@code-yeongyu/senpi 2026.8.16 → 2026.8.17

package/dist/core/cursor-exec-bridge-session.d.ts

@@ -0,0 +1,11 @@
+import type { Agent, AgentTool, AgentToolCall, BeforeToolCallResult } from "@earendil-works/pi-agent-core";
+type CursorBridgeAgent = Pick<Agent, "emitExternalEvent" | "signal">;
+export interface CursorExecBridgeSession {
+    getRegisteredTool(name: string): AgentTool | undefined;
+    preflightToolCall(toolCall: AgentToolCall, args: unknown): Promise<BeforeToolCallResult | undefined>;
+}
+export declare function createSessionCursorExecBridge(sessionRef: {
+    current?: CursorExecBridgeSession;
+}, getAgent: () => CursorBridgeAgent): import("@earendil-works/pi-ai").CursorExecHandlers;
+export {};
+//# sourceMappingURL=cursor-exec-bridge-session.d.ts.map

package/dist/core/cursor-exec-bridge-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-exec-bridge-session.d.ts","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAc,SAAS,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAGvH,KAAK,iBAAiB,GAAG,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,QAAQ,CAAC,CAAC;AAErE,MAAM,WAAW,uBAAuB;IACvC,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACvD,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CACrG;AAED,wBAAgB,6BAA6B,CAC5C,UAAU,EAAE;IAAE,OAAO,CAAC,EAAE,uBAAuB,CAAA;CAAE,EACjD,QAAQ,EAAE,MAAM,iBAAiB,sDAmBjC"}

package/dist/core/cursor-exec-bridge-session.js

@@ -0,0 +1,17 @@
+import { createCursorExecBridge } from "./cursor-exec-bridge.js";
+export function createSessionCursorExecBridge(sessionRef, getAgent) {
+    return createCursorExecBridge({
+        getTool: (name) => sessionRef.current?.getRegisteredTool(name),
+        preflightToolCall: async (event) => sessionRef.current?.preflightToolCall({
+            type: "toolCall",
+            id: event.toolCallId,
+            name: event.toolName,
+            arguments: event.input,
+        }, event.input),
+        emitEvent: (event) => {
+            void getAgent().emitExternalEvent(event);
+        },
+        getAbortSignal: () => getAgent().signal,
+    });
+}
+//# sourceMappingURL=cursor-exec-bridge-session.js.map

package/dist/core/cursor-exec-bridge-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-exec-bridge-session.js","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AASjE,MAAM,UAAU,6BAA6B,CAC5C,UAAiD,EACjD,QAAiC;IAEjC,OAAO,sBAAsB,CAAC;QAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC9D,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAClC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CACpC;YACC,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,SAAS,EAAE,KAAK,CAAC,KAAK;SACtB,EACD,KAAK,CAAC,KAAK,CACX;QACF,SAAS,EAAE,CAAC,KAAiB,EAAE,EAAE;YAChC,KAAK,QAAQ,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM;KACvC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Agent, AgentEvent, AgentTool, AgentToolCall, BeforeToolCallResult } from \"@earendil-works/pi-agent-core\";\nimport { createCursorExecBridge } from \"./cursor-exec-bridge.ts\";\n\ntype CursorBridgeAgent = Pick<Agent, \"emitExternalEvent\" | \"signal\">;\n\nexport interface CursorExecBridgeSession {\n\tgetRegisteredTool(name: string): AgentTool | undefined;\n\tpreflightToolCall(toolCall: AgentToolCall, args: unknown): Promise<BeforeToolCallResult | undefined>;\n}\n\nexport function createSessionCursorExecBridge(\n\tsessionRef: { current?: CursorExecBridgeSession },\n\tgetAgent: () => CursorBridgeAgent,\n) {\n\treturn createCursorExecBridge({\n\t\tgetTool: (name) => sessionRef.current?.getRegisteredTool(name),\n\t\tpreflightToolCall: async (event) =>\n\t\t\tsessionRef.current?.preflightToolCall(\n\t\t\t\t{\n\t\t\t\t\ttype: \"toolCall\",\n\t\t\t\t\tid: event.toolCallId,\n\t\t\t\t\tname: event.toolName,\n\t\t\t\t\targuments: event.input,\n\t\t\t\t},\n\t\t\t\tevent.input,\n\t\t\t),\n\t\temitEvent: (event: AgentEvent) => {\n\t\t\tvoid getAgent().emitExternalEvent(event);\n\t\t},\n\t\tgetAbortSignal: () => getAgent().signal,\n\t});\n}\n"]}

package/dist/core/cursor-exec-bridge.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Cursor exec-channel → local tool bridge.
+ *
+ * Cursor's agent protocol executes tools server-drivenly: mid-stream, the
+ * server sends exec frames and blocks until the client answers in band. The
+ * `cursor-agent` API dispatches those frames onto this bridge, which maps
+ * each frame's args onto the session's real tools (`read`, `bash`, `edit`,
+ * `write`, `grep`, `find`, `ls`, plus MCP/extension tools by name) and runs
+ * them through the same wrapped `AgentTool.execute` path model-issued calls
+ * use — so approvals, sandboxing, truncation, and rendering behavior stay
+ * identical.
+ *
+ * The arg translations here MUST mirror the display blocks the API
+ * synthesizes (`synthesizeCursorExecToolCall` call sites): the transcript
+ * shows one operation, so a different one must not run.
+ */
+import type { AgentEvent, AgentTool } from "@earendil-works/pi-agent-core";
+import { type CursorExecHandlers } from "@earendil-works/pi-ai";
+import type { ToolCallEvent, ToolCallEventResult } from "./extensions/types.ts";
+export interface CursorExecBridgeOptions {
+    /**
+     * Resolve an executable tool by name. Backed by the session's full tool
+     * registry (builtin + extension tools), not only the active set: Cursor
+     * drives its native tools (read/bash/grep/ls/write) over the exec channel
+     * regardless of which tools the request advertised.
+     */
+    getTool: (name: string) => AgentTool | undefined;
+    /**
+     * Surface tool lifecycle events to the host UI. Bridge-run tools bypass
+     * the agent loop's executor, so without these the live tool card for a
+     * synthesized call never resolves.
+     */
+    emitEvent?: (event: AgentEvent) => void;
+    /** Run the session's vetoable extension preflight before tool execution. */
+    preflightToolCall?: (event: ToolCallEvent) => Promise<ToolCallEventResult | undefined>;
+    /** Abort signal for in-flight bridge executions (the active run's signal). */
+    getAbortSignal?: () => AbortSignal | undefined;
+}
+/**
+ * Build the exec handlers passed to the `cursor-agent` API through the agent
+ * loop config. Handlers return bare `ToolResultMessage`s; the API derives the
+ * wire protobuf answer from them and pairs the transcript result.
+ *
+ * Deliberately absent handlers (the API answers with a typed refusal):
+ * - `delete`: senpi has no delete tool and the bridge must not mutate the
+ *   filesystem outside the tool/approval path.
+ * - `diagnostics`: no LSP tool in this fork.
+ * - `mcpApprovalPreflight`: approval decisions cannot be resolved without an
+ *   interactive prompt, so smart-mode probes are conservatively refused.
+ */
+export declare function createCursorExecBridge(options: CursorExecBridgeOptions): CursorExecHandlers;
+//# sourceMappingURL=cursor-exec-bridge.d.ts.map

package/dist/core/cursor-exec-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-exec-bridge.d.ts","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAiB,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EACN,KAAK,kBAAkB,EASvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,WAAW,uBAAuB;IACvC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IACjD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACxC,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACvF,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CAC/C;AA4GD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,kBAAkB,CA0F3F"}

package/dist/core/cursor-exec-bridge.js

@@ -0,0 +1,196 @@
+/**
+ * Cursor exec-channel → local tool bridge.
+ *
+ * Cursor's agent protocol executes tools server-drivenly: mid-stream, the
+ * server sends exec frames and blocks until the client answers in band. The
+ * `cursor-agent` API dispatches those frames onto this bridge, which maps
+ * each frame's args onto the session's real tools (`read`, `bash`, `edit`,
+ * `write`, `grep`, `find`, `ls`, plus MCP/extension tools by name) and runs
+ * them through the same wrapped `AgentTool.execute` path model-issued calls
+ * use — so approvals, sandboxing, truncation, and rendering behavior stay
+ * identical.
+ *
+ * The arg translations here MUST mirror the display blocks the API
+ * synthesizes (`synthesizeCursorExecToolCall` call sites): the transcript
+ * shows one operation, so a different one must not run.
+ */
+import { composeCursorShellCommand, cursorPiLimit, cursorPiLsPath, cursorPiReadArgs, cursorPiTimeout, omitUndefinedCursorArgs, validateToolArguments, } from "@earendil-works/pi-ai";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function errorResult(toolCallId, toolName, text) {
+    return {
+        role: "toolResult",
+        toolCallId,
+        toolName,
+        content: [{ type: "text", text }],
+        isError: true,
+        timestamp: Date.now(),
+    };
+}
+function emptyResult(toolCallId, toolName) {
+    return {
+        role: "toolResult",
+        toolCallId,
+        toolName,
+        content: [{ type: "text", text: "" }],
+        isError: false,
+        timestamp: Date.now(),
+    };
+}
+async function executeTool(options, toolName, toolCallId, args) {
+    const tool = options.getTool(toolName);
+    if (!tool) {
+        return errorResult(toolCallId, toolName, `Tool "${toolName}" is not available in this session`);
+    }
+    // Exec-frame translators write forms like `path: args.path || undefined`;
+    // a present `undefined` fails schema validation on optional fields even
+    // though omitting the key is valid.
+    const cleanArgs = omitUndefinedCursorArgs(args);
+    const toolCall = {
+        type: "toolCall",
+        id: toolCallId,
+        name: toolName,
+        arguments: cleanArgs,
+    };
+    let params;
+    try {
+        params = validateToolArguments(tool, toolCall);
+        if (tool.prepareArguments) {
+            params = tool.prepareArguments(params);
+        }
+    }
+    catch (error) {
+        return errorResult(toolCallId, toolName, error instanceof Error ? error.message : String(error));
+    }
+    options.emitEvent?.({ type: "tool_execution_start", toolCallId, toolName, args: cleanArgs });
+    try {
+        if (!isRecord(params)) {
+            throw new Error(`Tool "${toolName}" prepared non-object arguments`);
+        }
+        const preflight = await options.preflightToolCall?.({
+            type: "tool_call",
+            toolCallId,
+            toolName,
+            input: params,
+        });
+        if (preflight?.block) {
+            const message = preflight.reason || "Tool execution was blocked";
+            options.emitEvent?.({
+                type: "tool_execution_end",
+                toolCallId,
+                toolName,
+                result: { content: [{ type: "text", text: message }], details: undefined },
+                isError: true,
+            });
+            return errorResult(toolCallId, toolName, message);
+        }
+        const result = await tool.execute(toolCallId, params, options.getAbortSignal?.(), undefined);
+        const toolResult = {
+            role: "toolResult",
+            toolCallId,
+            toolName,
+            content: result.content ?? [],
+            details: result.details,
+            usage: result.usage,
+            isError: false,
+            timestamp: Date.now(),
+        };
+        options.emitEvent?.({ type: "tool_execution_end", toolCallId, toolName, result, isError: false });
+        return toolResult;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        options.emitEvent?.({
+            type: "tool_execution_end",
+            toolCallId,
+            toolName,
+            result: { content: [{ type: "text", text: message }], details: undefined },
+            isError: true,
+        });
+        return errorResult(toolCallId, toolName, message);
+    }
+}
+/**
+ * Build the exec handlers passed to the `cursor-agent` API through the agent
+ * loop config. Handlers return bare `ToolResultMessage`s; the API derives the
+ * wire protobuf answer from them and pairs the transcript result.
+ *
+ * Deliberately absent handlers (the API answers with a typed refusal):
+ * - `delete`: senpi has no delete tool and the bridge must not mutate the
+ *   filesystem outside the tool/approval path.
+ * - `diagnostics`: no LSP tool in this fork.
+ * - `mcpApprovalPreflight`: approval decisions cannot be resolved without an
+ *   interactive prompt, so smart-mode probes are conservatively refused.
+ */
+export function createCursorExecBridge(options) {
+    return {
+        read: async (args) => executeTool(options, "read", args.toolCallId, {
+            path: args.path,
+            offset: args.offset,
+            limit: args.limit,
+        }),
+        ls: async (args) => executeTool(options, "ls", args.toolCallId, { path: cursorPiLsPath(args.path) }),
+        grep: async (args) => executeTool(options, "grep", args.toolCallId, {
+            pattern: args.pattern,
+            path: args.path || undefined,
+            glob: args.glob || undefined,
+            ignoreCase: args.caseInsensitive === true ? true : undefined,
+        }),
+        write: async (args) => executeTool(options, "write", args.toolCallId, {
+            path: args.path,
+            content: args.fileText ?? new TextDecoder().decode(args.fileBytes ?? new Uint8Array()),
+        }),
+        shell: async (args) => executeTool(options, "bash", args.toolCallId, {
+            command: composeCursorShellCommand(args.command, args.workingDirectory || undefined),
+            timeout: args.timeout && args.timeout > 0 ? args.timeout : undefined,
+        }),
+        mcp: async (call) => {
+            const toolName = call.toolName || call.name;
+            const tool = options.getTool(toolName);
+            if (!tool) {
+                return errorResult(call.toolCallId, toolName, `Tool "${toolName}" is not registered in this session`);
+            }
+            return executeTool(options, toolName, call.toolCallId, call.args);
+        },
+        piRead: async (call) => {
+            const readArgs = cursorPiReadArgs(call.args.path, call.args.offset, call.args.limit);
+            // A present `limit: 0` reads zero lines; answer with empty output
+            // without running the tool rather than degrading into a full read.
+            if (readArgs === null)
+                return emptyResult(call.toolCallId, "read");
+            return executeTool(options, "read", call.toolCallId, readArgs);
+        },
+        piBash: async (call) => executeTool(options, "bash", call.toolCallId, {
+            command: call.args.command,
+            timeout: cursorPiTimeout(call.args.timeout),
+        }),
+        piEdit: async (call) => executeTool(options, "edit", call.toolCallId, {
+            path: call.args.path,
+            edits: call.args.edits.map((edit) => ({ oldText: edit.oldText, newText: edit.newText })),
+        }),
+        piWrite: async (call) => executeTool(options, "write", call.toolCallId, {
+            path: call.args.path,
+            content: call.args.content,
+        }),
+        piGrep: async (call) => executeTool(options, "grep", call.toolCallId, {
+            pattern: call.args.pattern,
+            path: call.args.path || undefined,
+            glob: call.args.glob || undefined,
+            ignoreCase: call.args.ignoreCase === true ? true : undefined,
+            literal: call.args.literal === true ? true : undefined,
+            context: call.args.context,
+            limit: cursorPiLimit(call.args.limit),
+        }),
+        piFind: async (call) => executeTool(options, "find", call.toolCallId, {
+            pattern: call.args.pattern,
+            path: call.args.path || undefined,
+            limit: cursorPiLimit(call.args.limit),
+        }),
+        piLs: async (call) => executeTool(options, "ls", call.toolCallId, {
+            path: cursorPiLsPath(call.args.path),
+            limit: cursorPiLimit(call.args.limit),
+        }),
+    };
+}
+//# sourceMappingURL=cursor-exec-bridge.js.map

package/dist/core/cursor-exec-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-exec-bridge.js","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAEN,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EAEvB,qBAAqB,GACrB,MAAM,uBAAuB,CAAC;AAuB/B,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB,EAAE,IAAY;IACtE,OAAO;QACN,IAAI,EAAE,YAAY;QAClB,UAAU;QACV,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB;IACxD,OAAO;QACN,IAAI,EAAE,YAAY;QAClB,UAAU;QACV,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,OAAgC,EAChC,QAAgB,EAChB,UAAkB,EAClB,IAA6B;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,QAAQ,oCAAoC,CAAC,CAAC;IACjG,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAkB;QAC/B,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,SAAS;KACpB,CAAC;IAEF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,iCAAiC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnD,IAAI,EAAE,WAAW;YACjB,UAAU;YACV,QAAQ;YACR,KAAK,EAAE,MAAM;SACb,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,IAAI,4BAA4B,CAAC;YACjE,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,EAAE,oBAAoB;gBAC1B,UAAU;gBACV,QAAQ;gBACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;gBAC1E,OAAO,EAAE,IAAI;aACb,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAsB;YACrC,IAAI,EAAE,YAAY;YAClB,UAAU;YACV,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QACF,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,EAAE,oBAAoB;YAC1B,UAAU;YACV,QAAQ;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;YAC1E,OAAO,EAAE,IAAI;SACb,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,OAAO;QACN,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC;QAEH,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAEpG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,UAAU,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;QAEH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,UAAU,EAAE,CAAC;SACtF,CAAC;QAEH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC;YACpF,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEH,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,QAAQ,qCAAqC,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;SAC3C,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SACxF,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACvB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;SAC1B,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5D,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACtD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;QAEH,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;YAC3C,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;KACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * Cursor exec-channel → local tool bridge.\n *\n * Cursor's agent protocol executes tools server-drivenly: mid-stream, the\n * server sends exec frames and blocks until the client answers in band. The\n * `cursor-agent` API dispatches those frames onto this bridge, which maps\n * each frame's args onto the session's real tools (`read`, `bash`, `edit`,\n * `write`, `grep`, `find`, `ls`, plus MCP/extension tools by name) and runs\n * them through the same wrapped `AgentTool.execute` path model-issued calls\n * use — so approvals, sandboxing, truncation, and rendering behavior stay\n * identical.\n *\n * The arg translations here MUST mirror the display blocks the API\n * synthesizes (`synthesizeCursorExecToolCall` call sites): the transcript\n * shows one operation, so a different one must not run.\n */\n\nimport type { AgentEvent, AgentTool, AgentToolCall } from \"@earendil-works/pi-agent-core\";\nimport {\n\ttype CursorExecHandlers,\n\tcomposeCursorShellCommand,\n\tcursorPiLimit,\n\tcursorPiLsPath,\n\tcursorPiReadArgs,\n\tcursorPiTimeout,\n\tomitUndefinedCursorArgs,\n\ttype ToolResultMessage,\n\tvalidateToolArguments,\n} from \"@earendil-works/pi-ai\";\nimport type { ToolCallEvent, ToolCallEventResult } from \"./extensions/types.ts\";\n\nexport interface CursorExecBridgeOptions {\n\t/**\n\t * Resolve an executable tool by name. Backed by the session's full tool\n\t * registry (builtin + extension tools), not only the active set: Cursor\n\t * drives its native tools (read/bash/grep/ls/write) over the exec channel\n\t * regardless of which tools the request advertised.\n\t */\n\tgetTool: (name: string) => AgentTool | undefined;\n\t/**\n\t * Surface tool lifecycle events to the host UI. Bridge-run tools bypass\n\t * the agent loop's executor, so without these the live tool card for a\n\t * synthesized call never resolves.\n\t */\n\temitEvent?: (event: AgentEvent) => void;\n\t/** Run the session's vetoable extension preflight before tool execution. */\n\tpreflightToolCall?: (event: ToolCallEvent) => Promise<ToolCallEventResult | undefined>;\n\t/** Abort signal for in-flight bridge executions (the active run's signal). */\n\tgetAbortSignal?: () => AbortSignal | undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction errorResult(toolCallId: string, toolName: string, text: string): ToolResultMessage {\n\treturn {\n\t\trole: \"toolResult\",\n\t\ttoolCallId,\n\t\ttoolName,\n\t\tcontent: [{ type: \"text\", text }],\n\t\tisError: true,\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nfunction emptyResult(toolCallId: string, toolName: string): ToolResultMessage {\n\treturn {\n\t\trole: \"toolResult\",\n\t\ttoolCallId,\n\t\ttoolName,\n\t\tcontent: [{ type: \"text\", text: \"\" }],\n\t\tisError: false,\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nasync function executeTool(\n\toptions: CursorExecBridgeOptions,\n\ttoolName: string,\n\ttoolCallId: string,\n\targs: Record<string, unknown>,\n): Promise<ToolResultMessage> {\n\tconst tool = options.getTool(toolName);\n\tif (!tool) {\n\t\treturn errorResult(toolCallId, toolName, `Tool \"${toolName}\" is not available in this session`);\n\t}\n\n\t// Exec-frame translators write forms like `path: args.path || undefined`;\n\t// a present `undefined` fails schema validation on optional fields even\n\t// though omitting the key is valid.\n\tconst cleanArgs = omitUndefinedCursorArgs(args);\n\tconst toolCall: AgentToolCall = {\n\t\ttype: \"toolCall\",\n\t\tid: toolCallId,\n\t\tname: toolName,\n\t\targuments: cleanArgs,\n\t};\n\n\tlet params: unknown;\n\ttry {\n\t\tparams = validateToolArguments(tool, toolCall);\n\t\tif (tool.prepareArguments) {\n\t\t\tparams = tool.prepareArguments(params);\n\t\t}\n\t} catch (error) {\n\t\treturn errorResult(toolCallId, toolName, error instanceof Error ? error.message : String(error));\n\t}\n\n\toptions.emitEvent?.({ type: \"tool_execution_start\", toolCallId, toolName, args: cleanArgs });\n\ttry {\n\t\tif (!isRecord(params)) {\n\t\t\tthrow new Error(`Tool \"${toolName}\" prepared non-object arguments`);\n\t\t}\n\t\tconst preflight = await options.preflightToolCall?.({\n\t\t\ttype: \"tool_call\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tinput: params,\n\t\t});\n\t\tif (preflight?.block) {\n\t\t\tconst message = preflight.reason || \"Tool execution was blocked\";\n\t\t\toptions.emitEvent?.({\n\t\t\t\ttype: \"tool_execution_end\",\n\t\t\t\ttoolCallId,\n\t\t\t\ttoolName,\n\t\t\t\tresult: { content: [{ type: \"text\", text: message }], details: undefined },\n\t\t\t\tisError: true,\n\t\t\t});\n\t\t\treturn errorResult(toolCallId, toolName, message);\n\t\t}\n\t\tconst result = await tool.execute(toolCallId, params, options.getAbortSignal?.(), undefined);\n\t\tconst toolResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tcontent: result.content ?? [],\n\t\t\tdetails: result.details,\n\t\t\tusage: result.usage,\n\t\t\tisError: false,\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t\toptions.emitEvent?.({ type: \"tool_execution_end\", toolCallId, toolName, result, isError: false });\n\t\treturn toolResult;\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\toptions.emitEvent?.({\n\t\t\ttype: \"tool_execution_end\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tresult: { content: [{ type: \"text\", text: message }], details: undefined },\n\t\t\tisError: true,\n\t\t});\n\t\treturn errorResult(toolCallId, toolName, message);\n\t}\n}\n\n/**\n * Build the exec handlers passed to the `cursor-agent` API through the agent\n * loop config. Handlers return bare `ToolResultMessage`s; the API derives the\n * wire protobuf answer from them and pairs the transcript result.\n *\n * Deliberately absent handlers (the API answers with a typed refusal):\n * - `delete`: senpi has no delete tool and the bridge must not mutate the\n *   filesystem outside the tool/approval path.\n * - `diagnostics`: no LSP tool in this fork.\n * - `mcpApprovalPreflight`: approval decisions cannot be resolved without an\n *   interactive prompt, so smart-mode probes are conservatively refused.\n */\nexport function createCursorExecBridge(options: CursorExecBridgeOptions): CursorExecHandlers {\n\treturn {\n\t\tread: async (args) =>\n\t\t\texecuteTool(options, \"read\", args.toolCallId, {\n\t\t\t\tpath: args.path,\n\t\t\t\toffset: args.offset,\n\t\t\t\tlimit: args.limit,\n\t\t\t}),\n\n\t\tls: async (args) => executeTool(options, \"ls\", args.toolCallId, { path: cursorPiLsPath(args.path) }),\n\n\t\tgrep: async (args) =>\n\t\t\texecuteTool(options, \"grep\", args.toolCallId, {\n\t\t\t\tpattern: args.pattern,\n\t\t\t\tpath: args.path || undefined,\n\t\t\t\tglob: args.glob || undefined,\n\t\t\t\tignoreCase: args.caseInsensitive === true ? true : undefined,\n\t\t\t}),\n\n\t\twrite: async (args) =>\n\t\t\texecuteTool(options, \"write\", args.toolCallId, {\n\t\t\t\tpath: args.path,\n\t\t\t\tcontent: args.fileText ?? new TextDecoder().decode(args.fileBytes ?? new Uint8Array()),\n\t\t\t}),\n\n\t\tshell: async (args) =>\n\t\t\texecuteTool(options, \"bash\", args.toolCallId, {\n\t\t\t\tcommand: composeCursorShellCommand(args.command, args.workingDirectory || undefined),\n\t\t\t\ttimeout: args.timeout && args.timeout > 0 ? args.timeout : undefined,\n\t\t\t}),\n\n\t\tmcp: async (call) => {\n\t\t\tconst toolName = call.toolName || call.name;\n\t\t\tconst tool = options.getTool(toolName);\n\t\t\tif (!tool) {\n\t\t\t\treturn errorResult(call.toolCallId, toolName, `Tool \"${toolName}\" is not registered in this session`);\n\t\t\t}\n\t\t\treturn executeTool(options, toolName, call.toolCallId, call.args);\n\t\t},\n\n\t\tpiRead: async (call) => {\n\t\t\tconst readArgs = cursorPiReadArgs(call.args.path, call.args.offset, call.args.limit);\n\t\t\t// A present `limit: 0` reads zero lines; answer with empty output\n\t\t\t// without running the tool rather than degrading into a full read.\n\t\t\tif (readArgs === null) return emptyResult(call.toolCallId, \"read\");\n\t\t\treturn executeTool(options, \"read\", call.toolCallId, readArgs);\n\t\t},\n\n\t\tpiBash: async (call) =>\n\t\t\texecuteTool(options, \"bash\", call.toolCallId, {\n\t\t\t\tcommand: call.args.command,\n\t\t\t\ttimeout: cursorPiTimeout(call.args.timeout),\n\t\t\t}),\n\n\t\tpiEdit: async (call) =>\n\t\t\texecuteTool(options, \"edit\", call.toolCallId, {\n\t\t\t\tpath: call.args.path,\n\t\t\t\tedits: call.args.edits.map((edit) => ({ oldText: edit.oldText, newText: edit.newText })),\n\t\t\t}),\n\n\t\tpiWrite: async (call) =>\n\t\t\texecuteTool(options, \"write\", call.toolCallId, {\n\t\t\t\tpath: call.args.path,\n\t\t\t\tcontent: call.args.content,\n\t\t\t}),\n\n\t\tpiGrep: async (call) =>\n\t\t\texecuteTool(options, \"grep\", call.toolCallId, {\n\t\t\t\tpattern: call.args.pattern,\n\t\t\t\tpath: call.args.path || undefined,\n\t\t\t\tglob: call.args.glob || undefined,\n\t\t\t\tignoreCase: call.args.ignoreCase === true ? true : undefined,\n\t\t\t\tliteral: call.args.literal === true ? true : undefined,\n\t\t\t\tcontext: call.args.context,\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\n\t\tpiFind: async (call) =>\n\t\t\texecuteTool(options, \"find\", call.toolCallId, {\n\t\t\t\tpattern: call.args.pattern,\n\t\t\t\tpath: call.args.path || undefined,\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\n\t\tpiLs: async (call) =>\n\t\t\texecuteTool(options, \"ls\", call.toolCallId, {\n\t\t\t\tpath: cursorPiLsPath(call.args.path),\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\t};\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/account-command.d.ts

@@ -0,0 +1,28 @@
+import type { Credential } from "@earendil-works/pi-ai";
+import type { ExtensionAPI } from "../../types.ts";
+import { type CursorCliGenerationGuard } from "./diagnostics.ts";
+import { importLocalCursorCredential, type LocalCursorImportDeps } from "./oauth-login.ts";
+import { type CursorCliSessionRouter } from "./session-router.ts";
+import { type CursorCliOauthProviderSettings } from "./settings.ts";
+/** Injectable seams; every default resolves real on-disk state at invocation time. */
+export type CursorCliAccountCommandDeps = {
+    readonly loadSettings?: (cwd: string) => CursorCliOauthProviderSettings;
+    readonly router?: CursorCliSessionRouter;
+    readonly resolveExecutable?: (settings: CursorCliOauthProviderSettings) => string;
+    readonly probeVersion?: (executable: string) => Promise<string>;
+    readonly readNativeCredential?: () => Credential | undefined | Promise<Credential | undefined>;
+    readonly importCredential?: typeof importLocalCursorCredential;
+    readonly importDeps?: LocalCursorImportDeps;
+    /** Acknowledgement persistence seam; the default read-modify-writes the global settings file. */
+    readonly persistAcknowledgement?: (cwd: string, acknowledgedAt: string) => void;
+    readonly now?: () => number;
+    readonly generation?: CursorCliGenerationGuard;
+};
+/**
+ * Registers `/cursor-account` plus the reload/shutdown teardown for this
+ * extension generation: the command reads account state fresh from the
+ * credential store on every invocation, and every deferred continuation is
+ * fenced so a retired generation is never touched after a reload.
+ */
+export declare function registerCursorCliAccountCommand(pi: ExtensionAPI, deps?: CursorCliAccountCommandDeps): void;
+//# sourceMappingURL=account-command.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/account-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-command.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/account-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAA2B,MAAM,gBAAgB,CAAC;AAW5E,OAAO,EACN,KAAK,wBAAwB,EAK7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGN,2BAA2B,EAC3B,KAAK,qBAAqB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EACN,KAAK,8BAA8B,EAGnC,MAAM,eAAe,CAAC;AAEvB,sFAAsF;AACtF,MAAM,MAAM,2BAA2B,GAAG;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,8BAA8B,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,8BAA8B,KAAK,MAAM,CAAC;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAC/F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,2BAA2B,CAAC;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAC5C,iGAAiG;IACjG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;CAC/C,CAAC;AAiCF;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,GAAE,2BAAgC,GAAG,IAAI,CAoD9G"}

package/dist/core/extensions/builtin/cursor-cli-oauth/account-command.js

@@ -0,0 +1,278 @@
+import { emitProviderAccountsChanged } from "../claude-sdk-oauth/account-events.js";
+import { emptyCredential, listAccounts, pinAccount, removeAccount, } from "./accounts.js";
+import { selectAccount } from "./affinity.js";
+import { collectCursorCliStatus, NATIVE_CURSOR_PROVIDER_ID, registerCursorCliShutdownSafety, renderCursorCliStatus, } from "./diagnostics.js";
+import { CURSOR_CLI_OAUTH_PROVIDER_ID, confirmCursorCliNoApprovalAcknowledgement, importLocalCursorCredential, } from "./oauth-login.js";
+import { cursorCliSessionRouter } from "./session-router.js";
+import { loadCursorCliOauthProviderSettingsFromDisk, persistCursorCliNoApprovalAcknowledgement, } from "./settings.js";
+const USAGE = "Usage: /cursor-account [list | add | remove <name> | pin <name> | unpin | import | acknowledge | status]";
+function asCursorCredential(value) {
+    return value !== undefined && value.type === "oauth" ? value : emptyCredential();
+}
+function parseArgs(rawArgs) {
+    return rawArgs.trim().split(/\s+/).filter(Boolean);
+}
+function slotStatus(slot, now) {
+    if (slot.blockReason === "auth_error")
+        return "blocked until re-login";
+    if (slot.blockedUntil !== undefined && slot.blockedUntil > now) {
+        return `blocked until ${new Date(slot.blockedUntil).toISOString()} (${slot.blockReason ?? "rate_limit"})`;
+    }
+    return "available";
+}
+function authEventMessage(event) {
+    if (event === null || typeof event !== "object")
+        return "Cursor CLI (OAuth) authentication update.";
+    const value = event;
+    if (value.type === "auth_url" && typeof value.url === "string") {
+        return `Open this URL to authorize Cursor CLI (OAuth):\n${value.url}`;
+    }
+    if (value.type === "device_code" && typeof value.verificationUri === "string") {
+        return `Open this URL to authorize Cursor CLI (OAuth):\n${value.verificationUri}`;
+    }
+    return typeof value.message === "string" ? value.message : "Cursor CLI (OAuth) authentication update.";
+}
+/**
+ * Registers `/cursor-account` plus the reload/shutdown teardown for this
+ * extension generation: the command reads account state fresh from the
+ * credential store on every invocation, and every deferred continuation is
+ * fenced so a retired generation is never touched after a reload.
+ */
+export function registerCursorCliAccountCommand(pi, deps = {}) {
+    const loadSettings = deps.loadSettings ?? ((cwd) => loadCursorCliOauthProviderSettingsFromDisk(cwd));
+    const now = deps.now ?? Date.now;
+    // One guard per registration: a reload rebuilds the extension and gets a
+    // fresh fence, while the child registry stays process-wide.
+    const generation = registerCursorCliShutdownSafety(pi, { generation: deps.generation });
+    pi.registerCommand("cursor-account", {
+        description: "List and manage Cursor CLI (OAuth) accounts.",
+        argumentHint: "[list | add | remove <name> | pin <name> | unpin | import | acknowledge | status]",
+        handler: async (rawArgs, ctx) => {
+            try {
+                const args = parseArgs(rawArgs);
+                const action = args[0] ?? "list";
+                if (action === "list") {
+                    showAccounts(ctx, loadSettings(ctx.cwd), generation, now);
+                    return;
+                }
+                if (action === "add") {
+                    await addAccount(ctx);
+                    return;
+                }
+                if (action === "remove") {
+                    await removeNamedAccount(ctx, args[1]);
+                    return;
+                }
+                if (action === "pin" && args[1] !== undefined) {
+                    await pinNamedAccount(ctx, args[1]);
+                    return;
+                }
+                if (action === "unpin") {
+                    await unpinAccount(ctx);
+                    return;
+                }
+                if (action === "import") {
+                    await importAccount(ctx, deps);
+                    return;
+                }
+                if (action === "acknowledge") {
+                    await acknowledgeNoApproval(ctx, deps, generation);
+                    return;
+                }
+                if (action === "status") {
+                    await showStatus(ctx, deps, { loadSettings, generation, now });
+                    return;
+                }
+                ctx.ui.notify(USAGE, "error");
+            }
+            catch (error) {
+                ctx.ui.notify(error instanceof Error ? error.message : String(error), "error");
+            }
+        },
+    });
+}
+function showAccounts(ctx, settings, generation, now) {
+    const credential = asCursorCredential(ctx.modelRegistry.authStorage.get(CURSOR_CLI_OAUTH_PROVIDER_ID));
+    const accounts = listAccounts(credential);
+    const pinned = settings.pinnedAccount ?? credential.pinned;
+    const pinSource = settings.pinnedAccount !== undefined ? "settings" : "stored";
+    let affinityPick;
+    let affinityError;
+    if (accounts.length > 0) {
+        try {
+            affinityPick = selectAccount(accounts, {
+                sessionId: ctx.sessionManager.getSessionId(),
+                pinnedAccount: pinned,
+                now: now(),
+            }).name;
+        }
+        catch (error) {
+            affinityError = error instanceof Error ? error.message : String(error);
+        }
+    }
+    const lines = ["Cursor CLI (OAuth) accounts:"];
+    if (accounts.length === 0)
+        lines.push("  (none)");
+    for (const account of accounts) {
+        const states = [account.name, account.source, slotStatus(account, now())];
+        if (account.name === pinned)
+            states.push("pinned");
+        if (account.name === affinityPick)
+            states.push("affinity pick");
+        lines.push(`  ${states.join(" | ")}`);
+    }
+    lines.push(`Pinned account: ${pinned === undefined ? "none" : `${pinned} (${pinSource})`}`);
+    lines.push(`Affinity pick: ${affinityPick ?? (affinityError ? `unavailable - ${affinityError}` : "none")}`);
+    generation.runFencedSync(ctx, () => ctx.ui.notify(lines.join("\n"), "info"));
+}
+async function addAccount(ctx) {
+    if (!ctx.hasUI) {
+        ctx.ui.notify("/cursor-account add requires an interactive UI.", "error");
+        return;
+    }
+    try {
+        await ctx.modelRegistry.modelRuntime.login(CURSOR_CLI_OAUTH_PROVIDER_ID, "oauth", {
+            signal: ctx.signal,
+            prompt: async (prompt) => {
+                const answer = await ctx.ui.input(prompt.message);
+                if (answer === undefined)
+                    throw new Error("Login cancelled");
+                return answer;
+            },
+            notify: (event) => ctx.ui.notify(authEventMessage(event), "info"),
+        });
+        emitProviderAccountsChanged(CURSOR_CLI_OAUTH_PROVIDER_ID);
+        ctx.ui.notify("Cursor CLI (OAuth) account added.", "info");
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (message !== "Login cancelled") {
+            ctx.ui.notify(`Failed to add Cursor CLI (OAuth) account: ${message}`, "error");
+        }
+    }
+}
+async function removeNamedAccount(ctx, name) {
+    if (!name) {
+        ctx.ui.notify("Usage: /cursor-account remove <name>", "error");
+        return;
+    }
+    let removed = false;
+    try {
+        await ctx.modelRegistry.authStorage.modify(CURSOR_CLI_OAUTH_PROVIDER_ID, async (current) => {
+            const credential = asCursorCredential(current);
+            if (!listAccounts(credential).some((account) => account.name === name))
+                return current;
+            removed = true;
+            return removeAccount(credential, name);
+        });
+    }
+    catch (error) {
+        ctx.ui.notify(error instanceof Error ? error.message : String(error), "error");
+        return;
+    }
+    if (!removed) {
+        ctx.ui.notify(`Cursor CLI (OAuth) account '${name}' does not exist.`, "error");
+        return;
+    }
+    emitProviderAccountsChanged(CURSOR_CLI_OAUTH_PROVIDER_ID);
+    ctx.ui.notify(`Removed Cursor CLI (OAuth) account: ${name}.`, "info");
+}
+async function pinNamedAccount(ctx, name) {
+    try {
+        await ctx.modelRegistry.authStorage.modify(CURSOR_CLI_OAUTH_PROVIDER_ID, async (current) => {
+            const credential = asCursorCredential(current);
+            if (!listAccounts(credential).some((account) => account.name === name)) {
+                throw new Error(`Cursor CLI (OAuth) account '${name}' does not exist.`);
+            }
+            return pinAccount(credential, name);
+        });
+    }
+    catch (error) {
+        ctx.ui.notify(error instanceof Error ? error.message : String(error), "error");
+        return;
+    }
+    emitProviderAccountsChanged(CURSOR_CLI_OAUTH_PROVIDER_ID);
+    ctx.ui.notify(`Pinned Cursor CLI (OAuth) account: ${name}.`, "info");
+}
+async function unpinAccount(ctx) {
+    let hadPin = false;
+    try {
+        await ctx.modelRegistry.authStorage.modify(CURSOR_CLI_OAUTH_PROVIDER_ID, async (current) => {
+            const credential = asCursorCredential(current);
+            if (credential.pinned === undefined)
+                return current;
+            hadPin = true;
+            const { pinned: _pinned, ...unpinned } = credential;
+            return unpinned;
+        });
+    }
+    catch (error) {
+        ctx.ui.notify(error instanceof Error ? error.message : String(error), "error");
+        return;
+    }
+    if (!hadPin) {
+        ctx.ui.notify("No stored Cursor CLI (OAuth) account pin is set.", "info");
+        return;
+    }
+    emitProviderAccountsChanged(CURSOR_CLI_OAUTH_PROVIDER_ID);
+    ctx.ui.notify("Unpinned Cursor CLI (OAuth) account.", "info");
+}
+async function importAccount(ctx, deps) {
+    const importCredential = deps.importCredential ?? importLocalCursorCredential;
+    const importDeps = { ...deps.importDeps };
+    if (importDeps.onPrompt === undefined && ctx.hasUI) {
+        importDeps.onPrompt = async (prompt) => {
+            const answer = await ctx.ui.input(prompt.message);
+            if (answer === undefined)
+                throw new Error("Import cancelled");
+            return answer;
+        };
+    }
+    let importedName;
+    try {
+        await ctx.modelRegistry.authStorage.modify(CURSOR_CLI_OAUTH_PROVIDER_ID, async (current) => {
+            const before = asCursorCredential(current);
+            const updated = await importCredential(before, importDeps);
+            const existing = new Set(listAccounts(before).map((account) => account.name));
+            importedName = listAccounts(updated).find((account) => !existing.has(account.name))?.name;
+            return updated;
+        });
+    }
+    catch (error) {
+        ctx.ui.notify(`Failed to import local Cursor credential: ${error instanceof Error ? error.message : String(error)}`, "error");
+        return;
+    }
+    emitProviderAccountsChanged(CURSOR_CLI_OAUTH_PROVIDER_ID);
+    ctx.ui.notify(`Imported local Cursor credential as '${importedName ?? "a new account"}' (copied into this provider's store).`, "info");
+}
+async function acknowledgeNoApproval(ctx, deps, generation) {
+    if (!ctx.hasUI) {
+        ctx.ui.notify("/cursor-account acknowledge requires an interactive UI.", "error");
+        return;
+    }
+    const persist = deps.persistAcknowledgement ?? persistCursorCliNoApprovalAcknowledgement;
+    const acknowledgedAt = await confirmCursorCliNoApprovalAcknowledgement(async (ask) => (await ctx.ui.input(ask.message)) ?? "", () => new Date((deps.now ?? Date.now)()));
+    if (acknowledgedAt === undefined) {
+        generation.runFencedSync(ctx, () => ctx.ui.notify("No acknowledgement written: unattended Cursor CLI execution stays off until you acknowledge.", "info"));
+        return;
+    }
+    persist(ctx.cwd, acknowledgedAt);
+    generation.runFencedSync(ctx, () => ctx.ui.notify(`Acknowledged unattended Cursor CLI tool execution at ${acknowledgedAt}.`, "info"));
+}
+async function showStatus(ctx, deps, bound) {
+    // Context reads happen before any await; the render continuation is fenced
+    // so a reload during the version probe can never touch a retired context.
+    const sessionId = ctx.sessionManager.getSessionId();
+    const report = await collectCursorCliStatus({
+        sessionId,
+        settings: bound.loadSettings(ctx.cwd),
+        readCredential: () => ctx.modelRegistry.authStorage.get(CURSOR_CLI_OAUTH_PROVIDER_ID),
+        readNativeCredential: deps.readNativeCredential ?? (() => ctx.modelRegistry.authStorage.get(NATIVE_CURSOR_PROVIDER_ID)),
+        router: deps.router ?? cursorCliSessionRouter,
+        resolveExecutable: deps.resolveExecutable,
+        probeVersion: deps.probeVersion,
+        now: bound.now,
+    });
+    bound.generation.runFencedSync(ctx, () => ctx.ui.notify(renderCursorCliStatus(report), "info"));
+}
+//# sourceMappingURL=account-command.js.map