pi-cursor-sdk 0.1.55 → 0.1.57

package/scripts/steering-rpc-smoke.mjs

@@ -8,7 +8,12 @@ import { accessSync, chmodSync, constants, mkdirSync, mkdtempSync, rmSync, write
 import { tmpdir } from "node:os";
 import { delimiter, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { parseJsonLines, terminateChild, waitForChildClose } from "./lib/cursor-child-process.mjs";
+import {
+	CHILD_PROCESS_TREE_SPAWN_OPTIONS,
+	parseJsonLines,
+	terminateChild,
+	waitForChildClose,
+} from "./lib/cursor-child-process.mjs";
 import { apiKeySecretsFromProcess } from "./lib/cursor-cli-args.mjs";
 import { buildCursorSmokeEnv, CURSOR_SDK_EVENT_DEBUG_ENV_NAMES } from "./lib/cursor-smoke-env.mjs";
 import { scrubSensitiveText } from "../shared/cursor-sensitive-text.mjs";
@@ -168,7 +173,12 @@ async function runPiRpcSmoke(sessionDir, piBin) {
 	const args = ["--approve", "-e", root, "--cursor-no-fast", "--model", "cursor/composer-2-5", "--mode", "rpc", "--session-dir", sessionDir];
 	const env = buildPiRpcEnv();
 
-	const child = spawn(piBin, args, { cwd: root, env, stdio: ["pipe", "pipe", "pipe"], detached: process.platform !== "win32" });
+	const child = spawn(piBin, args, {
+		cwd: root,
+		env,
+		stdio: ["pipe", "pipe", "pipe"],
+		...CHILD_PROCESS_TREE_SPAWN_OPTIONS,
+	});
 	let closed = false;
 	let stdout = "";
 	let stderr = "";

package/scripts/tmux-live-smoke.sh

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/bin/bash
 set -euo pipefail
 
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
@@ -33,8 +33,7 @@ cleanup() {
 trap cleanup EXIT
 
 print_help() {
-	cat <<EOF
-Partial live smoke runner for pi-cursor-sdk (subset of docs/cursor-live-smoke-checklist.md).
+	printf '%s\n' 'Partial live smoke runner for pi-cursor-sdk (subset of docs/cursor-live-smoke-checklist.md).
 
 Usage:
   ./scripts/tmux-live-smoke.sh
@@ -73,8 +72,7 @@ Options:
 
 Exit codes:
   0  all partial checks passed
-  1  prerequisite, smoke, safety, or JSONL validation failure
-EOF
+  1  prerequisite, smoke, safety, or JSONL validation failure'
 }
 
 log() { smoke_log "$@"; }

package/shared/cursor-cloud-lifecycle-constants.d.mts

@@ -0,0 +1,3 @@
+export declare const CLOUD_AGENT_ID_PATTERN: RegExp;
+export declare const CLOUD_LIFECYCLE_ENTRY_TYPE: "cursor-cloud-lifecycle";
+export declare const CLOUD_LIFECYCLE_JOURNAL_PREFIX: ".cursor-cloud-lifecycle";

package/shared/cursor-cloud-lifecycle-constants.mjs

@@ -0,0 +1,7 @@
+/** Canonical Cursor Cloud lifecycle contract shared by the runtime and maintainer scripts. */
+
+export const CLOUD_AGENT_ID_PATTERN = /^bc-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+export const CLOUD_LIFECYCLE_ENTRY_TYPE = "cursor-cloud-lifecycle";
+
+export const CLOUD_LIFECYCLE_JOURNAL_PREFIX = ".cursor-cloud-lifecycle";

package/shared/cursor-sensitive-text.mjs

@@ -9,6 +9,12 @@ const BRIDGE_ENDPOINT_TOKEN_PATTERN = "[^/\\s\"'<>]+";
 const BRIDGE_LOOPBACK_HOST_PATTERN = "127\\.0\\.0\\.1(?::\\d+)?";
 const BRIDGE_ENDPOINT_PATH_PATTERN = `${escapeRegExp(BRIDGE_ENDPOINT_ROOT)}/${BRIDGE_ENDPOINT_TOKEN_PATTERN}/mcp`;
 
+function scrubUrlUserInfo(text) {
+	return text
+		.replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/?#]*@(?=[^\s/?#]+)/gi, "$1[redacted]@")
+		.replace(/\b[^\s/:@]+:[^\s/]+@(?=[A-Za-z0-9.-]+(?::|\/|\s|$))/g, "[redacted]@");
+}
+
 function scrubBridgeEndpointMaterial(text) {
 	return text
 		.replace(
@@ -29,7 +35,7 @@ export function scrubSensitiveText(text, apiKey) {
 		scrubbed = scrubbed.replace(new RegExp(escapeRegExp(trimmedKey), "g"), "[redacted]");
 	}
 	return scrubBridgeEndpointMaterial(
-		scrubbed
+		scrubUrlUserInfo(scrubbed)
 			.replace(/Bearer\s+[A-Za-z0-9._~+/=-]+/gi, "Bearer [redacted]")
 			.replace(/((?:^|[\s,{])cookie["']?\s*[:=]\s*["']?)[^\n]+/gi, "$1[redacted]")
 			.replace(

package/src/context.ts

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import type { Context, Message, ToolCall } from "@earendil-works/pi-ai/compat";
 import { convertToLlm } from "@earendil-works/pi-coding-agent";
 import type { AgentModeOption, SDKImage } from "@cursor/sdk";
+import { CURSOR_PI_BRIDGE_PREFERENCE_TEXT } from "./cursor-bridge-contract.js";
 import { getCursorReplayPromptLabel } from "./cursor-tool-presentation-registry.js";
 
 export interface CursorPrompt {
@@ -48,6 +49,7 @@ export function getCursorToolTailGuardText(
 			: getCursorPlanModeToolGuidanceText(options.agentMode, { includePiBridgeGuidance: options.includePiBridgeGuidance }),
 		"Exact-output requests: output exactly the requested text; no preamble or checks unless asked.",
 		"Tools: call available Cursor SDK/MCP tools; never print tool cards as assistant text.",
+		options.includePiBridgeGuidance === false ? undefined : CURSOR_PI_BRIDGE_PREFERENCE_TEXT,
 	].filter((line): line is string => line !== undefined).join("\n");
 }
 
@@ -73,7 +75,9 @@ function getCursorToolBoundaryText(
 	return lines.join("\n");
 }
 
-function getCursorBootstrapTailSections(options: Pick<CursorPromptOptions, "agentMode"> = {}): string[] {
+function getCursorBootstrapTailSections(
+	options: Pick<CursorPromptOptions, "agentMode" | "includePiBridgeGuidance"> = {},
+): string[] {
 	return [
 		"Answer the latest user request above using the instructions and Cursor SDK capabilities available in this run.",
 		getCursorToolTailGuardText({ ...options, includePlanModeGuidance: false }),
@@ -438,6 +442,5 @@ export function buildCursorPrompt(context: Context, options: CursorPromptOptions
 	);
 	const text = parts.join(SECTION_SEPARATOR);
 
-
 	return { text, images };
 }

package/src/cursor-agents-context-registration.ts

@@ -1,15 +1,22 @@
+import { isCursorModel } from "./cursor-model.js";
 import { registerCursorModelLifecycle, type CursorModelLifecycleExtensionApi } from "./cursor-model-lifecycle.js";
+import { resolveEffectiveCursorConfigForContext } from "./cursor-runtime-state.js";
 
 export type CursorAgentsContextExtensionApi = CursorModelLifecycleExtensionApi;
 
 export function registerCursorAgentsContextDedup(pi: CursorAgentsContextExtensionApi): void {
 	registerCursorModelLifecycle(pi, {
 		beforeAgentStart: async (event, ctx) => {
+			if (!isCursorModel(ctx.model)) return undefined;
 			const { resolveCursorFacingSystemPrompt } = await import("./cursor-agents-context.js");
+			const runtime = resolveEffectiveCursorConfigForContext(ctx).runtime.value;
 			const resolved = resolveCursorFacingSystemPrompt(
 				event.systemPrompt,
 				ctx.model,
 				event.systemPromptOptions,
+				undefined,
+				undefined,
+				runtime,
 			);
 			if (resolved === event.systemPrompt) return undefined;
 			return { systemPrompt: resolved };

package/src/cursor-agents-context.ts

@@ -11,6 +11,7 @@ import {
 	resolveCursorSettingSources,
 } from "./cursor-setting-sources.js";
 import type { SettingSource } from "@cursor/sdk";
+import type { CursorRuntime } from "./cursor-config.js";
 export { registerCursorAgentsContextDedup, type CursorAgentsContextExtensionApi } from "./cursor-agents-context-registration.js";
 
 export const CURSOR_PRESERVE_PI_AGENTS_MD_ENV = "PI_CURSOR_PRESERVE_PI_AGENTS_MD";
@@ -153,8 +154,9 @@ export function resolveCursorFacingSystemPrompt(
 	systemPromptOptions?: BuildSystemPromptOptions,
 	settingSourcesRaw?: string,
 	agentDir?: string,
+	runtime: CursorRuntime = "local",
 ): string {
-	if (!systemPromptOptions) return systemPrompt;
+	if (runtime === "cloud" || !systemPromptOptions) return systemPrompt;
 	const contextFiles = systemPromptOptions.contextFiles ?? [];
 	const settingSources =
 		settingSourcesRaw === undefined

package/src/cursor-api-key.ts

@@ -1,9 +1,10 @@
 export const CURSOR_API_KEY_ENV_VAR = "CURSOR_API_KEY";
+const CURSOR_PROVIDER_ID = "cursor";
 
 // Non-secret literal sentinel for pi's provider registry. Pi 0.77 treats `$ENV_VAR`
 // values as unconfigured when the env var is absent, which hides fallback models
 // before `/login`. Keep the provider available and resolve the real key in the
-// Cursor provider turn path from pi auth, --api-key, or CURSOR_API_KEY.
+// Cursor provider turn path from pi auth or CURSOR_API_KEY.
 export const CURSOR_API_KEY_CONFIG_VALUE = "pi-cursor-sdk-cursor-api-key-placeholder";
 
 const CURSOR_API_KEY_PLACEHOLDERS = new Set([
@@ -19,3 +20,16 @@ export function resolveCursorApiKey(apiKey?: string): string | undefined {
 	if (CURSOR_API_KEY_PLACEHOLDERS.has(trimmed)) return process.env.CURSOR_API_KEY?.trim() || undefined;
 	return trimmed;
 }
+
+async function getStoredCursorApiKey(): Promise<string | undefined> {
+	try {
+		const { AuthStorage } = await import("@earendil-works/pi-coding-agent");
+		return resolveCursorApiKey(await AuthStorage.create().getApiKey(CURSOR_PROVIDER_ID, { includeFallback: false }));
+	} catch {
+		return undefined;
+	}
+}
+
+export async function resolveCursorRuntimeApiKey(): Promise<string | undefined> {
+	return (await getStoredCursorApiKey()) ?? resolveCursorApiKey(process.env.CURSOR_API_KEY);
+}

package/src/cursor-bridge-contract.ts

@@ -1,9 +1,12 @@
 export const CURSOR_PI_BRIDGE_MCP_TOOL_PREFIX = "pi__";
+export const CURSOR_PI_BRIDGE_PREFERENCE_TEXT =
+	"When exposed, prefer pi__mcp for MCP work and pi__subagent for delegation; use Cursor-configured MCP or Cursor-native subagents only when the matching pi__ tool is not exposed or unavailable.";
 
 const CURSOR_PI_BRIDGE_CONTRACT_LINES = [
 	"Pi bridge contract:",
 	`${CURSOR_PI_BRIDGE_MCP_TOOL_PREFIX}* names are live Cursor MCP bridge tool names only when exposed in the current run.`,
 	`Call the ${CURSOR_PI_BRIDGE_MCP_TOOL_PREFIX}* MCP tool name, not the real pi tool name shown in pi history or transcripts.`,
+	CURSOR_PI_BRIDGE_PREFERENCE_TEXT,
 	"Bridged calls execute through normal pi tool flow, so pi shows the real pi tool name and returns a normal pi tool result.",
 	"Replay IDs, replay labels, and transcript tool names are display-only/context-only, not callable tools.",
 	"Cursor-native host tools, settings, plugins, and configured MCP servers are separate from the pi bridge.",