@cursor/july 0.1.27 → 0.1.28

package/src/channels/slack/index.ts

@@ -33,6 +33,7 @@ export * from "./dispatch.js";
 export * from "./doctor.js";
 export * from "./eval-directive.js";
 export * from "./event-id-dedupe.js";
+export * from "./external-policy.js";
 export * from "./inbound.js";
 export * from "./init.js";
 export * from "./interactive.js";

package/src/channels/slack/interactive.ts

@@ -20,6 +20,7 @@ import { updateMessage } from "./api.js";
 import { decisionFromActionId, parseApprovalActionValue } from "./approvals.js";
 import { buildSlackInteractiveApprovalAuth } from "./auth.js";
 import { dispatchInboundMessage } from "./dispatch.js";
+import { isExternalSlackSender } from "./external-policy.js";
 import { defaultSlackLog, type SlackLog } from "./log.js";
 import type {
   SlackBlockAction,
@@ -41,6 +42,8 @@ export interface SlackInteractiveDispatchDeps {
   ) => Promise<PendingApproval>;
   waitUntil: (promise: Promise<unknown>) => void;
   log?: SlackLog;
+  /** Defaults to true. */
+  blockExternals?: boolean;
 }
 
 /**
@@ -116,11 +119,35 @@ export async function dispatchInteractiveFromPayload(
   }
 
   const teamId = attrs.team_id;
+  if (deps.blockExternals !== false && parsed.userId !== "") {
+    if (teamId === undefined || teamId === "") {
+      log.info("interactive approval dropped (missing team)", {
+        session: value.sessionId,
+        user: parsed.userId,
+      });
+      return true;
+    }
+    if (
+      await isExternalSlackSender({
+        botToken: deps.credentials?.botToken,
+        slackTeamId: teamId,
+        userId: parsed.userId,
+      })
+    ) {
+      log.info("interactive approval dropped (external sender)", {
+        session: value.sessionId,
+        user: parsed.userId,
+        team: teamId,
+      });
+      return true;
+    }
+  }
+
   const clickingAuth = buildSlackInteractiveApprovalAuth({
     sessionAuth,
     channelId: parsed.channelId || sessionChannel,
     threadTs: parsed.threadTs || sessionThread,
-    ...(teamId === undefined || teamId === "" ? {} : { teamId }),
+    teamId: teamId === undefined || teamId === "" ? undefined : teamId,
     clickingUserId: parsed.userId,
   });
 
@@ -204,12 +231,9 @@ export function parseSlackBlockAction(
       : typeof user.name === "string"
         ? user.name
         : undefined;
-  const teamId =
-    typeof team.id === "string"
-      ? team.id
-      : typeof user.team_id === "string"
-        ? user.team_id
-        : undefined;
+  // Payload `team.id` only — never `user.team_id` (Connect home team).
+  // Membership gates must baseline the install workspace separately.
+  const teamId = typeof team.id === "string" ? team.id : undefined;
   const label =
     typeof action.text === "object" &&
     action.text !== null &&
@@ -278,6 +302,10 @@ export interface SlackBlockActionDispatchDeps extends SlackContinuationProbes {
   host: HostContext;
   artifacts: ArtifactsApi;
   log?: SlackLog;
+  /** Defaults to true. */
+  blockExternals?: boolean;
+  /** Install workspace from `auth.test`; baseline for the external gate. */
+  installTeamId?: string;
 }
 
 /**
@@ -285,7 +313,10 @@ export interface SlackBlockActionDispatchDeps extends SlackContinuationProbes {
  * `action_ts` (unique per click, never a real thread message), so ask-dedupe
  * claims and `<slack_thread>` exclusions stay per-click.
  */
-function blockActionAsMessage(action: SlackBlockAction): SlackMessage {
+function blockActionAsMessage(
+  action: SlackBlockAction,
+  installTeamId: string | undefined
+): SlackMessage {
   const text = `[clicked: ${action.label ?? action.actionId}]`;
   return {
     text,
@@ -294,7 +325,7 @@ function blockActionAsMessage(action: SlackBlockAction): SlackMessage {
     ts: action.actionTs,
     threadTs: action.threadTs,
     channelId: action.channelId,
-    teamId: action.teamId,
+    teamId: installTeamId,
     author: {
       userId: action.userId,
       userName: action.userName,
@@ -344,7 +375,7 @@ export async function dispatchBlockAction(
 
   await dispatchInboundMessage({
     kind: "block_action",
-    message: blockActionAsMessage(action),
+    message: blockActionAsMessage(action, deps.installTeamId),
     handler: (ctx) => deps.handler(ctx, action),
     send: deps.send,
     credentials: deps.credentials,
@@ -353,6 +384,7 @@ export async function dispatchBlockAction(
     log,
     // Click text is synthetic — never treat it as a stop/eval directive.
     evalCommandsEnabled: false,
+    blockExternals: deps.blockExternals,
     hasContinuationSession: deps.hasContinuationSession,
     isContinuationBusy: deps.isContinuationBusy,
     getContinuationLastBotMessageTs: deps.getContinuationLastBotMessageTs,

package/src/channels/slack/slack-channel.ts

@@ -43,6 +43,7 @@ import {
   buildDefaultEvents,
   createDefaultOnChannelPost,
   createDefaultOnInbound,
+  resolveSlackBlockExternals,
 } from "./defaults.js";
 import {
   dispatchInboundFromEventBody,
@@ -152,11 +153,14 @@ export function slackChannel<const Name extends string = string>(
       : (options.credentials ?? credentialsFromEnv(options.envPrefix));
   const envKeys = slackEnvKeys(options.envPrefix);
   const loadingMessages = options.loadingMessages;
-  const defaultInbound = createDefaultOnInbound(loadingMessages);
+  const policy = options.policy;
+  const blockExternals = resolveSlackBlockExternals(policy);
+  const defaultInbound = createDefaultOnInbound(loadingMessages, policy);
   const onAppMention = options.onAppMention ?? defaultInbound;
   const onDirectMessage = options.onDirectMessage ?? defaultInbound;
   const onChannelPost =
-    options.onChannelPost ?? createDefaultOnChannelPost(loadingMessages);
+    options.onChannelPost ??
+    createDefaultOnChannelPost(loadingMessages, policy);
   const engagement = options.engagement ?? {};
   const mentionsEnabled = engagement.mentions !== false;
   const directMessagesEnabled = engagement.directMessages !== false;
@@ -237,6 +241,8 @@ export function slackChannel<const Name extends string = string>(
       mentionsEnabled,
       directMessagesEnabled,
       evalCommandsEnabled,
+      // cursorAccount: backend router already refuses externals.
+      blockExternals: cursorAccount ? false : blockExternals,
       ...(args.hasContinuationSession === undefined
         ? {}
         : { hasContinuationSession: args.hasContinuationSession }),
@@ -329,10 +335,15 @@ export function slackChannel<const Name extends string = string>(
 
       let botUserId: string | undefined;
       let botId: string | undefined;
+      let installTeamId: string | undefined;
       let webClient: InstanceType<
         typeof import("@slack/web-api").WebClient
       > | null = null;
-      if (channelPosts !== undefined || botMentions !== undefined) {
+      if (
+        channelPosts !== undefined ||
+        botMentions !== undefined ||
+        routeInteractive
+      ) {
         try {
           const { WebClient } = await import("@slack/web-api");
           webClient = new WebClient(botToken);
@@ -341,6 +352,8 @@ export function slackChannel<const Name extends string = string>(
             typeof identity.user_id === "string" ? identity.user_id : undefined;
           botId =
             typeof identity.bot_id === "string" ? identity.bot_id : undefined;
+          installTeamId =
+            typeof identity.team_id === "string" ? identity.team_id : undefined;
         } catch (error) {
           getLog().error("bot identity lookup degraded", {
             error: error instanceof Error ? error.message : String(error),
@@ -416,6 +429,7 @@ export function slackChannel<const Name extends string = string>(
                   artifacts: args.artifacts,
                   log: getLog(),
                   evalCommandsEnabled,
+                  blockExternals,
                   ...(args.hasContinuationSession === undefined
                     ? {}
                     : {
@@ -491,6 +505,7 @@ export function slackChannel<const Name extends string = string>(
               resolveApproval: args.resolveApproval,
               waitUntil: args.waitUntil,
               log: getLog(),
+              blockExternals,
             }
           );
           if (handledAsApproval || onBlockAction === undefined) {
@@ -503,6 +518,8 @@ export function slackChannel<const Name extends string = string>(
             host: args.host,
             artifacts: args.artifacts,
             log: getLog(),
+            blockExternals,
+            installTeamId,
             hasContinuationSession: args.hasContinuationSession,
             isContinuationBusy: args.isContinuationBusy,
             getContinuationLastBotMessageTs:

package/src/channels/slack/types.ts

@@ -432,8 +432,20 @@ export function assertSlackCursorAgentName(name: string): void {
   }
 }
 
+/** `"thread"` = anyone in the thread (default); `"author"` = session starter only. */
+export type SlackRespondTo = "thread" | "author";
+
+export interface SlackAccessPolicy {
+  /** Defaults to `"thread"`. Applied by the default inbound handlers. */
+  respondTo?: SlackRespondTo;
+  /** Refuse Slack Connect / guest / other-workspace senders. Defaults to `true`. */
+  blockExternals?: boolean;
+}
+
 export interface SlackChannelOptions {
   credentials?: SlackCredentials;
+  /** Defaults to `{ respondTo: "thread", blockExternals: true }`. */
+  policy?: SlackAccessPolicy;
   /**
    * Per-agent env prefix for tokens. `envPrefix: "MY_AGENT"` reads
    * `MY_AGENT_SLACK_BOT_TOKEN` + `MY_AGENT_SLACK_APP_TOKEN`. Prefer this over

package/src/internal/cli-ax.ts

@@ -9,7 +9,7 @@
 
 import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join, resolve } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { Artifacts, JUnit } from "../evals/reporters.js";
 import type {
   EvalAssertionResult,
@@ -122,6 +122,12 @@ export interface AxCliOptions {
   skipReport?: boolean;
   /** `eval`: override `evals.config.ts` `maxConcurrency`. */
   maxConcurrency?: number;
+  /**
+   * `eval` / `eval status <runId>`: also write the full results JSON to this
+   * path. `session`: write the raw NDJSON trace (same format as `run
+   * --events` and the playground download) to this path instead of printing.
+   */
+  out?: string;
   /** Scaffold target directory for `init`. */
   initTarget?: string;
   /** Tool name for `call`. */
@@ -794,6 +800,18 @@ export async function cmdEval(options: AxCliOptions): Promise<number> {
       return 2;
     }
   }
+  if (trimNonEmpty(options.out) !== undefined) {
+    if (options.list === true) {
+      process.stderr.write("--out and --list are mutually exclusive\n");
+      return 2;
+    }
+    if (options.noWait === true) {
+      process.stderr.write(
+        `--out needs the finished results; drop --no-wait, or poll later with ${CLI_COMMAND_NAME} eval status <evalId> --out <path>\n`
+      );
+      return 2;
+    }
+  }
 
   const filterIds =
     options.evalIds === undefined || options.evalIds.length === 0
@@ -888,7 +906,12 @@ export async function cmdEval(options: AxCliOptions): Promise<number> {
           process.stderr.write("No matching evals found.\n");
           return 2;
         }
-        return printEvalResults(results, options, undefined, artifactsDir);
+        return await printEvalResults(
+          results,
+          options,
+          undefined,
+          artifactsDir
+        );
       } finally {
         progress?.close();
       }
@@ -944,7 +967,7 @@ export async function cmdEval(options: AxCliOptions): Promise<number> {
         process.stderr.write("No matching evals found.\n");
         return 2;
       }
-      return printEvalResults(results, options, {
+      return await printEvalResults(results, options, {
         runId: snapshot.runId,
         status: snapshot.status,
         error: snapshot.error,
@@ -1049,8 +1072,8 @@ async function printEvalAccepted(
     agentUrl
   );
   if (options.json) {
-    console.log(
-      JSON.stringify(
+    process.stdout.write(
+      `${JSON.stringify(
         {
           ok: true,
           accepted: true,
@@ -1064,7 +1087,7 @@ async function printEvalAccepted(
         },
         null,
         2
-      )
+      )}\n`
     );
   } else {
     const durable = started.config.durableRuns === true ? " (persisted)" : "";
@@ -1168,7 +1191,7 @@ export async function cmdEvalCancel(
       fetchImpl: options.fetchImpl,
     });
     if (options.json) {
-      console.log(JSON.stringify(snap, null, 2));
+      process.stdout.write(`${JSON.stringify(snap, null, 2)}\n`);
     } else {
       process.stdout.write(
         `Cancelled Eval ID ${snap.runId} (${snap.summary.done}/${snap.summary.total} cases finalized)\n`
@@ -1214,6 +1237,13 @@ export async function cmdEvalStatus(
     process.stderr.write("eval status does not accept --list or --no-wait\n");
     return 2;
   }
+  if (
+    trimNonEmpty(options.out) !== undefined &&
+    (runId === undefined || runId === "")
+  ) {
+    process.stderr.write("eval status --out requires an eval id\n");
+    return 2;
+  }
 
   const target = await resolveEvalTarget(options);
   if (typeof target === "number") {
@@ -1232,7 +1262,9 @@ export async function cmdEvalStatus(
         fetchImpl: options.fetchImpl,
       });
       if (options.json) {
-        console.log(JSON.stringify({ runs, activeRunId }, null, 2));
+        process.stdout.write(
+          `${JSON.stringify({ runs, activeRunId }, null, 2)}\n`
+        );
       } else if (runs.length === 0) {
         process.stdout.write("No eval runs on this agent.\n");
       } else {
@@ -1252,8 +1284,12 @@ export async function cmdEvalStatus(
       auth,
       fetchImpl: options.fetchImpl,
     });
+    const outPath = await writeJsonOutFile(options.out, snap);
     if (options.json) {
-      console.log(JSON.stringify(snap, null, 2));
+      process.stdout.write(`${JSON.stringify(snap, null, 2)}\n`);
+      if (outPath !== undefined) {
+        process.stderr.write(`results: ${outPath}\n`);
+      }
     } else {
       process.stdout.write(`${formatEvalRunSummaryLine(snap)}\n`);
       if (snap.error !== undefined && snap.error !== "") {
@@ -1271,6 +1307,9 @@ export async function cmdEvalStatus(
           process.stdout.write(`    error: ${c.error}\n`);
         }
       }
+      if (outPath !== undefined) {
+        process.stdout.write(`results: ${outPath}\n`);
+      }
     }
     if (snap.status === "running") {
       return 3;
@@ -1333,7 +1372,7 @@ function printListedEvals(
   emptyMessage: string
 ): number {
   if (options.json) {
-    console.log(JSON.stringify(listed, null, 2));
+    process.stdout.write(`${JSON.stringify(listed, null, 2)}\n`);
   } else if (listed.length === 0) {
     process.stdout.write(`${emptyMessage}\n`);
   } else {
@@ -1438,7 +1477,7 @@ const EVAL_VERDICT_LABEL: Record<EvalVerdict, string> = {
   skipped: "SKIP",
 };
 
-function printEvalResults(
+async function printEvalResults(
   results: EvalRunResult[],
   options: AxCliOptions,
   batch?: {
@@ -1447,7 +1486,7 @@ function printEvalResults(
     error?: string;
   },
   artifactsDir?: string
-): number {
+): Promise<number> {
   const strict = options.strict === true;
   const counts = { passed: 0, failed: 0, scored: 0, skipped: 0 };
   for (const result of results) {
@@ -1462,28 +1501,29 @@ function printEvalResults(
     process.stderr.write(`eval run error: ${batch.error}\n`);
   }
 
+  const payload = {
+    ok,
+    passed: counts.passed,
+    failed: counts.failed,
+    scored: counts.scored,
+    skipped: counts.skipped,
+    strict,
+    results,
+    ...(artifactsDir === undefined ? {} : { artifactsDir }),
+    ...(batch?.runId === undefined ? {} : { runId: batch.runId }),
+    ...(batch?.status === undefined ? {} : { status: batch.status }),
+    ...(batch?.error === undefined || batch.error === ""
+      ? {}
+      : { error: batch.error }),
+  };
+  const outPath = await writeJsonOutFile(options.out, payload);
+
   if (options.json) {
-    console.log(
-      JSON.stringify(
-        {
-          ok,
-          passed: counts.passed,
-          failed: counts.failed,
-          scored: counts.scored,
-          skipped: counts.skipped,
-          strict,
-          results,
-          ...(artifactsDir === undefined ? {} : { artifactsDir }),
-          ...(batch?.runId === undefined ? {} : { runId: batch.runId }),
-          ...(batch?.status === undefined ? {} : { status: batch.status }),
-          ...(batch?.error === undefined || batch.error === ""
-            ? {}
-            : { error: batch.error }),
-        },
-        null,
-        2
-      )
-    );
+    process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
+    if (outPath !== undefined) {
+      // stdout stays pure JSON; report the file on stderr.
+      process.stderr.write(`results: ${outPath}\n`);
+    }
   } else {
     for (const r of results) {
       const verdict = evalVerdictOf(r);
@@ -1532,10 +1572,31 @@ function printEvalResults(
     if (artifactsDir !== undefined) {
       process.stdout.write(`artifacts: ${artifactsDir}\n`);
     }
+    if (outPath !== undefined) {
+      process.stdout.write(`results: ${outPath}\n`);
+    }
   }
   return ok ? 0 : 1;
 }
 
+/**
+ * `--out <path>`: write a JSON payload (results / run snapshot), creating
+ * parent directories. Returns the resolved path, or undefined when unset.
+ */
+async function writeJsonOutFile(
+  out: string | undefined,
+  payload: unknown
+): Promise<string | undefined> {
+  const trimmed = trimNonEmpty(out);
+  if (trimmed === undefined) {
+    return undefined;
+  }
+  const target = resolve(trimmed);
+  await mkdir(dirname(target), { recursive: true });
+  await writeFile(target, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
+  return target;
+}
+
 /**
  * One assertion line. Soft assertions read `~` rather than `✗` when they miss,
  * so a tracked score is visibly different from a failed gate.
@@ -1721,6 +1782,8 @@ export async function cmdSessions(options: AxCliOptions): Promise<number> {
 /**
  * `session <id>` — view a full session (trajectory text by default).
  * `--json` → trajectory JSON; `--events` (`rawEvents`) → raw event list.
+ * `--out <path>` → write the raw NDJSON trace to a file instead of printing
+ * (same format as `run --events` and the playground download).
  * Interactive reattach: `resume [id]` / `chat --resume` (or `chat --session`).
  */
 export async function cmdSession(
@@ -1729,7 +1792,7 @@ export async function cmdSession(
 ): Promise<number> {
   if (sessionId === undefined || sessionId.trim() === "") {
     process.stderr.write(
-      `Usage: ${CLI_COMMAND_NAME} session <sessionId> [--url | --prod] [--json | --text | --events]\n`
+      `Usage: ${CLI_COMMAND_NAME} session <sessionId> [--url | --prod] [--json | --text | --events] [--out <file.ndjson>]\n`
     );
     return 2;
   }
@@ -1754,6 +1817,19 @@ export async function cmdSession(
       fetchImpl: options.fetchImpl,
     });
 
+    const outPath = trimNonEmpty(options.out);
+    if (outPath !== undefined) {
+      const targetPath = resolve(outPath);
+      await mkdir(dirname(targetPath), { recursive: true });
+      await writeFile(
+        targetPath,
+        `${events.map((e) => JSON.stringify(e)).join("\n")}\n`,
+        "utf8"
+      );
+      process.stdout.write(`trace: ${targetPath} (${events.length} events)\n`);
+      return 0;
+    }
+
     if (options.rawEvents === true) {
       process.stdout.write(
         `${JSON.stringify({ sessionId, events }, null, 2)}\n`

package/src/internal/cursor-slack-relay.ts

@@ -23,6 +23,8 @@ export interface CursorSlackAgentRegistration {
   name: string;
   iconUrl?: string;
   iconEmoji?: string;
+  /** Opt out of the default external-sender block. */
+  blockExternals?: boolean;
 }
 
 interface RegistrationResponse {
@@ -160,6 +162,7 @@ export class CursorSlackRelay {
             name: agent.name,
             iconUrl: agent.iconUrl,
             iconEmoji: agent.iconEmoji,
+            blockExternals: agent.blockExternals === false ? false : undefined,
           })),
         };
       },

package/src/internal/deploy-client.ts

@@ -148,6 +148,8 @@ export interface Deployment {
   engineGeneration?: number | null;
   publicId?: string;
   engineUrl?: string | null;
+  /** Anyrun pod id for the active engine, when coordinates are known. */
+  enginePodId?: string | null;
   lastError?: string | null;
   engineAlias: string;
   desiredUpdatedAt?: string;
@@ -259,6 +261,7 @@ const deploymentSchema = z.object({
   engineGeneration: z.number().nullable().optional(),
   publicId: z.string().optional(),
   engineUrl: z.string().nullable().optional(),
+  enginePodId: z.string().nullable().optional(),
   lastError: z.string().nullable().optional(),
   engineAlias: z.string(),
   desiredUpdatedAt: z.string().optional(),

package/src/internal/discovery.ts

@@ -2000,7 +2000,14 @@ function isModuleFile(fileName: string): boolean {
   if (fileName.endsWith(".d.ts") || fileName.startsWith(".")) {
     return false;
   }
-  return MODULE_EXTENSIONS.has(extname(fileName));
+  if (!MODULE_EXTENSIONS.has(extname(fileName))) {
+    return false;
+  }
+  // Colocated unit tests (Vitest/Jest convention) are not definitions.
+  // Without this, `channels/slack.test.ts` is scanned as a channel named
+  // "slack.test", fails NAME_PATTERN, and the whole agent refuses to serve.
+  const stem = moduleStem(fileName);
+  return !stem.endsWith(".test") && !stem.endsWith(".spec");
 }
 
 function moduleStem(fileName: string): string {

package/src/internal/server.ts

@@ -1747,11 +1747,15 @@ async function startCursorSlackRelay(input: {
 
   // Optional fields may be undefined — the relay JSON-serializes the
   // registration body, which drops them.
-  const agents: CursorSlackAgentRegistration[] = targets.map((target) => ({
-    name: target.agentName,
-    iconUrl: target.accountRuntime.options.agentIcon?.url,
-    iconEmoji: target.accountRuntime.options.agentIcon?.emoji,
-  }));
+  const agents: CursorSlackAgentRegistration[] = targets.map((target) => {
+    const policy = target.accountRuntime.options.policy;
+    return {
+      name: target.agentName,
+      iconUrl: target.accountRuntime.options.agentIcon?.url,
+      iconEmoji: target.accountRuntime.options.agentIcon?.emoji,
+      blockExternals: policy?.blockExternals === false ? false : undefined,
+    };
+  });
 
   const targetByName = new Map(
     targets.map((target) => [target.agentName.toLowerCase(), target])