@cursor/bdk 0.2.23 → 0.2.25

package/dist/extensions/cursor-grokbot-agents/extension.js

@@ -29,7 +29,7 @@
  * extension keeps the agent where it is and lets it talk to *other* Grok
  * Bot agents.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineExtension } from "../../extensions.js";
 /** The backend's session name limit. */
 export const AGENT_NAME_MAX_LENGTH = 255;

package/dist/extensions/cursor-grokbot-agents/lib/backend.js

@@ -7,7 +7,7 @@
  * after a cursor, with the turn's status alongside.
  */
 import { randomUUID } from "node:crypto";
-import { z } from "zod";
+import { z } from "zod/v3";
 import { cursorExternalApiUrl, resolveApiKeySync, SIGN_IN_HINT, } from "../../../internal/cursor/credentials.js";
 import extension from "../extension.js";
 const REQUEST_TIMEOUT_MS = 60_000;

package/dist/extensions/cursor-grokbot-agents/lib/contacts.js

@@ -6,7 +6,7 @@
  * since that caller last read, and a lookup by name for `check` and
  * `interrupt`, which never create an agent the caller has not spoken to.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { KeyedLock } from "./lock.js";
 const PREFIX = "grokbot-agents";
 const contactsSchema = z.array(z.object({

package/dist/extensions/cursor-grokbot-agents/lib/inputs.d.ts

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 export declare const agentName: z.ZodOptional<z.ZodString>;
 export declare const waitSeconds: z.ZodDefault<z.ZodNumber>;
 //# sourceMappingURL=inputs.d.ts.map

package/dist/extensions/cursor-grokbot-agents/lib/inputs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inputs.d.ts","sourceRoot":"","sources":["../../../../src/extensions/cursor-grokbot-agents/lib/inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAM9C,CAAC;AAEJ,eAAO,MAAM,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAQ/C,CAAC"}
+{"version":3,"file":"inputs.d.ts","sourceRoot":"","sources":["../../../../src/extensions/cursor-grokbot-agents/lib/inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAI3B,eAAO,MAAM,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAM9C,CAAC;AAEJ,eAAO,MAAM,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAQ/C,CAAC"}

package/dist/extensions/cursor-grokbot-agents/lib/inputs.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { AGENT_NAME_MAX_LENGTH } from "../extension.js";
 import { DEFAULT_WAIT_SECONDS, MAX_WAIT_SECONDS } from "./conversation.js";
 export const agentName = z

package/dist/extensions/cursor-grokbot-agents/tools/ask.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 import extension from "../extension.js";
 import { ask as askAgent } from "../lib/conversation.js";

package/dist/extensions/cursor-grokbot-agents/tools/check.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 import { check as checkAgent } from "../lib/conversation.js";
 import { agentName, waitSeconds } from "../lib/inputs.js";

package/dist/extensions/cursor-grokbot-agents/tools/interrupt.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 import { interrupt as interruptAgent } from "../lib/conversation.js";
 import { agentName } from "../lib/inputs.js";

package/dist/extensions/cursor-grokbot-agents/tools/list.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 import extension from "../extension.js";
 import { listContacts } from "../lib/contacts.js";

package/dist/extensions/improve/extension.js

@@ -24,7 +24,7 @@
  * repository checked out needs no second mount: the skill has it work in
  * that checkout.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineExtension } from "../../extensions.js";
 const line = z.string().trim().min(1);
 const improve = defineExtension({

package/dist/extensions/jev/extension.js

@@ -20,7 +20,7 @@
  * Hosted deploys allowlist `api.typesafe.ai` for the mounting agent and
  * expect a `TYPESAFE_API_KEY` secret.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineExtension } from "../../extensions.js";
 import { DEFAULT_EVALUATION_MODEL, DEFAULT_TYPESAFE_HOST, TYPESAFE_API_KEY_ENV, } from "./lib/evaluate.js";
 const config = z

package/dist/extensions/jev/tools/evaluate.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 import extension from "../extension.js";
 import { evaluate } from "../lib/evaluate.js";

package/dist/extensions/slack-communication/extension.js

@@ -18,7 +18,7 @@
  * through the channel Slack client. The tools do not call Slack.
  * `post-update` returns a ts for edit and delete.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineExtension } from "../../extensions.js";
 const slackCommunication = defineExtension({
     root: import.meta.dirname,

package/dist/extensions/slack-communication/tools/delete-message.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { has } from "../../../channels/slack/agentic-posted.js";
 import { MAX_REASON_CHARS } from "../../../channels/slack/agentic-signals.js";
 import { defineTool } from "../../../tools.js";

package/dist/extensions/slack-communication/tools/edit-message.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { has } from "../../../channels/slack/agentic-posted.js";
 import { MAX_UPDATE_CHARS } from "../../../channels/slack/agentic-signals.js";
 import { defineTool } from "../../../tools.js";

package/dist/extensions/slack-communication/tools/post-card.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 const postCard = defineTool({
     description: [

package/dist/extensions/slack-communication/tools/post-file.js

@@ -1,6 +1,6 @@
 import { realpathSync, statSync } from "node:fs";
 import { basename, extname, isAbsolute, sep } from "node:path";
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../../tools.js";
 const ALLOWED = new Set([
     ".png",

package/dist/extensions/slack-communication/tools/post-update.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { reserve } from "../../../channels/slack/agentic-posted.js";
 import { MAX_UPDATE_CHARS } from "../../../channels/slack/agentic-signals.js";
 import { defineTool } from "../../../tools.js";

package/dist/extensions/slack-communication/tools/react.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { emojiName } from "../../../channels/slack/agentic-signals.js";
 import { defineTool } from "../../../tools.js";
 const react = defineTool({

package/dist/extensions/slack-communication/tools/set-status.js

@@ -1,4 +1,4 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { SLACK_STATUS_MAX_LEN } from "../../../channels/slack/constants.js";
 import { defineTool } from "../../../tools.js";
 const setStatus = defineTool({

package/dist/extensions.d.ts

@@ -11,7 +11,7 @@
  * ```ts
  * // extension.ts
  * import { defineExtension } from "@cursor/bdk/extensions";
- * import { z } from "zod";
+ * import { z } from "zod/v3";
  *
  * export default defineExtension({
  *   root: import.meta.dirname,

package/dist/extensions.js

@@ -11,7 +11,7 @@
  * ```ts
  * // extension.ts
  * import { defineExtension } from "@cursor/bdk/extensions";
- * import { z } from "zod";
+ * import { z } from "zod/v3";
  *
  * export default defineExtension({
  *   root: import.meta.dirname,

package/dist/internal/approval-gate.d.ts

@@ -8,10 +8,12 @@
  * reloads. After a process restart the in-flight SDK tool callback is gone,
  * so resolve returns false and the host treats the park as interrupted.
  */
-import type { ApprovalDecision, PendingApproval } from "../types.js";
+import type { ApprovalDecision, AuthContext, PendingApproval } from "../types.js";
 export interface ApprovalResolution {
     decision: ApprovalDecision;
     by?: string;
+    /** The resolver's auth context, when the host knows it. */
+    approver?: AuthContext;
 }
 export declare class ApprovalGate<T extends {
     callId: string;
@@ -22,7 +24,7 @@ export declare class ApprovalGate<T extends {
      * Unblock a waiter. Returns false when there is no live waiter (e.g. the
      * host restarted while the tool call was parked).
      */
-    resolve(sessionId: string, callId: string, decision: ApprovalDecision, resolvedBy?: string): boolean;
+    resolve(sessionId: string, callId: string, decision: ApprovalDecision, resolvedBy?: string, approver?: AuthContext): boolean;
     has(sessionId: string, callId: string): boolean;
     list(sessionId: string): T[];
     /** Drop waiters for a session (e.g. turn already failed). */

package/dist/internal/approval-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-gate.d.ts","sourceRoot":"","sources":["../../src/internal/approval-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAMrE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAOD,qBAAa,YAAY,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe;IACtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IAExD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAY5D;IAED;;;OAGG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,EAC1B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAaT;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9C;IAED,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,EAAE,CAS3B;IAED,6DAA6D;IAC7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,GAAE,gBAAyB,GAAG,IAAI,CAS1E;IAED,wDAAwD;IACxD,SAAS,CAAC,QAAQ,GAAE,gBAAyB,GAAG,IAAI,CAKnD;CACF"}
+{"version":3,"file":"approval-gate.d.ts","sourceRoot":"","sources":["../../src/internal/approval-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAMlF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAOD,qBAAa,YAAY,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe;IACtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IAExD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAY5D;IAED;;;OAGG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,EAC1B,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAcT;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9C;IAED,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,EAAE,CAS3B;IAED,6DAA6D;IAC7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,GAAE,gBAAyB,GAAG,IAAI,CAS1E;IAED,wDAAwD;IACxD,SAAS,CAAC,QAAQ,GAAE,gBAAyB,GAAG,IAAI,CAKnD;CACF"}

package/dist/internal/approval-gate.js

@@ -32,7 +32,7 @@ export class ApprovalGate {
      * Unblock a waiter. Returns false when there is no live waiter (e.g. the
      * host restarted while the tool call was parked).
      */
-    resolve(sessionId, callId, decision, resolvedBy) {
+    resolve(sessionId, callId, decision, resolvedBy, approver) {
         const key = approvalKey(sessionId, callId);
         const waiter = this.waiters.get(key);
         if (waiter === undefined) {
@@ -43,6 +43,7 @@ export class ApprovalGate {
         waiter.resolve({
             decision,
             by,
+            approver,
         });
         return true;
     }

package/dist/internal/builtin-tools/artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/internal/builtin-tools/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEtE,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAmBrD,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc,CA+BvE"}
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/internal/builtin-tools/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,eAAe,EAEf,cAAc,EAGf,MAAM,gBAAgB,CAAC;AAGxB,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AA0DrD,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc,CAgCvE"}

package/dist/internal/builtin-tools/artifacts.js

@@ -4,26 +4,57 @@
  * `AgentConfig.builtinTools`: its input schema and description are
  * generated from the declared kinds registry.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
+import * as z4 from "zod/v4";
 import { defineTool } from "../../tools.js";
+import { isZodV4Schema } from "../zod-schema.js";
 export const TAG_ARTIFACT_TOOL_NAME = "tag_artifact";
+const FREEFORM_DATA_DESCRIPTION = "Freeform JSON object payload for this kind.";
+const TITLE_DESCRIPTION = "Short human-readable label shown in artifact lists.";
+const KEY_DESCRIPTION = "Stable key, unique across kinds. Reusing it replaces that record instead of adding a new one.";
 function kindVariant(name, schema) {
     return z.object({
         kind: z.literal(name),
-        data: schema ?? z.object({}).passthrough().describe("Freeform JSON object payload for this kind."),
-        title: z.string().optional().describe("Short human-readable label shown in artifact lists."),
-        key: z
-            .string()
-            .trim()
-            .min(1)
-            .optional()
-            .describe("Stable key, unique across kinds. Reusing it replaces that record instead of adding a new one."),
+        data: schema ?? z.object({}).passthrough().describe(FREEFORM_DATA_DESCRIPTION),
+        title: z.string().optional().describe(TITLE_DESCRIPTION),
+        key: z.string().trim().min(1).optional().describe(KEY_DESCRIPTION),
     });
 }
+function kindVariantV4(name, schema) {
+    return z4.object({
+        kind: z4.literal(name),
+        data: schema ?? z4.looseObject({}).describe(FREEFORM_DATA_DESCRIPTION),
+        title: z4.string().optional().describe(TITLE_DESCRIPTION),
+        key: z4.string().trim().min(1).optional().describe(KEY_DESCRIPTION),
+    });
+}
+/**
+ * Kind schemas nest inside the tool's input schema, and a `zod/v4` schema
+ * cannot nest inside a `zod/v3` one (or the reverse), so the wrapper uses
+ * the kinds' own version.
+ */
+function tagArtifactInputSchema(kinds) {
+    const declared = kinds.flatMap(([, schema]) => (schema === undefined ? [] : [schema]));
+    const v4Count = declared.filter(isZodV4Schema).length;
+    if (v4Count > 0 && v4Count < declared.length) {
+        throw new Error("tag_artifact: artifact kind schemas mix zod/v3 and zod/v4; declare every kind schema with the same zod version");
+    }
+    if (v4Count === 0) {
+        const [first, ...rest] = kinds.map(([name, schema]) => kindVariant(name, schema));
+        if (first === undefined) {
+            throw new Error("tag_artifact requires at least one declared artifact kind");
+        }
+        return z.discriminatedUnion("kind", [first, ...rest]);
+    }
+    const [first, ...rest] = kinds.map(([name, schema]) => kindVariantV4(name, schema));
+    if (first === undefined) {
+        throw new Error("tag_artifact requires at least one declared artifact kind");
+    }
+    return z4.discriminatedUnion("kind", [first, ...rest]);
+}
 export function tagArtifactTool(config) {
     const kinds = Object.entries(config.kinds ?? {});
-    const [first, ...rest] = kinds.map(([name, kind]) => kindVariant(name, kind.schema));
-    if (first === undefined) {
+    if (kinds.length === 0) {
         // Discovery already errors on agentTool without kinds.
         throw new Error("tag_artifact requires at least one declared artifact kind");
     }
@@ -32,10 +63,12 @@ export function tagArtifactTool(config) {
         "Kinds:",
         ...kinds.map(([name, kind]) => `- ${name}: ${kind.description}`),
     ].join("\n");
+    const inputSchema = tagArtifactInputSchema(kinds.map(([name, kind]) => [name, kind.schema]));
     return defineTool({
         description,
-        inputSchema: z.discriminatedUnion("kind", [first, ...rest]),
-        async execute(input, ctx) {
+        inputSchema,
+        async execute(rawInput, ctx) {
+            const input = rawInput;
             const record = await ctx.artifacts.tag({
                 kind: input.kind,
                 data: input.data,

package/dist/internal/builtin-tools/reminders.js

@@ -4,7 +4,7 @@
  * framework's reminder fire prompt tells the model to call
  * `reminders_cancel` by name, so these tool names must not change.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { defineTool } from "../../tools.js";
 import { parseDuration } from "../duration.js";
 /** Floor for model-armed recurring wakes: each fire spends a model turn. */

package/dist/internal/channel-architecture.d.ts

@@ -6,7 +6,7 @@ import type { AgentArchitecture } from "../types.js";
  * these afterwards. Returns the author-facing error, or `undefined` when
  * the channel deploys as authored.
  *
- * On v2 every direct SCM webhook channel must name its secret so the
+ * On v2 every direct provider webhook channel must name its secret so the
  * control plane can terminate the provider's check at ingestion.
  */
 export declare function channelArchitectureError(architecture: AgentArchitecture | undefined, definition: object): string | undefined;

package/dist/internal/channel-architecture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-architecture.d.ts","sourceRoot":"","sources":["../../src/internal/channel-architecture.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,iBAAiB,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAKpB;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,iBAAiB,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CASpB"}
+{"version":3,"file":"channel-architecture.d.ts","sourceRoot":"","sources":["../../src/internal/channel-architecture.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,iBAAiB,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAKpB;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,iBAAiB,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CASpB"}

package/dist/internal/channel-architecture.js

@@ -1,6 +1,7 @@
 import { bitbucketChannelArchitectureError } from "../channels/bitbucket/bitbucket-channel.js";
 import { githubChannelArchitectureError } from "../channels/github/github-channel.js";
 import { gitlabChannelArchitectureError } from "../channels/gitlab/gitlab-channel.js";
+import { pagerDutyChannelArchitectureError } from "../channels/pagerduty/pagerduty-channel.js";
 /**
  * Per-channel constraints that hold only on one hosted architecture. The
  * channel constructors run at import time, before the agent's
@@ -8,7 +9,7 @@ import { gitlabChannelArchitectureError } from "../channels/gitlab/gitlab-channe
  * these afterwards. Returns the author-facing error, or `undefined` when
  * the channel deploys as authored.
  *
- * On v2 every direct SCM webhook channel must name its secret so the
+ * On v2 every direct provider webhook channel must name its secret so the
  * control plane can terminate the provider's check at ingestion.
  */
 export function channelArchitectureError(architecture, definition) {
@@ -37,5 +38,6 @@ export function channelArchitectureMigrationWarning(architecture, definition) {
 function v2ChannelArchitectureError(definition) {
     return (githubChannelArchitectureError(definition) ??
         gitlabChannelArchitectureError(definition) ??
-        bitbucketChannelArchitectureError(definition));
+        bitbucketChannelArchitectureError(definition) ??
+        pagerDutyChannelArchitectureError(definition));
 }

package/dist/internal/cli-deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-deploy.d.ts","sourceRoot":"","sources":["../../src/internal/cli-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAaH,OAAO,EAOL,sBAAsB,EAevB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,KAAK,SAAS,EAAwB,MAAM,oBAAoB,CAAC;AAE1E,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,gBAAgB,CAAC;AAqBxB,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG,aAAa,CAAC;AAEzC;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,MAAM,EAAE,SAAS,YAAY,EAAE,KAC5B,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;AAEpC,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,iFAAiF;IACjF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,qEAAqE;IACrE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,GAAG;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,gEAAgE;IAChE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,GAAG,MAAM,CAAC,CA8DtC;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAC,CA0B3F;AAMD,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoG1E;AAsPD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,OAAO,EAAE;IACP,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;CACtB,GACA,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAiChC;AAyuBD,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE/E;AAMD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAqGjB;AA2DD,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAiFjB;AAoBD,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAyBjB;AAED,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAkCjB;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAyBjB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAMD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CA6BjB;AASD,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAC/D,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAC/D,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAuDD,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAuDjB;AAMD,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAuCjB;AAiBD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAiGjB;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAoCjB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAqCjB;AAyJD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuCjG;AAyLD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC3B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,MAAM,CAeR;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAUtE"}
+{"version":3,"file":"cli-deploy.d.ts","sourceRoot":"","sources":["../../src/internal/cli-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAaH,OAAO,EAOL,sBAAsB,EAevB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAE,KAAK,SAAS,EAAwB,MAAM,oBAAoB,CAAC;AAE1E,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,gBAAgB,CAAC;AAqBxB,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG,aAAa,CAAC;AAEzC;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,MAAM,EAAE,SAAS,YAAY,EAAE,KAC5B,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;AAEpC,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,iFAAiF;IACjF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8DAA8D;IAC9D,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,qEAAqE;IACrE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,GAAG;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,gEAAgE;IAChE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,GAAG,MAAM,CAAC,CA8DtC;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAC,CA0B3F;AAMD,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoG1E;AAsPD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,OAAO,EAAE;IACP,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;CACtB,GACA,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAiChC;AA4vBD,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE/E;AAMD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAqGjB;AA2DD,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAiFjB;AAoBD,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAyBjB;AAED,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAkCjB;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAyBjB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAMD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CA6BjB;AASD,wBAAsB,UAAU,CAC9B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAC/D,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAC/D,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAuDD,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAuDjB;AAMD,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAuCjB;AAiBD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAiGjB;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAoCjB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAqCjB;AAyJD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuCjG;AAyLD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC3B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,MAAM,CAeR;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAUtE"}

package/dist/internal/cli-deploy.js

@@ -17,7 +17,8 @@ import { cursorExternalApiUrl, resolveApiKey, SIGN_IN_HINT } from "./cursor/cred
 import { authorizeCursorAccountConnectors } from "./cursor-account-mcp-auth.js";
 import { readDeployTemplate } from "./cursor-agent-template.js";
 import { AgentServeDeployClient, SEVERAL_AGENTS_DEPLOY_ALONE, DeployApiError, deploymentServiceAccountId, TERMINAL_AGENTKIT_DEPLOY_STATUSES, TERMINAL_DEPLOY_STATUSES, validateDeploymentSlug, } from "./deploy-client.js";
-import { channelCatchSecretNames, channelCredentialSecretNames } from "./deploy-manifest.js";
+import { channelCatchSecretNames, channelCredentialSecretNames, channelSecretAlternatives, } from "./deploy-manifest.js";
+import { unmetSecretAlternatives } from "./secret-alternatives.js";
 import { inferDeployGitSource } from "./deploy-source.js";
 import { describeError } from "./describe-error.js";
 import { formatDiagnostics, hasErrorDiagnostics, isAgentProjectDir, listChildAgentDirs, loadAgentProject, } from "./discovery.js";
@@ -910,6 +911,7 @@ async function readDeployManifest(dir) {
         credentialSecretNames: [
             ...new Set(project.channels.flatMap((channel) => channelCredentialSecretNames(channel.definition))),
         ],
+        secretAlternatives: project.channels.flatMap((channel) => channelSecretAlternatives(channel.definition)),
         hasScmChannels: project.channels.some((channel) => {
             const kind = channel.definition.meta?.kind;
             return kind === "github" || kind === "origin";
@@ -927,28 +929,35 @@ async function readDeployManifest(dir) {
  * requests with. Empty when the manifests declare none.
  */
 function declaredSecretNames(manifests) {
-    return [
-        ...new Set(manifests.flatMap((manifest) => manifest === undefined
-            ? []
-            : [
-                ...(manifest.hosting?.secretNames ?? []),
-                ...manifest.catchSecretNames,
-                ...manifest.credentialSecretNames,
-            ])),
-    ];
+    return {
+        names: [
+            ...new Set(manifests.flatMap((manifest) => manifest === undefined
+                ? []
+                : [
+                    ...(manifest.hosting?.secretNames ?? []),
+                    ...manifest.catchSecretNames,
+                    ...manifest.credentialSecretNames,
+                ])),
+        ],
+        alternatives: manifests.flatMap((manifest) => manifest?.secretAlternatives ?? []),
+    };
 }
 /**
  * Friendly post-deploy nudge: the manifest declares secrets the agent
  * expects, but the deployment does not have them all set yet.
  */
 function warnMissingSecrets(ctx, slug, declared, set) {
-    if (declared === undefined || declared.length === 0) {
+    for (const group of unmetSecretAlternatives(declared?.alternatives ?? [], set)) {
+        ctx.err(`warning: none of ${group.names.join(", ")} is set on ${slug}: ${group.unsetEffect}\n` +
+            `  set one with \`${CLI} secrets set ${slug} ${group.names[0]}\`\n`);
+    }
+    if (declared === undefined || declared.names.length === 0) {
         return;
     }
     const setNames = new Set(set ?? []);
     // Platform-managed names (CURSOR_*, hosted storage) are injected by the
     // control plane and never appear in secrets list — do not warn on them.
-    const missing = declared.filter((name) => !setNames.has(name) && !isReservedSecretName(name));
+    const missing = declared.names.filter((name) => !setNames.has(name) && !isReservedSecretName(name));
     if (missing.length === 0) {
         return;
     }

package/dist/internal/cli-pagerduty.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `bdk pagerduty …` — replay synthesized PagerDuty v3 webhooks into a
+ * local `pagerdutyChannel()` and list the discovered PagerDuty channels.
+ *
+ * PagerDuty subscriptions POST to a public URL, so live deliveries need a
+ * tunnel. Replay covers the local loop without one or a PagerDuty account:
+ * it builds v3 bodies for an incident and signs `X-PagerDuty-Signature`
+ * from `--secret` / `PAGERDUTY_WEBHOOK_SECRET` (unsigned when neither is
+ * set, which `serve --dev` admits from loopback).
+ */
+export interface PagerDutyCliOptions {
+    dir: string;
+    slug?: string;
+    channel?: string;
+    host?: string;
+    port?: number;
+    /** Explicit delivery URL (skips URL derivation). */
+    url?: string;
+    /** Comma/space-separated event types (`triggered` or `incident.triggered`), or `*`. */
+    events?: string;
+    /** Signing secret for `X-PagerDuty-Signature` (defaults to PAGERDUTY_WEBHOOK_SECRET). */
+    secret?: string;
+    json?: boolean;
+    /** replay: incident id the events name. */
+    incidentId?: string;
+    /** replay: note body for `incident.annotated`. */
+    comment?: string;
+    dryRun?: boolean;
+    out?: string;
+}
+export declare function cmdPagerDuty(subcommand: string | undefined, options: PagerDutyCliOptions): Promise<number>;
+//# sourceMappingURL=cli-pagerduty.d.ts.map

package/dist/internal/cli-pagerduty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-pagerduty.d.ts","sourceRoot":"","sources":["../../src/internal/cli-pagerduty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA8BH,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA4BD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAiBjB"}