Delegate to Cursor via Cursor SDK

Route software engineering work to Cursor's coding agent through the independent cursor-delegate CLI. The CLI owns the @cursor/sdk integration; this skill owns delegation policy, task packets, review, and acceptance.

Core invariant:

Choose the lightest delegation path that can produce a safe, bounded, reviewable result.

Roles

• Upstream agent: interpret the user goal, choose the route, define scope and risk gates, authorize Cursor SDK runtime/model/auth, approve any plan before implementation, own the private delegation session, review downstream output, decide acceptance, and clean only that session's temporary artifacts.
• Support subagent: perform bounded read-only or advisory work such as repository survey, test triage, security review, API review, documentation review, or independent diff review. It does not edit files, dispatch Cursor, or approve quality.
• Planning subagent: produce a read-only plan for one coherent workstream. The upstream agent must review and edit the plan before Cursor receives it.
• Workstream orchestrator subagent: own one bounded workstream in hierarchical delegation. It may create a local plan, dispatch Cursor SDK if authorized, review local output, run limited follow-up loops, and report evidence. It does not own global architecture, cross-workstream interfaces, merge, deployment, or user-facing acceptance.
• Cursor SDK agent: execute the approved task packet using @cursor/sdk. Cursor may inspect, propose, apply changes, or launch bounded internal subagents according to the packet, but it must not broaden scope or become the acceptance reviewer.
• Cursor internal subagent: a Cursor task/tool child agent launched inside one Cursor SDK run. It works under Cursor's packet and returns evidence to Cursor. In @cursor/sdk 1.0.23 the task/Agent tool accepts only a string model request, so an internal subagent can request the default label but cannot prove the exact High effort parameter. It is an event-observed descendant with parent-only control capability, not a separately retained run; stop its owning parent rather than claiming an independent Stop.