npm - @cursor/july - Versions diffs - 0.1.39 → 0.1.40 - Mend

@cursor/july 0.1.39 → 0.1.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (79) hide show

package/dist/channels/slack/api.d.ts.map +1 -1
package/dist/channels/slack/api.js +18 -8
package/dist/channels/slack/defaults.d.ts.map +1 -1
package/dist/channels/slack/defaults.js +26 -17
package/dist/channels/slack/live-delivery.d.ts.map +1 -1
package/dist/channels/slack/live-delivery.js +16 -4
package/dist/docs/404.html +1 -1
package/dist/docs/ab.html +2 -2
package/dist/docs/assets/{app.BQ8Hihdf.js → app.DpGLSiym.js} +1 -1
package/dist/docs/assets/chunks/@localSearchIndexroot.D82_RVtF.js +1 -0
package/dist/docs/assets/chunks/{VPLocalSearchBox.BBCr8Yuy.js → VPLocalSearchBox.B11XEMST.js} +1 -1
package/dist/docs/assets/chunks/{theme.CK_NiGC-.js → theme.iTidHsAx.js} +2 -2
package/dist/docs/building-with-agents.html +2 -2
package/dist/docs/concepts.html +2 -2
package/dist/docs/deployment.html +2 -2
package/dist/docs/evals.html +2 -2
package/dist/docs/example-agents/approval-buddy.html +2 -2
package/dist/docs/example-agents/benny.html +2 -2
package/dist/docs/example-agents/bugbot.html +2 -2
package/dist/docs/example-agents/codebase-wiki.html +2 -2
package/dist/docs/example-agents/codeowners-review.html +2 -2
package/dist/docs/example-agents/concierge.html +2 -2
package/dist/docs/example-agents/fsd.html +2 -2
package/dist/docs/example-agents/index.html +2 -2
package/dist/docs/example-agents/knowledge-base.html +2 -2
package/dist/docs/example-agents/oncall.html +2 -2
package/dist/docs/example-agents/security-reviewer.html +2 -2
package/dist/docs/example-agents/slack-agent.html +2 -2
package/dist/docs/example-agents/weather-agent.html +2 -2
package/dist/docs/guides/agent-to-agent.html +2 -2
package/dist/docs/guides/cloud-runtime.html +2 -2
package/dist/docs/guides/github.html +2 -2
package/dist/docs/guides/human-in-the-loop.html +2 -2
package/dist/docs/guides/mcp-oauth.html +2 -2
package/dist/docs/guides/slack.html +2 -2
package/dist/docs/guides/webhooks.html +2 -2
package/dist/docs/hillclimbing.html +2 -2
package/dist/docs/index.html +2 -2
package/dist/docs/quickstart.html +2 -2
package/dist/docs/reference/agent-config.html +2 -2
package/dist/docs/reference/artifacts.html +2 -2
package/dist/docs/reference/channels.html +2 -2
package/dist/docs/reference/cli.html +2 -2
package/dist/docs/reference/connections.html +2 -2
package/dist/docs/reference/hooks.html +2 -2
package/dist/docs/reference/http-api.html +2 -2
package/dist/docs/reference/instructions.html +2 -2
package/dist/docs/reference/playground.html +2 -2
package/dist/docs/reference/project-layout.html +2 -2
package/dist/docs/reference/prompt.html +2 -2
package/dist/docs/reference/schedules.html +2 -2
package/dist/docs/reference/sessions.html +2 -2
package/dist/docs/reference/skills.html +2 -2
package/dist/docs/reference/subagents.html +2 -2
package/dist/docs/reference/tools.html +2 -2
package/dist/docs/scaffolding-agents.html +2 -2
package/dist/docs/storage.html +2 -2
package/dist/docs/troubleshooting.html +2 -2
package/dist/internal/cli-mcp-oauth.d.ts.map +1 -1
package/dist/internal/cli-mcp-oauth.js +3 -1
package/dist/internal/cursor-event-relay.d.ts +45 -0
package/dist/internal/cursor-event-relay.d.ts.map +1 -1
package/dist/internal/cursor-event-relay.js +96 -2
package/dist/internal/mcp-oauth.d.ts +12 -1
package/dist/internal/mcp-oauth.d.ts.map +1 -1
package/dist/internal/mcp-oauth.js +25 -3
package/dist/internal/server.d.ts.map +1 -1
package/dist/internal/server.js +6 -2
package/dist/playground/assets/{index-_2WKw9a-.js → index-Bc1oFgFG.js} +49 -49
package/dist/playground/index.html +1 -1
package/package.json +1 -1
package/src/channels/slack/api.ts +19 -14
package/src/channels/slack/defaults.ts +34 -18
package/src/channels/slack/live-delivery.ts +17 -3
package/src/internal/cli-mcp-oauth.ts +3 -1
package/src/internal/cursor-event-relay.ts +168 -0
package/src/internal/mcp-oauth.ts +29 -4
package/src/internal/server.ts +8 -1
package/dist/docs/assets/chunks/@localSearchIndexroot.B-VTH4As.js +0 -1

package/dist/playground/index.html CHANGED Viewed

@@ -8,7 +8,7 @@
     />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>agent-serve playground</title>
-    <script type="module" crossorigin src="./assets/index-_2WKw9a-.js"></script>
+    <script type="module" crossorigin src="./assets/index-Bc1oFgFG.js"></script>
     <link rel="stylesheet" crossorigin href="./assets/index-BRhBbnd4.css">
   </head>
   <body>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/july",
-  "version": "0.1.39",
+  "version": "0.1.40",
   "description": "(early alpha) Filesystem-first framework for defining Cursor agents as markdown and TypeScript and serving them over channels with the Cursor SDK.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {

package/src/channels/slack/api.ts CHANGED Viewed

@@ -204,25 +204,30 @@ export async function setThreadStatus(args: {
     return { ok: false, error: "missing_channel_or_thread" };
   }
   const status = truncateTypingStatus(args.status);
-  const loadingRaw =
-    args.loadingMessages !== undefined && args.loadingMessages.length > 0
-      ? args.loadingMessages
-      : status.length > 0
-        ? [
+  const body: Record<string, unknown> = {
+    channel_id: args.channelId,
+    thread_ts: args.threadTs,
+    status,
+  };
+  // Empty status clears Slack's assistant chip ("App is working…").
+  // Sending loading_messages with it keeps the chip rotating.
+  if (status.length > 0) {
+    const loadingRaw =
+      args.loadingMessages !== undefined && args.loadingMessages.length > 0
+        ? args.loadingMessages
+        : [
             status,
             ...SLACK_DEFAULT_LOADING_MESSAGES.filter((m) => m !== status),
-          ]
-        : [];
-  const loading_messages = truncateLoadingMessages(loadingRaw);
+          ];
+    const loading_messages = truncateLoadingMessages(loadingRaw);
+    if (loading_messages.length > 0) {
+      body.loading_messages = loading_messages;
+    }
+  }
   return callSlackApiSoft({
     botToken: args.botToken,
     operation: "assistant.threads.setStatus",
-    body: {
-      channel_id: args.channelId,
-      thread_ts: args.threadTs,
-      status,
-      ...(loading_messages.length > 0 ? { loading_messages } : {}),
-    },
+    body,
   });
 }

package/src/channels/slack/defaults.ts CHANGED Viewed

@@ -155,6 +155,25 @@ export function buildDefaultEvents(
   const getLog = options.getLog ?? (() => defaultSlackLog);
   const strategy = createStreamDeliveryStrategy({ botToken, getLog });
+  const clearWorkingStatus = async (
+    channelId: string,
+    threadTs: string
+  ): Promise<void> => {
+    const result = await setThreadStatus({
+      botToken,
+      channelId,
+      threadTs,
+      status: "",
+    });
+    if (!result.ok) {
+      getLog().warn("assistant.threads.setStatus not-ok", {
+        error: result.error,
+        channel: channelId,
+        thread_ts: threadTs,
+      });
+    }
+  };
   return {
     async "turn.started"(event, channel) {
       const log = getLog();
@@ -366,15 +385,6 @@ export function buildDefaultEvents(
         return;
       }
-      const clearStatus = async (): Promise<void> => {
-        await setThreadStatus({
-          botToken,
-          channelId: state.channelId!,
-          threadTs: state.threadTs!,
-          status: "",
-        });
-      };
       // Empty final text: still close any open stream / clear the skeleton
       // and clear typing.
       if (event.data.text === "") {
@@ -386,7 +396,7 @@ export function buildDefaultEvents(
           });
           channel.state.streamTs = null;
         }
-        await clearStatus();
+        await clearWorkingStatus(state.channelId, state.threadTs);
         return;
       }
@@ -405,7 +415,7 @@ export function buildDefaultEvents(
           sessionId: event.sessionId,
         });
         if (delivered) {
-          await clearStatus();
+          await clearWorkingStatus(state.channelId, state.threadTs);
           return;
         }
       }
@@ -439,7 +449,7 @@ export function buildDefaultEvents(
         );
       }
-      await clearStatus();
+      await clearWorkingStatus(state.channelId, state.threadTs);
     },
     async "turn.completed"(event, channel) {
@@ -453,6 +463,17 @@ export function buildDefaultEvents(
       await strategy.cleanupOrphan({ channel });
+      // Always drop the assistant chip. message.completed already clears
+      // after a normal reply, but a tool-call-only finish (or a missed
+      // final assistant message) never hits that path — leaving
+      // "Working…" stuck until Slack expires it.
+      if (channel.state.channelId !== null && channel.state.threadTs !== null) {
+        await clearWorkingStatus(
+          channel.state.channelId,
+          channel.state.threadTs
+        );
+      }
       if (
         suggestedPrompts.length === 0 ||
         channel.state.channelId === null ||
@@ -518,12 +539,7 @@ export function buildDefaultEvents(
           );
         }
       }
-      await setThreadStatus({
-        botToken,
-        channelId: state.channelId,
-        threadTs: state.threadTs,
-        status: "",
-      });
+      await clearWorkingStatus(state.channelId, state.threadTs);
     },
   };
 }

package/src/channels/slack/live-delivery.ts CHANGED Viewed

@@ -183,9 +183,23 @@ export function createStreamDeliveryStrategy(
       await stopChatStream({ botToken, channel: channelId, ts: streamTs });
     },
-    async cleanupOrphan() {
-      // The stream path closes its message in message.completed / turn.failed;
-      // there is nothing to clean up after turn.completed.
+    async cleanupOrphan({ channel }) {
+      // message.completed / turn.failed already stop the stream. If the
+      // turn ended without a final assistant message, close it here so
+      // Slack does not leave the live reply in a streaming state.
+      const streamTs = channel.state.streamTs;
+      const channelId =
+        channel.state.streamChannelId ?? channel.state.channelId;
+      if (
+        streamTs === null ||
+        streamTs === "" ||
+        channelId === null ||
+        channelId === ""
+      ) {
+        return;
+      }
+      await stopChatStream({ botToken, channel: channelId, ts: streamTs });
+      channel.state.streamTs = null;
     },
     async fail({ channel, channelId, streamTs, errorText }) {

package/src/internal/cli-mcp-oauth.ts CHANGED Viewed

@@ -209,7 +209,9 @@ export async function authorizeHostMcpOauth(
     let callback: Awaited<ReturnType<typeof waitForMcpOAuthCallback>>;
     try {
-      callback = await waitForMcpOAuthCallback();
+      callback = await waitForMcpOAuthCallback({
+        authorizationUrl: redirect.toString(),
+      });
     } catch (error) {
       err(`${LOG_PREFIX} OAuth callback failed: ${describe(error)}\n`);
       return { ok: false };

package/src/internal/cursor-event-relay.ts CHANGED Viewed

@@ -57,6 +57,40 @@ export type CursorScmPullRequestMeta = {
   baseSha?: string;
 };
+/** PR ref on a Checks / Actions webhook object. */
+export type CursorScmCiPullRequestMeta = {
+  number: number;
+  url?: string;
+};
+export type CursorScmCiAppMeta = {
+  slug?: string;
+  name?: string;
+};
+/** Shared Checks / Actions fields. `id` + `headSha` satisfy the channel Zod schemas. */
+type CursorScmCiBaseMeta = {
+  id: number;
+  headSha: string;
+  status?: string;
+  conclusion?: string | null;
+  htmlUrl?: string;
+  app?: CursorScmCiAppMeta;
+  pullRequests: CursorScmCiPullRequestMeta[];
+};
+export type CursorScmCheckRunMeta = CursorScmCiBaseMeta & {
+  name?: string;
+  checkSuiteId?: number;
+};
+export type CursorScmCheckSuiteMeta = CursorScmCiBaseMeta;
+export type CursorScmWorkflowRunMeta = CursorScmCiBaseMeta & {
+  name?: string;
+  workflowId?: number;
+};
 /** One event delivered by `GET /v0/scm-events` (metadata only). */
 export interface CursorScmEvent {
   offset: string;
@@ -81,6 +115,12 @@ export interface CursorScmEvent {
    * Zod-valid `issue_comment` / `pull_request_review_comment` webhook body.
    */
   comment?: CursorScmCommentMeta;
+  /** `check_run` snapshot; enough to stub `onCheckRun`. */
+  checkRun?: CursorScmCheckRunMeta;
+  /** `check_suite` snapshot; enough to stub `onCheckSuite`. */
+  checkSuite?: CursorScmCheckSuiteMeta;
+  /** `workflow_run` snapshot; enough to stub `onWorkflowRun`. */
+  workflowRun?: CursorScmWorkflowRunMeta;
   /** GitHub-side event time from the payload, when present. */
   occurredAtMs?: number;
 }
@@ -138,12 +178,37 @@ export function formatCursorScmEventLog(event: {
   return `${event.eventName}${action} on ${pr} received=${received}${occurred} (${delivery})`;
 }
+/** Relay log suffix for one fan-out target, including parse errors on 4xx. */
+export function formatCursorScmDispatchOutcome(target: {
+  slug: string;
+  status: number;
+  body: unknown;
+}): string {
+  const slug = target.slug === "" ? "default" : target.slug;
+  if (target.status < 400) {
+    return `${slug}:${target.status}`;
+  }
+  const error = readDispatchError(target.body);
+  return error === undefined
+    ? `${slug}:${target.status}`
+    : `${slug}:${target.status} ${error}`;
+}
+function readDispatchError(body: unknown): string | undefined {
+  if (typeof body !== "object" || body === null) return undefined;
+  if (!("error" in body)) return undefined;
+  const error = body.error;
+  return typeof error === "string" && error !== "" ? error : undefined;
+}
 /**
  * Minimal GitHub webhook body from an SCM-events metadata envelope.
  * When `pullRequest` has title + head/base refs+shas, emits a Zod-valid
  * `pull_request` object for `onPullRequest`; otherwise identity-only stubs.
  * When `comment` is present, emits a Zod-valid `comment` object so relayed
  * `issue_comment` / `pull_request_review_comment` deliveries dispatch.
+ * When a CI snapshot is present, emits `check_run` / `check_suite` /
+ * `workflow_run` so those typed hooks parse on the `--cursor-events` path.
  */
 export function scmMetadataToGitHubPayload(event: {
   repo: string;
@@ -152,6 +217,9 @@ export function scmMetadataToGitHubPayload(event: {
   prUrl?: string;
   pullRequest?: CursorScmPullRequestMeta;
   comment?: CursorScmCommentMeta;
+  checkRun?: CursorScmCheckRunMeta;
+  checkSuite?: CursorScmCheckSuiteMeta;
+  workflowRun?: CursorScmWorkflowRunMeta;
 }): Record<string, unknown> {
   const slash = event.repo.indexOf("/");
   const owner = slash === -1 ? "" : event.repo.slice(0, slash);
@@ -210,6 +278,30 @@ export function scmMetadataToGitHubPayload(event: {
     payload.comment = comment;
   }
+  const checkPullRequests = stubGitHubCiPullRequests({
+    snapshot:
+      event.checkRun?.pullRequests ??
+      event.checkSuite?.pullRequests ??
+      event.workflowRun?.pullRequests,
+    prNumber,
+    prUrl,
+  });
+  if (event.checkRun !== undefined) {
+    payload.check_run = stubGitHubCheckRun(event.checkRun, checkPullRequests);
+  }
+  if (event.checkSuite !== undefined) {
+    payload.check_suite = stubGitHubCheckSuite(
+      event.checkSuite,
+      checkPullRequests
+    );
+  }
+  if (event.workflowRun !== undefined) {
+    payload.workflow_run = stubGitHubWorkflowRun(
+      event.workflowRun,
+      checkPullRequests
+    );
+  }
   const title = prMeta?.title;
   const headRef = prMeta?.headRef;
   const headSha = prMeta?.headSha;
@@ -261,6 +353,82 @@ export function scmMetadataToGitHubPayload(event: {
   return payload;
 }
+function stubGitHubCiPullRequests(input: {
+  snapshot: CursorScmCiPullRequestMeta[] | undefined;
+  prNumber: number | undefined;
+  prUrl: string | undefined;
+}): Array<{ number: number; html_url?: string }> {
+  if (input.snapshot !== undefined && input.snapshot.length > 0) {
+    return input.snapshot.map((pr) => ({
+      number: pr.number,
+      ...(pr.url === undefined ? {} : { html_url: pr.url }),
+    }));
+  }
+  if (input.prNumber === undefined) return [];
+  return [
+    {
+      number: input.prNumber,
+      ...(input.prUrl === undefined ? {} : { html_url: input.prUrl }),
+    },
+  ];
+}
+function stubGitHubCiApp(
+  app: CursorScmCiAppMeta | undefined
+): Record<string, unknown> | undefined {
+  if (app === undefined) return undefined;
+  const out: Record<string, unknown> = {};
+  if (app.slug !== undefined) out.slug = app.slug;
+  if (app.name !== undefined) out.name = app.name;
+  return out;
+}
+function stubGitHubCiBase(
+  meta: CursorScmCiBaseMeta,
+  pullRequests: Array<{ number: number; html_url?: string }>
+): Record<string, unknown> {
+  const object: Record<string, unknown> = {
+    id: meta.id,
+    head_sha: meta.headSha,
+  };
+  if (meta.status !== undefined) object.status = meta.status;
+  if (meta.conclusion !== undefined) object.conclusion = meta.conclusion;
+  if (meta.htmlUrl !== undefined) object.html_url = meta.htmlUrl;
+  const app = stubGitHubCiApp(meta.app);
+  if (app !== undefined) object.app = app;
+  if (pullRequests.length > 0) object.pull_requests = pullRequests;
+  return object;
+}
+function stubGitHubCheckRun(
+  meta: CursorScmCheckRunMeta,
+  pullRequests: Array<{ number: number; html_url?: string }>
+): Record<string, unknown> {
+  const object = stubGitHubCiBase(meta, pullRequests);
+  if (meta.name !== undefined) object.name = meta.name;
+  if (meta.checkSuiteId !== undefined) {
+    object.check_suite = { id: meta.checkSuiteId };
+  }
+  return object;
+}
+function stubGitHubCheckSuite(
+  meta: CursorScmCheckSuiteMeta,
+  pullRequests: Array<{ number: number; html_url?: string }>
+): Record<string, unknown> {
+  return stubGitHubCiBase(meta, pullRequests);
+}
+function stubGitHubWorkflowRun(
+  meta: CursorScmWorkflowRunMeta,
+  pullRequests: Array<{ number: number; html_url?: string }>
+): Record<string, unknown> {
+  const object = stubGitHubCiBase(meta, pullRequests);
+  if (meta.name !== undefined) object.name = meta.name;
+  if (meta.workflowId !== undefined) object.workflow_id = meta.workflowId;
+  return object;
+}
 /**
  * GitHub SCM-events relay: a thin {@link CursorRelayCore} adapter. Consumers
  * keep the same `new CursorEventRelay(options).start()/.stop()` surface.

package/src/internal/mcp-oauth.ts CHANGED Viewed

@@ -385,14 +385,28 @@ export type OAuthCallbackResult = {
   state?: string;
 };
-export async function waitForMcpOAuthCallback(args?: {
+/**
+ * Deliberately not `@anysphere/mcp-core/oauth/loopback`, which is the canonical
+ * implementation every other Cursor surface shares. `@cursor/july` publishes to
+ * public npm with no private workspace dependencies, and its OAuth state is a
+ * bare UUID rather than the payload that module's validator expects.
+ *
+ * Nothing here reads Statsig, so this listener is outside
+ * `unified_mcp_loopback`: turning that gate off restores the other surfaces'
+ * original servers but leaves this one, and its state check, in place.
+ */
+export async function waitForMcpOAuthCallback(args: {
+  authorizationUrl: string;
   port?: number;
   path?: string;
   timeoutMs?: number;
 }): Promise<OAuthCallbackResult> {
-  const port = args?.port ?? MCP_OAUTH_CALLBACK_PORT;
-  const path = args?.path ?? MCP_OAUTH_CALLBACK_PATH;
-  const timeoutMs = args?.timeoutMs ?? 5 * 60 * 1000;
+  const port = args.port ?? MCP_OAUTH_CALLBACK_PORT;
+  const path = args.path ?? MCP_OAUTH_CALLBACK_PATH;
+  const timeoutMs = args.timeoutMs ?? 5 * 60 * 1000;
+  const expectedState = new URL(args.authorizationUrl).searchParams.get(
+    "state"
+  );
   return new Promise((resolve, reject) => {
     let done = false;
@@ -428,6 +442,17 @@ export async function waitForMcpOAuthCallback(args?: {
       const code = url.searchParams.get("code");
       const oauthError = url.searchParams.get("error");
       const state = url.searchParams.get("state") ?? undefined;
+      // Without this, any page that can reach the loopback port during a login
+      // can inject its own authorization code into the exchange. Ignore what is
+      // not ours rather than failing the login: treating a stray request as
+      // fatal would let any page cancel a login, and free the port for someone
+      // else to bind before the real callback arrives.
+      if (state !== (expectedState ?? undefined)) {
+        res
+          .writeHead(404, { "content-type": "text/html; charset=utf-8" })
+          .end("<!doctype html><html><body><h1>Not found</h1></body></html>");
+        return;
+      }
       if (code) {
         res
           .writeHead(200, { "content-type": "text/html; charset=utf-8" })

package/src/internal/server.ts CHANGED Viewed

@@ -58,6 +58,7 @@ import {
 import { CursorGithubCredentialProvider } from "./cursor/github-credentials.js";
 import {
   CursorEventRelay,
+  formatCursorScmDispatchOutcome,
   formatCursorScmEventLog,
   scmMetadataToGitHubPayload,
 } from "./cursor-event-relay.js";
@@ -1796,8 +1797,14 @@ function startCursorEventRelay(input: {
         targets,
       });
       const outcomes = result.targets
-        .map((target) => `${target.slug || "default"}:${target.status}`)
+        .map((target) => formatCursorScmDispatchOutcome(target))
         .join(", ");
+      const rejected = result.targets.filter((target) => target.status >= 400);
+      if (rejected.length > 0) {
+        logger(
+          `[agent-sdk] cursor-events: dropped ${formatCursorScmEventLog(event)} before hook: ${rejected.map(formatCursorScmDispatchOutcome).join(", ")}`
+        );
+      }
       logger(
         `[agent-sdk] cursor-events: dispatched ${formatCursorScmEventLog(event)}${outcomes === "" ? "" : ` → ${outcomes}`}`
       );