zidane 6.2.6 → 6.2.7

package/dist/providers/openai.js

@@ -1,504 +1,2 @@
-import { i as documentBlockMarker, n as assertResolvedMediaBlock } from "../types-BIarq1qE.js";
-import { c as classifyErrorPrelude, d as isRetryableHttpStatus, f as matchesContextExceeded, p as matchesToolPairingError } from "../errors-DJUxZg9b.js";
-import { _ as userMessage, b as fillEstimatedCost, g as toolResultsMessage, s as assistantMessage, w as unsupportedMediaError, y as sanitizeToolSpecs } from "../openai-compat-TA7aihJ-.js";
-import { renderSystemForWire } from "../prompt.js";
-import { n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER } from "../messages-Ce4yRjd3.js";
-import { i as resolveOAuthApiKey, t as extractRuntimeCredentials } from "../oauth-8LqbeI_Q.js";
-import { stream } from "@earendil-works/pi-ai/api/openai-codex-responses";
-import { getBuiltinModel } from "@earendil-works/pi-ai/providers/all";
-//#region src/providers/openai.ts
-const PROVIDER_ID = "openai-codex";
-const DEFAULT_MODEL = "gpt-5.5";
-const lookupModel = getBuiltinModel;
-function resolveModel(modelId) {
-	const model = lookupModel(PROVIDER_ID, modelId);
-	if (model) return model;
-	const fallback = lookupModel(PROVIDER_ID, DEFAULT_MODEL);
-	if (!fallback) throw new Error(`OpenAI Codex model registry is missing the default model: ${DEFAULT_MODEL}`);
-	return {
-		...fallback,
-		id: modelId,
-		name: modelId
-	};
-}
-function emptyUsage() {
-	return {
-		input: 0,
-		output: 0,
-		cacheRead: 0,
-		cacheWrite: 0,
-		totalTokens: 0,
-		cost: {
-			input: 0,
-			output: 0,
-			cacheRead: 0,
-			cacheWrite: 0,
-			total: 0
-		}
-	};
-}
-function formatTools(tools) {
-	return sanitizeToolSpecs(tools, { profile: "openai" }).map((t) => ({
-		name: t.name,
-		description: t.description,
-		parameters: t.inputSchema
-	}));
-}
-function documentMarker(doc) {
-	return documentBlockMarker(doc, "document omitted");
-}
-function piToolResultMessage(result, toolName = "") {
-	const content = typeof result.output === "string" ? [{
-		type: "text",
-		text: result.output
-	}] : result.output.map((block) => {
-		if (block.type === "image") {
-			assertResolvedMediaBlock(block, "OpenAI wire messages");
-			return {
-				type: "image",
-				data: block.data,
-				mimeType: block.mediaType
-			};
-		}
-		if (block.type === "audio") throw unsupportedMediaError("audio", "openai");
-		if (block.type === "video") throw unsupportedMediaError("video", "openai");
-		if (block.type === "document") {
-			assertResolvedMediaBlock(block, "OpenAI wire messages");
-			return {
-				type: "text",
-				text: documentMarker(block)
-			};
-		}
-		return {
-			type: "text",
-			text: block.text
-		};
-	});
-	return {
-		role: "toolResult",
-		toolCallId: result.callId,
-		toolName,
-		content,
-		isError: result.isError ?? false,
-		timestamp: Date.now()
-	};
-}
-function piUserMessage(content) {
-	for (const b of content) {
-		if (b.type === "audio") throw unsupportedMediaError("audio", "openai");
-		if (b.type === "video") throw unsupportedMediaError("video", "openai");
-	}
-	const textBlocks = content.filter((b) => b.type === "text");
-	const imageBlocks = content.filter((b) => b.type === "image");
-	const documentBlocks = content.filter((b) => b.type === "document");
-	if (imageBlocks.length === 0 && textBlocks.length === 0 && documentBlocks.length === 0) return null;
-	if (imageBlocks.length === 0 && documentBlocks.length === 0 && textBlocks.length === 1) return {
-		role: "user",
-		content: textBlocks[0].text,
-		timestamp: Date.now()
-	};
-	return {
-		role: "user",
-		content: [
-			...imageBlocks.map((img) => {
-				assertResolvedMediaBlock(img, "OpenAI wire messages");
-				return {
-					type: "image",
-					data: img.data,
-					mimeType: img.mediaType
-				};
-			}),
-			...documentBlocks.map((block) => {
-				assertResolvedMediaBlock(block, "OpenAI wire messages");
-				return {
-					type: "text",
-					text: documentMarker(block)
-				};
-			}),
-			...textBlocks.map((block) => ({
-				type: "text",
-				text: block.text
-			}))
-		],
-		timestamp: Date.now()
-	};
-}
-function piAssistantMessage(content, modelId) {
-	const piContent = [];
-	for (const block of content) if (block.type === "text") piContent.push({
-		type: "text",
-		text: block.text
-	});
-	else if (block.type === "thinking") {
-		if (block.signatureProducer === "anthropic") continue;
-		piContent.push({
-			type: "thinking",
-			thinking: block.text,
-			thinkingSignature: block.signature
-		});
-	} else if (block.type === "tool_call") piContent.push({
-		type: "toolCall",
-		id: block.id,
-		name: block.name,
-		arguments: block.input
-	});
-	return {
-		role: "assistant",
-		content: piContent,
-		api: "openai-codex-responses",
-		provider: PROVIDER_ID,
-		model: modelId,
-		usage: emptyUsage(),
-		stopReason: "stop",
-		timestamp: Date.now()
-	};
-}
-function toPiMessages(messages, modelId) {
-	const out = [];
-	for (let i = 0; i < messages.length; i++) {
-		const msg = messages[i];
-		const toolCalls = msg.content.filter((b) => b.type === "tool_call");
-		if (msg.role === "assistant" && toolCalls.length > 0) {
-			const next = messages[i + 1];
-			const nextToolResults = next?.role === "user" ? next.content.filter((b) => b.type === "tool_result") : [];
-			const resultById = new Map(nextToolResults.map((result) => [result.callId, result]));
-			let assistantContent = [];
-			for (const block of msg.content) {
-				assistantContent.push(block);
-				if (block.type !== "tool_call") continue;
-				out.push(piAssistantMessage(assistantContent, modelId));
-				assistantContent = [];
-				const result = resultById.get(block.id);
-				if (result) out.push(piToolResultMessage(result, block.name));
-				else out.push(piToolResultMessage({
-					type: "tool_result",
-					callId: block.id,
-					output: SYNTHETIC_TOOL_RESULT_PLACEHOLDER,
-					isError: true
-				}, block.name));
-			}
-			if (assistantContent.length > 0) out.push(piAssistantMessage(assistantContent, modelId));
-			if (next?.role === "user") {
-				const userMessage = piUserMessage(next.content.filter((block) => {
-					if (block.type !== "tool_result") return true;
-					return false;
-				}));
-				if (userMessage) out.push(userMessage);
-				i++;
-			}
-			continue;
-		}
-		if (msg.content.filter((b) => b.type === "tool_result").length > 0) {
-			const userMsg = msg.role === "user" ? piUserMessage(msg.content.filter((b) => b.type !== "tool_result")) : null;
-			if (userMsg) out.push(userMsg);
-			continue;
-		}
-		if (msg.role === "user") {
-			const userMsg = piUserMessage(msg.content);
-			if (userMsg) out.push(userMsg);
-			continue;
-		}
-		out.push(piAssistantMessage(msg.content, modelId));
-	}
-	return out;
-}
-/**
-* Map pi-ai's `StopReason` to the zidane `TurnFinishReason` union — the same
-* native-stop-reason fidelity anthropic's `mapStopReason` / openai-compat's
-* `mapOAIFinishReason` provide. Notably `length` (max-token truncation) is no
-* longer misreported as a clean `stop`. `hasToolCalls` is the fallback for
-* messages whose stop reason is missing or doesn't carry the tool-call signal.
-*/
-function mapCodexStopReason(stopReason, hasToolCalls) {
-	switch (stopReason) {
-		case "toolUse": return "tool-calls";
-		case "length": return "length";
-		case "error": return "error";
-		case "stop": return hasToolCalls ? "tool-calls" : "stop";
-		case "aborted": return "other";
-		default: return hasToolCalls ? "tool-calls" : "stop";
-	}
-}
-function fromPiAssistantMessage(message) {
-	const content = [];
-	for (const block of message.content) if (block.type === "text") content.push({
-		type: "text",
-		text: block.text
-	});
-	else if (block.type === "thinking") {
-		const out = {
-			type: "thinking",
-			text: block.thinking
-		};
-		if (typeof block.thinkingSignature === "string") {
-			out.signature = block.thinkingSignature;
-			out.signatureProducer = "openai";
-		}
-		content.push(out);
-	} else if (block.type === "toolCall") content.push({
-		type: "tool_call",
-		id: block.id,
-		name: block.name,
-		input: block.arguments
-	});
-	return {
-		role: "assistant",
-		content
-	};
-}
-function extractToolCalls(message) {
-	return message.content.filter((block) => block.type === "toolCall").map((block) => ({
-		id: block.id,
-		name: block.name,
-		input: block.arguments
-	}));
-}
-function extractText(message) {
-	return message.content.filter((block) => block.type === "text").map((block) => block.text).join("");
-}
-function toTurnUsage(usage, finishReason, modelId) {
-	return fillEstimatedCost({
-		input: usage.input,
-		output: usage.output,
-		cacheRead: usage.cacheRead || void 0,
-		cacheCreation: usage.cacheWrite || void 0,
-		cost: usage.cost.total || void 0,
-		...finishReason ? { finishReason } : {},
-		modelId
-	}, "openai");
-}
-/**
-* Transient pi-ai error patterns worth a loop-level retry. pi-ai already retries
-* 429 / 5xx pre-stream 3× internally (see `openai-codex-responses.js`); by the
-* time the error reaches us, that budget is exhausted. The loop-level retry
-* with its longer backoff is a second line of defense for capacity events
-* that persist past pi-ai's short retry window, plus mid-stream emissions
-* (pi-ai surfaces those as plain `Error`s with no status).
-*
-* Mirrors pi-ai's own `isRetryableError` regex so the two retry layers
-* recognize the same failure modes.
-*/
-const TRANSIENT_OPENAI_MESSAGE_RE = /rate.?limit|overloaded|service.?unavailable|upstream.?connect|connection.?refused|gateway.?time.?out|temporarily.?unavailable/i;
-/** Numeric HTTP status codes pi-ai sometimes attaches when bubbling structured errors. */
-function isRetryableStatusCode(err) {
-	const status = err.status;
-	if (typeof status !== "number") return false;
-	return isRetryableHttpStatus(status);
-}
-/**
-* Classify an OpenAI Codex error. pi-ai surfaces errors either as thrown `Error`s
-* (wrapping `event.error.errorMessage`) or via stream event types.
-*
-* Retryable hint is set when pi-ai's own retry budget is exhausted on a
-* transient failure — pattern-matched against `message` since pi-ai strips
-* structured fields on plain-Error throws. Set `behavior.retry.maxAttempts: 1`
-* to disable the loop-level retry.
-*/
-function classifyOpenAIError(err) {
-	const prelude = classifyErrorPrelude(err);
-	if (prelude === "not-object") return null;
-	if (prelude === "aborted") return { kind: "aborted" };
-	const anyErr = err;
-	const message = anyErr.message ?? "";
-	const code = anyErr.code ?? anyErr.type;
-	if (code === "context_length_exceeded" || matchesContextExceeded(message)) return {
-		kind: "context_exceeded",
-		providerCode: code ?? "context_length_exceeded",
-		message
-	};
-	if (matchesToolPairingError(message)) return {
-		kind: "tool_pairing_corruption",
-		providerCode: code ?? "invalid_request_error",
-		message
-	};
-	if (message.length > 0) return {
-		kind: "provider_error",
-		providerCode: code,
-		message,
-		...isRetryableStatusCode(anyErr) || TRANSIENT_OPENAI_MESSAGE_RE.test(message) ? { retryable: true } : {}
-	};
-	return null;
-}
-/**
-* A standard OpenAI API key usable against `api.openai.com` (for the exact
-* token-count endpoint), or `null` when only a Codex-OAuth credential is
-* available. Codex OAuth access tokens are JWTs (`eyJ…`) and are NOT valid
-* bearers for the standard API; a real key looks like `sk-…` (but not the
-* Anthropic `sk-ant-…` form). Checks `params.apiKey` then `OPENAI_API_KEY`.
-*/
-function pickStandardOpenAIKey(params) {
-	const candidates = [params?.apiKey, process.env.OPENAI_API_KEY];
-	for (const key of candidates) if (typeof key === "string" && key.startsWith("sk-") && !key.startsWith("sk-ant-")) return key;
-	return null;
-}
-/**
-* Convert canonical {@link SessionMessage}s to OpenAI Responses-API `input`
-* items for the token-count endpoint. Only the text-bearing shape is needed
-* here (the count path sends a tiny dummy message); images/tool-results are
-* down-converted to text so the count never throws on an exotic block.
-*/
-function toResponsesInput(messages) {
-	return messages.map((msg) => {
-		const text = msg.content.map((b) => b.type === "text" ? b.text : "").filter(Boolean).join("\n");
-		const part = msg.role === "assistant" ? "output_text" : "input_text";
-		return {
-			role: msg.role === "assistant" ? "assistant" : "user",
-			content: [{
-				type: part,
-				text
-			}]
-		};
-	});
-}
-/** Convert pi-ai `PiTool` specs to Responses-API function tools. */
-function toResponsesTools(tools) {
-	return tools.map((t) => {
-		const tool = t;
-		return {
-			type: "function",
-			name: tool.name,
-			description: tool.description,
-			parameters: tool.parameters
-		};
-	});
-}
-function applyPayloadOverrides(payload, options) {
-	const body = payload;
-	if (options.toolChoice) if (options.toolChoice.type === "tool" && options.toolChoice.name) body.tool_choice = {
-		type: "function",
-		name: options.toolChoice.name
-	};
-	else if (options.toolChoice.type === "required") body.tool_choice = "required";
-	else body.tool_choice = "auto";
-	return body;
-}
-function openai(params) {
-	const defaultModel = params?.defaultModel || DEFAULT_MODEL;
-	const baseCredentials = extractRuntimeCredentials(params);
-	let runtimeCredentials = baseCredentials ? {
-		...baseCredentials,
-		...params?.accountId ? { accountId: params.accountId } : {}
-	} : void 0;
-	return {
-		name: "openai",
-		meta: {
-			defaultModel,
-			isOAuth: true,
-			capabilities: {
-				vision: true,
-				imageInToolResult: true,
-				audio: false,
-				video: false
-			}
-		},
-		formatTools,
-		userMessage,
-		assistantMessage,
-		toolResultsMessage,
-		classifyError: classifyOpenAIError,
-		async countTokens(payload, signal) {
-			const standardKey = pickStandardOpenAIKey(params);
-			if (!standardKey) return null;
-			try {
-				const res = await fetch("https://api.openai.com/v1/responses/input_tokens", {
-					method: "POST",
-					headers: {
-						...params?.extraHeaders,
-						"authorization": `Bearer ${standardKey}`,
-						"content-type": "application/json"
-					},
-					body: JSON.stringify({
-						model: payload.model || defaultModel,
-						instructions: renderSystemForWire(payload.system),
-						input: toResponsesInput(payload.messages),
-						tools: toResponsesTools(payload.tools)
-					}),
-					...signal ? { signal } : {}
-				});
-				if (!res.ok) return null;
-				const json = await res.json();
-				return typeof json.input_tokens === "number" ? json.input_tokens : null;
-			} catch {
-				return null;
-			}
-		},
-		async stream(options, callbacks) {
-			const modelId = options.model || defaultModel;
-			const model = resolveModel(modelId);
-			const apiKey = await resolveOAuthApiKey({
-				provider: "openai",
-				providerId: PROVIDER_ID,
-				params: runtimeCredentials ? {
-					...params,
-					...runtimeCredentials
-				} : params,
-				envKey: "OPENAI_CODEX_API_KEY",
-				extraCredentialKeys: ["accountId"],
-				missingError: "No OpenAI Codex OAuth token found. Run `bun run auth --openai` first.",
-				refreshError: (reason) => `OpenAI Codex OAuth token refresh failed. Run \`bun run auth --openai\` again. ${reason}`
-			}, {
-				...callbacks,
-				async onOAuthRefresh(ctx) {
-					if (ctx.source === "params") runtimeCredentials = {
-						access: ctx.credentials.access,
-						refresh: ctx.credentials.refresh,
-						expires: ctx.credentials.expires,
-						...typeof ctx.credentials.accountId === "string" ? { accountId: ctx.credentials.accountId } : {}
-					};
-					await callbacks.onOAuthRefresh?.(ctx);
-				}
-			});
-			const context = {
-				systemPrompt: renderSystemForWire(options.system),
-				messages: toPiMessages(options.messages, modelId),
-				tools: options.tools
-			};
-			const reasoningLevel = options.thinking && options.thinking !== "off" && options.thinking !== "adaptive" ? options.thinking === "max" ? "xhigh" : options.thinking : void 0;
-			const stream$1 = stream(model, context, {
-				apiKey,
-				...options.maxTokens !== void 0 ? { maxTokens: options.maxTokens } : {},
-				signal: options.signal,
-				transport: params?.transport,
-				reasoningEffort: reasoningLevel,
-				reasoningSummary: reasoningLevel ? "auto" : void 0,
-				...options.modelOptions?.fast ? { serviceTier: "priority" } : {},
-				...params?.extraHeaders ? { headers: params.extraHeaders } : {},
-				onPayload: (payload) => applyPayloadOverrides(payload, options)
-			});
-			let finalMessage;
-			let text = "";
-			let thinking = "";
-			for await (const event of stream$1) if (event.type === "text_delta") {
-				text += event.delta;
-				callbacks.onText(event.delta);
-			} else if (event.type === "thinking_delta") {
-				thinking += event.delta;
-				callbacks.onThinking?.(event.delta);
-			} else if (event.type === "thinking_end") {
-				const delta = event.content.startsWith(thinking) ? event.content.slice(thinking.length) : thinking ? "" : event.content;
-				if (delta) {
-					thinking += delta;
-					callbacks.onThinking?.(delta);
-				}
-			} else if (event.type === "done") finalMessage = event.message;
-			else if (event.type === "error") throw new Error(event.error.errorMessage || "OpenAI Codex API error");
-			finalMessage ??= await stream$1.result();
-			text ||= extractText(finalMessage);
-			const toolCalls = extractToolCalls(finalMessage);
-			const assistantTurn = fromPiAssistantMessage(finalMessage);
-			const finishReason = mapCodexStopReason(finalMessage.stopReason, toolCalls.length > 0);
-			const usage = await toTurnUsage(finalMessage.usage, finishReason, modelId);
-			return {
-				assistantMessage: assistantTurn,
-				text,
-				toolCalls,
-				done: toolCalls.length === 0,
-				usage
-			};
-		}
-	};
-}
-//#endregion
+import { i as toPiMessages, n as mapCodexStopReason, r as openai, t as classifyOpenAIError } from "../openai-BcmYm0t4.js";
 export { classifyOpenAIError, mapCodexStopReason, openai, toPiMessages };
-
-//# sourceMappingURL=openai.js.map

package/dist/providers/openrouter.js

@@ -1,4 +1,4 @@
-import { m as openaiCompat } from "../openai-compat-TA7aihJ-.js";
+import { m as openaiCompat } from "../openai-compat-LGAsBush.js";
 //#region src/providers/openrouter.ts
 const BASE_URL = "https://openrouter.ai/api/v1";
 const DEFAULT_MODEL = "anthropic/claude-sonnet-4.6";

package/dist/providers/xai.js

@@ -1,2 +1,2 @@
-import { t as xai } from "../xai-kGdhWmds.js";
+import { t as xai } from "../xai-BYAyEPiJ.js";
 export { xai };

package/dist/{providers-Dln69sQ_.js → providers-BM6VuE_i.js}

@@ -1,6 +1,6 @@
-import { m as openaiCompat } from "./openai-compat-TA7aihJ-.js";
+import { m as openaiCompat } from "./openai-compat-LGAsBush.js";
 import { i as resolveOAuthApiKey } from "./oauth-8LqbeI_Q.js";
-import { r as generatePkce } from "./xai-kGdhWmds.js";
+import { r as generatePkce } from "./xai-BYAyEPiJ.js";
 //#region src/chat/oauth-page/cursor.ts
 /** pi-ai / zidane OAuth provider id. Also the credentials-file key. */
 const CURSOR_OAUTH_PROVIDER_ID = "cursor";
@@ -165,4 +165,4 @@ function cursor(params) {
 //#endregion
 export { createCursorOAuthProvider as n, cursor as t };
 
-//# sourceMappingURL=providers-Dln69sQ_.js.map
+//# sourceMappingURL=providers-BM6VuE_i.js.map

package/dist/{providers-Dln69sQ_.js.map → providers-BM6VuE_i.js.map}

@@ -1 +1 @@
-{"version":3,"file":"providers-Dln69sQ_.js","names":[],"sources":["../src/chat/oauth-page/cursor.ts","../src/providers/cursor.ts"],"sourcesContent":["/**\n * Cursor OAuth flow.\n *\n * Unlike Anthropic / OpenAI Codex (loopback-redirect PKCE), Cursor uses a\n * **poll-based** PKCE flow with no local callback server:\n *\n *   1. Generate a PKCE verifier + challenge and a random UUID.\n *   2. Open the browser to `cursor.com/loginDeepControl?challenge&uuid&mode&redirectTarget`.\n *   3. Poll `api2.cursor.sh/auth/poll?uuid&verifier` until tokens come back\n *      (HTTP 404 = \"not ready yet\", keep polling with backoff).\n *   4. Refresh via `POST api2.cursor.sh/auth/exchange_user_api_key` with\n *      `Authorization: Bearer <refresh>`.\n *\n * Token expiry is derived from the access token's JWT `exp` claim (minus a\n * 5-minute safety margin), falling back to +1h when the claim is missing.\n *\n * Flow adapted from https://github.com/ndraiman/pi-cursor-provider, itself\n * derived from https://github.com/ephraimduncan/opencode-cursor.\n *\n * Cursor's auth + inference protocol is unofficial and undocumented — re-verify\n * the endpoints/params below if login starts failing.\n */\n\nimport type {\n  OAuthCredentials,\n  OAuthLoginCallbacks,\n  OAuthProviderInterface,\n} from '@earendil-works/pi-ai/oauth'\nimport { generatePkce } from './pkce'\n\n/** pi-ai / zidane OAuth provider id. Also the credentials-file key. */\nexport const CURSOR_OAUTH_PROVIDER_ID = 'cursor'\n\nconst CURSOR_LOGIN_URL = 'https://cursor.com/loginDeepControl'\nconst CURSOR_POLL_URL = 'https://api2.cursor.sh/auth/poll'\nconst CURSOR_REFRESH_URL = 'https://api2.cursor.sh/auth/exchange_user_api_key'\n\nconst POLL_MAX_ATTEMPTS = 150\nconst POLL_BASE_DELAY_MS = 1000\nconst POLL_MAX_DELAY_MS = 10_000\nconst POLL_BACKOFF_MULTIPLIER = 1.2\nconst POLL_MAX_CONSECUTIVE_ERRORS = 3\n\n/** Fallback lifetime when the JWT carries no `exp`. */\nconst DEFAULT_TOKEN_TTL_MS = 3600 * 1000\n/** Refresh slightly early so requests don't race expiry. */\nconst TOKEN_EXPIRY_SKEW_MS = 5 * 60 * 1000\n\ninterface CursorTokenResponse {\n  accessToken: string\n  refreshToken: string\n}\n\n/**\n * Derive expiry (epoch ms) from a JWT's `exp` claim, minus a safety skew.\n * Returns `now + 1h` for malformed tokens so a missing claim never wedges\n * refresh into an immediate-expire loop.\n */\nexport function cursorTokenExpiry(token: string): number {\n  try {\n    const parts = token.split('.')\n    const payload = parts[1]\n    if (parts.length !== 3 || !payload)\n      return Date.now() + DEFAULT_TOKEN_TTL_MS\n\n    const json = JSON.parse(atob(payload.replace(/-/g, '+').replace(/_/g, '/'))) as { exp?: unknown }\n    if (typeof json.exp === 'number')\n      return json.exp * 1000 - TOKEN_EXPIRY_SKEW_MS\n  }\n  catch {\n    // fall through to default\n  }\n  return Date.now() + DEFAULT_TOKEN_TTL_MS\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise(r => setTimeout(r, ms))\n}\n\n/**\n * Poll Cursor's auth endpoint until login completes. `404` means the user\n * hasn't finished the browser flow yet; anything else non-2xx is a hard error.\n */\nasync function pollForTokens(\n  uuid: string,\n  verifier: string,\n  callbacks: OAuthLoginCallbacks,\n): Promise<CursorTokenResponse> {\n  let wait = POLL_BASE_DELAY_MS\n  let consecutiveErrors = 0\n\n  for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS; attempt++) {\n    if (callbacks.signal?.aborted)\n      throw new Error('Cursor login aborted')\n\n    await delay(wait)\n\n    try {\n      const url = `${CURSOR_POLL_URL}?uuid=${encodeURIComponent(uuid)}&verifier=${encodeURIComponent(verifier)}`\n      const response = await fetch(url, { signal: callbacks.signal })\n\n      if (response.status === 404) {\n        consecutiveErrors = 0\n        wait = Math.min(wait * POLL_BACKOFF_MULTIPLIER, POLL_MAX_DELAY_MS)\n        continue\n      }\n\n      if (response.ok) {\n        const data = await response.json() as Partial<CursorTokenResponse>\n        if (!data.accessToken || !data.refreshToken)\n          throw new Error(`Cursor poll response missing tokens: ${JSON.stringify(data)}`)\n        return { accessToken: data.accessToken, refreshToken: data.refreshToken }\n      }\n\n      throw new Error(`Cursor poll failed (${response.status})`)\n    }\n    catch (err) {\n      if (callbacks.signal?.aborted)\n        throw new Error('Cursor login aborted')\n      consecutiveErrors++\n      if (consecutiveErrors >= POLL_MAX_CONSECUTIVE_ERRORS)\n        throw err instanceof Error ? err : new Error(String(err))\n      callbacks.onProgress?.('Waiting for Cursor login to complete…')\n    }\n  }\n\n  throw new Error('Cursor authentication timed out')\n}\n\nexport async function loginCursor(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const { verifier, challenge } = await generatePkce()\n  const uuid = crypto.randomUUID()\n\n  const authUrl = new URL(CURSOR_LOGIN_URL)\n  authUrl.searchParams.set('challenge', challenge)\n  authUrl.searchParams.set('uuid', uuid)\n  authUrl.searchParams.set('mode', 'login')\n  authUrl.searchParams.set('redirectTarget', 'cli')\n\n  callbacks.onAuth({\n    url: authUrl.toString(),\n    instructions: 'A browser window should open. Complete login in Cursor to finish.',\n  })\n\n  const tokens = await pollForTokens(uuid, verifier, callbacks)\n\n  return {\n    access: tokens.accessToken,\n    refresh: tokens.refreshToken,\n    expires: cursorTokenExpiry(tokens.accessToken),\n  }\n}\n\nexport async function refreshCursorToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {\n  const response = await fetch(CURSOR_REFRESH_URL, {\n    method: 'POST',\n    headers: {\n      'Authorization': `Bearer ${credentials.refresh}`,\n      'Content-Type': 'application/json',\n    },\n    body: '{}',\n  })\n\n  if (!response.ok) {\n    const text = await response.text().catch(() => '')\n    throw new Error(`Cursor token refresh failed (${response.status}): ${text || response.statusText}`)\n  }\n\n  const data = await response.json() as Partial<CursorTokenResponse>\n  if (!data.accessToken)\n    throw new Error(`Cursor token refresh response missing access token: ${JSON.stringify(data)}`)\n\n  return {\n    access: data.accessToken,\n    // Cursor may omit a rotated refresh token — keep the existing one.\n    refresh: data.refreshToken || credentials.refresh,\n    expires: cursorTokenExpiry(data.accessToken),\n  }\n}\n\n/**\n * Build a Cursor `OAuthProviderInterface`. Shape matches Anthropic / Codex so\n * it drops into `BUILTIN_PROVIDERS` and `src/auth.ts` unchanged.\n *\n * No `renderPage` parameter: Cursor's poll flow has no local callback server,\n * so there is no post-redirect page to theme.\n */\nexport function createCursorOAuthProvider(): OAuthProviderInterface {\n  return {\n    id: CURSOR_OAUTH_PROVIDER_ID,\n    name: 'Cursor',\n    usesCallbackServer: false,\n    login: loginCursor,\n    refreshToken: refreshCursorToken,\n    getApiKey: credentials => credentials.access,\n  }\n}\n","import type { Provider, StreamCallbacks } from '.'\nimport { CURSOR_OAUTH_PROVIDER_ID } from '../chat/oauth-page/cursor'\nimport { resolveOAuthApiKey } from './oauth'\nimport { openaiCompat } from './openai-compat'\n\n/**\n * Cursor provider (OAuth).\n *\n * Auth is fully wired: `bun run auth --cursor` (or the TUI wizard) logs in via\n * Cursor's poll-based PKCE flow and persists credentials; this provider resolves\n * + refreshes the OAuth token on every turn via {@link resolveOAuthApiKey}.\n *\n * Inference is **not** wired yet. Cursor does not expose an OpenAI-compatible\n * HTTP endpoint — it speaks a protobuf/Connect agent protocol over HTTP/2 to\n * `api2.cursor.sh`. Implementing `stream()` requires porting that transport\n * (generated protobuf schemas + an HTTP/2 streaming client) in-process, which\n * is intentionally left as a follow-up. Until then `stream()` resolves the\n * token (proving auth works) and then throws a clear, actionable error.\n *\n * The `openaiCompat` base supplies the message-format helpers (`formatTools`,\n * `userMessage`, `toolResultsMessage`, …) so the provider satisfies the full\n * `Provider` contract and slots into the registry; only `stream` is overridden.\n */\nexport interface CursorParams {\n  /** Bypass OAuth resolution with an explicit token (mainly for tests). */\n  apiKey?: string\n  defaultModel?: string\n  /**\n   * Extra HTTP headers for the eventual Cursor transport. Accepted for API\n   * parity with the other providers and forwarded to the openai-compat base,\n   * but inert until Cursor inference is implemented (the `stream` override\n   * currently throws before any request is made).\n   */\n  extraHeaders?: Record<string, string>\n}\n\nconst DEFAULT_MODEL = 'claude-4.6-sonnet'\n\nconst NOT_IMPLEMENTED_MESSAGE\n  = 'Cursor OAuth login works, but inference over Cursor is not implemented yet. '\n    + 'Cursor uses a protobuf/HTTP-2 agent protocol (not an OpenAI-compatible API), '\n    + 'so the streaming transport still needs to be ported. Use another provider for now.'\n\nexport function cursor(params?: CursorParams): Provider {\n  const defaultModel = params?.defaultModel || DEFAULT_MODEL\n\n  // Base only provides the format/serialization methods; `baseURL` is never\n  // hit because we override `stream` below.\n  const base = openaiCompat({\n    name: 'cursor',\n    apiKey: params?.apiKey ?? 'oauth',\n    baseURL: 'https://api2.cursor.sh',\n    defaultModel,\n    capabilities: { vision: true, imageInToolResult: false },\n    extraHeaders: params?.extraHeaders,\n  })\n\n  return {\n    ...base,\n    meta: { ...base.meta, defaultModel },\n    async stream(options, callbacks: StreamCallbacks) {\n      // Resolve (and lazily refresh) the OAuth token so auth failures surface\n      // here with the right remediation, distinct from the not-implemented path.\n      await resolveOAuthApiKey(\n        {\n          provider: 'cursor',\n          providerId: CURSOR_OAUTH_PROVIDER_ID,\n          params,\n          missingError: 'No Cursor credentials found. Run `bun run auth --cursor` first.',\n          refreshError: reason => `Cursor OAuth token refresh failed. Run \\`bun run auth --cursor\\` again. ${reason}`,\n        },\n        callbacks,\n      )\n      void options\n      throw new Error(NOT_IMPLEMENTED_MESSAGE)\n    },\n  }\n}\n"],"mappings":";;;;;AA+BA,MAAa,2BAA2B;AAExC,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAE3B,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB;AAC1B,MAAM,0BAA0B;AAChC,MAAM,8BAA8B;;AAGpC,MAAM,uBAAuB,OAAO;;AAEpC,MAAM,uBAAuB,MAAS;;;;;;AAYtC,SAAgB,kBAAkB,OAAuB;CACvD,IAAI;EACF,MAAM,QAAQ,MAAM,MAAM,GAAG;EAC7B,MAAM,UAAU,MAAM;EACtB,IAAI,MAAM,WAAW,KAAK,CAAC,SACzB,OAAO,KAAK,IAAI,IAAI;EAEtB,MAAM,OAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;EAC3E,IAAI,OAAO,KAAK,QAAQ,UACtB,OAAO,KAAK,MAAM,MAAO;CAC7B,QACM,CAEN;CACA,OAAO,KAAK,IAAI,IAAI;AACtB;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAQ,MAAK,WAAW,GAAG,EAAE,CAAC;AAC3C;;;;;AAMA,eAAe,cACb,MACA,UACA,WAC8B;CAC9B,IAAI,OAAO;CACX,IAAI,oBAAoB;CAExB,KAAK,IAAI,UAAU,GAAG,UAAU,mBAAmB,WAAW;EAC5D,IAAI,UAAU,QAAQ,SACpB,MAAM,IAAI,MAAM,sBAAsB;EAExC,MAAM,MAAM,IAAI;EAEhB,IAAI;GACF,MAAM,MAAM,GAAG,gBAAgB,QAAQ,mBAAmB,IAAI,EAAE,YAAY,mBAAmB,QAAQ;GACvG,MAAM,WAAW,MAAM,MAAM,KAAK,EAAE,QAAQ,UAAU,OAAO,CAAC;GAE9D,IAAI,SAAS,WAAW,KAAK;IAC3B,oBAAoB;IACpB,OAAO,KAAK,IAAI,OAAO,yBAAyB,iBAAiB;IACjE;GACF;GAEA,IAAI,SAAS,IAAI;IACf,MAAM,OAAO,MAAM,SAAS,KAAK;IACjC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,cAC7B,MAAM,IAAI,MAAM,wCAAwC,KAAK,UAAU,IAAI,GAAG;IAChF,OAAO;KAAE,aAAa,KAAK;KAAa,cAAc,KAAK;IAAa;GAC1E;GAEA,MAAM,IAAI,MAAM,uBAAuB,SAAS,OAAO,EAAE;EAC3D,SACO,KAAK;GACV,IAAI,UAAU,QAAQ,SACpB,MAAM,IAAI,MAAM,sBAAsB;GACxC;GACA,IAAI,qBAAqB,6BACvB,MAAM,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAC1D,UAAU,aAAa,uCAAuC;EAChE;CACF;CAEA,MAAM,IAAI,MAAM,iCAAiC;AACnD;AAEA,eAAsB,YAAY,WAA2D;CAC3F,MAAM,EAAE,UAAU,cAAc,MAAM,aAAa;CACnD,MAAM,OAAO,OAAO,WAAW;CAE/B,MAAM,UAAU,IAAI,IAAI,gBAAgB;CACxC,QAAQ,aAAa,IAAI,aAAa,SAAS;CAC/C,QAAQ,aAAa,IAAI,QAAQ,IAAI;CACrC,QAAQ,aAAa,IAAI,QAAQ,OAAO;CACxC,QAAQ,aAAa,IAAI,kBAAkB,KAAK;CAEhD,UAAU,OAAO;EACf,KAAK,QAAQ,SAAS;EACtB,cAAc;CAChB,CAAC;CAED,MAAM,SAAS,MAAM,cAAc,MAAM,UAAU,SAAS;CAE5D,OAAO;EACL,QAAQ,OAAO;EACf,SAAS,OAAO;EAChB,SAAS,kBAAkB,OAAO,WAAW;CAC/C;AACF;AAEA,eAAsB,mBAAmB,aAA0D;CACjG,MAAM,WAAW,MAAM,MAAM,oBAAoB;EAC/C,QAAQ;EACR,SAAS;GACP,iBAAiB,UAAU,YAAY;GACvC,gBAAgB;EAClB;EACA,MAAM;CACR,CAAC;CAED,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;EACjD,MAAM,IAAI,MAAM,gCAAgC,SAAS,OAAO,KAAK,QAAQ,SAAS,YAAY;CACpG;CAEA,MAAM,OAAO,MAAM,SAAS,KAAK;CACjC,IAAI,CAAC,KAAK,aACR,MAAM,IAAI,MAAM,uDAAuD,KAAK,UAAU,IAAI,GAAG;CAE/F,OAAO;EACL,QAAQ,KAAK;EAEb,SAAS,KAAK,gBAAgB,YAAY;EAC1C,SAAS,kBAAkB,KAAK,WAAW;CAC7C;AACF;;;;;;;;AASA,SAAgB,4BAAoD;CAClE,OAAO;EACL,IAAI;EACJ,MAAM;EACN,oBAAoB;EACpB,OAAO;EACP,cAAc;EACd,YAAW,gBAAe,YAAY;CACxC;AACF;;;AChKA,MAAM,gBAAgB;AAEtB,MAAM,0BACF;AAIJ,SAAgB,OAAO,QAAiC;CACtD,MAAM,eAAe,QAAQ,gBAAgB;CAI7C,MAAM,OAAO,aAAa;EACxB,MAAM;EACN,QAAQ,QAAQ,UAAU;EAC1B,SAAS;EACT;EACA,cAAc;GAAE,QAAQ;GAAM,mBAAmB;EAAM;EACvD,cAAc,QAAQ;CACxB,CAAC;CAED,OAAO;EACL,GAAG;EACH,MAAM;GAAE,GAAG,KAAK;GAAM;EAAa;EACnC,MAAM,OAAO,SAAS,WAA4B;GAGhD,MAAM,mBACJ;IACE,UAAU;IACV,YAAY;IACZ;IACA,cAAc;IACd,eAAc,WAAU,2EAA2E;GACrG,GACA,SACF;GAEA,MAAM,IAAI,MAAM,uBAAuB;EACzC;CACF;AACF"}
+{"version":3,"file":"providers-BM6VuE_i.js","names":[],"sources":["../src/chat/oauth-page/cursor.ts","../src/providers/cursor.ts"],"sourcesContent":["/**\n * Cursor OAuth flow.\n *\n * Unlike Anthropic / OpenAI Codex (loopback-redirect PKCE), Cursor uses a\n * **poll-based** PKCE flow with no local callback server:\n *\n *   1. Generate a PKCE verifier + challenge and a random UUID.\n *   2. Open the browser to `cursor.com/loginDeepControl?challenge&uuid&mode&redirectTarget`.\n *   3. Poll `api2.cursor.sh/auth/poll?uuid&verifier` until tokens come back\n *      (HTTP 404 = \"not ready yet\", keep polling with backoff).\n *   4. Refresh via `POST api2.cursor.sh/auth/exchange_user_api_key` with\n *      `Authorization: Bearer <refresh>`.\n *\n * Token expiry is derived from the access token's JWT `exp` claim (minus a\n * 5-minute safety margin), falling back to +1h when the claim is missing.\n *\n * Flow adapted from https://github.com/ndraiman/pi-cursor-provider, itself\n * derived from https://github.com/ephraimduncan/opencode-cursor.\n *\n * Cursor's auth + inference protocol is unofficial and undocumented — re-verify\n * the endpoints/params below if login starts failing.\n */\n\nimport type {\n  OAuthCredentials,\n  OAuthLoginCallbacks,\n  OAuthProviderInterface,\n} from '@earendil-works/pi-ai/oauth'\nimport { generatePkce } from './pkce'\n\n/** pi-ai / zidane OAuth provider id. Also the credentials-file key. */\nexport const CURSOR_OAUTH_PROVIDER_ID = 'cursor'\n\nconst CURSOR_LOGIN_URL = 'https://cursor.com/loginDeepControl'\nconst CURSOR_POLL_URL = 'https://api2.cursor.sh/auth/poll'\nconst CURSOR_REFRESH_URL = 'https://api2.cursor.sh/auth/exchange_user_api_key'\n\nconst POLL_MAX_ATTEMPTS = 150\nconst POLL_BASE_DELAY_MS = 1000\nconst POLL_MAX_DELAY_MS = 10_000\nconst POLL_BACKOFF_MULTIPLIER = 1.2\nconst POLL_MAX_CONSECUTIVE_ERRORS = 3\n\n/** Fallback lifetime when the JWT carries no `exp`. */\nconst DEFAULT_TOKEN_TTL_MS = 3600 * 1000\n/** Refresh slightly early so requests don't race expiry. */\nconst TOKEN_EXPIRY_SKEW_MS = 5 * 60 * 1000\n\ninterface CursorTokenResponse {\n  accessToken: string\n  refreshToken: string\n}\n\n/**\n * Derive expiry (epoch ms) from a JWT's `exp` claim, minus a safety skew.\n * Returns `now + 1h` for malformed tokens so a missing claim never wedges\n * refresh into an immediate-expire loop.\n */\nexport function cursorTokenExpiry(token: string): number {\n  try {\n    const parts = token.split('.')\n    const payload = parts[1]\n    if (parts.length !== 3 || !payload)\n      return Date.now() + DEFAULT_TOKEN_TTL_MS\n\n    const json = JSON.parse(atob(payload.replace(/-/g, '+').replace(/_/g, '/'))) as { exp?: unknown }\n    if (typeof json.exp === 'number')\n      return json.exp * 1000 - TOKEN_EXPIRY_SKEW_MS\n  }\n  catch {\n    // fall through to default\n  }\n  return Date.now() + DEFAULT_TOKEN_TTL_MS\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise(r => setTimeout(r, ms))\n}\n\n/**\n * Poll Cursor's auth endpoint until login completes. `404` means the user\n * hasn't finished the browser flow yet; anything else non-2xx is a hard error.\n */\nasync function pollForTokens(\n  uuid: string,\n  verifier: string,\n  callbacks: OAuthLoginCallbacks,\n): Promise<CursorTokenResponse> {\n  let wait = POLL_BASE_DELAY_MS\n  let consecutiveErrors = 0\n\n  for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS; attempt++) {\n    if (callbacks.signal?.aborted)\n      throw new Error('Cursor login aborted')\n\n    await delay(wait)\n\n    try {\n      const url = `${CURSOR_POLL_URL}?uuid=${encodeURIComponent(uuid)}&verifier=${encodeURIComponent(verifier)}`\n      const response = await fetch(url, { signal: callbacks.signal })\n\n      if (response.status === 404) {\n        consecutiveErrors = 0\n        wait = Math.min(wait * POLL_BACKOFF_MULTIPLIER, POLL_MAX_DELAY_MS)\n        continue\n      }\n\n      if (response.ok) {\n        const data = await response.json() as Partial<CursorTokenResponse>\n        if (!data.accessToken || !data.refreshToken)\n          throw new Error(`Cursor poll response missing tokens: ${JSON.stringify(data)}`)\n        return { accessToken: data.accessToken, refreshToken: data.refreshToken }\n      }\n\n      throw new Error(`Cursor poll failed (${response.status})`)\n    }\n    catch (err) {\n      if (callbacks.signal?.aborted)\n        throw new Error('Cursor login aborted')\n      consecutiveErrors++\n      if (consecutiveErrors >= POLL_MAX_CONSECUTIVE_ERRORS)\n        throw err instanceof Error ? err : new Error(String(err))\n      callbacks.onProgress?.('Waiting for Cursor login to complete…')\n    }\n  }\n\n  throw new Error('Cursor authentication timed out')\n}\n\nexport async function loginCursor(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n  const { verifier, challenge } = await generatePkce()\n  const uuid = crypto.randomUUID()\n\n  const authUrl = new URL(CURSOR_LOGIN_URL)\n  authUrl.searchParams.set('challenge', challenge)\n  authUrl.searchParams.set('uuid', uuid)\n  authUrl.searchParams.set('mode', 'login')\n  authUrl.searchParams.set('redirectTarget', 'cli')\n\n  callbacks.onAuth({\n    url: authUrl.toString(),\n    instructions: 'A browser window should open. Complete login in Cursor to finish.',\n  })\n\n  const tokens = await pollForTokens(uuid, verifier, callbacks)\n\n  return {\n    access: tokens.accessToken,\n    refresh: tokens.refreshToken,\n    expires: cursorTokenExpiry(tokens.accessToken),\n  }\n}\n\nexport async function refreshCursorToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {\n  const response = await fetch(CURSOR_REFRESH_URL, {\n    method: 'POST',\n    headers: {\n      'Authorization': `Bearer ${credentials.refresh}`,\n      'Content-Type': 'application/json',\n    },\n    body: '{}',\n  })\n\n  if (!response.ok) {\n    const text = await response.text().catch(() => '')\n    throw new Error(`Cursor token refresh failed (${response.status}): ${text || response.statusText}`)\n  }\n\n  const data = await response.json() as Partial<CursorTokenResponse>\n  if (!data.accessToken)\n    throw new Error(`Cursor token refresh response missing access token: ${JSON.stringify(data)}`)\n\n  return {\n    access: data.accessToken,\n    // Cursor may omit a rotated refresh token — keep the existing one.\n    refresh: data.refreshToken || credentials.refresh,\n    expires: cursorTokenExpiry(data.accessToken),\n  }\n}\n\n/**\n * Build a Cursor `OAuthProviderInterface`. Shape matches Anthropic / Codex so\n * it drops into `BUILTIN_PROVIDERS` and `src/auth.ts` unchanged.\n *\n * No `renderPage` parameter: Cursor's poll flow has no local callback server,\n * so there is no post-redirect page to theme.\n */\nexport function createCursorOAuthProvider(): OAuthProviderInterface {\n  return {\n    id: CURSOR_OAUTH_PROVIDER_ID,\n    name: 'Cursor',\n    usesCallbackServer: false,\n    login: loginCursor,\n    refreshToken: refreshCursorToken,\n    getApiKey: credentials => credentials.access,\n  }\n}\n","import type { Provider, StreamCallbacks } from '.'\nimport { CURSOR_OAUTH_PROVIDER_ID } from '../chat/oauth-page/cursor'\nimport { resolveOAuthApiKey } from './oauth'\nimport { openaiCompat } from './openai-compat'\n\n/**\n * Cursor provider (OAuth).\n *\n * Auth is fully wired: `bun run auth --cursor` (or the TUI wizard) logs in via\n * Cursor's poll-based PKCE flow and persists credentials; this provider resolves\n * + refreshes the OAuth token on every turn via {@link resolveOAuthApiKey}.\n *\n * Inference is **not** wired yet. Cursor does not expose an OpenAI-compatible\n * HTTP endpoint — it speaks a protobuf/Connect agent protocol over HTTP/2 to\n * `api2.cursor.sh`. Implementing `stream()` requires porting that transport\n * (generated protobuf schemas + an HTTP/2 streaming client) in-process, which\n * is intentionally left as a follow-up. Until then `stream()` resolves the\n * token (proving auth works) and then throws a clear, actionable error.\n *\n * The `openaiCompat` base supplies the message-format helpers (`formatTools`,\n * `userMessage`, `toolResultsMessage`, …) so the provider satisfies the full\n * `Provider` contract and slots into the registry; only `stream` is overridden.\n */\nexport interface CursorParams {\n  /** Bypass OAuth resolution with an explicit token (mainly for tests). */\n  apiKey?: string\n  defaultModel?: string\n  /**\n   * Extra HTTP headers for the eventual Cursor transport. Accepted for API\n   * parity with the other providers and forwarded to the openai-compat base,\n   * but inert until Cursor inference is implemented (the `stream` override\n   * currently throws before any request is made).\n   */\n  extraHeaders?: Record<string, string>\n}\n\nconst DEFAULT_MODEL = 'claude-4.6-sonnet'\n\nconst NOT_IMPLEMENTED_MESSAGE\n  = 'Cursor OAuth login works, but inference over Cursor is not implemented yet. '\n    + 'Cursor uses a protobuf/HTTP-2 agent protocol (not an OpenAI-compatible API), '\n    + 'so the streaming transport still needs to be ported. Use another provider for now.'\n\nexport function cursor(params?: CursorParams): Provider {\n  const defaultModel = params?.defaultModel || DEFAULT_MODEL\n\n  // Base only provides the format/serialization methods; `baseURL` is never\n  // hit because we override `stream` below.\n  const base = openaiCompat({\n    name: 'cursor',\n    apiKey: params?.apiKey ?? 'oauth',\n    baseURL: 'https://api2.cursor.sh',\n    defaultModel,\n    capabilities: { vision: true, imageInToolResult: false },\n    extraHeaders: params?.extraHeaders,\n  })\n\n  return {\n    ...base,\n    meta: { ...base.meta, defaultModel },\n    async stream(options, callbacks: StreamCallbacks) {\n      // Resolve (and lazily refresh) the OAuth token so auth failures surface\n      // here with the right remediation, distinct from the not-implemented path.\n      await resolveOAuthApiKey(\n        {\n          provider: 'cursor',\n          providerId: CURSOR_OAUTH_PROVIDER_ID,\n          params,\n          missingError: 'No Cursor credentials found. Run `bun run auth --cursor` first.',\n          refreshError: reason => `Cursor OAuth token refresh failed. Run \\`bun run auth --cursor\\` again. ${reason}`,\n        },\n        callbacks,\n      )\n      void options\n      throw new Error(NOT_IMPLEMENTED_MESSAGE)\n    },\n  }\n}\n"],"mappings":";;;;;AA+BA,MAAa,2BAA2B;AAExC,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAE3B,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB;AAC1B,MAAM,0BAA0B;AAChC,MAAM,8BAA8B;;AAGpC,MAAM,uBAAuB,OAAO;;AAEpC,MAAM,uBAAuB,MAAS;;;;;;AAYtC,SAAgB,kBAAkB,OAAuB;CACvD,IAAI;EACF,MAAM,QAAQ,MAAM,MAAM,GAAG;EAC7B,MAAM,UAAU,MAAM;EACtB,IAAI,MAAM,WAAW,KAAK,CAAC,SACzB,OAAO,KAAK,IAAI,IAAI;EAEtB,MAAM,OAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;EAC3E,IAAI,OAAO,KAAK,QAAQ,UACtB,OAAO,KAAK,MAAM,MAAO;CAC7B,QACM,CAEN;CACA,OAAO,KAAK,IAAI,IAAI;AACtB;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAQ,MAAK,WAAW,GAAG,EAAE,CAAC;AAC3C;;;;;AAMA,eAAe,cACb,MACA,UACA,WAC8B;CAC9B,IAAI,OAAO;CACX,IAAI,oBAAoB;CAExB,KAAK,IAAI,UAAU,GAAG,UAAU,mBAAmB,WAAW;EAC5D,IAAI,UAAU,QAAQ,SACpB,MAAM,IAAI,MAAM,sBAAsB;EAExC,MAAM,MAAM,IAAI;EAEhB,IAAI;GACF,MAAM,MAAM,GAAG,gBAAgB,QAAQ,mBAAmB,IAAI,EAAE,YAAY,mBAAmB,QAAQ;GACvG,MAAM,WAAW,MAAM,MAAM,KAAK,EAAE,QAAQ,UAAU,OAAO,CAAC;GAE9D,IAAI,SAAS,WAAW,KAAK;IAC3B,oBAAoB;IACpB,OAAO,KAAK,IAAI,OAAO,yBAAyB,iBAAiB;IACjE;GACF;GAEA,IAAI,SAAS,IAAI;IACf,MAAM,OAAO,MAAM,SAAS,KAAK;IACjC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,cAC7B,MAAM,IAAI,MAAM,wCAAwC,KAAK,UAAU,IAAI,GAAG;IAChF,OAAO;KAAE,aAAa,KAAK;KAAa,cAAc,KAAK;IAAa;GAC1E;GAEA,MAAM,IAAI,MAAM,uBAAuB,SAAS,OAAO,EAAE;EAC3D,SACO,KAAK;GACV,IAAI,UAAU,QAAQ,SACpB,MAAM,IAAI,MAAM,sBAAsB;GACxC;GACA,IAAI,qBAAqB,6BACvB,MAAM,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAC1D,UAAU,aAAa,uCAAuC;EAChE;CACF;CAEA,MAAM,IAAI,MAAM,iCAAiC;AACnD;AAEA,eAAsB,YAAY,WAA2D;CAC3F,MAAM,EAAE,UAAU,cAAc,MAAM,aAAa;CACnD,MAAM,OAAO,OAAO,WAAW;CAE/B,MAAM,UAAU,IAAI,IAAI,gBAAgB;CACxC,QAAQ,aAAa,IAAI,aAAa,SAAS;CAC/C,QAAQ,aAAa,IAAI,QAAQ,IAAI;CACrC,QAAQ,aAAa,IAAI,QAAQ,OAAO;CACxC,QAAQ,aAAa,IAAI,kBAAkB,KAAK;CAEhD,UAAU,OAAO;EACf,KAAK,QAAQ,SAAS;EACtB,cAAc;CAChB,CAAC;CAED,MAAM,SAAS,MAAM,cAAc,MAAM,UAAU,SAAS;CAE5D,OAAO;EACL,QAAQ,OAAO;EACf,SAAS,OAAO;EAChB,SAAS,kBAAkB,OAAO,WAAW;CAC/C;AACF;AAEA,eAAsB,mBAAmB,aAA0D;CACjG,MAAM,WAAW,MAAM,MAAM,oBAAoB;EAC/C,QAAQ;EACR,SAAS;GACP,iBAAiB,UAAU,YAAY;GACvC,gBAAgB;EAClB;EACA,MAAM;CACR,CAAC;CAED,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,YAAY,EAAE;EACjD,MAAM,IAAI,MAAM,gCAAgC,SAAS,OAAO,KAAK,QAAQ,SAAS,YAAY;CACpG;CAEA,MAAM,OAAO,MAAM,SAAS,KAAK;CACjC,IAAI,CAAC,KAAK,aACR,MAAM,IAAI,MAAM,uDAAuD,KAAK,UAAU,IAAI,GAAG;CAE/F,OAAO;EACL,QAAQ,KAAK;EAEb,SAAS,KAAK,gBAAgB,YAAY;EAC1C,SAAS,kBAAkB,KAAK,WAAW;CAC7C;AACF;;;;;;;;AASA,SAAgB,4BAAoD;CAClE,OAAO;EACL,IAAI;EACJ,MAAM;EACN,oBAAoB;EACpB,OAAO;EACP,cAAc;EACd,YAAW,gBAAe,YAAY;CACxC;AACF;;;AChKA,MAAM,gBAAgB;AAEtB,MAAM,0BACF;AAIJ,SAAgB,OAAO,QAAiC;CACtD,MAAM,eAAe,QAAQ,gBAAgB;CAI7C,MAAM,OAAO,aAAa;EACxB,MAAM;EACN,QAAQ,QAAQ,UAAU;EAC1B,SAAS;EACT;EACA,cAAc;GAAE,QAAQ;GAAM,mBAAmB;EAAM;EACvD,cAAc,QAAQ;CACxB,CAAC;CAED,OAAO;EACL,GAAG;EACH,MAAM;GAAE,GAAG,KAAK;GAAM;EAAa;EACnC,MAAM,OAAO,SAAS,WAA4B;GAGhD,MAAM,mBACJ;IACE,UAAU;IACV,YAAY;IACZ;IACA,cAAc;IACd,eAAc,WAAU,2EAA2E;GACrG,GACA,SACF;GAEA,MAAM,IAAI,MAAM,uBAAuB;EACzC;CACF;AACF"}

package/dist/providers.js

@@ -1,11 +1,11 @@
-import { f as mapOAIFinishReason, l as classifyOpenAICompatError, m as openaiCompat, n as OpenAICompatHttpError, v as sanitizeToolSchema, y as sanitizeToolSpecs } from "./openai-compat-TA7aihJ-.js";
-import { n as applyAnthropicCacheBreakpoints, t as anthropic } from "./anthropic-DdlSgT6K.js";
+import { f as mapOAIFinishReason, l as classifyOpenAICompatError, m as openaiCompat, n as OpenAICompatHttpError, v as sanitizeToolSchema, y as sanitizeToolSpecs } from "./openai-compat-LGAsBush.js";
+import { n as applyAnthropicCacheBreakpoints, t as anthropic } from "./anthropic-J2tBjcSQ.js";
 import { arcee } from "./providers/arcee.js";
 import { baseten, planBasetenReasoning } from "./providers/baseten.js";
 import { cerebras } from "./providers/cerebras.js";
-import { t as xai } from "./xai-kGdhWmds.js";
-import { t as cursor } from "./providers-Dln69sQ_.js";
+import { t as xai } from "./xai-BYAyEPiJ.js";
+import { t as cursor } from "./providers-BM6VuE_i.js";
 import { local } from "./providers/local.js";
-import { openai } from "./providers/openai.js";
+import { r as openai } from "./openai-BcmYm0t4.js";
 import { openrouter } from "./providers/openrouter.js";
 export { OpenAICompatHttpError, anthropic, applyAnthropicCacheBreakpoints, arcee, baseten, cerebras, classifyOpenAICompatError, cursor, local, mapOAIFinishReason, openai, openaiCompat, openrouter, planBasetenReasoning, sanitizeToolSchema, sanitizeToolSpecs, xai };

package/dist/{session-D7JSEMME.js → session-Dc1v4Otm.js}

@@ -1,4 +1,4 @@
-import { h as toWireMessages } from "./messages-Ce4yRjd3.js";
+import { h as toWireMessages } from "./messages-DEPX32kc.js";
 import { Buffer } from "node:buffer";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/session/file-map.ts
@@ -645,4 +645,4 @@ function assertJsonBounded(value, maxBytes, label) {
 //#endregion
 export { getExtensionSessionState as a, withExtensionSession as c, createFileMapStore as d, demoteStaleRunningStatus as i, createRemoteStore as l, currentExtensionSession as n, loadSession as o, deleteExtensionSessionState as r, setExtensionSessionState as s, createSession as t, createMemoryStore as u };
 
-//# sourceMappingURL=session-D7JSEMME.js.map
+//# sourceMappingURL=session-Dc1v4Otm.js.map