Seed Convex Plaid env vars from Cursor Cloud secrets

[x0ba]

Anonymous Convex on each cloud VM starts with no Plaid credentials, so /accounts → Connect account cannot talk to Plaid.

This commits a repo-managed .cursor/environment.json (install stays pnpm install) whose start command runs scripts/seed-convex-plaid-env.sh. That script copies PLAID_CLIENT_ID, PLAID_SECRET, and PLAID_ENV from Cursor Cloud secrets onto the local Convex deployment after npx convex init. Missing secrets are a no-op so the environment still boots.

Required follow-up (secrets cannot live in git): add these on the bud cloud environment Secrets tab, then start a new agent so start sees them:

• PLAID_CLIENT_ID
• PLAID_SECRET
• PLAID_ENV (optional; script defaults to sandbox)

New agents after this lands will pick up the repo environment.json. Existing running agents will not.

  

Note

Seed Convex env vars from Plaid secrets on Cursor Cloud environment start

• Adds scripts/seed-convex-plaid-env.sh which provisions an anonymous Convex deployment via npx convex init and sets PLAID_CLIENT_ID, PLAID_SECRET, and PLAID_ENV (defaulting to sandbox) from Cursor Cloud secrets.
• Configures .cursor/environment.json to run this script as the environment start command after pnpm install.
• Updates AGENTS.md to document that Plaid secrets live in the Cloud Secrets tab and are copied to Convex automatically on start; advises re-running the script manually if Plaid linking fails after starting Convex independently.
• The script exits silently with no error if PLAID_CLIENT_ID or PLAID_SECRET are unset, so the environment still starts cleanly without secrets configured.

^{Macroscope summarized 19a7409.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
bud	Ready	Preview	Aug 13, 2026 4:21am

[greptile-apps]

Greptile Summary

This change configures Cursor Cloud to install dependencies, initialize an anonymous local Convex deployment, and copy Plaid Cloud Secrets into that deployment. It also documents the required secret setup and the manual reseeding fallback.

The potential startup failure caused by an interactive or authenticated Convex initialization was disproved: the complete seeded startup path was run in an isolated worktree with safe dummy Plaid values, closed stdin, and no inherited Convex deployment state. Anonymous initialization and all three Plaid environment updates completed successfully.

Confidence Score: 5/5

The verified startup workflow initializes Convex anonymously and applies Plaid configuration without interactive setup, so the change is safe to merge.

The changed executable path completed successfully in an isolated environment, including anonymous deployment initialization and all intended environment updates. No actionable defects remain.

Files Needing Attention: No files need follow-up attention.

T-Rex Logs

What T-Rex did

• T-Rex ran the seed-convex-plaid-env.sh script in a disposable detached worktree with safe dummy Plaid values, closed stdin, cleared inherited Convex deployment variables, and a 90-second timeout.
• It observed npx convex init create an anonymous local deployment, followed by successful updates of PLAID_CLIENT_ID, PLAID_SECRET, and PLAID_ENV; the command exited in roughly six seconds.
• The startup hook completed its seeded path without interactive setup or authenticated Convex credentials.
• The disposable worktree was removed after execution, and no tracked repository files were modified.

_{Ran code and verified through T-Rex}

_{Reviews (1): Last reviewed commit: "Seed Convex Plaid env vars from Cursor C..." | Re-trigger Greptile}

[macroscopeapp]

Approvability

Verdict: Approved 19a7409

Developer environment configuration for Cursor Cloud with a helper script to seed Plaid credentials onto Convex during local development. No production code or runtime behavior changes - purely developer tooling and documentation.

^{You can customize Macroscope's approvability policy. Learn more.}