@cursor/bdk 0.2.1 → 0.2.3

package/dist/internal/hosting.d.ts

@@ -6,8 +6,8 @@
  * backend stays authoritative — these exist so mistakes fail fast and
  * locally with the same grammar the server enforces.
  */
-/** `hosting.egressDomains` cap (backend caps the deploy body at 20). */
-export declare const MAX_EGRESS_DOMAINS = 20;
+/** `hosting.egressDomains` cap (the manifest schema and deploy body agree). */
+export declare const MAX_EGRESS_DOMAINS = 64;
 /** Max secrets per deployment. */
 export declare const MAX_SECRETS = 32;
 /** Max secret value size in bytes. */

package/dist/internal/hosting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../src/internal/hosting.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,kCAAkC;AAClC,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,8BAA8B;AAC9B,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,YAAY,CAAC;AACrD,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,sDAAsD;AACtD,eAAO,MAAM,yBAAyB,EAAE,MAA+B,CAAC;AAIxE,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK3E;AAED;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,YAAI,2BAA2B,CAAU,CAAC;AAQ3F,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS3E;AAID,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}
+{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../src/internal/hosting.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,kCAAkC;AAClC,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,8BAA8B;AAC9B,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,YAAY,CAAC;AACrD,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,sDAAsD;AACtD,eAAO,MAAM,yBAAyB,EAAE,MAA+B,CAAC;AAIxE,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK3E;AAED;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,YAAI,2BAA2B,CAAU,CAAC;AAW3F,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASvE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS3E;AAID,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}

package/dist/internal/hosting.js

@@ -6,8 +6,8 @@
  * backend stays authoritative — these exist so mistakes fail fast and
  * locally with the same grammar the server enforces.
  */
-/** `hosting.egressDomains` cap (backend caps the deploy body at 20). */
-export const MAX_EGRESS_DOMAINS = 20;
+/** `hosting.egressDomains` cap (the manifest schema and deploy body agree). */
+export const MAX_EGRESS_DOMAINS = 64;
 /** Max secrets per deployment. */
 export const MAX_SECRETS = 32;
 /** Max secret value size in bytes. */
@@ -39,12 +39,18 @@ const SECRET_NAME_PATTERN = /^[A-Z][A-Z0-9_]*$/;
 // Lowercase hostname with >=2 labels, an alphabetic TLD, and at most one
 // leading `*.` wildcard. Labels: alphanumeric with interior hyphens.
 const EGRESS_DOMAIN_PATTERN = /^(\*\.)?([a-z0-9]([a-z0-9-]*[a-z0-9])?\.)+[a-z]+$/;
+/** `host:port` asks for raw TCP egress; a wildcard host has no address to open. */
+const EGRESS_TCP_PATTERN = /^([a-z0-9]([a-z0-9-]*[a-z0-9])?\.)+[a-z]+:([1-9]\d{0,4})$/;
 /** Returns a human error message, or undefined when the domain is valid. */
 export function validateEgressDomain(domain) {
     if (EGRESS_DOMAIN_PATTERN.test(domain)) {
         return undefined;
     }
-    return `Invalid egress domain ${JSON.stringify(domain)}: use a lowercase hostname with at least two labels and an alphabetic TLD (e.g. "api.example.com"), optionally with a single leading "*." wildcard.`;
+    const tcp = EGRESS_TCP_PATTERN.exec(domain);
+    if (tcp !== null && Number(tcp[3]) <= 65535) {
+        return undefined;
+    }
+    return `Invalid egress domain ${JSON.stringify(domain)}: use a lowercase hostname with at least two labels and an alphabetic TLD (e.g. "api.example.com"), optionally with a single leading "*." wildcard or a trailing ":port" for raw TCP.`;
 }
 /**
  * Returns a human error message, or undefined when the name is a valid

package/dist/internal/install-cursor-skills.d.ts

@@ -1,8 +1,8 @@
 /**
  * Offer to install the package's coding-agent skills into the user's
- * personal Cursor skills dir under `~/.cursor/skills/agentsdk/<skill>/`.
+ * personal Cursor skills dir under `~/.cursor/skills/bdk/<skill>/`.
  *
- * Cursor walks `~/.cursor/skills` recursively, so the `agentsdk/` folder is
+ * Cursor walks `~/.cursor/skills` recursively, so the `bdk/` folder is
  * only organizational — identity comes from the leaf folder that holds
  * SKILL.md. Installed copies get `alwaysApply: true` so Cursor injects the
  * skill body as a global rule instead of leaving it as an on-demand catalog
@@ -14,9 +14,7 @@
  * install, so `pnpm install` in everysphere does not overwrite `~/.cursor`.
  */
 /** Category folder under ~/.cursor/skills (Cursor discovers nested skills). */
-export declare const CURSOR_SKILLS_NAMESPACE = "agentsdk";
-/** Pre-rename install folder. Install deletes this so `/agentkit-*` rows disappear. */
-export declare const LEGACY_CURSOR_SKILLS_NAMESPACE = "agentkit";
+export declare const CURSOR_SKILLS_NAMESPACE = "bdk";
 /** How long the `init` offer waits for an answer before skipping the install. */
 export declare const SKILL_PROMPT_TIMEOUT_MS = 45000;
 /**
@@ -27,9 +25,9 @@ export declare const CURSOR_JULY_SKILLS_HOME_ENV = "CURSOR_JULY_SKILLS_HOME";
 /** Set to `1` to skip the postinstall skill copy. */
 export declare const CURSOR_JULY_SKIP_SKILL_INSTALL_ENV = "CURSOR_JULY_SKIP_SKILL_INSTALL";
 export interface PackageSkill {
-    /** Frontmatter `name` (e.g. agentsdk-create-agent). */
+    /** Frontmatter `name` (e.g. bdk-create-agent). */
     name: string;
-    /** Leaf install directory under agentsdk/ (e.g. create-agent). */
+    /** Leaf install directory under bdk/ (e.g. create-agent). */
     leafDir: string;
     /** Absolute path to the source skill directory in the package. */
     sourceDir: string;
@@ -42,19 +40,17 @@ export declare function cursorSkillsHome(home?: string): string;
  * (npm, pnpm, yarn, npx, global), not the everysphere source checkout.
  */
 export declare function isConsumerPackageInstall(packageRoot: string): boolean;
-/** `~/.cursor/skills/agentsdk` — where package skills are installed. */
-export declare function agentsdkCursorSkillsDir(skillsHome?: string): string;
-/** Pre-rename `~/.cursor/skills/agentkit`. */
-export declare function legacyAgentkitCursorSkillsDir(skillsHome?: string): string;
-/** Absolute install path for one skill: `…/agentsdk/<leafDir>`. */
+/** `~/.cursor/skills/bdk` — where package skills are installed. */
+export declare function bdkCursorSkillsDir(skillsHome?: string): string;
+/** Absolute install path for one skill: `…/bdk/<leafDir>`. */
 export declare function skillInstallPath(skill: Pick<PackageSkill, "leafDir">, skillsHome?: string): string;
 /**
  * Skills shipped next to the running package. Uses the frontmatter `name`
- * when present, otherwise `agentsdk-<dir>`.
+ * when present, otherwise `bdk-<dir>`.
  */
 export declare function listShippedPackageSkills(packageRoot?: string): Promise<PackageSkill[]>;
 /**
- * Skills that do not yet have a SKILL.md under ~/.cursor/skills/agentsdk/.
+ * Skills that do not yet have a SKILL.md under ~/.cursor/skills/bdk/.
  * Install still overwrites every shipped skill when the user confirms — this
  * helper is for messaging (fresh install vs update).
  */
@@ -67,15 +63,15 @@ export interface SkillInstallResult {
     installed: string[];
     /** Leaf dirs deleted because the package no longer ships them. */
     removed: string[];
-    /** True when leftover `~/.cursor/skills/agentkit` was deleted. */
-    removedLegacyNamespace: boolean;
+    /** Leftover namespace dirs deleted (`…/agentsdk`, `…/agentkit`). */
+    removedLegacyDirs: string[];
 }
 /**
- * Copy each skill directory into `skillsHome/agentsdk/<leafDir>/`.
+ * Copy each skill directory into `skillsHome/bdk/<leafDir>/`.
  * Always overwrites so a package upgrade refreshes local Cursor skills.
  * Strips monorepo-only frontmatter, sets `alwaysApply: true` so Cursor
  * loads the body into context, and removes leaf dirs no longer shipped.
- * Also deletes leftover `skillsHome/agentkit/` from the previous namespace.
+ * Also deletes leftover `skillsHome/agentsdk/` and `skillsHome/agentkit/`.
  */
 export declare function installCursorSkills(skills: readonly PackageSkill[], skillsHome?: string): Promise<SkillInstallResult>;
 /**
@@ -88,7 +84,7 @@ export interface SkillInstallPlan {
     shipped: PackageSkill[];
     /** Resolved `~/.cursor/skills`, to install into. */
     skillsHome: string;
-    /** Install target: `<skillsHome>/agentsdk`. */
+    /** Install target: `<skillsHome>/bdk`. */
     directory: string;
     /** Leaf dirs the package ships. */
     leaves: string[];
@@ -96,15 +92,15 @@ export interface SkillInstallPlan {
     firstInstall: boolean;
     /** Installed leaf dirs the package dropped; installing deletes them. */
     orphans: string[];
-    /** True when leftover `skillsHome/agentkit` still exists. */
-    hasLegacyNamespace: boolean;
+    /** Leftover namespace dirs that still exist. Installing deletes them. */
+    legacyDirs: string[];
 }
 /** What an install would do, for the offer and for `install-skills`. */
 export declare function planSkillInstall(options?: {
     packageRoot?: string;
     skillsHome?: string;
 }): Promise<SkillInstallPlan>;
-/** `Installed 9 Agent SDK skills`, what it dropped, and where it went. */
+/** `Installed 9 BDK skills`, what it dropped, and where it went. */
 export declare function formatSkillInstall(plan: SkillInstallPlan, result: SkillInstallResult): string;
 export type PackageInstallSkillSyncResult = {
     status: "installed";
@@ -123,7 +119,7 @@ export interface SyncCursorSkillsOnPackageInstallOptions {
     out?: (text: string) => void;
 }
 /**
- * Copy shipped coding-agent skills into ~/.cursor/skills/agentsdk during a
+ * Copy shipped coding-agent skills into ~/.cursor/skills/bdk during a
  * consumer `npm install` / `npx`. Never throws: a failed copy must not fail
  * the package install. No-op in the monorepo source tree and when
  * `CURSOR_JULY_SKIP_SKILL_INSTALL=1`.
@@ -140,7 +136,7 @@ export interface OfferInstallCursorSkillsOptions {
 }
 /**
  * On a TTY, offer to install/update every shipped package skill into
- * ~/.cursor/skills/agentsdk (always overwriting). No-op when non-interactive
+ * ~/.cursor/skills/bdk (always overwriting). No-op when non-interactive
  * or the package ships no skills. An unanswered prompt skips the install
  * rather than blocking the caller — see `SKILL_PROMPT_TIMEOUT_MS`.
  */

package/dist/internal/install-cursor-skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-cursor-skills.d.ts","sourceRoot":"","sources":["../../src/internal/install-cursor-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,aAAa,CAAC;AAElD,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,aAAa,CAAC;AAEzD,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE,qDAAqD;AACrD,eAAO,MAAM,kCAAkC,mCAAmC,CAAC;AAEnF,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAStD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAIrE;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,UAAU,GAAE,MAA2B,GAAG,MAAM,CAEvF;AAED,8CAA8C;AAC9C,wBAAgB,6BAA6B,CAAC,UAAU,GAAE,MAA2B,GAAG,MAAM,CAE7F;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EACpC,UAAU,GAAE,MAA2B,GACtC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,GAAE,MAAyB,GACrC,OAAO,CAAC,YAAY,EAAE,CAAC,CA4BzB;AAaD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAY1B;AAED,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kEAAkE;IAClE,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,UAAU,GAAE,MAA2B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CA4B7B;AA6DD;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAsBR;AAiCD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,+EAA+E;IAC/E,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6DAA6D;IAC7D,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuB5B;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAY7F;AAED,MAAM,MAAM,6BAA6B,GACrC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/D;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,OAAO,CAAC;CAC5D,CAAC;AAEN,MAAM,WAAW,uCAAuC;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,GAAE,uCAA4C,GACpD,OAAO,CAAC,6BAA6B,CAAC,CAgCxC;AAED,MAAM,WAAW,+BAA+B;IAC9C,4CAA4C;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAqDpD;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAsB9B"}
+{"version":3,"file":"install-cursor-skills.d.ts","sourceRoot":"","sources":["../../src/internal/install-cursor-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAQ7C,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE,qDAAqD;AACrD,eAAO,MAAM,kCAAkC,mCAAmC,CAAC;AAEnF,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAStD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAIrE;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,UAAU,GAAE,MAA2B,GAAG,MAAM,CAElF;AAMD,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EACpC,UAAU,GAAE,MAA2B,GACtC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,GAAE,MAAyB,GACrC,OAAO,CAAC,YAAY,EAAE,CAAC,CA4BzB;AAaD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAY1B;AAED,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,UAAU,GAAE,MAA2B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CA4B7B;AA8DD;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAsBR;AAiCD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,+EAA+E;IAC/E,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yEAAyE;IACzE,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuB5B;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAY7F;AAED,MAAM,MAAM,6BAA6B,GACrC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/D;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,OAAO,CAAC;CAC5D,CAAC;AAEN,MAAM,WAAW,uCAAuC;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,GAAE,uCAA4C,GACpD,OAAO,CAAC,6BAA6B,CAAC,CAgCxC;AAED,MAAM,WAAW,+BAA+B;IAC9C,4CAA4C;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAqDpD;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAsB9B"}

package/dist/internal/install-cursor-skills.js

@@ -1,8 +1,8 @@
 /**
  * Offer to install the package's coding-agent skills into the user's
- * personal Cursor skills dir under `~/.cursor/skills/agentsdk/<skill>/`.
+ * personal Cursor skills dir under `~/.cursor/skills/bdk/<skill>/`.
  *
- * Cursor walks `~/.cursor/skills` recursively, so the `agentsdk/` folder is
+ * Cursor walks `~/.cursor/skills` recursively, so the `bdk/` folder is
  * only organizational — identity comes from the leaf folder that holds
  * SKILL.md. Installed copies get `alwaysApply: true` so Cursor injects the
  * skill body as a global rule instead of leaving it as an on-demand catalog
@@ -29,9 +29,12 @@ import { CLI_COMMAND_NAME, packageRootDir } from "./distribution.js";
 import { parseFrontmatter } from "./frontmatter.js";
 import { stdoutPalette } from "./terminal-style.js";
 /** Category folder under ~/.cursor/skills (Cursor discovers nested skills). */
-export const CURSOR_SKILLS_NAMESPACE = "agentsdk";
-/** Pre-rename install folder. Install deletes this so `/agentkit-*` rows disappear. */
-export const LEGACY_CURSOR_SKILLS_NAMESPACE = "agentkit";
+export const CURSOR_SKILLS_NAMESPACE = "bdk";
+/**
+ * Earlier install folders. Deleted on install so stale skill ids stop
+ * being discovered next to the current copies.
+ */
+const LEGACY_CURSOR_SKILLS_NAMESPACES = ["agentsdk", "agentkit"];
 /** How long the `init` offer waits for an answer before skipping the install. */
 export const SKILL_PROMPT_TIMEOUT_MS = 45000;
 /**
@@ -61,21 +64,20 @@ export function isConsumerPackageInstall(packageRoot) {
     // matches when this runs (or is tested) on POSIX. Do not rewrite the path.
     return packageRoot.split(/[\\/]/).includes("node_modules");
 }
-/** `~/.cursor/skills/agentsdk` — where package skills are installed. */
-export function agentsdkCursorSkillsDir(skillsHome = cursorSkillsHome()) {
+/** `~/.cursor/skills/bdk` — where package skills are installed. */
+export function bdkCursorSkillsDir(skillsHome = cursorSkillsHome()) {
     return join(skillsHome, CURSOR_SKILLS_NAMESPACE);
 }
-/** Pre-rename `~/.cursor/skills/agentkit`. */
-export function legacyAgentkitCursorSkillsDir(skillsHome = cursorSkillsHome()) {
-    return join(skillsHome, LEGACY_CURSOR_SKILLS_NAMESPACE);
+function legacyCursorSkillsDirs(skillsHome) {
+    return LEGACY_CURSOR_SKILLS_NAMESPACES.map(name => join(skillsHome, name));
 }
-/** Absolute install path for one skill: `…/agentsdk/<leafDir>`. */
+/** Absolute install path for one skill: `…/bdk/<leafDir>`. */
 export function skillInstallPath(skill, skillsHome = cursorSkillsHome()) {
-    return join(agentsdkCursorSkillsDir(skillsHome), skill.leafDir);
+    return join(bdkCursorSkillsDir(skillsHome), skill.leafDir);
 }
 /**
  * Skills shipped next to the running package. Uses the frontmatter `name`
- * when present, otherwise `agentsdk-<dir>`.
+ * when present, otherwise `bdk-<dir>`.
  */
 export function listShippedPackageSkills() {
     return __awaiter(this, arguments, void 0, function* (packageRoot = packageRootDir()) {
@@ -121,7 +123,7 @@ function readPackageVersion(packageRoot) {
     });
 }
 /**
- * Skills that do not yet have a SKILL.md under ~/.cursor/skills/agentsdk/.
+ * Skills that do not yet have a SKILL.md under ~/.cursor/skills/bdk/.
  * Install still overwrites every shipped skill when the user confirms — this
  * helper is for messaging (fresh install vs update).
  */
@@ -143,15 +145,15 @@ export function findMissingCursorSkills(options) {
     });
 }
 /**
- * Copy each skill directory into `skillsHome/agentsdk/<leafDir>/`.
+ * Copy each skill directory into `skillsHome/bdk/<leafDir>/`.
  * Always overwrites so a package upgrade refreshes local Cursor skills.
  * Strips monorepo-only frontmatter, sets `alwaysApply: true` so Cursor
  * loads the body into context, and removes leaf dirs no longer shipped.
- * Also deletes leftover `skillsHome/agentkit/` from the previous namespace.
+ * Also deletes leftover `skillsHome/agentsdk/` and `skillsHome/agentkit/`.
  */
 export function installCursorSkills(skills_1) {
     return __awaiter(this, arguments, void 0, function* (skills, skillsHome = cursorSkillsHome()) {
-        const namespaceDir = agentsdkCursorSkillsDir(skillsHome);
+        const namespaceDir = bdkCursorSkillsDir(skillsHome);
         yield mkdir(namespaceDir, { recursive: true });
         const removed = yield orphanLeaves(namespaceDir, skills);
         for (const leaf of removed) {
@@ -174,8 +176,8 @@ export function installCursorSkills(skills_1) {
             }
             installed.push(skill.leafDir);
         }
-        const removedLegacyNamespace = yield removeLegacyCursorSkillsNamespace(skillsHome);
-        return { installed, removed, removedLegacyNamespace };
+        const removedLegacyDirs = yield removeLegacyCursorSkillsNamespaces(skillsHome);
+        return { installed, removed, removedLegacyDirs };
     });
 }
 function makeTreeWritable(root) {
@@ -218,29 +220,29 @@ function orphanLeaves(namespaceDir, skills) {
             .map(entry => entry.name);
     });
 }
-/** Drop leftover `skillsHome/agentkit` from the previous install namespace. */
-function removeLegacyCursorSkillsNamespace(skillsHome) {
+/** Drop leftover earlier install folders so stale skill ids are not discovered. */
+function removeLegacyCursorSkillsNamespaces(skillsHome) {
     return __awaiter(this, void 0, void 0, function* () {
-        const legacyDir = legacyAgentkitCursorSkillsDir(skillsHome);
-        try {
-            yield stat(legacyDir);
-        }
-        catch (_a) {
-            return false;
+        const present = yield existingLegacyCursorSkillsDirs(skillsHome);
+        for (const dir of present) {
+            yield rm(dir, { recursive: true, force: true });
         }
-        yield rm(legacyDir, { recursive: true, force: true });
-        return true;
+        return present;
     });
 }
-function hasLegacyCursorSkillsNamespace(skillsHome) {
+function existingLegacyCursorSkillsDirs(skillsHome) {
     return __awaiter(this, void 0, void 0, function* () {
-        try {
-            yield stat(legacyAgentkitCursorSkillsDir(skillsHome));
-            return true;
-        }
-        catch (_a) {
-            return false;
+        const present = [];
+        for (const dir of legacyCursorSkillsDirs(skillsHome)) {
+            try {
+                yield stat(dir);
+                present.push(dir);
+            }
+            catch (_a) {
+                continue;
+            }
         }
+        return present;
     });
 }
 /**
@@ -259,7 +261,7 @@ export function prepareSkillMarkdownForCursorInstall(content, packageVersion) {
     const adjustedBody = body.replace(/\[`docs\/([^`]+)`\]\(\.\.\/\.\.\/docs\/[^)]+\)/g, "docs/$1 in the @cursor/bdk package");
     if (adjustedBody.includes(PACKAGE_VERSION_PLACEHOLDER) &&
         (packageVersion === undefined || packageVersion.trim() === "")) {
-        throw new Error("Cannot install an Agent SDK skill without a package version.");
+        throw new Error("Cannot install a BDK skill without a package version.");
     }
     const versionBoundBody = packageVersion === undefined
         ? adjustedBody
@@ -301,7 +303,7 @@ export function planSkillInstall(options) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
         const skillsHome = (_a = options === null || options === void 0 ? void 0 : options.skillsHome) !== null && _a !== void 0 ? _a : cursorSkillsHome();
-        const directory = agentsdkCursorSkillsDir(skillsHome);
+        const directory = bdkCursorSkillsDir(skillsHome);
         const shipped = yield listShippedPackageSkills(options === null || options === void 0 ? void 0 : options.packageRoot);
         const present = yield Promise.all(shipped.map((skill) => __awaiter(this, void 0, void 0, function* () {
             try {
@@ -319,26 +321,26 @@ export function planSkillInstall(options) {
             leaves: shipped.map(skill => skill.leafDir),
             firstInstall: present.every(isPresent => !isPresent),
             orphans: yield orphanLeaves(directory, shipped),
-            hasLegacyNamespace: yield hasLegacyCursorSkillsNamespace(skillsHome),
+            legacyDirs: yield existingLegacyCursorSkillsDirs(skillsHome),
         };
     });
 }
-/** `Installed 9 Agent SDK skills`, what it dropped, and where it went. */
+/** `Installed 9 BDK skills`, what it dropped, and where it went. */
 export function formatSkillInstall(plan, result) {
     const noun = result.installed.length === 1 ? "skill" : "skills";
     const verb = plan.firstInstall ? "Installed" : "Updated";
-    const lines = [`${verb} ${result.installed.length} Agent SDK ${noun}`];
+    const lines = [`${verb} ${result.installed.length} BDK ${noun}`];
     if (result.removed.length > 0) {
         lines.push(`  removed:  ${result.removed.join(", ")}`);
     }
-    if (result.removedLegacyNamespace) {
-        lines.push(`  removed:  ${legacyAgentkitCursorSkillsDir(plan.skillsHome)} (legacy namespace)`);
+    for (const dir of result.removedLegacyDirs) {
+        lines.push(`  removed:  ${dir}`);
     }
     lines.push(`  location: ${plan.directory}`);
     return `${lines.join("\n")}\n`;
 }
 /**
- * Copy shipped coding-agent skills into ~/.cursor/skills/agentsdk during a
+ * Copy shipped coding-agent skills into ~/.cursor/skills/bdk during a
  * consumer `npm install` / `npx`. Never throws: a failed copy must not fail
  * the package install. No-op in the monorepo source tree and when
  * `CURSOR_JULY_SKIP_SKILL_INSTALL=1`.
@@ -379,7 +381,7 @@ export function syncCursorSkillsOnPackageInstall() {
 }
 /**
  * On a TTY, offer to install/update every shipped package skill into
- * ~/.cursor/skills/agentsdk (always overwriting). No-op when non-interactive
+ * ~/.cursor/skills/bdk (always overwriting). No-op when non-interactive
  * or the package ships no skills. An unanswered prompt skips the install
  * rather than blocking the caller — see `SKILL_PROMPT_TIMEOUT_MS`.
  */
@@ -401,7 +403,7 @@ export function offerInstallCursorSkills() {
         const noun = plan.shipped.length === 1 ? "skill" : "skills";
         const verb = plan.firstInstall ? "Install" : "Update";
         const c = stdoutPalette();
-        out(`${verb} ${plan.shipped.length} Agent SDK ${noun} in ${plan.directory}?\n`);
+        out(`${verb} ${plan.shipped.length} BDK ${noun} in ${plan.directory}?\n`);
         out(c.dim(`  ${plan.leaves.join(", ")}\n`));
         if (!plan.firstInstall) {
             out(c.dim("  (overwrites existing copies with the package version)\n"));
@@ -409,8 +411,8 @@ export function offerInstallCursorSkills() {
         if (plan.orphans.length > 0) {
             out(c.dim(`  (deletes ${plan.orphans.join(", ")})\n`));
         }
-        if (plan.hasLegacyNamespace) {
-            out(c.dim(`  (deletes leftover ${legacyAgentkitCursorSkillsDir(plan.skillsHome)})\n`));
+        for (const dir of plan.legacyDirs) {
+            out(c.dim(`  (deletes leftover ${dir})\n`));
         }
         const confirm = (_c = options.confirm) !== null && _c !== void 0 ? _c : (q => promptYesNo(q, {
             defaultYes: true,

package/dist/internal/legacy-command-guard.d.ts

@@ -12,6 +12,8 @@ export declare function deploymentArchitecture(args: {
     teamId: number;
     slug: string;
 }): Promise<"v1" | "v2">;
+/** `run --prod` returns a delivery; read the session after it is allocated. */
+export declare function v2HostedVerifyHint(slug?: string): string;
 export declare function unsupportedV2LegacyCommandError(slug: string): DeployApiError;
 export declare function isUnsupportedV2LegacyCommandError(error: unknown): error is DeployApiError;
 export declare function rejectV2ForLegacyCommand(args: {

package/dist/internal/legacy-command-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legacy-command-guard.d.ts","sourceRoot":"","sources":["../../src/internal/legacy-command-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,sBAAsB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEjF;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAavB;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAK5E;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAMzF;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB"}
+{"version":3,"file":"legacy-command-guard.d.ts","sourceRoot":"","sources":["../../src/internal/legacy-command-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,sBAAsB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGjF;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAavB;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,IAAI,SAAW,GAAG,MAAM,CAO1D;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAM5E;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAMzF;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB"}

package/dist/internal/legacy-command-guard.js

@@ -8,6 +8,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { DeployApiError } from "./deploy-client.js";
+import { CLI_COMMAND_NAME } from "./distribution.js";
 /**
  * Classify a hosted slug by probing the v2 control plane.
  *
@@ -33,8 +34,16 @@ export function deploymentArchitecture(args) {
         }
     });
 }
+/** `run --prod` returns a delivery; read the session after it is allocated. */
+export function v2HostedVerifyHint(slug = "<slug>") {
+    return (`\`${CLI_COMMAND_NAME} run --prod\` returns a delivery. ` +
+        `An accept without sessionId is expected. ` +
+        `Poll the delivery until the session is allocated, then ` +
+        `\`${CLI_COMMAND_NAME} session <ses_> --prod --slug ${slug}\`.`);
+}
 export function unsupportedV2LegacyCommandError(slug) {
-    return new DeployApiError(`This command is not supported for architecture v2 deployment "${slug}". The command stopped before calling the legacy v1 deployment API.`, 409);
+    return new DeployApiError(`This command is not supported for architecture v2 deployment "${slug}". ` +
+        `call and sessions stay on the v1 API. ${v2HostedVerifyHint(slug)}`, 409);
 }
 export function isUnsupportedV2LegacyCommandError(error) {
     return (error instanceof DeployApiError &&

package/dist/internal/mcp-host.d.ts

@@ -61,6 +61,12 @@ export declare class McpHost implements HostMcpRegistry {
      * call fails until the serve process restarts.
      */
     private withClient;
+    /**
+     * Cached per connection, but only for as long as the credentials it opened
+     * with still apply: a hosted deployment binds its secrets per request, so a
+     * rotated (or first-ever) value would otherwise never reach a client opened
+     * on an earlier turn.
+     */
     private getClient;
     private invalidateClient;
     private requireConnection;

package/dist/internal/mcp-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-host.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAKrB,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAS9C;CACF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAMvE;AAcD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACxF;AAED,qBAAa,OAAQ,YAAW,eAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgD;IACxE,OAAO,CAAC,gBAAgB,CAAqB;IAE7C,YAAY,WAAW,EAAE,oBAAoB,EAAE,EAI9C;IAED,gFAAgF;IAChF,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAErC;IAED;;;OAGG;IACH,aAAa,CAAC,UAAU,EAAE,oBAAoB,GAAG,IAAI,CAEpD;IAED,KAAK,IAAI,MAAM,EAAE,CAEhB;IAEK,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAUlE;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,UAAU,EAAE,oBAAoB,GAAG,aAAa,CAwCtD;IAEK,QAAQ,CACZ,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,iBAAiB,CAAC,CAa5B;IAEK,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5C;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAU3B;IAED;;;;;;;;OAQG;YACW,UAAU;IAcxB,OAAO,CAAC,SAAS;YAYH,gBAAgB;IAc9B,OAAO,CAAC,iBAAiB;YASX,OAAO;CAGtB;AASD,+BAA+B;AAC/B,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAU9D;AAKD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CAqB3F"}
+{"version":3,"file":"mcp-host.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AASrB,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAS9C;CACF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAMvE;AAoBD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACxF;AAED,qBAAa,OAAQ,YAAW,eAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,gBAAgB,CAAqB;IAE7C,YAAY,WAAW,EAAE,oBAAoB,EAAE,EAI9C;IAED,gFAAgF;IAChF,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAErC;IAED;;;OAGG;IACH,aAAa,CAAC,UAAU,EAAE,oBAAoB,GAAG,IAAI,CAEpD;IAED,KAAK,IAAI,MAAM,EAAE,CAEhB;IAEK,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAUlE;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,UAAU,EAAE,oBAAoB,GAAG,aAAa,CAwCtD;IAEK,QAAQ,CACZ,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAAC,iBAAiB,CAAC,CAa5B;IAEK,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5C;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAU3B;IAED;;;;;;;;OAQG;YACW,UAAU;IAcxB;;;;;OAKG;IACH,OAAO,CAAC,SAAS;YAwBH,gBAAgB;IAc9B,OAAO,CAAC,iBAAiB;YASX,OAAO;CAGtB;AASD,+BAA+B;AAC/B,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAU9D;AAKD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CAqB3F"}

package/dist/internal/mcp-host.js

@@ -24,6 +24,7 @@ import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { connectionAllowsTool, } from "../types.js";
+import { connectionCredentialsFingerprint, resolveConnectionEnvTemplates, } from "./connection-env.js";
 import { CLI_COMMAND_NAME as CLI } from "./distribution.js";
 import { createHostMcpOAuthProvider } from "./mcp-oauth.js";
 import { instrumentedMcpFetch, mcpTraceMeta, runMcpClientSpan } from "./otel/mcp.js";
@@ -138,13 +139,13 @@ export class McpHost {
     }
     dropClient(name) {
         return __awaiter(this, void 0, void 0, function* () {
-            const pending = this.clients.get(name);
+            const cached = this.clients.get(name);
             this.clients.delete(name);
-            if (pending === undefined) {
+            if (cached === undefined) {
                 return;
             }
             try {
-                yield (yield pending).close();
+                yield (yield cached.opened).close();
             }
             catch (_a) {
                 // Best-effort teardown.
@@ -153,7 +154,7 @@ export class McpHost {
     }
     close() {
         return __awaiter(this, void 0, void 0, function* () {
-            const opened = yield Promise.allSettled([...this.clients.values()]);
+            const opened = yield Promise.allSettled([...this.clients.values()].map(entry => entry.opened));
             this.clients.clear();
             yield Promise.allSettled(opened.map((settled) => __awaiter(this, void 0, void 0, function* () {
                 if (settled.status === "fulfilled") {
@@ -187,23 +188,41 @@ export class McpHost {
             }
         });
     }
+    /**
+     * Cached per connection, but only for as long as the credentials it opened
+     * with still apply: a hosted deployment binds its secrets per request, so a
+     * rotated (or first-ever) value would otherwise never reach a client opened
+     * on an earlier turn.
+     */
     getClient(name) {
-        let pending = this.clients.get(name);
-        if (pending === undefined) {
-            pending = this.connect(name).catch(error => {
-                this.clients.delete(name);
-                throw error;
-            });
-            this.clients.set(name, pending);
+        const credentials = connectionCredentialsFingerprint(this.requireConnection(name).transport);
+        const cached = this.clients.get(name);
+        if (cached !== undefined) {
+            if (cached.credentials === credentials) {
+                return cached.opened;
+            }
+            void this.dropClient(name);
         }
-        return pending;
+        // Only evict this entry: a connect that fails after its credentials were
+        // replaced would otherwise orphan the client that replaced it.
+        const entry = {
+            credentials,
+            opened: this.connect(name).catch(error => {
+                if (this.clients.get(name) === entry) {
+                    this.clients.delete(name);
+                }
+                throw error;
+            }),
+        };
+        this.clients.set(name, entry);
+        return entry.opened;
     }
     invalidateClient(name, opened) {
         return __awaiter(this, void 0, void 0, function* () {
-            const pending = this.clients.get(name);
-            if (pending !== undefined) {
+            const cached = this.clients.get(name);
+            if (cached !== undefined) {
                 try {
-                    if ((yield pending) === opened) {
+                    if ((yield cached.opened) === opened) {
                         this.clients.delete(name);
                     }
                 }
@@ -325,7 +344,7 @@ function openConnection(connection, oauthRedirectUrl) {
 function createTransport(connection, oauthRedirectUrl) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
-        const transport = connection.transport;
+        const transport = resolveConnectionEnvTemplates(connection.transport);
         if ("agent" in transport) {
             // Peers are resolved to concrete URLs by the serve host before any call
             // (SessionEngine.setResolvedConnections); reaching here means the

package/dist/internal/sdk-runner.d.ts

@@ -101,6 +101,8 @@ export declare function isUnavailableModelSelectionError(error: unknown): boolea
  * a loose "temporarily unavailable" substring.
  */
 export declare function isModelCapacityError(message: string | undefined, code?: string | undefined): boolean;
+/** GitHub token 429s share `resource_exhausted` with model capacity. */
+export declare function isGithubApiRateLimitMessage(message: string | undefined): boolean;
 export declare function isModelCapacityErrorMessage(message: string | undefined): boolean;
 /** Catalog refusal or capacity: the authored fallback list can still save the turn. */
 export declare function shouldFallbackToNextModel(message: string | undefined, code?: string | undefined): boolean;

package/dist/internal/sdk-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../../src/internal/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAOL,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAMnE,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,KAAK,CAAC,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,iBAAiB,EACf,cAAc,GACd,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,iBAAiB,GACjB,YAAY,GACZ,mBAAmB,GACnB,WAAW,GACX,OAAO,CACV,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAA4B,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,IAAI,EAAE;IACxD,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,GAAG,SAAS,CAYrB;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAwBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKvE;AAqBD;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEvF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAKT;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhF;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAET;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGxE;AAyDD,qBAAa,eAAgB,YAAW,WAAW;IAMrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IACtE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAElE,YAA6B,OAAO,GAAE,sBAA2B,EAOhE;IAEK,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA6C9D;IAED;;;;;OAKG;YACW,yBAAyB;IAiCvC,OAAO,CAAC,gBAAgB;YAWV,cAAc;IAuHtB,KAAK,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAelF;IAED;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAKpE;IAED;;;;;;;;;;OAUG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAMpC;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAU7B;IAED,OAAO,CAAC,QAAQ;IA0BhB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,GAAG;IAIX;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;IAkB1B;;;OAGG;YACW,iBAAiB;YAgCjB,SAAS;YAOT,cAAc;YAsCd,cAAc;IA4C5B,OAAO,CAAC,YAAY;IAQpB;;;OAGG;YACW,mBAAmB;IAiBjC,OAAO,CAAC,QAAQ;CAajB;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAMlF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAQpE;AA2FD,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,CAExE"}
+{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../../src/internal/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAOL,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAMnE,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,KAAK,CAAC,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,iBAAiB,EACf,cAAc,GACd,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,iBAAiB,GACjB,YAAY,GACZ,mBAAmB,GACnB,WAAW,GACX,OAAO,CACV,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAA4B,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,IAAI,EAAE;IACxD,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,GAAG,SAAS,CAYrB;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAwBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKvE;AAqBD;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEvF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAQT;AAED,wEAAwE;AACxE,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKhF;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhF;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAET;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGxE;AAyDD,qBAAa,eAAgB,YAAW,WAAW;IAMrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IACtE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAElE,YAA6B,OAAO,GAAE,sBAA2B,EAOhE;IAEK,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA6C9D;IAED;;;;;OAKG;YACW,yBAAyB;IAiCvC,OAAO,CAAC,gBAAgB;YAWV,cAAc;IAuHtB,KAAK,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAelF;IAED;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAKpE;IAED;;;;;;;;;;OAUG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAMpC;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAU7B;IAED,OAAO,CAAC,QAAQ;IA0BhB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,GAAG;IAIX;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;IAkB1B;;;OAGG;YACW,iBAAiB;YAgCjB,SAAS;YAOT,cAAc;YAsCd,cAAc;IA4C5B,OAAO,CAAC,YAAY;IAQpB;;;OAGG;YACW,mBAAmB;IAiBjC,OAAO,CAAC,QAAQ;CAajB;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAMlF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAQpE;AA2FD,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,CAExE"}

package/dist/internal/sdk-runner.js

@@ -115,11 +115,21 @@ export function isUnavailableModelSelectionError(error) {
  * a loose "temporarily unavailable" substring.
  */
 export function isModelCapacityError(message, code) {
+    if (isGithubApiRateLimitMessage(message)) {
+        return false;
+    }
     if (code !== undefined && /^(resource_exhausted|unavailable)$/i.test(code)) {
         return true;
     }
     return message !== undefined && /resource_exhausted|\[unavailable\]/i.test(message);
 }
+/** GitHub token 429s share `resource_exhausted` with model capacity. */
+export function isGithubApiRateLimitMessage(message) {
+    if (message === undefined) {
+        return false;
+    }
+    return /github/i.test(message) && /(rate limit|\b429\b)/i.test(message);
+}
 export function isModelCapacityErrorMessage(message) {
     return isModelCapacityError(message);
 }