@cursor/bdk 0.2.23 → 0.2.25

package/dist/internal/hosted-delivery.js

@@ -166,19 +166,22 @@ export async function dispatchHostedAdmission(input) {
  * prompt-form fires still follow up inside the runner.
  */
 async function dispatchHostedReminderAdmission(input, delivery) {
+    const fired = (result) => Response.json({
+        ok: true,
+        v: HOSTED_DELIVERY_PROTOCOL_VERSION,
+        outcome: result.outcome === "noop" ? "skip" : "task",
+        continuationReleased: result.outcome === "fired" &&
+            input.takeContinuationRelease?.(delivery.mailboxContinuationKey) === true
+            ? true
+            : undefined,
+    });
     const descriptor = parseHostedReminderFireDescriptorPayload(delivery.payload);
     if (descriptor !== undefined) {
         if (input.executeReminderDescriptor === undefined) {
             return transientHostedError(503, "reminder_dispatch_unavailable", "This guest has no reminder CP executor wired for hosted admission.");
         }
         try {
-            const result = await input.executeReminderDescriptor(descriptor);
-            const outcome = result.outcome === "noop" ? "skip" : "task";
-            return Response.json({
-                ok: true,
-                v: HOSTED_DELIVERY_PROTOCOL_VERSION,
-                outcome,
-            });
+            return fired(await input.executeReminderDescriptor(descriptor));
         }
         catch (error) {
             if (error instanceof UnknownReminderError) {
@@ -199,13 +202,7 @@ async function dispatchHostedReminderAdmission(input, delivery) {
         return terminalHostedError(400, "invalid_reminder_payload", "Expected reminder descriptor or legacy payload { reminderId, fireCount }.");
     }
     try {
-        const result = await input.fireReminder(payload.reminderId, payload.fireCount);
-        const outcome = result.outcome === "noop" ? "skip" : "task";
-        return Response.json({
-            ok: true,
-            v: HOSTED_DELIVERY_PROTOCOL_VERSION,
-            outcome,
-        });
+        return fired(await input.fireReminder(payload.reminderId, payload.fireCount));
     }
     catch (error) {
         if (error instanceof UnknownReminderError) {
@@ -426,9 +423,11 @@ export function registerHostedDeliveryRoute(input) {
      */
     const finishBoundSecrets = () => {
         const consumed = consumeBoundSecrets();
-        return consumed.ok
-            ? undefined
-            : transientHostedError(503, consumed.code, boundedMessage(consumed.message));
+        if (!consumed.ok) {
+            return transientHostedError(503, consumed.code, boundedMessage(consumed.message));
+        }
+        input.onSecretsReady?.();
+        return undefined;
     };
     const finishNetworkWait = async (phase) => {
         try {
@@ -852,6 +851,9 @@ export function registerHostedDeliveryRoute(input) {
                                     v: HOSTED_DELIVERY_PROTOCOL_VERSION,
                                     outcome: "send",
                                     consumedDeliveryIds,
+                                    continuationReleased: input.takeContinuationRelease?.(admitted.send.mailboxContinuationKey) === true
+                                        ? true
+                                        : undefined,
                                 },
                             };
                         // Finalize as late as possible so `post_drain` and `total`

package/dist/internal/hosting.d.ts

@@ -26,6 +26,12 @@ export declare function validateContainerImageName(name: string): string | undef
 export declare const PLATFORM_HOSTED_STORAGE_SECRET_NAMES: readonly ["AGENT_SERVE_DEPLOYMENT_ID"];
 /** Returns a human error message, or undefined when the domain is valid. */
 export declare function validateEgressDomain(domain: string): string | undefined;
+/**
+ * True when an `egressDomains` entry allows HTTPS to `hostname`: an exact
+ * match, or a `*.` wildcard that matches a subdomain. A `host:port` entry
+ * opens raw TCP and does not count.
+ */
+export declare function egressAllowsHost(domains: readonly string[], hostname: string): boolean;
 /**
  * Returns a human error message, or undefined when the name is a valid
  * secret name. Grammar only — reserved names are checked separately so the

package/dist/internal/hosting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../src/internal/hosting.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,kCAAkC;AAClC,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,8BAA8B;AAC9B,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,YAAY,CAAC;AACrD,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,sDAAsD;AACtD,eAAO,MAAM,yBAAyB,EAAE,MAA+B,CAAC;AAIxE,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK3E;AAED;;;GAGG;AACH,eAAO,MAAM,oCAAoC,YAAI,2BAA2B,CAAU,CAAC;AAW3F,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASvE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GAAG,MAAM,EAAE,CAmBX;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS3E;AAQD,8IAA8I;AAC9I,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}
+{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../src/internal/hosting.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,kCAAkC;AAClC,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,8BAA8B;AAC9B,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,YAAY,CAAC;AACrD,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,sDAAsD;AACtD,eAAO,MAAM,yBAAyB,EAAE,MAA+B,CAAC;AAIxE,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK3E;AAED;;;GAGG;AACH,eAAO,MAAM,oCAAoC,YAAI,2BAA2B,CAAU,CAAC;AAW3F,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASvE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKtF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GAAG,MAAM,EAAE,CAmBX;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS3E;AAQD,8IAA8I;AAC9I,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}

package/dist/internal/hosting.js

@@ -47,6 +47,15 @@ export function validateEgressDomain(domain) {
     }
     return `Invalid egress domain ${JSON.stringify(domain)}: use a lowercase hostname with at least two labels and an alphabetic TLD (e.g. "api.example.com"), optionally with a single leading "*." wildcard or a trailing ":port" for raw TCP.`;
 }
+/**
+ * True when an `egressDomains` entry allows HTTPS to `hostname`: an exact
+ * match, or a `*.` wildcard that matches a subdomain. A `host:port` entry
+ * opens raw TCP and does not count.
+ */
+export function egressAllowsHost(domains, hostname) {
+    const host = hostname.toLowerCase();
+    return domains.some((domain) => domain.startsWith("*.") ? host.endsWith(domain.slice(1)) : domain === host);
+}
 /**
  * Returns a human error message, or undefined when the name is a valid
  * secret name. Grammar only — reserved names are checked separately so the

package/dist/internal/init-scaffold.js

@@ -57,7 +57,7 @@ export function tsconfig(projectRoot) {
 `;
 }
 const ECHO_TS = `import { defineTool } from "${PACKAGE_NAME}/tools";
-import { z } from "zod";
+import { z } from "zod/v3";
 
 export default defineTool({
   description: "Echo a short message back (demo tool).",

package/dist/internal/interview/agent-questions.d.ts

@@ -3,7 +3,7 @@
  * validate against schemas built from it, and the create-agent skill's round
  * tables are rendered from it.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { type InterviewField } from "./question.js";
 export declare const PURPOSES: readonly ["chat", "repo-automation", "domain-assistant", "scheduled-reporter", "other"];
 export declare const CHANNELS: readonly ["slack", "github", "webhook", "schedule"];

package/dist/internal/interview/agent-questions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-questions.d.ts","sourceRoot":"","sources":["../../../src/internal/interview/agent-questions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAS,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE3D,eAAO,MAAM,QAAQ,YACnB,MAAM,EACN,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,OAAO,CACC,CAAC;AACX,eAAO,MAAM,QAAQ,YAAI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAC5E,eAAO,MAAM,SAAS,YAAI,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AACxE,eAAO,MAAM,YAAY,YACvB,cAAc,EACd,aAAa,EACb,QAAQ,EACR,WAAW,EACX,OAAO,EACP,eAAe,EACf,OAAO,CACC,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAChD,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAehD,eAAO,MAAM,gBAAgB,EAAE,MAAiB,CAAC;AAEjD,eAAO,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAKpC,CAAC;AAEL,eAAO,MAAM,YAAY,EAAE,SAAS,cAAc,EA0FjD,CAAC;AAOF,iDAAiD;AACjD,wBAAgB,qBAAqB,IAAI,MAAM,CAY9C"}
+{"version":3,"file":"agent-questions.d.ts","sourceRoot":"","sources":["../../../src/internal/interview/agent-questions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,OAAO,EAAS,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE3D,eAAO,MAAM,QAAQ,YACnB,MAAM,EACN,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,OAAO,CACC,CAAC;AACX,eAAO,MAAM,QAAQ,YAAI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAC5E,eAAO,MAAM,SAAS,YAAI,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AACxE,eAAO,MAAM,YAAY,YACvB,cAAc,EACd,aAAa,EACb,QAAQ,EACR,WAAW,EACX,OAAO,EACP,eAAe,EACf,OAAO,CACC,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAChD,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAehD,eAAO,MAAM,gBAAgB,EAAE,MAAiB,CAAC;AAEjD,eAAO,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAKpC,CAAC;AAEL,eAAO,MAAM,YAAY,EAAE,SAAS,cAAc,EA0FjD,CAAC;AAOF,iDAAiD;AACjD,wBAAgB,qBAAqB,IAAI,MAAM,CAY9C"}

package/dist/internal/interview/agent-questions.js

@@ -3,7 +3,7 @@
  * validate against schemas built from it, and the create-agent skill's round
  * tables are rendered from it.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { DEFAULT_MODEL } from "../../types.js";
 import { NAME_PATTERN, RESERVED_SLUGS } from "../discovery/names.js";
 import { field } from "./question.js";

package/dist/internal/interview/question.d.ts

@@ -4,7 +4,7 @@
  * Answers arrive from flags or an answers file, from a TTY prompt, or from
  * defaults, in that order. Nothing prompts without a TTY.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 export type Choice = string | {
     value: string;
     label: string;

package/dist/internal/interview/question.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"question.d.ts","sourceRoot":"","sources":["../../../src/internal/interview/question.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,oFAAoF;AACpF,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACrC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;CACjE;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC;IACrB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,iFAAiF;AACjF,wBAAgB,KAAK,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,CAAC,CAAC,UAAU,EACpB,OAAO,CAAC,EAAE,MAAM,GACf,cAAc,CAchB;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC3C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAO3B;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEjG,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACxC,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,gFAAgF;IAChF,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAChC,iDAAiD;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,MAAM,CAAC;CACnD;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAUhF;AA+DD,8DAA8D;AAC9D,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAQ5D;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,cAAc,EAC5B,MAAM,EAAE,MAAM,CAAC,cAAc,EAC7B,IAAI,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAuB,GAC9C;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CA8BjC"}
+{"version":3,"file":"question.d.ts","sourceRoot":"","sources":["../../../src/internal/interview/question.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,oFAAoF;AACpF,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACrC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;CACjE;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC;IACrB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,iFAAiF;AACjF,wBAAgB,KAAK,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,CAAC,CAAC,UAAU,EACpB,OAAO,CAAC,EAAE,MAAM,GACf,cAAc,CAchB;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC3C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAO3B;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEjG,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACxC,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,gFAAgF;IAChF,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAChC,iDAAiD;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,MAAM,CAAC;CACnD;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAUhF;AA+DD,8DAA8D;AAC9D,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAQ5D;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,cAAc,EAC5B,MAAM,EAAE,MAAM,CAAC,cAAc,EAC7B,IAAI,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAuB,GAC9C;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CA8BjC"}

package/dist/internal/interview/question.js

@@ -5,7 +5,7 @@
  * defaults, in that order. Nothing prompts without a TTY.
  */
 import { createInterface } from "node:readline";
-import { z } from "zod";
+import { z } from "zod/v3";
 import { describeError } from "../describe-error.js";
 /** A field whose answers are checked against its schema before they are kept. */
 export function field(round, question, schema, options) {

package/dist/internal/json-schema.d.ts

@@ -1,15 +1,15 @@
-import { z } from "zod";
-import type { JsonSchemaObject } from "../types.js";
-export declare function isZodSchema(value: unknown): value is z.ZodTypeAny;
+import type { JsonSchemaObject, ZodSchema } from "../types.js";
+export declare function isZodSchema(value: unknown): value is ZodSchema;
 /** Convert an authored input schema into the JSON Schema shown to the model. */
-export declare function toolInputJsonSchema(inputSchema: z.ZodTypeAny | JsonSchemaObject | undefined): JsonSchemaObject;
+export declare function toolInputJsonSchema(inputSchema: ZodSchema | JsonSchemaObject | undefined): JsonSchemaObject;
 /**
  * Convert an authored output schema into the JSON Schema advertised on the
  * tool. Unlike {@link toolInputJsonSchema} there is no fallback: an
  * undeclared output schema stays undeclared (the MCP field is optional), and
- * outputs are never validated against it.
+ * outputs are never validated against it. Zod 4 schemas describe the
+ * `execute` result here, so fields with a default are required.
  */
-export declare function toolOutputJsonSchema(outputSchema: z.ZodTypeAny | JsonSchemaObject | undefined): JsonSchemaObject | undefined;
+export declare function toolOutputJsonSchema(outputSchema: ZodSchema | JsonSchemaObject | undefined): JsonSchemaObject | undefined;
 export type ToolInputValidation = {
     ok: true;
     value: unknown;
@@ -21,5 +21,5 @@ export type ToolInputValidation = {
  * Validate tool-call args before `execute` runs. Zod schemas validate (and
  * transform); plain JSON schemas pass through unvalidated.
  */
-export declare function validateToolInput(inputSchema: z.ZodTypeAny | JsonSchemaObject | undefined, args: unknown): ToolInputValidation;
+export declare function validateToolInput(inputSchema: ZodSchema | JsonSchemaObject | undefined, args: unknown): ToolInputValidation;
 //# sourceMappingURL=json-schema.d.ts.map

package/dist/internal/json-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../src/internal/json-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAQpD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,UAAU,CAajE;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,CAAC,CAAC,UAAU,GAAG,gBAAgB,GAAG,SAAS,GACvD,gBAAgB,CAKlB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,CAAC,CAAC,UAAU,GAAG,gBAAgB,GAAG,SAAS,GACxD,gBAAgB,GAAG,SAAS,CAK9B;AAsBD,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,CAAC,CAAC,UAAU,GAAG,gBAAgB,GAAG,SAAS,EACxD,IAAI,EAAE,OAAO,GACZ,mBAAmB,CAerB"}
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../src/internal/json-schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAS/D,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAa9D;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,SAAS,GAAG,gBAAgB,GAAG,SAAS,GACpD,gBAAgB,CAKlB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,SAAS,GAAG,gBAAgB,GAAG,SAAS,GACrD,gBAAgB,GAAG,SAAS,CAK9B;AAmBD,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,SAAS,GAAG,gBAAgB,GAAG,SAAS,EACrD,IAAI,EAAE,OAAO,GACZ,mBAAmB,CAerB"}

package/dist/internal/json-schema.js

@@ -1,5 +1,6 @@
-import { z } from "zod";
+import { z } from "zod/v3";
 import { zodToJsonSchema } from "zod-to-json-schema";
+import { isZodV4Schema, zodV4ToJsonSchema } from "./zod-schema.js";
 const ANY_OBJECT_SCHEMA = {
     type: "object",
     properties: {},
@@ -22,38 +23,34 @@ export function toolInputJsonSchema(inputSchema) {
     if (inputSchema === undefined) {
         return ANY_OBJECT_SCHEMA;
     }
-    return authoredSchemaToJsonSchema(inputSchema);
+    return authoredSchemaToJsonSchema(inputSchema, "input");
 }
 /**
  * Convert an authored output schema into the JSON Schema advertised on the
  * tool. Unlike {@link toolInputJsonSchema} there is no fallback: an
  * undeclared output schema stays undeclared (the MCP field is optional), and
- * outputs are never validated against it.
+ * outputs are never validated against it. Zod 4 schemas describe the
+ * `execute` result here, so fields with a default are required.
  */
 export function toolOutputJsonSchema(outputSchema) {
     if (outputSchema === undefined) {
         return undefined;
     }
-    return authoredSchemaToJsonSchema(outputSchema);
+    return authoredSchemaToJsonSchema(outputSchema, "output");
 }
-function authoredSchemaToJsonSchema(schema) {
+function authoredSchemaToJsonSchema(schema, io) {
     if (!isZodSchema(schema)) {
         return schema;
     }
-    const converted = convertZodSchema(schema);
+    const converted = isZodV4Schema(schema)
+        ? zodV4ToJsonSchema(schema, io)
+        : zodToJsonSchema(schema, {
+            $refStrategy: "none",
+            target: "jsonSchema7",
+        });
     delete converted.$schema;
     return converted;
 }
-function convertZodSchema(schema) {
-    const native = schema.toJSONSchema;
-    if (typeof native === "function") {
-        return native.call(schema);
-    }
-    return zodToJsonSchema(schema, {
-        $refStrategy: "none",
-        target: "jsonSchema7",
-    });
-}
 /**
  * Validate tool-call args before `execute` runs. Zod schemas validate (and
  * transform); plain JSON schemas pass through unvalidated.
@@ -68,7 +65,7 @@ export function validateToolInput(inputSchema, args) {
     }
     const issues = parsed.error.issues
         .map((issue) => {
-        const path = issue.path.join(".");
+        const path = issue.path.map(String).join(".");
         return path === "" ? issue.message : `${path}: ${issue.message}`;
     })
         .join("; ");

package/dist/internal/mcp-endpoint.js

@@ -19,7 +19,7 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
-import { z } from "zod";
+import { z } from "zod/v3";
 import { samePrincipal } from "./auth.js";
 import { describeError } from "./describe-error.js";
 import { SessionBusyError, ToolInputError, ToolNotDirectlyCallableError, UnknownSessionError, UnknownToolError, } from "./session-engine.js";

package/dist/internal/otel/collector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collector.d.ts","sourceRoot":"","sources":["../../../src/internal/otel/collector.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,YAAY,CAAC;AAEnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IACzD,KAAK,IAAI,IAAI,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E;;;;OAIG;IACH,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,0FAA0F;IAC1F,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;IAC7D,yEAAyE;IACzE,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;IACrF,mEAAmE;IACnE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC;CAChF;AAkBD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC1B,aAAa,CAyzBf"}
+{"version":3,"file":"collector.d.ts","sourceRoot":"","sources":["../../../src/internal/otel/collector.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,YAAY,CAAC;AAEnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IACzD,KAAK,IAAI,IAAI,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E;;;;OAIG;IACH,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,0FAA0F;IAC1F,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;IAC7D,yEAAyE;IACzE,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;IACrF,mEAAmE;IACnE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC;CAChF;AAkBD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC1B,aAAa,CAw1Bf"}

package/dist/internal/otel/collector.js

@@ -18,10 +18,28 @@ const SPAN_STATUS_REASON_MAX = 160;
 export function createOtelCollector(runtime, agentName, log) {
     const sessions = new Map();
     const extraBySession = new Map();
-    const metrics = runtime.meter ? buildMetrics(runtime.meter) : undefined;
-    const logOpts = runtime.config.logs === false ? undefined : runtime.config.logs;
+    let metrics;
+    let metricsMeter;
+    function currentMetrics() {
+        const meter = runtime.meter;
+        if (meter === undefined) {
+            return undefined;
+        }
+        if (meter !== metricsMeter) {
+            metricsMeter = meter;
+            metrics = buildMetrics(meter);
+        }
+        return metrics;
+    }
+    function logOpts() {
+        const logsConfig = runtime.config.logs;
+        return logsConfig === false ? undefined : logsConfig;
+    }
     return {
         onEvent(event, session) {
+            if (!runtime.config.enabled) {
+                return;
+            }
             try {
                 handle(event, session);
             }
@@ -51,14 +69,23 @@ export function createOtelCollector(runtime, agentName, log) {
             return bag === undefined ? undefined : { ...bag };
         },
         runInTurn(args, fn) {
+            if (!runtime.config.enabled) {
+                return Promise.resolve(fn());
+            }
             const span = ensureTurnSpan(args);
             return context.with(trace.setSpan(context.active(), span), () => Promise.resolve(fn()));
         },
         runInCall(args, fn) {
+            if (!runtime.config.enabled) {
+                return Promise.resolve(fn());
+            }
             const span = ensureCallSpan(args);
             return context.with(trace.setSpan(context.active(), span), () => Promise.resolve(fn()));
         },
         startPhase(args, phase) {
+            if (!runtime.config.enabled) {
+                return () => { };
+            }
             const span = runtime.tracer.startSpan(`agent_sdk.turn.${phase}`, { attributes: join(args.sessionId, { "agent_sdk.turn_id": args.turnId }) }, trace.setSpan(context.active(), ensureTurnSpan(args)));
             return () => span.end();
         },
@@ -72,7 +99,7 @@ export function createOtelCollector(runtime, agentName, log) {
                     return;
                 }
                 sessionState(event.sessionId);
-                metrics?.sessions.add(1, join(event.sessionId, {
+                currentMetrics()?.sessions.add(1, join(event.sessionId, {
                     "agent_sdk.agent": agentName,
                     "agent_sdk.channel": event.data.channelId,
                 }));
@@ -81,7 +108,7 @@ export function createOtelCollector(runtime, agentName, log) {
             case "agent.bound": {
                 const painted = attrs({
                     "agent_sdk.sdk_agent_id": event.data.sdkAgentId,
-                    "agent_sdk.sdk_agent_url": logOpts?.toolContent === true ? event.data.url : undefined,
+                    "agent_sdk.sdk_agent_url": logOpts()?.toolContent === true ? event.data.url : undefined,
                 });
                 if (Object.keys(painted).length === 0) {
                     return;
@@ -95,7 +122,7 @@ export function createOtelCollector(runtime, agentName, log) {
             case "message.received": {
                 emitLog("message.received", SeverityNumber.INFO, attrs({
                     ...baseLog(event, session),
-                    "agent_sdk.user_prompt": logOpts?.userPrompts === true ? truncate(event.data.text) : undefined,
+                    "agent_sdk.user_prompt": logOpts()?.userPrompts === true ? truncate(event.data.text) : undefined,
                 }));
                 return;
             }
@@ -220,10 +247,11 @@ export function createOtelCollector(runtime, agentName, log) {
                 const turn = ensureTurn(event, session, startTime);
                 const span = turn?.tools.get(event.data.callId);
                 const status = event.data.isError ? "failure" : "success";
+                const failureReason = event.data.isError ? toolFailureReason(event.data.output) : undefined;
                 if (span !== undefined) {
                     span.setAttribute("cursor.tool.status", status);
                     span.setAttributes(attrs(computerUseResultAttrs(event.data)));
-                    if (logOpts?.toolContent === true && event.data.output !== undefined) {
+                    if (logOpts()?.toolContent === true && event.data.output !== undefined) {
                         span.setAttribute("agent_sdk.tool_output", truncate(json(event.data.output)));
                     }
                     if (event.data.isError) {
@@ -232,14 +260,14 @@ export function createOtelCollector(runtime, agentName, log) {
                         span.setAttribute("agent_sdk.tool_error_class", errorClass);
                         span.setStatus({
                             code: SpanStatusCode.ERROR,
-                            message: toolFailureReason(event.data.output) ?? "tool error",
+                            message: failureReason ?? "tool error",
                         });
                     }
                     span.end(startTime);
                     turn?.tools.delete(event.data.callId);
                     turn?.pendingToolErrors.delete(event.data.callId);
                 }
-                metrics?.toolCalls.add(1, join(event.sessionId, {
+                currentMetrics()?.toolCalls.add(1, join(event.sessionId, {
                     "cursor.tool.name": event.data.toolName,
                     "cursor.tool.kind": "builtin",
                     "cursor.tool.status": status,
@@ -250,6 +278,7 @@ export function createOtelCollector(runtime, agentName, log) {
                     "cursor.tool.name": event.data.toolName,
                     "cursor.tool.status": status,
                     "agent_sdk.call_id": event.data.callId,
+                    "agent_sdk.error_message": failureReason,
                 }));
                 // Direct callTool never emits turn.completed — close when idle.
                 if (turn !== undefined &&
@@ -277,13 +306,13 @@ export function createOtelCollector(runtime, agentName, log) {
                         "agent_sdk.turn_id": event.turnId,
                         "agent_sdk.call_id": event.data.callId,
                         "agent_sdk.subagent_name": event.data.name,
-                        "agent_sdk.subagent_description": logOpts?.toolContent === true && event.data.description !== undefined
+                        "agent_sdk.subagent_description": logOpts()?.toolContent === true && event.data.description !== undefined
                             ? truncate(event.data.description)
                             : undefined,
                     }),
                 }, trace.setSpan(context.active(), turn.span));
                 turn.subagents.set(event.data.callId, span);
-                metrics?.subagents.add(1, join(event.sessionId, {
+                currentMetrics()?.subagents.add(1, join(event.sessionId, {
                     "agent_sdk.agent": agentName,
                     "agent_sdk.subagent_name": event.data.name ?? "unknown",
                 }));
@@ -337,7 +366,7 @@ export function createOtelCollector(runtime, agentName, log) {
                 turn.span.setStatus({ code: SpanStatusCode.OK });
                 turn.span.end(startTime);
                 sessions.get(event.sessionId)?.turns.delete(event.turnId);
-                metrics?.turns.add(1, join(event.sessionId, {
+                currentMetrics()?.turns.add(1, join(event.sessionId, {
                     "agent_sdk.agent": agentName,
                     "agent_sdk.turn_status": "completed",
                 }));
@@ -376,7 +405,7 @@ export function createOtelCollector(runtime, agentName, log) {
                 }
                 turn.span.end(startTime);
                 sessions.get(event.sessionId)?.turns.delete(event.turnId);
-                metrics?.turns.add(1, join(event.sessionId, {
+                currentMetrics()?.turns.add(1, join(event.sessionId, {
                     "agent_sdk.agent": agentName,
                     "agent_sdk.turn_status": expected ?? "failed",
                 }));
@@ -495,7 +524,7 @@ export function createOtelCollector(runtime, agentName, log) {
             existing.setAttributes(join(args.sessionId, {
                 ...computerUseAttrs,
                 "agent_sdk.parent_call_id": args.parentCallId ?? args.call.parentCallId,
-                "agent_sdk.tool_args": logOpts?.toolContent === true && args.call.args !== undefined
+                "agent_sdk.tool_args": logOpts()?.toolContent === true && args.call.args !== undefined
                     ? truncate(json(args.call.args))
                     : undefined,
             }));
@@ -512,7 +541,7 @@ export function createOtelCollector(runtime, agentName, log) {
                 "agent_sdk.turn_id": args.turnId,
                 "agent_sdk.call_id": args.call.callId,
                 "agent_sdk.parent_call_id": args.call.parentCallId,
-                "agent_sdk.tool_args": logOpts?.toolContent === true && args.call.args !== undefined
+                "agent_sdk.tool_args": logOpts()?.toolContent === true && args.call.args !== undefined
                     ? truncate(json(args.call.args))
                     : undefined,
                 ...computerUseAttrs,
@@ -617,7 +646,8 @@ export function createOtelCollector(runtime, agentName, log) {
         }
     }
     function recordTokens(sessionId, usage) {
-        if (metrics === undefined) {
+        const active = currentMetrics();
+        if (active === undefined) {
             return;
         }
         const agent = agentName;
@@ -628,24 +658,25 @@ export function createOtelCollector(runtime, agentName, log) {
         addTokens(sessionId, usage.cacheWriteTokens, "cache_creation", agent);
         if (usage.reasoningTokens !== undefined) {
             // Reasoning is Agent-SDK-only; enterprise wire has no reasoning enum.
-            metrics.tokens.add(usage.reasoningTokens, join(sessionId, {
+            active.tokens.add(usage.reasoningTokens, join(sessionId, {
                 "cursor.token.type": "reasoning",
                 "agent_sdk.agent": agent,
             }));
         }
     }
     function addTokens(sessionId, value, type, agent) {
-        if (metrics === undefined || value === 0) {
+        const active = currentMetrics();
+        if (active === undefined || value === 0) {
             return;
         }
-        metrics.tokens.add(value, join(sessionId, {
+        active.tokens.add(value, join(sessionId, {
             "cursor.token.type": type,
             "agent_sdk.agent": agent,
         }));
     }
     /** Content opt-in for failure text (same gate as tool payloads). */
     function gatedContent(value) {
-        if (logOpts?.toolContent !== true) {
+        if (logOpts()?.toolContent !== true) {
             return undefined;
         }
         return truncate(value);

package/dist/internal/otel/config.d.ts

@@ -2,6 +2,11 @@
  * Merge authored `defineOtel`, `serve({ otel })`, and standard OTel env.
  */
 import { type OtelConfig, type OtelDefinition, type OtelExporterConfig, type OtelLogOptions, type OtelMetricOptions, type OtelSignal, type OtelTraceOptions } from "../../otel.js";
+export type MetricsTemporality = "cumulative" | "delta" | "lowmemory";
+export interface ResolvedOtelMetrics extends OtelMetricOptions {
+    temporality: MetricsTemporality;
+    unrecognizedTemporality?: string;
+}
 export interface ResolvedOtelConfig {
     enabled: boolean;
     serviceName: string;
@@ -9,7 +14,7 @@ export interface ResolvedOtelConfig {
     resourceAttributes: Record<string, string>;
     exporters: OtelExporterConfig[];
     traces: false | OtelTraceOptions;
-    metrics: false | OtelMetricOptions;
+    metrics: false | ResolvedOtelMetrics;
     logs: false | OtelLogOptions;
 }
 /**
@@ -32,9 +37,13 @@ export declare function resolveOtelConfig(input: {
     serve?: OtelConfig | false;
     env?: NodeJS.ProcessEnv;
 }): ResolvedOtelConfig;
+/** Values are URL-encoded per the OTel spec (`Authorization=Basic%20...`). */
 export declare function parseOtelHeaders(raw: string | undefined): Record<string, string>;
 /** Collapse `…/v1/{traces,metrics,logs}` to the collector base. */
 export declare function stripSignalPath(url: string): string;
 /** Exporters that apply to one signal (honors per-exporter `signals`). */
 export declare function exportersForSignal(exporters: readonly OtelExporterConfig[], signal: OtelSignal): OtelExporterConfig[];
+export declare function disabledOtelConfig(): ResolvedOtelConfig;
+/** Canonical JSON with sorted keys, so object key order does not change the result. */
+export declare function stableJson(value: unknown): string;
 //# sourceMappingURL=config.d.ts.map

package/dist/internal/otel/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/internal/otel/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,MAAM,EAAE,KAAK,GAAG,gBAAgB,CAAC;IACjC,OAAO,EAAE,KAAK,GAAG,iBAAiB,CAAC;IACnC,IAAI,EAAE,KAAK,GAAG,cAAc,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC,GAC3E,cAAc,GAAG,SAAS,CAmB5B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,kBAAkB,CAkDrB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBhF;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,MAAM,EAAE,UAAU,GACjB,kBAAkB,EAAE,CAItB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/internal/otel/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,OAAO,GAAG,WAAW,CAAC;AAEtE,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,WAAW,EAAE,kBAAkB,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,MAAM,EAAE,KAAK,GAAG,gBAAgB,CAAC;IACjC,OAAO,EAAE,KAAK,GAAG,mBAAmB,CAAC;IACrC,IAAI,EAAE,KAAK,GAAG,cAAc,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC,GAC3E,cAAc,GAAG,SAAS,CAmB5B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,kBAAkB,CAkDrB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBhF;AAWD,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,kBAAkB,EAAE,EACxC,MAAM,EAAE,UAAU,GACjB,kBAAkB,EAAE,CAItB;AAED,wBAAgB,kBAAkB,IAAI,kBAAkB,CAWvD;AAgJD,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAYjD"}