@jonaspauleta/cursor-bridge 0.2.0

package/dist/errors.d.ts

@@ -0,0 +1,36 @@
+/** The complete, closed set of outcomes for a cursor-agent invocation. */
+export type CursorStatus = "SUCCESS" | "AUTH_REQUIRED" | "TIMEOUT" | "TOOL_ERROR" | "MALFORMED";
+export interface CursorUsage {
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+}
+export interface CursorResult {
+    status: CursorStatus;
+    result?: string;
+    usage?: CursorUsage;
+    sessionId?: string;
+    requestId?: string;
+    error?: string;
+    /** ANSI-stripped captured output, for logging/debugging only — never returned to the model. */
+    raw?: string;
+}
+/** Thrown by validators in validate.ts. Caught at the tool boundary -> TOOL_ERROR. */
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+/** The closed set of outcomes for a generate_image invocation. */
+export type ImageStatus = "SUCCESS" | "NO_IMAGE" | "AUTH_REQUIRED" | "TIMEOUT" | "TOOL_ERROR";
+export interface ImageResult {
+    status: ImageStatus;
+    /** Absolute paths to generated image files. */
+    images?: string[];
+    /** Codex's final message (from --output-last-message). */
+    summary?: string;
+    count?: number;
+    sessionId?: string;
+    error?: string;
+    /** ANSI-stripped captured output, for logging/debugging only — never returned to the model. */
+    raw?: string;
+}

package/dist/errors.js

@@ -0,0 +1,8 @@
+/** Thrown by validators in validate.ts. Caught at the tool boundary -> TOOL_ERROR. */
+export class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA0BA,sFAAsF;AACtF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/dist/imagegen.tool.d.ts

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { type GenerateImageOptions } from "./codex.js";
+import type { ImageResult } from "./errors.js";
+export declare const TOOL_NAME = "generate_image";
+export declare const inputSchema: {
+    prompt: z.ZodString;
+    outputDir: z.ZodOptional<z.ZodString>;
+    referenceImages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    count: z.ZodDefault<z.ZodNumber>;
+    size: z.ZodDefault<z.ZodEnum<{
+        auto: "auto";
+        "1024x1024": "1024x1024";
+        "1536x1024": "1536x1024";
+        "1024x1536": "1024x1536";
+    }>>;
+    quality: z.ZodDefault<z.ZodEnum<{
+        auto: "auto";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    inlineImages: z.ZodDefault<z.ZodBoolean>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+};
+export interface ImageToolArgs {
+    prompt: string;
+    outputDir?: string;
+    referenceImages?: string[];
+    count?: number;
+    size?: "auto" | "1024x1024" | "1536x1024" | "1024x1536";
+    quality?: "auto" | "low" | "medium" | "high";
+    inlineImages?: boolean;
+    timeoutMs?: number;
+}
+export type ImageGenRunner = (prompt: string, opts: GenerateImageOptions) => Promise<ImageResult>;
+type ContentBlock = {
+    type: "text";
+    text: string;
+} | {
+    type: "image";
+    data: string;
+    mimeType: string;
+};
+export interface ImageToolResult {
+    [x: string]: unknown;
+    content: ContentBlock[];
+    isError?: boolean;
+    structuredContent?: {
+        status: string;
+        images?: string[];
+        summary?: string;
+        count?: number;
+        sessionId?: string;
+    };
+}
+export declare function makeImageGenHandler(gen?: ImageGenRunner): (args: ImageToolArgs) => Promise<ImageToolResult>;
+export {};

package/dist/imagegen.tool.js

@@ -0,0 +1,79 @@
+import { readFileSync } from "node:fs";
+import { extname } from "node:path";
+import { z } from "zod";
+import { generateImage } from "./codex.js";
+export const TOOL_NAME = "generate_image";
+export const inputSchema = {
+    prompt: z.string().min(1).describe("The image task. Free-form; may include edit/iterate instructions."),
+    outputDir: z
+        .string()
+        .optional()
+        .describe("Absolute dir for generated images (validated inside the allowed root). Defaults to <allowedRoot>/generated-images."),
+    referenceImages: z
+        .array(z.string())
+        .max(8)
+        .optional()
+        .describe("Absolute paths to reference images (png/jpg/jpeg/webp, inside the allowed root) for editing/iteration. Max 8."),
+    count: z.number().int().min(1).max(10).default(1).describe("How many images to generate (1-10)."),
+    size: z.enum(["auto", "1024x1024", "1536x1024", "1024x1536"]).default("auto").describe("Size hint (best-effort directive)."),
+    quality: z.enum(["auto", "low", "medium", "high"]).default("auto").describe("Quality hint (best-effort directive)."),
+    inlineImages: z.boolean().default(false).describe("Also return generated images as base64 content blocks (first 4)."),
+    timeoutMs: z.number().int().positive().default(300_000).describe("Wall-clock timeout before the wrapper kills codex."),
+};
+const MIME = {
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".webp": "image/webp",
+};
+const MAX_INLINE = 4;
+function toImageBlock(path) {
+    try {
+        const data = readFileSync(path).toString("base64");
+        const mimeType = MIME[extname(path).toLowerCase()] ?? "image/png";
+        return { type: "image", data, mimeType };
+    }
+    catch {
+        return null;
+    }
+}
+export function makeImageGenHandler(gen = generateImage) {
+    return async (args) => {
+        let r;
+        try {
+            r = await gen(args.prompt, {
+                outputDir: args.outputDir,
+                referenceImages: args.referenceImages,
+                count: args.count,
+                size: args.size,
+                quality: args.quality,
+                timeoutMs: args.timeoutMs,
+            });
+        }
+        catch (e) {
+            // Never let an exception escape, and never echo the prompt body.
+            return { content: [{ type: "text", text: `TOOL_ERROR: ${e.message}` }], isError: true };
+        }
+        if (r.status === "SUCCESS") {
+            const paths = r.images ?? [];
+            const text = `${(r.summary ?? "Generated image(s)").trim()}\n\nFiles:\n${paths.map((p) => `- ${p}`).join("\n")}`;
+            const content = [{ type: "text", text }];
+            if (args.inlineImages) {
+                for (const p of paths.slice(0, MAX_INLINE)) {
+                    const block = toImageBlock(p);
+                    if (block)
+                        content.push(block);
+                }
+            }
+            return {
+                content,
+                structuredContent: { status: r.status, images: paths, summary: r.summary, count: r.count, sessionId: r.sessionId },
+            };
+        }
+        return {
+            content: [{ type: "text", text: `${r.status}: ${r.error ?? "no image generated"}` }],
+            isError: true,
+        };
+    };
+}
+//# sourceMappingURL=imagegen.tool.js.map

package/dist/imagegen.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagegen.tool.js","sourceRoot":"","sources":["../src/imagegen.tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAA6B,MAAM,YAAY,CAAC;AAGtE,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACvG,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,oHAAoH,CAAC;IACjI,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,+GAA+G,CAAC;IAC5H,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC5H,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpH,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kEAAkE,CAAC;IACrH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;CACvH,CAAC;AAyBF,MAAM,IAAI,GAA2B;IACnC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;CACtB,CAAC;AACF,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,WAAW,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAsB,aAAa;IACrE,OAAO,KAAK,EAAE,IAAmB,EAA4B,EAAE;QAC7D,IAAI,CAAc,CAAC;QACnB,IAAI,CAAC;YACH,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iEAAiE;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAgB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrG,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC,IAAI,EAAE,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjH,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,KAAK;wBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,OAAO;gBACL,OAAO;gBACP,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;aACnH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,oBAAoB,EAAE,EAAE,CAAC;YACpF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import { realpathSync } from "node:fs";
+import { isAbsolute } from "node:path";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "./server.js";
+/** Fail fast (and audibly) if the workspace allow-root is missing/relative/nonexistent. */
+function resolveAllowedRoot() {
+    const root = process.env.CURSOR_BRIDGE_ALLOWED_ROOT;
+    if (!root || !isAbsolute(root)) {
+        throw new Error("CURSOR_BRIDGE_ALLOWED_ROOT must be set to an ABSOLUTE path");
+    }
+    return realpathSync(root); // throws if it doesn't exist
+}
+async function main() {
+    const root = resolveAllowedRoot();
+    console.error(`cursor-bridge: allowed workspace root = ${root}`); // stderr audit line
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((err) => {
+    // stderr only — stdout is the JSON-RPC channel
+    console.error("cursor-bridge fatal:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,2FAA2F;AAC3F,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACpD,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B;AAC1D,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC,CAAC,oBAAoB;IACtF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,+CAA+C;IAC/C,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,16 @@
+export type LogLevel = "info" | "warn" | "error";
+export interface LogFields {
+    event: string;
+    level?: LogLevel;
+    status?: string;
+    durationMs?: number;
+    sessionId?: string;
+    requestId?: string;
+    model?: string;
+    mode?: string;
+    tokens?: Record<string, number>;
+    [k: string]: unknown;
+}
+export type Sink = (line: string) => void;
+/** Default sink writes to STDERR only — stdout is the JSON-RPC channel. */
+export declare function createLogger(sink?: Sink): (fields: LogFields) => void;

package/dist/logger.js

@@ -0,0 +1,27 @@
+const SECRET_RE = /\b(sk-[A-Za-z0-9._-]{6,}|key[_-]?[A-Za-z0-9]{8,})\b/gi;
+const REDACTED = "[REDACTED]";
+/** Fields we never emit verbatim: prompt bodies, raw captured output, secrets/env. */
+const DROP_FIELDS = new Set(["prompt", "raw", "apiKey", "CURSOR_API_KEY", "env"]);
+function redact(v) {
+    if (typeof v === "string")
+        return v.replace(SECRET_RE, REDACTED);
+    if (v && typeof v === "object") {
+        return JSON.parse(JSON.stringify(v).replace(SECRET_RE, REDACTED));
+    }
+    return v;
+}
+/** Default sink writes to STDERR only — stdout is the JSON-RPC channel. */
+export function createLogger(sink = (l) => process.stderr.write(l + "\n")) {
+    return function log(fields) {
+        const safe = { ts: new Date().toISOString(), level: fields.level ?? "info" };
+        for (const [k, v] of Object.entries(fields)) {
+            if (k === "level")
+                continue;
+            if (DROP_FIELDS.has(k))
+                continue;
+            safe[k] = redact(v);
+        }
+        sink(JSON.stringify(safe));
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAiBA,MAAM,SAAS,GAAG,uDAAuD,CAAC;AAC1E,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,sFAAsF;AACtF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;AAElF,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,OAAa,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7E,OAAO,SAAS,GAAG,CAAC,MAAiB;QACnC,MAAM,IAAI,GAA4B,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC;QACtG,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,OAAO;gBAAE,SAAS;YAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YACjC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/preflight.d.ts

@@ -0,0 +1,11 @@
+import { type Runner } from "./runner.js";
+export interface PreflightResult {
+    ok: boolean;
+    reason?: string;
+    email?: string;
+}
+export declare function preflightAuth(opts?: {
+    env?: NodeJS.ProcessEnv;
+    runner?: Runner;
+    bin?: string;
+}): Promise<PreflightResult>;

package/dist/preflight.js

@@ -0,0 +1,35 @@
+import { realRunner, collectStream } from "./runner.js";
+import { stripAnsi } from "./classify.js";
+const AUTH_FAIL_MARKERS = /API key is invalid|not logged in|\bauthenticate\b|unauthorized|session expired/i;
+export async function preflightAuth(opts = {}) {
+    const runner = opts.runner ?? realRunner;
+    const bin = opts.bin ?? process.env.CURSOR_AGENT_BIN ?? "cursor-agent";
+    const child = runner(bin, ["status", "--format", "json"], { env: opts.env ?? process.env });
+    const outP = collectStream(child.stdout);
+    const errP = collectStream(child.stderr);
+    try {
+        await child.done;
+    }
+    catch (e) {
+        return { ok: false, reason: e.message };
+    }
+    const [out, err] = await Promise.all([outP.done, errP.done]);
+    const clean = stripAnsi(out);
+    const jsonLine = clean.split("\n").map((l) => l.trim()).find((l) => l.startsWith("{"));
+    if (jsonLine) {
+        try {
+            const obj = JSON.parse(jsonLine);
+            if (obj.isAuthenticated === true)
+                return { ok: true, email: obj.userInfo?.email };
+            return { ok: false, reason: "cursor-agent reports not authenticated" };
+        }
+        catch {
+            /* fall through to marker scan */
+        }
+    }
+    if (AUTH_FAIL_MARKERS.test(stripAnsi(`${out}\n${err}`))) {
+        return { ok: false, reason: "auth failure markers present" };
+    }
+    return { ok: false, reason: "could not parse cursor-agent status output" };
+}
+//# sourceMappingURL=preflight.js.map

package/dist/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../src/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAe,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAQ1C,MAAM,iBAAiB,GAAG,iFAAiF,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAmE,EAAE;IAErE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,cAAc,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC;IACnB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAiE,CAAC;YACjG,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;AAC7E,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,25 @@
+import type { Readable } from "node:stream";
+export interface ChildHandle {
+    stdout: Readable;
+    stderr: Readable;
+    /** Resolves on process close; rejects on spawn 'error'. */
+    done: Promise<{
+        code: number | null;
+        signal: NodeJS.Signals | null;
+    }>;
+    kill: (signal?: NodeJS.Signals) => void;
+}
+export type Runner = (cmd: string, args: string[], opts: {
+    env: NodeJS.ProcessEnv;
+    cwd?: string;
+}) => ChildHandle;
+export declare const realRunner: Runner;
+/**
+ * Buffers a stream to a string. `done` resolves on end/close/error (used on the
+ * success path); `current()` returns whatever has accumulated so far (used on the
+ * timeout path, where the killed child's streams may never cleanly end).
+ */
+export declare function collectStream(s: Readable): {
+    done: Promise<string>;
+    current: () => string;
+};

package/dist/runner.js

@@ -0,0 +1,35 @@
+import { spawn } from "node:child_process";
+export const realRunner = (cmd, args, opts) => {
+    const child = spawn(cmd, args, {
+        env: opts.env,
+        cwd: opts.cwd,
+        stdio: ["ignore", "pipe", "pipe"], // argv ARRAY + no shell:true -> no command injection
+    });
+    return {
+        stdout: child.stdout,
+        stderr: child.stderr,
+        kill: (sig = "SIGTERM") => child.kill(sig),
+        done: new Promise((resolve, reject) => {
+            child.on("error", reject);
+            child.on("close", (code, signal) => resolve({ code, signal }));
+        }),
+    };
+};
+/**
+ * Buffers a stream to a string. `done` resolves on end/close/error (used on the
+ * success path); `current()` returns whatever has accumulated so far (used on the
+ * timeout path, where the killed child's streams may never cleanly end).
+ */
+export function collectStream(s) {
+    let buf = "";
+    s.on("data", (d) => {
+        buf += d.toString();
+    });
+    const done = new Promise((resolve) => {
+        s.on("end", () => resolve(buf));
+        s.on("close", () => resolve(buf));
+        s.on("error", () => resolve(buf));
+    });
+    return { done, current: () => buf };
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAiB3C,MAAM,CAAC,MAAM,UAAU,GAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,qDAAqD;KACzF,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAO;QACrB,MAAM,EAAE,KAAK,CAAC,MAAO;QACrB,IAAI,EAAE,CAAC,GAAG,GAAG,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAW;IACvC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAkB,EAAE,EAAE;QAClC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC3C,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;AACtC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,5 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type CursorRunner } from "./tool.js";
+import { type ImageGenRunner } from "./imagegen.tool.js";
+/** Build the MCP server. `run`/`gen` are injectable so tests can stub the agent layers. */
+export declare function createServer(run?: CursorRunner, gen?: ImageGenRunner): McpServer;

package/dist/server.js

@@ -0,0 +1,19 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { TOOL_NAME as CURSOR_TOOL, inputSchema as cursorInput, makeToolHandler } from "./tool.js";
+import { TOOL_NAME as IMAGE_TOOL, inputSchema as imageInput, makeImageGenHandler, } from "./imagegen.tool.js";
+/** Build the MCP server. `run`/`gen` are injectable so tests can stub the agent layers. */
+export function createServer(run, gen) {
+    const server = new McpServer({ name: "cursor-bridge", version: "0.1.0" });
+    server.registerTool(CURSOR_TOOL, {
+        title: "Run Cursor Agent (Composer 2.5 Fast worker)",
+        description: "Dispatch a task to cursor-agent (Composer 2.5 Fast by default) in headless mode and return the parsed result. Use mode 'default' for read-write implementation (auto-approves), 'plan'/'ask' for read-only review.",
+        inputSchema: cursorInput,
+    }, makeToolHandler(run));
+    server.registerTool(IMAGE_TOOL, {
+        title: "Generate images with gpt-image-2 (via Codex)",
+        description: "Generate or edit images with gpt-image-2 by driving 'codex exec' (subscription auth; requires 'codex login'). Returns generated file paths (and optional inline image blocks). Supports reference images for editing/iteration.",
+        inputSchema: imageInput,
+    }, makeImageGenHandler(gen));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,eAAe,EAAqB,MAAM,WAAW,CAAC;AACrH,OAAO,EACL,SAAS,IAAI,UAAU,EACvB,WAAW,IAAI,UAAU,EACzB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAE5B,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,GAAkB,EAAE,GAAoB;IACnE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,6CAA6C;QACpD,WAAW,EACT,oNAAoN;QACtN,WAAW,EAAE,WAAW;KACzB,EACD,eAAe,CAAC,GAAG,CAAC,CACrB,CAAC;IACF,MAAM,CAAC,YAAY,CACjB,UAAU,EACV;QACE,KAAK,EAAE,8CAA8C;QACrD,WAAW,EACT,iOAAiO;QACnO,WAAW,EAAE,UAAU;KACxB,EACD,mBAAmB,CAAC,GAAG,CAAC,CACzB,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tool.d.ts

@@ -0,0 +1,38 @@
+import { z } from "zod";
+import { type RunOptions } from "./cursor.js";
+import type { CursorResult } from "./errors.js";
+export declare const TOOL_NAME = "run_cursor_agent";
+export declare const inputSchema: {
+    prompt: z.ZodString;
+    cwd: z.ZodString;
+    mode: z.ZodDefault<z.ZodEnum<{
+        default: "default";
+        plan: "plan";
+        ask: "ask";
+    }>>;
+    model: z.ZodDefault<z.ZodString>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+};
+export interface ToolArgs {
+    prompt: string;
+    cwd: string;
+    mode?: "default" | "plan" | "ask";
+    model?: string;
+    timeoutMs?: number;
+}
+export type CursorRunner = (prompt: string, opts: RunOptions) => Promise<CursorResult>;
+export interface ToolResult {
+    [x: string]: unknown;
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: boolean;
+    structuredContent?: {
+        status: string;
+        result?: string;
+        usage?: CursorResult["usage"];
+        sessionId?: string;
+    };
+}
+export declare function makeToolHandler(run?: CursorRunner): (args: ToolArgs) => Promise<ToolResult>;

package/dist/tool.js

@@ -0,0 +1,41 @@
+import { z } from "zod";
+import { runCursorAgent } from "./cursor.js";
+export const TOOL_NAME = "run_cursor_agent";
+export const inputSchema = {
+    prompt: z.string().min(1).describe("The full task/prompt to send to the Composer worker."),
+    cwd: z.string().describe("Absolute path to the worktree/working dir (validated against the allowed root)."),
+    mode: z
+        .enum(["default", "plan", "ask"])
+        .default("default")
+        .describe("default = read-write (auto-approves via --force); plan/ask = read-only."),
+    model: z.string().default("composer-2.5-fast").describe("Allowlisted Cursor model id."),
+    timeoutMs: z.number().int().positive().default(270_000).describe("Wall-clock timeout before the wrapper kills cursor-agent."),
+};
+export function makeToolHandler(run = runCursorAgent) {
+    return async (args) => {
+        let r;
+        try {
+            r = await run(args.prompt, {
+                cwd: args.cwd,
+                mode: args.mode,
+                model: args.model,
+                timeoutMs: args.timeoutMs,
+            });
+        }
+        catch (e) {
+            // Never let an exception escape the handler, and never echo the prompt body.
+            return { content: [{ type: "text", text: `TOOL_ERROR: ${e.message}` }], isError: true };
+        }
+        if (r.status === "SUCCESS") {
+            return {
+                content: [{ type: "text", text: r.result ?? "" }],
+                structuredContent: { status: r.status, result: r.result, usage: r.usage, sessionId: r.sessionId },
+            };
+        }
+        return {
+            content: [{ type: "text", text: `${r.status}: ${r.error ?? "cursor-agent did not return a successful result"}` }],
+            isError: true,
+        };
+    };
+}
+//# sourceMappingURL=tool.js.map

package/dist/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAmB,MAAM,aAAa,CAAC;AAG9D,MAAM,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAE5C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC1F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;IAC3G,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;SAChC,OAAO,CAAC,SAAS,CAAC;SAClB,QAAQ,CAAC,yEAAyE,CAAC;IACtF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACvF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CAC9H,CAAC;AAwBF,MAAM,UAAU,eAAe,CAAC,MAAoB,cAAc;IAChE,OAAO,KAAK,EAAE,IAAc,EAAuB,EAAE;QACnD,IAAI,CAAe,CAAC;QACpB,IAAI,CAAC;YACH,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;gBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,6EAA6E;YAC7E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAgB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrG,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACjD,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;aAClG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,iDAAiD,EAAE,EAAE,CAAC;YACjH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/validate.d.ts

@@ -0,0 +1,23 @@
+export type CursorMode = "default" | "plan" | "ask";
+export declare function assertMode(mode: string): CursorMode;
+export declare function assertModel(model: string): string;
+export declare function assertSha(sha: string): string;
+/**
+ * Returns the canonical (realpath'd) cwd if it is the allowed root or strictly
+ * within it. Rejects traversal/expansion tokens before touching the FS, then
+ * defeats symlink escapes by canonicalizing both sides and prefix-checking.
+ */
+export declare function assertWorkspacePath(cwd: string, allowedRoot: string): string;
+export type ImageSize = "auto" | "1024x1024" | "1536x1024" | "1024x1536";
+export type ImageQuality = "auto" | "low" | "medium" | "high";
+export declare function assertCount(count: number): number;
+export declare function assertSize(size: string): ImageSize;
+export declare function assertQuality(quality: string): ImageQuality;
+/**
+ * Validates an output directory that MAY NOT EXIST YET (unlike assertWorkspacePath,
+ * which requires existence). Rejects traversal/expansion, lexically checks the full
+ * resolved path against the canonical root, then realpath-checks the nearest existing
+ * ancestor to defeat symlink escapes through existing directories.
+ */
+export declare function assertOutputDir(dir: string, allowedRoot: string): string;
+export declare function assertReferenceImages(paths: string[], allowedRoot: string): string[];