ocx-cursor 1.0.2 → 1.0.3

package/README.md

@@ -6,7 +6,7 @@
 Use your active [OpenCodex](https://github.com/lidge-jun/opencodex) models in Cursor through an authenticated HTTPS endpoint on your Mac.
 
 > [!WARNING]
-> The installer edits two private workbench files inside `Cursor.app`. This invalidates Cursor's vendor signature, so the bridge removes the app's quarantine attribute after each patch to prevent macOS from reporting a corrupt installation. The bridge saves the original files under `~/.opencodex/cursor-bridge/cursor-app-backups`. Reinstall Cursor to restore a vendor-signed app.
+> The installer edits two private workbench files inside `Cursor.app`. This invalidates Cursor's vendor signature, so the bridge applies a local ad-hoc seal and removes the app's quarantine attribute after each patch to prevent macOS from reporting a corrupt installation. The bridge saves the original files under `~/.opencodex/cursor-bridge/cursor-app-backups`. Reinstall Cursor to restore a vendor-signed app.
 
 ## Requirements
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ocx-cursor",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Use OpenCodex models in Cursor through an authenticated HTTPS gateway",
   "keywords": [
     "opencodex",

package/src/cursor-patch.mjs

@@ -45,6 +45,14 @@ export function clearCursorAppQuarantine(options = {}) {
   });
 }
 
+export function finalizeCursorAppPatch(options = {}) {
+  const execute = options.execFileSync || execFileSync;
+  const appPath = options.appPath || cursorAppPath;
+  execute("/usr/bin/codesign", ["--force", "--sign", "-", appPath], { stdio: "ignore" });
+  execute("/usr/bin/codesign", ["--verify", "--deep", "--strict", appPath], { stdio: "ignore" });
+  clearCursorAppQuarantine({ ...options, appPath, execFileSync: execute });
+}
+
 function replaceSingleMatch(source, pattern, replacement, label) {
   const matches = [...source.matchAll(pattern)];
   if (matches.length !== 1) throw new Error(`Expected one Cursor ${label}, found ${matches.length}`);
@@ -433,8 +441,14 @@ export function startCursorPatchMonitor(options = {}) {
       }));
       if (retryAfterStabilityDelay) resetStability();
       const patched = results.filter((result) => result?.status === "patched");
-      if (patched.length > 0) await options.onPatched?.(patched);
-      if (results.length === files.length && results.every(Boolean)) await options.onReady?.(results);
+      try {
+        if (patched.length > 0) await options.onPatched?.(patched);
+        if (results.length === files.length && results.every(Boolean)) await options.onReady?.(results);
+      } catch (error) {
+        resetStability();
+        lastSignatures.clear();
+        options.onError?.(error, options.appPath || cursorAppPath);
+      }
       return results;
     })().finally(() => {
       patchPromise = null;

package/src/install.mjs

@@ -4,7 +4,7 @@ import { access, chmod, copyFile, cp, lstat, mkdir, mkdtemp, readFile, readlink,
 import { tmpdir } from "node:os";
 import { dirname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { clearCursorAppQuarantine, ensureCursorModelMetadataPatched } from "./cursor-patch.mjs";
+import { ensureCursorModelMetadataPatched, finalizeCursorAppPatch } from "./cursor-patch.mjs";
 import { cursorIsRunning } from "./cursor-state.mjs";
 import {
   cliLinkFile,
@@ -210,8 +210,8 @@ export async function repairCursorMetadataPatch(options = {}) {
     file,
     ...await patchFile({ file }),
   })));
-  const clearQuarantine = options.clearCursorAppQuarantine || clearCursorAppQuarantine;
-  clearQuarantine({ appPath });
+  const finalizePatch = options.finalizeCursorAppPatch || finalizeCursorAppPatch;
+  finalizePatch({ appPath });
   return patches;
 }
 

package/src/service.mjs

@@ -1,7 +1,7 @@
 import { randomBytes } from "node:crypto";
 import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
 import { buildActiveCatalog } from "./catalog.mjs";
-import { clearCursorAppQuarantine, startCursorModelMetadataPatchMonitor } from "./cursor-patch.mjs";
+import { finalizeCursorAppPatch, startCursorModelMetadataPatchMonitor } from "./cursor-patch.mjs";
 import {
   cursorIsRunning,
   cursorUpdateIsRunning,
@@ -72,13 +72,10 @@ export async function runService(options = {}) {
       if (result.status === "patched") process.stdout.write(`Patched Cursor app file ${result.file} (backup: ${result.backupPath})\n`);
     },
     onPatched: () => {
-      try {
-        clearCursorAppQuarantine();
-      } catch (error) {
-        process.stderr.write(`Cursor quarantine removal failed: ${error.message}\n`);
-      }
+      finalizeCursorAppPatch();
     },
-    onReady: () => {
+    onReady: (results) => {
+      if (results.every(({ status }) => status === "already-patched")) finalizeCursorAppPatch();
       cursorPatchReady = true;
       wasCursorRunning = true;
     },