Isolate cursor MCP identity per seat (provider-config overlay) - #26
Open
Florious95 wants to merge 4 commits into
Open
Isolate cursor MCP identity per seat (provider-config overlay)#26Florious95 wants to merge 4 commits into
Florious95 wants to merge 4 commits into
Conversation
Florious95
force-pushed
the
feat/cursor-per-seat-mcp
branch
from
August 30, 2026 12:20
0bd7ebb to
5db401d
Compare
Florious95
changed the base branch from
integration/0.5.x
to
feature/pi-provider-c-teammate
August 30, 2026 12:21
Stop writing TEAM_AGENT_ID into the shared project mcp.json (and do not fork HOME). Point --workspace at provider-config/<id>/cursor and --add-dir at the real workspace, matching grok's shared-file vs per-seat split. Co-authored-by: Cursor <cursoragent@cursor.com> Replay-From: cc9cd2e Replay-Old-Parent: f0afc7a
Keep the default-thread Cursor MCP module deterministic by placing its 13 tests in the dedicated cursor_mcp_isolation serial clique. Preserve the separate env clique for HTTPS_PROXY and isolation-off mutators. Ruling: frontier/replay/p26-env-race-ruling.md
Place the synthetic secret line before the >512-byte benign padding so disabling the redaction filter reaches the existing no-secret assertions. Keep the 512-byte boundary and total-length assertions unchanged.
Florious95
force-pushed
the
feature/pi-provider-c-teammate
branch
from
August 30, 2026 14:29
5e4872d to
2fe347e
Compare
Florious95
force-pushed
the
feat/cursor-per-seat-mcp
branch
from
August 30, 2026 14:33
5db401d to
e3039c5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Goal
Isolate Cursor MCP identity per seat with a provider-config overlay while preserving the Pi and Grok launch and restart paths from the stacked provider PRs.
0.5.68 replay identity
feature/pi-provider-c-teammate@5e4872d7ed21187720ec74a5393d4e1493bf9fbbfeat/cursor-per-seat-mcp@5db401db941ea9c7aae44c0b56e2b4fd4ee02d3efcc6a86be5f718cc22dd326a3f62debcaea0dfcb5e4872d7ed21187720ec74a5393d4e1493bf9fbb, transitively PR feat(pi): add interactive leader lifecycle #99 and PR feat(pi): add provider core and exact model catalog #98+622/-77Old to new replay mapping:
cc9cd2ef0e5a26d36a88116e77e0742ab0206fb9->e3349eb3f9d113c3bc67e1a27831a1abeba4178e0bd7ebb37fbd043f5a3831febe34a9ae5153a3fe->4251c557f135e4a895bf29c6de3a7d6c3aad5530The replay then contains two explicitly reviewed test-only new-base corrections:
84613482e0560440c901cea1d9284358d84b2881: named Cursor isolation serial clique for the 13 tests that read or write the process-global isolation key; no product timeout or retry change.5db401db941ea9c7aae44c0b56e2b4fd4ee02d3e: causal bounded-diagnostic secret oracle while preserving the 512-byte cap and redaction assertions.Per-seat identity remains under
.team/runtime/provider-config/<id>/cursor/.cursor/mcp.json; HOME is unchanged, the physical workspace remains--add-dir, shared identity is scrubbed, and failure diagnostics remain fail-closed and bounded.Evidence status
Local replay records:
frontier/replay/p26.md,frontier/replay/p26-review-grok.md, andfrontier/replay/replay-manifest.md.Historical evidence retained only for provenance:
cursor-teammate-isolation/g17-precompiled-team-two-seat.mdcursor-teammate-isolation/g18-final-independent-audit.mdThe old real Cursor campaign, checks, and evidence remain historical only; they do not accept the rewritten remote history.
Acceptance boundary
This update installs the reviewed local replay identity only. It does not claim taskbook sections 10-12 combined acceptance, a new real Cursor campaign, repository-wide or full-suite green, merge readiness, release, or publish authorization. PR #102 remains the dependent Grok layer. Keep this PR open and unmerged.