cursor-api-proxy 0.6.0 → 0.7.1

package/dist/lib/workspace.js

@@ -1,15 +1,77 @@
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+/**
+ * Env overrides for chat-only (isolated) workspace so the agent cannot load
+ * rules from ~/.cursor or other user config paths.
+ *
+ * When `authConfigDir` is set (account pool), use it for `CURSOR_CONFIG_DIR` so the
+ * CLI loads credentials from that profile.
+ *
+ * We do **not** override `HOME` / `USERPROFILE` / `XDG_*` in that case: the Cursor CLI
+ * still resolves auth relative to the real user profile for `agent --print` / ask, and
+ * a fake `HOME` makes login fail even when `CURSOR_CONFIG_DIR` points at the pool.
+ * Without a pool, the temp `HOME` keeps rules from the real `~/.cursor` from loading.
+ */
+export function getChatOnlyEnvOverrides(workspaceDir, authConfigDir) {
+    const cursorDir = authConfigDir ?? path.join(workspaceDir, ".cursor");
+    const overrides = {
+        CURSOR_CONFIG_DIR: cursorDir,
+    };
+    if (authConfigDir) {
+        return overrides;
+    }
+    overrides.HOME = workspaceDir;
+    overrides.USERPROFILE = workspaceDir;
+    if (process.platform === "win32") {
+        const appDataRoaming = path.join(workspaceDir, "AppData", "Roaming");
+        const appDataLocal = path.join(workspaceDir, "AppData", "Local");
+        overrides.APPDATA = appDataRoaming;
+        overrides.LOCALAPPDATA = appDataLocal;
+    }
+    else {
+        overrides.XDG_CONFIG_HOME = path.join(workspaceDir, ".config");
+    }
+    return overrides;
+}
 export function resolveWorkspace(config, workspaceHeader) {
     if (config.chatOnlyWorkspace) {
         const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "cursor-proxy-"));
+        const cursorDir = path.join(tempDir, ".cursor");
+        fs.mkdirSync(cursorDir, { recursive: true });
+        fs.mkdirSync(path.join(cursorDir, "rules"), { recursive: true });
+        const minimalConfig = {
+            version: 1,
+            editor: { vimMode: false },
+            permissions: { allow: [], deny: [] },
+        };
+        fs.writeFileSync(path.join(cursorDir, "cli-config.json"), JSON.stringify(minimalConfig, null, 0), "utf8");
+        if (process.platform === "win32") {
+            fs.mkdirSync(path.join(tempDir, "AppData", "Roaming"), { recursive: true });
+            fs.mkdirSync(path.join(tempDir, "AppData", "Local"), { recursive: true });
+        }
+        else {
+            fs.mkdirSync(path.join(tempDir, ".config"), { recursive: true });
+        }
         return { workspaceDir: tempDir, tempDir };
     }
     const headerWs = typeof workspaceHeader === "string" && workspaceHeader.trim()
         ? workspaceHeader.trim()
         : null;
-    const workspaceDir = headerWs ?? config.workspace;
-    return { workspaceDir };
+    const base = path.resolve(config.workspace);
+    if (!headerWs) {
+        return { workspaceDir: base };
+    }
+    const candidate = path.resolve(headerWs);
+    if (!fs.existsSync(candidate) || !fs.statSync(candidate).isDirectory()) {
+        throw new Error("X-Cursor-Workspace must be an existing directory on the proxy host");
+    }
+    const realBase = fs.existsSync(base) ? fs.realpathSync(base) : base;
+    const realRequested = fs.realpathSync(candidate);
+    const rel = path.relative(realBase, realRequested);
+    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+        throw new Error("X-Cursor-Workspace must resolve to a directory under the configured workspace base");
+    }
+    return { workspaceDir: realRequested };
 }
 //# sourceMappingURL=workspace.js.map

package/dist/lib/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/lib/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC,MAAM,UAAU,gBAAgB,CAC9B,MAAoB,EACpB,eAA0C;IAE1C,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACxE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GACZ,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE;QAC3D,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,YAAY,GAAG,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC;IAClD,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/lib/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,aAAsB;IAEtB,MAAM,SAAS,GAAG,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,SAAS,GAA2B;QACxC,iBAAiB,EAAE,SAAS;KAC7B,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,CAAC,IAAI,GAAG,YAAY,CAAC;IAC9B,SAAS,CAAC,WAAW,GAAG,YAAY,CAAC;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACjE,SAAS,CAAC,OAAO,GAAG,cAAc,CAAC;QACnC,SAAS,CAAC,YAAY,GAAG,YAAY,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAoB,EACpB,eAA0C;IAE1C,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG;YACpB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC1B,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;SACrC,CAAC;QACF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,EACtC,MAAM,CACP,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GACZ,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE;QAC3D,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cursor-api-proxy",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "description": "OpenAI-compatible proxy for Cursor CLI — use Cursor models from any LLM client on localhost",
   "private": false,
   "type": "module",