ID Box

A multi-product identity CLI and SDK. Product commands are grouped under their provider so each provider can grow independently.

CLI

npx id-box cursor auth
npx id-box cursor inspect

Shared options:

--token-file <path>   Read the Cursor User Token from a private file
--timeout <seconds>   Set the request timeout (default: 15; maximum: 60)

SDK

import {
  approveLogin,
  fetchUsageEvents,
  inspectUserToken,
  parseLoginUrl,
} from "id-box/cursor";

Development

bun install
bun run check

The public package contains only dist/, this README, and the license. The CLI entry dynamically loads provider commands, and the build emits shared chunks instead of growing one permanent monolithic file.

Only source files reachable from the reviewed public entry points are bundled. bun run audit:build checks that dependency graph against an explicit allowlist and a 250 KiB JavaScript budget. Code splitting keeps startup modular; all public chunks are still part of the npm download, so code that must remain private must never enter a public entry point.