pi-cursor-sdk 0.4.0 → 0.5.2

package/shared/cursor-sdk-output-filter.mjs

@@ -1,17 +1,34 @@
 import { AsyncLocalStorage } from "node:async_hooks";
+import { isUtf8 } from "node:buffer";
+import { StringDecoder } from "node:string_decoder";
+import { stripVTControlCharacters } from "node:util";
 
 const cursorSdkOutputSuppression = new AsyncLocalStorage();
+const noticeOwner = new AsyncLocalStorage();
+// ponytail: larger frames pass unchanged. Raise this cap for a captured larger
+// SDK frame, or use a public SDK sink when unbounded suppression is required.
+const MAX_CANDIDATE_BYTES = 16 * 1024;
+const PARSER_WARNING = "shell-parser: tree-sitter natives are unavailable in this artifact; shell command analysis degrades to parsingFailed";
+const PLUGIN_PREFIX = "[local-plugins-bootstrap] loadUserLocalPlugin ";
+const HOOK_NOTICES = [
+	...["startup", "resume", "clear", "compact"].map(trigger => `[hooks] SessionStart trigger matcher "${trigger}" is not supported in Cursor, hooks will fire for all triggers`),
+	...["manual", "auto"].map(trigger => `[hooks] PreCompact trigger matcher "${trigger}" is not supported in Cursor, hooks will fire for all triggers`),
+	'[hooks] Tool "Glob" is not supported in Cursor and will be ignored',
+];
 
 export const CURSOR_SDK_STARTUP_NOISE_PATTERNS = [
-	"[hooks]",
-	"managed_skills.",
+	"managed_skills.startup_inventory",
+	"managed_skills.removed",
 	"CursorPluginsAgentSkillsService load completed",
 	"LocalCursorRulesService load completed",
 	"AgentSkillsCursorRulesService load completed",
-	"Error initializing ignore mapping for",
-	"Ripgrep path not configured. Call configureRipgrepPath() at startup.",
 ];
 
+const CURSOR_SDK_CAPABILITY_NOTICES = {
+	outsidePlugin: "Cursor skipped a local plugin because its symlink points outside the local plugin directory. Install it inside that directory to enable it.",
+	parserUnavailable: "Cursor shell analysis is degraded because native parsers are unavailable (parsingFailed). Check the native parser installation or CURSOR_TREE_SITTER_VENDOR_DIR.",
+};
+
 export function isCursorSdkOutputSuppressed() {
 	return cursorSdkOutputSuppression.getStore() === true;
 }
@@ -20,67 +37,123 @@ export function suppressCursorSdkOutput(operation) {
 	return cursorSdkOutputSuppression.run(true, operation);
 }
 
+/** Attribution follows the request's async work, including overlapping native sessions. */
+export function withCursorSdkOutputNoticeHandler(handler, operation) {
+	return noticeOwner.run(handler, operation);
+}
+
+function classify(text) {
+	if (text.replace(/\x1b\[[\d;]*m/g, "").includes("\x1b")) return;
+	const line = stripVTControlCharacters(text).replace(/\r?\n$/, "");
+	if (line === PARSER_WARNING) return "parserUnavailable";
+	if (/^\[local-plugins-bootstrap\] loadUserLocalPlugin [^\r\n]+ rejected: symlink target [^\r\n]+ is outside [^\r\n]+(?: \{[^\r\n]*\})?$/.test(line)) return "outsidePlugin";
+	if (HOOK_NOTICES.includes(line)) return "noise";
+	const info = /^(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d\.\d{3} INFO  (.+?)(?: ctx=[^\s]+)?(?: meta=\{[^\r\n]*\})?$/.exec(line);
+	if (info && CURSOR_SDK_STARTUP_NOISE_PATTERNS.includes(info[1])) return "noise";
+}
+
+// ponytail: framed text cannot attribute an identical complete SDK signature to
+// its emitter. Upgrade to a public SDK logger/sink when strict attribution exists.
 export function isCursorSdkStartupNoise(text) {
-	return CURSOR_SDK_STARTUP_NOISE_PATTERNS.some((pattern) => text.includes(pattern));
+	return classify(text) === "noise";
+}
+
+function possibleDiagnostic(text) {
+	// Only SGR may lead a diagnostic; Pi cursor/prompt controls forward immediately.
+	const withoutSgr = text.replace(/\x1b\[[\d;]*m/g, "");
+	const plain = stripVTControlCharacters(withoutSgr.replace(/\x1b(?:\[[\d;]*)?$/, ""));
+	if (withoutSgr.includes("\x1b") && !/\x1b(?:\[[\d;]*)?$/.test(withoutSgr)) return false;
+	if (!plain) return true;
+	if (HOOK_NOTICES.some(prefix => prefix.startsWith(plain) || plain === `${prefix}\r`)) return true;
+	if (PARSER_WARNING.startsWith(plain) || plain === `${PARSER_WARNING}\r`) return true;
+	if (PLUGIN_PREFIX.startsWith(plain) || plain.startsWith(PLUGIN_PREFIX)) return true;
+	const timestamp = "00:00:00.000 INFO  ";
+	const normalized = plain.replace(/\d/g, "0");
+	if (timestamp.startsWith(normalized)) return true;
+	if (!normalized.startsWith(timestamp)) return false;
+	const message = plain.slice(timestamp.length);
+	return CURSOR_SDK_STARTUP_NOISE_PATTERNS.some(prefix => prefix.startsWith(message) || message === prefix || message.startsWith(`${prefix} `));
 }
 
 function createFilteredProcessWrite(write, stream) {
-	return (chunk, encodingOrCallback, callback) => {
-		const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
-		if (isCursorSdkOutputSuppressed() || isCursorSdkStartupNoise(text)) {
-			const done = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-			done?.();
-			return true;
+	let pending = [], size = 0, text = "", decoder = new StringDecoder("utf8");
+	let owner, suppressed = false;
+	let active = true;
+	function reset() {
+		pending = []; size = 0; text = ""; decoder = new StringDecoder("utf8"); owner = undefined; suppressed = false;
+	}
+	function finish(output) {
+		const original = Buffer.concat(pending);
+		const kind = isUtf8(original) ? classify(text + decoder.end()) : undefined;
+		const handler = owner, wasSuppressed = suppressed;
+		reset();
+		let handled = kind === "noise";
+		if (kind && kind !== "noise" && handler) {
+			// A failed native notice must not turn a capability warning into silence.
+			try {
+				handled = cursorSdkOutputSuppression.run(false, () => handler(kind, CURSOR_SDK_CAPABILITY_NOTICES[kind])) !== false;
+			} catch { handled = false; }
+		}
+		if (!handled && (kind || !wasSuppressed)) output.push(original);
+	}
+	const filteredWrite = (chunk, encodingOrCallback, callback) => {
+		if (!active) return write.call(stream, chunk, encodingOrCallback, callback);
+		if (typeof chunk !== "string" && !(chunk instanceof Uint8Array)) return write.call(stream, chunk, encodingOrCallback, callback);
+		const bytes = typeof chunk === "string" ? Buffer.from(chunk, typeof encodingOrCallback === "string" ? encodingOrCallback : "utf8") : Buffer.from(chunk);
+		const output = [];
+		for (let offset = 0; offset < bytes.length;) {
+			const newline = bytes.indexOf(10, offset);
+			const end = newline < 0 ? bytes.length : newline + 1;
+			const part = bytes.subarray(offset, end);
+			// A write invocation is also a frame boundary after unknown bytes have
+			// forwarded: Pi's native footer/prompt need not end with a newline.
+			if (size === 0) { owner = noticeOwner.getStore(); suppressed = isCursorSdkOutputSuppressed(); }
+			pending.push(part); size += part.length;
+			if (size <= MAX_CANDIDATE_BYTES) text += decoder.write(part);
+			if (size > MAX_CANDIDATE_BYTES || !text || (newline < 0 && !possibleDiagnostic(text))) {
+				if (!suppressed) output.push(...pending);
+				reset();
+			} else if (newline >= 0) finish(output);
+			offset = end;
 		}
-		return write.call(stream, chunk, encodingOrCallback, callback);
+		const done = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
+		if (output.length) return write.call(stream, Buffer.concat(output), done);
+		if (done) process.nextTick(done);
+		return true;
 	};
-}
-
-function createFilteredConsoleMethod(method) {
-	return (...args) => {
-		const text = args.map((arg) => (typeof arg === "string" ? arg : String(arg))).join(" ");
-		if (isCursorSdkOutputSuppressed() || isCursorSdkStartupNoise(text)) return;
-		method(...args);
+	return {
+		write: filteredWrite,
+		restore() {
+			active = false;
+			const output = [];
+			if (size) finish(output);
+			if (output.length) write.call(stream, Buffer.concat(output));
+		},
 	};
 }
 
 let activeOutputFilterInstalls = 0;
 let outputFilterOriginals;
+let sinks;
 
 export function installCursorSdkOutputFilter() {
 	if (activeOutputFilterInstalls === 0) {
-		outputFilterOriginals = {
-			stdoutWrite: process.stdout.write,
-			stderrWrite: process.stderr.write,
-			consoleLog: console.log,
-			consoleInfo: console.info,
-			consoleWarn: console.warn,
-			consoleError: console.error,
-			consoleDebug: console.debug,
-		};
-		process.stdout.write = createFilteredProcessWrite(outputFilterOriginals.stdoutWrite, process.stdout);
-		process.stderr.write = createFilteredProcessWrite(outputFilterOriginals.stderrWrite, process.stderr);
-		console.log = createFilteredConsoleMethod(outputFilterOriginals.consoleLog);
-		console.info = createFilteredConsoleMethod(outputFilterOriginals.consoleInfo);
-		console.warn = createFilteredConsoleMethod(outputFilterOriginals.consoleWarn);
-		console.error = createFilteredConsoleMethod(outputFilterOriginals.consoleError);
-		console.debug = createFilteredConsoleMethod(outputFilterOriginals.consoleDebug);
+		outputFilterOriginals = { stdoutWrite: process.stdout.write, stderrWrite: process.stderr.write };
+		sinks = [createFilteredProcessWrite(outputFilterOriginals.stdoutWrite, process.stdout), createFilteredProcessWrite(outputFilterOriginals.stderrWrite, process.stderr)];
+		process.stdout.write = sinks[0].write;
+		process.stderr.write = sinks[1].write;
 	}
 	activeOutputFilterInstalls += 1;
-
 	let restored = false;
 	return () => {
 		if (restored) return;
 		restored = true;
-		activeOutputFilterInstalls = Math.max(activeOutputFilterInstalls - 1, 0);
-		if (activeOutputFilterInstalls > 0 || !outputFilterOriginals) return;
+		activeOutputFilterInstalls -= 1;
+		if (activeOutputFilterInstalls > 0) return;
 		process.stdout.write = outputFilterOriginals.stdoutWrite;
 		process.stderr.write = outputFilterOriginals.stderrWrite;
-		console.log = outputFilterOriginals.consoleLog;
-		console.info = outputFilterOriginals.consoleInfo;
-		console.warn = outputFilterOriginals.consoleWarn;
-		console.error = outputFilterOriginals.consoleError;
-		console.debug = outputFilterOriginals.consoleDebug;
-		outputFilterOriginals = undefined;
+		const finishing = sinks;
+		sinks = outputFilterOriginals = undefined;
+		for (const sink of finishing) sink.restore();
 	};
 }

package/src/context-window-cache.ts

@@ -5,7 +5,6 @@ import { BUNDLED_CONTEXT_WINDOWS } from "./bundled-context-windows.js";
 import { asRecord } from "./cursor-record-utils.js";
 
 const CONTEXT_WINDOW_CACHE_FILE = "cursor-sdk-context-windows.json";
-let userContextWindowOverrideLoadCount = 0;
 
 interface ContextWindowCacheFile {
 	contextWindows?: Record<string, number>;
@@ -34,7 +33,6 @@ function parseContextWindowCacheFile(value: unknown): ContextWindowCacheFile | u
 }
 
 function loadUserContextWindowOverrides(): Map<string, number> {
-	userContextWindowOverrideLoadCount += 1;
 	const path = getCachePath();
 	const overrides = new Map<string, number>();
 	if (!existsSync(path)) return overrides;
@@ -94,8 +92,4 @@ export function saveCachedContextWindow(modelId: string, contextWindow: number):
 
 export const __testUtils = {
 	getCachePath,
-	getUserContextWindowOverrideLoadCount: () => userContextWindowOverrideLoadCount,
-	resetUserContextWindowOverrideLoadCount: () => {
-		userContextWindowOverrideLoadCount = 0;
-	},
 };

package/src/context.ts

@@ -12,6 +12,8 @@ export interface CursorPrompt {
 }
 
 export interface CursorPromptOptions {
+	/** From the consumed native receipt; absent for requests that differ from the canonical projection. */
+	nativeSourceRoles?: readonly string[];
 	maxInputTokens?: number;
 	charsPerToken?: number;
 	imageTokenEstimate?: number;
@@ -50,6 +52,7 @@ export function getCursorToolTailGuardText(
 			: getCursorPlanModeToolGuidanceText(options.agentMode, { includePiBridgeGuidance: options.includePiBridgeGuidance }),
 		"Exact-output requests: output exactly the requested text; no preamble or checks unless asked.",
 		"Tools: call available Cursor SDK/MCP tools; never print tool cards as assistant text.",
+		"Do not comment on GitHub issues or PRs unless the user asked.",
 		options.includePiBridgeGuidance === false ? undefined : CURSOR_PI_BRIDGE_PREFERENCE_TEXT,
 	].filter((line): line is string => line !== undefined).join("\n");
 }
@@ -58,7 +61,7 @@ function getCursorToolBoundaryText(
 	options: Pick<CursorPromptOptions, "agentMode" | "includePiAskQuestionGuidance"> & { hasToolManifest?: boolean; includePiBridgeGuidance?: boolean } = {},
 ): string {
 	const includePiBridgeGuidance = options.includePiBridgeGuidance !== false;
-	const includePiAskQuestionGuidance = includePiBridgeGuidance && options.includePiAskQuestionGuidance !== false;
+	const includePiAskQuestionGuidance = includePiBridgeGuidance && options.includePiAskQuestionGuidance === true;
 	const lines = [
 		"Cursor SDK tool boundary:",
 		"Call only Cursor SDK/MCP tools exposed in this run; pi history names, replay labels, and transcript names are not callable.",
@@ -66,7 +69,7 @@ function getCursorToolBoundaryText(
 			? "For exposed pi bridge tools, call pi__* MCP names, not pi card/history names."
 			: undefined,
 		"Do not claim pi-side or WebSearch/WebFetch tools unless Cursor ran an equivalent tool.",
-		includePiAskQuestionGuidance ? "Use pi__cursor_ask_question for material choices if exposed." : undefined,
+		includePiAskQuestionGuidance ? "Use pi__cursor_ask_question only if the user asked to be prompted." : undefined,
 		getCursorPlanModeToolGuidanceText(options.agentMode, { includePiBridgeGuidance }),
 		"Images: only latest user images are sent; ask to reattach prior images.",
 	].filter((line): line is string => line !== undefined);
@@ -77,10 +80,13 @@ function getCursorToolBoundaryText(
 }
 
 function getCursorBootstrapTailSections(
-	options: Pick<CursorPromptOptions, "agentMode" | "includePiBridgeGuidance"> = {},
+	options: Pick<CursorPromptOptions, "agentMode" | "includePiBridgeGuidance">,
+	hasNewNativeUser = true,
 ): string[] {
 	return [
-		"Answer the latest user request above using the instructions and Cursor SDK capabilities available in this run.",
+		hasNewNativeUser
+			? "Answer the latest user request above using the instructions and Cursor SDK capabilities available in this run."
+			: "Continue from the pending background context above using Cursor SDK capabilities. No new user request was submitted; earlier user requests are history, not new instructions.",
 		getCursorToolTailGuardText({ ...options, includePlanModeGuidance: false }),
 	];
 }
@@ -101,22 +107,11 @@ function isToolCallBlock(block: { type: string }): block is ToolCall {
 	return block.type === "toolCall";
 }
 
-function extractLatestImages(messages: Message[]): SDKImage[] {
-	// Find the last user message and extract images only from it
-	for (let i = messages.length - 1; i >= 0; i--) {
-		const msg = messages[i];
-		if (msg.role !== "user") continue;
-		if (typeof msg.content === "string") return [];
-
-		const images: SDKImage[] = [];
-		for (const block of msg.content) {
-			if (isImageBlock(block) && block.data && block.mimeType) {
-				images.push({ data: block.data, mimeType: block.mimeType });
-			}
-		}
-		return images;
-	}
-	return [];
+function extractLatestImages(messages: Message[], latestUserIndex = getLatestUserMessageIndex(messages)): SDKImage[] {
+	const message = messages[latestUserIndex];
+	if (!message || message.role !== "user" || typeof message.content === "string") return [];
+	return message.content.flatMap((block) =>
+		isImageBlock(block) && block.data && block.mimeType ? [{ data: block.data, mimeType: block.mimeType }] : []);
 }
 
 function formatContentBlocks(content: string | { type: string; text?: string; data?: string; mimeType?: string }[]): string {
@@ -195,6 +190,20 @@ function getLatestUserMessageIndex(messages: Message[]): number {
 	return -1;
 }
 
+export function getCursorPendingInput(messages: Message[], nativeSourceRoles: readonly string[]) {
+	const start = messages.findLastIndex((message) => message.role === "assistant") + 1;
+	const latestUserIndex = nativeSourceRoles.findLastIndex((role, index) => index >= start && role === "user");
+	return { start, latestUserIndex };
+}
+
+function formatPromptMessage(message: Message, index: number, nativeSourceRoles?: readonly string[]): string | undefined {
+	if (message.role === "user" && nativeSourceRoles && nativeSourceRoles[index] !== "user") {
+		const text = formatContentBlocks(message.content);
+		return text ? `Background context: ${text}` : undefined;
+	}
+	return formatMessage(message);
+}
+
 function getSectionCost(section: string): number {
 	return section.length + SECTION_SEPARATOR.length;
 }
@@ -203,7 +212,7 @@ function applyPromptBudget(
 	sectionsBeforeMessages: string[],
 	messageSections: Array<{ index: number; text: string }>,
 	sectionsAfterMessages: string[],
-	latestUserMessageIndex: number,
+	requiredMessageIndexes: readonly number[],
 	options: CursorPromptOptions,
 ): string[] {
 	const maxInputTokens = options.maxInputTokens;
@@ -213,7 +222,7 @@ function applyPromptBudget(
 
 	const charsPerToken = options.charsPerToken ?? CURSOR_APPROX_CHARS_PER_TOKEN;
 	const maxChars = Math.max(1, Math.floor(maxInputTokens * charsPerToken));
-	const requiredMessageSections = messageSections.filter((section) => section.index === latestUserMessageIndex);
+	const requiredMessageSections = messageSections.filter((section) => requiredMessageIndexes.includes(section.index));
 	const requiredCost = [...sectionsBeforeMessages, ...requiredMessageSections.map((section) => section.text), ...sectionsAfterMessages].reduce(
 		(total, section) => total + getSectionCost(section),
 		0,
@@ -368,6 +377,7 @@ export function computeCursorContextFingerprint(context: Context): string {
 export function shouldBootstrapCursorContext(
 	sendState: { bootstrapped: boolean; contextFingerprint: string },
 	context: Context,
+	nativeSourceRoles?: readonly string[],
 ): boolean {
 	if (!sendState.bootstrapped) return true;
 	const previous = parseCursorContextFingerprint(sendState.contextFingerprint);
@@ -385,9 +395,16 @@ export function shouldBootstrapCursorContext(
 	for (let index = 0; index < previous.messageHashes.length; index += 1) {
 		if (current.messageHashes[index] !== previous.messageHashes[index]) return true;
 	}
-	// An incremental prompt carries only the latest new user message. Rebootstrap
-	// if additional model-visible input (such as ! shell output) would be lost.
 	const appended = normalizePiContextMessages(context.messages.slice(previous.messageHashes.length));
+	if (nativeSourceRoles) {
+		const messages = normalizePiContextMessages(context.messages);
+		const offset = messages.length - appended.length;
+		// Native summaries invalidate the pool; other pending input travels together.
+		if (nativeSourceRoles.slice(offset).some((role) => role === "branchSummary" || role === "compactionSummary")) return true;
+		const { start } = getCursorPendingInput(messages, nativeSourceRoles);
+		return appended.some((message, index) => message.role === "user" && offset + index < start);
+	}
+	// Without native origin, an incremental prompt carries only the final user.
 	const appendedUsers = appended.filter((message) => message.role === "user");
 	return appended.length > 0 && (appendedUsers.length !== 1 || appended.at(-1)?.role !== "user");
 }
@@ -403,15 +420,20 @@ export function shouldBootstrapCursorSend(
 export function buildCursorIncrementalPrompt(context: Context, options: CursorPromptOptions = {}): CursorPrompt {
 	// Incremental sends omit Pi system instructions and the full tool boundary; the session agent retains both from bootstrap.
 	const messages = normalizePiContextMessages(context.messages);
-	const latestUserMessageIndex = getLatestUserMessageIndex(messages);
+	const pending = options.nativeSourceRoles && getCursorPendingInput(messages, options.nativeSourceRoles);
+	const latestUserMessageIndex = pending ? pending.latestUserIndex : getLatestUserMessageIndex(messages);
 	const latestUserMessage = latestUserMessageIndex >= 0 ? messages[latestUserMessageIndex] : undefined;
 	const latestUserText = latestUserMessage ? formatMessage(latestUserMessage) : undefined;
 	const sectionsBeforeMessages = [
 		"Continue the conversation using Cursor SDK capabilities only. Do not list, promise, or call pi-only tools from earlier context as if they were available.",
 	];
-	const latestUserMessageSections =
-		latestUserText && latestUserMessageIndex >= 0 ? [{ index: latestUserMessageIndex, text: latestUserText }] : [];
-	const images = extractLatestImages(messages);
+	const latestUserMessageSections = pending
+		? messages.flatMap((message, index) => {
+			const text = index >= pending.start ? formatPromptMessage(message, index, options.nativeSourceRoles) : undefined;
+			return text ? [{ index, text }] : [];
+		})
+		: latestUserText && latestUserMessageIndex >= 0 ? [{ index: latestUserMessageIndex, text: latestUserText }] : [];
+	const images = extractLatestImages(messages, latestUserMessageIndex);
 	const imageTokenReserve = images.length * (options.imageTokenEstimate ?? 0);
 	const budgetOptions =
 		options.maxInputTokens === undefined
@@ -421,12 +443,20 @@ export function buildCursorIncrementalPrompt(context: Context, options: CursorPr
 		sectionsBeforeMessages,
 		latestUserMessageSections,
 		[getCursorToolTailGuardText(options)],
-		latestUserMessageIndex,
+		latestUserMessageSections.map((section) => section.index),
 		budgetOptions,
 	);
 	return { text: parts.join(SECTION_SEPARATOR), images };
 }
 
+/** Native compaction/tree instructions are already a complete summarization request. */
+export function buildCursorSummaryPrompt(context: Context): CursorPrompt {
+	const { systemPrompt } = resolveCursorPiContext(context);
+	const sections = normalizePiContextMessages(context.messages).map(formatMessage).filter((text): text is string => text !== undefined);
+	if (systemPrompt) sections.unshift(`System instructions from pi:\n${systemPrompt}`);
+	return { text: sections.join(SECTION_SEPARATOR), images: [] };
+}
+
 export function buildCursorPrompt(context: Context, options: CursorPromptOptions = {}): CursorPrompt {
 	const sectionsBeforeMessages: string[] = [getCursorToolBoundaryText({
 		agentMode: options.agentMode,
@@ -446,12 +476,13 @@ export function buildCursorPrompt(context: Context, options: CursorPromptOptions
 	const messages = normalizePiContextMessages(context.messages);
 	const messageSections = messages
 		.map((msg, index) => {
-			const text = formatMessage(msg);
+			const text = formatPromptMessage(msg, index, options.nativeSourceRoles);
 			return text ? { index, text } : undefined;
 		})
 		.filter((section): section is { index: number; text: string } => section !== undefined);
-	const sectionsAfterMessages = getCursorBootstrapTailSections(options);
-	const images = extractLatestImages(messages);
+	const pending = options.nativeSourceRoles && getCursorPendingInput(messages, options.nativeSourceRoles);
+	const sectionsAfterMessages = getCursorBootstrapTailSections(options, !pending || pending.latestUserIndex >= 0);
+	const images = extractLatestImages(messages, pending ? pending.latestUserIndex : getLatestUserMessageIndex(messages));
 	const imageTokenReserve = images.length * (options.imageTokenEstimate ?? 0);
 	const budgetOptions =
 		options.maxInputTokens === undefined
@@ -461,7 +492,8 @@ export function buildCursorPrompt(context: Context, options: CursorPromptOptions
 		sectionsBeforeMessages,
 		messageSections,
 		sectionsAfterMessages,
-		getLatestUserMessageIndex(messages),
+		pending ? messageSections.filter((section) => section.index >= pending.start).map((section) => section.index)
+			: [getLatestUserMessageIndex(messages)],
 		budgetOptions,
 	);
 	const text = parts.join(SECTION_SEPARATOR);

package/src/cursor-api-key.ts

@@ -1,12 +1,9 @@
-import { readStoredCredential } from "@earendil-works/pi-coding-agent";
+import { envApiKeyAuth, type ApiKeyAuth, type ApiKeyCredential } from "@earendil-works/pi-ai";
+import { parseEnvBoolean } from "./cursor-env-boolean.js";
 
 export const CURSOR_API_KEY_ENV_VAR = "CURSOR_API_KEY";
-const CURSOR_PROVIDER_ID = "cursor";
 
-// Non-secret literal sentinel for pi's provider registry. Pi 0.77 treats `$ENV_VAR`
-// values as unconfigured when the env var is absent, which hides fallback models
-// before `/login`. Keep the provider available and resolve the real key in the
-// Cursor provider turn path from pi auth or CURSOR_API_KEY.
+// Legacy no-auth availability policy only; never a configured models.json key.
 export const CURSOR_API_KEY_CONFIG_VALUE = "pi-cursor-sdk-cursor-api-key-placeholder";
 
 const CURSOR_API_KEY_PLACEHOLDERS = new Set([
@@ -17,21 +14,44 @@ const CURSOR_API_KEY_PLACEHOLDERS = new Set([
 ]);
 
 export function resolveCursorApiKey(apiKey?: string): string | undefined {
+	return normalizeCursorApiKey(apiKey) ?? (apiKey && CURSOR_API_KEY_PLACEHOLDERS.has(apiKey.trim())
+		? normalizeCursorApiKey(process.env.CURSOR_API_KEY) : undefined);
+}
+
+export function normalizeCursorApiKey(apiKey?: string): string | undefined {
 	const trimmed = apiKey?.trim();
-	if (!trimmed) return undefined;
-	if (CURSOR_API_KEY_PLACEHOLDERS.has(trimmed)) return process.env.CURSOR_API_KEY?.trim() || undefined;
+	if (!trimmed || CURSOR_API_KEY_PLACEHOLDERS.has(trimmed)) return undefined;
 	return trimmed;
 }
 
-function getStoredCursorApiKey(): string | undefined {
-	try {
-		const credential = readStoredCredential(CURSOR_PROVIDER_ID);
-		return resolveCursorApiKey(credential?.type === "api_key" ? credential.key : undefined);
-	} catch {
-		return undefined;
-	}
+export async function resolveCursorCredentialApiKey(
+	credential: ApiKeyCredential | undefined,
+	environment: () => Promise<string | undefined>,
+): Promise<string | undefined> {
+	return normalizeCursorApiKey(credential?.key)
+		?? normalizeCursorApiKey(credential?.env?.CURSOR_API_KEY)
+		?? normalizeCursorApiKey(await environment());
 }
 
-export function resolveCursorRuntimeApiKey(): Promise<string | undefined> {
-	return Promise.resolve(getStoredCursorApiKey() ?? resolveCursorApiKey(process.env.CURSOR_API_KEY));
+export function cursorApiKeyAuth(): ApiKeyAuth {
+	const standard = envApiKeyAuth("Cursor API key", [CURSOR_API_KEY_ENV_VAR]);
+	const auth: ApiKeyAuth = {
+		name: standard.name,
+		login: standard.login,
+		async check(input) {
+			const resolved = await auth.resolve(input);
+			return resolved ? { type: "api_key", source: resolved.source } : undefined;
+		},
+		async resolve({ ctx, credential, signal }) {
+			signal.throwIfAborted();
+			const key = await resolveCursorCredentialApiKey(credential, () => ctx.env(CURSOR_API_KEY_ENV_VAR));
+			signal.throwIfAborted();
+			if (key) return { auth: { apiKey: key }, env: credential?.env, source: credential ? "stored credential" : CURSOR_API_KEY_ENV_VAR };
+			if (!parseEnvBoolean(process.env.PI_CURSOR_HIDE_MODELS_WHEN_LOGGED_OUT, false)) {
+				return { auth: { apiKey: CURSOR_API_KEY_CONFIG_VALUE }, source: "fallback" };
+			}
+			return undefined;
+		},
+	};
+	return auth;
 }