@pixelbyte-software/pixcode 1.35.1 → 1.35.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (172) hide show
  1. package/LICENSE +718 -718
  2. package/README.de.md +248 -248
  3. package/README.ja.md +240 -240
  4. package/README.ko.md +240 -240
  5. package/README.md +303 -303
  6. package/README.ru.md +248 -248
  7. package/README.tr.md +250 -250
  8. package/README.zh-CN.md +240 -240
  9. package/dist/api-docs.html +548 -548
  10. package/dist/assets/{index-CBdsvGSR.js → index-D1-AIL_5.js} +1 -1
  11. package/dist/clear-cache.html +85 -85
  12. package/dist/convert-icons.md +52 -52
  13. package/dist/favicon.svg +8 -8
  14. package/dist/generate-icons.js +48 -48
  15. package/dist/icons/codex-white.svg +3 -3
  16. package/dist/icons/codex.svg +3 -3
  17. package/dist/icons/cursor-white.svg +11 -11
  18. package/dist/icons/icon-128x128.svg +9 -9
  19. package/dist/icons/icon-144x144.svg +9 -9
  20. package/dist/icons/icon-152x152.svg +9 -9
  21. package/dist/icons/icon-192x192.svg +9 -9
  22. package/dist/icons/icon-384x384.svg +9 -9
  23. package/dist/icons/icon-512x512.svg +9 -9
  24. package/dist/icons/icon-72x72.svg +9 -9
  25. package/dist/icons/icon-96x96.svg +9 -9
  26. package/dist/icons/icon-template.svg +9 -9
  27. package/dist/icons/qwen-logo.svg +14 -14
  28. package/dist/index.html +58 -58
  29. package/dist/logo.svg +12 -12
  30. package/dist/manifest.json +60 -60
  31. package/dist/openapi.yaml +1693 -1693
  32. package/dist/sw.js +124 -124
  33. package/dist-server/server/cli.js +96 -96
  34. package/dist-server/server/daemon/manager.js +33 -33
  35. package/dist-server/server/daemon-manager.js +64 -64
  36. package/dist-server/server/routes/commands.js +25 -25
  37. package/dist-server/server/routes/git.js +17 -17
  38. package/dist-server/server/routes/taskmaster.js +419 -419
  39. package/package.json +180 -180
  40. package/scripts/fix-node-pty.js +67 -67
  41. package/scripts/smoke/a2a-roundtrip.mjs +167 -167
  42. package/scripts/smoke/orchestration-api.mjs +172 -172
  43. package/scripts/smoke/orchestration-live-run.mjs +176 -176
  44. package/server/claude-sdk.js +898 -898
  45. package/server/cli.js +935 -935
  46. package/server/constants/config.js +4 -4
  47. package/server/cursor-cli.js +342 -342
  48. package/server/daemon/manager.js +564 -564
  49. package/server/daemon-manager.js +959 -959
  50. package/server/database/db.js +794 -794
  51. package/server/database/json-store.js +197 -197
  52. package/server/gemini-cli.js +535 -535
  53. package/server/gemini-response-handler.js +79 -79
  54. package/server/index.js +3135 -3135
  55. package/server/load-env.js +34 -34
  56. package/server/middleware/auth.js +173 -173
  57. package/server/modules/orchestration/a2a/adapter-registry.ts +108 -108
  58. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +55 -55
  59. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +284 -284
  60. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -244
  61. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -249
  62. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -248
  63. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -248
  64. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -248
  65. package/server/modules/orchestration/a2a/routes.ts +577 -577
  66. package/server/modules/orchestration/a2a/task-store.ts +178 -178
  67. package/server/modules/orchestration/a2a/types.ts +125 -125
  68. package/server/modules/orchestration/a2a/validator.ts +113 -113
  69. package/server/modules/orchestration/index.ts +66 -66
  70. package/server/modules/orchestration/preview/port-watcher.ts +112 -112
  71. package/server/modules/orchestration/preview/preview-proxy.ts +60 -60
  72. package/server/modules/orchestration/preview/types.ts +19 -19
  73. package/server/modules/orchestration/tasks/orchestration-task-store.ts +45 -45
  74. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +73 -73
  75. package/server/modules/orchestration/tasks/orchestration-task.service.ts +145 -145
  76. package/server/modules/orchestration/tasks/orchestration-task.types.ts +29 -29
  77. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -127
  78. package/server/modules/orchestration/workflows/workflow-runner.ts +1206 -1206
  79. package/server/modules/orchestration/workflows/workflow-store.ts +97 -97
  80. package/server/modules/orchestration/workflows/workflow.routes.ts +169 -169
  81. package/server/modules/orchestration/workflows/workflow.types.ts +70 -70
  82. package/server/modules/orchestration/workflows/workspace-target.ts +120 -120
  83. package/server/modules/orchestration/workspace/docker-workspace.ts +135 -135
  84. package/server/modules/orchestration/workspace/path-safety.ts +55 -55
  85. package/server/modules/orchestration/workspace/types.ts +52 -52
  86. package/server/modules/orchestration/workspace/workspace-manager.ts +97 -97
  87. package/server/modules/orchestration/workspace/worktree-workspace.ts +125 -125
  88. package/server/modules/providers/index.ts +2 -2
  89. package/server/modules/providers/list/claude/claude-auth.provider.ts +145 -145
  90. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  91. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  92. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  93. package/server/modules/providers/list/codex/codex-auth.provider.ts +115 -115
  94. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  95. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  96. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  97. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +143 -143
  98. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  99. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  100. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  101. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +163 -163
  102. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  103. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  104. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  105. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +130 -130
  106. package/server/modules/providers/list/opencode/opencode-mcp.provider.ts +126 -126
  107. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +232 -232
  108. package/server/modules/providers/list/opencode/opencode.provider.ts +29 -29
  109. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +145 -145
  110. package/server/modules/providers/list/qwen/qwen-mcp.provider.ts +114 -114
  111. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  112. package/server/modules/providers/list/qwen/qwen.provider.ts +21 -21
  113. package/server/modules/providers/provider.registry.ts +40 -40
  114. package/server/modules/providers/provider.routes.ts +819 -819
  115. package/server/modules/providers/services/mcp.service.ts +86 -86
  116. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  117. package/server/modules/providers/services/sessions.service.ts +45 -45
  118. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  119. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  120. package/server/modules/providers/shared/provider-configs.ts +142 -142
  121. package/server/modules/providers/tests/mcp.test.ts +293 -293
  122. package/server/openai-codex.js +462 -462
  123. package/server/opencode-cli.js +459 -459
  124. package/server/opencode-response-handler.js +107 -107
  125. package/server/projects.js +3105 -3105
  126. package/server/qwen-code-cli.js +395 -395
  127. package/server/qwen-response-handler.js +73 -73
  128. package/server/routes/agent.js +1365 -1365
  129. package/server/routes/auth.js +138 -138
  130. package/server/routes/codex.js +19 -19
  131. package/server/routes/commands.js +554 -554
  132. package/server/routes/cursor.js +52 -52
  133. package/server/routes/gemini.js +24 -24
  134. package/server/routes/git.js +1488 -1488
  135. package/server/routes/mcp-utils.js +31 -31
  136. package/server/routes/messages.js +61 -61
  137. package/server/routes/network.js +120 -120
  138. package/server/routes/plugins.js +318 -318
  139. package/server/routes/projects.js +915 -915
  140. package/server/routes/qwen.js +27 -27
  141. package/server/routes/settings.js +286 -286
  142. package/server/routes/taskmaster.js +1496 -1496
  143. package/server/routes/telegram.js +125 -125
  144. package/server/routes/user.js +123 -123
  145. package/server/services/external-access.js +171 -171
  146. package/server/services/install-jobs.js +571 -571
  147. package/server/services/notification-orchestrator.js +242 -242
  148. package/server/services/provider-credentials.js +189 -189
  149. package/server/services/provider-models.js +381 -381
  150. package/server/services/telegram/bot.js +279 -279
  151. package/server/services/telegram/telegram-http-client.js +130 -130
  152. package/server/services/telegram/translations.js +170 -170
  153. package/server/services/vapid-keys.js +36 -36
  154. package/server/sessionManager.js +225 -225
  155. package/server/shared/interfaces.ts +54 -54
  156. package/server/shared/types.ts +172 -172
  157. package/server/shared/utils.ts +193 -193
  158. package/server/tsconfig.json +36 -36
  159. package/server/utils/colors.js +21 -21
  160. package/server/utils/commandParser.js +303 -303
  161. package/server/utils/frontmatter.js +18 -18
  162. package/server/utils/gitConfig.js +34 -34
  163. package/server/utils/mcp-detector.js +147 -147
  164. package/server/utils/plugin-loader.js +457 -457
  165. package/server/utils/plugin-process-manager.js +184 -184
  166. package/server/utils/port-access.js +209 -209
  167. package/server/utils/runtime-paths.js +37 -37
  168. package/server/utils/taskmaster-websocket.js +128 -128
  169. package/server/utils/url-detection.js +71 -71
  170. package/server/vite-daemon.js +78 -78
  171. package/shared/modelConstants.js +162 -162
  172. package/shared/networkHosts.js +22 -22
@@ -1,421 +1,421 @@
1
- import crypto from 'node:crypto';
2
- import os from 'node:os';
3
- import path from 'node:path';
4
-
5
- import type { IProviderSessions } from '@/shared/interfaces.js';
6
- import type { AnyRecord, FetchHistoryOptions, FetchHistoryResult, NormalizedMessage } from '@/shared/types.js';
7
- import { createNormalizedMessage, generateMessageId, readObjectRecord } from '@/shared/utils.js';
8
-
9
- const PROVIDER = 'cursor';
10
-
11
- type CursorDbBlob = {
12
- rowid: number;
13
- id: string;
14
- data?: Buffer;
15
- };
16
-
17
- type CursorJsonBlob = CursorDbBlob & {
18
- parsed: AnyRecord;
19
- };
20
-
21
- type CursorMessageBlob = {
22
- id: string;
23
- sequence: number;
24
- rowid: number;
25
- content: AnyRecord;
26
- };
27
-
28
- function sanitizeCursorSessionId(sessionId: string): string {
29
- const normalized = sessionId.trim();
30
- if (!normalized) {
31
- throw new Error('Cursor session id is required.');
32
- }
33
-
34
- if (
35
- normalized.includes('..')
36
- || normalized.includes(path.posix.sep)
37
- || normalized.includes(path.win32.sep)
38
- || normalized !== path.basename(normalized)
39
- ) {
40
- throw new Error(`Invalid cursor session id "${sessionId}".`);
41
- }
42
-
43
- return normalized;
44
- }
45
-
46
- export class CursorSessionsProvider implements IProviderSessions {
47
- /**
48
- * Loads Cursor's SQLite blob DAG and returns message blobs in conversation
49
- * order. Cursor history is stored as content-addressed blobs rather than JSONL.
50
- */
51
- private async loadCursorBlobs(sessionId: string, projectPath: string): Promise<CursorMessageBlob[]> {
52
- // Lazy-import better-sqlite3 so the module doesn't fail if it's unavailable
53
- const { default: Database } = await import('better-sqlite3');
54
-
55
- const cwdId = crypto.createHash('md5').update(projectPath || process.cwd()).digest('hex');
56
- const safeSessionId = sanitizeCursorSessionId(sessionId);
57
- const baseChatsPath = path.join(os.homedir(), '.cursor', 'chats', cwdId);
58
- const storeDbPath = path.join(baseChatsPath, safeSessionId, 'store.db');
59
- const resolvedBaseChatsPath = path.resolve(baseChatsPath);
60
- const resolvedStoreDbPath = path.resolve(storeDbPath);
61
- const relativeStorePath = path.relative(resolvedBaseChatsPath, resolvedStoreDbPath);
62
- if (relativeStorePath.startsWith('..') || path.isAbsolute(relativeStorePath)) {
63
- throw new Error(`Invalid cursor session path for "${sessionId}".`);
64
- }
65
-
66
- const db = new Database(resolvedStoreDbPath, { readonly: true, fileMustExist: true });
67
-
68
- try {
69
- const allBlobs = db.prepare<[], CursorDbBlob>('SELECT rowid, id, data FROM blobs').all();
70
-
71
- const blobMap = new Map<string, CursorDbBlob>();
72
- const parentRefs = new Map<string, string[]>();
73
- const childRefs = new Map<string, string[]>();
74
- const jsonBlobs: CursorJsonBlob[] = [];
75
-
76
- for (const blob of allBlobs) {
77
- blobMap.set(blob.id, blob);
78
-
79
- if (blob.data && blob.data[0] === 0x7B) {
80
- try {
81
- const parsed = JSON.parse(blob.data.toString('utf8')) as AnyRecord;
82
- jsonBlobs.push({ ...blob, parsed });
83
- } catch {
84
- // Cursor can include binary or partial blobs; only JSON blobs become messages.
85
- }
86
- }
87
- }
88
-
89
- for (const blob of allBlobs) {
90
- if (!blob.data || blob.data[0] === 0x7B) {
91
- continue;
92
- }
93
-
94
- const parents: string[] = [];
95
- let i = 0;
96
- while (i < blob.data.length - 33) {
97
- if (blob.data[i] === 0x0A && blob.data[i + 1] === 0x20) {
98
- const parentHash = blob.data.slice(i + 2, i + 34).toString('hex');
99
- if (blobMap.has(parentHash)) {
100
- parents.push(parentHash);
101
- }
102
- i += 34;
103
- } else {
104
- i++;
105
- }
106
- }
107
-
108
- if (parents.length > 0) {
109
- parentRefs.set(blob.id, parents);
110
- for (const parentId of parents) {
111
- if (!childRefs.has(parentId)) {
112
- childRefs.set(parentId, []);
113
- }
114
- childRefs.get(parentId)?.push(blob.id);
115
- }
116
- }
117
- }
118
-
119
- const visited = new Set<string>();
120
- const sorted: CursorDbBlob[] = [];
121
- const visit = (nodeId: string): void => {
122
- if (visited.has(nodeId)) {
123
- return;
124
- }
125
- visited.add(nodeId);
126
- for (const parentId of parentRefs.get(nodeId) || []) {
127
- visit(parentId);
128
- }
129
- const blob = blobMap.get(nodeId);
130
- if (blob) {
131
- sorted.push(blob);
132
- }
133
- };
134
-
135
- for (const blob of allBlobs) {
136
- if (!parentRefs.has(blob.id)) {
137
- visit(blob.id);
138
- }
139
- }
140
- for (const blob of allBlobs) {
141
- visit(blob.id);
142
- }
143
-
144
- const messageOrder = new Map<string, number>();
145
- let orderIndex = 0;
146
- for (const blob of sorted) {
147
- if (blob.data && blob.data[0] !== 0x7B) {
148
- for (const jsonBlob of jsonBlobs) {
149
- try {
150
- const idBytes = Buffer.from(jsonBlob.id, 'hex');
151
- if (blob.data.includes(idBytes) && !messageOrder.has(jsonBlob.id)) {
152
- messageOrder.set(jsonBlob.id, orderIndex++);
153
- }
154
- } catch {
155
- // Ignore malformed blob ids that cannot be decoded as hex.
156
- }
157
- }
158
- }
159
- }
160
-
161
- const sortedJsonBlobs = jsonBlobs.sort((a, b) => {
162
- const aOrder = messageOrder.get(a.id) ?? Number.MAX_SAFE_INTEGER;
163
- const bOrder = messageOrder.get(b.id) ?? Number.MAX_SAFE_INTEGER;
164
- return aOrder !== bOrder ? aOrder - bOrder : a.rowid - b.rowid;
165
- });
166
-
167
- const messages: CursorMessageBlob[] = [];
168
- for (let idx = 0; idx < sortedJsonBlobs.length; idx++) {
169
- const blob = sortedJsonBlobs[idx];
170
- const parsed = blob.parsed;
171
- const role = parsed?.role || parsed?.message?.role;
172
- if (role === 'system') {
173
- continue;
174
- }
175
- messages.push({
176
- id: blob.id,
177
- sequence: idx + 1,
178
- rowid: blob.rowid,
179
- content: parsed,
180
- });
181
- }
182
-
183
- return messages;
184
- } finally {
185
- db.close();
186
- }
187
- }
188
-
189
- /**
190
- * Normalizes live Cursor CLI NDJSON events. Persisted Cursor history is
191
- * normalized from SQLite blobs in fetchHistory().
192
- */
193
- normalizeMessage(rawMessage: unknown, sessionId: string | null): NormalizedMessage[] {
194
- const raw = readObjectRecord(rawMessage);
195
- if (raw?.type === 'assistant' && raw.message?.content?.[0]?.text) {
196
- return [createNormalizedMessage({
197
- kind: 'stream_delta',
198
- content: raw.message.content[0].text,
199
- sessionId,
200
- provider: PROVIDER,
201
- })];
202
- }
203
-
204
- if (typeof rawMessage === 'string' && rawMessage.trim()) {
205
- return [createNormalizedMessage({
206
- kind: 'stream_delta',
207
- content: rawMessage,
208
- sessionId,
209
- provider: PROVIDER,
210
- })];
211
- }
212
-
213
- return [];
214
- }
215
-
216
- /**
217
- * Fetches and paginates Cursor session history from its project-scoped store.db.
218
- */
219
- async fetchHistory(
220
- sessionId: string,
221
- options: FetchHistoryOptions = {},
222
- ): Promise<FetchHistoryResult> {
223
- const { projectPath = '', limit = null, offset = 0 } = options;
224
-
225
- try {
226
- const blobs = await this.loadCursorBlobs(sessionId, projectPath);
227
- const allNormalized = this.normalizeCursorBlobs(blobs, sessionId);
228
- const total = allNormalized.length;
229
-
230
- if (limit !== null) {
231
- const start = offset;
232
- const page = limit === 0
233
- ? []
234
- : allNormalized.slice(start, start + limit);
235
- const hasMore = limit === 0
236
- ? start < total
237
- : start + limit < total;
238
- return {
239
- messages: page,
240
- total,
241
- hasMore,
242
- offset,
243
- limit,
244
- };
245
- }
246
-
247
- return {
248
- messages: allNormalized,
249
- total,
250
- hasMore: false,
251
- offset: 0,
252
- limit: null,
253
- };
254
- } catch (error) {
255
- const message = error instanceof Error ? error.message : String(error);
256
- console.warn(`[CursorProvider] Failed to load session ${sessionId}:`, message);
257
- return { messages: [], total: 0, hasMore: false, offset: 0, limit: null };
258
- }
259
- }
260
-
261
- /**
262
- * Converts Cursor SQLite message blobs into normalized messages and attaches
263
- * matching tool results to their tool_use entries.
264
- */
265
- private normalizeCursorBlobs(blobs: CursorMessageBlob[], sessionId: string | null): NormalizedMessage[] {
266
- const messages: NormalizedMessage[] = [];
267
- const toolUseMap = new Map<string, NormalizedMessage>();
268
- const baseTime = Date.now();
269
-
270
- for (let i = 0; i < blobs.length; i++) {
271
- const blob = blobs[i];
272
- const content = blob.content;
273
- const ts = new Date(baseTime + (blob.sequence ?? i) * 100).toISOString();
274
- const baseId = blob.id || generateMessageId('cursor');
275
-
276
- try {
277
- if (!content?.role || !content?.content) {
278
- if (content?.message?.role && content?.message?.content) {
279
- if (content.message.role === 'system') {
280
- continue;
281
- }
282
- const role = content.message.role === 'user' ? 'user' : 'assistant';
283
- let text = '';
284
- if (Array.isArray(content.message.content)) {
285
- text = content.message.content
286
- .map((part: string | AnyRecord) => typeof part === 'string' ? part : part?.text || '')
287
- .filter(Boolean)
288
- .join('\n');
289
- } else if (typeof content.message.content === 'string') {
290
- text = content.message.content;
291
- }
292
- if (text?.trim()) {
293
- messages.push(createNormalizedMessage({
294
- id: baseId,
295
- sessionId,
296
- timestamp: ts,
297
- provider: PROVIDER,
298
- kind: 'text',
299
- role,
300
- content: text,
301
- sequence: blob.sequence,
302
- rowid: blob.rowid,
303
- }));
304
- }
305
- }
306
- continue;
307
- }
308
-
309
- if (content.role === 'system') {
310
- continue;
311
- }
312
-
313
- if (content.role === 'tool') {
314
- const toolItems = Array.isArray(content.content) ? content.content : [];
315
- for (const item of toolItems) {
316
- if (item?.type !== 'tool-result') {
317
- continue;
318
- }
319
- const toolCallId = item.toolCallId || content.id;
320
- messages.push(createNormalizedMessage({
321
- id: `${baseId}_tr`,
322
- sessionId,
323
- timestamp: ts,
324
- provider: PROVIDER,
325
- kind: 'tool_result',
326
- toolId: toolCallId,
327
- content: item.result || '',
328
- isError: false,
329
- }));
330
- }
331
- continue;
332
- }
333
-
334
- const role = content.role === 'user' ? 'user' : 'assistant';
335
-
336
- if (Array.isArray(content.content)) {
337
- for (let partIdx = 0; partIdx < content.content.length; partIdx++) {
338
- const part = content.content[partIdx];
339
-
340
- if (part?.type === 'text' && part?.text) {
341
- messages.push(createNormalizedMessage({
342
- id: `${baseId}_${partIdx}`,
343
- sessionId,
344
- timestamp: ts,
345
- provider: PROVIDER,
346
- kind: 'text',
347
- role,
348
- content: part.text,
349
- sequence: blob.sequence,
350
- rowid: blob.rowid,
351
- }));
352
- } else if (part?.type === 'reasoning' && part?.text) {
353
- messages.push(createNormalizedMessage({
354
- id: `${baseId}_${partIdx}`,
355
- sessionId,
356
- timestamp: ts,
357
- provider: PROVIDER,
358
- kind: 'thinking',
359
- content: part.text,
360
- }));
361
- } else if (part?.type === 'tool-call' || part?.type === 'tool_use') {
362
- const rawToolName = part.toolName || part.name || 'Unknown Tool';
363
- const toolName = rawToolName === 'ApplyPatch' ? 'Edit' : rawToolName;
364
- const toolId = part.toolCallId || part.id || `tool_${i}_${partIdx}`;
365
- const message = createNormalizedMessage({
366
- id: `${baseId}_${partIdx}`,
367
- sessionId,
368
- timestamp: ts,
369
- provider: PROVIDER,
370
- kind: 'tool_use',
371
- toolName,
372
- toolInput: part.args || part.input,
373
- toolId,
374
- });
375
- messages.push(message);
376
- toolUseMap.set(toolId, message);
377
- }
378
- }
379
- } else if (typeof content.content === 'string' && content.content.trim()) {
380
- messages.push(createNormalizedMessage({
381
- id: baseId,
382
- sessionId,
383
- timestamp: ts,
384
- provider: PROVIDER,
385
- kind: 'text',
386
- role,
387
- content: content.content,
388
- sequence: blob.sequence,
389
- rowid: blob.rowid,
390
- }));
391
- }
392
- } catch (error) {
393
- console.warn('Error normalizing cursor blob:', error);
394
- }
395
- }
396
-
397
- for (const msg of messages) {
398
- if (msg.kind === 'tool_result' && msg.toolId && toolUseMap.has(msg.toolId)) {
399
- const toolUse = toolUseMap.get(msg.toolId);
400
- if (toolUse) {
401
- toolUse.toolResult = {
402
- content: msg.content,
403
- isError: msg.isError,
404
- };
405
- }
406
- }
407
- }
408
-
409
- messages.sort((a, b) => {
410
- if (a.sequence !== undefined && b.sequence !== undefined) {
411
- return a.sequence - b.sequence;
412
- }
413
- if (a.rowid !== undefined && b.rowid !== undefined) {
414
- return a.rowid - b.rowid;
415
- }
416
- return new Date(a.timestamp).getTime() - new Date(b.timestamp).getTime();
417
- });
418
-
419
- return messages;
420
- }
421
- }
1
+ import crypto from 'node:crypto';
2
+ import os from 'node:os';
3
+ import path from 'node:path';
4
+
5
+ import type { IProviderSessions } from '@/shared/interfaces.js';
6
+ import type { AnyRecord, FetchHistoryOptions, FetchHistoryResult, NormalizedMessage } from '@/shared/types.js';
7
+ import { createNormalizedMessage, generateMessageId, readObjectRecord } from '@/shared/utils.js';
8
+
9
+ const PROVIDER = 'cursor';
10
+
11
+ type CursorDbBlob = {
12
+ rowid: number;
13
+ id: string;
14
+ data?: Buffer;
15
+ };
16
+
17
+ type CursorJsonBlob = CursorDbBlob & {
18
+ parsed: AnyRecord;
19
+ };
20
+
21
+ type CursorMessageBlob = {
22
+ id: string;
23
+ sequence: number;
24
+ rowid: number;
25
+ content: AnyRecord;
26
+ };
27
+
28
+ function sanitizeCursorSessionId(sessionId: string): string {
29
+ const normalized = sessionId.trim();
30
+ if (!normalized) {
31
+ throw new Error('Cursor session id is required.');
32
+ }
33
+
34
+ if (
35
+ normalized.includes('..')
36
+ || normalized.includes(path.posix.sep)
37
+ || normalized.includes(path.win32.sep)
38
+ || normalized !== path.basename(normalized)
39
+ ) {
40
+ throw new Error(`Invalid cursor session id "${sessionId}".`);
41
+ }
42
+
43
+ return normalized;
44
+ }
45
+
46
+ export class CursorSessionsProvider implements IProviderSessions {
47
+ /**
48
+ * Loads Cursor's SQLite blob DAG and returns message blobs in conversation
49
+ * order. Cursor history is stored as content-addressed blobs rather than JSONL.
50
+ */
51
+ private async loadCursorBlobs(sessionId: string, projectPath: string): Promise<CursorMessageBlob[]> {
52
+ // Lazy-import better-sqlite3 so the module doesn't fail if it's unavailable
53
+ const { default: Database } = await import('better-sqlite3');
54
+
55
+ const cwdId = crypto.createHash('md5').update(projectPath || process.cwd()).digest('hex');
56
+ const safeSessionId = sanitizeCursorSessionId(sessionId);
57
+ const baseChatsPath = path.join(os.homedir(), '.cursor', 'chats', cwdId);
58
+ const storeDbPath = path.join(baseChatsPath, safeSessionId, 'store.db');
59
+ const resolvedBaseChatsPath = path.resolve(baseChatsPath);
60
+ const resolvedStoreDbPath = path.resolve(storeDbPath);
61
+ const relativeStorePath = path.relative(resolvedBaseChatsPath, resolvedStoreDbPath);
62
+ if (relativeStorePath.startsWith('..') || path.isAbsolute(relativeStorePath)) {
63
+ throw new Error(`Invalid cursor session path for "${sessionId}".`);
64
+ }
65
+
66
+ const db = new Database(resolvedStoreDbPath, { readonly: true, fileMustExist: true });
67
+
68
+ try {
69
+ const allBlobs = db.prepare<[], CursorDbBlob>('SELECT rowid, id, data FROM blobs').all();
70
+
71
+ const blobMap = new Map<string, CursorDbBlob>();
72
+ const parentRefs = new Map<string, string[]>();
73
+ const childRefs = new Map<string, string[]>();
74
+ const jsonBlobs: CursorJsonBlob[] = [];
75
+
76
+ for (const blob of allBlobs) {
77
+ blobMap.set(blob.id, blob);
78
+
79
+ if (blob.data && blob.data[0] === 0x7B) {
80
+ try {
81
+ const parsed = JSON.parse(blob.data.toString('utf8')) as AnyRecord;
82
+ jsonBlobs.push({ ...blob, parsed });
83
+ } catch {
84
+ // Cursor can include binary or partial blobs; only JSON blobs become messages.
85
+ }
86
+ }
87
+ }
88
+
89
+ for (const blob of allBlobs) {
90
+ if (!blob.data || blob.data[0] === 0x7B) {
91
+ continue;
92
+ }
93
+
94
+ const parents: string[] = [];
95
+ let i = 0;
96
+ while (i < blob.data.length - 33) {
97
+ if (blob.data[i] === 0x0A && blob.data[i + 1] === 0x20) {
98
+ const parentHash = blob.data.slice(i + 2, i + 34).toString('hex');
99
+ if (blobMap.has(parentHash)) {
100
+ parents.push(parentHash);
101
+ }
102
+ i += 34;
103
+ } else {
104
+ i++;
105
+ }
106
+ }
107
+
108
+ if (parents.length > 0) {
109
+ parentRefs.set(blob.id, parents);
110
+ for (const parentId of parents) {
111
+ if (!childRefs.has(parentId)) {
112
+ childRefs.set(parentId, []);
113
+ }
114
+ childRefs.get(parentId)?.push(blob.id);
115
+ }
116
+ }
117
+ }
118
+
119
+ const visited = new Set<string>();
120
+ const sorted: CursorDbBlob[] = [];
121
+ const visit = (nodeId: string): void => {
122
+ if (visited.has(nodeId)) {
123
+ return;
124
+ }
125
+ visited.add(nodeId);
126
+ for (const parentId of parentRefs.get(nodeId) || []) {
127
+ visit(parentId);
128
+ }
129
+ const blob = blobMap.get(nodeId);
130
+ if (blob) {
131
+ sorted.push(blob);
132
+ }
133
+ };
134
+
135
+ for (const blob of allBlobs) {
136
+ if (!parentRefs.has(blob.id)) {
137
+ visit(blob.id);
138
+ }
139
+ }
140
+ for (const blob of allBlobs) {
141
+ visit(blob.id);
142
+ }
143
+
144
+ const messageOrder = new Map<string, number>();
145
+ let orderIndex = 0;
146
+ for (const blob of sorted) {
147
+ if (blob.data && blob.data[0] !== 0x7B) {
148
+ for (const jsonBlob of jsonBlobs) {
149
+ try {
150
+ const idBytes = Buffer.from(jsonBlob.id, 'hex');
151
+ if (blob.data.includes(idBytes) && !messageOrder.has(jsonBlob.id)) {
152
+ messageOrder.set(jsonBlob.id, orderIndex++);
153
+ }
154
+ } catch {
155
+ // Ignore malformed blob ids that cannot be decoded as hex.
156
+ }
157
+ }
158
+ }
159
+ }
160
+
161
+ const sortedJsonBlobs = jsonBlobs.sort((a, b) => {
162
+ const aOrder = messageOrder.get(a.id) ?? Number.MAX_SAFE_INTEGER;
163
+ const bOrder = messageOrder.get(b.id) ?? Number.MAX_SAFE_INTEGER;
164
+ return aOrder !== bOrder ? aOrder - bOrder : a.rowid - b.rowid;
165
+ });
166
+
167
+ const messages: CursorMessageBlob[] = [];
168
+ for (let idx = 0; idx < sortedJsonBlobs.length; idx++) {
169
+ const blob = sortedJsonBlobs[idx];
170
+ const parsed = blob.parsed;
171
+ const role = parsed?.role || parsed?.message?.role;
172
+ if (role === 'system') {
173
+ continue;
174
+ }
175
+ messages.push({
176
+ id: blob.id,
177
+ sequence: idx + 1,
178
+ rowid: blob.rowid,
179
+ content: parsed,
180
+ });
181
+ }
182
+
183
+ return messages;
184
+ } finally {
185
+ db.close();
186
+ }
187
+ }
188
+
189
+ /**
190
+ * Normalizes live Cursor CLI NDJSON events. Persisted Cursor history is
191
+ * normalized from SQLite blobs in fetchHistory().
192
+ */
193
+ normalizeMessage(rawMessage: unknown, sessionId: string | null): NormalizedMessage[] {
194
+ const raw = readObjectRecord(rawMessage);
195
+ if (raw?.type === 'assistant' && raw.message?.content?.[0]?.text) {
196
+ return [createNormalizedMessage({
197
+ kind: 'stream_delta',
198
+ content: raw.message.content[0].text,
199
+ sessionId,
200
+ provider: PROVIDER,
201
+ })];
202
+ }
203
+
204
+ if (typeof rawMessage === 'string' && rawMessage.trim()) {
205
+ return [createNormalizedMessage({
206
+ kind: 'stream_delta',
207
+ content: rawMessage,
208
+ sessionId,
209
+ provider: PROVIDER,
210
+ })];
211
+ }
212
+
213
+ return [];
214
+ }
215
+
216
+ /**
217
+ * Fetches and paginates Cursor session history from its project-scoped store.db.
218
+ */
219
+ async fetchHistory(
220
+ sessionId: string,
221
+ options: FetchHistoryOptions = {},
222
+ ): Promise<FetchHistoryResult> {
223
+ const { projectPath = '', limit = null, offset = 0 } = options;
224
+
225
+ try {
226
+ const blobs = await this.loadCursorBlobs(sessionId, projectPath);
227
+ const allNormalized = this.normalizeCursorBlobs(blobs, sessionId);
228
+ const total = allNormalized.length;
229
+
230
+ if (limit !== null) {
231
+ const start = offset;
232
+ const page = limit === 0
233
+ ? []
234
+ : allNormalized.slice(start, start + limit);
235
+ const hasMore = limit === 0
236
+ ? start < total
237
+ : start + limit < total;
238
+ return {
239
+ messages: page,
240
+ total,
241
+ hasMore,
242
+ offset,
243
+ limit,
244
+ };
245
+ }
246
+
247
+ return {
248
+ messages: allNormalized,
249
+ total,
250
+ hasMore: false,
251
+ offset: 0,
252
+ limit: null,
253
+ };
254
+ } catch (error) {
255
+ const message = error instanceof Error ? error.message : String(error);
256
+ console.warn(`[CursorProvider] Failed to load session ${sessionId}:`, message);
257
+ return { messages: [], total: 0, hasMore: false, offset: 0, limit: null };
258
+ }
259
+ }
260
+
261
+ /**
262
+ * Converts Cursor SQLite message blobs into normalized messages and attaches
263
+ * matching tool results to their tool_use entries.
264
+ */
265
+ private normalizeCursorBlobs(blobs: CursorMessageBlob[], sessionId: string | null): NormalizedMessage[] {
266
+ const messages: NormalizedMessage[] = [];
267
+ const toolUseMap = new Map<string, NormalizedMessage>();
268
+ const baseTime = Date.now();
269
+
270
+ for (let i = 0; i < blobs.length; i++) {
271
+ const blob = blobs[i];
272
+ const content = blob.content;
273
+ const ts = new Date(baseTime + (blob.sequence ?? i) * 100).toISOString();
274
+ const baseId = blob.id || generateMessageId('cursor');
275
+
276
+ try {
277
+ if (!content?.role || !content?.content) {
278
+ if (content?.message?.role && content?.message?.content) {
279
+ if (content.message.role === 'system') {
280
+ continue;
281
+ }
282
+ const role = content.message.role === 'user' ? 'user' : 'assistant';
283
+ let text = '';
284
+ if (Array.isArray(content.message.content)) {
285
+ text = content.message.content
286
+ .map((part: string | AnyRecord) => typeof part === 'string' ? part : part?.text || '')
287
+ .filter(Boolean)
288
+ .join('\n');
289
+ } else if (typeof content.message.content === 'string') {
290
+ text = content.message.content;
291
+ }
292
+ if (text?.trim()) {
293
+ messages.push(createNormalizedMessage({
294
+ id: baseId,
295
+ sessionId,
296
+ timestamp: ts,
297
+ provider: PROVIDER,
298
+ kind: 'text',
299
+ role,
300
+ content: text,
301
+ sequence: blob.sequence,
302
+ rowid: blob.rowid,
303
+ }));
304
+ }
305
+ }
306
+ continue;
307
+ }
308
+
309
+ if (content.role === 'system') {
310
+ continue;
311
+ }
312
+
313
+ if (content.role === 'tool') {
314
+ const toolItems = Array.isArray(content.content) ? content.content : [];
315
+ for (const item of toolItems) {
316
+ if (item?.type !== 'tool-result') {
317
+ continue;
318
+ }
319
+ const toolCallId = item.toolCallId || content.id;
320
+ messages.push(createNormalizedMessage({
321
+ id: `${baseId}_tr`,
322
+ sessionId,
323
+ timestamp: ts,
324
+ provider: PROVIDER,
325
+ kind: 'tool_result',
326
+ toolId: toolCallId,
327
+ content: item.result || '',
328
+ isError: false,
329
+ }));
330
+ }
331
+ continue;
332
+ }
333
+
334
+ const role = content.role === 'user' ? 'user' : 'assistant';
335
+
336
+ if (Array.isArray(content.content)) {
337
+ for (let partIdx = 0; partIdx < content.content.length; partIdx++) {
338
+ const part = content.content[partIdx];
339
+
340
+ if (part?.type === 'text' && part?.text) {
341
+ messages.push(createNormalizedMessage({
342
+ id: `${baseId}_${partIdx}`,
343
+ sessionId,
344
+ timestamp: ts,
345
+ provider: PROVIDER,
346
+ kind: 'text',
347
+ role,
348
+ content: part.text,
349
+ sequence: blob.sequence,
350
+ rowid: blob.rowid,
351
+ }));
352
+ } else if (part?.type === 'reasoning' && part?.text) {
353
+ messages.push(createNormalizedMessage({
354
+ id: `${baseId}_${partIdx}`,
355
+ sessionId,
356
+ timestamp: ts,
357
+ provider: PROVIDER,
358
+ kind: 'thinking',
359
+ content: part.text,
360
+ }));
361
+ } else if (part?.type === 'tool-call' || part?.type === 'tool_use') {
362
+ const rawToolName = part.toolName || part.name || 'Unknown Tool';
363
+ const toolName = rawToolName === 'ApplyPatch' ? 'Edit' : rawToolName;
364
+ const toolId = part.toolCallId || part.id || `tool_${i}_${partIdx}`;
365
+ const message = createNormalizedMessage({
366
+ id: `${baseId}_${partIdx}`,
367
+ sessionId,
368
+ timestamp: ts,
369
+ provider: PROVIDER,
370
+ kind: 'tool_use',
371
+ toolName,
372
+ toolInput: part.args || part.input,
373
+ toolId,
374
+ });
375
+ messages.push(message);
376
+ toolUseMap.set(toolId, message);
377
+ }
378
+ }
379
+ } else if (typeof content.content === 'string' && content.content.trim()) {
380
+ messages.push(createNormalizedMessage({
381
+ id: baseId,
382
+ sessionId,
383
+ timestamp: ts,
384
+ provider: PROVIDER,
385
+ kind: 'text',
386
+ role,
387
+ content: content.content,
388
+ sequence: blob.sequence,
389
+ rowid: blob.rowid,
390
+ }));
391
+ }
392
+ } catch (error) {
393
+ console.warn('Error normalizing cursor blob:', error);
394
+ }
395
+ }
396
+
397
+ for (const msg of messages) {
398
+ if (msg.kind === 'tool_result' && msg.toolId && toolUseMap.has(msg.toolId)) {
399
+ const toolUse = toolUseMap.get(msg.toolId);
400
+ if (toolUse) {
401
+ toolUse.toolResult = {
402
+ content: msg.content,
403
+ isError: msg.isError,
404
+ };
405
+ }
406
+ }
407
+ }
408
+
409
+ messages.sort((a, b) => {
410
+ if (a.sequence !== undefined && b.sequence !== undefined) {
411
+ return a.sequence - b.sequence;
412
+ }
413
+ if (a.rowid !== undefined && b.rowid !== undefined) {
414
+ return a.rowid - b.rowid;
415
+ }
416
+ return new Date(a.timestamp).getTime() - new Date(b.timestamp).getTime();
417
+ });
418
+
419
+ return messages;
420
+ }
421
+ }