@mushi-mushi/plugin-cursor-cloud 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Kenji Sakuramoto
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,140 @@
+# @mushi-mushi/plugin-cursor-cloud
+
+[![npm](https://img.shields.io/npm/v/@mushi-mushi/plugin-cursor-cloud)](https://www.npmjs.com/package/@mushi-mushi/plugin-cursor-cloud)
+[![license](https://img.shields.io/npm/l/@mushi-mushi/plugin-cursor-cloud)](./LICENSE)
+[![types](https://img.shields.io/npm/types/@mushi-mushi/plugin-cursor-cloud)](./src/index.ts)
+
+> Mushi Mushi plugin: dispatch a [Cursor Cloud Agent](https://cursor.com/docs/cloud-agent/api/v0) when a critical bug is classified or a fix is requested. The agent investigates, opens a draft PR, and reports back through the Cursor REST API.
+
+This is the **opt-in marketplace** path. Teams install it in the Mushi admin
+console, configure their Cursor API key + workspace ID + repo URL, and pick a
+severity threshold. For the **project-wide default** Cursor agent path (no
+plugin install needed), see `@mushi-mushi/agents`'s `cursor-cloud` adapter.
+
+## Why this exists
+
+A `report.classified` event firing with `severity: critical` should not wait
+for a human to triage. This plugin watches that event (and `fix.requested`)
+and asks Cursor's hosted agent to take a first pass — investigate, open a
+draft PR, and stop. A human reviews the PR before it merges.
+
+The flow:
+
+```
+Mushi report → classify-report → report.classified (severity=critical)
+  → @mushi-mushi/plugin-cursor-cloud
+  → POST https://api.cursor.com/v0/agents
+  → Cursor cloud agent investigates → opens draft PR
+  → audit log to Mushi console
+```
+
+## Spend safety
+
+This plugin spends real Cursor API credit. Three hard guards are baked in:
+
+1. **Severity gate** — defaults to `critical` only. Set
+   `severityThreshold: 'low'` to widen, but think before doing so.
+2. **Repo gate** — silently no-ops when no `repoUrl` is configured.
+3. **Idempotent retries** — `withRetry` from `@mushi-mushi/plugin-sdk`
+   honours `Retry-After` and treats 4xx (other than 429) as non-retryable
+   so a bad config never burns money in a tight loop.
+
+## Install
+
+```bash
+pnpm add @mushi-mushi/plugin-cursor-cloud @mushi-mushi/plugin-sdk
+```
+
+## Use
+
+```ts
+import { createCursorCloudPlugin } from '@mushi-mushi/plugin-cursor-cloud'
+
+const handler = createCursorCloudPlugin({
+  apiKey: process.env.CURSOR_API_KEY!,
+  workspaceId: process.env.CURSOR_WORKSPACE_ID!,
+  webhookSecret: process.env.MUSHI_PLUGIN_WEBHOOK_SECRET!,
+  repoUrl: 'https://github.com/your-org/your-repo',
+  severityThreshold: 'critical',
+  // Optional — default is composer-2.5.
+  model: 'composer-2.5',
+  // Optional — default is true (auto-open draft PR).
+  autoCreatePR: true,
+  // Optional — default is 1 (single iteration before reporting back).
+  maxIterations: 1,
+})
+
+// Wire to your serverless platform — Mushi calls handler with a Standard
+// Webhooks-signed POST body.
+export default handler
+```
+
+## Configuration
+
+| Field | Type | Required | Default | Description |
+|---|---|---|---|---|
+| `apiKey` | string | yes | — | Your Cursor API key (`cur_…`). |
+| `workspaceId` | string | yes | — | Your Cursor workspace ID (`ws_…`). |
+| `webhookSecret` | string | yes* | `MUSHI_PLUGIN_WEBHOOK_SECRET` | Standard Webhooks HMAC secret for inbound Mushi events. *Required for self-hosted installs. |
+| `repoUrl` | string | recommended | — | Target repo URL. If omitted, the plugin silently no-ops. |
+| `severityThreshold` | `'low' \| 'medium' \| 'high' \| 'critical'` | no | `'critical'` | Minimum severity that triggers a run. |
+| `model` | string | no | `'composer-2.5'` | Cursor model slug. |
+| `autoCreatePR` | boolean | no | `true` | Whether the agent should open a draft PR. |
+| `maxIterations` | number | no | `1` | Max agent iterations per run. |
+| `fetchImpl` | `typeof fetch` | no | global `fetch` | Override for tests. |
+
+## Events handled
+
+| Event | Action |
+|---|---|
+| `report.classified` | Dispatch a run when `data.classification.severity` ≥ `severityThreshold`. |
+| `fix.requested` | Always dispatch a run (the user explicitly asked for a fix). |
+| `qa_story.failed` | Dispatch a run when a QA story run fails all its assertions. Requires `repoUrl`. |
+
+Other events are ignored.
+
+## ⚠️ Breaking change in v0.3.0 — `webhookSecret` required
+
+Previous versions derived the HMAC secret from `workspaceId` internally,
+which was trivially forgeable. From v0.3.0 onward you **must** supply
+`webhookSecret` (or `MUSHI_PLUGIN_WEBHOOK_SECRET`):
+
+```diff
+ const handler = createCursorCloudPlugin({
+   apiKey: process.env.CURSOR_API_KEY!,
+   workspaceId: process.env.CURSOR_WORKSPACE_ID!,
++  webhookSecret: process.env.MUSHI_PLUGIN_WEBHOOK_SECRET!,
+   repoUrl: 'https://github.com/your-org/your-repo',
+ })
+```
+
+The secret is the same Standard Webhooks HMAC key Mushi signs outbound
+events with. Find it in Admin → Integrations → Cursor Cloud → Webhook secret.
+
+## Audit log
+
+Every dispatch writes a structured audit line:
+
+```
+[cursor-cloud] dispatched {"agentId":"agent_…","reportId":"…","model":"composer-2.5"}
+```
+
+Subscribe to the Mushi `plugin.dispatched` audit stream to track spend.
+
+## Tests
+
+```bash
+pnpm --filter @mushi-mushi/plugin-cursor-cloud test
+```
+
+The test suite covers:
+
+- Severity gate filters out anything below `severityThreshold` (no API call).
+- `repoUrl` missing → silent no-op.
+- `report.classified` with `severity: critical` → exactly one Cursor API call.
+- `fix.requested` → exactly one Cursor API call regardless of severity.
+- Retries on 503; bails on 401 (no money burned on bad keys).
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+import * as _mushi_mushi_plugin_sdk from '@mushi-mushi/plugin-sdk';
+
+/**
+ * Cursor Cloud Agent plugin for Mushi Mushi.
+ *
+ * Path A: Marketplace plugin — subscribes to `report.classified`,
+ * `qa_story.failed`, and `fix.requested`. When a qualifying event fires,
+ * this plugin calls Cursor's HTTP REST API directly (no @cursor/sdk —
+ * runs from Deno edge functions and Node alike) to create a Cloud Agent
+ * run, and logs the resulting `agentId` + `prUrl` to the Mushi console.
+ *
+ * This is the *opt-in* path: teams install it from the Marketplace and
+ * configure their Cursor API key + workspace ID in the plugin settings.
+ * For the project-wide *default* Cursor agent path, see Path B in
+ * packages/agents/src/adapters/cursor-cloud.ts.
+ *
+ * Cursor REST API docs: https://cursor.com/docs/cloud-agent/api/v0.md
+ */
+interface CursorCloudPluginConfig {
+    /** Cursor API key (crsr_…). */
+    apiKey: string;
+    /** @deprecated No longer required by Cursor Cloud Agents API. */
+    workspaceId?: string;
+    /** Cursor model slug. Defaults to `composer-2.5`. */
+    model?: string;
+    /** Whether the agent should automatically open a draft PR. Defaults to true. */
+    autoCreatePR?: boolean;
+    /** Maximum iterations for the agent. Defaults to 1. */
+    maxIterations?: number;
+    /** Lowest severity that triggers a Cursor agent run. Defaults to `critical`. */
+    severityThreshold?: 'low' | 'medium' | 'high' | 'critical';
+    /**
+     * URL of the target repository the Cursor agent will work in.
+     * If not set, the plugin will attempt to read it from the event payload.
+     */
+    repoUrl?: string;
+    /**
+     * Standard Webhooks secret for inbound Mushi events. Required for
+     * self-hosted installs — never derive this from workspaceId.
+     */
+    webhookSecret?: string;
+    /** Override `fetch` for tests. */
+    fetchImpl?: typeof fetch;
+}
+interface CursorAgentRunResponse {
+    agentId: string;
+    status: string;
+    prUrl?: string;
+}
+interface CursorDispatchResult {
+    agentId: string;
+    reportId: string;
+    model: string;
+}
+/** Build the plugin handler and return a callable function. */
+declare function createCursorCloudPlugin(cfg: CursorCloudPluginConfig): (input: _mushi_mushi_plugin_sdk.HandlePluginRequestInput) => Promise<_mushi_mushi_plugin_sdk.HandlePluginResult>;
+
+export { type CursorAgentRunResponse, type CursorCloudPluginConfig, type CursorDispatchResult, createCursorCloudPlugin };

package/dist/index.js

@@ -0,0 +1,168 @@
+// src/index.ts
+import {
+  createPluginHandler,
+  withRetry
+} from "@mushi-mushi/plugin-sdk";
+var CURSOR_API_BASE = "https://api.cursor.com/v0";
+var SEVERITY_RANK = {
+  low: 1,
+  medium: 2,
+  high: 3,
+  critical: 4
+};
+async function createCursorAgentRun(cfg, opts, f) {
+  return withRetry(async () => {
+    const res = await f(`${CURSOR_API_BASE}/agents`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${cfg.apiKey}`
+      },
+      body: JSON.stringify({
+        prompt: { text: opts.prompt },
+        model: cfg.model || "default",
+        source: {
+          repository: opts.repoUrl,
+          ref: "main"
+        },
+        target: {
+          autoCreatePr: cfg.autoCreatePR,
+          branchName: opts.branchName ?? `mushi/cursor-${Date.now()}`,
+          skipReviewerRequest: true
+        }
+      })
+    });
+    if (!res.ok) {
+      throw res;
+    }
+    const body = await res.json();
+    return {
+      agentId: body.agentId ?? body.id ?? "",
+      status: body.status ?? "queued",
+      prUrl: body.prUrl
+    };
+  });
+}
+function buildPromptFromClassifiedReport(envelope, data) {
+  const lines = [
+    `A bug has been reported in your project and classified as ${data.classification.severity?.toUpperCase()}.`,
+    ``,
+    `Report ID: ${data.report.id}`,
+    `Title: ${data.report.title ?? "(untitled)"}`,
+    `Category: ${data.report.category ?? data.classification.category}`,
+    `Severity: ${data.classification.severity}`,
+    `Project: ${envelope.projectId}`
+  ];
+  if (data.classification.tags?.length) {
+    lines.push(`Tags: ${data.classification.tags.join(", ")}`);
+  }
+  lines.push(
+    ``,
+    `Please investigate this bug, identify the root cause in the codebase, and open a draft PR with a minimal fix. Do not refactor unrelated code.`
+  );
+  return lines.join("\n");
+}
+function buildPromptFromFixRequested(envelope, fixData) {
+  return [
+    `A fix was requested for report ${fixData.report.id} in project ${envelope.projectId}.`,
+    ``,
+    `Report title: ${fixData.report.title ?? "(untitled)"}`,
+    `Fix ID: ${fixData.fix.id}`,
+    ``,
+    `Please investigate the reported issue, identify the root cause, and open a draft PR with a minimal fix. Do not refactor unrelated code.`
+  ].join("\n");
+}
+function buildPromptFromQaStoryFailed(envelope, data) {
+  return [
+    `A QA story failed in project ${envelope.projectId}.`,
+    ``,
+    `Story ID: ${data.storyId ?? "unknown"}`,
+    `Title: ${data.title ?? "(untitled)"}`,
+    data.failureReason ? `Failure: ${data.failureReason}` : "",
+    ``,
+    `Please investigate the failing assertion, identify the root cause in the codebase, and open a draft PR with a minimal fix. Do not refactor unrelated code.`
+  ].filter((line) => line !== "").join("\n");
+}
+function createCursorCloudPlugin(cfg) {
+  const minRank = SEVERITY_RANK[cfg.severityThreshold ?? "critical"];
+  const model = cfg.model ?? "composer-2.5";
+  const autoCreatePR = cfg.autoCreatePR ?? true;
+  const maxIterations = cfg.maxIterations ?? 1;
+  const f = cfg.fetchImpl ?? fetch;
+  const resolvedCfg = { apiKey: cfg.apiKey, model, autoCreatePR, maxIterations };
+  const webhookSecret = cfg.webhookSecret ?? (typeof process !== "undefined" ? process.env.MUSHI_PLUGIN_WEBHOOK_SECRET : void 0);
+  if (!webhookSecret) {
+    throw new Error(
+      "Cursor Cloud plugin requires webhookSecret (or MUSHI_PLUGIN_WEBHOOK_SECRET) for inbound event verification."
+    );
+  }
+  return createPluginHandler({
+    secret: webhookSecret,
+    on: {
+      "report.classified": async (e) => {
+        const data = e.data;
+        const rank = SEVERITY_RANK[data.classification.severity ?? ""] ?? 0;
+        if (rank < minRank) return;
+        const repoUrl = cfg.repoUrl ?? "";
+        if (!repoUrl) {
+          console.warn("[cursor-cloud] report.classified skipped: repoUrl not configured. Set repoUrl in the plugin config so the agent knows which codebase to fix.");
+          return;
+        }
+        const run = await createCursorAgentRun(
+          resolvedCfg,
+          {
+            repoUrl,
+            prompt: buildPromptFromClassifiedReport(e, data)
+          },
+          f
+        );
+        const result = { agentId: run.agentId, reportId: data.report.id, model };
+        console.warn("[cursor-cloud] dispatched", JSON.stringify(result));
+      },
+      "fix.requested": async (e) => {
+        const data = e.data;
+        const repoUrl = cfg.repoUrl ?? "";
+        if (!repoUrl) {
+          console.warn("[cursor-cloud] fix.requested skipped: repoUrl not configured.");
+          return;
+        }
+        const run = await createCursorAgentRun(
+          resolvedCfg,
+          {
+            repoUrl,
+            prompt: buildPromptFromFixRequested(e, data)
+          },
+          f
+        );
+        const result = { agentId: run.agentId, reportId: data.report.id, model };
+        console.warn("[cursor-cloud] fix.requested dispatched", JSON.stringify(result));
+      },
+      "qa_story.failed": async (e) => {
+        const data = e.data;
+        const repoUrl = cfg.repoUrl ?? "";
+        if (!repoUrl) {
+          console.warn("[cursor-cloud] qa_story.failed skipped: repoUrl not configured.");
+          return;
+        }
+        const run = await createCursorAgentRun(
+          resolvedCfg,
+          {
+            repoUrl,
+            prompt: buildPromptFromQaStoryFailed(e, data)
+          },
+          f
+        );
+        const result = {
+          agentId: run.agentId,
+          reportId: data.storyId ?? "unknown",
+          model
+        };
+        console.warn("[cursor-cloud] qa_story.failed dispatched", JSON.stringify(result));
+      }
+    }
+  });
+}
+export {
+  createCursorCloudPlugin
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * Cursor Cloud Agent plugin for Mushi Mushi.\n *\n * Path A: Marketplace plugin — subscribes to `report.classified`,\n * `qa_story.failed`, and `fix.requested`. When a qualifying event fires,\n * this plugin calls Cursor's HTTP REST API directly (no @cursor/sdk —\n * runs from Deno edge functions and Node alike) to create a Cloud Agent\n * run, and logs the resulting `agentId` + `prUrl` to the Mushi console.\n *\n * This is the *opt-in* path: teams install it from the Marketplace and\n * configure their Cursor API key + workspace ID in the plugin settings.\n * For the project-wide *default* Cursor agent path, see Path B in\n * packages/agents/src/adapters/cursor-cloud.ts.\n *\n * Cursor REST API docs: https://cursor.com/docs/cloud-agent/api/v0.md\n */\n\nimport {\n  createPluginHandler,\n  withRetry,\n  type MushiEventEnvelope,\n  type MushiReportClassifiedEvent,\n  type MushiFixEvent,\n} from '@mushi-mushi/plugin-sdk'\n\nconst CURSOR_API_BASE = 'https://api.cursor.com/v0'\n\nconst SEVERITY_RANK: Record<string, number> = {\n  low: 1,\n  medium: 2,\n  high: 3,\n  critical: 4,\n}\n\nexport interface CursorCloudPluginConfig {\n  /** Cursor API key (crsr_…). */\n  apiKey: string\n  /** @deprecated No longer required by Cursor Cloud Agents API. */\n  workspaceId?: string\n  /** Cursor model slug. Defaults to `composer-2.5`. */\n  model?: string\n  /** Whether the agent should automatically open a draft PR. Defaults to true. */\n  autoCreatePR?: boolean\n  /** Maximum iterations for the agent. Defaults to 1. */\n  maxIterations?: number\n  /** Lowest severity that triggers a Cursor agent run. Defaults to `critical`. */\n  severityThreshold?: 'low' | 'medium' | 'high' | 'critical'\n  /**\n   * URL of the target repository the Cursor agent will work in.\n   * If not set, the plugin will attempt to read it from the event payload.\n   */\n  repoUrl?: string\n  /**\n   * Standard Webhooks secret for inbound Mushi events. Required for\n   * self-hosted installs — never derive this from workspaceId.\n   */\n  webhookSecret?: string\n  /** Override `fetch` for tests. */\n  fetchImpl?: typeof fetch\n}\n\nexport interface CursorAgentRunResponse {\n  agentId: string\n  status: string\n  prUrl?: string\n}\n\nexport interface CursorDispatchResult {\n  agentId: string\n  reportId: string\n  model: string\n}\n\n/**\n * Call Cursor's REST API to create a Cloud Agent run.\n * Returns the agentId so the caller can track the run in Mushi console.\n *\n * On non-2xx the raw Response is thrown so `withRetry` can inspect\n * `.status` and `Retry-After` and apply the documented retry policy:\n *   - 429 / 5xx        → retry with exponential back-off\n *   - 4xx (not 429)    → throw immediately (no money burned on bad keys)\n *   - network error    → retry\n */\nasync function createCursorAgentRun(\n  cfg: Required<Pick<CursorCloudPluginConfig, 'apiKey' | 'model' | 'autoCreatePR' | 'maxIterations'>>,\n  opts: { repoUrl: string; prompt: string; branchName?: string },\n  f: typeof fetch,\n): Promise<CursorAgentRunResponse> {\n  return withRetry(async () => {\n    const res = await f(`${CURSOR_API_BASE}/agents`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${cfg.apiKey}`,\n      },\n      body: JSON.stringify({\n        prompt: { text: opts.prompt },\n        model: cfg.model || 'default',\n        source: {\n          repository: opts.repoUrl,\n          ref: 'main',\n        },\n        target: {\n          autoCreatePr: cfg.autoCreatePR,\n          branchName: opts.branchName ?? `mushi/cursor-${Date.now()}`,\n          skipReviewerRequest: true,\n        },\n      }),\n    })\n    if (!res.ok) {\n      // Throw the Response itself so withRetry can read status / Retry-After.\n      // This is the contract documented in @mushi-mushi/plugin-sdk/retry.ts.\n      throw res\n    }\n    const body = (await res.json()) as { agentId?: string; id?: string; status?: string; prUrl?: string }\n    return {\n      agentId: body.agentId ?? body.id ?? '',\n      status: body.status ?? 'queued',\n      prUrl: body.prUrl,\n    }\n  })\n}\n\nfunction buildPromptFromClassifiedReport(\n  envelope: MushiEventEnvelope,\n  data: MushiReportClassifiedEvent,\n): string {\n  const lines = [\n    `A bug has been reported in your project and classified as ${data.classification.severity?.toUpperCase()}.`,\n    ``,\n    `Report ID: ${data.report.id}`,\n    `Title: ${data.report.title ?? '(untitled)'}`,\n    `Category: ${data.report.category ?? data.classification.category}`,\n    `Severity: ${data.classification.severity}`,\n    `Project: ${envelope.projectId}`,\n  ]\n\n  if (data.classification.tags?.length) {\n    lines.push(`Tags: ${data.classification.tags.join(', ')}`)\n  }\n\n  lines.push(\n    ``,\n    `Please investigate this bug, identify the root cause in the codebase, ` +\n      `and open a draft PR with a minimal fix. Do not refactor unrelated code.`,\n  )\n\n  return lines.join('\\n')\n}\n\nfunction buildPromptFromFixRequested(envelope: MushiEventEnvelope, fixData: MushiFixEvent): string {\n  return [\n    `A fix was requested for report ${fixData.report.id} in project ${envelope.projectId}.`,\n    ``,\n    `Report title: ${fixData.report.title ?? '(untitled)'}`,\n    `Fix ID: ${fixData.fix.id}`,\n    ``,\n    `Please investigate the reported issue, identify the root cause, ` +\n      `and open a draft PR with a minimal fix. Do not refactor unrelated code.`,\n  ].join('\\n')\n}\n\nfunction buildPromptFromQaStoryFailed(\n  envelope: MushiEventEnvelope,\n  data: { storyId?: string; title?: string; failureReason?: string },\n): string {\n  return [\n    `A QA story failed in project ${envelope.projectId}.`,\n    ``,\n    `Story ID: ${data.storyId ?? 'unknown'}`,\n    `Title: ${data.title ?? '(untitled)'}`,\n    data.failureReason ? `Failure: ${data.failureReason}` : '',\n    ``,\n    `Please investigate the failing assertion, identify the root cause in the codebase, ` +\n      `and open a draft PR with a minimal fix. Do not refactor unrelated code.`,\n  ].filter((line) => line !== '').join('\\n')\n}\n\n/** Build the plugin handler and return a callable function. */\nexport function createCursorCloudPlugin(cfg: CursorCloudPluginConfig) {\n  const minRank = SEVERITY_RANK[cfg.severityThreshold ?? 'critical']!\n  const model = cfg.model ?? 'composer-2.5'\n  const autoCreatePR = cfg.autoCreatePR ?? true\n  const maxIterations = cfg.maxIterations ?? 1\n  const f = cfg.fetchImpl ?? fetch\n\n  const resolvedCfg = { apiKey: cfg.apiKey, model, autoCreatePR, maxIterations }\n\n  const webhookSecret =\n    cfg.webhookSecret ??\n    (typeof process !== 'undefined' ? process.env.MUSHI_PLUGIN_WEBHOOK_SECRET : undefined)\n  if (!webhookSecret) {\n    throw new Error(\n      'Cursor Cloud plugin requires webhookSecret (or MUSHI_PLUGIN_WEBHOOK_SECRET) for inbound event verification.',\n    )\n  }\n\n  return createPluginHandler({\n    secret: webhookSecret,\n    on: {\n      'report.classified': async (e) => {\n        const data = e.data as MushiReportClassifiedEvent\n        const rank = SEVERITY_RANK[data.classification.severity ?? ''] ?? 0\n        if (rank < minRank) return\n\n        const repoUrl = cfg.repoUrl ?? ''\n        if (!repoUrl) {\n          console.warn('[cursor-cloud] report.classified skipped: repoUrl not configured. ' +\n            'Set repoUrl in the plugin config so the agent knows which codebase to fix.')\n          return\n        }\n\n        const run = await createCursorAgentRun(\n          resolvedCfg,\n          {\n            repoUrl,\n            prompt: buildPromptFromClassifiedReport(e, data),\n          },\n          f,\n        )\n\n        // Emit audit log — handler return type is void.\n        const result: CursorDispatchResult = { agentId: run.agentId, reportId: data.report.id, model }\n        console.warn('[cursor-cloud] dispatched', JSON.stringify(result))\n      },\n\n      'fix.requested': async (e) => {\n        const data = e.data as MushiFixEvent\n\n        const repoUrl = cfg.repoUrl ?? ''\n        if (!repoUrl) {\n          console.warn('[cursor-cloud] fix.requested skipped: repoUrl not configured.')\n          return\n        }\n\n        const run = await createCursorAgentRun(\n          resolvedCfg,\n          {\n            repoUrl,\n            prompt: buildPromptFromFixRequested(e, data),\n          },\n          f,\n        )\n\n        // Emit audit log — handler return type is void.\n        const result: CursorDispatchResult = { agentId: run.agentId, reportId: data.report.id, model }\n        console.warn('[cursor-cloud] fix.requested dispatched', JSON.stringify(result))\n      },\n\n      'qa_story.failed': async (e) => {\n        const data = e.data as { storyId?: string; title?: string; failureReason?: string }\n\n        const repoUrl = cfg.repoUrl ?? ''\n        if (!repoUrl) {\n          console.warn('[cursor-cloud] qa_story.failed skipped: repoUrl not configured.')\n          return\n        }\n\n        const run = await createCursorAgentRun(\n          resolvedCfg,\n          {\n            repoUrl,\n            prompt: buildPromptFromQaStoryFailed(e, data),\n          },\n          f,\n        )\n\n        const result: CursorDispatchResult = {\n          agentId: run.agentId,\n          reportId: data.storyId ?? 'unknown',\n          model,\n        }\n        console.warn('[cursor-cloud] qa_story.failed dispatched', JSON.stringify(result))\n      },\n    },\n  })\n}\n"],"mappings":";AAiBA;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAEP,IAAM,kBAAkB;AAExB,IAAM,gBAAwC;AAAA,EAC5C,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,UAAU;AACZ;AAmDA,eAAe,qBACb,KACA,MACA,GACiC;AACjC,SAAO,UAAU,YAAY;AAC3B,UAAM,MAAM,MAAM,EAAE,GAAG,eAAe,WAAW;AAAA,MAC/C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,IAAI,MAAM;AAAA,MACrC;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,QAAQ,EAAE,MAAM,KAAK,OAAO;AAAA,QAC5B,OAAO,IAAI,SAAS;AAAA,QACpB,QAAQ;AAAA,UACN,YAAY,KAAK;AAAA,UACjB,KAAK;AAAA,QACP;AAAA,QACA,QAAQ;AAAA,UACN,cAAc,IAAI;AAAA,UAClB,YAAY,KAAK,cAAc,gBAAgB,KAAK,IAAI,CAAC;AAAA,UACzD,qBAAqB;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AAGX,YAAM;AAAA,IACR;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO;AAAA,MACL,SAAS,KAAK,WAAW,KAAK,MAAM;AAAA,MACpC,QAAQ,KAAK,UAAU;AAAA,MACvB,OAAO,KAAK;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,SAAS,gCACP,UACA,MACQ;AACR,QAAM,QAAQ;AAAA,IACZ,6DAA6D,KAAK,eAAe,UAAU,YAAY,CAAC;AAAA,IACxG;AAAA,IACA,cAAc,KAAK,OAAO,EAAE;AAAA,IAC5B,UAAU,KAAK,OAAO,SAAS,YAAY;AAAA,IAC3C,aAAa,KAAK,OAAO,YAAY,KAAK,eAAe,QAAQ;AAAA,IACjE,aAAa,KAAK,eAAe,QAAQ;AAAA,IACzC,YAAY,SAAS,SAAS;AAAA,EAChC;AAEA,MAAI,KAAK,eAAe,MAAM,QAAQ;AACpC,UAAM,KAAK,SAAS,KAAK,eAAe,KAAK,KAAK,IAAI,CAAC,EAAE;AAAA,EAC3D;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,EAEF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,4BAA4B,UAA8B,SAAgC;AACjG,SAAO;AAAA,IACL,kCAAkC,QAAQ,OAAO,EAAE,eAAe,SAAS,SAAS;AAAA,IACpF;AAAA,IACA,iBAAiB,QAAQ,OAAO,SAAS,YAAY;AAAA,IACrD,WAAW,QAAQ,IAAI,EAAE;AAAA,IACzB;AAAA,IACA;AAAA,EAEF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,6BACP,UACA,MACQ;AACR,SAAO;AAAA,IACL,gCAAgC,SAAS,SAAS;AAAA,IAClD;AAAA,IACA,aAAa,KAAK,WAAW,SAAS;AAAA,IACtC,UAAU,KAAK,SAAS,YAAY;AAAA,IACpC,KAAK,gBAAgB,YAAY,KAAK,aAAa,KAAK;AAAA,IACxD;AAAA,IACA;AAAA,EAEF,EAAE,OAAO,CAAC,SAAS,SAAS,EAAE,EAAE,KAAK,IAAI;AAC3C;AAGO,SAAS,wBAAwB,KAA8B;AACpE,QAAM,UAAU,cAAc,IAAI,qBAAqB,UAAU;AACjE,QAAM,QAAQ,IAAI,SAAS;AAC3B,QAAM,eAAe,IAAI,gBAAgB;AACzC,QAAM,gBAAgB,IAAI,iBAAiB;AAC3C,QAAM,IAAI,IAAI,aAAa;AAE3B,QAAM,cAAc,EAAE,QAAQ,IAAI,QAAQ,OAAO,cAAc,cAAc;AAE7E,QAAM,gBACJ,IAAI,kBACH,OAAO,YAAY,cAAc,QAAQ,IAAI,8BAA8B;AAC9E,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,oBAAoB;AAAA,IACzB,QAAQ;AAAA,IACR,IAAI;AAAA,MACF,qBAAqB,OAAO,MAAM;AAChC,cAAM,OAAO,EAAE;AACf,cAAM,OAAO,cAAc,KAAK,eAAe,YAAY,EAAE,KAAK;AAClE,YAAI,OAAO,QAAS;AAEpB,cAAM,UAAU,IAAI,WAAW;AAC/B,YAAI,CAAC,SAAS;AACZ,kBAAQ,KAAK,8IACiE;AAC9E;AAAA,QACF;AAEA,cAAM,MAAM,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,YACE;AAAA,YACA,QAAQ,gCAAgC,GAAG,IAAI;AAAA,UACjD;AAAA,UACA;AAAA,QACF;AAGA,cAAM,SAA+B,EAAE,SAAS,IAAI,SAAS,UAAU,KAAK,OAAO,IAAI,MAAM;AAC7F,gBAAQ,KAAK,6BAA6B,KAAK,UAAU,MAAM,CAAC;AAAA,MAClE;AAAA,MAEA,iBAAiB,OAAO,MAAM;AAC5B,cAAM,OAAO,EAAE;AAEf,cAAM,UAAU,IAAI,WAAW;AAC/B,YAAI,CAAC,SAAS;AACZ,kBAAQ,KAAK,+DAA+D;AAC5E;AAAA,QACF;AAEA,cAAM,MAAM,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,YACE;AAAA,YACA,QAAQ,4BAA4B,GAAG,IAAI;AAAA,UAC7C;AAAA,UACA;AAAA,QACF;AAGA,cAAM,SAA+B,EAAE,SAAS,IAAI,SAAS,UAAU,KAAK,OAAO,IAAI,MAAM;AAC7F,gBAAQ,KAAK,2CAA2C,KAAK,UAAU,MAAM,CAAC;AAAA,MAChF;AAAA,MAEA,mBAAmB,OAAO,MAAM;AAC9B,cAAM,OAAO,EAAE;AAEf,cAAM,UAAU,IAAI,WAAW;AAC/B,YAAI,CAAC,SAAS;AACZ,kBAAQ,KAAK,iEAAiE;AAC9E;AAAA,QACF;AAEA,cAAM,MAAM,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,YACE;AAAA,YACA,QAAQ,6BAA6B,GAAG,IAAI;AAAA,UAC9C;AAAA,UACA;AAAA,QACF;AAEA,cAAM,SAA+B;AAAA,UACnC,SAAS,IAAI;AAAA,UACb,UAAU,KAAK,WAAW;AAAA,UAC1B;AAAA,QACF;AACA,gBAAQ,KAAK,6CAA6C,KAAK,UAAU,MAAM,CAAC;AAAA,MAClF;AAAA,IACF;AAAA,EACF,CAAC;AACH;","names":[]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@mushi-mushi/plugin-cursor-cloud",
+  "version": "0.4.0",
+  "license": "MIT",
+  "description": "Mushi Mushi plugin: dispatch a Cursor Cloud Agent when a critical bug is classified or a QA story fails \u00e2\u20ac\u201d opens a signed draft PR automatically.",
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "lint": "eslint src/",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@mushi-mushi/plugin-sdk": "workspace:^"
+  },
+  "devDependencies": {
+    "@mushi-mushi/eslint-config": "workspace:*",
+    "@types/node": "^22.19.17",
+    "eslint": "^10.3.0",
+    "tsup": "^8.5.1",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/kensaurus/mushi-mushi.git",
+    "directory": "packages/plugin-cursor-cloud"
+  },
+  "author": "Kenji Sakuramoto",
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "keywords": [
+    "mushi-mushi",
+    "cursor",
+    "cursor-cloud",
+    "plugin",
+    "agent",
+    "autofix",
+    "ai-agent",
+    "integration"
+  ],
+  "engines": {
+    "node": ">=20"
+  }
+}