@cursor/july 0.1.53 → 0.1.54

package/AGENTS.md

@@ -16,6 +16,16 @@ HTTP/2 client corrupts local harness
 tool-result streams (`NGHTTP2_FRAME_SIZE_ERROR`), which makes every
 built-in read/grep fail and sends models into retry loops.
 
+## Bump `@cursor/july` with every source change
+
+Any PR that changes this package's **source** (`src/`, `playground/`,
+CLI, shipped `skills/` / `templates/` — runtime behavior that goes out
+in `@cursor/july`) **must bump** `version` in `package.json` in the
+**same PR**. On 0.x, bump the patch (`0.1.N` → `0.1.N+1`). Do not
+publish from the PR; merging the bump is what lets the `july-release`
+pipeline cut. Docs-only, tests-only, and edits to this file do not
+need a bump.
+
 ## Skills
 
 Before scaffolding, wiring channels, writing evals, or deploying, **read the
@@ -306,6 +316,8 @@ Fixtures still work for offline replay: `POST` a saved payload with an
 
 ## Do not
 
+- Land source changes without bumping `version` in `package.json` in the
+  same PR (see **Bump `@cursor/july` with every source change** above).
 - Proactively add or update documentation (`docs/`, READMEs, this file) as
   part of a code change. Docs are written intentionally, on explicit request
   only — never as a side effect of a feature or fix. If a change makes docs

package/dist/channels/slack/manifest.d.ts

@@ -9,9 +9,10 @@
  */
 import type { SlackManifestOptions } from "./types.js";
 /**
- * Where Slack points users who open a Cursor-provisioned app's settings
- * page. Manifest builders know neither the team slug nor the deployment
- * id, so this is the dashboard tab root rather than a per-agent deep link.
+ * Dashboard tab root: Slack's app-settings banner, and the only OAuth
+ * redirect URI we register. AAA request-approval (`oauth_authorize_url`)
+ * 400s with redirect_uri mismatch unless a URI is registered. This is
+ * not an install callback. `apps.managedInstall` still installs.
  */
 export declare const SLACK_EXTERNAL_APP_MANAGEMENT_URL = "https://cursor.com/dashboard/deployed-agents";
 export interface SlackAppManifest {
@@ -41,6 +42,7 @@ export interface SlackAppManifest {
         scopes: {
             bot: string[];
         };
+        redirect_urls?: string[];
     };
     settings: {
         event_subscriptions: {

package/dist/channels/slack/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,iDACE,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE;QACR,QAAQ,EAAE;YACR,YAAY,EAAE,MAAM,CAAC;YACrB,aAAa,EAAE,OAAO,CAAC;SACxB,CAAC;QACF,cAAc,CAAC,EAAE;YACf,qBAAqB,EAAE,MAAM,CAAC;YAC9B,iBAAiB,EAAE,KAAK,CAAC;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SAC9D,CAAC;QACF,QAAQ,CAAC,EAAE;YACT,gBAAgB,EAAE,OAAO,CAAC;YAC1B,oBAAoB,EAAE,OAAO,CAAC;YAC9B,8BAA8B,EAAE,OAAO,CAAC;SACzC,CAAC;KACH,CAAC;IACF,YAAY,EAAE;QACZ,MAAM,EAAE;YACN,GAAG,EAAE,MAAM,EAAE,CAAC;SACf,CAAC;KACH,CAAC;IACF,QAAQ,EAAE;QACR,mBAAmB,EAAE;YACnB,UAAU,EAAE,MAAM,EAAE,CAAC;SACtB,CAAC;QACF,aAAa,EAAE;YACb,UAAU,EAAE,OAAO,CAAC;SACrB,CAAC;QACF,kBAAkB,EAAE,OAAO,CAAC;QAC5B,mBAAmB,EAAE,OAAO,CAAC;QAC7B,sBAAsB,EAAE,OAAO,CAAC;QAChC,cAAc,EAAE,OAAO,CAAC;QACxB,oBAAoB,CAAC,EAAE;YACrB,8BAA8B,EAAE,OAAO,CAAC;YACxC,2BAA2B,EAAE,MAAM,CAAC;SACrC,CAAC;KACH,CAAC;CACH;AAwDD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,oBAAoB,GAC5B,gBAAgB,CA+ElB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,GACzC;IACD,GAAG,EAAE,gBAAgB,CAAC;IACtB,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAKA;AAED,kDAAkD;AAClD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,GAAG,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,EACvD,GAAG,GAAE,KAAK,GAAG,MAAM,GAAG,MAAe,GACpC,aAAa,CAAC;IACf,IAAI,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAkBD"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,iDACE,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE;QACR,QAAQ,EAAE;YACR,YAAY,EAAE,MAAM,CAAC;YACrB,aAAa,EAAE,OAAO,CAAC;SACxB,CAAC;QACF,cAAc,CAAC,EAAE;YACf,qBAAqB,EAAE,MAAM,CAAC;YAC9B,iBAAiB,EAAE,KAAK,CAAC;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SAC9D,CAAC;QACF,QAAQ,CAAC,EAAE;YACT,gBAAgB,EAAE,OAAO,CAAC;YAC1B,oBAAoB,EAAE,OAAO,CAAC;YAC9B,8BAA8B,EAAE,OAAO,CAAC;SACzC,CAAC;KACH,CAAC;IACF,YAAY,EAAE;QACZ,MAAM,EAAE;YACN,GAAG,EAAE,MAAM,EAAE,CAAC;SACf,CAAC;QACF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,QAAQ,EAAE;QACR,mBAAmB,EAAE;YACnB,UAAU,EAAE,MAAM,EAAE,CAAC;SACtB,CAAC;QACF,aAAa,EAAE;YACb,UAAU,EAAE,OAAO,CAAC;SACrB,CAAC;QACF,kBAAkB,EAAE,OAAO,CAAC;QAC5B,mBAAmB,EAAE,OAAO,CAAC;QAC7B,sBAAsB,EAAE,OAAO,CAAC;QAChC,cAAc,EAAE,OAAO,CAAC;QACxB,oBAAoB,CAAC,EAAE;YACrB,8BAA8B,EAAE,OAAO,CAAC;YACxC,2BAA2B,EAAE,MAAM,CAAC;SACrC,CAAC;KACH,CAAC;CACH;AAwDD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,oBAAoB,GAC5B,gBAAgB,CAmFlB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,GACzC;IACD,GAAG,EAAE,gBAAgB,CAAC;IACtB,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAKA;AAED,kDAAkD;AAClD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,GAAG,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,EACvD,GAAG,GAAE,KAAK,GAAG,MAAM,GAAG,MAAe,GACpC,aAAa,CAAC;IACf,IAAI,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAkBD"}

package/dist/channels/slack/manifest.js

@@ -8,9 +8,10 @@
  * backend cannot import this published package); keep the twins in lockstep.
  */
 /**
- * Where Slack points users who open a Cursor-provisioned app's settings
- * page. Manifest builders know neither the team slug nor the deployment
- * id, so this is the dashboard tab root rather than a per-agent deep link.
+ * Dashboard tab root: Slack's app-settings banner, and the only OAuth
+ * redirect URI we register. AAA request-approval (`oauth_authorize_url`)
+ * 400s with redirect_uri mismatch unless a URI is registered. This is
+ * not an install callback. `apps.managedInstall` still installs.
  */
 export const SLACK_EXTERNAL_APP_MANAGEMENT_URL = "https://cursor.com/dashboard/deployed-agents";
 const BOT_SCOPES = [
@@ -108,6 +109,9 @@ export function buildSlackManifest(options) {
             scopes: {
                 bot: botScopes,
             },
+            redirect_urls: options.managedByCursor === false
+                ? undefined
+                : [SLACK_EXTERNAL_APP_MANAGEMENT_URL],
         },
         settings: Object.assign({ event_subscriptions: {
                 bot_events: botEvents,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/july",
-  "version": "0.1.53",
+  "version": "0.1.54",
   "description": "(early alpha) Filesystem-first framework for defining Cursor agents as markdown and TypeScript and serving them over channels with the Cursor SDK.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {

package/src/channels/slack/manifest.ts

@@ -11,9 +11,10 @@
 import type { SlackManifestOptions } from "./types.js";
 
 /**
- * Where Slack points users who open a Cursor-provisioned app's settings
- * page. Manifest builders know neither the team slug nor the deployment
- * id, so this is the dashboard tab root rather than a per-agent deep link.
+ * Dashboard tab root: Slack's app-settings banner, and the only OAuth
+ * redirect URI we register. AAA request-approval (`oauth_authorize_url`)
+ * 400s with redirect_uri mismatch unless a URI is registered. This is
+ * not an install callback. `apps.managedInstall` still installs.
  */
 export const SLACK_EXTERNAL_APP_MANAGEMENT_URL =
   "https://cursor.com/dashboard/deployed-agents";
@@ -42,6 +43,7 @@ export interface SlackAppManifest {
     scopes: {
       bot: string[];
     };
+    redirect_urls?: string[];
   };
   settings: {
     event_subscriptions: {
@@ -174,6 +176,10 @@ export function buildSlackManifest(
       scopes: {
         bot: botScopes,
       },
+      redirect_urls:
+        options.managedByCursor === false
+          ? undefined
+          : [SLACK_EXTERNAL_APP_MANAGEMENT_URL],
     },
     settings: {
       event_subscriptions: {