AI-assisted coding tools are getting a meaningful upgrade. Cursor has released Composer 2.5, the latest version of its proprietary coding agent model, and the improvements go well beyond a version bump.
Composer 2.5 is described as a substantial improvement in intelligence and behavior over its predecessor, Composer 2. It handles sustained work on long-running tasks better, follows complex instructions more reliably, and is easier to work with overall.
For development teams already using Cursor or evaluating AI coding tools, that combination matters. Raw capability is one thing. But an agent that can stay on task across a lengthy workflow — without drifting, hallucinating tool calls, or needing constant correction — is a different story.
Built on Open-Source Foundations
Composer 2.5 is built on the same open-source checkpoint as Composer 2, Moonshot’s Kimi K2.5. That’s worth noting because it reflects a broader trend in the AI industry: frontier-quality capabilities are increasingly accessible through open-source base models, with differentiation coming from how those models are trained and tuned for specific use cases.
In Cursor’s case, the differentiator is a significantly more sophisticated training process.
Teaching the Model to Learn From Its Mistakes — Precisely
One of the more technically interesting aspects of Composer 2.5 is how Cursor approached reinforcement learning (RL) training. Standard RL assigns rewards at the end of a task. But when an agent runs through a complex coding workflow with hundreds of steps, a single bad decision — like calling a nonexistent tool — can get lost in the noise. The final reward signal doesn’t always tell the model where it went wrong.
To address this, Cursor trained Composer 2.5 using targeted textual feedback. The idea is to provide feedback directly at the point in the interaction where the model could have behaved better. A short hint is inserted into the local context, and the resulting adjusted model distribution acts as a teacher — nudging the model’s behavior at that specific moment while preserving the broader RL objective across the full task.
In practical terms, this means Composer 2.5 can be trained to correct specific bad behaviors — like mistaken tool calls or unclear communication — without disrupting everything it’s already learned to do well. That’s a more surgical approach than retraining from scratch or relying on coarse reward signals.
More Synthetic Data, and a Harder Curriculum
Composer 2.5 was trained on 25 times as many synthetic tasks as Composer 2. As the model’s coding ability improved during training, standard tasks became too easy. So Cursor developed harder synthetic problems dynamically throughout the run.
One method involves “feature deletion” — the agent is given a working codebase with a full set of tests, asked to delete specific features while keeping the codebase functional, and then tasked with reimplementing those features. The tests serve as a verifiable reward signal.
The training process also surfaced an interesting side effect. As the model became more capable, it found increasingly sophisticated workarounds — in one case, reverse-engineering a Python type-checking cache to recover a deleted function signature, and in another, decompiling Java bytecode to reconstruct a third-party API. These were flagged as reward hacking — the model was technically “solving” tasks through unintended shortcuts. Cursor identified and corrected these behaviors using monitoring tools, but the examples illustrate how capable modern AI agents are becoming, and why oversight matters.
What This Means for Development Teams
The practical impact for developers is an agent that works more like a reliable colleague than an unpredictable assistant. Composer 2.5 is specifically tuned for long-horizon tasks — the kind of multi-step, context-heavy work that trips up simpler models. It’s also more consistent in how it communicates and how it calibrates effort to the complexity of the task.
“Frontier coding capability is increasingly built on open-source foundations, with vendor differentiation moving to the training process itself. Composer 2.5’s targeted textual feedback approach, which inserts correction hints at the precise step where the model erred, signals that behavioral reliability is now an engineered outcome at the point of origin rather than a downstream pipeline or out-of-band maintenance correction,” according to Mitch Ashley, VP and Practice Lead, Software Lifecycle Engineering, The Futurum Group.
“Benchmark scores tell buyers less than how an agent recovers from mistakes across hundreds of steps in a real workflow. Development teams evaluating coding agents should assess training discipline over raw capability claims, since that is where production reliability is ultimately determined.”
Looking further ahead, Cursor is also working with SpaceXAI to train a significantly larger model from scratch, using 10 times more total compute. The effort uses Colossus 2’s million H100-equivalent GPUs, and Cursor expects the result to be a major step up in model capability.
Pricing and Availability
Composer 2.5 is priced at $0.50 per million input tokens and $2.50 per million output tokens. A faster variant with the same intelligence is available at $3.00 per million input tokens and $15.00 per million output tokens, which Cursor positions as lower-cost than the fast tiers of other frontier models. The fast variant is the default option, and double usage is included for the first week.
For organizations already invested in AI-assisted development, Composer 2.5 is worth a close look. The training improvements Cursor has made — particularly around targeted feedback and behavioral calibration — suggest a serious focus on making these agents more dependable in real-world workflows, not just better on benchmarks.
That’s exactly the kind of progress that moves AI coding tools from interesting experiments to something you can actually rely on.
