dsh-cursor-subscription 0.5.3

package/AGENTS.md

@@ -0,0 +1,71 @@
+# Agent installation guide
+
+Use this guide when a user asks an Agent to install, update, verify, or remove
+`dsh-cursor-subscription`.
+
+## Safety
+
+- Confirm the target DSH profile; use `web` only when it is the user's target.
+- Never print OAuth credentials, refresh tokens, authorization callbacks, or
+  the credential store.
+- Do not start, stop, or restart DSH without explicit permission.
+- Preserve the DSH profile, unrelated plugins, and stored OAuth credentials.
+  Signing out requires explicit permission.
+- Do not delete any DSH profile during install, update, verification, or uninstall.
+
+## Install
+
+When `dsh`, Node.js, and pnpm are available, install the package directly:
+
+```sh
+dsh plugin --profile web add dsh-cursor-subscription
+```
+
+For a local checkout (development), add it to the profile as a file dependency:
+
+```sh
+cd "%USERPROFILE%\.dsh\profiles\web"
+pnpm add file:D:/mcp/dsh-cursor-subscription
+```
+
+Then ensure `dsh-cursor-subscription` is listed in the profile
+`package.json` under `dsh.profile.bundles` (the `dsh plugin add` command does
+this automatically for published packages).
+
+Update with `dsh plugin --profile web update dsh-cursor-subscription`.
+Uninstall with `dsh plugin --profile web remove dsh-cursor-subscription`.
+
+## Verify
+
+```sh
+dsh plugin --profile web list dsh-cursor-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+Success requires:
+
+1. The requested package version appears once.
+2. `cursor-subscription` appears once in the composed config after install
+   or update, and is absent after uninstall.
+3. No unrelated profile or plugin changed.
+4. A running DSH process was not restarted by the operation.
+
+Do not treat `dsh plugin --profile web peers check` as the completion test.
+If the user authorizes a live check, restart DSH manually, open
+**Settings -> Cursor**, and verify the page loads. The Cursor provider route
+(`cursor-subscription`) must appear in the model picker. Only when the user
+explicitly requests a live check, run one simple chat message and confirm the
+streamed reply appears in the conversation.
+
+## Failure handling
+
+- If the settings page reports "无法读取 Cursor 状态" the loopback RPC failed;
+  confirm the plugin bundle is listed once in the composed config.
+- A "Cursor subscription is not signed in" error on a model call means the
+  credential store is empty; the user must complete the browser login flow.
+- Cursor's Agent protocol is undocumented and changes; a transport or
+  `CURSOR_ERROR` failure on the chat path is expected to need a plugin update.
+
+On any failure, report the sanitized command error, DSH version, selected
+profile, what changed, and what remains unverified. Do not patch DSH, wipe
+credentials, delete a profile, or claim success from a partial check.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-cursor-subscription contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,78 @@
+# DSH Cursor Subscription
+
+**English** | [简体中文](README_zh.md)
+
+Sign in to your Cursor account and use your Cursor subscription directly from DeepSeek Harness—without an API key and without depending on the Cursor IDE or Cursor CLI. The plugin preserves DSH's existing session, tool, and permission systems: once signed in, you can select Cursor subscription models from the model picker, while agent tool calls are executed through DSH's local toolset.
+
+> ⚠️ This plugin integrates with Cursor's unpublished Agent protocol (`agent.v1.AgentService/Run`). It is a community reverse-engineering project and may stop working when Cursor changes its server-side implementation. This project is not affiliated with or endorsed by Anysphere or Cursor. Please comply with Cursor's terms of service.
+
+## Features
+
+- Use a Cursor subscription directly in DSH through browser-based PKCE sign-in—no API key required.
+- Store credentials in DSH's local credential store and refresh access tokens automatically.
+- Discover models available to the current account dynamically through Cursor's `GetUsableModels`, with a built-in fallback list if discovery fails.
+- Stream conversations with reasoning output and DSH tool calls.
+- View sign-in status and token expiration in the settings page.
+- View and manually refresh subscription usage, including requests, Auto + Composer usage, other-model (API) usage, per-model spend, on-demand spend, and billing cycle.
+- View and manually refresh the models available to the current account.
+- Configure the per-run tool-round limit and HTTP retry count, interval, and status codes from the settings page.
+
+## Installation
+
+### Install with an Agent (Recommended)
+
+Send the agent a link to [AGENTS.md](AGENTS.md). It contains the instructions for installation, updates, removal, and verification.
+
+### Manual Installation with the `dsh` Command
+
+```sh
+dsh plugin --profile web add dsh-cursor-subscription
+dsh plugin --profile web list dsh-cursor-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+The installed package list should contain exactly one `dsh-cursor-subscription`, and the composed configuration should contain exactly one `cursor-subscription` entry.
+
+### Local Development Installation
+
+Run the following command in the profile directory, such as `%USERPROFILE%\.dsh\profiles\web`:
+
+```sh
+pnpm add file:D:/mcp/dsh-cursor-subscription
+```
+
+Then add `dsh-cursor-subscription` to the `dsh.profile.bundles` array in `package.json` and restart DSH.
+
+## Sign-in and Usage
+
+1. Open **Settings -> Cursor Subscription** in DSH.
+2. Select **Browser Sign-in**. Your browser will open the Cursor sign-in page.
+3. Complete sign-in and authorization. The settings page will automatically show that you are signed in.
+4. Select a Cursor model from the model picker, such as `composer-2` or `claude-4-sonnet`.
+
+When a tool is required, the agent converts Cursor's tool request into a local DSH tool execution. The result is returned to the model through the conversation history; Cursor's filesystem tools are not used.
+
+The **Runtime settings** card controls the maximum tool rounds in one Cursor run and the HTTP retry policy. Retry count means additional attempts and defaults to `0` (disabled). Cursor's streaming POST protocol cannot prove that a failed attempt was not processed remotely, so enabling retries may repeat model work or usage. Retries occur only before any response output when the initial HTTP status matches the configured list.
+
+## Updating and Removing
+
+```sh
+dsh plugin --profile web update dsh-cursor-subscription   # Update
+dsh plugin --profile web remove dsh-cursor-subscription   # Remove
+```
+
+If DSH is running, restart it manually after installation or an update.
+
+## Troubleshooting
+
+- **DSH still reports that you are signed out after sign-in:** Make sure the browser completed the entire authorization flow and redirected to the completion page. Polling waits for up to approximately 2.5 minutes.
+- **The model list is empty:** `GetUsableModels` depends on the account type. If discovery fails, the plugin uses its built-in model list, and you can still enter a model name manually.
+- **Requests return 401:** If the access token has expired and the refresh token is no longer valid, sign in again from the settings page.
+- **The server protocol changed:** Cursor's Agent protocol is unpublished. If requests fail, check for a plugin update.
+
+## Scope and Support
+
+- Cursor-native features such as image generation and web search are outside this plugin's scope.
+- Report problems through the repository's Issues page.
+
+[MIT](LICENSE)

package/README_zh.md

@@ -0,0 +1,91 @@
+# DSH Cursor Subscription
+
+[English](README.md) | **简体中文**
+
+在 DeepSeek Harness 中直接登录 Cursor 账户并使用 Cursor 订阅，不需要 API Key，
+也不依赖 Cursor IDE 或 Cursor CLI。保留 DSH 原有的会话、工具和权限体系：
+登录后在模型选择器中即可选择 Cursor 订阅模型，Agent 的工具调用走 DSH 本地的
+工具集。
+
+> ⚠️ 本插件接入的是 Cursor 未公开的 Agent 协议（`agent.v1.AgentService/Run`），
+> 属于社区逆向工程成果，可能随 Cursor 服务端变化而失效。本项目与 Anysphere /
+> Cursor 无隶属或背书关系，请遵守 Cursor 的服务条款。
+
+## 能做什么
+
+- 在 DSH 中直接使用 Cursor 订阅（浏览器 PKCE 登录，无 API Key）；
+- 登录凭据保存在本机 DSH credential 存储中，自动刷新访问令牌；
+- 通过 Cursor 的 `GetUsableModels` 动态发现当前账户可用的模型（失败时回退到内置列表）；
+- 流式对话，支持思考过程（reasoning）与 DSH 工具调用；
+- 设置页可查看登录状态与令牌有效期；
+- 设置页可查询订阅用量（包含请求、Auto + Composer、其他模型占比、各模型消费、按需消费、账单周期）并手动刷新；
+- 设置页可查看当前账户可用的模型列表并手动刷新；
+- 可在设置页调整单次任务工具轮次上限，以及 HTTP 重试次数、间隔和状态码。
+
+## 安装
+
+### 交给 Agent（推荐）
+
+把 `AGENTS.md` 的链接发给 Agent 即可完成安装、更新、卸载与验收。
+
+### 手动安装（已有 dsh 命令）
+
+```sh
+dsh plugin --profile web add dsh-cursor-subscription
+dsh plugin --profile web list dsh-cursor-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+安装列表中应只有一个 `dsh-cursor-subscription`，配置中应只有一个
+`cursor-subscription` 条目。
+
+### 本地开发安装
+
+在 profile 目录（如 `%USERPROFILE%\.dsh\profiles\web`）执行：
+
+```sh
+pnpm add file:D:/mcp/dsh-cursor-subscription
+```
+
+并把 `dsh-cursor-subscription` 加入 `package.json` 的
+`dsh.profile.bundles` 列表，然后重启 DSH。
+
+## 登录与使用
+
+1. 打开 DSH 的 **设置 -> Cursor 订阅**；
+2. 点击「浏览器登录」，浏览器会打开 Cursor 登录页；
+3. 登录并授权后，设置页自动显示「已登录」；
+4. 在模型选择器中选择 Cursor 模型（如 `composer-2`、`claude-4-sonnet`）。
+
+需要调用工具时，Agent 会把 Cursor 侧的工具请求转成 DSH 本地工具执行，结果通过
+对话历史回传给模型，全程不经过 Cursor 的文件系统工具。
+
+「运行设置」卡片可以调整单次 Cursor 任务的最大工具轮次和 HTTP 重试策略。重试次数指
+首次请求之外的额外尝试次数，默认 `0`（关闭）。Cursor 的流式 POST 协议无法证明失败请求
+未被远端处理，因此启用重试可能重复模型工作或用量；仅当尚未产生任何输出且初始 HTTP
+状态码匹配列表时才会重试。
+
+## 更新与卸载
+
+```sh
+dsh plugin --profile web update dsh-cursor-subscription   # 更新
+dsh plugin --profile web remove dsh-cursor-subscription   # 卸载
+```
+
+如果 DSH 正在运行，安装或更新后请手动重启。
+
+## 常见问题
+
+- **登录后仍提示未登录**：确认浏览器完成了整个授权流程（登录页跳转回完成页）；
+  轮询最长等待约 2.5 分钟。
+- **模型列表为空**：`GetUsableModels` 依赖账户类型，失败时插件会使用内置模型列表，
+  仍可手动输入模型名。
+- **请求报 401**：令牌过期且 refresh token 失效时，需要在设置页重新登录。
+- **服务端协议变更**：Cursor 的 Agent 协议是未公开接口，若请求失败请检查插件更新。
+
+## 边界与支持
+
+- 图片生成、联网搜索等 Cursor 内置能力不在本插件范围内；
+- 问题反馈请在仓库 Issues 中提交。
+
+[MIT](LICENSE)

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# One plugin owns the Cursor provider route and the host-only account RPC.
+# It leaves DSH's model and persistent web configuration untouched.
+- insert:
+    - id: cursor-subscription
+      name: 'dsh-cursor-subscription'