@cursor/july 0.1.16 → 0.1.18

package/src/types.ts

@@ -198,6 +198,29 @@ export interface AgentConfig {
    * Engine-wide turn admission limits. See {@link AgentConcurrencyOptions}.
    */
   concurrency?: AgentConcurrencyOptions;
+  /**
+   * Framework-provided model-facing tools, opted in per capability. See
+   * {@link BuiltinToolsConfig}.
+   */
+  builtinTools?: BuiltinToolsConfig;
+}
+
+/**
+ * Built-in tools on {@link AgentConfig.builtinTools}. Each enabled
+ * capability materializes as ordinary server tools at discovery time, so
+ * turns, direct calls, `info`, and the playground treat them like authored
+ * tools. Authored tools with the same name win (with a warning), and none
+ * of them run on cloud turns (server tools are local-runtime only).
+ */
+export interface BuiltinToolsConfig {
+  /**
+   * Reminder tools bound to the current conversation, over
+   * {@link HostContext.reminders}: `reminders_create`, `reminders_list`,
+   * and `reminders_cancel` (the name the framework's reminder fire prompt
+   * tells the model to call when a stop condition is met). Sessions
+   * without a continuation key cannot arm reminders.
+   */
+  reminders?: boolean;
 }
 
 /**
@@ -269,6 +292,38 @@ export interface AgentLocalOptions {
    * ambient `AGENTS.md` / `.cursor` rules.
    */
   cwd?: string;
+  /**
+   * One harness cwd shared by every session, for agents that work inside an
+   * existing checkout. Absolute, or relative to the agent project root.
+   * Takes precedence over {@link cwd}; a per-send
+   * {@link SendMessageOptions.workspaceDir} still wins over both.
+   *
+   * The SDK keys its local executor — Cursor rules, skills, MCP, the ignore
+   * mappings — on the harness cwd, so a shared directory resolves the
+   * workspace once per serve process instead of once per session. With
+   * `cwd`'s `<cwd>/<sessionId>` layout that cache never hits, and on a large
+   * repo each session pays the full scan again.
+   *
+   * Sessions are no longer isolated from each other on disk: they share a
+   * working tree, and a file one turn writes is visible to the next. Agent
+   * scaffold (`AGENTS.md`, skills, tool scripts) is kept out of the shared
+   * directory and delivered inline instead, so pointing this at a repo does
+   * not write agentkit files into it — but `workspaceFiles` still lands in
+   * the harness cwd, as it does for a per-send override.
+   */
+  workspaceDir?: string;
+  /**
+   * Run the harness inside Cursor's local sandbox (`sandboxOptions.enabled`
+   * on the SDK). Off by default, matching the SDK: shell then auto-approves
+   * and inherits the serve process environment — including any credentials
+   * the host holds.
+   *
+   * Turn this on for agents whose turns read untrusted input (webhook
+   * payloads, PR diffs, inbound chat). It is a real tool boundary rather
+   * than a prompt-level one, so it still holds when the model is steered
+   * into ignoring its instructions.
+   */
+  sandbox?: boolean;
 }
 
 export type AgentConfigDefinition = AgentConfig & BrandedDefinition<"agent">;
@@ -585,9 +640,9 @@ export type ConnectionTransport =
       /** Expose the Cursor account's MCP connectors (backend-executed). */
       cursorAccount: true;
       /**
-       * Restrict to these connector names (as they appear in the Cursor
-       * account's MCP config, e.g. `["Linear", "Notion"]`). Omit to expose
-       * every connected HTTP/SSE server on the account.
+       * Restrict to these connector names after discovery normalization.
+       * Authored configs may also pass `"*"` / `["*"]` (see
+       * {@link ConnectionConfig}); those normalize to `undefined` (= all).
        */
       servers?: string[];
     };
@@ -606,6 +661,38 @@ export function isCursorAccountTransport(
   return "cursorAccount" in transport && transport.cursorAccount === true;
 }
 
+/**
+ * Normalize an authored Cursor account `servers` filter.
+ *
+ * `undefined`, `"*"`, and `["*"]` (after trim) all mean every connected
+ * HTTP/SSE server on the account. Returns a concrete allowlist, or
+ * `undefined` for all. Does not validate emptiness, blank entries, or a
+ * mixed `"*"` + names list — discovery owns those diagnostics.
+ */
+export function normalizeCursorAccountServers(
+  servers: string[] | "*" | undefined
+): string[] | undefined {
+  if (servers === undefined || servers === "*") {
+    return undefined;
+  }
+  const trimmed = servers.map((server) => server.trim());
+  if (trimmed.length === 1 && trimmed[0] === "*") {
+    return undefined;
+  }
+  return [...servers];
+}
+
+/** True when an authored allowlist mixes `"*"` with other connector names. */
+export function cursorAccountServersHasMixedWildcard(
+  servers: string[] | "*" | undefined
+): boolean {
+  if (servers === undefined || servers === "*") {
+    return false;
+  }
+  const trimmed = servers.map((server) => server.trim());
+  return trimmed.includes("*") && trimmed.some((server) => server !== "*");
+}
+
 /**
  * True for transports that stay symbolic at discovery time and are resolved
  * by the serve host once it is listening (peers and the Cursor account
@@ -620,7 +707,29 @@ export function isSymbolicConnectionTransport(
   );
 }
 
-export type ConnectionConfig = ConnectionTransport & {
+/**
+ * Authored MCP connection config (`defineConnection(...)`).
+ *
+ * For Cursor account connections, `servers` may be omitted, `"*"`, or
+ * `["*"]` to forward every connected HTTP/SSE connector; a concrete
+ * `string[]` allowlists by connector name. Discovery normalizes the
+ * wildcard forms to an unfiltered {@link ConnectionTransport}.
+ */
+export type ConnectionConfig = (
+  | Exclude<ConnectionTransport, { cursorAccount: true }>
+  | {
+      cursorAccount: true;
+      /**
+       * Which account connectors to expose.
+       *
+       * - Omit, pass `"*"`, or pass `["*"]` to forward **every** connected
+       *   HTTP/SSE server on the account (no per-connector allowlist).
+       * - Pass connector names as they appear in the Cursor account's MCP
+       *   config (e.g. `["Linear", "Notion"]`) to restrict the set.
+       */
+      servers?: string[] | "*";
+    }
+) & {
   /** Documentation only; shown in `info` output. */
   description?: string;
   /**
@@ -1636,6 +1745,16 @@ export interface ReminderHostApi {
     continuationToken: string,
     reason: string
   ): Promise<number>;
+  /**
+   * Re-key armed reminders after a channel rotates a session's continuation
+   * token, so earlier reminders keep waking the conversation. The engine
+   * calls this from `setContinuationToken`; channels rarely need to.
+   */
+  rekeyContinuation(
+    channelId: string,
+    oldToken: string,
+    newToken: string
+  ): Promise<number>;
   /**
    * Fire immediately (dev / hillclimb).
    * `outcome` is `"noop"` when already firing or not armed.
@@ -1876,6 +1995,8 @@ export interface RunnerTurnRequest {
   sdkAgentId?: string;
   /** Absolute path of the session's materialized workspace. */
   workspaceDir: string;
+  /** Run the local harness sandboxed ({@link AgentLocalOptions.sandbox}). */
+  sandbox?: boolean;
   /** Absolute path for runner-owned durable state (conversation store). */
   runnerStateDir: string;
   prompt: string;

package/dist/channels/slack/post-update-delivery.d.ts

@@ -1,85 +0,0 @@
-/**
- * Live-reply delivery strategies for the Slack default handlers.
- *
- * A single strategy owns how an in-progress reply is opened, updated,
- * finalized, and cleaned up so the handlers in `defaults.ts` don't fork on the
- * delivery mode at every event:
- *
- * - `stream`: Slack chat.startStream / appendStream / stopStream.
- * - `post-update`: a chat.postMessage skeleton edited with chat.update. This is
- *   the only path that preserves Cursor-account identity pinning (which only
- *   covers postMessage).
- *
- * `buildDefaultEvents` selects one via {@link selectLiveDeliveryStrategy} up
- * front and calls into it. All calls keep the same soft-fail / log behavior as
- * the inlined logic they replaced.
- */
-import type { ChannelEventContext } from "../../types.js";
-import type { SlackLog } from "./log.js";
-import type { SlackBotToken, SlackChannelState } from "./types.js";
-type SlackChannel = ChannelEventContext<SlackChannelState>;
-export interface LiveDeliveryDeps {
-    botToken: SlackBotToken | undefined;
-    getLog: () => SlackLog;
-}
-/**
- * How the default handlers deliver an in-progress reply. Methods write live
- * delivery state (`streamTs`, `streamChannelId`, `lastPostedText`,
- * `lastPostUpdateAtMs`, `streamingUnavailable`) on `channel.state` directly.
- */
-export interface LiveDeliveryStrategy {
-    /** True when tool-call thinking steps can be appended to the live message. */
-    readonly inlineToolSteps: boolean;
-    /** Open the live message (skeleton post / stream start). */
-    start(args: {
-        channel: SlackChannel;
-        channelId: string;
-        threadTs: string;
-        sessionId: string;
-    }): Promise<void>;
-    /** Push the latest cumulative text to the live message (throttled). */
-    append(args: {
-        channel: SlackChannel;
-        channelId: string;
-        streamTs: string;
-        text: string;
-        sessionId: string;
-    }): Promise<void>;
-    /**
-     * Flush the final reply text. `delivered` is false only when the caller must
-     * post the full reply as a fresh message (finalize failed on partial text).
-     */
-    finalize(args: {
-        channel: SlackChannel;
-        channelId: string;
-        streamTs: string;
-        text: string;
-        sessionId: string;
-    }): Promise<{
-        delivered: boolean;
-    }>;
-    /** Close the live message when the turn produced no final text. */
-    finalizeEmpty(args: {
-        channel: SlackChannel;
-        channelId: string;
-        streamTs: string;
-    }): Promise<void>;
-    /** Best-effort remove a live message left open after the turn ended. */
-    cleanupOrphan(args: {
-        channel: SlackChannel;
-    }): Promise<void>;
-    /** Deliver the error text into the live message; `delivered` gates a fallback post. */
-    fail(args: {
-        channel: SlackChannel;
-        channelId: string;
-        streamTs: string;
-        errorText: string;
-        sessionId: string;
-    }): Promise<{
-        delivered: boolean;
-    }>;
-}
-/** Pick the live-reply delivery strategy for a `buildDefaultEvents` instance. */
-export declare function selectLiveDeliveryStrategy(deps: LiveDeliveryDeps, usePostUpdate: boolean): LiveDeliveryStrategy;
-export {};
-//# sourceMappingURL=post-update-delivery.d.ts.map

package/dist/channels/slack/post-update-delivery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"post-update-delivery.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/post-update-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAW1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEnE,KAAK,YAAY,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC,MAAM,EAAE,MAAM,QAAQ,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,4DAA4D;IAC5D,KAAK,CAAC,IAAI,EAAE;QACV,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE;QACX,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE;QACb,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpC,mEAAmE;IACnE,aAAa,CAAC,IAAI,EAAE;QAClB,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,wEAAwE;IACxE,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,uFAAuF;IACvF,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrC;AA6RD,iFAAiF;AACjF,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,gBAAgB,EACtB,aAAa,EAAE,OAAO,GACrB,oBAAoB,CAItB"}