gigarag-cursor 0.1.0 → 0.1.2

package/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gigarag",
   "description": "Your GigaRAG knowledge base inside Cursor: index a codebase, save decisions, recall them later.",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "author": { "name": "GigaRAG", "url": "https://gigarag.com" },
   "homepage": "https://gigarag.com/connect/cursor",
   "license": "UNLICENSED",

package/cli/cli.js

@@ -4,7 +4,7 @@ const HELP = `gigarag ${version()}
 
 Connect GigaRAG to your AI clients.
 
-  gigarag login                    Sign in (paste a key, or --browser)
+  gigarag login                    Sign in through your browser (--paste for a key)
   gigarag logout                   Delete the stored credential
   gigarag connect [client...]      Add GigaRAG to your installed clients
   gigarag status                   What is configured, and whether the key works

package/cli/clients.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "Owned by this repo. Slugs match gigarag.com/connect, plus entries marked extra. Every auto entry names where the client keeps its MCP config and the entry shape it expects, and commandTargets says where it reads custom commands or skills. Tokens $command, $args, $argv, $helper and $url are filled by gigarag connect.",
+  "$comment": "Owned by this repo. Slugs match gigarag.com/connect, plus entries marked extra. Every auto entry names where the client keeps its MCP config and the entry shape it expects, and commandTargets says where it reads custom commands or skills. Tokens $command, $args, $argv, $helper and $url are filled by gigarag connect. An entry marked noLocalServer is one gigarag cannot connect at all, because the client runs in the cloud or has no stdio transport; it is listed so --print can still give its docs, and the connect page shows no CLI method for it.",
   "version": 1,
   "clients": [
     {
@@ -580,6 +580,7 @@
       "name": "Copilot coding agent",
       "group": "editor",
       "mode": "print",
+      "noLocalServer": true,
       "hint": "Runs in GitHub Actions, so there is no machine of yours to run gigarag on. Set it up in the repository settings.",
       "docs": "https://docs.github.com/en/copilot/how-tos/use-copilot-agents/coding-agent/extend-coding-agent-with-mcp"
     },
@@ -869,6 +870,7 @@
       "name": "Android Studio",
       "group": "editor",
       "mode": "print",
+      "noLocalServer": true,
       "hint": "Android Studio has no stdio transport, so the gigarag bridge cannot run there. Its MCP settings take an HTTP server only, which needs a key in a header, so create a key for it at gigarag.com/connect and follow the guide there.",
       "docs": "https://developer.android.com/studio/gemini/add-mcp-server"
     },

package/cli/commands/login.js

@@ -6,12 +6,15 @@ import { runOAuthLogin } from '../auth/oauth.js';
 import { GigaRag, McpHttpError } from '../sdk.js';
 import { assertSecureUrl } from '../secureUrl.js';
 import { err, out, promptHidden, readStdinLine, UsageError } from '../ui.js';
-const HELP = `Usage: gigarag login [--browser] [--key <key>] [--url <mcp url>] [--no-verify]
+const HELP = `Usage: gigarag login [--paste] [--key <key>] [--url <mcp url>] [--no-verify]
 
-Stores a credential for this machine. With no flags it asks you to paste an agent key
-from gigarag.com/connect. Piped input works too: echo $KEY | gigarag login
+Signs this machine in to GigaRAG. With no flags it opens your browser, and nothing
+holds a key afterwards: the gateway swaps your sign-in for one behind the scenes.
 
-  --browser     Sign in through your browser instead of pasting a key
+Piped input still takes a key, so scripts keep working: echo $KEY | gigarag login
+
+  --paste       Paste an agent key instead of opening a browser
+  --browser     Open the browser. The default, accepted so older scripts still run
   --key <key>   Give the key on the command line (it will sit in your shell history)
   --url <url>   Use a different MCP endpoint
   --no-verify   Store the key without checking it against GigaRAG first`;
@@ -20,6 +23,7 @@ export async function login(argv) {
         args: argv,
         options: {
             browser: { type: 'boolean' },
+            paste: { type: 'boolean' },
             key: { type: 'string' },
             url: { type: 'string' },
             issuer: { type: 'string' },
@@ -41,8 +45,26 @@ export async function login(argv) {
         }
         updateConfig(c => void (c.mcpUrl = values.url));
     }
-    if (values.browser)
+    // Signing in through the browser is the default, and pasting a key is the
+    // exception it used to be the other way round.
+    //
+    // A pasted key is a long-lived admin credential that the person then has to
+    // keep somewhere, and it counts against the workspace's key limit every time
+    // somebody sets up another machine. The browser flow leaves the key on the
+    // server: the gateway swaps the grant for one on every request, and revoking
+    // the grant cuts that machine off without touching any other.
+    //
+    // Three things still take a key, because each one has no browser to open:
+    // --key, --paste for a machine whose browser is somewhere else, and piped
+    // input, which is how CI and container builds sign in.
+    //
+    // A flag always beats the guess about stdin. Without that, --browser in a
+    // script would silently read the pipe instead of opening a browser.
+    const asked = values.key || values.paste ? 'key' : values.browser ? 'browser' : null;
+    const mode = asked ?? (process.stdin.isTTY ? 'browser' : 'key');
+    if (mode === 'browser') {
         return browserLogin(values.issuer ?? readConfig().issuer ?? DEFAULT_ISSUER, values.url);
+    }
     let key = values.key?.trim();
     if (!key && envKey()) {
         out('GIGARAG_API_KEY is set, so every command already uses it. Nothing to store.');
@@ -54,7 +76,7 @@ export async function login(argv) {
             : await readStdinLine();
     }
     if (!key)
-        throw new UsageError('No key given. Copy one from gigarag.com/connect, then run gigarag login again.');
+        throw new UsageError('No key given. Copy one from gigarag.com/connect and run gigarag login again, or run gigarag login --browser to sign in through your browser.');
     if (!looksLikeAgentKey(key)) {
         err('That does not look like an agent key. They start with gr_live_. Storing it anyway would only fail later.');
         return 1;

package/cli/package.json

@@ -1,5 +1,5 @@
 {
   "name": "gigarag",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gigarag-cursor",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "The GigaRAG plugin for Cursor. Skills and an MCP server that carry the gigarag CLI inside them.",
   "license": "UNLICENSED",
   "files": [