For me it seems that .cursorignore exclude all files + .gitignore except those are listed in .cursorignore
I expected that it should work inversed
so files listed in gitignore will be indexed or not?
What if cursor developed a special local model that strictly worked on env files, like a private agent. It could communicate with the main agent but the main agent would never know the actual details. The env part of the app is often where many issues arise and it would be a real shame to not get agent help due to security concerns.
The local agent could talk to the cursor agent and speak in generalities about issues. The issues with keys aren’t THAT complex. The key is there, the key is not there, the key is there but it’s wrong. If they can have a discussion where the env agent doesn’t spill the beans to the cursor agent problem solved. If this is not enough some sort of automatic layer of encryption only the local agent can understand but they can agree about whether keys match, exist, don’t exist etc… maybe we can introduce a new standard way of dealing with env vars that enable safe management with agents?
I don’t understand the complaints around .gitignore, just make .cursorignore make files invisible to the agents. They are for different purposes.
- to have .cursorban worked.