@cursor/july 0.1.109 → 0.1.111

package/docs/templates/code-wiki.md

@@ -1,96 +0,0 @@
----
-title: "Keep a code wiki current after merge"
-description: "Scaffold the agent, pick repos, replay a merged PR, and deploy."
----
-
-# Keep a code wiki current after merge
-
-This agent wakes when a watched pull request merges. It reads the diff
-and the in-repo `wiki/` pages. When a durable fact changed, it opens a
-follow-up pull request with the page edits. Chores, cherry-picks, and
-wiki-only merges stay quiet.
-
-This template is one model turn: read the merge, then call `apply_wiki`.
-
-## Scaffold
-
-```bash
-npx @cursor/july init ./code-wiki --template code-wiki
-```
-
-`init` asks which GitHub repos to watch. Every repo must share one
-owner. Pass `--var repos=acme/api,acme/web` to skip the prompt.
-
-The list lands in `agent/lib/repos.ts`. The GitHub channel reads it for
-`cursorAccount` and for the wake filter. Edit that file when the set
-changes.
-
-Pages live in `wiki/` at the repository root. Keep them flat markdown.
-Add `wiki/_index.md` as the catalog.
-
-## Connect GitHub through Cursor
-
-Connect GitHub in Cursor for those repositories (Settings or
-[cursor.com/dashboard](https://cursor.com/dashboard)). Sign the host in:
-
-```bash
-cd code-wiki
-agent-sdk login
-```
-
-`cursorAccount` pulls SCM events from Cursor and mints a short-lived,
-repo-scoped credential with `contents-write` so the agent can open the
-follow-up PR. See the [GitHub guide](../guides/github.md).
-
-## First update
-
-```bash
-agent-sdk dev
-```
-
-`dev` starts the Cursor event relay for the watched repos. To drive a
-known merge without waiting on a live push:
-
-```bash
-agent-sdk github replay https://github.com/acme/api/pull/12 --dir . --action closed
-```
-
-`replay` needs pull access. The payload must be a merged PR (`closed`
-and `merged`). Repos outside `agent/lib/repos.ts`, wiki-only merges,
-and branches named `wiki/*` are ignored so the follow-up PR cannot
-wake the agent again.
-
-The channel writes `pr/base.ref`, `pr/files.txt`, `pr/diff.patch`, and
-the current `wiki/` pages, then starts a model turn. The model calls
-`apply_wiki` once. The follow-up PR targets that merge's base. Later
-updates to the same base stack on `wiki/<base>`.
-
-Chat replies stay in the playground. `apply_wiki` opens the GitHub
-pull request, or records a skip.
-
-## What to edit
-
-- `agent/lib/repos.ts`: watched repos
-- `agent/instructions.md`: what counts as an update
-- `evals/wiki.eval.ts`: smoke cases
-
-## Evals
-
-Four smoke cases drawn from a busy merge day: a lint fix, a new
-protobuf contract, a markdown-only change, and a cherry-pick.
-
-```bash
-agent-sdk eval
-```
-
-Eval sessions skip the GitHub write.
-
-## Deploy
-
-```bash
-agent-sdk deploy
-```
-
-Run it from the agent's git checkout. The command infers repository,
-ref, path, and slug. The deployment uses the team's Cursor GitHub
-connection for the same watched repos.

package/docs/templates/demo.md

@@ -1,85 +0,0 @@
----
-title: "Record a walkthrough from a collected PR"
-description: "Scaffold the agent, seed the PR on the host, record a walkthrough, and comment the result."
----
-
-# Record a walkthrough from a collected PR
-
-This agent records a walkthrough for a pull request you already opened.
-The host fetches title, body, and files, writes `pr.md` and `files.md`,
-then starts the turn. The model reads those files. It does not fetch
-the PR.
-
-## Scaffold
-
-```bash
-npx @cursor/july init ./demo-agent --template demo
-```
-
-`init` writes the project, installs dependencies, and puts `agent-sdk`
-on PATH.
-
-## Log in
-
-Model turns use your Cursor account.
-
-```bash
-cd demo-agent
-agent-sdk login
-```
-
-The command opens a browser if you have no stored credential.
-
-## Collect the PR
-
-The host needs GitHub credentials so it can read the PR and comment:
-`GITHUB_TOKEN`, `GH_TOKEN`, or `gh auth`.
-
-In the playground, run `/queue/pr` and paste a PR URL or `owner/repo#N`.
-
-```bash
-curl -X POST http://127.0.0.1:3000/demo-agent/v1/channels/queue/pr \
-  -H 'content-type: application/json' \
-  -d '{ "pr": "acme/shop#42" }'
-```
-
-The host fetches title, body, and files, writes `pr.md` and `files.md`,
-and starts the turn. Retries for the same PR coalesce.
-
-GitHub label `demo` or comment `/demo` when you terminate webhooks
-yourself: self-host and set `GITHUB_WEBHOOK_SECRET`. Hosted Cursor
-aliases require `X-Agent-Alias-Token`, which GitHub cannot send.
-
-`record_demo` comments on that pull request. Eval sessions skip the
-comment.
-
-## First walkthrough
-
-```bash
-agent-sdk dev
-```
-
-Open the playground. Run `/queue/pr` with a PR. The model reads the
-seeded files and calls `record_demo` once. Turns are sandboxed with
-`read` and `grep` only: PR title and body are untrusted.
-
-## Evals
-
-One smoke case. The host seeds `pr.md` and `files.md`. No GitHub call.
-
-```bash
-agent-sdk eval
-```
-
-## Deploy
-
-```bash
-agent-sdk deploy
-```
-
-Run it from the agent's git checkout. It infers repository, ref, path,
-and slug, builds on Cursor-managed hosting, and prints the URL.
-`agent-sdk deployments` shows status.
-
-Playground and `/queue/pr` need the alias token. GitHub label and
-`/demo` stay on a self-hosted agent with a webhook secret.

package/docs/templates/grokbot-agents.md

@@ -1,53 +0,0 @@
----
-title: "Talk to your Grok Bot agents"
-description: "Scaffold the agent, name the Grok Bot agents it may reach, and consult them from its own conversation."
----
-
-# Talk to your Grok Bot agents
-
-This agent sends a message to a Grok Bot you already use and reads the
-reply. The Grok Bot keeps its conversation. This agent stays where it
-is.
-
-## Scaffold
-
-```bash
-npx @cursor/july init ./grokbot --template grokbot-agents
-```
-
-`init` asks for the names shown in the Grok Bot app. Every name is an
-allowlist entry. Pass `--var agents="Plan Keeper, Chief of Staff"` to
-skip the prompt.
-
-The names land in `agent/extensions/grokbot.ts`. A name outside that
-list is refused.
-
-## Log in
-
-Asks run under the signed-in account.
-
-```bash
-cd grokbot
-agent-sdk login
-agent-sdk dev
-```
-
-In the playground, ask it to talk to one of the names you entered.
-
-## What to edit
-
-- `agent/extensions/grokbot.ts`: who it may talk to. Add `needsApproval: true` to park each ask.
-- `agent/instructions.md`: when to consult them
-
-See [Cursor Grok Bot agents](../guides/grokbot-agents.md) for the
-extension, and [Human-in-the-loop approvals](../guides/human-in-the-loop.md)
-for where a parked ask gets approved.
-
-## Evals
-
-```bash
-agent-sdk eval
-```
-
-The smoke case asks who it can talk to. It must list the configured
-bots and not send a message.

package/docs/templates/security-help.md

@@ -1,70 +0,0 @@
----
-title: "Answer security questions in Slack"
-description: "Scaffold the agent, connect Slack, and answer from your skills. Paste a GitHub pull request for a first look."
----
-
-# Answer security questions in Slack
-
-This agent answers security questions in Slack from files you edit.
-Paste a GitHub pull request URL for a first look. Access grants,
-incident close-out, and GitHub writes stay with a person.
-
-## Scaffold
-
-```bash
-npx @cursor/july init ./security-help --template security-help
-```
-
-`init` asks which GitHub repos it may read. Every repo must share one
-owner. Pass `--var repos=acme/api,acme/web` to skip the prompt.
-
-The list lands in `agent/lib/repos.ts`. Slack uses it when someone
-pastes a PR URL.
-
-## Connect Slack and GitHub
-
-```bash
-cd security-help
-agent-sdk login
-agent-sdk slack create --name "Security Help" --channel-posts
-agent-sdk dev
-```
-
-`--channel-posts` is required to watch channels. Mentions and DMs work
-without it. Connect GitHub in Cursor for the watched repos. Slack
-starts the session. See [Slack](../guides/slack.md) and
-[GitHub](../guides/github.md).
-
-## First answer
-
-Mention the bot or DM it. Edit `agent/skills/faq.md` before you rely
-on the answers; the shipped file is a placeholder.
-
-Paste a watched PR URL for a first look. A repo outside the list is
-refused.
-
-## What to edit
-
-- `agent/lib/repos.ts`: repos it may read
-- `agent/channels/slack.ts`: channel ids to watch (`watch`)
-- `agent/skills/faq.md`: answers for your company
-- `agent/skills/`: how to look at a PR, a leak, or an access ask
-- `agent/instructions.md`: routing
-
-## Evals
-
-```bash
-agent-sdk eval
-```
-
-Three smoke cases: phishing, SaaS access, and a seeded PR look. Eval
-sessions skip Slack and GitHub writes.
-
-## Deploy
-
-```bash
-agent-sdk deploy
-```
-
-Run it from the agent's git checkout. Set Slack tokens on the
-deployment after `slack create`. See [Deployment](../deployment.md).

package/src/client.ts

@@ -1,23 +0,0 @@
-/**
- * Client-side plumbing for talking to a running agent-sdk deployment:
- * production target resolution (stored Cursor login → engineAccess URL and
- * headers), request-header assembly, and the sessions listing used for
- * latest-session binding.
- *
- * This entry point exists for first-party CLI clients (`agsh`); agent code
- * should not need it.
- */
-
-export {
-  mergeRequestHeaders,
-  type RequestAuth,
-} from "./internal/request-headers.js";
-export {
-  PROD_ENGINE_WAKE_HEADERS,
-  ProdTargetError,
-  type ResolvedProdTarget,
-  type ResolveProdTargetOptions,
-  resolveProdTarget,
-} from "./internal/resolve-prod-target.js";
-export { listSessions } from "./internal/sessions-client.js";
-export type { SessionSummary } from "./types.js";

package/src/internal/tenant-slack/relay.ts

@@ -1,203 +0,0 @@
-/**
- * Relay-backed Slack posting for managed deployments.
- *
- * On AgentSDK v2 managed deployments the fork never receives a Slack token.
- * The delivery envelope carries the matched automation's configured Slack
- * **channel ids** only (`managedAutomation.slackChannels`, absent when the
- * customer toggled "Send to Slack" off); each post goes through the control
- * plane's Slack relay
- * (`/internal/agent-serve/agent-sdk-slack-relay/:automationUuid`),
- * authenticated with the pod's own `CURSOR_API_KEY`. The relay re-checks
- * that the channel is configured on exactly that automation, renders the
- * markdown, and posts as the Cursor Slack app with the customer's stored
- * workspace token.
- *
- * INTERNAL: first-party multi-tenant deployment plumbing. Deliberately
- * excluded from the published `@cursor/july` npm package (see the `files`
- * whitelist); consumed by internal deployments via relative source imports.
- */
-
-import {
-  cursorExternalApiUrl,
-  resolveApiKeySync,
-} from "../cursor/credentials.js";
-
-/**
- * Path prefix of the backend relay route. Must match the mount in
- * `backend/server/src/agentServe/agentServeEndpoints.ts`
- * (`agentSdkSlackRelayRoutes`).
- */
-export const AGENT_SDK_SLACK_RELAY_PATH_PREFIX =
-  "/internal/agent-serve/agent-sdk-slack-relay";
-
-/** Mirrors the relay's body bound; longer summaries are truncated client-side. */
-export const AGENT_SDK_SLACK_RELAY_MAX_MESSAGE_CHARS = 12_000;
-
-const DEFAULT_TIMEOUT_MS = 30_000;
-
-/**
- * Relay URL scoped to the source managed automation the delivery envelope
- * attributed, so the relay checks the destination against exactly that
- * automation's configured channels.
- */
-export function relaySlackPostUrl(args: {
-  baseUrl: string;
-  automationUuid: string;
-}): string {
-  const trimmed = args.baseUrl.endsWith("/")
-    ? args.baseUrl.slice(0, -1)
-    : args.baseUrl;
-  return `${trimmed}${AGENT_SDK_SLACK_RELAY_PATH_PREFIX}/${encodeURIComponent(args.automationUuid)}`;
-}
-
-export type RelaySlackPostResult =
-  | { ok: true; channel: string; ts?: string; permalink?: string }
-  | {
-      ok: false;
-      channel: string;
-      /** HTTP status from the relay, or 0 when the request never completed. */
-      status: number;
-      error: string;
-    };
-
-export interface RelaySlackPostTarget {
-  relayBaseUrl: string;
-  apiKey: string;
-}
-
-/** Pod credential + external API base URL, or undefined off-platform. */
-export function resolveRelaySlackTarget(): RelaySlackPostTarget | undefined {
-  const resolved = resolveApiKeySync();
-  if (resolved === undefined) {
-    return undefined;
-  }
-  return { relayBaseUrl: cursorExternalApiUrl(), apiKey: resolved.apiKey };
-}
-
-function truncateMessage(message: string): string {
-  if (message.length <= AGENT_SDK_SLACK_RELAY_MAX_MESSAGE_CHARS) {
-    return message;
-  }
-  const marker = "\n\n_(truncated)_";
-  return `${message.slice(0, AGENT_SDK_SLACK_RELAY_MAX_MESSAGE_CHARS - marker.length)}${marker}`;
-}
-
-function describeError(error: unknown): string {
-  if (error instanceof Error) {
-    return error.name === "TimeoutError" || error.name === "AbortError"
-      ? "relay request timed out"
-      : error.message;
-  }
-  return String(error);
-}
-
-/**
- * Post one markdown message to one configured channel through the relay.
- * Never throws: every failure is a `{ ok: false }` result so product code
- * can log and continue (a Slack outage must not fail the review).
- */
-export async function postRelaySlackMessage(args: {
-  /** Source managed automation uuid from the delivery envelope. */
-  automationUuid: string;
-  /** Configured channel id (from `managedAutomation.slackChannels`). */
-  channel: string;
-  /** Markdown body. */
-  message: string;
-  /** Parent message ts to reply in a thread. */
-  threadTs?: string;
-  /** Test seam; defaults to the pod credential + external API base URL. */
-  resolve?: () => RelaySlackPostTarget | undefined;
-  fetchImpl?: typeof fetch;
-  timeoutMs?: number;
-  /** Diagnostic sink; defaults to `console.info`. */
-  log?: (line: string) => void;
-}): Promise<RelaySlackPostResult> {
-  const channel = args.channel.trim();
-  const log = args.log ?? ((line: string) => console.info(line));
-  if (channel === "") {
-    log(
-      `[agent-sdk-slack-relay-client] refusing post automationUuid=${args.automationUuid}: empty channel`
-    );
-    return { ok: false, channel, status: 0, error: "empty channel" };
-  }
-  const target = (args.resolve ?? resolveRelaySlackTarget)();
-  if (target === undefined) {
-    log(
-      `[agent-sdk-slack-relay-client] refusing post automationUuid=${args.automationUuid} channel=${channel}: no Cursor credential resolved (CURSOR_API_KEY / pod credential absent)`
-    );
-    return {
-      ok: false,
-      channel,
-      status: 0,
-      error: "no Cursor credential for the Slack relay",
-    };
-  }
-  const fetchImpl = args.fetchImpl ?? fetch;
-  const url = relaySlackPostUrl({
-    baseUrl: target.relayBaseUrl,
-    automationUuid: args.automationUuid,
-  });
-  const messageChars = args.message.length;
-  log(
-    `[agent-sdk-slack-relay-client] POST ${url} channel=${channel} messageChars=${String(messageChars)} truncated=${String(messageChars > AGENT_SDK_SLACK_RELAY_MAX_MESSAGE_CHARS)} threaded=${String(args.threadTs !== undefined)} timeoutMs=${String(args.timeoutMs ?? DEFAULT_TIMEOUT_MS)}`
-  );
-  const startedAt = Date.now();
-  let response: Response;
-  try {
-    response = await fetchImpl(url, {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${target.apiKey}`,
-        "content-type": "application/json",
-        accept: "application/json",
-      },
-      body: JSON.stringify({
-        channel,
-        message: truncateMessage(args.message),
-        ...(args.threadTs === undefined ? {} : { threadTs: args.threadTs }),
-      }),
-      signal: AbortSignal.timeout(args.timeoutMs ?? DEFAULT_TIMEOUT_MS),
-    });
-  } catch (error) {
-    log(
-      `[agent-sdk-slack-relay-client] request failed before a response channel=${channel} automationUuid=${args.automationUuid} elapsedMs=${String(Date.now() - startedAt)}: ${describeError(error)}`
-    );
-    return { ok: false, channel, status: 0, error: describeError(error) };
-  }
-  let body: unknown;
-  try {
-    body = await response.json();
-  } catch {
-    body = undefined;
-  }
-  const record =
-    typeof body === "object" && body !== null && !Array.isArray(body)
-      ? (body as Record<string, unknown>)
-      : {};
-  if (!response.ok || record.ok !== true) {
-    const error =
-      typeof record.error === "string" && record.error !== ""
-        ? record.error
-        : `relay responded ${response.status}`;
-    log(
-      `[agent-sdk-slack-relay-client] relay denied channel=${channel} automationUuid=${args.automationUuid} status=${String(response.status)} bodyOk=${String(record.ok)} elapsedMs=${String(Date.now() - startedAt)}: ${error}`
-    );
-    return {
-      ok: false,
-      channel,
-      status: response.status,
-      error,
-    };
-  }
-  log(
-    `[agent-sdk-slack-relay-client] relay posted channel=${typeof record.channel === "string" ? record.channel : channel} automationUuid=${args.automationUuid} status=${String(response.status)} ts=${typeof record.ts === "string" ? record.ts : "<none>"} elapsedMs=${String(Date.now() - startedAt)}`
-  );
-  return {
-    ok: true,
-    channel: typeof record.channel === "string" ? record.channel : channel,
-    ...(typeof record.ts === "string" ? { ts: record.ts } : {}),
-    ...(typeof record.permalink === "string"
-      ? { permalink: record.permalink }
-      : {}),
-  };
-}

package/templates/pr-autofixer/agent/storage.ts

@@ -1,7 +0,0 @@
-import { defineStorage } from "@cursor/july/storage";
-import { cursorHostedStorage } from "@cursor/july/storage/cursor-hosted";
-
-export default defineStorage({
-  name: "cursor-hosted",
-  ...cursorHostedStorage(),
-});