dsh-subscriptions 0.2.3 → 0.3.0

package/lib/index.js

@@ -1,20 +1,17 @@
 import z from "@deepseek-ai/schemastery";
 import * as llm from "@deepseek-ai/dsh-llm";
-import { CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, QUOTA_EXCEEDED_CODE, ReasoningEffortId, ToolCallId, attributionHeaders, errorChain, isContextWindowExceededError, isQuotaExceededError, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
-import http, { createServer } from "node:http";
+import { CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, QUOTA_EXCEEDED_CODE, ReasoningEffortId, attributionHeaders, errorChain, isContextWindowExceededError, isQuotaExceededError, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
+import { createServer } from "node:http";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { getDefaultAutoSelectFamilyAttemptTimeout, setDefaultAutoSelectFamilyAttemptTimeout } from "node:net";
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { execFileSync } from "node:child_process";
-import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { AttachmentId } from "@deepseek-ai/dsh-attachment";
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import http2 from "node:http2";
-import https from "node:https";
-import { gunzipSync } from "node:zlib";
 import { WebError } from "@deepseek-ai/dsh-web";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 
@@ -1786,13 +1783,13 @@ function parseStore(text, path) {
 			console.warn(`subscriptions auth store: entry "${provider}" is not an object; skipped`);
 			continue;
 		}
-		const record$4 = entry;
-		if (typeof record$4.accessToken === "string") {
-			if (!isValidSessionShape(record$4)) {
+		const record$2 = entry;
+		if (typeof record$2.accessToken === "string") {
+			if (!isValidSessionShape(record$2)) {
 				console.warn(`subscriptions auth store: legacy entry "${provider}" has no usable tokens; skipped`);
 				continue;
 			}
-			const session = record$4;
+			const session = record$2;
 			const key = provider === "codex" ? session.accountId : accountKeyOf(provider, session);
 			store[provider] = {
 				default: key,
@@ -1800,12 +1797,12 @@ function parseStore(text, path) {
 			};
 			continue;
 		}
-		const accounts = record$4.accounts;
+		const accounts = record$2.accounts;
 		if (typeof accounts !== "object" || accounts === null || Array.isArray(accounts)) {
 			console.warn(`subscriptions auth store: entry "${provider}" has no accounts map; skipped`);
 			continue;
 		}
-		if (record$4.default !== void 0 && typeof record$4.default !== "string") {
+		if (record$2.default !== void 0 && typeof record$2.default !== "string") {
 			console.warn(`subscriptions auth store: entry "${provider}" default is not a string; skipped`);
 			continue;
 		}
@@ -1813,9 +1810,9 @@ function parseStore(text, path) {
 		for (const [account, session] of Object.entries(accounts)) if (isValidSessionShape(session)) kept[account] = session;
 		else console.warn(`subscriptions auth store: entry "${provider}/${account}" has no usable accessToken/refreshToken/expiresAt; skipped`);
 		if (Object.keys(kept).length === 0) continue;
-		const validDefault = record$4.default === void 0 || record$4.default in kept ? record$4.default : Object.keys(kept)[0];
+		const validDefault = record$2.default === void 0 || record$2.default in kept ? record$2.default : Object.keys(kept)[0];
 		store[provider] = {
-			...record$4,
+			...record$2,
 			default: validDefault,
 			accounts: kept
 		};
@@ -2011,9 +2008,9 @@ function usedFromCounts(total, count) {
 * @throws when the key is pay-as-you-go, the endpoint or its business status
 *   fails, the body has no `model_remains`, or no window is a finite bar.
 */
-async function fetchMiniMaxUsage(key, region, http$1 = fetch, signal) {
+async function fetchMiniMaxUsage(key, region, http = fetch, signal) {
 	if (key.startsWith("sk-api-")) throw new Error("MiniMax requires a subscription key, not a pay-as-you-go key");
-	const response = await http$1(`https://www.minimax.${region === "cn" ? "cn" : "io"}/v1/token_plan/remains`, {
+	const response = await http(`https://www.minimax.${region === "cn" ? "cn" : "io"}/v1/token_plan/remains`, {
 		headers: {
 			authorization: `Bearer ${key}`,
 			"content-type": "application/json"
@@ -2093,7 +2090,7 @@ function kimiReset(value) {
 		if (seconds !== void 0 && seconds > 0) return Date.now() + seconds * 1e3;
 	}
 }
-function record$3(value) {
+function record$1(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function percent(value) {
@@ -2104,8 +2101,8 @@ function resetTime$1(value) {
 	const parsed = Date.parse(value);
 	return Number.isFinite(parsed) ? parsed : void 0;
 }
-async function getUsage(url, apiKey, http$1, signal) {
-	const response = await http$1(url, {
+async function getUsage(url, apiKey, http, signal) {
+	const response = await http(url, {
 		headers: {
 			accept: "application/json",
 			authorization: `Bearer ${apiKey}`
@@ -2116,8 +2113,8 @@ async function getUsage(url, apiKey, http$1, signal) {
 	return parseProviderJson(response, "external usage");
 }
 /** Read the three account-wide OpenCode Go windows from its Go gateway. */
-async function fetchOpenCodeGoUsage(apiKey, http$1 = fetch, signal) {
-	const usage = record$3(record$3(await getUsage("https://opencode.ai/zen/go/v1/usage", apiKey, http$1, signal))?.usage);
+async function fetchOpenCodeGoUsage(apiKey, http = fetch, signal) {
+	const usage = record$1(record$1(await getUsage("https://opencode.ai/zen/go/v1/usage", apiKey, http, signal))?.usage);
 	if (usage === void 0) throw new Error("OpenCode Go usage response has no usage object");
 	const windows = [];
 	for (const [field, kind, scope] of [
@@ -2137,7 +2134,7 @@ async function fetchOpenCodeGoUsage(apiKey, http$1 = fetch, signal) {
 			"Monthly"
 		]
 	]) {
-		const value = record$3(usage[field]);
+		const value = record$1(usage[field]);
 		const usedPercent = percent(value?.percent);
 		if (usedPercent === void 0) continue;
 		const resetsAt = resetTime$1(value?.resetsAt);
@@ -2165,11 +2162,11 @@ async function fetchOpenCodeGoUsage(apiKey, http$1 = fetch, signal) {
 	};
 }
 /** Read official CLI count windows and retain compatibility with older ratio pools. */
-async function fetchKimiCodeUsage(apiKey, http$1 = fetch, signal) {
-	const body = record$3(await getUsage("https://api.kimi.com/coding/v1/usages", apiKey, http$1, signal));
+async function fetchKimiCodeUsage(apiKey, http = fetch, signal) {
+	const body = record$1(await getUsage("https://api.kimi.com/coding/v1/usages", apiKey, http, signal));
 	if (body === void 0) throw new Error("Kimi Code usage response is not an object");
 	const modern = [];
-	const rows = [...record$3(body.usage) ? [{
+	const rows = [...record$1(body.usage) ? [{
 		raw: { detail: body.usage },
 		summary: true
 	}] : [], ...Array.isArray(body.limits) ? body.limits.map((raw) => ({
@@ -2177,15 +2174,15 @@ async function fetchKimiCodeUsage(apiKey, http$1 = fetch, signal) {
 		summary: false
 	})) : []];
 	for (const { raw, summary } of rows) {
-		const item = record$3(raw);
+		const item = record$1(raw);
 		if (!item) continue;
-		const detail = record$3(item.detail) ?? item;
+		const detail = record$1(item.detail) ?? item;
 		const limit = numeric(detail.limit);
 		const used = numeric(detail.used) ?? (limit !== void 0 && numeric(detail.remaining) !== void 0 ? limit - numeric(detail.remaining) : void 0);
 		if (limit === void 0 || limit <= 0 || used === void 0) continue;
 		const usedPercent = percent(used / limit * 100);
 		if (usedPercent === void 0) continue;
-		const window = record$3(item.window) ?? item;
+		const window = record$1(item.window) ?? item;
 		const duration = numeric(window.duration ?? item.duration ?? detail.duration);
 		const unit = String(window.timeUnit ?? item.timeUnit ?? detail.timeUnit ?? "").toUpperCase();
 		const multiplier = unit.includes("MINUTE") ? 6e4 : unit.includes("HOUR") ? 36e5 : unit.includes("DAY") ? 864e5 : unit.includes("SECOND") ? 1e3 : void 0;
@@ -2210,7 +2207,7 @@ async function fetchKimiCodeUsage(apiKey, http$1 = fetch, signal) {
 		windows: modern,
 		plan: "Kimi Code"
 	};
-	const usages = record$3(body.usages);
+	const usages = record$1(body.usages);
 	if (usages === void 0) throw new Error("Kimi Code usage response has no valid windows");
 	const windows = [];
 	for (const [field, kind, scope] of [
@@ -2230,7 +2227,7 @@ async function fetchKimiCodeUsage(apiKey, http$1 = fetch, signal) {
 			"Monthly"
 		]
 	]) {
-		const value = record$3(usages[field]);
+		const value = record$1(usages[field]);
 		const ratio = value?.used_ratio ?? value?.usedRatio;
 		if (typeof ratio !== "number" || !Number.isFinite(ratio) || ratio < 0 || ratio > 1) continue;
 		const resetsAt = resetTime$1(value?.reset_time ?? value?.resetAt);
@@ -2260,9 +2257,9 @@ async function fetchKimiCodeUsage(apiKey, http$1 = fetch, signal) {
 * reported period. A 404 means a self-hosted endpoint without the
 * surface: not an error, the card renders an unsupported note instead.
 */
-async function fetchOllamaUsage(apiKey, baseURL, http$1 = fetch, signal) {
+async function fetchOllamaUsage(apiKey, baseURL, http = fetch, signal) {
 	const combined = signal === void 0 ? AbortSignal.timeout(15e3) : AbortSignal.any([AbortSignal.timeout(15e3), signal]);
-	const response = await http$1(`${baseURL.replace(/\/+$/, "")}/balance`, {
+	const response = await http(`${baseURL.replace(/\/+$/, "")}/balance`, {
 		headers: {
 			accept: "application/json",
 			authorization: `Bearer ${apiKey}`,
@@ -2274,11 +2271,11 @@ async function fetchOllamaUsage(apiKey, baseURL, http$1 = fetch, signal) {
 	if (signal?.aborted) throw signal.reason;
 	if (response.status === 404) return { supported: false };
 	if (!response.ok) throw new Error(`Usage endpoint returned HTTP ${response.status}`);
-	const included = record$3(record$3(await readBoundedJson(response, "usage", 1 * 1024 * 1024))?.included);
+	const included = record$1(record$1(await readBoundedJson(response, "usage", 1 * 1024 * 1024))?.included);
 	const allowance = numeric(included?.allowance_usd);
 	const balance = numeric(included?.balance_usd);
 	if (included === void 0 || allowance === void 0 || allowance <= 0 || balance === void 0) throw new Error("Ollama balance response has no usable included allowance");
-	const period = record$3(included.period);
+	const period = record$1(included.period);
 	const resetsAt = period === void 0 ? void 0 : resetTime$1(period.until);
 	const startsAt = period === void 0 ? void 0 : resetTime$1(period.from);
 	return {
@@ -2474,7 +2471,7 @@ async function resolveImages(messages, attachments, signal, limit) {
 //#endregion
 //#region src/compat.ts
 /** Brand a string as a tool-call id: alpha's `ToolCallId`, rc.2's `CallId`. */
-const ToolCallId$1 = (() => {
+const ToolCallId = (() => {
 	const exports = llm;
 	return exports["ToolCallId"] ?? exports["CallId"];
 })();
@@ -2692,7 +2689,7 @@ function closeBlock$2(block) {
 		};
 		case "tool-call": return {
 			type: "tool-call",
-			id: ToolCallId$1(block.callId),
+			id: ToolCallId(block.callId),
 			name: block.name ?? "",
 			arguments: block.text
 		};
@@ -2846,7 +2843,7 @@ var ChatCompletionsStreamTranslator = class {
 					chunks.push({
 						type: "tool-call-delta",
 						index: block.index,
-						id: ToolCallId$1(block.callId),
+						id: ToolCallId(block.callId),
 						...block.name === void 0 ? {} : { name: block.name },
 						argumentsDelta: ""
 					});
@@ -2856,7 +2853,7 @@ var ChatCompletionsStreamTranslator = class {
 					chunks.push({
 						type: "tool-call-delta",
 						index: block.index,
-						id: ToolCallId$1(block.callId),
+						id: ToolCallId(block.callId),
 						argumentsDelta: call.function.arguments
 					});
 				}
@@ -3165,8 +3162,8 @@ async function fetchOllamaModels(options) {
 	const seen = /* @__PURE__ */ new Set();
 	const entries = [];
 	for (const entry of listed) {
-		const record$4 = recordOf$1(entry);
-		const raw = record$4 === void 0 ? void 0 : typeof record$4["model"] === "string" ? record$4["model"] : typeof record$4["name"] === "string" ? record$4["name"] : void 0;
+		const record$2 = recordOf$1(entry);
+		const raw = record$2 === void 0 ? void 0 : typeof record$2["model"] === "string" ? record$2["model"] : typeof record$2["name"] === "string" ? record$2["name"] : void 0;
 		if (raw === void 0 || raw.length === 0) continue;
 		const wire = normalizeOllamaModelId(raw, options.baseURL);
 		if (seen.has(wire)) continue;
@@ -3384,9 +3381,9 @@ const DEFAULT_REFS = {
 var ExternalUsageController = class {
 	refs;
 	ollamaBaseURL;
-	constructor(resolveCredential, http$1 = fetch, refs = {}, ollamaBaseURL = DEFAULT_OLLAMA_BASE_URL) {
+	constructor(resolveCredential, http = fetch, refs = {}, ollamaBaseURL = DEFAULT_OLLAMA_BASE_URL) {
 		this.resolveCredential = resolveCredential;
-		this.http = http$1;
+		this.http = http;
 		this.refs = {
 			...DEFAULT_REFS,
 			...refs
@@ -3468,17 +3465,17 @@ function readEfforts(value, field) {
 }
 function readModel(entry, index) {
 	if (entry === null || typeof entry !== "object" || Array.isArray(entry)) fail(`models[${index}] must be an object`);
-	const record$4 = entry;
-	const model = { id: readNonEmptyString(record$4.id, `models[${index}].id`).trim() };
-	if (record$4.name !== void 0) model.name = readNonEmptyString(record$4.name, `models[${index}].name`);
-	if (record$4.contextWindow !== void 0) model.contextWindow = readPositiveInteger(record$4.contextWindow, `models[${index}].contextWindow`);
-	if (record$4.contextOverride !== void 0) model.contextOverride = readPositiveInteger(record$4.contextOverride, `models[${index}].contextOverride`);
-	if (record$4.maxTokens !== void 0) model.maxTokens = readPositiveInteger(record$4.maxTokens, `models[${index}].maxTokens`);
-	if (record$4.vision !== void 0) model.vision = readBoolean(record$4.vision, `models[${index}].vision`);
-	if (record$4.thinking !== void 0) model.thinking = readBoolean(record$4.thinking, `models[${index}].thinking`);
-	if (record$4.efforts !== void 0) model.efforts = readEfforts(record$4.efforts, `models[${index}].efforts`);
-	if (record$4.defaultEffort !== void 0) {
-		const effort = readNonEmptyString(record$4.defaultEffort, `models[${index}].defaultEffort`);
+	const record$2 = entry;
+	const model = { id: readNonEmptyString(record$2.id, `models[${index}].id`).trim() };
+	if (record$2.name !== void 0) model.name = readNonEmptyString(record$2.name, `models[${index}].name`);
+	if (record$2.contextWindow !== void 0) model.contextWindow = readPositiveInteger(record$2.contextWindow, `models[${index}].contextWindow`);
+	if (record$2.contextOverride !== void 0) model.contextOverride = readPositiveInteger(record$2.contextOverride, `models[${index}].contextOverride`);
+	if (record$2.maxTokens !== void 0) model.maxTokens = readPositiveInteger(record$2.maxTokens, `models[${index}].maxTokens`);
+	if (record$2.vision !== void 0) model.vision = readBoolean(record$2.vision, `models[${index}].vision`);
+	if (record$2.thinking !== void 0) model.thinking = readBoolean(record$2.thinking, `models[${index}].thinking`);
+	if (record$2.efforts !== void 0) model.efforts = readEfforts(record$2.efforts, `models[${index}].efforts`);
+	if (record$2.defaultEffort !== void 0) {
+		const effort = readNonEmptyString(record$2.defaultEffort, `models[${index}].defaultEffort`);
 		if (model.efforts !== void 0 && !model.efforts.includes(effort)) fail(`models[${index}].defaultEffort must be one of its efforts`);
 		model.defaultEffort = effort;
 	}
@@ -3486,19 +3483,19 @@ function readModel(entry, index) {
 }
 /**
 * Validate one settings document, dropping unknown keys and duplicate model
-* ids (first wins, matching the Cursor store's visible-model handling).
+* ids (first wins).
 * @param input - the parsed store document or an RPC payload.
 * @throws when a known field has the wrong type or an unusable value.
 */
 function validateOllamaSettings(input) {
 	if (input === null || typeof input !== "object" || Array.isArray(input)) fail("Ollama settings must be an object");
-	const record$4 = input;
+	const record$2 = input;
 	const settings = {};
-	if (record$4.models !== void 0) {
-		if (!Array.isArray(record$4.models)) fail("models must be an array");
+	if (record$2.models !== void 0) {
+		if (!Array.isArray(record$2.models)) fail("models must be an array");
 		const seen = /* @__PURE__ */ new Set();
 		const models = [];
-		for (const [index, entry] of record$4.models.entries()) {
+		for (const [index, entry] of record$2.models.entries()) {
 			const model = readModel(entry, index);
 			if (seen.has(model.id)) continue;
 			seen.add(model.id);
@@ -3506,9 +3503,9 @@ function validateOllamaSettings(input) {
 		}
 		settings.models = models;
 	}
-	if (record$4.web !== void 0) settings.web = readBoolean(record$4.web, "web");
-	if (record$4.baseURL !== void 0) settings.baseURL = validateOllamaBaseURL(record$4.baseURL);
-	if (record$4.apiKeyRef !== void 0) settings.apiKeyRef = readApiKeyRef(record$4.apiKeyRef);
+	if (record$2.web !== void 0) settings.web = readBoolean(record$2.web, "web");
+	if (record$2.baseURL !== void 0) settings.baseURL = validateOllamaBaseURL(record$2.baseURL);
+	if (record$2.apiKeyRef !== void 0) settings.apiKeyRef = readApiKeyRef(record$2.apiKeyRef);
 	return settings;
 }
 /**
@@ -3597,14 +3594,6 @@ const SUBSCRIPTIONS_AUTH_ENDPOINTS = [
 	"usage",
 	"externalStatus",
 	"externalUsage",
-	"cursorStatus",
-	"cursorLogin",
-	"cursorCancel",
-	"cursorLogout",
-	"cursorUsage",
-	"cursorModels",
-	"cursorSettings",
-	"cursorSetSettings",
 	"ollamaSettings",
 	"ollamaSetSettings",
 	"ollamaModels",
@@ -3630,13 +3619,13 @@ const VIDEO_NAME_PATTERN = /^[\w.-]+\.mp4$/;
 var BadRequest = class extends Error {};
 function readEnvelope(body) {
 	if (typeof body !== "object" || body === null) return void 0;
-	const record$4 = body;
-	if (record$4.type !== "client-request" || typeof record$4.rpcId !== "string" || typeof record$4.method !== "string") return void 0;
+	const record$2 = body;
+	if (record$2.type !== "client-request" || typeof record$2.rpcId !== "string" || typeof record$2.method !== "string") return void 0;
 	return {
 		type: "client-request",
-		rpcId: record$4.rpcId,
-		method: record$4.method,
-		payload: record$4.payload
+		rpcId: record$2.rpcId,
+		method: record$2.method,
+		payload: record$2.payload
 	};
 }
 function serverResponse(rpcId, result) {
@@ -3740,11 +3729,11 @@ function readOptionalString(payload, field) {
 function readModelDefaultInput(payload) {
 	const provider = readProvider(payload);
 	const model = readString(payload, "model");
-	const record$4 = payload;
+	const record$2 = payload;
 	let effort;
-	if (record$4.effort !== void 0) {
-		if (typeof record$4.effort !== "string" || record$4.effort.length === 0) throw new BadRequest("payload.effort must be a non-empty string when present");
-		effort = record$4.effort;
+	if (record$2.effort !== void 0) {
+		if (typeof record$2.effort !== "string" || record$2.effort.length === 0) throw new BadRequest("payload.effort must be a non-empty string when present");
+		effort = record$2.effort;
 	}
 	return {
 		provider,
@@ -3769,27 +3758,27 @@ function readSpeedTier(payload) {
 /** Validate the `image` endpoint's payload into a full attachment reference. */
 function readImageRef(payload) {
 	if (typeof payload !== "object" || payload === null) throw new BadRequest("payload must be an object");
-	const record$4 = payload;
-	const attachmentId = record$4.attachmentId;
+	const record$2 = payload;
+	const attachmentId = record$2.attachmentId;
 	if (typeof attachmentId !== "string" || attachmentId.length === 0) throw new BadRequest("payload.attachmentId must be a non-empty string");
-	const mediaType = record$4.mediaType;
+	const mediaType = record$2.mediaType;
 	if (typeof mediaType !== "string" || !IMAGE_MEDIA_TYPES.includes(mediaType)) throw new BadRequest(`payload.mediaType must be one of ${IMAGE_MEDIA_TYPES.join(", ")}`);
 	for (const field of [
 		"bytes",
 		"width",
 		"height"
 	]) {
-		const value = record$4[field];
+		const value = record$2[field];
 		if (typeof value !== "number" || !Number.isInteger(value) || value <= 0) throw new BadRequest(`payload.${field} must be a positive integer`);
 	}
-	const name$1 = record$4.name;
+	const name$1 = record$2.name;
 	if (name$1 !== void 0 && typeof name$1 !== "string") throw new BadRequest("payload.name must be a string when present");
 	return {
 		attachmentId: AttachmentId(attachmentId),
 		mediaType,
-		bytes: record$4.bytes,
-		width: record$4.width,
-		height: record$4.height,
+		bytes: record$2.bytes,
+		width: record$2.width,
+		height: record$2.height,
 		...name$1 === void 0 ? {} : { name: name$1 }
 	};
 }
@@ -3817,7 +3806,7 @@ function readSessionId(payload) {
 	if (typeof payload !== "object" || payload === null) throw new BadRequest("payload must be an object");
 	return readString(payload, "sessionId");
 }
-async function dispatch(controller, speed, modelDefaults, endpoint, payload, signal, providerSettings, externalUsage, cursor, ollama) {
+async function dispatch(controller, speed, modelDefaults, endpoint, payload, signal, providerSettings, externalUsage, ollama) {
 	switch (endpoint) {
 		case "providerSettings":
 			if (!providerSettings) throw new BadRequest("provider settings are unavailable");
@@ -3877,3044 +3866,79 @@ async function dispatch(controller, speed, modelDefaults, endpoint, payload, sig
 			if (!EXTERNAL_USAGE_SOURCES.includes(source)) throw new BadRequest(`payload.source must be one of ${EXTERNAL_USAGE_SOURCES.join(", ")}`);
 			return ok(await externalUsage.usage(source, signal));
 		}
-		case "cursorStatus":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			return ok(await cursor.status());
-		case "cursorLogin":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			return ok(await cursor.login());
-		case "cursorCancel":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			await cursor.cancel();
-			return ok({ ok: true });
-		case "cursorLogout":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			await cursor.logout();
-			return ok({ ok: true });
-		case "cursorUsage":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			return ok(await cursor.usage(signal));
-		case "cursorModels":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			return ok(await cursor.models(readForce(payload), signal));
-		case "cursorSettings":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			return ok(await cursor.settings(readForce(payload), signal));
-		case "cursorSetSettings":
-			if (!cursor) throw new BadRequest("Cursor account is unavailable");
-			if (payload === null || typeof payload !== "object") throw new BadRequest("payload must be an object");
-			await cursor.setSettings(payload.settings);
-			return ok({ ok: true });
-		case "ollamaSettings":
-			if (!ollama) throw new BadRequest("Ollama settings are unavailable");
-			return ok(await ollama.settings());
-		case "ollamaSetSettings":
-			if (!ollama) throw new BadRequest("Ollama settings are unavailable");
-			if (payload === null || typeof payload !== "object") throw new BadRequest("payload must be an object");
-			await ollama.setSettings(payload.settings);
-			return ok({ ok: true });
-		case "ollamaModels": {
-			if (!ollama) throw new BadRequest("Ollama settings are unavailable");
-			const apiKey = readOptionalString(payload, "apiKey");
-			const rawBaseURL = readOptionalString(payload, "baseURL");
-			let baseURL;
-			if (rawBaseURL !== void 0) try {
-				baseURL = validateOllamaBaseURL(rawBaseURL);
-			} catch (error) {
-				throw new BadRequest(error instanceof Error ? error.message : String(error));
-			}
-			return ok(await ollama.models({
-				...apiKey === void 0 ? {} : { apiKey },
-				...baseURL === void 0 ? {} : { baseURL }
-			}, signal));
-		}
-		case "prepareReset":
-			if (!controller.prepareReset) throw new BadRequest("Reset redemption unavailable");
-			return ok(await controller.prepareReset(readString(payload, "account"), signal));
-		case "consumeReset":
-			if (!controller.consumeReset) throw new BadRequest("Reset redemption unavailable");
-			await controller.consumeReset(readString(payload, "account"), readString(payload, "ticket"), signal);
-			return ok({ ok: true });
-		case "image": return ok(await controller.readImage(readImageRef(payload), signal));
-		case "video": return ok(await controller.readVideo(readVideoName(payload), signal));
-		case "speed": return ok(await speed.speed(readSessionId(payload), payload.model === void 0 ? void 0 : readString(payload, "model")));
-		case "setSpeed":
-			await speed.setSpeed(readSessionId(payload), readSpeedTier(payload));
-			return ok({ ok: true });
-		case "modelDefaults":
-			if (modelDefaults === void 0) throw new BadRequest("model defaults are unavailable");
-			return ok(await modelDefaults.catalog(readForce(payload)));
-		case "setModelDefault":
-			if (modelDefaults === void 0) throw new BadRequest("model defaults are unavailable");
-			{
-				const input = readModelDefaultInput(payload);
-				await modelDefaults.set(input.provider, input.model, input.effort);
-			}
-			return ok({ ok: true });
-		default: throw new BadRequest(`unknown /subscriptions-auth endpoint "${endpoint}"`);
-	}
-}
-/**
-* Register the `/subscriptions-auth` RPC channel when a host connection exists.
-* @param ctx - the plugin context (headless profiles have no `connection`).
-* @param controller - the auth operations backing the endpoints.
-* @param speed - the per-session speed-tier state backing the Speed toggle.
-* @param modelDefaults - optional per-model default-effort state backing `modelDefaults`/`setModelDefault`.
-* @param providerSettings - optional OAuth provider/account preferences.
-* @param externalUsage - optional credential-backed quota readers.
-* @param cursor - optional Cursor account and model-visibility actions.
-* @param ollama - optional Ollama Cloud catalog and connection settings.
-*/
-function registerAuthRpc(ctx, controller, speed, modelDefaults = void 0, providerSettings = void 0, externalUsage = void 0, cursor = void 0, ollama = void 0) {
-	ctx.inject(["connection"], (ctx$1) => {
-		const connection = ctx$1.get("connection");
-		const handler = async (endpoint, payload, signal) => {
-			try {
-				return await dispatch(controller, speed, modelDefaults, endpoint, payload, signal, providerSettings, externalUsage, cursor, ollama);
-			} catch (error) {
-				return failure(error);
-			}
-		};
-		const register = connection.fetch.register;
-		for (const endpoint of SUBSCRIPTIONS_AUTH_ENDPOINTS) ctx$1.effect(() => register(fetchRouteFor(endpoint, handler)), `dsh-subscriptions: /api/${SUBSCRIPTIONS_AUTH_PREFIX}${endpoint} route`);
-	});
-}
-
-//#endregion
-//#region src/providers/cursor-auth.ts
-const CURSOR_CREDENTIAL_REF = credentialRef("CURSOR_SUBSCRIPTION_OAUTH");
-const API_ORIGIN = "https://api2.cursor.sh";
-const REFRESH_AHEAD_MS$1 = 5 * 6e4;
-async function parseCredential(value) {
-	if (value === void 0 || value.length === 0) return void 0;
-	const parsed = await parseProviderJson(value, "Cursor stored credential");
-	if (parsed === null || typeof parsed !== "object") throw new Error("Cursor credential is malformed");
-	const item = parsed;
-	if (item.type !== "oauth" || typeof item.access !== "string" || item.access.length === 0 || typeof item.refresh !== "string" || typeof item.expires !== "number" || !Number.isFinite(item.expires)) throw new Error("Cursor credential is malformed");
-	return {
-		type: "oauth",
-		access: item.access,
-		refresh: item.refresh,
-		expires: item.expires
-	};
-}
-function tokenExpiry(token, now) {
-	try {
-		const payload = token.split(".")[1];
-		if (payload === void 0) return now + 1440 * 6e4;
-		const exp = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"))?.exp;
-		if (typeof exp === "number" && Number.isFinite(exp)) return exp * 1e3;
-	} catch {}
-	return now + 1440 * 6e4;
-}
-function abortableDelay$2(ms, signal) {
-	if (signal.aborted) return Promise.reject(signal.reason);
-	return new Promise((resolve$2, reject) => {
-		const timer = setTimeout(() => {
-			signal.removeEventListener("abort", aborted);
-			resolve$2();
-		}, ms);
-		function aborted() {
-			clearTimeout(timer);
-			reject(signal.reason);
-		}
-		signal.addEventListener("abort", aborted, { once: true });
-	});
-}
-var CursorAuth = class {
-	loginTask;
-	error;
-	refreshTask;
-	constructor(credentials, http$1 = fetch, now = Date.now) {
-		this.credentials = credentials;
-		this.http = http$1;
-		this.now = now;
-	}
-	async read() {
-		return parseCredential((await this.credentials.resolve(CURSOR_CREDENTIAL_REF))?.value);
-	}
-	async status() {
-		const current$1 = await this.read();
-		return {
-			authenticated: current$1 !== void 0,
-			busy: this.loginTask !== void 0,
-			...current$1 === void 0 ? {} : { expiresAt: current$1.expires },
-			...this.error === void 0 ? {} : { error: this.error }
-		};
-	}
-	async accessToken({ signal } = {}) {
-		signal?.throwIfAborted();
-		const current$1 = await this.read();
-		if (current$1 === void 0) throw new Error("Cursor is not signed in");
-		if (current$1.expires - this.now() > REFRESH_AHEAD_MS$1) return current$1.access;
-		if (current$1.refresh.length === 0) throw new Error("Cursor sign-in needs to be renewed");
-		if (this.refreshTask === void 0) {
-			const pending = this.refresh(current$1, signal);
-			this.refreshTask = pending;
-			pending.finally(() => {
-				if (this.refreshTask === pending) this.refreshTask = void 0;
-			}).catch(() => void 0);
-		}
-		return (await this.refreshTask).access;
-	}
-	async refresh(current$1, signal) {
-		const response = await this.http(`${API_ORIGIN}/auth/exchange_user_api_key`, {
-			method: "POST",
-			redirect: "error",
-			headers: {
-				authorization: `Bearer ${current$1.refresh}`,
-				accept: "application/json",
-				"content-type": "application/json"
-			},
-			body: "{}",
-			...signal === void 0 ? {} : { signal }
-		});
-		if (!response.ok) throw new Error(`Cursor token refresh failed (HTTP ${response.status})`);
-		const body = await parseProviderJson(response, "Cursor token refresh");
-		if (typeof body.accessToken !== "string" || body.accessToken.length === 0) throw new Error("Cursor token refresh returned no access token");
-		const next = {
-			type: "oauth",
-			access: body.accessToken,
-			refresh: typeof body.refreshToken === "string" && body.refreshToken.length > 0 ? body.refreshToken : current$1.refresh,
-			expires: tokenExpiry(body.accessToken, this.now())
-		};
-		const latest = await this.read();
-		if (latest === void 0) throw new Error("Cursor signed out during token refresh");
-		if (latest.refresh !== current$1.refresh) return latest;
-		await this.credentials.set(CURSOR_CREDENTIAL_REF, JSON.stringify(next));
-		return next;
-	}
-	/** Return a Cursor browser URL immediately; polling continues on the host. */
-	async login() {
-		await this.cancel();
-		this.error = void 0;
-		const verifier = randomBytes(96).toString("base64url");
-		const challenge = createHash("sha256").update(verifier).digest("base64url");
-		const uuid = randomUUID();
-		const url = new URL("https://cursor.com/loginDeepControl");
-		url.search = new URLSearchParams({
-			challenge,
-			uuid,
-			mode: "login",
-			redirectTarget: "cli"
-		}).toString();
-		const abort = new AbortController();
-		this.loginTask = {
-			abort,
-			promise: this.pollLogin(uuid, verifier, abort.signal).catch((error) => {
-				if (!abort.signal.aborted) this.error = error instanceof Error ? error.message : String(error);
-			}).finally(() => {
-				if (this.loginTask?.abort === abort) this.loginTask = void 0;
-			})
-		};
-		return { authorizeUrl: url.href };
-	}
-	async pollLogin(uuid, verifier, signal) {
-		let delay = 1e3;
-		for (let attempt = 0; attempt < 150; attempt++) {
-			await abortableDelay$2(delay, signal);
-			const url = `${API_ORIGIN}/auth/poll?uuid=${encodeURIComponent(uuid)}&verifier=${encodeURIComponent(verifier)}`;
-			const response = await this.http(url, {
-				headers: { accept: "application/json" },
-				redirect: "error",
-				signal
-			});
-			if (response.status === 404) {
-				delay = Math.min(Math.ceil(delay * 1.2), 1e4);
-				continue;
-			}
-			if (!response.ok) throw new Error(`Cursor login failed (HTTP ${response.status})`);
-			const body = await parseProviderJson(response, "Cursor login poll");
-			signal.throwIfAborted();
-			if (typeof body.accessToken !== "string" || body.accessToken.length === 0) throw new Error("Cursor login returned no access token");
-			if (typeof body.refreshToken !== "string" || body.refreshToken.length === 0) throw new Error("Cursor login returned no refresh token");
-			const value = {
-				type: "oauth",
-				access: body.accessToken,
-				refresh: body.refreshToken,
-				expires: tokenExpiry(body.accessToken, this.now())
-			};
-			await this.credentials.set(CURSOR_CREDENTIAL_REF, JSON.stringify(value));
-			return;
-		}
-		throw new Error("Cursor login timed out");
-	}
-	async cancel() {
-		const task = this.loginTask;
-		task?.abort.abort(/* @__PURE__ */ new Error("Cursor login cancelled"));
-		await task?.promise;
-		if (this.loginTask === task) this.loginTask = void 0;
-		this.error = void 0;
-	}
-	async logout() {
-		await this.cancel();
-		await this.credentials.unset(CURSOR_CREDENTIAL_REF);
-	}
-};
-
-//#endregion
-//#region src/providers/cursor-usage.ts
-const ORIGIN = "https://cursor.com";
-function record$2(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
-function number(value) {
-	if (typeof value === "number" && Number.isFinite(value)) return value;
-	if (typeof value === "string" && value.trim() !== "") {
-		const parsed = Number(value);
-		if (Number.isFinite(parsed)) return parsed;
-	}
-}
-/** Cursor's WorkOS user id from the access JWT, without the identity prefix. */
-function cursorUserId(token) {
-	try {
-		const parts = token.split(".");
-		if (parts.length !== 3 || !parts[1]) return void 0;
-		const raw = record$2(JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8")))?.sub;
-		if (typeof raw !== "string" || raw.length === 0) return void 0;
-		const id = raw.includes("|") ? raw.split("|").at(-1) : raw;
-		return id !== void 0 && /^[A-Za-z0-9_-]+$/.test(id) ? id : void 0;
-	} catch {
-		return;
-	}
-}
-async function dashboardJson(url, cookie, http$1, signal) {
-	const response = await http$1(url, {
-		headers: {
-			accept: "application/json",
-			cookie,
-			origin: ORIGIN,
-			referer: `${ORIGIN}/dashboard`
-		},
-		...signal === void 0 ? {} : { signal }
-	});
-	if (!response.ok) throw new Error(`Cursor usage endpoint returned HTTP ${response.status}`);
-	return parseProviderJson(response, "Cursor usage");
-}
-function legacyRequestWindow(body, resetsAt) {
-	const usage = record$2(body);
-	if (usage === void 0) return void 0;
-	const gpt4 = record$2(usage["gpt-4"]);
-	const candidate = gpt4 !== void 0 && number(gpt4.numRequests) !== void 0 ? gpt4 : Object.values(usage).map(record$2).filter((value) => value !== void 0).sort((a, b) => (number(b.maxRequestUsage) ?? 0) - (number(a.maxRequestUsage) ?? 0))[0];
-	const used = number(candidate?.numRequests);
-	const limit = number(candidate?.maxRequestUsage);
-	if (used === void 0 || limit === void 0 || limit <= 0) return void 0;
-	return {
-		kind: "other",
-		scope: "Included requests",
-		usedPercent: Math.max(0, Math.min(100, used / limit * 100)),
-		...resetsAt === void 0 ? {} : { resetsAt }
-	};
-}
-/**
-* Read Cursor's individual dashboard quota using an OAuth access token.
-* The dashboard cookie is request-local; no token enters ProviderUsage.
-*/
-async function fetchCursorUsage(accessToken, http$1 = fetch, signal) {
-	const userId = cursorUserId(accessToken);
-	if (userId === void 0) throw new Error("Cursor session token has no usable user identity");
-	const cookie = `WorkosCursorSessionToken=${userId}::${accessToken}`;
-	const [summaryResult, legacyResult] = await Promise.allSettled([dashboardJson(`${ORIGIN}/api/usage-summary`, cookie, http$1, signal), dashboardJson(`${ORIGIN}/api/usage?user=${encodeURIComponent(userId)}`, cookie, http$1, signal)]);
-	if (summaryResult.status === "rejected" && legacyResult.status === "rejected") throw summaryResult.reason instanceof Error ? summaryResult.reason : /* @__PURE__ */ new Error("Cursor usage is unavailable");
-	const summary = summaryResult.status === "fulfilled" ? record$2(summaryResult.value) : void 0;
-	const plan = record$2(record$2(summary?.individualUsage)?.plan) ?? record$2(record$2(summary?.teamUsage)?.plan);
-	const resetValue = summary?.billingCycleEnd;
-	const parsedReset = typeof resetValue === "string" ? Date.parse(resetValue) : NaN;
-	const resetsAt = Number.isFinite(parsedReset) ? parsedReset : void 0;
-	const startValue = summary?.billingCycleStart;
-	const parsedStart = typeof startValue === "string" ? Date.parse(startValue) : NaN;
-	const timing = {
-		...resetsAt === void 0 ? {} : { resetsAt },
-		...Number.isFinite(parsedStart) ? { startsAt: parsedStart } : {}
-	};
-	const windows = [];
-	for (const [field, scope] of [
-		["totalPercentUsed", "Included"],
-		["autoPercentUsed", "Cursor Models"],
-		["apiPercentUsed", "Other Models"]
-	]) {
-		const usedPercent = number(plan?.[field]);
-		if (usedPercent === void 0 || usedPercent < 0 || usedPercent > 100) continue;
-		windows.push({
-			kind: "other",
-			scope,
-			usedPercent,
-			...timing
-		});
-	}
-	const legacy = legacyRequestWindow(legacyResult.status === "fulfilled" ? legacyResult.value : void 0, resetsAt);
-	if (legacy !== void 0) windows.push({
-		...legacy,
-		...timing
-	});
-	if (windows.length === 0 && summary?.isUnlimited !== true) throw new Error("Cursor usage response has no quota windows");
-	const membershipType = summary?.membershipType;
-	return {
-		supported: true,
-		windows,
-		...typeof membershipType === "string" && membershipType.length > 0 ? { plan: membershipType } : {}
-	};
-}
-
-//#endregion
-//#region vendor/cursor/proto.js
-/**
-* Minimal protobuf wire-format helpers for the Cursor Agent protocol.
-*
-* Only the subset of protobuf needed by `dsh-cursor-subscription` is
-* implemented: varints, length-delimited fields, fixed64/double, and nested
-* messages. Map fields are encoded as repeated entry messages, exactly like
-* the official protobuf runtime.
-*
-* @module dsh-cursor-subscription/proto
-*/
-/** Encode one unsigned varint into a Uint8Array. */
-function varintEncode(value) {
-	const out = [];
-	let n = Math.trunc(value);
-	while (n > 127) {
-		out.push(n & 127 | 128);
-		n = Math.floor(n / 128);
-	}
-	out.push(n);
-	return Uint8Array.from(out);
-}
-/** Combine byte arrays. */
-function concatBytes(parts) {
-	let total = 0;
-	for (const part of parts) total += part.length;
-	const out = new Uint8Array(total);
-	let offset = 0;
-	for (const part of parts) {
-		out.set(part, offset);
-		offset += part.length;
-	}
-	return out;
-}
-/** A streaming protobuf message writer. */
-var Writer = class {
-	constructor() {
-		this.parts = [];
-	}
-	/** Append a raw field tag. */
-	tag(field, wireType) {
-		this.parts.push(varintEncode(field << 3 | wireType));
-		return this;
-	}
-	/** Append a length-delimited payload. */
-	bytes(field, data) {
-		this.tag(field, 2);
-		this.parts.push(varintEncode(data.length));
-		this.parts.push(data);
-		return this;
-	}
-	/** Append a UTF-8 string field. */
-	string(field, value) {
-		return this.bytes(field, new TextEncoder().encode(value));
-	}
-	/** Append a nested message field. */
-	message(field, inner) {
-		return this.bytes(field, inner);
-	}
-	/** Append a varint field (uint32/int32/bool/enum). */
-	varint(field, value) {
-		this.tag(field, 0);
-		this.parts.push(varintEncode(Math.trunc(value)));
-		return this;
-	}
-	/** Append a double (fixed64, little-endian) field. */
-	double(field, value) {
-		this.tag(field, 1);
-		const buffer = /* @__PURE__ */ new ArrayBuffer(8);
-		new DataView(buffer).setFloat64(0, value, true);
-		this.parts.push(new Uint8Array(buffer));
-		return this;
-	}
-	finish() {
-		return concatBytes(this.parts);
-	}
-};
-/** A streaming protobuf message reader. */
-var Reader = class {
-	constructor(bytes) {
-		this.data = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
-		this.pos = 0;
-	}
-	get done() {
-		return this.pos >= this.data.length;
-	}
-	varint() {
-		let result = 0;
-		let shift = 0;
-		while (true) {
-			if (this.pos >= this.data.length) throw new Error("protobuf: truncated varint");
-			const byte = this.data[this.pos++];
-			result += (byte & 127) * 2 ** shift;
-			if ((byte & 128) === 0) break;
-			shift += 7;
-			if (shift > 63) throw new Error("protobuf: varint too long");
-		}
-		return result;
-	}
-	/** Read the tag and return { field, wireType }. */
-	tag() {
-		const raw = this.varint();
-		return {
-			field: Math.floor(raw / 8),
-			wireType: raw % 8
-		};
-	}
-	bytes() {
-		const length = this.varint();
-		if (this.pos + length > this.data.length) throw new Error("protobuf: truncated bytes");
-		const out = this.data.subarray(this.pos, this.pos + length);
-		this.pos += length;
-		return out;
-	}
-	string() {
-		return new TextDecoder().decode(this.bytes());
-	}
-	double() {
-		if (this.pos + 8 > this.data.length) throw new Error("protobuf: truncated double");
-		const view = new DataView(this.data.buffer, this.data.byteOffset + this.pos, 8);
-		this.pos += 8;
-		return view.getFloat64(0, true);
-	}
-	/** Skip a field of the given wire type (length-delimited or varint or fixed64). */
-	skip(wireType) {
-		if (wireType === 0) this.varint();
-		else if (wireType === 1) {
-			if (this.pos + 8 > this.bytes.length) throw new Error("protobuf: truncated fixed64");
-			this.pos += 8;
-		} else if (wireType === 2) this.bytes();
-		else if (wireType === 5) {
-			if (this.pos + 4 > this.bytes.length) throw new Error("protobuf: truncated fixed32");
-			this.pos += 4;
-		} else throw new Error(`protobuf: unsupported wire type ${wireType}`);
-	}
-};
-/**
-* Encode a JSON value as `google.protobuf.Value` (the wire format Cursor uses
-* for MCP tool input schemas and MCP argument values).
-*/
-function encodeValue(value) {
-	const writer = new Writer();
-	if (value === null || value === void 0) writer.varint(1, 0);
-	else if (typeof value === "boolean") writer.varint(4, value ? 1 : 0);
-	else if (typeof value === "number") writer.double(2, value);
-	else if (typeof value === "string") writer.string(3, value);
-	else if (Array.isArray(value)) {
-		const list = new Writer();
-		for (const item of value) list.message(1, encodeValue(item));
-		writer.message(6, list.finish());
-	} else if (typeof value === "object") {
-		const struct = new Writer();
-		for (const [key, item] of Object.entries(value)) {
-			const entry = new Writer();
-			entry.string(1, key);
-			entry.message(2, encodeValue(item));
-			struct.message(1, entry.finish());
-		}
-		writer.message(5, struct.finish());
-	} else throw new Error(`cannot encode ${typeof value} as google.protobuf.Value`);
-	return writer.finish();
-}
-/**
-* Decode `google.protobuf.Value` bytes back into a JSON value.
-* @param {Uint8Array} bytes - serialized google.protobuf.Value message.
-* @returns {unknown} the decoded JSON value.
-*/
-function decodeValue(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 0) {
-			reader.varint();
-			return null;
-		}
-		if (field === 2 && wireType === 1) return reader.double();
-		if (field === 3 && wireType === 2) return reader.string();
-		if (field === 4 && wireType === 0) return reader.varint() !== 0;
-		if (field === 5 && wireType === 2) return decodeStruct(reader.bytes());
-		if (field === 6 && wireType === 2) return decodeList(reader.bytes());
-		reader.skip(wireType);
-	}
-	return null;
-}
-function decodeStruct(bytes) {
-	const reader = new Reader(bytes);
-	const result = {};
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) {
-			const entry = new Reader(reader.bytes());
-			let key = "";
-			let value = null;
-			while (!entry.done) {
-				const tag = entry.tag();
-				if (tag.field === 1 && tag.wireType === 2) key = entry.string();
-				else if (tag.field === 2 && tag.wireType === 2) value = decodeValue(entry.bytes());
-				else entry.skip(tag.wireType);
-			}
-			result[key] = value;
-		} else reader.skip(wireType);
-	}
-	return result;
-}
-function decodeList(bytes) {
-	const reader = new Reader(bytes);
-	const result = [];
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) result.push(decodeValue(reader.bytes()));
-		else reader.skip(wireType);
-	}
-	return result;
-}
-
-//#endregion
-//#region vendor/cursor/index.js
-/**
-* Read this package's own version from the manifest beside `lib/`.
-* @returns the manifest version, or undefined when it cannot be read.
-*/
-function readVersion() {
-	try {
-		return JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
-	} catch {
-		return;
-	}
-}
-/** Build version the settings panel prints; undefined when the manifest is unreadable. */
-const VERSION = readVersion();
-/**
-* DSH web replaces the ambient `fetch` with an MCP `createFetchWithInit`
-* wrapper whose `baseFetch` is undefined in the host process, so any consumer
-* of the global `fetch` throws `baseFetch is not a function`. Cursor usage /
-* refresh / model discovery go through HTTP, so this module uses Node's own
-* `http`/`https` to talk to the upstream directly instead of trusting the
-* host-injected `fetch`. It exposes the small Fetch subset these callers use.
-*/
-async function nativeFetch(url, init = {}) {
-	const target = new URL(url);
-	const client = target.protocol === "https:" ? https : http;
-	const method = (init.method ?? "GET").toUpperCase();
-	const body = init.body === void 0 ? void 0 : isBytes(init.body) ? Buffer.from(init.body) : String(init.body);
-	const request = (u$1, redirect) => new Promise((resolve$2, reject) => {
-		const req = client.request(u$1, {
-			method,
-			headers: sanitizeHeaders(init.headers),
-			signal: init.signal
-		}, (res) => {
-			const chunks = [];
-			res.on("data", (chunk) => chunks.push(chunk));
-			res.on("end", () => {
-				const data = Buffer.concat(chunks);
-				const status = res.statusCode ?? 0;
-				if ((redirect === "error" || redirect === "manual") && status >= 300 && status < 400) {
-					reject(/* @__PURE__ */ new Error(`HTTP ${status} from ${u$1.origin}${u$1.pathname}`));
-					return;
-				}
-				const location = res.headers.location;
-				if ((redirect ?? "follow") === "follow" && location && status >= 300 && status < 400) {
-					resolve$2({ redirect: new URL(location, u$1) });
-					return;
-				}
-				resolve$2({ response: makeResponse(status, res, data) });
-			});
-		});
-		req.on("error", reject);
-		if (body !== void 0) req.write(body);
-		req.end();
-	});
-	let u = target;
-	for (let hops = 0;; hops++) {
-		const result = await request(u, init.redirect);
-		if (result.redirect !== void 0) {
-			if (hops >= 6) throw new Error(`too many redirects from ${target.href}`);
-			u = result.redirect;
-			continue;
-		}
-		return result.response;
-	}
-}
-function isBytes(value) {
-	return value instanceof Uint8Array || typeof value !== "string" && ArrayBuffer.isView(value);
-}
-function sanitizeHeaders(headers) {
-	if (headers === void 0) return void 0;
-	const out = {};
-	for (const [key, value] of Object.entries(headers)) {
-		if (value === void 0) continue;
-		out[key] = value;
-	}
-	return out;
-}
-function makeResponse(status, res, data) {
-	const text = async () => data.toString("utf8");
-	return {
-		ok: status >= 200 && status < 300,
-		status,
-		statusText: res.statusMessage ?? "",
-		headers: { get: (name$1) => res.headers[String(name$1).toLowerCase()] ?? null },
-		text: async () => text(),
-		json: async () => JSON.parse(await text()),
-		arrayBuffer: async () => data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength)
-	};
-}
-const CREDENTIAL_REF = credentialRef("CURSOR_SUBSCRIPTION_OAUTH");
-/** Connection registry options: accept the account channel from loopback Hosts only. */
-const LOOPBACK_RPC = Object.freeze({ authority: "loopback" });
-const CURSOR_BASE_URL = "https://api2.cursor.sh";
-const CURSOR_RUN_PATH = "/agent.v1.AgentService/Run";
-const CURSOR_MODELS_PATH = "/agent.v1.AgentService/GetUsableModels";
-/** Cursor dashboard usage endpoints (authenticated with the session cookie). */
-const USAGE_API_ORIGIN = "https://cursor.com";
-const USAGE_URL = `${USAGE_API_ORIGIN}/api/usage`;
-const USAGE_SUMMARY_URL = `${USAGE_API_ORIGIN}/api/usage-summary`;
-const USAGE_TEAMS_URL = `${USAGE_API_ORIGIN}/api/dashboard/teams`;
-const USAGE_AGGREGATED_URL = `${USAGE_API_ORIGIN}/api/dashboard/get-aggregated-usage-events`;
-const USAGE_TTL_MS$1 = 60 * 1e3;
-/** Client version reported to the Agent service; bump when Cursor requires it. */
-const CURSOR_CLIENT_VERSION = "cli-2026.02.13-41ac335";
-/** Keep-alive heartbeats while an agent run is streaming. */
-const HEARTBEAT_INTERVAL_MS = 5e3;
-/** How long an agent run may stay completely silent before we abort. */
-const STREAM_IDLE_TIMEOUT_MS = 120 * 1e3;
-/** How long a run may keep sending heartbeats without any real content. */
-const STREAM_PROGRESS_TIMEOUT_MS = 60 * 1e3;
-/** Retain checkpoints/live tool bridges for inactive DSH sessions. */
-const SESSION_STATE_TTL_MS = 1800 * 1e3;
-/** Stop one Cursor Run before an unconstrained agent can loop forever. */
-const MAX_TOOL_ROUNDS = 200;
-/**
-* How long a tool-call step keeps reading after `mcpArgs` for the frames that
-* close the burst (sibling calls, blob writes, checkpoint). Sibling calls of
-* one burst arrive within ~100 ms of each other.
-*/
-const TOOL_CALL_SETTLE_MS = 500;
-const DEFAULT_RETRY_COUNT = 0;
-const DEFAULT_RETRY_INTERVAL_MS = 1e3;
-const DEFAULT_RETRY_HTTP_STATUS_CODES = Object.freeze([
-	408,
-	425,
-	429,
-	500,
-	502,
-	503,
-	504
-]);
-/**
-* Rebuild the Cursor conversation from the DSH history on every step instead of
-* resuming the conversation Cursor keeps server-side.
-*
-* A plugin whose transport re-sends its own message history — as the standard
-* function-calling ones do — hands the model the same explicit history at every
-* step. Delegating that history to Cursor's server instead is what a Cursor turn
-* was observed to re-derive from: the step re-stated its goal, re-read its goal
-* and rewrote its plan while its tool calls kept succeeding. Off by default: a
-* rebuild re-sends the whole transcript each step, and Cursor has no
-* provider-side compaction to bound it.
-*/
-const DEFAULT_REPLAY_HISTORY_EACH_STEP = false;
-/**
-* Editable runtime settings. Every field is `.volatile()`: the Loader parses a
-* volatile field into a live reference that is updated in place when the
-* settings page saves, which is what carries a saved value into a Cursor run
-* that is already in flight. On DSH 0.1.7 a Config without a volatile field
-* produces no settings section at all, so none of these may lose the marker.
-*/
-const Config$1 = z.object({
-	maxToolRounds: z.number().step(1).min(1).max(1e3).default(MAX_TOOL_ROUNDS).volatile(),
-	retryCount: z.number().step(1).min(0).max(10).default(DEFAULT_RETRY_COUNT).volatile(),
-	retryIntervalMs: z.number().step(1).min(0).max(3e5).default(DEFAULT_RETRY_INTERVAL_MS).volatile(),
-	retryHttpStatusCodes: z.array(z.number().step(1).min(400).max(599)).default([...DEFAULT_RETRY_HTTP_STATUS_CODES]).volatile(),
-	replayHistoryEachStep: z.boolean().default(DEFAULT_REPLAY_HISTORY_EACH_STEP).volatile()
-});
-/** Refresh the access token this early before its JWT expiry. */
-const REFRESH_AHEAD_MS = 300 * 1e3;
-/** Default access-token lifetime when the JWT has no usable exp claim. */
-const DEFAULT_TOKEN_LIFETIME_MS = 1440 * 60 * 1e3;
-const DEFAULT_CONTEXT_WINDOW = 2e5;
-const DEFAULT_MAX_TOKENS = 64e3;
-/**
-* Read one Config field. DSH 0.1.7 delivers a `.volatile()` field to the plugin
-* as a reference whose `get()` returns the value the settings page last saved —
-* the Loader keeps that one object and writes into it, so reading it per call
-* is what makes a saved edit visible. Tests and the frozen fallback pass
-* ordinary values, so both shapes are accepted here.
-* @param value Config field as delivered by the Loader, or a plain value.
-* @returns The current plain value.
-*/
-function readConfigField(value) {
-	return typeof value?.get === "function" ? value.get() : value;
-}
-function resolveCursorSettings(input = {}) {
-	const maxToolRounds = readConfigField(input.maxToolRounds) ?? MAX_TOOL_ROUNDS;
-	const retryCount = readConfigField(input.retryCount) ?? DEFAULT_RETRY_COUNT;
-	const retryIntervalMs = readConfigField(input.retryIntervalMs) ?? DEFAULT_RETRY_INTERVAL_MS;
-	const retryHttpStatusCodes = readConfigField(input.retryHttpStatusCodes) ?? DEFAULT_RETRY_HTTP_STATUS_CODES;
-	const replayHistoryEachStep = readConfigField(input.replayHistoryEachStep) ?? DEFAULT_REPLAY_HISTORY_EACH_STEP;
-	if (!Number.isSafeInteger(maxToolRounds) || maxToolRounds < 1 || maxToolRounds > 1e3) throw new Error("cursor-subscription: maxToolRounds must be an integer between 1 and 1000");
-	if (!Number.isSafeInteger(retryCount) || retryCount < 0 || retryCount > 10) throw new Error("cursor-subscription: retryCount must be an integer between 0 and 10");
-	if (!Number.isSafeInteger(retryIntervalMs) || retryIntervalMs < 0 || retryIntervalMs > 3e5) throw new Error("cursor-subscription: retryIntervalMs must be an integer between 0 and 300000");
-	if (!Array.isArray(retryHttpStatusCodes) || retryHttpStatusCodes.some((status) => !Number.isSafeInteger(status) || status < 400 || status > 599)) throw new Error("cursor-subscription: retryHttpStatusCodes must contain only HTTP status integers from 400 to 599");
-	if (new Set(retryHttpStatusCodes).size !== retryHttpStatusCodes.length) throw new Error("cursor-subscription: retryHttpStatusCodes must not contain duplicates");
-	if (typeof replayHistoryEachStep !== "boolean") throw new Error("cursor-subscription: replayHistoryEachStep must be a boolean");
-	return Object.freeze({
-		maxToolRounds,
-		retryCount,
-		retryIntervalMs,
-		retryHttpStatusCodes: Object.freeze([...retryHttpStatusCodes]),
-		replayHistoryEachStep
-	});
-}
-function shouldRetryHttpStatus(status, retriesUsed, settings) {
-	return retriesUsed < settings.retryCount && settings.retryHttpStatusCodes.includes(status);
-}
-function isSuccessfulAgentResponse(status, contentType) {
-	return status === 200 && /^application\/connect\+proto(?:\s*;|\s*$)/i.test(contentType ?? "");
-}
-function abortableDelay$1(ms, signal) {
-	if (signal.aborted) return Promise.reject(signal.reason ?? /* @__PURE__ */ new Error("Cursor retry aborted"));
-	if (ms === 0) return Promise.resolve();
-	return new Promise((resolve$2, reject) => {
-		const timer = setTimeout(done, ms);
-		timer.unref?.();
-		function done() {
-			signal.removeEventListener("abort", aborted);
-			resolve$2();
-		}
-		function aborted() {
-			clearTimeout(timer);
-			signal.removeEventListener("abort", aborted);
-			reject(signal.reason ?? /* @__PURE__ */ new Error("Cursor retry aborted"));
-		}
-		signal.addEventListener("abort", aborted, { once: true });
-	});
-}
-/**
-* Cursor's `GetUsableModels` answers in its own order (newest family first),
-* and that order moves between releases, so the picker would reshuffle on its
-* own. Sort by display name instead, with the id as a tiebreak.
-*
-* The collation is pinned to `"en"` so one build lists the same order on every
-* host locale, and `numeric` so families keep their natural sequence
-* (`GPT-5` before `GPT-10`, `Composer 2` after `Composer 1.5`).
-*/
-const MODEL_NAME_COLLATOR = new Intl.Collator("en", {
-	numeric: true,
-	sensitivity: "base"
-});
-/** Order model entries by name then id, without mutating the input. */
-function sortModelsByName(models) {
-	return [...models].sort((a, b) => {
-		const byName = MODEL_NAME_COLLATOR.compare(a?.name ?? "", b?.name ?? "");
-		if (byName !== 0) return byName;
-		return MODEL_NAME_COLLATOR.compare(a?.id ?? "", b?.id ?? "");
-	});
-}
-const textEncoder = new TextEncoder();
-function bytesOf(value) {
-	return value instanceof Uint8Array ? value : new Uint8Array(value);
-}
-function encodeUserMessage({ text, messageId }) {
-	const writer = new Writer();
-	if (typeof text === "string" && text.length > 0) writer.string(1, text);
-	if (typeof messageId === "string" && messageId.length > 0) writer.string(2, messageId);
-	return writer.finish();
-}
-/** ModelDetails { model_id = 1, display_model_id = 3, display_name = 4 } */
-function encodeModelDetails(modelId) {
-	const writer = new Writer();
-	writer.string(1, modelId);
-	writer.string(3, modelId);
-	writer.string(4, modelId);
-	return writer.finish();
-}
-/**
-* ConversationHistoryImageContent { data = 1, mime_type = 2 }
-* wrapped as ConversationHistoryMessage.user.content[].image
-*/
-function encodeConversationHistoryImage({ data, mimeType }) {
-	const image = new Writer().string(1, data);
-	if (mimeType) image.string(2, mimeType);
-	const content = new Writer().message(2, image.finish()).finish();
-	const user = new Writer().message(1, content).finish();
-	return new Writer().message(1, user).finish();
-}
-/** ConversationHistory { messages = 1 } with one history message per image. */
-function encodeConversationHistory(images) {
-	const writer = new Writer();
-	for (const image of images) writer.message(1, encodeConversationHistoryImage(image));
-	return writer.finish();
-}
-/** ConversationAction { user_message_action = 1 } → UserMessageAction { user_message = 1, conversation_history = 7 } */
-function encodeUserMessageAction(userBytes, images = []) {
-	const inner = new Writer().message(1, userBytes);
-	if (images.length > 0) inner.message(7, encodeConversationHistory(images));
-	return new Writer().message(1, inner.finish()).finish();
-}
-/** ConversationStateStructure — the durable conversation payload. */
-function encodeConversationState({ rootPromptBlobIds, turns }) {
-	const writer = new Writer();
-	for (const id of rootPromptBlobIds) writer.bytes(1, id);
-	for (const turn of turns) writer.bytes(8, turn);
-	return writer.finish();
-}
-/** AgentRunRequest { conversation_state=1, action=2, model_details=3, conversation_id=5 } */
-function encodeRunRequest({ conversationState, action, modelDetails, conversationId }) {
-	const writer = new Writer();
-	writer.message(1, conversationState);
-	writer.message(2, action);
-	writer.message(3, modelDetails);
-	if (conversationId) writer.string(5, conversationId);
-	return writer.finish();
-}
-/** AgentClientMessage { run_request = 1 } */
-function encodeRunMessage(runRequestBytes) {
-	return new Writer().message(1, runRequestBytes).finish();
-}
-/** AgentClientMessage { client_heartbeat = 7 } */
-function encodeHeartbeat() {
-	return new Writer().message(7, new Uint8Array(0)).finish();
-}
-/** KvClientMessage { id=1, get_blob_result=2 { blob_data=1 } } */
-function encodeGetBlobResult(id, blobData) {
-	const inner = blobData === void 0 ? new Uint8Array(0) : blobData;
-	const result = new Writer().bytes(1, inner).finish();
-	const writer = new Writer();
-	writer.varint(1, id);
-	writer.message(2, result);
-	return writer.finish();
-}
-/** AgentClientMessage { kv_client_message = 3 } */
-function encodeKvClientMessage(kvBytes) {
-	return new Writer().message(3, kvBytes).finish();
-}
-/** KvClientMessage { id=1, set_blob_result=3 } — acknowledge a server blob write. */
-function encodeSetBlobResult(id) {
-	const writer = new Writer();
-	writer.varint(1, id);
-	writer.message(3, new Uint8Array(0));
-	return writer.finish();
-}
-/** McpResult.success with one text content item. */
-function encodeMcpResult({ content, isError = false }) {
-	return encodeMcpResultSuccess(String(content ?? ""), isError);
-}
-/** ExecClientMessage { id=1, exec_id=15, message=... } */
-function encodeExecClientMessage(id, execId, messageField, messageBytes) {
-	const writer = new Writer();
-	writer.varint(1, id);
-	if (typeof execId === "string" && execId.length > 0) writer.string(15, execId);
-	if (messageBytes !== void 0) writer.message(messageField, messageBytes);
-	return writer.finish();
-}
-/** AgentClientMessage { exec_client_message = 2 } */
-function encodeExecClientMessageEnvelope(execBytes) {
-	return new Writer().message(2, execBytes).finish();
-}
-/** RequestContextResult { success=1 { request_context=1 } } with tools. */
-function encodeRequestContextResult(tools) {
-	const context = new Writer();
-	for (const tool of tools) context.message(7, tool);
-	const success = new Writer().message(1, context.finish()).finish();
-	return new Writer().message(1, success).finish();
-}
-/** McpToolDefinition { name=1, description=2, input_schema=3, provider_identifier=4, tool_name=5 } */
-function encodeMcpToolDefinition({ name: name$1, description, inputSchema, providerIdentifier, toolName }) {
-	const writer = new Writer();
-	writer.string(1, name$1);
-	writer.string(2, description ?? "");
-	writer.bytes(3, bytesOf(inputSchema));
-	writer.string(4, providerIdentifier ?? "dsh-cursor-subscription");
-	writer.string(5, toolName ?? name$1);
-	return writer.finish();
-}
-/** McpTextContent { text = 1 } */
-function encodeMcpTextContent(text) {
-	return new Writer().string(1, text).finish();
-}
-/** McpToolResultContentItem { text = 1 } */
-function encodeMcpToolResultContentItem(text) {
-	return new Writer().message(1, encodeMcpTextContent(text)).finish();
-}
-/** McpSuccess { content=1, is_error=2 } */
-function encodeMcpSuccess(text, isError) {
-	const writer = new Writer();
-	writer.message(1, encodeMcpToolResultContentItem(text));
-	writer.varint(2, isError ? 1 : 0);
-	return writer.finish();
-}
-/** McpResult { success=1 | error=2 } */
-function encodeMcpResultSuccess(text, isError) {
-	return new Writer().message(1, encodeMcpSuccess(text, isError)).finish();
-}
-function encodeMcpError(error) {
-	return new Writer().message(2, new Writer().string(1, error).finish()).finish();
-}
-/** ReadResult { rejected=3 { path=1, reason=2 } } */
-function encodeReadRejected(path, reason) {
-	const rejected = new Writer().string(1, path ?? "").string(2, reason).finish();
-	return new Writer().message(3, rejected).finish();
-}
-/** LsResult { rejected=3 { path=1, reason=2 } } */
-function encodeLsRejected(path, reason) {
-	const rejected = new Writer().string(1, path ?? "").string(2, reason).finish();
-	return new Writer().message(3, rejected).finish();
-}
-/** GrepResult { error=2 { error=1 } } */
-function encodeGrepError(error) {
-	return new Writer().message(2, new Writer().string(1, error).finish()).finish();
-}
-/** WriteResult { rejected = 6 } (oneof: success=1, permission_denied=3, no_space=4, error=5, rejected=6) */
-function encodeWriteRejected(path, reason) {
-	const rejected = new Writer().string(1, path ?? "").string(2, reason).finish();
-	return new Writer().message(6, rejected).finish();
-}
-/** DeleteResult { rejected = 6 } (oneof: success=1, file_not_found=2, not_file=3, permission_denied=4, file_busy=5, rejected=6) */
-function encodeDeleteRejected(path, reason) {
-	const rejected = new Writer().string(1, path ?? "").string(2, reason).finish();
-	return new Writer().message(6, rejected).finish();
-}
-/** ShellRejected { command=1, working_directory=2, reason=3, is_readonly=4 } */
-function encodeShellRejected(command, workingDirectory, reason) {
-	const writer = new Writer();
-	writer.string(1, command ?? "");
-	writer.string(2, workingDirectory ?? "");
-	writer.string(3, reason);
-	writer.varint(4, 0);
-	return writer.finish();
-}
-/** ShellResult { rejected = 4 } (oneof: success=1, failure=2, timeout=3, rejected=4) */
-function encodeShellRejectedResult(command, workingDirectory, reason) {
-	return new Writer().message(4, encodeShellRejected(command, workingDirectory, reason)).finish();
-}
-/**
-* ShellStream { rejected = 5 } — the reply type for `shellStreamArgs` execs
-* (streaming shell), carried by ExecClientMessage.shell_stream (field 14).
-*/
-function encodeShellStreamRejected(command, workingDirectory, reason) {
-	return new Writer().message(5, encodeShellRejected(command, workingDirectory, reason)).finish();
-}
-/** BackgroundShellSpawnResult { rejected = 3 } (oneof: success=1, error=2, rejected=3, permission_denied=4) */
-function encodeBackgroundShellRejectedResult(command, workingDirectory, reason) {
-	return new Writer().message(3, encodeShellRejected(command, workingDirectory, reason)).finish();
-}
-/** FetchResult { error=2 { url=1, error=2 } } */
-function encodeFetchError(url, error) {
-	const inner = new Writer().string(1, url ?? "").string(2, error).finish();
-	return new Writer().message(2, inner).finish();
-}
-/** WriteShellStdinResult { error=2 { error=1 } } */
-function encodeWriteShellStdinError(error) {
-	return new Writer().message(2, new Writer().string(1, error).finish()).finish();
-}
-/** DiagnosticsResult { success = 1 } — empty success keeps the exec well-formed. */
-function encodeDiagnosticsResult() {
-	return new Writer().message(1, new Uint8Array(0)).finish();
-}
-new TextDecoder();
-/** AgentServerMessage { interaction_update=1, exec_server_message=2, kv_server_message=4, ... } */
-function decodeAgentServerMessage(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (wireType !== 2) {
-			reader.skip(wireType);
-			continue;
-		}
-		const payload = reader.bytes();
-		if (field === 1) return {
-			case: "interactionUpdate",
-			value: decodeInteractionUpdate(payload)
-		};
-		if (field === 2) return {
-			case: "execServerMessage",
-			value: decodeExecServerMessage(payload)
-		};
-		if (field === 3) return {
-			case: "conversationCheckpointUpdate",
-			value: payload
-		};
-		if (field === 4) return {
-			case: "kvServerMessage",
-			value: decodeKvServerMessage(payload)
-		};
-	}
-	return {
-		case: "unknown",
-		value: void 0
-	};
-}
-/** Field numbers inside one protobuf message; used to describe frames we do not decode. */
-function messageFields(bytes) {
-	const reader = new Reader(bytes);
-	const fields = [];
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		fields.push(field);
-		reader.skip(wireType);
-	}
-	return fields.join(",");
-}
-/** Field numbers of a nested message (`wanted` inside `bytes`). */
-function nestedMessageFields(bytes, wanted) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (wireType !== 2) {
-			reader.skip(wireType);
-			continue;
-		}
-		const payload = reader.bytes();
-		if (field === wanted) return messageFields(payload);
-	}
-	return "";
-}
-/**
-* One-line description of a server frame for the stall trace. Undecoded
-* frames report their protobuf field numbers so a server message the adapter
-* ignores is still visible when a run goes silent.
-*/
-function describeServerFrame(frame) {
-	if ((frame.flags & CONNECT_END_STREAM_FLAG) !== 0) return `endstream(${Buffer.from(frame.payload).toString("utf8").replace(/\s+/g, " ").slice(0, 60)})`;
-	try {
-		const message = decodeAgentServerMessage(frame.payload);
-		if (message.case === "interactionUpdate") {
-			const update = message.value;
-			if (update.type === "textDelta") return `text(${update.text.length})`;
-			if (update.type === "thinkingDelta") return `thinking(${update.text.length})`;
-			if (update.type === "tokenDelta") return `tokens(${update.tokens})`;
-			if (update.type === "partialToolCall") return "partialToolCall";
-			if (update.type === "unknown") return `interaction#${nestedMessageFields(frame.payload, 1)}`;
-			return update.type;
-		}
-		if (message.case === "conversationCheckpointUpdate") return `checkpoint(${message.value.length}B)`;
-		if (message.case === "kvServerMessage") return `kv:${message.value.case}`;
-		if (message.case === "execServerMessage") {
-			const exec = message.value;
-			return exec.case === "unknown" ? `exec:unknown#${exec.field ?? "?"}[${(exec.seen ?? []).join(",")}]` : `exec:${exec.case}`;
-		}
-		return `message#${messageFields(frame.payload)}`;
-	} catch (error) {
-		return `undecodable(${(error instanceof Error ? error.message : String(error)).slice(0, 40)})`;
-	}
-}
-/**
-* Prompt tokens Cursor reports for the conversation it is holding.
-*
-* `ConversationStateStructure.token_details.used_tokens` rides in every
-* `conversation_checkpoint_update`, so the run that resumes that checkpoint can
-* report the real prompt size. Without it the adapter reported a placeholder
-* zero, and the context gauge showed nothing however large the model's
-* conversation had grown.
-*
-* @param checkpoint Raw checkpoint bytes from the last update, if any.
-* @returns Used tokens, or undefined when the field is absent or unreadable.
-*/
-function decodeCheckpointUsedTokens(checkpoint) {
-	if (checkpoint === void 0) return void 0;
-	try {
-		const reader = new Reader(checkpoint);
-		while (!reader.done) {
-			const { field, wireType } = reader.tag();
-			if (field === 5 && wireType === 2) {
-				const details = new Reader(reader.bytes());
-				while (!details.done) {
-					const tag = details.tag();
-					if (tag.field === 1 && tag.wireType === 0) return details.varint();
-					details.skip(tag.wireType);
-				}
-				return;
-			}
-			reader.skip(wireType);
-		}
-	} catch {}
-}
-/** InteractionUpdate { text_delta=1, thinking_delta=4, token_delta=8, turn_ended=14, ... } */
-function decodeInteractionUpdate(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (wireType !== 2) {
-			reader.skip(wireType);
-			continue;
-		}
-		const payload = reader.bytes();
-		if (field === 1) return {
-			type: "textDelta",
-			text: decodeTextDelta(payload)
-		};
-		if (field === 4) return {
-			type: "thinkingDelta",
-			text: decodeTextDelta(payload)
-		};
-		if (field === 5) return {
-			type: "thinkingCompleted",
-			durationMs: decodeThinkingDuration(payload)
-		};
-		if (field === 8) return {
-			type: "tokenDelta",
-			tokens: decodeTokenDelta(payload)
-		};
-		if (field === 14) return { type: "turnEnded" };
-		if (field === 2) return { type: "toolCallStarted" };
-		if (field === 3) return { type: "toolCallCompleted" };
-		if (field === 7) return {
-			type: "partialToolCall",
-			...decodePartialToolCall(payload)
-		};
-		if (field === 15) return { type: "toolCallDelta" };
-		if (field === 13) return { type: "heartbeat" };
-	}
-	return { type: "unknown" };
-}
-function decodeThinkingDuration(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 0) return reader.varint();
-		reader.skip(wireType);
-	}
-	return 0;
-}
-function decodeTextDelta(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) return reader.string();
-		reader.skip(wireType);
-	}
-	return "";
-}
-function decodeTokenDelta(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 0) return reader.varint();
-		reader.skip(wireType);
-	}
-	return 0;
-}
-/** PartialToolCallUpdate { call_id=1, args_text_delta=3 } */
-function decodePartialToolCall(bytes) {
-	const reader = new Reader(bytes);
-	let callId = "";
-	let argsTextDelta = "";
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) callId = reader.string();
-		else if (field === 3 && wireType === 2) argsTextDelta = reader.string();
-		else reader.skip(wireType);
-	}
-	return {
-		callId,
-		argsTextDelta
-	};
-}
-/** KvServerMessage { id=1, get_blob_args=2 { blob_id=1 } | set_blob_args=3 { blob_id=1, blob_data=2 } } */
-function decodeKvServerMessage(bytes) {
-	const reader = new Reader(bytes);
-	let id = 0;
-	let blobId;
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 0) id = reader.varint();
-		else if (field === 2 && wireType === 2) blobId = decodeBlobId(reader.bytes());
-		else if (field === 3 && wireType === 2) return {
-			id,
-			case: "setBlobArgs",
-			...decodeSetBlobArgs(reader.bytes())
-		};
-		else reader.skip(wireType);
-	}
-	return blobId === void 0 ? {
-		id,
-		case: "unknown"
-	} : {
-		id,
-		case: "getBlobArgs",
-		blobId
-	};
-}
-/** SetBlobArgs { blob_id=1, blob_data=2 } */
-function decodeSetBlobArgs(bytes) {
-	const reader = new Reader(bytes);
-	let blobId;
-	let blobData;
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) blobId = reader.bytes();
-		else if (field === 2 && wireType === 2) blobData = reader.bytes();
-		else reader.skip(wireType);
-	}
-	return {
-		blobId,
-		blobData
-	};
-}
-function decodeBlobId(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) return reader.bytes();
-		reader.skip(wireType);
-	}
-}
-/**
-* Field number of `ExecServerMessage.span_context`. It is a plain (non-oneof)
-* field, so a message carrying only ids, a span context, and an exec variant
-* this build does not know must not mistake it for the exec itself.
-*/
-const EXEC_SPAN_CONTEXT_FIELD = 19;
-/** ExecServerMessage { id=1, exec_id=15, request_context_args=10, mcp_args=11, ... } */
-function decodeExecServerMessage(bytes) {
-	const reader = new Reader(bytes);
-	let id = 0;
-	let execId = "";
-	let unknownField;
-	const seen = [];
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		seen.push(field);
-		if (field === 1 && wireType === 0) id = reader.varint();
-		else if (field === 15 && wireType === 2) execId = reader.string();
-		else if (wireType === 2) {
-			const payload = reader.bytes();
-			if (field === 10) return {
-				id,
-				execId,
-				case: "requestContextArgs"
-			};
-			if (field === 11) return {
-				id,
-				execId,
-				case: "mcpArgs",
-				args: decodeMcpArgs(payload)
-			};
-			if (field === 2) return {
-				id,
-				execId,
-				case: "shellArgs",
-				path: decodeSinglePathArg(payload)
-			};
-			if (field === 3) return {
-				id,
-				execId,
-				case: "writeArgs",
-				path: decodeSinglePathArg(payload)
-			};
-			if (field === 4) return {
-				id,
-				execId,
-				case: "deleteArgs",
-				path: decodeSinglePathArg(payload)
-			};
-			if (field === 5) return {
-				id,
-				execId,
-				case: "grepArgs"
-			};
-			if (field === 7) return {
-				id,
-				execId,
-				case: "readArgs",
-				path: decodeReadArgsPath(payload)
-			};
-			if (field === 8) return {
-				id,
-				execId,
-				case: "lsArgs",
-				path: decodeSinglePathArg(payload)
-			};
-			if (field === 9) return {
-				id,
-				execId,
-				case: "diagnosticsArgs"
-			};
-			if (field === 14) return {
-				id,
-				execId,
-				case: "shellStreamArgs",
-				path: decodeSinglePathArg(payload)
-			};
-			if (field === 16) return {
-				id,
-				execId,
-				case: "backgroundShellSpawnArgs"
-			};
-			if (field === 17) return {
-				id,
-				execId,
-				case: "listMcpResourcesExecArgs"
-			};
-			if (field === 18) return {
-				id,
-				execId,
-				case: "readMcpResourceExecArgs"
-			};
-			if (field === 20) return {
-				id,
-				execId,
-				case: "fetchArgs",
-				url: decodeFetchUrl(payload)
-			};
-			if (field === 21) return {
-				id,
-				execId,
-				case: "recordScreenArgs"
-			};
-			if (field === 22) return {
-				id,
-				execId,
-				case: "computerUseArgs"
-			};
-			if (field === 23) return {
-				id,
-				execId,
-				case: "writeShellStdinArgs"
-			};
-			if (field !== EXEC_SPAN_CONTEXT_FIELD) unknownField ??= field;
-		} else reader.skip(wireType);
-	}
-	return {
-		id,
-		execId,
-		case: "unknown",
-		field: unknownField,
-		seen
-	};
-}
-function decodeSinglePathArg(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) return reader.string();
-		reader.skip(wireType);
-	}
-	return "";
-}
-function decodeReadArgsPath(bytes) {
-	return decodeSinglePathArg(bytes);
-}
-function decodeFetchUrl(bytes) {
-	const reader = new Reader(bytes);
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) return reader.string();
-		reader.skip(wireType);
-	}
-	return "";
-}
-/** McpArgs { name=1, args=2 (map<string,bytes>), tool_call_id=3, provider_identifier=4, tool_name=5 } */
-function decodeMcpArgs(bytes) {
-	const reader = new Reader(bytes);
-	let name$1 = "";
-	let toolCallId = "";
-	let providerIdentifier = "";
-	let toolName = "";
-	const args = {};
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) name$1 = reader.string();
-		else if (field === 2 && wireType === 2) {
-			const entry = new Reader(reader.bytes());
-			let key = "";
-			let value;
-			while (!entry.done) {
-				const tag = entry.tag();
-				if (tag.field === 1 && tag.wireType === 2) key = entry.string();
-				else if (tag.field === 2 && tag.wireType === 2) value = entry.bytes();
-				else entry.skip(tag.wireType);
-			}
-			if (key) args[key] = value;
-		} else if (field === 3 && wireType === 2) toolCallId = reader.string();
-		else if (field === 4 && wireType === 2) providerIdentifier = reader.string();
-		else if (field === 5 && wireType === 2) toolName = reader.string();
-		else reader.skip(wireType);
-	}
-	return {
-		name: name$1,
-		toolCallId,
-		providerIdentifier,
-		toolName,
-		args
-	};
-}
-/** GetUsableModelsResponse { models = 1: repeated ModelDetails } */
-function decodeUsableModels(bytes) {
-	const reader = new Reader(bytes);
-	const models = [];
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (field === 1 && wireType === 2) {
-			const model = decodeModelDetails(reader.bytes());
-			if (model?.id) models.push(model);
-		} else reader.skip(wireType);
-	}
-	return models;
-}
-/** ModelDetails { model_id=1, display_model_id=3, display_name=4, display_name_short=5, aliases=6 } */
-function decodeModelDetails(bytes) {
-	const reader = new Reader(bytes);
-	const model = {
-		id: "",
-		name: ""
-	};
-	while (!reader.done) {
-		const { field, wireType } = reader.tag();
-		if (wireType === 2) if (field === 1) model.id = reader.string();
-		else if (field === 3) model.displayModelId = reader.string();
-		else if (field === 4) model.name = reader.string();
-		else if (field === 5) model.displayNameShort = reader.string();
-		else if (field === 6) reader.bytes();
-		else reader.bytes();
-		else reader.skip(wireType);
-	}
-	return model;
-}
-/** Connect frame: [1-byte flags][4-byte big-endian length][payload]. */
-function frameEncode(payload, flags = 0) {
-	const out = new Uint8Array(5 + payload.length);
-	const view = new DataView(out.buffer);
-	view.setUint8(0, flags);
-	view.setUint32(1, payload.length, false);
-	out.set(payload, 5);
-	return out;
-}
-const CONNECT_END_STREAM_FLAG = 2;
-const CONNECT_COMPRESSED_FLAG = 1;
-/** Upper bound for a decompressed Connect frame; guards against zip bombs. */
-const MAX_CONNECT_FRAME_BYTES = 64 * 1024 * 1024;
-/**
-* Incremental Connect frame parser fed by response chunks.
-* Yields { flags, payload } objects. Frames flagged compressed (bit 0) are
-* gzip-decompressed here so consumers only ever see plain payloads.
-*/
-var ConnectFrameReader = class {
-	constructor() {
-		this.buffer = new Uint8Array(0);
-		this.frames = [];
-		this.waiters = [];
-		this.ended = false;
-		this.paused = false;
-		this.error = void 0;
-	}
-	push(chunk) {
-		const combined = new Uint8Array(this.buffer.length + chunk.length);
-		combined.set(this.buffer);
-		combined.set(chunk, this.buffer.length);
-		this.buffer = combined;
-		while (this.buffer.length >= 5) {
-			const view = new DataView(this.buffer.buffer, this.buffer.byteOffset, 5);
-			const flags = view.getUint8(0);
-			const length = view.getUint32(1, false);
-			if (this.buffer.length < 5 + length) break;
-			const payload = this.buffer.slice(5, 5 + length);
-			this.buffer = this.buffer.slice(5 + length);
-			let data = payload;
-			if ((flags & CONNECT_COMPRESSED_FLAG) !== 0) try {
-				data = gunzipSync(Buffer.from(payload), { maxOutputLength: MAX_CONNECT_FRAME_BYTES });
-			} catch (error) {
-				this.fail(new Error("Cursor sent an unreadable compressed frame", { cause: error }));
-				return;
-			}
-			this.#enqueue({
-				flags: flags & ~CONNECT_COMPRESSED_FLAG,
-				payload: data
-			});
-		}
-	}
-	#enqueue(frame) {
-		if (this.waiters.length > 0) {
-			this.waiters.shift().resolve(frame);
-			return;
-		}
-		this.frames.push(frame);
-	}
-	finish() {
-		this.ended = true;
-		for (const waiter of this.waiters.splice(0)) waiter.resolve(void 0);
-	}
-	/**
-	* Stop blocking for new frames without ending the stream: buffered frames
-	* are still returned, and `resume()` restores normal waiting. A Cursor run
-	* stays alive across DSH steps, so a reader that is paused to end one step
-	* must accept frames again when the next step continues the same run.
-	*/
-	pause() {
-		this.paused = true;
-		for (const waiter of this.waiters.splice(0)) waiter.resolve(void 0);
-	}
-	resume() {
-		this.paused = false;
-	}
-	fail(error) {
-		this.error = error;
-		this.ended = true;
-		for (const waiter of this.waiters.splice(0)) waiter.reject(error);
-	}
-	async next() {
-		if (this.frames.length > 0) return this.frames.shift();
-		if (this.paused) return void 0;
-		if (this.ended) {
-			if (this.error !== void 0) throw this.error;
-			return;
-		}
-		return new Promise((resolve$2, reject) => this.waiters.push({
-			resolve: resolve$2,
-			reject
-		}));
-	}
-};
-const AGENT_HEADERS = {
-	"content-type": "application/connect+proto",
-	"connect-protocol-version": "1",
-	"connect-accept-encoding": "gzip",
-	te: "trailers",
-	"x-ghost-mode": "true",
-	"x-cursor-client-version": CURSOR_CLIENT_VERSION,
-	"x-cursor-client-type": "cli"
-};
-/**
-* One bidirectional agent run over HTTP/2. Writes Connect-framed
-* `AgentClientMessage`s and surfaces `AgentServerMessage`s through the frame
-* reader. Heartbeats keep the run alive.
-*/
-var AgentRun = class {
-	constructor(accessToken, options = {}) {
-		this.accessToken = accessToken;
-		this.baseUrl = options.baseUrl ?? CURSOR_BASE_URL;
-		this.session = void 0;
-		this.frames = new ConnectFrameReader();
-		this.responseStatus = void 0;
-		this.responseContentType = void 0;
-		this.trailers = {};
-		this.finished = false;
-	}
-	async start() {
-		const url = new URL(CURSOR_RUN_PATH, this.baseUrl);
-		const headers = {
-			":method": "POST",
-			":path": url.pathname,
-			authorization: `Bearer ${this.accessToken}`,
-			...AGENT_HEADERS
-		};
-		this.responsePromise = new Promise((resolve$2, reject) => {
-			this.resolveResponse = resolve$2;
-			this.rejectResponse = reject;
-		});
-		this.responsePromise.catch(() => {});
-		this.session = http2.connect(this.baseUrl);
-		this.stream = this.session.request(headers);
-		this.stream.on("response", (headers$1) => {
-			this.responseStatus = Number(headers$1[":status"]);
-			this.responseContentType = typeof headers$1["content-type"] === "string" ? headers$1["content-type"] : void 0;
-			this.#resolveResponse(this.responseStatus);
-		});
-		this.stream.on("data", (chunk) => this.frames.push(Buffer.from(chunk)));
-		this.stream.on("trailers", (trailers) => {
-			this.trailers = trailers;
-		});
-		this.stream.on("end", () => this.frames.finish());
-		this.stream.on("close", () => {
-			if (this.responseStatus === void 0) this.#rejectResponse(/* @__PURE__ */ new Error("Cursor HTTP stream closed before response"));
-		});
-		this.stream.on("error", (error) => {
-			this.#rejectResponse(error);
-			this.frames.fail(error);
-		});
-		this.session.on("error", (error) => {
-			this.#rejectResponse(error);
-			this.frames.fail(error);
-		});
-	}
-	#resolveResponse(status) {
-		const resolve$2 = this.resolveResponse;
-		this.resolveResponse = void 0;
-		this.rejectResponse = void 0;
-		resolve$2?.(status);
-	}
-	#rejectResponse(error) {
-		const reject = this.rejectResponse;
-		this.resolveResponse = void 0;
-		this.rejectResponse = void 0;
-		reject?.(error);
-	}
-	waitForResponse(timeoutMs) {
-		if (this.responsePromise === void 0) throw new Error("Cursor AgentRun has not started");
-		if (timeoutMs === void 0) return this.responsePromise;
-		return new Promise((resolve$2, reject) => {
-			const timer = setTimeout(() => reject(/* @__PURE__ */ new Error("Cursor HTTP response timeout")), timeoutMs);
-			timer.unref?.();
-			this.responsePromise.then(resolve$2, reject).finally(() => clearTimeout(timer));
-		});
-	}
-	write(payload) {
-		if (this.finished || this.stream === void 0 || this.stream.destroyed) return false;
-		try {
-			this.stream.write(Buffer.from(payload));
-			return true;
-		} catch {
-			return false;
-		}
-	}
-	writeMessage(bytes) {
-		return this.write(frameEncode(bytes));
-	}
-	startHeartbeat() {
-		this.heartbeat = setInterval(() => {
-			this.writeMessage(encodeHeartbeat());
-		}, HEARTBEAT_INTERVAL_MS);
-		this.heartbeat.unref?.();
-	}
-	/** Fail the run with a terminal error and tear down the connection. */
-	abort(error) {
-		if (this.finished) return;
-		this.#rejectResponse(error);
-		this.frames.fail(error);
-		this.close();
-	}
-	close() {
-		if (this.finished) return;
-		this.#rejectResponse(/* @__PURE__ */ new Error("Cursor AgentRun closed before response"));
-		this.finished = true;
-		if (this.heartbeat !== void 0) clearInterval(this.heartbeat);
-		if (!this.frames.ended) this.frames.finish();
-		try {
-			this.stream?.close();
-		} catch {}
-		try {
-			this.session.destroy();
-		} catch {}
-	}
-};
-function sha256(bytes) {
-	return createHash("sha256").update(bytes).digest();
-}
-function collectImageAttachments(options) {
-	const refs = /* @__PURE__ */ new Map();
-	const visit = (blocks) => {
-		for (const block of blocks ?? []) if (block.type === "image") refs.set(block.attachment.attachmentId, block.attachment);
-		else if (block.type === "tool-result") visit(block.content);
-	};
-	for (const message of options.messages ?? []) if (message.role === "user") visit(message.content);
-	return [...refs.values()];
-}
-async function prepareCursorImages(options, attachments) {
-	const refs = collectImageAttachments(options);
-	if (refs.length === 0) return [];
-	if (attachments === void 0) throw new LlmError("Cursor image input requires the durable attachment service", "UNSUPPORTED_CONTENT");
-	return (await Promise.all(refs.map((ref) => attachments.readImage(ref, options.signal)))).map(({ ref, data }) => ({
-		data: Buffer.from(data).toString("base64"),
-		mimeType: ref.mediaType
-	}));
-}
-function flattenBlocks(content) {
-	let text = "";
-	for (const block of content ?? []) if (block.type === "text") text += block.text;
-	else if (block.type === "tool-result") {
-		const callId = block.toolCallId ? ` for ${block.toolCallId}` : "";
-		text += `\n[TOOL RESULT${callId}]\n${flattenBlocks(block.content)}`;
-	}
-	return text;
-}
-function sanitizeReplayedAssistantText(text) {
-	let omitted = false;
-	const sanitized = String(text ?? "").replace(/<tool_call\b[\s\S]*?<\/tool_call>/gi, () => {
-		omitted = true;
-		return "";
-	}).replace(/<\/?invoke>|<\|eos\|>/gi, "").trim();
-	if (!omitted) return sanitized;
-	return `${sanitized}${sanitized ? "\n" : ""}[Previous textual tool-call markup omitted from replay.]`;
-}
-/**
-* How much of a replayed tool request to keep. Enough for the arguments that are
-* state — a plan (`todo_write`) is its list, and a repeated `grep` is avoided
-* only if the model can see what it already asked for — while a `write` of a
-* whole file stays bounded.
-*/
-const REPLAYED_CALL_CHARS = 600;
-/** Replay assistant history without teaching models to imitate XML tool tags. */
-function renderColdStartAssistant(content) {
-	const parts = [];
-	for (const block of content ?? []) if (block.type === "text") {
-		const text = sanitizeReplayedAssistantText(block.text);
-		if (text) parts.push(text);
-	} else if (block.type === "tool-call") {
-		const args = typeof block.arguments === "string" ? block.arguments : JSON.stringify(block.arguments ?? "");
-		const shown = args.length > REPLAYED_CALL_CHARS ? `${args.slice(0, REPLAYED_CALL_CHARS)}…` : args;
-		parts.push(`[Previous tool request: ${block.name}${shown.length > 0 ? ` ${shown}` : ""}]`);
-	}
-	return parts.join("\n").trim();
-}
-function actionBoundary(messages) {
-	for (let index = messages.length - 1; index >= 0; index--) if (messages[index].role === "assistant") return index + 1;
-	return 0;
-}
-/** Combine the current DSH turn's adjacent user/context messages into one action. */
-function currentActionText(options) {
-	const messages = options.messages ?? [];
-	const boundary = actionBoundary(messages);
-	const parts = [];
-	for (let index = boundary; index < messages.length; index++) {
-		const message = messages[index];
-		if (message.role !== "user") continue;
-		const text = flattenBlocks(message.content).trim();
-		if (text.length > 0) parts.push(text);
-	}
-	if (parts.length > 0) return parts.join("\n\n");
-	for (let index = messages.length - 1; index >= 0; index--) {
-		if (messages[index].role !== "user") continue;
-		const text = flattenBlocks(messages[index].content).trim();
-		if (text.length > 0) return text;
-	}
-	return "";
-}
-/**
-* Markers this harness leaves in a result when the sandbox refused the work.
-*
-* They call for different answers, and telling them apart matters: the
-* `SetNamedSecurityInfoW` failure is the ACL grant the confinement itself needs
-* and cannot get, so *no* narrower mode can start and only a mode without that
-* grant can run the call. `[sandbox: ... denied under <mode> mode]` is a
-* refusal from a sandbox that did start, where one step wider may well suffice.
-* Naming the narrowest mode first for the ACL failure is what turned a single
-* refusal into a retry loop: the model asked for `workspace-write` — the mode it
-* was already in — and failed the same way 101 times in one session.
-*/
-const SANDBOX_ACL_FAILURE = /SetNamedSecurityInfoW failed/i;
-const SANDBOX_POLICY_DENIAL = /\[sandbox:[^\]]*denied/i;
-/**
-* DSH's escalation rule, restated where the refusal lands.
-*
-* Every provider gets this rule — retry the denied call once with
-* `sandbox_permissions` and a justification, which raises an approval prompt —
-* but only the `pwsh` description spells it out, and the refusal result carries
-* nothing at all. A model that does not recall the rule from a tool description
-* reads the refusal as "this tool does not work here" and stops using it, which
-* is how a Cursor turn ends up saying local tools are unavailable instead of
-* asking the user for permission.
-*/
-const SANDBOX_ACL_HINT = "\n\n[cursor] The DSH sandbox cannot start in this workspace — its own ACL grant fails (`SetNamedSecurityInfoW`) — so no narrower mode can succeed. Retry this exact call once with sandbox_permissions=\"danger-full-access\" and a one-sentence justification; DSH then asks the user to approve it. Do not retry it in a narrower mode, and if the retry is refused, stop and report the refusal instead of trying again.";
-const SANDBOX_POLICY_HINT = "\n\n[cursor] The DSH sandbox refused this call, and that is recoverable: retry this exact call once with sandbox_permissions set to the narrowest wider mode that suffices (workspace-write, or danger-full-access when that is not enough) plus a one-sentence justification. DSH then asks the user to approve it. If the retry is refused as well, stop and report it instead of trying another mode.";
-/** Whether one result is the harness refusing, rather than the tool failing. */
-function isSandboxRefusal(content) {
-	return SANDBOX_ACL_FAILURE.test(content) || SANDBOX_POLICY_DENIAL.test(content);
-}
-/**
-* Result text as the model should read it: a sandbox refusal gains the rule that
-* turns it back into a request the user can approve.
-* @param content Result text on its way to the model.
-* @returns The text, with the escalation rule a refusal calls for appended.
-*/
-function withSandboxHint(content) {
-	if (content.includes("sandbox_permissions")) return content;
-	if (SANDBOX_ACL_FAILURE.test(content)) return `${content}${SANDBOX_ACL_HINT}`;
-	if (SANDBOX_POLICY_DENIAL.test(content)) return `${content}${SANDBOX_POLICY_HINT}`;
-	return content;
-}
-/** Extract DSH tool-result blocks for resuming a live Cursor exec bridge. */
-function collectToolResults(options) {
-	const results = [];
-	for (const message of options.messages ?? []) for (const block of message.content ?? []) {
-		if (block.type !== "tool-result") continue;
-		const content = flattenBlocks(block.content).trim();
-		const sandboxDenied = isSandboxRefusal(content);
-		results.push({
-			toolCallId: block.toolCallId ?? message.source?.callId,
-			content: withSandboxHint(content),
-			isError: block.isError === true,
-			sandboxDenied
-		});
-	}
-	return results;
-}
-/**
-* The compaction DSH applied to the history carried by one request, if any.
-*
-* DSH frees context by replacing a span of the conversation with a summary and
-* marking that message `source.kind = "compact-checkpoint"` with the id of the
-* compaction. The adapter compares that id with the one its persisted Cursor
-* conversation was built from: equal means the checkpoint still describes the
-* history DSH is sending, a new id means DSH has rewritten it.
-*
-* @param options The DSH request whose message history is being sent.
-* @returns The newest compaction id in the history, or undefined when it has none.
-*/
-function compactionIdOf(options) {
-	let id;
-	for (const message of options.messages ?? []) {
-		if (message.source?.kind !== "compact-checkpoint") continue;
-		id = message.source.compactionId ?? "compact-checkpoint";
-	}
-	return id;
-}
-function decodeXmlText(value) {
-	return String(value ?? "").replace(/&quot;/gi, "\"").replace(/&apos;/gi, "'").replace(/&lt;/gi, "<").replace(/&gt;/gi, ">").replace(/&amp;/gi, "&");
-}
-function parseTagAttributes(source) {
-	const attributes = {};
-	const pattern = /([A-Za-z_][\w-]*)\s*=\s*"([\s\S]*?)"/g;
-	for (let match; (match = pattern.exec(source)) !== null;) attributes[match[1]] = decodeXmlText(match[2]);
-	return attributes;
-}
-function resolveTextTool(candidate, tools) {
-	const available = tools ?? [];
-	const normalized = String(candidate ?? "").toLowerCase();
-	let tool = available.find((entry) => {
-		const name$1 = String(entry.name).toLowerCase();
-		return normalized === name$1 || normalized.endsWith(`_${name$1}`);
-	});
-	if (tool !== void 0) return tool;
-	for (const name$1 of {
-		shell: ["pwsh", "bash"],
-		read: ["read"],
-		glob: ["glob"],
-		grep: ["grep"],
-		write: ["write"],
-		edit: ["edit"]
-	}[normalized] ?? []) {
-		tool = available.find((entry) => String(entry.name).toLowerCase() === name$1);
-		if (tool !== void 0) return tool;
-	}
-}
-function normalizeTextToolArguments(tool, raw) {
-	const args = { ...raw };
-	if (tool.name === "read" && args.file_path === void 0 && args.path !== void 0) {
-		args.file_path = args.path;
-		delete args.path;
-	}
-	if (tool.name === "glob") {
-		if (args.pattern === void 0 && args.glob_pattern !== void 0) args.pattern = args.glob_pattern;
-		if (args.path === void 0 && args.target_directory !== void 0) args.path = args.target_directory;
-		delete args.glob_pattern;
-		delete args.target_directory;
-	}
-	for (const [key, value] of Object.entries(args)) {
-		const type = tool.parameters?.properties?.[key]?.type;
-		if ((type === "number" || type === "integer") && typeof value === "string" && value.trim() !== "") {
-			const number$1 = Number(value);
-			if (Number.isFinite(number$1)) args[key] = number$1;
-		} else if (type === "boolean" && typeof value === "string") {
-			if (value.toLowerCase() === "true") args[key] = true;
-			else if (value.toLowerCase() === "false") args[key] = false;
-		} else if ((type === "object" || type === "array") && typeof value === "string") try {
-			args[key] = JSON.parse(value);
-		} catch {}
-	}
-	return args;
-}
-/**
-* Recover Cursor models that print tool-call XML as text instead of emitting
-* an execServerMessage.mcpArgs frame. This is a fallback for contaminated or
-* compacted conversations; protocol-native MCP calls remain the primary path.
-*/
-function parseTextToolCalls(text, tools) {
-	const calls = [];
-	const pattern = /<tool_call\b([^>]*)>([\s\S]*?)<\/tool_call>/gi;
-	for (let match; (match = pattern.exec(String(text ?? ""))) !== null;) {
-		const attributes = parseTagAttributes(match[1]);
-		const tool = resolveTextTool(attributes.name ?? attributes.id, tools);
-		if (tool === void 0) continue;
-		const rawArgs = {};
-		const parameterPattern = /<parameter\s+name="([^"]+)"\s*>([\s\S]*?)<\/parameter>/gi;
-		for (let parameter; (parameter = parameterPattern.exec(match[2])) !== null;) rawArgs[parameter[1]] = decodeXmlText(parameter[2].trim());
-		for (const [key, value] of Object.entries(attributes)) if (key !== "id" && key !== "name") rawArgs[key] = value;
-		if (Object.keys(rawArgs).length === 0) {
-			const body = decodeXmlText(match[2]).trim();
-			if (body.startsWith("{")) try {
-				Object.assign(rawArgs, JSON.parse(body));
-			} catch {}
-		}
-		calls.push({
-			id: `text-tool-${crypto.randomUUID()}`,
-			name: tool.name,
-			arguments: JSON.stringify(normalizeTextToolArguments(tool, rawArgs))
-		});
-	}
-	return calls;
-}
-function coldStartLabel(message) {
-	if (message.role === "assistant") return "ASSISTANT";
-	if ((message.content ?? []).some((block) => block.type === "tool-result")) return "TOOL RESULT";
-	if (message.source?.kind === "plugin") return "RUNTIME CONTEXT";
-	return "USER";
-}
-/**
-* Rehydrate a DSH conversation after process restart without using Cursor's
-* field-8 turns (the current server interprets those entries as blob ids).
-*/
-function coldStartActionText(options) {
-	const entries = [];
-	for (const message of options.messages ?? []) {
-		if (message.role === "system") continue;
-		const text = message.role === "assistant" ? renderColdStartAssistant(message.content) : withSandboxHint(flattenBlocks(message.content).trim());
-		if (text.length === 0) continue;
-		entries.push({
-			label: coldStartLabel(message),
-			text
-		});
-	}
-	if (entries.length === 0) return "";
-	if (entries.length === 1 && entries[0].label === "USER") return entries[0].text;
-	return ["Continue the DSH conversation below. Treat entries according to their labels. Respond to the final USER request; RUNTIME CONTEXT and TOOL RESULT entries provide context only.", ...entries.map((entry) => `[${entry.label}]\n${entry.text}`)].join("\n\n");
-}
-/**
-* Build a fresh state with root prompt blobs only. Current Cursor servers reject
-* hand-encoded field-8 turns, so cold starts carry textual history in the action.
-*/
-function buildInitialConversationState(options) {
-	const systemParts = [options.system ?? ""];
-	for (const message of options.messages ?? []) if (message.role === "system") systemParts.push(flattenBlocks(message.content));
-	const systemText = systemParts.filter((part) => part.length > 0).join("\n").trim();
-	const blobStore = /* @__PURE__ */ new Map();
-	const rootPromptBlobIds = [];
-	if (systemText.length > 0) {
-		const payload = textEncoder.encode(JSON.stringify({
-			role: "system",
-			content: systemText
-		}));
-		const id = sha256(payload);
-		blobStore.set(Buffer.from(id).toString("hex"), payload);
-		rootPromptBlobIds.push(id);
-	}
-	return {
-		conversationState: encodeConversationState({
-			rootPromptBlobIds,
-			turns: [],
-			systemText
-		}),
-		blobStore,
-		systemText
-	};
-}
-/**
-* Build the full `AgentClientMessage` payload for one run.
-*
-* When a persisted checkpoint for this conversation exists (captured from a
-* previous run's `conversation_checkpoint_update`), it becomes the
-* conversation state and its referenced blobs are served from the persisted
-* blob store. Otherwise the state is built from the DSH message history.
-*/
-function buildRunPayload(options, modelId, persisted, images = []) {
-	let conversationState;
-	let blobStore;
-	let actionText;
-	if (persisted?.checkpoint !== void 0) {
-		conversationState = persisted.checkpoint;
-		blobStore = persisted.blobs ?? /* @__PURE__ */ new Map();
-		actionText = currentActionText(options);
-	} else {
-		const built = buildInitialConversationState(options);
-		conversationState = built.conversationState;
-		blobStore = built.blobStore;
-		actionText = coldStartActionText(options);
-	}
-	const action = encodeUserMessageAction(encodeUserMessage({
-		text: actionText,
-		messageId: randomUUID()
-	}), images);
-	const modelDetails = encodeModelDetails(modelId);
-	return {
-		payload: encodeRunMessage(encodeRunRequest({
-			conversationState,
-			action,
-			modelDetails,
-			conversationId: randomUUID()
-		})),
-		blobStore
-	};
-}
-/**
-* Fetch usable models from Cursor's unary `GetUsableModels` endpoint.
-* The request body is the raw (unframed) empty protobuf message.
-*/
-async function fetchUsableModels(accessToken, options = {}) {
-	const response = await (options.fetch ?? nativeFetch)(`${CURSOR_BASE_URL}${CURSOR_MODELS_PATH}`, {
-		method: "POST",
-		redirect: "error",
-		headers: {
-			"content-type": "application/proto",
-			authorization: `Bearer ${accessToken}`,
-			"x-ghost-mode": "true",
-			"x-cursor-client-version": CURSOR_CLIENT_VERSION,
-			"x-cursor-client-type": "cli",
-			"user-agent": "dsh-cursor-subscription/0.1.0"
-		},
-		body: new Uint8Array(0),
-		signal: options.signal
-	});
-	if (!response.ok) throw new Error(`Cursor model discovery failed (HTTP ${response.status})`);
-	const bytes = new Uint8Array(await response.arrayBuffer());
-	if (bytes.length === 0) throw new Error("Cursor model discovery returned an empty response");
-	const models = decodeUsableModels(bytes);
-	if (models.length > 0) return models;
-	const frameReader = new ConnectFrameReader();
-	frameReader.push(bytes);
-	frameReader.finish();
-	const framed = [];
-	for (;;) {
-		const frame = await frameReader.next();
-		if (frame === void 0) break;
-		if ((frame.flags & CONNECT_END_STREAM_FLAG) !== 0) break;
-		framed.push(...decodeUsableModels(frame.payload));
-	}
-	return framed;
-}
-const record$1 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-const TOOL_REJECT_REASON = "Tool not available in this environment. Use the MCP tools provided instead.";
-/** Block indices are fixed per type so the assembler keeps blocks distinct. */
-const TEXT_BLOCK_INDEX = 0;
-const REASONING_BLOCK_INDEX = 1;
-const TOOL_BLOCK_INDEX = 2;
-/**
-* Progress notes ride their own reasoning block, so the model's own thinking
-* stays exactly what the model produced. Reasoning is the only channel an
-* adapter has for showing work that is not answer text, and a Cursor step
-* otherwise reduces to one sentence plus a tool card: the protocol round trips
-* that cost the turn most of its wall clock — a declined native tool call, a
-* tool-schema fetch — are invisible, and a turn of them reads as the same
-* request being submitted again and again.
-*/
-const PROGRESS_BLOCK_INDEX = 3;
-/**
-* One reader-visible progress line.
-* @param text What just happened, in one clause.
-* @returns A reasoning delta the conversation view renders as process.
-*/
-function cursorProgress(text) {
-	return {
-		type: "reasoning-delta",
-		index: PROGRESS_BLOCK_INDEX,
-		text: `[cursor] ${text}\n`
-	};
-}
-/** Reader-facing name of one decoded exec. */
-function nativeToolName(exec) {
-	if (exec.case === "unknown") return `tool (field ${exec.field ?? "?"})`;
-	return exec.case.replace(/ExecArgs$|Args$/, "");
-}
-/**
-* DSH `LlmAdapter` for the Cursor subscription. Normal turns use Cursor
-* checkpoints; MCP tool calls keep their HTTP/2 Run alive across DSH steps so
-* the following tool-result can resume the exact pending exec with mcpResult.
-*/
-var CursorAdapter = class extends LlmAdapter {
-	constructor(options) {
-		super();
-		this.auth = options.auth;
-		this.fetchModels = options.fetchModels ?? fetchUsableModels;
-		this.idleTimeoutMs = options.idleTimeoutMs ?? STREAM_IDLE_TIMEOUT_MS;
-		this.progressTimeoutMs = options.progressTimeoutMs ?? STREAM_PROGRESS_TIMEOUT_MS;
-		this.idleCheckIntervalMs = options.idleCheckIntervalMs ?? 15e3;
-		this.modelsCacheTtlMs = options.modelsCacheTtlMs ?? 300 * 1e3;
-		this.sessionStateTtlMs = options.sessionStateTtlMs ?? SESSION_STATE_TTL_MS;
-		const fallbackSettings = resolveCursorSettings({
-			maxToolRounds: options.maxToolRounds,
-			retryCount: options.retryCount,
-			retryIntervalMs: options.retryIntervalMs,
-			retryHttpStatusCodes: options.retryHttpStatusCodes
-		});
-		this.settings = options.settings ?? (() => fallbackSettings);
-		this.createAgentRun = options.createAgentRun ?? ((access) => new AgentRun(access));
-		this.resolveAttachments = options.resolveAttachments;
-		this.sleep = options.sleep ?? abortableDelay$1;
-		this.now = options.now ?? Date.now;
-		this.logger = options.logger;
-		this.hangTracePath = options.hangTracePath ?? join(homedir(), ".dsh", "cursor-hang-trace.log");
-		this.toolCallSettleMs = options.toolCallSettleMs ?? TOOL_CALL_SETTLE_MS;
-		this.#modelsCache = {
-			at: 0,
-			models: void 0
-		};
-	}
-	#modelsCache;
-	/** Persisted conversation checkpoints + referenced blobs per DSH session id. */
-	#sessions = /* @__PURE__ */ new Map();
-	#evictStaleSessions() {
-		const now = this.now();
-		for (const [key, state] of this.#sessions) {
-			if (now - (state.lastAccessMs ?? now) <= this.sessionStateTtlMs) continue;
-			state.bridge?.run.close();
-			this.#sessions.delete(key);
-		}
-	}
-	async #discoverModels(force = false) {
-		const now = this.now();
-		if (!force && this.#modelsCache.models !== void 0 && now - this.#modelsCache.at < this.modelsCacheTtlMs) return this.#modelsCache.models;
-		const access = await this.auth.accessToken();
-		const source = await this.fetchModels(access);
-		if (source.length === 0) throw new Error("Cursor returned no usable models");
-		const result = sortModelsByName(source.map((model) => ({
-			id: model.id,
-			name: model.name || model.id,
-			inputModalities: ["text", "image"]
-		})));
-		this.#modelsCache = {
-			at: now,
-			models: result
-		};
-		return result;
-	}
-	invalidateModels() {
-		this.#modelsCache = {
-			at: 0,
-			models: void 0
-		};
-	}
-	providerInfo(provider) {
-		return {
-			id: provider,
-			name: "Cursor subscription"
-		};
-	}
-	async listModels(provider) {
-		return (await this.#discoverModels()).map((model) => ({
-			provider,
-			...model
-		}));
-	}
-	/** RPC-facing model listing; `force` bypasses the discovery cache. */
-	async listModelsForRpc({ force = false, signal } = {}) {
-		const models = await this.#discoverModels(force);
-		if (signal?.aborted) throw new LlmError("Cursor model listing aborted", "ABORTED");
-		return models;
-	}
-	async resolveModel(provider, model, _signal) {
-		let name$1 = model;
-		try {
-			const found = (await this.#discoverModels()).find((entry) => entry.id === model);
-			if (found !== void 0) name$1 = found.name;
-		} catch {}
-		return {
-			provider,
-			id: model,
-			name: name$1,
-			inputModalities: ["text", "image"],
-			context: { contextWindow: DEFAULT_CONTEXT_WINDOW },
-			defaultMaxTokens: DEFAULT_MAX_TOKENS
-		};
-	}
-	async *stream(options) {
-		const consumer = new AbortController();
-		const upstream = options.signal === void 0 ? consumer.signal : AbortSignal.any([options.signal, consumer.signal]);
-		let run;
-		let abortRun;
-		let bridgeStored = false;
-		const sessionKey = options.sessionId === void 0 ? void 0 : String(options.sessionId);
-		this.#evictStaleSessions();
-		const prior = sessionKey === void 0 ? void 0 : this.#sessions.get(sessionKey);
-		const persisted = {
-			checkpoint: prior?.checkpoint === void 0 ? void 0 : Uint8Array.from(prior.checkpoint),
-			blobs: new Map(prior?.blobs ?? [])
-		};
-		const compactionId = compactionIdOf(options);
-		const compacted = compactionId !== void 0 && compactionId !== prior?.compactionId;
-		if (compacted) {
-			persisted.checkpoint = void 0;
-			persisted.blobs.clear();
-		}
-		const replayHistoryEachStep = readConfigField(this.settings().replayHistoryEachStep) === true;
-		if (replayHistoryEachStep) {
-			persisted.checkpoint = void 0;
-			persisted.blobs.clear();
-		}
-		persisted.compactionId = compactionId ?? prior?.compactionId;
-		try {
-			if (options.stop !== void 0) throw new LlmError("cursor-subscription does not support GenerateOptions.stop", "UNSUPPORTED_OPTION");
-			const requestSettings = resolveCursorSettings(this.settings());
-			const mcpTools = (options.tools ?? []).map((tool) => encodeMcpToolDefinition({
-				name: tool.name,
-				description: tool.description,
-				inputSchema: encodeValue(tool.parameters ?? {})
-			}));
-			const toolResults = collectToolResults(options);
-			const liveBridge = prior?.bridge;
-			const canResume = !replayHistoryEachStep && !compacted && liveBridge !== void 0 && !liveBridge.run.finished && !liveBridge.run.stream?.destroyed && toolResults.length > 0;
-			let toolRoundCount = canResume ? liveBridge.toolRoundCount ?? 0 : 0;
-			let blobStore;
-			if (canResume) {
-				run = liveBridge.run;
-				run.frames?.resume?.();
-				blobStore = persisted.blobs;
-				abortRun = () => run.abort(/* @__PURE__ */ new Error("Cursor request aborted by caller"));
-				upstream.addEventListener("abort", abortRun, { once: true });
-				if (upstream.aborted) abortRun();
-				for (const pending of liveBridge.pendingExecs) {
-					const result = toolResults.find((entry) => entry.toolCallId === pending.toolCallId);
-					if (result?.sandboxDenied === true) yield cursorProgress("the sandbox refused a tool call; told the model how to ask for approval");
-					const payload = result === void 0 ? encodeMcpError("Tool result not provided") : encodeMcpResult(result);
-					if (!run.writeMessage(encodeExecClientMessageEnvelope(encodeExecClientMessage(pending.id, pending.execId, 11, payload)))) throw new Error("Cursor tool continuation bridge closed before accepting the result");
-				}
-			} else {
-				if (liveBridge !== void 0) {
-					liveBridge.run.close();
-					persisted.checkpoint = void 0;
-					persisted.blobs.clear();
-				}
-				const access = await this.auth.accessToken({ signal: upstream });
-				const images = await prepareCursorImages(options, this.resolveAttachments?.());
-				const built = buildRunPayload(options, options.model, persisted, images);
-				blobStore = built.blobStore;
-				let retriesUsed = 0;
-				for (;;) {
-					run = this.createAgentRun(access);
-					await run.start();
-					abortRun = () => run.abort(/* @__PURE__ */ new Error("Cursor request aborted by caller"));
-					upstream.addEventListener("abort", abortRun, { once: true });
-					if (upstream.aborted) abortRun();
-					if (!run.writeMessage(built.payload)) throw new Error("Cursor agent bridge closed before accepting the request");
-					const status = await run.waitForResponse(this.idleTimeoutMs);
-					if (isSuccessfulAgentResponse(status, run.responseContentType)) {
-						run.startHeartbeat();
-						break;
-					}
-					upstream.removeEventListener("abort", abortRun);
-					abortRun = void 0;
-					run.close();
-					if (status === 200) throw new LlmError(`Cursor agent returned an unexpected content type: ${run.responseContentType ?? "missing"}`, "CURSOR_PROTOCOL");
-					if (!shouldRetryHttpStatus(status, retriesUsed, requestSettings)) {
-						const message = `Cursor agent returned HTTP ${status}`;
-						throw new LlmError(message, classifyCursorError(message));
-					}
-					retriesUsed++;
-					await this.sleep(requestSettings.retryIntervalMs, upstream);
-				}
-			}
-			const started = this.now();
-			let lastActivity = started;
-			let lastProgress = started;
-			let emittedToolCall = false;
-			let toolCallBuffer = void 0;
-			let textOutput = "";
-			let outputTokens = 0;
-			let streamClosed = false;
-			let terminalErrorEmitted = false;
-			let toolCallPending = false;
-			let toolRoundCounted = false;
-			let unknownExecWarned = false;
-			const pendingExecs = [];
-			let toolCallSettle;
-			/**
-			* Stop blocking for more frames without ending the reader, so the same
-			* Run can be continued by the next DSH step.
-			*/
-			const stopReading = () => {
-				if (typeof run.frames?.pause === "function") run.frames.pause();
-				else if (typeof run.frames?.finish === "function") run.frames.finish();
-			};
-			/**
-			* Cap how long the loop waits for the frame that closes a tool-call
-			* burst. Cursor usually follows mcpArgs with blob writes and a
-			* checkpoint, but it may instead send the checkpoint *before* the burst
-			* and then nothing at all; waiting for a second checkpoint in that case
-			* hung the step until the progress watchdog aborted it.
-			*/
-			const armToolCallSettle = () => {
-				toolCallSettle ??= setTimeout(stopReading, this.toolCallSettleMs);
-				toolCallSettle.unref?.();
-			};
-			const frameTrace = [];
-			const traceFrame = (label) => {
-				const last = frameTrace.at(-1);
-				if (label === "heartbeat" && last?.label === "heartbeat") {
-					last.count++;
-					last.at = this.now();
-					return;
-				}
-				frameTrace.push({
-					label,
-					at: this.now(),
-					count: 1
-				});
-				if (frameTrace.length > 120) frameTrace.shift();
-			};
-			const stallReport = (message) => {
-				const lines = [
-					`=== ${(/* @__PURE__ */ new Date()).toISOString()} ${message} ===`,
-					`session=${sessionKey ?? "-"} model=${options.model ?? "-"} textChars=${textOutput.length} toolCallPending=${toolCallPending} toolRounds=${toolRoundCount} checkpoint=${persisted.checkpoint?.length ?? 0}B blobs=${blobStore?.size ?? 0}`,
-					`lastFrame=${Math.round((this.now() - lastActivity) / 1e3)}s ago lastContent=${Math.round((this.now() - lastProgress) / 1e3)}s ago`,
-					...frameTrace.map((entry) => `  ${new Date(entry.at).toISOString()} ${entry.label}${entry.count > 1 ? ` x${entry.count}` : ""}`),
-					""
-				];
-				try {
-					appendFileSync(this.hangTracePath, lines.join("\n"));
-				} catch {}
-				this.logger?.warn?.(`cursor-subscription: ${message}; trace in ${this.hangTracePath}`);
-			};
-			const handleStall = (message) => {
-				stallReport(message);
-				if ((textOutput.length > 0 || toolCallPending) && typeof run.frames?.pause === "function") {
-					stopReading();
-					return;
-				}
-				run.abort(new Error(message));
-			};
-			const idleCheck = setInterval(() => {
-				const now = this.now();
-				if (now - lastActivity > this.idleTimeoutMs) handleStall("Cursor stream idle timeout");
-				else if (now - lastProgress > this.progressTimeoutMs) handleStall(`Cursor stream progress timeout: no content for ${this.progressTimeoutMs}ms`);
-			}, this.idleCheckIntervalMs);
-			idleCheck.unref?.();
-			try {
-				for (;;) {
-					const frame = await run.frames.next();
-					if (frame === void 0) break;
-					lastActivity = this.now();
-					traceFrame(describeServerFrame(frame));
-					if ((frame.flags & CONNECT_END_STREAM_FLAG) !== 0) {
-						const end = parseEndStream(frame.payload);
-						if (end !== void 0) {
-							terminalErrorEmitted = true;
-							yield {
-								type: "finish",
-								reason: {
-									kind: "error",
-									failure: {
-										message: end.message,
-										code: classifyCursorError(`${end.code} ${end.debugCode ?? ""} ${end.message}`)
-									}
-								}
-							};
-							streamClosed = true;
-							break;
-						}
-						break;
-					}
-					const message = decodeAgentServerMessage(frame.payload);
-					if (!(message.case === "interactionUpdate" && message.value?.type === "heartbeat")) lastProgress = this.now();
-					if (message.case === "conversationCheckpointUpdate") {
-						persisted.checkpoint = Uint8Array.from(message.value);
-						if (toolCallPending) {
-							streamClosed = true;
-							break;
-						}
-					} else if (message.case === "interactionUpdate") {
-						const update = message.value;
-						if (update.type === "textDelta") {
-							if (update.text.length > 0) {
-								textOutput += update.text;
-								yield {
-									type: "text-delta",
-									index: TEXT_BLOCK_INDEX,
-									text: update.text
-								};
-							}
-						} else if (update.type === "thinkingDelta") {
-							if (update.text.length > 0) yield {
-								type: "reasoning-delta",
-								index: REASONING_BLOCK_INDEX,
-								text: update.text
-							};
-						} else if (update.type === "thinkingCompleted") {
-							if (update.durationMs > 0) yield cursorProgress(`thinking finished after ${(update.durationMs / 1e3).toFixed(1)}s`);
-						} else if (update.type === "tokenDelta") {
-							if (Number.isFinite(update.tokens) && update.tokens > 0) outputTokens += update.tokens;
-						} else if (update.type === "partialToolCall") {
-							if (toolCallBuffer === void 0 || toolCallBuffer.id !== update.callId) toolCallBuffer = {
-								id: update.callId,
-								name: "",
-								arguments: ""
-							};
-							if (update.argsTextDelta.length > 0) toolCallBuffer.arguments += update.argsTextDelta;
-						} else if (update.type === "toolCallStarted" || update.type === "toolCallCompleted" || update.type === "toolCallDelta") emittedToolCall = true;
-						else if (update.type === "turnEnded") {
-							if (!toolCallPending) break;
-						}
-					} else if (message.case === "kvServerMessage") {
-						const kv = message.value;
-						if (kv.case === "getBlobArgs") {
-							const key = Buffer.from(kv.blobId).toString("hex");
-							const blob = blobStore.get(key);
-							run.writeMessage(encodeKvClientMessage(encodeGetBlobResult(kv.id, blob)));
-						} else if (kv.case === "setBlobArgs") {
-							if (kv.blobId !== void 0 && kv.blobData !== void 0) {
-								const key = Buffer.from(kv.blobId).toString("hex");
-								const data = Uint8Array.from(kv.blobData);
-								blobStore.set(key, data);
-								persisted.blobs.set(key, data);
-							}
-							run.writeMessage(encodeKvClientMessage(encodeSetBlobResult(kv.id)));
-						}
-					} else if (message.case === "execServerMessage") {
-						const exec = message.value;
-						if (exec.case === "requestContextArgs") {
-							run.writeMessage(encodeExecClientMessageEnvelope(encodeExecClientMessage(exec.id, exec.execId, 10, encodeRequestContextResult(mcpTools))));
-							yield cursorProgress(`loaded the DSH tool schemas (${mcpTools.length} tools)`);
-						} else if (exec.case === "mcpArgs") {
-							if (!toolRoundCounted) {
-								toolRoundCount++;
-								toolRoundCounted = true;
-							}
-							if (toolRoundCount > requestSettings.maxToolRounds) throw new LlmError(`Cursor tool-call safety limit reached after ${requestSettings.maxToolRounds} rounds. The run was stopped to prevent an infinite loop; send a new message to continue if needed.`, "TOOL_LIMIT");
-							const mcp = exec.args ?? {};
-							const args = {};
-							for (const [key, value] of Object.entries(mcp.args ?? {})) try {
-								args[key] = decodeValue(value);
-							} catch {
-								args[key] = null;
-							}
-							const candidateName = mcp.toolName || mcp.name;
-							const tool = resolveTextTool(candidateName, options.tools ?? []);
-							if (tool === void 0) {
-								run.writeMessage(encodeExecClientMessageEnvelope(encodeExecClientMessage(exec.id, exec.execId, 11, encodeMcpError(`Unknown or unsupported MCP tool: ${candidateName || "(empty)"}`))));
-								continue;
-							}
-							emittedToolCall = true;
-							const id = mcp.toolCallId || exec.execId || crypto.randomUUID();
-							const name$1 = tool.name;
-							const normalizedArgs = normalizeTextToolArguments(tool, args);
-							const argumentsJson = JSON.stringify(normalizedArgs);
-							const blockIndex = TOOL_BLOCK_INDEX + pendingExecs.length;
-							yield {
-								type: "block-start",
-								index: blockIndex,
-								blockType: "tool-call"
-							};
-							yield {
-								type: "tool-call-delta",
-								index: blockIndex,
-								id: ToolCallId(id),
-								name: name$1,
-								argumentsDelta: argumentsJson
-							};
-							yield {
-								type: "block-end",
-								index: blockIndex,
-								block: {
-									type: "tool-call",
-									id: ToolCallId(id),
-									name: name$1,
-									arguments: argumentsJson
-								}
-							};
-							pendingExecs.push({
-								id: exec.id,
-								execId: exec.execId,
-								toolCallId: id
-							});
-							toolCallPending = true;
-							yield cursorProgress(`calling the DSH tool ${name$1}`);
-							streamClosed = true;
-							armToolCallSettle();
-						} else {
-							const reply = rejectionFor(exec);
-							if (reply !== void 0) {
-								if (exec.case === "unknown" && !unknownExecWarned) {
-									unknownExecWarned = true;
-									this.logger?.warn?.(`cursor-subscription: Cursor requested an exec this build does not know (field ${exec.field}); rejected it so the run can continue with MCP tools`);
-								}
-								run.writeMessage(encodeExecClientMessageEnvelope(encodeExecClientMessage(exec.id, exec.execId, reply.field, reply.payload)));
-								yield cursorProgress(`native ${nativeToolName(exec)} call declined; using the DSH tools instead`);
-							} else if (exec.case === "unknown") this.logger?.warn?.("cursor-subscription: Cursor requested an exec with no addressable field; the run may stall");
-						}
-					}
-				}
-			} finally {
-				clearInterval(idleCheck);
-				clearTimeout(toolCallSettle);
-			}
-			if (!terminalErrorEmitted && !toolCallPending) {
-				const textToolCalls = parseTextToolCalls(textOutput, options.tools ?? []);
-				for (let index = 0; index < textToolCalls.length; index++) {
-					const call = textToolCalls[index];
-					const blockIndex = TOOL_BLOCK_INDEX + index;
-					yield {
-						type: "block-start",
-						index: blockIndex,
-						blockType: "tool-call"
-					};
-					yield {
-						type: "tool-call-delta",
-						index: blockIndex,
-						id: ToolCallId(call.id),
-						name: call.name,
-						argumentsDelta: call.arguments
-					};
-					yield {
-						type: "block-end",
-						index: blockIndex,
-						block: {
-							type: "tool-call",
-							id: ToolCallId(call.id),
-							name: call.name,
-							arguments: call.arguments
-						}
-					};
-				}
-				if (textToolCalls.length > 0) {
-					emittedToolCall = true;
-					streamClosed = true;
-				}
-			}
-			const liveToolBridge = toolCallPending && pendingExecs.length > 0 && !run.finished;
-			if (sessionKey !== void 0 && (persisted.checkpoint !== void 0 || liveToolBridge)) {
-				persisted.lastAccessMs = this.now();
-				if (liveToolBridge) {
-					persisted.bridge = {
-						run,
-						pendingExecs,
-						toolRoundCount
-					};
-					bridgeStored = true;
-				}
-				this.#sessions.delete(sessionKey);
-				this.#sessions.set(sessionKey, persisted);
-				while (this.#sessions.size > 100) {
-					const oldest = this.#sessions.keys().next().value;
-					if (oldest === void 0) break;
-					this.#sessions.get(oldest)?.bridge?.run.close();
-					this.#sessions.delete(oldest);
-				}
-			}
-			if (!terminalErrorEmitted) {
-				yield {
-					type: "usage",
-					usage: {
-						inputTokens: decodeCheckpointUsedTokens(persisted.checkpoint) ?? 0,
-						outputTokens
-					}
-				};
-				if (streamClosed && emittedToolCall) yield {
-					type: "finish",
-					reason: { kind: "tool-calls" }
-				};
-				else if (run.trailers && Number(run.trailers["grpc-status"]) > 0) {
-					const message = run.trailers["grpc-message"] ?? "Cursor agent run failed";
-					yield {
-						type: "finish",
-						reason: {
-							kind: "error",
-							failure: {
-								message,
-								code: classifyCursorError(message)
-							}
-						}
-					};
-				} else yield {
-					type: "finish",
-					reason: { kind: "stop" }
-				};
-			}
-		} catch (error) {
-			if (upstream.aborted) yield {
-				type: "finish",
-				reason: {
-					kind: "aborted",
-					failure: {
-						message: "Cursor request aborted by caller",
-						code: "ABORTED"
-					}
-				}
-			};
-			else if (error instanceof LlmError) yield {
-				type: "finish",
-				reason: {
-					kind: "error",
-					failure: {
-						message: error.message,
-						code: error.code
-					}
-				}
-			};
-			else {
-				const message = error instanceof Error ? error.message : String(error);
-				yield {
-					type: "finish",
-					reason: {
-						kind: "error",
-						failure: {
-							message,
-							code: classifyCursorError(message)
-						}
-					}
-				};
+		case "ollamaSettings":
+			if (!ollama) throw new BadRequest("Ollama settings are unavailable");
+			return ok(await ollama.settings());
+		case "ollamaSetSettings":
+			if (!ollama) throw new BadRequest("Ollama settings are unavailable");
+			if (payload === null || typeof payload !== "object") throw new BadRequest("payload must be an object");
+			await ollama.setSettings(payload.settings);
+			return ok({ ok: true });
+		case "ollamaModels": {
+			if (!ollama) throw new BadRequest("Ollama settings are unavailable");
+			const apiKey = readOptionalString(payload, "apiKey");
+			const rawBaseURL = readOptionalString(payload, "baseURL");
+			let baseURL;
+			if (rawBaseURL !== void 0) try {
+				baseURL = validateOllamaBaseURL(rawBaseURL);
+			} catch (error) {
+				throw new BadRequest(error instanceof Error ? error.message : String(error));
 			}
-		} finally {
-			if (abortRun !== void 0) upstream.removeEventListener("abort", abortRun);
-			consumer.abort("cursor stream consumer stopped");
-			if (!bridgeStored) run?.close();
+			return ok(await ollama.models({
+				...apiKey === void 0 ? {} : { apiKey },
+				...baseURL === void 0 ? {} : { baseURL }
+			}, signal));
 		}
-	}
-};
-/**
-* Parse a Connect end-stream frame into a structured error. Cursor's agent
-* errors carry a `debug` payload with a stable code and human-readable
-* `title`/`detail`; extracting those gives the user the real reason instead of
-* a bare `resource_exhausted`.
-* @returns {undefined | {code: string, debugCode?: string, message: string}}
-*/
-function parseEndStream(payload) {
-	try {
-		const error = JSON.parse(new TextDecoder().decode(payload))?.error;
-		if (!error) return void 0;
-		const code = typeof error.code === "string" ? error.code : "unknown";
-		let debugCode;
-		let title;
-		let detail;
-		if (Array.isArray(error.details)) for (const entry of error.details) {
-			if (!record$1(entry) || !record$1(entry.debug)) continue;
-			if (typeof entry.debug.error === "string") debugCode = entry.debug.error;
-			const details = record$1(entry.debug.details) ? entry.debug.details : void 0;
-			if (details !== void 0) {
-				if (typeof details.title === "string") title = details.title;
-				if (typeof details.detail === "string") detail = details.detail;
+		case "prepareReset":
+			if (!controller.prepareReset) throw new BadRequest("Reset redemption unavailable");
+			return ok(await controller.prepareReset(readString(payload, "account"), signal));
+		case "consumeReset":
+			if (!controller.consumeReset) throw new BadRequest("Reset redemption unavailable");
+			await controller.consumeReset(readString(payload, "account"), readString(payload, "ticket"), signal);
+			return ok({ ok: true });
+		case "image": return ok(await controller.readImage(readImageRef(payload), signal));
+		case "video": return ok(await controller.readVideo(readVideoName(payload), signal));
+		case "speed": return ok(await speed.speed(readSessionId(payload), payload.model === void 0 ? void 0 : readString(payload, "model")));
+		case "setSpeed":
+			await speed.setSpeed(readSessionId(payload), readSpeedTier(payload));
+			return ok({ ok: true });
+		case "modelDefaults":
+			if (modelDefaults === void 0) throw new BadRequest("model defaults are unavailable");
+			return ok(await modelDefaults.catalog(readForce(payload)));
+		case "setModelDefault":
+			if (modelDefaults === void 0) throw new BadRequest("model defaults are unavailable");
+			{
+				const input = readModelDefaultInput(payload);
+				await modelDefaults.set(input.provider, input.model, input.effort);
 			}
-		}
-		const fallback = typeof error.message === "string" && error.message.length > 0 ? error.message : void 0;
-		const message = [title, detail].filter((part) => typeof part === "string" && part.length > 0).join(" ") || (debugCode !== void 0 ? `Cursor: ${debugCode}` : void 0) || (fallback !== void 0 ? `Cursor agent error ${code}: ${fallback}` : `Cursor agent error ${code}`);
-		return {
-			code,
-			debugCode,
-			message
-		};
-	} catch {
-		return;
-	}
-}
-function classifyCursorError(message) {
-	if (/\b(?:401|403)\b|unauth|invalid.*(?:key|token|credential)/i.test(message)) return "AUTH";
-	if (/rate.?limit|\b429\b|quota|resource_exhausted|spend.?limit|usage limit|exceeded/i.test(message)) return "RATE_LIMIT";
-	if (/\b400\b|invalid.?request/i.test(message)) return "INVALID_REQUEST";
-	if (/\b408\b|timeout|timed out/i.test(message)) return "TIMEOUT";
-	if (/\b5\d\d\b|internal/i.test(message)) return "SERVER";
-	if (/\b(?:network|connection|socket|fetch|ECONN|http2)/i.test(message)) return "TRANSPORT";
-	return "CURSOR_ERROR";
-}
-/**
-* Build the exec-client reply for a native Cursor tool we reject.
-*
-* `ExecClientMessage` numbers its result variants exactly like
-* `ExecServerMessage` numbers its exec variants, which is what lets an exec
-* this build cannot name still be answered: reply on the exec's own field.
-* Every unanswered exec leaves the server waiting for its result, and that
-* wait is what the user sees as a turn that ends right after the model says
-* what it is about to do — the progress watchdog aborts the step and only the
-* preamble text survives.
-*/
-function rejectionFor(exec) {
-	switch (exec.case) {
-		case "readArgs": return {
-			field: 7,
-			payload: encodeReadRejected(exec.path, TOOL_REJECT_REASON)
-		};
-		case "lsArgs": return {
-			field: 8,
-			payload: encodeLsRejected(exec.path, TOOL_REJECT_REASON)
-		};
-		case "grepArgs": return {
-			field: 5,
-			payload: encodeGrepError(TOOL_REJECT_REASON)
-		};
-		case "writeArgs": return {
-			field: 3,
-			payload: encodeWriteRejected(exec.path, TOOL_REJECT_REASON)
-		};
-		case "deleteArgs": return {
-			field: 4,
-			payload: encodeDeleteRejected(exec.path, TOOL_REJECT_REASON)
-		};
-		case "shellArgs": return {
-			field: 2,
-			payload: encodeShellRejectedResult(void 0, void 0, TOOL_REJECT_REASON)
-		};
-		case "shellStreamArgs": return {
-			field: 14,
-			payload: encodeShellStreamRejected(void 0, void 0, TOOL_REJECT_REASON)
-		};
-		case "backgroundShellSpawnArgs": return {
-			field: 16,
-			payload: encodeBackgroundShellRejectedResult(void 0, void 0, TOOL_REJECT_REASON)
-		};
-		case "fetchArgs": return {
-			field: 20,
-			payload: encodeFetchError(exec.url, TOOL_REJECT_REASON)
-		};
-		case "writeShellStdinArgs": return {
-			field: 23,
-			payload: encodeWriteShellStdinError(TOOL_REJECT_REASON)
-		};
-		case "diagnosticsArgs": return {
-			field: 9,
-			payload: encodeDiagnosticsResult()
-		};
-		case "recordScreenArgs": return {
-			field: 21,
-			payload: encodeMcpError("Screen recording is not available")
-		};
-		case "computerUseArgs": return {
-			field: 22,
-			payload: encodeMcpError("Computer use is not available")
-		};
-		case "listMcpResourcesExecArgs": return {
-			field: 17,
-			payload: encodeMcpError("MCP resources are not available")
-		};
-		case "readMcpResourceExecArgs": return {
-			field: 18,
-			payload: encodeMcpError("MCP resources are not available")
-		};
-		case "unknown":
-			if (typeof exec.field !== "number") return void 0;
-			return {
-				field: exec.field,
-				payload: encodeMcpError(TOOL_REJECT_REASON)
-			};
-		default: return;
+			return ok({ ok: true });
+		default: throw new BadRequest(`unknown /subscriptions-auth endpoint "${endpoint}"`);
 	}
 }
-
-//#endregion
-//#region src/providers/cursor-adapter.ts
-/**
-* The imported Cursor transport still reads tool results as user-role content
-* blocks. DSH 0.1.7 carries them as first-class role=tool messages instead.
-*/
-function projectCursorMessages(messages) {
-	return messages.map((message) => message.role === "tool" ? {
-		...message,
-		role: "user",
-		content: [{
-			type: "tool-result",
-			toolCallId: message.toolCallId,
-			isError: message.isError,
-			content: message.content
-		}]
-	} : message);
-}
 /**
-* Vendor `LlmError` codes whose whole message is a local literal (no response
-* header, trailer, body or end-stream text). Provider-derived failures can only
-* carry a `classifyCursorError` code or `CURSOR_PROTOCOL`, never these, so the
-* code is a sound discriminator for them.
+* Register the `/subscriptions-auth` RPC channel when a host connection exists.
+* @param ctx - the plugin context (headless profiles have no `connection`).
+* @param controller - the auth operations backing the endpoints.
+* @param speed - the per-session speed-tier state backing the Speed toggle.
+* @param modelDefaults - optional per-model default-effort state backing `modelDefaults`/`setModelDefault`.
+* @param providerSettings - optional OAuth provider/account preferences.
+* @param externalUsage - optional credential-backed quota readers.
+* @param ollama - optional Ollama Cloud catalog and connection settings.
 */
-const LOCAL_VENDOR_CODES = new Set([
-	"UNSUPPORTED_OPTION",
-	"UNSUPPORTED_CONTENT",
-	"TOOL_LIMIT"
-]);
-/**
-* Plain-error messages the vendor throws as fixed literals (`vendor/cursor/
-* index.js`: `waitForResponse`, the request write, the tool-continuation write,
-* the stream `close` handler, the frame reader, the stall watchdog and the
-* settings validation). None
-* interpolates response text, so they are matched by exact message, the same way
-* the auth messages are. A provider that echoed one of these sentences would
-* only make the user read a local literal.
-*/
-const LOCAL_VENDOR_MESSAGES = new Set([
-	"Cursor HTTP response timeout",
-	"Cursor HTTP stream closed before response",
-	"Cursor agent bridge closed before accepting the request",
-	"Cursor tool continuation bridge closed before accepting the result",
-	"Cursor sent an unreadable compressed frame",
-	"Cursor stream idle timeout",
-	"cursor-subscription: maxToolRounds must be an integer between 1 and 1000",
-	"cursor-subscription: retryCount must be an integer between 0 and 10",
-	"cursor-subscription: retryIntervalMs must be an integer between 0 and 300000",
-	"cursor-subscription: retryHttpStatusCodes must contain only HTTP status integers from 400 to 599",
-	"cursor-subscription: retryHttpStatusCodes must not contain duplicates",
-	"cursor-subscription: replayHistoryEachStep must be a boolean"
-]);
-/**
-* The same, for the two literals that embed a number the vendor computes: the
-* response status (`Number(headers[':status'])`, so digits or `NaN`) and the
-* configured progress timeout.
-*/
-const LOCAL_VENDOR_PATTERNS = [/^Cursor agent returned HTTP \d{3}$/, /^Cursor stream progress timeout: no content for \d+ms$/];
-/**
-* Operating-system network error codes. An `Error` carrying one of these on
-* itself, or on its `cause` (Node wraps a refused connection in
-* `ERR_HTTP2_STREAM_CANCEL`), was produced by the local socket layer, so its
-* message is local: `connect ECONNREFUSED 127.0.0.1:443`, `getaddrinfo ENOTFOUND
-* host`. This is a property of the thrown object, which a provider cannot
-* forge. It is deliberately not a test on the vendor's `TRANSPORT` code: the
-* vendor derives that code from message text, so a provider's end-stream
-* message or `grpc-message` containing "connection" or "socket" gets it too.
-* Transport failures with no such code (TLS and certificate errors, HTTP/2
-* protocol errors) are not recognised and stay replaced.
-*/
-const LOCAL_SYSTEM_ERRNO = new Set([
-	"ECONNREFUSED",
-	"ECONNRESET",
-	"ECONNABORTED",
-	"ENOTFOUND",
-	"EAI_AGAIN",
-	"ETIMEDOUT",
-	"ENETUNREACH",
-	"ENETDOWN",
-	"EHOSTUNREACH",
-	"EHOSTDOWN",
-	"EPIPE"
-]);
-function errorCode(value) {
-	return typeof value === "object" && value !== null ? value.code : void 0;
-}
-function isLocalSystemError(error) {
-	if (!(error instanceof Error)) return false;
-	const own = errorCode(error);
-	const cause = errorCode(error.cause);
-	return typeof own === "string" && LOCAL_SYSTEM_ERRNO.has(own) || typeof cause === "string" && LOCAL_SYSTEM_ERRNO.has(cause);
-}
-function messageOf(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-/** Bound on remembered local failure messages; they are short and few. */
-const MAX_LOCAL_MESSAGES = 64;
-/**
-* Remembers the messages of failures raised by this machine rather than read
-* from the provider: whatever the auth service threw, whatever the host
-* attachment store threw while reading an image, and a socket-layer network
-* error seen on the run. The vendor stream turns each of these into
-* `finish/error` carrying exactly `error.message`, so a failure whose message
-* equals a remembered one originated locally and may keep its text. The match
-* is by exact text: a provider that echoed a remembered message would only
-* display a local literal.
-*/
-var LocalFailureMessages = class {
-	messages = /* @__PURE__ */ new Set();
-	/** Wrap `auth` so its failures are remembered and rethrown unchanged. */
-	wrap(auth) {
-		return { accessToken: async (options) => {
+function registerAuthRpc(ctx, controller, speed, modelDefaults = void 0, providerSettings = void 0, externalUsage = void 0, ollama = void 0) {
+	ctx.inject(["connection"], (ctx$1) => {
+		const connection = ctx$1.get("connection");
+		const handler = async (endpoint, payload, signal) => {
 			try {
-				return await auth.accessToken(options);
+				return await dispatch(controller, speed, modelDefaults, endpoint, payload, signal, providerSettings, externalUsage, ollama);
 			} catch (error) {
-				this.remember(messageOf(error));
-				throw error;
+				return failure(error);
 			}
-		} };
-	}
-	/**
-	* Wrap the host attachment store the vendor reads images through, so a read
-	* failure keeps its own message. The store is a local service; its errors
-	* carry no provider text. Anything that is not a store passes through.
-	*/
-	wrapAttachments(resolve$2) {
-		return () => {
-			const store = resolve$2();
-			const readImage = store?.readImage;
-			if (typeof readImage !== "function") return store;
-			return Object.create(store, { readImage: { value: async (...args) => {
-				try {
-					return await readImage.apply(store, args);
-				} catch (error) {
-					this.remember(messageOf(error));
-					throw error;
-				}
-			} } });
-		};
-	}
-	/**
-	* Observe a vendor run's two failure channels, the response promise and the
-	* frame reader, and remember the message of an error the socket layer raised.
-	* The run's behavior is unchanged: the same error is rethrown.
-	*/
-	observeRun(run) {
-		if (typeof run !== "object" || run === null) return run;
-		const target = run;
-		const observe = (error) => {
-			if (isLocalSystemError(error)) this.remember(messageOf(error));
-			throw error;
 		};
-		const wait = target.waitForResponse;
-		if (typeof wait === "function") target.waitForResponse = (...args) => Promise.resolve(wait.apply(target, args)).catch(observe);
-		const frames = target.frames;
-		const next = frames?.next;
-		if (frames !== void 0 && typeof next === "function") frames.next = (...args) => Promise.resolve(next.apply(frames, args)).catch(observe);
-		return run;
-	}
-	has(message) {
-		return this.messages.has(message);
-	}
-	remember(message) {
-		if (message === "") return;
-		this.messages.delete(message);
-		this.messages.add(message);
-		if (this.messages.size > MAX_LOCAL_MESSAGES) {
-			const oldest = this.messages.values().next().value;
-			if (oldest !== void 0) this.messages.delete(oldest);
-		}
-	}
-};
-function isVendorLocalMessage(message) {
-	return LOCAL_VENDOR_MESSAGES.has(message) || LOCAL_VENDOR_PATTERNS.some((pattern) => pattern.test(message));
+		const register = connection.fetch.register;
+		for (const endpoint of SUBSCRIPTIONS_AUTH_ENDPOINTS) ctx$1.effect(() => register(fetchRouteFor(endpoint, handler)), `dsh-subscriptions: /api/${SUBSCRIPTIONS_AUTH_PREFIX}${endpoint} route`);
+	});
 }
-/**
-* Cursor adapter for the DSH host.
-*
-* Failure text contract: `finish/error` messages that originate from the
-* vendor stream and can quote provider-controlled text (the response content
-* type, trailers, end-stream errors, a frame-reader or other error whose message
-* is not one of the literals below, and a transport-coded failure that is not a
-* socket-layer error) are replaced by `<code> [provider response text omitted]`. Failures that are
-* wholly local keep their own message and code:
-*
-* - anything the auth service threw (not signed in, sign-in expired, token
-*   refresh status), and a host attachment read failure;
-* - the vendor's own request validation, by code (`UNSUPPORTED_OPTION`,
-*   `UNSUPPORTED_CONTENT`, `TOOL_LIMIT`);
-* - the vendor's fixed-literal plain errors, by exact message: the HTTP status
-*   (`Cursor agent returned HTTP 429`), the response, idle and progress
-*   timeouts, a closed bridge or stream, an unreadable compressed frame, and
-*   an invalid Cursor setting;
-* - a network error raised by the operating system (`ECONNREFUSED`,
-*   `ENOTFOUND`, ...), recognised from the thrown error's own code, not from
-*   the vendor's classification.
-*
-* Not a provider-origin class: a network error such as `ECONNREFUSED` is a
-* local failure (no network, daemon down, DNS), and is kept. What is still
-* replaced although it is probably local is a transport failure with no
-* socket-layer errno: a TLS or certificate failure and an HTTP/2 protocol
-* error. The vendor's `TRANSPORT` code cannot decide those, because
-* `classifyCursorError` derives it from message text (`network`, `connection`,
-* `socket`, `fetch`, `ECONN`, `http2`) and a provider's end-stream message or
-* `grpc-message` can contain any of them; so the code is never trusted alone.
-* Telling these apart would need a check on the thrown error object, as the
-* errno check above does, extended to the TLS and HTTP/2 error codes. That is
-* not done here and is not verified.
-*/
-var CursorCompatAdapter = class extends CursorAdapter {
-	visibleModels;
-	localFailures;
-	constructor(options) {
-		const localFailures = new LocalFailureMessages();
-		super({
-			...options,
-			auth: localFailures.wrap(options.auth),
-			...options.resolveAttachments === void 0 ? {} : { resolveAttachments: localFailures.wrapAttachments(options.resolveAttachments) }
-		});
-		this.localFailures = localFailures;
-		this.visibleModels = options.visibleModels;
-		const vendor = this;
-		const createRun = vendor.createAgentRun;
-		vendor.createAgentRun = (access) => localFailures.observeRun(createRun(access));
-	}
-	async listModels(provider) {
-		const models = await super.listModels(provider);
-		const visible = this.visibleModels?.();
-		return visible === void 0 ? models : models.filter((model) => visible.includes(model.id));
-	}
-	async *stream(options) {
-		for await (const chunk of super.stream({
-			...options,
-			model: options.model === "composer-2" ? "composer-2.5" : options.model,
-			messages: projectCursorMessages(options.messages)
-		})) if (chunk.type === "finish" && chunk.reason.kind === "error" && !LOCAL_VENDOR_CODES.has(chunk.reason.failure.code) && !isVendorLocalMessage(chunk.reason.failure.message) && !this.localFailures.has(chunk.reason.failure.message)) yield {
-			...chunk,
-			reason: {
-				...chunk.reason,
-				failure: {
-					...chunk.reason.failure,
-					message: `${chunk.reason.failure.code} [provider response text omitted]`
-				}
-			}
-		};
-		else yield chunk;
-	}
-};
 
 //#endregion
 //#region src/providers/ollama-web.ts
@@ -7032,13 +4056,13 @@ var OllamaWebSearchProvider = class {
 		if (!Array.isArray(results)) throw new WebError("ollama web search returned no results array", "OLLAMA_WEB_BAD_REPLY");
 		return {
 			sources: results.flatMap((entry) => {
-				const record$4 = recordOf(entry);
-				const url = record$4?.["url"];
+				const record$2 = recordOf(entry);
+				const url = record$2?.["url"];
 				if (typeof url !== "string" || url.length === 0) return [];
 				return [{
 					url,
-					...typeof record$4?.["title"] === "string" ? { title: record$4?.["title"] } : {},
-					...typeof record$4?.["content"] === "string" ? { snippet: record$4?.["content"] } : {}
+					...typeof record$2?.["title"] === "string" ? { title: record$2?.["title"] } : {},
+					...typeof record$2?.["content"] === "string" ? { snippet: record$2?.["content"] } : {}
 				}];
 			}),
 			truncated: false
@@ -7076,51 +4100,6 @@ var OllamaWebFetchProvider = class {
 	}
 };
 
-//#endregion
-//#region src/providers/cursor-model-settings.ts
-function validateCursorModelSettings(input) {
-	if (input === null || typeof input !== "object" || Array.isArray(input)) throw new Error("Cursor model settings must be an object");
-	const models = input.visibleModels;
-	if (models === void 0) return {};
-	if (!Array.isArray(models) || models.some((id) => typeof id !== "string" || !id.trim())) throw new Error("visibleModels must be an array of model ids");
-	return { visibleModels: [...new Set(models)] };
-}
-/** Durable visibility preference; account tokens remain in DSH credentials. */
-var CursorModelSettingsStore = class {
-	current = {};
-	writes = Promise.resolve();
-	constructor(path = dshHomePath("plugins", "subscriptions", "cursor-model-settings.json")) {
-		this.path = path;
-		try {
-			this.current = validateCursorModelSettings(JSON.parse(readFileSync(path, "utf8")));
-		} catch (error) {
-			if (error.code !== "ENOENT") throw new Error(`Cannot read Cursor model settings at ${path}`, { cause: error });
-		}
-	}
-	get() {
-		return structuredClone(this.current);
-	}
-	visibleModels() {
-		return this.current.visibleModels;
-	}
-	set(input) {
-		const validated = validateCursorModelSettings(input);
-		const run = this.writes.then(async () => {
-			await mkdir(dirname(this.path), { recursive: true });
-			const temporary = `${this.path}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
-			try {
-				await writeFile(temporary, JSON.stringify(validated, null, 2), { mode: 384 });
-				await rename(temporary, this.path);
-			} finally {
-				await rm(temporary, { force: true });
-			}
-			this.current = validated;
-		});
-		this.writes = run.catch(() => void 0);
-		return run;
-	}
-};
-
 //#endregion
 //#region src/model-defaults.ts
 /** Absolute path of the defaults file. */
@@ -7167,11 +4146,11 @@ function sanitizeDefaults(value) {
 		defaults: EMPTY,
 		dropped: []
 	};
-	const record$4 = value;
+	const record$2 = value;
 	const result = {};
 	const dropped = [];
 	for (const provider of PROVIDER_IDS) {
-		const section = sanitizeProvider(record$4[provider], dropped);
+		const section = sanitizeProvider(record$2[provider], dropped);
 		if (section !== void 0) result[provider] = section;
 	}
 	return {
@@ -7530,7 +4509,7 @@ function toAnthropicMessages(messages) {
 				tool_use_id: id,
 				content: toolResultContent({
 					type: "tool-result",
-					toolCallId: ToolCallId$1(id),
+					toolCallId: ToolCallId(id),
 					content: message.content
 				}),
 				...message.isError === true ? { is_error: true } : {}
@@ -7669,7 +4648,7 @@ function closeBlock$1(block) {
 		};
 		case "tool-call": return {
 			type: "tool-call",
-			id: ToolCallId$1(block.callId),
+			id: ToolCallId(block.callId),
 			name: block.name ?? "",
 			arguments: block.text
 		};
@@ -7773,7 +4752,7 @@ var AnthropicStreamTranslator = class {
 						chunks.push({
 							type: "tool-call-delta",
 							index: opened.index,
-							id: ToolCallId$1(opened.callId),
+							id: ToolCallId(opened.callId),
 							...block.name === void 0 ? {} : { name: block.name },
 							argumentsDelta: ""
 						});
@@ -7810,7 +4789,7 @@ var AnthropicStreamTranslator = class {
 						chunks.push({
 							type: "tool-call-delta",
 							index: block.index,
-							id: ToolCallId$1(block.callId),
+							id: ToolCallId(block.callId),
 							...block.name === void 0 ? {} : { name: block.name },
 							argumentsDelta: delta.partial_json ?? ""
 						});
@@ -9159,7 +6138,7 @@ function closeBlock(block) {
 		};
 		case "tool-call": return {
 			type: "tool-call",
-			id: ToolCallId$1(block.callId),
+			id: ToolCallId(block.callId),
 			name: block.name ?? "",
 			arguments: block.text
 		};
@@ -9249,7 +6228,7 @@ var ResponsesStreamTranslator = class {
 					chunks.push({
 						type: "tool-call-delta",
 						index: block.index,
-						id: ToolCallId$1(callId),
+						id: ToolCallId(callId),
 						...item.name === void 0 ? {} : { name: item.name },
 						argumentsDelta: ""
 					});
@@ -9291,7 +6270,7 @@ var ResponsesStreamTranslator = class {
 				chunks.push({
 					type: "tool-call-delta",
 					index: block.index,
-					id: ToolCallId$1(block.callId),
+					id: ToolCallId(block.callId),
 					...block.name === void 0 ? {} : { name: block.name },
 					argumentsDelta: event.delta ?? ""
 				});
@@ -10501,9 +7480,9 @@ var PoolHealthRegistry = class {
 	}
 	/** Whether one registry key is clear right now. */
 	isAvailable(key, now = Date.now()) {
-		const record$4 = this.records.get(key);
-		if (record$4 === void 0) return true;
-		if (record$4.unavailableUntil <= now) {
+		const record$2 = this.records.get(key);
+		if (record$2 === void 0) return true;
+		if (record$2.unavailableUntil <= now) {
 			this.records.delete(key);
 			return true;
 		}
@@ -10529,20 +7508,20 @@ var PoolHealthRegistry = class {
 	*/
 	earliestRecovery(keys, now = Date.now()) {
 		let earliest;
-		for (const [key, record$4] of this.records) {
-			if (record$4.unavailableUntil <= now) {
+		for (const [key, record$2] of this.records) {
+			if (record$2.unavailableUntil <= now) {
 				this.records.delete(key);
 				continue;
 			}
 			if (!keys.has(key)) continue;
-			if (earliest === void 0 || record$4.unavailableUntil < earliest) earliest = record$4.unavailableUntil;
+			if (earliest === void 0 || record$2.unavailableUntil < earliest) earliest = record$2.unavailableUntil;
 		}
 		return earliest;
 	}
 	/** Active failure codes for the given keys; reading them does not change cooldowns. */
 	unavailableReasons(keys, now = Date.now()) {
 		const reasons = [];
-		for (const [key, record$4] of this.records) if (keys.has(key) && record$4.unavailableUntil > now) reasons.push(record$4.reason);
+		for (const [key, record$2] of this.records) if (keys.has(key) && record$2.unavailableUntil > now) reasons.push(record$2.reason);
 		return reasons;
 	}
 	/** Drop records of one provider, or of a single account when given (auth changes). */
@@ -13074,7 +10053,7 @@ function toAntigravityContents(messages, model) {
 				name: callNames.get(id) ?? "",
 				response: toolResultValue({
 					type: "tool-result",
-					toolCallId: ToolCallId$1(id),
+					toolCallId: ToolCallId(id),
 					content: message.content,
 					...message.isError === void 0 ? {} : { isError: message.isError }
 				})
@@ -13242,7 +10221,7 @@ var AntigravityStreamTranslator = class {
 		};
 		else content = {
 			type: "tool-call",
-			id: ToolCallId$1(block.id ?? `call_${randomUUID().replaceAll("-", "")}`),
+			id: ToolCallId(block.id ?? `call_${randomUUID().replaceAll("-", "")}`),
 			name: block.name ?? "",
 			arguments: block.text
 		};
@@ -13336,7 +10315,7 @@ var AntigravityStreamTranslator = class {
 			chunks.push({
 				type: "tool-call-delta",
 				index: block.index,
-				id: ToolCallId$1(id),
+				id: ToolCallId(id),
 				name: call.name ?? "",
 				argumentsDelta: args
 			});
@@ -14115,11 +11094,11 @@ function parseImageGenerateResponse(payload) {
 	const images = [];
 	for (const entry of entries) {
 		if (typeof entry !== "object" || entry === null) continue;
-		const record$4 = entry;
-		if (typeof record$4.b64_json !== "string" || record$4.b64_json.length === 0) continue;
+		const record$2 = entry;
+		if (typeof record$2.b64_json !== "string" || record$2.b64_json.length === 0) continue;
 		images.push({
-			data: Buffer.from(record$4.b64_json, "base64"),
-			...typeof record$4.revised_prompt === "string" && record$4.revised_prompt.length > 0 ? { revisedPrompt: record$4.revised_prompt } : {}
+			data: Buffer.from(record$2.b64_json, "base64"),
+			...typeof record$2.revised_prompt === "string" && record$2.revised_prompt.length > 0 ? { revisedPrompt: record$2.revised_prompt } : {}
 		});
 	}
 	if (images.length === 0) throw new Error("image_generate: the response carried no image data");
@@ -15369,7 +12348,6 @@ function apply(ctx, config) {
 		restoreConnectAttemptTimeout(previousAttemptTimeout);
 	}, "dsh-subscriptions: connect attempt timeout");
 	const preferences = new ProviderSettingsStore();
-	const cursorModelSettings = new CursorModelSettingsStore();
 	const ollamaSettings = new OllamaSettingsStore(void 0, (message) => {
 		ctx.logger.warn(`${name}: ${message}`);
 	});
@@ -15802,30 +12780,15 @@ function apply(ctx, config) {
 		}
 	};
 	let resolveExternalCredential;
-	let cursorAuth;
-	let cursorAdapter;
-	let cursorHandle;
-	let cursorAuthenticated;
-	let cursorAttachments;
 	let ollamaAdapter;
 	let ollamaHandle;
-	ctx.inject(["attachments"], (attachmentsCtx) => {
-		cursorAttachments = attachmentsCtx.attachments;
-	});
 	ctx.inject(["credentials"], (credentialsCtx) => {
 		resolveExternalCredential = (name$1) => credentialsCtx.credentials.resolve(credentialRef(name$1));
-		cursorAuth = new CursorAuth(credentialsCtx.credentials, hostFetch);
-		cursorAdapter = new CursorCompatAdapter({
-			auth: cursorAuth,
-			resolveAttachments: () => cursorAttachments,
-			visibleModels: () => cursorModelSettings.visibleModels()
-		});
-		cursorHandle = credentialsCtx.llm.registerAdapter(["cursor-subscription"], cursorAdapter);
 		ollamaAdapter = new OllamaAdapter({
 			apiKey: async () => (await resolveExternalCredential?.(ollamaApiKeyRef()))?.value,
 			baseURL: ollamaBaseURL,
 			catalog: ollamaCatalog,
-			resolveAttachments: () => cursorAttachments,
+			resolveAttachments,
 			streamIdleTimeoutMs,
 			onWarn
 		});
@@ -15948,79 +12911,6 @@ function apply(ctx, config) {
 			for (const [route, handle] of handles) handle.replace([route]);
 		}
 	}, externalUsage, {
-		status: async () => {
-			const status = cursorAuth === void 0 ? {
-				authenticated: false,
-				busy: false
-			} : await cursorAuth.status();
-			if (cursorAuthenticated !== status.authenticated) {
-				cursorAuthenticated = status.authenticated;
-				cursorAdapter?.invalidateModels();
-				cursorHandle?.replace(["cursor-subscription"]);
-			}
-			return status;
-		},
-		login: () => {
-			if (cursorAuth === void 0) throw new Error("DSH credentials are unavailable");
-			return cursorAuth.login();
-		},
-		cancel: async () => {
-			await cursorAuth?.cancel();
-		},
-		logout: async () => {
-			await cursorAuth?.logout();
-			cursorAuthenticated = false;
-			cursorAdapter?.invalidateModels();
-			cursorHandle?.replace(["cursor-subscription"]);
-		},
-		usage: async (signal) => {
-			if (cursorAuth === void 0) throw new Error("DSH credentials are unavailable");
-			return fetchCursorUsage(await cursorAuth.accessToken({ signal }), hostFetch, signal);
-		},
-		models: async (force, signal) => {
-			if (cursorAdapter === void 0) throw new Error("Cursor model provider is unavailable");
-			if (force) cursorAdapter.invalidateModels();
-			const models = await cursorAdapter.listModelsForRpc({
-				force,
-				signal
-			});
-			if (force) cursorHandle?.replace(["cursor-subscription"]);
-			return models;
-		},
-		settings: async (force, signal) => {
-			const status = cursorAuth === void 0 ? { authenticated: false } : await cursorAuth.status();
-			const models = status.authenticated && cursorAdapter !== void 0 ? await cursorAdapter.listModelsForRpc({
-				force,
-				signal
-			}) : [];
-			if (force && status.authenticated) cursorHandle?.replace(["cursor-subscription"]);
-			return {
-				provider: "cursor-subscription",
-				settings: cursorModelSettings.get(),
-				models: models.map(({ id, name: name$1 }) => ({
-					id,
-					name: name$1,
-					efforts: []
-				})),
-				tools: [],
-				accounts: status.authenticated ? [{
-					key: "cursor",
-					label: "Cursor",
-					models
-				}] : []
-			};
-		},
-		setSettings: async (input) => {
-			let validated;
-			try {
-				validated = validateCursorModelSettings(input);
-			} catch (error) {
-				throw new BadRequest(error instanceof Error ? error.message : String(error));
-			}
-			await cursorModelSettings.set(validated);
-			cursorHandle?.replace(["cursor-subscription"]);
-		}
-	}, {
 		settings: async () => ({
 			provider: "ollama-cloud",
 			settings: ollamaSettings.get(),