pi-provider-cursor-ask 0.1.0

package/src/utils/cache-dir.ts

@@ -0,0 +1,39 @@
+/**
+ * On-disk cache location for cross-process state (model catalog, refresh
+ * back-off). Kept out of the pi config dir: everything here is derived data
+ * that can be deleted at any time without losing user configuration.
+ */
+import { mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join as pathJoin } from "node:path";
+
+let cachedDir: string | undefined;
+
+/** Resolve (and create) the cache directory. Returns undefined if unusable. */
+export function getCacheDir(): string | undefined {
+  if (cachedDir !== undefined) return cachedDir || undefined;
+  const configured = process.env.PI_CURSOR_CACHE_DIR?.trim();
+  const base =
+    configured ||
+    pathJoin(process.env.XDG_CACHE_HOME?.trim() || pathJoin(homedir(), ".cache"), "pi-cursor");
+  try {
+    mkdirSync(base, { recursive: true, mode: 0o700 });
+    cachedDir = base;
+    return base;
+  } catch {
+    // Read-only home / sandbox: callers fall back to in-memory only.
+    cachedDir = "";
+    return undefined;
+  }
+}
+
+/** Absolute path for a cache file, or undefined when no cache dir is usable. */
+export function cacheFilePath(name: string): string | undefined {
+  const dir = getCacheDir();
+  return dir ? pathJoin(dir, name) : undefined;
+}
+
+/** Test helper: forget the resolved directory between cases. */
+export function resetCacheDirForTests(): void {
+  cachedDir = undefined;
+}

package/src/utils/index.ts

@@ -0,0 +1,2 @@
+export * from "./util.js";
+export * from "./security.js";

package/src/utils/security.ts

@@ -0,0 +1,68 @@
+import { cursorEnv } from "./util.js";
+
+const ALLOWED_HOST_SUFFIXES = [".cursor.sh", ".cursor.com"];
+const ALLOWED_HOSTS = new Set([
+  "cursor.sh",
+  "cursor.com",
+  "api2.cursor.sh",
+  "authenticator.cursor.sh",
+]);
+
+/** Prevent token exfiltration via poisoned agent URL. */
+export function assertSafeCursorBaseUrl(raw: string): string {
+  let url: URL;
+  try {
+    url = new URL(raw);
+  } catch {
+    throw new Error(`Invalid Cursor agent URL: ${raw}`);
+  }
+  if (url.username || url.password) {
+    throw new Error("Cursor agent URL must not include credentials");
+  }
+  const host = url.hostname.toLowerCase();
+  const loopback =
+    host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:")) {
+    throw new Error(
+      `Cursor agent URL must use HTTPS; HTTP is allowed only for loopback development endpoints (got ${url.protocol})`,
+    );
+  }
+  const allowed =
+    ALLOWED_HOSTS.has(host) ||
+    ALLOWED_HOST_SUFFIXES.some((suffix) => host.endsWith(suffix)) ||
+    loopback;
+  if (!allowed) {
+    throw new Error(
+      `Cursor agent URL host "${host}" is not allowed. Use a *.cursor.sh / *.cursor.com endpoint.`,
+    );
+  }
+  const path = url.pathname.replace(/\/+$/, "");
+  return `${url.origin}${path === "/" ? "" : path}`;
+}
+
+/** Redact JWTs, bearer tokens, and common secret keys from diagnostics/errors. */
+export function redactSecrets(text: string): string {
+  return text
+    .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[redacted-jwt]")
+    .replace(/\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi, "Bearer [redacted]")
+    .replace(
+      /("?(?:access_token|refresh_token|accessToken|refreshToken|token|authorization|code_verifier)"?\s*[:=]\s*")[^"]*(")/gi,
+      "$1[redacted]$2",
+    )
+    .replace(
+      /("?(?:access_token|refresh_token|accessToken|refreshToken|token|authorization|code_verifier)"?\s*[:=]\s*)[^\s&,}]+/gi,
+      "$1[redacted]",
+    );
+}
+
+export function safeError(error: unknown): string {
+  const raw = error instanceof Error ? error.message : String(error);
+  return redactSecrets(raw);
+}
+
+export function debugEnabled(): boolean {
+  const raw = (cursorEnv("DEBUG") || process.env.PI_CURSOR_PROVIDER_DEBUG || "")
+    .trim()
+    .toLowerCase();
+  return !!raw && raw !== "0" && raw !== "false" && raw !== "off";
+}

package/src/utils/util.ts

@@ -0,0 +1,43 @@
+export function cursorEnv(name: string): string | undefined {
+  return (
+    process.env[`PI_CURSOR_${name}`] ||
+    process.env[`CURSOR_${name}`] ||
+    process.env[`PI_CURSOR_PROVIDER_${name}`]
+  );
+}
+
+export function isTruthyEnv(value: string | undefined): boolean {
+  if (!value) return false;
+  const raw = value.trim().toLowerCase();
+  return raw === "1" || raw === "true" || raw === "on" || raw === "allow" || raw === "yes";
+}
+
+export function isFalsyEnv(value: string | undefined): boolean {
+  if (!value) return false;
+  const raw = value.trim().toLowerCase();
+  return raw === "0" || raw === "false" || raw === "off" || raw === "deny" || raw === "no";
+}
+
+export function cursorEnvBoolean(name: string, defaultValue = false): boolean {
+  const env = cursorEnv(name);
+  if (env === undefined) return defaultValue;
+  if (isFalsyEnv(env)) return false;
+  if (isTruthyEnv(env)) return true;
+  return defaultValue;
+}
+
+export function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+export function asString(value: unknown): string | undefined {
+  return typeof value === "string" && value ? value : undefined;
+}
+
+/** Replace lone (unpaired) surrogates with U+FFFD; valid surrogate pairs (e.g. emoji) pass through. */
+export function sanitizeText(text: unknown): string {
+  return String(text ?? "").replace(
+    /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g,
+    "\uFFFD",
+  );
+}