@bniladridas/cursor 0.1.7

package/.github/workflows/security.yml

@@ -0,0 +1,94 @@
+name: security
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+  release:
+    types: ["published"]
+  schedule:
+    - cron: '0 0 * * 1'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write
+  packages: write
+  id-token: write
+
+jobs:
+  codeql:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'bniladridas'
+    steps:
+      - uses: actions/checkout@v6
+      - uses: github/codeql-action/init@v4
+        with:
+          languages: cpp
+          config-file: ./.github/codeql/codeql-config.yml
+      - run: |
+          sudo apt update
+          sudo apt install -y nlohmann-json3-dev cmake build-essential \
+            libcurl4-openssl-dev libpqxx-dev
+          cmake -S . -B build
+          cmake --build build
+      - uses: github/codeql-action/analyze@v4
+
+  sast:
+    name: sast
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'bniladridas'
+    steps:
+      - uses: actions/checkout@v6
+      - uses: aquasecurity/trivy-action@v0.36.0
+        with:
+          scan-type: fs
+          format: sarif
+          output: trivy-results.sarif
+      - uses: github/codeql-action/upload-sarif@v4
+        if: always()
+        with:
+          sarif_file: trivy-results.sarif
+
+  release:
+    name: release
+    if: github.event_name == 'release' && github.repository_owner == 'bniladridas'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - run: |
+          sudo apt update
+          sudo apt install -y nlohmann-json3-dev cmake build-essential \
+            libcurl4-openssl-dev libpqxx-dev
+          cmake -S . -B build -DCMAKE_BUILD_TYPE=Release
+          cmake --build build --config Release
+          make preflight
+          mkdir -p release
+          cp build/bin/cursor-agent README.md LICENSE CHANGELOG.md release/
+          tar -czf cursor-${{ github.event.release.tag_name }}.tar.gz -C release .
+      - uses: softprops/action-gh-release@v3
+        with:
+          files: cursor-${{ github.event.release.tag_name }}.tar.gz
+
+  agent:
+    name: agent
+    if: >
+      (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
+      && github.repository_owner == 'bniladridas'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - run: |
+          sudo apt update
+          sudo apt install -y nlohmann-json3-dev cmake build-essential \
+            libcurl4-openssl-dev libpqxx-dev
+          cmake -S . -B build
+          cmake --build build
+          timeout 30s ./build/bin/cursor-agent << EOF
+          2
+          exit
+          EOF
+          echo "Build size: $(stat -c%s build/bin/cursor-agent) bytes"
+          echo "Build date: $(date)"
+          echo "Commit: ${{ github.sha }}"

package/.github/workflows/stale.yml

@@ -0,0 +1,38 @@
+name: stale
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "39 4 * * 1"
+
+jobs:
+  mark:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
+
+    steps:
+      - id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          client-id: ${{ secrets.CURSOR_BOT_CLIENT_ID }}
+          private-key: ${{ secrets.CURSOR_BOT_PRIVATE_KEY }}
+          permission-issues: write
+          permission-pull-requests: write
+
+      - uses: actions/stale@v10
+        with:
+          repo-token: ${{ steps.app-token.outputs.token }}
+          days-before-stale: 45
+          days-before-close: 14
+          stale-issue-label: stale
+          stale-pr-label: stale
+          exempt-issue-labels: pinned,security
+          exempt-pr-labels: pinned,security
+          stale-issue-message: "This has been quiet for a while. Please add a note if it should stay open."
+          stale-pr-message: "This has been quiet for a while. Please add a note if it should stay open."
+          close-issue-message: "Closing for now."
+          close-pr-message: "Closing for now."
+          operations-per-run: 20

package/AGENTS.md

@@ -0,0 +1,49 @@
+# Cursor
+
+C++20 AI coding agent. 16 services, 8 AI providers, CI/CD across 3 platforms.
+
+## Build & Test
+
+```bash
+cmake -S . -B build && cmake --build build
+./build/cursor-tests   # unit tests
+```
+
+## Style
+
+- C++20: `starts_with()`, `std::optional`, structured bindings
+- `snake_case` for functions, `PascalCase` for classes
+- Static service methods - no state (except `AIService`, `DatabaseService`)
+- No exceptions in hot paths - return `std::optional` or error codes
+- No raw pointers - RAII wrappers or `unique_ptr`
+- `#pragma once` in headers, `#ifdef _WIN32` for platform code
+
+## Workflow
+
+`plan → implement → build → test → fix → cleanup → continue`
+
+Detect stale, duplicated, or dead code as you go. Fix warnings and failing tests immediately. Keep dependencies and config clean. Don't remove things that serve a purpose.
+
+## Technical Debt
+
+- `agent.cpp` (76KB) - God class, main refactoring target
+- 2 unit tests - far below where we need to be
+
+## Hard Rules
+
+- No new files unless explicitly told
+- No comments in code unless necessary
+- No new dependencies
+- No documentation files unless asked
+
+## GitHub Secrets Required
+
+| Secret | Used By | Purpose |
+|--------|---------|---------|
+| `NPM_TOKEN` | release.yml | Publish @bniladridas/cursor |
+| `DOCKER_USERNAME` | ci.yml | Push Docker images |
+| `DOCKER_PASSWORD` | ci.yml | Push Docker images |
+| `CLA_BOT_TOKEN` | cla.yml | CLA comment bot |
+| `CLA_SIGNED_JSON` | cla.yml | Signed CLA storage path |
+| `CURSOR_BOT_CLIENT_ID` | formula-sha.yml | GitHub App for PR creation |
+| `CURSOR_BOT_PRIVATE_KEY` | formula-sha.yml | GitHub App for PR creation |

package/CHANGELOG.md

@@ -0,0 +1,3 @@
+# Changelog
+
+All notable changes are documented in [GitHub Releases](https://github.com/bniladridas/cursor/releases).