Cursor

Cursor announced it has been acquired by SpaceX, closing a deal that began in April. The acquisition gives Cursor access to SpaceX's massive GPU fleet to build stronger, cheaper-to-run models. Grok 4.6, released Wednesday, is the first preview of what the combined effort can produce. The team says the product direction stays the same: help people write less code and solve harder problems.

Latent Space's AI newsletter confirms Cursor's $60B acquisition by SpaceXai has closed. The post mainly revisits Cursor's journey from a 5-person team to its cloud agent era, without disclosing deal terms, team plans, or product roadmap. The same issue covers a wave of Chinese open-model releases including Z.ai's GLM-5.3, Alibaba's Qwen3.8-27B, DeepSeek V4-Pro, and RedNote's dots3-note.

Cursor now pre-builds cloud agent environments in the background every hour—repos cloned, dependencies installed—so agents skip cold setup and respond up to 3x faster. Failed builds are automatically quarantined; agents keep using the last good snapshot. Faire runs 2,000+ automated agent jobs a week on builds, with large repos booting in seconds. Builds become the default for all environments on August 17 at no extra cost.

Grok 4.6 adds a supplemental training run on top of Grok 4.5, using model-generated data to strengthen reasoning and engineering. It matches GPT-5.6 Sol on the Artificial Analysis Intelligence Index, a composite of nine benchmarks. The model is better at turning a broad product idea into a working first version and shows more self-verification on long tasks. Pricing starts at $2/M input tokens and $6/M output tokens, with a fast variant at double the price. 2x usage is included in Cursor and Grok Build for the first week.

Claude Code's SendMessage lets agent processes exchange text, but bare text channels can't handle concurrent overwrites, delivery guarantees, or permission boundaries. The post traces three real-world bugs to derive five infrastructure layers—exclusive locks, write isolation, conflict arbitration, and more—and maps Swarm's trade-off: 80% gain on parallel tasks, 39–70% drop on sequential reasoning.

Ghostcommit showed the same Sonnet model rejected malicious PNG instructions 10/10 times in Claude Code, but obeyed 10/10 times in Cursor and Antigravity, leaking .env secrets. Lab-reported 99% defense rates suffer from five traps: static benchmark overfitting, misleading single-attempt ASR, LLM-as-judge drift, ignored utility-under-attack, and bare-model testing without tool shells. Deeper causes: LLMs lack hard instruction-data separation, and stronger models can follow injections more faithfully—Opus 4.6 with extended thinking saw ASR rise from 14.8% to 21.7%. A joint study by 14 researchers from OpenAI, Anthropic, and DeepMind tested 12 model-layer defenses; over 90% broke under adaptive attacks, with human red-teamers hitting 100%. The engineering fix is architectural isolation: CaMeL separates trusted planner from untrusted executor, and OpenClaw's dual-agent setup cut ASR from 100% to 0.31%. Harness-level deterministic tool gating, hook signature checks, and sandboxed least-privilege are the real controls.

Multi-model routing saves cost and latency in single-turn Q&A, but falls apart inside multi-turn agent sessions. A real case from vLLM Semantic Router issue #1439: a user said 'looks good, commit it' during a Go refactoring task. The router saw four short words, judged the difficulty as low, and switched to a 0.5B model—which replied with pleasantries and dropped the task. The root cause is the router's narrow view: it can't see prior task state or tool-call progress. Four engineering hurdles make in-session model switching painful: incompatible history formats, Prompt Cache invalidation, non-transferable implicit reasoning tokens, and high glue cost for multimodal artifacts. Three approaches have emerged: Cursor and Claude Code isolate work into subagents with clean contexts; vLLM's SAAR lets the router track session state and lock the model during tool calls; most production agents simply stick to one best fixed model. vLLM's own baseline: a multi-model system must beat the best fixed model on the same budget and latency, or it's not worth the complexity.

Cursor launched Cursor Start, a ₹649/month (~$7) India-only plan, well below its standard $20 Pro tier. It's the startup's first country-specific pricing. India is now Cursor's third-largest market globally; the company plans to expand local hiring and enterprise sales. The move comes weeks before SpaceX's expected acquisition closes — the post doesn't say whether India strategy changes post-deal.

Cursor fed 835 pages of SQLite docs into its new Harness, hitting 80% sqllogictest pass rate in 4 hours; the old Swarm was halted before hour 2 due to code conflicts. The new system isolates planner and worker roles, uses shared design docs and auto-merge, cutting merge conflicts from 70k to under 1k. A mixed-model setup—Opus 4.8 planning, Composer 2.5 executing—cost $1,339 total, roughly 8× cheaper than GPT-5.5 solo. The public minisqlite repo lacks CLI, C API, and cross-process locking, so it's far from production-ready SQLite. This is a capability demo under ideal conditions—fixed spec, dense feedback—not a daily driver for product teams with shifting requirements.

Cursor Router is a request classifier that picks the best model per task based on query, context, complexity, and domain. Simple work hits cheap models, UI tasks go to the model with best taste, and hard long-horizon problems reach frontier reasoning models. Trained on 600k+ live requests and tested across millions of online A/B requests, Auto Intelligence mode matches Fable-level satisfaction at ~60% lower team cost; Auto Balance beats Opus 4.8 satisfaction at ~36% lower cost. Early enterprise accounts saved 30–50% vs routing everything to Opus 4.8 with no quality drop. The post doesn't disclose routing latency or cache-hit details.

Cursor redesigned its agent swarm into a tree-shaped planner-worker split and retested it on rebuilding SQLite in Rust from docs. The new swarm beat the old one in every model config: with Grok 4.5 it hit 80% on a held-out SQL test suite in 4 hours, while the old swarm spiraled before hour two. Quality stayed similar across model mixes, but costs varied enormously—the post shows a comparison chart without exact dollar figures. The design isolates context so planners never see implementation details and workers only focus on narrow tasks, preventing drift on long runs.

Approval gates only decide whether a command starts, not what happens after package managers load scripts and spawn child processes. The article walks through a bug-fix task to show how OS isolation (Seatbelt/bubblewrap), credential proxying (Docker Sandboxes), and isolated workspaces each address different risks. No performance numbers or latency figures are disclosed.

Cursor's eval lead Nate Schmidt explains on Anthropic's blog how they determined Claude Fable 5 was ready for the hardest 1% of real-world coding problems. The headline number is 72.9% on CursorBench, a significant jump over the prior generation. The post stresses this isn't a generic benchmark grind—it targets long-tail tasks that actually stump developers. The article doesn't disclose the baseline score, test set size, or sample problems, so treat the 72.9% as a directional signal rather than a cross-benchmark comparison point.

Mindgard found a Cursor vulnerability: on Windows, opening a repo that contains a malicious git.exe in its root causes Cursor to execute it automatically—no prompt, no click, no warning. No model manipulation or privilege escalation needed; just trick a dev into opening a project. First reported Dec 15, 2025. Over 6 months and 197+ releases later, it remains unpatched. Cursor's security automation failed initially; later HackerOne closed the report as Informative/out of scope, then reopened after challenge. No official fix timeline is given. Workarounds: enterprise admins can use AppLocker path-based deny rules for git.exe in workspace dirs; consumers should open untrusted repos only in a VM or Windows Sandbox.

This piece argues that chat-box interfaces in tools like Cursor and Claude Code nudge users toward vague prompts and instant replies, robbing AI agents of the quiet time needed to compile, run tests, and self-correct. The author proposes replacing turn-by-turn chat with email-style async workflows: send a detailed task brief with attachments and local paths, then close the window and review the result later. It names Manus's email task entry and the startup AgenticMail as early examples. The post does not disclose latency or success-rate data for these email-based agent products.

SpaceXAI and Cursor jointly trained Grok 4.5, landing between Opus 4.7 and 4.8 in performance but 6x cheaper than Opus and 3x cheaper than GPT-5.5 on a per-token basis. OpenAI rolled out GPT-5.6 (Sol, Terra, Luna) to all users; early testers say Sol is less smart than Fable but far more reliable. ChatGPT Voice got new GPT-Live-1 and Live-1-mini models that can talk while you speak and use GPT-5.5 in the background. Anthropic extended Fable 5 access for Claude subscribers to July 12—the post doesn't explain the repeated delays. Meta introduced Muse Image and Muse Video; image editing and text rendering look solid, but images still have an AI look, and the video model is in preview.

SpaceXAI dropped Grok 4.5 one day before GPT-5.6, positioning it as an Opus-class coding and agent model co-trained with Cursor. Musk called it roughly comparable to Opus 4.7 but faster and cheaper—$2/$6 per million tokens, undercutting both GPT-5.6 and Opus 4.8. It's 1.5T parameters, 3x larger than Grok 4.3, with a 500k context window that may return to 1M next week. Cursor says this is their first model built beyond software engineering and offers double usage for the first week. The post doesn't disclose specific benchmark scores; it notes SWE-Bench Pro is now considered saturated by OpenAI's evals team.

Grok 4.5 is SpaceXAI's strongest model, tuned for coding, agentic tasks, and knowledge work. It scores 62% on DeepSWE 1.0 and 64.7% resolve rate on SWE Bench Pro, though it trails Fable and GPT 5.5 on most listed benchmarks. The standout number is token efficiency: 15,954 output tokens on average per SWE Bench Pro task, 4.2× fewer than Opus 4.8. Inference speed is 80 TPS, priced at $2/$6 per million input/output tokens. The model was trained across tens of thousands of GB300 GPUs, with RL focused on multi-step software engineering. The post doesn't disclose parameter count, context window, or a precise EU launch date beyond mid-July. Available now in Grok Build, Cursor, and via API.

TaskPeace launched on HN today: a single priority queue that Claude Code, Cursor, and other coding agents pull tasks from via MCP or REST. Agents call get_next_task, work the top item, and report back—humans only rank once. Free tier includes 200 active tasks and 5 projects; Pro is $10/month for unlimited use. It's MIT-licensed and self-hostable, with data stored in Upstash KV or locally. Worth noting: it's a lightweight coordination layer for individuals or small teams right now—the post doesn't mention team permissions or audit logs.

Cursor, Claude Code, and Codex have converged on the same set of features over the past three months, all designed to manage LLMs as if they were virtual interns. The models code fast but can't self-verify, lack spatial awareness, and drift on long tasks. The shared fixes: goal-driven agent loops, shared canvases or browser integration for visual alignment, and mobile apps for async oversight. The post argues this convergence stems from underlying model homogenization, and the real shift developers need is moving from real-time chat to long-horizon task management.