@stablekernel/opencode-cursor 0.8.0 → 0.9.0-next.1

package/dist/provider/index.js

@@ -20,7 +20,7 @@ import {
   streamAgentTurn,
   unregisterSubagentCall,
   withSessionLock
-} from "../chunk-YIEC27VB.js";
+} from "../chunk-HWSH5L4H.js";
 
 // src/provider/index.ts
 import { NoSuchModelError } from "@ai-sdk/provider";

package/dist/sidecar/agent-host.d.ts

@@ -28,7 +28,12 @@ function serializeError(err) {
     const out = { name: err.name, message: err.message };
     for (const k of ["status", "code", "isRetryable", "helpUrl"]) {
       const v = err[k];
-      if (typeof v === "number" || typeof v === "string" || typeof v === "boolean") out[k] = v;
+      if (
+        typeof v === "number" ||
+        typeof v === "string" ||
+        typeof v === "boolean"
+      )
+        out[k] = v;
     }
     return out;
   }
@@ -43,16 +48,23 @@ function write(payload) {
 const ANSI_PATTERN = /\x1b\[[0-9;]*m/g;
 
 // `@cursor/sdk`'s bundled local-exec runtime writes its rules/skills
-// load-completion diagnostics straight to `console.log` (no public logger
-// hook exists to redirect it — see src/provider/cursor-log-intercept.ts,
-// which applies the identical pattern for the in-process transport). This
-// process's own JSONL protocol never uses console.log (only
-// process.stdout.write via write() above), so console.log here is entirely
-// free for the SDK's use: recognized lines are forwarded to the parent as a
-// structured "log" event instead of being written as raw, unparseable text.
+// load-completion diagnostics straight to `console.log`, and its shell-parser
+// emits a one-shot "tree-sitter natives unavailable" diagnostic via
+// `console.warn` (no public logger hook exists to redirect either — see
+// src/provider/cursor-log-intercept.ts, which applies the identical pattern
+// for the in-process transport). This process's own JSONL protocol never uses
+// console.log/console.warn (only process.stdout.write via write() above), so
+// they are entirely free for the SDK's use: recognized lines are forwarded
+// to the parent as a structured "log" event instead of being written as raw,
+// unparseable text.
 const RULE_LOAD_PATTERN =
   /^\d{2}:\d{2}:\d{2}\.\d{3}\s+INFO\s+(LocalCursorRulesService|AgentSkillsCursorRulesService|CursorPluginsAgentSkillsService) load completed(?:\s+ctx=\S+)?\s+meta=\{([^}]*)\}\s*$/;
 
+// One-shot SDK load diagnostics recognized on console.warn (prefix-matched).
+const SDK_WARNING_PREFIXES = [
+  "shell-parser: tree-sitter natives are unavailable in this artifact",
+];
+
 function parseLogMeta(raw) {
   const out = {};
   for (const part of raw.split(",")) {
@@ -82,6 +94,18 @@ console.log = (...args) => {
   originalConsoleLog(...args);
 };
 
+const originalConsoleWarn = console.warn.bind(console);
+console.warn = (...args) => {
+  if (args.length === 1 && typeof args[0] === "string") {
+    const line = args[0].replace(ANSI_PATTERN, "");
+    if (SDK_WARNING_PREFIXES.some((prefix) => line.startsWith(prefix))) {
+      write({ ev: "log", level: "warn", message: line });
+      return;
+    }
+  }
+  originalConsoleWarn(...args);
+};
+
 let sdkPromise;
 function loadSdk() {
   // OPENCODE_CURSOR_SDK_PATH lets tests substitute a fake SDK module.

package/dist/sidecar/agent-host.js

@@ -5,7 +5,8 @@ function serializeError(err) {
     const out = { name: err.name, message: err.message };
     for (const k of ["status", "code", "isRetryable", "helpUrl"]) {
       const v = err[k];
-      if (typeof v === "number" || typeof v === "string" || typeof v === "boolean") out[k] = v;
+      if (typeof v === "number" || typeof v === "string" || typeof v === "boolean")
+        out[k] = v;
     }
     return out;
   }
@@ -17,6 +18,9 @@ function write(payload) {
 }
 var ANSI_PATTERN = /\x1b\[[0-9;]*m/g;
 var RULE_LOAD_PATTERN = /^\d{2}:\d{2}:\d{2}\.\d{3}\s+INFO\s+(LocalCursorRulesService|AgentSkillsCursorRulesService|CursorPluginsAgentSkillsService) load completed(?:\s+ctx=\S+)?\s+meta=\{([^}]*)\}\s*$/;
+var SDK_WARNING_PREFIXES = [
+  "shell-parser: tree-sitter natives are unavailable in this artifact"
+];
 function parseLogMeta(raw) {
   const out = {};
   for (const part of raw.split(",")) {
@@ -44,6 +48,17 @@ console.log = (...args) => {
   }
   originalConsoleLog(...args);
 };
+var originalConsoleWarn = console.warn.bind(console);
+console.warn = (...args) => {
+  if (args.length === 1 && typeof args[0] === "string") {
+    const line = args[0].replace(ANSI_PATTERN, "");
+    if (SDK_WARNING_PREFIXES.some((prefix) => line.startsWith(prefix))) {
+      write({ ev: "log", level: "warn", message: line });
+      return;
+    }
+  }
+  originalConsoleWarn(...args);
+};
 var sdkPromise;
 function loadSdk() {
   sdkPromise ??= import(process.env.OPENCODE_CURSOR_SDK_PATH || "@cursor/sdk");

package/dist/sidecar/agent-host.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/sidecar/agent-host.mjs"],"sourcesContent":["/**\n * Cursor agent sidecar — runs under Node and hosts all `@cursor/sdk` agent\n * traffic on behalf of the provider.\n *\n * Why this exists: opencode executes plugins under Bun, whose `node:http2`\n * client breaks Cursor's streaming connect RPC (NGHTTP2_FRAME_SIZE_ERROR);\n * tool-completion updates are lost and every native tool call dangles. Under\n * Node the same stream works, so when Bun is detected the provider spawns this\n * script with Node and proxies agent calls over a JSON-lines stdio protocol\n * (see sidecar-client.ts for the client side).\n *\n * Protocol (one JSON object per line):\n *   request:  {id, op: \"ping\"|\"create\"|\"resume\"|\"send\"|\"cancel\"|\"close\", ...}\n *   response: {id, ok: true, ...} | {id, ok: false, error: {name, message}}\n *   send stream: {id, ev: \"update\", update} ... then exactly one of\n *                {id, ev: \"result\", result} | {id, ev: \"error\", error}\n *\n * Kept as plain .mjs so tests can spawn it pre-build; tsup also bundles it to\n * dist/sidecar/agent-host.js for production.\n */\nimport { createInterface } from \"node:readline\";\n\n/** Plain-data error shape that survives JSON; name + classification fields\n * preserved so the Bun side can discriminate (see error-classify.ts). */\nfunction serializeError(err) {\n  if (err instanceof Error) {\n    const out = { name: err.name, message: err.message };\n    for (const k of [\"status\", \"code\", \"isRetryable\", \"helpUrl\"]) {\n      const v = err[k];\n      if (typeof v === \"number\" || typeof v === \"string\" || typeof v === \"boolean\") out[k] = v;\n    }\n    return out;\n  }\n  return { name: \"Error\", message: String(err) };\n}\n\nfunction write(payload) {\n  process.stdout.write(`${JSON.stringify(payload)}\\n`);\n}\n\n// eslint-disable-next-line no-control-regex\nconst ANSI_PATTERN = /\\x1b\\[[0-9;]*m/g;\n\n// `@cursor/sdk`'s bundled local-exec runtime writes its rules/skills\n// load-completion diagnostics straight to `console.log` (no public logger\n// hook exists to redirect it — see src/provider/cursor-log-intercept.ts,\n// which applies the identical pattern for the in-process transport). This\n// process's own JSONL protocol never uses console.log (only\n// process.stdout.write via write() above), so console.log here is entirely\n// free for the SDK's use: recognized lines are forwarded to the parent as a\n// structured \"log\" event instead of being written as raw, unparseable text.\nconst RULE_LOAD_PATTERN =\n  /^\\d{2}:\\d{2}:\\d{2}\\.\\d{3}\\s+INFO\\s+(LocalCursorRulesService|AgentSkillsCursorRulesService|CursorPluginsAgentSkillsService) load completed(?:\\s+ctx=\\S+)?\\s+meta=\\{([^}]*)\\}\\s*$/;\n\nfunction parseLogMeta(raw) {\n  const out = {};\n  for (const part of raw.split(\",\")) {\n    const [key, value] = part.split(\":\").map((s) => s.trim());\n    if (!key || value === undefined) continue;\n    const num = Number(value);\n    if (Number.isFinite(num)) out[key] = num;\n  }\n  return out;\n}\n\nconst originalConsoleLog = console.log.bind(console);\nconsole.log = (...args) => {\n  if (args.length === 1 && typeof args[0] === \"string\") {\n    const match = RULE_LOAD_PATTERN.exec(args[0].replace(ANSI_PATTERN, \"\"));\n    if (match) {\n      const [, service, meta] = match;\n      write({\n        ev: \"log\",\n        level: \"info\",\n        message: `${service} load completed`,\n        meta: parseLogMeta(meta ?? \"\"),\n      });\n      return;\n    }\n  }\n  originalConsoleLog(...args);\n};\n\nlet sdkPromise;\nfunction loadSdk() {\n  // OPENCODE_CURSOR_SDK_PATH lets tests substitute a fake SDK module.\n  sdkPromise ??= import(process.env.OPENCODE_CURSOR_SDK_PATH || \"@cursor/sdk\");\n  return sdkPromise;\n}\n\n/** agentId -> SDKAgent */\nconst agents = new Map();\n/** send request id -> Run (for cancel) */\nconst runs = new Map();\n\nasync function handleRequest(req) {\n  const { id, op } = req;\n  switch (op) {\n    case \"ping\": {\n      write({ id, ok: true, pid: process.pid });\n      return;\n    }\n    case \"create\":\n    case \"resume\": {\n      const { Agent } = await loadSdk();\n      const agent =\n        op === \"resume\"\n          ? await Agent.resume(req.agentId, req.options)\n          : await Agent.create(req.options);\n      agents.set(agent.agentId, agent);\n      write({ id, ok: true, agentId: agent.agentId });\n      return;\n    }\n    case \"send\": {\n      const agent = agents.get(req.agentId);\n      if (!agent) throw new Error(`unknown agent \"${req.agentId}\"`);\n      const sendOptions = {\n        ...(req.mode ? { mode: req.mode } : {}),\n        ...(req.force ? { local: { force: true } } : {}),\n        ...(req.idempotencyKey ? { idempotencyKey: req.idempotencyKey } : {}),\n        onDelta: ({ update }) => write({ id, ev: \"update\", update }),\n      };\n      const run = await agent.send(req.message, sendOptions);\n      runs.set(id, run);\n      // Acknowledge so the client can hand back a cancellable run handle.\n      write({ id, ok: true });\n      try {\n        const result = await run.wait();\n        write({ id, ev: \"result\", result });\n      } catch (err) {\n        write({ id, ev: \"error\", error: serializeError(err) });\n      } finally {\n        runs.delete(id);\n      }\n      return;\n    }\n    case \"cancel\": {\n      const run = runs.get(req.sendId);\n      if (run) await run.cancel();\n      write({ id, ok: true });\n      return;\n    }\n    case \"close\": {\n      const agent = agents.get(req.agentId);\n      agents.delete(req.agentId);\n      try {\n        agent?.close();\n      } catch {\n        // best effort\n      }\n      write({ id, ok: true });\n      return;\n    }\n    default:\n      throw new Error(`unknown op \"${op}\"`);\n  }\n}\n\nconst rl = createInterface({ input: process.stdin });\nrl.on(\"line\", (line) => {\n  if (!line.trim()) return;\n  let req;\n  try {\n    req = JSON.parse(line);\n  } catch (err) {\n    write({ id: null, ok: false, error: serializeError(err) });\n    return;\n  }\n  handleRequest(req).catch((err) => {\n    write({ id: req.id, ok: false, error: serializeError(err) });\n  });\n});\n\n// Parent gone (stdin closed) -> shut down; never outlive the plugin process.\nrl.on(\"close\", () => {\n  process.exit(0);\n});\n"],"mappings":";AAoBA,SAAS,uBAAuB;AAIhC,SAAS,eAAe,KAAK;AAC3B,MAAI,eAAe,OAAO;AACxB,UAAM,MAAM,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACnD,eAAW,KAAK,CAAC,UAAU,QAAQ,eAAe,SAAS,GAAG;AAC5D,YAAM,IAAI,IAAI,CAAC;AACf,UAAI,OAAO,MAAM,YAAY,OAAO,MAAM,YAAY,OAAO,MAAM,UAAW,KAAI,CAAC,IAAI;AAAA,IACzF;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAAM,SAAS,SAAS,OAAO,GAAG,EAAE;AAC/C;AAEA,SAAS,MAAM,SAAS;AACtB,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI;AACrD;AAGA,IAAM,eAAe;AAUrB,IAAM,oBACJ;AAEF,SAAS,aAAa,KAAK;AACzB,QAAM,MAAM,CAAC;AACb,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AACjC,UAAM,CAAC,KAAK,KAAK,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACxD,QAAI,CAAC,OAAO,UAAU,OAAW;AACjC,UAAM,MAAM,OAAO,KAAK;AACxB,QAAI,OAAO,SAAS,GAAG,EAAG,KAAI,GAAG,IAAI;AAAA,EACvC;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB,QAAQ,IAAI,KAAK,OAAO;AACnD,QAAQ,MAAM,IAAI,SAAS;AACzB,MAAI,KAAK,WAAW,KAAK,OAAO,KAAK,CAAC,MAAM,UAAU;AACpD,UAAM,QAAQ,kBAAkB,KAAK,KAAK,CAAC,EAAE,QAAQ,cAAc,EAAE,CAAC;AACtE,QAAI,OAAO;AACT,YAAM,CAAC,EAAE,SAAS,IAAI,IAAI;AAC1B,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,SAAS,GAAG,OAAO;AAAA,QACnB,MAAM,aAAa,QAAQ,EAAE;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAAA,EACF;AACA,qBAAmB,GAAG,IAAI;AAC5B;AAEA,IAAI;AACJ,SAAS,UAAU;AAEjB,iBAAe,OAAO,QAAQ,IAAI,4BAA4B;AAC9D,SAAO;AACT;AAGA,IAAM,SAAS,oBAAI,IAAI;AAEvB,IAAM,OAAO,oBAAI,IAAI;AAErB,eAAe,cAAc,KAAK;AAChC,QAAM,EAAE,IAAI,GAAG,IAAI;AACnB,UAAQ,IAAI;AAAA,IACV,KAAK,QAAQ;AACX,YAAM,EAAE,IAAI,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC;AACxC;AAAA,IACF;AAAA,IACA,KAAK;AAAA,IACL,KAAK,UAAU;AACb,YAAM,EAAE,MAAM,IAAI,MAAM,QAAQ;AAChC,YAAM,QACJ,OAAO,WACH,MAAM,MAAM,OAAO,IAAI,SAAS,IAAI,OAAO,IAC3C,MAAM,MAAM,OAAO,IAAI,OAAO;AACpC,aAAO,IAAI,MAAM,SAAS,KAAK;AAC/B,YAAM,EAAE,IAAI,IAAI,MAAM,SAAS,MAAM,QAAQ,CAAC;AAC9C;AAAA,IACF;AAAA,IACA,KAAK,QAAQ;AACX,YAAM,QAAQ,OAAO,IAAI,IAAI,OAAO;AACpC,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,kBAAkB,IAAI,OAAO,GAAG;AAC5D,YAAM,cAAc;AAAA,QAClB,GAAI,IAAI,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAAA,QACrC,GAAI,IAAI,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,IAAI,CAAC;AAAA,QAC9C,GAAI,IAAI,iBAAiB,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,QACnE,SAAS,CAAC,EAAE,OAAO,MAAM,MAAM,EAAE,IAAI,IAAI,UAAU,OAAO,CAAC;AAAA,MAC7D;AACA,YAAM,MAAM,MAAM,MAAM,KAAK,IAAI,SAAS,WAAW;AACrD,WAAK,IAAI,IAAI,GAAG;AAEhB,YAAM,EAAE,IAAI,IAAI,KAAK,CAAC;AACtB,UAAI;AACF,cAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,cAAM,EAAE,IAAI,IAAI,UAAU,OAAO,CAAC;AAAA,MACpC,SAAS,KAAK;AACZ,cAAM,EAAE,IAAI,IAAI,SAAS,OAAO,eAAe,GAAG,EAAE,CAAC;AAAA,MACvD,UAAE;AACA,aAAK,OAAO,EAAE;AAAA,MAChB;AACA;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AACb,YAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,UAAI,IAAK,OAAM,IAAI,OAAO;AAC1B,YAAM,EAAE,IAAI,IAAI,KAAK,CAAC;AACtB;AAAA,IACF;AAAA,IACA,KAAK,SAAS;AACZ,YAAM,QAAQ,OAAO,IAAI,IAAI,OAAO;AACpC,aAAO,OAAO,IAAI,OAAO;AACzB,UAAI;AACF,eAAO,MAAM;AAAA,MACf,QAAQ;AAAA,MAER;AACA,YAAM,EAAE,IAAI,IAAI,KAAK,CAAC;AACtB;AAAA,IACF;AAAA,IACA;AACE,YAAM,IAAI,MAAM,eAAe,EAAE,GAAG;AAAA,EACxC;AACF;AAEA,IAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,MAAM,CAAC;AACnD,GAAG,GAAG,QAAQ,CAAC,SAAS;AACtB,MAAI,CAAC,KAAK,KAAK,EAAG;AAClB,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,IAAI;AAAA,EACvB,SAAS,KAAK;AACZ,UAAM,EAAE,IAAI,MAAM,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,CAAC;AACzD;AAAA,EACF;AACA,gBAAc,GAAG,EAAE,MAAM,CAAC,QAAQ;AAChC,UAAM,EAAE,IAAI,IAAI,IAAI,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,CAAC;AAAA,EAC7D,CAAC;AACH,CAAC;AAGD,GAAG,GAAG,SAAS,MAAM;AACnB,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../../src/sidecar/agent-host.mjs"],"sourcesContent":["/**\n * Cursor agent sidecar — runs under Node and hosts all `@cursor/sdk` agent\n * traffic on behalf of the provider.\n *\n * Why this exists: opencode executes plugins under Bun, whose `node:http2`\n * client breaks Cursor's streaming connect RPC (NGHTTP2_FRAME_SIZE_ERROR);\n * tool-completion updates are lost and every native tool call dangles. Under\n * Node the same stream works, so when Bun is detected the provider spawns this\n * script with Node and proxies agent calls over a JSON-lines stdio protocol\n * (see sidecar-client.ts for the client side).\n *\n * Protocol (one JSON object per line):\n *   request:  {id, op: \"ping\"|\"create\"|\"resume\"|\"send\"|\"cancel\"|\"close\", ...}\n *   response: {id, ok: true, ...} | {id, ok: false, error: {name, message}}\n *   send stream: {id, ev: \"update\", update} ... then exactly one of\n *                {id, ev: \"result\", result} | {id, ev: \"error\", error}\n *\n * Kept as plain .mjs so tests can spawn it pre-build; tsup also bundles it to\n * dist/sidecar/agent-host.js for production.\n */\nimport { createInterface } from \"node:readline\";\n\n/** Plain-data error shape that survives JSON; name + classification fields\n * preserved so the Bun side can discriminate (see error-classify.ts). */\nfunction serializeError(err) {\n  if (err instanceof Error) {\n    const out = { name: err.name, message: err.message };\n    for (const k of [\"status\", \"code\", \"isRetryable\", \"helpUrl\"]) {\n      const v = err[k];\n      if (\n        typeof v === \"number\" ||\n        typeof v === \"string\" ||\n        typeof v === \"boolean\"\n      )\n        out[k] = v;\n    }\n    return out;\n  }\n  return { name: \"Error\", message: String(err) };\n}\n\nfunction write(payload) {\n  process.stdout.write(`${JSON.stringify(payload)}\\n`);\n}\n\n// eslint-disable-next-line no-control-regex\nconst ANSI_PATTERN = /\\x1b\\[[0-9;]*m/g;\n\n// `@cursor/sdk`'s bundled local-exec runtime writes its rules/skills\n// load-completion diagnostics straight to `console.log`, and its shell-parser\n// emits a one-shot \"tree-sitter natives unavailable\" diagnostic via\n// `console.warn` (no public logger hook exists to redirect either — see\n// src/provider/cursor-log-intercept.ts, which applies the identical pattern\n// for the in-process transport). This process's own JSONL protocol never uses\n// console.log/console.warn (only process.stdout.write via write() above), so\n// they are entirely free for the SDK's use: recognized lines are forwarded\n// to the parent as a structured \"log\" event instead of being written as raw,\n// unparseable text.\nconst RULE_LOAD_PATTERN =\n  /^\\d{2}:\\d{2}:\\d{2}\\.\\d{3}\\s+INFO\\s+(LocalCursorRulesService|AgentSkillsCursorRulesService|CursorPluginsAgentSkillsService) load completed(?:\\s+ctx=\\S+)?\\s+meta=\\{([^}]*)\\}\\s*$/;\n\n// One-shot SDK load diagnostics recognized on console.warn (prefix-matched).\nconst SDK_WARNING_PREFIXES = [\n  \"shell-parser: tree-sitter natives are unavailable in this artifact\",\n];\n\nfunction parseLogMeta(raw) {\n  const out = {};\n  for (const part of raw.split(\",\")) {\n    const [key, value] = part.split(\":\").map((s) => s.trim());\n    if (!key || value === undefined) continue;\n    const num = Number(value);\n    if (Number.isFinite(num)) out[key] = num;\n  }\n  return out;\n}\n\nconst originalConsoleLog = console.log.bind(console);\nconsole.log = (...args) => {\n  if (args.length === 1 && typeof args[0] === \"string\") {\n    const match = RULE_LOAD_PATTERN.exec(args[0].replace(ANSI_PATTERN, \"\"));\n    if (match) {\n      const [, service, meta] = match;\n      write({\n        ev: \"log\",\n        level: \"info\",\n        message: `${service} load completed`,\n        meta: parseLogMeta(meta ?? \"\"),\n      });\n      return;\n    }\n  }\n  originalConsoleLog(...args);\n};\n\nconst originalConsoleWarn = console.warn.bind(console);\nconsole.warn = (...args) => {\n  if (args.length === 1 && typeof args[0] === \"string\") {\n    const line = args[0].replace(ANSI_PATTERN, \"\");\n    if (SDK_WARNING_PREFIXES.some((prefix) => line.startsWith(prefix))) {\n      write({ ev: \"log\", level: \"warn\", message: line });\n      return;\n    }\n  }\n  originalConsoleWarn(...args);\n};\n\nlet sdkPromise;\nfunction loadSdk() {\n  // OPENCODE_CURSOR_SDK_PATH lets tests substitute a fake SDK module.\n  sdkPromise ??= import(process.env.OPENCODE_CURSOR_SDK_PATH || \"@cursor/sdk\");\n  return sdkPromise;\n}\n\n/** agentId -> SDKAgent */\nconst agents = new Map();\n/** send request id -> Run (for cancel) */\nconst runs = new Map();\n\nasync function handleRequest(req) {\n  const { id, op } = req;\n  switch (op) {\n    case \"ping\": {\n      write({ id, ok: true, pid: process.pid });\n      return;\n    }\n    case \"create\":\n    case \"resume\": {\n      const { Agent } = await loadSdk();\n      const agent =\n        op === \"resume\"\n          ? await Agent.resume(req.agentId, req.options)\n          : await Agent.create(req.options);\n      agents.set(agent.agentId, agent);\n      write({ id, ok: true, agentId: agent.agentId });\n      return;\n    }\n    case \"send\": {\n      const agent = agents.get(req.agentId);\n      if (!agent) throw new Error(`unknown agent \"${req.agentId}\"`);\n      const sendOptions = {\n        ...(req.mode ? { mode: req.mode } : {}),\n        ...(req.force ? { local: { force: true } } : {}),\n        ...(req.idempotencyKey ? { idempotencyKey: req.idempotencyKey } : {}),\n        onDelta: ({ update }) => write({ id, ev: \"update\", update }),\n      };\n      const run = await agent.send(req.message, sendOptions);\n      runs.set(id, run);\n      // Acknowledge so the client can hand back a cancellable run handle.\n      write({ id, ok: true });\n      try {\n        const result = await run.wait();\n        write({ id, ev: \"result\", result });\n      } catch (err) {\n        write({ id, ev: \"error\", error: serializeError(err) });\n      } finally {\n        runs.delete(id);\n      }\n      return;\n    }\n    case \"cancel\": {\n      const run = runs.get(req.sendId);\n      if (run) await run.cancel();\n      write({ id, ok: true });\n      return;\n    }\n    case \"close\": {\n      const agent = agents.get(req.agentId);\n      agents.delete(req.agentId);\n      try {\n        agent?.close();\n      } catch {\n        // best effort\n      }\n      write({ id, ok: true });\n      return;\n    }\n    default:\n      throw new Error(`unknown op \"${op}\"`);\n  }\n}\n\nconst rl = createInterface({ input: process.stdin });\nrl.on(\"line\", (line) => {\n  if (!line.trim()) return;\n  let req;\n  try {\n    req = JSON.parse(line);\n  } catch (err) {\n    write({ id: null, ok: false, error: serializeError(err) });\n    return;\n  }\n  handleRequest(req).catch((err) => {\n    write({ id: req.id, ok: false, error: serializeError(err) });\n  });\n});\n\n// Parent gone (stdin closed) -> shut down; never outlive the plugin process.\nrl.on(\"close\", () => {\n  process.exit(0);\n});\n"],"mappings":";AAoBA,SAAS,uBAAuB;AAIhC,SAAS,eAAe,KAAK;AAC3B,MAAI,eAAe,OAAO;AACxB,UAAM,MAAM,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACnD,eAAW,KAAK,CAAC,UAAU,QAAQ,eAAe,SAAS,GAAG;AAC5D,YAAM,IAAI,IAAI,CAAC;AACf,UACE,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,MAAM;AAEb,YAAI,CAAC,IAAI;AAAA,IACb;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAAM,SAAS,SAAS,OAAO,GAAG,EAAE;AAC/C;AAEA,SAAS,MAAM,SAAS;AACtB,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI;AACrD;AAGA,IAAM,eAAe;AAYrB,IAAM,oBACJ;AAGF,IAAM,uBAAuB;AAAA,EAC3B;AACF;AAEA,SAAS,aAAa,KAAK;AACzB,QAAM,MAAM,CAAC;AACb,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AACjC,UAAM,CAAC,KAAK,KAAK,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACxD,QAAI,CAAC,OAAO,UAAU,OAAW;AACjC,UAAM,MAAM,OAAO,KAAK;AACxB,QAAI,OAAO,SAAS,GAAG,EAAG,KAAI,GAAG,IAAI;AAAA,EACvC;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB,QAAQ,IAAI,KAAK,OAAO;AACnD,QAAQ,MAAM,IAAI,SAAS;AACzB,MAAI,KAAK,WAAW,KAAK,OAAO,KAAK,CAAC,MAAM,UAAU;AACpD,UAAM,QAAQ,kBAAkB,KAAK,KAAK,CAAC,EAAE,QAAQ,cAAc,EAAE,CAAC;AACtE,QAAI,OAAO;AACT,YAAM,CAAC,EAAE,SAAS,IAAI,IAAI;AAC1B,YAAM;AAAA,QACJ,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,SAAS,GAAG,OAAO;AAAA,QACnB,MAAM,aAAa,QAAQ,EAAE;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAAA,EACF;AACA,qBAAmB,GAAG,IAAI;AAC5B;AAEA,IAAM,sBAAsB,QAAQ,KAAK,KAAK,OAAO;AACrD,QAAQ,OAAO,IAAI,SAAS;AAC1B,MAAI,KAAK,WAAW,KAAK,OAAO,KAAK,CAAC,MAAM,UAAU;AACpD,UAAM,OAAO,KAAK,CAAC,EAAE,QAAQ,cAAc,EAAE;AAC7C,QAAI,qBAAqB,KAAK,CAAC,WAAW,KAAK,WAAW,MAAM,CAAC,GAAG;AAClE,YAAM,EAAE,IAAI,OAAO,OAAO,QAAQ,SAAS,KAAK,CAAC;AACjD;AAAA,IACF;AAAA,EACF;AACA,sBAAoB,GAAG,IAAI;AAC7B;AAEA,IAAI;AACJ,SAAS,UAAU;AAEjB,iBAAe,OAAO,QAAQ,IAAI,4BAA4B;AAC9D,SAAO;AACT;AAGA,IAAM,SAAS,oBAAI,IAAI;AAEvB,IAAM,OAAO,oBAAI,IAAI;AAErB,eAAe,cAAc,KAAK;AAChC,QAAM,EAAE,IAAI,GAAG,IAAI;AACnB,UAAQ,IAAI;AAAA,IACV,KAAK,QAAQ;AACX,YAAM,EAAE,IAAI,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC;AACxC;AAAA,IACF;AAAA,IACA,KAAK;AAAA,IACL,KAAK,UAAU;AACb,YAAM,EAAE,MAAM,IAAI,MAAM,QAAQ;AAChC,YAAM,QACJ,OAAO,WACH,MAAM,MAAM,OAAO,IAAI,SAAS,IAAI,OAAO,IAC3C,MAAM,MAAM,OAAO,IAAI,OAAO;AACpC,aAAO,IAAI,MAAM,SAAS,KAAK;AAC/B,YAAM,EAAE,IAAI,IAAI,MAAM,SAAS,MAAM,QAAQ,CAAC;AAC9C;AAAA,IACF;AAAA,IACA,KAAK,QAAQ;AACX,YAAM,QAAQ,OAAO,IAAI,IAAI,OAAO;AACpC,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,kBAAkB,IAAI,OAAO,GAAG;AAC5D,YAAM,cAAc;AAAA,QAClB,GAAI,IAAI,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAAA,QACrC,GAAI,IAAI,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,IAAI,CAAC;AAAA,QAC9C,GAAI,IAAI,iBAAiB,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,QACnE,SAAS,CAAC,EAAE,OAAO,MAAM,MAAM,EAAE,IAAI,IAAI,UAAU,OAAO,CAAC;AAAA,MAC7D;AACA,YAAM,MAAM,MAAM,MAAM,KAAK,IAAI,SAAS,WAAW;AACrD,WAAK,IAAI,IAAI,GAAG;AAEhB,YAAM,EAAE,IAAI,IAAI,KAAK,CAAC;AACtB,UAAI;AACF,cAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,cAAM,EAAE,IAAI,IAAI,UAAU,OAAO,CAAC;AAAA,MACpC,SAAS,KAAK;AACZ,cAAM,EAAE,IAAI,IAAI,SAAS,OAAO,eAAe,GAAG,EAAE,CAAC;AAAA,MACvD,UAAE;AACA,aAAK,OAAO,EAAE;AAAA,MAChB;AACA;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AACb,YAAM,MAAM,KAAK,IAAI,IAAI,MAAM;AAC/B,UAAI,IAAK,OAAM,IAAI,OAAO;AAC1B,YAAM,EAAE,IAAI,IAAI,KAAK,CAAC;AACtB;AAAA,IACF;AAAA,IACA,KAAK,SAAS;AACZ,YAAM,QAAQ,OAAO,IAAI,IAAI,OAAO;AACpC,aAAO,OAAO,IAAI,OAAO;AACzB,UAAI;AACF,eAAO,MAAM;AAAA,MACf,QAAQ;AAAA,MAER;AACA,YAAM,EAAE,IAAI,IAAI,KAAK,CAAC;AACtB;AAAA,IACF;AAAA,IACA;AACE,YAAM,IAAI,MAAM,eAAe,EAAE,GAAG;AAAA,EACxC;AACF;AAEA,IAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,MAAM,CAAC;AACnD,GAAG,GAAG,QAAQ,CAAC,SAAS;AACtB,MAAI,CAAC,KAAK,KAAK,EAAG;AAClB,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,IAAI;AAAA,EACvB,SAAS,KAAK;AACZ,UAAM,EAAE,IAAI,MAAM,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,CAAC;AACzD;AAAA,EACF;AACA,gBAAc,GAAG,EAAE,MAAM,CAAC,QAAQ;AAChC,UAAM,EAAE,IAAI,IAAI,IAAI,IAAI,OAAO,OAAO,eAAe,GAAG,EAAE,CAAC;AAAA,EAC7D,CAAC;AACH,CAAC;AAGD,GAAG,GAAG,SAAS,MAAM;AACnB,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}

package/dist/sidecar/plugin-tools-mcp.d.ts

@@ -0,0 +1,189 @@
+import { createInterface } from 'node:readline';
+import { fileURLToPath } from 'node:url';
+
+/**
+ * stdio MCP server that exposes opencode plugins' custom tools to the Cursor
+ * agent. Spawned by the plugin with `OPENCODE_PLUGIN_TOOLS_TOKEN` in env; it
+ * talks to the host plugin over a localhost HTTP control channel (also
+ * token-authenticated) that owns the real tool closures.
+ *
+ * Wire protocol (control channel):
+ *   GET  /tools                 → { tools: [{id, description, parameters}] }
+ *   POST /call {id, args}       → { ok, title?, output?, error? }
+ *
+ * Every `tools/call` from Cursor becomes one POST /call; the host executes
+ * the mirrored tool with a permission-gated ToolContext and returns the
+ * result. Plain JSON-lines stdio MCP on the other side (see run()).
+ *
+ * Kept as plain .mjs so tests can spawn it pre-build; tsup bundles it to
+ * dist/sidecar/plugin-tools-mcp.js for production.
+ */
+
+const CONTROL_PORT = Number(process.env.OPENCODE_PLUGIN_TOOLS_PORT ?? 0);
+const TOKEN = process.env.OPENCODE_PLUGIN_TOOLS_TOKEN ?? "";
+const SERVER_NAME = "opencode-plugin-tools";
+const SERVER_VERSION = "1.0.0";
+// The single protocol version this server implements. Never echo the
+// client-proposed version — MCP servers must answer with a version they
+// actually support.
+const PROTOCOL_VERSION = "2025-06-18";
+
+function logErr(message, extra) {
+  try {
+    process.stderr.write(
+      `[plugin-tools-mcp] ${message}${extra ? ` ${JSON.stringify(extra)}` : ""}\n`,
+    );
+  } catch {
+    // never throw from logging
+  }
+}
+
+async function controlRequest(path, body, timeoutMs) {
+  const res = await fetch(`http://127.0.0.1:${CONTROL_PORT}${path}`, {
+    method: body ? "POST" : "GET",
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${TOKEN}`,
+    },
+    body: body ? JSON.stringify(body) : undefined,
+    // A stale/hung port must not hang Cursor's MCP discovery (tools/list) or
+    // block a tool call forever. Loopback list is instant; calls get a
+    // generous ceiling because plugin tools can legitimately run for minutes.
+    signal: AbortSignal.timeout(timeoutMs),
+  });
+  const text = await res.text();
+  let json;
+  try {
+    json = JSON.parse(text);
+  } catch {
+    json = undefined;
+  }
+  if (!res.ok) {
+    const message = json?.error ?? `control channel ${res.status}`;
+    throw new Error(message);
+  }
+  return json;
+}
+
+async function listTools() {
+  try {
+    const data = await controlRequest("/tools", undefined, 5_000);
+    return data?.tools ?? [];
+  } catch (err) {
+    logErr("tools/list failed", { error: String(err) });
+    return [];
+  }
+}
+
+async function callTool(name, args) {
+  try {
+    const data = await controlRequest(
+      "/call",
+      { id: name, args: args ?? {} },
+      300_000,
+    );
+    if (data?.ok === false) {
+      return {
+        isError: true,
+        content: [{ type: "text", text: data.error ?? "tool call failed" }],
+      };
+    }
+    const output = data?.output ?? "";
+    const title = data?.title ? `${data.title}\n\n` : "";
+    return { content: [{ type: "text", text: `${title}${output}` }] };
+  } catch (err) {
+    return { isError: true, content: [{ type: "text", text: String(err) }] };
+  }
+}
+
+/** Handle one MCP request and return the response payload (or undefined for notifications). */
+async function handle(msg) {
+  const { id, method, params } = msg;
+  const reply = (result) => ({ jsonrpc: "2.0", id, result });
+  const error = (code, message) => ({
+    jsonrpc: "2.0",
+    id,
+    error: { code, message },
+  });
+
+  switch (method) {
+    case "initialize":
+      return reply({
+        protocolVersion: PROTOCOL_VERSION,
+        capabilities: { tools: { listChanged: false } },
+        serverInfo: { name: SERVER_NAME, version: SERVER_VERSION },
+        instructions:
+          "Tools provided by opencode plugins, bridged into the Cursor agent. " +
+          "Each call runs the plugin's real implementation inside opencode's runtime.",
+      });
+    case "notifications/initialized":
+      return undefined;
+    case "ping":
+      return reply({});
+    case "tools/list": {
+      const tools = await listTools();
+      return reply({
+        tools: tools.map((t) => ({
+          name: t.id,
+          description: t.description,
+          inputSchema: t.parameters ?? { type: "object", properties: {} },
+        })),
+      });
+    }
+    case "tools/call": {
+      const result = await callTool(params?.name, params?.arguments);
+      return reply(result);
+    }
+    default:
+      if (id === undefined) return undefined; // unknown notification
+      return error(-32601, `method not found: ${method}`);
+  }
+}
+
+function run() {
+  if (!CONTROL_PORT || !TOKEN) {
+    logErr("missing OPENCODE_PLUGIN_TOOLS_PORT/TOKEN env; exiting");
+    process.exit(1);
+  }
+  const rl = createInterface({ input: process.stdin, terminal: false });
+  rl.on("line", async (line) => {
+    const trimmed = line.trim();
+    if (!trimmed) return;
+    let msg;
+    try {
+      msg = JSON.parse(trimmed);
+    } catch {
+      process.stdout.write(
+        JSON.stringify({
+          jsonrpc: "2.0",
+          id: null,
+          error: { code: -32700, message: "parse error" },
+        }) + "\n",
+      );
+      return;
+    }
+    try {
+      const response = await handle(msg);
+      if (response !== undefined) {
+        process.stdout.write(JSON.stringify(response) + "\n");
+      }
+    } catch (err) {
+      if (msg.id !== undefined) {
+        process.stdout.write(
+          JSON.stringify({
+            jsonrpc: "2.0",
+            id: msg.id,
+            error: { code: -32603, message: String(err) },
+          }) + "\n",
+        );
+      }
+    }
+  });
+  rl.on("close", () => process.exit(0));
+  // Keep the process alive until stdin closes (Cursor owns the lifecycle).
+  process.stdin.resume();
+}
+const scriptFile = fileURLToPath(import.meta.url);
+if (process.argv[1] === scriptFile) run();
+
+export { callTool, handle, listTools };

package/dist/sidecar/plugin-tools-mcp.js

@@ -0,0 +1,163 @@
+// src/sidecar/plugin-tools-mcp.mjs
+import { createInterface } from "readline";
+import { fileURLToPath } from "url";
+var CONTROL_PORT = Number(process.env.OPENCODE_PLUGIN_TOOLS_PORT ?? 0);
+var TOKEN = process.env.OPENCODE_PLUGIN_TOOLS_TOKEN ?? "";
+var SERVER_NAME = "opencode-plugin-tools";
+var SERVER_VERSION = "1.0.0";
+var PROTOCOL_VERSION = "2025-06-18";
+function logErr(message, extra) {
+  try {
+    process.stderr.write(
+      `[plugin-tools-mcp] ${message}${extra ? ` ${JSON.stringify(extra)}` : ""}
+`
+    );
+  } catch {
+  }
+}
+async function controlRequest(path, body, timeoutMs) {
+  const res = await fetch(`http://127.0.0.1:${CONTROL_PORT}${path}`, {
+    method: body ? "POST" : "GET",
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${TOKEN}`
+    },
+    body: body ? JSON.stringify(body) : void 0,
+    // A stale/hung port must not hang Cursor's MCP discovery (tools/list) or
+    // block a tool call forever. Loopback list is instant; calls get a
+    // generous ceiling because plugin tools can legitimately run for minutes.
+    signal: AbortSignal.timeout(timeoutMs)
+  });
+  const text = await res.text();
+  let json;
+  try {
+    json = JSON.parse(text);
+  } catch {
+    json = void 0;
+  }
+  if (!res.ok) {
+    const message = json?.error ?? `control channel ${res.status}`;
+    throw new Error(message);
+  }
+  return json;
+}
+async function listTools() {
+  try {
+    const data = await controlRequest("/tools", void 0, 5e3);
+    return data?.tools ?? [];
+  } catch (err) {
+    logErr("tools/list failed", { error: String(err) });
+    return [];
+  }
+}
+async function callTool(name, args) {
+  try {
+    const data = await controlRequest(
+      "/call",
+      { id: name, args: args ?? {} },
+      3e5
+    );
+    if (data?.ok === false) {
+      return {
+        isError: true,
+        content: [{ type: "text", text: data.error ?? "tool call failed" }]
+      };
+    }
+    const output = data?.output ?? "";
+    const title = data?.title ? `${data.title}
+
+` : "";
+    return { content: [{ type: "text", text: `${title}${output}` }] };
+  } catch (err) {
+    return { isError: true, content: [{ type: "text", text: String(err) }] };
+  }
+}
+async function handle(msg) {
+  const { id, method, params } = msg;
+  const reply = (result) => ({ jsonrpc: "2.0", id, result });
+  const error = (code, message) => ({
+    jsonrpc: "2.0",
+    id,
+    error: { code, message }
+  });
+  switch (method) {
+    case "initialize":
+      return reply({
+        protocolVersion: PROTOCOL_VERSION,
+        capabilities: { tools: { listChanged: false } },
+        serverInfo: { name: SERVER_NAME, version: SERVER_VERSION },
+        instructions: "Tools provided by opencode plugins, bridged into the Cursor agent. Each call runs the plugin's real implementation inside opencode's runtime."
+      });
+    case "notifications/initialized":
+      return void 0;
+    case "ping":
+      return reply({});
+    case "tools/list": {
+      const tools = await listTools();
+      return reply({
+        tools: tools.map((t) => ({
+          name: t.id,
+          description: t.description,
+          inputSchema: t.parameters ?? { type: "object", properties: {} }
+        }))
+      });
+    }
+    case "tools/call": {
+      const result = await callTool(params?.name, params?.arguments);
+      return reply(result);
+    }
+    default:
+      if (id === void 0) return void 0;
+      return error(-32601, `method not found: ${method}`);
+  }
+}
+function run() {
+  if (!CONTROL_PORT || !TOKEN) {
+    logErr("missing OPENCODE_PLUGIN_TOOLS_PORT/TOKEN env; exiting");
+    process.exit(1);
+  }
+  const rl = createInterface({ input: process.stdin, terminal: false });
+  rl.on("line", async (line) => {
+    const trimmed = line.trim();
+    if (!trimmed) return;
+    let msg;
+    try {
+      msg = JSON.parse(trimmed);
+    } catch {
+      process.stdout.write(
+        JSON.stringify({
+          jsonrpc: "2.0",
+          id: null,
+          error: { code: -32700, message: "parse error" }
+        }) + "\n"
+      );
+      return;
+    }
+    try {
+      const response = await handle(msg);
+      if (response !== void 0) {
+        process.stdout.write(JSON.stringify(response) + "\n");
+      }
+    } catch (err) {
+      if (msg.id !== void 0) {
+        process.stdout.write(
+          JSON.stringify({
+            jsonrpc: "2.0",
+            id: msg.id,
+            error: { code: -32603, message: String(err) }
+          }) + "\n"
+        );
+      }
+    }
+  });
+  rl.on("close", () => process.exit(0));
+  process.stdin.resume();
+}
+var scriptFile = fileURLToPath(import.meta.url);
+if (process.argv[1] === scriptFile) run();
+export {
+  callTool,
+  handle,
+  listTools
+};
+//# sourceMappingURL=plugin-tools-mcp.js.map

package/dist/sidecar/plugin-tools-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/sidecar/plugin-tools-mcp.mjs"],"sourcesContent":["/**\n * stdio MCP server that exposes opencode plugins' custom tools to the Cursor\n * agent. Spawned by the plugin with `OPENCODE_PLUGIN_TOOLS_TOKEN` in env; it\n * talks to the host plugin over a localhost HTTP control channel (also\n * token-authenticated) that owns the real tool closures.\n *\n * Wire protocol (control channel):\n *   GET  /tools                 → { tools: [{id, description, parameters}] }\n *   POST /call {id, args}       → { ok, title?, output?, error? }\n *\n * Every `tools/call` from Cursor becomes one POST /call; the host executes\n * the mirrored tool with a permission-gated ToolContext and returns the\n * result. Plain JSON-lines stdio MCP on the other side (see run()).\n *\n * Kept as plain .mjs so tests can spawn it pre-build; tsup bundles it to\n * dist/sidecar/plugin-tools-mcp.js for production.\n */\nimport { createInterface } from \"node:readline\";\n\nconst CONTROL_PORT = Number(process.env.OPENCODE_PLUGIN_TOOLS_PORT ?? 0);\nconst TOKEN = process.env.OPENCODE_PLUGIN_TOOLS_TOKEN ?? \"\";\nconst SERVER_NAME = \"opencode-plugin-tools\";\nconst SERVER_VERSION = \"1.0.0\";\n// The single protocol version this server implements. Never echo the\n// client-proposed version — MCP servers must answer with a version they\n// actually support.\nconst PROTOCOL_VERSION = \"2025-06-18\";\n\nfunction logErr(message, extra) {\n  try {\n    process.stderr.write(\n      `[plugin-tools-mcp] ${message}${extra ? ` ${JSON.stringify(extra)}` : \"\"}\\n`,\n    );\n  } catch {\n    // never throw from logging\n  }\n}\n\nasync function controlRequest(path, body, timeoutMs) {\n  const res = await fetch(`http://127.0.0.1:${CONTROL_PORT}${path}`, {\n    method: body ? \"POST\" : \"GET\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${TOKEN}`,\n    },\n    body: body ? JSON.stringify(body) : undefined,\n    // A stale/hung port must not hang Cursor's MCP discovery (tools/list) or\n    // block a tool call forever. Loopback list is instant; calls get a\n    // generous ceiling because plugin tools can legitimately run for minutes.\n    signal: AbortSignal.timeout(timeoutMs),\n  });\n  const text = await res.text();\n  let json;\n  try {\n    json = JSON.parse(text);\n  } catch {\n    json = undefined;\n  }\n  if (!res.ok) {\n    const message = json?.error ?? `control channel ${res.status}`;\n    throw new Error(message);\n  }\n  return json;\n}\n\nasync function listTools() {\n  try {\n    const data = await controlRequest(\"/tools\", undefined, 5_000);\n    return data?.tools ?? [];\n  } catch (err) {\n    logErr(\"tools/list failed\", { error: String(err) });\n    return [];\n  }\n}\n\nasync function callTool(name, args) {\n  try {\n    const data = await controlRequest(\n      \"/call\",\n      { id: name, args: args ?? {} },\n      300_000,\n    );\n    if (data?.ok === false) {\n      return {\n        isError: true,\n        content: [{ type: \"text\", text: data.error ?? \"tool call failed\" }],\n      };\n    }\n    const output = data?.output ?? \"\";\n    const title = data?.title ? `${data.title}\\n\\n` : \"\";\n    return { content: [{ type: \"text\", text: `${title}${output}` }] };\n  } catch (err) {\n    return { isError: true, content: [{ type: \"text\", text: String(err) }] };\n  }\n}\n\n/** Handle one MCP request and return the response payload (or undefined for notifications). */\nasync function handle(msg) {\n  const { id, method, params } = msg;\n  const reply = (result) => ({ jsonrpc: \"2.0\", id, result });\n  const error = (code, message) => ({\n    jsonrpc: \"2.0\",\n    id,\n    error: { code, message },\n  });\n\n  switch (method) {\n    case \"initialize\":\n      return reply({\n        protocolVersion: PROTOCOL_VERSION,\n        capabilities: { tools: { listChanged: false } },\n        serverInfo: { name: SERVER_NAME, version: SERVER_VERSION },\n        instructions:\n          \"Tools provided by opencode plugins, bridged into the Cursor agent. \" +\n          \"Each call runs the plugin's real implementation inside opencode's runtime.\",\n      });\n    case \"notifications/initialized\":\n      return undefined;\n    case \"ping\":\n      return reply({});\n    case \"tools/list\": {\n      const tools = await listTools();\n      return reply({\n        tools: tools.map((t) => ({\n          name: t.id,\n          description: t.description,\n          inputSchema: t.parameters ?? { type: \"object\", properties: {} },\n        })),\n      });\n    }\n    case \"tools/call\": {\n      const result = await callTool(params?.name, params?.arguments);\n      return reply(result);\n    }\n    default:\n      if (id === undefined) return undefined; // unknown notification\n      return error(-32601, `method not found: ${method}`);\n  }\n}\n\nfunction run() {\n  if (!CONTROL_PORT || !TOKEN) {\n    logErr(\"missing OPENCODE_PLUGIN_TOOLS_PORT/TOKEN env; exiting\");\n    process.exit(1);\n  }\n  const rl = createInterface({ input: process.stdin, terminal: false });\n  rl.on(\"line\", async (line) => {\n    const trimmed = line.trim();\n    if (!trimmed) return;\n    let msg;\n    try {\n      msg = JSON.parse(trimmed);\n    } catch {\n      process.stdout.write(\n        JSON.stringify({\n          jsonrpc: \"2.0\",\n          id: null,\n          error: { code: -32700, message: \"parse error\" },\n        }) + \"\\n\",\n      );\n      return;\n    }\n    try {\n      const response = await handle(msg);\n      if (response !== undefined) {\n        process.stdout.write(JSON.stringify(response) + \"\\n\");\n      }\n    } catch (err) {\n      if (msg.id !== undefined) {\n        process.stdout.write(\n          JSON.stringify({\n            jsonrpc: \"2.0\",\n            id: msg.id,\n            error: { code: -32603, message: String(err) },\n          }) + \"\\n\",\n        );\n      }\n    }\n  });\n  rl.on(\"close\", () => process.exit(0));\n  // Keep the process alive until stdin closes (Cursor owns the lifecycle).\n  process.stdin.resume();\n}\n\n// Start the stdio loop only when spawned as the entry script (Cursor owns\n// the lifecycle). Tests import the handlers above without triggering it.\nimport { fileURLToPath } from \"node:url\";\nconst scriptFile = fileURLToPath(import.meta.url);\nif (process.argv[1] === scriptFile) run();\n\nexport { handle, listTools, callTool };\n"],"mappings":";AAiBA,SAAS,uBAAuB;AAyKhC,SAAS,qBAAqB;AAvK9B,IAAM,eAAe,OAAO,QAAQ,IAAI,8BAA8B,CAAC;AACvE,IAAM,QAAQ,QAAQ,IAAI,+BAA+B;AACzD,IAAM,cAAc;AACpB,IAAM,iBAAiB;AAIvB,IAAM,mBAAmB;AAEzB,SAAS,OAAO,SAAS,OAAO;AAC9B,MAAI;AACF,YAAQ,OAAO;AAAA,MACb,sBAAsB,OAAO,GAAG,QAAQ,IAAI,KAAK,UAAU,KAAK,CAAC,KAAK,EAAE;AAAA;AAAA,IAC1E;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,eAAe,eAAe,MAAM,MAAM,WAAW;AACnD,QAAM,MAAM,MAAM,MAAM,oBAAoB,YAAY,GAAG,IAAI,IAAI;AAAA,IACjE,QAAQ,OAAO,SAAS;AAAA,IACxB,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK;AAAA,IAChC;AAAA,IACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA;AAAA;AAAA;AAAA,IAIpC,QAAQ,YAAY,QAAQ,SAAS;AAAA,EACvC,CAAC;AACD,QAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,UAAU,MAAM,SAAS,mBAAmB,IAAI,MAAM;AAC5D,UAAM,IAAI,MAAM,OAAO;AAAA,EACzB;AACA,SAAO;AACT;AAEA,eAAe,YAAY;AACzB,MAAI;AACF,UAAM,OAAO,MAAM,eAAe,UAAU,QAAW,GAAK;AAC5D,WAAO,MAAM,SAAS,CAAC;AAAA,EACzB,SAAS,KAAK;AACZ,WAAO,qBAAqB,EAAE,OAAO,OAAO,GAAG,EAAE,CAAC;AAClD,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAe,SAAS,MAAM,MAAM;AAClC,MAAI;AACF,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA,EAAE,IAAI,MAAM,MAAM,QAAQ,CAAC,EAAE;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,MAAM,OAAO,OAAO;AACtB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,SAAS,mBAAmB,CAAC;AAAA,MACpE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,UAAU;AAC/B,UAAM,QAAQ,MAAM,QAAQ,GAAG,KAAK,KAAK;AAAA;AAAA,IAAS;AAClD,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;AAAA,EAClE,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,MAAM,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE;AAAA,EACzE;AACF;AAGA,eAAe,OAAO,KAAK;AACzB,QAAM,EAAE,IAAI,QAAQ,OAAO,IAAI;AAC/B,QAAM,QAAQ,CAAC,YAAY,EAAE,SAAS,OAAO,IAAI,OAAO;AACxD,QAAM,QAAQ,CAAC,MAAM,aAAa;AAAA,IAChC,SAAS;AAAA,IACT;AAAA,IACA,OAAO,EAAE,MAAM,QAAQ;AAAA,EACzB;AAEA,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO,MAAM;AAAA,QACX,iBAAiB;AAAA,QACjB,cAAc,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;AAAA,QAC9C,YAAY,EAAE,MAAM,aAAa,SAAS,eAAe;AAAA,QACzD,cACE;AAAA,MAEJ,CAAC;AAAA,IACH,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,MAAM,CAAC,CAAC;AAAA,IACjB,KAAK,cAAc;AACjB,YAAM,QAAQ,MAAM,UAAU;AAC9B,aAAO,MAAM;AAAA,QACX,OAAO,MAAM,IAAI,CAAC,OAAO;AAAA,UACvB,MAAM,EAAE;AAAA,UACR,aAAa,EAAE;AAAA,UACf,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,QAChE,EAAE;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,IACA,KAAK,cAAc;AACjB,YAAM,SAAS,MAAM,SAAS,QAAQ,MAAM,QAAQ,SAAS;AAC7D,aAAO,MAAM,MAAM;AAAA,IACrB;AAAA,IACA;AACE,UAAI,OAAO,OAAW,QAAO;AAC7B,aAAO,MAAM,QAAQ,qBAAqB,MAAM,EAAE;AAAA,EACtD;AACF;AAEA,SAAS,MAAM;AACb,MAAI,CAAC,gBAAgB,CAAC,OAAO;AAC3B,WAAO,uDAAuD;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,UAAU,MAAM,CAAC;AACpE,KAAG,GAAG,QAAQ,OAAO,SAAS;AAC5B,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACJ,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,IAC1B,QAAQ;AACN,cAAQ,OAAO;AAAA,QACb,KAAK,UAAU;AAAA,UACb,SAAS;AAAA,UACT,IAAI;AAAA,UACJ,OAAO,EAAE,MAAM,QAAQ,SAAS,cAAc;AAAA,QAChD,CAAC,IAAI;AAAA,MACP;AACA;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,MAAM,OAAO,GAAG;AACjC,UAAI,aAAa,QAAW;AAC1B,gBAAQ,OAAO,MAAM,KAAK,UAAU,QAAQ,IAAI,IAAI;AAAA,MACtD;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,IAAI,OAAO,QAAW;AACxB,gBAAQ,OAAO;AAAA,UACb,KAAK,UAAU;AAAA,YACb,SAAS;AAAA,YACT,IAAI,IAAI;AAAA,YACR,OAAO,EAAE,MAAM,QAAQ,SAAS,OAAO,GAAG,EAAE;AAAA,UAC9C,CAAC,IAAI;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,KAAG,GAAG,SAAS,MAAM,QAAQ,KAAK,CAAC,CAAC;AAEpC,UAAQ,MAAM,OAAO;AACvB;AAKA,IAAM,aAAa,cAAc,YAAY,GAAG;AAChD,IAAI,QAAQ,KAAK,CAAC,MAAM,WAAY,KAAI;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stablekernel/opencode-cursor",
-  "version": "0.8.0",
+  "version": "0.9.0-next.1",
   "description": "opencode provider plugin backed by the official Cursor SDK (@cursor/sdk) — adds a Cursor provider and lists its models",
   "type": "module",
   "license": "MIT",
@@ -59,11 +59,11 @@
   "dependencies": {
     "@connectrpc/connect-node": "^2.1.2",
     "@cursor/sdk": "^1.0.24",
-    "@opencode-ai/plugin": "^1.18.4",
+    "@opencode-ai/plugin": "^1.18.21",
     "semver": "^7.8.4"
   },
   "overrides": {
-    "undici": "^6.24.0",
+    "undici": "^6.28.0",
     "tar": "^7.5.11",
     "node-gyp": "^12.4.0",
     "esbuild": "^0.28.1"
@@ -72,10 +72,10 @@
     "@ai-sdk/provider": "^3.0.0"
   },
   "devDependencies": {
-    "@ai-sdk/provider": "^3.0.13",
-    "@opencode-ai/sdk": "^1.18.4",
-    "@types/node": "^26.0.0",
-    "@types/semver": "^7.7.1",
+    "@ai-sdk/provider": "^3.0.15",
+    "@opencode-ai/sdk": "^1.18.21",
+    "@types/node": "^26.2.0",
+    "@types/semver": "^7.8.0",
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8"