cursor-keys 1.0.0 → 1.2.0

package/README.md

@@ -1,27 +1,42 @@
-# cursor-keys
+<div align="center">
 
-> Per-project Cursor profiles so every window automatically uses the right BYOK API key. Two windows, two projects, two keys, zero switching.
+```
+ ██████╗██╗   ██╗██████╗ ███████╗ ██████╗ ██████╗     ██╗  ██╗███████╗██╗   ██╗███████╗
+██╔════╝██║   ██║██╔══██╗██╔════╝██╔═══██╗██╔══██╗    ██║ ██╔╝██╔════╝╚██╗ ██╔╝██╔════╝
+██║     ██║   ██║██████╔╝███████╗██║   ██║██████╔╝    █████╔╝ █████╗   ╚████╔╝ ███████╗
+██║     ██║   ██║██╔══██╗╚════██║██║   ██║██╔══██╗    ██╔═██╗ ██╔══╝    ╚██╔╝  ╚════██║
+╚██████╗╚██████╔╝██║  ██║███████║╚██████╔╝██║  ██║    ██║  ██╗███████╗   ██║   ███████║
+ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝╚══════╝ ╚═════╝ ╚═╝  ╚═╝    ╚═╝  ╚═╝╚══════╝   ╚═╝   ╚══════╝
+```
 
-Cursor stores your OpenAI-compatible API key (Bonzai, LiteLLM, AI Gateway, ...) **once per profile**, not per repo. If you bill five client projects, you either babysit Settings all day or bill the wrong project. `cursor-keys` gives each project its own isolated profile and makes opening, switching, and checking keys automatic.
+**Per-project Cursor profiles so every window uses the right BYOK API key.**
 
-```
-  ╔═╗┬ ┬┬─┐┌─┐┌─┐┬─┐  ┬┌─┌─┐┬ ┬┌─┐
-  │  │ │├┬┘└─┐│ │├┬┘  ├┴┐├┤ └┬┘└─┐
-  └─┘└─┘┴└─└─┘└─┘┴└─  ┴ ┴└─┘ ┴ └─┘  per-project Cursor API keys
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![Node](https://img.shields.io/badge/node-%E2%89%A518-5FA04E.svg)](https://nodejs.org)
+[![Runtime dependencies](https://img.shields.io/badge/runtime%20deps-0-brightgreen.svg)](#development)
+
+[Website](https://l-ubu.github.io/cursor-keys/) · [Install](#install) · [Commands](#commands) · [Config](#config)
+
+</div>
+
+---
 
+Cursor stores your OpenAI-compatible API key (LiteLLM, Vercel AI Gateway, corporate proxy, ...) **once per profile**, not per repo. If you bill five client projects, you either babysit Settings all day or bill the wrong project. `cursor-keys` gives each project its own isolated profile and makes opening, switching, and checking keys automatic.
+
+```
 $ cursor-keys status
 
-  Project             | Color    | Windows | Key | Repo
-  --------------------+----------+---------+-----+-------------------------
-  famework-platform-1 | #339af0  | 1       | yes | ~/Projects/famework-platform-1
-  jlr_mss             | #4f8cff  | 0       | no  | ~/Projects/jlr_mss
-  nokia               | #845ef7  | 1       | yes | ~/Projects/nokia-main-cs
+  Project   | Color    | Windows | Key | Repo
+  ----------+----------+---------+-----+------------------
+  acme      | #4f8cff  | 1       | yes | ~/Projects/acme
+  client-a  | #51cf66  | 0       | no  | ~/Projects/client-a
+  client-b  | #845ef7  | 1       | yes | ~/Projects/client-b
 
-$ cursor-keys doctor nokia
+$ cursor-keys doctor acme
 
-  ✓ OpenAI/Bonzai API key row present
+  ✓ OpenAI API key row present
   ✓ Explore subagent overrides present
-  ✓ Base URL (connect.iobonzai.com/cursor) in profile state
+  ✓ Base URL (gateway.example.com/v1) in profile state
 ```
 
 ## Install
@@ -36,8 +51,8 @@ Requires Node ≥18, the Cursor CLI (`Shell Command: Install 'cursor' in PATH`),
 ## Quick start
 
 ```bash
-# one-time, only if your gateway is not the Bonzai default
-cursor-keys config baseUrl https://your-gateway.example.com/v1
+# one-time: point at your OpenAI-compatible gateway
+cursor-keys config baseUrl https://gateway.example.com/v1
 
 # one-time per project
 cursor-keys add acme --path ~/Projects/acme     # register + create profile
@@ -64,7 +79,7 @@ One window, one profile, one key. Each project gets an isolated `--user-data-dir
 
 Settings flow one way, main to profiles: `sync` re-copies your main `settings.json` into every profile and re-applies that profile's title bar color on top. `open` does this automatically before every launch, and open windows hot-reload the file, so tweaks in your main Cursor show up everywhere. Changes made inside a profile window are overwritten on the next sync.
 
-`clone` copies your main Cursor state (SQLite backup) so profiles open signed-in with your theme and model config. `set-key` encrypts your project key with Cursor's own safeStorage (Chromium OSCrypt, key from the "Cursor Safe Storage" Keychain item) and writes it into the profile's secret store, round-trip verified. macOS asks for Keychain permission once; click Always Allow.
+`clone` copies your main Cursor state (SQLite backup) so profiles open signed-in with your theme and model config. `set-key` encrypts your project key with Cursor's own safeStorage (Chromium OSCrypt, key from the "Cursor Safe Storage" macOS Keychain item) and writes it into the profile's secret store, round-trip verified. macOS asks for Keychain permission once; click Always Allow.
 
 ## "Which key am I on?" in three layers
 
@@ -83,7 +98,7 @@ Settings flow one way, main to profiles: `sync` re-copies your main `settings.js
 | `open [name]`                                  | Launch Cursor with the profile (auto-detect from cwd)        |
 | `status`                                       | Projects, colors, running windows, key configured            |
 | `current`                                      | Mapping for the current directory                            |
-| `config [baseUrl [URL]]`                       | Show or set the gateway base URL                             |
+| `config [get <key> · baseUrl [URL]]`           | Show summary, print one value, or set the gateway base URL   |
 | `sync [name]`                                  | Re-copy main Cursor settings into profiles                   |
 | `doctor [name]`                                | Health checks: key row, base URL, subagent overrides         |
 | `wrap [--install]`                             | zsh function so plain `cursor <path>` auto-picks the profile |
@@ -98,14 +113,21 @@ Settings flow one way, main to profiles: `sync` re-copies your main `settings.js
 ```json
 {
   "profilesRoot": "~/.cursor-profiles",
-  "baseUrl": "https://connect.iobonzai.com/cursor",
+  "baseUrl": "https://gateway.example.com/v1",
   "projects": {
     "acme": { "path": "~/Projects/acme", "color": "#4f8cff" }
   }
 }
 ```
 
-`baseUrl` is your gateway's OpenAI-compatible endpoint (Bonzai default; point it at LiteLLM, Vercel AI Gateway, ...). `doctor` verifies it per profile.
+`baseUrl` is your gateway's OpenAI-compatible endpoint. `doctor` verifies it per profile.
+
+Read a single value for scripts (stdout only, exit 1 on unknown keys):
+
+```bash
+cursor-keys config get baseUrl
+cursor-keys config get profilesRoot
+```
 
 ## Security
 

package/bin/cursor-keys.mjs

@@ -1,12 +1,15 @@
 #!/usr/bin/env node
 
 import { runCommand } from "../src/commands.mjs";
-import { bold, cyan, dim, reset } from "../src/ansi.mjs";
+import { bold, dim, reset, yellow } from "../src/ansi.mjs";
 
 const BANNER = `
- ${cyan}╔═╗┬ ┬┬─┐┌─┐┌─┐┬─┐  ┬┌─┌─┐┬ ┬┌─┐
- ${cyan}│  │ │├┬┘└─┐│ │├┬┘  ├┴┐├┤ └┬┘└─┐
- ${cyan}└─┘└─┘┴└─└─┘└─┘┴└─  ┴ ┴└─┘ ┴ └─┘${dim}  per-project Cursor API keys
+ ${yellow} ██████╗██╗   ██╗██████╗ ███████╗ ██████╗ ██████╗     ██╗  ██╗███████╗██╗   ██╗███████╗
+ ${yellow}██╔════╝██║   ██║██╔══██╗██╔════╝██╔═══██╗██╔══██╗    ██║ ██╔╝██╔════╝╚██╗ ██╔╝██╔════╝
+ ${yellow}██║     ██║   ██║██████╔╝███████╗██║   ██║██████╔╝    █████╔╝ █████╗   ╚████╔╝ ███████╗
+ ${yellow}██║     ██║   ██║██╔══██╗╚════██║██║   ██║██╔══██╗    ██╔═██╗ ██╔══╝    ╚██╔╝  ╚════██║
+ ${yellow}╚██████╗╚██████╔╝██║  ██║███████║╚██████╔╝██║  ██║    ██║  ██╗███████╗   ██║   ███████║
+ ${yellow} ╚═════╝ ╚═════╝ ╚═╝  ╚═╝╚══════╝ ╚═════╝ ╚═╝  ╚═╝    ╚═╝  ╚═╝╚══════╝   ╚═╝   ╚══════╝${reset}${dim}  per-project Cursor API keys
 `;
 
 function printHelp() {
@@ -17,6 +20,12 @@ function printHelp() {
     "  init [--root DIR] [--all]   Scan for git repos and register projects",
   );
   console.log("  add <name> [options]        Create profile for a project");
+  console.log(
+    "  clone <name> [--from main]  Copy sign-in + settings from a donor profile",
+  );
+  console.log(
+    "  set-key <name>              Inject the project API key (encrypted)",
+  );
   console.log(
     "  open [name]                 Open Cursor with this project's profile",
   );
@@ -25,7 +34,7 @@ function printHelp() {
   );
   console.log("  current                     Show mapping for cwd");
   console.log(
-    "  config [baseUrl [URL]]      Show or set config (gateway base URL)",
+    "  config [get <key>|baseUrl [URL]]  Show, read, or set config values",
   );
   console.log(
     "  sync [name]                 Re-copy main Cursor settings into profiles",

package/extension/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 L-ubu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cursor-keys",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "Per-project Cursor profiles so each window uses the correct BYOK API key. Zero dependencies.",
   "type": "module",
   "bin": {
@@ -19,7 +19,6 @@
     "cursor",
     "cli",
     "api-key",
-    "bonzai",
     "byok",
     "developer-tools",
     "productivity"

package/src/commands.mjs

@@ -8,11 +8,14 @@ import {
   baseUrlFragment,
   collapseHome,
   CONFIG_FILE,
+  CONFIG_GETTABLE_KEYS,
   expandHome,
   findProjectByPath,
+  getConfigValue,
   getProject,
   loadConfig,
   pickColorForName,
+  pickUnusedColor,
   saveConfig,
   profileStateDb,
 } from "./config.mjs";
@@ -32,8 +35,10 @@ import {
   findCursorCli,
   listRunningCursorProfiles,
   mainCursorProfileRoot,
+  mainCursorUserDir,
   stateDbHasKey,
   stateDbValueContains,
+  stateDbValuesMatch,
   hasSqlite3,
 } from "./detect.mjs";
 import {
@@ -174,12 +179,30 @@ function ask(question) {
 async function cmdConfig(args) {
   const { flags, positional } = parseFlags(args);
   if (flags.help) {
-    console.log("Usage: cursor-keys config [baseUrl [URL]]");
+    console.log(
+      "Usage: cursor-keys config                      Show config summary",
+    );
+    console.log(
+      "       cursor-keys config get <key>            Print one value (baseUrl, profilesRoot)",
+    );
+    console.log(
+      "       cursor-keys config baseUrl <URL>        Set gateway base URL",
+    );
     return;
   }
   const config = loadConfig();
   const [key, value] = positional;
 
+  if (key === "get") {
+    if (!value) {
+      throw new Error(
+        `Missing config key. Usage: cursor-keys config get <${CONFIG_GETTABLE_KEYS.join("|")}>`,
+      );
+    }
+    console.log(getConfigValue(config, value));
+    return;
+  }
+
   if (!key) {
     const count = Object.keys(config.projects).length;
     console.log(
@@ -292,10 +315,17 @@ async function cmdInit(args) {
   }
   saveConfig(config);
   console.log(
-    `\nNext: cursor-keys add <name> --clone main   (creates profile + copies Bonzai settings)`,
+    `\nNext: cursor-keys add <name> --clone main   (creates profile + copies main Cursor settings)`,
   );
 }
 
+function shouldShowFirstRunChecklist(profileDir) {
+  if (!needsFirstRunChecklist(profileDir)) return false;
+  const db = profileStateDb(profileDir);
+  // A cloned profile already carries a key row: setup is effectively done.
+  return !(fs.existsSync(db) && stateDbHasKey(db, SECRET_OPENAI_KEY));
+}
+
 async function cmdAdd(args) {
   const { flags, positional } = parseFlags(args);
   if (flags.help) {
@@ -319,8 +349,13 @@ async function cmdAdd(args) {
     throw new Error(`Repo path does not exist: ${repoPath}`);
   }
 
+  const usedColors = Object.entries(config.projects)
+    .filter(([other]) => other !== name)
+    .map(([, entry]) => entry.color);
   const color =
-    flags.color || config.projects[name]?.color || pickColorForName(name);
+    flags.color ||
+    config.projects[name]?.color ||
+    pickUnusedColor(name, usedColors);
   config.projects[name] = { path: collapseHome(repoPath), color };
   saveConfig(config);
 
@@ -348,7 +383,7 @@ async function cmdAdd(args) {
   console.log(ok(`Profile ready: ${collapseHome(project.profileDir)}`));
   console.log(`  Repo:  ${collapseHome(project.path)}`);
   console.log(`  Color: ${color} ${blockSwatch(color)}`);
-  if (needsFirstRunChecklist(project.profileDir)) {
+  if (shouldShowFirstRunChecklist(project.profileDir)) {
     printFirstRunChecklist(name, config.baseUrl);
   }
 }
@@ -405,7 +440,7 @@ async function cmdOpen(args) {
   console.log(`  ${dim}${collapseHome(project.path)}${reset}`);
   console.log(`  Profile ${blockSwatch(project.color)} ${project.color}`);
 
-  if (needsFirstRunChecklist(project.profileDir)) {
+  if (shouldShowFirstRunChecklist(project.profileDir)) {
     printFirstRunChecklist(name, config.baseUrl);
     markSetupDone(project.profileDir);
   }
@@ -499,9 +534,22 @@ async function cmdDoctor(args) {
     }
     const db = profileStateDb(p.profileDir);
     if (fs.existsSync(db)) {
+      const hasKey = stateDbHasKey(db, SECRET_OPENAI_KEY);
       console.log(
-        `  ${stateDbHasKey(db, SECRET_OPENAI_KEY) ? ok("✓") : warn("✗")} OpenAI/Bonzai API key row present`,
+        `  ${hasKey ? ok("✓") : warn("✗")} OpenAI API key row present`,
       );
+      if (hasKey) {
+        const mainDb = path.join(
+          mainCursorUserDir(),
+          "globalStorage",
+          "state.vscdb",
+        );
+        if (stateDbValuesMatch(db, mainDb, SECRET_OPENAI_KEY)) {
+          console.log(
+            `  ${warn("!")} Key is identical to the main profile (inherited via clone); run: cursor-keys set-key ${name}`,
+          );
+        }
+      }
       console.log(
         `  ${stateDbHasKey(db, SUBAGENT_OVERRIDES_KEY) ? ok("✓") : warn("✗")} Explore subagent overrides present`,
       );
@@ -747,7 +795,19 @@ async function cmdSetKey(args) {
     throw new Error(`Close the "${name}" Cursor window first, then retry.`);
   }
 
-  const key = flags.key || (await promptHidden(`API key for ${name}: `));
+  let key = flags.key;
+  if (!key) {
+    console.log(
+      `\nPaste the API key for ${bold}${name}${reset} below, then press Enter.`,
+    );
+    console.log(
+      `${dim}Input is hidden: nothing echoes while you paste or type.${reset}`,
+    );
+    key = await promptHidden("API key: ");
+  }
+  if (!key) {
+    throw new Error("No key entered. Aborted, nothing was written.");
+  }
   const result = setProfileApiKey(db, key);
   console.log(
     ok(`Key set for ${name}`) +

package/src/config.mjs

@@ -98,25 +98,49 @@ export function baseUrlFragment(config) {
   return String(config.baseUrl || "").replace(/^https?:\/\//, "");
 }
 
+export const CONFIG_GETTABLE_KEYS = ["baseUrl", "profilesRoot"];
+
+/**
+ * @param {ReturnType<typeof loadConfig>} config
+ * @param {string} key
+ */
+export function getConfigValue(config, key) {
+  if (!CONFIG_GETTABLE_KEYS.includes(key)) {
+    throw new Error(
+      `Unknown config key: ${key}. Known keys: ${CONFIG_GETTABLE_KEYS.join(", ")}`,
+    );
+  }
+  return config[key];
+}
+
+const COLOR_PALETTE = [
+  "#4f8cff",
+  "#ff6b6b",
+  "#51cf66",
+  "#ffd43b",
+  "#845ef7",
+  "#20c997",
+  "#ff922b",
+  "#e64980",
+  "#339af0",
+  "#94d82d",
+];
+
 /** Deterministic palette color from project name */
 export function pickColorForName(name) {
-  const palette = [
-    "#4f8cff",
-    "#ff6b6b",
-    "#51cf66",
-    "#ffd43b",
-    "#845ef7",
-    "#20c997",
-    "#ff922b",
-    "#e64980",
-    "#339af0",
-    "#94d82d",
-  ];
   let hash = 0;
   for (let i = 0; i < name.length; i++) {
     hash = (hash * 31 + name.charCodeAt(i)) >>> 0;
   }
-  return palette[hash % palette.length];
+  return COLOR_PALETTE[hash % COLOR_PALETTE.length];
+}
+
+/** Like pickColorForName, but avoids colors already used by other projects */
+export function pickUnusedColor(name, usedColors) {
+  const used = new Set(usedColors);
+  const preferred = pickColorForName(name);
+  if (!used.has(preferred)) return preferred;
+  return COLOR_PALETTE.find((c) => !used.has(c)) || preferred;
 }
 
 /**

package/src/detect.mjs

@@ -183,6 +183,28 @@ export function stateDbValueContains(stateDbPath, urlFragment) {
   }
 }
 
+/**
+ * True if the value for `key` is byte-identical in both state DBs.
+ * Comparison happens inside SQL; the value never enters this process.
+ * @param {string} dbA
+ * @param {string} dbB
+ * @param {string} key
+ */
+export function stateDbValuesMatch(dbA, dbB, key) {
+  if (!fs.existsSync(dbA) || !fs.existsSync(dbB) || !hasSqlite3()) {
+    return false;
+  }
+  try {
+    const out = execSync(
+      `sqlite3 ${shellQuote(dbA)} "ATTACH DATABASE ${shellQuote(dbB)} AS other; SELECT CASE WHEN (SELECT value FROM ItemTable WHERE key = ${shellQuote(key)}) IS NOT NULL AND (SELECT value FROM ItemTable WHERE key = ${shellQuote(key)}) = (SELECT value FROM other.ItemTable WHERE key = ${shellQuote(key)}) THEN 1 ELSE 0 END;"`,
+      { encoding: "utf8", stdio: ["pipe", "pipe", "ignore"] },
+    );
+    return out.trim() === "1";
+  } catch {
+    return false;
+  }
+}
+
 function shellQuote(s) {
   return `'${String(s).replace(/'/g, `'\\''`)}'`;
 }

package/src/profile.mjs

@@ -116,7 +116,14 @@ export function cloneStateDb(donorProfileDir, targetProfileDir) {
   ensureProfileStructure(targetProfileDir);
   fs.mkdirSync(path.dirname(dest), { recursive: true });
 
-  execSync(`sqlite3 ${shellQuote(src)} ".backup ${shellQuote(dest)}"`, {
+  // VACUUM INTO requires a fresh destination.
+  for (const suffix of ["", "-wal", "-shm", "-journal"]) {
+    fs.rmSync(dest + suffix, { force: true });
+  }
+
+  // VACUUM INTO snapshots a consistent copy even while the donor Cursor is
+  // running; `.backup` can spin at full CPU against a write-heavy donor.
+  execSync(`sqlite3 ${shellQuote(src)} "VACUUM INTO ${shellQuote(dest)}"`, {
     stdio: "ignore",
   });
 }
@@ -138,17 +145,16 @@ export function needsFirstRunChecklist(profileDir) {
 
 export function printFirstRunChecklist(
   projectName,
-  baseUrl = "https://connect.iobonzai.com/cursor",
+  baseUrl = "https://gateway.example.com/v1",
 ) {
   console.log(`
 First-time setup for "${projectName}" in this Cursor profile:
 
   1. Cursor Settings → Models → API keys
-  2. Paste your project Bonzai API key under OpenAI API Key
+  2. Paste your project API key under OpenAI API Key (or run: cursor-keys set-key ${projectName})
   3. Enable "Use OpenAI API Key" and "Override OpenAI Base URL"
   4. Base URL: ${baseUrl}
-  5. Explore Subagent Model: Composer 2.5
-  6. Add custom Bonzai models and disable non-Bonzai models
+  5. Add your gateway models and disable models you do not use
 
 Then run: cursor-keys doctor ${projectName}
 `);