@cursor/bdk 0.2.18 → 0.2.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/bdk",
-  "version": "0.2.18",
+  "version": "0.2.21",
   "description": "Build, test, and deploy BDK bots and agents as code on Cursor's agent harness.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {
@@ -35,6 +35,7 @@
     "!templates/pr-autofixer/README.md",
     "docs/**/*.md",
     "!docs/.cursor/**",
+    "!docs/design/**",
     "!docs/templates/pr-autofixer.md",
     "scripts/install-cursor-skills.mjs",
     "package.json",
@@ -299,7 +300,7 @@
   },
   "dependencies": {
     "@bazel/runfiles": "6.5.0",
-    "@cursor/sdk": "1.0.35",
+    "@cursor/sdk": "1.0.37",
     "@modelcontextprotocol/sdk": "1.30.0",
     "@octokit/auth-app": "^7.2.0",
     "@octokit/rest": "^21.1.1",
@@ -363,11 +364,11 @@
     "vitest": "^4.0.18",
     "yaml": "^2.4.2",
     "zustand": "^5.0.9",
-    "@anysphere/agent-exec": "1.0.0",
     "@anysphere/agent-store-sync": "1.0.0",
-    "@anysphere/context": "1.0.0",
+    "@anysphere/agent-exec": "1.0.0",
     "@anysphere/proto": "1.0.0",
-    "@anysphere/ui": "1.0.0"
+    "@anysphere/ui": "1.0.0",
+    "@anysphere/context": "1.0.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && node scripts/bundle-publish-shims.mjs && node scripts/copy-extension-assets.mjs && pnpm run build:playground && pnpm run docs:build",

package/skills/evals/SKILL.md

@@ -104,7 +104,7 @@ Severity is on the handle: default gate; `.soft()` tracked;
 ## Side effects
 
 Eval sessions run real tools. Guard actuation with
-`ctx.session.purpose === "eval"` in the tool, hook, or `defineResult`
+`ctx.session.purpose === "eval"` in the tool or hook
 and return a shaped result so `calledTool` can still assert the
 decision.
 

package/skills/framework-map/SKILL.md

@@ -54,13 +54,15 @@ Path is identity. Full list: README "Folder structure".
 | `bot/channels/*.ts` | Slack / GitHub / custom HTTP |
 | `bot/hooks/*.ts` | Observe-only |
 | `bot/artifacts.ts` | Durable tagged outputs (`defineArtifacts`) |
-| `bot/result.ts` | Host `commit` on the final assistant text (`defineResult`; `throw` or `ctx.reject`) |
 | `bot/otel.ts` | Factory-only OpenTelemetry (`defineOtel`) |
 | `bot/schedules/*` | Cron. Never auto-fire under `--dev` |
 | `bot/sandbox/workspace/` | Session seed files (local only) |
 | `bot/lib/` | Import-only. Never discovered |
 | `evals/**/*.eval.ts` | Case id is the path under `evals/` |
 
+Discovery rejects `bot/result.ts`. To act on a turn's decision, record it with
+an authored tool and act on it from a `turn.completed` hook.
+
 ## Runtime
 
 Turns run on the serve host. Server tools, agent tools, skills, and

package/skills/otel/SKILL.md

@@ -34,7 +34,9 @@ customer agent. Hosted secrets can arrive after startup; env and
 | Logs | off (`logs: true` or `OTEL_LOGS_EXPORTER=otlp`) |
 
 Prompt text and tool payloads stay off the wire unless you set
-`OTEL_LOG_USER_PROMPTS` / `OTEL_LOG_TOOL_CONTENT`.
+`OTEL_LOG_USER_PROMPTS` / `OTEL_LOG_TOOL_CONTENT`. A failed tool
+span status includes a short failure reason. BDK keeps its own
+exporters when the process already has a provider.
 
 ## Custom metrics
 
@@ -46,5 +48,4 @@ ctx.host.otel.record("abc.approval.duration_ms", 1420);
 
 Prefix names with team or agent. No custom spans. Join on
 `agent_sdk.session_id` / `cursor.conversation.id` and
-`agent_sdk.agent`. Run `serve` as its own process when BDK
-should own the destination.
+`agent_sdk.agent`.

package/templates/agentic-owners/bot/lib/owners/matching.ts

@@ -3,11 +3,43 @@
 
 import { minimatch } from "minimatch";
 
+export type PatternMatchOptions = {
+  /**
+   * When true, a `dir/` pattern whose directory is a glob claims the files
+   * under every directory the glob matches, as gitignore does. A directory
+   * that starts with `!` stays literal either way.
+   */
+  readonly globDirectoryPatterns?: boolean;
+};
+
+export const AO_GLOB_DIRECTORY_PATTERNS_ENV = "AO_GLOB_DIRECTORY_PATTERNS";
+
 /**
- * CODEOWNERS-style path matching. Complex prefixes before a terminal `/**`
+ * The glob-directory switch from `AO_GLOB_DIRECTORY_PATTERNS`: `1`, `true` or
+ * `yes` turns it on, and anything else, unset included, leaves it off. Turn it
+ * on only after the Origin shadow counter
+ * `origin.agentic_owners.glob_dir_shadow_mismatch` has run and its owner has
+ * reviewed the repos, files and patterns it reports.
+ */
+export function globDirectoryPatternsFromEnv(
+  env: Readonly<Record<string, string | undefined>> = process.env,
+): PatternMatchOptions {
+  const value = env[AO_GLOB_DIRECTORY_PATTERNS_ENV]?.trim().toLowerCase();
+  return { globDirectoryPatterns: value === "1" || value === "true" || value === "yes" };
+}
+
+/**
+ * CODEOWNERS-style path matching. While the glob-directory switch is off, a
+ * `dir/` pattern is read literally, a glob included: `src/d?cs/` claims only
+ * files under a directory named `src/d?cs`. With it on, the glob matches
+ * directories as in gitignore. Complex prefixes before a terminal `/**`
  * deliberately fall through to minimatch below.
  */
-export function patternMatchesFile(pattern: string, filepath: string): boolean {
+export function patternMatchesFile(
+  pattern: string,
+  filepath: string,
+  options: PatternMatchOptions = globDirectoryPatternsFromEnv(),
+): boolean {
   const patternIsRooted = pattern.startsWith("/");
   const normalizedPattern = pattern.replace(/^\/+/, "");
   const normalizedPath = filepath.replace(/^\/+/, "");
@@ -32,6 +64,16 @@ export function patternMatchesFile(pattern: string, filepath: string): boolean {
     return globMatches(normalizedPath, `${literalPrefix}*`);
   }
 
+  const globDirectory =
+    options.globDirectoryPatterns === true ? globDirectoryOf(normalizedPattern) : undefined;
+  if (globDirectory !== undefined) {
+    const rootLevelOnly = patternIsRooted && !globDirectory.includes("/");
+    return ancestorDirectories(normalizedPath).some(
+      (ancestor) =>
+        !(rootLevelOnly && ancestor.includes("/")) && globMatches(ancestor, globDirectory),
+    );
+  }
+
   if (normalizedPattern.endsWith("/")) {
     const prefix = normalizedPattern.replace(/\\(.)/g, "$1").replace(/\/+$/, "");
     if (!patternIsRooted && !prefix.includes("/")) {
@@ -63,6 +105,19 @@ function hasComplexGlob(pattern: string): boolean {
   return /[*?[\]{}!()+@]/.test(pattern);
 }
 
+function globDirectoryOf(normalizedPattern: string): string | undefined {
+  if (!normalizedPattern.endsWith("/")) {
+    return undefined;
+  }
+  const directory = normalizedPattern.replace(/\/+$/, "");
+  return hasComplexGlob(directory) && !directory.startsWith("!") ? directory : undefined;
+}
+
+function ancestorDirectories(filepath: string): string[] {
+  const segments = filepath.split("/").slice(0, -1);
+  return segments.map((_, index) => segments.slice(0, index + 1).join("/"));
+}
+
 /** Higher score means a more specific pattern (used to break ties within one policy.yml). */
 export function patternSpecificity(pattern: string): number {
   const normalized = pattern.replace(/^\/+/, "");

package/templates/pr-autofixer/bot/tools/drive_pr.ts

@@ -1,5 +1,4 @@
-import { defineTool } from "@cursor/bdk/tools";
-import type { ToolExecuteResult } from "@cursor/bdk/tools";
+import { defineTool, type ToolExecuteResult } from "@cursor/bdk/tools";
 import { driveStartBodySchema } from "../lib/drive-schemas.js";
 import { startDrive } from "../lib/start-drive.js";