ocx-cursor 1.0.2 → 1.0.4

package/README.md

@@ -6,7 +6,7 @@
 Use your active [OpenCodex](https://github.com/lidge-jun/opencodex) models in Cursor through an authenticated HTTPS endpoint on your Mac.
 
 > [!WARNING]
-> The installer edits two private workbench files inside `Cursor.app`. This invalidates Cursor's vendor signature, so the bridge removes the app's quarantine attribute after each patch to prevent macOS from reporting a corrupt installation. The bridge saves the original files under `~/.opencodex/cursor-bridge/cursor-app-backups`. Reinstall Cursor to restore a vendor-signed app.
+> The installer edits two private workbench files inside `Cursor.app`. This invalidates Cursor's vendor signature, so the bridge applies a local ad-hoc seal and removes the app's quarantine attribute after each patch to prevent macOS from reporting a corrupt installation. The bridge saves the original files under `~/.opencodex/cursor-bridge/cursor-app-backups`. Reinstall Cursor to restore a vendor-signed app.
 
 ## Requirements
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ocx-cursor",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Use OpenCodex models in Cursor through an authenticated HTTPS gateway",
   "keywords": [
     "opencodex",

package/src/catalog.mjs

@@ -73,6 +73,30 @@ export function priorityModelIds(catalogFile = configuredCodexCatalogFile()) {
   }
 }
 
+export function codexNativeModels(catalogFile = configuredCodexCatalogFile()) {
+  try {
+    const payload = JSON.parse(readFileSync(catalogFile, "utf8"));
+    return payload.models
+      .filter((model) => typeof model?.slug === "string"
+        && !model.slug.includes("/")
+        && model.visibility === "list"
+        && model.supported_in_api === true
+        && model.opencodex_capability_provenance === undefined)
+      .map((model) => ({
+        id: model.slug,
+        owned_by: "openai",
+        capabilities: {
+          input_modalities: model.input_modalities,
+          context_length: model.context_window,
+          max_output_tokens: model.max_output_tokens,
+          reasoning_effort: model.supported_reasoning_levels?.map(({ effort }) => effort),
+        },
+      }));
+  } catch {
+    return [];
+  }
+}
+
 export function normalizeActiveCatalog(configured, active, fastModelIds = new Set()) {
   const configuredById = new Map(configured
     .filter((model) => typeof model.provider === "string" && typeof model.model === "string")
@@ -141,9 +165,10 @@ export async function activeModels(fetchImpl = fetch) {
 }
 
 export async function buildActiveCatalog(options = {}) {
+  const codexCatalogFile = options.codexCatalogFile || configuredCodexCatalogFile();
   return normalizeActiveCatalog(
     configuredModels(options.ocxBin),
-    await activeModels(options.fetchImpl),
-    options.fastModelIds || priorityModelIds(options.codexCatalogFile),
+    [...await activeModels(options.fetchImpl), ...codexNativeModels(codexCatalogFile)],
+    options.fastModelIds || priorityModelIds(codexCatalogFile),
   );
 }

package/src/cursor-patch.mjs

@@ -45,6 +45,14 @@ export function clearCursorAppQuarantine(options = {}) {
   });
 }
 
+export function finalizeCursorAppPatch(options = {}) {
+  const execute = options.execFileSync || execFileSync;
+  const appPath = options.appPath || cursorAppPath;
+  execute("/usr/bin/codesign", ["--force", "--sign", "-", appPath], { stdio: "ignore" });
+  execute("/usr/bin/codesign", ["--verify", "--deep", "--strict", appPath], { stdio: "ignore" });
+  clearCursorAppQuarantine({ ...options, appPath, execFileSync: execute });
+}
+
 function replaceSingleMatch(source, pattern, replacement, label) {
   const matches = [...source.matchAll(pattern)];
   if (matches.length !== 1) throw new Error(`Expected one Cursor ${label}, found ${matches.length}`);
@@ -433,8 +441,14 @@ export function startCursorPatchMonitor(options = {}) {
       }));
       if (retryAfterStabilityDelay) resetStability();
       const patched = results.filter((result) => result?.status === "patched");
-      if (patched.length > 0) await options.onPatched?.(patched);
-      if (results.length === files.length && results.every(Boolean)) await options.onReady?.(results);
+      try {
+        if (patched.length > 0) await options.onPatched?.(patched);
+        if (results.length === files.length && results.every(Boolean)) await options.onReady?.(results);
+      } catch (error) {
+        resetStability();
+        lastSignatures.clear();
+        options.onError?.(error, options.appPath || cursorAppPath);
+      }
       return results;
     })().finally(() => {
       patchPromise = null;

package/src/install.mjs

@@ -4,7 +4,7 @@ import { access, chmod, copyFile, cp, lstat, mkdir, mkdtemp, readFile, readlink,
 import { tmpdir } from "node:os";
 import { dirname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { clearCursorAppQuarantine, ensureCursorModelMetadataPatched } from "./cursor-patch.mjs";
+import { ensureCursorModelMetadataPatched, finalizeCursorAppPatch } from "./cursor-patch.mjs";
 import { cursorIsRunning } from "./cursor-state.mjs";
 import {
   cliLinkFile,
@@ -210,8 +210,8 @@ export async function repairCursorMetadataPatch(options = {}) {
     file,
     ...await patchFile({ file }),
   })));
-  const clearQuarantine = options.clearCursorAppQuarantine || clearCursorAppQuarantine;
-  clearQuarantine({ appPath });
+  const finalizePatch = options.finalizeCursorAppPatch || finalizeCursorAppPatch;
+  finalizePatch({ appPath });
   return patches;
 }
 

package/src/service.mjs

@@ -1,7 +1,7 @@
 import { randomBytes } from "node:crypto";
 import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
 import { buildActiveCatalog } from "./catalog.mjs";
-import { clearCursorAppQuarantine, startCursorModelMetadataPatchMonitor } from "./cursor-patch.mjs";
+import { finalizeCursorAppPatch, startCursorModelMetadataPatchMonitor } from "./cursor-patch.mjs";
 import {
   cursorIsRunning,
   cursorUpdateIsRunning,
@@ -72,13 +72,10 @@ export async function runService(options = {}) {
       if (result.status === "patched") process.stdout.write(`Patched Cursor app file ${result.file} (backup: ${result.backupPath})\n`);
     },
     onPatched: () => {
-      try {
-        clearCursorAppQuarantine();
-      } catch (error) {
-        process.stderr.write(`Cursor quarantine removal failed: ${error.message}\n`);
-      }
+      finalizeCursorAppPatch();
     },
-    onReady: () => {
+    onReady: (results) => {
+      if (results.every(({ status }) => status === "already-patched")) finalizeCursorAppPatch();
       cursorPatchReady = true;
       wasCursorRunning = true;
     },