CLI runners
- Cursor (
cursor-agent) runner — stream-json, MCP via.cursor/cli.json. The runner is wired and works oncecursor-agentis on PATH (install via Cursor's official installer; not bundled in the image) - Claude Agent runner (
--bare) — thin wrapper over Claude Code
Sentry auto-fix workflow
sentry-fixernow completes fix → PR end-to-end (auto-creates a PR with a human-readable summary).mcp.json/ Cursor config gitignored so secrets are never committed
Subscription model (opt-in, subscription.enabled, default OFF)
- Dual-auth: operator token or tenant
cfk_token; managed key pool (weighted selection) - Per-tenant tier limits (allowed CLIs/models, daily quota, budget, concurrency) + usage logging
- Tenant isolation: per-session ownership, List scoping, operator-only admin routes
The existing per-session API-key (BYOK) flow is unchanged when subscription is disabled.
🤖 Generated with Claude Code