opencode-cursor-oauth 0.0.1

package/README.md

@@ -0,0 +1,94 @@
+# opencode-cursor-oauth
+
+OpenCode plugin that connects to Cursor's API, giving you access to Cursor
+models inside OpenCode with full tool-calling support.
+
+## Install in OpenCode
+
+Add this to `~/.config/opencode/opencode.json`:
+
+```jsonc
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugin": [
+    "opencode-cursor-oauth"
+  ],
+  "provider": {
+    "cursor": {
+      "name": "Cursor"
+    }
+  }
+}
+```
+
+The `cursor` provider stub is required because OpenCode drops providers that do
+not already exist in its bundled provider catalog.
+
+OpenCode installs npm plugins automatically at startup, so users do not need to
+clone this repository.
+
+## Authenticate
+
+```sh
+opencode auth login --provider cursor
+```
+
+This opens Cursor OAuth in the browser. Tokens are stored in
+`~/.local/share/opencode/auth.json` and refreshed automatically.
+
+## Use
+
+Start OpenCode and select any Cursor model. The plugin starts a local
+OpenAI-compatible proxy on demand and routes requests through Cursor's gRPC API.
+
+## How it works
+
+1. OAuth — browser-based login to Cursor via PKCE.
+2. Model discovery — queries Cursor's gRPC API for all available models.
+3. Local proxy — translates `POST /v1/chat/completions` into Cursor's
+   protobuf/HTTP/2 Connect protocol.
+4. Native tool routing — rejects Cursor's built-in filesystem/shell tools and
+   exposes OpenCode's tool surface via Cursor MCP instead.
+
+HTTP/2 transport runs through a Node child process (`h2-bridge.mjs`) because
+Bun's `node:http2` support is not reliable against Cursor's API.
+
+## Architecture
+
+```
+OpenCode  -->  /v1/chat/completions  -->  Bun.serve (proxy)
+                                              |
+                                    Node child process (h2-bridge.mjs)
+                                              |
+                                     HTTP/2 Connect stream
+                                              |
+                                    api2.cursor.sh gRPC
+                                      /agent.v1.AgentService/Run
+```
+
+### Tool call flow
+
+```
+1. Cursor model receives OpenAI tools via RequestContext (as MCP tool defs)
+2. Model tries native tools (readArgs, shellArgs, etc.)
+3. Proxy rejects each with typed error (ReadRejected, ShellRejected, etc.)
+4. Model falls back to MCP tool -> mcpArgs exec message
+5. Proxy emits OpenAI tool_calls SSE chunk, pauses H2 stream
+6. OpenCode executes tool, sends result in follow-up request
+7. Proxy resumes H2 stream with mcpResult, streams continuation
+```
+
+## Develop locally
+
+```sh
+bun install
+bun run build
+bun test/smoke.ts
+```
+
+## Requirements
+
+- [OpenCode](https://opencode.ai)
+- [Bun](https://bun.sh)
+- [Node.js](https://nodejs.org) >= 18 for the HTTP/2 bridge process
+- Active [Cursor](https://cursor.com) subscription

package/dist/auth.d.ts

@@ -0,0 +1,22 @@
+export interface CursorAuthParams {
+    verifier: string;
+    challenge: string;
+    uuid: string;
+    loginUrl: string;
+}
+export interface CursorCredentials {
+    access: string;
+    refresh: string;
+    expires: number;
+}
+export declare function generateCursorAuthParams(): Promise<CursorAuthParams>;
+export declare function pollCursorAuth(uuid: string, verifier: string): Promise<{
+    accessToken: string;
+    refreshToken: string;
+}>;
+export declare function refreshCursorToken(refreshToken: string): Promise<CursorCredentials>;
+/**
+ * Extract JWT expiry with 5-minute safety margin.
+ * Falls back to 1 hour from now if token can't be parsed.
+ */
+export declare function getTokenExpiry(token: string): number;

package/dist/auth.js

@@ -0,0 +1,98 @@
+/**
+ * Cursor OAuth authentication.
+ * Handles PKCE-based login, polling, and token refresh.
+ */
+import { generatePKCE } from "./pkce";
+const CURSOR_LOGIN_URL = "https://cursor.com/loginDeepControl";
+const CURSOR_POLL_URL = "https://api2.cursor.sh/auth/poll";
+const CURSOR_REFRESH_URL = "https://api2.cursor.sh/auth/exchange_user_api_key";
+const POLL_MAX_ATTEMPTS = 150;
+const POLL_BASE_DELAY = 1000;
+const POLL_MAX_DELAY = 10_000;
+const POLL_BACKOFF_MULTIPLIER = 1.2;
+export async function generateCursorAuthParams() {
+    const { verifier, challenge } = await generatePKCE();
+    const uuid = crypto.randomUUID();
+    const params = new URLSearchParams({
+        challenge,
+        uuid,
+        mode: "login",
+        redirectTarget: "cli",
+    });
+    const loginUrl = `${CURSOR_LOGIN_URL}?${params.toString()}`;
+    return { verifier, challenge, uuid, loginUrl };
+}
+export async function pollCursorAuth(uuid, verifier) {
+    let delay = POLL_BASE_DELAY;
+    let consecutiveErrors = 0;
+    for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS; attempt++) {
+        await Bun.sleep(delay);
+        try {
+            const response = await fetch(`${CURSOR_POLL_URL}?uuid=${uuid}&verifier=${verifier}`);
+            if (response.status === 404) {
+                // User hasn't completed login yet
+                consecutiveErrors = 0;
+                delay = Math.min(delay * POLL_BACKOFF_MULTIPLIER, POLL_MAX_DELAY);
+                continue;
+            }
+            if (response.ok) {
+                const data = (await response.json());
+                return {
+                    accessToken: data.accessToken,
+                    refreshToken: data.refreshToken,
+                };
+            }
+            throw new Error(`Poll failed: ${response.status}`);
+        }
+        catch {
+            consecutiveErrors++;
+            if (consecutiveErrors >= 3) {
+                throw new Error("Too many consecutive errors during Cursor auth polling");
+            }
+        }
+    }
+    throw new Error("Cursor authentication polling timeout");
+}
+export async function refreshCursorToken(refreshToken) {
+    const response = await fetch(CURSOR_REFRESH_URL, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${refreshToken}`,
+            "Content-Type": "application/json",
+        },
+        body: "{}",
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Cursor token refresh failed: ${error}`);
+    }
+    const data = (await response.json());
+    return {
+        access: data.accessToken,
+        refresh: data.refreshToken || refreshToken,
+        expires: getTokenExpiry(data.accessToken),
+    };
+}
+/**
+ * Extract JWT expiry with 5-minute safety margin.
+ * Falls back to 1 hour from now if token can't be parsed.
+ */
+export function getTokenExpiry(token) {
+    try {
+        const parts = token.split(".");
+        if (parts.length !== 3 || !parts[1]) {
+            return Date.now() + 3600 * 1000;
+        }
+        const decoded = JSON.parse(atob(parts[1].replace(/-/g, "+").replace(/_/g, "/")));
+        if (decoded &&
+            typeof decoded === "object" &&
+            typeof decoded.exp === "number") {
+            // 5-minute safety margin before actual expiry
+            return decoded.exp * 1000 - 5 * 60 * 1000;
+        }
+    }
+    catch {
+        // Ignore parsing errors
+    }
+    return Date.now() + 3600 * 1000;
+}

package/dist/h2-bridge.mjs

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+/**
+ * Dumb HTTP/2 bidirectional pipe for Cursor gRPC.
+ *
+ * Bun's node:http2 is broken. This Node script acts as a transparent
+ * HTTP/2 proxy: it opens a single bidirectional stream and ferries
+ * raw bytes between the parent process (via stdin/stdout) and Cursor.
+ *
+ * Protocol (length-prefixed framing over stdin/stdout):
+ *   [4 bytes big-endian length][payload]
+ *
+ * First message on stdin is JSON config:
+ *   { "accessToken": "...", "url": "...", "path": "..." }
+ *
+ * After config, subsequent stdin messages are raw bytes to write to the H2 stream.
+ * H2 response data is written to stdout using the same length-prefixed framing.
+ */
+import http2 from "node:http2";
+import crypto from "node:crypto";
+
+const CURSOR_CLIENT_VERSION = "cli-2026.01.09-231024f";
+
+/** Write one length-prefixed message to stdout. */
+function writeMessage(data) {
+  const lenBuf = Buffer.alloc(4);
+  lenBuf.writeUInt32BE(data.length, 0);
+  process.stdout.write(lenBuf);
+  process.stdout.write(data);
+}
+
+// --- Buffered stdin reader ---
+
+let stdinBuf = Buffer.alloc(0);
+let stdinResolve = null;
+let stdinEnded = false;
+
+process.stdin.on("data", (chunk) => {
+  stdinBuf = Buffer.concat([stdinBuf, chunk]);
+  if (stdinResolve) {
+    const r = stdinResolve;
+    stdinResolve = null;
+    r();
+  }
+});
+
+process.stdin.on("end", () => {
+  stdinEnded = true;
+  if (stdinResolve) {
+    const r = stdinResolve;
+    stdinResolve = null;
+    r();
+  }
+});
+
+function waitForData() {
+  return new Promise((resolve) => { stdinResolve = resolve; });
+}
+
+async function readExact(n) {
+  while (stdinBuf.length < n) {
+    if (stdinEnded) return null;
+    await waitForData();
+  }
+  const result = stdinBuf.subarray(0, n);
+  stdinBuf = stdinBuf.subarray(n);
+  return Buffer.from(result);
+}
+
+async function readMessage() {
+  const lenBuf = await readExact(4);
+  if (!lenBuf) return null;
+  const len = lenBuf.readUInt32BE(0);
+  if (len === 0) return Buffer.alloc(0);
+  return readExact(len);
+}
+
+// --- Main ---
+
+const configBuf = await readMessage();
+if (!configBuf) process.exit(1);
+
+const config = JSON.parse(configBuf.toString("utf8"));
+const { accessToken, url, path: rpcPath } = config;
+
+const client = http2.connect(url || "https://api2.cursor.sh");
+
+const timeout = setTimeout(() => {
+  client.destroy();
+  process.exit(1);
+}, 120_000);
+
+client.on("error", () => {
+  clearTimeout(timeout);
+  process.exit(1);
+});
+
+const h2Stream = client.request({
+  ":method": "POST",
+  ":path": rpcPath || "/agent.v1.AgentService/Run",
+  "content-type": "application/connect+proto",
+  "connect-protocol-version": "1",
+  te: "trailers",
+  authorization: `Bearer ${accessToken}`,
+  "x-ghost-mode": "true",
+  "x-cursor-client-version": CURSOR_CLIENT_VERSION,
+  "x-cursor-client-type": "cli",
+  "x-request-id": crypto.randomUUID(),
+});
+
+// Forward H2 response data → stdout (length-prefixed)
+h2Stream.on("data", (chunk) => {
+  writeMessage(chunk);
+});
+
+h2Stream.on("end", () => {
+  clearTimeout(timeout);
+  client.close();
+  // Give stdout time to flush
+  setTimeout(() => process.exit(0), 100);
+});
+
+h2Stream.on("error", () => {
+  clearTimeout(timeout);
+  client.close();
+  process.exit(1);
+});
+
+// Forward stdin → H2 stream (after config message)
+(async () => {
+  while (true) {
+    const msg = await readMessage();
+    if (!msg || msg.length === 0) {
+      // EOF or zero-length = done writing
+      break;
+    }
+    if (!h2Stream.closed && !h2Stream.destroyed) {
+      h2Stream.write(msg);
+    }
+  }
+})();

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * OpenCode Cursor Auth Plugin
+ *
+ * Enables using Cursor models (Claude, GPT, etc.) inside OpenCode via:
+ * 1. Browser-based OAuth login to Cursor
+ * 2. Local proxy translating OpenAI format → Cursor gRPC protocol
+ */
+import type { Plugin } from "@opencode-ai/plugin";
+/**
+ * OpenCode plugin that provides Cursor authentication and model access.
+ * Register in opencode.json: { "plugin": ["opencode-cursor-oauth"] }
+ */
+export declare const CursorAuthPlugin: Plugin;
+export default CursorAuthPlugin;

package/dist/index.js

@@ -0,0 +1,157 @@
+import { generateCursorAuthParams, getTokenExpiry, pollCursorAuth, refreshCursorToken, } from "./auth";
+import { getCursorModels } from "./models";
+import { startProxy } from "./proxy";
+const CURSOR_PROVIDER_ID = "cursor";
+/**
+ * OpenCode plugin that provides Cursor authentication and model access.
+ * Register in opencode.json: { "plugin": ["opencode-cursor-oauth"] }
+ */
+export const CursorAuthPlugin = async (input) => {
+    return {
+        auth: {
+            provider: CURSOR_PROVIDER_ID,
+            async loader(getAuth, provider) {
+                const auth = await getAuth();
+                if (!auth || auth.type !== "oauth")
+                    return {};
+                // Start local proxy if not already running
+                const port = await startProxy(async () => {
+                    const currentAuth = await getAuth();
+                    if (currentAuth.type !== "oauth") {
+                        throw new Error("Cursor auth not configured");
+                    }
+                    // Refresh token if expired
+                    if (!currentAuth.access || currentAuth.expires < Date.now()) {
+                        const refreshed = await refreshCursorToken(currentAuth.refresh);
+                        await input.client.auth.set({
+                            path: { id: CURSOR_PROVIDER_ID },
+                            body: {
+                                type: "oauth",
+                                refresh: refreshed.refresh,
+                                access: refreshed.access,
+                                expires: refreshed.expires,
+                            },
+                        });
+                        return refreshed.access;
+                    }
+                    return currentAuth.access;
+                });
+                // Discover models and inject into provider
+                if (provider) {
+                    if (!provider.models)
+                        provider.models = {};
+                    try {
+                        const models = await getCursorModels(auth.access);
+                        for (const model of models) {
+                            if (provider.models[model.id])
+                                continue;
+                            // Cast needed: OpenCode's internal Model type requires fields
+                            // (interleaved, release_date, variants) not in the plugin SDK type.
+                            provider.models[model.id] = {
+                                id: model.id,
+                                providerID: CURSOR_PROVIDER_ID,
+                                api: {
+                                    id: model.id,
+                                    url: `http://localhost:${port}/v1`,
+                                    npm: "@ai-sdk/openai-compatible",
+                                },
+                                name: model.name,
+                                capabilities: {
+                                    temperature: true,
+                                    reasoning: model.reasoning,
+                                    attachment: false,
+                                    toolcall: true,
+                                    input: {
+                                        text: true,
+                                        audio: false,
+                                        image: false,
+                                        video: false,
+                                        pdf: false,
+                                    },
+                                    output: {
+                                        text: true,
+                                        audio: false,
+                                        image: false,
+                                        video: false,
+                                        pdf: false,
+                                    },
+                                    interleaved: false,
+                                },
+                                cost: {
+                                    input: 0,
+                                    output: 0,
+                                    cache: { read: 0, write: 0 },
+                                },
+                                limit: {
+                                    context: model.contextWindow,
+                                    output: model.maxTokens,
+                                },
+                                status: "active",
+                                options: {},
+                                headers: {},
+                                release_date: "",
+                                variants: {},
+                            };
+                        }
+                    }
+                    catch {
+                        // Model discovery failed — proxy still works with direct model IDs
+                    }
+                    // Zero out costs for all Cursor models (included with subscription)
+                    for (const model of Object.values(provider.models)) {
+                        model.cost = {
+                            input: 0,
+                            output: 0,
+                            cache: { read: 0, write: 0 },
+                        };
+                    }
+                }
+                return {
+                    baseURL: `http://localhost:${port}/v1`,
+                    apiKey: "cursor-proxy",
+                    async fetch(requestInput, init) {
+                        // Strip any dummy auth headers — proxy handles auth internally
+                        if (init?.headers) {
+                            if (init.headers instanceof Headers) {
+                                init.headers.delete("authorization");
+                                init.headers.delete("Authorization");
+                            }
+                            else if (Array.isArray(init.headers)) {
+                                init.headers = init.headers.filter(([key]) => key.toLowerCase() !== "authorization");
+                            }
+                            else {
+                                delete init.headers["authorization"];
+                                delete init.headers["Authorization"];
+                            }
+                        }
+                        return fetch(requestInput, init);
+                    },
+                };
+            },
+            methods: [
+                {
+                    type: "oauth",
+                    label: "Login with Cursor",
+                    async authorize() {
+                        const { verifier, uuid, loginUrl } = await generateCursorAuthParams();
+                        return {
+                            url: loginUrl,
+                            instructions: "Complete login in your browser. This window will close automatically.",
+                            method: "auto",
+                            async callback() {
+                                const { accessToken, refreshToken } = await pollCursorAuth(uuid, verifier);
+                                return {
+                                    type: "success",
+                                    refresh: refreshToken,
+                                    access: accessToken,
+                                    expires: getTokenExpiry(accessToken),
+                                };
+                            },
+                        };
+                    },
+                },
+            ],
+        },
+    };
+};
+export default CursorAuthPlugin;

package/dist/models.d.ts

@@ -0,0 +1,22 @@
+export interface CursorModel {
+    id: string;
+    name: string;
+    reasoning: boolean;
+    contextWindow: number;
+    maxTokens: number;
+}
+export interface CursorModelDiscoveryOptions {
+    apiKey: string;
+    baseUrl?: string;
+    clientVersion?: string;
+    timeoutMs?: number;
+}
+/**
+ * Fetch models from Cursor's GetUsableModels gRPC endpoint.
+ * Returns null on failure (caller should use fallback list).
+ */
+export declare function fetchCursorUsableModels(options: CursorModelDiscoveryOptions): Promise<CursorModel[] | null>;
+/**
+ * Get cursor models: try dynamic discovery, fall back to hardcoded list.
+ */
+export declare function getCursorModels(apiKey: string): Promise<CursorModel[]>;