Maya: Welcome to Cursor HQ. Hi, I'm Maya. Today: Cursor shipping described apps to live URLs, OpenAI ending its Cursor deal, annotate for visual prompting, a docs delete-blocking gap, and OffPrompt keeping keys out of chat.

James: And I'm James. Let's get into it.

Maya: So Cursor can now take a described tool all the way to a live URL. Start a cloud agent, tell it explicitly you want to build an app, and it scaffolds the web app, spins up Postgres if needed, and sets up sign-in behind Cursor SSO.

James: That's the headline, Maya, and the gating matters. Publishing runs deterministic and agentic security checks for things like secrets written into app files. Nothing goes live until checks pass and you explicitly publish, and team admins can unpublish anything.

Maya: Exactly right, and the aim, per the November fifth changelog, is getting apps off localhost. You pick a unique domain and deploy from Cursor Origin or GitHub, with GitLab coming soon. Teams internally use it for event registration and sales dashboards.

James: And sharing sits behind Cursor sign-in, Maya, so you pick specific people, groups, or the whole team. On individual plans apps can go public too. It's on all paid plans with cloud agents enabled. Just update Cursor.

Maya: Now the OpenAI story. On Friday, October thirtieth, OpenAI said it will wind down its Cursor partnership, notifying SpaceX of intent to end the contract with a proposed shutoff of November twelfth, twenty twenty six. Mashable says that's the maximum notice allowed.

James: And OpenAI framed it as trust, Maya, citing a pattern of Musk companies violating contracts. It alleged X breached its own OpenAI contract, and noted Musk admitted under oath that xAI violated OpenAI's terms. For developers, OpenAI said it wants to preserve as much access as possible meanwhile.

Maya: Worth adding that SpaceX completed its Anysphere acquisition in October, and OpenAI said its custom agreement gave only a limited window to cancel after a change of ownership. The coverage doesn't say which models or features are affected.

James: Co-founder Michael Truell struck a more conciliatory tone on X, saying Cursor is in talks to resolve it. Musk wrote he couldn't care less. And Anthropic, which partners with SpaceX, said it would increase compute support for Claude models within Cursor.

Maya: Onto annotate, announced October twenty seventh. It's a visual prompting mode that extends design mode from Cursor three in April. You run your app in the browser inside the Agents Window, point at the element you want changed, leave a note, and the agent edits the code behind it.

James: That solves a real pain, Maya. Typed prompts leave the agent guessing which element you meant. Per note it gets the tag, classes, selector path, size, six styles, plus a screenshot cropped to your drawing. In React, Vue and Svelte, the component name too.

Maya: Exactly, and setup is simple: update to Cursor three point two four point one eight or later, open the browser, click annotate or press Cmd Shift D. You can shift-click several elements into one note. Cursor recommends Composer two point five, and says start with one small fix.

James: This next one is a warning. Cursor's hooks page shows a beforeShellExecution hook that blocks destructive deletes, pairing a matcher of r m dash r f with a deny script. A community post says, copied as written, that guardrail is thinner than it looks.

Maya: Because the matcher only tests command text, James. If the agent writes r m dash r dash f, r m dash f r, or uses find dot dash delete, the hook never runs and the command goes through.

James: Three fixes: drop the matcher so the script sees every command, match the recursive and force flags in any order, and set failClosed true so a crash blocks instead of passing. A free open-source tester runs sixty six spellings locally with u v x paveo test cursor.

Maya: Last one, OffPrompt. When Cursor's agent needs a key mid-task, pasting it into chat leaves it in the conversation history and sends it to the model provider. OffPrompt is a free open-source MCP server that gives the agent another route.

James: And the mechanism is clean, Maya. The agent calls a tool named collect_secret when it needs something like a Stripe secret key, a page opens on a local address, you paste the key there, OffPrompt writes it to dot env dot local, and the agent never sees the value.

Maya: Exactly, and it's MIT licensed and free. You add one block to dot cursor slash mcp dot json. It comes from raycash dot xyz, and there's a step-by-step Stripe test-mode walkthrough on offprompt dot dev.

Maya: That's your Cursor HQ briefing.