAE,OAAO;CAOlH;AAyHD;;;;GAIG;AACH,wBAAuB,oBAAoB,CAAC,MAAM,EACjD,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,GACvC,cAAc,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAmClD"}

package/dist/core/extensions/builtin/cursor-cli-oauth/failover.js

@@ -0,0 +1,155 @@
+import { listAccounts } from "./accounts.js";
+import { selectAccount } from "./affinity.js";
+import { classifyCursorCliError, DEFAULT_RATE_LIMIT_BLOCK_MS, MAX_RATE_LIMIT_BLOCK_MS, } from "./errors.js";
+export class CursorCliFailoverError extends Error {
+    constructor(classification, original, visibleAssistantDeltaEmitted) {
+        super(errorMessage(original));
+        this.name = "CursorCliFailoverError";
+        this.classification = classification;
+        this.original = original;
+        this.visibleAssistantDeltaEmitted = visibleAssistantDeltaEmitted;
+    }
+}
+class CursorCliNoAssistantOutputError extends Error {
+    constructor() {
+        super("Cursor CLI attempt completed without visible assistant text");
+        this.name = "CursorCliNoAssistantOutputError";
+    }
+}
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function errorMessage(error) {
+    if (error instanceof Error)
+        return error.message;
+    if (typeof error === "string")
+        return error;
+    const message = record(error)?.message;
+    return typeof message === "string" ? message : "Cursor CLI attempt failed";
+}
+function errorInput(error) {
+    const value = record(error);
+    if (value && ("exitCode" in value || "stderr" in value || "resultEvent" in value || "thrown" in value)) {
+        return error;
+    }
+    return { thrown: error };
+}
+function defaultErrorFromEvent(event) {
+    const value = record(event);
+    if (value?.type === "malformed_stream")
+        return { thrown: event };
+    if (value?.type === "result" && (value.is_error === true || value.subtype === "error")) {
+        return { resultEvent: event };
+    }
+    return undefined;
+}
+function defaultIsVisibleAssistantDelta(event) {
+    const value = record(event);
+    if (!value)
+        return false;
+    if (value.type === "assistant") {
+        const message = record(value.message);
+        if (!Array.isArray(message?.content))
+            return false;
+        return message.content.some((item) => {
+            const block = record(item);
+            return block?.type === "text" && typeof block.text === "string" && block.text.length > 0;
+        });
+    }
+    return ((value.type === "assistant_delta" || value.type === "text_delta") &&
+        typeof value.delta === "string" &&
+        value.delta.length > 0);
+}
+function notice(fromAccount, toAccount) {
+    return {
+        type: "cursor_account_changed",
+        message: `Cursor account changed from '${fromAccount}' to '${toAccount}'; a fresh chat was started and prior context was not carried over.`,
+        fromAccount,
+        toAccount,
+        freshChat: true,
+        priorContextCarriedOver: false,
+    };
+}
+async function readCredential(store, providerId) {
+    const current = await store.read(providerId);
+    return current?.type === "oauth" ? current : undefined;
+}
+async function selectStoredAccount(options, now) {
+    const credential = await readCredential(options.store, options.providerId);
+    const accounts = credential ? listAccounts(credential) : [];
+    return selectAccount(accounts, {
+        ...options.affinity,
+        pinnedAccount: options.affinity?.pinnedAccount ?? credential?.pinned,
+        now,
+    });
+}
+function blockedAccount(account, classification, now) {
+    if (classification.kind === "auth_error") {
+        const { blockedUntil: _blockedUntil, ...withoutExpiry } = account;
+        return { ...withoutExpiry, blockReason: "auth_error" };
+    }
+    const duration = Math.min(MAX_RATE_LIMIT_BLOCK_MS, classification.blockMs ?? DEFAULT_RATE_LIMIT_BLOCK_MS);
+    return { ...account, blockedUntil: now + duration, blockReason: "rate_limit" };
+}
+async function persistBlock(store, providerId, account) {
+    await store.modify(providerId, async (current) => {
+        if (current?.type !== "oauth")
+            return current;
+        const credential = current;
+        return {
+            ...credential,
+            accounts: (credential.accounts ?? []).map((existing) => existing.name === account.name
+                ? { ...existing, blockedUntil: account.blockedUntil, blockReason: account.blockReason }
+                : existing),
+        };
+    });
+}
+function isFailoverKind(classification) {
+    return classification.kind === "rate_limit" || classification.kind === "auth_error";
+}
+/**
+ * Runs one Cursor CLI stream at a time and rotates accounts only before any
+ * assistant text is visible. Replacement accounts always start a fresh chat;
+ * this module never accepts or transfers a chat id or transcript context.
+ */
+export async function* runCursorCliFailover(options) {
+    const now = options.now ?? Date.now;
+    const classify = options.classify ?? classifyCursorCliError;
+    const errorFromEvent = options.errorFromEvent ?? defaultErrorFromEvent;
+    const isVisibleAssistantDelta = options.isVisibleAssistantDelta ?? defaultIsVisibleAssistantDelta;
+    let account = await selectStoredAccount(options, now());
+    let freshChat = false;
+    while (true) {
+        let visibleAssistantDeltaEmitted = false;
+        try {
+            const attemptStream = await options.runAttempt(account, { freshChat });
+            for await (const event of attemptStream) {
+                const failure = errorFromEvent(event);
+                if (failure !== undefined)
+                    throw failure;
+                visibleAssistantDeltaEmitted ||= isVisibleAssistantDelta(event);
+                yield event;
+            }
+            if (!visibleAssistantDeltaEmitted)
+                throw new CursorCliNoAssistantOutputError();
+            return;
+        }
+        catch (error) {
+            const classification = classify(errorInput(error));
+            const surfaced = new CursorCliFailoverError(classification, error, visibleAssistantDeltaEmitted);
+            if (!isFailoverKind(classification))
+                throw surfaced;
+            const blocked = blockedAccount(account, classification, now());
+            await persistBlock(options.store, options.providerId, blocked);
+            if (visibleAssistantDeltaEmitted)
+                throw surfaced;
+            const nextAccount = await selectStoredAccount(options, now());
+            yield notice(account.name, nextAccount.name);
+            account = nextAccount;
+            freshChat = true;
+        }
+    }
+}
+//# sourceMappingURL=failover.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/failover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failover.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/failover.ts"],"names":[],"mappings":"AACA,OAAO,EAA4D,YAAY,EAAE,MAAM,eAAe,CAAC;AACvG,OAAO,EAA8B,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAGN,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,GACvB,MAAM,aAAa,CAAC;AA8BrB,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAKhD,YAAY,cAA4C,EAAE,QAAiB,EAAE,4BAAqC;QACjH,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,4BAA4B,GAAG,4BAA4B,CAAC;IAClE,CAAC;CACD;AAED,MAAM,+BAAgC,SAAQ,KAAK;IAClD;QACC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAC/C,CAAC;CACD;AAED,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACvC,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,IAAI,CAAC,UAAU,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,aAAa,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC;QACxG,OAAO,KAA4B,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAS,KAAa;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,EAAE,IAAI,KAAK,kBAAkB;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjE,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,8BAA8B,CAAS,KAAa;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,CACN,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QACjE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CACtB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,WAAmB,EAAE,SAAiB;IACrD,OAAO;QACN,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,gCAAgC,WAAW,SAAS,SAAS,qEAAqE;QAC3I,WAAW;QACX,SAAS;QACT,SAAS,EAAE,IAAI;QACf,uBAAuB,EAAE,KAAK;KAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,KAAsB,EACtB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,OAAO,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAE,OAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,OAAmF,EACnF,GAAW;IAEX,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,aAAa,CAAC,QAAQ,EAAE;QAC9B,GAAG,OAAO,CAAC,QAAQ;QACnB,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM;QACpE,GAAG;KACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACtB,OAA6B,EAC7B,cAA4C,EAC5C,GAAW;IAEX,IAAI,cAAc,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1C,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;QAClE,OAAO,EAAE,GAAG,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,cAAc,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC;IAC1G,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,GAAG,GAAG,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAsB,EAAE,UAAkB,EAAE,OAA6B;IACpG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,IAAI,OAAO,EAAE,IAAI,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QAC9C,MAAM,UAAU,GAAG,OAAmC,CAAC;QACvD,OAAO;YACN,GAAG,UAAU;YACb,QAAQ,EAAE,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtD,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;gBAC7B,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;gBACvF,CAAC,CAAC,QAAQ,CACX;SACD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,cAA4C;IACnE,OAAO,cAAc,CAAC,IAAI,KAAK,YAAY,IAAI,cAAc,CAAC,IAAI,KAAK,YAAY,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,oBAAoB,CAC1C,OAAyC;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACvE,MAAM,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,8BAA8B,CAAC;IAClG,IAAI,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,4BAA4B,GAAG,KAAK,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACvE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,OAAO,KAAK,SAAS;oBAAE,MAAM,OAAO,CAAC;gBACzC,4BAA4B,KAAK,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBAChE,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,4BAA4B;gBAAE,MAAM,IAAI,+BAA+B,EAAE,CAAC;YAC/E,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,cAAc,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;YACjG,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;gBAAE,MAAM,QAAQ,CAAC;YAEpD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,4BAA4B;gBAAE,MAAM,QAAQ,CAAC;YAEjD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,GAAG,WAAW,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;QAClB,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["import type { CredentialStore } from \"@earendil-works/pi-ai\";\nimport { type CursorCliAccountSlot, type CursorCliOauthCredential, listAccounts } from \"./accounts.ts\";\nimport { type CursorAffinityOptions, selectAccount } from \"./affinity.ts\";\nimport {\n\ttype CursorCliErrorClassification,\n\ttype CursorCliErrorInput,\n\tclassifyCursorCliError,\n\tDEFAULT_RATE_LIMIT_BLOCK_MS,\n\tMAX_RATE_LIMIT_BLOCK_MS,\n} from \"./errors.ts\";\n\nexport type CursorCliFailoverNotice = {\n\ttype: \"cursor_account_changed\";\n\tmessage: string;\n\tfromAccount: string;\n\ttoAccount: string;\n\tfreshChat: true;\n\tpriorContextCarriedOver: false;\n};\n\nexport type CursorCliAttemptOptions = {\n\t/** Cross-account Cursor chats cannot be resumed because each account has its own HOME. */\n\tfreshChat: boolean;\n};\n\nexport type CursorCliFailoverOptions<TEvent> = {\n\tstore: CredentialStore;\n\tproviderId: string;\n\taffinity?: CursorAffinityOptions;\n\trunAttempt: (\n\t\taccount: CursorCliAccountSlot,\n\t\toptions: CursorCliAttemptOptions,\n\t) => AsyncIterable<TEvent> | Promise<AsyncIterable<TEvent>>;\n\tnow?: () => number;\n\tclassify?: (input: CursorCliErrorInput) => CursorCliErrorClassification;\n\terrorFromEvent?: (event: TEvent) => CursorCliErrorInput | undefined;\n\tisVisibleAssistantDelta?: (event: TEvent) => boolean;\n};\n\nexport class CursorCliFailoverError extends Error {\n\treadonly classification: CursorCliErrorClassification;\n\treadonly original: unknown;\n\treadonly visibleAssistantDeltaEmitted: boolean;\n\n\tconstructor(classification: CursorCliErrorClassification, original: unknown, visibleAssistantDeltaEmitted: boolean) {\n\t\tsuper(errorMessage(original));\n\t\tthis.name = \"CursorCliFailoverError\";\n\t\tthis.classification = classification;\n\t\tthis.original = original;\n\t\tthis.visibleAssistantDeltaEmitted = visibleAssistantDeltaEmitted;\n\t}\n}\n\nclass CursorCliNoAssistantOutputError extends Error {\n\tconstructor() {\n\t\tsuper(\"Cursor CLI attempt completed without visible assistant text\");\n\t\tthis.name = \"CursorCliNoAssistantOutputError\";\n\t}\n}\n\nfunction record(value: unknown): Record<string, unknown> | undefined {\n\treturn value !== null && typeof value === \"object\" && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n\nfunction errorMessage(error: unknown): string {\n\tif (error instanceof Error) return error.message;\n\tif (typeof error === \"string\") return error;\n\tconst message = record(error)?.message;\n\treturn typeof message === \"string\" ? message : \"Cursor CLI attempt failed\";\n}\n\nfunction errorInput(error: unknown): CursorCliErrorInput {\n\tconst value = record(error);\n\tif (value && (\"exitCode\" in value || \"stderr\" in value || \"resultEvent\" in value || \"thrown\" in value)) {\n\t\treturn error as CursorCliErrorInput;\n\t}\n\treturn { thrown: error };\n}\n\nfunction defaultErrorFromEvent<TEvent>(event: TEvent): CursorCliErrorInput | undefined {\n\tconst value = record(event);\n\tif (value?.type === \"malformed_stream\") return { thrown: event };\n\tif (value?.type === \"result\" && (value.is_error === true || value.subtype === \"error\")) {\n\t\treturn { resultEvent: event };\n\t}\n\treturn undefined;\n}\n\nfunction defaultIsVisibleAssistantDelta<TEvent>(event: TEvent): boolean {\n\tconst value = record(event);\n\tif (!value) return false;\n\tif (value.type === \"assistant\") {\n\t\tconst message = record(value.message);\n\t\tif (!Array.isArray(message?.content)) return false;\n\t\treturn message.content.some((item) => {\n\t\t\tconst block = record(item);\n\t\t\treturn block?.type === \"text\" && typeof block.text === \"string\" && block.text.length > 0;\n\t\t});\n\t}\n\treturn (\n\t\t(value.type === \"assistant_delta\" || value.type === \"text_delta\") &&\n\t\ttypeof value.delta === \"string\" &&\n\t\tvalue.delta.length > 0\n\t);\n}\n\nfunction notice(fromAccount: string, toAccount: string): CursorCliFailoverNotice {\n\treturn {\n\t\ttype: \"cursor_account_changed\",\n\t\tmessage: `Cursor account changed from '${fromAccount}' to '${toAccount}'; a fresh chat was started and prior context was not carried over.`,\n\t\tfromAccount,\n\t\ttoAccount,\n\t\tfreshChat: true,\n\t\tpriorContextCarriedOver: false,\n\t};\n}\n\nasync function readCredential(\n\tstore: CredentialStore,\n\tproviderId: string,\n): Promise<CursorCliOauthCredential | undefined> {\n\tconst current = await store.read(providerId);\n\treturn current?.type === \"oauth\" ? (current as CursorCliOauthCredential) : undefined;\n}\n\nasync function selectStoredAccount(\n\toptions: Pick<CursorCliFailoverOptions<never>, \"store\" | \"providerId\" | \"affinity\">,\n\tnow: number,\n): Promise<CursorCliAccountSlot> {\n\tconst credential = await readCredential(options.store, options.providerId);\n\tconst accounts = credential ? listAccounts(credential) : [];\n\treturn selectAccount(accounts, {\n\t\t...options.affinity,\n\t\tpinnedAccount: options.affinity?.pinnedAccount ?? credential?.pinned,\n\t\tnow,\n\t});\n}\n\nfunction blockedAccount(\n\taccount: CursorCliAccountSlot,\n\tclassification: CursorCliErrorClassification,\n\tnow: number,\n): CursorCliAccountSlot {\n\tif (classification.kind === \"auth_error\") {\n\t\tconst { blockedUntil: _blockedUntil, ...withoutExpiry } = account;\n\t\treturn { ...withoutExpiry, blockReason: \"auth_error\" };\n\t}\n\tconst duration = Math.min(MAX_RATE_LIMIT_BLOCK_MS, classification.blockMs ?? DEFAULT_RATE_LIMIT_BLOCK_MS);\n\treturn { ...account, blockedUntil: now + duration, blockReason: \"rate_limit\" };\n}\n\nasync function persistBlock(store: CredentialStore, providerId: string, account: CursorCliAccountSlot): Promise<void> {\n\tawait store.modify(providerId, async (current) => {\n\t\tif (current?.type !== \"oauth\") return current;\n\t\tconst credential = current as CursorCliOauthCredential;\n\t\treturn {\n\t\t\t...credential,\n\t\t\taccounts: (credential.accounts ?? []).map((existing) =>\n\t\t\t\texisting.name === account.name\n\t\t\t\t\t? { ...existing, blockedUntil: account.blockedUntil, blockReason: account.blockReason }\n\t\t\t\t\t: existing,\n\t\t\t),\n\t\t};\n\t});\n}\n\nfunction isFailoverKind(classification: CursorCliErrorClassification): boolean {\n\treturn classification.kind === \"rate_limit\" || classification.kind === \"auth_error\";\n}\n\n/**\n * Runs one Cursor CLI stream at a time and rotates accounts only before any\n * assistant text is visible. Replacement accounts always start a fresh chat;\n * this module never accepts or transfers a chat id or transcript context.\n */\nexport async function* runCursorCliFailover<TEvent>(\n\toptions: CursorCliFailoverOptions<TEvent>,\n): AsyncGenerator<TEvent | CursorCliFailoverNotice> {\n\tconst now = options.now ?? Date.now;\n\tconst classify = options.classify ?? classifyCursorCliError;\n\tconst errorFromEvent = options.errorFromEvent ?? defaultErrorFromEvent;\n\tconst isVisibleAssistantDelta = options.isVisibleAssistantDelta ?? defaultIsVisibleAssistantDelta;\n\tlet account = await selectStoredAccount(options, now());\n\tlet freshChat = false;\n\n\twhile (true) {\n\t\tlet visibleAssistantDeltaEmitted = false;\n\t\ttry {\n\t\t\tconst attemptStream = await options.runAttempt(account, { freshChat });\n\t\t\tfor await (const event of attemptStream) {\n\t\t\t\tconst failure = errorFromEvent(event);\n\t\t\t\tif (failure !== undefined) throw failure;\n\t\t\t\tvisibleAssistantDeltaEmitted ||= isVisibleAssistantDelta(event);\n\t\t\t\tyield event;\n\t\t\t}\n\t\t\tif (!visibleAssistantDeltaEmitted) throw new CursorCliNoAssistantOutputError();\n\t\t\treturn;\n\t\t} catch (error) {\n\t\t\tconst classification = classify(errorInput(error));\n\t\t\tconst surfaced = new CursorCliFailoverError(classification, error, visibleAssistantDeltaEmitted);\n\t\t\tif (!isFailoverKind(classification)) throw surfaced;\n\n\t\t\tconst blocked = blockedAccount(account, classification, now());\n\t\t\tawait persistBlock(options.store, options.providerId, blocked);\n\t\t\tif (visibleAssistantDeltaEmitted) throw surfaced;\n\n\t\t\tconst nextAccount = await selectStoredAccount(options, now());\n\t\t\tyield notice(account.name, nextAccount.name);\n\t\t\taccount = nextAccount;\n\t\t\tfreshChat = true;\n\t\t}\n\t}\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/guardrails.d.ts

@@ -0,0 +1,89 @@
+import { type CursorCliOauthExecutionMode } from "./settings.ts";
+/**
+ * Guardrails for unattended Cursor CLI execution.
+ *
+ * The Cursor CLI runs its own tools the moment `--force` is on the argv, so
+ * that decision is never implicit: it requires the explicit
+ * `noApprovalAcknowledgedAt` acknowledgement, plan mode never forces, and a
+ * disabled force merely warns. Command denylists ride along through the
+ * per-account HOME's `cli-config.json`, strictly in the probe-proven shape
+ * (task 2: `permissions.deny` with exact full-command `Shell(...)` entries).
+ */
+/** Sandbox modes the installed CLI accepts (task 2 probe: allowed choices are exactly these). */
+export declare const CURSOR_CLI_OAUTH_SANDBOX_MODES: readonly ["enabled", "disabled"];
+export declare const CURSOR_CLI_OAUTH_NO_APPROVAL_EXPLANATION = "The Cursor CLI executes its own tools autonomously: with --force there is no senpi approval, no senpi sandboxing, and no tool-level audit for what it runs.";
+export declare const CURSOR_CLI_OAUTH_ACKNOWLEDGEMENT_STEP = "Set \"cursorCliOauthProvider.noApprovalAcknowledgedAt\" to the current ISO-8601 timestamp (for example \"2026-08-17T12:00:00.000Z\") in senpi settings to acknowledge this once.";
+/** One warning per session when force is disabled in agent mode (contracts block, task 18). */
+export declare const CURSOR_CLI_OAUTH_FORCE_DISABLED_WARNING = "cursor-cli-oauth: forceExecution is disabled in agent mode, so the Cursor CLI will auto-reject every tool call; set executionMode to \"plan\" for planning turns that do not need execution.";
+export type CursorCliGuardrailWarningCode = "force_execution_disabled" | "sandbox_mode_ignored" | "deny_command_rejected";
+export type CursorCliGuardrailWarning = {
+    readonly kind: "warning";
+    readonly code: CursorCliGuardrailWarningCode;
+    readonly message: string;
+};
+export type CursorCliExecutionRefusal = {
+    readonly kind: "refusal";
+    readonly code: "no_approval_acknowledgement_required";
+    readonly message: string;
+    readonly acknowledgementStep: string;
+};
+export type CursorCliGuardrailSession = {
+    /** Every warning emitted so far in this session; one-time gates live here. */
+    readonly warnings: readonly CursorCliGuardrailWarning[];
+    /** Emit a warning once per deduplication key; returns whether it was emitted. */
+    warn(code: CursorCliGuardrailWarningCode, message: string, key?: string): boolean;
+    /** Validate a sandbox mode against the probe-proven allowlist, warning once per rejected value. */
+    validateSandboxMode(value: string | undefined): string | undefined;
+};
+export declare function createCursorCliGuardrailSession(): CursorCliGuardrailSession;
+export type CursorCliExecutionPolicyInput = {
+    readonly forceExecution: boolean;
+    readonly noApprovalAcknowledgedAt: string | undefined;
+    readonly executionMode: CursorCliOauthExecutionMode;
+    readonly sandboxMode: string | undefined;
+};
+export type CursorCliExecutionDecision = {
+    readonly status: "refused";
+    readonly refusal: CursorCliExecutionRefusal;
+} | {
+    readonly status: "allowed";
+    readonly force: boolean;
+    readonly executionMode: CursorCliOauthExecutionMode;
+    readonly sandboxMode: string | undefined;
+    readonly denyCommands: readonly string[];
+    /** Warnings accumulated in the session so far (not only this decision). */
+    readonly warnings: readonly CursorCliGuardrailWarning[];
+};
+/** Typed refusal for an unacknowledged force attempt; never confused with a warning. */
+export declare class CursorCliExecutionRefusalError extends Error {
+    readonly code: "no_approval_acknowledgement_required";
+    readonly refusal: CursorCliExecutionRefusal;
+    constructor(refusal: CursorCliExecutionRefusal);
+}
+export declare function sanitizeCursorCliDenyCommands(entries: readonly string[], warn?: (message: string) => void): readonly string[];
+/**
+ * Decide whether a turn may run unattended.
+ *
+ * - `--force` is emitted only in agent mode, only when force is requested, and
+ *   only after `noApprovalAcknowledgedAt` is set; otherwise the decision is a
+ *   typed refusal naming the acknowledgement step.
+ * - Plan mode never emits `--force` (the CLI only plans), so it needs no
+ *   acknowledgement.
+ * - Force disabled in agent mode is allowed but warns once per session.
+ * - Unproven sandbox modes are ignored with one warning per distinct value.
+ */
+export declare function resolveCursorCliExecutionPolicy(input: CursorCliExecutionPolicyInput, session: CursorCliGuardrailSession, denyCommands?: readonly string[]): CursorCliExecutionDecision;
+/**
+ * Pre-spawn hook: (re-)apply the deny list to the sandbox HOME's
+ * `cli-config.json`.
+ *
+ * The CLI rewrites this file during every invocation (task 2 observed its own
+ * keys appearing and `cli-config.json.bad` sidecars for malformed content), so
+ * this must run immediately before each spawn, composing with the home-store
+ * prepare pass that re-writes `auth.json` on the same cadence. Writes only the
+ * probe-proven shape (`permissions.deny` with exact `Shell(<full command>)`
+ * entries) and preserves every CLI-owned key already present. Writes nothing
+ * when no deny commands are configured.
+ */
+export declare function applyCursorCliDenyConfig(home: string, denyCommands: readonly string[]): void;
+//# sourceMappingURL=guardrails.d.ts.map