The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Apr 5, 2026 2:34am

PR Summary

Medium Risk
Adds new Cursor artifact download flow that fetches a presigned URL and downloads remote content via a new internal API route; mistakes could affect SSRF/file handling despite added URL validation and pinned-IP fetching. Other changes are mostly additive (new tool params/outputs and input trimming).

Overview
Adds support for Cursor agent artifacts: a new cursor_list_artifacts tool to enumerate artifact files and a new cursor_download_artifact tool (plus v2 variants) that returns downloaded files for execution storage.

Implements a new internal API route POST /api/tools/cursor/download-artifact that requests a presigned URL from Cursor, validates the resolved destination, and downloads the file content before returning it as base64.

Extends cursor_list_agents with an optional prUrl filter and normalizes agent IDs by trimming whitespace across existing Cursor tool URLs; also updates block configuration (advanced-only optional fields), integration metadata, and docs.

^{Reviewed by Cursor Bugbot for commit d98bda6. Configure here.}

Greptile Summary

This PR adds cursor_list_artifacts and cursor_download_artifact tools (v1 and v2 variants) to the Cursor integration, plus a prUrl filter for list_agents, CREATING status to the agent enum, and mode: 'advanced' on optional block fields.

The new download artifact flow correctly routes through an internal /api/tools/cursor/download-artifact proxy with checkInternalAuth, Zod validation, DNS-pinning (validateUrlWithDNS + secureFetchWithPinnedIP), and the correct status-passthrough on presigned URL failures. The list artifacts tool makes a direct external GET call—consistent with how all other Cursor read operations work. The v1/v2 split pattern is applied consistently. All three issues raised in previous review rounds have been addressed.

Key changes:

• New cursor_list_artifacts / cursor_list_artifacts_v2 tools: v1 wraps result in content+metadata, v2 returns API-aligned artifacts array
• New cursor_download_artifact / cursor_download_artifact_v2 tools: v1 returns content+metadata (no binary blob), v2 returns file object for execution storage
• New internal API route with SSRF-safe presigned URL fetching
• .trim() added to agentId across all existing Cursor tool URLs
• CREATING added to AgentMetadata status union in types.ts
• CursorV2Block outputs extended with artifacts and file fields

Confidence Score: 5/5

Safe to merge — all three previous P0/P1 issues (type mismatch, redundant guard, hardcoded status code) have been resolved; remaining findings are P2 style suggestions.

The security-critical download artifact path is correctly implemented with DNS pinning, IP locking, and internal auth. The v1/v2 split is consistent with the codebase pattern. The only remaining findings are a missing null guard in the v2 list_agents transformResponse (inconsistent with the same-PR list_artifacts pattern) and an any usage in satisfies constraints — both P2 and non-blocking.

apps/sim/tools/cursor/list_agents.ts — v2 transformResponse accesses data.agents without a fallback; minor inconsistency with the defensive pattern used in list_artifacts.ts

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant W as Workflow Executor
    participant R as Tool Registry
    participant LA as listArtifactsV2Tool
    participant DA as downloadArtifactV2Tool
    participant IR as /api/tools/cursor/download-artifact
    participant CA as api.cursor.com
    participant PS as Presigned URL (Storage)

    W->>R: resolve cursor_list_artifacts_v2
    R->>LA: transformResponse()
    LA->>CA: GET /v0/agents/{agentId}/artifacts<br/>(Authorization: Basic ...)
    CA-->>LA: { artifacts: [...] }
    LA-->>W: { output: { artifacts } }

    W->>R: resolve cursor_download_artifact_v2
    R->>DA: request to /api/tools/cursor/download-artifact
    DA->>IR: POST { apiKey, agentId, path }
    IR->>IR: checkInternalAuth + Zod.parse
    IR->>CA: GET /v0/agents/{agentId}/artifacts/download?path=...
    CA-->>IR: { url: "https://presigned..." }
    IR->>IR: validateUrlWithDNS(presignedUrl)
    IR->>PS: secureFetchWithPinnedIP(url, resolvedIP)
    PS-->>IR: binary file content
    IR-->>DA: { success, output: { file: { name, mimeType, data, size } } }
    DA-->>W: { output: { file } }

_{Reviews (2): Last reviewed commit: "fix(cursor): address PR review feedback" | Re-trigger Greptile}

@greptile

@cursor review