devlog: round-2 Cursor stabilization research and roadmap lock (docs-only)

[lidge-jun]

Summary\n\nDocs-only: round-2 Cursor stabilization research unit under (100 plan, 110 stream-health watchdog decade doc, 120 OAuth fail-fast + H2 pool shutdown pair, 190 roadmap lock).\n\nResearch inputs: senpi delta since a5eed44536f3 (PR #1062/#1020/#1016/#1002/#998), yelixir cursor-ai-proxy-bridge inventory (retry/transport/streaming), other public Cursor bridges (incl. official cursor/sdk-bridge), and a read-only code audit of origin/dev head 5255686 confirming GAPs: no post-first-frame inbound-silence watchdog (live-transport.ts:93,1133), OAuth poll retries terminal 4xx (oauth/cursor.ts:117-147), cursorH2Pool.shutdown() uncalled (h2-pool.ts:41), CursorCredentialRouter unwired (NEEDS_HUMAN — product decision), maxMode hardcoded false (deferred, live probe).\n\nImplementation cycles 110 and 120 follow as separate PRs consuming one decade doc each.\n\n## Verification\n\nDocs-only change (devlog/_plan markdown). Privacy scan passed passed locally. No src/, tests/, or build-path files touched — per AGENTS.md, nothing in the build/typecheck/test path reads devlog/.\n\n## Checklist\n\n- [x] Target branch is dev\n- [x] Docs-only; no runtime behavior change\n- [x] privacy:scan green\n- [x] No pre-disclosure security content (binding boundary recorded in 100 §Security/ToS)

Summary by CodeRabbit

• Documentation
  • Added stabilization planning for the next development cycle.
  • Documented a roadmap prioritizing stream-health monitoring, OAuth polling hardening, and connection-pool shutdown handling.
  • Defined security, terms-of-service, research, testing, and implementation-gating requirements.
  • Recorded deferred and rejected work, along with planned verification and testing activities.

[github-actions]

✅ Deterministic PR hygiene checks passed.

[github-actions]

⏳ DRAFT

• PR description needs work (escaped_newlines).

What to do

• Add a real Summary and Test plan to the PR description.

Automatic draft conversion failed (token cannot change draft status). Please convert this pull request to a draft manually. The required enforce-target check will keep failing until every issue above is resolved.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: ea6aba99-b2a2-4d73-b17f-eb93591076e0

📥 Commits

Reviewing files that changed from the base of the PR and between 5255686 and 6b889c3.

📒 Files selected for processing (4)

• devlog/_plan/260822_senpi_cursor_transfer/100_stabilization_round2_plan.md
• devlog/_plan/260822_senpi_cursor_transfer/110_stream_health_watchdog.md
• devlog/_plan/260822_senpi_cursor_transfer/120_small_hardening_pair.md
• devlog/_plan/260822_senpi_cursor_transfer/190_round2_roadmap_lock.md

---

📝 Walkthrough

Walkthrough

This documentation-only change defines the round 2 stabilization scope, plans an inbound stream-health watchdog and two hardening tasks, and locks the implementation order and verification gates.

Changes

Round 2 stabilization

Layer / File(s)	Summary
Stabilization scope and candidates devlog/_plan/260822_senpi_cursor_transfer/100_stabilization_round2_plan.md	Lines 1–71 define selected and deferred work, security and ToS boundaries, research procedures, deliverables, and documentation-only cycle gates.
Transport and hardening implementation plans devlog/_plan/260822_senpi_cursor_transfer/110_stream_health_watchdog.md, devlog/_plan/260822_senpi_cursor_transfer/120_small_hardening_pair.md	Lines 1–67 of the watchdog plan define decoded-frame liveness rules, 30-second and 90-second thresholds, lifecycle handling, typed failures, and tests. Lines 1–51 of the hardening plan define OAuth terminal-status failures, retry behavior, H2 pool shutdown registration, idempotent cleanup, and documentation updates.
Round 2 roadmap lock devlog/_plan/260822_senpi_cursor_transfer/190_round2_roadmap_lock.md	Lines 1–72 lock the research provenance, implementation order, deferred or rejected tasks, and required focused tests, typecheck, and full-suite validation.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: ingwannu

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/cursor-round2-docs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}