From 36f0308a72141e0481c9044a4e49b35b3065cf73 Mon Sep 17 00:00:00 2001
From: Tam Nhu Tran <kaitran.ntt@gmail.com>
Date: Thu, 12 Feb 2026 07:24:10 +0700
Subject: [PATCH] fix(cursor): add response body handling and size limit

- Drain health check response body with res.resume()
- Add 1MB body size limit in fetchModelsFromDaemon
---
 src/cursor/cursor-daemon.ts | 1 +
 src/cursor/cursor-models.ts | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/src/cursor/cursor-daemon.ts b/src/cursor/cursor-daemon.ts
index 07243a4d..4da46322 100644
--- a/src/cursor/cursor-daemon.ts
+++ b/src/cursor/cursor-daemon.ts
@@ -48,6 +48,7 @@ export async function isDaemonRunning(port: number): Promise<boolean> {
         timeout: 3000,
       },
       (res) => {
+        res.resume(); // Drain response body
         resolve(res.statusCode === 200);
       }
     );
diff --git a/src/cursor/cursor-models.ts b/src/cursor/cursor-models.ts
index f11c9ed1..3cb8cd4d 100644
--- a/src/cursor/cursor-models.ts
+++ b/src/cursor/cursor-models.ts
@@ -88,10 +88,15 @@ export async function fetchModelsFromDaemon(port: number): Promise<CursorModel[]
         timeout: 5000,
       },
       (res) => {
+        const MAX_BODY_SIZE = 1024 * 1024; // 1MB limit
         let data = '';
 
         res.on('data', (chunk) => {
           data += chunk;
+          if (data.length > MAX_BODY_SIZE) {
+            req.destroy();
+            resolve(DEFAULT_CURSOR_MODELS);
+          }
         });
 
         res.on('end', () => {