@cursor/bdk 0.2.8 → 0.2.10

package/dist/internal/cursor/github-credentials.js

@@ -5,78 +5,64 @@
  * while Octokit callers use {@link getToken} so long-lived clients refresh
  * without being rebuilt.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { CursorBackendError } from "./backend-client.js";
-const REFRESH_LEEWAY_MS = 5 * 60000;
-const REFRESH_RETRY_MS = 60000;
-const FAILURE_CACHE_TTL_MS = 60000;
-const MAX_RETRY_AFTER_MS = 60 * 60000;
-const MIN_TIMER_DELAY_MS = 1000;
+const REFRESH_LEEWAY_MS = 5 * 60_000;
+const REFRESH_RETRY_MS = 60_000;
+const FAILURE_CACHE_TTL_MS = 60_000;
+const MAX_RETRY_AFTER_MS = 60 * 60_000;
+const MIN_TIMER_DELAY_MS = 1_000;
 export class CursorGithubCredentialProvider {
     constructor(options) {
-        var _a, _b;
         this.started = false;
         this.stopped = false;
         this.client = options.client;
         this.repos = [...options.scope.repos];
         this.permissions = options.scope.permissions;
-        this.logger = (_a = options.logger) !== null && _a !== void 0 ? _a : (() => { });
-        this.now = (_b = options.now) !== null && _b !== void 0 ? _b : (() => Date.now());
+        this.logger = options.logger ?? (() => { });
+        this.now = options.now ?? (() => Date.now());
     }
-    start() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (this.stopped) {
-                throw new Error("Cursor account GitHub credentials have been stopped.");
-            }
-            if (this.started) {
-                return;
-            }
-            this.previousGhToken = process.env.GH_TOKEN;
-            this.started = true;
-            try {
-                const token = yield this.getToken();
-                this.installGhToken(token);
-                this.scheduleRefresh();
-            }
-            catch (error) {
-                this.started = false;
-                this.restoreGhToken();
-                throw error;
-            }
-        });
+    async start() {
+        if (this.stopped) {
+            throw new Error("Cursor account GitHub credentials have been stopped.");
+        }
+        if (this.started) {
+            return;
+        }
+        this.previousGhToken = process.env.GH_TOKEN;
+        this.started = true;
+        try {
+            const token = await this.getToken();
+            this.installGhToken(token);
+            this.scheduleRefresh();
+        }
+        catch (error) {
+            this.started = false;
+            this.restoreGhToken();
+            throw error;
+        }
     }
-    getToken() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (this.stopped) {
-                throw new Error("Cursor account GitHub credentials have been stopped.");
-            }
-            const now = this.now();
-            if (this.cached !== undefined && now >= this.cached.expiresAtMs) {
-                // Expired leases must not be served; drop them so the next mint is clean.
-                this.cached = undefined;
-                this.restoreGhToken();
-            }
-            if (this.cached !== undefined && now < this.cached.refreshAtMs) {
-                return this.cached.token;
-            }
-            if (this.failure !== undefined && now < this.failure.retryAtMs && this.cached === undefined) {
-                throw new Error(this.failure.message);
-            }
-            if (this.refreshPromise === undefined) {
-                this.refreshPromise = this.refresh().finally(() => {
-                    this.refreshPromise = undefined;
-                });
-            }
-            return this.refreshPromise;
-        });
+    async getToken() {
+        if (this.stopped) {
+            throw new Error("Cursor account GitHub credentials have been stopped.");
+        }
+        const now = this.now();
+        if (this.cached !== undefined && now >= this.cached.expiresAtMs) {
+            // Expired leases must not be served; drop them so the next mint is clean.
+            this.cached = undefined;
+            this.restoreGhToken();
+        }
+        if (this.cached !== undefined && now < this.cached.refreshAtMs) {
+            return this.cached.token;
+        }
+        if (this.failure !== undefined && now < this.failure.retryAtMs && this.cached === undefined) {
+            throw new Error(this.failure.message);
+        }
+        if (this.refreshPromise === undefined) {
+            this.refreshPromise = this.refresh().finally(() => {
+                this.refreshPromise = undefined;
+            });
+        }
+        return this.refreshPromise;
     }
     stop() {
         this.started = false;
@@ -89,55 +75,53 @@ export class CursorGithubCredentialProvider {
         this.failure = undefined;
         this.restoreGhToken();
     }
-    refresh() {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const result = yield this.client.getGithubToken(this.repos, {
-                    permissions: this.permissions,
-                });
-                if (this.stopped) {
-                    throw new Error("Cursor account GitHub credentials have been stopped.");
-                }
-                const expiresAtMs = Date.parse(result.expiresAt);
-                if (!Number.isFinite(expiresAtMs) || expiresAtMs <= this.now() + REFRESH_LEEWAY_MS) {
-                    throw new Error("Cursor backend returned an invalid GitHub credential expiry.");
-                }
-                this.failure = undefined;
-                this.cached = {
-                    token: result.token,
-                    expiresAtMs,
-                    refreshAtMs: expiresAtMs - REFRESH_LEEWAY_MS,
-                };
-                if (this.started) {
-                    this.installGhToken(result.token);
-                    this.scheduleRefresh();
-                }
-                this.logger(`[bdk] GitHub auth: refreshed Cursor account credential for ${this.repos.length} repo(s)`);
-                return result.token;
+    async refresh() {
+        try {
+            const result = await this.client.getGithubToken(this.repos, {
+                permissions: this.permissions,
+            });
+            if (this.stopped) {
+                throw new Error("Cursor account GitHub credentials have been stopped.");
             }
-            catch (error) {
-                const message = error instanceof Error ? error.message : String(error);
-                if (this.cached !== undefined && this.now() < this.cached.expiresAtMs) {
-                    this.logger(`[bdk] GitHub auth: Cursor account credential refresh failed; using the current lease: ${message}`);
-                    this.cached.refreshAtMs = Math.min(this.cached.expiresAtMs, this.now() + REFRESH_RETRY_MS);
-                    if (this.started) {
-                        this.scheduleRetry();
-                    }
-                    return this.cached.token;
-                }
-                // Hard failure with no usable lease: evict any stale cache and back off.
-                this.cached = undefined;
-                this.restoreGhToken();
-                this.failure = {
-                    message,
-                    retryAtMs: this.now() + failureBackoffMs(error),
-                };
+            const expiresAtMs = Date.parse(result.expiresAt);
+            if (!Number.isFinite(expiresAtMs) || expiresAtMs <= this.now() + REFRESH_LEEWAY_MS) {
+                throw new Error("Cursor backend returned an invalid GitHub credential expiry.");
+            }
+            this.failure = undefined;
+            this.cached = {
+                token: result.token,
+                expiresAtMs,
+                refreshAtMs: expiresAtMs - REFRESH_LEEWAY_MS,
+            };
+            if (this.started) {
+                this.installGhToken(result.token);
+                this.scheduleRefresh();
+            }
+            this.logger(`[bdk] GitHub auth: refreshed Cursor account credential for ${this.repos.length} repo(s)`);
+            return result.token;
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (this.cached !== undefined && this.now() < this.cached.expiresAtMs) {
+                this.logger(`[bdk] GitHub auth: Cursor account credential refresh failed; using the current lease: ${message}`);
+                this.cached.refreshAtMs = Math.min(this.cached.expiresAtMs, this.now() + REFRESH_RETRY_MS);
                 if (this.started) {
                     this.scheduleRetry();
                 }
-                throw error instanceof Error ? error : new Error(message);
+                return this.cached.token;
             }
-        });
+            // Hard failure with no usable lease: evict any stale cache and back off.
+            this.cached = undefined;
+            this.restoreGhToken();
+            this.failure = {
+                message,
+                retryAtMs: this.now() + failureBackoffMs(error),
+            };
+            if (this.started) {
+                this.scheduleRetry();
+            }
+            throw error instanceof Error ? error : new Error(message);
+        }
     }
     scheduleRefresh() {
         if (!this.started || this.cached === undefined) {
@@ -155,7 +139,6 @@ export class CursorGithubCredentialProvider {
         this.replaceTimer(delayMs);
     }
     replaceTimer(delayMs) {
-        var _a, _b;
         if (this.refreshTimer !== undefined) {
             clearTimeout(this.refreshTimer);
         }
@@ -165,7 +148,7 @@ export class CursorGithubCredentialProvider {
                 this.scheduleRetry();
             });
         }, delayMs);
-        (_b = (_a = this.refreshTimer).unref) === null || _b === void 0 ? void 0 : _b.call(_a);
+        this.refreshTimer.unref?.();
     }
     installGhToken(token) {
         process.env.GH_TOKEN = token;

package/dist/internal/cursor/hosted-bound-secrets.js

@@ -34,20 +34,19 @@ export const BOUND_SECRETS_MISSING = "bound_secrets_missing";
  * file on a surface that points the variable at one.
  */
 export function consumeHostedBoundSecrets(options) {
-    var _a, _b, _c;
     const survivors = [];
-    const secretsPath = (_a = options === null || options === void 0 ? void 0 : options.deploymentSecretsFilePath) !== null && _a !== void 0 ? _a : DEFAULT_AGENT_SERVE_DEPLOYMENT_SECRETS_FILE;
+    const secretsPath = options?.deploymentSecretsFilePath ?? DEFAULT_AGENT_SERVE_DEPLOYMENT_SECRETS_FILE;
     const secrets = consumeBoundDeploymentSecrets(secretsPath);
     if (secrets.disposal.state === "readable") {
         survivors.push(`${secretsPath} (${secrets.disposal.reason})`);
     }
-    const apiKeyPath = (_b = options === null || options === void 0 ? void 0 : options.apiKeyFilePath) !== null && _b !== void 0 ? _b : DEFAULT_CURSOR_API_KEY_FILE;
+    const apiKeyPath = options?.apiKeyFilePath ?? DEFAULT_CURSOR_API_KEY_FILE;
     const apiKey = consumeBoundCursorApiKey({ filePath: apiKeyPath });
     if (apiKey.disposal.state === "readable") {
         survivors.push(`${apiKeyPath} (${apiKey.disposal.reason})`);
     }
     if (survivors.length === 0) {
-        if (((_c = process.env.CURSOR_API_KEY) !== null && _c !== void 0 ? _c : "").trim() === "") {
+        if ((process.env.CURSOR_API_KEY ?? "").trim() === "") {
             return {
                 ok: false,
                 code: BOUND_SECRETS_MISSING,

package/dist/internal/cursor/hosted-deployment-secrets.js

@@ -18,7 +18,7 @@ function parseBoundSecrets(path) {
     try {
         parsed = JSON.parse(readFileSync(path, "utf8"));
     }
-    catch (_a) {
+    catch {
         return undefined;
     }
     if (parsed === null || typeof parsed !== "object") {

package/dist/internal/cursor/hosted-store-secrets.js

@@ -34,20 +34,18 @@ function readTrimmedFile(path) {
         const raw = readFileSync(path, "utf8").trim();
         return raw === "" ? undefined : raw;
     }
-    catch (_a) {
+    catch {
         return undefined;
     }
 }
 function readBoundSecretFile(fileEnvVar, defaultPath, env) {
-    var _a;
-    const configured = (_a = env[fileEnvVar]) === null || _a === void 0 ? void 0 : _a.trim();
+    const configured = env[fileEnvVar]?.trim();
     const path = configured !== undefined && configured !== "" ? configured : defaultPath;
     return readTrimmedFile(path);
 }
 /** Resolve the author-facing managed file store. */
 export function resolveDeploymentStoreSourceIdSync(env = process.env) {
-    var _a;
-    const fromEnv = (_a = env[STORE_SOURCE_ID_ENV]) === null || _a === void 0 ? void 0 : _a.trim();
+    const fromEnv = env[STORE_SOURCE_ID_ENV]?.trim();
     if (fromEnv !== undefined && fromEnv !== "") {
         return fromEnv;
     }
@@ -55,8 +53,7 @@ export function resolveDeploymentStoreSourceIdSync(env = process.env) {
 }
 /** Resolve the framework-only managed file store. */
 export function resolveFrameworkStoreSourceIdSync(env = process.env) {
-    var _a;
-    const fromEnv = (_a = env[FRAMEWORK_STORE_SOURCE_ID_ENV]) === null || _a === void 0 ? void 0 : _a.trim();
+    const fromEnv = env[FRAMEWORK_STORE_SOURCE_ID_ENV]?.trim();
     if (fromEnv !== undefined && fromEnv !== "") {
         return fromEnv;
     }
@@ -67,8 +64,7 @@ export function resolveFrameworkStoreSourceIdSync(env = process.env) {
  * platform updates take effect without recreating the storage client.
  */
 export function resolveStoreProtocolSync(env = process.env) {
-    var _a;
-    const fromEnv = (_a = env[STORE_PROTOCOL_ENV]) === null || _a === void 0 ? void 0 : _a.trim();
+    const fromEnv = env[STORE_PROTOCOL_ENV]?.trim();
     if (fromEnv !== undefined && fromEnv !== "") {
         return fromEnv;
     }

package/dist/internal/cursor/session-token.js

@@ -9,21 +9,12 @@
  * constants cannot drift between the two. Callers own their caching and
  * retry policies; this module owns exactly one exchange round trip.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 export const CURSOR_SESSION_EXCHANGE_PATH = "/auth/exchange_user_api_key";
 /** Re-exchange when the cached session is within this window of expiry. */
 export const SESSION_TOKEN_EXPIRY_LEEWAY_MS = 5 * 60 * 1000;
 /** Fallback session lifetime when the JWT `exp` claim cannot be parsed. */
 export const SESSION_TOKEN_FALLBACK_LIFETIME_MS = 30 * 60 * 1000;
-const EXCHANGE_TIMEOUT_MS = 30000;
+const EXCHANGE_TIMEOUT_MS = 30_000;
 /**
  * Exchange failure. `status` is the HTTP status when the backend answered,
  * and undefined for network/transport errors. `detail` carries the server's
@@ -47,7 +38,7 @@ export function jwtExpiryMs(token) {
         const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
         return typeof claims.exp === "number" ? claims.exp * 1000 : undefined;
     }
-    catch (_a) {
+    catch {
         return undefined;
     }
 }
@@ -57,41 +48,38 @@ export function jwtExpiryMs(token) {
  * comes from the session JWT's `exp` claim, falling back to
  * {@link SESSION_TOKEN_FALLBACK_LIFETIME_MS} for opaque tokens.
  */
-export function exchangeCursorApiKeyForSession(args) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c;
-        const fetchImpl = (_a = args.fetchImpl) !== null && _a !== void 0 ? _a : fetch;
-        let response;
-        try {
-            response = yield fetchImpl(args.exchangeUrl, {
-                method: "POST",
-                headers: {
-                    "content-type": "application/json",
-                    authorization: `Bearer ${args.apiKey}`,
-                },
-                body: "{}",
-                signal: AbortSignal.timeout(EXCHANGE_TIMEOUT_MS),
-            });
-        }
-        catch (error) {
-            throw new CursorSessionExchangeError(`Could not reach the Cursor session exchange at ${args.exchangeUrl}: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        const body = yield response.json().catch(() => undefined);
-        const record = typeof body === "object" && body !== null && !Array.isArray(body)
-            ? body
-            : {};
-        const detail = typeof record.error === "string" && record.error !== "" ? record.error : undefined;
-        if (!response.ok) {
-            throw new CursorSessionExchangeError(`Cursor session exchange failed with HTTP ${response.status}${detail === undefined ? "" : ` (${detail})`}.`, response.status, detail);
-        }
-        const token = record.accessToken;
-        if (typeof token !== "string" || token === "") {
-            throw new CursorSessionExchangeError("Cursor session exchange returned no access token.", response.status);
-        }
-        const nowMs = (_b = args.nowMs) !== null && _b !== void 0 ? _b : Date.now();
-        return {
-            token,
-            expiresAtMs: (_c = jwtExpiryMs(token)) !== null && _c !== void 0 ? _c : nowMs + SESSION_TOKEN_FALLBACK_LIFETIME_MS,
-        };
-    });
+export async function exchangeCursorApiKeyForSession(args) {
+    const fetchImpl = args.fetchImpl ?? fetch;
+    let response;
+    try {
+        response = await fetchImpl(args.exchangeUrl, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${args.apiKey}`,
+            },
+            body: "{}",
+            signal: AbortSignal.timeout(EXCHANGE_TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        throw new CursorSessionExchangeError(`Could not reach the Cursor session exchange at ${args.exchangeUrl}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const body = await response.json().catch(() => undefined);
+    const record = typeof body === "object" && body !== null && !Array.isArray(body)
+        ? body
+        : {};
+    const detail = typeof record.error === "string" && record.error !== "" ? record.error : undefined;
+    if (!response.ok) {
+        throw new CursorSessionExchangeError(`Cursor session exchange failed with HTTP ${response.status}${detail === undefined ? "" : ` (${detail})`}.`, response.status, detail);
+    }
+    const token = record.accessToken;
+    if (typeof token !== "string" || token === "") {
+        throw new CursorSessionExchangeError("Cursor session exchange returned no access token.", response.status);
+    }
+    const nowMs = args.nowMs ?? Date.now();
+    return {
+        token,
+        expiresAtMs: jwtExpiryMs(token) ?? nowMs + SESSION_TOKEN_FALLBACK_LIFETIME_MS,
+    };
 }