@x-otto/plugin-cursor 0.1.0-alpha.0

package/src/connect-rpc/headers.ts

@@ -0,0 +1,94 @@
+import { createHash, randomUUID } from 'node:crypto'
+import { readFileSync } from 'node:fs'
+import { release, platform, arch } from 'node:os'
+
+export const CURSOR_AGENT_BACKEND = 'https://agentn.api5.cursor.sh'
+
+function loadCursorVersion(): string {
+  const env = process.env['OTTO_CURSOR_CLIENT_VERSION'] ?? process.env['CURSOR_CLIENT_VERSION']
+  if (env) return env
+  if (platform() === 'darwin') {
+    try {
+      const productPath = '/Applications/Cursor.app/Contents/Resources/app/product.json'
+      const data = JSON.parse(readFileSync(productPath, 'utf8')) as { version?: string }
+      if (data.version) return data.version
+    } catch {
+      // fall through
+    }
+  }
+  return '3.10.17'
+}
+
+function normalizeOs(): string {
+  const map: Record<string, string> = { darwin: 'darwin', linux: 'linux', win32: 'win32' }
+  return map[platform()] ?? platform()
+}
+
+function normalizeArch(): string {
+  const value = arch().toLowerCase()
+  if (value === 'x64' || value === 'amd64' || value === 'x86_64') return 'x64'
+  if (value === 'arm64' || value === 'aarch64') return 'arm64'
+  return value
+}
+
+function hashed64Hex(value: string, salt = ''): string {
+  return createHash('sha256').update(value + salt).digest('hex')
+}
+
+function cursorChecksum(token: string, machineId: string | null): string {
+  const mid = machineId ?? hashed64Hex(token, 'machineId')
+  const timestamp = Math.floor(Date.now() / 1_000_000)
+  const byteArray = new Uint8Array([
+    (timestamp >> 40) & 255,
+    (timestamp >> 32) & 255,
+    (timestamp >> 24) & 255,
+    (timestamp >> 16) & 255,
+    (timestamp >> 8) & 255,
+    timestamp & 255,
+  ])
+  let t = 165
+  for (let i = 0; i < byteArray.length; i++) {
+    byteArray[i] = ((byteArray[i]! ^ t) + (i % 256)) & 255
+    t = byteArray[i]!
+  }
+  const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_'
+  let encoded = ''
+  for (let i = 0; i < byteArray.length; i += 3) {
+    const a = byteArray[i]!
+    const b = byteArray[i + 1] ?? 0
+    const c = byteArray[i + 2] ?? 0
+    encoded += alphabet[a >> 2]
+    encoded += alphabet[((a & 3) << 4) | (b >> 4)]
+    if (i + 1 < byteArray.length) encoded += alphabet[((b & 15) << 2) | (c >> 6)]
+    if (i + 2 < byteArray.length) encoded += alphabet[c & 63]
+  }
+  return `${encoded}${mid}`
+}
+
+export function buildAgentHeaders(token: string, machineId: string | null): Record<string, string> {
+  const requestId = randomUUID()
+  const host = new URL(CURSOR_AGENT_BACKEND).host
+  return {
+    authorization: `Bearer ${token}`,
+    'connect-protocol-version': '1',
+    'user-agent': 'connect-es/1.6.1',
+    'x-amzn-trace-id': `Root=${requestId}`,
+    'x-client-key': hashed64Hex(token),
+    'x-cursor-checksum': cursorChecksum(token, machineId),
+    'x-cursor-client-version': loadCursorVersion(),
+    'x-cursor-client-type': 'ide',
+    'x-cursor-client-os': normalizeOs(),
+    'x-cursor-client-arch': normalizeArch(),
+    'x-cursor-client-os-version': release() || 'unknown',
+    'x-cursor-client-device-type': 'desktop',
+    'x-cursor-config-version': randomUUID(),
+    'x-cursor-timezone': process.env['TZ'] || 'Asia/Shanghai',
+    'x-ghost-mode': 'false',
+    'x-new-onboarding-completed': 'false',
+    'x-request-id': requestId,
+    'x-session-id': randomUUID(),
+    host,
+    'content-type': 'application/connect+proto',
+    'connect-accept-encoding': 'gzip',
+  }
+}

package/src/connect-rpc/protobuf.ts

@@ -0,0 +1,46 @@
+export function encodeVarint(value: number): Uint8Array {
+  const out: number[] = []
+  let v = value
+  while (v >= 0x80) {
+    out.push((v & 0x7f) | 0x80)
+    v >>>= 7
+  }
+  out.push(v & 0x7f)
+  return Uint8Array.from(out)
+}
+
+export function encodeField(fieldNum: number, wireType: number, value: string | Uint8Array | number): Uint8Array {
+  const tag = (fieldNum << 3) | wireType
+  const head = encodeVarint(tag)
+  if (wireType === 0) {
+    if (typeof value !== 'number') {
+      throw new TypeError('encodeField: wireType 0 (varint) requires a number value')
+    }
+    const body = encodeVarint(value)
+    const out = new Uint8Array(head.length + body.length)
+    out.set(head, 0)
+    out.set(body, head.length)
+    return out
+  }
+  if (typeof value === 'number') {
+    throw new TypeError('encodeField: length-delimited wire types require a string or Uint8Array value')
+  }
+  const bytes = typeof value === 'string' ? new TextEncoder().encode(value) : value
+  const len = encodeVarint(bytes.length)
+  const out = new Uint8Array(head.length + len.length + bytes.length)
+  out.set(head, 0)
+  out.set(len, head.length)
+  out.set(bytes, head.length + len.length)
+  return out
+}
+
+export function concatBytes(parts: Uint8Array[]): Uint8Array {
+  const total = parts.reduce((sum, p) => sum + p.length, 0)
+  const out = new Uint8Array(total)
+  let offset = 0
+  for (const part of parts) {
+    out.set(part, offset)
+    offset += part.length
+  }
+  return out
+}

package/src/cursor-provider.ts

@@ -0,0 +1,144 @@
+/**
+ * cursor-provider.ts —— Cursor Connect-RPC provider 实现（RFC-130 M131-2）。
+ *
+ * `CursorProviderStream implements ProviderStream`（`@x-otto/provider` 官方契约，RFC-140 D6：
+ * 插件代码式 provider 工厂现在编译期强类型返回真实 `ProviderStream`，不再是宽松
+ * `Record<string, unknown>` + 运行时收窄）。Cursor 后端是 Connect-RPC + Protobuf over
+ * HTTP/2（非 `wireApiSchema` 枚举的三种标准协议之一），协议编解码闭环在本插件目录内
+ * （`connect-rpc/`），不进入 `@x-otto/ai`/`@x-otto/provider`（RFC-130 D3/非目标）。
+ *
+ * 凭据解析（终局 review 修复）：不再自行 `readFileSync` 解析 `~/.config/otto/auth.json`
+ * ——那绕过了宿主统一凭据层 `AuthStore`（无 watch/无跨进程同步/无标准 env 兜底优先级）。
+ * 改为宿主注入的 `resolveAuth` 闭包（`plugin.ts` 经 `ctx.resolveProviderAuth('cursor')`
+ * 提供，对齐 `plugin-anthropic`/`plugin-github-copilot` 的既有模式——凭据解析统一走
+ * `AuthStore`，OAuth 登录态与 `CURSOR_ACCESS_TOKEN` env 兜底的优先级判定完全交给宿主，
+ * provider 本身零凭据存储知识）。`machineId`（设备指纹，非敏感凭据，仅用于构造请求头）
+ * 仍直接本地读取——它不经过 `AuthStore` 的凭据轮转/持久化语义。
+ *
+ * M131-2 明确拒绝 tools（`StreamContext.tools` 非空即抛 `CURSOR_TOOLS_NOT_SUPPORTED`，
+ * M131-3-01 WONT_FIX——agent API 仅服务端自跑内置工具，无法客户端委托）。
+ */
+import { ProviderError } from '@x-otto/shared'
+import type {
+  Message,
+  Model,
+  ResolvedAuth,
+  StreamContext,
+  StreamEvent,
+  StreamOptions,
+  ProviderStream,
+} from '@x-otto/provider'
+
+import { extractAgentText } from './connect-rpc/agent-decode'
+import { collectAgentResponse } from './connect-rpc/agent-stream'
+import { CURSOR_TOOLS_NOT_SUPPORTED } from './auth/errors'
+import { readLocalAuth } from './auth/local-credentials'
+
+function messageText(message: Message): string {
+  if (message.role !== 'user') return ''
+  if (typeof message.content === 'string') return message.content
+  return message.content
+    .filter((b) => b.type === 'text')
+    .map((b) => b.text)
+    .join('\n')
+}
+
+function buildPrompt(context: StreamContext): string {
+  const userMessages = context.messages.filter((m) => m.role === 'user')
+  const last = userMessages[userMessages.length - 1]
+  return last ? messageText(last) : ''
+}
+
+function buildAssistantMessage(model: Model, text: string) {
+  return {
+    role: 'assistant' as const,
+    content: [{ type: 'text' as const, text }],
+    api: model.api,
+    provider: model.provider,
+    model: model.id,
+    usage: {
+      inputTokens: 0,
+      outputTokens: Math.max(1, Math.ceil(text.length / 4)),
+      cacheReadTokens: 0,
+      cacheWriteTokens: 0,
+    },
+    stopReason: 'end_turn' as const,
+  }
+}
+
+export type CursorAuthResolver = () => Promise<ResolvedAuth | undefined>
+
+class CursorProviderStream implements ProviderStream {
+  readonly id = 'cursor'
+  readonly displayName = 'Cursor'
+
+  constructor(private readonly resolveAuthKey: CursorAuthResolver) {}
+
+  /** 统一鉴权解析（RFC-140 D5，`ProviderStream.resolveAuth`）——转发宿主 AuthStore 解析结果。 */
+  async resolveAuth(): Promise<ResolvedAuth> {
+    const resolved = await this.resolveAuthKey()
+    if (resolved) return resolved
+    throw new ProviderError(
+      'No Cursor credentials found. Run `otto auth login cursor` or set CURSOR_ACCESS_TOKEN.',
+      { code: 'PROVIDER_AUTH_MISSING' },
+    )
+  }
+
+  async *converse(
+    model: Model,
+    context: StreamContext,
+    _options: StreamOptions,
+    signal: AbortSignal,
+  ): AsyncIterable<StreamEvent> {
+    if (context.tools?.length) {
+      throw new ProviderError(
+        'Cursor provider does not support tool calling in M131-2 (see M131-3).',
+        { code: CURSOR_TOOLS_NOT_SUPPORTED },
+      )
+    }
+
+    const prompt = buildPrompt(context)
+    if (!prompt.trim()) {
+      throw new ProviderError('No user message to send to Cursor.', {
+        code: 'CURSOR_EMPTY_PROMPT',
+      })
+    }
+
+    const { token: accessToken } = await this.resolveAuth()
+    // machineId 是设备指纹（非敏感凭据），仅用于构造请求头校验和——读取失败（未安装
+    // Cursor IDE/非 macOS）不应阻断走 CURSOR_ACCESS_TOKEN env 兜底通道的用户，降级为
+    // null（headers.ts 的 cursorChecksum 对 null machineId 有自己的兜底派生逻辑）。
+    let machineId: string | null = null
+    try {
+      machineId = readLocalAuth().machineId
+    } catch {
+      // 静默降级：本地未安装 Cursor IDE 或非 macOS 平台时属预期路径。
+    }
+    const modelName = model.id.includes('/') ? model.id.split('/')[1]! : model.id
+    const raw = await collectAgentResponse({
+      token: accessToken,
+      machineId,
+      prompt,
+      model: modelName,
+      signal,
+    })
+
+    const text = extractAgentText(raw, prompt)
+    if (!text.trim()) {
+      throw new ProviderError('Cursor agent returned no assistant text.', {
+        code: 'CURSOR_EMPTY_RESPONSE',
+      })
+    }
+
+    const message = buildAssistantMessage(model, text)
+    yield { type: 'start', partial: message }
+    yield { type: 'text_start', index: 0, partial: message }
+    yield { type: 'text_delta', index: 0, delta: text, partial: message }
+    yield { type: 'text_end', index: 0, content: text, partial: message }
+    yield { type: 'done', reason: 'end_turn', message }
+  }
+}
+
+export function createCursorProvider(resolveAuthKey: CursorAuthResolver): ProviderStream {
+  return new CursorProviderStream(resolveAuthKey)
+}