Skip to content

cursor: conversation-id rotation can re-request already-executed tools #1027

Description

@code-yeongyu

On zero-token resource_exhausted, senpi rotates the Cursor conversation id and migrates caches (packages/ai/src/api/cursor-agent.ts:676-694). Server-side pending exec state is discarded, so tools already executed in the poisoned conversation can be re-requested on the fresh one (double side effects). Proposal: suppress duplicate exec dispatch for exec ids already answered pre-rotation, or annotate rebuilt history so the server does not re-issue them. Found during the 2026-08-20 cursor provider audit (hyperdebate lane arch-binary D5).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions