@cursor/july 0.1.90 → 0.1.92

package/templates/security-help/agent/agent.ts

@@ -0,0 +1,18 @@
+import { defineAgent } from "@cursor/july";
+
+export default defineAgent({
+  name: "Security Help",
+  description:
+    "Answers security questions in Slack and takes a first look at a GitHub pull request.",
+  model: {
+    id: "grok-4.6",
+    params: [
+      { id: "effort", value: "high" },
+      { id: "fast", value: "true" },
+    ],
+  },
+  tools: ["read", "grep"],
+  local: {
+    sandbox: true,
+  },
+});

package/templates/security-help/agent/channels/github.ts

@@ -0,0 +1,13 @@
+import { githubChannel } from "@cursor/july/channels/github";
+import { REPOS } from "../lib/repos.js";
+
+export default githubChannel({
+  webhookEvents: [],
+  deliverReplies: false,
+  cursorAccount: {
+    repos: REPOS,
+    permissions: "read",
+  },
+  onPullRequest: () => null,
+  onComment: () => null,
+});

package/templates/security-help/agent/channels/slack.ts

@@ -0,0 +1,89 @@
+import {
+  defaultSlackAuth,
+  extractGithubPrRef,
+  type SlackMessageHandler,
+  slackChannel,
+} from "@cursor/july/channels/slack";
+import { loadPrFiles } from "../lib/pr-first-pass.js";
+import { REPOS, watches } from "../lib/repos.js";
+
+const watch: string[] = [];
+
+const clear = {
+  "pr/meta.md": "",
+  "pr/diff.patch": "",
+  "pr/head.sha": "",
+};
+
+const handleSlack: SlackMessageHandler = async (ctx, message) => {
+  const auth = defaultSlackAuth(message, ctx);
+  if (auth === null) {
+    return null;
+  }
+
+  const pr = extractGithubPrRef(message.markdown);
+  if (pr === undefined) {
+    return { auth };
+  }
+
+  const title = `Security Help ${pr.label}`;
+  const fullName = `${pr.owner}/${pr.repo}`;
+  if (!watches(fullName)) {
+    return {
+      auth,
+      title,
+      workspaceFiles: clear,
+      context: [
+        `Security help can only fetch ${REPOS.join(", ")} (got ${fullName}).`,
+      ],
+    };
+  }
+
+  const loaded = await loadPrFiles({
+    github: ctx.host.github,
+    ref: pr,
+  });
+  return {
+    auth,
+    title,
+    workspaceFiles: loaded ?? clear,
+    context:
+      loaded === undefined
+        ? ["Could not fetch the pull request. Connect GitHub or check the URL."]
+        : undefined,
+  };
+};
+
+export default slackChannel({
+  envPrefix: "SECURITY_HELP",
+  policy: {
+    blockExternals: true,
+  },
+  engagement: {
+    channelPosts:
+      watch.length === 0
+        ? undefined
+        : {
+            allow: watch,
+            posts: "top-level" as const,
+          },
+  },
+  onAppMention: handleSlack,
+  onDirectMessage: handleSlack,
+  onChannelPost: watch.length === 0 ? undefined : handleSlack,
+  suggestedPrompts: [
+    {
+      title: "Look at a PR",
+      message: "First look at https://github.com/owner/repo/pull/1",
+    },
+    {
+      title: "How urgent",
+      message: "How urgent is this?",
+    },
+    {
+      title: "Ask for context",
+      message: "What else do we need before answering?",
+    },
+  ],
+  suggestedPromptsTitle: "Ask security",
+});

package/templates/security-help/agent/instructions.md

@@ -0,0 +1,20 @@
+# Security help
+
+Answer security questions in Slack from the FAQ and skills.
+If you do not know, say so and ask a human.
+
+Open the skill or FAQ for the ask. Those files are under `agent/skills/` and `agent/knowledge/faq/`.
+
+| If the ask is about | Open |
+| --- | --- |
+| A GitHub pull request | `agent/skills/security-pr-first-pass.md` |
+| An access request | `agent/skills/access-request.md` |
+| A leak, alert, or incident | `agent/skills/security-playbooks.md` |
+| Who can approve, privacy, or policy | `agent/knowledge/faq/approvals.md` |
+| Phishing text, email, or a call | `agent/knowledge/faq/phishing.md` |
+| Which team or channel owns a request | `agent/knowledge/faq/channels.md` |
+| Another security question | `agent/skills/security-first-pass.md` |
+
+A pull request earlier in the thread is not this one.
+
+If you say an incident is over or a system is safe, show why. Looking at a pull request is not that.

package/templates/security-help/agent/knowledge/faq/approvals.md

@@ -0,0 +1,5 @@
+# Approvals
+
+Who can say yes depends on the request. If this file does not name an owner, ask a human for that topic.
+
+Privacy questions (training, retention, where prompts sit) go to a privacy or security person.

package/templates/security-help/agent/knowledge/faq/channels.md

@@ -0,0 +1,6 @@
+# Channels
+
+`#security` is for security questions and phishing reports.
+
+Name the channel that owns SaaS access, identity groups, laptops, and billing.
+Until you do, say you do not know which team owns that request.

package/templates/security-help/agent/knowledge/faq/phishing.md

@@ -0,0 +1,10 @@
+# Phishing
+
+`#security` is where phishing and unexpected texts, emails, or calls go.
+If the thread is already about that, keep it there.
+
+Leave the original message alone. Do not reply, click, or send a 2FA code on it.
+Confirm unknown texts or calls over Slack or in person before acting.
+
+If an account looks compromised, they should lock it now and wait for a human.
+If security already gave a verdict in-thread, follow that.

package/templates/security-help/agent/lib/pr-first-pass.ts

@@ -0,0 +1,42 @@
+import { prompt, type HostGitHubClient } from "@cursor/july";
+import type { GitHubPrRef } from "@cursor/july/channels/github";
+
+const MAX_DIFF_CHARS = 150_000;
+
+export async function loadPrFiles(args: {
+  github: HostGitHubClient;
+  ref: GitHubPrRef;
+}): Promise<Record<string, string> | undefined> {
+  try {
+    const octokit = await args.github.getOctokit();
+    const pull = {
+      owner: args.ref.owner,
+      repo: args.ref.repo,
+      pull_number: args.ref.number,
+    };
+    const [meta, diff] = await Promise.all([
+      octokit.rest.pulls.get(pull),
+      octokit.rest.pulls.get({ ...pull, mediaType: { format: "diff" } }),
+    ]);
+    const data = meta.data;
+    const text = String(diff.data);
+    const header = prompt`
+      # ${data.title}
+
+      url: ${args.ref.url}
+      author: @${data.user?.login ?? "unknown"}
+      head: ${data.head.ref} (${data.head.sha})
+      base: ${data.base.ref}
+    `;
+    return {
+      "pr/meta.md": `${header}\n\n${data.body ?? ""}`,
+      "pr/diff.patch":
+        text.length > MAX_DIFF_CHARS
+          ? `${text.slice(0, MAX_DIFF_CHARS)}\n…[truncated]\n`
+          : text,
+      "pr/head.sha": data.head.sha,
+    };
+  } catch {
+    return undefined;
+  }
+}

package/templates/security-help/agent/lib/repos.ts

@@ -0,0 +1,5 @@
+export const REPOS: readonly string[] = ["owner/repo"];
+
+export function watches(fullName: string): boolean {
+  return REPOS.some((repo) => repo.toLowerCase() === fullName.toLowerCase());
+}

package/templates/security-help/agent/skills/access-request.md

@@ -0,0 +1,10 @@
+---
+description: use when Slack has an access request or request number
+---
+
+# Access request
+
+This skill is the access request. SaaS or identity-group asks go to the team named in `agent/knowledge/faq/channels.md`.
+
+Say what they asked for, why, and how long it lasts, from the request.
+Do not invent a grant that is not on the request.

package/templates/security-help/agent/skills/security-first-pass.md

@@ -0,0 +1,15 @@
+---
+description: use for Slack security questions; open the skill or FAQ you need
+---
+
+# Security questions
+
+Open the security skill or FAQ for the ask.
+
+SaaS access, identity groups, laptops, and billing go to the team named in `agent/knowledge/faq/channels.md`.
+
+If this looks like production secrets out, an exploit, customer data out, malware, or an account takeover, they should stop it now and wait for a human.
+
+Training, retention, or policy ownership: `agent/knowledge/faq/approvals.md`.
+
+If the skills and the topic file for this ask do not have it, say you do not know and ask a human.

package/templates/security-help/agent/skills/security-playbooks.md

@@ -0,0 +1,12 @@
+---
+description: use when Slack looks like a leak, alert, access, privacy, or incident
+---
+
+# Security playbooks
+
+If a production secret is already out, revoke or rotate it at the place that issued it, or turn it off there.
+
+For other alerts, follow the FAQ or runbook under `agent/knowledge/`.
+Do not call it safe without a human.
+
+If you cannot see who is affected, skip that.

package/templates/security-help/agent/skills/security-pr-first-pass.md

@@ -0,0 +1,12 @@
+---
+description: use when they asked for a look at a GitHub pull request
+---
+
+# Looking at a pull request
+
+They asked for a first look. Summarize the change. Note anything that looks like a security issue.
+
+The look is in `pr/meta.md` and `pr/diff.patch`.
+Read those files.
+
+You only have those files. Do not guess at CI, review checks, or anything that is not in them.

package/templates/security-help/evals/evals.config.ts

@@ -0,0 +1,5 @@
+import { defineEvalConfig } from "@cursor/july/evals";
+
+export default defineEvalConfig({
+  maxConcurrency: 10,
+});

package/templates/security-help/evals/security-help.eval.ts

@@ -0,0 +1,53 @@
+import { defineEval, includes } from "@cursor/july/evals";
+
+export default defineEval({
+  tags: ["smoke"],
+  cases: [
+    {
+      id: "phishing",
+      description: "A phishing text is left alone and confirmed over Slack.",
+      async test(t) {
+        await t.send(
+          "got a text saying my okta expired and i should tap a link. what do i do?"
+        );
+        t.succeeded();
+        t.check(t.reply, includes(/leave|don't click|do not click|slack/i));
+      },
+    },
+    {
+      id: "saas-access",
+      description: "SaaS access is not granted until the FAQ names an owner.",
+      async test(t) {
+        await t.send("can you add me to the figma okta group?");
+        t.succeeded();
+        t.check(t.reply, includes(/do not know|don't know|faq|human/i));
+      },
+    },
+    {
+      id: "pr-first-pass",
+      description: "A seeded PR look says what the change is.",
+      async test(t) {
+        await t.send("first look at https://github.com/acme/api/pull/12", {
+          workspaceFiles: {
+            "pr/meta.md": [
+              "# add search highlighting",
+              "",
+              "url: https://github.com/acme/api/pull/12",
+              "author: @sam",
+              "head: feat/search (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa)",
+              "base: main",
+              "",
+              "highlight the query in search results",
+            ].join("\n"),
+            "pr/diff.patch": [
+              "diff --git a/app/routes/search.ts b/app/routes/search.ts",
+              "+res.send(`<h1>Results for ${req.query.q}</h1>`);",
+            ].join("\n"),
+          },
+        });
+        t.succeeded();
+        t.check(t.reply, includes(/search|highlight/i));
+      },
+    },
+  ],
+});

package/templates/security-help/init.json

@@ -0,0 +1,31 @@
+{
+  "questions": [
+    {
+      "id": "repos",
+      "prompt": "Which GitHub repos may this agent read?",
+      "hint": "Comma-separated owner/repo. One GitHub owner.",
+      "placeholder": "acme/api, acme/web",
+      "parse": "owner-repo-list"
+    }
+  ],
+  "replace": [
+    {
+      "file": "agent/lib/repos.ts",
+      "find": "[\"owner/repo\"]",
+      "answer": "repos",
+      "as": "json-array"
+    },
+    {
+      "file": "README.md",
+      "find": "owner/repo",
+      "answer": "repos",
+      "as": "first"
+    },
+    {
+      "file": "agent/channels/slack.ts",
+      "find": "owner/repo",
+      "answer": "repos",
+      "as": "first"
+    }
+  ]
+}

package/templates/security-help/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "security-help-agent",
+  "private": true,
+  "type": "module",
+  "description": "Answers security questions in Slack and takes a first look at a pull request.",
+  "scripts": {
+    "check": "tsc --noEmit",
+    "dev": "agent-sdk dev"
+  },
+  "dependencies": {
+    "@cursor/july": "latest",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.14.0",
+    "typescript": "^5.8.0"
+  }
+}

package/templates/security-help/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": ["agent/**/*", "evals/**/*"]
+}

package/templates/triage/agent/channels/webhook.ts

@@ -1,4 +1,4 @@
-import { allowAll, defineChannel, POST } from "@cursor/july/channels";
+import { defineChannel, POST, publicEndpoint } from "@cursor/july/channels";
 import { z } from "zod";
 import {
   formatQueuePrompt,
@@ -7,7 +7,7 @@ import {
 import { verifyTrackerWebhook } from "../lib/verify-webhook.js";
 
 export default defineChannel({
-  auth: [allowAll()],
+  auth: [publicEndpoint()],
   routes: [
     POST("/", {
       description: "Signed Linear or Jira issue-created webhook",