Cursor shipped background agents that can plan and execute whole-repo tasks — refactors, test fixes, migration scaffolds — while you close the laptop and review the resulting pull request later.
Safety rails
Agents run in an isolated workspace snapshot with explicit file allowlists. You approve shell commands before they execute, and diffs stream into a review panel similar to inline Cmd-K edits.
Early access opens to Pro subscribers this week, with queue limits based on repo size. Cursor recommends committing or stashing before kicking off long agents, and keeping task descriptions scoped to a single outcome.
Kick off a refactor, walk away, and review a PR — agents run against a snapshot, not your live dirty tree.
The feature pairs naturally with frontier models for planning and faster models for file churn, mirroring guidance Cursor already gives for interactive agent mode.
