cursor-opencode-provider 0.7.2 → 0.7.4

package/dist/protocol/struct.js

@@ -249,7 +249,7 @@ export function encodeJsonAsValue(v) {
     }
     else if (typeof v === "object") {
         const st = [];
-        for (const [key, val] of Object.entries(v).sort(([left], [right]) => left.localeCompare(right))) {
+        for (const [key, val] of Object.entries(v).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)) {
             if (val === undefined)
                 continue;
             const entry = [];

package/dist/protocol/switch-mode.d.ts

@@ -30,10 +30,8 @@
  * - leaving plan mode is the gate the user must actually see, so it falls back
  *   to the host `question` tool and only rejects when that is absent too.
  *
- * Resolution is keyed solely on the advertised catalog under canonical tool
- * names — never on host identity or model id. A compatibility layer may restate
- * alternate host vocabulary under canonical names before the provider sees the
- * catalog, so the bridge itself remains OpenCode-shaped.
+ * Resolution is keyed solely on the advertised catalog under canonical
+ * OpenCode tool names — never on any external identity or model id.
  *
  * CLI reject reason for user declines: "Mode switch rejected by user"
  * (chunk-7076/dist/ui.js onSwitchModeReject).
@@ -169,6 +167,7 @@ export declare function resetActiveCursorModesForTests(): void;
 export declare function cursorModeSystemReminder(targetModeId: string, options?: {
     firstTurn?: boolean;
     planExitAdvertised?: boolean;
+    planStageAdvertised?: boolean;
 }): string | undefined;
 /**
  * Consume the active-mode reminder for this OpenCode session.

package/dist/protocol/switch-mode.js

@@ -30,10 +30,8 @@
  * - leaving plan mode is the gate the user must actually see, so it falls back
  *   to the host `question` tool and only rejects when that is absent too.
  *
- * Resolution is keyed solely on the advertised catalog under canonical tool
- * names — never on host identity or model id. A compatibility layer may restate
- * alternate host vocabulary under canonical names before the provider sees the
- * catalog, so the bridge itself remains OpenCode-shaped.
+ * Resolution is keyed solely on the advertised catalog under canonical
+ * OpenCode tool names — never on any external identity or model id.
  *
  * CLI reject reason for user declines: "Mode switch rejected by user"
  * (chunk-7076/dist/ui.js onSwitchModeReject).
@@ -295,12 +293,15 @@ export function cursorModeSystemReminder(targetModeId, options = {}) {
     if (!id)
         return undefined;
     const first = options.firstTurn !== false;
-    // Without a host plan_exit, recording the plan is itself the gate: the
-    // provider persists it and then asks the user whether to start implementing.
-    // Naming an unavailable tool would strand the model.
-    const leavePlan = options.planExitAdvertised === false
-        ? "record the finished plan (Cursor CreatePlan). Writing it needs no approval, and the user is then asked whether to start implementing; if they decline, refine the plan and record it again"
-        : "record the finished plan, then call OpenCode `plan_exit` so the user can approve leaving plan mode";
+    // A host plan-stage tool writes the artifact and its result names the
+    // follow-up that requests approval. plan_exit only leaves plan mode.
+    // Without either tool, recording the plan is the gate and the provider asks
+    // whether to start implementing. Naming an unavailable tool would strand the model.
+    const leavePlan = options.planStageAdvertised
+        ? "record the finished plan with Cursor CreatePlan. The host stage tool waits for the host plan review and does not return until the user accepts or declines. Do not call `plan_exit` to submit or skip that review, and do not implement until the tool returns success"
+        : options.planExitAdvertised === false
+            ? "record the finished plan (Cursor CreatePlan). Writing it needs no approval, and the user is then asked whether to start implementing; if they decline, refine the plan and record it again"
+            : "record the finished plan, then call OpenCode `plan_exit` so the user can approve leaving plan mode";
     if (id === "plan" || id === "spec") {
         return wrapReminder(first
             ? `Plan mode is active. The user does not want execution yet -- you MUST NOT make edits, run non-readonly tools (including changing configs or making commits), or otherwise modify system state. This supersedes any conflicting instruction.
@@ -389,9 +390,12 @@ Your mandate is to convert user intent into a correct, high-quality implementati
     return wrapReminder(first
         ? `Agent mode is active (OpenCode build / agents). You have left plan mode and may implement: edit files, run tools, and execute the agreed approach.
 
+The plan-mode restriction is over. An earlier reminder that forbade edits no longer applies.
+
+- Change file contents with the advertised \`write\` and \`edit\` tools.
 - Prefer making progress with the advertised host tools.
 - If the task is large or ambiguous again, switch back to plan mode (OpenCode \`plan_enter\` / SwitchMode target plan) before a large rewrite.`
-        : `Agent mode is still active. Continue implementing with the advertised host tools. Switch back to plan mode only when a new large/ambiguous design decision appears.`);
+        : `Agent mode is still active. Continue implementing with the advertised host tools, and change file contents with \`write\` and \`edit\`. Switch back to plan mode only when a new large/ambiguous design decision appears.`);
 }
 /**
  * Consume the active-mode reminder for this OpenCode session.
@@ -417,7 +421,12 @@ export function takeActiveCursorModeReminder(sessionKey, options = {}) {
     }
     const reminder = cursorModeSystemReminder(state.modeId, {
         firstTurn: state.firstTurn,
-        ...(advertised ? { planExitAdvertised: advertised.has("plan_exit") } : {}),
+        ...(advertised
+            ? {
+                planExitAdvertised: advertised.has("plan_exit"),
+                planStageAdvertised: advertised.has("cursor_plan_stage"),
+            }
+            : {}),
     });
     if (state.firstTurn)
         state.firstTurn = false;

package/dist/protocol/tool-call-bridge.d.ts

@@ -1,3 +1,4 @@
+import { type HostToolDialect } from "./tools.js";
 /**
  * Cursor's interaction_update.tool_call_* carries a typed ToolCall oneof
  * (shell_tool_call, update_todos_tool_call, mcp_tool_call, …). Some of those
@@ -19,6 +20,8 @@ export type BridgedOpenCodeToolCall = {
     callId: string;
     variant: string;
 };
+/** Display variants Cursor executes itself (mcp_state + optional write spill). */
+export declare function isNativeDisplayToolCall(variant: string): boolean;
 /**
  * Normalize a full todo snapshot for `mirroredTodos` storage. Returns
  * undefined when the input is not a todo array (nothing to learn). Drops the
@@ -55,7 +58,7 @@ export declare function parseDisplayToolCall(callId: string, toolCall: Record<st
  * Pick an advertised OpenCode tool for a display call, remapping args as needed.
  * Returns undefined when nothing compatible is advertised this turn.
  */
-export declare function resolveBridgedOpenCodeToolCall(display: DisplayToolCall, advertised: Iterable<string>): BridgedOpenCodeToolCall | undefined;
+export declare function resolveBridgedOpenCodeToolCall(display: DisplayToolCall, advertised: Iterable<string>, dialect?: HostToolDialect): BridgedOpenCodeToolCall | undefined;
 /** Advertised OpenCode tool ids from Cursor McpToolDefinition descriptors. */
 export declare function advertisedToolNamesFromDescriptors(descriptors: Array<Record<string, unknown>>): string[];
 /** Walk a protobuf message and return top-level field numbers present. */

package/dist/protocol/tool-call-bridge.js

@@ -1,4 +1,4 @@
-import { mapCursorArgsToOpencode, mapCursorSubagentTypeToOpenCode, mcpRealToolName, } from "./tools.js";
+import { OPENCODE_1_TOOL_DIALECT, mapCursorArgsToOpencode, mapCursorSubagentTypeToOpenCode, mcpRealToolName, } from "./tools.js";
 import { decodeStructEntriesToJson } from "./struct.js";
 import { mapSwitchModeTarget } from "./switch-mode.js";
 const TODO_STATUS = {
@@ -50,11 +50,22 @@ const TOOL_CALL_VARIANTS = Object.keys(VARIANT_TO_OPENCODE);
 // Cursor todo merges). Data-returning, interactive, and side-effecting calls
 // must use an exec/interaction request channel where Cursor can receive their
 // actual result.
+//
+// `get_mcp_tools_tool_call` is Cursor-native discovery (prompt name
+// GetDynamicTools when dynamic namespaces are on). The agent executes it
+// server-side after mcp_state; oversized catalogs spill through write_args.
 const DISPLAY_STATE_MIRROR_VARIANTS = new Set([
     "update_todos_tool_call",
     "read_todos_tool_call",
     "create_plan_tool_call",
 ]);
+const NATIVE_DISPLAY_VARIANTS = new Set([
+    "get_mcp_tools_tool_call",
+]);
+/** Display variants Cursor executes itself (mcp_state + optional write spill). */
+export function isNativeDisplayToolCall(variant) {
+    return NATIVE_DISPLAY_VARIANTS.has(variant);
+}
 function asRecord(v) {
     return v && typeof v === "object" && !Array.isArray(v) ? v : undefined;
 }
@@ -291,7 +302,13 @@ export function parseDisplayToolCall(callId, toolCall, priorMirroredTodos) {
     if (variant === "update_todos_tool_call" || variant === "create_plan_tool_call") {
         const result = asRecord(payload.result);
         const success = asRecord(result?.success);
-        const completedTodos = Array.isArray(success?.todos) ? success.todos : undefined;
+        // Cursor's completed frame may materialize proto-default `todos: []` even
+        // when the real final snapshot is present on args.todos. An empty default
+        // must not erase that named completion snapshot. A non-empty completed
+        // payload remains authoritative (especially for merge calls).
+        const completedTodos = Array.isArray(success?.todos) && success.todos.length > 0
+            ? success.todos
+            : undefined;
         const isMerge = variant === "update_todos_tool_call" && args.merge === true;
         // OpenCode todowrite replaces the whole list. Prefer the completed payload;
         // otherwise a non-merge args list; otherwise merge against the Run snapshot.
@@ -311,7 +328,10 @@ export function parseDisplayToolCall(callId, toolCall, priorMirroredTodos) {
                 todos.unshift({
                     id: "plan",
                     content: [name && `Plan: ${name}`, overview, plan].filter(Boolean).join("\n").slice(0, 2000),
-                    status: "pending",
+                    // The plan file is already written by the time this display mirror
+                    // runs. Leaving it `pending` parks a forever-open row on hosts that
+                    // keep todowrite as the user-visible checklist.
+                    status: "completed",
                     priority: "high",
                 });
             }
@@ -454,7 +474,9 @@ function shellQuote(s) {
  * Pick an advertised OpenCode tool for a display call, remapping args as needed.
  * Returns undefined when nothing compatible is advertised this turn.
  */
-export function resolveBridgedOpenCodeToolCall(display, advertised) {
+export function resolveBridgedOpenCodeToolCall(display, advertised, dialect = OPENCODE_1_TOOL_DIALECT) {
+    if (isNativeDisplayToolCall(display.variant))
+        return undefined;
     if (!DISPLAY_STATE_MIRROR_VARIANTS.has(display.variant))
         return undefined;
     if (display.bridgeable === false)
@@ -466,7 +488,7 @@ export function resolveBridgedOpenCodeToolCall(display, advertised) {
     for (const toolName of candidates) {
         if (!names.has(toolName))
             continue;
-        const mapped = mapCursorArgsToOpencode(toolName, display.args);
+        const mapped = mapCursorArgsToOpencode(toolName, display.args, undefined, dialect);
         if (toolName === "todowrite") {
             mapped.args = {
                 todos: mapTodos(display.args.todos ?? mapped.args.todos),

package/dist/protocol/tools.d.ts

@@ -17,6 +17,7 @@ export type HostToolDialect = {
     shellTool: HostShellTool;
 };
 export declare const OPENCODE_1_TOOL_DIALECT: HostToolDialect;
+export declare const OPENCODE_2_TOOL_DIALECT: HostToolDialect;
 /** Prefer `filePath`, then `path` / `file_path` — Cursor and both OpenCode majors. */
 export declare function opencodePathArg(args: Record<string, unknown> | undefined): string | undefined;
 /**
@@ -26,7 +27,7 @@ export declare function opencodePathArg(args: Record<string, unknown> | undefine
 export declare function hostToolDialectFromTools(tools: readonly {
     name?: string;
     inputSchema?: unknown;
-}[]): HostToolDialect;
+}[], defaultDialect?: HostToolDialect): HostToolDialect;
 export declare const CUSTOM_WEBSEARCH_TOOL = "custom_websearch";
 export declare const CUSTOM_WEBFETCH_TOOL = "custom_webfetch";
 export declare const CUSTOM_LIST_MCP_RESOURCES_TOOL = "custom_list_mcp_resources";
@@ -62,7 +63,8 @@ export declare function resolveToolServerIdentity(opencodeName: string, defaultS
  * default server (`opencode`). Tools whose prefixes match configured MCP
  * servers keep those server ids (`github`, …). Composite `name` is
  * `<server>-<bareTool>`; local execution still uses the full OpenCode id
- * reconstructed in `mcpRealToolName`.
+ * reconstructed in `mcpRealToolName`. Emit in advertised order — the epoch
+ * catalog owns canonicalization; sorting here would insert on grow.
  */
 export declare function toolsToDescriptors(tools: OpencodeToolDef[], providerIdentifier?: string, knownMcpServers?: Iterable<string>): Array<Record<string, unknown>>;
 /**

package/dist/protocol/tools.js

@@ -17,6 +17,10 @@ export const OPENCODE_1_TOOL_DIALECT = {
     filePathKey: "filePath",
     shellTool: "bash",
 };
+export const OPENCODE_2_TOOL_DIALECT = {
+    filePathKey: "path",
+    shellTool: "shell",
+};
 function jsonSchemaProperties(schema) {
     if (!schema || typeof schema !== "object" || Array.isArray(schema))
         return undefined;
@@ -24,11 +28,11 @@ function jsonSchemaProperties(schema) {
     if (obj.properties && typeof obj.properties === "object" && !Array.isArray(obj.properties)) {
         return obj.properties;
     }
-    const nested = obj.jsonSchema;
+    const nested = obj.jsonSchema ?? obj.parameters ?? obj.schema;
     if (nested && typeof nested === "object" && !Array.isArray(nested)) {
-        const props = nested.properties;
-        if (props && typeof props === "object" && !Array.isArray(props)) {
-            return props;
+        const nestedProps = nested.properties;
+        if (nestedProps && typeof nestedProps === "object" && !Array.isArray(nestedProps)) {
+            return nestedProps;
         }
     }
     return undefined;
@@ -43,7 +47,7 @@ export function opencodePathArg(args) {
  * Infer the host tool dialect from advertised AI SDK schemas.
  * OpenCode 2.0 read/edit/write require `path` and rename bash → `shell`.
  */
-export function hostToolDialectFromTools(tools) {
+export function hostToolDialectFromTools(tools, defaultDialect = OPENCODE_1_TOOL_DIALECT) {
     let filePathKey;
     for (const name of ["read", "write", "edit"]) {
         const tool = tools.find((candidate) => candidate.name === name);
@@ -60,10 +64,12 @@ export function hostToolDialectFromTools(tools) {
         }
     }
     const names = new Set(tools.map((tool) => tool.name).filter((name) => typeof name === "string"));
-    const shellTool = names.has("shell") && !names.has("bash") ? "shell" : "bash";
+    const shellTool = names.has("shell") && !names.has("bash")
+        ? "shell"
+        : (names.has("bash") ? "bash" : defaultDialect.shellTool);
     if (!filePathKey) {
         // OpenCode 2 hosts advertise `shell` and `path` together; use that when schemas are opaque.
-        filePathKey = shellTool === "shell" ? "path" : "filePath";
+        filePathKey = shellTool === "shell" ? "path" : defaultDialect.filePathKey;
     }
     return { filePathKey, shellTool };
 }
@@ -115,12 +121,14 @@ export function resolveToolServerIdentity(opencodeName, defaultServer = "opencod
  * default server (`opencode`). Tools whose prefixes match configured MCP
  * servers keep those server ids (`github`, …). Composite `name` is
  * `<server>-<bareTool>`; local execution still uses the full OpenCode id
- * reconstructed in `mcpRealToolName`.
+ * reconstructed in `mcpRealToolName`. Emit in advertised order — the epoch
+ * catalog owns canonicalization; sorting here would insert on grow.
  */
 export function toolsToDescriptors(tools, providerIdentifier = "opencode", knownMcpServers = []) {
-    return [...tools]
-        .sort((left, right) => left.name.localeCompare(right.name))
-        .map((t) => {
+    // Advertised order is the prefix. The epoch catalog sorts once on first
+    // freeze and appends later names at the tail; re-sorting here would insert
+    // a new tool in front of `z` and invalidate the tools bytes.
+    return tools.map((t) => {
         const id = resolveToolServerIdentity(t.sourceName ?? t.name, providerIdentifier, knownMcpServers);
         const collisionSafeAlias = COLLISION_SAFE_ALIASES.has(t.name);
         return {
@@ -233,11 +241,10 @@ export function toolsToMcpDescriptors(tools, providerIdentifier = "opencode", kn
     if (tools.length === 0)
         return [];
     const byServer = new Map();
-    // OpenCode's tool catalog is a set even though the hook exposes it as an
-    // array. Keep both the server and per-server tool order canonical so a host
-    // that enumerates the same catalog differently does not invalidate Cursor's
-    // RequestContext prefix cache.
-    for (const t of [...tools].sort((left, right) => left.name.localeCompare(right.name))) {
+    // Walk advertised order: first-seen server, then append tools onto that
+    // server. Same-set host reorder is resolved by `resolveTurnToolState`
+    // before encode so this walk stays epoch-stable.
+    for (const t of tools) {
         const id = resolveToolServerIdentity(t.sourceName ?? t.name, providerIdentifier, knownMcpServers);
         let list = byServer.get(id.server);
         if (!list) {
@@ -250,14 +257,7 @@ export function toolsToMcpDescriptors(tools, providerIdentifier = "opencode", kn
             input_schema: encodeJsonAsValue(normalizeInputSchema(t.inputSchema)),
         });
     }
-    const orderedServers = [...byServer.keys()].sort((left, right) => {
-        if (left === providerIdentifier)
-            return right === providerIdentifier ? 0 : -1;
-        if (right === providerIdentifier)
-            return 1;
-        return left.localeCompare(right);
-    });
-    return orderedServers.map((server) => ({
+    return [...byServer.keys()].map((server) => ({
         server_name: server,
         server_identifier: server,
         tools: byServer.get(server),
@@ -872,6 +872,20 @@ function readRequestResultMetadata(raw, mappedArgs) {
         ...(typeof mappedArgs.limit === "number" ? { limit: mappedArgs.limit } : {}),
     };
 }
+/**
+ * Cursor's native write executor echoes `WriteArgs.path` on `WriteSuccess.path`.
+ * Large GetMcpTools / GetDynamicTools catalogs spill through `write_args` into
+ * `agent-tools/<uuid>.txt` and then tell the model `filePath` from that success
+ * path. Host write output is free-form prose (often no `<path>` tag), so the
+ * request path is the only host-neutral identity we can report.
+ */
+function writeRequestResultMetadata(raw, mappedArgs) {
+    const requestedPath = str(raw.path)
+        ?? str(raw.filePath)
+        ?? str(raw.file_path)
+        ?? opencodePathArg(mappedArgs);
+    return requestedPath ? { path: requestedPath } : undefined;
+}
 /**
  * A partial-read notice is for Cursor's model, never for a file. Refuse only
  * whole-file mutation forms that echo it. A targeted edit or Update File patch
@@ -1049,9 +1063,11 @@ export function parseExecServerMessage(msg, dialect = OPENCODE_1_TOOL_DIALECT) {
         ? shellStreamResultMetadata(rawArgs)
         : execVariant === "read_args" || execVariant === "pi_read_args"
             ? readRequestResultMetadata(rawArgs, mapped.args)
-            : execVariant === "grep_args"
-                ? grepRequestResultMetadata(rawArgs)
-                : undefined;
+            : execVariant === "write_args" || execVariant === "pi_write_args"
+                ? writeRequestResultMetadata(rawArgs, mapped.args)
+                : execVariant === "grep_args"
+                    ? grepRequestResultMetadata(rawArgs)
+                    : undefined;
     if (resultMetadata
         && resultMetadata.timeout_behavior !== 2
         && typeof resultMetadata.timeout_ms === "number") {
@@ -1168,7 +1184,9 @@ export function mapCursorArgsToOpencode(toolName, raw, execVariant, dialect = OP
             else {
                 content = stringValue(cleaned.content)
                     ?? stringValue(cleaned.file_text)
-                    ?? stringValue(cleaned.fileText);
+                    ?? stringValue(cleaned.fileText)
+                    ?? stringValue(cleaned.contents)
+                    ?? stringValue(cleaned.text);
             }
             if (content !== undefined)
                 args.content = content;
@@ -1919,6 +1937,15 @@ function toolPathSeparator(filePath) {
  * roots intact, including `..`, and still use `path.resolve` for host paths.
  */
 function joinToolPath(root, relative) {
+    // `path.resolve` drops a trailing separator. Glob and find use that separator
+    // to tell a directory from a file; putting it back keeps the marker.
+    const directory = relative.endsWith("/") || relative.endsWith("\\");
+    const joined = joinResolvedToolPath(root, relative);
+    if (!directory || joined.endsWith("/") || joined.endsWith("\\"))
+        return joined;
+    return `${joined}${toolPathSeparator(joined)}`;
+}
+function joinResolvedToolPath(root, relative) {
     if (!isForeignAbsoluteToolPath(root))
         return path.resolve(root, relative);
     const sep = toolPathSeparator(root);
@@ -1988,17 +2015,169 @@ function resolveToolPath(filePath, workspaceRoot) {
  * paths, indented match previews, and prose stay untouched. Grep file headers
  * drop the trailing colon only in the structured file list, not in this text.
  */
+/**
+ * Longer phrases first. "No files found" is a prefix of the pattern sentence,
+ * and a suffix check must not stop on the shorter one.
+ */
+const SEARCH_STATUS_MESSAGES = [
+    "No files found matching pattern",
+    "No matches before timeout (scan incomplete)",
+    "No files found",
+    "No matches found",
+];
+/**
+ * A glob/find miss is prose, not a path. Hosts sometimes still carry it as a
+ * path segment (`../../workspace/No files found matching pattern`) or fold that
+ * segment into a `# dir/` header plus a bare sentence. Either shape must stay
+ * the sentence: joining it onto the workspace is what lists a fake file.
+ */
+function searchStatusMessage(line) {
+    const trimmed = line.trim().replace(/^#+\s+/, "");
+    for (const message of SEARCH_STATUS_MESSAGES) {
+        if (trimmed === message || trimmed.endsWith(`/${message}`) || trimmed.endsWith(`\\${message}`)) {
+            return message;
+        }
+    }
+    return undefined;
+}
+function collapseSearchStatus(output) {
+    return output.split("\n").map((line) => searchStatusMessage(line) ?? line).join("\n");
+}
+function isSearchStatusReport(output) {
+    const lines = output.split("\n").map((line) => line.trim()).filter(Boolean);
+    return lines.length > 0 && lines.every((line) => searchStatusMessage(line) !== undefined);
+}
+/**
+ * Cursor's find/glob executor shows one path per line. A directory ends with
+ * `/`; a file does not. Some hosts instead print a folded tree:
+ *
+ *   # src/
+ *   a.ts
+ *   ## components/
+ *   button.tsx
+ *   # tests/
+ *
+ * A `# dir/` line is a grouping header, not another match. Emitting it lists
+ * the directory beside its own children (and the shared search prefix shows up
+ * as a blank entry once that prefix is the directory being searched). Expand
+ * the tree to the files underneath only. A header with no child is still just
+ * an empty directory in the walk — Cursor find reports files, so leave it out
+ * (same as targeting that empty directory and getting a miss).
+ */
+function parseGroupedPathListing(output) {
+    const lines = output.replace(/\n+$/, "").split("\n");
+    const events = [];
+    const stack = [];
+    let sawHeader = false;
+    let inNotes = false;
+    for (const line of lines) {
+        if (!line.trim()) {
+            if (sawHeader)
+                inNotes = true;
+            continue;
+        }
+        if (inNotes) {
+            events.push({ kind: "note", text: line });
+            continue;
+        }
+        const status = searchStatusMessage(line);
+        if (status) {
+            events.push({ kind: "note", text: status });
+            continue;
+        }
+        const header = /^(#+)\s+(\S.*?)\s*$/.exec(line);
+        if (header) {
+            const rawName = header[2] ?? "";
+            if (!rawName.endsWith("/") && !rawName.endsWith("\\"))
+                return undefined;
+            const depth = header[1].length - 1;
+            if (depth > stack.length)
+                return undefined;
+            const name = rawName.slice(0, -1);
+            if (!name || name === "." || name === "..")
+                return undefined;
+            stack.length = depth;
+            const parent = depth === 0 ? "" : (stack[depth - 1] ?? "");
+            if (depth > 0 && !parent)
+                return undefined;
+            const full = parent ? joinDisplayPath(parent, name) : name;
+            stack.push(full);
+            events.push({ kind: "dir", depth, path: full });
+            sawHeader = true;
+            continue;
+        }
+        if (line.startsWith(" ") || line.startsWith("\t") || /\s/.test(line) || line.includes("://")) {
+            return undefined;
+        }
+        if (line.includes("/") || line.includes("\\"))
+            return undefined;
+        if (!sawHeader) {
+            events.push({ kind: "file", path: line });
+            continue;
+        }
+        const parent = stack[stack.length - 1];
+        if (!parent)
+            return undefined;
+        events.push({ kind: "file", path: joinDisplayPath(parent, line) });
+    }
+    if (!sawHeader)
+        return undefined;
+    const paths = [];
+    const notes = [];
+    let sawFile = false;
+    for (const event of events) {
+        if (event.kind === "note")
+            notes.push(event.text);
+        else if (event.kind === "file") {
+            sawFile = true;
+            paths.push(event.path);
+        }
+        // Directory headers are structure only — never emit them as matches.
+    }
+    // The header existed only to hold the miss sentence. Emitting it lists a
+    // directory that was never a match, usually the walk back to the workspace.
+    if (!sawFile && notes.some((note) => searchStatusMessage(note)))
+        return { paths: [], notes };
+    return { paths, notes };
+}
+function joinDisplayPath(parent, child) {
+    if (!parent || parent === ".")
+        return child;
+    if (parent === "/")
+        return `/${child}`;
+    const sep = parent.includes("\\") && !parent.includes("/") ? "\\" : "/";
+    if (parent.endsWith("/") || parent.endsWith("\\"))
+        return `${parent}${child}`;
+    return `${parent}${sep}${child}`;
+}
+function renderGroupedPathListing(listing, workspaceRoot) {
+    const paths = listing.paths.map((entry) => resolveToolPath(entry, workspaceRoot));
+    if (paths.length === 0) {
+        // Grouped output that only had directory headers (empty dirs) is a miss,
+        // same as targeting that empty directory directly.
+        if (listing.notes.length === 0)
+            return "No files found";
+        return listing.notes.join("\n");
+    }
+    if (listing.notes.length === 0)
+        return paths.join("\n");
+    return [...paths, "", ...listing.notes].join("\n");
+}
 function groundSearchOutput(output, workspaceRoot) {
-    if (!workspaceRoot)
-        return output;
     const normalized = normalizeToolText(output);
-    const first = normalized.split("\n", 1)[0] ?? "";
-    const searchShaped = /^Found \d+ matches/.test(first)
-        || first === "No matches found"
-        || first === "No files found";
-    if (!searchShaped && !isBarePathList(normalized))
-        return output;
-    return normalized.split("\n").map((line) => rewriteSearchPathLine(line, workspaceRoot)).join("\n");
+    const grouped = parseGroupedPathListing(normalized);
+    if (grouped)
+        return renderGroupedPathListing(grouped, workspaceRoot);
+    const collapsed = collapseSearchStatus(normalized);
+    if (isSearchStatusReport(collapsed))
+        return collapsed;
+    if (!workspaceRoot)
+        return collapsed;
+    const first = collapsed.split("\n", 1)[0] ?? "";
+    const searchShaped = /^Found \d+ matches/.test(first) || searchStatusMessage(first) !== undefined;
+    if (!searchShaped && !isBarePathList(collapsed))
+        return collapsed;
+    return collapsed.split("\n").map((line) => rewriteSearchPathLine(line, workspaceRoot)).join("\n");
 }
 function isBarePathList(output) {
     const lines = output.split("\n").map((line) => line.trim()).filter(Boolean);
@@ -2015,8 +2194,9 @@ function isBarePathList(output) {
 function rewriteSearchPathLine(line, workspaceRoot) {
     if (!line || line.startsWith(" ") || line.startsWith("\t") || line.startsWith("("))
         return line;
-    if (line.startsWith("Found ") || line === "No matches found" || line === "No files found")
-        return line;
+    const status = searchStatusMessage(line);
+    if (status || line.startsWith("Found "))
+        return status ?? line;
     const header = /^(.*):$/.exec(line);
     if (header && !header[1]?.includes("://")) {
         return `${resolveToolPath(header[1] ?? "", workspaceRoot)}:`;
@@ -2131,20 +2311,33 @@ function grepRequestResultMetadata(raw) {
 }
 function extractGroundedPaths(output, workspaceRoot) {
     const normalized = normalizeToolText(output);
-    const directory = parseOpenCode2DirectoryListing(normalized, workspaceRoot);
+    const grouped = parseGroupedPathListing(normalized);
+    if (grouped) {
+        return grouped.paths.map((entry) => resolveToolPath(entry, workspaceRoot)).slice(0, 2000);
+    }
+    const collapsed = collapseSearchStatus(normalized);
+    if (isSearchStatusReport(collapsed))
+        return [];
+    const directory = parseOpenCode2DirectoryListing(collapsed, workspaceRoot);
     if (directory)
         return directory.entries.slice(0, 2000);
-    const first = normalized.split("\n", 1)[0]?.trim() ?? "";
-    if (/^Found \d+ matches/.test(first) || first === "No matches found" || first === "No files found") {
+    const first = collapsed.split("\n", 1)[0]?.trim() ?? "";
+    if (/^Found \d+ matches/.test(first) || searchStatusMessage(first)) {
         const paths = [];
-        for (const raw of normalized.split("\n").slice(1)) {
+        for (const raw of collapsed.split("\n").slice(1)) {
             const line = raw.trim();
-            if (!line || line.startsWith("(") || line.startsWith("Line ") || raw.startsWith(" ") || raw.startsWith("\t")) {
+            if (!line
+                || line.startsWith("(")
+                || line.startsWith("Line ")
+                || line.startsWith("#")
+                || searchStatusMessage(line)
+                || raw.startsWith(" ")
+                || raw.startsWith("\t")) {
                 continue;
             }
             const header = /^(.*):$/.exec(line);
             const candidate = header && !header[1]?.includes("://") ? (header[1] ?? "") : line;
-            if (!candidate || candidate.includes("://"))
+            if (!candidate || candidate.includes("://") || searchStatusMessage(candidate))
                 continue;
             paths.push(resolveToolPath(candidate, workspaceRoot));
         }
@@ -2348,8 +2541,9 @@ export function buildTypedExecResult(resultField, output, error, toolName, resul
             };
         }
         case "write_result": {
-            // `apply_patch` output carries no <path> tag, so prefer the path recorded
-            // when the request was remapped away from `write`.
+            // Prefer the path recorded from WriteArgs / a remapped apply_patch write.
+            // Host write output is not a `<path>` envelope, and Cursor's GetMcpTools
+            // spill copies WriteSuccess.path into the model-visible filePath.
             const remappedPath = str(resultMetadata?.path);
             if (error)
                 return { error: { path: remappedPath ?? "", error } };
@@ -2877,10 +3071,12 @@ function readFileLineCount(filePath) {
     }
 }
 function extractPathLines(output) {
-    const lines = output.split("\n").map((l) => l.trim()).filter(Boolean);
-    // Prefer absolute / relative path-looking lines; fall back to all non-empty.
-    const paths = lines.filter((l) => l.startsWith("/") || l.startsWith("./") || l.includes("/"));
-    return (paths.length > 0 ? paths : lines).slice(0, 2000);
+    const lines = collapseSearchStatus(output).split("\n").map((l) => l.trim()).filter(Boolean);
+    // A folded `# dir/` header is not itself a path. Prefer absolute / relative
+    // path-looking lines; fall back to remaining non-status lines.
+    const usable = lines.filter((line) => !searchStatusMessage(line) && !/^#+\s+\S/.test(line));
+    const paths = usable.filter((l) => l.startsWith("/") || l.startsWith("./") || l.includes("/"));
+    return (paths.length > 0 ? paths : usable).slice(0, 2000);
 }
 function countLines(s) {
     if (!s)