feat(cli): simplify Cursor import via browser CSV download (#24)

Replace token-based authentication with a simpler browser download flow:
- Remove `cursor login/logout/status` commands
- Open browser to Cursor's CSV export URL instead
- Auto-detect downloaded CSV in Downloads folder
- Fall back to drag-and-drop if auto-detection fails

This eliminates the need for users to manually extract session tokens
from browser cookies, providing a much better UX.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: fricoben

.claude/commands/test-cli.md

@@ -59,48 +59,31 @@ cd packages/cli && bun run --conditions=browser src/cli.ts -i fricoben
 
 ## Step 3: Cursor Integration
 
-### Login to Cursor
+If Cursor is installed, the CLI will automatically:
 
-```bash
-cd packages/cli && bun run --conditions=browser src/cli.ts cursor login
-```
-
-You'll need to:
-1. Open https://www.cursor.com/dashboard
-2. Open DevTools > Network tab
-3. Find any request to cursor.com/api
-4. Copy the `WorkosCursorSessionToken` cookie value
-
-### Check Cursor Status
-
-```bash
-cd packages/cli && bun run --conditions=browser src/cli.ts cursor status
-```
-
-### Logout from Cursor
+1. Open your browser to `cursor.com/api/dashboard/export-usage-events-csv`
+2. Wait for the CSV to download
+3. Detect the download in your Downloads folder
+4. Import it alongside other AI tool data
 
-```bash
-cd packages/cli && bun run --conditions=browser src/cli.ts cursor logout
-```
-
----
-
-## Step 4: First-Run Cursor Prompt
-
-If Cursor is installed but not logged in, the CLI will prompt:
+**If auto-detection fails:**
+- The CLI will prompt you to drag-and-drop the CSV file
+- Or press Enter to skip Cursor data
 
+**Expected behavior:**
 ```bash
 cd packages/cli && bun run --conditions=browser src/cli.ts
 ```
 
-**Expected behavior:**
-- Detects Cursor installation
-- Asks "Would you like to include your Cursor usage data? (y/n)"
-- If yes, opens browser and prompts for token
+- Shows "Cursor detected! Opening browser to download your usage data..."
+- Browser opens to Cursor export URL
+- Shows "Waiting for download..."
+- When detected: "Found: usage-events-YYYY-MM-DD.csv"
+- Shows "Imported X Cursor usage events."
 
 ---
 
-## Step 5: Integration Test with Dev Server
+## Step 4: Integration Test with Dev Server
 
 ### Start the Dev Server
 
@@ -133,10 +116,9 @@ VIBETRACKING_API_URL=http://localhost:3000 cd packages/cli && bun run --conditio
 |------|---------|----------|
 | Default (browser) | `src/cli.ts` | Shows stats, opens browser |
 | Inviter flag | `src/cli.ts -i username` | Adds inviter param to URL |
-| Cursor login | `src/cli.ts cursor login` | Prompts for token |
-| Cursor status | `src/cli.ts cursor status` | Shows auth status |
-| Cursor logout | `src/cli.ts cursor logout` | Clears credentials |
-| First-run prompt | (with Cursor installed) | Prompts for Cursor setup |
+| Cursor auto-detect | (with Cursor installed) | Opens browser, detects download |
+| Cursor drag-drop | (skip auto-detect) | Prompts for file, accepts drag-drop |
+| Skip Cursor | (press Enter at prompt) | Continues without Cursor data |
 
 ---
 
@@ -150,7 +132,7 @@ The CLI scans these locations:
 | Codex | `~/.codex/` |
 | OpenCode | `~/.local/share/opencode/` |
 | Gemini | `~/.gemini/` |
-| Cursor | Via API (requires login) |
+| Cursor | Browser CSV download → `~/.vibetracking/cursor-cache/` |
 | Amp | `~/.ampcode/sessions/` |
 | Droid | `~/Library/.../googleAiStudio/history/` |
 
@@ -160,8 +142,7 @@ The CLI scans these locations:
 
 | File | Purpose |
 |------|---------|
-| `~/.vibetracking/cursor-credentials.json` | Cursor session token |
-| `~/.vibetracking/cursor-cache/usage.csv` | Cached Cursor data |
+| `~/.vibetracking/cursor-cache/usage.csv` | Cached Cursor data (from browser download) |
 | `~/.cache/vibetracking/pricing-litellm.json` | Cached LiteLLM pricing |
 | `~/.cache/vibetracking/pricing-openrouter.json` | Cached OpenRouter pricing |
 
@@ -175,7 +156,7 @@ The CLI scans these locations:
 
 ### "No data found"
 - Check if you have data in `~/.claude/` or `~/.codex/`
-- For Cursor: run `vibetracking cursor login` first
+- For Cursor: make sure you're logged into cursor.com in your browser
 
 ### "Browser doesn't open"
 - URL is printed to console, open manually

CLAUDE.md

@@ -436,29 +436,29 @@ E2E tests use Playwright MCP tools. Credentials from Bitwarden when needed.
 
 ```bash
 vibetracking                   # Scan data and open browser to import
-vibetracking cursor login      # Login to Cursor (paste session token)
-vibetracking cursor logout     # Logout from Cursor
-vibetracking cursor status     # Check Cursor authentication status
 ```
 
 ### How It Works
 
 1. Run `vibetracking` in your terminal
-2. CLI scans local AI tool data (Claude Code, Codex, Gemini, Amp, Droid)
-3. If Cursor credentials exist, fetches Cursor usage data
+2. If Cursor is installed, opens browser to download usage CSV from cursor.com
+3. CLI scans local AI tool data (Claude Code, Codex, Gemini, Amp, Droid)
 4. Opens browser to `/import#encoded_data`
 5. User logs in with GitHub (if needed) and confirms import
 
 ### Cursor Integration
 
-Cursor usage data is synced via API (requires session token):
+Cursor usage data is imported via browser download:
 
-```bash
-# Login to Cursor (opens browser, prompts for token)
-vibetracking cursor login
+1. CLI detects Cursor installation
+2. Opens browser to `cursor.com/api/dashboard/export-usage-events-csv`
+3. CSV downloads automatically (user must be logged into Cursor in browser)
+4. CLI detects the download and imports it
+5. If auto-detection fails, user can drag-drop the CSV file
 
-# Credentials stored in ~/.vibetracking/cursor-credentials.json
-# Format: { "sessionToken": "eyJ...", "createdAt": "..." }
+```bash
+# Cache location for Cursor data
+~/.vibetracking/cursor-cache/usage.csv
 ```
 
 ---

README.md

@@ -168,7 +168,7 @@ bun run dist/cli.js
 │ Claude:   ~/.claude/projects/
 │ OpenCode: ~/.local/share/opencode/
 │ Codex:    ~/.codex/
-│ Cursor:   API (requires login)
+│ Cursor:   Browser CSV download
 │ Gemini:   ~/.gemini/
 │ Amp:      ~/.amp/
 │ Droid:    ~/.droid/
@@ -216,35 +216,13 @@ The CLI scans local AI coding tool data and opens your browser to import it via
 
 ### Cursor IDE Integration
 
-Cursor requires authentication to fetch usage data:
+If Cursor is installed, the CLI will:
 
-```bash
-# Login to Cursor
-bunx vibetracking cursor login
-
-# Check authentication status
-bunx vibetracking cursor status
-
-# Logout
-bunx vibetracking cursor logout
-```
-
-### Background Sync
-
-After authenticating via browser, you can sync in the background:
+1. Open your browser to download usage data from cursor.com
+2. Detect the downloaded CSV automatically
+3. Import it alongside your other AI tool data
 
-```bash
-# Sync data silently (for cron jobs, hooks, etc.)
-bunx vibetracking sync --quiet
-```
-
-### Model Pricing Lookup
-
-```bash
-# Look up pricing for any model
-bunx vibetracking pricing claude-3-5-sonnet-20241022
-bunx vibetracking pricing gpt-4o --json
-```
+If auto-detection fails, you can drag-and-drop the CSV file into the terminal.
 
 ---
 
@@ -296,8 +274,7 @@ bun run test:all     # Run both
 
 ```bash
 cd packages/cli
-bun run src/cli.ts              # Default command (opens browser)
-bun run src/cli.ts cursor login # Cursor authentication
+bun run src/cli.ts              # Scan data and open browser
 ```
 
 ### Web Application
@@ -360,7 +337,7 @@ npm publish
 - **Claude Code**: Check `~/.claude/projects/` exists
 - **OpenCode**: Check `~/.local/share/opencode/` exists
 - **Codex**: Check `~/.codex/` exists
-- **Cursor**: Run `vibetracking cursor login` first
+- **Cursor**: Make sure you're logged into cursor.com in your browser
 
 ### Native module build fails