@cursor/july 0.1.109 → 0.1.112

package/templates/agentic-owners/package.json

@@ -15,6 +15,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/agents-md/agent/lib/collect.ts

@@ -62,7 +62,10 @@ export async function collectWeek(host: HostContext): Promise<Week> {
   const agents = await loadAgents(octokit, parsed, base, pulls);
   Object.assign(files, agents.files);
   files["week/files.txt"] = `${agents.paths.join("\n")}\n`;
-  files["week/slack.md"] = await loadSlack(host, Math.floor(start.getTime() / 1000));
+  files["week/slack.md"] = await loadSlack(
+    host,
+    Math.floor(start.getTime() / 1000)
+  );
 
   return {
     window,
@@ -180,11 +183,11 @@ async function loadPull(
     }),
   ]);
   const comments = [...issue.data, ...review.data]
-    .map((item) => {
+    .map(item => {
       const author = item.user?.login ?? "unknown";
       return `@${author}: ${clip(item.body ?? "", MAX_LINE)}`;
     })
-    .filter((line) => !line.endsWith(": "));
+    .filter(line => !line.endsWith(": "));
   return {
     number: pull.number,
     title: pull.title,
@@ -192,7 +195,7 @@ async function loadPull(
     author: pull.user?.login ?? "unknown",
     merged: pull.merged_at ?? "",
     url: pull.html_url,
-    files: listed.data.map((file) => file.filename),
+    files: listed.data.map(file => file.filename),
     comments,
   };
 }
@@ -243,10 +246,9 @@ async function listAgents(
       recursive: "1",
     });
     return (data.tree ?? [])
-      .map((entry) => entry.path)
+      .map(entry => entry.path)
       .filter(
-        (path): path is string =>
-          typeof path === "string" && isAgentsPath(path)
+        (path): path is string => typeof path === "string" && isAgentsPath(path)
       );
   } catch (error) {
     if (isNotFound(error)) {
@@ -336,7 +338,7 @@ async function resolveChannel(
       limit: 200,
       cursor,
     });
-    const match = listed.channels?.find((channel) => channel.name === trimmed);
+    const match = listed.channels?.find(channel => channel.name === trimmed);
     if (match?.id !== undefined) {
       return match.id;
     }
@@ -380,7 +382,7 @@ function formatPull(pull: Pull): string {
   const comments =
     pull.comments.length === 0
       ? ""
-      : `\n\n### comments\n${pull.comments.map((line) => `- ${line}`).join("\n")}`;
+      : `\n\n### comments\n${pull.comments.map(line => `- ${line}`).join("\n")}`;
   return `## #${pull.number} ${pull.title}
 url: ${pull.url}
 author: @${pull.author}
@@ -390,7 +392,11 @@ files: ${pull.files.join(", ")}
 ${pull.body}${comments}`;
 }
 
-function formatSlack(msg: { text?: string; user?: string; ts?: string }): string {
+function formatSlack(msg: {
+  text?: string;
+  user?: string;
+  ts?: string;
+}): string {
   const who = msg.user === undefined ? "unknown" : `<@${msg.user}>`;
   return `${who}: ${clip(msg.text ?? "", MAX_LINE)}`;
 }

package/templates/agents-md/agent/lib/config.ts

@@ -4,5 +4,5 @@ export const SLACK_CHANNELS: readonly string[] = ["#eng"];
 const SKIP = new Set(["", "none", "-"]);
 
 export function slackChannels(): readonly string[] {
-  return SLACK_CHANNELS.filter((name) => !SKIP.has(name.toLowerCase()));
+  return SLACK_CHANNELS.filter(name => !SKIP.has(name.toLowerCase()));
 }

package/templates/agents-md/agent/tools/apply_agents.ts

@@ -27,8 +27,8 @@ type Write = {
 export default defineTool({
   description:
     "Skip or open an AGENTS.md follow-up PR for this weekly review. Call once.",
-  needsApproval: (input) => input.verdict === "update",
-  effect: (input) => (input.verdict === "update" ? "write" : "read"),
+  needsApproval: input => input.verdict === "update",
+  effect: input => (input.verdict === "update" ? "write" : "read"),
   inputSchema: z.discriminatedUnion("verdict", [
     z.object({
       verdict: z.literal("skip"),
@@ -53,9 +53,11 @@ export default defineTool({
     const window = await readTrimmed(dir, "week/window.txt");
     const branch = updateBranch(base);
     if (repo === undefined || branch === undefined || window === "") {
-      throw new Error("missing week/repo.txt, week/base.ref, or week/window.txt");
+      throw new Error(
+        "missing week/repo.txt, week/base.ref, or week/window.txt"
+      );
     }
-    const files = input.files.map((item) => {
+    const files = input.files.map(item => {
       const path = agentsPath(item.path);
       if (path === undefined) {
         throw new Error(`invalid AGENTS.md path: ${item.path}`);
@@ -104,7 +106,7 @@ async function openAgentsPr(input: Write) {
     commit_sha: parent,
   });
   const blobs = await Promise.all(
-    input.files.map(async (item) => {
+    input.files.map(async item => {
       const { data } = await input.octokit.rest.git.createBlob({
         ...repo,
         content: Buffer.from(item.content).toString("base64"),
@@ -203,9 +205,9 @@ This pull request rewrites AGENTS.md. Those files are always-applied agent instr
 }
 
 function citesWindow(body: string | null | undefined, window: string): boolean {
-  return new RegExp(
-    `(?:^|\\n)Window: ${escapeRegExp(window)}(?:\\s|$)`
-  ).test(body ?? "");
+  return new RegExp(`(?:^|\\n)Window: ${escapeRegExp(window)}(?:\\s|$)`).test(
+    body ?? ""
+  );
 }
 
 function appendWindow(body: string, reason: string, window: string): string {

package/templates/agents-md/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/code-wiki/agent/channels/github.ts

@@ -1,8 +1,5 @@
 import type { HostGitHubClient } from "@cursor/july";
-import {
-  defaultGitHubAuth,
-  githubChannel,
-} from "@cursor/july/channels/github";
+import { defaultGitHubAuth, githubChannel } from "@cursor/july/channels/github";
 import { REPOS, watches } from "../lib/repos.js";
 import { WIKI_DIR, isWikiPath } from "../lib/wiki.js";
 
@@ -36,7 +33,7 @@ export default githubChannel({
       ...pull,
       per_page: 100,
     });
-    const files = listed.map((file) => file.filename);
+    const files = listed.map(file => file.filename);
     if (
       files.length > 0 &&
       files.length < LIST_FILES_CAP &&
@@ -85,13 +82,13 @@ async function loadWiki(
     return { "wiki/pages.txt": "" };
   }
   const markdown = listed.filter(
-    (item) => item.type === "file" && item.name.endsWith(".md")
+    item => item.type === "file" && item.name.endsWith(".md")
   );
   const truncated = markdown.length > MAX_WIKI_PAGES;
   const files = markdown.slice(0, MAX_WIKI_PAGES);
   const pages: Record<string, string> = {};
   await Promise.all(
-    files.map(async (file) => {
+    files.map(async file => {
       const body = await readContents(octokit, {
         owner,
         repo,

package/templates/code-wiki/agent/lib/repos.ts

@@ -1,5 +1,5 @@
 export const REPOS: readonly string[] = ["owner/repo"];
 
 export function watches(fullName: string): boolean {
-  return REPOS.some((repo) => repo.toLowerCase() === fullName.toLowerCase());
+  return REPOS.some(repo => repo.toLowerCase() === fullName.toLowerCase());
 }

package/templates/code-wiki/agent/tools/apply_wiki.ts

@@ -58,7 +58,7 @@ export default defineTool({
     if (branch === undefined) {
       throw new Error("missing pr/base.ref");
     }
-    const pages = input.pages.map((item) => {
+    const pages = input.pages.map(item => {
       const path = wikiPagePath(item.path);
       if (path === undefined) {
         throw new Error(`invalid wiki path: ${item.path}`);
@@ -106,8 +106,7 @@ async function openWikiPr(input: Write) {
     };
   }
   const branchSha = await refSha(input.octokit, repo, input.branch);
-  const parent =
-    branchSha ?? (await refSha(input.octokit, repo, input.base));
+  const parent = branchSha ?? (await refSha(input.octokit, repo, input.base));
   if (parent === undefined) {
     throw new Error(`missing base ref: ${input.base}`);
   }
@@ -116,7 +115,7 @@ async function openWikiPr(input: Write) {
     commit_sha: parent,
   });
   const blobs = await Promise.all(
-    input.pages.map(async (item) => {
+    input.pages.map(async item => {
       const { data } = await input.octokit.rest.git.createBlob({
         ...repo,
         content: Buffer.from(item.content).toString("base64"),

package/templates/code-wiki/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/demo/agent/lib/collect.ts

@@ -1,4 +1,8 @@
-import { prompt, type HostGitHubClient, type SendMessageFn } from "@cursor/july";
+import {
+  prompt,
+  type HostGitHubClient,
+  type SendMessageFn,
+} from "@cursor/july";
 import {
   type GitHubPrRef,
   parseGitHubPrRef,
@@ -64,7 +68,7 @@ export async function collectPr(
     ...ref,
     title: pull.data.title,
     body: pull.data.body ?? "",
-    files: listed.data.map((file) => file.filename),
+    files: listed.data.map(file => file.filename),
   };
 }
 

package/templates/demo/agent/lib/repos.ts

@@ -1,5 +1,5 @@
 export const REPOS: readonly string[] = ["owner/repo"];
 
 export function watches(fullName: string): boolean {
-  return REPOS.some((repo) => repo.toLowerCase() === fullName.toLowerCase());
+  return REPOS.some(repo => repo.toLowerCase() === fullName.toLowerCase());
 }

package/templates/demo/agent/tools/record_demo.ts

@@ -6,7 +6,7 @@ import { parseToken } from "../lib/collect.js";
 function comment(summary: string, artifacts: string[]): string {
   const lines = ["### Demo", "", summary];
   if (artifacts.length > 0) {
-    lines.push("", ...artifacts.map((path) => `- \`${path}\``));
+    lines.push("", ...artifacts.map(path => `- \`${path}\``));
   }
   return lines.join("\n");
 }

package/templates/demo/evals/demo.eval.ts

@@ -1,9 +1,5 @@
 import { defineEval, includes } from "@cursor/july/evals";
-import {
-  type Collected,
-  filesFor,
-  promptFor,
-} from "../agent/lib/collect.js";
+import { type Collected, filesFor, promptFor } from "../agent/lib/collect.js";
 
 const pr: Collected = {
   owner: "acme",

package/templates/demo/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/grokbot-agents/package.json

@@ -12,6 +12,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/pr-autofixer/agent/channels/github.ts

@@ -74,17 +74,20 @@ async function flush(event: BufferedWebhookEvent): Promise<void> {
   const continuationToken = continuationTokenFor(pr);
 
   try {
-    const session = await runtime.send(buildGenericPrUpdatePrompt(event.prUrl), {
-      auth: {
-        authenticator: "github-webhook",
-        principalId: "pr-autofixer-webhook",
-        principalType: "service",
-      },
-      continuationToken,
-      title: `PR ${pr.label}`,
-      cloud: cloudOptionsFor(pr),
-      sdkAgentId: bcId,
-    });
+    const session = await runtime.send(
+      buildGenericPrUpdatePrompt(event.prUrl),
+      {
+        auth: {
+          authenticator: "github-webhook",
+          principalId: "pr-autofixer-webhook",
+          principalType: "service",
+        },
+        continuationToken,
+        title: `PR ${pr.label}`,
+        cloud: cloudOptionsFor(pr),
+        sdkAgentId: bcId,
+      }
+    );
     await session.waitForCompletion();
   } catch (error) {
     if (error instanceof SessionBusyError) {
@@ -132,7 +135,7 @@ export default githubChannel({
     return wake(bufferedEventFromPr({ ctx, pr }));
   },
 
-  onComment: (ctx) =>
+  onComment: ctx =>
     wake(bufferedEventFromComment({ ctx, eventName: ctx.eventName })),
 
   onCheckSuite: async (ctx, suite) =>
@@ -146,7 +149,7 @@ export default githubChannel({
 
   onEvent: (ctx, event) => wake(bufferedEventFromRaw({ ctx, event })),
 
-  onStart: async (args) => {
+  onStart: async args => {
     runtime = {
       send: args.send,
       github: args.host.github,

package/templates/pr-autofixer/agent/lib/merge-watch.ts

@@ -111,11 +111,9 @@ export async function cancelRemindersForPr(input: {
     status: "armed",
     purpose: MERGE_CONFLICT_PURPOSE,
   });
-  const matches = armed.filter((rem) =>
-    isMergeConflictWatchForPr(rem, input.pr)
-  );
+  const matches = armed.filter(rem => isMergeConflictWatchForPr(rem, input.pr));
   await Promise.all(
-    matches.map((rem) =>
+    matches.map(rem =>
       input.reminders.cancel(rem.id, input.reason ?? "pr_closed")
     )
   );

package/templates/pr-autofixer/agent/lib/repos.ts

@@ -7,8 +7,8 @@ export function githubRepos(): readonly string[] {
       ? [...GITHUB_REPOS]
       : fromEnv
           .split(",")
-          .map((repo) => repo.trim())
-          .filter((repo) => repo !== "");
+          .map(repo => repo.trim())
+          .filter(repo => repo !== "");
   if (repos.length === 0) {
     throw new Error(
       "Set GITHUB_REPOS in agent/lib/repos.ts or PR_AUTOFIXER_REPOS to a comma-separated owner/repo list."

package/templates/pr-autofixer/agent/lib/webhook-routing.ts

@@ -105,7 +105,7 @@ async function resolvePrFromCommitSha(input: {
         commit_sha: input.sha,
       }
     );
-    const open = pulls.find((pull) => pull.state === "open");
+    const open = pulls.find(pull => pull.state === "open");
     if (open === undefined) {
       return undefined;
     }

package/templates/pr-autofixer/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/security-help/agent/lib/repos.ts

@@ -1,5 +1,5 @@
 export const REPOS: readonly string[] = ["owner/repo"];
 
 export function watches(fullName: string): boolean {
-  return REPOS.some((repo) => repo.toLowerCase() === fullName.toLowerCase());
+  return REPOS.some(repo => repo.toLowerCase() === fullName.toLowerCase());
 }

package/templates/security-help/package.json

@@ -12,6 +12,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/security-reviewer/agent/lib/repos.ts

@@ -1,5 +1,5 @@
 export const REPOS: readonly string[] = ["owner/repo"];
 
 export function watches(fullName: string): boolean {
-  return REPOS.some((repo) => repo.toLowerCase() === fullName.toLowerCase());
+  return REPOS.some(repo => repo.toLowerCase() === fullName.toLowerCase());
 }

package/templates/security-reviewer/agent/tools/post_findings.ts

@@ -20,9 +20,7 @@ export default defineTool({
   description:
     "Post the security review on this session's pull request. Call once. Empty findings = CLEAN.",
   inputSchema: z.object({
-    findings: z
-      .array(finding)
-      .describe("Exploitable issues. Empty for CLEAN."),
+    findings: z.array(finding).describe("Exploitable issues. Empty for CLEAN."),
   }),
   async execute({ findings }, ctx) {
     if (ctx.session.purpose === "eval") {

package/templates/security-reviewer/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@types/node": "^22.14.0",
-    "typescript": "^5.8.0"
+    "typescript": "6.0.3"
   }
 }

package/templates/thermo-quality-review/README.md

@@ -0,0 +1,35 @@
+# Thermo quality review
+
+Reviews pull requests for structural code quality. Posts one review comment.
+
+```bash
+npx @cursor/july init ./thermo-quality-review --template thermo-quality-review
+```
+
+## Run hosted
+
+```bash
+cd thermo-quality-review
+agent-sdk login
+agent-sdk deploy --cursor-events-repo acme/api
+```
+
+The deployment watches that repo through your team's Cursor GitHub
+connection. Open a PR to get a review.
+
+## Run locally
+
+```bash
+agent-sdk dev --cursor-events --repo acme/api
+```
+
+Or replay a PR without pushing:
+
+```bash
+agent-sdk github replay https://github.com/acme/api/pull/12 --dir .
+```
+
+## Files
+
+- `agent/instructions.md`: what counts as a finding
+- `evals/review.eval.ts`: two smoke cases

package/templates/thermo-quality-review/agent/agent.ts

@@ -0,0 +1,8 @@
+import { defineAgent } from "@cursor/july";
+
+export default defineAgent({
+  tools: ["read"],
+  local: {
+    sandbox: true,
+  },
+});

package/templates/thermo-quality-review/agent/channels/github.ts

@@ -0,0 +1,42 @@
+import {
+  defaultGitHubPullRequestDispatch,
+  githubChannel,
+} from "@cursor/july/channels/github";
+
+const MAX_DIFF_CHARS = 150_000;
+
+export default githubChannel({
+  cursorAccount: true,
+  deliverReplies: false,
+  onComment: () => null,
+  onPullRequest: (ctx, pr) => {
+    if (pr.draft) {
+      return null;
+    }
+    const dispatch = defaultGitHubPullRequestDispatch(ctx, pr);
+    if (dispatch === null) {
+      return null;
+    }
+    return {
+      auth: dispatch.auth,
+      context: ["Read pr/diff.patch."],
+      async workspaceFiles() {
+        const octokit = await ctx.github.getOctokit();
+        const diff = await octokit.rest.pulls.get({
+          owner: ctx.repository.owner,
+          repo: ctx.repository.name,
+          pull_number: pr.number,
+          mediaType: { format: "diff" },
+        });
+        const text = String(diff.data);
+        return {
+          "pr/diff.patch":
+            text.length > MAX_DIFF_CHARS
+              ? `${text.slice(0, MAX_DIFF_CHARS)}\n…[truncated]\n`
+              : text,
+          "pr/head.sha": pr.headSha,
+        };
+      },
+    };
+  },
+});

package/templates/thermo-quality-review/agent/instructions.md

@@ -0,0 +1,43 @@
+# Thermo quality review
+
+You review pull requests for structural code quality. Be ambitious:
+look for restructures that delete whole branches, helpers, or layers,
+not tidier versions of the same idea.
+
+## Hunt
+
+- Missed code-judo moves: reframings that make complexity disappear.
+- Spaghetti growth: new conditionals or special cases bolted onto
+  unrelated flows. Push them behind their own abstraction.
+- Files the PR pushes past 1,000 lines. Ask for decomposition first.
+- Feature logic leaking into shared paths. Isolate it.
+- Wrappers, casts, `any`, and optionality that hide the real contract.
+- Bespoke helpers where a canonical one exists. Reuse it.
+- Gratuitous sequential orchestration and half-applied updates.
+
+## Skip
+
+- Style nits and behavior disputes.
+- Renames when the real issue is structural.
+
+## Bar
+
+Approve only with no structural regression, no unjustified size
+explosion, and no obvious missed simplification. Otherwise push for
+the cleaner decomposition.
+
+## Review
+
+The workspace has `pr/diff.patch`. Read it once. Call `post_findings`
+once with structured findings. Reply with the count and one line per
+finding. Clean review: empty findings.
+
+The host writes the GitHub comment. Verdict is CLEAN when the list
+is empty.
+
+## Finding
+
+- `severity`: `high`, `medium`, or `low`
+- `file`, `line`: path and line in the diff
+- `title`: short name
+- `detail`: one-line impact and fix

package/templates/thermo-quality-review/agent/tools/post_findings.ts

@@ -0,0 +1,70 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { parseGitHubPrRef } from "@cursor/july/channels/github";
+import { defineTool } from "@cursor/july/tools";
+import { z } from "zod";
+
+const SHA = /^[0-9a-f]{40}$/i;
+
+const finding = z.object({
+  severity: z.enum(["high", "medium", "low"]),
+  file: z.string().min(1).max(240),
+  line: z.number().int().positive(),
+  title: z.string().min(1).max(160),
+  detail: z.string().min(1).max(280),
+});
+
+type Finding = z.infer<typeof finding>;
+
+export default defineTool({
+  description:
+    "Post the review on this session's pull request. Call once. Empty findings = CLEAN.",
+  inputSchema: z.object({
+    findings: z.array(finding).describe("Issues in the diff. Empty for CLEAN."),
+  }),
+  async execute({ findings }, ctx) {
+    if (ctx.session.purpose === "eval") {
+      return { posted: false, reason: "eval" };
+    }
+    const key = ctx.session.continuationKey ?? "";
+    if (!key.startsWith("github-pr:")) {
+      throw new Error("post_findings requires a GitHub pull request session");
+    }
+    const ref = parseGitHubPrRef(key.slice("github-pr:".length));
+    if (ref === undefined) {
+      throw new Error(`unrecognized PR: ${key}`);
+    }
+    const headSha = (
+      await readFile(join(ctx.workspaceDir, "pr/head.sha"), "utf8")
+    ).trim();
+    if (!SHA.test(headSha)) {
+      throw new Error("missing pr/head.sha");
+    }
+    const octokit = await ctx.host.github.getOctokit();
+    const response = await octokit.rest.pulls.createReview({
+      owner: ref.owner,
+      repo: ref.repo,
+      pull_number: ref.number,
+      commit_id: headSha,
+      body: reviewBody(findings),
+      event: "COMMENT",
+    });
+    return { posted: true, pr: ref.label, url: response.data.html_url };
+  },
+});
+
+function flatten(value: string): string {
+  return value.replace(/\s+/g, " ").trim();
+}
+
+function reviewBody(findings: Finding[]): string {
+  const verdict = findings.length === 0 ? "CLEAN" : "FINDINGS";
+  const lines = ["## Thermo quality review", "", `**Verdict:** ${verdict}`];
+  for (const item of findings) {
+    lines.push(
+      `- **${item.severity}** \`${flatten(item.file)}:${item.line}\` — ${flatten(item.title)}`
+    );
+    lines.push(`  ${flatten(item.detail)}`);
+  }
+  return lines.join("\n");
+}

package/templates/thermo-quality-review/evals/evals.config.ts

@@ -0,0 +1,5 @@
+import { defineEvalConfig } from "@cursor/july/evals";
+
+export default defineEvalConfig({
+  maxConcurrency: 10,
+});