@cursor/bdk 0.2.15 → 0.2.17

package/schemas/grokbot-answers.schema.json

@@ -0,0 +1,343 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "bdk init --from-grokbot answers",
+  "description": "Decisions for exporting a Grok Bot recipe. Every field is optional: a missing answer takes the default an interactive run offers. Names only, never secret values.",
+  "type": "object",
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "description": "Path or URL of this schema, for editors. Ignored."
+    },
+    "version": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 1,
+      "description": "Answers format version."
+    },
+    "name": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]*$",
+      "title": "Name",
+      "description": "Agent name (also its directory)? Directory: `[A-Za-z0-9][A-Za-z0-9_-]*`, not `v1`/`playground`/`docs`",
+      "x-round": "identity"
+    },
+    "description": {
+      "type": "string",
+      "minLength": 1,
+      "title": "Description",
+      "description": "What does the bot do, in a sentence or two?",
+      "x-round": "identity"
+    },
+    "location": {
+      "type": "string",
+      "minLength": 1,
+      "title": "Location",
+      "description": "Directory to scaffold into?",
+      "x-round": "identity"
+    },
+    "model": {
+      "type": "string",
+      "minLength": 1,
+      "title": "Model",
+      "description": "Model id? Params, not id suffixes: `{ id: \"grok-4.5\", params: [{ id: \"effort\", value: \"high\" }, { id: \"fast\", value: \"true\" }] }`",
+      "x-round": "surface",
+      "default": "grok-4.5",
+      "x-labels": {
+        "grok-4.5": "`grok-4.5` + `effort=high`, `fast=true`"
+      }
+    },
+    "channels": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "slack",
+          "github",
+          "webhook",
+          "schedule"
+        ]
+      },
+      "title": "Channels",
+      "description": "Channels beyond the playground and HTTP? Slack: `skills/setup-slack/SKILL.md`. GitHub: `skills/github/SKILL.md`. No Discord/Teams pack; offer custom webhook.",
+      "x-round": "surface",
+      "x-labels": {
+        "slack": "Slack",
+        "github": "GitHub",
+        "webhook": "custom webhook",
+        "schedule": "schedule"
+      }
+    },
+    "memory": {
+      "type": "string",
+      "enum": [
+        "skill",
+        "kv",
+        "drop"
+      ],
+      "title": "Memory",
+      "description": "What should happen to the bot's memories? skill: a knowledge skill the agent reads on demand. kv: data in bot/lib/memory-seed.json for your own seeding code (BDK has no built-in KV seed). drop: leave them behind.",
+      "x-round": "export",
+      "default": "skill"
+    },
+    "skills": {
+      "type": "object",
+      "properties": {
+        "include": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Include skills",
+          "description": "Which skills should come along?",
+          "x-round": "export"
+        },
+        "exclude": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Exclude skills",
+          "description": "Which skills should stay behind, applied after the include list.",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    },
+    "routines": {
+      "type": "object",
+      "properties": {
+        "include": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Include routines",
+          "description": "Which routines should come along?",
+          "x-round": "export"
+        },
+        "exclude": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Exclude routines",
+          "description": "Which routines should stay behind, applied after the include list.",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    },
+    "plugins": {
+      "type": "object",
+      "properties": {
+        "include": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Include plugins",
+          "description": "Which plugins should come along?",
+          "x-round": "export"
+        },
+        "exclude": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Exclude plugins",
+          "description": "Which plugins should stay behind, applied after the include list.",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    },
+    "connectors": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "auth": {
+            "type": "string",
+            "enum": [
+              "cursor-account",
+              "oauth",
+              "secret"
+            ],
+            "title": "Auth",
+            "description": "How should {plugin} authenticate? cursor-account: tools run through your Cursor account's connector, with no secret in the project. oauth: host OAuth against the server URL (`bdk mcp oauth`). secret: a bearer token read from a named secret.",
+            "x-round": "export",
+            "default": "cursor-account"
+          },
+          "server": {
+            "type": "string",
+            "minLength": 1,
+            "title": "Connector name",
+            "description": "Name of the {plugin} connector in your Cursor account?",
+            "x-round": "export"
+          },
+          "url": {
+            "type": "string",
+            "title": "Server URL",
+            "description": "{plugin} MCP server URL?",
+            "x-round": "export"
+          },
+          "secret": {
+            "type": "string",
+            "title": "Secret name",
+            "description": "Secret that holds the {plugin} token? A name only, like LINEAR_API_KEY. Set the value later with `bdk secrets set`.",
+            "x-round": "export"
+          }
+        },
+        "additionalProperties": false
+      },
+      "description": "How each recipe plugin connects, keyed by plugin slug."
+    },
+    "fillIns": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string",
+          "minLength": 1,
+          "title": "{placeholder}",
+          "description": "{routine}: {placeholder}?",
+          "x-round": "export"
+        }
+      },
+      "description": "Values for recipe placeholders, keyed by routine slug, then placeholder id (e.g. slack_channel). Unfilled placeholders stay in the text."
+    },
+    "secrets": {
+      "type": "object",
+      "properties": {
+        "names": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "title": "Secret names",
+          "description": "Other secret names to list in SECRETS.md? Names only, UPPER_SNAKE_CASE. Names the generated files read are always listed.",
+          "x-round": "export"
+        },
+        "reauth": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": "Fresh sign-in",
+          "description": "Which other connectors need a fresh sign-in? OAuth connectors always do; they are listed without asking.",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    },
+    "repo": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "title": "Repository",
+          "description": "Repository name? (recorded only; bdk does not create repositories)",
+          "x-round": "export"
+        },
+        "namespace": {
+          "type": "string",
+          "title": "Repository namespace",
+          "description": "Repository owner or namespace? (recorded only)",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    },
+    "deploy": {
+      "type": "object",
+      "properties": {
+        "when": {
+          "type": "string",
+          "enum": [
+            "after-review",
+            "now",
+            "scheduled",
+            "never"
+          ],
+          "title": "Deploy",
+          "description": "When should it deploy? (recorded only; bdk does not deploy)",
+          "x-round": "export",
+          "default": "after-review"
+        },
+        "at": {
+          "type": "string",
+          "format": "date-time",
+          "title": "Deploy at",
+          "description": "Deploy at (ISO 8601 with a timezone)?",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    },
+    "slack": {
+      "type": "object",
+      "properties": {
+        "app": {
+          "type": "string",
+          "enum": [
+            "new",
+            "move"
+          ],
+          "title": "Slack app",
+          "description": "Mint a new Slack app, or move the bot's existing one?",
+          "x-round": "export",
+          "default": "new"
+        },
+        "cutover": {
+          "type": "string",
+          "enum": [
+            "manual",
+            "after-deploy",
+            "scheduled"
+          ],
+          "title": "Slack cutover",
+          "description": "When should Slack traffic switch to the BDK agent?",
+          "x-round": "export",
+          "default": "manual"
+        },
+        "cutoverAt": {
+          "type": "string",
+          "format": "date-time",
+          "title": "Slack cutover at",
+          "description": "Switch Slack traffic at (ISO 8601 with a timezone)?",
+          "x-round": "export"
+        },
+        "teamPrefix": {
+          "type": "string",
+          "minLength": 1,
+          "title": "Team prefix",
+          "description": "Team prefix the Slack bot name must start with?",
+          "x-round": "export"
+        },
+        "botName": {
+          "type": "string",
+          "minLength": 1,
+          "title": "Slack bot name",
+          "description": "Slack bot display name? Starts with the team prefix and must not contain \"Grok\".",
+          "x-round": "export"
+        },
+        "justification": {
+          "type": "string",
+          "minLength": 1,
+          "title": "Security justification",
+          "description": "Security justification for the Slack app review? What the bot does in Slack and why it needs its scopes. Saved for the Slack app setup.",
+          "x-round": "export"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}

package/skills/create-agent/SKILL.md

@@ -33,13 +33,14 @@ on a running host.
 - If `AskQuestion` is missing or the user skips, state defaults
   in one list and proceed.
 
+<!-- interview:start (generated from the bdk init questions; do not edit by hand) -->
 ### Round 1: identity
 
-| Question | Options |
-| --- | --- |
-| **Purpose** | chat assistant · PR / repo automation · domain assistant over APIs/tools · scheduled reporter · Other |
-| **Name** | 2–3 slugs from the purpose + Other. Directory: `[A-Za-z0-9][A-Za-z0-9_-]*`, not `v1`/`playground`/`docs` |
-| **Location** | `./<slug>` (default) · another directory |
+| Question | Options | Guidance |
+| --- | --- | --- |
+| **Purpose** | chat assistant · PR / repo automation · domain assistant over APIs/tools · scheduled reporter · Other |  |
+| **Name** | 2–3 slugs from the purpose + Other | Directory: `[A-Za-z0-9][A-Za-z0-9_-]*`, not `v1`/`playground`/`docs` |
+| **Location** | `./<slug>` (default) · another directory |  |
 
 ### Round 2: surface
 
@@ -49,6 +50,7 @@ on a running host.
 | **Channels** (multi) | playground + HTTP (always on) · Slack · GitHub · custom webhook · schedule | Slack: `skills/setup-slack/SKILL.md`. GitHub: `skills/github/SKILL.md`. No Discord/Teams pack; offer custom webhook. |
 | **MCP** (multi) | none · remote URL · local stdio · Cursor account connectors · Other | One file under `bot/mcp-connections/`. Account file is `account.ts`, never `cursor.ts`. Named local tools need `advertiseTools: true`. Privileged servers go in `bot/host-connections/`. |
 | **Capabilities** (multi) | server tools · agent tools · skills · subagents · hooks · sandbox seeds · evals (recommend) | Always recommend one smoke eval. |
+<!-- interview:end -->
 
 Close with the plan and file tree, then "Scaffold it" / "Adjust
 something". Write files only after approval.

package/templates/agentic-owners/bot/lib/owners/handles.ts

@@ -50,5 +50,5 @@ export function sanitizeReviewerHandle(raw: string): string | undefined {
     return `${org}/${team}`;
   }
   const login = trimmed.replace(/^@/, "").toLowerCase();
-  return /^[a-z0-9][a-z0-9-]*$/.test(login) ? `@${login}` : undefined;
+  return /^[a-z0-9][a-z0-9-]*(?:_[a-z0-9]+)?$/.test(login) ? `@${login}` : undefined;
 }

package/templates/agentic-owners/bot/lib/owners/matching.ts

@@ -16,13 +16,20 @@ export function patternMatchesFile(pattern: string, filepath: string): boolean {
     return true;
   }
 
-  // Keep the fast prefix path for literal `dir/**` rules. A wildcard before
-  // the terminal `/**` (for example `**/agent-serve/**`) must fall through to
-  // minimatch; treating its wildcard text as a literal prefix never matches.
-  if (normalizedPattern.endsWith("**") && !hasComplexGlob(normalizedPattern.replace(/\*+$/, ""))) {
-    const rawPrefix = normalizedPattern.replace(/\*+$/, "");
-    const prefix = rawPrefix.replace(/\\(.)/g, "$1").replace(/\/+$/, "");
-    return normalizedPath === prefix || (prefix !== "" && normalizedPath.startsWith(`${prefix}/`));
+  const literalPrefix = normalizedPattern.replace(/\*+$/, "");
+  if (normalizedPattern.endsWith("**") && !hasComplexGlob(literalPrefix)) {
+    const prefix = literalPrefix.replace(/\\(.)/g, "$1").replace(/\/+$/, "");
+    if (normalizedPath === prefix || (prefix !== "" && normalizedPath.startsWith(`${prefix}/`))) {
+      return true;
+    }
+    if (literalPrefix === "" || literalPrefix.endsWith("/")) {
+      return false;
+    }
+    if (patternIsRooted && !literalPrefix.includes("/") && normalizedPath.includes("/")) {
+      return false;
+    }
+    // gitignore reads `x**` as `x*`.
+    return globMatches(normalizedPath, `${literalPrefix}*`);
   }
 
   if (normalizedPattern.endsWith("/")) {
@@ -37,10 +44,14 @@ export function patternMatchesFile(pattern: string, filepath: string): boolean {
     return true;
   }
 
+  return globMatches(normalizedPath, normalizedPattern);
+}
+
+function globMatches(filepath: string, pattern: string): boolean {
   try {
-    return minimatch(normalizedPath, normalizedPattern, {
+    return minimatch(filepath, pattern, {
       dot: true,
-      matchBase: !normalizedPattern.includes("/"),
+      matchBase: !pattern.includes("/"),
       nocase: false,
     });
   } catch {