@code-yeongyu/senpi 2026.8.16 → 2026.8.18

package/dist/core/extensions/builtin/cursor-cli-oauth/diagnostics.d.ts

@@ -0,0 +1,139 @@
+import type { Credential } from "@earendil-works/pi-ai";
+import type { ExtensionAPI, ExtensionContext } from "../../types.ts";
+import { type CursorCliSessionRouter } from "./session-router.ts";
+import type { CursorCliOauthProviderSettings } from "./settings.ts";
+import { type CursorCliTransportHandle, type CursorCliTransportInput } from "./transport.ts";
+/** Minimum known-good cursor-agent version; below it senpi warns once per session but never blocks. */
+export declare const CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION = "2026.08.11";
+/** This lane always authenticates through per-account sandboxed HOME file stores. */
+export declare const CURSOR_CLI_STATUS_LANE = "file-store";
+/** senpi never delegates compaction on this lane, so it is always the context owner. */
+export declare const CURSOR_CLI_STATUS_CONTEXT_OWNER = "senpi";
+/** The native Cursor provider id; the recommended default when both providers are configured. */
+export declare const NATIVE_CURSOR_PROVIDER_ID = "cursor";
+export type CursorCliBlockWindow = {
+    readonly account: string;
+    readonly reason: "rate_limit" | "auth_error";
+    /** Expiry timestamp; undefined means blocked until the account logs in again. */
+    readonly blockedUntil: number | undefined;
+};
+export type CursorCliStatusReport = {
+    readonly lane: typeof CURSOR_CLI_STATUS_LANE;
+    readonly selectedAccount: string | undefined;
+    readonly pinnedAccount: string | undefined;
+    readonly chatId: string | undefined;
+    readonly lastModel: string | undefined;
+    readonly contextOwner: typeof CURSOR_CLI_STATUS_CONTEXT_OWNER;
+    readonly executablePath: string | undefined;
+    readonly executableVersion: string | undefined;
+    readonly minimumKnownGoodVersion: string;
+    readonly belowMinimumKnownGood: boolean;
+    readonly executableProblem: string | undefined;
+    readonly blockWindows: readonly CursorCliBlockWindow[];
+    readonly accountNames: readonly string[];
+    readonly nativeCursorConfigured: boolean;
+};
+export type CursorCliStatusDeps = {
+    readonly sessionId: string;
+    readonly settings: CursorCliOauthProviderSettings;
+    readonly readCredential: () => Credential | undefined | Promise<Credential | undefined>;
+    readonly readNativeCredential?: () => Credential | undefined | Promise<Credential | undefined>;
+    readonly router?: CursorCliSessionRouter;
+    readonly resolveExecutable?: (settings: CursorCliOauthProviderSettings) => string;
+    readonly probeVersion?: (executable: string) => Promise<string>;
+    readonly now?: () => number;
+};
+export declare function parseCursorCliVersion(version: string): {
+    year: number;
+    month: number;
+    day: number;
+} | undefined;
+/** Compares two `YYYY.MM.DD[-suffix]` version strings; undefined when either cannot be parsed. */
+export declare function compareCursorCliVersions(version: string, floor: string): number | undefined;
+/**
+ * Collects the status snapshot. Account data is read fresh from the credential
+ * store on every call - never memoized - so the rendered state always matches
+ * the store even after concurrent logins, removals, or failover blocks. Only
+ * account names and metadata are extracted; tokens never enter the report.
+ */
+export declare function collectCursorCliStatus(deps: CursorCliStatusDeps): Promise<CursorCliStatusReport>;
+/** Pure renderer: names and metadata only, never token material. */
+export declare function renderCursorCliStatus(report: CursorCliStatusReport): string;
+export type CursorCliFencedOutcome<T> = {
+    readonly status: "completed";
+    readonly value: T;
+} | {
+    readonly status: "dropped";
+    readonly reason: string;
+};
+export type CursorCliDeferredContinuation<T> = {
+    /** Runs the continuation through the fence, even if its timer was cancelled or already fired. */
+    fire(): Promise<CursorCliFencedOutcome<T>>;
+    cancel(): void;
+};
+export type CursorCliDroppedReporter = (description: string, reason: string) => void;
+/**
+ * A reload retires this extension generation (`AgentSession.reload()` then
+ * invalidates the old runner) while timers and promise continuations captured
+ * by it are still armed; every `ExtensionContext` getter then throws
+ * "stale extension generation after reload". The context carries no liveness
+ * flag, so a retired generation is only observable by probing a getter.
+ */
+export declare function isCursorCliContextRetired(ctx: ExtensionContext): boolean;
+/** Per-registration generation fence; one per extension registration (a reload builds a new one). */
+export declare class CursorCliGenerationGuard {
+    private retired;
+    private retirementReason;
+    private readonly timers;
+    private droppedReporter;
+    isRetired(): boolean;
+    retire(reason: string): void;
+    onDropped(reporter: CursorCliDroppedReporter): void;
+    /** Arms a timer the shutdown path cancels; arming after retirement is a no-op by construction. */
+    setTrackedTimeout(callback: () => void, delayMs: number): () => void;
+    /** Cancels every armed timer; returns how many were pending. */
+    clearTrackedTimers(): number;
+    /**
+     * Runs a deferred continuation behind the generation fence. A dropped
+     * continuation is reported, never silently presented as completed.
+     */
+    runFenced<T>(ctx: ExtensionContext, work: (ctx: ExtensionContext) => Promise<T> | T): Promise<CursorCliFencedOutcome<T>>;
+    /** Synchronous variant for continuations that only touch the context once, after an outer await. */
+    runFencedSync(ctx: ExtensionContext, work: () => void): {
+        ran: boolean;
+    };
+    defer<T>(ctx: ExtensionContext, work: (ctx: ExtensionContext) => Promise<T> | T, delayMs?: number): CursorCliDeferredContinuation<T>;
+    private armTracked;
+    private cancelTimer;
+    private retirementReasonFor;
+    private reportDropped;
+}
+/**
+ * Registry of live children this extension spawned. Entries leave the registry
+ * when their transport run settles, so `killAll` only ever signals live
+ * process groups and is idempotent across repeated interruptions.
+ */
+export declare class CursorCliChildRegistry {
+    private readonly children;
+    track(handle: CursorCliTransportHandle): CursorCliTransportHandle;
+    livePids(): number[];
+    /** SIGTERMs every tracked process group with a SIGKILL escalation; returns the pids it signalled. */
+    killAll(graceMs?: number): number[];
+}
+/** Shared registry; child pids are process-wide resources, so one registry serves every generation. */
+export declare const cursorCliChildRegistry: CursorCliChildRegistry;
+/** Spawns one cursor-agent run through the transport and registers it for shutdown teardown. */
+export declare function spawnCursorCliTracked(input: CursorCliTransportInput, registry?: CursorCliChildRegistry): CursorCliTransportHandle;
+export type CursorCliShutdownSafetyDeps = {
+    readonly generation?: CursorCliGenerationGuard;
+    readonly registry?: CursorCliChildRegistry;
+};
+/**
+ * Installs the `session_shutdown`/`session_extensions_removed` teardown: kill
+ * every tracked child's process group, cancel the generation's pending timers,
+ * and retire the generation so every deferred continuation is fenced. Safe to
+ * fire repeatedly; a retired generation is never resurrected (a reload builds a
+ * new registration with a fresh guard).
+ */
+export declare function registerCursorCliShutdownSafety(pi: Pick<ExtensionAPI, "on">, deps?: CursorCliShutdownSafetyDeps): CursorCliGenerationGuard;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EACX,YAAY,EACZ,gBAAgB,EAGhB,MAAM,gBAAgB,CAAC;AASxB,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,qBAAqB,CAAC;AAC1F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAEN,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAE5B,MAAM,gBAAgB,CAAC;AAExB,uGAAuG;AACvG,eAAO,MAAM,qCAAqC,eAAe,CAAC;AAClE,qFAAqF;AACrF,eAAO,MAAM,sBAAsB,eAAe,CAAC;AACnD,wFAAwF;AACxF,eAAO,MAAM,+BAA+B,UAAU,CAAC;AACvD,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,WAAW,CAAC;AAMlD,MAAM,MAAM,oBAAoB,GAAG;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC;IAC7C,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC,QAAQ,CAAC,IAAI,EAAE,OAAO,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,OAAO,+BAA+B,CAAC;IAC9D,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACxF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,8BAA8B,KAAK,MAAM,CAAC;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B,CAAC;AAUF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAI/G;AAED,kGAAkG;AAClG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAU3F;AAkBD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA8DtG;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CA4C3E;AAMD,MAAM,MAAM,sBAAsB,CAAC,CAAC,IACjC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,MAAM,6BAA6B,CAAC,CAAC,IAAI;IAC9C,iGAAiG;IACjG,IAAI,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;AAErF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAOxE;AAED,qGAAqG;AACrG,qBAAa,wBAAwB;IACpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;IACnE,OAAO,CAAC,eAAe,CAAuC;IAE9D,SAAS,IAAI,OAAO;IAIpB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAM5B,SAAS,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAInD,kGAAkG;IAClG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI;IAOpE,gEAAgE;IAChE,kBAAkB,IAAI,MAAM;IAO5B;;;OAGG;IACG,SAAS,CAAC,CAAC,EAChB,GAAG,EAAE,gBAAgB,EACrB,IAAI,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC7C,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IASrC,oGAAoG;IACpG,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE;IAUxE,KAAK,CAAC,CAAC,EACN,GAAG,EAAE,gBAAgB,EACrB,IAAI,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC/C,OAAO,SAAI,GACT,6BAA6B,CAAC,CAAC,CAAC;IAqBnC,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,aAAa;CAGrB;AAkBD;;;;GAIG;AACH,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAErE,KAAK,CAAC,MAAM,EAAE,wBAAwB,GAAG,wBAAwB;IASjE,QAAQ,IAAI,MAAM,EAAE;IAIpB,qGAAqG;IACrG,OAAO,CAAC,OAAO,GAAE,MAAkC,GAAG,MAAM,EAAE;CAwB9D;AAED,uGAAuG;AACvG,eAAO,MAAM,sBAAsB,wBAA+B,CAAC;AAEnE,gGAAgG;AAChG,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,GAAE,sBAA+C,GACvD,wBAAwB,CAE1B;AAED,MAAM,MAAM,2BAA2B,GAAG;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC3C,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAC5B,IAAI,GAAE,2BAAgC,GACpC,wBAAwB,CAe1B"}

package/dist/core/extensions/builtin/cursor-cli-oauth/diagnostics.js

@@ -0,0 +1,362 @@
+import { emptyCredential, listAccounts } from "./accounts.js";
+import { selectAccount } from "./affinity.js";
+import { CursorAgentNotInstalledError, defaultCursorAgentExecutableDeps, probeCursorAgentVersion, resolveCursorAgentExecutable, } from "./executable.js";
+import { cursorCliSessionRouter } from "./session-router.js";
+import { CURSOR_CLI_ABORT_GRACE_MS, spawnCursorCli, } from "./transport.js";
+/** Minimum known-good cursor-agent version; below it senpi warns once per session but never blocks. */
+export const CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION = "2026.08.11";
+/** This lane always authenticates through per-account sandboxed HOME file stores. */
+export const CURSOR_CLI_STATUS_LANE = "file-store";
+/** senpi never delegates compaction on this lane, so it is always the context owner. */
+export const CURSOR_CLI_STATUS_CONTEXT_OWNER = "senpi";
+/** The native Cursor provider id; the recommended default when both providers are configured. */
+export const NATIVE_CURSOR_PROVIDER_ID = "cursor";
+function asCursorCredential(value) {
+    return value !== undefined && value.type === "oauth" ? value : emptyCredential();
+}
+function isUsableOAuthCredential(value) {
+    return value !== undefined && value.type === "oauth" && typeof value.access === "string" && value.access.length > 0;
+}
+export function parseCursorCliVersion(version) {
+    const match = /^v?(\d{1,4})\.(\d{1,2})\.(\d{1,2})/.exec(version.trim());
+    if (!match)
+        return undefined;
+    return { year: Number(match[1]), month: Number(match[2]), day: Number(match[3]) };
+}
+/** Compares two `YYYY.MM.DD[-suffix]` version strings; undefined when either cannot be parsed. */
+export function compareCursorCliVersions(version, floor) {
+    const parsed = parseCursorCliVersion(version);
+    const baseline = parseCursorCliVersion(floor);
+    if (parsed === undefined || baseline === undefined)
+        return undefined;
+    const left = [parsed.year, parsed.month, parsed.day];
+    const right = [baseline.year, baseline.month, baseline.day];
+    for (let index = 0; index < 3; index += 1) {
+        if (left[index] !== right[index])
+            return left[index] < right[index] ? -1 : 1;
+    }
+    return 0;
+}
+function blockWindowFor(account, now) {
+    if (account.blockReason === "auth_error") {
+        return { account: account.name, reason: "auth_error", blockedUntil: undefined };
+    }
+    if (account.blockedUntil !== undefined && account.blockedUntil > now) {
+        return { account: account.name, reason: "rate_limit", blockedUntil: account.blockedUntil };
+    }
+    return undefined;
+}
+const defaultResolveExecutable = (settings) => resolveCursorAgentExecutable({
+    ...defaultCursorAgentExecutableDeps(),
+    settings: { executablePath: settings.executablePath },
+});
+/**
+ * Collects the status snapshot. Account data is read fresh from the credential
+ * store on every call - never memoized - so the rendered state always matches
+ * the store even after concurrent logins, removals, or failover blocks. Only
+ * account names and metadata are extracted; tokens never enter the report.
+ */
+export async function collectCursorCliStatus(deps) {
+    const now = deps.now ?? Date.now;
+    const credential = asCursorCredential(await deps.readCredential());
+    const accounts = listAccounts(credential);
+    const pinnedAccount = deps.settings.pinnedAccount ?? credential.pinned;
+    const record = (deps.router ?? cursorCliSessionRouter).getRecord(deps.sessionId);
+    let selectedAccount = record?.accountName;
+    if (selectedAccount === undefined && accounts.length > 0) {
+        try {
+            selectedAccount = selectAccount(accounts, {
+                sessionId: deps.sessionId,
+                pinnedAccount,
+                now: now(),
+            }).name;
+        }
+        catch {
+            // Every account is blocked; report no selection instead of failing status.
+        }
+    }
+    let executablePath;
+    let executableProblem;
+    try {
+        executablePath = (deps.resolveExecutable ?? defaultResolveExecutable)(deps.settings);
+    }
+    catch (error) {
+        executableProblem = error instanceof Error ? error.message : String(error);
+        if (!(error instanceof CursorAgentNotInstalledError))
+            executablePath = undefined;
+    }
+    let executableVersion;
+    if (executablePath !== undefined) {
+        try {
+            executableVersion = await (deps.probeVersion ?? probeCursorAgentVersion)(executablePath);
+        }
+        catch {
+            // Version unknown; the floor warning only applies to parseable versions.
+        }
+    }
+    const comparison = executableVersion === undefined
+        ? undefined
+        : compareCursorCliVersions(executableVersion, CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION);
+    const nativeCredential = deps.readNativeCredential === undefined ? undefined : await deps.readNativeCredential();
+    return {
+        lane: CURSOR_CLI_STATUS_LANE,
+        selectedAccount,
+        pinnedAccount,
+        chatId: record?.chatId,
+        lastModel: record?.lastModel,
+        contextOwner: CURSOR_CLI_STATUS_CONTEXT_OWNER,
+        executablePath,
+        executableVersion,
+        minimumKnownGoodVersion: CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION,
+        belowMinimumKnownGood: comparison !== undefined && comparison < 0,
+        executableProblem,
+        blockWindows: accounts
+            .map((account) => blockWindowFor(account, now()))
+            .filter((window) => window !== undefined),
+        accountNames: accounts.map((account) => account.name),
+        nativeCursorConfigured: isUsableOAuthCredential(nativeCredential),
+    };
+}
+/** Pure renderer: names and metadata only, never token material. */
+export function renderCursorCliStatus(report) {
+    const lines = ["Cursor CLI (OAuth) status:"];
+    lines.push(`  Auth lane: ${report.lane}`);
+    lines.push(`  Context owner: ${report.contextOwner}`);
+    lines.push(`  Selected account: ${report.selectedAccount === undefined
+        ? "none"
+        : report.selectedAccount === report.pinnedAccount
+            ? `${report.selectedAccount} (pinned)`
+            : report.selectedAccount}`);
+    lines.push(`  Chat id: ${report.chatId ?? "none (no turns yet on this session)"}`);
+    lines.push(`  Last model: ${report.lastModel ?? "none"}`);
+    if (report.executableProblem !== undefined) {
+        lines.push(`  Executable: not installed - ${report.executableProblem}`);
+    }
+    else {
+        lines.push(`  Executable: ${report.executablePath ?? "not installed"}`);
+    }
+    if (report.executableVersion !== undefined)
+        lines.push(`  Version: ${report.executableVersion}`);
+    if (report.belowMinimumKnownGood) {
+        lines.push(`  WARNING: cursor-agent ${report.executableVersion} is below the minimum known-good ${report.minimumKnownGoodVersion}; upgrade recommended`);
+    }
+    if (report.blockWindows.length === 0) {
+        lines.push("  Block windows: none");
+    }
+    else {
+        lines.push("  Block windows:");
+        for (const window of report.blockWindows) {
+            lines.push(window.blockedUntil === undefined
+                ? `    ${window.account}: ${window.reason}, until re-login`
+                : `    ${window.account}: ${window.reason}, expires ${new Date(window.blockedUntil).toISOString()}`);
+        }
+    }
+    if (report.nativeCursorConfigured) {
+        lines.push(`  Recommended default: the native '${NATIVE_CURSOR_PROVIDER_ID}' provider is configured; use this Cursor CLI (OAuth) lane as the fallback when the native path misbehaves.`);
+    }
+    return lines.join("\n");
+}
+/**
+ * A reload retires this extension generation (`AgentSession.reload()` then
+ * invalidates the old runner) while timers and promise continuations captured
+ * by it are still armed; every `ExtensionContext` getter then throws
+ * "stale extension generation after reload". The context carries no liveness
+ * flag, so a retired generation is only observable by probing a getter.
+ */
+export function isCursorCliContextRetired(ctx) {
+    try {
+        ctx.isIdle();
+        return false;
+    }
+    catch {
+        return true;
+    }
+}
+/** Per-registration generation fence; one per extension registration (a reload builds a new one). */
+export class CursorCliGenerationGuard {
+    constructor() {
+        this.retired = false;
+        this.timers = new Set();
+    }
+    isRetired() {
+        return this.retired;
+    }
+    retire(reason) {
+        if (this.retired)
+            return;
+        this.retired = true;
+        this.retirementReason = `extension generation retired (${reason})`;
+    }
+    onDropped(reporter) {
+        this.droppedReporter = reporter;
+    }
+    /** Arms a timer the shutdown path cancels; arming after retirement is a no-op by construction. */
+    setTrackedTimeout(callback, delayMs) {
+        const timer = this.armTracked(callback, delayMs);
+        return () => {
+            if (timer !== undefined)
+                this.cancelTimer(timer);
+        };
+    }
+    /** Cancels every armed timer; returns how many were pending. */
+    clearTrackedTimers() {
+        const pending = this.timers.size;
+        for (const timer of this.timers)
+            clearTimeout(timer);
+        this.timers.clear();
+        return pending;
+    }
+    /**
+     * Runs a deferred continuation behind the generation fence. A dropped
+     * continuation is reported, never silently presented as completed.
+     */
+    async runFenced(ctx, work) {
+        const blockedReason = this.retirementReasonFor(ctx);
+        if (blockedReason !== undefined) {
+            this.reportDropped("deferred continuation", blockedReason);
+            return { status: "dropped", reason: blockedReason };
+        }
+        return { status: "completed", value: await work(ctx) };
+    }
+    /** Synchronous variant for continuations that only touch the context once, after an outer await. */
+    runFencedSync(ctx, work) {
+        const blockedReason = this.retirementReasonFor(ctx);
+        if (blockedReason !== undefined) {
+            this.reportDropped("deferred continuation", blockedReason);
+            return { ran: false };
+        }
+        work();
+        return { ran: true };
+    }
+    defer(ctx, work, delayMs = 0) {
+        const fire = () => this.runFenced(ctx, work);
+        const timer = this.armTracked(() => {
+            // The timer path has no caller to receive a rejection (senpi #866 crash
+            // class), so a post-fence failure is reported instead of escaping to the
+            // timer queue.
+            void fire().catch((error) => {
+                this.reportDropped("deferred continuation", `failed after the retirement check: ${error instanceof Error ? error.message : String(error)}`);
+            });
+        }, delayMs);
+        return {
+            fire,
+            cancel: () => {
+                if (timer !== undefined)
+                    this.cancelTimer(timer);
+            },
+        };
+    }
+    armTracked(callback, delayMs) {
+        if (this.retired)
+            return undefined;
+        const timer = setTimeout(() => {
+            this.timers.delete(timer);
+            callback();
+        }, delayMs);
+        this.timers.add(timer);
+        return timer;
+    }
+    cancelTimer(timer) {
+        clearTimeout(timer);
+        this.timers.delete(timer);
+    }
+    retirementReasonFor(ctx) {
+        if (this.retired)
+            return this.retirementReason ?? "extension generation retired";
+        if (isCursorCliContextRetired(ctx))
+            return "extension context retired by reload";
+        return undefined;
+    }
+    reportDropped(description, reason) {
+        this.droppedReporter?.(description, reason);
+    }
+}
+/** Process-group kill on the tracked pid, mirroring transport.ts's mechanism (never name matching). */
+function killCursorCliProcessGroup(pid, signal) {
+    try {
+        if (process.platform === "win32")
+            process.kill(pid, signal);
+        else
+            process.kill(-pid, signal);
+    }
+    catch (error) {
+        if (error.code !== "ESRCH")
+            throw error;
+    }
+}
+/**
+ * Registry of live children this extension spawned. Entries leave the registry
+ * when their transport run settles, so `killAll` only ever signals live
+ * process groups and is idempotent across repeated interruptions.
+ */
+export class CursorCliChildRegistry {
+    constructor() {
+        this.children = new Map();
+    }
+    track(handle) {
+        this.children.set(handle.pid, { pid: handle.pid, abort: () => handle.abort(), killed: false });
+        void handle.completed.then(() => this.children.delete(handle.pid), () => this.children.delete(handle.pid));
+        return handle;
+    }
+    livePids() {
+        return [...this.children.keys()];
+    }
+    /** SIGTERMs every tracked process group with a SIGKILL escalation; returns the pids it signalled. */
+    killAll(graceMs = CURSOR_CLI_ABORT_GRACE_MS) {
+        const signalled = [];
+        for (const entry of this.children.values()) {
+            if (entry.killed)
+                continue;
+            entry.killed = true;
+            signalled.push(entry.pid);
+            // Teardown must never throw into the shutdown event loop; individual
+            // failures are contained per child, and the SIGKILL escalation below
+            // still runs for that pid.
+            try {
+                entry.abort();
+            }
+            catch {
+                // Deliberate: shutdown stays idempotent even if one child misbehaves.
+            }
+            try {
+                killCursorCliProcessGroup(entry.pid, "SIGTERM");
+            }
+            catch {
+                // Deliberate: see above.
+            }
+            const escalation = setTimeout(() => killCursorCliProcessGroup(entry.pid, "SIGKILL"), graceMs);
+            escalation.unref?.();
+        }
+        return signalled;
+    }
+}
+/** Shared registry; child pids are process-wide resources, so one registry serves every generation. */
+export const cursorCliChildRegistry = new CursorCliChildRegistry();
+/** Spawns one cursor-agent run through the transport and registers it for shutdown teardown. */
+export function spawnCursorCliTracked(input, registry = cursorCliChildRegistry) {
+    return registry.track(spawnCursorCli(input));
+}
+/**
+ * Installs the `session_shutdown`/`session_extensions_removed` teardown: kill
+ * every tracked child's process group, cancel the generation's pending timers,
+ * and retire the generation so every deferred continuation is fenced. Safe to
+ * fire repeatedly; a retired generation is never resurrected (a reload builds a
+ * new registration with a fresh guard).
+ */
+export function registerCursorCliShutdownSafety(pi, deps = {}) {
+    const generation = deps.generation ?? new CursorCliGenerationGuard();
+    const registry = deps.registry ?? cursorCliChildRegistry;
+    const teardown = (reason) => {
+        registry.killAll();
+        generation.clearTrackedTimers();
+        generation.retire(reason);
+    };
+    pi.on("session_shutdown", (event) => {
+        teardown(event.reason);
+    });
+    pi.on("session_extensions_removed", (event) => {
+        teardown(event.reason);
+    });
+    return generation;
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/core/extensions/builtin/cursor-cli-oauth/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/diagnostics.ts"],"names":[],"mappings":"AAOA,OAAO,EAA4D,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACxH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACN,4BAA4B,EAC5B,gCAAgC,EAChC,uBAAuB,EACvB,4BAA4B,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAA+B,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,EACN,yBAAyB,EAGzB,cAAc,GACd,MAAM,gBAAgB,CAAC;AAExB,uGAAuG;AACvG,MAAM,CAAC,MAAM,qCAAqC,GAAG,YAAY,CAAC;AAClE,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AACnD,wFAAwF;AACxF,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAO,CAAC;AACvD,iGAAiG;AACjG,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAyClD,SAAS,kBAAkB,CAAC,KAA6B;IACxD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAE,KAAkC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;AAChH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA6B;IAC7D,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,KAAa;IACtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAU,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAU,CAAC;IACrE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B,EAAE,GAAW;IACjE,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,wBAAwB,GAAG,CAAC,QAAwC,EAAU,EAAE,CACrF,4BAA4B,CAAC;IAC5B,GAAG,gCAAgC,EAAE;IACrC,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;CACrD,CAAC,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyB;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEjF,IAAI,eAAe,GAAG,MAAM,EAAE,WAAW,CAAC;IAC1C,IAAI,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC;YACJ,eAAe,GAAG,aAAa,CAAC,QAAQ,EAAE;gBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa;gBACb,GAAG,EAAE,GAAG,EAAE;aACV,CAAC,CAAC,IAAI,CAAC;QACT,CAAC;QAAC,MAAM,CAAC;YACR,2EAA2E;QAC5E,CAAC;IACF,CAAC;IAED,IAAI,cAAkC,CAAC;IACvC,IAAI,iBAAqC,CAAC;IAC1C,IAAI,CAAC;QACJ,cAAc,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,iBAAiB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,KAAK,YAAY,4BAA4B,CAAC;YAAE,cAAc,GAAG,SAAS,CAAC;IAClF,CAAC;IAED,IAAI,iBAAqC,CAAC;IAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,uBAAuB,CAAC,CAAC,cAAc,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACR,yEAAyE;QAC1E,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GACf,iBAAiB,KAAK,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IAEvF,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAEjH,OAAO;QACN,IAAI,EAAE,sBAAsB;QAC5B,eAAe;QACf,aAAa;QACb,MAAM,EAAE,MAAM,EAAE,MAAM;QACtB,SAAS,EAAE,MAAM,EAAE,SAAS;QAC5B,YAAY,EAAE,+BAA+B;QAC7C,cAAc;QACd,iBAAiB;QACjB,uBAAuB,EAAE,qCAAqC;QAC9D,qBAAqB,EAAE,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC;QACjE,iBAAiB;QACjB,YAAY,EAAE,QAAQ;aACpB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAAkC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;QAC1E,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACrD,sBAAsB,EAAE,uBAAuB,CAAC,gBAAgB,CAAC;KACjE,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IAClE,MAAM,KAAK,GAAa,CAAC,4BAA4B,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CACT,uBACC,MAAM,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,aAAa;YAChD,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,WAAW;YACtC,CAAC,CAAC,MAAM,CAAC,eACZ,EAAE,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,IAAI,qCAAqC,EAAE,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,cAAc,IAAI,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACT,2BAA2B,MAAM,CAAC,iBAAiB,oCAAoC,MAAM,CAAC,uBAAuB,uBAAuB,CAC5I,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CACT,MAAM,CAAC,YAAY,KAAK,SAAS;gBAChC,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,kBAAkB;gBAC3D,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CACpG,CAAC;QACH,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACT,sCAAsC,yBAAyB,6GAA6G,CAC5K,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAqB;IAC9D,IAAI,CAAC;QACJ,GAAG,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,qGAAqG;AACrG,MAAM,OAAO,wBAAwB;IAArC;QACS,YAAO,GAAG,KAAK,CAAC;QAEP,WAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IA6GpE,CAAC;IA1GA,SAAS;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,MAAc;QACpB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,iCAAiC,MAAM,GAAG,CAAC;IACpE,CAAC;IAED,SAAS,CAAC,QAAkC;QAC3C,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IACjC,CAAC;IAED,kGAAkG;IAClG,iBAAiB,CAAC,QAAoB,EAAE,OAAe;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,GAAG,EAAE;YACX,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,kBAAkB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACd,GAAqB,EACrB,IAA+C;QAE/C,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,oGAAoG;IACpG,aAAa,CAAC,GAAqB,EAAE,IAAgB;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;YAC3D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CACJ,GAAqB,EACrB,IAA+C,EAC/C,OAAO,GAAG,CAAC;QAEX,MAAM,IAAI,GAAG,GAAuC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAClC,wEAAwE;YACxE,yEAAyE;YACzE,eAAe;YACf,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACpC,IAAI,CAAC,aAAa,CACjB,uBAAuB,EACvB,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9F,CAAC;YACH,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,OAAO;YACN,IAAI;YACJ,MAAM,EAAE,GAAG,EAAE;gBACZ,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;SACD,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,QAAoB,EAAE,OAAe;QACvD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,QAAQ,EAAE,CAAC;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,KAAoC;QACvD,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,mBAAmB,CAAC,GAAqB;QAChD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,gBAAgB,IAAI,8BAA8B,CAAC;QACjF,IAAI,yBAAyB,CAAC,GAAG,CAAC;YAAE,OAAO,qCAAqC,CAAC;QACjF,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,aAAa,CAAC,WAAmB,EAAE,MAAc;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;CACD;AAED,uGAAuG;AACvG,SAAS,yBAAyB,CAAC,GAAW,EAAE,MAAsB;IACrE,IAAI,CAAC;QACJ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;IACpE,CAAC;AACF,CAAC;AAQD;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAAnC;QACkB,aAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAwCtE,CAAC;IAtCA,KAAK,CAAC,MAAgC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EACtC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CACtC,CAAC;QACF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,QAAQ;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,qGAAqG;IACrG,OAAO,CAAC,UAAkB,yBAAyB;QAClD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC3B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,qEAAqE;YACrE,qEAAqE;YACrE,2BAA2B;YAC3B,IAAI,CAAC;gBACJ,KAAK,CAAC,KAAK,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACR,sEAAsE;YACvE,CAAC;YACD,IAAI,CAAC;gBACJ,yBAAyB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACR,yBAAyB;YAC1B,CAAC;YACD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9F,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;CACD;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEnE,gGAAgG;AAChG,MAAM,UAAU,qBAAqB,CACpC,KAA8B,EAC9B,WAAmC,sBAAsB;IAEzD,OAAO,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC9C,EAA4B,EAC5B,OAAoC,EAAE;IAEtC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,wBAAwB,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,sBAAsB,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACzC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnB,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAChC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAA2B,EAAE,EAAE;QACzD,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,4BAA4B,EAAE,CAAC,KAAoC,EAAE,EAAE;QAC5E,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACnB,CAAC","sourcesContent":["import type { Credential } from \"@earendil-works/pi-ai\";\nimport type {\n\tExtensionAPI,\n\tExtensionContext,\n\tSessionExtensionsRemovedEvent,\n\tSessionShutdownEvent,\n} from \"../../types.ts\";\nimport { type CursorCliAccountSlot, type CursorCliOauthCredential, emptyCredential, listAccounts } from \"./accounts.ts\";\nimport { selectAccount } from \"./affinity.ts\";\nimport {\n\tCursorAgentNotInstalledError,\n\tdefaultCursorAgentExecutableDeps,\n\tprobeCursorAgentVersion,\n\tresolveCursorAgentExecutable,\n} from \"./executable.ts\";\nimport { type CursorCliSessionRouter, cursorCliSessionRouter } from \"./session-router.ts\";\nimport type { CursorCliOauthProviderSettings } from \"./settings.ts\";\nimport {\n\tCURSOR_CLI_ABORT_GRACE_MS,\n\ttype CursorCliTransportHandle,\n\ttype CursorCliTransportInput,\n\tspawnCursorCli,\n} from \"./transport.ts\";\n\n/** Minimum known-good cursor-agent version; below it senpi warns once per session but never blocks. */\nexport const CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION = \"2026.08.11\";\n/** This lane always authenticates through per-account sandboxed HOME file stores. */\nexport const CURSOR_CLI_STATUS_LANE = \"file-store\";\n/** senpi never delegates compaction on this lane, so it is always the context owner. */\nexport const CURSOR_CLI_STATUS_CONTEXT_OWNER = \"senpi\";\n/** The native Cursor provider id; the recommended default when both providers are configured. */\nexport const NATIVE_CURSOR_PROVIDER_ID = \"cursor\";\n\n// ============================================================================\n// Status diagnostics\n// ============================================================================\n\nexport type CursorCliBlockWindow = {\n\treadonly account: string;\n\treadonly reason: \"rate_limit\" | \"auth_error\";\n\t/** Expiry timestamp; undefined means blocked until the account logs in again. */\n\treadonly blockedUntil: number | undefined;\n};\n\nexport type CursorCliStatusReport = {\n\treadonly lane: typeof CURSOR_CLI_STATUS_LANE;\n\treadonly selectedAccount: string | undefined;\n\treadonly pinnedAccount: string | undefined;\n\treadonly chatId: string | undefined;\n\treadonly lastModel: string | undefined;\n\treadonly contextOwner: typeof CURSOR_CLI_STATUS_CONTEXT_OWNER;\n\treadonly executablePath: string | undefined;\n\treadonly executableVersion: string | undefined;\n\treadonly minimumKnownGoodVersion: string;\n\treadonly belowMinimumKnownGood: boolean;\n\treadonly executableProblem: string | undefined;\n\treadonly blockWindows: readonly CursorCliBlockWindow[];\n\treadonly accountNames: readonly string[];\n\treadonly nativeCursorConfigured: boolean;\n};\n\nexport type CursorCliStatusDeps = {\n\treadonly sessionId: string;\n\treadonly settings: CursorCliOauthProviderSettings;\n\treadonly readCredential: () => Credential | undefined | Promise<Credential | undefined>;\n\treadonly readNativeCredential?: () => Credential | undefined | Promise<Credential | undefined>;\n\treadonly router?: CursorCliSessionRouter;\n\treadonly resolveExecutable?: (settings: CursorCliOauthProviderSettings) => string;\n\treadonly probeVersion?: (executable: string) => Promise<string>;\n\treadonly now?: () => number;\n};\n\nfunction asCursorCredential(value: Credential | undefined): CursorCliOauthCredential {\n\treturn value !== undefined && value.type === \"oauth\" ? (value as CursorCliOauthCredential) : emptyCredential();\n}\n\nfunction isUsableOAuthCredential(value: Credential | undefined): boolean {\n\treturn value !== undefined && value.type === \"oauth\" && typeof value.access === \"string\" && value.access.length > 0;\n}\n\nexport function parseCursorCliVersion(version: string): { year: number; month: number; day: number } | undefined {\n\tconst match = /^v?(\\d{1,4})\\.(\\d{1,2})\\.(\\d{1,2})/.exec(version.trim());\n\tif (!match) return undefined;\n\treturn { year: Number(match[1]), month: Number(match[2]), day: Number(match[3]) };\n}\n\n/** Compares two `YYYY.MM.DD[-suffix]` version strings; undefined when either cannot be parsed. */\nexport function compareCursorCliVersions(version: string, floor: string): number | undefined {\n\tconst parsed = parseCursorCliVersion(version);\n\tconst baseline = parseCursorCliVersion(floor);\n\tif (parsed === undefined || baseline === undefined) return undefined;\n\tconst left = [parsed.year, parsed.month, parsed.day] as const;\n\tconst right = [baseline.year, baseline.month, baseline.day] as const;\n\tfor (let index = 0; index < 3; index += 1) {\n\t\tif (left[index] !== right[index]) return left[index] < right[index] ? -1 : 1;\n\t}\n\treturn 0;\n}\n\nfunction blockWindowFor(account: CursorCliAccountSlot, now: number): CursorCliBlockWindow | undefined {\n\tif (account.blockReason === \"auth_error\") {\n\t\treturn { account: account.name, reason: \"auth_error\", blockedUntil: undefined };\n\t}\n\tif (account.blockedUntil !== undefined && account.blockedUntil > now) {\n\t\treturn { account: account.name, reason: \"rate_limit\", blockedUntil: account.blockedUntil };\n\t}\n\treturn undefined;\n}\n\nconst defaultResolveExecutable = (settings: CursorCliOauthProviderSettings): string =>\n\tresolveCursorAgentExecutable({\n\t\t...defaultCursorAgentExecutableDeps(),\n\t\tsettings: { executablePath: settings.executablePath },\n\t});\n\n/**\n * Collects the status snapshot. Account data is read fresh from the credential\n * store on every call - never memoized - so the rendered state always matches\n * the store even after concurrent logins, removals, or failover blocks. Only\n * account names and metadata are extracted; tokens never enter the report.\n */\nexport async function collectCursorCliStatus(deps: CursorCliStatusDeps): Promise<CursorCliStatusReport> {\n\tconst now = deps.now ?? Date.now;\n\tconst credential = asCursorCredential(await deps.readCredential());\n\tconst accounts = listAccounts(credential);\n\tconst pinnedAccount = deps.settings.pinnedAccount ?? credential.pinned;\n\tconst record = (deps.router ?? cursorCliSessionRouter).getRecord(deps.sessionId);\n\n\tlet selectedAccount = record?.accountName;\n\tif (selectedAccount === undefined && accounts.length > 0) {\n\t\ttry {\n\t\t\tselectedAccount = selectAccount(accounts, {\n\t\t\t\tsessionId: deps.sessionId,\n\t\t\t\tpinnedAccount,\n\t\t\t\tnow: now(),\n\t\t\t}).name;\n\t\t} catch {\n\t\t\t// Every account is blocked; report no selection instead of failing status.\n\t\t}\n\t}\n\n\tlet executablePath: string | undefined;\n\tlet executableProblem: string | undefined;\n\ttry {\n\t\texecutablePath = (deps.resolveExecutable ?? defaultResolveExecutable)(deps.settings);\n\t} catch (error) {\n\t\texecutableProblem = error instanceof Error ? error.message : String(error);\n\t\tif (!(error instanceof CursorAgentNotInstalledError)) executablePath = undefined;\n\t}\n\n\tlet executableVersion: string | undefined;\n\tif (executablePath !== undefined) {\n\t\ttry {\n\t\t\texecutableVersion = await (deps.probeVersion ?? probeCursorAgentVersion)(executablePath);\n\t\t} catch {\n\t\t\t// Version unknown; the floor warning only applies to parseable versions.\n\t\t}\n\t}\n\tconst comparison =\n\t\texecutableVersion === undefined\n\t\t\t? undefined\n\t\t\t: compareCursorCliVersions(executableVersion, CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION);\n\n\tconst nativeCredential = deps.readNativeCredential === undefined ? undefined : await deps.readNativeCredential();\n\n\treturn {\n\t\tlane: CURSOR_CLI_STATUS_LANE,\n\t\tselectedAccount,\n\t\tpinnedAccount,\n\t\tchatId: record?.chatId,\n\t\tlastModel: record?.lastModel,\n\t\tcontextOwner: CURSOR_CLI_STATUS_CONTEXT_OWNER,\n\t\texecutablePath,\n\t\texecutableVersion,\n\t\tminimumKnownGoodVersion: CURSOR_CLI_MINIMUM_KNOWN_GOOD_VERSION,\n\t\tbelowMinimumKnownGood: comparison !== undefined && comparison < 0,\n\t\texecutableProblem,\n\t\tblockWindows: accounts\n\t\t\t.map((account) => blockWindowFor(account, now()))\n\t\t\t.filter((window): window is CursorCliBlockWindow => window !== undefined),\n\t\taccountNames: accounts.map((account) => account.name),\n\t\tnativeCursorConfigured: isUsableOAuthCredential(nativeCredential),\n\t};\n}\n\n/** Pure renderer: names and metadata only, never token material. */\nexport function renderCursorCliStatus(report: CursorCliStatusReport): string {\n\tconst lines: string[] = [\"Cursor CLI (OAuth) status:\"];\n\tlines.push(`  Auth lane: ${report.lane}`);\n\tlines.push(`  Context owner: ${report.contextOwner}`);\n\tlines.push(\n\t\t`  Selected account: ${\n\t\t\treport.selectedAccount === undefined\n\t\t\t\t? \"none\"\n\t\t\t\t: report.selectedAccount === report.pinnedAccount\n\t\t\t\t\t? `${report.selectedAccount} (pinned)`\n\t\t\t\t\t: report.selectedAccount\n\t\t}`,\n\t);\n\tlines.push(`  Chat id: ${report.chatId ?? \"none (no turns yet on this session)\"}`);\n\tlines.push(`  Last model: ${report.lastModel ?? \"none\"}`);\n\tif (report.executableProblem !== undefined) {\n\t\tlines.push(`  Executable: not installed - ${report.executableProblem}`);\n\t} else {\n\t\tlines.push(`  Executable: ${report.executablePath ?? \"not installed\"}`);\n\t}\n\tif (report.executableVersion !== undefined) lines.push(`  Version: ${report.executableVersion}`);\n\tif (report.belowMinimumKnownGood) {\n\t\tlines.push(\n\t\t\t`  WARNING: cursor-agent ${report.executableVersion} is below the minimum known-good ${report.minimumKnownGoodVersion}; upgrade recommended`,\n\t\t);\n\t}\n\tif (report.blockWindows.length === 0) {\n\t\tlines.push(\"  Block windows: none\");\n\t} else {\n\t\tlines.push(\"  Block windows:\");\n\t\tfor (const window of report.blockWindows) {\n\t\t\tlines.push(\n\t\t\t\twindow.blockedUntil === undefined\n\t\t\t\t\t? `    ${window.account}: ${window.reason}, until re-login`\n\t\t\t\t\t: `    ${window.account}: ${window.reason}, expires ${new Date(window.blockedUntil).toISOString()}`,\n\t\t\t);\n\t\t}\n\t}\n\tif (report.nativeCursorConfigured) {\n\t\tlines.push(\n\t\t\t`  Recommended default: the native '${NATIVE_CURSOR_PROVIDER_ID}' provider is configured; use this Cursor CLI (OAuth) lane as the fallback when the native path misbehaves.`,\n\t\t);\n\t}\n\treturn lines.join(\"\\n\");\n}\n\n// ============================================================================\n// Reload / shutdown safety (senpi #866 regression class)\n// ============================================================================\n\nexport type CursorCliFencedOutcome<T> =\n\t| { readonly status: \"completed\"; readonly value: T }\n\t| { readonly status: \"dropped\"; readonly reason: string };\n\nexport type CursorCliDeferredContinuation<T> = {\n\t/** Runs the continuation through the fence, even if its timer was cancelled or already fired. */\n\tfire(): Promise<CursorCliFencedOutcome<T>>;\n\tcancel(): void;\n};\n\nexport type CursorCliDroppedReporter = (description: string, reason: string) => void;\n\n/**\n * A reload retires this extension generation (`AgentSession.reload()` then\n * invalidates the old runner) while timers and promise continuations captured\n * by it are still armed; every `ExtensionContext` getter then throws\n * \"stale extension generation after reload\". The context carries no liveness\n * flag, so a retired generation is only observable by probing a getter.\n */\nexport function isCursorCliContextRetired(ctx: ExtensionContext): boolean {\n\ttry {\n\t\tctx.isIdle();\n\t\treturn false;\n\t} catch {\n\t\treturn true;\n\t}\n}\n\n/** Per-registration generation fence; one per extension registration (a reload builds a new one). */\nexport class CursorCliGenerationGuard {\n\tprivate retired = false;\n\tprivate retirementReason: string | undefined;\n\tprivate readonly timers = new Set<ReturnType<typeof setTimeout>>();\n\tprivate droppedReporter: CursorCliDroppedReporter | undefined;\n\n\tisRetired(): boolean {\n\t\treturn this.retired;\n\t}\n\n\tretire(reason: string): void {\n\t\tif (this.retired) return;\n\t\tthis.retired = true;\n\t\tthis.retirementReason = `extension generation retired (${reason})`;\n\t}\n\n\tonDropped(reporter: CursorCliDroppedReporter): void {\n\t\tthis.droppedReporter = reporter;\n\t}\n\n\t/** Arms a timer the shutdown path cancels; arming after retirement is a no-op by construction. */\n\tsetTrackedTimeout(callback: () => void, delayMs: number): () => void {\n\t\tconst timer = this.armTracked(callback, delayMs);\n\t\treturn () => {\n\t\t\tif (timer !== undefined) this.cancelTimer(timer);\n\t\t};\n\t}\n\n\t/** Cancels every armed timer; returns how many were pending. */\n\tclearTrackedTimers(): number {\n\t\tconst pending = this.timers.size;\n\t\tfor (const timer of this.timers) clearTimeout(timer);\n\t\tthis.timers.clear();\n\t\treturn pending;\n\t}\n\n\t/**\n\t * Runs a deferred continuation behind the generation fence. A dropped\n\t * continuation is reported, never silently presented as completed.\n\t */\n\tasync runFenced<T>(\n\t\tctx: ExtensionContext,\n\t\twork: (ctx: ExtensionContext) => Promise<T> | T,\n\t): Promise<CursorCliFencedOutcome<T>> {\n\t\tconst blockedReason = this.retirementReasonFor(ctx);\n\t\tif (blockedReason !== undefined) {\n\t\t\tthis.reportDropped(\"deferred continuation\", blockedReason);\n\t\t\treturn { status: \"dropped\", reason: blockedReason };\n\t\t}\n\t\treturn { status: \"completed\", value: await work(ctx) };\n\t}\n\n\t/** Synchronous variant for continuations that only touch the context once, after an outer await. */\n\trunFencedSync(ctx: ExtensionContext, work: () => void): { ran: boolean } {\n\t\tconst blockedReason = this.retirementReasonFor(ctx);\n\t\tif (blockedReason !== undefined) {\n\t\t\tthis.reportDropped(\"deferred continuation\", blockedReason);\n\t\t\treturn { ran: false };\n\t\t}\n\t\twork();\n\t\treturn { ran: true };\n\t}\n\n\tdefer<T>(\n\t\tctx: ExtensionContext,\n\t\twork: (ctx: ExtensionContext) => Promise<T> | T,\n\t\tdelayMs = 0,\n\t): CursorCliDeferredContinuation<T> {\n\t\tconst fire = (): Promise<CursorCliFencedOutcome<T>> => this.runFenced(ctx, work);\n\t\tconst timer = this.armTracked(() => {\n\t\t\t// The timer path has no caller to receive a rejection (senpi #866 crash\n\t\t\t// class), so a post-fence failure is reported instead of escaping to the\n\t\t\t// timer queue.\n\t\t\tvoid fire().catch((error: unknown) => {\n\t\t\t\tthis.reportDropped(\n\t\t\t\t\t\"deferred continuation\",\n\t\t\t\t\t`failed after the retirement check: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}, delayMs);\n\t\treturn {\n\t\t\tfire,\n\t\t\tcancel: () => {\n\t\t\t\tif (timer !== undefined) this.cancelTimer(timer);\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate armTracked(callback: () => void, delayMs: number): ReturnType<typeof setTimeout> | undefined {\n\t\tif (this.retired) return undefined;\n\t\tconst timer = setTimeout(() => {\n\t\t\tthis.timers.delete(timer);\n\t\t\tcallback();\n\t\t}, delayMs);\n\t\tthis.timers.add(timer);\n\t\treturn timer;\n\t}\n\n\tprivate cancelTimer(timer: ReturnType<typeof setTimeout>): void {\n\t\tclearTimeout(timer);\n\t\tthis.timers.delete(timer);\n\t}\n\n\tprivate retirementReasonFor(ctx: ExtensionContext): string | undefined {\n\t\tif (this.retired) return this.retirementReason ?? \"extension generation retired\";\n\t\tif (isCursorCliContextRetired(ctx)) return \"extension context retired by reload\";\n\t\treturn undefined;\n\t}\n\n\tprivate reportDropped(description: string, reason: string): void {\n\t\tthis.droppedReporter?.(description, reason);\n\t}\n}\n\n/** Process-group kill on the tracked pid, mirroring transport.ts's mechanism (never name matching). */\nfunction killCursorCliProcessGroup(pid: number, signal: NodeJS.Signals): void {\n\ttry {\n\t\tif (process.platform === \"win32\") process.kill(pid, signal);\n\t\telse process.kill(-pid, signal);\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"ESRCH\") throw error;\n\t}\n}\n\ntype TrackedCursorCliChild = {\n\treadonly pid: number;\n\treadonly abort: () => void;\n\tkilled: boolean;\n};\n\n/**\n * Registry of live children this extension spawned. Entries leave the registry\n * when their transport run settles, so `killAll` only ever signals live\n * process groups and is idempotent across repeated interruptions.\n */\nexport class CursorCliChildRegistry {\n\tprivate readonly children = new Map<number, TrackedCursorCliChild>();\n\n\ttrack(handle: CursorCliTransportHandle): CursorCliTransportHandle {\n\t\tthis.children.set(handle.pid, { pid: handle.pid, abort: () => handle.abort(), killed: false });\n\t\tvoid handle.completed.then(\n\t\t\t() => this.children.delete(handle.pid),\n\t\t\t() => this.children.delete(handle.pid),\n\t\t);\n\t\treturn handle;\n\t}\n\n\tlivePids(): number[] {\n\t\treturn [...this.children.keys()];\n\t}\n\n\t/** SIGTERMs every tracked process group with a SIGKILL escalation; returns the pids it signalled. */\n\tkillAll(graceMs: number = CURSOR_CLI_ABORT_GRACE_MS): number[] {\n\t\tconst signalled: number[] = [];\n\t\tfor (const entry of this.children.values()) {\n\t\t\tif (entry.killed) continue;\n\t\t\tentry.killed = true;\n\t\t\tsignalled.push(entry.pid);\n\t\t\t// Teardown must never throw into the shutdown event loop; individual\n\t\t\t// failures are contained per child, and the SIGKILL escalation below\n\t\t\t// still runs for that pid.\n\t\t\ttry {\n\t\t\t\tentry.abort();\n\t\t\t} catch {\n\t\t\t\t// Deliberate: shutdown stays idempotent even if one child misbehaves.\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tkillCursorCliProcessGroup(entry.pid, \"SIGTERM\");\n\t\t\t} catch {\n\t\t\t\t// Deliberate: see above.\n\t\t\t}\n\t\t\tconst escalation = setTimeout(() => killCursorCliProcessGroup(entry.pid, \"SIGKILL\"), graceMs);\n\t\t\tescalation.unref?.();\n\t\t}\n\t\treturn signalled;\n\t}\n}\n\n/** Shared registry; child pids are process-wide resources, so one registry serves every generation. */\nexport const cursorCliChildRegistry = new CursorCliChildRegistry();\n\n/** Spawns one cursor-agent run through the transport and registers it for shutdown teardown. */\nexport function spawnCursorCliTracked(\n\tinput: CursorCliTransportInput,\n\tregistry: CursorCliChildRegistry = cursorCliChildRegistry,\n): CursorCliTransportHandle {\n\treturn registry.track(spawnCursorCli(input));\n}\n\nexport type CursorCliShutdownSafetyDeps = {\n\treadonly generation?: CursorCliGenerationGuard;\n\treadonly registry?: CursorCliChildRegistry;\n};\n\n/**\n * Installs the `session_shutdown`/`session_extensions_removed` teardown: kill\n * every tracked child's process group, cancel the generation's pending timers,\n * and retire the generation so every deferred continuation is fenced. Safe to\n * fire repeatedly; a retired generation is never resurrected (a reload builds a\n * new registration with a fresh guard).\n */\nexport function registerCursorCliShutdownSafety(\n\tpi: Pick<ExtensionAPI, \"on\">,\n\tdeps: CursorCliShutdownSafetyDeps = {},\n): CursorCliGenerationGuard {\n\tconst generation = deps.generation ?? new CursorCliGenerationGuard();\n\tconst registry = deps.registry ?? cursorCliChildRegistry;\n\tconst teardown = (reason: string): void => {\n\t\tregistry.killAll();\n\t\tgeneration.clearTrackedTimers();\n\t\tgeneration.retire(reason);\n\t};\n\tpi.on(\"session_shutdown\", (event: SessionShutdownEvent) => {\n\t\tteardown(event.reason);\n\t});\n\tpi.on(\"session_extensions_removed\", (event: SessionExtensionsRemovedEvent) => {\n\t\tteardown(event.reason);\n\t});\n\treturn generation;\n}\n"]}

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.d.ts

@@ -0,0 +1,19 @@
+export type CursorCliErrorKind = "binary_missing" | "invalid_api_key" | "keychain_locked" | "invalid_model" | "rate_limit" | "auth_error" | "context_overflow" | "network" | "malformed_stream" | "other";
+export type CursorCliErrorClassification = {
+    kind: CursorCliErrorKind;
+    retryable: boolean;
+    blockMs?: number;
+};
+export type CursorCliErrorInput = {
+    exitCode?: unknown;
+    stderr?: unknown;
+    resultEvent?: unknown;
+    thrown?: unknown;
+};
+export declare const DEFAULT_RATE_LIMIT_BLOCK_MS = 60000;
+export declare const MAX_RATE_LIMIT_BLOCK_MS: number;
+/** Add each probe-observed Cursor context failure as one exact line. */
+export declare const CURSOR_CONTEXT_OVERFLOW_WORDINGS: readonly string[];
+/** Classifies observed cursor-agent stderr, result events, and typed transport failures. */
+export declare function classifyCursorCliError(input: CursorCliErrorInput | null | undefined): CursorCliErrorClassification;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/extensions/builtin/cursor-cli-oauth/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/cursor-cli-oauth/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC3B,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,YAAY,GACZ,YAAY,GACZ,kBAAkB,GAClB,SAAS,GACT,kBAAkB,GAClB,OAAO,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD,eAAO,MAAM,uBAAuB,QAAuB,CAAC;AAE5D,wEAAwE;AACxE,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAAO,CAAC;AAuFtE,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,4BAA4B,CA0ClH"}