@cursor/july 0.1.68 → 0.1.74

package/src/channels/github/cursor-account.ts

@@ -119,22 +119,25 @@ export function parseCursorGithubRepoScope(
 
 /**
  * Hosted `cursorAccount` mints `checks:write` on the `contents-write` tier.
- * Enabling `progress.commitStatus` opts a `pr-write` (or omitted) channel up
- * to that tier so github-proxy / `/github-token` can post Checks API runs.
- * `"read"` cannot post merge-box checks.
+ * Enabling `progress.commitStatus` or `checks: true` opts a `pr-write` (or
+ * omitted) channel up to that tier so github-proxy / `/github-token` can
+ * post Checks API runs. `"read"` cannot post merge-box checks.
  */
 export function cursorGithubPermissionsForChannel(
-  options: Pick<GitHubChannelOptions, "progress">,
+  options: Pick<GitHubChannelOptions, "progress" | "checks">,
   authored: CursorGithubPermissions | undefined = "pr-write"
 ): CursorGithubPermissions {
   const base = authored ?? "pr-write";
   const commitStatus = options.progress?.commitStatus;
-  if (commitStatus === undefined || commitStatus === false) {
+  const wantsChecks =
+    options.checks === true ||
+    (commitStatus !== undefined && commitStatus !== false);
+  if (!wantsChecks) {
     return base;
   }
   if (base === "read") {
     throw new Error(
-      'progress.commitStatus needs checks:write; cursorAccount permissions: "read" cannot post merge-box checks. Use "pr-write" or "contents-write".'
+      'progress.commitStatus / checks need checks:write; cursorAccount permissions: "read" cannot post merge-box checks. Use "pr-write" or "contents-write".'
     );
   }
   return "contents-write";

package/src/channels/github/index.ts

@@ -43,6 +43,7 @@
 export * from "./api.js";
 export * from "./auth.js";
 export * from "./binding.js";
+export * from "./checks.js";
 export * from "./defaults.js";
 export * from "./events.js";
 export * from "./forward.js";

package/src/channels/github/types.ts

@@ -546,6 +546,14 @@ export interface GitHubChannelOptions {
    * and sticky banner are opt-in via `commitStatus` / `banner`.
    */
   progress?: GitHubProgressConfig;
+  /**
+   * Declare that this channel posts its own CI checks
+   * (`ctx.github.createCheck` / `createGitHubCheck`). With `cursorAccount`,
+   * opts the minted token up to `permissions: "contents-write"` so the
+   * hosted lease includes `checks:write` — same opt-up as
+   * `progress.commitStatus`. Has no effect on App / PAT credentials.
+   */
+  checks?: boolean;
   /**
    * When false, skip posting assistant / error comments back to GitHub.
    * Defaults to true.

package/src/channels/slack/manifest.ts

@@ -29,8 +29,8 @@ export interface SlackAppManifest {
       display_name: string;
       always_online: boolean;
     };
-    assistant_view?: {
-      assistant_description: string;
+    agent_view?: {
+      agent_description: string;
       suggested_prompts: Array<{ title: string; message: string }>;
     };
     app_home?: {
@@ -135,9 +135,9 @@ export function buildSlackManifest(
       : options.name;
   const botName = options.botDisplayName ?? toBotDisplayName(options.name, env);
   const description = options.description ?? defaultDescription(options.name);
-  const includeAssistant = options.assistant !== false;
+  const includeAgentView = options.assistant !== false;
 
-  const botScopes = includeAssistant
+  const botScopes = includeAgentView
     ? [...BOT_SCOPES]
     : BOT_SCOPES.filter((scope) => scope !== "assistant:write");
 
@@ -164,14 +164,12 @@ export function buildSlackManifest(
         messages_tab_enabled: true,
         messages_tab_read_only_enabled: false,
       },
-      ...(includeAssistant
+      agent_view: includeAgentView
         ? {
-            assistant_view: {
-              assistant_description: description,
-              suggested_prompts: suggested,
-            },
+            agent_description: description,
+            suggested_prompts: suggested,
           }
-        : {}),
+        : undefined,
     },
     oauth_config: {
       scopes: {

package/src/channels/slack/types.ts

@@ -651,7 +651,7 @@ export interface SlackManifestOptions {
   env: "dev" | "prod";
   /** Optional short description shown in the Slack app. */
   description?: string;
-  /** Include `assistant_view` + `assistant:write` for typing status. */
+  /** Include `agent_view` + `assistant:write` for typing status. */
   assistant?: boolean;
   /**
    * Enable Slack interactivity (needed for Approve/Deny cards).
@@ -663,7 +663,7 @@ export interface SlackManifestOptions {
    * channel watch (`engagement.channelPosts`). Defaults to `false`.
    */
   channelPosts?: boolean;
-  /** Seed suggested prompts into the manifest `assistant_view`. */
+  /** Seed suggested prompts into the manifest `agent_view`. */
   suggestedPrompts?: Array<{ title: string; message: string }>;
   /**
    * Emit `settings.managed_app_settings`. Defaults to `true` — Cursor

package/src/connections.ts

@@ -4,7 +4,8 @@
  * A connection gives tools from an external MCP server. The filename
  * becomes the connection (server) name. Available to the agent (SDK
  * `mcpServers`), host (`ctx.host.mcp`), and channel/schedule handlers.
- * Pass `hostOnly: true` to keep it off the model (still on `host.mcp`).
+ * Pass `advertiseTools: true` for named tools on local turns. Pass
+ * `hostOnly: true` to keep it off the model (still on `host.mcp`).
  *
  * ```ts
  * import { defineConnection } from "@anysphere/agent-serve/connections";
@@ -42,13 +43,24 @@
  * to be signed in (`agent-serve login` or `CURSOR_API_KEY`):
  *
  * ```ts
- * // agent/mcp-connections/cursor.ts — every connected server (no allowlist)
- * export default defineConnection({ cursorAccount: true });
+ * // agent/mcp-connections/account.ts — every connected server (no allowlist)
+ * export default defineConnection({
+ *   cursorAccount: true,
+ *   advertiseTools: true,
+ * });
  * // equivalent explicit form:
- * export default defineConnection({ cursorAccount: true, servers: "*" });
+ * export default defineConnection({
+ *   cursorAccount: true,
+ *   servers: "*",
+ *   advertiseTools: true,
+ * });
  *
  * // or restrict to specific connectors by name
- * export default defineConnection({ cursorAccount: true, servers: ["Linear"] });
+ * export default defineConnection({
+ *   cursorAccount: true,
+ *   servers: ["Linear"],
+ *   advertiseTools: true,
+ * });
  * ```
  *
  * A **peer MCP connection** addresses another agent mounted on the same serve

package/src/internal/advertise-tools.ts

@@ -16,9 +16,13 @@
  * auth-less connections go through the shared `host.mcp` registry, which
  * also covers serve-resolved transports (Cursor account bridges, peers).
  *
- * Everything here fails closed: a listing failure, an invalid tool name,
- * or a name collision throws, and the engine fails the turn rather than
- * running it with a silently shrunken toolset.
+ * Advertised names follow the Cursor-account MCP bridge
+ * (`packages/agent-serve/src/internal/cursor/account-mcp.ts`): slug
+ * `[^a-zA-Z0-9_-]` to `_`, collision suffixes `_2` / `_3`, and call the
+ * original advertised name. That is the same mapping `packages/agent`
+ * `normalizeMcpToolName` uses for IDE/Sand MCP tools. A listing failure
+ * still fails the turn rather than running it with a silently shrunken
+ * toolset.
  */
 
 import type {
@@ -33,6 +37,10 @@ import type {
 } from "../types.js";
 import { brandDefinition } from "./brand.js";
 import type { HostMcpOneOff } from "./mcp-host.js";
+import {
+  sanitizeMcpToolName,
+  suffixMcpToolName,
+} from "./sanitize-mcp-tool-name.js";
 
 /**
  * What the resolver needs from the host MCP registry: the shared cached
@@ -50,12 +58,12 @@ export interface AdvertiseHostMcp {
 }
 
 /**
- * The rule advertised tool names must match — the same shape discovery
- * enforces for authored tool filenames (its `NAME_PATTERN`), since both
- * become the tool name the model sees.
+ * Model-facing advertised names after {@link sanitizeMcpToolName} — the
+ * same MCP-client shape the Cursor-account bridge documents
+ * (`^[a-zA-Z0-9_-]{1,128}$`). Authored `agent/tools/` filenames stay on
+ * discovery's stricter `NAME_PATTERN` (must start alphanumeric).
  */
-export const ADVERTISED_TOOL_NAME_PATTERN: RegExp =
-  /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
+export const ADVERTISED_TOOL_NAME_PATTERN: RegExp = /^[A-Za-z0-9_-]{1,128}$/;
 
 const ANY_OBJECT_SCHEMA: JsonSchemaObject = {
   type: "object",
@@ -107,9 +115,10 @@ export async function resolveAdvertisedTools(args: {
         { cause: error }
       );
     }
-    for (const info of listed) {
-      resolved.push(toDiscoveredTool(connection, info, claimed, source));
-      claimed.add(info.name);
+    const exposed = exposeListedTools(listed, claimed);
+    for (const { info, exposedName } of exposed) {
+      resolved.push(toDiscoveredTool(connection, info, exposedName, source));
+      claimed.add(exposedName);
     }
   }
   return resolved;
@@ -154,30 +163,69 @@ export async function sourceForConnection(
   });
 }
 
+/**
+ * Same catalog rule as the Cursor-account bridge: slug illegal characters,
+ * then `_2` / `_3` … for colliders (including authored tools already in
+ * `claimed`). Suffix assignment is stable for a colliding group: sort by
+ * original advertised name, independent of `listTools` order.
+ */
+function exposeListedTools(
+  listed: HostMcpToolInfo[],
+  claimed: ReadonlySet<string>
+): Array<{ info: HostMcpToolInfo; exposedName: string }> {
+  const byBase = new Map<string, HostMcpToolInfo[]>();
+  for (const info of listed) {
+    const base = sanitizeMcpToolName(info.name);
+    const group = byBase.get(base);
+    if (group === undefined) {
+      byBase.set(base, [info]);
+    } else {
+      group.push(info);
+    }
+  }
+  const taken = new Set(claimed);
+  const exposedNameByInfo = new Map<HostMcpToolInfo, string>();
+  const sortedBases = [...byBase.keys()].sort((left, right) =>
+    left < right ? -1 : left > right ? 1 : 0
+  );
+  for (const base of sortedBases) {
+    const group = byBase.get(base)!;
+    group.sort((left, right) =>
+      left.name < right.name ? -1 : left.name > right.name ? 1 : 0
+    );
+    group.forEach((info, index) => {
+      let suffixIndex = index;
+      let exposedName = suffixMcpToolName(base, suffixIndex);
+      while (taken.has(exposedName)) {
+        suffixIndex++;
+        exposedName = suffixMcpToolName(base, suffixIndex);
+      }
+      taken.add(exposedName);
+      exposedNameByInfo.set(info, exposedName);
+    });
+  }
+  return listed.map((info) => ({
+    info,
+    exposedName: exposedNameByInfo.get(info)!,
+  }));
+}
+
 function toDiscoveredTool(
   connection: DiscoveredConnection,
   info: HostMcpToolInfo,
-  claimed: ReadonlySet<string>,
+  exposedName: string,
   source: AdvertisedToolSource
 ): DiscoveredTool {
-  if (!ADVERTISED_TOOL_NAME_PATTERN.test(info.name)) {
-    throw new Error(
-      `Advertised connection "${connection.name}" serves tool name "${info.name}", which must match ${ADVERTISED_TOOL_NAME_PATTERN} (it becomes the tool name the model sees).`
-    );
-  }
-  if (claimed.has(info.name)) {
-    throw new Error(
-      `Advertised connection "${connection.name}" serves tool "${info.name}", which collides with an authored agent/tools/ tool or another advertised connection.`
-    );
-  }
   const description =
     info.description === undefined || info.description.trim() === ""
       ? `${info.name} — MCP tool on the "${connection.name}" connection, forwarded 1:1.`
       : info.description;
   const inputSchema = info.inputSchema ?? ANY_OBJECT_SCHEMA;
+  const outputSchema = info.outputSchema;
   const definition: ToolDefinition = brandDefinition("tool", {
     description,
     inputSchema,
+    ...(outputSchema === undefined ? {} : { outputSchema }),
     execute: async (input: Record<string, unknown>) =>
       formatMcpToolResult(
         connection.name,
@@ -186,9 +234,10 @@ function toDiscoveredTool(
       ),
   } as unknown as ToolDefinition);
   return {
-    name: info.name,
+    name: exposedName,
     description,
     inputSchema,
+    ...(outputSchema === undefined ? {} : { outputSchema }),
     execution: "server",
     needsApproval: false,
     definition,

package/src/internal/cli-deploy.ts

@@ -39,10 +39,6 @@ import {
   TERMINAL_DEPLOY_STATUSES,
   validateDeploymentSlug,
 } from "./deploy-client.js";
-import {
-  type AgentDeployManifestV1,
-  buildAgentDeployManifest,
-} from "./deploy-manifest.js";
 import { type GitRunner, inferDeployGitSource } from "./deploy-source.js";
 import {
   type ChildAgentDir,
@@ -666,9 +662,10 @@ async function deployOne(
     ...(egressAllowedDomains.length === 0 ? {} : { egressAllowedDomains }),
     publicRoutePaths:
       publicRoutePaths.length === 0 ? undefined : publicRoutePaths,
-    // Offline metadata extraction (Wd): the CP persists this before any VM
-    // starts. Directories without an agent project send no manifest.
-    ...(manifest === undefined ? {} : { manifest: manifest.deployManifest }),
+    // Deliberately NO manifest here: the control plane captures it from the
+    // provisioned engine (`GET /v1/manifest` after the health probe), which
+    // is the single write path for deploy manifests. `july manifest` remains
+    // available for local visibility only.
   };
 
   let accepted: DeployAccepted;
@@ -864,13 +861,6 @@ interface DeployManifest {
    * (only `/v1/channels/…` subtrees can be public); surfaced as a warning.
    */
   httpChannelPublicEndpoint: boolean;
-  /**
-   * The offline deploy manifest (Wd): derived event declarations, channel
-   * kinds, egress, routes, and the full `/v1/info` payload. Attached to the
-   * deploy request so the control plane stores metadata before any VM
-   * starts; servers that predate manifest storage strip the field.
-   */
-  deployManifest: AgentDeployManifestV1;
 }
 
 /**
@@ -895,7 +885,6 @@ async function readDeployManifest(dir: string): Promise<DeployManifest> {
     httpChannelPublicEndpoint: (project.httpChannel.auth ?? []).some(
       isPublicEndpointPolicy
     ),
-    deployManifest: buildAgentDeployManifest(project),
   };
 }
 

package/src/internal/cli-skills.ts

@@ -1,15 +1,18 @@
 /**
  * `install-skills` — install the package's coding-agent skills into
- * `~/.cursor/skills/agentkit/` without running `init`.
+ * `~/.cursor/skills/agentsdk/` without running `init`.
  *
  * Never prompts: running the command is the confirmation. The interactive
- * offer lives in `init`.
+ * offer lives in `init`. Consumer `npm install` / `npx` copies the same
+ * skills in postinstall (with `alwaysApply: true` so Cursor injects them);
+ * this command refreshes them without reinstalling.
  */
 
 import { CLI_COMMAND_NAME } from "./distribution.js";
 import {
   formatSkillInstall,
   installCursorSkills,
+  LEGACY_CURSOR_SKILLS_NAMESPACE,
   planSkillInstall,
   type SkillInstallPlan,
 } from "./install-cursor-skills.js";
@@ -90,6 +93,11 @@ function previewBlock(plan: SkillInstallPlan): string {
   if (plan.orphans.length > 0) {
     lines.push(`  removes:  ${plan.orphans.join(", ")}`);
   }
+  if (plan.hasLegacyNamespace) {
+    lines.push(
+      `  removes:  ${LEGACY_CURSOR_SKILLS_NAMESPACE}/ (legacy namespace)`
+    );
+  }
   lines.push(`  location: ${plan.directory}`);
   return `${lines.join("\n")}\n`;
 }

package/src/internal/convert-automation/convert-workflow.ts

@@ -7,6 +7,7 @@
  */
 
 import { CLI_COMMAND_NAME, PACKAGE_NAME } from "../distribution.js";
+import { MEMORY_TS } from "../init-scaffold.js";
 import { pascalCase, SlugRegistry, slugify } from "./slug.js";
 import type {
   ActionJson,
@@ -128,7 +129,7 @@ export function convertWorkflow(
     hasSlackAction && emitSlackAccountConnection(automation, out);
 
   if (workflow.memoryEnabled === true) {
-    out.files.push({ path: "agent/hooks/memory.ts", contents: MEMORY_HOOK });
+    out.files.push({ path: "agent/hooks/memory.ts", contents: MEMORY_TS });
   }
 
   out.setupSteps.push(
@@ -1410,13 +1411,3 @@ function jsonComment(value: unknown): string[] {
 function dedupe(values: string[]): string[] {
   return [...new Set(values)];
 }
-
-/** Memory hook contents — identical to the `initProject` scaffold. */
-const MEMORY_HOOK = `// Journals every turn (timestamp, session, user message, result) so
-// future sessions can recall past work. The journal is shared across every
-// session — and every user — of this agent. Pass your own MemoryBackend to
-// change where memories live, or delete this file to opt out.
-import { memoryHook } from "${PACKAGE_NAME}/memory";
-
-export default memoryHook();
-`;