@code-yeongyu/senpi 2026.8.16 → 2026.8.18-2

package/dist/core/extensions/builtin/cursor-cli-oauth/models.js

@@ -0,0 +1,242 @@
+import { spawn } from "node:child_process";
+import { mkdir, mkdtemp, open, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { defaultCursorAgentExecutableDeps, resolveCursorAgentExecutable } from "./executable.js";
+const MODEL_PROBE_TIMEOUT_MS = 15_000;
+const DEFAULT_MODEL_CATALOG_TTL_HOURS = 24;
+const ANSI_ESCAPE_SEQUENCE = /\u001B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])/g;
+const MODEL_LINE = /^(\S+)\s+-\s+(.+)$/;
+const MODEL_ID = /^[A-Za-z0-9][A-Za-z0-9._/:+-]*$/;
+const MISLEADING_ERROR_LINE = /^\s*(?:error|failed|failure)(?=\s|:|-|$)/i;
+const REASONING_SUFFIX = /(?:^|-)(?:thinking(?:-(?:low|medium|high|xhigh|max))?|low|medium|high|xhigh|max)(?:-fast)?$/i;
+const STATIC_MODEL_DEFINITIONS = [
+    { id: "auto", label: "Auto" },
+    { id: "composer-2.5", label: "Composer 2.5 (200K context)" },
+    { id: "composer-2.5-fast", label: "Composer 2.5 Fast (200K context)" },
+    { id: "gpt-5.6-sol-high", label: "GPT 5.6 SOL High (272K context)" },
+    { id: "gpt-5.6-luna-high", label: "GPT 5.6 Luna High (272K context)" },
+    { id: "gpt-5.5-high", label: "GPT 5.5 High (272K context)" },
+    { id: "gpt-5.3-codex", label: "GPT 5.3 Codex (272K context)" },
+    { id: "gpt-5.2", label: "GPT 5.2 (272K context)" },
+    { id: "claude-opus-5-high", label: "Claude Opus 5 High (300K context)" },
+    { id: "claude-opus-5-thinking-high", label: "Claude Opus 5 Thinking High (300K context)" },
+    { id: "claude-opus-4-8-thinking-high", label: "Claude Opus 4.8 Thinking High (300K context)" },
+    { id: "claude-fable-5-thinking-high", label: "Claude Fable 5 Thinking High (300K context)" },
+    { id: "claude-sonnet-5-thinking-high", label: "Claude Sonnet 5 Thinking High (300K context)" },
+    { id: "gemini-3.7-flash-high", label: "Gemini 3.7 Flash High (1M context)" },
+    { id: "cursor-grok-4.6-high", label: "Cursor Grok 4.6 High (200K context)" },
+];
+function stripAnsi(value) {
+    return value.replace(ANSI_ESCAPE_SEQUENCE, "");
+}
+function contextWindowFor(id, label) {
+    if (/\b1\s*M\b/i.test(label))
+        return 1_000_000;
+    if (id.toLowerCase().startsWith("claude-") && /\b300\s*K\b/i.test(label))
+        return 300_000;
+    if (id.toLowerCase().startsWith("gpt-") && /\b272\s*K\b/i.test(label))
+        return 272_000;
+    return 200_000;
+}
+function modelEntry(id, label) {
+    return {
+        id,
+        name: label,
+        reasoning: REASONING_SUFFIX.test(id),
+        input: ["text"],
+        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+        contextWindow: contextWindowFor(id, label),
+        maxTokens: 64_000,
+    };
+}
+export const STATIC_CURSOR_CLI_MODELS = STATIC_MODEL_DEFINITIONS.map(({ id, label }) => modelEntry(id, label));
+/** Parse the complete `cursor-agent models` listing into extension provider entries. */
+export function parseCursorAgentModelsListing(listing) {
+    const plainListing = stripAnsi(listing);
+    const lines = plainListing.split(/\r?\n/);
+    if (lines.some((line) => MISLEADING_ERROR_LINE.test(line)))
+        return [];
+    const seen = new Set();
+    const models = [];
+    for (const rawLine of lines) {
+        const match = MODEL_LINE.exec(rawLine.trim());
+        if (!match)
+            continue;
+        const id = match[1];
+        const label = match[2].trim();
+        if (!MODEL_ID.test(id) || label.length === 0 || seen.has(id))
+            continue;
+        seen.add(id);
+        models.push(modelEntry(id, label));
+    }
+    return models;
+}
+async function runModelsProbe(executable, stdoutPath, timeoutMs) {
+    const output = await open(stdoutPath, "w");
+    try {
+        await new Promise((resolve, reject) => {
+            const child = spawn(executable, ["models"], {
+                stdio: ["ignore", output.fd, "ignore"],
+            });
+            let timedOut = false;
+            let settled = false;
+            const finish = (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(deadline);
+                if (error)
+                    reject(error);
+                else
+                    resolve();
+            };
+            const deadline = setTimeout(() => {
+                timedOut = true;
+                child.kill("SIGKILL");
+            }, timeoutMs);
+            child.once("error", (error) => finish(error));
+            child.once("close", (code, signal) => {
+                if (timedOut) {
+                    finish(new Error(`cursor-agent models exceeded its ${timeoutMs}ms deadline`));
+                    return;
+                }
+                if (code !== 0) {
+                    finish(new Error(`cursor-agent models failed with code ${String(code)} and signal ${String(signal)}`));
+                    return;
+                }
+                finish();
+            });
+        });
+    }
+    finally {
+        await output.close();
+    }
+}
+function defaultDeps(settings) {
+    return {
+        now: Date.now,
+        resolveExecutable: () => {
+            const executableDeps = defaultCursorAgentExecutableDeps();
+            return resolveCursorAgentExecutable({
+                ...executableDeps,
+                settings: { executablePath: settings.executablePath },
+            });
+        },
+        runProbe: runModelsProbe,
+        makeTemporaryDirectory: (prefix) => mkdtemp(prefix),
+        readTextFile: (path) => readFile(path, "utf8"),
+        makeDirectory: async (path) => {
+            await mkdir(path, { recursive: true });
+        },
+        writeTextFile: async (path, contents) => {
+            await writeFile(path, contents, "utf8");
+        },
+        renameFile: async (from, to) => {
+            await rename(from, to);
+        },
+        removeDirectory: async (path) => {
+            await rm(path, { recursive: true, force: true });
+        },
+    };
+}
+function catalogTtlMs(settings) {
+    const hours = settings.modelCatalogTtlHours;
+    const validHours = typeof hours === "number" && Number.isFinite(hours) && hours > 0 ? hours : DEFAULT_MODEL_CATALOG_TTL_HOURS;
+    return validHours * 60 * 60 * 1_000;
+}
+function parseCachedCatalog(contents) {
+    let parsed;
+    try {
+        parsed = JSON.parse(contents);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== "object" || parsed === null || !("cachedAt" in parsed) || !("models" in parsed)) {
+        return undefined;
+    }
+    const cachedAt = parsed.cachedAt;
+    const models = parsed.models;
+    if (typeof cachedAt !== "number" || !Number.isFinite(cachedAt) || !Array.isArray(models) || models.length === 0) {
+        return undefined;
+    }
+    const normalized = [];
+    const seen = new Set();
+    for (const candidate of models) {
+        if (typeof candidate !== "object" || candidate === null || !("id" in candidate) || !("name" in candidate)) {
+            return undefined;
+        }
+        const id = candidate.id;
+        const name = candidate.name;
+        if (typeof id !== "string" ||
+            !MODEL_ID.test(id) ||
+            typeof name !== "string" ||
+            name.length === 0 ||
+            seen.has(id)) {
+            return undefined;
+        }
+        seen.add(id);
+        normalized.push(modelEntry(id, name));
+    }
+    return { cachedAt, models: normalized };
+}
+async function readFreshCache(cachePath, now, ttlMs, deps) {
+    try {
+        const cached = parseCachedCatalog(await deps.readTextFile(cachePath));
+        if (!cached || now < cached.cachedAt || now - cached.cachedAt >= ttlMs)
+            return undefined;
+        return cached.models;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function writeCache(cacheDirectory, cachePath, catalog, deps) {
+    const temporaryPath = `${cachePath}.${process.pid}.${catalog.cachedAt}.tmp`;
+    await deps.makeDirectory(cacheDirectory);
+    await deps.writeTextFile(temporaryPath, `${JSON.stringify(catalog, null, 2)}\n`);
+    await deps.renameFile(temporaryPath, cachePath);
+}
+/** Resolve a cached or probed catalog, always degrading to the exact offline fallback. */
+export async function resolveCursorCliModelCatalog(options) {
+    const settings = options.settings ?? {};
+    const deps = { ...defaultDeps(settings), ...options.deps };
+    const cacheDirectory = join(options.agentDir, "cursor-cli-oauth");
+    const cachePath = join(cacheDirectory, "models.json");
+    const now = deps.now();
+    const cached = await readFreshCache(cachePath, now, catalogTtlMs(settings), deps);
+    if (cached)
+        return cached;
+    let temporaryDirectory;
+    try {
+        const executable = deps.resolveExecutable();
+        temporaryDirectory = await deps.makeTemporaryDirectory(join(tmpdir(), "senpi-cursor-models-"));
+        const stdoutPath = join(temporaryDirectory, "stdout.txt");
+        await deps.runProbe(executable, stdoutPath, MODEL_PROBE_TIMEOUT_MS);
+        const models = parseCursorAgentModelsListing(await deps.readTextFile(stdoutPath));
+        if (models.length === 0)
+            return STATIC_CURSOR_CLI_MODELS;
+        try {
+            await writeCache(cacheDirectory, cachePath, { cachedAt: now, models }, deps);
+        }
+        catch {
+            // A read-only cache directory must not prevent provider registration.
+        }
+        return models;
+    }
+    catch {
+        return STATIC_CURSOR_CLI_MODELS;
+    }
+    finally {
+        if (temporaryDirectory !== undefined) {
+            try {
+                await deps.removeDirectory(temporaryDirectory);
+            }
+            catch {
+                // Best-effort cleanup must not replace the catalog result.
+            }
+        }
+    }
+}
+//# sourceMappingURL=models.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gCAAgC,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAC3C,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACxC,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,MAAM,qBAAqB,GAAG,2CAA2C,CAAC;AAC1E,MAAM,gBAAgB,GAAG,8FAA8F,CAAC;AAmCxH,MAAM,wBAAwB,GAAqC;IAClE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;IAC7B,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAC5D,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACtE,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,iCAAiC,EAAE;IACpE,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACtE,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAC5D,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC9D,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAClD,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACxE,EAAE,EAAE,EAAE,6BAA6B,EAAE,KAAK,EAAE,4CAA4C,EAAE;IAC1F,EAAE,EAAE,EAAE,+BAA+B,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC9F,EAAE,EAAE,EAAE,8BAA8B,EAAE,KAAK,EAAE,6CAA6C,EAAE;IAC5F,EAAE,EAAE,EAAE,+BAA+B,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC9F,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,oCAAoC,EAAE;IAC5E,EAAE,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,qCAAqC,EAAE;CAC5E,CAAC;AAEF,SAAS,SAAS,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAU,EAAE,KAAa;IAClD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzF,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,EAAU,EAAE,KAAa;IAC5C,OAAO;QACN,EAAE;QACF,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE;QAC1D,aAAa,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC;QAC1C,SAAS,EAAE,MAAM;KACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAmC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CACtH,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CACrB,CAAC;AAEF,wFAAwF;AACxF,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QACvE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,UAAkB,EAAE,UAAkB,EAAE,SAAiB;IACtF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE;gBAC3C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC;aACtC,CAAC,CAAC;YACH,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;gBACtC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,EAAE,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACpC,IAAI,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,SAAS,aAAa,CAAC,CAAC,CAAC;oBAC9E,OAAO;gBACR,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvG,OAAO;gBACR,CAAC;gBACD,MAAM,EAAE,CAAC;YACV,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,QAAuC;IAC3D,OAAO;QACN,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,iBAAiB,EAAE,GAAG,EAAE;YACvB,MAAM,cAAc,GAAG,gCAAgC,EAAE,CAAC;YAC1D,OAAO,4BAA4B,CAAC;gBACnC,GAAG,cAAc;gBACjB,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;aACrD,CAAC,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,cAAc;QACxB,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACnD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAC9C,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;YAC9B,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAuC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,oBAAoB,CAAC;IAC5C,MAAM,UAAU,GACf,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC;IAC5G,OAAO,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC3C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC;QACvG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjH,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,CAAC;YAC3G,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,IACC,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACX,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,SAAiB,EACjB,GAAW,EACX,KAAa,EACb,IAA+B;IAE/B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK;YAAE,OAAO,SAAS,CAAC;QACzF,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,cAAsB,EACtB,SAAiB,EACjB,OAA2B,EAC3B,IAA+B;IAE/B,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,MAAM,CAAC;IAC5E,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACjF,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAA4C;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAClF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,kBAAsC,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,kBAAkB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,wBAAwB,CAAC;QACzD,IAAI,CAAC;YACJ,MAAM,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACR,sEAAsE;QACvE,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,wBAAwB,CAAC;IACjC,CAAC;YAAS,CAAC;QACV,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACR,2DAA2D;YAC5D,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { mkdir, mkdtemp, open, readFile, rename, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { ProviderModelConfig } from \"../../types.ts\";\nimport { defaultCursorAgentExecutableDeps, resolveCursorAgentExecutable } from \"./executable.ts\";\n\nconst MODEL_PROBE_TIMEOUT_MS = 15_000;\nconst DEFAULT_MODEL_CATALOG_TTL_HOURS = 24;\nconst ANSI_ESCAPE_SEQUENCE = /\\u001B(?:[@-Z\\\\-_]|\\[[0-?]*[ -/]*[@-~])/g;\nconst MODEL_LINE = /^(\\S+)\\s+-\\s+(.+)$/;\nconst MODEL_ID = /^[A-Za-z0-9][A-Za-z0-9._/:+-]*$/;\nconst MISLEADING_ERROR_LINE = /^\\s*(?:error|failed|failure)(?=\\s|:|-|$)/i;\nconst REASONING_SUFFIX = /(?:^|-)(?:thinking(?:-(?:low|medium|high|xhigh|max))?|low|medium|high|xhigh|max)(?:-fast)?$/i;\n\nexport type CursorCliModelCatalogSettings = {\n\treadonly modelCatalogTtlHours?: number;\n\treadonly executablePath?: string;\n};\n\nexport type CursorCliModelCatalogDeps = {\n\tnow: () => number;\n\tresolveExecutable: () => string;\n\trunProbe: (executable: string, stdoutPath: string, timeoutMs: number) => Promise<void>;\n\tmakeTemporaryDirectory: (prefix: string) => Promise<string>;\n\treadTextFile: (path: string) => Promise<string>;\n\tmakeDirectory: (path: string) => Promise<void>;\n\twriteTextFile: (path: string, contents: string) => Promise<void>;\n\trenameFile: (from: string, to: string) => Promise<void>;\n\tremoveDirectory: (path: string) => Promise<void>;\n};\n\nexport type ResolveCursorCliModelCatalogOptions = {\n\treadonly agentDir: string;\n\treadonly settings?: CursorCliModelCatalogSettings;\n\treadonly deps?: Partial<CursorCliModelCatalogDeps>;\n};\n\ntype CachedModelCatalog = {\n\treadonly cachedAt: number;\n\treadonly models: readonly ProviderModelConfig[];\n};\n\ntype StaticModelDefinition = {\n\treadonly id: string;\n\treadonly label: string;\n};\n\nconst STATIC_MODEL_DEFINITIONS: readonly StaticModelDefinition[] = [\n\t{ id: \"auto\", label: \"Auto\" },\n\t{ id: \"composer-2.5\", label: \"Composer 2.5 (200K context)\" },\n\t{ id: \"composer-2.5-fast\", label: \"Composer 2.5 Fast (200K context)\" },\n\t{ id: \"gpt-5.6-sol-high\", label: \"GPT 5.6 SOL High (272K context)\" },\n\t{ id: \"gpt-5.6-luna-high\", label: \"GPT 5.6 Luna High (272K context)\" },\n\t{ id: \"gpt-5.5-high\", label: \"GPT 5.5 High (272K context)\" },\n\t{ id: \"gpt-5.3-codex\", label: \"GPT 5.3 Codex (272K context)\" },\n\t{ id: \"gpt-5.2\", label: \"GPT 5.2 (272K context)\" },\n\t{ id: \"claude-opus-5-high\", label: \"Claude Opus 5 High (300K context)\" },\n\t{ id: \"claude-opus-5-thinking-high\", label: \"Claude Opus 5 Thinking High (300K context)\" },\n\t{ id: \"claude-opus-4-8-thinking-high\", label: \"Claude Opus 4.8 Thinking High (300K context)\" },\n\t{ id: \"claude-fable-5-thinking-high\", label: \"Claude Fable 5 Thinking High (300K context)\" },\n\t{ id: \"claude-sonnet-5-thinking-high\", label: \"Claude Sonnet 5 Thinking High (300K context)\" },\n\t{ id: \"gemini-3.7-flash-high\", label: \"Gemini 3.7 Flash High (1M context)\" },\n\t{ id: \"cursor-grok-4.6-high\", label: \"Cursor Grok 4.6 High (200K context)\" },\n];\n\nfunction stripAnsi(value: string): string {\n\treturn value.replace(ANSI_ESCAPE_SEQUENCE, \"\");\n}\n\nfunction contextWindowFor(id: string, label: string): number {\n\tif (/\\b1\\s*M\\b/i.test(label)) return 1_000_000;\n\tif (id.toLowerCase().startsWith(\"claude-\") && /\\b300\\s*K\\b/i.test(label)) return 300_000;\n\tif (id.toLowerCase().startsWith(\"gpt-\") && /\\b272\\s*K\\b/i.test(label)) return 272_000;\n\treturn 200_000;\n}\n\nfunction modelEntry(id: string, label: string): ProviderModelConfig {\n\treturn {\n\t\tid,\n\t\tname: label,\n\t\treasoning: REASONING_SUFFIX.test(id),\n\t\tinput: [\"text\"],\n\t\tcost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },\n\t\tcontextWindow: contextWindowFor(id, label),\n\t\tmaxTokens: 64_000,\n\t};\n}\n\nexport const STATIC_CURSOR_CLI_MODELS: readonly ProviderModelConfig[] = STATIC_MODEL_DEFINITIONS.map(({ id, label }) =>\n\tmodelEntry(id, label),\n);\n\n/** Parse the complete `cursor-agent models` listing into extension provider entries. */\nexport function parseCursorAgentModelsListing(listing: string): ProviderModelConfig[] {\n\tconst plainListing = stripAnsi(listing);\n\tconst lines = plainListing.split(/\\r?\\n/);\n\tif (lines.some((line) => MISLEADING_ERROR_LINE.test(line))) return [];\n\n\tconst seen = new Set<string>();\n\tconst models: ProviderModelConfig[] = [];\n\tfor (const rawLine of lines) {\n\t\tconst match = MODEL_LINE.exec(rawLine.trim());\n\t\tif (!match) continue;\n\t\tconst id = match[1];\n\t\tconst label = match[2].trim();\n\t\tif (!MODEL_ID.test(id) || label.length === 0 || seen.has(id)) continue;\n\t\tseen.add(id);\n\t\tmodels.push(modelEntry(id, label));\n\t}\n\treturn models;\n}\n\nasync function runModelsProbe(executable: string, stdoutPath: string, timeoutMs: number): Promise<void> {\n\tconst output = await open(stdoutPath, \"w\");\n\ttry {\n\t\tawait new Promise<void>((resolve, reject) => {\n\t\t\tconst child = spawn(executable, [\"models\"], {\n\t\t\t\tstdio: [\"ignore\", output.fd, \"ignore\"],\n\t\t\t});\n\t\t\tlet timedOut = false;\n\t\t\tlet settled = false;\n\t\t\tconst finish = (error?: Error): void => {\n\t\t\t\tif (settled) return;\n\t\t\t\tsettled = true;\n\t\t\t\tclearTimeout(deadline);\n\t\t\t\tif (error) reject(error);\n\t\t\t\telse resolve();\n\t\t\t};\n\t\t\tconst deadline = setTimeout(() => {\n\t\t\t\ttimedOut = true;\n\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t}, timeoutMs);\n\t\t\tchild.once(\"error\", (error) => finish(error));\n\t\t\tchild.once(\"close\", (code, signal) => {\n\t\t\t\tif (timedOut) {\n\t\t\t\t\tfinish(new Error(`cursor-agent models exceeded its ${timeoutMs}ms deadline`));\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (code !== 0) {\n\t\t\t\t\tfinish(new Error(`cursor-agent models failed with code ${String(code)} and signal ${String(signal)}`));\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tfinish();\n\t\t\t});\n\t\t});\n\t} finally {\n\t\tawait output.close();\n\t}\n}\n\nfunction defaultDeps(settings: CursorCliModelCatalogSettings): CursorCliModelCatalogDeps {\n\treturn {\n\t\tnow: Date.now,\n\t\tresolveExecutable: () => {\n\t\t\tconst executableDeps = defaultCursorAgentExecutableDeps();\n\t\t\treturn resolveCursorAgentExecutable({\n\t\t\t\t...executableDeps,\n\t\t\t\tsettings: { executablePath: settings.executablePath },\n\t\t\t});\n\t\t},\n\t\trunProbe: runModelsProbe,\n\t\tmakeTemporaryDirectory: (prefix) => mkdtemp(prefix),\n\t\treadTextFile: (path) => readFile(path, \"utf8\"),\n\t\tmakeDirectory: async (path) => {\n\t\t\tawait mkdir(path, { recursive: true });\n\t\t},\n\t\twriteTextFile: async (path, contents) => {\n\t\t\tawait writeFile(path, contents, \"utf8\");\n\t\t},\n\t\trenameFile: async (from, to) => {\n\t\t\tawait rename(from, to);\n\t\t},\n\t\tremoveDirectory: async (path) => {\n\t\t\tawait rm(path, { recursive: true, force: true });\n\t\t},\n\t};\n}\n\nfunction catalogTtlMs(settings: CursorCliModelCatalogSettings): number {\n\tconst hours = settings.modelCatalogTtlHours;\n\tconst validHours =\n\t\ttypeof hours === \"number\" && Number.isFinite(hours) && hours > 0 ? hours : DEFAULT_MODEL_CATALOG_TTL_HOURS;\n\treturn validHours * 60 * 60 * 1_000;\n}\n\nfunction parseCachedCatalog(contents: string): CachedModelCatalog | undefined {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(contents);\n\t} catch {\n\t\treturn undefined;\n\t}\n\tif (typeof parsed !== \"object\" || parsed === null || !(\"cachedAt\" in parsed) || !(\"models\" in parsed)) {\n\t\treturn undefined;\n\t}\n\tconst cachedAt = parsed.cachedAt;\n\tconst models = parsed.models;\n\tif (typeof cachedAt !== \"number\" || !Number.isFinite(cachedAt) || !Array.isArray(models) || models.length === 0) {\n\t\treturn undefined;\n\t}\n\n\tconst normalized: ProviderModelConfig[] = [];\n\tconst seen = new Set<string>();\n\tfor (const candidate of models) {\n\t\tif (typeof candidate !== \"object\" || candidate === null || !(\"id\" in candidate) || !(\"name\" in candidate)) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst id = candidate.id;\n\t\tconst name = candidate.name;\n\t\tif (\n\t\t\ttypeof id !== \"string\" ||\n\t\t\t!MODEL_ID.test(id) ||\n\t\t\ttypeof name !== \"string\" ||\n\t\t\tname.length === 0 ||\n\t\t\tseen.has(id)\n\t\t) {\n\t\t\treturn undefined;\n\t\t}\n\t\tseen.add(id);\n\t\tnormalized.push(modelEntry(id, name));\n\t}\n\treturn { cachedAt, models: normalized };\n}\n\nasync function readFreshCache(\n\tcachePath: string,\n\tnow: number,\n\tttlMs: number,\n\tdeps: CursorCliModelCatalogDeps,\n): Promise<readonly ProviderModelConfig[] | undefined> {\n\ttry {\n\t\tconst cached = parseCachedCatalog(await deps.readTextFile(cachePath));\n\t\tif (!cached || now < cached.cachedAt || now - cached.cachedAt >= ttlMs) return undefined;\n\t\treturn cached.models;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nasync function writeCache(\n\tcacheDirectory: string,\n\tcachePath: string,\n\tcatalog: CachedModelCatalog,\n\tdeps: CursorCliModelCatalogDeps,\n): Promise<void> {\n\tconst temporaryPath = `${cachePath}.${process.pid}.${catalog.cachedAt}.tmp`;\n\tawait deps.makeDirectory(cacheDirectory);\n\tawait deps.writeTextFile(temporaryPath, `${JSON.stringify(catalog, null, 2)}\\n`);\n\tawait deps.renameFile(temporaryPath, cachePath);\n}\n\n/** Resolve a cached or probed catalog, always degrading to the exact offline fallback. */\nexport async function resolveCursorCliModelCatalog(\n\toptions: ResolveCursorCliModelCatalogOptions,\n): Promise<readonly ProviderModelConfig[]> {\n\tconst settings = options.settings ?? {};\n\tconst deps = { ...defaultDeps(settings), ...options.deps };\n\tconst cacheDirectory = join(options.agentDir, \"cursor-cli-oauth\");\n\tconst cachePath = join(cacheDirectory, \"models.json\");\n\tconst now = deps.now();\n\tconst cached = await readFreshCache(cachePath, now, catalogTtlMs(settings), deps);\n\tif (cached) return cached;\n\n\tlet temporaryDirectory: string | undefined;\n\ttry {\n\t\tconst executable = deps.resolveExecutable();\n\t\ttemporaryDirectory = await deps.makeTemporaryDirectory(join(tmpdir(), \"senpi-cursor-models-\"));\n\t\tconst stdoutPath = join(temporaryDirectory, \"stdout.txt\");\n\t\tawait deps.runProbe(executable, stdoutPath, MODEL_PROBE_TIMEOUT_MS);\n\t\tconst models = parseCursorAgentModelsListing(await deps.readTextFile(stdoutPath));\n\t\tif (models.length === 0) return STATIC_CURSOR_CLI_MODELS;\n\t\ttry {\n\t\t\tawait writeCache(cacheDirectory, cachePath, { cachedAt: now, models }, deps);\n\t\t} catch {\n\t\t\t// A read-only cache directory must not prevent provider registration.\n\t\t}\n\t\treturn models;\n\t} catch {\n\t\treturn STATIC_CURSOR_CLI_MODELS;\n\t} finally {\n\t\tif (temporaryDirectory !== undefined) {\n\t\t\ttry {\n\t\t\t\tawait deps.removeDirectory(temporaryDirectory);\n\t\t\t} catch {\n\t\t\t\t// Best-effort cleanup must not replace the catalog result.\n\t\t\t}\n\t\t}\n\t}\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/native-bootstrap.d.ts

@@ -0,0 +1,14 @@
+import type { Credential, CredentialStore } from "@earendil-works/pi-ai";
+export type CursorCliNativeBootstrapDeps = {
+    store: CredentialStore;
+    readNativeCredential: () => Credential | undefined | Promise<Credential | undefined>;
+    canBootstrap?: () => boolean | Promise<boolean>;
+};
+/**
+ * Read the managed credential afresh and bootstrap it once from the native
+ * Cursor OAuth credential when empty. Concurrent reads share only the
+ * in-flight operation; later turns re-read storage so login/import changes are
+ * immediately visible.
+ */
+export declare function createCursorCliOauthCredentialReader(deps: CursorCliNativeBootstrapDeps): () => Promise<Credential | undefined>;
+//# sourceMappingURL=native-bootstrap.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/native-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-bootstrap.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/native-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIzE,MAAM,MAAM,4BAA4B,GAAG;IAC1C,KAAK,EAAE,eAAe,CAAC;IACvB,oBAAoB,EAAE,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChD,CAAC;AAoCF;;;;;GAKG;AACH,wBAAgB,oCAAoC,CACnD,IAAI,EAAE,4BAA4B,GAChC,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CASvC"}

package/dist/core/extensions/builtin/cursor-cli-oauth/native-bootstrap.js

@@ -0,0 +1,58 @@
+import { emptyCredential, listAccounts, SENTINEL_OAUTH_FIELDS } from "./accounts.js";
+import { CURSOR_CLI_OAUTH_PROVIDER_ID, importNativeCursorCredential } from "./oauth-login.js";
+function asManagedCredential(credential) {
+    if (credential?.type !== "oauth")
+        return undefined;
+    const managed = credential;
+    return Array.isArray(managed.accounts) &&
+        managed.access === SENTINEL_OAUTH_FIELDS.access &&
+        managed.refresh === SENTINEL_OAUTH_FIELDS.refresh &&
+        managed.expires === SENTINEL_OAUTH_FIELDS.expires
+        ? managed
+        : undefined;
+}
+async function bootstrapNativeCredential(deps) {
+    let current;
+    try {
+        current = await deps.store.read(CURSOR_CLI_OAUTH_PROVIDER_ID);
+        const managed = asManagedCredential(current);
+        if (managed && listAccounts(managed).length > 0)
+            return current;
+        if (current !== undefined && !managed)
+            return current;
+        if (deps.canBootstrap !== undefined && !(await deps.canBootstrap()))
+            return current;
+        const native = await deps.readNativeCredential();
+        if (native === undefined)
+            return current;
+        return await deps.store.modify(CURSOR_CLI_OAUTH_PROVIDER_ID, async (latest) => {
+            const latestManaged = asManagedCredential(latest);
+            if (latestManaged && listAccounts(latestManaged).length > 0)
+                return latest;
+            if (latest !== undefined && !latestManaged)
+                return latest;
+            return importNativeCursorCredential(latestManaged ?? emptyCredential(), async () => native);
+        });
+    }
+    catch {
+        return current;
+    }
+}
+/**
+ * Read the managed credential afresh and bootstrap it once from the native
+ * Cursor OAuth credential when empty. Concurrent reads share only the
+ * in-flight operation; later turns re-read storage so login/import changes are
+ * immediately visible.
+ */
+export function createCursorCliOauthCredentialReader(deps) {
+    let inFlight;
+    return () => {
+        if (inFlight)
+            return inFlight;
+        inFlight = bootstrapNativeCredential(deps).finally(() => {
+            inFlight = undefined;
+        });
+        return inFlight;
+    };
+}
+//# sourceMappingURL=native-bootstrap.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/native-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-bootstrap.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/native-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAAiC,eAAe,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACpH,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAQ9F,SAAS,mBAAmB,CAAC,UAAkC;IAC9D,IAAI,UAAU,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,OAAO,GAAG,UAAsC,CAAC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,MAAM;QAC/C,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,OAAO;QACjD,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,OAAO;QACjD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,IAAkC;IAC1E,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QAChE,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QACtD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC;QAEpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAEzC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7E,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,aAAa,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;YAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa;gBAAE,OAAO,MAAM,CAAC;YAC1D,OAAO,4BAA4B,CAAC,aAAa,IAAI,eAAe,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC;IAChB,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oCAAoC,CACnD,IAAkC;IAElC,IAAI,QAAqD,CAAC;IAC1D,OAAO,GAAG,EAAE;QACX,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACvD,QAAQ,GAAG,SAAS,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC;AACH,CAAC","sourcesContent":["import type { Credential, CredentialStore } from \"@earendil-works/pi-ai\";\nimport { type CursorCliOauthCredential, emptyCredential, listAccounts, SENTINEL_OAUTH_FIELDS } from \"./accounts.ts\";\nimport { CURSOR_CLI_OAUTH_PROVIDER_ID, importNativeCursorCredential } from \"./oauth-login.ts\";\n\nexport type CursorCliNativeBootstrapDeps = {\n\tstore: CredentialStore;\n\treadNativeCredential: () => Credential | undefined | Promise<Credential | undefined>;\n\tcanBootstrap?: () => boolean | Promise<boolean>;\n};\n\nfunction asManagedCredential(credential: Credential | undefined): CursorCliOauthCredential | undefined {\n\tif (credential?.type !== \"oauth\") return undefined;\n\tconst managed = credential as CursorCliOauthCredential;\n\treturn Array.isArray(managed.accounts) &&\n\t\tmanaged.access === SENTINEL_OAUTH_FIELDS.access &&\n\t\tmanaged.refresh === SENTINEL_OAUTH_FIELDS.refresh &&\n\t\tmanaged.expires === SENTINEL_OAUTH_FIELDS.expires\n\t\t? managed\n\t\t: undefined;\n}\n\nasync function bootstrapNativeCredential(deps: CursorCliNativeBootstrapDeps): Promise<Credential | undefined> {\n\tlet current: Credential | undefined;\n\ttry {\n\t\tcurrent = await deps.store.read(CURSOR_CLI_OAUTH_PROVIDER_ID);\n\t\tconst managed = asManagedCredential(current);\n\t\tif (managed && listAccounts(managed).length > 0) return current;\n\t\tif (current !== undefined && !managed) return current;\n\t\tif (deps.canBootstrap !== undefined && !(await deps.canBootstrap())) return current;\n\n\t\tconst native = await deps.readNativeCredential();\n\t\tif (native === undefined) return current;\n\n\t\treturn await deps.store.modify(CURSOR_CLI_OAUTH_PROVIDER_ID, async (latest) => {\n\t\t\tconst latestManaged = asManagedCredential(latest);\n\t\t\tif (latestManaged && listAccounts(latestManaged).length > 0) return latest;\n\t\t\tif (latest !== undefined && !latestManaged) return latest;\n\t\t\treturn importNativeCursorCredential(latestManaged ?? emptyCredential(), async () => native);\n\t\t});\n\t} catch {\n\t\treturn current;\n\t}\n}\n\n/**\n * Read the managed credential afresh and bootstrap it once from the native\n * Cursor OAuth credential when empty. Concurrent reads share only the\n * in-flight operation; later turns re-read storage so login/import changes are\n * immediately visible.\n */\nexport function createCursorCliOauthCredentialReader(\n\tdeps: CursorCliNativeBootstrapDeps,\n): () => Promise<Credential | undefined> {\n\tlet inFlight: Promise<Credential | undefined> | undefined;\n\treturn () => {\n\t\tif (inFlight) return inFlight;\n\t\tinFlight = bootstrapNativeCredential(deps).finally(() => {\n\t\t\tinFlight = undefined;\n\t\t});\n\t\treturn inFlight;\n\t};\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/oauth-login.d.ts

@@ -0,0 +1,77 @@
+import type { AuthCheck, AuthContext, Credential, OAuthAuth, OAuthCredential, OAuthCredentials, OAuthLoginCallbacks } from "@earendil-works/pi-ai";
+import { type CursorCliAccountSlot, type CursorCliOauthCredential } from "./accounts.ts";
+import { type CursorCliOauthProviderSettings } from "./settings.ts";
+export declare const CURSOR_CLI_OAUTH_PROVIDER_ID = "cursor-cli-oauth";
+export declare const CURSOR_CLI_OAUTH_NAME = "Cursor CLI (OAuth)";
+declare const FILE_STORE_LANE: "file-store";
+type CursorCliOauthSettings = Pick<CursorCliOauthProviderSettings, "enabled" | "executablePath">;
+type ImportedCursorCredential = {
+    access: string;
+    refresh: string;
+    expires?: number;
+};
+export type CursorCliOauthConfigDeps = {
+    readCurrent: () => Promise<Credential | undefined>;
+    readSettings: () => CursorCliOauthSettings;
+    resolveExecutable: (settings: CursorCliOauthSettings) => string;
+    loadOAuth?: () => Promise<OAuthAuth>;
+    readCursorFile?: () => Promise<ImportedCursorCredential | undefined>;
+    readCursorKeychain?: () => Promise<ImportedCursorCredential | undefined>;
+    /** Clock for acknowledgement timestamps; injectable so tests stay deterministic. */
+    now?: () => Date;
+    /** Persists the no-approval acknowledgement; the disk default is wired in defaultCursorCliOauthConfig. */
+    persistAcknowledgement?: (acknowledgedAt: string) => void;
+    /** Persists explicit provider activation after a successful login. */
+    persistEnabled?: (enabled: boolean) => void;
+};
+export type CursorCliOauthLaneResolution = {
+    lane: typeof FILE_STORE_LANE;
+    account: CursorCliAccountSlot;
+    accounts: CursorCliAccountSlot[];
+};
+export type CursorCliOauthConfig = {
+    name: string;
+    isSubscription: true;
+    check(input: {
+        ctx: AuthContext;
+        credential?: OAuthCredential;
+        signal?: AbortSignal;
+    }): Promise<AuthCheck | undefined>;
+    login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+    refreshToken(credentials: OAuthCredentials, signal: AbortSignal): Promise<OAuthCredentials>;
+    getApiKey(credentials: OAuthCredentials): string;
+};
+export type LocalCursorImportDeps = {
+    platform?: NodeJS.Platform;
+    readCursorFile?: () => Promise<ImportedCursorCredential | undefined>;
+    readCursorKeychain?: () => Promise<ImportedCursorCredential | undefined>;
+    onPrompt?: OAuthLoginCallbacks["onPrompt"];
+};
+/**
+ * The typed turn-path error for a missing cursor-agent binary: carries the
+ * `cursor-agent not installed` marker plus the install guidance verbatim, with
+ * the underlying resolution failure preserved as `cause`.
+ */
+export declare function cursorAgentNotInstalledError(cause: unknown): Error;
+/** Resolve credentials immediately before execution so a concurrent refresh cannot leave a stale token in memory. */
+export declare function resolveCursorCliOauthLane(deps: CursorCliOauthConfigDeps): Promise<CursorCliOauthLaneResolution>;
+/** The one-screen login explanation: what unattended Cursor CLI execution gives up, and the plan-mode alternative. */
+export declare const CURSOR_CLI_OAUTH_LOGIN_ACKNOWLEDGEMENT_EXPLANATION = "The Cursor CLI executes its own tools autonomously: with --force there is no senpi approval, no senpi sandboxing, and no tool-level audit for what it runs. Plan mode (planning only, no tool execution) is available via the executionMode setting.";
+/**
+ * Present the no-approval explanation exactly once and return the ISO
+ * acknowledgement timestamp on explicit confirmation, undefined otherwise.
+ * Shared by the login flow and the /cursor-account acknowledge subcommand so
+ * both surfaces present the identical explanation and persist identically.
+ */
+export declare function confirmCursorCliNoApprovalAcknowledgement(onPrompt: ((prompt: {
+    message: string;
+    placeholder?: string;
+}) => Promise<string>) | undefined, now: () => Date): Promise<string | undefined>;
+export declare function createCursorCliOauthConfig(deps: CursorCliOauthConfigDeps): CursorCliOauthConfig;
+/** Explicitly copy the user's local Cursor credential into this provider's managed account slots. */
+export declare function importLocalCursorCredential(current: CursorCliOauthCredential, deps?: LocalCursorImportDeps): Promise<CursorCliOauthCredential>;
+/** Explicitly copy Senpi's native `cursor` OAuth credential into a managed CLI account slot. */
+export declare function importNativeCursorCredential(current: CursorCliOauthCredential, readNativeCredential: () => Credential | undefined | Promise<Credential | undefined>): Promise<CursorCliOauthCredential>;
+export declare function defaultCursorCliOauthConfig(cwd: string, readCurrent: () => Promise<Credential | undefined>): CursorCliOauthConfig;
+export {};
+//# sourceMappingURL=oauth-login.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/oauth-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/oauth-login.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACX,SAAS,EACT,WAAW,EACX,UAAU,EACV,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EAEnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEN,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAI7B,MAAM,eAAe,CAAC;AAOvB,OAAO,EACN,KAAK,8BAA8B,EAInC,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,4BAA4B,qBAAqB,CAAC;AAC/D,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAI1D,QAAA,MAAM,eAAe,EAAG,YAAqB,CAAC;AAG9C,KAAK,sBAAsB,GAAG,IAAI,CAAC,8BAA8B,EAAE,SAAS,GAAG,gBAAgB,CAAC,CAAC;AAEjG,KAAK,wBAAwB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,WAAW,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACnD,YAAY,EAAE,MAAM,sBAAsB,CAAC;IAC3C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,MAAM,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACrE,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACzE,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,0GAA0G;IAC1G,sBAAsB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,sEAAsE;IACtE,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,OAAO,eAAe,CAAC;IAC7B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,IAAI,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE;QACZ,GAAG,EAAE,WAAW,CAAC;QACjB,UAAU,CAAC,EAAE,eAAe,CAAC;QAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACnC,KAAK,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,YAAY,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5F,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACrE,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACzE,QAAQ,CAAC,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC;CAC3C,CAAC;AA8EF;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAKlE;AAED,qHAAqH;AACrH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAKrH;AAsED,sHAAsH;AACtH,eAAO,MAAM,kDAAkD,yPAAyI,CAAC;AAIzM;;;;;GAKG;AACH,wBAAsB,yCAAyC,CAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,EAC9F,GAAG,EAAE,MAAM,IAAI,GACb,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,wBAAwB,GAAG,oBAAoB,CAkF/F;AAyDD,qGAAqG;AACrG,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,wBAAwB,EACjC,IAAI,GAAE,qBAA0B,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CAoBnC;AAwBD,gGAAgG;AAChG,wBAAsB,4BAA4B,CACjD,OAAO,EAAE,wBAAwB,EACjC,oBAAoB,EAAE,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAClF,OAAO,CAAC,wBAAwB,CAAC,CAMnC;AAED,wBAAgB,2BAA2B,CAC1C,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAChD,oBAAoB,CAgBtB"}