@cursor/july 0.1.108 → 0.1.111

package/docs/reference/cli.md

@@ -42,7 +42,6 @@ also provide `agent-sdk slack help` and `agent-sdk github help`.
 | [`stop`](#stop)                                         | Stop a hosted deployment                                       |
 | [`delete`](#delete)                                     | Delete a hosted deployment                                     |
 | [`rotate-token`](#rotate-token)                         | Replace a deployment's alias token                             |
-| [`rotate-pod-credential`](#rotate-pod-credential)       | Replace a deployment's pod credential                          |
 | [`secrets`](#secrets)                                   | Manage deployment secrets                                      |
 | [`mcp`](#mcp)                                           | Proxy the agent's MCP endpoint over stdio; `mcp install` writes `~/.cursor/mcp.json` |
 | [`mcp oauth`](#mcp-oauth)                               | Authorize host MCP OAuth; optional `--store` to deployment secrets |
@@ -366,8 +365,10 @@ agent-sdk eval status <evalId> --prod --slug pr-approver
 agent-sdk eval cancel <evalId> --prod --slug pr-approver
 ```
 
-`eval` runs `evals/**/*.eval.{ts,js}` on an ephemeral server or against
-`--url`. Select one or more exact case IDs, file ID prefixes, or tags.
+`eval` runs `evals/**/*.eval.{ts,js}` on an ephemeral server. With
+`--prod` or `--url`, the target server runs its own evals as a
+server-side batch. Select one or more exact case IDs, file ID prefixes,
+or tags.
 Omit selectors to run all cases. Repeated `--tag` flags use OR matching.
 
 An eval run requires `evals/evals.config.{ts,js}` with `maxConcurrency`
@@ -378,13 +379,13 @@ between 1 and 200. Timeout priority is the case's `timeoutMs`, the CLI's
 | --- | --- |
 | `--list` | Print discovered cases without running. `--list --json` prints them as an array. |
 | `--tag <tag>` | Run cases with this tag. Repeated flags use OR matching. |
-| `--json` | Print `{ ok, passed, failed, results }`. |
+| `--json` | Print `{ ok, passed, failed, scored, skipped, strict, results }`; see [Run evals in CI](../evals.md#run-evals-in-ci) for the result shape. |
 | `--verbose` | Stream `t.log` lines and reply snippets. |
 | `--no-stream` | Hide live progress on stderr. |
 | `--strict` | Exit `1` when a scored case misses a soft threshold. |
 | `--max-concurrency <n>` | Override `maxConcurrency` from `evals.config.ts`. |
 | `--junit <path>` | Write JUnit XML for CI annotations. |
-| `--artifacts <dir>` | Write run artifacts here. The default is a timestamped directory under `<state-root>/evals/`. |
+| `--artifacts <dir>` | Write run artifacts here. The default is a timestamped directory under `evals/` in the project state directory (not affected by `--state-root`). |
 | `--no-artifacts` | Skip run artifacts. |
 | `--skip-report` | Ignore reporters from `evals.config.ts` and eval files. |
 | `--out <path>` | Also write the full results JSON to this path (also for `eval status <evalId>`). |
@@ -702,21 +703,6 @@ agent-sdk rotate-token <slug> [--team <id>] [--json]
 The old token stops working immediately. The replacement is shown once.
 `--json` prints `{ aliasToken }`.
 
-## rotate-pod-credential
-
-`rotate-pod-credential` replaces the credential used by the running
-engine pod.
-
-```bash
-agent-sdk rotate-pod-credential <slug> [--team <id>] [--json]
-```
-
-The command prints only the masked key (`--json` prints
-`{ podCredentialMaskedKey }`). The running pod keeps the old credential
-until the next deploy, so nothing breaks in between. Run
-`agent-sdk deploy --slug <slug>` to inject the replacement and retire
-the old credential.
-
 ## mcp
 
 `mcp` proxies an agent's MCP endpoint over stdio for MCP clients that

package/docs/reference/connections.md

@@ -54,7 +54,7 @@ agent-sdk mcp oauth inventory --store   # also upsert deployment secrets
 ```
 
 Full walkthrough: [Host MCP OAuth](../guides/mcp-oauth.md). Companion
-skill: [`skills/mcp-auth/SKILL.md`](../skills/mcp-auth.md).
+skill: [`skills/mcp-auth/SKILL.md`](../../skills/mcp-auth/SKILL.md).
 
 Account MCP (`cursorAccount: true`) is the right choice for connectors
 already linked in the Cursor dashboard. Omit `servers` (or pass `"*"`)
@@ -255,9 +255,8 @@ export default defineConnection({
 });
 ```
 
-Unknown slugs and self-references fail `serve` at startup. Resolution
-(loopback versus `--public-url`), loop caveats, and the delegation model
-are in the [Agent-to-agent guide](../guides/agent-to-agent.md).
+Unknown slugs and self-references fail `serve` at startup. Walkthrough:
+[Agent-to-agent](../guides/agent-to-agent.md#how-do-i-wire-two-agents).
 
 ## Every model-visible MCP connection is available in three places
 
@@ -302,6 +301,5 @@ lazily on first use.
 Continue with these pages:
 
 - [Host MCP OAuth](../guides/mcp-oauth.md): `mcp oauth`, Connect, `--store`
-- [Agent-to-agent](../guides/agent-to-agent.md): peers in depth
 - [Tools](./tools.md): authored tools that wrap MCP connections
 - [Webhooks](../guides/webhooks.md): calling MCP connections from handlers

package/docs/reference/extensions.md

@@ -59,14 +59,13 @@ namespace:
 | `subagents/<id>/` | subagent `<ns>__<id>` |
 | `instructions.md` / `.ts` / dir | appended to the agent's system prompt |
 | `sandbox/workspace/**` | seeded into each local session workspace |
-| `ab.ts` / `ab/<name>.ts` | A/B experiment `<ns>__<name>` |
 | `artifacts.ts` | artifact kinds `<ns>__<kind>` |
 
 The root agent still needs its own `instructions.md`. Extension
 instructions are extra fragments, not a substitute.
 
-`httpChannel()` stays on the agent. An extension authors
-`defineChannel` only; a file named `http.ts` becomes `<ns>__http`.
+The built-in HTTP session channel stays on the agent. An extension
+authors `defineChannel` only; a file named `http.ts` becomes `<ns>__http`.
 
 These stay on the agent that mounts the extension. Each is a singleton
 or is outside discovery:
@@ -76,7 +75,6 @@ or is outside discovery:
 | `agent.ts` | One `defineAgent` runtime per agent |
 | `storage.ts` | One `host.kv` / `host.files` backend |
 | `otel.ts` | One OTLP exporter |
-| `ab.config.ts` | One experiment-platform config; `ab.ts` / `ab/` still merge |
 | `playground/` | Custom chips are a Vite glob of the agent tree, not a discovery walk |
 | `extensions/` | Nested mounts are not loaded |
 | `sandbox.ts` | Custom sandbox backends stay on the agent |
@@ -117,7 +115,6 @@ it alive.
 | `schedules/<name>.ts` | `disableSchedule()` |
 | `subagents/<id>.ts` | `disableSubagent()` |
 | `instructions.ts` | `disableInstructions()` |
-| `ab.ts` / `ab/<name>.ts` | `disableAB()` |
 | `artifacts.ts` | `disableArtifacts()` |
 
 `disable()` is the same brand as the slot helpers above and works in

package/docs/reference/hooks.md

@@ -88,10 +88,10 @@ exported from `@cursor/july`.
 
 | Member | What it is |
 | --- | --- |
-| `ctx.session` | Read-only session info: `id`, `channelId`, `mode` (`chat` or `task`), `purpose` (`live` or `eval`), `auth`, plus `title`, `sdkAgentId`, and `abs` when set |
+| `ctx.session` | Read-only session info: `id`, `channelId`, `mode` (`chat` or `task`), `purpose` (`live` or `eval`), `auth`, plus `title` and `sdkAgentId` when set |
 | `ctx.agent` | `{ name }` of the agent the event belongs to |
 | `ctx.channel` | `{ id, continuationToken }`. The token is `null` when the session can't take follow-ups |
-| `ctx.host.kv` | Durable JSON, shared by every session of the agent; the [storage backend](../storage.md#author-kv-ctx-host-kv) decides whether it survives a hosted replace. Prefix keys with `ctx.session.id` for per-session state |
+| `ctx.host.kv` | Durable JSON, shared by every session of the agent; the storage backend decides whether it survives a hosted replace. Prefix keys with `ctx.session.id` for per-session state |
 | `ctx.host.files` | Durable files, bound to this session. Pass `{ scope: "deployment" }` for agent-wide files |
 | `ctx.host.otel` | Counters, histograms, and tags, attributed to this session |
 | `ctx.host.mcp`, `ctx.host.github`, `ctx.host.slack` | The same shared clients tools get |
@@ -119,17 +119,17 @@ Each event reaches a hook at most once. A restart doesn't replay the log
 into hooks, so a mirror needs no dedupe, and the event log rather than
 the hook's copy is the source of truth.
 
-## Hooks, channel events, evals, or A/B?
+## Hooks, channel events, or evals?
 
 All of them consume the same stream, for different jobs:
 
-| | Hooks | Channel `events` | Evals | A/B (`defineAB`) |
-| --- | --- | --- | --- | --- |
-| Scope | every session of the agent | sessions the channel owns | one test turn | every live session; enrollment at creation, metrics on each turn |
-| Job | observe: audit, metrics, mirrors, derived state | deliver: replies back to the channel's surface | assert: gates over the trajectory | compare: sticky arms, then fold the stream into `onSample` metrics |
-| Context | `ctx.host`, `ctx.artifacts`, session info | `channel.state`, `setContinuationToken`, `ctx.host`, session info | the `t` assertion helpers | per-session samples in `onSample` |
-| Can affect the run | no | yes, it owns the surface | n/a | yes through arm instructions or `session.abs`; collection is observe-only |
-| Authored at | `agent/hooks/*.ts` | channel config | `evals/**/*.eval.ts` | [`agent/ab.ts` or `agent/ab/*.ts`](../ab.md) |
+| | Hooks | Channel `events` | Evals |
+| --- | --- | --- | --- |
+| Scope | every session of the agent | sessions the channel owns | one test turn |
+| Job | observe: audit, metrics, mirrors, derived state | deliver: replies back to the channel's surface | assert: gates over the trajectory |
+| Context | `ctx.host`, `ctx.artifacts`, session info | `channel.state`, `setContinuationToken`, `ctx.host`, session info | the `t` assertion helpers |
+| Can affect the run | no | yes, it owns the surface | n/a |
+| Authored at | `agent/hooks/*.ts` | channel config | `evals/**/*.eval.ts` |
 
 ## When not to use a hook
 
@@ -139,9 +139,8 @@ All of them consume the same stream, for different jobs:
 | Reply on Slack, comment on a PR, or post any other delivery | The channel's `events` map, or the Slack and GitHub packs |
 | Show PR progress (merge-box check, sticky banner) | `githubChannel({ progress: { commitStatus, banner } })`; see [Show PR progress](../guides/github.md#show-pr-progress) |
 | Block, approve, or rewrite a tool call | [`needsApproval`](./tools.md#gate-a-tool-on-human-approval) on the tool |
-| Act on the final assistant text, or fail a bad turn | [`defineResult`](./result.md) |
+| Act on the final assistant text, reject it for a same-turn repair, or fail a bad turn | `defineResult` |
 | Gate a change on behavior | [Evals](../evals.md) |
-| Compare two prompts on live traffic | [`defineAB`](../ab.md) |
 
 ## Patterns
 
@@ -259,13 +258,9 @@ At runtime:
 
 Continue with these pages:
 
-- [Turn result](./result.md): fail a turn from `commit`, not from a hook
 - [Sessions and streaming](./sessions.md): the event vocabulary hooks observe
-- [Storage](../storage.md): where `ctx.host.kv` and `ctx.host.files` live
 - [OpenTelemetry](../guides/opentelemetry.md): OTLP traces and metrics
   from the same event stream
 - [Deployment](../deployment.md#observability): runtime logs and export
   paths
 - [Channels](./channels.md#events): the delivery-side counterpart
-- [Live A/B metrics](../ab.md): sticky variants over the same event
-  stream

package/docs/reference/http-api.md

@@ -118,7 +118,7 @@ Two routes list and resolve parked tool calls.
 | `GET /v1/session/:sessionId/approvals`          | Pending human-in-the-loop tool approvals                       |
 | `POST /v1/session/:sessionId/approvals/:callId` | Resolve one: `{"decision":"approve"}` or `{"decision":"deny"}` |
 
-For the lifecycle, see [Human-in-the-loop](../guides/human-in-the-loop.md).
+For the lifecycle, see [Gate a tool on human approval](./tools.md#gate-a-tool-on-human-approval).
 
 ## Call a tool directly
 
@@ -152,12 +152,11 @@ These read-only routes describe the running agent.
 
 | Route                  | What it does                                                                                                                                                                             |
 | ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `GET /v1/info`         | The discovered surface: model, tools, skills, MCP connections, subagents, channels and routes (with schemas), schedules, hooks, A/B experiments, diagnostics |
+| `GET /v1/info`         | The discovered surface: model, tools, skills, MCP connections, subagents, channels and routes (with schemas), schedules, hooks, diagnostics |
 | `GET /v1/tools`        | The live tool catalog: authored server tools plus advertised MCP passthroughs under model-facing names, as light `{ name, title?, source? }` entries. `session` / `continuationToken` query parameters bind the listing to a session identity (advertised inventories can be tenant-scoped); a connection whose listing fails is skipped and reported in `connectionErrors` |
 | `GET /v1/tools/:name`  | One catalog tool's full description: description, execution, `needsApproval`, `effect`, input and output schemas, source connection. Same session binding as the listing; unknown names get `404` with the available names |
 | `GET /v1/health`       | Per-agent liveness, no auth                                                                                                                                                              |
 | `GET /v1/logs?after=N` | Recent server log lines, with a polling cursor                                                                                                                                           |
-| `GET /v1/abs`          | [Live A/B metrics](../ab.md): per-session assignments and aggregate arm totals                                                                                                           |
 
 ## Artifacts
 
@@ -190,8 +189,8 @@ secret is configured. See [Channels](./channels.md).
 spec-compliant 405s). The tools are `ask` (delegate a message, bounded
 waits), `check` (poll a running session), and `call_tool` (deterministic
 server-tool passthrough, present when the agent has server tools). The
-route runs the same auth chain as the session API. See
-[Agent-to-agent](../guides/agent-to-agent.md).
+route runs the same auth chain as the session API. Peer wiring:
+[MCP connections](./connections.md#peer-mcp-connection).
 
 `/v1/mcp/tools` is a second stateless MCP endpoint exposing only the
 agent's deterministic server tools. Hosted cloud turns call back into
@@ -215,8 +214,8 @@ Eval runs are asynchronous. Poll the run route for case progress and
 the final `completed` or `failed` status. Batch errors appear on the
 snapshot returned by the poll. Entries within `filterIds` and `tags`
 use OR semantics. When both fields are present, a case must match one
-entry from each field. Listed runs persist across restarts when storage is configured; see
-[Storage](../storage.md#eval-and-a-b-tables). Otherwise they are
+entry from each field. Listed runs persist across restarts when
+durable storage is configured. Otherwise they are
 process-memory only.
 
 ## Dev-mode routes

package/docs/reference/playground.md

@@ -37,8 +37,6 @@ Use the playground to chat, try channel routes, and inspect sessions.
   an [extension](./extensions.md) cannot contribute them.
 - **Raw events pane**: flip it on to inspect the event stream.
 - **Logs tab**: recent server log lines, polled from `GET /v1/logs`.
-- **A/Bs tab**: per-session and aggregate
-  [live A/B metrics](../ab.md) from `GET /v1/abs`.
 
 In multi-agent mode each agent has its own playground at
 `/<slug>/playground`, and `/` is an index of them all.
@@ -59,7 +57,5 @@ Continue with these pages:
 
 - [HTTP API](./http-api.md): the HTTP surface the playground uses
 - [Sessions and streaming](./sessions.md): the streams it renders
-- [Human-in-the-loop](../guides/human-in-the-loop.md): the approval
-  buttons in context
-- [Live A/B metrics](../ab.md): the assignments and results in the A/Bs
-  tab
+- [Gate a tool on human approval](./tools.md#gate-a-tool-on-human-approval):
+  the approval buttons in context

package/docs/reference/project-layout.md

@@ -11,8 +11,7 @@ how the Agent SDK loads it.
 
 ## Folder structure
 
-For the capabilities below, identity usually comes from the path. A/B
-experiments can override their file-derived name.
+For the capabilities below, identity comes from the path.
 
 | Path | Resolves to |
 | --- | --- |
@@ -24,8 +23,6 @@ experiments can override their file-derived name.
 | `agent/extensions/ci.ts` | extension mount `ci`; its contributions become `ci__<name>` |
 | `agent/extensions/notion.ts` | Cursor plugin mount `notion` (`cursorPlugin`); its skills, agents, and MCP servers become `notion__<name>` |
 | `agent/channels/drive.ts` | channel `drive`, routes under `/v1/channels/drive` |
-| `agent/ab.ts` | A/B experiment `ab` unless `name` overrides it |
-| `agent/ab/concise.ts` | A/B experiment `concise` unless `name` overrides it |
 
 The root agent takes its name from `package.json` `name`, falling back
 to the directory name. When serving multiple agents, the slug is the
@@ -76,12 +73,10 @@ Each path maps to a capability and a reference page.
 | `agent/extensions/<ns>.ts` or `agent/extensions/<ns>/` | A mounted extension or Cursor plugin; its contributions become `<ns>__<name>` | [Extensions](./extensions.md) |
 | `agent/channels/*.ts` | HTTP surfaces beyond the built-in session API; `slack.ts` and `github.ts` use the platform packs | [Channels](./channels.md) |
 | `agent/hooks/*.ts` | Observe-only event subscribers, never fatal | [Hooks](./hooks.md) |
-| `agent/otel.ts` | `defineOtel` OTLP export (traces, metrics, optional logs) | [OpenTelemetry](../guides/opentelemetry.md) |
-| `agent/ab.ts`, `agent/ab/*.ts` | `defineAB` experiments with sticky variants and live metrics | [Live A/B metrics](../ab.md) |
-| `agent/ab.config.ts` | `defineABConfig` shared A/B settings | [Live A/B metrics](../ab.md) |
-| `agent/storage.ts` | `defineStorage` backend for the durable `host.kv` / `host.files` APIs | [Storage](../storage.md) |
+| `agent/otel.ts` | Factory-only OTLP authoring (`defineOtel`). Public path is env / `serve({ otel })`. | [OpenTelemetry](../guides/opentelemetry.md) |
+| `agent/storage.ts` | `defineStorage` backend for the durable `host.kv` / `host.files` APIs | None |
 | `agent/artifacts.ts` | `defineArtifacts` kinds, the `tag_artifact` opt-in, and retention | [Artifacts](./artifacts.md) |
-| `agent/result.ts` | `defineResult` host `commit` on the final assistant text | [Turn result](./result.md) |
+| `agent/result.ts` | `defineResult` host `commit` on the final assistant text (`throw` or `ctx.reject`) | None |
 | `agent/schedules/*` | Cron-driven runs (UTC, 5-field; never auto-fire under `--dev`) | [Schedules](./schedules.md) |
 | `agent/sandbox/workspace/**` | Seed files copied into each local session workspace | [Sessions](./sessions.md#what-goes-into-a-local-session-workspace) |
 | `agent/playground/` | Custom playground tool chips | [Playground](./playground.md) |
@@ -115,6 +110,3 @@ Continue with these pages:
 
 - [Agent config](./agent-config.md): the runtime config at the root
 - [Tools](./tools.md): add typed actions under `agent/tools/`
-- [Live A/B metrics](../ab.md): compare variants from `agent/ab.ts` or
-  `agent/ab/`
-- [Concepts](../concepts.md): why the filesystem is the interface

package/docs/reference/sessions.md

@@ -80,7 +80,7 @@ within one session. The `at` field is an ISO-8601 timestamp.
 
 | Phase | Events | What they tell you |
 | --- | --- | --- |
-| Session | `session.started`, [`ab.assigned`](../ab.md#assign-sticky-variants), `session.waiting`, `session.completed`, `session.failed` | Session creation, A/B enrollment, readiness, and task completion |
+| Session | `session.started`, `session.waiting`, `session.completed`, `session.failed` | Session creation, readiness, and task completion |
 | Agent | `agent.bound` | Cloud conversation URL |
 | Input | `message.received` | A user message was accepted |
 | Turn | `turn.queued`, `turn.started`, `turn.completed`, `turn.failed` | Queue position under a [`maxRunningTurns` cap](./agent-config.md#concurrency), then turn status, final result, and token usage |
@@ -95,8 +95,10 @@ within one session. The `at` field is an ISO-8601 timestamp.
 Pair `actions.requested` with `action.result` to reconstruct the tool
 trajectory. Read `turn.completed.data.usage` for input, output, and
 cache token counts. When `agent/result.ts` is authored, a thrown
-`commit` or empty assistant text emits `turn.failed` instead of
-`turn.completed`. See [Turn result](./result.md).
+`commit`, a `ctx.reject` that exhausts the two-repair budget, or empty
+assistant text emits `turn.failed` instead of `turn.completed`.
+`ctx.reject(message)` re-runs the same turn with that message so the
+model can revise while tools and the session filesystem are still up.
 
 ## How do I stream or replay session events?
 
@@ -146,7 +148,7 @@ Cloud conversations remain on the Cursor backend.
 
 Nested git checkouts already default `local.cwd` outside the enclosing
 repo. See
-[local session workspaces](../concepts.md#what-files-can-a-local-session-access).
+[What goes into a local session workspace?](#what-goes-into-a-local-session-workspace).
 
 ## How do I inspect a saved event stream?
 
@@ -164,5 +166,3 @@ view.
 
 - [HTTP API](./http-api.md)
 - [Hooks](./hooks.md)
-- [Live A/B metrics](../ab.md)
-- [How the Agent SDK works](../concepts.md)

package/docs/reference/subagents.md

@@ -53,9 +53,8 @@ subagent."
 
 Subagents split one job into roles inside a single agent. When the
 specialist is independently useful, with its own tools, sessions, and
-playground, make it a full agent and wire a peer MCP connection instead. The
-comparison table is in the
-[Agent-to-agent guide](../guides/agent-to-agent.md#peer-or-subagent).
+playground, make it a full agent. See
+[Agent-to-agent](../guides/agent-to-agent.md#peer-or-subagent).
 
 ## Patterns
 
@@ -71,6 +70,5 @@ parent routes; the specialist executes.
 
 Continue with these pages:
 
-- [Agent-to-agent](../guides/agent-to-agent.md): the peer alternative
 - [Skills](./skills.md): when a procedure is enough and a child agent
   is overkill

package/docs/reference/tools.md

@@ -81,7 +81,7 @@ export default defineTool({
 `ctx.host` carries the shared host services: `host.mcp` (authored MCP
 connections: `names()`, `listTools(name)`, `callTool(name, tool, args)`),
 `host.github` and `host.slack` (shared platform clients), `host.kv` and
-`host.files` (durable [storage](../storage.md)), `host.otel` (custom
+`host.files` (durable storage), `host.otel` (custom
 metrics and session tags; see [OpenTelemetry](../guides/opentelemetry.md)),
 `host.reminders` (per-session wakes, when attached).
 
@@ -239,8 +239,7 @@ The call parks, the turn stays running, and the stream emits
 `action.approval_requested` until someone resolves it from the
 playground, `POST /v1/session/:id/approvals/:callId`, or Slack
 Approve/Deny cards. Approvals exist for server tools on the local
-runtime only, and parked calls don't survive a host restart. The full
-lifecycle is in [Human-in-the-loop](../guides/human-in-the-loop.md).
+runtime only, and parked calls don't survive a host restart.
 
 ## Call a tool without a model turn
 
@@ -338,8 +337,6 @@ dry-run sessions can execute reads and stub writes.
 
 Continue with these pages:
 
-- [Human-in-the-loop](../guides/human-in-the-loop.md): the approval
-  lifecycle in full
 - [MCP connections](./connections.md): tools that come from MCP servers
   instead
 - [Extensions](./extensions.md): tools installed as a package under a

package/docs/troubleshooting.md

@@ -74,7 +74,7 @@ not on `PATH`, use `npx @cursor/july`.
 | Model asks for `mcp_auth` or IDE MCP for a connector it already has | Attached MCP is behind meta-tools. Set `advertiseTools: true` for named tools on local turns, or call it from a host tool via `ctx.host.mcp`. |
 
 See [Host MCP OAuth](./guides/mcp-oauth.md) and
-[`skills/mcp-auth/SKILL.md`](./skills/mcp-auth.md).
+[`skills/mcp-auth/SKILL.md`](../skills/mcp-auth/SKILL.md).
 
 ## What if a secret showed up in a terminal transcript?
 
@@ -111,6 +111,5 @@ stream. The playground **Open trace** control does the same visually.
 
 ## What's next
 
-- [Concepts](./concepts.md): the model behind these symptoms
 - [Hillclimbing](./hillclimbing.md): when the agent runs but underperforms
 - [Deployment](./deployment.md): auth and state on shared hosts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/july",
-  "version": "0.1.108",
+  "version": "0.1.111",
   "description": "(early alpha) Filesystem-first framework for defining Cursor agents as markdown and TypeScript and serving them over channels with the Cursor SDK.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {
@@ -22,6 +22,7 @@
     "dist/**/*",
     "!dist/playground-central/**",
     "!dist/internal/tenant-mcp/**",
+    "!dist/internal/tenant-slack/**",
     "!dist/internal/grokbot/**",
     "!dist/extensions/cursor-grokbot-agents/**",
     "!dist/internal/review-comments*",
@@ -30,6 +31,7 @@
     "src/**/*",
     "!src/**/*.test.ts",
     "!src/internal/tenant-mcp/**",
+    "!src/internal/tenant-slack/**",
     "!src/internal/grokbot/**",
     "!src/extensions/cursor-grokbot-agents/**",
     "!src/internal/review-comments*",
@@ -52,6 +54,20 @@
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./internal/cursor-hosted": {
+      "anysphere-source": "./src/storage-backends/cursor-hosted.ts",
+      "bun": "./dist/storage-backends/cursor-hosted.js",
+      "types": "./dist/storage-backends/cursor-hosted.d.ts",
+      "import": "./dist/storage-backends/cursor-hosted.js",
+      "default": "./dist/storage-backends/cursor-hosted.js"
+    },
+    "./internal/file-kv": {
+      "anysphere-source": "./src/storage-backends/file-kv.ts",
+      "bun": "./dist/storage-backends/file-kv.js",
+      "types": "./dist/storage-backends/file-kv.d.ts",
+      "import": "./dist/storage-backends/file-kv.js",
+      "default": "./dist/storage-backends/file-kv.js"
+    },
     "./internal/hosted-delivery-protocol": {
       "anysphere-source": "./src/internal/hosted-delivery-protocol.ts",
       "bun": "./dist/internal/hosted-delivery-protocol.js",
@@ -59,6 +75,27 @@
       "import": "./dist/internal/hosted-delivery-protocol.js",
       "default": "./dist/internal/hosted-delivery-protocol.js"
     },
+    "./internal/memory-kv": {
+      "anysphere-source": "./src/kv/memory-kv.ts",
+      "bun": "./dist/kv/memory-kv.js",
+      "types": "./dist/kv/memory-kv.d.ts",
+      "import": "./dist/kv/memory-kv.js",
+      "default": "./dist/kv/memory-kv.js"
+    },
+    "./internal/otel": {
+      "anysphere-source": "./src/otel.ts",
+      "bun": "./dist/otel.js",
+      "types": "./dist/otel.d.ts",
+      "import": "./dist/otel.js",
+      "default": "./dist/otel.js"
+    },
+    "./internal/storage": {
+      "anysphere-source": "./src/internal/storage.ts",
+      "bun": "./dist/internal/storage.js",
+      "types": "./dist/internal/storage.d.ts",
+      "import": "./dist/internal/storage.js",
+      "default": "./dist/internal/storage.js"
+    },
     "./tools": {
       "anysphere-source": "./src/tools.ts",
       "types": "./dist/tools.d.ts",
@@ -153,6 +190,13 @@
       "import": "./dist/extensions/improve/extension.js",
       "default": "./dist/extensions/improve/extension.js"
     },
+    "./extensions/slack-communication": {
+      "anysphere-source": "./src/extensions/slack-communication/extension.ts",
+      "bun": "./dist/extensions/slack-communication/extension.js",
+      "types": "./dist/extensions/slack-communication/extension.d.ts",
+      "import": "./dist/extensions/slack-communication/extension.js",
+      "default": "./dist/extensions/slack-communication/extension.js"
+    },
     "./schedules": {
       "anysphere-source": "./src/schedules.ts",
       "types": "./dist/schedules.d.ts",
@@ -177,13 +221,6 @@
       "import": "./dist/hooks.js",
       "default": "./dist/hooks.js"
     },
-    "./client": {
-      "anysphere-source": "./src/client.ts",
-      "bun": "./dist/client.js",
-      "types": "./dist/client.d.ts",
-      "import": "./dist/client.js",
-      "default": "./dist/client.js"
-    },
     "./memory": {
       "anysphere-source": "./src/memory.ts",
       "types": "./dist/memory.d.ts",
@@ -214,12 +251,6 @@
       "import": "./dist/evals/loaders.js",
       "default": "./dist/evals/loaders.js"
     },
-    "./ab": {
-      "anysphere-source": "./src/ab.ts",
-      "types": "./dist/ab.d.ts",
-      "import": "./dist/ab.js",
-      "default": "./dist/ab.js"
-    },
     "./artifacts": {
       "anysphere-source": "./src/artifacts.ts",
       "types": "./dist/artifacts.d.ts",
@@ -240,36 +271,11 @@
       "import": "./dist/kv.js",
       "default": "./dist/kv.js"
     },
-    "./kv/memory": {
-      "anysphere-source": "./src/kv/memory-kv.ts",
-      "bun": "./dist/kv/memory-kv.js",
-      "types": "./dist/kv/memory-kv.d.ts",
-      "import": "./dist/kv/memory-kv.js",
-      "default": "./dist/kv/memory-kv.js"
-    },
-    "./storage": {
-      "anysphere-source": "./src/storage.ts",
-      "types": "./dist/storage.d.ts",
-      "import": "./dist/storage.js",
-      "default": "./dist/storage.js"
-    },
-    "./storage/file-kv": {
-      "anysphere-source": "./src/storage-backends/file-kv.ts",
-      "types": "./dist/storage-backends/file-kv.d.ts",
-      "import": "./dist/storage-backends/file-kv.js",
-      "default": "./dist/storage-backends/file-kv.js"
-    },
-    "./storage/cursor-hosted": {
-      "anysphere-source": "./src/storage-backends/cursor-hosted.ts",
-      "types": "./dist/storage-backends/cursor-hosted.d.ts",
-      "import": "./dist/storage-backends/cursor-hosted.js",
-      "default": "./dist/storage-backends/cursor-hosted.js"
-    },
     "./otel": {
-      "anysphere-source": "./src/otel.ts",
-      "types": "./dist/otel.d.ts",
-      "import": "./dist/otel.js",
-      "default": "./dist/otel.js"
+      "anysphere-source": "./src/otel-public.ts",
+      "types": "./dist/otel-public.d.ts",
+      "import": "./dist/otel-public.js",
+      "default": "./dist/otel-public.js"
     },
     "./package.json": {
       "anysphere-source": "./package.json",
@@ -341,6 +347,7 @@
   "devDependencies": {
     "@anysphere/agent-store-sync": "workspace:*",
     "@anysphere/ui": "workspace:*",
+    "@braintree/sanitize-url": "7.1.2",
     "@stylexswc/rs-compiler": "^0.18.0",
     "@tanstack/react-virtual": "3.13.23",
     "@types/js-yaml": "4.0.9",
@@ -352,6 +359,10 @@
     "@types/react-dom": "^19.0.0",
     "@typescript/native-preview": "7.0.0-dev.20260701.1",
     "@vitejs/plugin-react": "^5.1.2",
+    "cytoscape": "3.33.3",
+    "cytoscape-cose-bilkent": "4.1.0",
+    "dayjs": "1.11.20",
+    "mermaid": "^11.14.0",
     "pg": "^8.18.0",
     "pretty-ms": "^9.2.0",
     "react": "^19.2.1",
@@ -362,6 +373,7 @@
     "typescript": "catalog:",
     "vite": "^7.3.0",
     "vitepress": "1.6.4",
+    "vitepress-plugin-mermaid": "^2.0.17",
     "vitest": "^4.0.18",
     "yaml": "^2.4.2",
     "zustand": "^5.0.9"