cursor-api-proxy 0.3.0 → 0.5.0

package/README.md

@@ -84,7 +84,6 @@ To serve over HTTPS so browsers and clients trust the connection (e.g. `https://
    ```
 
 3. **Access the API** from any device on your tailnet:
-
    - Base URL: `https://macbook.tail4048eb.ts.net:8765/v1` (use your MagicDNS name and port)
    - Browsers will show a padlock; no certificate warnings when using Tailscale-issued certs.
 
@@ -105,7 +104,7 @@ This is an optional consumer-side example. `openai` is not a dependency of `curs
 import OpenAI from "openai";
 import { getOpenAIOptionsAsync } from "cursor-api-proxy";
 
-const opts = await getOpenAIOptionsAsync();  // starts proxy if needed
+const opts = await getOpenAIOptionsAsync(); // starts proxy if needed
 const client = new OpenAI(opts);
 
 const completion = await client.chat.completions.create({
@@ -122,7 +121,7 @@ For a sync config without auto-start, use `getOpenAIOptions()` and ensure the pr
 ```js
 import { createCursorProxyClient } from "cursor-api-proxy";
 
-const proxy = createCursorProxyClient();  // proxy starts on first request if needed
+const proxy = createCursorProxyClient(); // proxy starts on first request if needed
 const data = await proxy.chatCompletionsCreate({
   model: "auto",
   messages: [{ role: "user", content: "Hello" }],
@@ -144,40 +143,43 @@ const client = new OpenAI({
 
 ### Endpoints
 
-| Method | Path | Description |
-|--------|------|-------------|
-| GET | `/health` | Server and config info |
-| GET | `/v1/models` | List Cursor models (from `agent --list-models`) |
-| POST | `/v1/chat/completions` | Chat completion (OpenAI shape; supports `stream: true`) |
-| POST | `/v1/messages` | Anthropic Messages API (used by Claude Code; supports `stream: true`) |
+| Method | Path                   | Description                                                           |
+| ------ | ---------------------- | --------------------------------------------------------------------- |
+| GET    | `/health`              | Server and config info                                                |
+| GET    | `/v1/models`           | List Cursor models (from `agent --list-models`)                       |
+| POST   | `/v1/chat/completions` | Chat completion (OpenAI shape; supports `stream: true`)               |
+| POST   | `/v1/messages`         | Anthropic Messages API (used by Claude Code; supports `stream: true`) |
 
 ## Environment variables
 
 Environment handling is centralized in one module. Aliases, defaults, path resolution, platform fallbacks, and `--tailscale` host behavior are resolved consistently before the server starts.
 
-| Variable | Default | Description |
-|----------|---------|-------------|
-| `CURSOR_BRIDGE_HOST` | `127.0.0.1` | Bind address |
-| `CURSOR_BRIDGE_PORT` | `8765` | Port |
-| `CURSOR_BRIDGE_API_KEY` | — | If set, require `Authorization: Bearer <key>` on requests |
-| `CURSOR_BRIDGE_WORKSPACE` | process cwd | Workspace directory for Cursor CLI |
-| `CURSOR_BRIDGE_MODE` | — | Ignored; proxy always runs in **ask** (chat-only) mode so the CLI never creates or edits files. |
-| `CURSOR_BRIDGE_DEFAULT_MODEL` | `auto` | Default model when request omits one |
-| `CURSOR_BRIDGE_STRICT_MODEL` | `true` | Use last requested model when none specified |
-| `CURSOR_BRIDGE_FORCE` | `false` | Pass `--force` to Cursor CLI |
-| `CURSOR_BRIDGE_APPROVE_MCPS` | `false` | Pass `--approve-mcps` to Cursor CLI |
-| `CURSOR_BRIDGE_TIMEOUT_MS` | `300000` | Timeout per completion (ms) |
-| `CURSOR_BRIDGE_TLS_CERT` | — | Path to TLS certificate file (e.g. Tailscale cert). Use with `CURSOR_BRIDGE_TLS_KEY` for HTTPS. |
-| `CURSOR_BRIDGE_TLS_KEY` | — | Path to TLS private key file. Use with `CURSOR_BRIDGE_TLS_CERT` for HTTPS. |
-| `CURSOR_BRIDGE_SESSIONS_LOG` | `~/.cursor-api-proxy/sessions.log` | Path to log file; each request is appended as a line (timestamp, method, path, IP, status). |
-| `CURSOR_BRIDGE_CHAT_ONLY_WORKSPACE` | `true` | When `true` (default), the CLI runs in an empty temp dir so it **cannot read or write your project**; pure chat only. Set to `false` to pass the real workspace (e.g. for `X-Cursor-Workspace`). |
-| `CURSOR_BRIDGE_VERBOSE` | `false` | When `true`, print full request messages and response content to stdout for every completion (both stream and sync). |
-| `CURSOR_BRIDGE_MAX_MODE` | `false` | When `true`, enable Cursor **Max Mode** for all requests (larger context window, higher tool-call limits). The proxy writes `maxMode: true` to `cli-config.json` before each run. Works when using `CURSOR_AGENT_NODE`/`CURSOR_AGENT_SCRIPT` or the default Windows `.cmd` layout (node.exe + index.js next to agent.cmd). |
-| `CURSOR_AGENT_BIN` | `agent` | Path to Cursor CLI binary. Alias precedence: `CURSOR_AGENT_BIN`, then `CURSOR_CLI_BIN`, then `CURSOR_CLI_PATH`. |
-| `CURSOR_AGENT_NODE` | — | **(Windows)** Path to Node.js executable. When set together with `CURSOR_AGENT_SCRIPT`, spawns Node directly instead of going through cmd.exe, bypassing the ~8191 character command line limit. |
-| `CURSOR_AGENT_SCRIPT` | — | **(Windows)** Path to the agent script (e.g. `agent.cmd` or the underlying `.js`). Use with `CURSOR_AGENT_NODE` to bypass cmd.exe for long prompts. |
+| Variable                            | Default                            | Description                                                                                                                                                                                                                                                                                                                |
+| ----------------------------------- | ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `CURSOR_BRIDGE_HOST`                | `127.0.0.1`                        | Bind address                                                                                                                                                                                                                                                                                                               |
+| `CURSOR_BRIDGE_PORT`                | `8765`                             | Port                                                                                                                                                                                                                                                                                                                       |
+| `CURSOR_BRIDGE_API_KEY`             | —                                  | If set, require `Authorization: Bearer <key>` on requests                                                                                                                                                                                                                                                                  |
+| `CURSOR_BRIDGE_WORKSPACE`           | process cwd                        | Workspace directory for Cursor CLI                                                                                                                                                                                                                                                                                         |
+| `CURSOR_BRIDGE_MODE`                | —                                  | Ignored; proxy always runs in **ask** (chat-only) mode so the CLI never creates or edits files.                                                                                                                                                                                                                            |
+| `CURSOR_BRIDGE_DEFAULT_MODEL`       | `auto`                             | Default model when request omits one                                                                                                                                                                                                                                                                                       |
+| `CURSOR_BRIDGE_STRICT_MODEL`        | `true`                             | Use last requested model when none specified                                                                                                                                                                                                                                                                               |
+| `CURSOR_BRIDGE_FORCE`               | `false`                            | Pass `--force` to Cursor CLI                                                                                                                                                                                                                                                                                               |
+| `CURSOR_BRIDGE_APPROVE_MCPS`        | `false`                            | Pass `--approve-mcps` to Cursor CLI                                                                                                                                                                                                                                                                                        |
+| `CURSOR_BRIDGE_TIMEOUT_MS`          | `300000`                           | Timeout per completion (ms)                                                                                                                                                                                                                                                                                                |
+| `CURSOR_BRIDGE_TLS_CERT`            | —                                  | Path to TLS certificate file (e.g. Tailscale cert). Use with `CURSOR_BRIDGE_TLS_KEY` for HTTPS.                                                                                                                                                                                                                            |
+| `CURSOR_BRIDGE_TLS_KEY`             | —                                  | Path to TLS private key file. Use with `CURSOR_BRIDGE_TLS_CERT` for HTTPS.                                                                                                                                                                                                                                                 |
+| `CURSOR_BRIDGE_SESSIONS_LOG`        | `~/.cursor-api-proxy/sessions.log` | Path to log file; each request is appended as a line (timestamp, method, path, IP, status).                                                                                                                                                                                                                                |
+| `CURSOR_BRIDGE_CHAT_ONLY_WORKSPACE` | `true`                             | When `true` (default), the CLI runs in an empty temp dir so it **cannot read or write your project**; pure chat only. Set to `false` to pass the real workspace (e.g. for `X-Cursor-Workspace`).                                                                                                                           |
+| `CURSOR_BRIDGE_VERBOSE`             | `false`                            | When `true`, print full request messages and response content to stdout for every completion (both stream and sync).                                                                                                                                                                                                       |
+| `CURSOR_BRIDGE_MAX_MODE`            | `false`                            | When `true`, enable Cursor **Max Mode** for all requests (larger context window, higher tool-call limits). The proxy writes `maxMode: true` to `cli-config.json` before each run. Works when using `CURSOR_AGENT_NODE`/`CURSOR_AGENT_SCRIPT` or the default Windows `.cmd` layout (node.exe + index.js next to agent.cmd). |
+| `CURSOR_CONFIG_DIRS`                | —                                  | Comma-separated list of configuration directories (e.g. `/home/user/.config/cursor-agent-1,/home/user/.config/cursor-agent-2`). Used for round-robin rotation between multiple accounts to distribute load and avoid rate limits.                                                                                          |
+| `CURSOR_BRIDGE_MULTI_PORT`          | `false`                            | When `true` and `CURSOR_CONFIG_DIRS` is set, instead of a single server doing round-robin, the proxy spawns a separate server for each configuration directory on incrementing ports (starting from `CURSOR_BRIDGE_PORT`).                                                                                                 |
+| `CURSOR_AGENT_BIN`                  | `agent`                            | Path to Cursor CLI binary. Alias precedence: `CURSOR_AGENT_BIN`, then `CURSOR_CLI_BIN`, then `CURSOR_CLI_PATH`.                                                                                                                                                                                                            |
+| `CURSOR_AGENT_NODE`                 | —                                  | **(Windows)** Path to Node.js executable. When set together with `CURSOR_AGENT_SCRIPT`, spawns Node directly instead of going through cmd.exe, bypassing the ~8191 character command line limit.                                                                                                                           |
+| `CURSOR_AGENT_SCRIPT`               | —                                  | **(Windows)** Path to the agent script (e.g. `agent.cmd` or the underlying `.js`). Use with `CURSOR_AGENT_NODE` to bypass cmd.exe for long prompts.                                                                                                                                                                        |
 
 Notes:
+
 - `--tailscale` changes the default host to `0.0.0.0` only when `CURSOR_BRIDGE_HOST` is not already set.
 - Relative paths such as `CURSOR_BRIDGE_WORKSPACE`, `CURSOR_BRIDGE_SESSIONS_LOG`, `CURSOR_BRIDGE_TLS_CERT`, and `CURSOR_BRIDGE_TLS_KEY` are resolved from the current working directory.
 
@@ -195,13 +197,58 @@ set CURSOR_AGENT_SCRIPT=C:\path\to\Cursor\resources\agent\agent.cmd
 
 CLI flags:
 
-| Flag | Description |
-|------|-------------|
-| `--tailscale` | Bind to `0.0.0.0` for access from tailnet/LAN (unless `CURSOR_BRIDGE_HOST` is already set) |
-| `-h`, `--help` | Show CLI usage |
+| Flag           | Description                                                                                |
+| -------------- | ------------------------------------------------------------------------------------------ |
+| `--tailscale`  | Bind to `0.0.0.0` for access from tailnet/LAN (unless `CURSOR_BRIDGE_HOST` is already set) |
+| `-h`, `--help` | Show CLI usage                                                                             |
 
 Optional per-request override: send header `X-Cursor-Workspace: <path>` to use a different workspace for that request.
 
+## Multi-Account Setup
+
+You can use multiple Cursor accounts to distribute load and avoid hitting usage limits. The proxy now includes a built-in account manager that makes this very easy.
+
+### 1. Adding Accounts (Easy Method)
+
+You can add new accounts using the CLI `login` command. This will launch the Cursor CLI login process in an isolated profile directory (`~/.cursor-api-proxy/accounts/`).
+
+```bash
+npx cursor-api-proxy login account1
+```
+
+_(A clean, incognito browser window will open for you to log into Cursor. Once done, the session is saved)._
+
+Repeat this for as many accounts as you want:
+
+```bash
+npx cursor-api-proxy login account2
+npx cursor-api-proxy login account3
+```
+
+**Auto-Discovery:** When you start the proxy server normally (`npx cursor-api-proxy`), it will automatically find all accounts in your `~/.cursor-api-proxy/accounts/` directory and include them in the rotation pool!
+
+### 2. Manual Config Directories
+
+If you already have separate configuration folders (or want to specify them explicitly), you can override auto-discovery using the `CURSOR_CONFIG_DIRS` environment variable:
+
+```bash
+CURSOR_CONFIG_DIRS=/path/to/cursor-agent-1,/path/to/cursor-agent-2 npm start
+```
+
+### 3. Modes of operation
+
+**A. Single Port, Round-Robin Rotation (Default)**  
+In this mode, the proxy listens on one port and rotates through the available accounts for each request, selecting the least busy account automatically. This is active by default when multiple accounts are found.
+
+**B. Multi-Port (One Server Per Account)**  
+If you want granular control (for example, to explicitly assign specific clients to specific accounts), you can use multi-port mode. The proxy will spawn multiple instances on incrementing ports, starting from `CURSOR_BRIDGE_PORT`.
+
+```bash
+CURSOR_BRIDGE_MULTI_PORT=true CURSOR_BRIDGE_PORT=8765 npm start
+```
+
+_Result: account1 is on 8765, account2 is on 8766, etc._
+
 ## Streaming
 
 The proxy supports `stream: true` on `POST /v1/chat/completions` and `POST /v1/messages`. It returns Server-Sent Events (SSE) in OpenAI’s streaming format. Cursor CLI emits incremental deltas plus a final full message; the proxy deduplicates output so clients receive each chunk only once.

package/dist/cli/accounts.d.ts

@@ -0,0 +1,18 @@
+export interface AccountInfo {
+    name: string;
+    configDir: string;
+    authenticated: boolean;
+    email?: string;
+    displayName?: string;
+    authId?: string;
+    plan?: string;
+    subscriptionStatus?: string;
+    expiresAt?: string;
+}
+/**
+ * Reads authentication and plan metadata from a saved account directory.
+ * Never throws — returns `authenticated: false` on any read/parse error.
+ */
+export declare function readAccountInfo(name: string, configDir: string): AccountInfo;
+export declare function handleAccountsList(): Promise<void>;
+export declare function handleLogout(accountName: string): Promise<void>;

package/dist/cli/accounts.js

@@ -0,0 +1,149 @@
+import fs from "node:fs";
+import path from "node:path";
+import { ACCOUNTS_DIR } from "./constants.js";
+import { readCachedToken, readKeychainToken, tokenSub, fetchAccountUsage, fetchStripeProfile, formatUsageSummary, describePlan, } from "./usage.js";
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Reads authentication and plan metadata from a saved account directory.
+ * Never throws — returns `authenticated: false` on any read/parse error.
+ */
+export function readAccountInfo(name, configDir) {
+    const info = { name, configDir, authenticated: false };
+    const configFile = path.join(configDir, "cli-config.json");
+    if (!fs.existsSync(configFile))
+        return info;
+    try {
+        const raw = JSON.parse(fs.readFileSync(configFile, "utf-8"));
+        if (raw.authInfo) {
+            info.authenticated = true;
+            info.email = raw.authInfo.email;
+            info.displayName = raw.authInfo.displayName;
+            info.authId = raw.authInfo.authId;
+        }
+    }
+    catch {
+        // malformed config — treat as unauthenticated
+    }
+    const statsigFile = path.join(configDir, "statsig-cache.json");
+    if (!fs.existsSync(statsigFile))
+        return info;
+    try {
+        const statsigRaw = JSON.parse(fs.readFileSync(statsigFile, "utf-8"));
+        if (!statsigRaw.data)
+            return info;
+        const statsig = JSON.parse(statsigRaw.data);
+        const custom = statsig?.user?.custom;
+        if (!custom)
+            return info;
+        if (custom.isEnterpriseUser) {
+            info.plan = "Enterprise";
+        }
+        else if (custom.stripeSubscriptionStatus === "active") {
+            info.plan = "Pro";
+        }
+        else {
+            info.plan = "Free";
+        }
+        info.subscriptionStatus = custom.stripeSubscriptionStatus;
+        if (custom.stripeMembershipExpiration) {
+            info.expiresAt = new Date(custom.stripeMembershipExpiration).toLocaleDateString();
+        }
+    }
+    catch {
+        // malformed statsig cache — skip plan info
+    }
+    return info;
+}
+// ---------------------------------------------------------------------------
+// Commands
+// ---------------------------------------------------------------------------
+export async function handleAccountsList() {
+    if (!fs.existsSync(ACCOUNTS_DIR)) {
+        console.log("No accounts found. Use 'cursor-api-proxy login' to add one.");
+        return;
+    }
+    const entries = fs.readdirSync(ACCOUNTS_DIR, { withFileTypes: true });
+    const names = entries.filter((e) => e.isDirectory()).map((e) => e.name);
+    if (names.length === 0) {
+        console.log("No accounts found. Use 'cursor-api-proxy login' to add one.");
+        return;
+    }
+    console.log("🔑 Cursor Accounts:\n");
+    // Try to find an available token (per-account cache first, shared keychain fallback)
+    const keychainToken = readKeychainToken();
+    for (let i = 0; i < names.length; i++) {
+        const name = names[i];
+        const configDir = path.join(ACCOUNTS_DIR, name);
+        const info = readAccountInfo(name, configDir);
+        console.log(`  ${i + 1}. ${name}`);
+        if (info.authenticated) {
+            // Per-account cached token wins. Fall back to keychain ONLY if its JWT
+            // sub matches this account's authId (prevents showing another account's data).
+            const cachedToken = readCachedToken(configDir);
+            const keychainMatchesAccount = !!keychainToken &&
+                !!info.authId &&
+                tokenSub(keychainToken) === info.authId;
+            const token = cachedToken ?? (keychainMatchesAccount ? keychainToken : undefined);
+            // Fetch live data before printing so we can decide what to show
+            let liveProfile = null;
+            let liveUsage = null;
+            if (token) {
+                try {
+                    [liveUsage, liveProfile] = await Promise.all([
+                        fetchAccountUsage(token),
+                        fetchStripeProfile(token),
+                    ]);
+                }
+                catch {
+                    /* ignore transient fetch errors */
+                }
+            }
+            if (info.email) {
+                const display = info.displayName ? ` (${info.displayName})` : "";
+                console.log(`     � ${info.email}${display}`);
+            }
+            // Show static plan only when live data isn't available (avoids contradictions)
+            if (info.plan && !liveProfile) {
+                const canceled = info.subscriptionStatus === "canceled" ? " · canceled" : "";
+                const expiry = info.expiresAt ? ` · expires ${info.expiresAt}` : "";
+                console.log(`     📊 ${info.plan}${canceled}${expiry}`);
+            }
+            console.log(`     ✅ Authenticated`);
+            if (liveProfile) {
+                console.log(`     💳 ${describePlan(liveProfile)}`);
+            }
+            if (liveUsage) {
+                for (const line of formatUsageSummary(liveUsage))
+                    console.log(line);
+            }
+        }
+        else {
+            console.log(`     ⚠️  Not authenticated`);
+        }
+        console.log("");
+    }
+    console.log("Tip: run 'cursor-api-proxy logout <name>' to remove an account.");
+}
+export async function handleLogout(accountName) {
+    if (!accountName) {
+        console.error("❌ Error: Please specify the account name to remove.");
+        console.error("Usage: cursor-api-proxy logout <account-name>");
+        process.exit(1);
+    }
+    const configDir = path.join(ACCOUNTS_DIR, accountName);
+    if (!fs.existsSync(configDir)) {
+        console.error(`❌ Account '${accountName}' not found.`);
+        process.exit(1);
+    }
+    try {
+        fs.rmSync(configDir, { recursive: true, force: true });
+        console.log(`✅ Account '${accountName}' removed.`);
+    }
+    catch (err) {
+        console.error(`❌ Error removing account:`, err);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=accounts.js.map

package/dist/cli/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../src/cli/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,QAAQ,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,GACb,MAAM,YAAY,CAAC;AAkBpB,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IAC7D,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAEpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAE1D,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5C,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAElE,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CASzC,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QAC3B,CAAC;aAAM,IAAI,MAAM,CAAC,wBAAwB,KAAK,QAAQ,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,wBAAwB,CAAC;QAE1D,IAAI,MAAM,CAAC,0BAA0B,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CACvB,MAAM,CAAC,0BAA0B,CAClC,CAAC,kBAAkB,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAExE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAErC,qFAAqF;IACrF,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,uEAAuE;YACvE,+EAA+E;YAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,sBAAsB,GAC1B,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC,MAAM;gBACb,QAAQ,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC;YAC1C,MAAM,KAAK,GACT,WAAW,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAEtE,gEAAgE;YAChE,IAAI,WAAW,GAAmD,IAAI,CAAC;YACvE,IAAI,SAAS,GAAkD,IAAI,CAAC;YACpE,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBAC3C,iBAAiB,CAAC,KAAK,CAAC;wBACxB,kBAAkB,CAAC,KAAK,CAAC;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,+EAA+E;YAC/E,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GACZ,IAAI,CAAC,kBAAkB,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAEpC,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,WAAW,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,SAAS,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB;IACpD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACrE,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,cAAc,WAAW,cAAc,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,YAAY,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/args.d.ts

@@ -0,0 +1,14 @@
+export type ParsedArgs = {
+    tailscale: boolean;
+    help: boolean;
+    login: boolean;
+    accountsList: boolean;
+    logout: boolean;
+    accountName: string;
+    proxies: string[];
+    resetHwid: boolean;
+    deepClean: boolean;
+    dryRun: boolean;
+};
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function printHelp(version: string): void;

package/dist/cli/args.js

@@ -0,0 +1,93 @@
+export function parseArgs(argv) {
+    let tailscale = false;
+    let help = false;
+    let login = false;
+    let accountsList = false;
+    let logout = false;
+    let accountName = "";
+    let proxies = [];
+    let resetHwid = false;
+    let deepClean = false;
+    let dryRun = false;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === "login" || arg === "add-account") {
+            login = true;
+            if (i + 1 < argv.length && !argv[i + 1].startsWith("-")) {
+                accountName = argv[++i];
+            }
+            continue;
+        }
+        if (arg === "logout" || arg === "remove-account") {
+            logout = true;
+            if (i + 1 < argv.length && !argv[i + 1].startsWith("-")) {
+                accountName = argv[++i];
+            }
+            continue;
+        }
+        if (arg === "accounts" || arg === "list-accounts") {
+            accountsList = true;
+            continue;
+        }
+        if (arg === "reset-hwid" || arg === "reset") {
+            resetHwid = true;
+            continue;
+        }
+        if (arg === "--deep-clean") {
+            deepClean = true;
+            continue;
+        }
+        if (arg === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (arg === "--tailscale") {
+            tailscale = true;
+            continue;
+        }
+        if (arg === "--help" || arg === "-h") {
+            help = true;
+            continue;
+        }
+        if (arg.startsWith("--proxy=")) {
+            proxies = arg
+                .slice("--proxy=".length)
+                .split(",")
+                .map((p) => p.trim())
+                .filter(Boolean);
+            continue;
+        }
+        throw new Error(`Unknown argument: ${arg}`);
+    }
+    return {
+        tailscale,
+        help,
+        login,
+        accountsList,
+        logout,
+        accountName,
+        proxies,
+        resetHwid,
+        deepClean,
+        dryRun,
+    };
+}
+export function printHelp(version) {
+    console.log(`cursor-api-proxy v${version}`);
+    console.log("");
+    console.log("Usage:");
+    console.log("  cursor-api-proxy [options]");
+    console.log("");
+    console.log("Commands:");
+    console.log("  login [name]              Log into a Cursor account (saved to ~/.cursor-api-proxy/accounts/)");
+    console.log("  login [name] --proxy=...  Same, but open Chrome through a random proxy from a comma-separated list");
+    console.log("  logout <name>             Remove a saved Cursor account");
+    console.log("  accounts                  List saved accounts with plan info");
+    console.log("  reset-hwid                Reset Cursor machine/telemetry IDs (anti-ban)");
+    console.log("  reset-hwid --deep-clean   Also wipe session storage and cookies");
+    console.log("");
+    console.log("Options:");
+    console.log("  --tailscale     Bind to 0.0.0.0 for tailnet/LAN access");
+    console.log("  -h, --help      Show this help message");
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC7C,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxD,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxD,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAClD,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC5C,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,GAAG;iBACV,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;iBACxB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,SAAS;QACT,IAAI;QACJ,KAAK;QACL,YAAY;QACZ,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;QACT,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CACT,gGAAgG,CACjG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,sGAAsG,CACvG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;IACF,OAAO,CAAC,GAAG,CACT,mEAAmE,CACpE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AAC1D,CAAC"}

package/dist/cli/constants.d.ts

@@ -0,0 +1 @@
+export declare const ACCOUNTS_DIR: string;

package/dist/cli/constants.js

@@ -0,0 +1,4 @@
+import os from "node:os";
+import path from "node:path";
+export const ACCOUNTS_DIR = path.join(process.env.HOME || process.env.USERPROFILE || os.homedir(), ".cursor-api-proxy", "accounts");
+//# sourceMappingURL=constants.js.map

package/dist/cli/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/cli/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CACnC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,OAAO,EAAE,EAC3D,mBAAmB,EACnB,UAAU,CACX,CAAC"}

package/dist/cli/login.d.ts

@@ -0,0 +1 @@
+export declare function handleLogin(accountName: string, proxies?: string[]): Promise<void>;

package/dist/cli/login.js

@@ -0,0 +1,143 @@
+import fs from "node:fs";
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { launch as launchChrome } from "chrome-launcher";
+import { loadEnvConfig } from "../lib/env.js";
+import { ACCOUNTS_DIR } from "./constants.js";
+import { readKeychainToken, writeCachedToken } from "./usage.js";
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+const LOGIN_URL_RE = /(https:\/\/cursor\.com\/loginDeepControl.*?redirectTarget=cli)/s;
+async function openIncognito(url, proxies) {
+    const chromeFlags = [
+        "--incognito",
+        "--new-window",
+        "--no-first-run",
+        "--no-default-browser-check",
+        "--disable-translate",
+    ];
+    if (proxies.length > 0) {
+        const proxy = proxies[Math.floor(Math.random() * proxies.length)];
+        chromeFlags.push(`--proxy-server=${proxy}`);
+        console.log(`🔀 Using proxy: ${proxy}`);
+    }
+    try {
+        await launchChrome({
+            startingUrl: url,
+            chromeFlags,
+            ignoreDefaultFlags: true,
+            handleSIGINT: false,
+            logLevel: "silent",
+        });
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        console.log(`\n🌐 Could not open Chrome automatically: ${msg}`);
+        console.log(`Please open this URL in a private/incognito window:\n${url}\n`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Command
+// ---------------------------------------------------------------------------
+export async function handleLogin(accountName, proxies = []) {
+    const envCfg = loadEnvConfig();
+    const name = accountName || `account-${Date.now().toString().slice(-4)}`;
+    const configDir = path.join(ACCOUNTS_DIR, name);
+    const dirWasNew = !fs.existsSync(configDir);
+    fs.mkdirSync(ACCOUNTS_DIR, { recursive: true });
+    fs.mkdirSync(configDir, { recursive: true });
+    console.log(`🔑 Logging into Cursor account: ${name}`);
+    console.log(`📁 Config: ${configDir}`);
+    console.log("");
+    console.log("A Chrome incognito window will open — complete the login there.");
+    console.log("");
+    return new Promise((resolve, reject) => {
+        let browserOpened = false;
+        let stdoutBuffer = "";
+        const cleanupDir = () => {
+            if (!dirWasNew)
+                return;
+            try {
+                fs.rmSync(configDir, { recursive: true, force: true });
+            }
+            catch {
+                // best-effort
+            }
+        };
+        const child = spawn(envCfg.agentBin, ["login"], {
+            stdio: ["inherit", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                CURSOR_CONFIG_DIR: configDir,
+                NO_OPEN_BROWSER: "1",
+            },
+        });
+        // Remove all signal handlers once the child exits (success or failure)
+        const onCancel = (signal) => {
+            child.kill();
+            cleanupDir();
+            if (signal === "SIGINT")
+                console.log("\n\n❌ Login cancelled.");
+            process.exit(0);
+        };
+        const onSigint = () => onCancel("SIGINT");
+        const onSigterm = () => onCancel("SIGTERM");
+        const onSighup = () => onCancel("SIGHUP");
+        const removeSignalHandlers = () => {
+            process.removeListener("SIGINT", onSigint);
+            process.removeListener("SIGTERM", onSigterm);
+            process.removeListener("SIGHUP", onSighup);
+        };
+        process.once("SIGINT", onSigint);
+        process.once("SIGTERM", onSigterm);
+        process.once("SIGHUP", onSighup);
+        child.stdout?.on("data", (data) => {
+            const text = data.toString();
+            process.stdout.write(text);
+            stdoutBuffer += text;
+            // The agent prints the login URL across multiple chunks — buffer until complete
+            if (!browserOpened &&
+                stdoutBuffer.includes("https://cursor.com/loginDeepControl")) {
+                const match = stdoutBuffer.match(LOGIN_URL_RE);
+                if (match?.[1]) {
+                    const url = match[1].replace(/\s+/g, "");
+                    openIncognito(url, proxies).catch(() => { });
+                    browserOpened = true;
+                }
+            }
+        });
+        child.stderr?.on("data", (data) => {
+            process.stderr.write(data.toString());
+        });
+        child.on("error", (err) => {
+            removeSignalHandlers();
+            cleanupDir();
+            if (err.code === "ENOENT") {
+                console.error(`❌ Could not find '${envCfg.agentBin}'. Make sure the Cursor CLI is installed.`);
+            }
+            else {
+                console.error("❌ Error launching agent login:", err);
+            }
+            reject(err);
+        });
+        child.on("exit", (code) => {
+            removeSignalHandlers();
+            if (code === 0) {
+                // Immediately cache the keychain token for this account so that
+                // 'accounts list' can show live usage without needing a prior request.
+                const token = readKeychainToken();
+                if (token)
+                    writeCachedToken(configDir, token);
+                console.log(`\n✅ Account '${name}' saved — it will be auto-discovered when you start the proxy.`);
+                resolve();
+            }
+            else {
+                cleanupDir();
+                console.error(`\n❌ Login failed (exit code ${code}).`);
+                reject(new Error(`Login failed with code ${code}`));
+            }
+        });
+    });
+}
+//# sourceMappingURL=login.js.map

package/dist/cli/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/cli/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,YAAY,GAChB,iEAAiE,CAAC;AAEpE,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,OAAiB;IACzD,MAAM,WAAW,GAAG;QAClB,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,4BAA4B;QAC5B,qBAAqB;KACtB,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,WAAW,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,CAAC;YACjB,WAAW,EAAE,GAAG;YAChB,WAAW;YACX,kBAAkB,EAAE,IAAI;YACxB,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CACT,wDAAwD,GAAG,IAAI,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAmB,EACnB,UAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,WAAW,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAE5C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,MAAM,UAAU,GAAG,GAAG,EAAE;YACtB,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;YAC9C,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,iBAAiB,EAAE,SAAS;gBAC5B,eAAe,EAAE,GAAG;aACrB;SACF,CAAC,CAAC;QAEH,uEAAuE;QACvE,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;YAClC,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,UAAU,EAAE,CAAC;YACb,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,oBAAoB,GAAG,GAAG,EAAE;YAChC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC7C,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,YAAY,IAAI,IAAI,CAAC;YAErB,gFAAgF;YAChF,IACE,CAAC,aAAa;gBACd,YAAY,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAC5D,CAAC;gBACD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC/C,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACzC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAC5C,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,oBAAoB,EAAE,CAAC;YACvB,UAAU,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,qBAAqB,MAAM,CAAC,QAAQ,2CAA2C,CAChF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAmB,EAAE,EAAE;YACvC,oBAAoB,EAAE,CAAC;YACvB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,gEAAgE;gBAChE,uEAAuE;gBACvE,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;gBAClC,IAAI,KAAK;oBAAE,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAE9C,OAAO,CAAC,GAAG,CACT,gBAAgB,IAAI,gEAAgE,CACrF,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,UAAU,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,IAAI,IAAI,CAAC,CAAC;gBACvD,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}