Shared terminal with Agent, context usage in chat, and faster edits

Source: Cursor Date: 2025-07-29 URL: https://cursor.com/changelog/1-3

Summary

Cursor 1.3 lets agents access the native terminal with background execution and manual takeover, adds context window usage visibility at conversation end, and brings directory right-click “Send to Chat.” Security model shifts from denylists to allowlists for auto-run. Manual chat mode removed. Apply edits ~11% faster, Search & Replace 25% lower latency. Team admins can configure extension allowlists.

Implications

Agent-IDE feature race. Native terminal access with manual takeover bridges the gap between Cursor agents and Aider/Claude Code’s terminal-native model. Cursor is absorbing the full shell execution context that CLI tools have had by default — watch whether this drives further convergence (file watching, background daemons) or creates conflict with IDE sandbox assumptions.

Pricing model evolution. The security model shift from denylist to allowlist for auto-run is a significant trust change — it means auto-run is more locked down by default, which will push power users toward explicit configuration. This is a maturity signal: Cursor is managing the risk surface of fully autonomous agent execution as the product scales to enterprise.

Watch: Whether context window usage visibility at conversation end becomes a trigger for UI prompts to start fresh or compress — this is the infrastructure for per-session cost awareness.