docs(agents): Cloud env caveats for Hermes MCP + multi-schema - #53
Merged
Conversation
Capture Cloud-VM gotchas from E2E: stale Hermes MCP env after token rotation, and the ACME non-public schema DB for cross-schema checks. Also correct SECURITY_AUTH_ENABLED guidance (auth is on here). Co-authored-by: Venkat SF <venkatesh.sakamuri@stayflexi.com>
Auth is enabled in this VM; document bootstrap login instead of the outdated admin-bypass note. Co-authored-by: Venkat SF <venkatesh.sakamuri@stayflexi.com>
|
Bugbot is not enabled for your account, so this pull request was not reviewed. Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs. |
geekypunk
approved these changes
Aug 15, 2026
geekypunk
left a comment
geekypunk
left a comment
Contributor
There was a problem hiding this comment.
Docs-only. The SECURITY_AUTH_ENABLED correction matches the behaviour documented in CLAUDE.md — the flag bypasses JWT/MCP token validation only, it does not skip the login form or mint an admin. The MCP-token-rotation and multi-schema-fixture notes are accurate operational caveats. No code paths touched.
geekypunk
added a commit
that referenced
this pull request
Aug 15, 2026
<!-- CURSOR_AGENT_PR_BODY_BEGIN --> ## Summary End-to-end multi-schema UI pass so connections like **Multi Schema Shop** (`crm` / `sales`) no longer look like a single bare-name catalog. ### P0 — Authoring - Shared `src/lib/schemaNames.js` helpers (`canonicalTableReference`, `objectKey`, `qualifyForSql`, …) - **SQL Editor** + Tables overview: schema-prefixed labels, qualified autocomplete/insertText, generated SQL (`FROM crm.orders`), collision-safe React keys, schema-aware search - Clicking a table name inserts `SELECT … FROM schema.table` (chevron expands columns) - Index/stats REST paths accept `schema.table`; Postgres/MySQL introspection scopes indexes by schema ### P1 — Brain / Knowledge / ERD - Schema Docs display + note persist use `tableReference` (no cross-schema note collisions) - Knowledge `@` / `@@` suggestions show qualified labels; bare-name lookup only when unique - ERD / classification / key-column grouping use qualified ids - DetailsLibrary CSV example + NoteModal placeholder encourage `schema.table` ### P2 — Advisor / ops copy - Database advisor scans non-`public` schemas and emits schema-qualified `CREATE INDEX … ON` - Performance cards / heatmap keep schema in labels - Privileges accordion documents multi-schema `GRANT` pattern - Dashboard-design skill nudges schema-qualified SQL ## Verification On **Multi Schema Shop**: - Editor lists `crm.customers`, `sales.order_items`, `sales.orders` - Click inserts `FROM crm.customers` - Brain Schema Docs shows the same qualified names [Editor with schema-qualified tables](https://cursor.com/agents/bc-019fe687-99b1-76fd-80fa-dd213aecc497/artifacts?path=%2Fopt%2Fcursor%2Fartifacts%2Fmulti_schema_editor_expanded.png) [Generated SQL FROM crm.customers](https://cursor.com/agents/bc-019fe687-99b1-76fd-80fa-dd213aecc497/artifacts?path=%2Fopt%2Fcursor%2Fartifacts%2Fmulti_schema_editor_query.png) [Brain Schema Docs with crm/sales tables](https://cursor.com/agents/bc-019fe687-99b1-76fd-80fa-dd213aecc497/artifacts?path=%2Fopt%2Fcursor%2Fartifacts%2Fmulti_schema_brain.png) ## Test plan - [x] Select **Multi Schema Shop** → Editor lists `crm.*` / `sales.*` - [x] Click table generates `FROM schema.table` SQL - [x] Brain Schema Docs shows `schema.table` - [ ] Regression: **Demo Shop** (public-only) still shows bare table names - [x] `node --test src/lib/schemaNames.test.js` Note: PR #53 is docs-only Cloud caveats; this PR is the multi-schema UI work. <sub>To show artifacts inline, <a href="https://cursor.com/dashboard/cloud-agents#my-pull-requests">enable</a> in settings.</sub> <!-- CURSOR_AGENT_PR_BODY_END --> <div><a href="https://cursor.com/agents/bc-019fe687-99b1-76fd-80fa-dd213aecc497?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-019fe687-99b1-76fd-80fa-dd213aecc497&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Krishna Sasank Talasila <sasanktk@gmail.com>
![https://cursor.com/assets/images/open-in-web-dark.png"><source](https://cursor.com/assets/images/open-in-web-dark.png"><source){kind=link}
![https://cursor.com/assets/images/open-in-web-light.png"><img](https://cursor.com/assets/images/open-in-web-light.png"><img){kind=link}
![https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a](https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a){kind=link}
![https://cursor.com/assets/images/open-in-cursor-dark.png"><source](https://cursor.com/assets/images/open-in-cursor-dark.png"><source){kind=link}
![https://cursor.com/assets/images/open-in-cursor-light.png"><img](https://cursor.com/assets/images/open-in-cursor-light.png"><img){kind=link}
![https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div](https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div){kind=link}
geekypunk
pushed a commit
that referenced
this pull request
Aug 15, 2026
<!-- CURSOR_AGENT_PR_BODY_BEGIN --> ## Summary Prepares and documents the **v1.1.0** product cut from `main` since `v1.0.0`, and locks in a **weekly release cadence: Saturday 09:00 America/Los_Angeles**. ### Since v1.0.0 - Progressive dashboards (#57), dashboard improvements (#51) - Multi-schema UI (#55), Performance hub (#52) - CI CodeQL unblock (#56), cloud env caveats (#53) ### This PR - Bump `backend/pom.xml` → `1.1.0` - `CHANGELOG.md` + `docs/releases/RELEASE_NOTES-v1.1.0.md` - Cadence in `docs/oss-ux/RELEASE.md` - New `docs/oss-ux/WEEKLY_RELEASE_AUTOMATION.md` (cron + paste-ready prompt) - Daily triage doc clarified as optional (not the release cut) ### After merge 1. Tag `v1.1.0` on the merge commit and push → `.github/workflows/release.yml` publishes the GitHub Release. 2. Create the Cursor Automation once from `WEEKLY_RELEASE_AUTOMATION.md` (cannot be created via API). ### Pre-flight `scripts/self-host/e2e-agent-check.py` → `AGENT_OK True`, `DASH_OK True` on the current stack before this bump. <!-- CURSOR_AGENT_PR_BODY_END --> <div><a href="https://cursor.com/agents/bc-8ce91e70-c67b-48c6-84b3-05bb9d06231a?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-8ce91e70-c67b-48c6-84b3-05bb9d06231a&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> Co-authored-by: Cursor Agent <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Durable
AGENTS.mdCloud caveats discovered during E2E/setup:mcpAuthOk: truebut tools 401)SECURITY_AUTH_ENABLEDguidance (auth is ON; use bootstrap admin)Test plan