@code-yeongyu/senpi 2026.8.16 → 2026.8.17

package/dist/core/extensions/builtin/cursor-cli-oauth/diagnostics.js

@@ -0,0 +1,362 @@
+import { emptyCredential, listAccounts } from "./accounts.js";
+import { selectAccount } from "./affinity.js";
+import { CursorAgentNotInstalledError, defaultCursorAgentExecutableDeps, probeCursorAgentVersion, resolveCursorAgentExecutable, } from "./executable.js";
+import { cursorCliSessionRouter } from "./session-router.js";
+import { CURSOR_CLI_ABORT_GRACE_MS, spawnCursorCli, } from "./transport.js";
+/** Minimum known-good cursor-agent version; below it senpi warns once per session but never blocks. */
+export const CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION = "2026.08.11";
+/** This lane always authenticates through per-account sandboxed HOME file stores. */
+export const CURSOR_CLI_STATUS_LANE = "file-store";
+/** senpi never delegates compaction on this lane, so it is always the context owner. */
+export const CURSOR_CLI_STATUS_CONTEXT_OWNER = "senpi";
+/** The native Cursor provider id; the recommended default when both providers are configured. */
+export const NATIVE_CURSOR_PROVIDER_ID = "cursor";
+function asCursorCredential(value) {
+    return value !== undefined && value.type === "oauth" ? value : emptyCredential();
+}
+function isUsableOAuthCredential(value) {
+    return value !== undefined && value.type === "oauth" && typeof value.access === "string" && value.access.length > 0;
+}
+export function parseCursorCliVersion(version) {
+    const match = /^v?(\d{1,4})\.(\d{1,2})\.(\d{1,2})/.exec(version.trim());
+    if (!match)
+        return undefined;
+    return { year: Number(match[1]), month: Number(match[2]), day: Number(match[3]) };
+}
+/** Compares two `YYYY.MM.DD[-suffix]` version strings; undefined when either cannot be parsed. */
+export function compareCursorCliVersions(version, floor) {
+    const parsed = parseCursorCliVersion(version);
+    const baseline = parseCursorCliVersion(floor);
+    if (parsed === undefined || baseline === undefined)
+        return undefined;
+    const left = [parsed.year, parsed.month, parsed.day];
+    const right = [baseline.year, baseline.month, baseline.day];
+    for (let index = 0; index < 3; index += 1) {
+        if (left[index] !== right[index])
+            return left[index] < right[index] ? -1 : 1;
+    }
+    return 0;
+}
+function blockWindowFor(account, now) {
+    if (account.blockReason === "auth_error") {
+        return { account: account.name, reason: "auth_error", blockedUntil: undefined };
+    }
+    if (account.blockedUntil !== undefined && account.blockedUntil > now) {
+        return { account: account.name, reason: "rate_limit", blockedUntil: account.blockedUntil };
+    }
+    return undefined;
+}
+const defaultResolveExecutable = (settings) => resolveCursorAgentExecutable({
+    ...defaultCursorAgentExecutableDeps(),
+    settings: { executablePath: settings.executablePath },
+});
+/**
+ * Collects the status snapshot. Account data is read fresh from the credential
+ * store on every call - never memoized - so the rendered state always matches
+ * the store even after concurrent logins, removals, or failover blocks. Only
+ * account names and metadata are extracted; tokens never enter the report.
+ */
+export async function collectCursorCliStatus(deps) {
+    const now = deps.now ?? Date.now;
+    const credential = asCursorCredential(await deps.readCredential());
+    const accounts = listAccounts(credential);
+    const pinnedAccount = deps.settings.pinnedAccount ?? credential.pinned;
+    const record = (deps.router ?? cursorCliSessionRouter).getRecord(deps.sessionId);
+    let selectedAccount = record?.accountName;
+    if (selectedAccount === undefined && accounts.length > 0) {
+        try {
+            selectedAccount = selectAccount(accounts, {
+                sessionId: deps.sessionId,
+                pinnedAccount,
+                now: now(),
+            }).name;
+        }
+        catch {
+            // Every account is blocked; report no selection instead of failing status.
+        }
+    }
+    let executablePath;
+    let executableProblem;
+    try {
+        executablePath = (deps.resolveExecutable ?? defaultResolveExecutable)(deps.settings);
+    }
+    catch (error) {
+        executableProblem = error instanceof Error ? error.message : String(error);
+        if (!(error instanceof CursorAgentNotInstalledError))
+            executablePath = undefined;
+    }
+    let executableVersion;
+    if (executablePath !== undefined) {
+        try {
+            executableVersion = await (deps.probeVersion ?? probeCursorAgentVersion)(executablePath);
+        }
+        catch {
+            // Version unknown; the floor warning only applies to parseable versions.
+        }
+    }
+    const comparison = executableVersion === undefined
+        ? undefined
+        : compareCursorCliVersions(executableVersion, CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION);
+    const nativeCredential = deps.readNativeCredential === undefined ? undefined : await deps.readNativeCredential();
+    return {
+        lane: CURSOR_CLI_STATUS_LANE,
+        selectedAccount,
+        pinnedAccount,
+        chatId: record?.chatId,
+        lastModel: record?.lastModel,
+        contextOwner: CURSOR_CLI_STATUS_CONTEXT_OWNER,
+        executablePath,
+        executableVersion,
+        minimumKnownGoodVersion: CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION,
+        belowMinimumKnownGood: comparison !== undefined && comparison < 0,
+        executableProblem,
+        blockWindows: accounts
+            .map((account) => blockWindowFor(account, now()))
+            .filter((window) => window !== undefined),
+        accountNames: accounts.map((account) => account.name),
+        nativeCursorConfigured: isUsableOAuthCredential(nativeCredential),
+    };
+}
+/** Pure renderer: names and metadata only, never token material. */
+export function renderCursorCliStatus(report) {
+    const lines = ["Cursor CLI (OAuth) status:"];
+    lines.push(`  Auth lane: ${report.lane}`);
+    lines.push(`  Context owner: ${report.contextOwner}`);
+    lines.push(`  Selected account: ${report.selectedAccount === undefined
+        ? "none"
+        : report.selectedAccount === report.pinnedAccount
+            ? `${report.selectedAccount} (pinned)`
+            : report.selectedAccount}`);
+    lines.push(`  Chat id: ${report.chatId ?? "none (no turns yet on this session)"}`);
+    lines.push(`  Last model: ${report.lastModel ?? "none"}`);
+    if (report.executableProblem !== undefined) {
+        lines.push(`  Executable: not installed - ${report.executableProblem}`);
+    }
+    else {
+        lines.push(`  Executable: ${report.executablePath ?? "not installed"}`);
+    }
+    if (report.executableVersion !== undefined)
+        lines.push(`  Version: ${report.executableVersion}`);
+    if (report.belowMinimumKnownGood) {
+        lines.push(`  WARNING: cursor-agent ${report.executableVersion} is below the minimum known-good ${report.minimumKnownGoodVersion}; upgrade recommended`);
+    }
+    if (report.blockWindows.length === 0) {
+        lines.push("  Block windows: none");
+    }
+    else {
+        lines.push("  Block windows:");
+        for (const window of report.blockWindows) {
+            lines.push(window.blockedUntil === undefined
+                ? `    ${window.account}: ${window.reason}, until re-login`
+                : `    ${window.account}: ${window.reason}, expires ${new Date(window.blockedUntil).toISOString()}`);
+        }
+    }
+    if (report.nativeCursorConfigured) {
+        lines.push(`  Recommended default: the native '${NATIVE_CURSOR_PROVIDER_ID}' provider is configured; use this Cursor CLI (OAuth) lane as the fallback when the native path misbehaves.`);
+    }
+    return lines.join("\n");
+}
+/**
+ * A reload retires this extension generation (`AgentSession.reload()` then
+ * invalidates the old runner) while timers and promise continuations captured
+ * by it are still armed; every `ExtensionContext` getter then throws
+ * "stale extension generation after reload". The context carries no liveness
+ * flag, so a retired generation is only observable by probing a getter.
+ */
+export function isCursorCliContextRetired(ctx) {
+    try {
+        ctx.isIdle();
+        return false;
+    }
+    catch {
+        return true;
+    }
+}
+/** Per-registration generation fence; one per extension registration (a reload builds a new one). */
+export class CursorCliGenerationGuard {
+    constructor() {
+        this.retired = false;
+        this.timers = new Set();
+    }
+    isRetired() {
+        return this.retired;
+    }
+    retire(reason) {
+        if (this.retired)
+            return;
+        this.retired = true;
+        this.retirementReason = `extension generation retired (${reason})`;
+    }
+    onDropped(reporter) {
+        this.droppedReporter = reporter;
+    }
+    /** Arms a timer the shutdown path cancels; arming after retirement is a no-op by construction. */
+    setTrackedTimeout(callback, delayMs) {
+        const timer = this.armTracked(callback, delayMs);
+        return () => {
+            if (timer !== undefined)
+                this.cancelTimer(timer);
+        };
+    }
+    /** Cancels every armed timer; returns how many were pending. */
+    clearTrackedTimers() {
+        const pending = this.timers.size;
+        for (const timer of this.timers)
+            clearTimeout(timer);
+        this.timers.clear();
+        return pending;
+    }
+    /**
+     * Runs a deferred continuation behind the generation fence. A dropped
+     * continuation is reported, never silently presented as completed.
+     */
+    async runFenced(ctx, work) {
+        const blockedReason = this.retirementReasonFor(ctx);
+        if (blockedReason !== undefined) {
+            this.reportDropped("deferred continuation", blockedReason);
+            return { status: "dropped", reason: blockedReason };
+        }
+        return { status: "completed", value: await work(ctx) };
+    }
+    /** Synchronous variant for continuations that only touch the context once, after an outer await. */
+    runFencedSync(ctx, work) {
+        const blockedReason = this.retirementReasonFor(ctx);
+        if (blockedReason !== undefined) {
+            this.reportDropped("deferred continuation", blockedReason);
+            return { ran: false };
+        }
+        work();
+        return { ran: true };
+    }
+    defer(ctx, work, delayMs = 0) {
+        const fire = () => this.runFenced(ctx, work);
+        const timer = this.armTracked(() => {
+            // The timer path has no caller to receive a rejection (senpi #866 crash
+            // class), so a post-fence failure is reported instead of escaping to the
+            // timer queue.
+            void fire().catch((error) => {
+                this.reportDropped("deferred continuation", `failed after the retirement check: ${error instanceof Error ? error.message : String(error)}`);
+            });
+        }, delayMs);
+        return {
+            fire,
+            cancel: () => {
+                if (timer !== undefined)
+                    this.cancelTimer(timer);
+            },
+        };
+    }
+    armTracked(callback, delayMs) {
+        if (this.retired)
+            return undefined;
+        const timer = setTimeout(() => {
+            this.timers.delete(timer);
+            callback();
+        }, delayMs);
+        this.timers.add(timer);
+        return timer;
+    }
+    cancelTimer(timer) {
+        clearTimeout(timer);
+        this.timers.delete(timer);
+    }
+    retirementReasonFor(ctx) {
+        if (this.retired)
+            return this.retirementReason ?? "extension generation retired";
+        if (isCursorCliContextRetired(ctx))
+            return "extension context retired by reload";
+        return undefined;
+    }
+    reportDropped(description, reason) {
+        this.droppedReporter?.(description, reason);
+    }
+}
+/** Process-group kill on the tracked pid, mirroring transport.ts's mechanism (never name matching). */
+function killCursorCliProcessGroup(pid, signal) {
+    try {
+        if (process.platform === "win32")
+            process.kill(pid, signal);
+        else
+            process.kill(-pid, signal);
+    }
+    catch (error) {
+        if (error.code !== "ESRCH")
+            throw error;
+    }
+}
+/**
+ * Registry of live children this extension spawned. Entries leave the registry
+ * when their transport run settles, so `killAll` only ever signals live
+ * process groups and is idempotent across repeated interruptions.
+ */
+export class CursorCliChildRegistry {
+    constructor() {
+        this.children = new Map();
+    }
+    track(handle) {
+        this.children.set(handle.pid, { pid: handle.pid, abort: () => handle.abort(), killed: false });
+        void handle.completed.then(() => this.children.delete(handle.pid), () => this.children.delete(handle.pid));
+        return handle;
+    }
+    livePids() {
+        return [...this.children.keys()];
+    }
+    /** SIGTERMs every tracked process group with a SIGKILL escalation; returns the pids it signalled. */
+    killAll(graceMs = CURSOR_CLI_ABORT_GRACE_MS) {
+        const signalled = [];
+        for (const entry of this.children.values()) {
+            if (entry.killed)
+                continue;
+            entry.killed = true;
+            signalled.push(entry.pid);
+            // Teardown must never throw into the shutdown event loop; individual
+            // failures are contained per child, and the SIGKILL escalation below
+            // still runs for that pid.
+            try {
+                entry.abort();
+            }
+            catch {
+                // Deliberate: shutdown stays idempotent even if one child misbehaves.
+            }
+            try {
+                killCursorCliProcessGroup(entry.pid, "SIGTERM");
+            }
+            catch {
+                // Deliberate: see above.
+            }
+            const escalation = setTimeout(() => killCursorCliProcessGroup(entry.pid, "SIGKILL"), graceMs);
+            escalation.unref?.();
+        }
+        return signalled;
+    }
+}
+/** Shared registry; child pids are process-wide resources, so one registry serves every generation. */
+export const cursorCliChildRegistry = new CursorCliChildRegistry();
+/** Spawns one cursor-agent run through the transport and registers it for shutdown teardown. */
+export function spawnCursorCliTracked(input, registry = cursorCliChildRegistry) {
+    return registry.track(spawnCursorCli(input));
+}
+/**
+ * Installs the `session_shutdown`/`session_extensions_removed` teardown: kill
+ * every tracked child's process group, cancel the generation's pending timers,
+ * and retire the generation so every deferred continuation is fenced. Safe to
+ * fire repeatedly; a retired generation is never resurrected (a reload builds a
+ * new registration with a fresh guard).
+ */
+export function registerCursorCliShutdownSafety(pi, deps = {}) {
+    const generation = deps.generation ?? new CursorCliGenerationGuard();
+    const registry = deps.registry ?? cursorCliChildRegistry;
+    const teardown = (reason) => {
+        registry.killAll();
+        generation.clearTrackedTimers();
+        generation.retire(reason);
+    };
+    pi.on("session_shutdown", (event) => {
+        teardown(event.reason);
+    });
+    pi.on("session_extensions_removed", (event) => {
+        teardown(event.reason);
+    });
+    return generation;
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/diagnostics.ts"],"names":[],"mappings":"AAOA,OAAO,EAA4D,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACN,4BAA4B,EAC5B,gCAAgC,EAChC,uBAAuB,EACvB,4BAA4B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAA+B,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,EACN,yBAAyB,EAGzB,cAAc,GACd,MAAM,gBAAgB,CAAC;AAExB,uGAAuG;AACvG,MAAM,CAAC,MAAM,qCAAqC,GAAG,YAAY,CAAC;AAClE,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AACnD,wFAAwF;AACxF,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAO,CAAC;AACvD,iGAAiG;AACjG,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAyClD,SAAS,kBAAkB,CAAC,KAA6B;IACxD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAE,KAAkC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;AAChH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA6B;IAC7D,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,KAAa;IACtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAU,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAU,CAAC;IACrE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B,EAAE,GAAW;IACjE,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,wBAAwB,GAAG,CAAC,QAAwC,EAAU,EAAE,CACrF,4BAA4B,CAAC;IAC5B,GAAG,gCAAgC,EAAE;IACrC,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;CACrD,CAAC,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyB;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEjF,IAAI,eAAe,GAAG,MAAM,EAAE,WAAW,CAAC;IAC1C,IAAI,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC;YACJ,eAAe,GAAG,aAAa,CAAC,QAAQ,EAAE;gBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa;gBACb,GAAG,EAAE,GAAG,EAAE;aACV,CAAC,CAAC,IAAI,CAAC;QACT,CAAC;QAAC,MAAM,CAAC;YACR,2EAA2E;QAC5E,CAAC;IACF,CAAC;IAED,IAAI,cAAkC,CAAC;IACvC,IAAI,iBAAqC,CAAC;IAC1C,IAAI,CAAC;QACJ,cAAc,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,iBAAiB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,KAAK,YAAY,4BAA4B,CAAC;YAAE,cAAc,GAAG,SAAS,CAAC;IAClF,CAAC;IAED,IAAI,iBAAqC,CAAC;IAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,uBAAuB,CAAC,CAAC,cAAc,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACR,yEAAyE;QAC1E,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GACf,iBAAiB,KAAK,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IAEvF,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAEjH,OAAO;QACN,IAAI,EAAE,sBAAsB;QAC5B,eAAe;QACf,aAAa;QACb,MAAM,EAAE,MAAM,EAAE,MAAM;QACtB,SAAS,EAAE,MAAM,EAAE,SAAS;QAC5B,YAAY,EAAE,+BAA+B;QAC7C,cAAc;QACd,iBAAiB;QACjB,uBAAuB,EAAE,qCAAqC;QAC9D,qBAAqB,EAAE,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC;QACjE,iBAAiB;QACjB,YAAY,EAAE,QAAQ;aACpB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAAkC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;QAC1E,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrD,sBAAsB,EAAE,uBAAuB,CAAC,gBAAgB,CAAC;KACjE,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IAClE,MAAM,KAAK,GAAa,CAAC,4BAA4B,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CACT,uBACC,MAAM,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,aAAa;YAChD,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,WAAW;YACtC,CAAC,CAAC,MAAM,CAAC,eACZ,EAAE,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,IAAI,qCAAqC,EAAE,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,cAAc,IAAI,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACT,2BAA2B,MAAM,CAAC,iBAAiB,oCAAoC,MAAM,CAAC,uBAAuB,uBAAuB,CAC5I,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CACT,MAAM,CAAC,YAAY,KAAK,SAAS;gBAChC,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,kBAAkB;gBAC3D,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CACpG,CAAC;QACH,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACT,sCAAsC,yBAAyB,6GAA6G,CAC5K,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAqB;IAC9D,IAAI,CAAC;QACJ,GAAG,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,qGAAqG;AACrG,MAAM,OAAO,wBAAwB;IAArC;QACS,YAAO,GAAG,KAAK,CAAC;QAEP,WAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IA6GpE,CAAC;IA1GA,SAAS;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,MAAc;QACpB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,iCAAiC,MAAM,GAAG,CAAC;IACpE,CAAC;IAED,SAAS,CAAC,QAAkC;QAC3C,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IACjC,CAAC;IAED,kGAAkG;IAClG,iBAAiB,CAAC,QAAoB,EAAE,OAAe;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,GAAG,EAAE;YACX,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,kBAAkB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACd,GAAqB,EACrB,IAA+C;QAE/C,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,oGAAoG;IACpG,aAAa,CAAC,GAAqB,EAAE,IAAgB;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CACJ,GAAqB,EACrB,IAA+C,EAC/C,OAAO,GAAG,CAAC;QAEX,MAAM,IAAI,GAAG,GAAuC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAClC,wEAAwE;YACxE,yEAAyE;YACzE,eAAe;YACf,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACpC,IAAI,CAAC,aAAa,CACjB,uBAAuB,EACvB,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9F,CAAC;YACH,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,OAAO;YACN,IAAI;YACJ,MAAM,EAAE,GAAG,EAAE;gBACZ,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;SACD,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,QAAoB,EAAE,OAAe;QACvD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,QAAQ,EAAE,CAAC;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,KAAoC;QACvD,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,mBAAmB,CAAC,GAAqB;QAChD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,gBAAgB,IAAI,8BAA8B,CAAC;QACjF,IAAI,yBAAyB,CAAC,GAAG,CAAC;YAAE,OAAO,qCAAqC,CAAC;QACjF,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,aAAa,CAAC,WAAmB,EAAE,MAAc;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;CACD;AAED,uGAAuG;AACvG,SAAS,yBAAyB,CAAC,GAAW,EAAE,MAAsB;IACrE,IAAI,CAAC;QACJ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;IACpE,CAAC;AACF,CAAC;AAQD;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAAnC;QACkB,aAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAwCtE,CAAC;IAtCA,KAAK,CAAC,MAAgC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EACtC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CACtC,CAAC;QACF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,QAAQ;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,qGAAqG;IACrG,OAAO,CAAC,UAAkB,yBAAyB;QAClD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC3B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,qEAAqE;YACrE,qEAAqE;YACrE,2BAA2B;YAC3B,IAAI,CAAC;gBACJ,KAAK,CAAC,KAAK,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACR,sEAAsE;YACvE,CAAC;YACD,IAAI,CAAC;gBACJ,yBAAyB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACR,yBAAyB;YAC1B,CAAC;YACD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;CACD;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEnE,gGAAgG;AAChG,MAAM,UAAU,qBAAqB,CACpC,KAA8B,EAC9B,WAAmC,sBAAsB;IAEzD,OAAO,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC9C,EAA4B,EAC5B,OAAoC,EAAE;IAEtC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,wBAAwB,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,sBAAsB,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACzC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnB,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAChC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAA2B,EAAE,EAAE;QACzD,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,4BAA4B,EAAE,CAAC,KAAoC,EAAE,EAAE;QAC5E,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACnB,CAAC","sourcesContent":["import type { Credential } from \"@earendil-works/pi-ai\";\nimport type {\n\tExtensionAPI,\n\tExtensionContext,\n\tSessionExtensionsRemovedEvent,\n\tSessionShutdownEvent,\n} from \"../../types.ts\";\nimport { type CursorCliAccountSlot, type CursorCliOauthCredential, emptyCredential, listAccounts } from \"./accounts.ts\";\nimport { selectAccount } from \"./affinity.ts\";\nimport {\n\tCursorAgentNotInstalledError,\n\tdefaultCursorAgentExecutableDeps,\n\tprobeCursorAgentVersion,\n\tresolveCursorAgentExecutable,\n} from \"./executable.ts\";\nimport { type CursorCliSessionRouter, cursorCliSessionRouter } from \"./session-router.ts\";\nimport type { CursorCliOauthProviderSettings } from \"./settings.ts\";\nimport {\n\tCURSOR_CLI_ABORT_GRACE_MS,\n\ttype CursorCliTransportHandle,\n\ttype CursorCliTransportInput,\n\tspawnCursorCli,\n} from \"./transport.ts\";\n\n/** Minimum known-good cursor-agent version; below it senpi warns once per session but never blocks. */\nexport const CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION = \"2026.08.11\";\n/** This lane always authenticates through per-account sandboxed HOME file stores. */\nexport const CURSOR_CLI_STATUS_LANE = \"file-store\";\n/** senpi never delegates compaction on this lane, so it is always the context owner. */\nexport const CURSOR_CLI_STATUS_CONTEXT_OWNER = \"senpi\";\n/** The native Cursor provider id; the recommended default when both providers are configured. */\nexport const NATIVE_CURSOR_PROVIDER_ID = \"cursor\";\n\n// ============================================================================\n// Status diagnostics\n// ============================================================================\n\nexport type CursorCliBlockWindow = {\n\treadonly account: string;\n\treadonly reason: \"rate_limit\" | \"auth_error\";\n\t/** Expiry timestamp; undefined means blocked until the account logs in again. */\n\treadonly blockedUntil: number | undefined;\n};\n\nexport type CursorCliStatusReport = {\n\treadonly lane: typeof CURSOR_CLI_STATUS_LANE;\n\treadonly selectedAccount: string | undefined;\n\treadonly pinnedAccount: string | undefined;\n\treadonly chatId: string | undefined;\n\treadonly lastModel: string | undefined;\n\treadonly contextOwner: typeof CURSOR_CLI_STATUS_CONTEXT_OWNER;\n\treadonly executablePath: string | undefined;\n\treadonly executableVersion: string | undefined;\n\treadonly minimumKnownGoodVersion: string;\n\treadonly belowMinimumKnownGood: boolean;\n\treadonly executableProblem: string | undefined;\n\treadonly blockWindows: readonly CursorCliBlockWindow[];\n\treadonly accountNames: readonly string[];\n\treadonly nativeCursorConfigured: boolean;\n};\n\nexport type CursorCliStatusDeps = {\n\treadonly sessionId: string;\n\treadonly settings: CursorCliOauthProviderSettings;\n\treadonly readCredential: () => Credential | undefined | Promise<Credential | undefined>;\n\treadonly readNativeCredential?: () => Credential | undefined | Promise<Credential | undefined>;\n\treadonly router?: CursorCliSessionRouter;\n\treadonly resolveExecutable?: (settings: CursorCliOauthProviderSettings) => string;\n\treadonly probeVersion?: (executable: string) => Promise<string>;\n\treadonly now?: () => number;\n};\n\nfunction asCursorCredential(value: Credential | undefined): CursorCliOauthCredential {\n\treturn value !== undefined && value.type === \"oauth\" ? (value as CursorCliOauthCredential) : emptyCredential();\n}\n\nfunction isUsableOAuthCredential(value: Credential | undefined): boolean {\n\treturn value !== undefined && value.type === \"oauth\" && typeof value.access === \"string\" && value.access.length > 0;\n}\n\nexport function parseCursorCliVersion(version: string): { year: number; month: number; day: number } | undefined {\n\tconst match = /^v?(\\d{1,4})\\.(\\d{1,2})\\.(\\d{1,2})/.exec(version.trim());\n\tif (!match) return undefined;\n\treturn { year: Number(match[1]), month: Number(match[2]), day: Number(match[3]) };\n}\n\n/** Compares two `YYYY.MM.DD[-suffix]` version strings; undefined when either cannot be parsed. */\nexport function compareCursorCliVersions(version: string, floor: string): number | undefined {\n\tconst parsed = parseCursorCliVersion(version);\n\tconst baseline = parseCursorCliVersion(floor);\n\tif (parsed === undefined || baseline === undefined) return undefined;\n\tconst left = [parsed.year, parsed.month, parsed.day] as const;\n\tconst right = [baseline.year, baseline.month, baseline.day] as const;\n\tfor (let index = 0; index < 3; index += 1) {\n\t\tif (left[index] !== right[index]) return left[index] < right[index] ? -1 : 1;\n\t}\n\treturn 0;\n}\n\nfunction blockWindowFor(account: CursorCliAccountSlot, now: number): CursorCliBlockWindow | undefined {\n\tif (account.blockReason === \"auth_error\") {\n\t\treturn { account: account.name, reason: \"auth_error\", blockedUntil: undefined };\n\t}\n\tif (account.blockedUntil !== undefined && account.blockedUntil > now) {\n\t\treturn { account: account.name, reason: \"rate_limit\", blockedUntil: account.blockedUntil };\n\t}\n\treturn undefined;\n}\n\nconst defaultResolveExecutable = (settings: CursorCliOauthProviderSettings): string =>\n\tresolveCursorAgentExecutable({\n\t\t...defaultCursorAgentExecutableDeps(),\n\t\tsettings: { executablePath: settings.executablePath },\n\t});\n\n/**\n * Collects the status snapshot. Account data is read fresh from the credential\n * store on every call - never memoized - so the rendered state always matches\n * the store even after concurrent logins, removals, or failover blocks. Only\n * account names and metadata are extracted; tokens never enter the report.\n */\nexport async function collectCursorCliStatus(deps: CursorCliStatusDeps): Promise<CursorCliStatusReport> {\n\tconst now = deps.now ?? Date.now;\n\tconst credential = asCursorCredential(await deps.readCredential());\n\tconst accounts = listAccounts(credential);\n\tconst pinnedAccount = deps.settings.pinnedAccount ?? credential.pinned;\n\tconst record = (deps.router ?? cursorCliSessionRouter).getRecord(deps.sessionId);\n\n\tlet selectedAccount = record?.accountName;\n\tif (selectedAccount === undefined && accounts.length > 0) {\n\t\ttry {\n\t\t\tselectedAccount = selectAccount(accounts, {\n\t\t\t\tsessionId: deps.sessionId,\n\t\t\t\tpinnedAccount,\n\t\t\t\tnow: now(),\n\t\t\t}).name;\n\t\t} catch {\n\t\t\t// Every account is blocked; report no selection instead of failing status.\n\t\t}\n\t}\n\n\tlet executablePath: string | undefined;\n\tlet executableProblem: string | undefined;\n\ttry {\n\t\texecutablePath = (deps.resolveExecutable ?? defaultResolveExecutable)(deps.settings);\n\t} catch (error) {\n\t\texecutableProblem = error instanceof Error ? error.message : String(error);\n\t\tif (!(error instanceof CursorAgentNotInstalledError)) executablePath = undefined;\n\t}\n\n\tlet executableVersion: string | undefined;\n\tif (executablePath !== undefined) {\n\t\ttry {\n\t\t\texecutableVersion = await (deps.probeVersion ?? probeCursorAgentVersion)(executablePath);\n\t\t} catch {\n\t\t\t// Version unknown; the floor warning only applies to parseable versions.\n\t\t}\n\t}\n\tconst comparison =\n\t\texecutableVersion === undefined\n\t\t\t? undefined\n\t\t\t: compareCursorCliVersions(executableVersion, CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION);\n\n\tconst nativeCredential = deps.readNativeCredential === undefined ? undefined : await deps.readNativeCredential();\n\n\treturn {\n\t\tlane: CURSOR_CLI_STATUS_LANE,\n\t\tselectedAccount,\n\t\tpinnedAccount,\n\t\tchatId: record?.chatId,\n\t\tlastModel: record?.lastModel,\n\t\tcontextOwner: CURSOR_CLI_STATUS_CONTEXT_OWNER,\n\t\texecutablePath,\n\t\texecutableVersion,\n\t\tminimumKnownGoodVersion: CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION,\n\t\tbelowMinimumKnownGood: comparison !== undefined && comparison < 0,\n\t\texecutableProblem,\n\t\tblockWindows: accounts\n\t\t\t.map((account) => blockWindowFor(account, now()))\n\t\t\t.filter((window): window is CursorCliBlockWindow => window !== undefined),\n\t\taccountNames: accounts.map((account) => account.name),\n\t\tnativeCursorConfigured: isUsableOAuthCredential(nativeCredential),\n\t};\n}\n\n/** Pure renderer: names and metadata only, never token material. */\nexport function renderCursorCliStatus(report: CursorCliStatusReport): string {\n\tconst lines: string[] = [\"Cursor CLI (OAuth) status:\"];\n\tlines.push(`  Auth lane: ${report.lane}`);\n\tlines.push(`  Context owner: ${report.contextOwner}`);\n\tlines.push(\n\t\t`  Selected account: ${\n\t\t\treport.selectedAccount === undefined\n\t\t\t\t? \"none\"\n\t\t\t\t: report.selectedAccount === report.pinnedAccount\n\t\t\t\t\t? `${report.selectedAccount} (pinned)`\n\t\t\t\t\t: report.selectedAccount\n\t\t}`,\n\t);\n\tlines.push(`  Chat id: ${report.chatId ?? \"none (no turns yet on this session)\"}`);\n\tlines.push(`  Last model: ${report.lastModel ?? \"none\"}`);\n\tif (report.executableProblem !== undefined) {\n\t\tlines.push(`  Executable: not installed - ${report.executableProblem}`);\n\t} else {\n\t\tlines.push(`  Executable: ${report.executablePath ?? \"not installed\"}`);\n\t}\n\tif (report.executableVersion !== undefined) lines.push(`  Version: ${report.executableVersion}`);\n\tif (report.belowMinimumKnownGood) {\n\t\tlines.push(\n\t\t\t`  WARNING: cursor-agent ${report.executableVersion} is below the minimum known-good ${report.minimumKnownGoodVersion}; upgrade recommended`,\n\t\t);\n\t}\n\tif (report.blockWindows.length === 0) {\n\t\tlines.push(\"  Block windows: none\");\n\t} else {\n\t\tlines.push(\"  Block windows:\");\n\t\tfor (const window of report.blockWindows) {\n\t\t\tlines.push(\n\t\t\t\twindow.blockedUntil === undefined\n\t\t\t\t\t? `    ${window.account}: ${window.reason}, until re-login`\n\t\t\t\t\t: `    ${window.account}: ${window.reason}, expires ${new Date(window.blockedUntil).toISOString()}`,\n\t\t\t);\n\t\t}\n\t}\n\tif (report.nativeCursorConfigured) {\n\t\tlines.push(\n\t\t\t`  Recommended default: the native '${NATIVE_CURSOR_PROVIDER_ID}' provider is configured; use this Cursor CLI (OAuth) lane as the fallback when the native path misbehaves.`,\n\t\t);\n\t}\n\treturn lines.join(\"\\n\");\n}\n\n// ============================================================================\n// Reload / shutdown safety (senpi #866 regression class)\n// ============================================================================\n\nexport type CursorCliFencedOutcome<T> =\n\t| { readonly status: \"completed\"; readonly value: T }\n\t| { readonly status: \"dropped\"; readonly reason: string };\n\nexport type CursorCliDeferredContinuation<T> = {\n\t/** Runs the continuation through the fence, even if its timer was cancelled or already fired. */\n\tfire(): Promise<CursorCliFencedOutcome<T>>;\n\tcancel(): void;\n};\n\nexport type CursorCliDroppedReporter = (description: string, reason: string) => void;\n\n/**\n * A reload retires this extension generation (`AgentSession.reload()` then\n * invalidates the old runner) while timers and promise continuations captured\n * by it are still armed; every `ExtensionContext` getter then throws\n * \"stale extension generation after reload\". The context carries no liveness\n * flag, so a retired generation is only observable by probing a getter.\n */\nexport function isCursorCliContextRetired(ctx: ExtensionContext): boolean {\n\ttry {\n\t\tctx.isIdle();\n\t\treturn false;\n\t} catch {\n\t\treturn true;\n\t}\n}\n\n/** Per-registration generation fence; one per extension registration (a reload builds a new one). */\nexport class CursorCliGenerationGuard {\n\tprivate retired = false;\n\tprivate retirementReason: string | undefined;\n\tprivate readonly timers = new Set<ReturnType<typeof setTimeout>>();\n\tprivate droppedReporter: CursorCliDroppedReporter | undefined;\n\n\tisRetired(): boolean {\n\t\treturn this.retired;\n\t}\n\n\tretire(reason: string): void {\n\t\tif (this.retired) return;\n\t\tthis.retired = true;\n\t\tthis.retirementReason = `extension generation retired (${reason})`;\n\t}\n\n\tonDropped(reporter: CursorCliDroppedReporter): void {\n\t\tthis.droppedReporter = reporter;\n\t}\n\n\t/** Arms a timer the shutdown path cancels; arming after retirement is a no-op by construction. */\n\tsetTrackedTimeout(callback: () => void, delayMs: number): () => void {\n\t\tconst timer = this.armTracked(callback, delayMs);\n\t\treturn () => {\n\t\t\tif (timer !== undefined) this.cancelTimer(timer);\n\t\t};\n\t}\n\n\t/** Cancels every armed timer; returns how many were pending. */\n\tclearTrackedTimers(): number {\n\t\tconst pending = this.timers.size;\n\t\tfor (const timer of this.timers) clearTimeout(timer);\n\t\tthis.timers.clear();\n\t\treturn pending;\n\t}\n\n\t/**\n\t * Runs a deferred continuation behind the generation fence. A dropped\n\t * continuation is reported, never silently presented as completed.\n\t */\n\tasync runFenced<T>(\n\t\tctx: ExtensionContext,\n\t\twork: (ctx: ExtensionContext) => Promise<T> | T,\n\t): Promise<CursorCliFencedOutcome<T>> {\n\t\tconst blockedReason = this.retirementReasonFor(ctx);\n\t\tif (blockedReason !== undefined) {\n\t\t\tthis.reportDropped(\"deferred continuation\", blockedReason);\n\t\t\treturn { status: \"dropped\", reason: blockedReason };\n\t\t}\n\t\treturn { status: \"completed\", value: await work(ctx) };\n\t}\n\n\t/** Synchronous variant for continuations that only touch the context once, after an outer await. */\n\trunFencedSync(ctx: ExtensionContext, work: () => void): { ran: boolean } {\n\t\tconst blockedReason = this.retirementReasonFor(ctx);\n\t\tif (blockedReason !== undefined) {\n\t\t\tthis.reportDropped(\"deferred continuation\", blockedReason);\n\t\t\treturn { ran: false };\n\t\t}\n\t\twork();\n\t\treturn { ran: true };\n\t}\n\n\tdefer<T>(\n\t\tctx: ExtensionContext,\n\t\twork: (ctx: ExtensionContext) => Promise<T> | T,\n\t\tdelayMs = 0,\n\t): CursorCliDeferredContinuation<T> {\n\t\tconst fire = (): Promise<CursorCliFencedOutcome<T>> => this.runFenced(ctx, work);\n\t\tconst timer = this.armTracked(() => {\n\t\t\t// The timer path has no caller to receive a rejection (senpi #866 crash\n\t\t\t// class), so a post-fence failure is reported instead of escaping to the\n\t\t\t// timer queue.\n\t\t\tvoid fire().catch((error: unknown) => {\n\t\t\t\tthis.reportDropped(\n\t\t\t\t\t\"deferred continuation\",\n\t\t\t\t\t`failed after the retirement check: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}, delayMs);\n\t\treturn {\n\t\t\tfire,\n\t\t\tcancel: () => {\n\t\t\t\tif (timer !== undefined) this.cancelTimer(timer);\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate armTracked(callback: () => void, delayMs: number): ReturnType<typeof setTimeout> | undefined {\n\t\tif (this.retired) return undefined;\n\t\tconst timer = setTimeout(() => {\n\t\t\tthis.timers.delete(timer);\n\t\t\tcallback();\n\t\t}, delayMs);\n\t\tthis.timers.add(timer);\n\t\treturn timer;\n\t}\n\n\tprivate cancelTimer(timer: ReturnType<typeof setTimeout>): void {\n\t\tclearTimeout(timer);\n\t\tthis.timers.delete(timer);\n\t}\n\n\tprivate retirementReasonFor(ctx: ExtensionContext): string | undefined {\n\t\tif (this.retired) return this.retirementReason ?? \"extension generation retired\";\n\t\tif (isCursorCliContextRetired(ctx)) return \"extension context retired by reload\";\n\t\treturn undefined;\n\t}\n\n\tprivate reportDropped(description: string, reason: string): void {\n\t\tthis.droppedReporter?.(description, reason);\n\t}\n}\n\n/** Process-group kill on the tracked pid, mirroring transport.ts's mechanism (never name matching). */\nfunction killCursorCliProcessGroup(pid: number, signal: NodeJS.Signals): void {\n\ttry {\n\t\tif (process.platform === \"win32\") process.kill(pid, signal);\n\t\telse process.kill(-pid, signal);\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"ESRCH\") throw error;\n\t}\n}\n\ntype TrackedCursorCliChild = {\n\treadonly pid: number;\n\treadonly abort: () => void;\n\tkilled: boolean;\n};\n\n/**\n * Registry of live children this extension spawned. Entries leave the registry\n * when their transport run settles, so `killAll` only ever signals live\n * process groups and is idempotent across repeated interruptions.\n */\nexport class CursorCliChildRegistry {\n\tprivate readonly children = new Map<number, TrackedCursorCliChild>();\n\n\ttrack(handle: CursorCliTransportHandle): CursorCliTransportHandle {\n\t\tthis.children.set(handle.pid, { pid: handle.pid, abort: () => handle.abort(), killed: false });\n\t\tvoid handle.completed.then(\n\t\t\t() => this.children.delete(handle.pid),\n\t\t\t() => this.children.delete(handle.pid),\n\t\t);\n\t\treturn handle;\n\t}\n\n\tlivePids(): number[] {\n\t\treturn [...this.children.keys()];\n\t}\n\n\t/** SIGTERMs every tracked process group with a SIGKILL escalation; returns the pids it signalled. */\n\tkillAll(graceMs: number = CURSOR_CLI_ABORT_GRACE_MS): number[] {\n\t\tconst signalled: number[] = [];\n\t\tfor (const entry of this.children.values()) {\n\t\t\tif (entry.killed) continue;\n\t\t\tentry.killed = true;\n\t\t\tsignalled.push(entry.pid);\n\t\t\t// Teardown must never throw into the shutdown event loop; individual\n\t\t\t// failures are contained per child, and the SIGKILL escalation below\n\t\t\t// still runs for that pid.\n\t\t\ttry {\n\t\t\t\tentry.abort();\n\t\t\t} catch {\n\t\t\t\t// Deliberate: shutdown stays idempotent even if one child misbehaves.\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tkillCursorCliProcessGroup(entry.pid, \"SIGTERM\");\n\t\t\t} catch {\n\t\t\t\t// Deliberate: see above.\n\t\t\t}\n\t\t\tconst escalation = setTimeout(() => killCursorCliProcessGroup(entry.pid, \"SIGKILL\"), graceMs);\n\t\t\tescalation.unref?.();\n\t\t}\n\t\treturn signalled;\n\t}\n}\n\n/** Shared registry; child pids are process-wide resources, so one registry serves every generation. */\nexport const cursorCliChildRegistry = new CursorCliChildRegistry();\n\n/** Spawns one cursor-agent run through the transport and registers it for shutdown teardown. */\nexport function spawnCursorCliTracked(\n\tinput: CursorCliTransportInput,\n\tregistry: CursorCliChildRegistry = cursorCliChildRegistry,\n): CursorCliTransportHandle {\n\treturn registry.track(spawnCursorCli(input));\n}\n\nexport type CursorCliShutdownSafetyDeps = {\n\treadonly generation?: CursorCliGenerationGuard;\n\treadonly registry?: CursorCliChildRegistry;\n};\n\n/**\n * Installs the `session_shutdown`/`session_extensions_removed` teardown: kill\n * every tracked child's process group, cancel the generation's pending timers,\n * and retire the generation so every deferred continuation is fenced. Safe to\n * fire repeatedly; a retired generation is never resurrected (a reload builds a\n * new registration with a fresh guard).\n */\nexport function registerCursorCliShutdownSafety(\n\tpi: Pick<ExtensionAPI, \"on\">,\n\tdeps: CursorCliShutdownSafetyDeps = {},\n): CursorCliGenerationGuard {\n\tconst generation = deps.generation ?? new CursorCliGenerationGuard();\n\tconst registry = deps.registry ?? cursorCliChildRegistry;\n\tconst teardown = (reason: string): void => {\n\t\tregistry.killAll();\n\t\tgeneration.clearTrackedTimers();\n\t\tgeneration.retire(reason);\n\t};\n\tpi.on(\"session_shutdown\", (event: SessionShutdownEvent) => {\n\t\tteardown(event.reason);\n\t});\n\tpi.on(\"session_extensions_removed\", (event: SessionExtensionsRemovedEvent) => {\n\t\tteardown(event.reason);\n\t});\n\treturn generation;\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.d.ts

@@ -0,0 +1,19 @@
+export type CursorCliErrorKind = "binary_missing" | "invalid_api_key" | "keychain_locked" | "invalid_model" | "rate_limit" | "auth_error" | "context_overflow" | "network" | "malformed_stream" | "other";
+export type CursorCliErrorClassification = {
+    kind: CursorCliErrorKind;
+    retryable: boolean;
+    blockMs?: number;
+};
+export type CursorCliErrorInput = {
+    exitCode?: unknown;
+    stderr?: unknown;
+    resultEvent?: unknown;
+    thrown?: unknown;
+};
+export declare const DEFAULT_RATE_LIMIT_BLOCK_MS = 60000;
+export declare const MAX_RATE_LIMIT_BLOCK_MS: number;
+/** Add each probe-observed Cursor context failure as one exact line. */
+export declare const CURSOR_CONTEXT_OVERFLOW_WORDINGS: readonly string[];
+/** Classifies observed cursor-agent stderr, result events, and typed transport failures. */
+export declare function classifyCursorCliError(input: CursorCliErrorInput | null | undefined): CursorCliErrorClassification;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC3B,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,YAAY,GACZ,YAAY,GACZ,kBAAkB,GAClB,SAAS,GACT,kBAAkB,GAClB,OAAO,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD,eAAO,MAAM,uBAAuB,QAAuB,CAAC;AAE5D,wEAAwE;AACxE,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAAO,CAAC;AAuFtE,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,4BAA4B,CA0ClH"}

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.js

@@ -0,0 +1,122 @@
+export const DEFAULT_RATE_LIMIT_BLOCK_MS = 60_000;
+export const MAX_RATE_LIMIT_BLOCK_MS = 48 * 60 * 60 * 1_000;
+/** Add each probe-observed Cursor context failure as one exact line. */
+export const CURSOR_CONTEXT_OVERFLOW_WORDINGS = [];
+const OTHER_ERROR = { kind: "other", retryable: false };
+const MAX_TEXT_DEPTH = 5;
+const MAX_TEXT_VALUES = 100;
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function collectText(value, output, seen, depth) {
+    if (output.length >= MAX_TEXT_VALUES || depth > MAX_TEXT_DEPTH)
+        return;
+    if (typeof value === "string") {
+        output.push(value);
+        return;
+    }
+    if (value instanceof Error) {
+        output.push(value.message);
+    }
+    if (value === null || typeof value !== "object" || seen.has(value))
+        return;
+    seen.add(value);
+    for (const nested of Object.values(value)) {
+        collectText(nested, output, seen, depth + 1);
+        if (output.length >= MAX_TEXT_VALUES)
+            return;
+    }
+}
+function errorText(input) {
+    const parts = [];
+    const seen = new Set();
+    collectText(input.stderr, parts, seen, 0);
+    collectText(input.resultEvent, parts, seen, 0);
+    collectText(input.thrown, parts, seen, 0);
+    return parts.join("\n");
+}
+function errorLines(text) {
+    return text
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}
+function hasExactLine(lines, wording) {
+    return lines.some((line) => line === wording);
+}
+function hasTypedKind(value, kind) {
+    return record(value)?.kind === kind;
+}
+function positiveNumber(value) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0)
+        return undefined;
+    return Math.ceil(value);
+}
+function findRetryAfterMs(value, seen, depth) {
+    if (depth > MAX_TEXT_DEPTH || value === null || typeof value !== "object" || seen.has(value))
+        return undefined;
+    seen.add(value);
+    const object = record(value);
+    if (object) {
+        const direct = positiveNumber(object.retryAfterMs) ?? positiveNumber(object.retry_after_ms);
+        if (direct !== undefined)
+            return direct;
+    }
+    for (const nested of Object.values(value)) {
+        const found = findRetryAfterMs(nested, seen, depth + 1);
+        if (found !== undefined)
+            return found;
+    }
+    return undefined;
+}
+function retryAfterMs(input, text) {
+    const structured = findRetryAfterMs(input.resultEvent, new Set(), 0) ?? findRetryAfterMs(input.thrown, new Set(), 0);
+    if (structured !== undefined)
+        return structured;
+    const milliseconds = text.match(/\bretry[-_ ]?after[-_ ]?ms\s*[:=]\s*(\d+(?:\.\d+)?)/i);
+    if (milliseconds)
+        return Math.ceil(Number(milliseconds[1]));
+    const seconds = text.match(/\bretry[-_ ]?after\s*[:=]\s*(\d+(?:\.\d+)?)/i);
+    return seconds ? Math.ceil(Number(seconds[1]) * 1_000) : undefined;
+}
+function rateLimitBlockMs(input, text) {
+    return Math.min(MAX_RATE_LIMIT_BLOCK_MS, retryAfterMs(input, text) ?? DEFAULT_RATE_LIMIT_BLOCK_MS);
+}
+/** Classifies observed cursor-agent stderr, result events, and typed transport failures. */
+export function classifyCursorCliError(input) {
+    if (!input || typeof input !== "object")
+        return OTHER_ERROR;
+    if (hasTypedKind(input.thrown, "binary_missing"))
+        return { kind: "binary_missing", retryable: false };
+    if (hasTypedKind(input.thrown, "malformed_stream") || hasTypedKind(input.resultEvent, "malformed_stream")) {
+        return { kind: "malformed_stream", retryable: false };
+    }
+    const text = errorText(input);
+    const lines = errorLines(text);
+    if (hasExactLine(lines, "The provided API key is invalid.") &&
+        hasExactLine(lines, "The API key was loaded from the CURSOR_API_KEY environment variable.")) {
+        return { kind: "invalid_api_key", retryable: false };
+    }
+    if (hasExactLine(lines, "Error: Your macOS login keychain is locked.")) {
+        return { kind: "keychain_locked", retryable: false };
+    }
+    if (lines.some((line) => /^(?:Error:\s*)?Invalid model value:\s+\S.*$/.test(line))) {
+        return { kind: "invalid_model", retryable: false };
+    }
+    if (/\b(?:HTTP\s*)?429\b|\brate[ _-]?limit(?:ed|ing)?\b|\btoo many requests\b/i.test(text)) {
+        return { kind: "rate_limit", retryable: true, blockMs: rateLimitBlockMs(input, text) };
+    }
+    if (/\b(?:HTTP\s*)?401\b|\bunauthori[sz]ed\b|\bauthentication (?:failed|required)\b|\bnot logged in\b/i.test(text)) {
+        return { kind: "auth_error", retryable: false };
+    }
+    if (CURSOR_CONTEXT_OVERFLOW_WORDINGS.some((wording) => hasExactLine(lines, wording) || hasExactLine(lines, `Error: ${wording}`))) {
+        return { kind: "context_overflow", retryable: false };
+    }
+    if (/\b(?:ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENETUNREACH|EHOSTUNREACH|ENOTFOUND|EAI_AGAIN)\b|\bnetwork error\b|\bconnection (?:reset|refused|lost)\b|\bsocket hang up\b|\bfetch failed\b/i.test(text)) {
+        return { kind: "network", retryable: true };
+    }
+    return OTHER_ERROR;
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/errors.ts"],"names":[],"mappings":"AAyBA,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE5D,wEAAwE;AACxE,MAAM,CAAC,MAAM,gCAAgC,GAAsB,EAAE,CAAC;AAEtE,MAAM,WAAW,GAAiC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtF,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAgB,EAAE,IAAiB,EAAE,KAAa;IACtF,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,IAAI,KAAK,GAAG,cAAc;QAAE,OAAO;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO;IACR,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IAC3E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe;YAAE,OAAO;IAC9C,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,KAA0B;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC/B,OAAO,IAAI;SACT,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,KAAwB,EAAE,OAAe;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAwB;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAiB,EAAE,KAAa;IACzE,IAAI,KAAK,GAAG,cAAc,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/G,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5F,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAA0B,EAAE,IAAY;IAC7D,MAAM,UAAU,GACf,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC,CAAC,CAAC;IACnH,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACxF,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA0B,EAAE,IAAY;IACjE,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,2BAA2B,CAAC,CAAC;AACpG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,KAA6C;IACnF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC5D,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtG,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC3G,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IACC,YAAY,CAAC,KAAK,EAAE,kCAAkC,CAAC;QACvD,YAAY,CAAC,KAAK,EAAE,sEAAsE,CAAC,EAC1F,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,EAAE,6CAA6C,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,2EAA2E,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,mGAAmG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,IACC,gCAAgC,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,OAAO,EAAE,CAAC,CACrF,EACA,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,IACC,qLAAqL,CAAC,IAAI,CACzL,IAAI,CACJ,EACA,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC","sourcesContent":["export type CursorCliErrorKind =\n\t| \"binary_missing\"\n\t| \"invalid_api_key\"\n\t| \"keychain_locked\"\n\t| \"invalid_model\"\n\t| \"rate_limit\"\n\t| \"auth_error\"\n\t| \"context_overflow\"\n\t| \"network\"\n\t| \"malformed_stream\"\n\t| \"other\";\n\nexport type CursorCliErrorClassification = {\n\tkind: CursorCliErrorKind;\n\tretryable: boolean;\n\tblockMs?: number;\n};\n\nexport type CursorCliErrorInput = {\n\texitCode?: unknown;\n\tstderr?: unknown;\n\tresultEvent?: unknown;\n\tthrown?: unknown;\n};\n\nexport const DEFAULT_RATE_LIMIT_BLOCK_MS = 60_000;\nexport const MAX_RATE_LIMIT_BLOCK_MS = 48 * 60 * 60 * 1_000;\n\n/** Add each probe-observed Cursor context failure as one exact line. */\nexport const CURSOR_CONTEXT_OVERFLOW_WORDINGS: readonly string[] = [];\n\nconst OTHER_ERROR: CursorCliErrorClassification = { kind: \"other\", retryable: false };\nconst MAX_TEXT_DEPTH = 5;\nconst MAX_TEXT_VALUES = 100;\n\nfunction record(value: unknown): Record<string, unknown> | undefined {\n\treturn value !== null && typeof value === \"object\" && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: undefined;\n}\n\nfunction collectText(value: unknown, output: string[], seen: Set<object>, depth: number): void {\n\tif (output.length >= MAX_TEXT_VALUES || depth > MAX_TEXT_DEPTH) return;\n\tif (typeof value === \"string\") {\n\t\toutput.push(value);\n\t\treturn;\n\t}\n\tif (value instanceof Error) {\n\t\toutput.push(value.message);\n\t}\n\tif (value === null || typeof value !== \"object\" || seen.has(value)) return;\n\tseen.add(value);\n\tfor (const nested of Object.values(value)) {\n\t\tcollectText(nested, output, seen, depth + 1);\n\t\tif (output.length >= MAX_TEXT_VALUES) return;\n\t}\n}\n\nfunction errorText(input: CursorCliErrorInput): string {\n\tconst parts: string[] = [];\n\tconst seen = new Set<object>();\n\tcollectText(input.stderr, parts, seen, 0);\n\tcollectText(input.resultEvent, parts, seen, 0);\n\tcollectText(input.thrown, parts, seen, 0);\n\treturn parts.join(\"\\n\");\n}\n\nfunction errorLines(text: string): string[] {\n\treturn text\n\t\t.split(/\\r?\\n/)\n\t\t.map((line) => line.trim())\n\t\t.filter((line) => line.length > 0);\n}\n\nfunction hasExactLine(lines: readonly string[], wording: string): boolean {\n\treturn lines.some((line) => line === wording);\n}\n\nfunction hasTypedKind(value: unknown, kind: CursorCliErrorKind): boolean {\n\treturn record(value)?.kind === kind;\n}\n\nfunction positiveNumber(value: unknown): number | undefined {\n\tif (typeof value !== \"number\" || !Number.isFinite(value) || value <= 0) return undefined;\n\treturn Math.ceil(value);\n}\n\nfunction findRetryAfterMs(value: unknown, seen: Set<object>, depth: number): number | undefined {\n\tif (depth > MAX_TEXT_DEPTH || value === null || typeof value !== \"object\" || seen.has(value)) return undefined;\n\tseen.add(value);\n\tconst object = record(value);\n\tif (object) {\n\t\tconst direct = positiveNumber(object.retryAfterMs) ?? positiveNumber(object.retry_after_ms);\n\t\tif (direct !== undefined) return direct;\n\t}\n\tfor (const nested of Object.values(value)) {\n\t\tconst found = findRetryAfterMs(nested, seen, depth + 1);\n\t\tif (found !== undefined) return found;\n\t}\n\treturn undefined;\n}\n\nfunction retryAfterMs(input: CursorCliErrorInput, text: string): number | undefined {\n\tconst structured =\n\t\tfindRetryAfterMs(input.resultEvent, new Set<object>(), 0) ?? findRetryAfterMs(input.thrown, new Set<object>(), 0);\n\tif (structured !== undefined) return structured;\n\tconst milliseconds = text.match(/\\bretry[-_ ]?after[-_ ]?ms\\s*[:=]\\s*(\\d+(?:\\.\\d+)?)/i);\n\tif (milliseconds) return Math.ceil(Number(milliseconds[1]));\n\tconst seconds = text.match(/\\bretry[-_ ]?after\\s*[:=]\\s*(\\d+(?:\\.\\d+)?)/i);\n\treturn seconds ? Math.ceil(Number(seconds[1]) * 1_000) : undefined;\n}\n\nfunction rateLimitBlockMs(input: CursorCliErrorInput, text: string): number {\n\treturn Math.min(MAX_RATE_LIMIT_BLOCK_MS, retryAfterMs(input, text) ?? DEFAULT_RATE_LIMIT_BLOCK_MS);\n}\n\n/** Classifies observed cursor-agent stderr, result events, and typed transport failures. */\nexport function classifyCursorCliError(input: CursorCliErrorInput | null | undefined): CursorCliErrorClassification {\n\tif (!input || typeof input !== \"object\") return OTHER_ERROR;\n\tif (hasTypedKind(input.thrown, \"binary_missing\")) return { kind: \"binary_missing\", retryable: false };\n\tif (hasTypedKind(input.thrown, \"malformed_stream\") || hasTypedKind(input.resultEvent, \"malformed_stream\")) {\n\t\treturn { kind: \"malformed_stream\", retryable: false };\n\t}\n\n\tconst text = errorText(input);\n\tconst lines = errorLines(text);\n\tif (\n\t\thasExactLine(lines, \"The provided API key is invalid.\") &&\n\t\thasExactLine(lines, \"The API key was loaded from the CURSOR_API_KEY environment variable.\")\n\t) {\n\t\treturn { kind: \"invalid_api_key\", retryable: false };\n\t}\n\tif (hasExactLine(lines, \"Error: Your macOS login keychain is locked.\")) {\n\t\treturn { kind: \"keychain_locked\", retryable: false };\n\t}\n\tif (lines.some((line) => /^(?:Error:\\s*)?Invalid model value:\\s+\\S.*$/.test(line))) {\n\t\treturn { kind: \"invalid_model\", retryable: false };\n\t}\n\tif (/\\b(?:HTTP\\s*)?429\\b|\\brate[ _-]?limit(?:ed|ing)?\\b|\\btoo many requests\\b/i.test(text)) {\n\t\treturn { kind: \"rate_limit\", retryable: true, blockMs: rateLimitBlockMs(input, text) };\n\t}\n\tif (/\\b(?:HTTP\\s*)?401\\b|\\bunauthori[sz]ed\\b|\\bauthentication (?:failed|required)\\b|\\bnot logged in\\b/i.test(text)) {\n\t\treturn { kind: \"auth_error\", retryable: false };\n\t}\n\tif (\n\t\tCURSOR_CONTEXT_OVERFLOW_WORDINGS.some(\n\t\t\t(wording) => hasExactLine(lines, wording) || hasExactLine(lines, `Error: ${wording}`),\n\t\t)\n\t) {\n\t\treturn { kind: \"context_overflow\", retryable: false };\n\t}\n\tif (\n\t\t/\\b(?:ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENETUNREACH|EHOSTUNREACH|ENOTFOUND|EAI_AGAIN)\\b|\\bnetwork error\\b|\\bconnection (?:reset|refused|lost)\\b|\\bsocket hang up\\b|\\bfetch failed\\b/i.test(\n\t\t\ttext,\n\t\t)\n\t) {\n\t\treturn { kind: \"network\", retryable: true };\n\t}\n\treturn OTHER_ERROR;\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/executable.d.ts

@@ -0,0 +1,30 @@
+export type CursorAgentDirectoryEntry = {
+    name: string;
+    isDirectory: boolean;
+};
+export type CursorAgentExecutableDeps = {
+    env: (name: string) => string | undefined;
+    settings: {
+        executablePath?: string;
+    };
+    homeDirectory: string;
+    pathDelimiter: string;
+    isExecutableFile: (candidate: string) => boolean;
+    readDirectory: (directory: string) => CursorAgentDirectoryEntry[];
+};
+export type VersionProbeOptions = {
+    encoding: "utf8";
+    timeout: number;
+};
+export type VersionProbeCallback = (error: Error | null, stdout: string, stderr: string) => void;
+export type VersionProbeDeps = {
+    execFile: (file: string, args: string[], options: VersionProbeOptions, callback: VersionProbeCallback) => void;
+};
+export declare class CursorAgentNotInstalledError extends Error {
+    readonly kind = "binary_missing";
+    constructor();
+}
+export declare function resolveCursorAgentExecutable(deps: CursorAgentExecutableDeps): string;
+export declare function probeCursorAgentVersion(executable: string, deps?: VersionProbeDeps): Promise<string>;
+export declare function defaultCursorAgentExecutableDeps(): CursorAgentExecutableDeps;
+//# sourceMappingURL=executable.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/executable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/executable.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACvC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,yBAAyB,EAAE,CAAC;CAClE,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC/G,CAAC;AAEF,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,QAAQ,CAAC,IAAI,oBAAoB;;CASjC;AA6CD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CAkBpF;AAUD,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,gBAA0C,GAC9C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAgB,gCAAgC,IAAI,yBAAyB,CAqB5E"}