@cursor/july 0.1.48 → 0.1.51

package/src/bin/agent-serve.ts

@@ -44,6 +44,7 @@ import {
   cmdSessions,
   cmdTrajectory,
 } from "../internal/cli-ax.js";
+import { ensureCursorLogin } from "../internal/cli-cursor.js";
 import {
   cmdDelete,
   cmdDeploy,
@@ -150,11 +151,12 @@ Usage:
   ${CLI} github      <subcommand> …
 
 Commands:
-  serve       Serve agents under /<slug>/... (index at /). On a TTY, press
-              Enter to restart (re-executes this process so agent code, evals,
-              and Vite reload).
+  serve       Serve agents under /<slug>/... (index at /). Runs \`${CLI} login\`
+              when unsigned. On a TTY, press Enter to restart (re-executes this
+              process so agent code, evals, and Vite reload).
   dev         Local development: same as \`${CLI} serve --dev\` (manual
               schedule/reminder dispatch, unsigned GitHub loopback, Vite HMR).
+              Also runs \`${CLI} login\` when unsigned.
   chat        Interactive REPL against a running server (follow-ups keep the
               session + continuation token). Optional --message seeds the first
               turn then stays open on a TTY. --session reattaches (looks up the
@@ -271,8 +273,8 @@ Commands:
   secrets     Manage deployment secrets: set (names only by default: hidden
               prompt or piped stdin; NAME=VALUE requires --from-argv), list
               (names + createdAt; never values), unset.
-  slack       Slack channel pack: create/destroy/icon (Cursor Add to Slack
-              provisioning), init, manifests, doctor (see slack help).
+  slack       Slack channel pack: create/destroy/icon (dashboard wizard),
+              doctor (see slack help).
   github      GitHub webhook pack: forward live deliveries, events, doctor
               (wraps \`gh webhook forward\`; see github help).
 
@@ -1264,17 +1266,32 @@ async function main(argv: string[]): Promise<number> {
         noSchedules: values["no-schedules"] === true,
       };
 
-      const start = async (): Promise<AgentServeHandle> => {
+      const start = async (): Promise<
+        | { kind: "ready"; handle: AgentServeHandle }
+        | { kind: "login-failed"; exitCode: number }
+      > => {
         loadLocalEnv();
+        // Model turns need a Cursor credential. Prompt login before listen
+        // so the first playground turn does not fail with a late auth error.
+        const loginExit = await ensureCursorLogin({
+          apiKey: values["api-key"],
+        });
+        if (loginExit !== 0) {
+          return { kind: "login-failed", exitCode: loginExit };
+        }
         const next = await serve(serveDir, serveOptions);
         printServeBanner(next, bannerOpts);
         if (enterToRestart) {
           process.stdout.write(style.dim("  press Enter to restart\n"));
         }
-        return next;
+        return { kind: "ready", handle: next };
       };
 
-      const handle = await start();
+      const started = await start();
+      if (started.kind === "login-failed") {
+        return started.exitCode;
+      }
+      const handle = started.handle;
       let closing = false;
       let restartRequested = false;
 
@@ -1502,7 +1519,7 @@ function printServeBanner(
   }
   // `/` is only mounted when the playground host home is enabled.
   if (!opts.noPlayground) {
-    process.stdout.write(`  home        ${c.cyan(handle.url + "/")}\n`);
+    process.stdout.write(`  home        ${c.cyan(`${handle.url}/`)}\n`);
   }
   // Dev is playground-first (Vite proxies the API). Keep API/route detail for
   // plain `serve`, where operators often curl the HTTP surface directly.

package/src/channels/slack/init.ts

@@ -6,7 +6,6 @@ import { mkdir, writeFile } from "node:fs/promises";
 import { basename, join, resolve } from "node:path";
 import { PACKAGE_NAME } from "../../internal/distribution.js";
 import { envPrefixFromName, slackEnvKeys } from "./credentials.js";
-import { buildSlackManifestPair } from "./manifest.js";
 
 export interface InitSlackOptions {
   dir: string;
@@ -20,9 +19,8 @@ export interface InitSlackOptions {
    */
   envPrefix?: string;
   /**
-   * Subscribe the generated manifests to `message.channels` +
-   * `message.groups` for the opt-in channel watch
-   * (`engagement.channelPosts` on `slackChannel`).
+   * Subscribe the generated app to `message.channels` + `message.groups`
+   * for the opt-in channel watch (`engagement.channelPosts`).
    */
   channelPosts?: boolean;
 }
@@ -38,7 +36,6 @@ export async function initSlackChannel(
   options: InitSlackOptions
 ): Promise<InitSlackResult> {
   const rootDir = resolve(options.dir);
-  const name = options.name ?? basename(rootDir);
   const envPrefix =
     options.envPrefix === ""
       ? undefined
@@ -46,29 +43,22 @@ export async function initSlackChannel(
   const envKeys = slackEnvKeys(envPrefix);
   const written: string[] = [];
 
-  const write = async (rel: string, contents: string): Promise<void> => {
-    const abs = join(rootDir, rel);
-    await mkdir(join(abs, ".."), { recursive: true });
-    await writeFile(abs, contents, { flag: "wx" });
-    written.push(rel);
-  };
-
+  const abs = join(rootDir, "agent/channels/slack.ts");
+  await mkdir(join(abs, ".."), { recursive: true });
   const envPrefixLine =
     envPrefix === undefined
       ? ""
       : `  envPrefix: ${JSON.stringify(envPrefix)},\n`;
-
-  await write(
-    "agent/channels/slack.ts",
+  await writeFile(
+    abs,
     `import { slackChannel } from "${PACKAGE_NAME}/channels/slack";
 
 /**
  * Slack channel (Socket Mode).
  *
  * Tokens: ${envKeys.bot} + ${envKeys.app}
- * (see .agent-serve/slack/env.example).
  *
- * Full setup: agent-serve slack setup
+ * Full setup: agent-serve slack create --dir .
  */
 export default slackChannel({
 ${envPrefixLine}  // Streaming and thinking steps default to true.
@@ -77,61 +67,10 @@ ${envPrefixLine}  // Streaming and thinking steps default to true.
     { title: "Status", message: "What are you working on?" },
   ],
 });
-`
-  );
-
-  const pair = buildSlackManifestPair({
-    name,
-    // Scaffolded for hand-import at api.slack.com; managed_app_settings is
-    // settable only with the manager app's user token.
-    managedByCursor: false,
-    ...(options.description === undefined
-      ? {}
-      : { description: options.description }),
-    ...(options.channelPosts === true ? { channelPosts: true } : {}),
-  });
-
-  await write(
-    ".agent-serve/slack/manifest.dev.json",
-    `${JSON.stringify(pair.dev, null, 2)}\n`
-  );
-  await write(
-    ".agent-serve/slack/manifest.prod.json",
-    `${JSON.stringify(pair.prod, null, 2)}\n`
-  );
-
-  await write(
-    ".agent-serve/slack/env.example",
-    `# Copy to .env.local (or export in your shell). Use the *dev* Slack app
-# for local development; use the Prod app tokens in deployment secrets.
-#
-# Multi-agent serve needs a distinct Slack app (and token pair) per agent.
-
-${envKeys.bot}=xoxb-...
-${envKeys.app}=xapp-...
-`
-  );
-
-  await write(
-    ".agent-serve/slack/setup-status.json",
-    `${JSON.stringify(
-      {
-        updatedAt: new Date().toISOString(),
-        envPrefix: envPrefix ?? null,
-        envKeys,
-        phases: {
-          generate: true,
-          createApps: false,
-          install: false,
-          env: false,
-          serve: false,
-          smoke: false,
-        },
-      },
-      null,
-      2
-    )}\n`
+`,
+    { flag: "wx" }
   );
+  written.push("agent/channels/slack.ts");
 
   return { rootDir, files: written, envPrefix, envKeys };
 }

package/src/channels/slack/manifest.ts

@@ -1,8 +1,8 @@
 /**
- * Generate importable Slack app manifests (dev + prod).
+ * Generate Slack app manifests (dev + prod) for Cursor-managed provision.
  *
- * Import at https://api.slack.com/apps -> Create New App -> From a manifest.
- * Always Socket Mode — no Events Request URL.
+ * Always Socket Mode. No Events Request URL. Humans do not paste these
+ * at api.slack.com; `slack create` sends them through the dashboard wizard.
  *
  * Mirrored by backend/server/src/agentServe/agentServeSlackManifest.ts (the
  * backend cannot import this published package); keep the twins in lockstep.

package/src/channels/slack/setup.ts

@@ -1,111 +1,33 @@
 /**
  * Slack setup guide printed by `agent-serve slack setup`.
  *
- * Mirrors the Cursor skill at skills/setup-slack/SKILL.md: connection
- * decision first (Cursor-hosted vs dedicated Socket Mode app), then the
- * dedicated-app phases. {@link SLACK_SETUP_PHASES} stays the dedicated-app
- * checklist — its ids key `.agent-serve/slack/setup-status.json`.
+ * Two products: Cursor-hosted (`cursorAccount`) vs a dedicated Socket
+ * Mode app via `slack create` (dashboard wizard).
  */
 
-export interface SlackSetupPhase {
-  id: string;
-  actor: "agent" | "human";
-  title: string;
-  steps: string[];
-}
+export function formatSlackSetupGuide(): string {
+  return `agent-serve — Slack setup
 
-export const SLACK_SETUP_PHASES: SlackSetupPhase[] = [
-  {
-    id: "generate",
-    actor: "agent",
-    title: "Generate channel + manifests",
-    steps: [
-      "agent-serve slack init --dir . --name My Agent",
-      "Manifests default to Socket Mode (no public Request URL).",
-    ],
-  },
-  {
-    id: "createApps",
-    actor: "human",
-    title: "Create two Slack apps from manifests",
-    steps: [
-      "Open https://api.slack.com/apps -> Create New App from a manifest",
-      "Paste .agent-serve/slack/manifest.dev.json -> create the *dev* app",
-      "Repeat with manifest.prod.json for the *prod* app",
-    ],
-  },
-  {
-    id: "install",
-    actor: "human",
-    title: "Install + mint App-Level Token",
-    steps: [
-      "Install to Workspace; copy Bot User OAuth Token (xoxb-...)",
-      "App-Level Tokens: create token with connections:write; copy xapp-...",
-    ],
-  },
-  {
-    id: "env",
-    actor: "agent",
-    title: "Wire environment",
-    steps: [
-      "Write per-agent tokens into .env.local (see .agent-serve/slack/env.example)",
-      "Multi-agent: <PREFIX>_SLACK_BOT_TOKEN + <PREFIX>_SLACK_APP_TOKEN",
-      "Single agent: SLACK_BOT_TOKEN + SLACK_APP_TOKEN (--no-prefix)",
-      "agent-serve slack doctor --prefix <PREFIX>",
-    ],
-  },
-  {
-    id: "serve",
-    actor: "agent",
-    title: "Serve",
-    steps: [
-      "agent-serve serve --dir . --dev",
-      "Confirm log: [agent-sdk/slack] Socket Mode connected",
-    ],
-  },
-  {
-    id: "smoke",
-    actor: "human",
-    title: "Smoke test",
-    steps: [
-      "Invite the bot to a channel",
-      "@mention it or DM it",
-      "Confirm logs: inbound → session start → reply delivered",
-      "Confirm streaming reply and rotating status",
-    ],
-  },
-];
+Two products. Pick one.
 
-export function formatSlackSetupGuide(): string {
-  const lines: string[] = [
-    "agent-serve — Slack setup",
-    "",
-    "Two connections exist; decide before running the phases below.",
-    "",
-    "  A) Cursor-hosted connection (recommended default, zero Slack admin):",
-    '     slackChannel({ cursorAccount: true, agentName: "MyAgent" })',
-    "     Sign in (agent-serve login / CURSOR_API_KEY), serve, then mention",
-    '     "@Cursor MyAgent ..." in the linked workspace. No app, no tokens.',
-    "  B) Dedicated Slack app (Socket Mode) — the phases below. Choose it",
-    "     when you need your own bot user, channel watching",
-    "     (engagement.channelPosts), or approval buttons / interactivity.",
-    "",
-    "Phases 0-5 cover connection B only.",
-    "Goal: importable dev + prod Slack apps over Socket Mode (no public URL).",
-    "App-Level Token (xapp-...) + Bot Token (xoxb-...) required.",
-    "",
-  ];
-  for (const [index, phase] of SLACK_SETUP_PHASES.entries()) {
-    lines.push(`## Phase ${index} — ${phase.title} (${phase.actor})`);
-    for (const step of phase.steps) {
-      lines.push(`  - ${step}`);
-    }
-    lines.push("");
-  }
-  lines.push("Status file: .agent-serve/slack/setup-status.json");
-  lines.push(
-    "Skill (Cursor): packages/agent-serve/skills/setup-slack/SKILL.md"
-  );
-  lines.push("");
-  return lines.join("\n");
+  A) Cursor-hosted (recommended default, zero Slack admin):
+     slackChannel({ cursorAccount: true, agentName: "MyAgent" })
+     Sign in (agent-serve login / CURSOR_API_KEY), serve, then mention
+     "@Cursor MyAgent ..." in the linked workspace. No app, no tokens.
+
+  B) Dedicated Slack app (Socket Mode):
+     agent-serve slack create --dir .
+     Opens the signed-in Cursor dashboard wizard. Finish Slack consent
+     and the bot name there. The CLI writes tokens into .env.local.
+     Use this when you need your own bot user, channel watching
+     (engagement.channelPosts), or approval buttons.
+
+Do not paste a manifest at api.slack.com. \`slack init\` is removed.
+
+Then:
+  - agent-serve serve --dir . --dev
+  - Invite the bot (Path B) or mention @Cursor <name> (Path A)
+
+Skill: packages/agent-serve/skills/setup-slack/SKILL.md
+`;
 }

package/src/channels/slack/types.ts

@@ -421,7 +421,7 @@ export interface SlackEngagementOptions {
   /**
    * Opt-in channel watch (see {@link SlackChannelPostsOptions}). Requires
    * the Slack app to subscribe to `message.channels` / `message.groups`
-   * (`slack init --channel-posts`, or add the events to an existing app).
+   * (`slack create --channel-posts`).
    */
   channelPosts?: SlackChannelPostsOptions;
   /**
@@ -650,9 +650,8 @@ export interface SlackManifestOptions {
   suggestedPrompts?: Array<{ title: string; message: string }>;
   /**
    * Emit `settings.managed_app_settings`. Defaults to `true` — Cursor
-   * provisions these apps through its manager app. Pass `false` for a
-   * manifest a human pastes into api.slack.com: only a manager user token
-   * may set that block.
+   * provisions these apps through its manager app. Pass `false` when the
+   * caller is not a manager user token.
    */
   managedByCursor?: boolean;
 }

package/src/internal/cli-ax.ts

@@ -20,7 +20,7 @@ import type {
 import { serve } from "../index.js";
 import type { AgentServeHandle } from "../types.js";
 import { lookupSessionContinuation, runChat } from "./chat-client.js";
-import { cmdLogin } from "./cli-cursor.js";
+import { ensureCursorLogin } from "./cli-cursor.js";
 import { resolveDeployAuth } from "./cli-deploy.js";
 import { resolveApiKey } from "./cursor/credentials.js";
 import { CLI_COMMAND_NAME, PACKAGE_NAME } from "./distribution.js";
@@ -392,8 +392,8 @@ export async function cmdInit(options: AxCliOptions): Promise<number> {
 
   let loginExit = 0;
   if (!signedIn) {
-    process.stdout.write("Signing you in to Cursor\n\n");
-    loginExit = await cmdLogin({});
+    // init always offers the browser flow (the --json path above skipped it).
+    loginExit = await ensureCursorLogin({ interactive: true });
     signedIn = loginExit === 0 && (await resolveApiKey()) !== undefined;
     process.stdout.write("\n");
   }

package/src/internal/cli-cursor.ts

@@ -145,6 +145,40 @@ export async function cmdLogin(options: CursorCliOptions): Promise<number> {
   return 0;
 }
 
+/**
+ * Gate for commands that need a Cursor credential before they can do useful
+ * work (`serve`, `dev`, interactive `init`). Already-signed-in hosts
+ * (`--api-key` / `CURSOR_API_KEY` / stored login) return immediately.
+ * Otherwise an interactive host runs {@link cmdLogin}; a non-interactive
+ * one (CI, Docker) fails fast with {@link SIGN_IN_HINT} instead of polling
+ * a browser that will never open.
+ */
+export async function ensureCursorLogin(
+  options: {
+    apiKey?: string;
+    /**
+     * Run the browser login flow when unsigned. Defaults to stderr being a
+     * TTY.
+     */
+    interactive?: boolean;
+    /** Test seam. */
+    login?: (options: CursorCliOptions) => Promise<number>;
+  } = {}
+): Promise<number> {
+  const resolved = await resolveApiKey({ apiKey: options.apiKey });
+  if (resolved !== undefined) {
+    return 0;
+  }
+  const interactive = options.interactive ?? process.stderr.isTTY === true;
+  if (!interactive) {
+    process.stderr.write(`Not signed in to Cursor. ${SIGN_IN_HINT}\n`);
+    return 1;
+  }
+  process.stdout.write("Signing you in to Cursor\n\n");
+  const login = options.login ?? cmdLogin;
+  return login({});
+}
+
 export async function cmdLogout(): Promise<number> {
   const stored = await readStoredCredentials();
   const removed = await clearStoredCredentials();