@cursor/july 0.1.8 → 0.1.10

package/src/storage-backends/postgres-kv.ts

@@ -9,6 +9,11 @@
  *   agent_serve_ab(deployment_id, agent, kind, ref, value JSONB, updated_at)
  *     PRIMARY KEY (deployment_id, agent, kind, ref)
  *
+ * For Cursor-managed hosting prefer `cursorHostedStorage` from
+ * `@cursor/july/storage/cursor-hosted` — same tables via a control-plane
+ * HTTP proxy (no pod-visible DSN). Use this helper when you supply
+ * `BUGBOTDB_URL` / `AGENT_SERVE_DEPLOYMENT_ID` yourself (self-host).
+ *
  * `postgresStorage` implements the whole `defineStorage` surface as plain
  * SQL: the four KV methods against the last-write-wins `agent_serve_kv`
  * table (sessions, event chunks, continuations, reminders), the `evals`

package/src/types.ts

@@ -886,6 +886,13 @@ export interface SessionSummary {
   externalUrl?: string;
 }
 
+/**
+ * Where `GET /v1/sessions` loaded rows from.
+ * - `cursor-hosted` — durable Bugbot `agent_serve_kv` via `cursorHostedStorage`
+ * - `local` — the serve process `--state-root` session store
+ */
+export type SessionListSource = "cursor-hosted" | "local";
+
 /**
  * A session handle scoped to the channel that owns it. This is what channel
  * route handlers get back from `send()` / `getSession()`.
@@ -1897,6 +1904,15 @@ export interface ServeOptions {
    * SSO/Okta proxy in front of the host).
    */
   allowAnonymousCursorGithub?: boolean;
+  /**
+   * Allow {@link allowAnonymous} together with
+   * `defineConnection({ cursorAccount: true })`. Without this opt-in, `serve`
+   * refuses to start because every admitted anonymous caller could drive the
+   * signed-in account's MCP connectors. Set it only when the network boundary
+   * already authenticates callers (e.g. an SSO/Okta proxy, or the hosted
+   * agent-serve alias token).
+   */
+  allowAnonymousCursorAccountMcp?: boolean;
   /**
    * Public base URL where this server is reachable from outside the host
    * (e.g. `https://agents.example.com`). Used to resolve peer