@pixelbyte-software/pixcode 1.35.2 → 1.35.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (173) hide show
  1. package/LICENSE +718 -718
  2. package/README.de.md +248 -248
  3. package/README.ja.md +240 -240
  4. package/README.ko.md +240 -240
  5. package/README.md +303 -303
  6. package/README.ru.md +248 -248
  7. package/README.tr.md +250 -250
  8. package/README.zh-CN.md +240 -240
  9. package/dist/api-docs.html +548 -548
  10. package/dist/assets/{index-D1-AIL_5.js → index-D8z78r_D.js} +57 -57
  11. package/dist/assets/{index-B8w57E1r.css → index-DmchzORZ.css} +1 -1
  12. package/dist/clear-cache.html +85 -85
  13. package/dist/convert-icons.md +52 -52
  14. package/dist/favicon.svg +8 -8
  15. package/dist/generate-icons.js +48 -48
  16. package/dist/icons/codex-white.svg +3 -3
  17. package/dist/icons/codex.svg +3 -3
  18. package/dist/icons/cursor-white.svg +11 -11
  19. package/dist/icons/icon-128x128.svg +9 -9
  20. package/dist/icons/icon-144x144.svg +9 -9
  21. package/dist/icons/icon-152x152.svg +9 -9
  22. package/dist/icons/icon-192x192.svg +9 -9
  23. package/dist/icons/icon-384x384.svg +9 -9
  24. package/dist/icons/icon-512x512.svg +9 -9
  25. package/dist/icons/icon-72x72.svg +9 -9
  26. package/dist/icons/icon-96x96.svg +9 -9
  27. package/dist/icons/icon-template.svg +9 -9
  28. package/dist/icons/qwen-logo.svg +14 -14
  29. package/dist/index.html +59 -59
  30. package/dist/logo.svg +12 -12
  31. package/dist/manifest.json +60 -60
  32. package/dist/openapi.yaml +1693 -1693
  33. package/dist/sw.js +124 -124
  34. package/dist-server/server/cli.js +96 -96
  35. package/dist-server/server/daemon/manager.js +33 -33
  36. package/dist-server/server/daemon-manager.js +64 -64
  37. package/dist-server/server/routes/commands.js +25 -25
  38. package/dist-server/server/routes/git.js +17 -17
  39. package/dist-server/server/routes/taskmaster.js +419 -419
  40. package/package.json +180 -180
  41. package/scripts/fix-node-pty.js +67 -67
  42. package/scripts/smoke/a2a-roundtrip.mjs +167 -167
  43. package/scripts/smoke/orchestration-api.mjs +172 -172
  44. package/scripts/smoke/orchestration-live-run.mjs +176 -176
  45. package/server/claude-sdk.js +898 -898
  46. package/server/cli.js +935 -935
  47. package/server/constants/config.js +4 -4
  48. package/server/cursor-cli.js +342 -342
  49. package/server/daemon/manager.js +564 -564
  50. package/server/daemon-manager.js +959 -959
  51. package/server/database/db.js +794 -794
  52. package/server/database/json-store.js +197 -197
  53. package/server/gemini-cli.js +535 -535
  54. package/server/gemini-response-handler.js +79 -79
  55. package/server/index.js +3135 -3135
  56. package/server/load-env.js +34 -34
  57. package/server/middleware/auth.js +173 -173
  58. package/server/modules/orchestration/a2a/adapter-registry.ts +108 -108
  59. package/server/modules/orchestration/a2a/adapters/abstract-a2a.adapter.ts +55 -55
  60. package/server/modules/orchestration/a2a/adapters/claude-code.adapter.ts +284 -284
  61. package/server/modules/orchestration/a2a/adapters/codex.adapter.ts +244 -244
  62. package/server/modules/orchestration/a2a/adapters/cursor.adapter.ts +249 -249
  63. package/server/modules/orchestration/a2a/adapters/gemini.adapter.ts +248 -248
  64. package/server/modules/orchestration/a2a/adapters/opencode.adapter.ts +248 -248
  65. package/server/modules/orchestration/a2a/adapters/qwen.adapter.ts +248 -248
  66. package/server/modules/orchestration/a2a/routes.ts +577 -577
  67. package/server/modules/orchestration/a2a/task-store.ts +178 -178
  68. package/server/modules/orchestration/a2a/types.ts +125 -125
  69. package/server/modules/orchestration/a2a/validator.ts +113 -113
  70. package/server/modules/orchestration/index.ts +66 -66
  71. package/server/modules/orchestration/preview/port-watcher.ts +112 -112
  72. package/server/modules/orchestration/preview/preview-proxy.ts +60 -60
  73. package/server/modules/orchestration/preview/types.ts +19 -19
  74. package/server/modules/orchestration/tasks/orchestration-task-store.ts +45 -45
  75. package/server/modules/orchestration/tasks/orchestration-task.routes.ts +73 -73
  76. package/server/modules/orchestration/tasks/orchestration-task.service.ts +145 -145
  77. package/server/modules/orchestration/tasks/orchestration-task.types.ts +29 -29
  78. package/server/modules/orchestration/workflows/built-in-workflows.ts +127 -127
  79. package/server/modules/orchestration/workflows/workflow-runner.ts +1206 -1206
  80. package/server/modules/orchestration/workflows/workflow-store.ts +97 -97
  81. package/server/modules/orchestration/workflows/workflow.routes.ts +169 -169
  82. package/server/modules/orchestration/workflows/workflow.types.ts +70 -70
  83. package/server/modules/orchestration/workflows/workspace-target.ts +120 -120
  84. package/server/modules/orchestration/workspace/docker-workspace.ts +135 -135
  85. package/server/modules/orchestration/workspace/path-safety.ts +55 -55
  86. package/server/modules/orchestration/workspace/types.ts +52 -52
  87. package/server/modules/orchestration/workspace/workspace-manager.ts +97 -97
  88. package/server/modules/orchestration/workspace/worktree-workspace.ts +125 -125
  89. package/server/modules/providers/index.ts +2 -2
  90. package/server/modules/providers/list/claude/claude-auth.provider.ts +145 -145
  91. package/server/modules/providers/list/claude/claude-mcp.provider.ts +135 -135
  92. package/server/modules/providers/list/claude/claude-sessions.provider.ts +306 -306
  93. package/server/modules/providers/list/claude/claude.provider.ts +15 -15
  94. package/server/modules/providers/list/codex/codex-auth.provider.ts +115 -115
  95. package/server/modules/providers/list/codex/codex-mcp.provider.ts +135 -135
  96. package/server/modules/providers/list/codex/codex-sessions.provider.ts +319 -319
  97. package/server/modules/providers/list/codex/codex.provider.ts +15 -15
  98. package/server/modules/providers/list/cursor/cursor-auth.provider.ts +143 -143
  99. package/server/modules/providers/list/cursor/cursor-mcp.provider.ts +108 -108
  100. package/server/modules/providers/list/cursor/cursor-sessions.provider.ts +421 -421
  101. package/server/modules/providers/list/cursor/cursor.provider.ts +15 -15
  102. package/server/modules/providers/list/gemini/gemini-auth.provider.ts +163 -163
  103. package/server/modules/providers/list/gemini/gemini-mcp.provider.ts +110 -110
  104. package/server/modules/providers/list/gemini/gemini-sessions.provider.ts +227 -227
  105. package/server/modules/providers/list/gemini/gemini.provider.ts +15 -15
  106. package/server/modules/providers/list/opencode/opencode-auth.provider.ts +130 -130
  107. package/server/modules/providers/list/opencode/opencode-mcp.provider.ts +126 -126
  108. package/server/modules/providers/list/opencode/opencode-sessions.provider.ts +232 -232
  109. package/server/modules/providers/list/opencode/opencode.provider.ts +29 -29
  110. package/server/modules/providers/list/qwen/qwen-auth.provider.ts +145 -145
  111. package/server/modules/providers/list/qwen/qwen-mcp.provider.ts +114 -114
  112. package/server/modules/providers/list/qwen/qwen-sessions.provider.ts +265 -265
  113. package/server/modules/providers/list/qwen/qwen.provider.ts +21 -21
  114. package/server/modules/providers/provider.registry.ts +40 -40
  115. package/server/modules/providers/provider.routes.ts +819 -819
  116. package/server/modules/providers/services/mcp.service.ts +86 -86
  117. package/server/modules/providers/services/provider-auth.service.ts +26 -26
  118. package/server/modules/providers/services/sessions.service.ts +45 -45
  119. package/server/modules/providers/shared/base/abstract.provider.ts +20 -20
  120. package/server/modules/providers/shared/mcp/mcp.provider.ts +151 -151
  121. package/server/modules/providers/shared/provider-configs.ts +142 -142
  122. package/server/modules/providers/tests/mcp.test.ts +293 -293
  123. package/server/openai-codex.js +462 -462
  124. package/server/opencode-cli.js +459 -459
  125. package/server/opencode-response-handler.js +107 -107
  126. package/server/projects.js +3105 -3105
  127. package/server/qwen-code-cli.js +395 -395
  128. package/server/qwen-response-handler.js +73 -73
  129. package/server/routes/agent.js +1365 -1365
  130. package/server/routes/auth.js +138 -138
  131. package/server/routes/codex.js +19 -19
  132. package/server/routes/commands.js +554 -554
  133. package/server/routes/cursor.js +52 -52
  134. package/server/routes/gemini.js +24 -24
  135. package/server/routes/git.js +1488 -1488
  136. package/server/routes/mcp-utils.js +31 -31
  137. package/server/routes/messages.js +61 -61
  138. package/server/routes/network.js +120 -120
  139. package/server/routes/plugins.js +318 -318
  140. package/server/routes/projects.js +915 -915
  141. package/server/routes/qwen.js +27 -27
  142. package/server/routes/settings.js +286 -286
  143. package/server/routes/taskmaster.js +1496 -1496
  144. package/server/routes/telegram.js +125 -125
  145. package/server/routes/user.js +123 -123
  146. package/server/services/external-access.js +171 -171
  147. package/server/services/install-jobs.js +571 -571
  148. package/server/services/notification-orchestrator.js +242 -242
  149. package/server/services/provider-credentials.js +189 -189
  150. package/server/services/provider-models.js +381 -381
  151. package/server/services/telegram/bot.js +279 -279
  152. package/server/services/telegram/telegram-http-client.js +130 -130
  153. package/server/services/telegram/translations.js +170 -170
  154. package/server/services/vapid-keys.js +36 -36
  155. package/server/sessionManager.js +225 -225
  156. package/server/shared/interfaces.ts +54 -54
  157. package/server/shared/types.ts +172 -172
  158. package/server/shared/utils.ts +193 -193
  159. package/server/tsconfig.json +36 -36
  160. package/server/utils/colors.js +21 -21
  161. package/server/utils/commandParser.js +303 -303
  162. package/server/utils/frontmatter.js +18 -18
  163. package/server/utils/gitConfig.js +34 -34
  164. package/server/utils/mcp-detector.js +147 -147
  165. package/server/utils/plugin-loader.js +457 -457
  166. package/server/utils/plugin-process-manager.js +184 -184
  167. package/server/utils/port-access.js +209 -209
  168. package/server/utils/runtime-paths.js +37 -37
  169. package/server/utils/taskmaster-websocket.js +128 -128
  170. package/server/utils/url-detection.js +71 -71
  171. package/server/vite-daemon.js +78 -78
  172. package/shared/modelConstants.js +162 -162
  173. package/shared/networkHosts.js +22 -22
@@ -1,342 +1,342 @@
1
- import { spawn } from 'child_process';
2
- import crossSpawn from 'cross-spawn';
3
- import { notifyRunFailed, notifyRunStopped } from './services/notification-orchestrator.js';
4
- import { sessionsService } from './modules/providers/services/sessions.service.js';
5
- import { providerAuthService } from './modules/providers/services/provider-auth.service.js';
6
- import { createNormalizedMessage } from './shared/utils.js';
7
-
8
- // Use cross-spawn on Windows for better command execution
9
- const spawnFunction = process.platform === 'win32' ? crossSpawn : spawn;
10
-
11
- let activeCursorProcesses = new Map(); // Track active processes by session ID
12
-
13
- const WORKSPACE_TRUST_PATTERNS = [
14
- /workspace trust required/i,
15
- /do you trust the contents of this directory/i,
16
- /working with untrusted contents/i,
17
- /pass --trust,\s*--yolo,\s*or -f/i
18
- ];
19
-
20
- function isWorkspaceTrustPrompt(text = '') {
21
- if (!text || typeof text !== 'string') {
22
- return false;
23
- }
24
-
25
- return WORKSPACE_TRUST_PATTERNS.some((pattern) => pattern.test(text));
26
- }
27
-
28
- async function spawnCursor(command, options = {}, ws) {
29
- return new Promise(async (resolve, reject) => {
30
- const { sessionId, projectPath, cwd, resume, toolsSettings, skipPermissions, model, sessionSummary } = options;
31
- let capturedSessionId = sessionId; // Track session ID throughout the process
32
- let sessionCreatedSent = false; // Track if we've already sent session-created event
33
- let hasRetriedWithTrust = false;
34
- let settled = false;
35
-
36
- // Use tools settings passed from frontend, or defaults
37
- const settings = toolsSettings || {
38
- allowedShellCommands: [],
39
- skipPermissions: false
40
- };
41
-
42
- // Build Cursor CLI command
43
- const baseArgs = [];
44
-
45
- // Build flags allowing both resume and prompt together (reply in existing session)
46
- // Treat presence of sessionId as intention to resume, regardless of resume flag
47
- if (sessionId) {
48
- baseArgs.push('--resume=' + sessionId);
49
- }
50
-
51
- if (command && command.trim()) {
52
- // Provide a prompt (works for both new and resumed sessions)
53
- baseArgs.push('-p', command);
54
-
55
- // Add model flag if specified (only meaningful for new sessions; harmless on resume)
56
- if (!sessionId && model) {
57
- baseArgs.push('--model', model);
58
- }
59
-
60
- // Request streaming JSON when we are providing a prompt
61
- baseArgs.push('--output-format', 'stream-json');
62
- }
63
-
64
- // Add skip permissions flag if enabled
65
- if (skipPermissions || settings.skipPermissions) {
66
- baseArgs.push('-f');
67
- console.log('Using -f flag (skip permissions)');
68
- }
69
-
70
- // Use cwd (actual project directory) instead of projectPath
71
- const workingDir = cwd || projectPath || process.cwd();
72
-
73
- // Store process reference for potential abort
74
- const processKey = capturedSessionId || Date.now().toString();
75
-
76
- const settleOnce = (callback) => {
77
- if (settled) {
78
- return;
79
- }
80
- settled = true;
81
- callback();
82
- };
83
-
84
- const runCursorProcess = (args, runReason = 'initial') => {
85
- const isTrustRetry = runReason === 'trust-retry';
86
- let runSawWorkspaceTrustPrompt = false;
87
- let stdoutLineBuffer = '';
88
- let terminalNotificationSent = false;
89
-
90
- const notifyTerminalState = ({ code = null, error = null } = {}) => {
91
- if (terminalNotificationSent) {
92
- return;
93
- }
94
-
95
- terminalNotificationSent = true;
96
-
97
- const finalSessionId = capturedSessionId || sessionId || processKey;
98
- if (code === 0 && !error) {
99
- notifyRunStopped({
100
- userId: ws?.userId || null,
101
- provider: 'cursor',
102
- sessionId: finalSessionId,
103
- sessionName: sessionSummary,
104
- stopReason: 'completed'
105
- });
106
- return;
107
- }
108
-
109
- notifyRunFailed({
110
- userId: ws?.userId || null,
111
- provider: 'cursor',
112
- sessionId: finalSessionId,
113
- sessionName: sessionSummary,
114
- error: error || `Cursor CLI exited with code ${code}`
115
- });
116
- };
117
-
118
- if (isTrustRetry) {
119
- console.log('Retrying Cursor CLI with --trust after workspace trust prompt');
120
- }
121
-
122
- console.log('Spawning Cursor CLI:', 'cursor-agent', args.join(' '));
123
- console.log('Working directory:', workingDir);
124
- console.log('Session info - Input sessionId:', sessionId, 'Resume:', resume);
125
-
126
- const cursorProcess = spawnFunction('cursor-agent', args, {
127
- cwd: workingDir,
128
- stdio: ['pipe', 'pipe', 'pipe'],
129
- env: { ...process.env } // Inherit all environment variables
130
- });
131
-
132
- activeCursorProcesses.set(processKey, cursorProcess);
133
-
134
- const shouldSuppressForTrustRetry = (text) => {
135
- if (hasRetriedWithTrust || args.includes('--trust')) {
136
- return false;
137
- }
138
- if (!isWorkspaceTrustPrompt(text)) {
139
- return false;
140
- }
141
-
142
- runSawWorkspaceTrustPrompt = true;
143
- return true;
144
- };
145
-
146
- const processCursorOutputLine = (line) => {
147
- if (!line || !line.trim()) {
148
- return;
149
- }
150
-
151
- try {
152
- const response = JSON.parse(line);
153
- console.log('Parsed JSON response:', response);
154
-
155
- // Handle different message types
156
- switch (response.type) {
157
- case 'system':
158
- if (response.subtype === 'init') {
159
- // Capture session ID
160
- if (response.session_id && !capturedSessionId) {
161
- capturedSessionId = response.session_id;
162
- console.log('Captured session ID:', capturedSessionId);
163
-
164
- // Update process key with captured session ID
165
- if (processKey !== capturedSessionId) {
166
- activeCursorProcesses.delete(processKey);
167
- activeCursorProcesses.set(capturedSessionId, cursorProcess);
168
- }
169
-
170
- // Set session ID on writer (for API endpoint compatibility)
171
- if (ws.setSessionId && typeof ws.setSessionId === 'function') {
172
- ws.setSessionId(capturedSessionId);
173
- }
174
-
175
- // Send session-created event only once for new sessions
176
- if (!sessionId && !sessionCreatedSent) {
177
- sessionCreatedSent = true;
178
- ws.send(createNormalizedMessage({ kind: 'session_created', newSessionId: capturedSessionId, model: response.model, cwd: response.cwd, sessionId: capturedSessionId, provider: 'cursor' }));
179
- }
180
- }
181
-
182
- // System info — no longer needed by the frontend (session-lifecycle 'created' handles nav).
183
- }
184
- break;
185
-
186
- case 'user':
187
- // User messages are not displayed in the UI — skip.
188
- break;
189
-
190
- case 'assistant':
191
- // Accumulate assistant message chunks
192
- if (response.message && response.message.content && response.message.content.length > 0) {
193
- const normalized = sessionsService.normalizeMessage('cursor', response, capturedSessionId || sessionId || null);
194
- for (const msg of normalized) ws.send(msg);
195
- }
196
- break;
197
-
198
- case 'result': {
199
- // Session complete — send stream end + lifecycle complete with result payload
200
- console.log('Cursor session result:', response);
201
- const resultText = typeof response.result === 'string' ? response.result : '';
202
- ws.send(createNormalizedMessage({
203
- kind: 'complete',
204
- exitCode: response.subtype === 'success' ? 0 : 1,
205
- resultText,
206
- isError: response.subtype !== 'success',
207
- sessionId: capturedSessionId || sessionId, provider: 'cursor',
208
- }));
209
- break;
210
- }
211
-
212
- default:
213
- // Unknown message types — ignore.
214
- }
215
- } catch (parseError) {
216
- console.log('Non-JSON response:', line);
217
-
218
- if (shouldSuppressForTrustRetry(line)) {
219
- return;
220
- }
221
-
222
- // If not JSON, send as stream delta via adapter
223
- const normalized = sessionsService.normalizeMessage('cursor', line, capturedSessionId || sessionId || null);
224
- for (const msg of normalized) ws.send(msg);
225
- }
226
- };
227
-
228
- // Handle stdout (streaming JSON responses)
229
- cursorProcess.stdout.on('data', (data) => {
230
- const rawOutput = data.toString();
231
- console.log('Cursor CLI stdout:', rawOutput);
232
-
233
- // Stream chunks can split JSON objects across packets; keep trailing partial line.
234
- stdoutLineBuffer += rawOutput;
235
- const completeLines = stdoutLineBuffer.split(/\r?\n/);
236
- stdoutLineBuffer = completeLines.pop() || '';
237
-
238
- completeLines.forEach((line) => {
239
- processCursorOutputLine(line.trim());
240
- });
241
- });
242
-
243
- // Handle stderr
244
- cursorProcess.stderr.on('data', (data) => {
245
- const stderrText = data.toString();
246
- console.error('Cursor CLI stderr:', stderrText);
247
-
248
- if (shouldSuppressForTrustRetry(stderrText)) {
249
- return;
250
- }
251
-
252
- ws.send(createNormalizedMessage({ kind: 'error', content: stderrText, sessionId: capturedSessionId || sessionId || null, provider: 'cursor' }));
253
- });
254
-
255
- // Handle process completion
256
- cursorProcess.on('close', async (code) => {
257
- console.log(`Cursor CLI process exited with code ${code}`);
258
-
259
- const finalSessionId = capturedSessionId || sessionId || processKey;
260
- activeCursorProcesses.delete(finalSessionId);
261
-
262
- // Flush any final unterminated stdout line before completion handling.
263
- if (stdoutLineBuffer.trim()) {
264
- processCursorOutputLine(stdoutLineBuffer.trim());
265
- stdoutLineBuffer = '';
266
- }
267
-
268
- if (
269
- runSawWorkspaceTrustPrompt &&
270
- code !== 0 &&
271
- !hasRetriedWithTrust &&
272
- !args.includes('--trust')
273
- ) {
274
- hasRetriedWithTrust = true;
275
- runCursorProcess([...args, '--trust'], 'trust-retry');
276
- return;
277
- }
278
-
279
- ws.send(createNormalizedMessage({ kind: 'complete', exitCode: code, isNewSession: !sessionId && !!command, sessionId: finalSessionId, provider: 'cursor' }));
280
-
281
- if (code === 0) {
282
- notifyTerminalState({ code });
283
- settleOnce(() => resolve());
284
- } else {
285
- notifyTerminalState({ code });
286
- settleOnce(() => reject(new Error(`Cursor CLI exited with code ${code}`)));
287
- }
288
- });
289
-
290
- // Handle process errors
291
- cursorProcess.on('error', async (error) => {
292
- console.error('Cursor CLI process error:', error);
293
-
294
- // Clean up process reference on error
295
- const finalSessionId = capturedSessionId || sessionId || processKey;
296
- activeCursorProcesses.delete(finalSessionId);
297
-
298
- // Check if Cursor CLI is installed for a clearer error message
299
- const installed = await providerAuthService.isProviderInstalled('cursor');
300
- const errorContent = !installed
301
- ? 'Cursor CLI is not installed. Please install it from https://cursor.com'
302
- : error.message;
303
-
304
- ws.send(createNormalizedMessage({ kind: 'error', content: errorContent, sessionId: capturedSessionId || sessionId || null, provider: 'cursor' }));
305
- notifyTerminalState({ error });
306
-
307
- settleOnce(() => reject(error));
308
- });
309
-
310
- // Close stdin since Cursor doesn't need interactive input
311
- cursorProcess.stdin.end();
312
- };
313
-
314
- runCursorProcess(baseArgs, 'initial');
315
- });
316
- }
317
-
318
- function abortCursorSession(sessionId) {
319
- const process = activeCursorProcesses.get(sessionId);
320
- if (process) {
321
- console.log(`Aborting Cursor session: ${sessionId}`);
322
- process.kill('SIGTERM');
323
- activeCursorProcesses.delete(sessionId);
324
- return true;
325
- }
326
- return false;
327
- }
328
-
329
- function isCursorSessionActive(sessionId) {
330
- return activeCursorProcesses.has(sessionId);
331
- }
332
-
333
- function getActiveCursorSessions() {
334
- return Array.from(activeCursorProcesses.keys());
335
- }
336
-
337
- export {
338
- spawnCursor,
339
- abortCursorSession,
340
- isCursorSessionActive,
341
- getActiveCursorSessions
342
- };
1
+ import { spawn } from 'child_process';
2
+ import crossSpawn from 'cross-spawn';
3
+ import { notifyRunFailed, notifyRunStopped } from './services/notification-orchestrator.js';
4
+ import { sessionsService } from './modules/providers/services/sessions.service.js';
5
+ import { providerAuthService } from './modules/providers/services/provider-auth.service.js';
6
+ import { createNormalizedMessage } from './shared/utils.js';
7
+
8
+ // Use cross-spawn on Windows for better command execution
9
+ const spawnFunction = process.platform === 'win32' ? crossSpawn : spawn;
10
+
11
+ let activeCursorProcesses = new Map(); // Track active processes by session ID
12
+
13
+ const WORKSPACE_TRUST_PATTERNS = [
14
+ /workspace trust required/i,
15
+ /do you trust the contents of this directory/i,
16
+ /working with untrusted contents/i,
17
+ /pass --trust,\s*--yolo,\s*or -f/i
18
+ ];
19
+
20
+ function isWorkspaceTrustPrompt(text = '') {
21
+ if (!text || typeof text !== 'string') {
22
+ return false;
23
+ }
24
+
25
+ return WORKSPACE_TRUST_PATTERNS.some((pattern) => pattern.test(text));
26
+ }
27
+
28
+ async function spawnCursor(command, options = {}, ws) {
29
+ return new Promise(async (resolve, reject) => {
30
+ const { sessionId, projectPath, cwd, resume, toolsSettings, skipPermissions, model, sessionSummary } = options;
31
+ let capturedSessionId = sessionId; // Track session ID throughout the process
32
+ let sessionCreatedSent = false; // Track if we've already sent session-created event
33
+ let hasRetriedWithTrust = false;
34
+ let settled = false;
35
+
36
+ // Use tools settings passed from frontend, or defaults
37
+ const settings = toolsSettings || {
38
+ allowedShellCommands: [],
39
+ skipPermissions: false
40
+ };
41
+
42
+ // Build Cursor CLI command
43
+ const baseArgs = [];
44
+
45
+ // Build flags allowing both resume and prompt together (reply in existing session)
46
+ // Treat presence of sessionId as intention to resume, regardless of resume flag
47
+ if (sessionId) {
48
+ baseArgs.push('--resume=' + sessionId);
49
+ }
50
+
51
+ if (command && command.trim()) {
52
+ // Provide a prompt (works for both new and resumed sessions)
53
+ baseArgs.push('-p', command);
54
+
55
+ // Add model flag if specified (only meaningful for new sessions; harmless on resume)
56
+ if (!sessionId && model) {
57
+ baseArgs.push('--model', model);
58
+ }
59
+
60
+ // Request streaming JSON when we are providing a prompt
61
+ baseArgs.push('--output-format', 'stream-json');
62
+ }
63
+
64
+ // Add skip permissions flag if enabled
65
+ if (skipPermissions || settings.skipPermissions) {
66
+ baseArgs.push('-f');
67
+ console.log('Using -f flag (skip permissions)');
68
+ }
69
+
70
+ // Use cwd (actual project directory) instead of projectPath
71
+ const workingDir = cwd || projectPath || process.cwd();
72
+
73
+ // Store process reference for potential abort
74
+ const processKey = capturedSessionId || Date.now().toString();
75
+
76
+ const settleOnce = (callback) => {
77
+ if (settled) {
78
+ return;
79
+ }
80
+ settled = true;
81
+ callback();
82
+ };
83
+
84
+ const runCursorProcess = (args, runReason = 'initial') => {
85
+ const isTrustRetry = runReason === 'trust-retry';
86
+ let runSawWorkspaceTrustPrompt = false;
87
+ let stdoutLineBuffer = '';
88
+ let terminalNotificationSent = false;
89
+
90
+ const notifyTerminalState = ({ code = null, error = null } = {}) => {
91
+ if (terminalNotificationSent) {
92
+ return;
93
+ }
94
+
95
+ terminalNotificationSent = true;
96
+
97
+ const finalSessionId = capturedSessionId || sessionId || processKey;
98
+ if (code === 0 && !error) {
99
+ notifyRunStopped({
100
+ userId: ws?.userId || null,
101
+ provider: 'cursor',
102
+ sessionId: finalSessionId,
103
+ sessionName: sessionSummary,
104
+ stopReason: 'completed'
105
+ });
106
+ return;
107
+ }
108
+
109
+ notifyRunFailed({
110
+ userId: ws?.userId || null,
111
+ provider: 'cursor',
112
+ sessionId: finalSessionId,
113
+ sessionName: sessionSummary,
114
+ error: error || `Cursor CLI exited with code ${code}`
115
+ });
116
+ };
117
+
118
+ if (isTrustRetry) {
119
+ console.log('Retrying Cursor CLI with --trust after workspace trust prompt');
120
+ }
121
+
122
+ console.log('Spawning Cursor CLI:', 'cursor-agent', args.join(' '));
123
+ console.log('Working directory:', workingDir);
124
+ console.log('Session info - Input sessionId:', sessionId, 'Resume:', resume);
125
+
126
+ const cursorProcess = spawnFunction('cursor-agent', args, {
127
+ cwd: workingDir,
128
+ stdio: ['pipe', 'pipe', 'pipe'],
129
+ env: { ...process.env } // Inherit all environment variables
130
+ });
131
+
132
+ activeCursorProcesses.set(processKey, cursorProcess);
133
+
134
+ const shouldSuppressForTrustRetry = (text) => {
135
+ if (hasRetriedWithTrust || args.includes('--trust')) {
136
+ return false;
137
+ }
138
+ if (!isWorkspaceTrustPrompt(text)) {
139
+ return false;
140
+ }
141
+
142
+ runSawWorkspaceTrustPrompt = true;
143
+ return true;
144
+ };
145
+
146
+ const processCursorOutputLine = (line) => {
147
+ if (!line || !line.trim()) {
148
+ return;
149
+ }
150
+
151
+ try {
152
+ const response = JSON.parse(line);
153
+ console.log('Parsed JSON response:', response);
154
+
155
+ // Handle different message types
156
+ switch (response.type) {
157
+ case 'system':
158
+ if (response.subtype === 'init') {
159
+ // Capture session ID
160
+ if (response.session_id && !capturedSessionId) {
161
+ capturedSessionId = response.session_id;
162
+ console.log('Captured session ID:', capturedSessionId);
163
+
164
+ // Update process key with captured session ID
165
+ if (processKey !== capturedSessionId) {
166
+ activeCursorProcesses.delete(processKey);
167
+ activeCursorProcesses.set(capturedSessionId, cursorProcess);
168
+ }
169
+
170
+ // Set session ID on writer (for API endpoint compatibility)
171
+ if (ws.setSessionId && typeof ws.setSessionId === 'function') {
172
+ ws.setSessionId(capturedSessionId);
173
+ }
174
+
175
+ // Send session-created event only once for new sessions
176
+ if (!sessionId && !sessionCreatedSent) {
177
+ sessionCreatedSent = true;
178
+ ws.send(createNormalizedMessage({ kind: 'session_created', newSessionId: capturedSessionId, model: response.model, cwd: response.cwd, sessionId: capturedSessionId, provider: 'cursor' }));
179
+ }
180
+ }
181
+
182
+ // System info — no longer needed by the frontend (session-lifecycle 'created' handles nav).
183
+ }
184
+ break;
185
+
186
+ case 'user':
187
+ // User messages are not displayed in the UI — skip.
188
+ break;
189
+
190
+ case 'assistant':
191
+ // Accumulate assistant message chunks
192
+ if (response.message && response.message.content && response.message.content.length > 0) {
193
+ const normalized = sessionsService.normalizeMessage('cursor', response, capturedSessionId || sessionId || null);
194
+ for (const msg of normalized) ws.send(msg);
195
+ }
196
+ break;
197
+
198
+ case 'result': {
199
+ // Session complete — send stream end + lifecycle complete with result payload
200
+ console.log('Cursor session result:', response);
201
+ const resultText = typeof response.result === 'string' ? response.result : '';
202
+ ws.send(createNormalizedMessage({
203
+ kind: 'complete',
204
+ exitCode: response.subtype === 'success' ? 0 : 1,
205
+ resultText,
206
+ isError: response.subtype !== 'success',
207
+ sessionId: capturedSessionId || sessionId, provider: 'cursor',
208
+ }));
209
+ break;
210
+ }
211
+
212
+ default:
213
+ // Unknown message types — ignore.
214
+ }
215
+ } catch (parseError) {
216
+ console.log('Non-JSON response:', line);
217
+
218
+ if (shouldSuppressForTrustRetry(line)) {
219
+ return;
220
+ }
221
+
222
+ // If not JSON, send as stream delta via adapter
223
+ const normalized = sessionsService.normalizeMessage('cursor', line, capturedSessionId || sessionId || null);
224
+ for (const msg of normalized) ws.send(msg);
225
+ }
226
+ };
227
+
228
+ // Handle stdout (streaming JSON responses)
229
+ cursorProcess.stdout.on('data', (data) => {
230
+ const rawOutput = data.toString();
231
+ console.log('Cursor CLI stdout:', rawOutput);
232
+
233
+ // Stream chunks can split JSON objects across packets; keep trailing partial line.
234
+ stdoutLineBuffer += rawOutput;
235
+ const completeLines = stdoutLineBuffer.split(/\r?\n/);
236
+ stdoutLineBuffer = completeLines.pop() || '';
237
+
238
+ completeLines.forEach((line) => {
239
+ processCursorOutputLine(line.trim());
240
+ });
241
+ });
242
+
243
+ // Handle stderr
244
+ cursorProcess.stderr.on('data', (data) => {
245
+ const stderrText = data.toString();
246
+ console.error('Cursor CLI stderr:', stderrText);
247
+
248
+ if (shouldSuppressForTrustRetry(stderrText)) {
249
+ return;
250
+ }
251
+
252
+ ws.send(createNormalizedMessage({ kind: 'error', content: stderrText, sessionId: capturedSessionId || sessionId || null, provider: 'cursor' }));
253
+ });
254
+
255
+ // Handle process completion
256
+ cursorProcess.on('close', async (code) => {
257
+ console.log(`Cursor CLI process exited with code ${code}`);
258
+
259
+ const finalSessionId = capturedSessionId || sessionId || processKey;
260
+ activeCursorProcesses.delete(finalSessionId);
261
+
262
+ // Flush any final unterminated stdout line before completion handling.
263
+ if (stdoutLineBuffer.trim()) {
264
+ processCursorOutputLine(stdoutLineBuffer.trim());
265
+ stdoutLineBuffer = '';
266
+ }
267
+
268
+ if (
269
+ runSawWorkspaceTrustPrompt &&
270
+ code !== 0 &&
271
+ !hasRetriedWithTrust &&
272
+ !args.includes('--trust')
273
+ ) {
274
+ hasRetriedWithTrust = true;
275
+ runCursorProcess([...args, '--trust'], 'trust-retry');
276
+ return;
277
+ }
278
+
279
+ ws.send(createNormalizedMessage({ kind: 'complete', exitCode: code, isNewSession: !sessionId && !!command, sessionId: finalSessionId, provider: 'cursor' }));
280
+
281
+ if (code === 0) {
282
+ notifyTerminalState({ code });
283
+ settleOnce(() => resolve());
284
+ } else {
285
+ notifyTerminalState({ code });
286
+ settleOnce(() => reject(new Error(`Cursor CLI exited with code ${code}`)));
287
+ }
288
+ });
289
+
290
+ // Handle process errors
291
+ cursorProcess.on('error', async (error) => {
292
+ console.error('Cursor CLI process error:', error);
293
+
294
+ // Clean up process reference on error
295
+ const finalSessionId = capturedSessionId || sessionId || processKey;
296
+ activeCursorProcesses.delete(finalSessionId);
297
+
298
+ // Check if Cursor CLI is installed for a clearer error message
299
+ const installed = await providerAuthService.isProviderInstalled('cursor');
300
+ const errorContent = !installed
301
+ ? 'Cursor CLI is not installed. Please install it from https://cursor.com'
302
+ : error.message;
303
+
304
+ ws.send(createNormalizedMessage({ kind: 'error', content: errorContent, sessionId: capturedSessionId || sessionId || null, provider: 'cursor' }));
305
+ notifyTerminalState({ error });
306
+
307
+ settleOnce(() => reject(error));
308
+ });
309
+
310
+ // Close stdin since Cursor doesn't need interactive input
311
+ cursorProcess.stdin.end();
312
+ };
313
+
314
+ runCursorProcess(baseArgs, 'initial');
315
+ });
316
+ }
317
+
318
+ function abortCursorSession(sessionId) {
319
+ const process = activeCursorProcesses.get(sessionId);
320
+ if (process) {
321
+ console.log(`Aborting Cursor session: ${sessionId}`);
322
+ process.kill('SIGTERM');
323
+ activeCursorProcesses.delete(sessionId);
324
+ return true;
325
+ }
326
+ return false;
327
+ }
328
+
329
+ function isCursorSessionActive(sessionId) {
330
+ return activeCursorProcesses.has(sessionId);
331
+ }
332
+
333
+ function getActiveCursorSessions() {
334
+ return Array.from(activeCursorProcesses.keys());
335
+ }
336
+
337
+ export {
338
+ spawnCursor,
339
+ abortCursorSession,
340
+ isCursorSessionActive,
341
+ getActiveCursorSessions
342
+ };