pi-cursor-sdk 0.1.62

Added

• Emit pi-cursor-sdk:ask-question:blocked ({ active: boolean }) while cursor_ask_question awaits pi UI input, and clear it in finally. Consumers (e.g. Herdr) can subscribe and map it to blocked/working; listening is out of scope for this package.
• Record each distinct local Cursor agent whose send is initiated once per native pi session in a non-resumable cursor-sdk-agent-lineage custom entry, including failed/cancelled runs and when local resume is disabled.

Fixed

• Suppress Cursor SDK DOMException [AbortError] while any provider turn or session guard is active (stall detector / inter-turn timers), and treat installed SDK RetriableError: Connection stalled repeatedly as a retryable network failure (#194, #197).
• Map observed local Cursor SDK prompt usage into pi-additive components (input = inputTokens - cacheRead - cacheWrite) with totalTokens = inputTokens + outputTokens, reject invalid cache partitions, and floor approximate occupancy at the last compatible same-model in-window assistant measurement; cloud raw usage remains display-only (#196).
• Omit invariant Pi system instructions from incremental local Cursor prompts; bootstrap/rebootstrap still send the current system section, and system-prompt changes still force context-divergence bootstrap (#192).
• Capture pi --list-models cursor fully before searching for composer-2.5 in smoke:live, so large catalogs no longer SIGPIPE the prereq under pipefail.
• Isolate ambient Git HOME and XDG_CONFIG_HOME in cloud local-state tests so host url.*.insteadof rewrites cannot poison remote-identity probes.

Security

• Raise @modelcontextprotocol/sdk to exact 1.30.0 and @hono/node-server to exact 2.0.12, and ship both as a published bundledDependencies closure so hostile host trees cannot force MCP onto vulnerable @hono/node-server <2.0.5 (GHSA-frvp-7c67-39w9). Residual npm audit --omit=dev findings are the Cursor SDK → ConnectRPC → undici chain with no compatible fix.

Changed

• Tighten Cursor Cloud AGENTS.md setup notes: durable Node/PATH/smoke prerequisites only; Linux-only checks are partial evidence and do not replace smoke:platform:all.