@cursor/bdk 0.2.5 → 0.2.6

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiDH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAQhB,YAAY,EACb,MAAM,aAAa,CAAC;AA2FrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAgDpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAUpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAW/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAuCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAwlC3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiDH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAQhB,YAAY,EACb,MAAM,aAAa,CAAC;AA2FrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAgDpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAUpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAW/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAuCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAwmC3B"}

package/dist/internal/server.js

@@ -177,7 +177,9 @@ export function startServer(mounts_1) {
             explicitRepos: (_o = (_b = options.cursorEvents) === null || _b === void 0 ? void 0 : _b.repos) !== null && _o !== void 0 ? _o : [],
             targets: cursorOriginTargets,
         });
-        const effectiveCursorEvents = (_p = cursorGithubConfig.cursorEvents) !== null && _p !== void 0 ? _p : (cursorOriginScope === undefined ? undefined : { repos: [...cursorOriginScope.repos] });
+        const effectiveCursorEvents = options.evals === true
+            ? undefined
+            : ((_p = cursorGithubConfig.cursorEvents) !== null && _p !== void 0 ? _p : (cursorOriginScope === undefined ? undefined : { repos: [...cursorOriginScope.repos] }));
         // One resolution for every Cursor credential consumer (SDK runner, account
         // MCP bridge, SCM event relay, GitHub credentials): explicit option →
         // CURSOR_API_KEY → CURSOR_API_KEY_FILE (or the hosted default path) →
@@ -788,7 +790,15 @@ export function startServer(mounts_1) {
             validateMountConnectionsConfig(Object.assign(Object.assign({ slug,
                 project, accountRefs: accountRefsBySlug.get(slug) }, (options.publicUrl === undefined ? {} : { publicUrl: options.publicUrl })), { cloudToolsBridge: options.cloudToolsUrl !== undefined }));
         }
-        yield cursorGithubCredentials === null || cursorGithubCredentials === void 0 ? void 0 : cursorGithubCredentials.start();
+        try {
+            yield cursorGithubCredentials === null || cursorGithubCredentials === void 0 ? void 0 : cursorGithubCredentials.start();
+        }
+        catch (error) {
+            if (options.evals !== true) {
+                throw error;
+            }
+            logger(`[agent-sdk] GitHub auth: no Cursor account credential (${error instanceof Error ? error.message : String(error)}); GitHub calls from eval sessions will fail`);
+        }
         // Cursor SCM events: v1 stays on the engine poll. v2 ingest is local-CP
         // only — hosted `--no-control-plane` skips the July poll (hosted CP wakes).
         const routeContinuation = localControlPlaneRoute(runtimes);
@@ -820,12 +830,14 @@ export function startServer(mounts_1) {
         }
         // Cursor deployment-events relay: automatic when a mounted agent authored
         // `deploymentsChannel({ ... })`.
-        const cursorDeploymentRelay = startCursorDeploymentRelay({
-            options,
-            runtimes,
-            accountKey,
-            logger,
-        });
+        const cursorDeploymentRelay = options.evals === true
+            ? undefined
+            : startCursorDeploymentRelay({
+                options,
+                runtimes,
+                accountKey,
+                logger,
+            });
         // Trust --public-url's host when a reverse proxy rewrites Host.
         const browserOriginGuard = browserOriginGuardOptionsForPublicUrl(options.publicUrl);
         const server = createServer((req, res) => {

package/dist/internal/session-links.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-links.d.ts","sourceRoot":"","sources":["../../src/internal/session-links.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAKF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,oBAAoB,CAKpF"}
+{"version":3,"file":"session-links.d.ts","sourceRoot":"","sources":["../../src/internal/session-links.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAKF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,oBAAoB,CAKpF"}

package/dist/internal/session-links.js

@@ -1,3 +1,4 @@
+import { parseGitHubPrContinuationKey } from "../channels/github/github-channel.js";
 import { parseGitHubPrRef } from "../channels/github/replay.js";
 import { slackThreadPermalink } from "../channels/slack/links.js";
 import { extractGithubPrRef } from "../channels/slack/pr-ref.js";
@@ -40,17 +41,17 @@ function slackUrl(record) {
     })) !== null && _j !== void 0 ? _j : undefined);
 }
 function githubUrl(record) {
-    var _a, _b;
-    var _c, _d;
-    const fromTitle = extractGithubPrRef((_c = record.title) !== null && _c !== void 0 ? _c : "");
+    var _a;
+    var _b, _c;
+    const fromTitle = extractGithubPrRef((_b = record.title) !== null && _b !== void 0 ? _b : "");
     if (fromTitle !== undefined) {
         return fromTitle.url;
     }
-    const key = (_d = record.continuationKey) !== null && _d !== void 0 ? _d : "";
-    if (key.startsWith("github-pr:")) {
-        return (_a = parseGitHubPrRef(key.slice("github-pr:".length))) === null || _a === void 0 ? void 0 : _a.url;
+    const fromKey = parseGitHubPrContinuationKey((_c = record.continuationKey) !== null && _c !== void 0 ? _c : "");
+    if (fromKey !== undefined) {
+        return `https://github.com/${fromKey.owner}/${fromKey.repo}/pull/${fromKey.number}`;
     }
-    const repos = (_b = record.cloudOverride) === null || _b === void 0 ? void 0 : _b.repos;
+    const repos = (_a = record.cloudOverride) === null || _a === void 0 ? void 0 : _a.repos;
     if (repos === undefined) {
         return undefined;
     }

package/dist/internal/sessions-client.d.ts

@@ -27,6 +27,7 @@ export declare function fetchSessionEvents(args: {
     sessionId: string;
     auth?: RequestAuth;
     fetchImpl?: typeof fetch;
+    signal?: AbortSignal;
 }): Promise<SessionEvent[]>;
 /**
  * Pick the previous (most recently updated) followable session for

package/dist/internal/sessions-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions-client.d.ts","sourceRoot":"","sources":["../../src/internal/sessions-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEnF,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE7E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAEpF;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CA8B5F;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAiE1B;AAkCD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,cAAc,GAAG,SAAS,CAQ5B;AAED,+DAA+D;AAC/D,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9B;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAIzE;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EAAE,EAC1B,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAAE,GACvC,MAAM,CAgBR"}
+{"version":3,"file":"sessions-client.d.ts","sourceRoot":"","sources":["../../src/internal/sessions-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEnF,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE7E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAEpF;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CA8B5F;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAmE1B;AAkCD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,cAAc,GAAG,SAAS,CAQ5B;AAED,+DAA+D;AAC/D,wBAAsB,wBAAwB,CAAC,IAAI,EAAE;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9B;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAIzE;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EAAE,EAC1B,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAAE,GACvC,MAAM,CAgBR"}

package/dist/internal/sessions-client.js

@@ -60,6 +60,7 @@ export function fetchSessionEvents(args) {
         try {
             const jsonResp = yield fetchImpl(`${baseUrl}${path}?format=json`, {
                 headers: mergeRequestHeaders(args.auth),
+                signal: args.signal,
             });
             if (jsonResp.ok) {
                 const body = (yield jsonResp.json());
@@ -83,6 +84,7 @@ export function fetchSessionEvents(args) {
         try {
             const resp = yield fetchImpl(`${baseUrl}${path}`, {
                 headers: mergeRequestHeaders(args.auth),
+                signal: args.signal,
             });
             if (resp.status === 404) {
                 throw new Error(`Session ${args.sessionId} not found.`);

package/docs/evals.md

@@ -194,8 +194,8 @@ Run `--tag smoke` on pull requests and the full suite on a schedule when
 cost or latency makes every-push coverage impractical. Use soft scores
 for a new probabilistic benchmark until its threshold is trustworthy.
 
-The [CLI reference](./reference/cli.md#eval) covers selectors, hosted
-runs, exit codes, and JSON output.
+The [CLI reference](./reference/cli.md#eval) covers selectors,
+server-side batches, exit codes, and JSON output.
 
 ## Keep side effects out of eval sessions
 

package/docs/templates/agentic-owners.md

@@ -89,6 +89,8 @@ next to the policy that names them. The next review reads both.
 
 ## Evals
 
+Use the three smoke reviews as a local exercise:
+
 ```text
 bdk eval
 ```

package/docs/templates/security-reviewer.md

@@ -14,15 +14,13 @@ This template is one model turn: read the diff, then post one comment.
 ## Scaffold
 
 ```text
-bdk init ./security-reviewer --template security-reviewer
+bdk init ./security-reviewer --template security-reviewer \
+  --var repos=acme/api
 ```
 
-`init` asks which GitHub repos to watch. Every repo must share one
-owner. Pass `--var repos=acme/api,acme/web` to skip the prompt.
-
-The list lands in `bot/lib/repos.ts`. The GitHub channel reads it for
-`cursorAccount` and for the wake filter. Edit that file when the set
-changes.
+`--var repos` must name a repository already connected in Cursor for
+your account. Separate multiple repositories with commas; they must
+share one owner. `init` writes the list to `bot/lib/repos.ts`.
 
 ## Connect GitHub through Cursor
 
@@ -68,7 +66,8 @@ comment.
 
 ## Evals
 
-Two smoke cases: one XSS fixture and one docs-only change.
+Use the two smoke cases, one XSS fixture and one docs-only change, as a
+local exercise:
 
 ```text
 bdk eval

package/docs/templates/thermo-quality-review.md

@@ -64,8 +64,8 @@ API calls use your account. See the [GitHub guide](../guides/github.md).
 
 ## Evals
 
-Two smoke cases: one spaghetti-branch fixture and one clean fix. They
-need no GitHub access.
+Use the two smoke cases, one spaghetti-branch fixture and one clean fix,
+as a local exercise. They need no GitHub access.
 
 ```text
 bdk eval

package/docs/templates/thermo-review.md

@@ -64,8 +64,8 @@ API calls use your account. See the [GitHub guide](../guides/github.md).
 
 ## Evals
 
-Two smoke cases: one auth-bypass fixture and one docs-only change. They
-need no GitHub access.
+Use the two smoke cases, one auth-bypass fixture and one docs-only
+change, as a local exercise. They need no GitHub access.
 
 ```text
 bdk eval

package/docs/templates/triage.md

@@ -45,6 +45,10 @@ In the Cursor dashboard, open MCP and connect Linear or Jira.
 The connection stays on the host. The model calls `record_triage`.
 Linear and Jira tools stay off the model's tool list.
 
+Linear or Jira MCP must be connected for comments, priority changes,
+and duplicate links; queueing an issue can still classify it through
+`record_triage` without that connection.
+
 ## First verdict
 
 ```text
@@ -82,7 +86,8 @@ details, when to call `record_triage`, how to reply.
 
 ## Evals
 
-Three smoke cases, one per kind. Run them after you change the rubric.
+Use the three smoke cases, one per kind, as a local exercise after you
+change the rubric.
 
 ```text
 bdk eval

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/bdk",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Build, test, and deploy BDK bots and agents as code on Cursor's agent harness.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {

package/templates/agents-md/evals/agents.eval.ts

@@ -13,6 +13,7 @@ const AGENTS = [
   "# API",
   "",
   "Usage events are protobuf messages in `proto/billing.proto`.",
+  "Every new billing field goes on `UsageEvent`.",
   "Do not add ad-hoc billing columns on the request path.",
   "",
 ].join("\n");

package/templates/code-wiki/bot/instructions.md

@@ -18,10 +18,10 @@ or ownership change, a removed feature.
 An empty wiki is not a license to document the whole repo. Create a
 page only for a durable contract in this merge.
 
-Skip lint, format, lockfiles, dependency pins, tests-only, cherry-picks,
-backports, telemetry-only changes, one-off bug fixes that leave the
-described behavior the same, knobs the wiki never mentioned, and facts
-the matching page already states.
+Skip lint, format, lockfiles, dependency pins, tests-only, docs-only,
+cherry-picks, backports, telemetry-only changes, one-off bug fixes that
+leave the described behavior the same, knobs the wiki never mentioned,
+and facts the matching page already states.
 
 Do not write a changelog or a PR list.
 

package/templates/security-reviewer/README.md

@@ -3,11 +3,13 @@
 Reviews pull requests for exploitable bugs. Posts one review comment.
 
 ```text
-npx @cursor/bdk init ./security-reviewer --template security-reviewer
+npx @cursor/bdk init ./security-reviewer --template security-reviewer \
+  --var repos=owner/repo
 ```
 
-`init` asks which repos to watch. Skip the prompt with
-`--var repos=owner/repo`.
+`--var repos` must name a repository already connected in Cursor for
+your account. Separate multiple repositories with commas; they must
+share one owner.
 
 ## Run
 

package/templates/security-reviewer/bot/tools/post_findings.ts

@@ -1,6 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { parseGitHubPrRef } from "@cursor/bdk/channels/github";
+import { parseGitHubPrContinuationKey } from "@cursor/bdk/channels/github";
 import { defineTool } from "@cursor/bdk/tools";
 import { z } from "zod";
 
@@ -26,13 +26,9 @@ export default defineTool({
     if (ctx.session.purpose === "eval") {
       return { posted: false, reason: "eval" };
     }
-    const key = ctx.session.continuationKey ?? "";
-    if (!key.startsWith("github-pr:")) {
-      throw new Error("post_findings requires a GitHub pull request session");
-    }
-    const ref = parseGitHubPrRef(key.slice("github-pr:".length));
+    const ref = parseGitHubPrContinuationKey(ctx.session.continuationKey ?? "");
     if (ref === undefined) {
-      throw new Error(`unrecognized PR: ${key}`);
+      throw new Error("post_findings requires a GitHub pull request session");
     }
     const headSha = (await readFile(join(ctx.workspaceDir, "pr/head.sha"), "utf8")).trim();
     if (!SHA.test(headSha)) {
@@ -47,7 +43,11 @@ export default defineTool({
       body: reviewBody(findings),
       event: "COMMENT",
     });
-    return { posted: true, pr: ref.label, url: response.data.html_url };
+    return {
+      posted: true,
+      pr: `${ref.owner}/${ref.repo}#${ref.number}`,
+      url: response.data.html_url,
+    };
   },
 });
 

package/templates/thermo-quality-review/bot/tools/post_findings.ts

@@ -1,6 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { parseGitHubPrRef } from "@cursor/bdk/channels/github";
+import { parseGitHubPrContinuationKey } from "@cursor/bdk/channels/github";
 import { defineTool } from "@cursor/bdk/tools";
 import { z } from "zod";
 
@@ -25,13 +25,9 @@ export default defineTool({
     if (ctx.session.purpose === "eval") {
       return { posted: false, reason: "eval" };
     }
-    const key = ctx.session.continuationKey ?? "";
-    if (!key.startsWith("github-pr:")) {
-      throw new Error("post_findings requires a GitHub pull request session");
-    }
-    const ref = parseGitHubPrRef(key.slice("github-pr:".length));
+    const ref = parseGitHubPrContinuationKey(ctx.session.continuationKey ?? "");
     if (ref === undefined) {
-      throw new Error(`unrecognized PR: ${key}`);
+      throw new Error("post_findings requires a GitHub pull request session");
     }
     const headSha = (await readFile(join(ctx.workspaceDir, "pr/head.sha"), "utf8")).trim();
     if (!SHA.test(headSha)) {
@@ -46,7 +42,11 @@ export default defineTool({
       body: reviewBody(findings),
       event: "COMMENT",
     });
-    return { posted: true, pr: ref.label, url: response.data.html_url };
+    return {
+      posted: true,
+      pr: `${ref.owner}/${ref.repo}#${ref.number}`,
+      url: response.data.html_url,
+    };
   },
 });
 

package/templates/thermo-review/bot/tools/post_findings.ts

@@ -1,6 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { parseGitHubPrRef } from "@cursor/bdk/channels/github";
+import { parseGitHubPrContinuationKey } from "@cursor/bdk/channels/github";
 import { defineTool } from "@cursor/bdk/tools";
 import { z } from "zod";
 
@@ -25,13 +25,9 @@ export default defineTool({
     if (ctx.session.purpose === "eval") {
       return { posted: false, reason: "eval" };
     }
-    const key = ctx.session.continuationKey ?? "";
-    if (!key.startsWith("github-pr:")) {
-      throw new Error("post_findings requires a GitHub pull request session");
-    }
-    const ref = parseGitHubPrRef(key.slice("github-pr:".length));
+    const ref = parseGitHubPrContinuationKey(ctx.session.continuationKey ?? "");
     if (ref === undefined) {
-      throw new Error(`unrecognized PR: ${key}`);
+      throw new Error("post_findings requires a GitHub pull request session");
     }
     const headSha = (await readFile(join(ctx.workspaceDir, "pr/head.sha"), "utf8")).trim();
     if (!SHA.test(headSha)) {
@@ -46,7 +42,11 @@ export default defineTool({
       body: reviewBody(findings),
       event: "COMMENT",
     });
-    return { posted: true, pr: ref.label, url: response.data.html_url };
+    return {
+      posted: true,
+      pr: `${ref.owner}/${ref.repo}#${ref.number}`,
+      url: response.data.html_url,
+    };
   },
 });