@rahularya01/pi-cursor 1.1.0 → 1.2.1

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## [1.2.1] - 2026-07-23
+
+### Fixed
+
+- Stream idle watchdog no longer treats long pure-reasoning turns as dead: `tokenDelta`, handled native-tool reject round-trips, and `toolCallCompleted` now count as progress.
+- **Idle timeouts and silent retries are disabled by default** (`PI_CURSOR_STREAM_IDLE_TIMEOUT_MS=0`, `PI_CURSOR_RESUME_IDLE_TIMEOUT_MS=0`, `PI_CURSOR_STREAM_IDLE_MAX_RETRIES=0`, `PI_CURSOR_H2_IDLE_TIMEOUT_MS=0`) so agent turns can run as long as Cursor keeps the stream open. Re-enable via env if you want a safety net.
+- h2-bridge activity kill is off by default and configurable (`PI_CURSOR_H2_*_TIMEOUT_MS`); parent heartbeats still reset it when enabled.
+- Blind idle retries (when re-enabled) are skipped if partial text/thinking was already streamed (avoids duplicated/jumbled answers).
+- Idle retries force-refresh access tokens when a token provider is available.
+- Conversation blob stores are soft-capped (~128 MiB) to limit long-session memory growth.
+- Tool result `isError` is propagated into Cursor MCP results.
+- Context-mode side-channel detection covers additional compaction / `[context]` injections.
+
+### Added
+
+- `/cursor.doctor` surfaces `lastStreamEvent`, last idle timeout metadata, and configured idle timeouts.
+- Documented stream/bridge idle env vars in README.
+- Unit coverage for idle progress classification, blind-restart gating, blob trimming, and timeout resolvers.
+
+## [1.2.0] - 2026-07-23
+
+### Changed
+
+- Package now ships a bundled, minified `dist/` build (via `tsup`) instead of raw TypeScript source. Unpacked package size dropped ~818 KB → ~222 KB (packed ~154 KB → ~69 KB) by tree-shaking the generated protobuf module (~1000 exports, ~70 used). `main` and `pi.extensions` now point at `./dist/index.js`.
+- `prepare` script builds `dist/` on install, so `git:`-based installs work without a committed build.
+
+### Fixed
+
+- Streaming hot path: the thinking-tag filter regex is compiled once at module load instead of being rebuilt on every streamed chunk.
+
 ## [1.1.0] - 2026-07-23
 
 ### Added

package/README.md

@@ -140,16 +140,23 @@ Pi Coding Agent  →  streamSimple (cursor-native)
 
 ## Configuration
 
-| Variable                                   | Purpose                                                                  |
-| ------------------------------------------ | ------------------------------------------------------------------------ |
-| `PI_CURSOR_AGENT_URL` / `CURSOR_AGENT_URL` | Override agent base URL (default: `https://agentn.us.api5.cursor.sh`).   |
-| `CURSOR_ACCESS_TOKEN`                      | Static access token override.                                            |
-| `PI_CURSOR_CLIENT_VERSION`                 | Pin `x-cursor-client-version` header sent by the HTTP/2 bridge.          |
-| `PI_CURSOR_SYSTEM_CREDENTIALS`             | `0`/`false` to disable Keychain/IDE credential reuse (default: allow).   |
-| `PI_CURSOR_RAW_MODELS`                     | Disable effort-suffix model collapse.                                    |
-| `PI_CURSOR_PROVIDER_DEBUG`                 | Enable JSONL debug logging (`/tmp/pi-cursor-debug.jsonl`).               |
-| `CURSOR_USAGE_SESSION_TOKEN`               | Optional `WorkosCursorSessionToken` fallback cookie for `/cursor.usage`. |
-| `PI_OFFLINE`                               | Skip live model discovery on startup.                                    |
+| Variable                                   | Purpose                                                                                                      |
+| ------------------------------------------ | ------------------------------------------------------------------------------------------------------------ |
+| `PI_CURSOR_AGENT_URL` / `CURSOR_AGENT_URL` | Override agent base URL (default: `https://agentn.us.api5.cursor.sh`).                                       |
+| `CURSOR_ACCESS_TOKEN`                      | Static access token override.                                                                                |
+| `PI_CURSOR_CLIENT_VERSION`                 | Pin `x-cursor-client-version` header sent by the HTTP/2 bridge.                                              |
+| `PI_CURSOR_SYSTEM_CREDENTIALS`             | `0`/`false` to disable Keychain/IDE credential reuse (default: allow).                                       |
+| `PI_CURSOR_RAW_MODELS`                     | Disable effort-suffix model collapse.                                                                        |
+| `PI_CURSOR_PROVIDER_DEBUG`                 | Enable JSONL debug logging (`/tmp/pi-cursor-debug.jsonl`).                                                   |
+| `CURSOR_USAGE_SESSION_TOKEN`               | Optional `WorkosCursorSessionToken` fallback cookie for `/cursor.usage`.                                     |
+| `PI_OFFLINE`                               | Skip live model discovery on startup.                                                                        |
+| `PI_CURSOR_STREAM_IDLE_TIMEOUT_MS`         | Stream idle watchdog. **Default `0` (disabled)** so turns can run unbounded. Set e.g. `600000` to re-enable. |
+| `PI_CURSOR_RESUME_IDLE_TIMEOUT_MS`         | Idle timeout after tool-result resume. **Default `0` (disabled)**.                                           |
+| `PI_CURSOR_STREAM_IDLE_MAX_RETRIES`        | Silent full-request retries after idle. **Default `0` (disabled)**.                                          |
+| `PI_CURSOR_ACTIVE_BRIDGE_TTL_MS`           | How long a mid-tool bridge stays parked waiting for tool results (default: 1 hour).                          |
+| `PI_CURSOR_H2_CONNECT_TIMEOUT_MS`          | h2-bridge initial connect kill (default: `30000`; `0` disables).                                             |
+| `PI_CURSOR_H2_IDLE_TIMEOUT_MS`             | h2-bridge activity idle kill. **Default `0` (disabled)**. Parent heartbeats reset it when enabled.           |
+| `PI_CURSOR_MIDPAUSE_REBUILD_MAX_AGE_MS`    | Max age of mid-pause metadata used for full-history rebuild (default: 15 min).                               |
 
 ## Architecture notes
 
@@ -170,8 +177,9 @@ The OpenAI-compatible local proxy remains **internal/quarantined** (not exported
 
 ## Troubleshooting
 
-- **Not logged in / 401:** Ensure Cursor CLI or app is logged in, or run `/login cursor` again. Check `/cursor.doctor` to verify your `tokenSource`. Tokens from CLI/IDE are re-resolved when near expiry.
+- **Not logged in / 401:** Ensure Cursor CLI or app is logged in, or run `/login cursor` again. Check `/cursor.doctor` to verify your `tokenSource`. Tokens from CLI/IDE are re-resolved when near expiry; idle stream retries also force-refresh credentials.
 - **Empty / hung stream:** Cursor may have updated wire headers; verify network connectivity or bump `PI_CURSOR_CLIENT_VERSION`. `/cursor.doctor` prints the active `clientVersion`.
+- **Stuck / dies after a few minutes of work:** Idle watchdogs are **off by default**. If you re-enabled them via env, set `PI_CURSOR_STREAM_IDLE_TIMEOUT_MS=0` and `PI_CURSOR_H2_IDLE_TIMEOUT_MS=0`. Check `/cursor.doctor` for `lastIdleTimeoutAt` / `lastStreamEvent`. Enable `PI_CURSOR_PROVIDER_DEBUG=1` and inspect `/tmp/pi-cursor-debug.jsonl`.
 - **Tool continuation lost:** The provider now prefers full-history rebuild when checkpoints are stale/mismatched. If recovery still skips, `/cursor.doctor` shows `lastRecoverySkipReason`. Retry the turn or start a new chat.
 - **WSL credential detection:** Ensure your Windows user profile folder exists under `/mnt/c/Users/` and is readable from WSL. Disable with `PI_CURSOR_SYSTEM_CREDENTIALS=0` if undesired.
 

package/{src/client → dist}/h2-bridge.mjs

@@ -95,28 +95,66 @@ async function readMessage() {
 const configBuf = await readMessage();
 if (!configBuf) process.exit(1);
 
-const config = JSON.parse(configBuf.toString("utf8"));
+let config;
+try {
+  config = JSON.parse(configBuf.toString("utf8"));
+} catch {
+  process.stderr.write("[h2-bridge] invalid config JSON\n");
+  process.exit(1);
+}
+if (!config || typeof config !== "object") {
+  process.stderr.write("[h2-bridge] config must be a JSON object\n");
+  process.exit(1);
+}
 const { accessToken, url, path: rpcPath, unary } = config;
+// Connect timeout still protects against a hung first handshake (default 30s).
+// Activity idle is off by default (0) so long agent turns are not killed;
+// set idleTimeoutMs / PI_CURSOR_H2_IDLE_TIMEOUT_MS to re-enable a safety net.
+// Parent heartbeats every 5s also reset the timer when it is enabled.
+const connectTimeoutMs = optionalMs(config.connectTimeoutMs, 30_000);
+const idleTimeoutMs = optionalMs(config.idleTimeoutMs, 0);
+
+/** Parse ms; 0 means disabled. Invalid/missing uses fallback. */
+function optionalMs(value, fallback) {
+  if (value === undefined || value === null || value === "") return fallback;
+  const n = Number(value);
+  if (!Number.isFinite(n) || n < 0) return fallback;
+  if (n === 0) return 0;
+  return Math.floor(n);
+}
 
 const client = http2.connect(url || "https://api2.cursor.sh");
 
-// Guard against initial connection failure. Reset on any h2 activity
-// so long-running agent conversations (with tool call round-trips) survive.
-let timeout = setTimeout(killBridge, 30_000);
+// Optional watchdog: connect timeout until first activity, then activity idle.
+let timeout = undefined;
+
+function clearBridgeTimeout() {
+  if (timeout) clearTimeout(timeout);
+  timeout = undefined;
+}
+
+function armBridgeTimeout(ms) {
+  clearBridgeTimeout();
+  if (!ms || ms <= 0) return;
+  timeout = setTimeout(killBridge, ms);
+}
 
 function resetTimeout() {
-  clearTimeout(timeout);
-  timeout = setTimeout(killBridge, 120_000);
+  // After first I/O, only the activity idle (if enabled) applies.
+  armBridgeTimeout(idleTimeoutMs);
 }
 
 function killBridge() {
-  clearTimeout(timeout);
+  clearBridgeTimeout();
   client.destroy();
   process.exit(1);
 }
 
+// Initial connect guard only (skipped when connectTimeoutMs is 0).
+armBridgeTimeout(connectTimeoutMs);
+
 client.on("error", () => {
-  clearTimeout(timeout);
+  clearBridgeTimeout();
   process.exit(1);
 });
 
@@ -156,7 +194,7 @@ h2Stream.on("data", (chunk) => {
 });
 
 h2Stream.on("end", () => {
-  clearTimeout(timeout);
+  clearBridgeTimeout();
   client.close();
   if (isErrorStatus()) {
     const body = Buffer.concat(errorChunks).toString("utf8").trim();
@@ -172,7 +210,7 @@ h2Stream.on("end", () => {
 });
 
 h2Stream.on("error", () => {
-  clearTimeout(timeout);
+  clearBridgeTimeout();
   client.close();
   process.exit(1);
 });