Pioneers Insight Method Research Author
Cursor's Third Era: Cloud Agents — ft. Sam Whitmore, Jonas Nelle, Cursor
Back to Episodes

Cursor's Third Era: Cloud Agents — ft. Sam Whitmore, Jonas Nelle, Cursor

Summary

  • Cursor is betting on cloud agents that operate a fully configured “brain in a box,” not merely generate code inside an editor. The progression is Tab autocomplete → local agents → agents handling 3-minute, 30-minute, three-hour, and even three-day assignments on their own computers. Giving models pixels, terminals, browsers, files, and development servers moves them from “sight-reading code” to producing tested software.
  • Closed-loop verification is the launch’s most consequential product change: agents test by default, show the result, and leave the machine available for inspection. A cloud agent can reproduce a bug, record the failure, implement the fix, and record the passing flow. Alessio Fanelli said this can turn hard-to-reproduce bugs into roughly 90-second merges; swyx called the demonstrated fix easy to merge. The output is no longer an “I tried some things PR,” but an “I tested it PR.”
  • Code generation is becoming cheap enough that review, CI/CD, and production confidence are now the scarce assets. Videos resolve intent-level mismatches such as “toggle” versus “checkbox,” while Bugbot reviews the code itself; Cursor employees say they learned to wait after repeatedly discovering that ignored Bugbot comments had identified real bugs. Their broader forecast is that 10-person startups will soon require the staged releases, merge queues, stacked diffs, and regression detection once associated with 10,000-person organizations.
  • The upside case is driven by throughput rather than making a single agent marginally faster. The discussion described systems with roughly 100 concurrent agents emitting thousands of tokens per second, and said GitHub Actions had been overloaded by agents pushing code at effectively 10× human headcount. The framing is memorable: stop optimizing “the water flowing faster” and make “the pipe much wider.”
  • Model routing may become a durable agent-layer advantage even if leadership among model labs keeps changing. Alessio Fanelli switched from being an “Opus 4.5 maximalist” to using Codex 5.3, while Cursor wants both explicit choice and an Auto-like default. More intriguingly, an unshipped experiment found that an agentic synthesizer could combine different providers’ outputs into a new diff with “synergistic” quality—a cross-model “council,” not merely best-of-N selection.
  • Cloud agents are pulling development out of the individual IDE and into collaborative coordination surfaces such as Slack. Teammates can summon an agent inside a product thread, add context, tag relevant humans, inspect the resulting artifacts, and decide whether to merge; swyx described the same pattern spanning marketing, design, sales, and legal. The human conversation increasingly concentrates on “do we want to ship this?” and “is this the right UX?” while implementation recedes.
  • Cursor expects agent economics to climb from $20-a-month autocomplete through hundreds for local agents to thousands—and potentially tens of thousands—per human using parallel cloud workers. Its explanation is Jevons paradox: lower-cost software production expands ambition and consumption, while one person equipped to do the work of ten can rationally buy much more inference. The implied demand covers models, persistent VMs, CI capacity, review systems, and the surrounding production pipeline.
  • The cloud crossover is not complete because environment setup, durable memory, and harness self-awareness remain hard. Alessio Fanelli predicts cloud-agent volume will surpass local agents before year-end and exceed 2× local volume by year-end, while explicitly saying it may take longer than people expect. Cursor sees the unlock in agents that remember repository-specific quirks, audit gaps in their own instructions, and understand both what their environment permits and how to improve their own context safely.

Deep dive

1. Cloud agents replace “hand coding” with longer delegation loops

  • Cursor’s progression runs from Tab and autocomplete to local agents and then cloud agents working on their own computers. Typing code character by character is already becoming what the team jokingly calls “hand coding”—“Oh, that’s cute. You’re so boomer.”

  • Earlier cloud agents ran in blank VMs and effectively “sight-read code and spit out tokens and hope that you had done the right thing.” The launch onboards each machine like a developer environment, then gives the model terminal, applications, pixels, coordinates, and the ability to run what it writes.

  • The interaction unit is expanding from a Tab completion to 30-second-to-three-minute tasks, then three-minute, 30-minute, and three-hour assignments. Instead of agents handing back diffs that immediately require inspection, Cursor wants users to receive tested previews and operate at a higher abstraction.

2. A tested PR, demo video, and live VM form one review package

  • In the demo, an agent worked for half an hour because it started development servers, tested the feature end to end, and iterated when necessary. The desired handoff is an “I tested it PR,” analogous to a human waiting until work is genuinely ready before requesting review.

  • Testing is the default but calibrated: trivial copy changes may skip it, complex work should not, and users can invoke /no-test or encode repository-specific exceptions in AGENTS.md. The model presently decides when the default guidance applies.

  • Videos are the second pillar because reviewing generated code is becoming a bottleneck. The sharpest example of underspecification was a request that says “toggle” while the implementation returns a checkbox; a video makes the shared artifact and alignment failure obvious immediately.

  • The third pillar is full remote desktop and terminal control. A video may justify merging, but more often it establishes that the direction is sound; the user can then inspect the live preview and send two or three follow-ups until the feature is ready.

3. Full-computer access makes bug reproduction a product primitive

  • To test an oversized-secret error, the agent independently opened DevTools, generated 5,000 “A” characters with JavaScript, pasted them into the field, and triggered the new error. The example joined backend error handling to frontend verification without being told how to exercise the limit.

  • Cursor turned the reproduce-fix-verify pattern into /repro. For an attachment bug, the agent used the native file picker, proved that five supposedly removed images still reached another Cursor agent, fixed the code, and replayed the identical flow showing only one attachment.

  • swyx connected the workflow to reward hacking and red-green TDD: first demonstrate that the test fails, then make it pass. Cursor remains conservative about automatic reproduction because it adds runtime, but an explicit “fix this bug /repro” requests both evidentiary videos.

4. Slash commands turn internal operations into reusable agent workflows

  • Alessio Fanelli’s internal /fix-bb command routes Bugbot findings back to the original agent, preserving the prompt and implementation context that a generic autofix can lack. Cursor has also launched Bugbot Autofix for the cases where that extra history is unnecessary.

  • swyx highlighted a cloud-agent diagnosis command that fans out subagents over the Datadog MCP, searches logs, and returns candidate causes for one problematic agent instance. What could require manually trawling through logs becomes a single agent invocation.

  • Cursor has also passed one agent’s transcript into another, allowing the second to act as an external debugger or fork the conversation. The transcript includes the long execution history, while additional infrastructure attaches that history to the otherwise shared cloud-agent harness.

  • swyx’s strategic pushback was for Datadog: does a system-of-record vendor expose logs through MCP and let coding agents capture the self-healing workflow, or try to own it through its own agent product? Alessio Fanelli’s narrower answer was: “All I know is that I love the Datadog MCP.”

5. Slack is becoming Cursor’s collaborative IDE

  • Alessio Fanelli described Slack as “an IDE basically.” A Cursor task in an issue or product thread launches a cloud agent; team follow-ups let colleagues add context, inspect artifacts, and collaboratively move the work toward a PR.

  • Agents can inspect blame and tag the people who should join. swyx extended the example beyond developers: technical marketing, design, sales, and legal can correct the same agent from their respective domains while sharing one visible thread.

  • Alessio Fanelli’s through-line: what remains for humans is “the nugget of what is actually interesting”—whether to ship, which UX or form factor is right, and how to make intent obvious. Cursor only responds when explicitly mentioned, leaving room for humans to confer without the agent interrupting.

6. Code generation has outrun the path from PR to production

  • Cursor’s internal joke is that any product discussion quickly produces “I have a PR for that.” The harder transition is from possessing a first draft to being confident enough to merge it, so review has risen relative to raw token generation as the next bottleneck.

  • swyx surfaced the disagreement cleanly: one camp says AI-generated code requires AI review; another says reviews are dead and the video is enough. Alessio Fanelli kept the distinction—video checks feature-level alignment, while engineers still inspect files and Bugbot performs code-level review.

  • Bugbot’s internal credibility is behavioral, not theoretical: Cursor tells employees not to leave its comments unresolved. After merging two or three changes and later discovering that Bugbot had warned about the exact defect, swyx said, “you learn to wait for Bugbot.”

  • Parallel output means a 10-person startup may need “the DevEx and pipelines that a 10,000-person company used to need”: staged and gradual releases, automated regression checks, stacked diffs, and merge queues. swyx raised Graphite as part of that discussion; Alessio Fanelli said Cursor’s goal is an end-to-end software-creation experience.

7. The “brain in a box” is persistent, opinionated infrastructure

  • Users cannot yet choose VM sizes, though Cursor plans an EC2-like menu. The default environment is built by running installation commands and snapshotting a Linux filesystem; the longer-term desktop should also hibernate memory so an open browser page survives rehydration days later.

  • The team previously exposed a local-browser iframe through port forwarding, effectively tunneling a VM’s localhost. It unshipped that surface because the remote desktop became sufficiently low-latency and handled general tasks—such as native file uploads—that browser-only access could not.

  • Cursor also tested and removed a files app. The team argued that restricting direct editing encouraged the desired delegation pattern: the agent and user share desktop and terminal primitives, but Cursor Web does not invite people back into routine file-by-file “hand coding.”

  • The omission is intentional rather than permanent. Alessio Fanelli said Cursor ultimately wants users to work at a high level and “double click” into the lowest level when needed, while recognizing that constrained surfaces such as Slack can be cleaner precisely because they do not recreate a full editor.

8. Cursor is stopping short of owning deployment—for now

  • swyx contrasted Cursor with Lovable and Bolt: those products began in the cloud, own deployment and logs, and can close the debugging loop. He noted that roughly 50% of apps use Vercel, Next.js, Tailwind, and React, making a cursorapps.com hosting layer tempting.

  • The Cursor team largely accepted the logic but rejected hosting as today’s best bottleneck. Existing integrations such as the Datadog MCP can expose production state, while Cursor’s immediate priority is getting generated code safely through review and into customers’ current infrastructure.

  • Existing enterprise software is also unlike a zero-to-one app. Convincing a company such as Shopify to migrate deployment is a much harder proposition and “may never happen,” preserving Cursor’s ability to work across stacks at the cost of not owning the entire operational loop.

9. Model routing and cross-provider councils can beat a single winner

  • Alessio Fanelli’s usage changed with the frontier: he was an “Opus 4.5 maximalist,” then hard-switched to Codex 5.3. Cursor therefore wants explicit model choice for experts alongside defaults for users who expect the product to know which model works best.

  • swyx’s “agent lab” thesis is that every agent company eventually needs a router. Cursor already offers Auto in the desktop editor and expects a cloud equivalent, using its traffic, internal taste, and experience as the “arbiter” for users who do not want model loyalty.

  • Best-of-N is a subset of parallel agents: several models receive the same prompt in isolated cloud VMs, avoiding local worktree conflicts and port killing. Four 20-second demo videos are tractable to judge; four 700-line diffs are not. swyx suggested that worktrees may be phased out.

  • A more ambitious unshipped experiment added an agentic synthesizer above those candidates. It did not merely select a winner; it learned from multiple agents and wrote a new diff, with cross-provider base models producing “almost like a synergistic output”—the kind of system Andrej had called a “council.”

10. Subagents manage context; grind mode stretches work to days

  • In the demo, the parent could use a generic task interface: it might create one or five exploration subagents rather than requiring users to define every role. Built-ins include an Explore worker that can route to a faster model even when the parent uses Opus.

  • Computer use is another natural subagent boundary because its trajectories contain many images and long verification sequences. It can select a model suited to that task, then compress the rollout into a final message instead of polluting the parent’s context with every action.

  • Long-running mode, internally called “grind mode,” begins with planning and refuses execution until user and agent align. Cursor learned that an underspecified prompt might be tolerable for three minutes, but a task that can genuinely run for three days warrants substantial specification first.

  • The experimental browser required more throughput than one worker could deliver, so Cursor built “a society of workers and planners.” The browser itself is not production-ready, but the exercise exposed how orchestration and concurrency change what can be attempted.

11. The winning metric shifts from latency to system throughput

  • The central analogy was the engineering latency-throughput trade-off: the next unlock is not making “the water flow faster,” but making “the pipe much wider.” Parallel agents, subagents, and swarms can multiply completed work even when no individual task finishes sooner.

  • The discussion described a system of about 100 concurrent agents producing thousands of tokens per second as “a glimpse of the future.” It also said GitHub Actions had been overloaded by generating and pushing so much code—effectively as if headcount grew 10× when people run 10× as many agents.

  • Two developers operating browser-scale swarms would require a “mind-boggling” amount of inference. Alessio Fanelli suggested that even optimistic infrastructure buildout projections might underestimate demand if these systems begin producing economically valuable production code at scale.

  • The pricing progression mirrors that expansion: roughly $20 per month for autocomplete, hundreds for local iterative agents, and, as swyx argued, already thousands per human for parallel VM-backed work. The discussion sees “potentially tens of thousands and beyond” as leverage increases, invoking Jevons paradox rather than reduced consumption.

12. Humans move toward taste, orchestration, and fast judgment

  • A representative morning is ten agents launched at once. As each finishes, the developer spends 90–120 seconds watching its video, trying the desktop, injecting taste—“make it red”—and either starting CI or returning the agent to work before opening the next thread.

  • Cloud execution turns commuting, overnight time, and other “dead time” into productive capacity because the laptop need not remain open. swyx said he uses the web interface on his phone to review videos and unblock agents.

  • Hiring still selects for fundamentals and rapid judgment, not merely fluency with the newest agent feature. Models left unattended can create sloppy abstractions, so Cursor still values people who have built systems, recognize good patterns, refactor, and steer quickly in an environment that changed within three months.

  • Alessio Fanelli said roughly 1% of his coding is still manual and predicted he will write zero lines himself during December. The residue is “bare intent transfer”: tiny edits where prompting feels slower, plus prompts and prose where “the process of writing it is the thinking”; voice coding remains limited by technical spelling and precision.

13. Onboarding, memory, and self-awareness decide the cloud crossover

  • Alessio Fanelli predicts cloud agents will overtake local agents before year-end and reach more than 2× their volume by year-end, while warning that the crossover will take “longer than people think and longer than we think.” Sandboxes remain too slow and difficult to configure reliably.

  • Setup is not binary or permanent: dependencies change, databases move, and agents need new systems and secrets. Beyond installing the repository, they must learn particular commands, backend status checks, design trade-offs, and the quirks that define “how to be a good developer” in that codebase.

  • Alessio Fanelli’s view of memory has shifted toward dynamic file context—pointers, annotations, and semi-permanent files. More broadly, memory is a subset of self-auditability: an agent should identify missing knowledge, conflicting rules or skills, and DevEx failures, then propose annotations, links, or memory files to fill those gaps.

  • Self-awareness here means understanding the operating environment, not consciousness. A product can possess a capability while incorrectly telling users it cannot perform it; the harder frontier is letting agents understand their constraints and adjust their context or operating setup appropriately. swyx expects other industries eventually to undergo the same leverage and role changes now visible in software.