@cursor/bdk 0.2.3 → 0.2.5

package/docs/guides/slack.md

@@ -10,9 +10,6 @@ in a channel it watches. From there, it keeps the conversation in one
 thread and can reply all at once, stream the answer live, or decide for
 itself when to post updates.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 Run `bdk slack create --dir .`, then `bdk slack doctor`.
 
 ## Answer a mention or DM
@@ -47,7 +44,7 @@ export default slackChannel({
       reasoning: true,
       // Tool names as they start ("Running grep, glob...").
       tools: true,
-      idle: ["Checking the monorepo...", "Poking Datadog..."],
+      idle: ["Checking the request...", "Reviewing recent activity..."],
     },
   },
 });
@@ -108,15 +105,12 @@ This example watches `#triage-alerts`, so any substantial top-level
 message starts a thread even when nobody mentions the bot. The length
 guard filters out short posts before they can start a turn.
 
-Mentions are global — the bot answers an @mention in any channel it has
-joined — but listening without a mention names its channels: `allow`
-must include at least one channel id (`C…`/`G…`) and at most 10 distinct
-ids. `#name` entries may accompany the ids for readability. A lone `"*"`
-watches every channel the bot is in, thread replies only
-(`posts: "replies"`). Mixing `"*"` with ids is an error. `"*"` is the
-guest watcher: it is not a hosting subscription. A thread reply on
-Cursor-managed hosting is delivered when a mention already opened that
-thread, and a top-level post does not match.
+Mentions work in any channel the bot has joined. Listening without a
+mention requires an explicit allowlist with at least one channel ID
+starting with `C` or `G` and at most 10 distinct IDs. You can add
+`#name` entries for readability. A lone `"*"` watches replies in every
+joined channel (`posts: "replies"`), but it does not wake on top-level
+posts. Do not mix `"*"` with channel IDs.
 
 ```ts
 export default slackChannel({
@@ -140,15 +134,11 @@ export default slackChannel({
 When you create the app, pass `--channel-posts` and invite the bot to
 every channel in the allowlist.
 
-On Cursor-managed hosting the id entries also define the delivery set:
-each becomes a channel-scoped subscription, and a channel post outside
-the allowlist is dropped at ingress before any compute wakes (replies in
-threads the agent is already part of still arrive). The same watch runs
-at admission for each delivered event. `debounceMs` is ignored there:
-the control plane answers every delivery immediately, and edits arrive
-as separate deliveries that are dropped at the edge. Channel ids match
-without any Slack call; `#name` entries are resolved once per pod with
-the bot token and need the `channels:read` scope.
+On Cursor-managed hosting, the channel IDs in `allow` define which
+top-level posts can wake the agent. Replies in threads the agent has
+already joined still arrive. `debounceMs` applies only when you
+self-host. Add the `channels:read` scope when you include `#name`
+labels.
 
 ## Control who can message
 
@@ -230,7 +220,7 @@ Use the IDs on the hook `ctx` when handling an event, and
 
 ## Connect
 
-```text
+```bash
 bdk login
 bdk slack create --dir .
 bdk slack doctor --prefix TRIAGE
@@ -256,7 +246,7 @@ and tokens.
 Run `doctor` first to catch missing credentials, then start the agent
 and send it the same mention or DM a teammate would.
 
-```text
+```bash
 bdk slack doctor --prefix TRIAGE
 bdk serve --dir . --dev
 ```

package/docs/guides/webhooks.md

@@ -10,9 +10,6 @@ conversation, then sends the result back to the system that started it.
 Use one when the built-in [HTTP API](../reference/http-api.md) does not
 match the provider's payload, conversation key, or reply path.
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 Author `bot/channels/<id>.ts`. Its routes mount under
 `/<slug>/v1/channels/<id>`.
 

package/docs/hillclimbing.md

@@ -13,9 +13,6 @@ crossing the freeze line.
 The companion [`hillclimb` skill](../skills/hillclimb/SKILL.md) can run
 this loop with you.
 
-The `bdk` commands on this page are docs-ahead until `@cursor/bdk` is
-published; see [BDK package availability](/#bdk-package-availability).
-
 ## Correct a wrong tool choice
 
 Suppose a PR reviewer calls `approve_pr` before `inspect_pr`. Pin one PR

package/docs/quickstart.md

@@ -13,15 +13,13 @@ review.
 
 - Node 22.13 or newer.
 
-- The docs-ahead BDK package and CLI. `@cursor/bdk` is not on npm yet,
-  so these commands will not run until publication. See
-  [BDK package availability](/#bdk-package-availability).
+- The `@cursor/bdk` package:
 
 ```text
 npm install -g @cursor/bdk
 ```
 
-- A Cursor credential for model turns. After publication, sign in once:
+- A Cursor credential for model turns. Sign in once:
 
 ```text
 bdk login
@@ -31,9 +29,6 @@ bdk login
 
 The preferred BDK workflow uses `bdk init` and `bdk dev`.
 
-> **Docs ahead:** `@cursor/bdk` is not on npm yet. This block shows future
-> CLI syntax and will not run until the package publishes.
-
 ```text
 bdk init ./pr-reviewer
 cd pr-reviewer

package/docs/reference/agent-config.md

@@ -9,9 +9,6 @@ description: "defineAgent at bot/agent.ts: the model, local workspace, and progr
 the agent and its local harness defaults.
 Everything is optional on the root agent.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ```ts
 import { defineAgent } from "@cursor/bdk";
 
@@ -35,15 +32,15 @@ export default defineAgent({
 | `description` | string | What the agent is for. Required on subagents; the parent model reads it to decide when to delegate. Documentation-only on the root. |
 | `instructions` | string | Inline instructions. Prefer `instructions.md`; this exists for subagents and generated configs. |
 | `local` | `{ cwd?, workspaceDir?, sandbox? }` | Local harness defaults. See [Local options](#local-options). |
-| `hosting` | `{ egressDomains?, secretNames? }` | Managed-hosting declarations read by `bdk deploy`: the pod's egress allowlist and the secret names the agent expects. Ignored by local serving. |
-| `concurrency` | `{ maxRunningTurns? }` | Engine-wide turn admission limit. See [Concurrency](#concurrency). |
+| `hosting` | `{ egressDomains?, secretNames? }` | Managed-hosting declarations read by `bdk deploy`: the deployment's egress allowlist and the secret names the agent expects. Mounted [extensions](./extensions.md#build-an-extension) add their own. Ignored by local serving. |
+| `concurrency` | `{ maxRunningTurns? }` | Agent-wide concurrent turn limit. See [Concurrency](#concurrency). |
 | `builtinTools` | `{ reminders? }` | Framework-provided model-facing tools, opted in per capability. See [Built-in tools](#built-in-tools). |
 | `tools` | `ToolName[]` | Allowlist of built-in harness tools offered to the model. Unset = the model's full standard toolset. See [Harness tools](#harness-tools). |
 
 ## Model
 
 `model` is a Cursor model id string, or `{ id, params }`. Effort and
-speed are params, not id suffixes. The SDK rejects suffix-style ids
+speed are params, not id suffixes. BDK rejects suffix-style ids
 like `grok-4.5-fast`:
 
 ```ts
@@ -116,7 +113,7 @@ servers, point `local.cwd` outside the checkout. See
 [Local cwd](#local-cwd). `local.sandbox` makes MCP tool calls fail
 closed.
 
-Use the SDK's public tool names, including `"shell"`, `"read"`,
+Use the Cursor SDK's public tool names, including `"shell"`, `"read"`,
 `"edit"`, `"grep"`, `"glob"`, `"ls"`, and `"task"`. Unknown names
 fail the turn with a `ConfigurationError`.
 

package/docs/reference/artifacts.md

@@ -10,9 +10,6 @@ or decision records. An artifact kind defines the data it accepts, and
 the artifacts API tags or updates records by key. Records persist across
 sessions and can be listed, streamed, or downloaded.
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 ## Artifact kinds
 
 Author `bot/artifacts.ts` with `defineArtifacts` from

package/docs/reference/channels.md

@@ -10,9 +10,6 @@ A channel connects an external surface to agent sessions. A file at
 under `/v1/channels/<id>`. The built-in HTTP session channel is always
 available alongside any custom or prebuilt channels.
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 ## Built-in HTTP channel
 
 The built-in channel serves the session, approval, tool, discovery, and
@@ -174,15 +171,13 @@ author their own chain, and `--allow-anonymous` swaps it for
 
 ## Prebuilt channels
 
-| Import | Factory | Surface |
+| Import | Function | Surface |
 | --- | --- | --- |
 | `@cursor/bdk/channels/slack` | `slackChannel()` | Slack messages, threads, streaming replies, and approvals. See [Slack](../guides/slack.md) |
 | `@cursor/bdk/channels/github` | `githubChannel()` | GitHub and GitHub Enterprise webhooks. See [GitHub](../guides/github.md) |
 | `@cursor/bdk/channels/gitlab` | `gitlabChannel()` | GitLab.com and self-managed GitLab hooks. See [GitLab](../guides/gitlab.md) |
 | `@cursor/bdk/channels/bitbucket` | `bitbucketChannel()` | Bitbucket Cloud and Data Center hooks. See [Bitbucket](../guides/bitbucket.md) |
 | `@cursor/bdk/channels/deployments` | `deploymentsChannel()` | Deployment events filtered by source, environment, or event name |
-| `@cursor/bdk/channels/change-monitors` | `changeMonitorsChannel()` | Change Monitor `checkpoint.created` events |
-| `@cursor/bdk/channels/issues` | `issuesChannel()` | Factory `issue.created` events |
 
 For other platforms like Discord or Teams, use the authored
 `defineChannel` route form.

package/docs/reference/cli.md

@@ -8,20 +8,17 @@ description: "Look up BDK commands, targets, flags, outputs, and exit status."
 The Grok Bot Development Kit (BDK) uses the `@cursor/bdk` package and `bdk`
 CLI.
 
-> **Docs ahead:** `@cursor/bdk` is not on npm yet. This command will work
-> after publication.
-
 ```text
 bdk <command>
 ```
 
-The command catalog below documents the `bdk` binary that will ship with
-`@cursor/bdk`. Run the published binary with Node 22.13 or newer; Bun is not
+The command catalog below documents the `bdk` binary from
+`@cursor/bdk`. Run it with Node 22.13 or newer; Bun is not
 supported. Commands exit nonzero when validation or a synchronous request fails;
 asynchronous commands can exit `0` once work is accepted. Project paths use the
 [BDK project layout](./project-layout.md).
 
-After publication, install `@cursor/bdk` to obtain the binary. `bdk help`
+Install `@cursor/bdk` to obtain the binary. `bdk help`
 prints top-level help; the Slack, GitHub, GitLab, and Bitbucket command packs
 provide their own `help` subcommands.
 
@@ -441,7 +438,7 @@ installs dependencies, and tries to put `bdk` on `PATH`.
 
 | Option | Contract |
 | --- | --- |
-| `--template <name>` | Use a bundled template: `agentic-owners`, `agents-md`, `code-wiki`, `demo`, `grokbot-agents`, `security-help`, `security-reviewer`, `thermo-quality-review`, `thermo-review`, `triage-jira`, or `triage-linear`. |
+| `--template <name>` | Use a bundled template: `agentic-owners`, `agents-md`, `code-wiki`, `demo`, `grokbot-agents`, `security-help`, `security-reviewer`, `thermo-quality-review`, `thermo-review`, `triage-jira`, or `triage-linear`. `triage` selects `triage-linear`. |
 | `--var id=value` | Answer a template question without a prompt. Repeat for multiple answers. |
 | `--json` | Skip interactive login and skill prompts, then print `{ ok, directory, template, created, skipped, installed, installError, cliOnPath, cliLinkError, next }`. `ok` reflects dependency installation. |
 
@@ -480,7 +477,7 @@ The command replaces the installed BDK skills with the package copy and
 removes stale bundled skills. `--print` previews the change. `--json` prints
 `{ ok, dryRun, directory, firstInstall, skills, removed }`.
 
-When `@cursor/bdk` publishes, package installation will perform this copy.
+Package installation performs this copy.
 Run `bdk install-skills` when you need to refresh it.
 
 ### Inspect a project {#info}
@@ -600,8 +597,7 @@ bdk deployments [--team <id>] [--json]
 ```
 
 Text output shows slug, status, generation, kind, and update time. `--json`
-prints `{ deployments }` and may also include `applications`. An empty list
-succeeds.
+prints `{ deployments }`. An empty list succeeds.
 
 ### Inspect a deployment {#deployment}
 
@@ -630,10 +626,7 @@ bdk cancel-runs <slug> [--team <id>] [--json]
 ```
 
 The command requests cancellation for a deployment's active runs and reminder
-wakes. For a multi-tenant
-application, this cancels every install; use `stop --cancel-runs` for
-install-local cancellation. It exits nonzero if any cancellation request fails
-to start.
+wakes. It exits nonzero if any cancellation request fails to start.
 
 ### Replace event repositories {#event-repos}
 

package/docs/reference/connections.md

@@ -16,9 +16,6 @@ Put a server in `bot/host-connections/` when only host tools should
 call it. Host connections use the same `defineConnection` shape and
 support `bdk mcp oauth`; the model and playground don't see them.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Remote MCP server
 
 Point an MCP connection at a remote server with a URL.
@@ -102,16 +99,16 @@ export default defineConnection({
 The callback is evaluated on every turn, including reminder
 fires and post-restart follow-ups, so the identity always comes from the
 session itself, never from state parked in memory. The model never sees a
-tenant parameter and can never choose the tenant. A callback that throws
-fails the turn: a turn never silently runs without the connection's
-identity. `host.mcp` calls from server tools keep the static headers only.
-You can't combine `auth` with `oauth: true`; the host OAuth provider owns
-the Authorization header.
+downstream account parameter and cannot choose the account. A callback
+that throws fails the turn: a turn never silently runs without the
+connection's identity. `host.mcp` calls from server tools keep the static
+headers only. You can't combine `auth` with `oauth: true`; the host OAuth
+provider owns the Authorization header.
 
 Derive the identity from durable session facts: `session.auth`,
 `session.id`, or your channel's own session state. Do not key it off
 `session.continuationKey`. The HTTP channel rotates that key after every
-accepted follow-up, so a tenant mapping keyed on it breaks
+accepted follow-up, so an account mapping keyed on it breaks
 mid-conversation.
 
 `auth` works attached or advertised. Advertise the auth connection
@@ -127,7 +124,7 @@ characters and add numeric suffixes to avoid collisions.
 ```ts
 export default defineConnection({
   url: "https://api.cursor.com/v1/mcp/plugins",
-  auth: async (session) => ({ headers: await tenantHeaders(session) }),
+  auth: async (session) => ({ headers: await headersForSession(session) }),
   advertiseTools: true,
 });
 ```

package/docs/reference/evals.md

@@ -11,9 +11,6 @@ tools, events, and output meet a contract. Files under the project-root
 discovers their IDs, executes them, and reports every assertion. See the
 [Evals guide](../evals.md) for the regression workflow.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Eval discovery and case IDs
 
 Eval files live under the project-root `evals/` directory and end in

package/docs/reference/extensions.md

@@ -11,9 +11,6 @@ schedules, subagents, artifacts, and workspace seeds. One mount file
 adds them under a namespace without copying their source into your
 project.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 Extensions and Cursor plugins execute as trusted host code. A namespace
 prevents name collisions; it does not sandbox the package or limit its
 side effects. Review the package before mounting it.
@@ -54,6 +51,10 @@ bdk info --dir . --json
 hooks, channels, schedules, subagents, and artifact kinds. The same
 data appears under `extensions` in `GET /v1/info`.
 
+A mount can also widen what a hosted deployment reaches. `info` shows the
+egress hosts and secret names each mount adds, and `bdk deploy` names
+every extension that adds egress before it deploys.
+
 Names inside the extension stay short. A tool authored as
 `tools/failed_jobs.ts` appears to the mounting agent as
 `<namespace>__failed_jobs`. The `__` separator is reserved, so root
@@ -104,8 +105,8 @@ not provide.
 ## Mount a Cursor plugin
 
 `cursorPlugin()` adapts a vendored Cursor or Claude plugin into the same
-namespace model. Skills, commands, agents, and MCP servers become Agent
-SDK skills, subagents, and connections.
+namespace model. Skills, commands, agents, and MCP servers become BDK
+skills, subagents, and connections.
 
 ```ts
 // bot/extensions/notion.ts
@@ -174,6 +175,7 @@ export default defineExtension({
     token: z.string(),
     logTailLines: z.number().int().positive().default(200),
   }),
+  hosting: () => ({ egressDomains: ["api.buildkite.com"] }),
 });
 ```
 
@@ -182,6 +184,14 @@ Modules inside the package import this definition and read
 applied. Publish the built entry point with its slot directories and
 prose assets beside it.
 
+`hosting` names the hosts the package calls and the secrets it reads
+from the environment. It receives the validated settings, and the
+mounting agent's `hosting.egressDomains` and `hosting.secretNames` gain
+whatever it returns, so a hosted deploy reaches Buildkite without the
+consumer listing `api.buildkite.com`. Leave out secrets that arrive
+through settings, such as `token` here; the consumer decides where that
+value comes from.
+
 The [Project layout](./project-layout.md) owns each contribution's
 authoring contract. Keep extension instructions and tool descriptions
 namespace-neutral because the consumer chooses the final prefix.

package/docs/reference/hooks.md

@@ -11,9 +11,6 @@ transcript copy, or derived state. Hooks run in the serving process for
 every session of the agent. They cannot change the turn, the prompt, or
 the reply; a handler that throws is logged and skipped.
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 Treat the event as read-only. Later subscribers see the same object.
 That makes hooks safe to add to a production agent, and the wrong
 surface for anything that must run before the model or must fail a

package/docs/reference/http-api.md

@@ -140,7 +140,7 @@ These read-only routes describe the running agent.
 | Route | Contract |
 | --- | --- |
 | `GET /v1/info` | Return the discovered model, tools, skills, connections, subagents, channels, schedules, hooks, and diagnostics |
-| `GET /v1/tools` | Return live server tools and advertised MCP tools as `{ name, title?, source? }`; bind tenant-scoped listings with `session` or `continuationToken` |
+| `GET /v1/tools` | Return live server tools and advertised MCP tools as `{ name, title?, source? }`; bind session-specific listings with `session` or `continuationToken` |
 | `GET /v1/tools/:name` | Return one tool's description, execution mode, approval and effect rules, schemas, and source |
 | `GET /v1/health` | Return per-agent liveness; no auth |
 | `GET /v1/logs?after=N` | Return recent server logs and the next polling cursor |

package/docs/reference/instructions.md

@@ -9,9 +9,6 @@ Agent instructions form the always-on system prompt and reach the model
 on every turn. A root agent requires them; a subagent may inline
 `instructions` in `agent.ts` instead.
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 ## Authoring forms
 
 | Form | Use it when |

package/docs/reference/playground.md

@@ -10,9 +10,6 @@ description: "The built-in web UI: chat with streaming, Try buttons and slash co
 mode). In multi-agent mode, each agent has its own playground, and `/`
 lists them all.
 
-The `bdk` commands on this page are docs-ahead until `@cursor/bdk` is
-published; see [BDK package availability](/#bdk-package-availability).
-
 ## Playground surfaces
 
 | Surface | What you can do |

package/docs/reference/project-layout.md

@@ -19,7 +19,7 @@ For the capabilities below, identity comes from the path.
 | --- | --- |
 | `tools/approve_pr.ts` | tool `approve_pr` |
 | `mcp-connections/linear.ts` | MCP connection `linear` (model + host) |
-| `host-connections/anytool.ts` | Host MCP connection `anytool` (host + `mcp oauth` only) |
+| `host-connections/inventory.ts` | Host MCP connection `inventory` (host + `mcp oauth` only) |
 | `skills/pr-review.md` | skill `pr-review` |
 | `subagents/reviewer/` | subagent `reviewer` |
 | `extensions/ci.ts` | extension mount `ci`; its contributions become `ci__<name>` |
@@ -48,7 +48,7 @@ my-agent/
 │   ├── mcp-connections/
 │   │   └── linear.ts          # tools from external MCP servers
 │   ├── host-connections/
-│   │   └── anytool.ts         # privileged MCP, host tools only
+│   │   └── inventory.ts       # host-only MCP tools
 │   ├── subagents/
 │   │   └── reviewer/
 │   │       ├── agent.ts

package/docs/reference/prompt.md

@@ -15,9 +15,6 @@ import { prompt } from "@cursor/bdk";
 // or: import { prompt } from "@cursor/bdk/prompt";
 ```
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 ## Dedented strings
 
 `prompt` returns one string. It removes the common leading whitespace

package/docs/reference/schedules.md

@@ -11,9 +11,6 @@ reminder is a runtime wake bound to one conversation: "re-check this
 PR's CI in two hours." Schedules live in the filesystem; reminders are
 created by running code.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Schedules
 
 Cron expressions are standard 5-field, evaluated in UTC with minute

package/docs/reference/sessions.md

@@ -11,9 +11,6 @@ token, inspect it with a session ID, and follow progress on the NDJSON
 stream. Chat sessions wait for follow-ups; task sessions run once and
 stop.
 
-The `bdk` commands on this page are docs-ahead until `@cursor/bdk` is
-published; see [BDK package availability](/#bdk-package-availability).
-
 ## Session contents
 
 Each session combines:

package/docs/reference/skills.md

@@ -11,9 +11,6 @@ loads the full content only when the task calls for it. Skills are how
 you give an agent a multi-step workflow without carrying it in the
 always-on [instructions](./instructions.md).
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Authoring forms
 
 Skills support three authoring forms.

package/docs/reference/subagents.md

@@ -11,9 +11,6 @@ mid-turn. Each one lives under `bot/subagents/<id>/` with a required
 for a custom prompt. The parent model delegates through the `task` tool,
 and the stream records `subagent.called` and `subagent.completed`.
 
-The `@cursor/bdk` imports on this page are docs-ahead until publication;
-see [BDK package availability](/#bdk-package-availability).
-
 ```text
 bot/subagents/researcher/
 ├── agent.ts            # description (required), model (optional)

package/docs/reference/tools.md

@@ -12,14 +12,10 @@ execution flavors: server tools run on the serving host, and
 agent tools run as scripts where the agent runs. Every server tool can
 also be called directly, with no model turn.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Define a server tool
 
 By default, `execute` runs in-process on the serving host with full
-access to `process.env` and your `bot/lib/` code. Turns call server
-tools as SDK custom tools.
+access to `process.env` and your `bot/lib/` code.
 
 ```ts
 // bot/tools/inspect_pr.ts

package/docs/templates/agentic-owners.md

@@ -12,9 +12,6 @@ what your policy allows. Ownership rules live in
 the closest policy to a changed file wins, and policies are always read
 from the PR's base ref so a PR cannot exempt itself.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Scaffold
 
 ```text

package/docs/templates/grokbot-agents.md

@@ -0,0 +1,60 @@
+---
+title: "Consult named Grok Bot agents"
+description: "Scaffold an agent that delegates a focused question to an allowed Grok Bot agent and carries the reply back."
+---
+
+# Consult named Grok Bot agents
+
+The `grokbot-agents` template lets a BDK agent consult the Grok Bot
+agents you allow. Your BDK conversation stays active while the named
+agent works, and the delivered reply returns to the same conversation.
+A request for an unlisted name is refused.
+
+## Scaffold
+
+```bash
+bdk init ./grokbot-consultant --template grokbot-agents
+```
+
+`init` asks for the names shown in the Grok Bot app. Pass them directly
+in a script:
+
+```bash
+bdk init ./grokbot-consultant --template grokbot-agents \
+  --var agents="Plan Keeper,Chief of Staff"
+```
+
+## Run
+
+Sign in, validate the scaffold, and start the project:
+
+```bash
+cd grokbot-consultant
+bdk login
+bdk validate
+bdk dev
+```
+
+Open the playground and ask the agent to consult one of the names you
+entered. The delivered reply returns to the same conversation.
+
+## Choose who the agent can consult
+
+Edit `bot/extensions/grokbot.ts` to change the allowlist. The template
+supports descriptions that help the model choose the right specialist
+when several names are available.
+
+When someone asks which agents are available, the template lists them
+without sending a message. A consultation sends one self-contained
+question and reports the reply. Long-running consultations can be
+checked later, and an active turn can be interrupted when the task
+changes.
+
+See [Grok Bot agents](../guides/grokbot-agents.md) for the extension's
+conversation and approval boundaries.
+
+## What to edit
+
+- `bot/extensions/grokbot.ts`: allowed agent names
+- `bot/instructions.md`: when to consult them
+- `evals/grokbot-agents.eval.ts`: list-without-sending smoke case

package/docs/templates/security-reviewer.md

@@ -11,9 +11,6 @@ RCE. Style nits stay out.
 
 This template is one model turn: read the diff, then post one comment.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Scaffold
 
 ```text

package/docs/templates/thermo-quality-review.md

@@ -6,15 +6,12 @@ description: "Scaffold the agent, deploy it, and open a PR."
 # Review pull requests for structural code quality
 
 This agent reads a pull request diff and posts one review comment. It
-reports missing abstractions, spaghetti branches, feature logic
-leaking into shared paths, and files pushed past 1,000 lines. Style
-nits and behavior disputes stay out.
+reports missing abstractions, deeply nested control flow, feature logic
+leaking into shared paths, and files pushed past 1,000 lines. Style nits
+and behavior disputes stay out.
 
 This template is one model turn: read the diff, then post one comment.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Scaffold
 
 ```text

package/docs/templates/thermo-review.md

@@ -6,14 +6,12 @@ description: "Scaffold the agent, deploy it, and open a PR."
 # Review pull requests for bugs and breakage
 
 This agent reads a pull request diff and posts one review comment. It
-reports bugs, breaking side effects, devex breaks, and feature-gate
-leaks in added or modified code. Style nits stay out.
+reports bugs, breaking side effects, developer workflow failures, and
+unintended feature exposure in added or modified code. Style nits stay
+out.
 
 This template is one model turn: read the diff, then post one comment.
 
-The `@cursor/bdk` imports and `bdk` commands on this page are docs-ahead
-until publication; see [BDK package availability](/#bdk-package-availability).
-
 ## Scaffold
 
 ```text