@cursor/july 0.1.68 → 0.1.73

package/dist/internal/convert-automation/convert-workflow.js

@@ -6,6 +6,7 @@
  * clock — `exportedAt` comes from the caller.
  */
 import { CLI_COMMAND_NAME, PACKAGE_NAME } from "../distribution.js";
+import { MEMORY_TS } from "../init-scaffold.js";
 import { pascalCase, SlugRegistry, slugify } from "./slug.js";
 export function convertWorkflow(input) {
     var _a, _b;
@@ -80,7 +81,7 @@ export function convertWorkflow(input) {
     const hasSlackAction = ((_d = workflow.actions) !== null && _d !== void 0 ? _d : []).some((action) => action.slack !== undefined || action.readSlack !== undefined);
     const hasSlackConnection = hasSlackAction && emitSlackAccountConnection(automation, out);
     if (workflow.memoryEnabled === true) {
-        out.files.push({ path: "agent/hooks/memory.ts", contents: MEMORY_HOOK });
+        out.files.push({ path: "agent/hooks/memory.ts", contents: MEMORY_TS });
     }
     out.setupSteps.push(...behaviorSteps(workflow, out.warnings, {
         hasSlackChannel: slackTriggers.length > 0,
@@ -987,12 +988,3 @@ function jsonComment(value) {
 function dedupe(values) {
     return [...new Set(values)];
 }
-/** Memory hook contents — identical to the `initProject` scaffold. */
-const MEMORY_HOOK = `// Journals every turn (timestamp, session, user message, result) so
-// future sessions can recall past work. The journal is shared across every
-// session — and every user — of this agent. Pass your own MemoryBackend to
-// change where memories live, or delete this file to opt out.
-import { memoryHook } from "${PACKAGE_NAME}/memory";
-
-export default memoryHook();
-`;

package/dist/internal/cursor/account-mcp.d.ts

@@ -15,7 +15,12 @@
  */
 import type { AgentProject, AuthPolicy } from "../../types.js";
 import type { EngineResolvedConnection } from "../session-engine.js";
+import { type TerminalPalette } from "../terminal-style.js";
 import type { AccountMcpServer, CursorBackendClient } from "./backend-client.js";
+/** Dashboard Integrations & MCP — reconnect team / account connectors. */
+export declare const CURSOR_ACCOUNT_MCP_DASHBOARD_URL = "https://cursor.com/dashboard/integrations";
+/** Cursor app Settings → MCP (Connect / Authenticate on the named row). */
+export declare const CURSOR_ACCOUNT_MCP_SETTINGS_DEEPLINK = "cursor://anysphere.cursor-deeplink/customize?tab=mcp";
 export interface CursorAccountConnectionRef {
     /** Connection (MCP server) name — the filename under `agent/mcp-connections/`. */
     name: string;
@@ -52,12 +57,15 @@ export declare class CursorAccountMcpBridge {
     readonly secret: string;
     private readonly client;
     private readonly logger;
+    private readonly palette;
     private readonly secretPolicy;
     private readonly allowRemoteCallers;
     private readonly catalogs;
     constructor(args: {
         client: CursorBackendClient;
         logger?: (line: string) => void;
+        /** Defaults to stdout; tests pass `makePalette(false)` for a plain box. */
+        palette?: TerminalPalette;
         /**
          * Admit non-loopback callers presenting the secret. Only set when the
          * serve host configured a `publicUrl` (cloud turns reach the bridge
@@ -78,9 +86,9 @@ export declare class CursorAccountMcpBridge {
     handle(request: Request, ref: CursorAccountConnectionRef): Promise<Response>;
     /**
      * Startup DX: log the account's connector statuses for `refs` without
-     * blocking serve startup. Surfaces "needsAuth" / "error" connectors with
-     * remediation hints (and a backend probe detail for `error`), and filters
-     * that matched nothing (typo'd connector names).
+     * blocking serve startup. Healthy catalogs stay a one-line summary;
+     * `needsAuth` / `error` / empty catalogs render a yellow warning box with
+     * reconnect URLs.
      *
      * Returns a promise that settles when every ref's log lines are written —
      * callers may ignore it; tests can await it.
@@ -97,6 +105,24 @@ export declare class CursorAccountMcpBridge {
      */
     private getCatalog;
 }
+export interface CursorAccountMcpWarningServer {
+    serverIdentifier: string;
+    status: string;
+    toolCount: number;
+    errorDetail?: string;
+    /** Minted OAuth URL for a `needsAuth` connector, when the probe succeeded. */
+    authUrl?: string;
+}
+/**
+ * Yellow warning panel for unhealthy / missing Cursor-account connectors.
+ * One box replaces the old stacked `[agent-sdk]` log lines.
+ */
+export declare function formatCursorAccountMcpWarningBox(args: {
+    connectionName: string;
+    servers: readonly CursorAccountMcpWarningServer[];
+    palette?: TerminalPalette;
+    hyperlinks?: boolean;
+}): string;
 /** One-line status for the preflight summary (`name (12 tools)` / `name (error: …)`). */
 export declare function formatServerStatusSummary(server: AccountMcpServer, errorDetail?: string): string;
 /**

package/dist/internal/cursor/account-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-mcp.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/account-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAI/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAgB7B,MAAM,WAAW,0BAA0B;IACzC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GACrD,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAoB3C;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACnC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,wBAAwB,EAAE,CAkB7B;AAiCD,qBAAa,sBAAsB;IACjC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,YAAY,IAAI,EAAE;QAChB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAChC;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,EAKA;IAED;;;;OAIG;IACH,UAAU,IAAI,UAAU,CAgBvB;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO3E;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,IAAI,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9D;YAEa,YAAY;IAyE1B,OAAO,CAAC,WAAW;IA2EnB,0EAA0E;YAC5D,QAAQ;IAatB;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAwCnB;AAwFD,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,gBAAgB,EACxB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAkBR;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAC1D,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B"}
+{"version":3,"file":"account-mcp.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/account-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAU/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAU7B,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,8CACA,CAAC;AAC9C,2EAA2E;AAC3E,eAAO,MAAM,oCAAoC,yDACO,CAAC;AAMzD,MAAM,WAAW,0BAA0B;IACzC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GACrD,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAoB3C;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACnC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,wBAAwB,EAAE,CAkB7B;AAmCD,qBAAa,sBAAsB;IACjC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,YAAY,IAAI,EAAE;QAChB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAChC,2EAA2E;QAC3E,OAAO,CAAC,EAAE,eAAe,CAAC;QAC1B;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,EAMA;IAED;;;;OAIG;IACH,UAAU,IAAI,UAAU,CAgBvB;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO3E;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,IAAI,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9D;YAEa,YAAY;IAiE1B,OAAO,CAAC,WAAW;IA8EnB,0EAA0E;YAC5D,QAAQ;IAatB;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAwCnB;AA0ED,MAAM,WAAW,6BAA6B;IAC5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+CD;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAClD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,MAAM,CAWT;AAwDD,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,gBAAgB,EACxB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAkBR;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAC1D,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B"}

package/dist/internal/cursor/account-mcp.js

@@ -27,8 +27,12 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { bearerAuth } from "../../channels.js";
 import { isCursorAccountTransport } from "../../types.js";
+import { probeConnectorAuthUrls } from "../cursor-account-mcp-auth.js";
+import { LOG_PREFIX } from "../distribution.js";
 import { handleStatelessMcpRequest } from "../mcp-endpoint.js";
 import { isLoopbackAddress } from "../net.js";
+import { sanitizeMcpToolName, suffixMcpToolName, } from "../sanitize-mcp-tool-name.js";
+import { colorEnabledFor, formatTerminalBox, stdoutPalette, terminalHyperlink, } from "../terminal-style.js";
 /** Catalog freshness window; a miss inside it re-uses the cached listing. */
 const CATALOG_TTL_MS = 60000;
 /**
@@ -36,8 +40,10 @@ const CATALOG_TTL_MS = 60000;
  * a model hallucinating tool names cannot turn into a backend hot loop.
  */
 const FORCE_REFRESH_MIN_INTERVAL_MS = 5000;
-/** MCP clients commonly enforce `^[a-zA-Z0-9_-]{1,128}$` for tool names. */
-const MAX_TOOL_NAME_LENGTH = 128;
+/** Dashboard Integrations & MCP — reconnect team / account connectors. */
+export const CURSOR_ACCOUNT_MCP_DASHBOARD_URL = "https://cursor.com/dashboard/integrations";
+/** Cursor app Settings → MCP (Connect / Authenticate on the named row). */
+export const CURSOR_ACCOUNT_MCP_SETTINGS_DEEPLINK = "cursor://anysphere.cursor-deeplink/customize?tab=mcp";
 /**
  * Collect `cursorAccount` connections across `mounts`, grouped by mount
  * slug. Purely structural — per-connector validation happens live against
@@ -85,12 +91,13 @@ export function resolveCursorAccountConnections(args) {
 }
 export class CursorAccountMcpBridge {
     constructor(args) {
-        var _a;
+        var _a, _b;
         /** Per-boot shared secret; resolved connections carry it as a bearer. */
         this.secret = randomBytes(32).toString("hex");
         this.catalogs = new Map();
         this.client = args.client;
         this.logger = (_a = args.logger) !== null && _a !== void 0 ? _a : (() => { });
+        this.palette = (_b = args.palette) !== null && _b !== void 0 ? _b : stdoutPalette();
         this.secretPolicy = bearerAuth(this.secret);
         this.allowRemoteCallers = args.allowRemoteCallers === true;
     }
@@ -129,9 +136,9 @@ export class CursorAccountMcpBridge {
     }
     /**
      * Startup DX: log the account's connector statuses for `refs` without
-     * blocking serve startup. Surfaces "needsAuth" / "error" connectors with
-     * remediation hints (and a backend probe detail for `error`), and filters
-     * that matched nothing (typo'd connector names).
+     * blocking serve startup. Healthy catalogs stay a one-line summary;
+     * `needsAuth` / `error` / empty catalogs render a yellow warning box with
+     * reconnect URLs.
      *
      * Returns a promise that settles when every ref's log lines are written —
      * callers may ignore it; tests can await it.
@@ -143,44 +150,46 @@ export class CursorAccountMcpBridge {
         return __awaiter(this, void 0, void 0, function* () {
             try {
                 const catalog = yield this.getCatalog(ref);
-                if (catalog.servers.length === 0) {
-                    this.logger(`[agent-sdk] Cursor account MCP connection "${ref.name}": no matching connectors on this account — connect servers in Cursor (dashboard → MCP) or fix the \`servers\` filter`);
+                const errorDetails = new Map();
+                const needsAuthNames = catalog.servers
+                    .filter((server) => server.status === "needsAuth")
+                    .map((server) => server.serverIdentifier);
+                const [authUrls] = yield Promise.all([
+                    probeConnectorAuthUrls({
+                        client: this.client,
+                        identifiers: needsAuthNames,
+                    }),
+                    Promise.all(catalog.servers
+                        .filter((server) => server.status === "error")
+                        .map((server) => __awaiter(this, void 0, void 0, function* () {
+                        const detail = yield diagnoseConnectorError(this.client, server.serverIdentifier);
+                        if (detail !== undefined) {
+                            errorDetails.set(server.serverIdentifier, detail);
+                        }
+                    }))),
+                ]);
+                const unhealthy = catalog.servers.some((server) => server.status === "needsAuth" || server.status === "error");
+                if (catalog.servers.length === 0 || unhealthy) {
+                    this.logger(formatCursorAccountMcpWarningBox({
+                        connectionName: ref.name,
+                        servers: catalog.servers.map((server) => ({
+                            serverIdentifier: server.serverIdentifier,
+                            status: server.status,
+                            toolCount: server.tools.length,
+                            errorDetail: errorDetails.get(server.serverIdentifier),
+                            authUrl: authUrls.get(server.serverIdentifier),
+                        })),
+                        palette: this.palette,
+                    }));
                     return;
                 }
-                const errorDetails = new Map();
-                yield Promise.all(catalog.servers
-                    .filter((server) => server.status === "error")
-                    .map((server) => __awaiter(this, void 0, void 0, function* () {
-                    const detail = yield diagnoseConnectorError(this.client, server.serverIdentifier);
-                    if (detail !== undefined) {
-                        errorDetails.set(server.serverIdentifier, detail);
-                    }
-                })));
                 const summary = catalog.servers
                     .map((server) => formatServerStatusSummary(server, errorDetails.get(server.serverIdentifier)))
                     .join(", ");
-                this.logger(`[agent-sdk] Cursor account MCP connection "${ref.name}": ${summary}`);
-                const needsAuth = catalog.servers.filter((server) => server.status === "needsAuth");
-                if (needsAuth.length > 0) {
-                    this.logger(`[agent-sdk] Cursor account MCP connection "${ref.name}": ${needsAuth
-                        .map((server) => server.serverIdentifier)
-                        .join(", ")} need re-authorization in Cursor (dashboard → MCP / Settings → MCP) before their tools appear`);
-                }
-                const errored = catalog.servers.filter((server) => server.status === "error");
-                if (errored.length > 0) {
-                    const details = errored
-                        .map((server) => {
-                        const detail = errorDetails.get(server.serverIdentifier);
-                        return detail === undefined
-                            ? server.serverIdentifier
-                            : `${server.serverIdentifier} (${detail})`;
-                    })
-                        .join("; ");
-                    this.logger(`[agent-sdk] Cursor account MCP connection "${ref.name}": ${details} — Cursor backend could not use this connector (not a missing agent-sdk login). Re-check the server in Cursor dashboard → MCP, confirm the URL is healthy, and retry after the backend can reach it`);
-                }
+                this.logger(`${LOG_PREFIX} Cursor account MCP connection "${ref.name}": ${summary}`);
             }
             catch (error) {
-                this.logger(`[agent-sdk] Cursor account MCP connection "${ref.name}" preflight failed: ${describeError(error)}`);
+                this.logger(`${LOG_PREFIX} Cursor account MCP connection "${ref.name}" preflight failed: ${describeError(error)}`);
             }
         });
     }
@@ -192,11 +201,9 @@ export class CursorAccountMcpBridge {
         server.setRequestHandler(ListToolsRequestSchema, () => __awaiter(this, void 0, void 0, function* () {
             const catalog = yield this.getCatalog(ref);
             return {
-                tools: catalog.tools.map((tool) => ({
-                    name: tool.exposedName,
-                    description: tool.description,
-                    inputSchema: tool.inputSchema,
-                })),
+                tools: catalog.tools.map((tool) => (Object.assign({ name: tool.exposedName, description: tool.description, inputSchema: tool.inputSchema }, (tool.outputSchema === undefined
+                    ? {}
+                    : { outputSchema: tool.outputSchema })))),
             };
         }));
         server.setRequestHandler(CallToolRequestSchema, (request) => __awaiter(this, void 0, void 0, function* () {
@@ -308,7 +315,7 @@ function buildCatalog(servers) {
     const byBase = new Map();
     for (const server of servers) {
         for (const tool of server.tools) {
-            const base = sanitizeToolName(tool.name);
+            const base = sanitizeMcpToolName(tool.name);
             const group = byBase.get(base);
             const item = { serverIdentifier: server.serverIdentifier, tool };
             if (group === undefined) {
@@ -335,45 +342,118 @@ function buildCatalog(servers) {
         });
         group.forEach(({ serverIdentifier, tool }, index) => {
             let suffixIndex = index;
-            let exposedName = suffixToolName(base, suffixIndex);
+            let exposedName = suffixMcpToolName(base, suffixIndex);
             while (byExposedName.has(exposedName)) {
                 suffixIndex++;
-                exposedName = suffixToolName(base, suffixIndex);
+                exposedName = suffixMcpToolName(base, suffixIndex);
             }
-            const entry = {
-                exposedName,
-                backendName: tool.name,
-                serverIdentifier,
-                description: tool.description,
-                inputSchema: tool.inputSchema,
-            };
+            const entry = Object.assign({ exposedName, backendName: tool.name, serverIdentifier, description: tool.description, inputSchema: tool.inputSchema }, (tool.outputSchema === undefined
+                ? {}
+                : { outputSchema: tool.outputSchema }));
             tools.push(entry);
             byExposedName.set(entry.exposedName, entry);
         });
     }
     return { servers, tools, byExposedName };
 }
-/** Connector display names can contain anything (spaces, dots, emoji). */
-function sanitizeToolName(name) {
-    const cleaned = name
-        .replace(/[^a-zA-Z0-9_-]/g, "_")
-        .slice(0, MAX_TOOL_NAME_LENGTH);
-    return cleaned === "" ? "tool" : cleaned;
-}
-/** `base` for the first claimant, `base_2` / `base_3` … for colliders. */
-function suffixToolName(base, index) {
-    if (index === 0) {
-        return base;
-    }
-    const suffix = `_${index + 1}`;
-    return `${base.slice(0, MAX_TOOL_NAME_LENGTH - suffix.length)}${suffix}`;
-}
 function trimTrailingSlash(url) {
     return url.endsWith("/") ? url.slice(0, -1) : url;
 }
 function describeError(error) {
     return error instanceof Error ? error.message : String(error);
 }
+const MAX_ERROR_DETAIL_CHARS = 72;
+function truncateDetail(detail) {
+    const trimmed = detail.trim();
+    if (trimmed.length <= MAX_ERROR_DETAIL_CHARS) {
+        return trimmed;
+    }
+    return `${trimmed.slice(0, MAX_ERROR_DETAIL_CHARS - 1)}…`;
+}
+function formatWarningStatusRow(server, nameWidth, hyperlinks) {
+    const name = server.serverIdentifier.padEnd(nameWidth);
+    switch (server.status) {
+        case "needsAuth":
+            return `${name}  ${terminalHyperlink(connectUrl(server.authUrl), "Connect", hyperlinks)}`;
+        case "connected":
+            return `${name}  ${server.toolCount} tools`;
+        case "error": {
+            const detail = server.errorDetail === undefined || server.errorDetail.trim() === ""
+                ? "backend could not reach connector"
+                : truncateDetail(server.errorDetail);
+            return `${name}  error: ${detail}`;
+        }
+        default:
+            return `${name}  ${server.status}`;
+    }
+}
+function connectUrl(authUrl) {
+    var _a;
+    const minted = (_a = authUrl === null || authUrl === void 0 ? void 0 : authUrl.trim()) !== null && _a !== void 0 ? _a : "";
+    if (minted.startsWith("https://") &&
+        !minted.includes("\u001b") &&
+        !minted.includes("\u0007")) {
+        return minted;
+    }
+    return CURSOR_ACCOUNT_MCP_DASHBOARD_URL;
+}
+/**
+ * Yellow warning panel for unhealthy / missing Cursor-account connectors.
+ * One box replaces the old stacked `[agent-sdk]` log lines.
+ */
+export function formatCursorAccountMcpWarningBox(args) {
+    var _a, _b;
+    const palette = (_a = args.palette) !== null && _a !== void 0 ? _a : stdoutPalette();
+    const hyperlinks = (_b = args.hyperlinks) !== null && _b !== void 0 ? _b : colorEnabledFor();
+    const copy = warningCopy(Object.assign(Object.assign({}, args), { hyperlinks }));
+    return `\n${formatTerminalBox([copy.title, "", ...copy.intro, ...copy.actions], {
+        color: palette.yellow,
+        padding: 2,
+    })}`;
+}
+function warningCopy(args) {
+    const empty = args.servers.length === 0;
+    const hasAuth = args.servers.some((server) => server.status === "needsAuth");
+    const hasError = args.servers.some((server) => server.status === "error");
+    const nameWidth = Math.max(0, ...args.servers.map((server) => server.serverIdentifier.length));
+    const statusRows = args.servers.map((server) => formatWarningStatusRow(server, nameWidth, args.hyperlinks));
+    const links = [
+        `  ${CURSOR_ACCOUNT_MCP_SETTINGS_DEEPLINK}`,
+        `  ${CURSOR_ACCOUNT_MCP_DASHBOARD_URL}`,
+    ];
+    const restart = "Then press Enter to restart this serve.";
+    if (empty) {
+        return {
+            title: "No matching MCP connectors",
+            intro: [
+                `No matching connectors on this account ("${args.connectionName}").`,
+            ],
+            actions: [
+                "",
+                "Connect servers in Cursor, or fix the `servers` filter.",
+                ...links,
+            ],
+        };
+    }
+    if (hasAuth && !hasError) {
+        return {
+            title: "MCP authorization needed",
+            intro: statusRows,
+            actions: ["", restart, "", "Or reconnect at:", ...links],
+        };
+    }
+    return {
+        title: hasAuth ? "MCP authorization needed" : "MCP connector error",
+        intro: statusRows,
+        actions: [
+            "",
+            "Re-check the server URL is healthy, then reconnect at:",
+            ...links,
+            "",
+            restart,
+        ],
+    };
+}
 /** One-line status for the preflight summary (`name (12 tools)` / `name (error: …)`). */
 export function formatServerStatusSummary(server, errorDetail) {
     switch (server.status) {

package/dist/internal/cursor/backend-client.d.ts

@@ -51,6 +51,12 @@ export interface AccountMcpTool {
     description: string;
     /** JSON Schema for the tool input (defaulted when the server omits it). */
     inputSchema: Record<string, unknown>;
+    /**
+     * JSON Schema for the tool's structured output. Present only when the
+     * connector's server declares one — absent stays absent (never defaulted),
+     * matching the optional MCP `Tool.outputSchema` field.
+     */
+    outputSchema?: Record<string, unknown>;
 }
 export interface AccountMcpServer {
     serverIdentifier: string;
@@ -112,16 +118,15 @@ export declare class CursorBackendClient {
         teamId?: number;
     }): Promise<AvailableMcpServer[]>;
     /**
-     * Probe connectors for a service account and mint OAuth `authUrl`s where
-     * authorization is needed. This is the dashboard's Authenticate flow: the
-     * caller (a team member) opens the returned URL, the cursor.com callback
-     * stores the token backend-side against the service account, and repeat
-     * probes flip `requiresAuth` off.
+     * Probe connectors and mint OAuth `authUrl`s where authorization is
+     * needed. With `serviceAccountId`, this is the dashboard Authenticate
+     * flow for a hosted deployment's service account. Omit it to probe the
+     * signed-in user (local `serve` preflight).
      */
     checkHttpMcpStatus(args: {
         serverIds: number[];
         oauthRedirectUri: string;
-        serviceAccountId: string;
+        serviceAccountId?: string;
     }): Promise<McpConnectorStatus[]>;
     /** Mint a short-lived GitHub token scoped to the requested repositories. */
     getGithubToken(repos: readonly string[], options?: {

package/dist/internal/cursor/backend-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend-client.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/backend-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;IAHhC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,YAAY,CAAC,EAAE,MAAM,YAAA,EAI/B;CACF;AAMD,QAAA,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,CACpC;IACE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;CACtC,EACD,OAAO,CAQP,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMjE,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AA6BD,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAeD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAgDD,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,KAAK,CACV;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CACrD,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAkED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAqD;IAClE,OAAO,CAAC,aAAa,CAA8B;IAEnD,YAAY,OAAO,EAAE,0BAA0B,EAO9C;IAED,gCAAgC;IAC1B,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAErC;IAED;;;;OAIG;IACG,mBAAmB,CACvB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAgB7B;IAED;;;;OAIG;IACG,qBAAqB,CAAC,IAAI,EAAE;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAahC;IAED;;;;OAIG;IACG,sBAAsB,CAAC,OAAO,CAAC,EAAE;QACrC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAahC;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,IAAI,EAAE;QAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAiBhC;IAED,4EAA4E;IACtE,cAAc,CAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,gBAAgB,CAAA;KAAE,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAsC5B;YAEa,GAAG;IA+CjB,OAAO,CAAC,cAAc;YAgBR,cAAc;CAuC7B;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB;AAqBD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChB"}
+{"version":3,"file":"backend-client.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/backend-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;IAHhC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,YAAY,CAAC,EAAE,MAAM,YAAA,EAI/B;CACF;AAMD,QAAA,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,CACpC;IACE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;CACtC,EACD,OAAO,CAQP,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMjE,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AA+BD,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAeD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAgDD,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,KAAK,CACV;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CACrD,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAkED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAqD;IAClE,OAAO,CAAC,aAAa,CAA8B;IAEnD,YAAY,OAAO,EAAE,0BAA0B,EAO9C;IAED,gCAAgC;IAC1B,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAErC;IAED;;;;OAIG;IACG,mBAAmB,CACvB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAoB7B;IAED;;;;OAIG;IACG,qBAAqB,CAAC,IAAI,EAAE;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAahC;IAED;;;;OAIG;IACG,sBAAsB,CAAC,OAAO,CAAC,EAAE;QACrC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAahC;IAED;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE;QAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAiBhC;IAED,4EAA4E;IACtE,cAAc,CAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,gBAAgB,CAAA;KAAE,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAsC5B;YAEa,GAAG;IA+CjB,OAAO,CAAC,cAAc;YAgBR,cAAc;CAuC7B;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB;AAqBD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChB"}

package/dist/internal/cursor/backend-client.js

@@ -66,6 +66,8 @@ const mcpToolSchema = z.object({
     description: z.string().optional(),
     /** `google.protobuf.Value` — an arbitrary JSON Schema object. */
     inputSchema: z.unknown().optional(),
+    /** Flat JSON-string output schema (`output_schema_json` on the proto). */
+    outputSchemaJson: z.string().optional(),
 });
 const getAvailableMcpServersResponseSchema = z.object({
     servers: z
@@ -203,11 +205,11 @@ export class CursorBackendClient {
             return ((_a = parsed.servers) !== null && _a !== void 0 ? _a : []).map((server) => { var _a; return ({
                 serverIdentifier: server.serverIdentifier,
                 status: server.status,
-                tools: ((_a = server.tools) !== null && _a !== void 0 ? _a : []).map((tool) => { var _a; return ({
-                    name: tool.name,
-                    description: (_a = tool.description) !== null && _a !== void 0 ? _a : "",
-                    inputSchema: normalizeInputSchema(tool.inputSchema),
-                }); }),
+                tools: ((_a = server.tools) !== null && _a !== void 0 ? _a : []).map((tool) => {
+                    var _a;
+                    const outputSchema = parseOutputSchemaJson(tool.outputSchemaJson);
+                    return Object.assign({ name: tool.name, description: (_a = tool.description) !== null && _a !== void 0 ? _a : "", inputSchema: normalizeInputSchema(tool.inputSchema) }, (outputSchema === undefined ? {} : { outputSchema }));
+                }),
             }); });
         });
     }
@@ -252,11 +254,10 @@ export class CursorBackendClient {
         });
     }
     /**
-     * Probe connectors for a service account and mint OAuth `authUrl`s where
-     * authorization is needed. This is the dashboard's Authenticate flow: the
-     * caller (a team member) opens the returned URL, the cursor.com callback
-     * stores the token backend-side against the service account, and repeat
-     * probes flip `requiresAuth` off.
+     * Probe connectors and mint OAuth `authUrl`s where authorization is
+     * needed. With `serviceAccountId`, this is the dashboard Authenticate
+     * flow for a hosted deployment's service account. Omit it to probe the
+     * signed-in user (local `serve` preflight).
      */
     checkHttpMcpStatus(args) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -495,6 +496,27 @@ function normalizeInputSchema(schema) {
     }
     return { type: "object", properties: {} };
 }
+/**
+ * Parse the proto's flat-JSON-string output schema. Unlike
+ * {@link normalizeInputSchema} there is no fallback: outputSchema is optional
+ * on the MCP wire, so absence (or malformed JSON crossing the backend
+ * boundary) means omitted.
+ */
+function parseOutputSchemaJson(outputSchemaJson) {
+    if (outputSchemaJson === undefined) {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(outputSchemaJson);
+    }
+    catch (_a) {
+        return undefined;
+    }
+    return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+        ? parsed
+        : undefined;
+}
 function toCallResult(result) {
     var _a;
     if (result.success !== undefined) {

package/dist/internal/cursor-account-mcp-auth.d.ts

@@ -52,4 +52,15 @@ export interface AuthorizeCursorAccountConnectorsResult {
  * each (sequentially), polled until the backend stores the token.
  */
 export declare function authorizeCursorAccountConnectors(args: AuthorizeCursorAccountConnectorsArgs): Promise<AuthorizeCursorAccountConnectorsResult>;
+/**
+ * Mint OAuth `authUrl`s for connectors matching `identifiers` (name or
+ * `serverIdentifier`). Omit `serviceAccountId` to probe the signed-in user
+ * (local `serve` preflight). Failures return an empty map so the caller
+ * can fall back to the dashboard URL.
+ */
+export declare function probeConnectorAuthUrls(args: {
+    client: Pick<CursorBackendClient, "getAvailableMcpServers" | "checkHttpMcpStatus">;
+    identifiers: readonly string[];
+    serviceAccountId?: string;
+}): Promise<Map<string, string>>;
 //# sourceMappingURL=cursor-account-mcp-auth.d.ts.map

package/dist/internal/cursor-account-mcp-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-account-mcp-auth.d.ts","sourceRoot":"","sources":["../../src/internal/cursor-account-mcp-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAEV,mBAAmB,EAEpB,MAAM,4BAA4B,CAAC;AAOpC,iFAAiF;AACjF,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,MAAM,WAAW,oCAAoC;IACnD,aAAa,EAAE,IAAI,CACjB,mBAAmB,EACnB,wBAAwB,GAAG,oBAAoB,CAChD,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/B,yEAAyE;IACzE,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,kBAAkB;IAClB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sCAAsC;IACrD,0DAA0D;IAC1D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAMD;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,oCAAoC,GACzC,OAAO,CAAC,sCAAsC,CAAC,CA8FjD"}
+{"version":3,"file":"cursor-account-mcp-auth.d.ts","sourceRoot":"","sources":["../../src/internal/cursor-account-mcp-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAEV,mBAAmB,EAEpB,MAAM,4BAA4B,CAAC;AAOpC,iFAAiF;AACjF,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,MAAM,WAAW,oCAAoC;IACnD,aAAa,EAAE,IAAI,CACjB,mBAAmB,EACnB,wBAAwB,GAAG,oBAAoB,CAChD,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/B,yEAAyE;IACzE,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,kBAAkB;IAClB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sCAAsC;IACrD,0DAA0D;IAC1D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAMD;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,oCAAoC,GACzC,OAAO,CAAC,sCAAsC,CAAC,CA8FjD;AA2DD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,MAAM,EAAE,IAAI,CACV,mBAAmB,EACnB,wBAAwB,GAAG,oBAAoB,CAChD,CAAC;IACF,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA0C/B"}

package/dist/internal/cursor-account-mcp-auth.js

@@ -143,6 +143,75 @@ function selectConnectors(available, filter) {
     }
     return { servers, unmatched };
 }
+function uniqueConnectorMatch(available, identifier) {
+    const wanted = identifier.trim().toLowerCase();
+    if (wanted === "") {
+        return undefined;
+    }
+    const byIdentifier = available.filter((server) => { var _a; return ((_a = server.serverIdentifier) === null || _a === void 0 ? void 0 : _a.toLowerCase()) === wanted; });
+    if (byIdentifier.length === 1) {
+        return byIdentifier[0];
+    }
+    if (byIdentifier.length > 1) {
+        return undefined;
+    }
+    const byName = available.filter((server) => server.name.toLowerCase() === wanted);
+    if (byName.length === 1) {
+        return byName[0];
+    }
+    return undefined;
+}
+/**
+ * Mint OAuth `authUrl`s for connectors matching `identifiers` (name or
+ * `serverIdentifier`). Omit `serviceAccountId` to probe the signed-in user
+ * (local `serve` preflight). Failures return an empty map so the caller
+ * can fall back to the dashboard URL.
+ */
+export function probeConnectorAuthUrls(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const urls = new Map();
+        if (args.identifiers.length === 0) {
+            return urls;
+        }
+        try {
+            const available = yield args.client.getAvailableMcpServers();
+            const matched = [];
+            const seen = new Set();
+            for (const identifier of args.identifiers) {
+                const match = uniqueConnectorMatch(available, identifier);
+                if (match === undefined || seen.has(match.id)) {
+                    continue;
+                }
+                seen.add(match.id);
+                matched.push(match);
+            }
+            if (matched.length === 0) {
+                return urls;
+            }
+            const statuses = yield args.client.checkHttpMcpStatus({
+                serverIds: matched.map((server) => server.id),
+                oauthRedirectUri: mcpOauthRedirectUri(),
+                serviceAccountId: args.serviceAccountId,
+            });
+            const statusById = new Map(statuses.map((status) => [status.id, status]));
+            for (const identifier of args.identifiers) {
+                const match = uniqueConnectorMatch(available, identifier);
+                if (match === undefined) {
+                    continue;
+                }
+                const authUrl = (_b = (_a = statusById.get(match.id)) === null || _a === void 0 ? void 0 : _a.authUrl) === null || _b === void 0 ? void 0 : _b.trim();
+                if (authUrl !== undefined && authUrl !== "") {
+                    urls.set(identifier, authUrl);
+                }
+            }
+            return urls;
+        }
+        catch (_c) {
+            return urls;
+        }
+    });
+}
 function pollUntilAuthorized(args) {
     return __awaiter(this, void 0, void 0, function* () {
         const deadline = Date.now() + args.pollTimeoutMs;