@rahularya01/pi-cursor 1.2.0 → 1.2.2

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Changelog
 
+## [1.2.2] - 2026-07-23
+
+### Fixed
+
+- **Root hang:** Cursor `InteractionQuery` messages (web search, Exa, ask-question, switch-mode, create-plan, WebFetch field #9, unknown fields) are now always answered. Previously only WebFetch field #9 was handled — any other permission/query left the AgentService stream parked forever ("stops after a few minutes").
+- Always-on lifecycle log at `$TMPDIR/pi-cursor-lifecycle.jsonl` (override with `PI_CURSOR_LIFECYCLE_LOG`) for stream start/close and interaction handling.
+- h2-bridge: HTTP/2 PING every 20s to prevent intermediary idle GOAWAY; stderr/errors are surfaced instead of swallowed.
+- Parent bridge now captures child stderr; heartbeats stay referenced during long tool pauses.
+- Treat `heartbeat` / tool-call start / thinking-completed / summary updates as stream progress.
+
+## [1.2.1] - 2026-07-23
+
+### Fixed
+
+- Stream idle watchdog no longer treats long pure-reasoning turns as dead: `tokenDelta`, handled native-tool reject round-trips, and `toolCallCompleted` now count as progress.
+- **Idle timeouts and silent retries are disabled by default** (`PI_CURSOR_STREAM_IDLE_TIMEOUT_MS=0`, `PI_CURSOR_RESUME_IDLE_TIMEOUT_MS=0`, `PI_CURSOR_STREAM_IDLE_MAX_RETRIES=0`, `PI_CURSOR_H2_IDLE_TIMEOUT_MS=0`) so agent turns can run as long as Cursor keeps the stream open. Re-enable via env if you want a safety net.
+- h2-bridge activity kill is off by default and configurable (`PI_CURSOR_H2_*_TIMEOUT_MS`); parent heartbeats still reset it when enabled.
+- Blind idle retries (when re-enabled) are skipped if partial text/thinking was already streamed (avoids duplicated/jumbled answers).
+- Idle retries force-refresh access tokens when a token provider is available.
+- Conversation blob stores are soft-capped (~128 MiB) to limit long-session memory growth.
+- Tool result `isError` is propagated into Cursor MCP results.
+- Context-mode side-channel detection covers additional compaction / `[context]` injections.
+
+### Added
+
+- `/cursor.doctor` surfaces `lastStreamEvent`, last idle timeout metadata, and configured idle timeouts.
+- Documented stream/bridge idle env vars in README.
+- Unit coverage for idle progress classification, blind-restart gating, blob trimming, and timeout resolvers.
+
 ## [1.2.0] - 2026-07-23
 
 ### Changed

package/README.md

@@ -140,16 +140,24 @@ Pi Coding Agent  →  streamSimple (cursor-native)
 
 ## Configuration
 
-| Variable                                   | Purpose                                                                  |
-| ------------------------------------------ | ------------------------------------------------------------------------ |
-| `PI_CURSOR_AGENT_URL` / `CURSOR_AGENT_URL` | Override agent base URL (default: `https://agentn.us.api5.cursor.sh`).   |
-| `CURSOR_ACCESS_TOKEN`                      | Static access token override.                                            |
-| `PI_CURSOR_CLIENT_VERSION`                 | Pin `x-cursor-client-version` header sent by the HTTP/2 bridge.          |
-| `PI_CURSOR_SYSTEM_CREDENTIALS`             | `0`/`false` to disable Keychain/IDE credential reuse (default: allow).   |
-| `PI_CURSOR_RAW_MODELS`                     | Disable effort-suffix model collapse.                                    |
-| `PI_CURSOR_PROVIDER_DEBUG`                 | Enable JSONL debug logging (`/tmp/pi-cursor-debug.jsonl`).               |
-| `CURSOR_USAGE_SESSION_TOKEN`               | Optional `WorkosCursorSessionToken` fallback cookie for `/cursor.usage`. |
-| `PI_OFFLINE`                               | Skip live model discovery on startup.                                    |
+| Variable                                   | Purpose                                                                                                      |
+| ------------------------------------------ | ------------------------------------------------------------------------------------------------------------ |
+| `PI_CURSOR_AGENT_URL` / `CURSOR_AGENT_URL` | Override agent base URL (default: `https://agentn.us.api5.cursor.sh`).                                       |
+| `CURSOR_ACCESS_TOKEN`                      | Static access token override.                                                                                |
+| `PI_CURSOR_CLIENT_VERSION`                 | Pin `x-cursor-client-version` header sent by the HTTP/2 bridge.                                              |
+| `PI_CURSOR_SYSTEM_CREDENTIALS`             | `0`/`false` to disable Keychain/IDE credential reuse (default: allow).                                       |
+| `PI_CURSOR_RAW_MODELS`                     | Disable effort-suffix model collapse.                                                                        |
+| `PI_CURSOR_PROVIDER_DEBUG`                 | Enable verbose JSONL debug logging.                                                                          |
+| `PI_CURSOR_LIFECYCLE_LOG`                  | Always-on compact lifecycle log path (default: `$TMPDIR/pi-cursor-lifecycle.jsonl`).                         |
+| `CURSOR_USAGE_SESSION_TOKEN`               | Optional `WorkosCursorSessionToken` fallback cookie for `/cursor.usage`.                                     |
+| `PI_OFFLINE`                               | Skip live model discovery on startup.                                                                        |
+| `PI_CURSOR_STREAM_IDLE_TIMEOUT_MS`         | Stream idle watchdog. **Default `0` (disabled)** so turns can run unbounded. Set e.g. `600000` to re-enable. |
+| `PI_CURSOR_RESUME_IDLE_TIMEOUT_MS`         | Idle timeout after tool-result resume. **Default `0` (disabled)**.                                           |
+| `PI_CURSOR_STREAM_IDLE_MAX_RETRIES`        | Silent full-request retries after idle. **Default `0` (disabled)**.                                          |
+| `PI_CURSOR_ACTIVE_BRIDGE_TTL_MS`           | How long a mid-tool bridge stays parked waiting for tool results (default: 1 hour).                          |
+| `PI_CURSOR_H2_CONNECT_TIMEOUT_MS`          | h2-bridge initial connect kill (default: `30000`; `0` disables).                                             |
+| `PI_CURSOR_H2_IDLE_TIMEOUT_MS`             | h2-bridge activity idle kill. **Default `0` (disabled)**. Parent heartbeats reset it when enabled.           |
+| `PI_CURSOR_MIDPAUSE_REBUILD_MAX_AGE_MS`    | Max age of mid-pause metadata used for full-history rebuild (default: 15 min).                               |
 
 ## Architecture notes
 
@@ -170,8 +178,9 @@ The OpenAI-compatible local proxy remains **internal/quarantined** (not exported
 
 ## Troubleshooting
 
-- **Not logged in / 401:** Ensure Cursor CLI or app is logged in, or run `/login cursor` again. Check `/cursor.doctor` to verify your `tokenSource`. Tokens from CLI/IDE are re-resolved when near expiry.
+- **Not logged in / 401:** Ensure Cursor CLI or app is logged in, or run `/login cursor` again. Check `/cursor.doctor` to verify your `tokenSource`. Tokens from CLI/IDE are re-resolved when near expiry; idle stream retries also force-refresh credentials.
 - **Empty / hung stream:** Cursor may have updated wire headers; verify network connectivity or bump `PI_CURSOR_CLIENT_VERSION`. `/cursor.doctor` prints the active `clientVersion`.
+- **Stuck / dies after a few minutes of work:** v1.2.2 answers all Cursor `InteractionQuery` permission prompts (web search / ask-question / etc.) that previously parked the stream. Inspect `$TMPDIR/pi-cursor-lifecycle.jsonl` for `interaction_query` / `bridge_close` events, and `/cursor.doctor` for `lastStreamEvent`. Full debug: `PI_CURSOR_PROVIDER_DEBUG=1`.
 - **Tool continuation lost:** The provider now prefers full-history rebuild when checkpoints are stale/mismatched. If recovery still skips, `/cursor.doctor` shows `lastRecoverySkipReason`. Retry the turn or start a new chat.
 - **WSL credential detection:** Ensure your Windows user profile folder exists under `/mnt/c/Users/` and is readable from WSL. Disable with `PI_CURSOR_SYSTEM_CREDENTIALS=0` if undesired.
 

package/dist/h2-bridge.mjs

@@ -95,31 +95,102 @@ async function readMessage() {
 const configBuf = await readMessage();
 if (!configBuf) process.exit(1);
 
-const config = JSON.parse(configBuf.toString("utf8"));
+let config;
+try {
+  config = JSON.parse(configBuf.toString("utf8"));
+} catch {
+  process.stderr.write("[h2-bridge] invalid config JSON\n");
+  process.exit(1);
+}
+if (!config || typeof config !== "object") {
+  process.stderr.write("[h2-bridge] config must be a JSON object\n");
+  process.exit(1);
+}
 const { accessToken, url, path: rpcPath, unary } = config;
+// Connect timeout still protects against a hung first handshake (default 30s).
+// Activity idle is off by default (0) so long agent turns are not killed;
+// set idleTimeoutMs / PI_CURSOR_H2_IDLE_TIMEOUT_MS to re-enable a safety net.
+// Parent heartbeats every 5s also reset the timer when it is enabled.
+const connectTimeoutMs = optionalMs(config.connectTimeoutMs, 30_000);
+const idleTimeoutMs = optionalMs(config.idleTimeoutMs, 0);
+
+/** Parse ms; 0 means disabled. Invalid/missing uses fallback. */
+function optionalMs(value, fallback) {
+  if (value === undefined || value === null || value === "") return fallback;
+  const n = Number(value);
+  if (!Number.isFinite(n) || n < 0) return fallback;
+  if (n === 0) return 0;
+  return Math.floor(n);
+}
 
 const client = http2.connect(url || "https://api2.cursor.sh");
 
-// Guard against initial connection failure. Reset on any h2 activity
-// so long-running agent conversations (with tool call round-trips) survive.
-let timeout = setTimeout(killBridge, 30_000);
+// HTTP/2 PING keeps intermediary/load-balancer sessions alive during long pure-thinking
+// stretches where no DATA frames flow. Cursor may otherwise GOAWAY the stream mid-turn.
+const pingEveryMs = optionalMs(config.pingIntervalMs, 20_000);
+let pingTimer = undefined;
+if (pingEveryMs > 0) {
+  pingTimer = setInterval(() => {
+    if (client.destroyed || client.closed) return;
+    try {
+      client.ping((err) => {
+        if (err) {
+          process.stderr.write(`[h2-bridge] ping failed: ${err.message}\n`);
+        }
+      });
+    } catch (err) {
+      process.stderr.write(
+        `[h2-bridge] ping threw: ${err instanceof Error ? err.message : String(err)}\n`,
+      );
+    }
+  }, pingEveryMs);
+  pingTimer.unref?.();
+}
+
+// Optional watchdog: connect timeout until first activity, then activity idle.
+let timeout = undefined;
+
+function clearBridgeTimeout() {
+  if (timeout) clearTimeout(timeout);
+  timeout = undefined;
+}
+
+function armBridgeTimeout(ms) {
+  clearBridgeTimeout();
+  if (!ms || ms <= 0) return;
+  timeout = setTimeout(killBridge, ms);
+}
 
 function resetTimeout() {
-  clearTimeout(timeout);
-  timeout = setTimeout(killBridge, 120_000);
+  // After first I/O, only the activity idle (if enabled) applies.
+  armBridgeTimeout(idleTimeoutMs);
 }
 
 function killBridge() {
-  clearTimeout(timeout);
+  clearBridgeTimeout();
+  if (pingTimer) clearInterval(pingTimer);
   client.destroy();
   process.exit(1);
 }
 
-client.on("error", () => {
-  clearTimeout(timeout);
+// Initial connect guard only (skipped when connectTimeoutMs is 0).
+armBridgeTimeout(connectTimeoutMs);
+
+client.on("error", (err) => {
+  clearBridgeTimeout();
+  if (pingTimer) clearInterval(pingTimer);
+  process.stderr.write(
+    `[h2-bridge] client error: ${err instanceof Error ? err.message : String(err)}\n`,
+  );
   process.exit(1);
 });
 
+client.on("goaway", (errorCode, _lastStreamId, opaqueData) => {
+  process.stderr.write(
+    `[h2-bridge] GOAWAY errorCode=${errorCode} opaque=${opaqueData ? opaqueData.toString("utf8").slice(0, 200) : ""}\n`,
+  );
+});
+
 const headers = {
   ":method": "POST",
   ":path": rpcPath || "/agent.v1.AgentService/Run",
@@ -156,7 +227,8 @@ h2Stream.on("data", (chunk) => {
 });
 
 h2Stream.on("end", () => {
-  clearTimeout(timeout);
+  clearBridgeTimeout();
+  if (pingTimer) clearInterval(pingTimer);
   client.close();
   if (isErrorStatus()) {
     const body = Buffer.concat(errorChunks).toString("utf8").trim();
@@ -171,8 +243,12 @@ h2Stream.on("end", () => {
   setTimeout(() => process.exit(0), 100);
 });
 
-h2Stream.on("error", () => {
-  clearTimeout(timeout);
+h2Stream.on("error", (err) => {
+  clearBridgeTimeout();
+  if (pingTimer) clearInterval(pingTimer);
+  process.stderr.write(
+    `[h2-bridge] stream error: ${err instanceof Error ? err.message : String(err)}\n`,
+  );
   client.close();
   process.exit(1);
 });