@code-yeongyu/senpi 2026.8.17 → 2026.8.18-3

package/dist/core/cursor-exec-bridge-session.d.ts

@@ -4,8 +4,19 @@ export interface CursorExecBridgeSession {
     getRegisteredTool(name: string): AgentTool | undefined;
     preflightToolCall(toolCall: AgentToolCall, args: unknown): Promise<BeforeToolCallResult | undefined>;
 }
+/**
+ * Build the exec handlers for ONE Cursor run.
+ *
+ * `runSignal` is the signal of the run that owns this stream, captured when
+ * the loop opens it. Resolving ownership from the agent's live signal instead
+ * would let a straggler frame from a stream whose run already ended (a
+ * provider error or rate-limit fallback restarts the run while its h2 stream
+ * still holds buffered exec frames) adopt the replacement run's signal, clear
+ * the ownership guard in `Agent.emitExternalEvent`, and execute a dead run's
+ * tool inside the new run.
+ */
 export declare function createSessionCursorExecBridge(sessionRef: {
     current?: CursorExecBridgeSession;
-}, getAgent: () => CursorBridgeAgent): import("@earendil-works/pi-ai").CursorExecHandlers;
+}, getAgent: () => CursorBridgeAgent, runSignal?: AbortSignal): import("@earendil-works/pi-ai").CursorExecHandlers;
 export {};
 //# sourceMappingURL=cursor-exec-bridge-session.d.ts.map

package/dist/core/cursor-exec-bridge-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-exec-bridge-session.d.ts","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAc,SAAS,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAGvH,KAAK,iBAAiB,GAAG,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,QAAQ,CAAC,CAAC;AAErE,MAAM,WAAW,uBAAuB;IACvC,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACvD,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CACrG;AAED,wBAAgB,6BAA6B,CAC5C,UAAU,EAAE;IAAE,OAAO,CAAC,EAAE,uBAAuB,CAAA;CAAE,EACjD,QAAQ,EAAE,MAAM,iBAAiB,sDAmBjC"}
+{"version":3,"file":"cursor-exec-bridge-session.d.ts","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAc,SAAS,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAGvH,KAAK,iBAAiB,GAAG,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,QAAQ,CAAC,CAAC;AAErE,MAAM,WAAW,uBAAuB;IACvC,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACvD,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CACrG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC5C,UAAU,EAAE;IAAE,OAAO,CAAC,EAAE,uBAAuB,CAAA;CAAE,EACjD,QAAQ,EAAE,MAAM,iBAAiB,EACjC,SAAS,CAAC,EAAE,WAAW,sDAqBvB"}

package/dist/core/cursor-exec-bridge-session.js

@@ -1,5 +1,16 @@
 import { createCursorExecBridge } from "./cursor-exec-bridge.js";
-export function createSessionCursorExecBridge(sessionRef, getAgent) {
+/**
+ * Build the exec handlers for ONE Cursor run.
+ *
+ * `runSignal` is the signal of the run that owns this stream, captured when
+ * the loop opens it. Resolving ownership from the agent's live signal instead
+ * would let a straggler frame from a stream whose run already ended (a
+ * provider error or rate-limit fallback restarts the run while its h2 stream
+ * still holds buffered exec frames) adopt the replacement run's signal, clear
+ * the ownership guard in `Agent.emitExternalEvent`, and execute a dead run's
+ * tool inside the new run.
+ */
+export function createSessionCursorExecBridge(sessionRef, getAgent, runSignal) {
     return createCursorExecBridge({
         getTool: (name) => sessionRef.current?.getRegisteredTool(name),
         preflightToolCall: async (event) => sessionRef.current?.preflightToolCall({
@@ -8,10 +19,12 @@ export function createSessionCursorExecBridge(sessionRef, getAgent) {
             name: event.toolName,
             arguments: event.input,
         }, event.input),
-        emitEvent: (event) => {
-            void getAgent().emitExternalEvent(event);
+        emitEvent: async (event, runSignal) => await getAgent().emitExternalEvent(event, runSignal),
+        getAbortSignal: () => {
+            if (runSignal === undefined)
+                return getAgent().signal;
+            return runSignal === getAgent().signal ? runSignal : undefined;
         },
-        getAbortSignal: () => getAgent().signal,
     });
 }
 //# sourceMappingURL=cursor-exec-bridge-session.js.map

package/dist/core/cursor-exec-bridge-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-exec-bridge-session.js","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AASjE,MAAM,UAAU,6BAA6B,CAC5C,UAAiD,EACjD,QAAiC;IAEjC,OAAO,sBAAsB,CAAC;QAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC9D,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAClC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CACpC;YACC,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,SAAS,EAAE,KAAK,CAAC,KAAK;SACtB,EACD,KAAK,CAAC,KAAK,CACX;QACF,SAAS,EAAE,CAAC,KAAiB,EAAE,EAAE;YAChC,KAAK,QAAQ,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM;KACvC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Agent, AgentEvent, AgentTool, AgentToolCall, BeforeToolCallResult } from \"@earendil-works/pi-agent-core\";\nimport { createCursorExecBridge } from \"./cursor-exec-bridge.ts\";\n\ntype CursorBridgeAgent = Pick<Agent, \"emitExternalEvent\" | \"signal\">;\n\nexport interface CursorExecBridgeSession {\n\tgetRegisteredTool(name: string): AgentTool | undefined;\n\tpreflightToolCall(toolCall: AgentToolCall, args: unknown): Promise<BeforeToolCallResult | undefined>;\n}\n\nexport function createSessionCursorExecBridge(\n\tsessionRef: { current?: CursorExecBridgeSession },\n\tgetAgent: () => CursorBridgeAgent,\n) {\n\treturn createCursorExecBridge({\n\t\tgetTool: (name) => sessionRef.current?.getRegisteredTool(name),\n\t\tpreflightToolCall: async (event) =>\n\t\t\tsessionRef.current?.preflightToolCall(\n\t\t\t\t{\n\t\t\t\t\ttype: \"toolCall\",\n\t\t\t\t\tid: event.toolCallId,\n\t\t\t\t\tname: event.toolName,\n\t\t\t\t\targuments: event.input,\n\t\t\t\t},\n\t\t\t\tevent.input,\n\t\t\t),\n\t\temitEvent: (event: AgentEvent) => {\n\t\t\tvoid getAgent().emitExternalEvent(event);\n\t\t},\n\t\tgetAbortSignal: () => getAgent().signal,\n\t});\n}\n"]}
+{"version":3,"file":"cursor-exec-bridge-session.js","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AASjE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC5C,UAAiD,EACjD,QAAiC,EACjC,SAAuB;IAEvB,OAAO,sBAAsB,CAAC;QAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC9D,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAClC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CACpC;YACC,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,SAAS,EAAE,KAAK,CAAC,KAAK;SACtB,EACD,KAAK,CAAC,KAAK,CACX;QACF,SAAS,EAAE,KAAK,EAAE,KAAiB,EAAE,SAAsB,EAAE,EAAE,CAC9D,MAAM,QAAQ,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC;QACrD,cAAc,EAAE,GAAG,EAAE;YACpB,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,QAAQ,EAAE,CAAC,MAAM,CAAC;YACtD,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,CAAC;KACD,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Agent, AgentEvent, AgentTool, AgentToolCall, BeforeToolCallResult } from \"@earendil-works/pi-agent-core\";\nimport { createCursorExecBridge } from \"./cursor-exec-bridge.ts\";\n\ntype CursorBridgeAgent = Pick<Agent, \"emitExternalEvent\" | \"signal\">;\n\nexport interface CursorExecBridgeSession {\n\tgetRegisteredTool(name: string): AgentTool | undefined;\n\tpreflightToolCall(toolCall: AgentToolCall, args: unknown): Promise<BeforeToolCallResult | undefined>;\n}\n\n/**\n * Build the exec handlers for ONE Cursor run.\n *\n * `runSignal` is the signal of the run that owns this stream, captured when\n * the loop opens it. Resolving ownership from the agent's live signal instead\n * would let a straggler frame from a stream whose run already ended (a\n * provider error or rate-limit fallback restarts the run while its h2 stream\n * still holds buffered exec frames) adopt the replacement run's signal, clear\n * the ownership guard in `Agent.emitExternalEvent`, and execute a dead run's\n * tool inside the new run.\n */\nexport function createSessionCursorExecBridge(\n\tsessionRef: { current?: CursorExecBridgeSession },\n\tgetAgent: () => CursorBridgeAgent,\n\trunSignal?: AbortSignal,\n) {\n\treturn createCursorExecBridge({\n\t\tgetTool: (name) => sessionRef.current?.getRegisteredTool(name),\n\t\tpreflightToolCall: async (event) =>\n\t\t\tsessionRef.current?.preflightToolCall(\n\t\t\t\t{\n\t\t\t\t\ttype: \"toolCall\",\n\t\t\t\t\tid: event.toolCallId,\n\t\t\t\t\tname: event.toolName,\n\t\t\t\t\targuments: event.input,\n\t\t\t\t},\n\t\t\t\tevent.input,\n\t\t\t),\n\t\temitEvent: async (event: AgentEvent, runSignal: AbortSignal) =>\n\t\t\tawait getAgent().emitExternalEvent(event, runSignal),\n\t\tgetAbortSignal: () => {\n\t\t\tif (runSignal === undefined) return getAgent().signal;\n\t\t\treturn runSignal === getAgent().signal ? runSignal : undefined;\n\t\t},\n\t});\n}\n"]}

package/dist/core/cursor-exec-bridge.d.ts

@@ -30,11 +30,11 @@ export interface CursorExecBridgeOptions {
      * the agent loop's executor, so without these the live tool card for a
      * synthesized call never resolves.
      */
-    emitEvent?: (event: AgentEvent) => void;
+    emitEvent: (event: AgentEvent, runSignal: AbortSignal) => Promise<void>;
     /** Run the session's vetoable extension preflight before tool execution. */
     preflightToolCall?: (event: ToolCallEvent) => Promise<ToolCallEventResult | undefined>;
     /** Abort signal for in-flight bridge executions (the active run's signal). */
-    getAbortSignal?: () => AbortSignal | undefined;
+    getAbortSignal: () => AbortSignal | undefined;
 }
 /**
  * Build the exec handlers passed to the `cursor-agent` API through the agent

package/dist/core/cursor-exec-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-exec-bridge.d.ts","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAiB,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EACN,KAAK,kBAAkB,EASvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,WAAW,uBAAuB;IACvC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IACjD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACxC,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACvF,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CAC/C;AA4GD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,kBAAkB,CA0F3F"}
+{"version":3,"file":"cursor-exec-bridge.d.ts","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAiB,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EACN,KAAK,kBAAkB,EASvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,WAAW,uBAAuB;IACvC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IACjD;;;;OAIG;IACH,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACvF,8EAA8E;IAC9E,cAAc,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CAC9C;AAqHD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,kBAAkB,CA0F3F"}

package/dist/core/cursor-exec-bridge.js

@@ -39,6 +39,10 @@ function emptyResult(toolCallId, toolName) {
     };
 }
 async function executeTool(options, toolName, toolCallId, args) {
+    const runSignal = options.getAbortSignal();
+    if (!runSignal) {
+        return errorResult(toolCallId, toolName, "Tool execution has no active run");
+    }
     const tool = options.getTool(toolName);
     if (!tool) {
         return errorResult(toolCallId, toolName, `Tool "${toolName}" is not available in this session`);
@@ -63,7 +67,9 @@ async function executeTool(options, toolName, toolCallId, args) {
     catch (error) {
         return errorResult(toolCallId, toolName, error instanceof Error ? error.message : String(error));
     }
-    options.emitEvent?.({ type: "tool_execution_start", toolCallId, toolName, args: cleanArgs });
+    await options.emitEvent({ type: "tool_execution_start", toolCallId, toolName, args: cleanArgs }, runSignal);
+    let toolResult;
+    let endEvent;
     try {
         if (!isRecord(params)) {
             throw new Error(`Tool "${toolName}" prepared non-object arguments`);
@@ -76,40 +82,43 @@ async function executeTool(options, toolName, toolCallId, args) {
         });
         if (preflight?.block) {
             const message = preflight.reason || "Tool execution was blocked";
-            options.emitEvent?.({
+            toolResult = errorResult(toolCallId, toolName, message);
+            endEvent = {
                 type: "tool_execution_end",
                 toolCallId,
                 toolName,
                 result: { content: [{ type: "text", text: message }], details: undefined },
                 isError: true,
-            });
-            return errorResult(toolCallId, toolName, message);
+            };
+        }
+        else {
+            const result = await tool.execute(toolCallId, params, runSignal, undefined);
+            toolResult = {
+                role: "toolResult",
+                toolCallId,
+                toolName,
+                content: result.content ?? [],
+                details: result.details,
+                usage: result.usage,
+                isError: false,
+                timestamp: Date.now(),
+            };
+            endEvent = { type: "tool_execution_end", toolCallId, toolName, result, isError: false };
         }
-        const result = await tool.execute(toolCallId, params, options.getAbortSignal?.(), undefined);
-        const toolResult = {
-            role: "toolResult",
-            toolCallId,
-            toolName,
-            content: result.content ?? [],
-            details: result.details,
-            usage: result.usage,
-            isError: false,
-            timestamp: Date.now(),
-        };
-        options.emitEvent?.({ type: "tool_execution_end", toolCallId, toolName, result, isError: false });
-        return toolResult;
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
-        options.emitEvent?.({
+        toolResult = errorResult(toolCallId, toolName, message);
+        endEvent = {
             type: "tool_execution_end",
             toolCallId,
             toolName,
             result: { content: [{ type: "text", text: message }], details: undefined },
             isError: true,
-        });
-        return errorResult(toolCallId, toolName, message);
+        };
     }
+    await options.emitEvent(endEvent, runSignal);
+    return toolResult;
 }
 /**
  * Build the exec handlers passed to the `cursor-agent` API through the agent

package/dist/core/cursor-exec-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-exec-bridge.js","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAEN,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EAEvB,qBAAqB,GACrB,MAAM,uBAAuB,CAAC;AAuB/B,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB,EAAE,IAAY;IACtE,OAAO;QACN,IAAI,EAAE,YAAY;QAClB,UAAU;QACV,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB;IACxD,OAAO;QACN,IAAI,EAAE,YAAY;QAClB,UAAU;QACV,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,OAAgC,EAChC,QAAgB,EAChB,UAAkB,EAClB,IAA6B;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,QAAQ,oCAAoC,CAAC,CAAC;IACjG,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAkB;QAC/B,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,SAAS;KACpB,CAAC;IAEF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,iCAAiC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnD,IAAI,EAAE,WAAW;YACjB,UAAU;YACV,QAAQ;YACR,KAAK,EAAE,MAAM;SACb,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,IAAI,4BAA4B,CAAC;YACjE,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,EAAE,oBAAoB;gBAC1B,UAAU;gBACV,QAAQ;gBACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;gBAC1E,OAAO,EAAE,IAAI;aACb,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAsB;YACrC,IAAI,EAAE,YAAY;YAClB,UAAU;YACV,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QACF,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,EAAE,oBAAoB;YAC1B,UAAU;YACV,QAAQ;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;YAC1E,OAAO,EAAE,IAAI;SACb,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,OAAO;QACN,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC;QAEH,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAEpG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,UAAU,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;QAEH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,UAAU,EAAE,CAAC;SACtF,CAAC;QAEH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC;YACpF,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEH,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,QAAQ,qCAAqC,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;SAC3C,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SACxF,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACvB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;SAC1B,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5D,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACtD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;QAEH,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;YAC3C,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;KACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * Cursor exec-channel → local tool bridge.\n *\n * Cursor's agent protocol executes tools server-drivenly: mid-stream, the\n * server sends exec frames and blocks until the client answers in band. The\n * `cursor-agent` API dispatches those frames onto this bridge, which maps\n * each frame's args onto the session's real tools (`read`, `bash`, `edit`,\n * `write`, `grep`, `find`, `ls`, plus MCP/extension tools by name) and runs\n * them through the same wrapped `AgentTool.execute` path model-issued calls\n * use — so approvals, sandboxing, truncation, and rendering behavior stay\n * identical.\n *\n * The arg translations here MUST mirror the display blocks the API\n * synthesizes (`synthesizeCursorExecToolCall` call sites): the transcript\n * shows one operation, so a different one must not run.\n */\n\nimport type { AgentEvent, AgentTool, AgentToolCall } from \"@earendil-works/pi-agent-core\";\nimport {\n\ttype CursorExecHandlers,\n\tcomposeCursorShellCommand,\n\tcursorPiLimit,\n\tcursorPiLsPath,\n\tcursorPiReadArgs,\n\tcursorPiTimeout,\n\tomitUndefinedCursorArgs,\n\ttype ToolResultMessage,\n\tvalidateToolArguments,\n} from \"@earendil-works/pi-ai\";\nimport type { ToolCallEvent, ToolCallEventResult } from \"./extensions/types.ts\";\n\nexport interface CursorExecBridgeOptions {\n\t/**\n\t * Resolve an executable tool by name. Backed by the session's full tool\n\t * registry (builtin + extension tools), not only the active set: Cursor\n\t * drives its native tools (read/bash/grep/ls/write) over the exec channel\n\t * regardless of which tools the request advertised.\n\t */\n\tgetTool: (name: string) => AgentTool | undefined;\n\t/**\n\t * Surface tool lifecycle events to the host UI. Bridge-run tools bypass\n\t * the agent loop's executor, so without these the live tool card for a\n\t * synthesized call never resolves.\n\t */\n\temitEvent?: (event: AgentEvent) => void;\n\t/** Run the session's vetoable extension preflight before tool execution. */\n\tpreflightToolCall?: (event: ToolCallEvent) => Promise<ToolCallEventResult | undefined>;\n\t/** Abort signal for in-flight bridge executions (the active run's signal). */\n\tgetAbortSignal?: () => AbortSignal | undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction errorResult(toolCallId: string, toolName: string, text: string): ToolResultMessage {\n\treturn {\n\t\trole: \"toolResult\",\n\t\ttoolCallId,\n\t\ttoolName,\n\t\tcontent: [{ type: \"text\", text }],\n\t\tisError: true,\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nfunction emptyResult(toolCallId: string, toolName: string): ToolResultMessage {\n\treturn {\n\t\trole: \"toolResult\",\n\t\ttoolCallId,\n\t\ttoolName,\n\t\tcontent: [{ type: \"text\", text: \"\" }],\n\t\tisError: false,\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nasync function executeTool(\n\toptions: CursorExecBridgeOptions,\n\ttoolName: string,\n\ttoolCallId: string,\n\targs: Record<string, unknown>,\n): Promise<ToolResultMessage> {\n\tconst tool = options.getTool(toolName);\n\tif (!tool) {\n\t\treturn errorResult(toolCallId, toolName, `Tool \"${toolName}\" is not available in this session`);\n\t}\n\n\t// Exec-frame translators write forms like `path: args.path || undefined`;\n\t// a present `undefined` fails schema validation on optional fields even\n\t// though omitting the key is valid.\n\tconst cleanArgs = omitUndefinedCursorArgs(args);\n\tconst toolCall: AgentToolCall = {\n\t\ttype: \"toolCall\",\n\t\tid: toolCallId,\n\t\tname: toolName,\n\t\targuments: cleanArgs,\n\t};\n\n\tlet params: unknown;\n\ttry {\n\t\tparams = validateToolArguments(tool, toolCall);\n\t\tif (tool.prepareArguments) {\n\t\t\tparams = tool.prepareArguments(params);\n\t\t}\n\t} catch (error) {\n\t\treturn errorResult(toolCallId, toolName, error instanceof Error ? error.message : String(error));\n\t}\n\n\toptions.emitEvent?.({ type: \"tool_execution_start\", toolCallId, toolName, args: cleanArgs });\n\ttry {\n\t\tif (!isRecord(params)) {\n\t\t\tthrow new Error(`Tool \"${toolName}\" prepared non-object arguments`);\n\t\t}\n\t\tconst preflight = await options.preflightToolCall?.({\n\t\t\ttype: \"tool_call\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tinput: params,\n\t\t});\n\t\tif (preflight?.block) {\n\t\t\tconst message = preflight.reason || \"Tool execution was blocked\";\n\t\t\toptions.emitEvent?.({\n\t\t\t\ttype: \"tool_execution_end\",\n\t\t\t\ttoolCallId,\n\t\t\t\ttoolName,\n\t\t\t\tresult: { content: [{ type: \"text\", text: message }], details: undefined },\n\t\t\t\tisError: true,\n\t\t\t});\n\t\t\treturn errorResult(toolCallId, toolName, message);\n\t\t}\n\t\tconst result = await tool.execute(toolCallId, params, options.getAbortSignal?.(), undefined);\n\t\tconst toolResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tcontent: result.content ?? [],\n\t\t\tdetails: result.details,\n\t\t\tusage: result.usage,\n\t\t\tisError: false,\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t\toptions.emitEvent?.({ type: \"tool_execution_end\", toolCallId, toolName, result, isError: false });\n\t\treturn toolResult;\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\toptions.emitEvent?.({\n\t\t\ttype: \"tool_execution_end\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tresult: { content: [{ type: \"text\", text: message }], details: undefined },\n\t\t\tisError: true,\n\t\t});\n\t\treturn errorResult(toolCallId, toolName, message);\n\t}\n}\n\n/**\n * Build the exec handlers passed to the `cursor-agent` API through the agent\n * loop config. Handlers return bare `ToolResultMessage`s; the API derives the\n * wire protobuf answer from them and pairs the transcript result.\n *\n * Deliberately absent handlers (the API answers with a typed refusal):\n * - `delete`: senpi has no delete tool and the bridge must not mutate the\n *   filesystem outside the tool/approval path.\n * - `diagnostics`: no LSP tool in this fork.\n * - `mcpApprovalPreflight`: approval decisions cannot be resolved without an\n *   interactive prompt, so smart-mode probes are conservatively refused.\n */\nexport function createCursorExecBridge(options: CursorExecBridgeOptions): CursorExecHandlers {\n\treturn {\n\t\tread: async (args) =>\n\t\t\texecuteTool(options, \"read\", args.toolCallId, {\n\t\t\t\tpath: args.path,\n\t\t\t\toffset: args.offset,\n\t\t\t\tlimit: args.limit,\n\t\t\t}),\n\n\t\tls: async (args) => executeTool(options, \"ls\", args.toolCallId, { path: cursorPiLsPath(args.path) }),\n\n\t\tgrep: async (args) =>\n\t\t\texecuteTool(options, \"grep\", args.toolCallId, {\n\t\t\t\tpattern: args.pattern,\n\t\t\t\tpath: args.path || undefined,\n\t\t\t\tglob: args.glob || undefined,\n\t\t\t\tignoreCase: args.caseInsensitive === true ? true : undefined,\n\t\t\t}),\n\n\t\twrite: async (args) =>\n\t\t\texecuteTool(options, \"write\", args.toolCallId, {\n\t\t\t\tpath: args.path,\n\t\t\t\tcontent: args.fileText ?? new TextDecoder().decode(args.fileBytes ?? new Uint8Array()),\n\t\t\t}),\n\n\t\tshell: async (args) =>\n\t\t\texecuteTool(options, \"bash\", args.toolCallId, {\n\t\t\t\tcommand: composeCursorShellCommand(args.command, args.workingDirectory || undefined),\n\t\t\t\ttimeout: args.timeout && args.timeout > 0 ? args.timeout : undefined,\n\t\t\t}),\n\n\t\tmcp: async (call) => {\n\t\t\tconst toolName = call.toolName || call.name;\n\t\t\tconst tool = options.getTool(toolName);\n\t\t\tif (!tool) {\n\t\t\t\treturn errorResult(call.toolCallId, toolName, `Tool \"${toolName}\" is not registered in this session`);\n\t\t\t}\n\t\t\treturn executeTool(options, toolName, call.toolCallId, call.args);\n\t\t},\n\n\t\tpiRead: async (call) => {\n\t\t\tconst readArgs = cursorPiReadArgs(call.args.path, call.args.offset, call.args.limit);\n\t\t\t// A present `limit: 0` reads zero lines; answer with empty output\n\t\t\t// without running the tool rather than degrading into a full read.\n\t\t\tif (readArgs === null) return emptyResult(call.toolCallId, \"read\");\n\t\t\treturn executeTool(options, \"read\", call.toolCallId, readArgs);\n\t\t},\n\n\t\tpiBash: async (call) =>\n\t\t\texecuteTool(options, \"bash\", call.toolCallId, {\n\t\t\t\tcommand: call.args.command,\n\t\t\t\ttimeout: cursorPiTimeout(call.args.timeout),\n\t\t\t}),\n\n\t\tpiEdit: async (call) =>\n\t\t\texecuteTool(options, \"edit\", call.toolCallId, {\n\t\t\t\tpath: call.args.path,\n\t\t\t\tedits: call.args.edits.map((edit) => ({ oldText: edit.oldText, newText: edit.newText })),\n\t\t\t}),\n\n\t\tpiWrite: async (call) =>\n\t\t\texecuteTool(options, \"write\", call.toolCallId, {\n\t\t\t\tpath: call.args.path,\n\t\t\t\tcontent: call.args.content,\n\t\t\t}),\n\n\t\tpiGrep: async (call) =>\n\t\t\texecuteTool(options, \"grep\", call.toolCallId, {\n\t\t\t\tpattern: call.args.pattern,\n\t\t\t\tpath: call.args.path || undefined,\n\t\t\t\tglob: call.args.glob || undefined,\n\t\t\t\tignoreCase: call.args.ignoreCase === true ? true : undefined,\n\t\t\t\tliteral: call.args.literal === true ? true : undefined,\n\t\t\t\tcontext: call.args.context,\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\n\t\tpiFind: async (call) =>\n\t\t\texecuteTool(options, \"find\", call.toolCallId, {\n\t\t\t\tpattern: call.args.pattern,\n\t\t\t\tpath: call.args.path || undefined,\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\n\t\tpiLs: async (call) =>\n\t\t\texecuteTool(options, \"ls\", call.toolCallId, {\n\t\t\t\tpath: cursorPiLsPath(call.args.path),\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\t};\n}\n"]}
+{"version":3,"file":"cursor-exec-bridge.js","sourceRoot":"","sources":["../../src/core/cursor-exec-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAEN,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EAEvB,qBAAqB,GACrB,MAAM,uBAAuB,CAAC;AAuB/B,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB,EAAE,IAAY;IACtE,OAAO;QACN,IAAI,EAAE,YAAY;QAClB,UAAU;QACV,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB;IACxD,OAAO;QACN,IAAI,EAAE,YAAY;QAClB,UAAU;QACV,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,OAAgC,EAChC,QAAgB,EAChB,UAAkB,EAClB,IAA6B;IAE7B,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,kCAAkC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,QAAQ,oCAAoC,CAAC,CAAC;IACjG,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAkB;QAC/B,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,SAAS;KACpB,CAAC;IAEF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5G,IAAI,UAA6B,CAAC;IAClC,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,iCAAiC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnD,IAAI,EAAE,WAAW;YACjB,UAAU;YACV,QAAQ;YACR,KAAK,EAAE,MAAM;SACb,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,IAAI,4BAA4B,CAAC;YACjE,UAAU,GAAG,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxD,QAAQ,GAAG;gBACV,IAAI,EAAE,oBAAoB;gBAC1B,UAAU;gBACV,QAAQ;gBACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;gBAC1E,OAAO,EAAE,IAAI;aACb,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5E,UAAU,GAAG;gBACZ,IAAI,EAAE,YAAY;gBAClB,UAAU;gBACV,QAAQ;gBACR,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC;YACF,QAAQ,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzF,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,UAAU,GAAG,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,QAAQ,GAAG;YACV,IAAI,EAAE,oBAAoB;YAC1B,UAAU;YACV,QAAQ;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;YAC1E,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,OAAO;QACN,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC;QAEH,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAEpG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,UAAU,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;QAEH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,UAAU,EAAE,CAAC;SACtF,CAAC;QAEH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC;YACpF,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEH,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,QAAQ,qCAAqC,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;SAC3C,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;SACxF,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACvB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;SAC1B,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5D,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACtD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;YACjC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;QAEH,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACpB,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;YAC3C,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;SACrC,CAAC;KACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * Cursor exec-channel → local tool bridge.\n *\n * Cursor's agent protocol executes tools server-drivenly: mid-stream, the\n * server sends exec frames and blocks until the client answers in band. The\n * `cursor-agent` API dispatches those frames onto this bridge, which maps\n * each frame's args onto the session's real tools (`read`, `bash`, `edit`,\n * `write`, `grep`, `find`, `ls`, plus MCP/extension tools by name) and runs\n * them through the same wrapped `AgentTool.execute` path model-issued calls\n * use — so approvals, sandboxing, truncation, and rendering behavior stay\n * identical.\n *\n * The arg translations here MUST mirror the display blocks the API\n * synthesizes (`synthesizeCursorExecToolCall` call sites): the transcript\n * shows one operation, so a different one must not run.\n */\n\nimport type { AgentEvent, AgentTool, AgentToolCall } from \"@earendil-works/pi-agent-core\";\nimport {\n\ttype CursorExecHandlers,\n\tcomposeCursorShellCommand,\n\tcursorPiLimit,\n\tcursorPiLsPath,\n\tcursorPiReadArgs,\n\tcursorPiTimeout,\n\tomitUndefinedCursorArgs,\n\ttype ToolResultMessage,\n\tvalidateToolArguments,\n} from \"@earendil-works/pi-ai\";\nimport type { ToolCallEvent, ToolCallEventResult } from \"./extensions/types.ts\";\n\nexport interface CursorExecBridgeOptions {\n\t/**\n\t * Resolve an executable tool by name. Backed by the session's full tool\n\t * registry (builtin + extension tools), not only the active set: Cursor\n\t * drives its native tools (read/bash/grep/ls/write) over the exec channel\n\t * regardless of which tools the request advertised.\n\t */\n\tgetTool: (name: string) => AgentTool | undefined;\n\t/**\n\t * Surface tool lifecycle events to the host UI. Bridge-run tools bypass\n\t * the agent loop's executor, so without these the live tool card for a\n\t * synthesized call never resolves.\n\t */\n\temitEvent: (event: AgentEvent, runSignal: AbortSignal) => Promise<void>;\n\t/** Run the session's vetoable extension preflight before tool execution. */\n\tpreflightToolCall?: (event: ToolCallEvent) => Promise<ToolCallEventResult | undefined>;\n\t/** Abort signal for in-flight bridge executions (the active run's signal). */\n\tgetAbortSignal: () => AbortSignal | undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction errorResult(toolCallId: string, toolName: string, text: string): ToolResultMessage {\n\treturn {\n\t\trole: \"toolResult\",\n\t\ttoolCallId,\n\t\ttoolName,\n\t\tcontent: [{ type: \"text\", text }],\n\t\tisError: true,\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nfunction emptyResult(toolCallId: string, toolName: string): ToolResultMessage {\n\treturn {\n\t\trole: \"toolResult\",\n\t\ttoolCallId,\n\t\ttoolName,\n\t\tcontent: [{ type: \"text\", text: \"\" }],\n\t\tisError: false,\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nasync function executeTool(\n\toptions: CursorExecBridgeOptions,\n\ttoolName: string,\n\ttoolCallId: string,\n\targs: Record<string, unknown>,\n): Promise<ToolResultMessage> {\n\tconst runSignal = options.getAbortSignal();\n\tif (!runSignal) {\n\t\treturn errorResult(toolCallId, toolName, \"Tool execution has no active run\");\n\t}\n\n\tconst tool = options.getTool(toolName);\n\tif (!tool) {\n\t\treturn errorResult(toolCallId, toolName, `Tool \"${toolName}\" is not available in this session`);\n\t}\n\n\t// Exec-frame translators write forms like `path: args.path || undefined`;\n\t// a present `undefined` fails schema validation on optional fields even\n\t// though omitting the key is valid.\n\tconst cleanArgs = omitUndefinedCursorArgs(args);\n\tconst toolCall: AgentToolCall = {\n\t\ttype: \"toolCall\",\n\t\tid: toolCallId,\n\t\tname: toolName,\n\t\targuments: cleanArgs,\n\t};\n\n\tlet params: unknown;\n\ttry {\n\t\tparams = validateToolArguments(tool, toolCall);\n\t\tif (tool.prepareArguments) {\n\t\t\tparams = tool.prepareArguments(params);\n\t\t}\n\t} catch (error) {\n\t\treturn errorResult(toolCallId, toolName, error instanceof Error ? error.message : String(error));\n\t}\n\n\tawait options.emitEvent({ type: \"tool_execution_start\", toolCallId, toolName, args: cleanArgs }, runSignal);\n\tlet toolResult: ToolResultMessage;\n\tlet endEvent: AgentEvent;\n\ttry {\n\t\tif (!isRecord(params)) {\n\t\t\tthrow new Error(`Tool \"${toolName}\" prepared non-object arguments`);\n\t\t}\n\t\tconst preflight = await options.preflightToolCall?.({\n\t\t\ttype: \"tool_call\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tinput: params,\n\t\t});\n\t\tif (preflight?.block) {\n\t\t\tconst message = preflight.reason || \"Tool execution was blocked\";\n\t\t\ttoolResult = errorResult(toolCallId, toolName, message);\n\t\t\tendEvent = {\n\t\t\t\ttype: \"tool_execution_end\",\n\t\t\t\ttoolCallId,\n\t\t\t\ttoolName,\n\t\t\t\tresult: { content: [{ type: \"text\", text: message }], details: undefined },\n\t\t\t\tisError: true,\n\t\t\t};\n\t\t} else {\n\t\t\tconst result = await tool.execute(toolCallId, params, runSignal, undefined);\n\t\t\ttoolResult = {\n\t\t\t\trole: \"toolResult\",\n\t\t\t\ttoolCallId,\n\t\t\t\ttoolName,\n\t\t\t\tcontent: result.content ?? [],\n\t\t\t\tdetails: result.details,\n\t\t\t\tusage: result.usage,\n\t\t\t\tisError: false,\n\t\t\t\ttimestamp: Date.now(),\n\t\t\t};\n\t\t\tendEvent = { type: \"tool_execution_end\", toolCallId, toolName, result, isError: false };\n\t\t}\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\ttoolResult = errorResult(toolCallId, toolName, message);\n\t\tendEvent = {\n\t\t\ttype: \"tool_execution_end\",\n\t\t\ttoolCallId,\n\t\t\ttoolName,\n\t\t\tresult: { content: [{ type: \"text\", text: message }], details: undefined },\n\t\t\tisError: true,\n\t\t};\n\t}\n\tawait options.emitEvent(endEvent, runSignal);\n\treturn toolResult;\n}\n\n/**\n * Build the exec handlers passed to the `cursor-agent` API through the agent\n * loop config. Handlers return bare `ToolResultMessage`s; the API derives the\n * wire protobuf answer from them and pairs the transcript result.\n *\n * Deliberately absent handlers (the API answers with a typed refusal):\n * - `delete`: senpi has no delete tool and the bridge must not mutate the\n *   filesystem outside the tool/approval path.\n * - `diagnostics`: no LSP tool in this fork.\n * - `mcpApprovalPreflight`: approval decisions cannot be resolved without an\n *   interactive prompt, so smart-mode probes are conservatively refused.\n */\nexport function createCursorExecBridge(options: CursorExecBridgeOptions): CursorExecHandlers {\n\treturn {\n\t\tread: async (args) =>\n\t\t\texecuteTool(options, \"read\", args.toolCallId, {\n\t\t\t\tpath: args.path,\n\t\t\t\toffset: args.offset,\n\t\t\t\tlimit: args.limit,\n\t\t\t}),\n\n\t\tls: async (args) => executeTool(options, \"ls\", args.toolCallId, { path: cursorPiLsPath(args.path) }),\n\n\t\tgrep: async (args) =>\n\t\t\texecuteTool(options, \"grep\", args.toolCallId, {\n\t\t\t\tpattern: args.pattern,\n\t\t\t\tpath: args.path || undefined,\n\t\t\t\tglob: args.glob || undefined,\n\t\t\t\tignoreCase: args.caseInsensitive === true ? true : undefined,\n\t\t\t}),\n\n\t\twrite: async (args) =>\n\t\t\texecuteTool(options, \"write\", args.toolCallId, {\n\t\t\t\tpath: args.path,\n\t\t\t\tcontent: args.fileText ?? new TextDecoder().decode(args.fileBytes ?? new Uint8Array()),\n\t\t\t}),\n\n\t\tshell: async (args) =>\n\t\t\texecuteTool(options, \"bash\", args.toolCallId, {\n\t\t\t\tcommand: composeCursorShellCommand(args.command, args.workingDirectory || undefined),\n\t\t\t\ttimeout: args.timeout && args.timeout > 0 ? args.timeout : undefined,\n\t\t\t}),\n\n\t\tmcp: async (call) => {\n\t\t\tconst toolName = call.toolName || call.name;\n\t\t\tconst tool = options.getTool(toolName);\n\t\t\tif (!tool) {\n\t\t\t\treturn errorResult(call.toolCallId, toolName, `Tool \"${toolName}\" is not registered in this session`);\n\t\t\t}\n\t\t\treturn executeTool(options, toolName, call.toolCallId, call.args);\n\t\t},\n\n\t\tpiRead: async (call) => {\n\t\t\tconst readArgs = cursorPiReadArgs(call.args.path, call.args.offset, call.args.limit);\n\t\t\t// A present `limit: 0` reads zero lines; answer with empty output\n\t\t\t// without running the tool rather than degrading into a full read.\n\t\t\tif (readArgs === null) return emptyResult(call.toolCallId, \"read\");\n\t\t\treturn executeTool(options, \"read\", call.toolCallId, readArgs);\n\t\t},\n\n\t\tpiBash: async (call) =>\n\t\t\texecuteTool(options, \"bash\", call.toolCallId, {\n\t\t\t\tcommand: call.args.command,\n\t\t\t\ttimeout: cursorPiTimeout(call.args.timeout),\n\t\t\t}),\n\n\t\tpiEdit: async (call) =>\n\t\t\texecuteTool(options, \"edit\", call.toolCallId, {\n\t\t\t\tpath: call.args.path,\n\t\t\t\tedits: call.args.edits.map((edit) => ({ oldText: edit.oldText, newText: edit.newText })),\n\t\t\t}),\n\n\t\tpiWrite: async (call) =>\n\t\t\texecuteTool(options, \"write\", call.toolCallId, {\n\t\t\t\tpath: call.args.path,\n\t\t\t\tcontent: call.args.content,\n\t\t\t}),\n\n\t\tpiGrep: async (call) =>\n\t\t\texecuteTool(options, \"grep\", call.toolCallId, {\n\t\t\t\tpattern: call.args.pattern,\n\t\t\t\tpath: call.args.path || undefined,\n\t\t\t\tglob: call.args.glob || undefined,\n\t\t\t\tignoreCase: call.args.ignoreCase === true ? true : undefined,\n\t\t\t\tliteral: call.args.literal === true ? true : undefined,\n\t\t\t\tcontext: call.args.context,\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\n\t\tpiFind: async (call) =>\n\t\t\texecuteTool(options, \"find\", call.toolCallId, {\n\t\t\t\tpattern: call.args.pattern,\n\t\t\t\tpath: call.args.path || undefined,\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\n\t\tpiLs: async (call) =>\n\t\t\texecuteTool(options, \"ls\", call.toolCallId, {\n\t\t\t\tpath: cursorPiLsPath(call.args.path),\n\t\t\t\tlimit: cursorPiLimit(call.args.limit),\n\t\t\t}),\n\t};\n}\n"]}

package/dist/core/extensions/builtin/claude-sdk-oauth/executable.d.ts

@@ -3,10 +3,11 @@ export type ExecutableDeps = {
     arch: string;
     env: (name: string) => string | undefined;
     resolve: (spec: string) => string;
+    isMusl?: () => boolean;
     isCompiledBun?: () => boolean;
     extractFromBunfs?: (embeddedPath: string) => string;
 };
-export declare function claudeCodeExecutableCandidates(platform: string, arch: string): string[];
+export declare function claudeCodeExecutableCandidates(platform: string, arch: string, preferMusl?: boolean): string[];
 export declare function resolveClaudeCodeExecutable(deps: ExecutableDeps): string;
 export declare function defaultExecutableDeps(): ExecutableDeps;
 //# sourceMappingURL=executable.d.ts.map

package/dist/core/extensions/builtin/claude-sdk-oauth/executable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/executable.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC1C,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;CACpD,CAAC;AAEF,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CASvF;AAaD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAwBxE;AAOD,wBAAgB,qBAAqB,IAAI,cAAc,CActD"}
+{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/executable.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC1C,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;CACpD,CAAC;AAEF,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,UAAQ,GAAG,MAAM,EAAE,CAQ3G;AAaD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CA4BxE;AAgBD,wBAAgB,qBAAqB,IAAI,cAAc,CAetD"}

package/dist/core/extensions/builtin/claude-sdk-oauth/executable.js

@@ -1,12 +1,11 @@
 import { createRequire } from "node:module";
 import { extractFromBunfs } from "@anthropic-ai/claude-agent-sdk/extract";
-export function claudeCodeExecutableCandidates(platform, arch) {
+export function claudeCodeExecutableCandidates(platform, arch, preferMusl = false) {
     const ext = platform === "win32" ? ".exe" : "";
     if (platform === "linux") {
-        return [
-            `@anthropic-ai/claude-agent-sdk-linux-${arch}-musl/claude${ext}`,
-            `@anthropic-ai/claude-agent-sdk-linux-${arch}/claude${ext}`,
-        ];
+        const glibc = `@anthropic-ai/claude-agent-sdk-linux-${arch}/claude${ext}`;
+        const musl = `@anthropic-ai/claude-agent-sdk-linux-${arch}-musl/claude${ext}`;
+        return preferMusl ? [musl, glibc] : [glibc, musl];
     }
     return [`@anthropic-ai/claude-agent-sdk-${platform}-${arch}/claude${ext}`];
 }
@@ -25,7 +24,7 @@ export function resolveClaudeCodeExecutable(deps) {
     const override = deps.env("CLAUDE_CODE_EXECUTABLE");
     if (override)
         return override;
-    const candidates = claudeCodeExecutableCandidates(deps.platform, deps.arch);
+    const candidates = claudeCodeExecutableCandidates(deps.platform, deps.arch, deps.platform === "linux" && deps.isMusl?.() === true);
     if (deps.isCompiledBun?.() && deps.extractFromBunfs) {
         const embedded = firstResolvable(candidates, deps.resolve);
         if (embedded !== undefined) {
@@ -45,11 +44,21 @@ export function resolveClaudeCodeExecutable(deps) {
 }
 let defaultRequire = null;
 const isCompiledBunBinary = import.meta.url.includes("$bunfs") || import.meta.url.includes("~BUN") || import.meta.url.includes("%7EBUN");
+function isMuslLinuxRuntime() {
+    if (process.platform !== "linux" || typeof process.report?.getReport !== "function")
+        return false;
+    const report = process.report.getReport();
+    if (report === null || !("header" in report) || typeof report.header !== "object" || report.header === null) {
+        return false;
+    }
+    return !("glibcVersionRuntime" in report.header) || report.header.glibcVersionRuntime === undefined;
+}
 export function defaultExecutableDeps() {
     return {
         platform: process.platform,
         arch: process.arch,
         env: (name) => process.env[name],
+        isMusl: isMuslLinuxRuntime,
         isCompiledBun: () => isCompiledBunBinary,
         extractFromBunfs,
         resolve: (spec) => {

package/dist/core/extensions/builtin/claude-sdk-oauth/executable.js.map

@@ -1 +1 @@
-{"version":3,"file":"executable.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/executable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAW1E,MAAM,UAAU,8BAA8B,CAAC,QAAgB,EAAE,IAAY;IAC5E,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO;YACN,wCAAwC,IAAI,eAAe,GAAG,EAAE;YAChE,wCAAwC,IAAI,UAAU,GAAG,EAAE;SAC3D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,kCAAkC,QAAQ,IAAI,IAAI,UAAU,GAAG,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,UAAoB,EAAE,OAAiC;IAC/E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC;YACJ,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,qBAAqB;QACtB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAoB;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACpD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5E,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACR,iEAAiE;YAClE,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAE5C,MAAM,IAAI,KAAK,CACd,sCAAsC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI;QACnE,kGAAkG,CACnG,CAAC;AACH,CAAC;AAED,IAAI,cAAc,GAA4C,IAAI,CAAC;AAEnE,MAAM,mBAAmB,GACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE9G,MAAM,UAAU,qBAAqB;IACpC,OAAO;QACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAChC,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB;QACxC,gBAAgB;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACjB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import { createRequire } from \"node:module\";\nimport { extractFromBunfs } from \"@anthropic-ai/claude-agent-sdk/extract\";\n\nexport type ExecutableDeps = {\n\tplatform: string;\n\tarch: string;\n\tenv: (name: string) => string | undefined;\n\tresolve: (spec: string) => string;\n\tisCompiledBun?: () => boolean;\n\textractFromBunfs?: (embeddedPath: string) => string;\n};\n\nexport function claudeCodeExecutableCandidates(platform: string, arch: string): string[] {\n\tconst ext = platform === \"win32\" ? \".exe\" : \"\";\n\tif (platform === \"linux\") {\n\t\treturn [\n\t\t\t`@anthropic-ai/claude-agent-sdk-linux-${arch}-musl/claude${ext}`,\n\t\t\t`@anthropic-ai/claude-agent-sdk-linux-${arch}/claude${ext}`,\n\t\t];\n\t}\n\treturn [`@anthropic-ai/claude-agent-sdk-${platform}-${arch}/claude${ext}`];\n}\n\nfunction firstResolvable(candidates: string[], resolve: (spec: string) => string): string | undefined {\n\tfor (const candidate of candidates) {\n\t\ttry {\n\t\t\treturn resolve(candidate);\n\t\t} catch {\n\t\t\t// try next candidate\n\t\t}\n\t}\n\treturn undefined;\n}\n\nexport function resolveClaudeCodeExecutable(deps: ExecutableDeps): string {\n\tconst override = deps.env(\"CLAUDE_CODE_EXECUTABLE\");\n\tif (override) return override;\n\n\tconst candidates = claudeCodeExecutableCandidates(deps.platform, deps.arch);\n\n\tif (deps.isCompiledBun?.() && deps.extractFromBunfs) {\n\t\tconst embedded = firstResolvable(candidates, deps.resolve);\n\t\tif (embedded !== undefined) {\n\t\t\ttry {\n\t\t\t\treturn deps.extractFromBunfs(embedded);\n\t\t\t} catch {\n\t\t\t\t// not embedded in the bundle - fall through to the on-disk probe\n\t\t\t}\n\t\t}\n\t}\n\n\tconst resolved = firstResolvable(candidates, deps.resolve);\n\tif (resolved !== undefined) return resolved;\n\n\tthrow new Error(\n\t\t`Claude native binary not found for ${deps.platform}-${deps.arch}. ` +\n\t\t\t\"Reinstall @anthropic-ai/claude-agent-sdk without --omit=optional, or set CLAUDE_CODE_EXECUTABLE.\",\n\t);\n}\n\nlet defaultRequire: ReturnType<typeof createRequire> | null = null;\n\nconst isCompiledBunBinary =\n\timport.meta.url.includes(\"$bunfs\") || import.meta.url.includes(\"~BUN\") || import.meta.url.includes(\"%7EBUN\");\n\nexport function defaultExecutableDeps(): ExecutableDeps {\n\treturn {\n\t\tplatform: process.platform,\n\t\tarch: process.arch,\n\t\tenv: (name) => process.env[name],\n\t\tisCompiledBun: () => isCompiledBunBinary,\n\t\textractFromBunfs,\n\t\tresolve: (spec) => {\n\t\t\tif (!defaultRequire) {\n\t\t\t\tdefaultRequire = createRequire(import.meta.resolve(\"@anthropic-ai/claude-agent-sdk\"));\n\t\t\t}\n\t\t\treturn defaultRequire.resolve(spec);\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"executable.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/executable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAY1E,MAAM,UAAU,8BAA8B,CAAC,QAAgB,EAAE,IAAY,EAAE,UAAU,GAAG,KAAK;IAChG,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,wCAAwC,IAAI,UAAU,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,wCAAwC,IAAI,eAAe,GAAG,EAAE,CAAC;QAC9E,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,kCAAkC,QAAQ,IAAI,IAAI,UAAU,GAAG,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,UAAoB,EAAE,OAAiC;IAC/E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC;YACJ,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,qBAAqB;QACtB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAoB;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACpD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,UAAU,GAAG,8BAA8B,CAChD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,IAAI,CACrD,CAAC;IAEF,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACR,iEAAiE;YAClE,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAE5C,MAAM,IAAI,KAAK,CACd,sCAAsC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI;QACnE,kGAAkG,CACnG,CAAC;AACH,CAAC;AAED,IAAI,cAAc,GAA4C,IAAI,CAAC;AAEnE,MAAM,mBAAmB,GACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE9G,SAAS,kBAAkB;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAClG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1C,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC7G,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO;QACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,kBAAkB;QAC1B,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB;QACxC,gBAAgB;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACjB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import { createRequire } from \"node:module\";\nimport { extractFromBunfs } from \"@anthropic-ai/claude-agent-sdk/extract\";\n\nexport type ExecutableDeps = {\n\tplatform: string;\n\tarch: string;\n\tenv: (name: string) => string | undefined;\n\tresolve: (spec: string) => string;\n\tisMusl?: () => boolean;\n\tisCompiledBun?: () => boolean;\n\textractFromBunfs?: (embeddedPath: string) => string;\n};\n\nexport function claudeCodeExecutableCandidates(platform: string, arch: string, preferMusl = false): string[] {\n\tconst ext = platform === \"win32\" ? \".exe\" : \"\";\n\tif (platform === \"linux\") {\n\t\tconst glibc = `@anthropic-ai/claude-agent-sdk-linux-${arch}/claude${ext}`;\n\t\tconst musl = `@anthropic-ai/claude-agent-sdk-linux-${arch}-musl/claude${ext}`;\n\t\treturn preferMusl ? [musl, glibc] : [glibc, musl];\n\t}\n\treturn [`@anthropic-ai/claude-agent-sdk-${platform}-${arch}/claude${ext}`];\n}\n\nfunction firstResolvable(candidates: string[], resolve: (spec: string) => string): string | undefined {\n\tfor (const candidate of candidates) {\n\t\ttry {\n\t\t\treturn resolve(candidate);\n\t\t} catch {\n\t\t\t// try next candidate\n\t\t}\n\t}\n\treturn undefined;\n}\n\nexport function resolveClaudeCodeExecutable(deps: ExecutableDeps): string {\n\tconst override = deps.env(\"CLAUDE_CODE_EXECUTABLE\");\n\tif (override) return override;\n\n\tconst candidates = claudeCodeExecutableCandidates(\n\t\tdeps.platform,\n\t\tdeps.arch,\n\t\tdeps.platform === \"linux\" && deps.isMusl?.() === true,\n\t);\n\n\tif (deps.isCompiledBun?.() && deps.extractFromBunfs) {\n\t\tconst embedded = firstResolvable(candidates, deps.resolve);\n\t\tif (embedded !== undefined) {\n\t\t\ttry {\n\t\t\t\treturn deps.extractFromBunfs(embedded);\n\t\t\t} catch {\n\t\t\t\t// not embedded in the bundle - fall through to the on-disk probe\n\t\t\t}\n\t\t}\n\t}\n\n\tconst resolved = firstResolvable(candidates, deps.resolve);\n\tif (resolved !== undefined) return resolved;\n\n\tthrow new Error(\n\t\t`Claude native binary not found for ${deps.platform}-${deps.arch}. ` +\n\t\t\t\"Reinstall @anthropic-ai/claude-agent-sdk without --omit=optional, or set CLAUDE_CODE_EXECUTABLE.\",\n\t);\n}\n\nlet defaultRequire: ReturnType<typeof createRequire> | null = null;\n\nconst isCompiledBunBinary =\n\timport.meta.url.includes(\"$bunfs\") || import.meta.url.includes(\"~BUN\") || import.meta.url.includes(\"%7EBUN\");\n\nfunction isMuslLinuxRuntime(): boolean {\n\tif (process.platform !== \"linux\" || typeof process.report?.getReport !== \"function\") return false;\n\tconst report = process.report.getReport();\n\tif (report === null || !(\"header\" in report) || typeof report.header !== \"object\" || report.header === null) {\n\t\treturn false;\n\t}\n\treturn !(\"glibcVersionRuntime\" in report.header) || report.header.glibcVersionRuntime === undefined;\n}\n\nexport function defaultExecutableDeps(): ExecutableDeps {\n\treturn {\n\t\tplatform: process.platform,\n\t\tarch: process.arch,\n\t\tenv: (name) => process.env[name],\n\t\tisMusl: isMuslLinuxRuntime,\n\t\tisCompiledBun: () => isCompiledBunBinary,\n\t\textractFromBunfs,\n\t\tresolve: (spec) => {\n\t\t\tif (!defaultRequire) {\n\t\t\t\tdefaultRequire = createRequire(import.meta.resolve(\"@anthropic-ai/claude-agent-sdk\"));\n\t\t\t}\n\t\t\treturn defaultRequire.resolve(spec);\n\t\t},\n\t};\n}\n"]}

package/dist/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.d.ts

@@ -1,7 +1,7 @@
-import type { EffortLevel, Options, SDKMessage, SDKUserMessage, SettingSource, ThinkingConfig } from "@anthropic-ai/claude-agent-sdk";
-import { createSdkMcpServer, query } from "@anthropic-ai/claude-agent-sdk";
+import type { EffortLevel, Options, SDKMessage, SDKUserMessage, SessionMessage, SettingSource, ThinkingConfig } from "@anthropic-ai/claude-agent-sdk";
+import { createSdkMcpServer, getSessionMessages, query } from "@anthropic-ai/claude-agent-sdk";
 import type { Base64ImageSource, ContentBlockParam } from "@anthropic-ai/sdk/resources";
-export type { Base64ImageSource, ContentBlockParam, EffortLevel, Options, SDKMessage, SDKUserMessage, SettingSource, ThinkingConfig, };
+export type { Base64ImageSource, ContentBlockParam, EffortLevel, Options, SDKMessage, SDKUserMessage, SessionMessage, SettingSource, ThinkingConfig, };
 export type SdkQueryInput = Parameters<typeof query>[0];
 export type SdkQueryHandle = AsyncIterable<SDKMessage> & {
     interrupt(): Promise<unknown>;
@@ -13,6 +13,7 @@ export type SdkQuery = (input: SdkQueryInput) => SdkQueryHandle;
 export type SdkBoundary = {
     query: SdkQuery;
     createSdkMcpServer: typeof createSdkMcpServer;
+    getSessionMessages: typeof getSessionMessages;
 };
 declare const defaultSdkBoundary: SdkBoundary;
 export declare function getSdkBoundary(): SdkBoundary;

package/dist/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-boundary.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,WAAW,EACX,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAExF,YAAY,EACX,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,GACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG;IACxD,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,IAAI,IAAI,CAAC;IACd,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,cAAc,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,QAAQ,CAAC;IAChB,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;CAC9C,CAAC;AAEF,QAAA,MAAM,kBAAkB,EAAE,WAA2C,CAAC;AAGtE,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAExE;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"sdk-boundary.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,WAAW,EACX,OAAO,EACP,UAAU,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,cAAc,EACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAExF,YAAY,EACX,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,OAAO,EACP,UAAU,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,cAAc,GACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG;IACxD,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,IAAI,IAAI,CAAC;IACd,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,cAAc,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,QAAQ,CAAC;IAChB,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;CAC9C,CAAC;AAEF,QAAA,MAAM,kBAAkB,EAAE,WAA+D,CAAC;AAG1F,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAExE;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,eAAe,kBAAkB,CAAC"}

package/dist/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.js

@@ -1,5 +1,5 @@
-import { createSdkMcpServer, query } from "@anthropic-ai/claude-agent-sdk";
-const defaultSdkBoundary = { query, createSdkMcpServer };
+import { createSdkMcpServer, getSessionMessages, query } from "@anthropic-ai/claude-agent-sdk";
+const defaultSdkBoundary = { query, createSdkMcpServer, getSessionMessages };
 let activeSdkBoundary = defaultSdkBoundary;
 export function getSdkBoundary() {
     return activeSdkBoundary;

package/dist/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-boundary.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AA4B3E,MAAM,kBAAkB,GAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;AACtE,IAAI,iBAAiB,GAAG,kBAAkB,CAAC;AAE3C,MAAM,UAAU,cAAc;IAC7B,OAAO,iBAAiB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA8B;IACjE,iBAAiB,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,iBAAiB,GAAG,kBAAkB,CAAC;AACxC,CAAC;AAED,eAAe,kBAAkB,CAAC","sourcesContent":["import type {\n\tEffortLevel,\n\tOptions,\n\tSDKMessage,\n\tSDKUserMessage,\n\tSettingSource,\n\tThinkingConfig,\n} from \"@anthropic-ai/claude-agent-sdk\";\nimport { createSdkMcpServer, query } from \"@anthropic-ai/claude-agent-sdk\";\nimport type { Base64ImageSource, ContentBlockParam } from \"@anthropic-ai/sdk/resources\";\n\nexport type {\n\tBase64ImageSource,\n\tContentBlockParam,\n\tEffortLevel,\n\tOptions,\n\tSDKMessage,\n\tSDKUserMessage,\n\tSettingSource,\n\tThinkingConfig,\n};\n\nexport type SdkQueryInput = Parameters<typeof query>[0];\nexport type SdkQueryHandle = AsyncIterable<SDKMessage> & {\n\tinterrupt(): Promise<unknown>;\n\tsetModel?: (model?: string) => Promise<void>;\n\tclose(): void;\n\tinitializationResult?: () => Promise<unknown>;\n};\nexport type SdkQuery = (input: SdkQueryInput) => SdkQueryHandle;\n\nexport type SdkBoundary = {\n\tquery: SdkQuery;\n\tcreateSdkMcpServer: typeof createSdkMcpServer;\n};\n\nconst defaultSdkBoundary: SdkBoundary = { query, createSdkMcpServer };\nlet activeSdkBoundary = defaultSdkBoundary;\n\nexport function getSdkBoundary(): SdkBoundary {\n\treturn activeSdkBoundary;\n}\n\nexport function overrideSdkBoundary(override: Partial<SdkBoundary>): void {\n\tactiveSdkBoundary = { ...defaultSdkBoundary, ...override };\n}\n\nexport function resetSdkBoundary(): void {\n\tactiveSdkBoundary = defaultSdkBoundary;\n}\n\nexport default defaultSdkBoundary;\n"]}
+{"version":3,"file":"sdk-boundary.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/sdk-boundary.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AA8B/F,MAAM,kBAAkB,GAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;AAC1F,IAAI,iBAAiB,GAAG,kBAAkB,CAAC;AAE3C,MAAM,UAAU,cAAc;IAC7B,OAAO,iBAAiB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA8B;IACjE,iBAAiB,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,iBAAiB,GAAG,kBAAkB,CAAC;AACxC,CAAC;AAED,eAAe,kBAAkB,CAAC","sourcesContent":["import type {\n\tEffortLevel,\n\tOptions,\n\tSDKMessage,\n\tSDKUserMessage,\n\tSessionMessage,\n\tSettingSource,\n\tThinkingConfig,\n} from \"@anthropic-ai/claude-agent-sdk\";\nimport { createSdkMcpServer, getSessionMessages, query } from \"@anthropic-ai/claude-agent-sdk\";\nimport type { Base64ImageSource, ContentBlockParam } from \"@anthropic-ai/sdk/resources\";\n\nexport type {\n\tBase64ImageSource,\n\tContentBlockParam,\n\tEffortLevel,\n\tOptions,\n\tSDKMessage,\n\tSDKUserMessage,\n\tSessionMessage,\n\tSettingSource,\n\tThinkingConfig,\n};\n\nexport type SdkQueryInput = Parameters<typeof query>[0];\nexport type SdkQueryHandle = AsyncIterable<SDKMessage> & {\n\tinterrupt(): Promise<unknown>;\n\tsetModel?: (model?: string) => Promise<void>;\n\tclose(): void;\n\tinitializationResult?: () => Promise<unknown>;\n};\nexport type SdkQuery = (input: SdkQueryInput) => SdkQueryHandle;\n\nexport type SdkBoundary = {\n\tquery: SdkQuery;\n\tcreateSdkMcpServer: typeof createSdkMcpServer;\n\tgetSessionMessages: typeof getSessionMessages;\n};\n\nconst defaultSdkBoundary: SdkBoundary = { query, createSdkMcpServer, getSessionMessages };\nlet activeSdkBoundary = defaultSdkBoundary;\n\nexport function getSdkBoundary(): SdkBoundary {\n\treturn activeSdkBoundary;\n}\n\nexport function overrideSdkBoundary(override: Partial<SdkBoundary>): void {\n\tactiveSdkBoundary = { ...defaultSdkBoundary, ...override };\n}\n\nexport function resetSdkBoundary(): void {\n\tactiveSdkBoundary = defaultSdkBoundary;\n}\n\nexport default defaultSdkBoundary;\n"]}

package/dist/core/extensions/builtin/claude-sdk-oauth/session-binding-store.d.ts

@@ -0,0 +1,29 @@
+import { z } from "zod";
+declare const storedBindingSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    sessionPath: z.ZodString;
+    sessionId: z.ZodString;
+    markerEntryId: z.ZodString;
+    sdkSessionId: z.ZodString;
+    sentCount: z.ZodNumber;
+    sentPrefixHash: z.ZodString;
+    assistantContentHash: z.ZodString;
+    lastAssistantUuid: z.ZodNullable<z.ZodString>;
+    accountName: z.ZodString;
+    modelId: z.ZodString;
+    systemPromptHash: z.ZodString;
+    toolsetHash: z.ZodString;
+}, z.core.$strict>;
+export type StoredBinding = Readonly<z.infer<typeof storedBindingSchema>>;
+export declare function bindingSidecarPath(sessionFile: string): string;
+/**
+ * Records are keyed by the canonical session path so a symlinked directory or a
+ * different spelling of the same file resolves to one sidecar instead of
+ * silently losing the binding.
+ */
+export declare function canonicalSessionPath(sessionFile: string): string;
+export declare function readStoredBinding(sessionFile: string): Promise<StoredBinding | undefined>;
+export declare function writeStoredBinding(sessionFile: string, record: StoredBinding): Promise<void>;
+export declare function deleteStoredBinding(sessionFile: string): Promise<void>;
+export {};
+//# sourceMappingURL=session-binding-store.d.ts.map

package/dist/core/extensions/builtin/claude-sdk-oauth/session-binding-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-binding-store.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/session-binding-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;kBAcvB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAE1E,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAWhE;AAED,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAqB/F;AAED,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBlG;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E"}

package/dist/core/extensions/builtin/claude-sdk-oauth/session-binding-store.js

@@ -0,0 +1,112 @@
+import { randomUUID } from "node:crypto";
+import { realpathSync } from "node:fs";
+import { readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { z } from "zod";
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+const MAX_RECORD_BYTES = 16 * 1024;
+const storedBindingSchema = z.strictObject({
+    schemaVersion: z.literal(1),
+    sessionPath: z.string().min(1).max(4096),
+    sessionId: z.string().min(1).max(256),
+    markerEntryId: z.string().min(1).max(256),
+    sdkSessionId: z.string().min(1).max(256),
+    sentCount: z.number().int().nonnegative().safe(),
+    sentPrefixHash: z.string().regex(SHA256_HEX),
+    assistantContentHash: z.string().regex(SHA256_HEX),
+    lastAssistantUuid: z.string().min(1).max(256).nullable(),
+    accountName: z.string().min(1).max(256),
+    modelId: z.string().min(1).max(256),
+    systemPromptHash: z.string().regex(SHA256_HEX),
+    toolsetHash: z.string().regex(SHA256_HEX),
+});
+export function bindingSidecarPath(sessionFile) {
+    return `${canonicalSessionPath(sessionFile)}.claude-sdk-oauth-binding.json`;
+}
+/**
+ * Records are keyed by the canonical session path so a symlinked directory or a
+ * different spelling of the same file resolves to one sidecar instead of
+ * silently losing the binding.
+ */
+export function canonicalSessionPath(sessionFile) {
+    const resolved = resolve(sessionFile);
+    try {
+        return realpathSync(resolved);
+    }
+    catch {
+        try {
+            return join(realpathSync(dirname(resolved)), basename(resolved));
+        }
+        catch {
+            return resolved;
+        }
+    }
+}
+export async function readStoredBinding(sessionFile) {
+    const path = bindingSidecarPath(sessionFile);
+    let metadata;
+    try {
+        metadata = await stat(path);
+    }
+    catch (error) {
+        if (isNotFoundError(error))
+            return undefined;
+        throw error;
+    }
+    if (metadata.size > MAX_RECORD_BYTES)
+        return undefined;
+    let value;
+    try {
+        value = JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        if (error instanceof SyntaxError)
+            return undefined;
+        throw error;
+    }
+    const parsed = storedBindingSchema.safeParse(value);
+    if (!parsed.success || parsed.data.sessionPath !== canonicalSessionPath(sessionFile))
+        return undefined;
+    return parsed.data;
+}
+export async function writeStoredBinding(sessionFile, record) {
+    const sessionPath = canonicalSessionPath(sessionFile);
+    const parsed = storedBindingSchema.parse(record);
+    if (canonicalSessionPath(parsed.sessionPath) !== sessionPath) {
+        throw new StoredBindingPathError(sessionPath, parsed.sessionPath);
+    }
+    const canonical = { ...parsed, sessionPath };
+    const serialized = `${JSON.stringify(canonical)}\n`;
+    if (Buffer.byteLength(serialized) > MAX_RECORD_BYTES) {
+        throw new StoredBindingSizeError(Buffer.byteLength(serialized), MAX_RECORD_BYTES);
+    }
+    const path = bindingSidecarPath(sessionPath);
+    const temporaryPath = join(dirname(path), `.${basename(path)}-${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporaryPath, serialized, { encoding: "utf8", mode: 0o600 });
+        await rename(temporaryPath, path);
+    }
+    catch (error) {
+        await rm(temporaryPath, { force: true });
+        throw error;
+    }
+}
+export async function deleteStoredBinding(sessionFile) {
+    await rm(bindingSidecarPath(sessionFile), { force: true });
+}
+class StoredBindingPathError extends Error {
+    constructor(expected, actual) {
+        super(`Stored binding path mismatch: expected ${expected}, received ${actual}`);
+        this.name = "StoredBindingPathError";
+    }
+}
+class StoredBindingSizeError extends Error {
+    constructor(actual, maximum) {
+        super(`Stored binding exceeds ${maximum} bytes: ${actual}`);
+        this.name = "StoredBindingSizeError";
+    }
+}
+function isNotFoundError(error) {
+    return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+//# sourceMappingURL=session-binding-store.js.map

package/dist/core/extensions/builtin/claude-sdk-oauth/session-binding-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-binding-store.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/claude-sdk-oauth/session-binding-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;IAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;IAC5C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;IAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;CACzC,CAAC,CAAC;AAIH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACrD,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,gCAAgC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,QAAQ,CAAC;QACjB,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAC1D,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAEvD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,WAAW;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,KAAK,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,MAAqB;IAClF,MAAM,WAAW,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;QAC9D,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAkB,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACtD,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IACpF,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC5D,MAAM,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,sBAAuB,SAAQ,KAAK;IACzC,YAAY,QAAgB,EAAE,MAAc;QAC3C,KAAK,CAAC,0CAA0C,QAAQ,cAAc,MAAM,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACtC,CAAC;CACD;AAED,MAAM,sBAAuB,SAAQ,KAAK;IACzC,YAAY,MAAc,EAAE,OAAe;QAC1C,KAAK,CAAC,0BAA0B,OAAO,WAAW,MAAM,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACtC,CAAC;CACD;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC7E,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { realpathSync } from \"node:fs\";\nimport { readFile, rename, rm, stat, writeFile } from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { z } from \"zod\";\n\nconst SHA256_HEX = /^[0-9a-f]{64}$/;\nconst MAX_RECORD_BYTES = 16 * 1024;\n\nconst storedBindingSchema = z.strictObject({\n\tschemaVersion: z.literal(1),\n\tsessionPath: z.string().min(1).max(4096),\n\tsessionId: z.string().min(1).max(256),\n\tmarkerEntryId: z.string().min(1).max(256),\n\tsdkSessionId: z.string().min(1).max(256),\n\tsentCount: z.number().int().nonnegative().safe(),\n\tsentPrefixHash: z.string().regex(SHA256_HEX),\n\tassistantContentHash: z.string().regex(SHA256_HEX),\n\tlastAssistantUuid: z.string().min(1).max(256).nullable(),\n\taccountName: z.string().min(1).max(256),\n\tmodelId: z.string().min(1).max(256),\n\tsystemPromptHash: z.string().regex(SHA256_HEX),\n\ttoolsetHash: z.string().regex(SHA256_HEX),\n});\n\nexport type StoredBinding = Readonly<z.infer<typeof storedBindingSchema>>;\n\nexport function bindingSidecarPath(sessionFile: string): string {\n\treturn `${canonicalSessionPath(sessionFile)}.claude-sdk-oauth-binding.json`;\n}\n\n/**\n * Records are keyed by the canonical session path so a symlinked directory or a\n * different spelling of the same file resolves to one sidecar instead of\n * silently losing the binding.\n */\nexport function canonicalSessionPath(sessionFile: string): string {\n\tconst resolved = resolve(sessionFile);\n\ttry {\n\t\treturn realpathSync(resolved);\n\t} catch {\n\t\ttry {\n\t\t\treturn join(realpathSync(dirname(resolved)), basename(resolved));\n\t\t} catch {\n\t\t\treturn resolved;\n\t\t}\n\t}\n}\n\nexport async function readStoredBinding(sessionFile: string): Promise<StoredBinding | undefined> {\n\tconst path = bindingSidecarPath(sessionFile);\n\tlet metadata: Awaited<ReturnType<typeof stat>>;\n\ttry {\n\t\tmetadata = await stat(path);\n\t} catch (error) {\n\t\tif (isNotFoundError(error)) return undefined;\n\t\tthrow error;\n\t}\n\tif (metadata.size > MAX_RECORD_BYTES) return undefined;\n\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(await readFile(path, \"utf8\"));\n\t} catch (error) {\n\t\tif (error instanceof SyntaxError) return undefined;\n\t\tthrow error;\n\t}\n\tconst parsed = storedBindingSchema.safeParse(value);\n\tif (!parsed.success || parsed.data.sessionPath !== canonicalSessionPath(sessionFile)) return undefined;\n\treturn parsed.data;\n}\n\nexport async function writeStoredBinding(sessionFile: string, record: StoredBinding): Promise<void> {\n\tconst sessionPath = canonicalSessionPath(sessionFile);\n\tconst parsed = storedBindingSchema.parse(record);\n\tif (canonicalSessionPath(parsed.sessionPath) !== sessionPath) {\n\t\tthrow new StoredBindingPathError(sessionPath, parsed.sessionPath);\n\t}\n\tconst canonical: StoredBinding = { ...parsed, sessionPath };\n\tconst serialized = `${JSON.stringify(canonical)}\\n`;\n\tif (Buffer.byteLength(serialized) > MAX_RECORD_BYTES) {\n\t\tthrow new StoredBindingSizeError(Buffer.byteLength(serialized), MAX_RECORD_BYTES);\n\t}\n\n\tconst path = bindingSidecarPath(sessionPath);\n\tconst temporaryPath = join(dirname(path), `.${basename(path)}-${randomUUID()}.tmp`);\n\ttry {\n\t\tawait writeFile(temporaryPath, serialized, { encoding: \"utf8\", mode: 0o600 });\n\t\tawait rename(temporaryPath, path);\n\t} catch (error) {\n\t\tawait rm(temporaryPath, { force: true });\n\t\tthrow error;\n\t}\n}\n\nexport async function deleteStoredBinding(sessionFile: string): Promise<void> {\n\tawait rm(bindingSidecarPath(sessionFile), { force: true });\n}\n\nclass StoredBindingPathError extends Error {\n\tconstructor(expected: string, actual: string) {\n\t\tsuper(`Stored binding path mismatch: expected ${expected}, received ${actual}`);\n\t\tthis.name = \"StoredBindingPathError\";\n\t}\n}\n\nclass StoredBindingSizeError extends Error {\n\tconstructor(actual: number, maximum: number) {\n\t\tsuper(`Stored binding exceeds ${maximum} bytes: ${actual}`);\n\t\tthis.name = \"StoredBindingSizeError\";\n\t}\n}\n\nfunction isNotFoundError(error: unknown): boolean {\n\treturn error instanceof Error && \"code\" in error && error.code === \"ENOENT\";\n}\n"]}