@cursor/july 0.1.108 → 0.1.111

package/src/bin/agent-serve.ts

@@ -44,18 +44,20 @@ import {
   cmdSessions,
   cmdTrajectory,
 } from "../internal/cli-ax.js";
-import { ensureCursorLogin } from "../internal/cli-cursor.js";
 import {
+  cmdCancelRuns,
   cmdDelete,
   cmdDeploy,
   cmdDeploymentStatus,
   cmdDeployments,
-  cmdRotatePodCredential,
+  cmdEventRepos,
   cmdRotateToken,
   cmdSecretsList,
   cmdSecretsSet,
   cmdSecretsUnset,
+  cmdStart,
   cmdStop,
+  cmdUpgrade,
   type DeployCliOptions,
 } from "../internal/cli-deploy.js";
 import { cmdManifest } from "../internal/cli-manifest.js";
@@ -147,10 +149,12 @@ Usage:
   ${CLI} manifest    [--dir <path>] [--json]
   ${CLI} deployments [--team <id>] [--json]
   ${CLI} deployment  <slug> [--team <id>] [--json]
-  ${CLI} stop        <slug> [--team <id>] [--json] [--no-wait]
+  ${CLI} stop        <slug> [--team <id>] [--json] [--no-wait] [--cancel-runs]
+  ${CLI} cancel-runs <slug> [--team <id>] [--json]
+  ${CLI} event-repos <slug> [--repo <owner/name>]... [--team <id>] [--json]
+  ${CLI} upgrade     <slug> [--release <id|version>] [--team <id>] [--json]
   ${CLI} delete      <slug> [--team <id>] [--json] [--no-wait]
   ${CLI} rotate-token <slug> [--team <id>]
-  ${CLI} rotate-pod-credential <slug> [--team <id>]
   ${CLI} secrets     set <slug> NAME... | list <slug> | unset <slug> NAME
                           [--team <id>] [--json] [--from-argv]
   ${CLI} slack       <subcommand> …
@@ -278,13 +282,22 @@ Commands:
   deployments List the team's deployments (slug, status, generation, kind).
   deployment  Show one deployment in full (status, lastError, engine info).
   stop        Stop a deployment and wait until it reports stopped.
+  cancel-runs Request cancellation for active Agent SDK v2 session runs
+              and reminder clocks, and mark factory creating/active
+              sessions failed. For a multi-tenant application this
+              cancels every install, not just the caller's, and requires
+              a team admin (service accounts cannot). Install-local
+              cancel is stop --cancel-runs.
+  event-repos Set the repositories a multi-tenant install receives events
+              for. A deploy cannot carry these; pass every repository you
+              want, since the list is replaced rather than merged.
+  upgrade     Move this team's install onto a release, the newest ready one
+              by default. Deploying a multi-tenant application publishes a
+              release without moving any tenant onto it.
   delete      Delete a deployment (teardown + purge the record) and wait
               until GET 404s. The slug is then free to redeploy.
   rotate-token Mint a new alias token for a deployment (shown once); the old
               token stops working immediately.
-  rotate-pod-credential
-              Rotate a deployment's pod credential (prints the masked key);
-              the running pod keeps the old one until the next deploy.
   secrets     Manage deployment secrets: set (names only by default: hidden
               prompt or piped stdin; NAME=VALUE requires --from-argv), list
               (names + createdAt; never values), unset.
@@ -371,6 +384,8 @@ Options:
                      \`${CLI} login\`. For eval, this is how you opt into the
                      persisted server-side batch (default is local).
   --dry-run          run/session --prod: mark the hosted v2 turn non-mutating.
+  --component        run/session --prod: wake this v2 component key,
+                     not the application default.
   --as-of            run/session --prod: freeze the session clock at this
                      timezone-bearing ISO-8601 instant.
   --once             logs: print current progress / log buffer once and exit
@@ -381,6 +396,9 @@ Options:
   --no-wait          deploy/stop/eval: return right after the request is
                      accepted instead of polling until a terminal status.
                      For eval, prints the runId (deployment / --url only).
+  --cancel-runs      stop: also cancel this install's active Agent SDK v2
+                     session runs and reminder clocks, and mark factory
+                     creating/active sessions failed (not every tenant).
   --no-playground    Disable the bundled web playground at /playground (also skips
                      auto-build / HMR).
   --no-docs          Disable the documentation site at /docs (also skips its
@@ -473,7 +491,7 @@ Options:
 
 function writeStdout(text: string): Promise<void> {
   return new Promise((resolve, reject) => {
-    process.stdout.write(text, (error) => {
+    process.stdout.write(text, error => {
       if (error) {
         reject(error);
         return;
@@ -505,7 +523,7 @@ async function main(argv: string[]): Promise<number> {
   // not collide with run/trajectory's `--events <file.ndjson>` string flag.
   const rest =
     command === "session"
-      ? restIn.map((arg) => (arg === "--events" ? "--raw-events" : arg))
+      ? restIn.map(arg => (arg === "--events" ? "--raw-events" : arg))
       : restIn;
 
   const { values, positionals } = parseArgs({
@@ -584,10 +602,14 @@ async function main(argv: string[]): Promise<number> {
       comment: { type: "string" },
       "dry-run": { type: "boolean", default: false },
       "as-of": { type: "string" },
+      component: { type: "string" },
       out: { type: "string" },
       team: { type: "string" },
       "no-wait": { type: "boolean", default: false },
+      "cancel-runs": { type: "boolean", default: false },
+      global: { type: "boolean", default: false },
       ref: { type: "string" },
+      release: { type: "string" },
       path: { type: "string" },
       all: { type: "boolean", default: false },
       "cursor-events-repo": { type: "string", multiple: true },
@@ -761,11 +783,10 @@ async function main(argv: string[]): Promise<number> {
     }
 
     case "convert-automation": {
-      const { cmdConvertAutomation } = await import(
-        "../internal/cli-convert-automation.js"
-      );
+      const { cmdConvertAutomation } =
+        await import("../internal/cli-convert-automation.js");
       const dirFlagPassed =
-        rest.includes("--dir") || rest.some((arg) => arg.startsWith("--dir="));
+        rest.includes("--dir") || rest.some(arg => arg.startsWith("--dir="));
       return cmdConvertAutomation({
         url: positionals[0],
         // Default target is ./<automation-name-slug>, not the cwd.
@@ -869,21 +890,37 @@ async function main(argv: string[]): Promise<number> {
       return cmdStop(positionals[0], deployOptionsFromValues(values));
     }
 
-    case "delete": {
-      return cmdDelete(positionals[0], deployOptionsFromValues(values));
+    case "start": {
+      return cmdStart(positionals[0], deployOptionsFromValues(values));
     }
 
-    case "rotate-token": {
-      return cmdRotateToken(positionals[0], deployOptionsFromValues(values));
+    case "cancel-runs": {
+      return cmdCancelRuns(positionals[0], deployOptionsFromValues(values));
     }
 
-    case "rotate-pod-credential": {
-      return cmdRotatePodCredential(
+    case "event-repos": {
+      return cmdEventRepos(
         positionals[0],
+        values.repo ?? [],
+        deployOptionsFromValues(values)
+      );
+    }
+
+    case "upgrade": {
+      return cmdUpgrade(
+        { slug: positionals[0], release: values.release },
         deployOptionsFromValues(values)
       );
     }
 
+    case "delete": {
+      return cmdDelete(positionals[0], deployOptionsFromValues(values));
+    }
+
+    case "rotate-token": {
+      return cmdRotateToken(positionals[0], deployOptionsFromValues(values));
+    }
+
     case "secrets": {
       const base = deployOptionsFromValues(values);
       switch (positionals[0]) {
@@ -929,6 +966,7 @@ async function main(argv: string[]): Promise<number> {
           stream: values["no-stream"] ? false : undefined,
           dryRun: values["dry-run"],
           asOf: values["as-of"],
+          componentKey: values.component,
         })
       );
     }
@@ -1131,6 +1169,7 @@ async function main(argv: string[]): Promise<number> {
           sessionId: values["session-id"] ?? values.session,
           dryRun: values["dry-run"],
           asOf: values["as-of"],
+          componentKey: values.component,
         })
       );
     }
@@ -1194,7 +1233,7 @@ async function main(argv: string[]): Promise<number> {
         process.stdout.write(
           `${label}:\n${formatDiagnostics(project.diagnostics)}\n`
         );
-        hasError ||= project.diagnostics.some((d) => d.severity === "error");
+        hasError ||= project.diagnostics.some(d => d.severity === "error");
       }
       return hasError ? 1 : 0;
     }
@@ -1222,8 +1261,8 @@ async function main(argv: string[]): Promise<number> {
             `  /${slug}  —  ${info.name}  (${formatModel(info.model)}, ${info.tools.length} tools, ${info.channels.length} channels)\n`
           );
         }
-        const anyError = mounts.some((m) =>
-          m.project.diagnostics.some((d) => d.severity === "error")
+        const anyError = mounts.some(m =>
+          m.project.diagnostics.some(d => d.severity === "error")
         );
         return anyError ? 1 : 0;
       }
@@ -1239,20 +1278,20 @@ async function main(argv: string[]): Promise<number> {
       lines.push(
         section(
           "tools",
-          info.tools.map((t) => `${t.name} — ${t.description}`)
+          info.tools.map(t => `${t.name} — ${t.description}`)
         )
       );
       lines.push(
         section(
           "skills",
-          info.skills.map((s) => `${s.name} — ${s.description}`)
+          info.skills.map(s => `${s.name} — ${s.description}`)
         )
       );
       lines.push(
         section(
           "extensions",
           info.extensions.map(
-            (e) =>
+            e =>
               `${e.name} — ${[...e.tools, ...e.skills].join(", ") || "(nothing contributed)"}`
           )
         )
@@ -1260,22 +1299,22 @@ async function main(argv: string[]): Promise<number> {
       lines.push(
         section(
           "MCP connections",
-          info.connections.map((c) => `${c.name} — ${c.transport}`)
+          info.connections.map(c => `${c.name} — ${c.transport}`)
         )
       );
       lines.push(
         section(
           "subagents",
-          info.subagents.map((s) => `${s.name} — ${s.description ?? ""}`)
+          info.subagents.map(s => `${s.name} — ${s.description ?? ""}`)
         )
       );
       lines.push(
         section(
           "channels",
           info.channels.map(
-            (c) =>
+            c =>
               `${c.id}: ${
-                c.routes.map((r) => `${r.method} ${r.url}`).join(", ") ||
+                c.routes.map(r => `${r.method} ${r.url}`).join(", ") ||
                 "(events only)"
               }`
           )
@@ -1284,7 +1323,7 @@ async function main(argv: string[]): Promise<number> {
       lines.push(
         section(
           "schedules",
-          info.schedules.map((s) => `${s.name} (${s.cron}, ${s.kind})`)
+          info.schedules.map(s => `${s.name} (${s.cron}, ${s.kind})`)
         )
       );
       lines.push(section("hooks", info.hooks));
@@ -1297,10 +1336,8 @@ async function main(argv: string[]): Promise<number> {
       if (info.diagnostics.length > 0) {
         lines.push(`\ndiagnostics:\n${formatDiagnostics(info.diagnostics)}`);
       }
-      process.stdout.write(
-        `${lines.filter((line) => line !== "").join("\n")}\n`
-      );
-      return info.diagnostics.some((d) => d.severity === "error") ? 1 : 0;
+      process.stdout.write(`${lines.filter(line => line !== "").join("\n")}\n`);
+      return info.diagnostics.some(d => d.severity === "error") ? 1 : 0;
     }
 
     case "dev":
@@ -1407,42 +1444,21 @@ async function main(argv: string[]): Promise<number> {
         noSchedules: values["no-schedules"] === true,
       };
 
-      const start = async (): Promise<
-        | { kind: "ready"; handle: AgentServeHandle }
-        | { kind: "login-failed"; exitCode: number }
-      > => {
+      const start = async (): Promise<AgentServeHandle> => {
         loadLocalEnv();
-        // Model turns need a Cursor credential. Prompt login before listen
-        // so the first playground turn does not fail with a late auth error.
-        // `--allow-anonymous` is the hosted trust boundary (alias token /
-        // freeze bake): skip the login gate so health can bind without a
-        // key. v1 hosted injects CURSOR_API_KEY at exec; freeze bind drops
-        // CURSOR_API_KEY / CURSOR_API_KEY_FILE onto the listening process.
-        // Self-hosted omit the flag and still fail-fast unsigned on a TTY-less host.
-        const loginExit = await ensureCursorLogin({
-          apiKey: values["api-key"],
-          allowAnonymous: values["allow-anonymous"] === true,
-        });
-        if (loginExit !== 0) {
-          return { kind: "login-failed", exitCode: loginExit };
-        }
         const next = await serve(serveDir, serveOptions);
         printServeBanner(next, bannerOpts);
         if (enterToRestart) {
           process.stdout.write(style.dim("  press Enter to restart\n"));
         }
-        return { kind: "ready", handle: next };
+        return next;
       };
 
-      const started = await start();
-      if (started.kind === "login-failed") {
-        return started.exitCode;
-      }
-      const handle = started.handle;
+      const handle = await start();
       let closing = false;
       let restartRequested = false;
 
-      await new Promise<void>((resolve) => {
+      await new Promise<void>(resolve => {
         const shutdown = (): void => {
           if (closing) {
             return;
@@ -1486,6 +1502,8 @@ function deployOptionsFromValues(values: {
   team?: string;
   json?: boolean;
   "no-wait"?: boolean;
+  "cancel-runs"?: boolean;
+  global?: boolean;
   "api-key"?: string;
   "from-argv"?: boolean;
 }): DeployCliOptions {
@@ -1493,6 +1511,8 @@ function deployOptionsFromValues(values: {
     team: values.team,
     json: values.json === true,
     noWait: values["no-wait"] === true,
+    cancelRuns: values["cancel-runs"] === true,
+    global: values.global === true,
     apiKey: values["api-key"],
     fromArgv: values["from-argv"] === true ? true : undefined,
   };
@@ -1513,6 +1533,7 @@ function axFromOptions(
     continuationToken: partial.continuationToken,
     dryRun: partial.dryRun,
     asOf: partial.asOf,
+    componentKey: partial.componentKey,
     timeoutMs: partial.timeoutMs,
     events: partial.events,
     text: partial.text,
@@ -1604,11 +1625,11 @@ function section(title: string, items: string[]): string {
   if (items.length === 0) {
     return "";
   }
-  return `${title}:\n${items.map((item) => `  - ${item}`).join("\n")}`;
+  return `${title}:\n${items.map(item => `  - ${item}`).join("\n")}`;
 }
 
 function isEnterOnly(text: string): boolean {
-  return text.length > 0 && [...text].every((ch) => ch === "\n" || ch === "\r");
+  return text.length > 0 && [...text].every(ch => ch === "\n" || ch === "\r");
 }
 
 /**
@@ -1702,7 +1723,7 @@ function printServeBanner(
           : "running on cron cadence (UTC)";
         process.stdout.write(
           c.dim(
-            `  schedules: ${info.schedules.map((s) => s.name).join(", ")} — ${scheduleMode}\n`
+            `  schedules: ${info.schedules.map(s => s.name).join(", ")} — ${scheduleMode}\n`
           )
         );
       }
@@ -1723,8 +1744,8 @@ function printServeBanner(
     opts.dev &&
     (process.env.GITHUB_WEBHOOK_SECRET === undefined ||
       process.env.GITHUB_WEBHOOK_SECRET === "") &&
-    handle.agents.some((agent) =>
-      projectInfo(agent.project).channels.some((c) => c.kind === "github")
+    handle.agents.some(agent =>
+      projectInfo(agent.project).channels.some(c => c.kind === "github")
     )
   ) {
     process.stdout.write(
@@ -1737,8 +1758,8 @@ function printServeBanner(
     opts.dev &&
     (process.env.GITLAB_WEBHOOK_SECRET === undefined ||
       process.env.GITLAB_WEBHOOK_SECRET === "") &&
-    handle.agents.some((agent) =>
-      projectInfo(agent.project).channels.some((c) => c.kind === "gitlab")
+    handle.agents.some(agent =>
+      projectInfo(agent.project).channels.some(c => c.kind === "gitlab")
     )
   ) {
     process.stdout.write(
@@ -1751,8 +1772,8 @@ function printServeBanner(
     opts.dev &&
     (process.env.BITBUCKET_WEBHOOK_SECRET === undefined ||
       process.env.BITBUCKET_WEBHOOK_SECRET === "") &&
-    handle.agents.some((agent) =>
-      projectInfo(agent.project).channels.some((c) => c.kind === "bitbucket")
+    handle.agents.some(agent =>
+      projectInfo(agent.project).channels.some(c => c.kind === "bitbucket")
     )
   ) {
     process.stdout.write(
@@ -1837,14 +1858,14 @@ function installTransportErrorGuards(): void {
       `[agent-sdk] ${label} (server stays up): ${text.slice(0, 400)}\n`
     );
   };
-  process.on("unhandledRejection", (reason) => {
+  process.on("unhandledRejection", reason => {
     if (isTransportNoise(reason)) {
       log("swallowed unhandledRejection", reason);
       return;
     }
     log("unhandledRejection", reason);
   });
-  process.on("uncaughtException", (error) => {
+  process.on("uncaughtException", error => {
     if (isTransportNoise(error)) {
       log("swallowed uncaughtException", error);
       return;
@@ -1866,11 +1887,11 @@ installTransportErrorGuards();
 registerAuthoredModuleLoaders()
   .then(() => main(process.argv.slice(2)))
   .then(
-    (code) => {
+    code => {
       // Ephemeral run/eval can leave SDK/HTTP handles open; force exit.
       process.exit(code);
     },
-    (error) => {
+    error => {
       process.stderr.write(
         `${error instanceof Error ? error.message : String(error)}\n`
       );