llm-cli-gateway 2.12.2 → 2.13.0

package/CHANGELOG.md

@@ -2,7 +2,30 @@
 
 All notable changes to the llm-cli-gateway project.
 
-## [Unreleased]
+## [2.13.0] - 2026-07-01: Cursor Agent CLI provider
+
+### Added
+
+- **Cursor Agent CLI (7th gateway provider).** `cursor_request` / `cursor_request_async`
+  drive `cursor-agent --print` headless mode with model selection, `plan`/`ask`
+  mode, output format, force/auto-review/sandbox/trust controls, workspace and
+  extra `--add-dir` roots, and session resume (`--resume`/`--continue`). Cursor
+  has no `promptParts` surface (plain `prompt` only, like Devin) and is not
+  wired for request-time MCP server injection because Cursor owns MCP config via
+  `cursor-agent mcp`. Covered by doctor, provider capability inventory,
+  provider-login guidance, upstream-contract drift detection, and CLI upgrade
+  support (`cursor-agent update`).
+- **Cursor native ACP discovery and gated transport.** The installed Cursor Agent
+  CLI exposes a native `cursor-agent acp` stdio entrypoint; initialize plus
+  `session/new` smoke passed locally. Gateway request tools still default to the
+  CLI headless path. Explicit `transport:"acp"` stays config-gated and rejects
+  unsupported Cursor CLI-only controls instead of silently dropping them.
+- **Cursor review hardening.** Cursor validation reviewers now run through
+  `cursor-agent --print --mode ask --sandbox enabled`; high-impact Cursor flags
+  (`force`, `trust`, `sandbox:"disabled"`) are gated under
+  `approvalStrategy:"mcp_managed"`; remote HTTP/OAuth workspace inputs must use
+  registered workspace aliases/roots; and docs/schema warn that gateway-created
+  `gw-*` ids are not resumable Cursor chat ids.
 
 ## [2.12.2] - 2026-07-01: backpressure hardening and release-gate stability
 

package/README.md

@@ -9,9 +9,9 @@
 > _"Without consultation, plans are frustrated, but with many counselors they succeed."_
 > — Proverbs 15:22 (LSB)
 
-A Model Context Protocol (MCP) gateway for running Claude Code, Codex, Gemini, Grok, Mistral (Vibe), and Devin CLIs from one MCP endpoint, with durable async jobs, session continuity, cache-aware prompting, observability, and personal-appliance setup tooling.
+A Model Context Protocol (MCP) gateway for running Claude Code, Codex, Gemini, Grok, Mistral (Vibe), Devin, and Cursor Agent CLIs from one MCP endpoint, with durable async jobs, session continuity, cache-aware prompting, observability, and personal-appliance setup tooling.
 
-**Why developers try it:** one local MCP endpoint for cross-LLM validation, multi-agent coding workflows, and repeatable assistant-led setup across six provider CLIs.
+**Why developers try it:** one local MCP endpoint for cross-LLM validation, multi-agent coding workflows, and repeatable assistant-led setup across registered provider CLIs.
 
 **Current signals:** CI and security workflows pass on `main`, OpenSSF Scorecard is published, OpenSSF Best Practices is passing, releases use Sigstore signing, and the package is MIT licensed.
 
@@ -38,7 +38,7 @@ Or use directly with `npx` from an MCP client:
 
 `llm-cli-gateway` is a single-user MCP gateway for cross-LLM validation and multi-agent coding workflows. It is more than a thin CLI wrapper:
 
-- Runs six provider CLIs through consistent sync and async MCP tools.
+- Runs registered provider CLIs through consistent sync and async MCP tools.
 - Persists long-running jobs, supports restart-safe result collection, deduplication, cancellation, and sync-to-async deferral.
 - Tracks sessions, real CLI resume paths, structured response metadata, and cache telemetry.
 - Supports cache-aware `promptParts`, including explicit Claude `cache_control` when opted in.
@@ -157,7 +157,7 @@ docker compose -f docker/personal.compose.yml run --rm doctor
 
 ### Core Capabilities
 
-- **Multi-LLM Orchestration**: Unified interface for Claude Code, Codex, Gemini, Grok, Mistral (Vibe), and Devin CLIs
+- **Multi-LLM Orchestration**: Unified interface for Claude Code, Codex, Gemini, Grok, Mistral (Vibe), Devin, and Cursor Agent CLIs
 - **Session Management**: Track and resume conversations across all CLIs with persistent storage
 - **Gateway-owned worktrees**: Run any sync or async provider request inside a managed git worktree, with per-session reuse and cleanup
 - **Token Optimization**: Automatic 44% reduction on prompts, 37% on responses (opt-in)
@@ -169,11 +169,11 @@ docker compose -f docker/personal.compose.yml run --rm doctor
 - **SQLite Flight Recorder**: Every request/response logged to `~/.llm-cli-gateway/logs.db` with correlation IDs, token usage, duration, retry counts, and circuit breaker state. Browse with [Datasette](https://datasette.io/): `datasette ~/.llm-cli-gateway/logs.db`
 - **Structured Metadata**: Tool responses include machine-readable `structuredContent` (model, cli, correlationId, sessionId, durationMs, token counts)
 - **Cache observability resources**: `cache-state://global`, `cache-state://session/{id}`, and `cache-state://prefix/{hash}` MCP resources return aggregate cache hit/miss/savings — tokens and hashes only, no prompt text. `session_get` includes a `cacheState` block when the session has prior requests.
-- **Provider capability inventory**: `provider_tool_capabilities` and `provider-tools://catalog` expose the gateway request fields, supported/degraded provider controls, local skill/tool discovery, and safe config-surface hints for Claude Code, Codex CLI, Gemini/Antigravity, Grok CLI/API, Mistral Vibe, and Cognition Devin. `doctor --json` includes a compact `provider_capabilities` summary for setup assistants.
+- **Provider capability inventory**: `provider_tool_capabilities` and `provider-tools://catalog` expose the gateway request fields, supported/degraded provider controls, local skill/tool discovery, and safe config-surface hints for Claude Code, Codex CLI, Gemini/Antigravity, Grok CLI/API, Mistral Vibe, Cognition Devin, and Cursor Agent. `doctor --json` includes a compact `provider_capabilities` summary for setup assistants.
 
 ### Cache-aware operation
 
-Every `*_request` and `*_request_async` tool except `devin_request` / `devin_request_async` accepts an optional `promptParts` field that structures the prompt for better cache hit rates (the Devin headless path takes a plain `prompt` only). The gateway concatenates the parts in canonical order (`system → tools → context → task`) so that the stable prefix bytes precede the volatile task tail unchanged across calls, letting each provider's automatic prompt-caching land on the same content hash each time.
+Every `*_request` and `*_request_async` tool except `devin_request` / `devin_request_async` and `cursor_request` / `cursor_request_async` accepts an optional `promptParts` field that structures the prompt for better cache hit rates (the Devin and Cursor headless paths take a plain `prompt` only). The gateway concatenates the parts in canonical order (`system → tools → context → task`) so that the stable prefix bytes precede the volatile task tail unchanged across calls, letting each provider's automatic prompt-caching land on the same content hash each time.
 
 ```json
 {
@@ -188,7 +188,7 @@ Every `*_request` and `*_request_async` tool except `devin_request` / `devin_req
 
 `prompt` and `promptParts` are mutually exclusive — pass exactly one.
 
-Per-CLI capability matrix (prefix discipline is automatic via `promptParts` for all providers except Devin, which has no `promptParts` surface; explicit levers are provider-specific):
+Per-CLI capability matrix (prefix discipline is automatic via `promptParts` for all providers except Devin and Cursor, which have no `promptParts` surface; explicit levers are provider-specific):
 
 | CLI     | Prefix discipline | Explicit lever(s) |
 | ------- | ----------------- | ----------------- |
@@ -197,6 +197,8 @@ Per-CLI capability matrix (prefix discipline is automatic via `promptParts` for
 | gemini  | yes               | none (implicit server-side) |
 | grok    | yes               | `compactionMode` / `compactionDetail` (context compaction: `summary|transcript|segments`; `segments` writes per-segment markdown) |
 | mistral | yes               | none (implicit) |
+| devin   | no                | plain `prompt` only |
+| cursor  | no                | plain `prompt` only |
 
 **Claude example (explicit cacheControl)**
 
@@ -960,9 +962,36 @@ Run a Cognition Devin CLI request synchronously (headless print mode, `devin -p`
 - `idleTimeoutMs` (integer, optional): Kill a stuck process after output inactivity; 30,000 to 3,600,000 ms
 - `forceRefresh` (boolean, optional): Bypass dedup and force a fresh CLI run, default: false
 
-##### `claude_request_async` / `codex_request_async` / `gemini_request_async` / `grok_request_async` / `mistral_request_async` / `devin_request_async`
+##### `cursor_request`
 
-Start a long-running Claude, Codex, Gemini, Grok, Mistral, or Devin request without waiting for completion in the same MCP call.
+Run a Cursor Agent CLI request synchronously. Defaults to headless print mode (`cursor-agent --print`) and auto-defers to a pollable job past the sync deadline when async jobs are enabled. Set `transport: "acp"` to use Cursor's native `cursor-agent acp` transport when `[acp]` and `[acp.providers.cursor].runtime_enabled` are enabled; current ACP routing accepts only prompt/model/session inputs and rejects CLI-only options such as `mode`, `workspace`, `sandbox`, `force`, and `trust`.
+
+**Parameters:**
+
+- `prompt` (string, required): Prompt text for Cursor Agent CLI (1-100,000 chars)
+- `model` (string, optional): Model name or alias (for example `gpt-5`, `sonnet-4-thinking`, or `latest`)
+- `mode` (string, optional): Cursor mode, `"plan"` or `"ask"` (`--mode`)
+- `outputFormat` (string, optional): `"text"` (default), `"json"`, or `"stream-json"`
+- `transport` (string, optional): `"cli"` (default) or `"acp"`; ACP fails closed unless enabled in gateway config and rejects unsupported Cursor CLI-only controls instead of dropping them
+- `force` (boolean, optional): Emit `--force` for non-interactive operation
+- `autoReview` (boolean, optional): Emit `--auto-review`
+- `sandbox` (string, optional): `"enabled"` or `"disabled"` (`--sandbox`)
+- `trust` (boolean, optional): Emit `--trust` for this invocation
+- `workspace` (string, optional): Cursor workspace path or name (`--workspace`); remote HTTP/OAuth callers must pass a registered workspace alias, while local stdio callers may pass paths
+- `addDir` (string[], optional): Additional workspace roots (one `--add-dir` per entry); remote HTTP/OAuth callers must use registered workspace roots
+- `sessionId` (string, optional): Cursor chat/session ID to resume (`--resume <id>`). The `gw-*` id minted for a brand-new gateway session is not resumable through `sessionId`; continue with `resumeLatest: true`
+- `resumeLatest` (boolean, optional): Resume the most recent Cursor chat (`--continue`)
+- `createNewSession` (boolean, optional): Force a new session
+- `approvalStrategy` (string, optional): `"legacy"` (default) or `"mcp_managed"`; under MCP-managed approval, high-impact Cursor flags (`force`, `trust`, or `sandbox: "disabled"`) are denied unless bypass approval is explicitly allowed
+- `approvalPolicy` (string, optional): `"strict"`, `"balanced"`, or `"permissive"` override for MCP-managed approval
+- `optimizePrompt` / `optimizeResponse` (boolean, optional): Token-efficiency optimisation, default: false
+- `correlationId` (string, optional): Request trace ID (auto-generated if omitted)
+- `idleTimeoutMs` (integer, optional): Kill a stuck process after output inactivity; 30,000 to 3,600,000 ms
+- `forceRefresh` (boolean, optional): Bypass dedup and force a fresh CLI run, default: false
+
+##### `claude_request_async` / `codex_request_async` / `gemini_request_async` / `grok_request_async` / `mistral_request_async` / `devin_request_async` / `cursor_request_async`
+
+Start a long-running Claude, Codex, Gemini, Grok, Mistral, Devin, or Cursor request without waiting for completion in the same MCP call.
 
 Use this flow when analysis/runtime can exceed client tool-call limits:
 
@@ -1021,7 +1050,7 @@ Return the gateway's declared provider CLI contracts, optionally probing the ins
 
 **Parameters:**
 
-- `cli` (string, optional): Filter (`claude|codex|gemini|grok|mistral|devin`)
+- `cli` (string, optional): Filter (`claude|codex|gemini|grok|mistral|devin|cursor`)
 - `probeInstalled` (boolean, optional, default `false`): Run local `--help` probes and compare advertised flags against the declared contract — strongly recommended after any provider CLI upgrade. The probe reports `missingFlags`, `extraFlags`, `acknowledgedExtraFlags` (known upstream-only flags filtered from `extraFlags`), `discoveredFlags`, and stale-marker `warnings`.
 
 #### Session Management Tools
@@ -1032,7 +1061,7 @@ Create a new session for a specific CLI.
 
 **Parameters:**
 
-- `cli` (string, required): CLI to create session for ("claude", "codex", "gemini", "grok", "mistral", "devin")
+- `cli` (string, required): CLI to create session for ("claude", "codex", "gemini", "grok", "mistral", "devin", "cursor")
 - `description` (string, optional): Description for the session
 - `setAsActive` (boolean, optional): Set as active session, default: true
 
@@ -1052,7 +1081,7 @@ List all sessions, optionally filtered by CLI.
 
 **Parameters:**
 
-- `cli` (string, optional): Filter by CLI ("claude", "codex", "gemini", "grok", "mistral", "devin")
+- `cli` (string, optional): Filter by CLI ("claude", "codex", "gemini", "grok", "mistral", "devin", "cursor")
 
 **Response includes:**
 
@@ -1101,7 +1130,7 @@ List available models for each CLI.
 
 **Parameters:**
 
-- `cli` (string, optional): Specific provider to list models for (`"claude"`, `"codex"`, `"gemini"`, `"grok"`, `"mistral"`, `"devin"`, or an enabled API provider name). When one or more `[providers.<name>]` API providers are enabled, the unfiltered response also carries an `apiProviders` array (each entry tagged `providerKind: "api"`); see [API providers (HTTP)](#api-providers-http).
+- `cli` (string, optional): Specific provider to list models for (`"claude"`, `"codex"`, `"gemini"`, `"grok"`, `"mistral"`, `"devin"`, `"cursor"`, or an enabled API provider name). When one or more `[providers.<name>]` API providers are enabled, the unfiltered response also carries an `apiProviders` array (each entry tagged `providerKind: "api"`); see [API providers (HTTP)](#api-providers-http).
 
 **Response includes:**
 
@@ -1149,7 +1178,7 @@ inputs.
 
 **Parameters:**
 
-- `cli` (string, optional): Provider filter (`"claude"`, `"codex"`, `"gemini"`, `"grok"`, `"mistral"`, `"devin"`, `"grok_api"`, or an enabled API provider name)
+- `cli` (string, optional): Provider filter (`"claude"`, `"codex"`, `"gemini"`, `"grok"`, `"mistral"`, `"devin"`, `"cursor"`, `"grok_api"`, or an enabled API provider name)
 - `includeSkills` (boolean, default `true`): Include bounded local skill discovery
 - `includeProviderTools` (boolean, default `true`): Include provider-native tools extracted from discovered skills
 - `includeUnsupported` (boolean, default `true`): Include explicit unsupported/degraded input records
@@ -1170,6 +1199,7 @@ Equivalent MCP resources:
 - `provider-tools://grok_api`
 - `provider-tools://mistral`
 - `provider-tools://devin`
+- `provider-tools://cursor`
 - `provider-tools://<api-provider>` for each enabled `[providers.<name>]` API provider
 
 `doctor --json` also emits a compact `provider_capabilities` block with the
@@ -1186,7 +1216,7 @@ Report installed CLI versions.
 
 **Parameters:**
 
-- `cli` (string, optional): Specific CLI to inspect ("claude", "codex", "gemini", "grok", "mistral", "devin")
+- `cli` (string, optional): Specific CLI to inspect ("claude", "codex", "gemini", "grok", "mistral", "devin", "cursor")
 
 ##### `cli_upgrade`
 
@@ -1194,7 +1224,7 @@ Plan or run an upgrade for one CLI.
 
 **Parameters:**
 
-- `cli` (string, required): CLI to upgrade ("claude", "codex", "gemini", "grok", "mistral", "devin")
+- `cli` (string, required): CLI to upgrade ("claude", "codex", "gemini", "grok", "mistral", "devin", "cursor")
 - `target` (string, optional): Package tag/version/target, default: `latest`
 - `dryRun` (boolean, optional): Return the upgrade plan without running it, default: `true`
 - `timeoutMs` (number, optional): Upgrade timeout when `dryRun=false`
@@ -1210,6 +1240,7 @@ Plan or run an upgrade for one CLI.
 - Grok explicit target: `grok update --version <target>`
 - Mistral (Vibe): dispatches to the detected installer (`pip`/`uv`/`brew`); errors with guidance when none is detected (Vibe ships no self-update command)
 - Devin latest: `devin update` (self-update; explicit version targets are unsupported)
+- Cursor latest: `cursor-agent update` (self-update; explicit version targets are unsupported)
 
 **Example dry run:**
 
@@ -1227,7 +1258,7 @@ In addition to the spawnable CLI tools, the gateway can route requests to first-
 
 ### Configuring a provider
 
-API providers are declared as `[providers.<name>]` blocks in `~/.llm-cli-gateway/config.toml` (override with `LLM_GATEWAY_CONFIG`). The `<name>` becomes the provider's identity across every tool and resource and **must not** collide with a spawnable CLI name (`claude`, `codex`, `gemini`, `grok`, `mistral`, `devin`); a collision is rejected with a warning and the provider is disabled.
+API providers are declared as `[providers.<name>]` blocks in `~/.llm-cli-gateway/config.toml` (override with `LLM_GATEWAY_CONFIG`). The `<name>` becomes the provider's identity across every tool and resource and **must not** collide with a spawnable CLI name (`claude`, `codex`, `gemini`, `grok`, `mistral`, `devin`, `cursor`); a collision is rejected with a warning and the provider is disabled.
 
 ```toml
 # OpenRouter (OpenAI-compatible). The key is read from the named env var at

package/dist/acp/provider-registry.js

@@ -77,6 +77,19 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         adapterCandidates: Object.freeze([]),
         caveat: "Native ACP entrypoint `devin acp` (stdio JSON-RPC). Manual initialize + session/new smoke passed with the installed CLI managing credentials (`devin auth login`; WINDSURF_API_KEY for empty-env); empty-env smoke is expected to fail. Third native runtime pilot; runtime routing stays config-gated.",
     }),
+    cursor: Object.freeze({
+        provider: "cursor",
+        displayName: "Cursor Agent CLI",
+        status: "native_smoke_passed",
+        supportKind: "native",
+        targetVersion: "cursor-agent 2026.06.29-2ad2186",
+        entrypoint: Object.freeze({ command: "cursor-agent", args: Object.freeze(["acp"]) }),
+        runtimeEnabledDefault: false,
+        shipRuntimePilot: true,
+        runtimePriority: 4,
+        adapterCandidates: Object.freeze([]),
+        caveat: "Native ACP entrypoint `cursor-agent acp` (stdio JSON-RPC) is available as a hidden advanced command. Manual initialize + session/new smoke passed locally (protocolVersion 1, session created; no agentInfo returned). Fourth native runtime pilot; runtime routing stays config-gated.",
+    }),
 });
 export function getAcpProviderRegistry() {
     return ACP_PROVIDER_REGISTRY;

package/dist/approval-manager.d.ts

@@ -2,7 +2,7 @@ import type { Logger } from "./logger.js";
 import type { ReviewIntegrityResult } from "./review-integrity.js";
 export type ApprovalPolicy = "strict" | "balanced" | "permissive";
 export type ApprovalStrategy = "legacy" | "mcp_managed";
-export type ApprovalCli = "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin";
+export type ApprovalCli = "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin" | "cursor";
 export type ApprovalStatus = "approved" | "denied";
 export interface ApprovalRequest {
     cli: ApprovalCli;

package/dist/async-job-manager.d.ts

@@ -7,7 +7,7 @@ import { type ApiProvider, type ApiRequest, type ApiUsage } from "./api-provider
 import { type JobLimitsConfig } from "./config.js";
 export declare function extractApiHttpStatus(error: unknown): number | null;
 export declare function extractApiErrorBody(error: unknown): string | undefined;
-export type LlmCli = "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin";
+export type LlmCli = "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin" | "cursor";
 export type JobProvider = LlmCli | (string & {});
 export type AsyncJobStatus = "queued" | "running" | "completed" | "failed" | "canceled" | "orphaned";
 export declare function isAsyncJobInProgress(status: AsyncJobStatus): boolean;

package/dist/cli-updater.d.ts

@@ -1,5 +1,5 @@
 import type { Logger } from "./logger.js";
-import type { CliType } from "./session-manager.js";
+import { type CliType } from "./provider-types.js";
 import { type ProviderLoginStatus } from "./provider-status.js";
 import type { ProviderLoginGuidance } from "./provider-login-guidance.js";
 export interface CliVersionInfo {

package/dist/cli-updater.js

@@ -1,5 +1,6 @@
 import { spawnSync } from "node:child_process";
 import { executeCli, providerCommandName } from "./executor.js";
+import { CLI_TYPES } from "./provider-types.js";
 import { getProviderRuntimeStatus } from "./provider-status.js";
 const MISTRAL_VIBE_PACKAGE = "mistral-vibe";
 const LEGACY_VIBE_PACKAGE = "vibe-cli";
@@ -28,14 +29,7 @@ export function detectMistralInstallMethod(exec = (cmd, args) => {
     }
     return "unknown";
 }
-const VERSION_ARGS = {
-    claude: ["--version"],
-    codex: ["--version"],
-    gemini: ["--version"],
-    grok: ["--version"],
-    mistral: ["--version"],
-    devin: ["--version"],
-};
+const VERSION_ARGS = Object.fromEntries(CLI_TYPES.map(provider => [provider, ["--version"]]));
 const CODEX_NPM_PACKAGE = "@openai/codex";
 export function buildCliUpgradePlan(cli, target = "latest", detectMistral = detectMistralInstallMethod) {
     const normalizedTarget = normalizeTarget(target);
@@ -108,6 +102,20 @@ export function buildCliUpgradePlan(cli, target = "latest", detectMistral = dete
             note: "Devin CLI self-updates via 'devin update' (use --force to reinstall the latest).",
         };
     }
+    if (cli === "cursor") {
+        if (normalizedTarget !== "latest") {
+            throw new Error("Cursor Agent CLI upgrades support only the 'latest' target via 'cursor-agent update'.");
+        }
+        return {
+            cli,
+            target: normalizedTarget,
+            command: providerCommandName("cursor"),
+            args: ["update"],
+            strategy: "self-update",
+            requiresNetwork: true,
+            note: "Cursor Agent CLI self-updates via 'cursor-agent update'.",
+        };
+    }
     if (cli === "gemini") {
         if (normalizedTarget !== "latest") {
             throw new Error("Antigravity CLI upgrades support only the 'latest' target via 'agy update'.");
@@ -165,7 +173,7 @@ export async function getCliVersion(cli) {
     }
 }
 export async function getCliVersions(cli) {
-    const clis = cli ? [cli] : ["claude", "codex", "gemini", "grok", "mistral", "devin"];
+    const clis = cli ? [cli] : CLI_TYPES;
     return Promise.all(clis.map(item => getCliVersion(item)));
 }
 function buildMistralUpgradePlan(normalizedTarget, detectMistral) {

package/dist/config.js

@@ -6,6 +6,7 @@ import { z } from "zod/v3";
 import { logWarn, noopLogger } from "./logger.js";
 import { hashSecret, isSecretHash } from "./oauth.js";
 import { isHttpsOrLoopbackUrl, isLoopbackUrl } from "./api-http.js";
+import { CLI_TYPES } from "./provider-types.js";
 const DatabaseUrlSchema = z
     .string()
     .url()
@@ -355,14 +356,7 @@ export function minStableTokensForModel(config, modelName) {
         return table.haiku;
     return table.default;
 }
-const RESERVED_CLI_PROVIDER_NAMES = [
-    "claude",
-    "codex",
-    "gemini",
-    "grok",
-    "mistral",
-    "devin",
-];
+const RESERVED_CLI_PROVIDER_NAMES = CLI_TYPES;
 export const DEFAULT_XAI_API_KEY_ENV = "XAI_API_KEY";
 export const DEFAULT_XAI_BASE_URL = "https://api.x.ai/v1";
 export const DEFAULT_XAI_MODEL = "grok-build-0.1";

package/dist/doctor.d.ts

@@ -4,7 +4,7 @@ import { type ApiProviderLoginGuidance } from "./provider-login-guidance.js";
 import type { FlightRecorderQuery } from "./flight-recorder.js";
 import { type CacheAwarenessConfig, type ProvidersConfig } from "./config.js";
 import { type ProviderCapabilityId, type ProviderKind } from "./provider-tool-capabilities.js";
-export type CliType = "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin";
+import { type CliType } from "./session-manager.js";
 export interface CacheAwarenessReport {
     enabled_features: Array<"anthropic_cache_control" | "ttl_warnings">;
     last_24h: {
@@ -123,7 +123,7 @@ export interface DoctorReport {
         allowed_root_count: number;
         gateway_app_dir_is_workspace: boolean;
     };
-    providers: Record<"claude" | "codex" | "gemini" | "grok" | "mistral", {
+    providers: Record<CliType, {
         cli_available: boolean;
         version: string | null;
         login_status: ProviderLoginStatus;

package/dist/doctor.js

@@ -13,6 +13,7 @@ import { computeGlobalCacheStats } from "./cache-stats.js";
 import { FlightRecorder, resolveFlightRecorderDbPath } from "./flight-recorder.js";
 import { buildUpstreamContractReport } from "./upstream-contracts.js";
 import { getProviderToolCapabilities, knownProviderCapabilityIds, } from "./provider-tool-capabilities.js";
+import { CLI_TYPES } from "./session-manager.js";
 export function checkVibeSessionLogging(home = homedir()) {
     const configPath = join(home, ".vibe", "config.toml");
     if (!existsSync(configPath)) {
@@ -379,13 +380,7 @@ export function createDoctorReport(envOrOptions = process.env) {
             allowed_root_count: workspaceRegistry.allowedRoots.length,
             gateway_app_dir_is_workspace: workspaceRegistry.repos.some(repo => repo.path === join(homedir(), ".llm-cli-gateway")),
         },
-        providers: {
-            claude: doctorProviderStatus(providerStatuses.claude),
-            codex: doctorProviderStatus(providerStatuses.codex),
-            gemini: doctorProviderStatus(providerStatuses.gemini),
-            grok: doctorProviderStatus(providerStatuses.grok),
-            mistral: doctorProviderStatus(providerStatuses.mistral),
-        },
+        providers: Object.fromEntries(CLI_TYPES.map(provider => [provider, doctorProviderStatus(providerStatuses[provider])])),
         endpoint_exposure: endpointExposure,
         client_config: clientConfigStatus(),
         cache_awareness: buildCacheAwarenessReport(opts),

package/dist/executor.js

@@ -8,6 +8,8 @@ export function providerCommandName(command) {
         return "agy";
     if (command === "mistral")
         return "vibe";
+    if (command === "cursor")
+        return "cursor-agent";
     return command;
 }
 const MAX_OUTPUT_SIZE = 50 * 1024 * 1024;

package/dist/index.d.ts

@@ -7,7 +7,7 @@ import { PerformanceMetrics } from "./metrics.js";
 import { type PersistenceConfig, type CacheAwarenessConfig, type ProvidersConfig, type ApiProviderRuntime, type AcpConfig } from "./config.js";
 import { DatabaseConnection } from "./db.js";
 import { AsyncJobManager } from "./async-job-manager.js";
-import { ApprovalManager, ApprovalRecord } from "./approval-manager.js";
+import { ApprovalManager, ApprovalPolicy, ApprovalRecord } from "./approval-manager.js";
 import { ReviewIntegrityResult } from "./review-integrity.js";
 import { ClaudeMcpConfigResult, ClaudeMcpServerName } from "./claude-mcp-config.js";
 import { type MistralAgentMode, type ClaudePermissionMode, type CodexSandboxMode, type CodexAskForApproval, type ClaudeEffortLevel } from "./request-helpers.js";
@@ -60,8 +60,8 @@ export declare const WORKTREE_SCHEMA: z.ZodUnion<[z.ZodBoolean, z.ZodObject<{
     ref?: string | undefined;
 }>]>;
 export declare const WORKSPACE_ALIAS_SCHEMA: z.ZodString;
-export declare const SESSION_PROVIDER_VALUES: readonly ["claude", "codex", "gemini", "grok", "mistral", "devin", "grok-api"];
-export declare const SESSION_PROVIDER_ENUM: z.ZodEnum<["claude", "codex", "gemini", "grok", "mistral", "devin", "grok-api"]>;
+export declare const SESSION_PROVIDER_VALUES: readonly ["claude", "codex", "gemini", "grok", "mistral", "devin", "cursor", "grok-api"];
+export declare const SESSION_PROVIDER_ENUM: z.ZodEnum<["claude", "codex", "gemini", "grok", "mistral", "devin", "cursor", "grok-api"]>;
 export declare function sessionProviderValuesFor(providers: ProvidersConfig): string[];
 export type SessionProvider = ProviderType;
 export interface GatewayServerDeps {
@@ -154,7 +154,7 @@ export declare function createErrorResponse(cli: string, code: number, stderr: s
         retryable?: undefined;
     };
 };
-export declare function extractUsageAndCost(cli: "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin", output: string, outputFormat?: string, ctx?: {
+export declare function extractUsageAndCost(cli: CliType, output: string, outputFormat?: string, ctx?: {
     sessionId?: string;
     home?: string;
 }): {
@@ -348,7 +348,7 @@ export declare function buildMistralRetryPrep(params: Pick<MistralRequestParams,
     env: Record<string, string>;
     ignoredDisallowedTools: boolean;
 };
-export declare function buildCliResponse(cli: "claude" | "codex" | "gemini" | "grok" | "mistral" | "devin", stdout: string, optimizeResponse: boolean, corrId: string, sessionId: string | undefined, prep: CliRequestPrep, durationMs: number, resumable?: boolean, outputFormat?: string, warnings?: WarningEntry[]): ExtendedToolResponse;
+export declare function buildCliResponse(cli: CliType, stdout: string, optimizeResponse: boolean, corrId: string, sessionId: string | undefined, prep: CliRequestPrep, durationMs: number, resumable?: boolean, outputFormat?: string, warnings?: WarningEntry[]): ExtendedToolResponse;
 export interface GrokApiRequestParams {
     prompt?: string;
     promptParts?: PromptParts;
@@ -522,6 +522,48 @@ export declare function prepareDevinRequest(params: {
 }, _runtime: GatewayServerRuntime): CliRequestPrep | ExtendedToolResponse;
 export declare function handleDevinRequest(deps: HandlerDeps, params: DevinRequestParams): Promise<ExtendedToolResponse>;
 export declare function handleDevinRequestAsync(deps: AsyncHandlerDeps, params: Omit<DevinRequestParams, "optimizeResponse">): Promise<ExtendedToolResponse>;
+export interface CursorRequestParams {
+    prompt?: string;
+    model?: string;
+    mode?: "plan" | "ask";
+    outputFormat?: "text" | "json" | "stream-json";
+    transport?: "cli" | "acp";
+    force?: boolean;
+    autoReview?: boolean;
+    sandbox?: "enabled" | "disabled";
+    trust?: boolean;
+    workspace?: string;
+    addDir?: string[];
+    sessionId?: string;
+    resumeLatest?: boolean;
+    createNewSession?: boolean;
+    approvalStrategy?: "legacy" | "mcp_managed";
+    approvalPolicy?: ApprovalPolicy;
+    correlationId?: string;
+    optimizePrompt: boolean;
+    optimizeResponse?: boolean;
+    idleTimeoutMs?: number;
+    forceRefresh?: boolean;
+}
+export declare function prepareCursorRequest(params: {
+    prompt?: string;
+    model?: string;
+    mode?: CursorRequestParams["mode"];
+    outputFormat?: CursorRequestParams["outputFormat"];
+    force?: boolean;
+    autoReview?: boolean;
+    sandbox?: CursorRequestParams["sandbox"];
+    trust?: boolean;
+    workspace?: string;
+    addDir?: string[];
+    approvalStrategy?: CursorRequestParams["approvalStrategy"];
+    approvalPolicy?: CursorRequestParams["approvalPolicy"];
+    correlationId?: string;
+    optimizePrompt: boolean;
+    operation: string;
+}, runtime: GatewayServerRuntime): CliRequestPrep | ExtendedToolResponse;
+export declare function handleCursorRequest(deps: HandlerDeps, params: CursorRequestParams): Promise<ExtendedToolResponse>;
+export declare function handleCursorRequestAsync(deps: AsyncHandlerDeps, params: Omit<CursorRequestParams, "optimizeResponse">): Promise<ExtendedToolResponse>;
 export interface MistralRequestParams {
     prompt?: string;
     promptParts?: PromptParts;