Cursor Panel v0.0.3
Highlights
Cursor Panel v0.0.3 improves long-running storage behavior, reverse-proxy security, update recovery, and mobile navigation.
- Bounded audit retention: 90 days and 100,000 events by default, with incremental cleanup of expired sessions, invitations, device authorizations, and switch tickets.
- Safer maintenance: schema 0004_retention adds audit indexes, while cursor-core maintain --compact provides locked offline SQLite compaction.
- Bounded recovery storage: account-switch backups, schema-upgrade backups, desktop update backups, and server update recovery resources now have explicit count and byte budgets.
- Trusted proxy boundary: explicit IP/CIDR allowlists, a fixed Caddy address, spoof-resistant X-Forwarded-For handling, and per-client login throttling behind the standard proxy.
- Operational limits: Docker logs rotate at 10 MiB with five files for panel, maintenance, and proxy services.
- Better mobile navigation: a focused slide-out drawer with backdrop, scroll locking, Escape handling, focus trapping/restoration, and reduced-motion support.
- Dependency maintenance: cryptography 50.0.1 on Windows, Linux, and macOS arm64; macOS Intel retains the verified 46.0.7 universal2 wheel for frozen-sidecar compatibility.
更新内容
- 审计记录默认保留 90 天且最多 100,000 条，并分批清理过期会话、邀请、设备授权和切换票据。
- 数据库升级到 0004_retention，新增审计索引；cursor-core maintain --compact 可在持有目录锁时离线压缩 SQLite。
- 账号切换、schema 升级、桌面更新和服务端自动升级恢复点均增加份数与空间预算，并保护当前恢复来源。
- 反向代理只信任明确 IP/CIDR；标准 Compose 固定 Caddy 地址并覆盖来源头，避免伪造限流身份。
- panel、maintenance、proxy 的 Docker 日志限制为单份 10 MiB、最多 5 份。
- 移动端侧栏改为带遮罩的抽屉，支持背景滚动锁定、Escape、焦点循环/恢复和减少动态效果。
- Windows、Linux 与 macOS arm64 使用 cryptography 50.0.1；macOS Intel 为保证冻结 sidecar 可运行，使用已验证的 46.0.7 universal2 wheel。
Downloads / 下载
| Platform / 平台 | Package / 安装包 |
|---|---|
| macOS Apple Silicon | Cursor.Panel_0.0.3_aarch64.dmg |
| macOS Intel | Cursor.Panel_0.0.3_x64.dmg |
| Windows x64 | Cursor.Panel_0.0.3_x64-setup.exe |
| Linux amd64 server | cursor-panel-linux-amd64.tar |
| Python API / CLI + Web | cursor_dashboard-0.0.3-py3-none-any.whl |
Source archives, verification records, SHA256SUMS, and signed updater assets are attached below. / 下方同时提供源码、验证记录、校验文件及签名更新产物。
Upgrade notes / 升级说明
Back up the database and matching encryption key before a server upgrade. v0.0.3 upgrades the database from 0003_devices to 0004_retention; do not open the upgraded database with v0.0.2 and do not run an Alembic downgrade. Existing Compose deployments should check that the default 172.30.87.0/24 network does not conflict before recreating containers.
服务端升级前请备份数据库及匹配主密钥。v0.0.3 会把数据库从 0003_devices 升到 0004_retention；不要用 v0.0.2 打开升级后的数据库，也不要执行 Alembic downgrade。已有 Compose 部署在重建容器前，应先确认默认 172.30.87.0/24 网段没有冲突。
Desktop users on v0.0.2 can install this release through About & Updates after signed updater assets are published. The preview apps still lack Apple Developer ID signing/notarization and Windows Authenticode; updater signatures authenticate the update but do not replace publisher signing.
v0.0.2 桌面用户可在签名更新附件发布后通过“关于与更新”安装。预览应用仍没有 Apple Developer ID 签名/公证或 Windows Authenticode；更新签名用于验证更新来源，不能代替操作系统发行者签名。
Remote desktop switching remains disabled. Linux native desktop and Windows arm64 remain outside the supported scope.
完整记录：v0.0.3 archive · Compare with v0.0.2
Validation / 验证
All release checks target commit cc3be4a:
Local release checks passed: 347 Python tests (10 PowerShell-only checks skipped on macOS), 6 desktop sidecar tests, 4 Rust tests, frontend type/build checks, and Web/Desktop/Connected/Startup/Card/Update browser flows on Chromium and WebKit.