Add Cursor SDK backend and variant slug resolution

[Moumouls]

Summary

• add a built-in Cursor SDK backend for process, revalidate, and triage, including CLI/preflight/docs coverage
• resolve Cursor model ids, aliases, and combined option slugs against Cursor.models.list() while keeping composer-2.5 on fast=false by default
• add focused tests plus live smoke-test validation so the Cursor path appears complete end to end

Test plan

• pnpm exec vitest run packages/processor/src/__tests__/cursor-model.test.ts packages/processor/src/__tests__/cursor-sdk.test.ts packages/processor/src/__tests__/triage.test.ts
• pnpm --filter @deepsec/processor build && pnpm --filter deepsec build
• live triage smoke test with composer-2.5
• live triage smoke test with gpt-5.4-high
• live resolver check for gpt-5.4-high-1m and gpt-5.4-1m-high
• live process smoke test with composer-2.5
• live process smoke test with gpt-5.4-high

[vercel]

@Moumouls is attempting to deploy a commit to the Vercel Labs Team on Vercel.

A member of the Team first needs to authorize it.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​cursor/​sdk@​1.0.18

View full report

[Moumouls]

Sorry @cramforce, the full integration turned out heavier than I expected. PR built with Cursor and GPT-5.4 High.

Anyone with a Cursor subscription can use every model and option available in their Cursor account.

[vercel]

Cursor triage backend instructs the model to read source files, contradicting triage's documented "lightweight, finding-text-only" design and the CLI's "triage uses finding text only" message.