@xiaoso/dsh-tool-plus 0.1.0-beta.2 → 0.1.0-beta.3

package/lib/cursor-BIQfBC6V.mjs

@@ -0,0 +1,135 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { r as __exportAll } from "./fs-promises-shim-B-9cMxz5.mjs";
+import { c as OAuthError } from "./error-B3bevhrs.mjs";
+import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/cursor.ts
+var cursor_exports = /* @__PURE__ */ __exportAll({
+	extractCursorAccessTokenUserId: () => extractCursorAccessTokenUserId,
+	generateCursorAuthParams: () => generateCursorAuthParams,
+	loginCursor: () => loginCursor,
+	pollCursorAuth: () => pollCursorAuth,
+	refreshCursorToken: () => refreshCursorToken
+});
+const CURSOR_LOGIN_URL = "https://cursor.com/loginDeepControl";
+const CURSOR_POLL_URL = "https://api2.cursor.sh/auth/poll";
+const CURSOR_REFRESH_URL = "https://api2.cursor.sh/auth/exchange_user_api_key";
+const POLL_MAX_ATTEMPTS = 150;
+const POLL_BASE_DELAY = 1e3;
+const POLL_MAX_DELAY = 1e4;
+const POLL_BACKOFF_MULTIPLIER = 1.2;
+async function generateCursorAuthParams() {
+	const { verifier, challenge } = await generatePKCE();
+	const uuid = crypto.randomUUID();
+	const params = new URLSearchParams({
+		challenge,
+		uuid,
+		mode: "login",
+		redirectTarget: "cli"
+	});
+	return {
+		verifier,
+		challenge,
+		uuid,
+		loginUrl: `${CURSOR_LOGIN_URL}?${params.toString()}`
+	};
+}
+async function pollCursorAuth(uuid, verifier) {
+	let delay = POLL_BASE_DELAY;
+	let consecutiveErrors = 0;
+	for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS; attempt++) {
+		await Bun.sleep(delay);
+		try {
+			const response = await fetch(`${CURSOR_POLL_URL}?uuid=${uuid}&verifier=${verifier}`);
+			if (response.status === 404) {
+				consecutiveErrors = 0;
+				delay = Math.min(delay * POLL_BACKOFF_MULTIPLIER, POLL_MAX_DELAY);
+				continue;
+			}
+			if (response.ok) {
+				const data = await response.json();
+				return {
+					accessToken: data.accessToken,
+					refreshToken: data.refreshToken
+				};
+			}
+			throw new OAuthError(`Poll failed: ${response.status}`, {
+				kind: "polling",
+				provider: "cursor",
+				status: response.status
+			});
+		} catch {
+			consecutiveErrors++;
+			if (consecutiveErrors >= 3) throw new OAuthError("Too many consecutive errors during Cursor auth polling", {
+				kind: "polling",
+				provider: "cursor"
+			});
+		}
+	}
+	throw new OAuthError("Cursor authentication polling timeout", {
+		kind: "timeout",
+		provider: "cursor"
+	});
+}
+async function loginCursor(onAuthUrl, onPollStart) {
+	const { verifier, uuid, loginUrl } = await generateCursorAuthParams();
+	onAuthUrl(loginUrl);
+	onPollStart?.();
+	const { accessToken, refreshToken } = await pollCursorAuth(uuid, verifier);
+	return {
+		access: accessToken,
+		refresh: refreshToken,
+		expires: getTokenExpiry(accessToken)
+	};
+}
+async function refreshCursorToken(apiKeyOrRefreshToken) {
+	const response = await fetch(CURSOR_REFRESH_URL, {
+		method: "POST",
+		headers: {
+			Authorization: `Bearer ${apiKeyOrRefreshToken}`,
+			"Content-Type": "application/json"
+		},
+		body: "{}"
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Cursor token refresh failed: ${error}`, {
+			kind: "token-refresh",
+			provider: "cursor"
+		});
+	}
+	const data = await response.json();
+	const expiresAt = getTokenExpiry(data.accessToken);
+	return {
+		access: data.accessToken,
+		refresh: data.refreshToken || apiKeyOrRefreshToken,
+		expires: expiresAt
+	};
+}
+function decodeCursorAccessTokenPayload(token) {
+	const parts = token.split(".");
+	if (parts.length !== 3) return void 0;
+	const payload = parts[1];
+	if (!payload) return void 0;
+	return JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/")));
+}
+function extractCursorAccessTokenUserId(accessToken) {
+	try {
+		const payload = decodeCursorAccessTokenPayload(accessToken);
+		if (!payload || typeof payload !== "object" || !("sub" in payload) || typeof payload.sub !== "string") return;
+		const { sub } = payload;
+		const parts = sub.split("|");
+		return (parts.length > 1 ? parts[1] : sub).trim() || void 0;
+	} catch {
+		return;
+	}
+}
+function getTokenExpiry(token) {
+	try {
+		const decoded = decodeCursorAccessTokenPayload(token);
+		if (decoded && typeof decoded === "object" && "exp" in decoded && typeof decoded.exp === "number") return decoded.exp * 1e3 - 3e5;
+	} catch {}
+	return Date.now() + 36e5;
+}
+//#endregion
+export { extractCursorAccessTokenUserId as n, cursor_exports as t };