Repository navigation
fix(cursor): unwrap Cursor 3.27 safe-storage sessions - #1802
Merged
Merged
Conversation
Cursor 3.27 stores the app session as cursor-safe-storage:v1 ciphertext. Read it with the Safe Storage keychain item instead of treating it as an expired JWT. Trim the newline security -w appends before the KDF.
Status never reads it. A forced sync may ask, and the background sync reads only after one succeeded and none was refused since, reusing the token per stored blob. codeburn quota asks as it does for Claude. Drop the service-only lookup that asked again after a Deny.
A dock refresh reads it only after a user-initiated read succeeded, and its first locked read turns that off again. The opened token is kept per stored blob; an explicit disconnect forgets both. The popover names the sync command, and the service-only lookup is gone.
Windows and Linux have no login keychain, so the locked message there says CodeBurn cannot open the encrypted session yet.
Both fell back to the export error for the new locked code. On macOS the desktop names the sync command; elsewhere it says the session cannot be opened yet.
Member
|
Thanks, the unlock is right. I added five commits on your branch: keychain reads only after a user action (same rule as Claude), status never reads the keychain, honest text on Windows and Linux, the locked line in the apps, and docs. Merged as 9a624cc, ships with the next release. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
cursor-safe-storage:v1:ciphertext. CodeBurn treated that as an expired JWT.security -wappends a newline. Trim it before the KDF, or the decrypt fails and sync still looks locked.Closes #1801
Testing / Verification
npm testpassesnpm run buildsucceedsLocal menubar build, same machine, Cursor 3.27.22.
npm test: 5244 passed.codeburn import cursor --syncimported the usage export after the newline trim.Before:
After: