cursor-route 0.1.1 → 0.1.4

package/README.md

@@ -46,7 +46,7 @@ Exact dollars vary — the point is **reuse subscriptions you already have**.
 ```bash
 # Prerequisites
 brew install tmux          # or build tmux into ~/.local
-# Bun optional — Node 20+ works via pinned tsx
+# Bun or Node 20+ — npm package ships compiled dist/ (Node runs it directly)
 
 # Preferred install
 npm i -g cursor-route
@@ -56,7 +56,7 @@ grok login                 # if using Grok
 # configure claude-ds — see DeepSeek setup below
 
 cursor-route health
-# without tmux (CI / headless):
+# without tmux / workers (CI / headless infra smoke):
 CURSOR_ROUTE_RELAXED=1 cursor-route health
 ```
 
@@ -141,19 +141,64 @@ This is **not** inside a git clone of this repo.
 - See [SECURITY.md](./SECURITY.md)
 - Local orchestration only — no LIVE Discord / trading egress demos
 
-## Also from Cemini
+## FAQ
 
-- [Atto](https://youratto.com) — genealogy / archival agents  
-- [GuruWatcher](https://guruwatcher.com) — alert workflows  
-- Cemini research & trading tooling (private)
+**What is cursor-route?**  
+cursor-route is a public MIT CLI and Cursor skill that runs parallel coding workers in tmux while Cursor remains the planner. DeepSeek handles the mid lane, and Grok CLI handles the hard lane.
+
+**How is this different from Codex orchestrator?**  
+It uses the familiar strategist and worker-pane shape, but it is not a Codex clone. cursor-route uses Cursor as the planner and DeepSeek plus Grok CLI as workers. Codex is not required.
+
+**Does mid lane use Anthropic Claude?**  
+No. The mid worker is DeepSeek. Claude Code is the harness, configured with `ANTHROPIC_BASE_URL=https://api.deepseek.com/anthropic` and a DeepSeek key in `ANTHROPIC_AUTH_TOKEN`.
+
+**How do I install?**  
+Run `npm i -g cursor-route`, install tmux if needed, then run `cursor-route health`. The package is available at https://www.npmjs.com/package/cursor-route, and the source is at https://github.com/cemini23/cursor-route.
+
+**Is it free?**  
+The cursor-route code is open source under MIT. It does not make the worker services free. Your costs depend on Cursor, DeepSeek API usage, and the Grok access or balance available to you.
+
+## Related
+
+- Newsletter: [Outlier Weekly](https://outlierweekly.substack.com)
+- YouTube: [@Cemini23](https://www.youtube.com/@Cemini23)
+- Agent meta-wiki: [cemini-claude-code-CCC](https://github.com/cemini23/cemini-claude-code-CCC)
+- Products: [Atto](https://youratto.com) · [GuruWatcher](https://guruwatcher.com)
+- Agent toolkit: [vet](https://github.com/cemini23/vet) · [wikilint](https://github.com/cemini23/wikilint) · [phase0](https://github.com/cemini23/phase0) · [agent-toolkit-demo](https://github.com/cemini23/agent-toolkit-demo) · [ara-schema](https://github.com/cemini23/ara-schema) · [cursor-audit](https://github.com/cemini23/agent-toolkit-demo/tree/main/skills/cursor-audit) · [super-audit](https://github.com/cemini23/agent-toolkit-demo/tree/main/skills/super-audit)
+- Public wikis: [Gambling](https://github.com/cemini23/Gambling-wiki) · [Game Dev](https://github.com/cemini23/Game-Dev-wiki) · [SEO/GEO](https://github.com/cemini23/SEO-GEO-B-M-Wiki) · [Cybersecurity](https://github.com/cemini23/Cybersecurity-wiki) · [3D Printing](https://github.com/cemini23/3D-Printing-Wiki) · [Image Gen](https://github.com/cemini23/uncensored-image-gen-wiki)
+- Trading: [world-cup-bot](https://github.com/cemini23/world-cup-bot)
+- Donation wallets (canonical): [SUPPORT.md](SUPPORT.md)
+
+## Support
+
+Thank you for your support — stars, issues, shares, and tips all help keep this CLI and the broader Cemini open-research stack alive.
+
+If you’d like to tip, use the **donation-only** addresses below (not trading or production wallets). Prefer following the work? These are the best places to start:
+
+| Project | Link |
+|---------|------|
+| **Outlier Weekly** (methodology newsletter) | [outlierweekly.substack.com](https://outlierweekly.substack.com) |
+| **Atto** — organize Italian family documents on your computer | [youratto.com](https://youratto.com) |
+| **GuruWatcher** — Discord alerts for your newsletter’s price levels | [guruwatcher.com](https://guruwatcher.com) |
+| **YouTube** | [@Cemini23](https://www.youtube.com/@Cemini23) |
+
+| Chain family | Address |
+|--------------|---------|
+| **EVM** (Ethereum, Polygon, Base, Arbitrum, …) | `0x444C5C2eC439E0382aa5a17F70313c536BcC5D58` |
+| **Solana / SVM** | `J4zNn4hK9jTrKBFY8sbAGJHLoZvXvQf4B9pQSbSrocZE` |
+| **Polymarket** (referral) | [polymarket.com/?r=Cemini23](https://polymarket.com/?r=Cemini23) |
+
+Full wallet note: [SUPPORT.md](SUPPORT.md) · canon also in [CCC SUPPORT.md](https://github.com/cemini23/cemini-claude-code-CCC/blob/main/SUPPORT.md).
+
+We’re grateful you’re here. Thank you for your support.
 
 ## License
 
-MIT © Cemini
+MIT © Cemini — see [LICENSE](LICENSE).
 
 ## Roadmap (explicitly later)
 
-- npm publish + Homebrew tap  
+- Homebrew tap  
 - Native DeepSeek harness adapter  
 - Codebase map injection (`--map`)  
 - Cursor CLI `agent` as alternate supervisor  

package/SECURITY.md

@@ -21,6 +21,8 @@ Do **not** open a public issue for credential leaks or RCE-class bugs.
 
 ## Supply chain
 
-- Runtime dependencies: **none** (Node/Bun + system `tmux` + worker CLIs).
+- Declared runtime npm dependencies: **none**. System needs: Node ≥20 or Bun, `tmux`, and worker CLIs (Grok / claude-ds).
+- The npm package ships a compiled `dist/` (plain JS, no loader). The bin shim and the completion hook run the compiled JS via `node`; there is **no network fetch of `tsx` on the happy path**.
+- Running from a git clone without a build uses Bun to execute `src/` directly (Bun runs TypeScript natively) — also offline-friendly.
 - Review `package.json` before upgrading.
 - Prefer pinned git tags for production installs.

package/SUPPORT.md

@@ -0,0 +1,24 @@
+# Support Cemini open research
+
+Thank you for your interest — and for any support, large or small. Tips and kind words both help keep Cemini research and tooling open.
+
+Voluntary tips fund wikis, OSS tooling, and public research. **Donation-only addresses** — not trading or production wallets.
+
+| Chain family | Address |
+|--------------|---------|
+| **EVM** (Ethereum, Polygon, Base, Arbitrum, …) | `0x444C5C2eC439E0382aa5a17F70313c536BcC5D58` |
+| **Solana / SVM** | `J4zNn4hK9jTrKBFY8sbAGJHLoZvXvQf4B9pQSbSrocZE` |
+| **Polymarket** (referral) | [polymarket.com/?r=Cemini23](https://polymarket.com/?r=Cemini23) |
+
+If you’d rather follow along or try something we ship:
+
+- Newsletter — [Outlier Weekly](https://outlierweekly.substack.com) (Substack)
+- Genealogy kit — [youratto.com](https://youratto.com)
+- Newsletter parameter alerts — [guruwatcher.com](https://guruwatcher.com)
+- YouTube — [@Cemini23](https://www.youtube.com/@Cemini23)
+- Agent meta-wiki — [cemini-claude-code-CCC](https://github.com/cemini23/cemini-claude-code-CCC)
+- This CLI — [cursor-route](https://github.com/cemini23/cursor-route)
+
+Canonical federation copy: [CCC SUPPORT.md](https://github.com/cemini23/cemini-claude-code-CCC/blob/main/SUPPORT.md).
+
+We’re grateful you’re here. Thank you for your support.

package/bin/cursor-route

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# cursor-route — thin launcher (Bun preferred, Node+tsx fallback)
+# cursor-route — thin launcher (compiled dist via node, else Bun on src)
 set -euo pipefail
 SOURCE="${BASH_SOURCE[0]}"
 while [ -L "$SOURCE" ]; do
@@ -9,16 +9,14 @@ while [ -L "$SOURCE" ]; do
 done
 SCRIPT_DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-CLI="$ROOT/src/cli.ts"
 
-if command -v bun >/dev/null 2>&1; then
-  exec bun "$CLI" "$@"
+if [ -f "$ROOT/dist/cli.js" ] && command -v node >/dev/null 2>&1; then
+  exec node "$ROOT/dist/cli.js" "$@"
 fi
 
-if command -v npx >/dev/null 2>&1; then
-  # Pin tsx for supply-chain predictability (no floating --yes latest)
-  exec npx --yes tsx@4.19.4 "$CLI" "$@"
+if command -v bun >/dev/null 2>&1; then
+  exec bun "$ROOT/src/cli.ts" "$@"
 fi
 
-echo "cursor-route: need Bun (https://bun.sh) or Node 20+ with npx" >&2
+echo "cursor-route: no compiled build (run 'bun run build') and no Bun — need Node 20+ or Bun (https://bun.sh)" >&2
 exit 127

package/bin/cursor-route.js

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
 /**
- * npm bin entry — prefers Bun, falls back to pinned tsx.
+ * npm bin redirect — prefers compiled dist (node), else Bun on src.
+ * The shell launcher (bin/cursor-route) is the primary npm bin entry;
+ * this file keeps direct `node bin/cursor-route.js` working the same way.
  */
 import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
 
 const root = join(dirname(fileURLToPath(import.meta.url)), "..");
-const cli = join(root, "src", "cli.ts");
 const args = process.argv.slice(2);
 
 function run(cmd, cmdArgs) {
@@ -16,11 +18,12 @@ function run(cmd, cmdArgs) {
   process.exit(r.status ?? 1);
 }
 
-const bun = spawnSync("bun", ["--version"], { encoding: "utf8" });
-if (bun.status === 0) {
-  run("bun", [cli, ...args]);
+function main() {
+  const distCli = join(root, "dist", "cli.js");
+  if (existsSync(distCli) && run("node", [distCli, ...args]) !== null) return;
+  if (run("bun", [join(root, "src", "cli.ts"), ...args]) !== null) return;
+  console.error("cursor-route: no compiled build (run 'bun run build') and no Bun — need Node 20+ or Bun (https://bun.sh)");
+  process.exit(127);
 }
 
-run("npx", ["--yes", "tsx@4.19.4", cli, ...args]);
-console.error("cursor-route: need Bun (https://bun.sh) or Node 20+ with npx");
-process.exit(127);
+main();

package/dist/adapters/claude-ds.js

@@ -0,0 +1,189 @@
+import { execSync } from "node:child_process";
+import { readFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { shellQuote } from "../util.js";
+/**
+ * Mid-lane = DeepSeek (cheap). The Claude Code binary is only a harness —
+ * requests must hit DeepSeek, not Anthropic.
+ *
+ * Resolution order:
+ * 1. claude-ds / deepseek-claude shims
+ * 2. stock `claude` when ANTHROPIC_BASE_URL (env or ~/.claude/settings.json)
+ *    points at api.deepseek.com — auto-ok, no opt-in
+ * 3. stock `claude` on Anthropic only if CURSOR_ROUTE_ALLOW_ANTHROPIC=1
+ *    (explicit expensive escape hatch — not the product default)
+ */
+function which(cmd) {
+    try {
+        return (execSync(`command -v ${shellQuote(cmd)}`, {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim() || null);
+    }
+    catch {
+        return null;
+    }
+}
+/** True when URL hostname is deepseek.com (or a subdomain). */
+export function isDeepSeekBaseUrl(url) {
+    try {
+        const u = new URL(url);
+        const host = u.hostname.toLowerCase();
+        return host === "deepseek.com" || host.endsWith(".deepseek.com");
+    }
+    catch {
+        return false;
+    }
+}
+function deepseekBaseFromSettings() {
+    // Home settings only — do not trust cwd/.claude/settings.json (spoof / exfil risk)
+    const p = join(homedir(), ".claude", "settings.json");
+    if (!existsSync(p))
+        return null;
+    try {
+        const j = JSON.parse(readFileSync(p, "utf8"));
+        const url = j.env?.ANTHROPIC_BASE_URL;
+        if (url && isDeepSeekBaseUrl(url))
+            return url;
+    }
+    catch {
+        /* ignore */
+    }
+    return null;
+}
+/** Resolved DeepSeek base URL for the mid-lane harness, or null. */
+export function resolvedDeepSeekBaseUrl() {
+    for (const candidate of [
+        process.env.ANTHROPIC_BASE_URL,
+        process.env.CURSOR_ROUTE_ANTHROPIC_BASE_URL,
+        deepseekBaseFromSettings(),
+    ]) {
+        if (candidate && isDeepSeekBaseUrl(candidate))
+            return candidate;
+    }
+    return null;
+}
+/** True when Claude Code harness is routed to DeepSeek (cheap path). */
+export function isDeepSeekRouted() {
+    return Boolean(resolvedDeepSeekBaseUrl());
+}
+function resolveClaudeDs() {
+    // Env override lets tests pin a fake claude-ds (and power users pick a specific binary).
+    if (process.env.CURSOR_ROUTE_CLAUDE_DS_BIN) {
+        return {
+            binary: process.env.CURSOR_ROUTE_CLAUDE_DS_BIN,
+            mode: "claude-ds (CURSOR_ROUTE_CLAUDE_DS_BIN override)",
+        };
+    }
+    for (const c of [
+        { cmd: "claude-ds", mode: "claude-ds (DeepSeek shim)" },
+        { cmd: "deepseek-claude", mode: "deepseek-claude" },
+    ]) {
+        const path = which(c.cmd);
+        if (path)
+            return { binary: path, mode: c.mode };
+    }
+    const claude = which("claude");
+    if (!claude)
+        return null;
+    if (isDeepSeekRouted()) {
+        return {
+            binary: claude,
+            mode: "claude → DeepSeek (ANTHROPIC_BASE_URL)",
+        };
+    }
+    // Expensive Anthropic path — opt-in only so we never silently bill frontier rates
+    if (process.env.CURSOR_ROUTE_ALLOW_ANTHROPIC === "1" ||
+        process.env.CURSOR_ROUTE_ALLOW_STOCK_CLAUDE === "1" // legacy alias
+    ) {
+        return {
+            binary: claude,
+            mode: "claude → Anthropic (CURSOR_ROUTE_ALLOW_ANTHROPIC=1)",
+        };
+    }
+    return null;
+}
+/**
+ * Env that must reach stock `claude` for DeepSeek routing.
+ * Passed via process/tmux env — never interpolated into the printed command.
+ */
+function deepSeekWorkerEnv() {
+    const base = resolvedDeepSeekBaseUrl();
+    if (!base)
+        return undefined;
+    const env = { ANTHROPIC_BASE_URL: base };
+    const token = process.env.ANTHROPIC_AUTH_TOKEN ||
+        process.env.ANTHROPIC_API_KEY ||
+        process.env.DEEPSEEK_API_KEY ||
+        "";
+    if (token)
+        env.ANTHROPIC_AUTH_TOKEN = token;
+    const model = process.env.ANTHROPIC_MODEL;
+    if (model)
+        env.ANTHROPIC_MODEL = model;
+    return env;
+}
+export const claudeDsAdapter = {
+    kind: "claude-ds",
+    label: "DeepSeek (via Claude Code harness)",
+    health() {
+        const resolved = resolveClaudeDs();
+        if (!resolved) {
+            const hasClaude = Boolean(which("claude"));
+            return {
+                worker: "claude-ds",
+                ok: false,
+                binary: null,
+                detail: hasClaude
+                    ? "claude on PATH but ANTHROPIC_BASE_URL is not DeepSeek — set https://api.deepseek.com/anthropic (see README). Refusing Anthropic default so mid-lane stays cheap."
+                    : "need claude-ds, deepseek-claude, or claude + DeepSeek ANTHROPIC_BASE_URL — see README DeepSeek setup",
+            };
+        }
+        return {
+            worker: "claude-ds",
+            ok: true,
+            binary: resolved.binary,
+            detail: `ok (${resolved.mode})`,
+        };
+    },
+    buildLaunch({ promptFile, cwd, alwaysApprove }) {
+        const resolved = resolveClaudeDs();
+        if (!resolved) {
+            throw new Error("DeepSeek worker not available — run: cursor-route health");
+        }
+        const ask = process.env.CURSOR_ROUTE_ASK === "1" || process.env.CLAUDE_DS_ASK === "1";
+        const skip = alwaysApprove && !ask;
+        // Stock `claude` needs DeepSeek env injected into the worker process
+        // (tmux panes may not inherit client env from a long-lived server).
+        const env = resolved.mode.startsWith("claude → DeepSeek") ? deepSeekWorkerEnv() : undefined;
+        if (resolved.mode.startsWith("claude-ds")) {
+            const parts = [
+                shellQuote(resolved.binary),
+                "-PromptFile",
+                shellQuote(promptFile),
+            ];
+            if (skip)
+                parts.push("--dangerously-skip-permissions");
+            return {
+                worker: "claude-ds",
+                command: `cd ${shellQuote(cwd)} && ${parts.join(" ")}`,
+                alwaysApprove: skip,
+                env,
+            };
+        }
+        const parts = [
+            shellQuote(resolved.binary),
+            "-p",
+            `"$(cat ${shellQuote(promptFile)})"`,
+        ];
+        if (skip)
+            parts.push("--dangerously-skip-permissions");
+        return {
+            worker: "claude-ds",
+            command: `cd ${shellQuote(cwd)} && ${parts.join(" ")}`,
+            alwaysApprove: skip,
+            env,
+        };
+    },
+};

package/dist/adapters/grok.js

@@ -0,0 +1,57 @@
+import { execSync } from "node:child_process";
+import { shellQuote } from "../util.js";
+function findGrok() {
+    // Env override lets tests pin a fake grok (and power users pick a specific binary).
+    if (process.env.CURSOR_ROUTE_GROK_BIN)
+        return process.env.CURSOR_ROUTE_GROK_BIN;
+    try {
+        return (execSync("command -v grok", {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim() || null);
+    }
+    catch {
+        return null;
+    }
+}
+export const grokAdapter = {
+    kind: "grok",
+    label: "Grok CLI (xAI)",
+    health() {
+        const binary = findGrok();
+        if (!binary) {
+            return {
+                worker: "grok",
+                ok: false,
+                binary: null,
+                detail: "grok not on PATH — install from https://x.ai/cli then run: grok login",
+            };
+        }
+        return {
+            worker: "grok",
+            ok: true,
+            binary,
+            detail: "ok (auth checked at first start — run grok login if jobs fail)",
+        };
+    },
+    buildLaunch({ promptFile, cwd, alwaysApprove }) {
+        const binary = findGrok() || "grok";
+        const parts = [
+            shellQuote(binary),
+            "-p",
+            `"$(cat ${shellQuote(promptFile)})"`,
+            "--cwd",
+            shellQuote(cwd),
+            "--no-auto-update",
+            "--output-format",
+            "plain",
+        ];
+        if (alwaysApprove)
+            parts.push("--always-approve");
+        return {
+            worker: "grok",
+            command: parts.join(" "),
+            alwaysApprove,
+        };
+    },
+};

package/dist/adapters/index.js

@@ -0,0 +1,15 @@
+import { grokAdapter } from "./grok.js";
+import { claudeDsAdapter } from "./claude-ds.js";
+const registry = {
+    grok: grokAdapter,
+    "claude-ds": claudeDsAdapter,
+};
+export function getAdapter(worker) {
+    const a = registry[worker];
+    if (!a)
+        throw new Error(`Unknown worker: ${worker}`);
+    return a;
+}
+export function allAdapters() {
+    return Object.values(registry);
+}

package/dist/adapters/types.js

@@ -0,0 +1 @@
+export {};