pi-cursor-embedded-compat

Guarded Pi compatibility shim for Cursor SDK module resolution in embedded hosts.

Packages

Package details

extension

Install pi-cursor-embedded-compat from npm and Pi will load the resources declared by the package manifest.

npm repohome report
$ pi install npm:pi-cursor-embedded-compat
Package
pi-cursor-embedded-compat
Version
0.1.0
Published
Aug 24, 2026
Downloads
164/mo · 164/wk
Author
eiei114
License
MIT
Types
extension
Size
20.3 KB
Dependencies
0 dependencies · 1 peer
Pi manifest JSON
{
  "extensions": [
    "./extensions/index.ts"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

Pi Cursor Embedded Compatibility

CI Publish npm version npm downloads License: MIT Pi package Trusted Publishing

Guard the embedded Pi Cursor SDK request path against known ESM/CJS module-resolution failures.

What this is

pi-cursor-embedded-compat is a narrow Pi extension for embedded Pi hosts that load the Cursor SDK through pi-cursor-sdk. It applies one version- and hash-guarded compatibility transform to the known @connectrpc/connect request-time module shape, then leaves Cursor provider routing unchanged.

This is a temporary compatibility boundary. It does not replace Cursor authentication, register another provider, retry requests, or perform model fallback.

Features

  • Exact dependency-graph and content-hash support registry.
  • Namespace import plus default.protoBase64 fallback for the known failure.
  • Atomic write, read-back verification, idempotency, and fail-closed unknown-signature handling.
  • Bounded structured stderr diagnostics without secrets or source-file contents.
  • Secret-free fixtures plus an opt-in live marker-only canary path.

Install

pi install npm:pi-cursor-embedded-compat

Load it before pi-cursor-sdk in an embedded Cursor profile:

["--no-extensions", "-e", "npm:pi-cursor-embedded-compat@0.1.0", "-e", "npm:pi-cursor-sdk"]

The extension performs its check when loaded. It does not expose a command or tool.

Diagnostics

Successful outcomes use patched, already_patched, upstream_fixed, or not_applicable. Failures use bounded codes such as unsupported_graph, signature_mismatch, write_failed, or verify_failed.

Example shape:

[cursor_compat] {"source":"pi-cursor-embedded-compat","action":"patched","entryId":"connect-1.7.0-pi-cursor-sdk-0.2.0","target":"dist/esm/http-headers.js","graph":{"piCursorSdk":"0.2.0","cursorSdk":"1.0.23","connect":"1.7.0","protobuf":"1.10.0"}}

An unknown failing signature stops the shim without modifying the file. Rollback is performed by reinstalling the dependency tree; the shim does not keep third-party backups.

Development

npm install
npm run ci

The live canary is intentionally not part of CI. Run it only from an existing Pi/Multica secret boundary; never paste or print a Cursor API key.

Release

This package uses npm Trusted Publishing with GitHub Actions OIDC. No NPM_TOKEN is required.

npm version patch
git push

See docs/release.md.

Security

Pi packages execute with the local user's permissions. This package writes one exact dependency file after verifying its version and content hash. Review the support registry before installing. Do not run the live canary with a credential outside the existing secret boundary.

Links

License

MIT