@cursor/bdk 0.2.6 → 0.2.8

package/dist/internal/sdk-runner.js

@@ -19,9 +19,8 @@ import { Agent, Cursor, createAgentPlatform, } from "@cursor/sdk";
 import { SqliteLocalAgentStore } from "@cursor/sdk/sqlite";
 import { DEFAULT_MODEL, } from "../types.js";
 import { mapSdkTokenUsage, usageTokenSum } from "./cloud-turn-cost.js";
-import { resolveApiKeySync } from "./cursor/credentials.js";
+import { resolveApiKeySync, SIGN_IN_HINT } from "./cursor/credentials.js";
 import { describeError } from "./describe-error.js";
-import { CLI_COMMAND_NAME as CLI } from "./distribution.js";
 import { sleep } from "./sleep.js";
 /**
  * How long a non-`--dev` serve holds workspace scans (rules, skills,
@@ -190,11 +189,12 @@ export class CursorSdkRunner {
         this.activeRuns = new Map();
         this.stores = new Map();
         this.prewarmReleases = [];
+        this.pendingPersists = new Map();
         if (options.workspaceScanCacheTtlMs !== undefined) {
             Cursor.configure({
                 local: { workspaceScanCacheTtlMs: options.workspaceScanCacheTtlMs },
             });
-            this.log(`[agent-sdk] workspace scan cache ttl=${options.workspaceScanCacheTtlMs}ms`);
+            this.log(`[bdk] workspace scan cache ttl=${options.workspaceScanCacheTtlMs}ms`);
         }
     }
     runTurn(request) {
@@ -205,7 +205,7 @@ export class CursorSdkRunner {
             // the Grok Bot runner — running it on the local harness would silently
             // swap the box (and the SendToUser contract) out from under the agent.
             if (request.runtime === "grokbot") {
-                throw new Error(`Session ${request.sessionId} is a grokbot turn, which the Cursor SDK runner cannot execute. Serve must route grokbot turns to the Grok Bot runner.`);
+                throw new Error(`Session ${request.sessionId} is a grokbot turn, which the local and cloud turn runner cannot execute. Serve must route grokbot turns to the Grok Bot runner.`);
             }
             const models = modelAttemptChain(request);
             let lastError;
@@ -266,7 +266,7 @@ export class CursorSdkRunner {
             }
             // Log the original error even when the retry succeeds so the expiry
             // still shows up in Datadog.
-            this.log(`[agent-sdk] session ${request.sessionId}: ${reason}: ${outcome.errorMessage}; retrying the turn`);
+            this.log(`[bdk] session ${request.sessionId}: ${reason}: ${outcome.errorMessage}; retrying the turn`);
             try {
                 return yield this.runTurnAttempt(tracked);
             }
@@ -276,7 +276,7 @@ export class CursorSdkRunner {
         });
     }
     logModelFallback(sessionId, from, to, message) {
-        this.log(`[agent-sdk] session ${sessionId}: cannot use model ${modelSettingLabel(from)}; retrying on ${modelSettingLabel(to)}: ${message !== null && message !== void 0 ? message : "model unavailable"}`);
+        this.log(`[bdk] session ${sessionId}: cannot use model ${modelSettingLabel(from)}; retrying on ${modelSettingLabel(to)}: ${message !== null && message !== void 0 ? message : "model unavailable"}`);
     }
     runTurnAttempt(request) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -363,17 +363,18 @@ export class CursorSdkRunner {
                         this.activeRuns.delete(request.sessionId);
                     }
                     signal === null || signal === void 0 ? void 0 : signal.removeEventListener("abort", onAbort);
-                    // Mirror the conversation before replying: on hosted v2 the pod can
-                    // be parked as soon as the execution reply lands, so a
-                    // fire-and-forget write would race VM teardown. In the `finally` so
-                    // a `wait()` that THROWS (transport death mid-turn, an abort with
-                    // no follow-up) still persists the checkpoints the turn already
-                    // wrote — the store is local SQLite, safe to read on the throw
-                    // path, and persistConversation swallows its own errors. Guarded
-                    // here (not just inside the helper) so unmirrored turns keep their
-                    // exact post-wait sequencing.
+                    // Mirror the conversation without holding the turn outcome: on
+                    // hosted v2 the pod can be parked as soon as the execution reply
+                    // lands, so the engine's durability drain awaits this write through
+                    // drainConversation before that reply, not before turn.completed.
+                    // In the `finally` so a `wait()` that THROWS (transport death
+                    // mid-turn, an abort with no follow-up) still persists the
+                    // checkpoints the turn already wrote — the store is local SQLite,
+                    // safe to read on the throw path, and persistConversation swallows
+                    // its own errors. Guarded here (not just inside the helper) so
+                    // unmirrored turns keep their exact post-wait sequencing.
                     if (request.runtime === "local" && this.options.conversationMirror !== undefined) {
-                        yield this.persistConversation(request, agent.agentId);
+                        this.trackPersist(request.sessionId, this.persistConversation(request, agent.agentId));
                     }
                 }
             }
@@ -395,7 +396,7 @@ export class CursorSdkRunner {
                 return yield run.steer(request.text);
             }
             catch (error) {
-                this.log(`[agent-sdk] session ${request.sessionId}: steer failed: ${describeError(error)}`);
+                this.log(`[bdk] session ${request.sessionId}: steer failed: ${describeError(error)}`);
                 return "revert_to_followup";
             }
         });
@@ -431,8 +432,22 @@ export class CursorSdkRunner {
         }
         this.evictAgent(sessionId, cached.agent);
     }
+    drainConversation(sessionId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.pendingPersists.get(sessionId);
+        });
+    }
+    trackPersist(sessionId, persist) {
+        const tracked = Promise.all([this.pendingPersists.get(sessionId), persist]).then(() => {
+            if (this.pendingPersists.get(sessionId) === tracked) {
+                this.pendingPersists.delete(sessionId);
+            }
+        });
+        this.pendingPersists.set(sessionId, tracked);
+    }
     dispose() {
         return __awaiter(this, void 0, void 0, function* () {
+            yield Promise.allSettled([...this.pendingPersists.values()]);
             const releases = this.prewarmReleases.splice(0);
             yield Promise.allSettled(releases.map(release => release()));
             const agents = yield Promise.allSettled([...this.agents.values()].map(handle => handle.agent));
@@ -453,7 +468,7 @@ export class CursorSdkRunner {
             }
             // Past this age the handle's exchanged access token could expire
             // mid-turn. Retire it and reopen below on a fresh transport.
-            this.log(`[agent-sdk] session ${request.sessionId}: recycling the SDK agent handle after ${Math.round(ageMs / 60000)} min so the turn runs on a fresh access token`);
+            this.log(`[bdk] session ${request.sessionId}: recycling the SDK agent handle after ${Math.round(ageMs / 60000)} min so the turn runs on a fresh access token`);
             this.evictAgent(request.sessionId, cached.agent);
         }
         const agentPromise = this.openAgent(request).catch(error => {
@@ -492,7 +507,7 @@ export class CursorSdkRunner {
     requireApiKey() {
         const resolved = resolveApiKeySync({ apiKey: this.options.apiKey });
         if (resolved === undefined) {
-            throw new Error(`The Cursor SDK runner requires a Cursor credential: run \`${CLI} login\`, set CURSOR_API_KEY, CURSOR_SERVICE_ACCOUNT_KEY, or CURSOR_API_KEY_FILE, or pass serve({ apiKey }).`);
+            throw new Error(`BDK needs a Cursor credential to run turns. ${SIGN_IN_HINT}`);
         }
         return resolved.apiKey;
     }
@@ -562,7 +577,7 @@ export class CursorSdkRunner {
                 // conversation under the same id beats failing this thread's turns
                 // forever ("Agent … not found" on every follow-up). The channel's
                 // warm-turn prompt context re-hydrates the thread history.
-                this.log(`[agent-sdk] no stored conversation for ${agentId} on this host; starting a fresh one`);
+                this.log(`[bdk] no stored conversation for ${agentId} on this host; starting a fresh one`);
                 return Agent.create(Object.assign(Object.assign({}, options), { agentId }));
             }
         });
@@ -599,7 +614,7 @@ export class CursorSdkRunner {
             // session would otherwise fail every future turn. Mirror the local
             // host-replacement path above: a fresh conversation beats failing this
             // thread forever, and the new id binds to the session for later resumes.
-            this.log(`[agent-sdk] cloud session ${request.sessionId} has no bound cloud agent; creating a fresh one`);
+            this.log(`[bdk] cloud session ${request.sessionId} has no bound cloud agent; creating a fresh one`);
             return Agent.create(options);
         });
     }
@@ -623,7 +638,7 @@ export class CursorSdkRunner {
                 yield mirror.persist(store, sdkAgentId);
             }
             catch (error) {
-                this.log(`[agent-sdk] conversation mirror: persist for ${sdkAgentId} failed: ${error instanceof Error ? error.message : String(error)}`);
+                this.log(`[bdk] conversation mirror: persist for ${sdkAgentId} failed: ${error instanceof Error ? error.message : String(error)}`);
             }
         });
     }

package/dist/internal/server.d.ts

@@ -4,6 +4,7 @@
  * routes, custom channel routes (under `/v1/channels/<id>`), and the
  * server-level health / info / dev-dispatch routes.
  */
+import { type ServerResponse } from "node:http";
 import type { AgentProject, AgentServeHandle, ServeOptions } from "../types.js";
 import type { McpOauthSecretsTarget } from "./mcp-oauth-persist.js";
 import { type AgentRunner } from "./sdk-runner.js";
@@ -37,4 +38,5 @@ export interface StartServerInternalOptions {
  * under `/<slug>/v1/*` and `/<slug>/playground`, with an index at `/`.
  */
 export declare function startServer(mounts: AgentMount[], options?: ServeOptions & StartServerInternalOptions): Promise<AgentServeHandle>;
+export declare function writeFetchResponse(response: Response, res: ServerResponse, method?: string): Promise<void>;
 //# sourceMappingURL=server.d.ts.map

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiDH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAQhB,YAAY,EACb,MAAM,aAAa,CAAC;AA2FrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAgDpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAUpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAW/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAuCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAwmC3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAsC,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AA6CpF,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAQhB,YAAY,EACb,MAAM,aAAa,CAAC;AA2FrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAgDpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAUpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAW/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAuCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAwmC3B;AAilDD,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,cAAc,EACnB,MAAM,SAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/internal/server.js

@@ -239,13 +239,13 @@ export function startServer(mounts_1) {
                     if (options.allowAnonymousCursorGithub !== true) {
                         throw new Error("githubChannel({ cursorAccount: true }) cannot be served with --allow-anonymous because admitted callers could use the signed-in account's GitHub access. If every admitted caller is trusted (e.g. behind an SSO proxy), opt in with --allow-anonymous-cursor-github.");
                     }
-                    logger("[agent-sdk] warning: --allow-anonymous-cursor-github — every admitted HTTP caller can drive sessions holding the signed-in account's repo-scoped GitHub credential; serve this only behind a trusted boundary (e.g. an SSO proxy)");
+                    logger("[bdk] warning: --allow-anonymous-cursor-github — every admitted HTTP caller can drive sessions holding the signed-in account's repo-scoped GitHub credential; serve this only behind a trusted boundary (e.g. an SSO proxy)");
                     if (githubApiKeyNow === undefined) {
-                        logger("[agent-sdk] GitHub auth: listening unsigned; credentials bind at task via CURSOR_API_KEY or CURSOR_API_KEY_FILE");
+                        logger("[bdk] GitHub auth: listening unsigned; credentials bind at task via CURSOR_API_KEY or CURSOR_API_KEY_FILE");
                     }
                 }
                 if (cursorGithubConfig.permissions === "contents-write") {
-                    logger('[agent-sdk] warning: Cursor GitHub credentials include contents:write — the host holds a push-capable token shared with model-driven tools and untrusted webhook content; prefer permissions: "pr-write" unless this agent must push code');
+                    logger('[bdk] warning: Cursor GitHub credentials include contents:write — the host holds a push-capable token shared with model-driven tools and untrusted webhook content; prefer permissions: "pr-write" unless this agent must push code');
                 }
                 const githubAuthBaseUrl = cursorExternalApiUrl();
                 const requireGithubApiKey = () => __awaiter(this, void 0, void 0, function* () {
@@ -286,7 +286,7 @@ export function startServer(mounts_1) {
                             target.accountRuntime.credentials.bind(requireGithubApiKey);
                             target.accountRuntime.credentials.bindProxyTransport(proxyTransport);
                         }
-                        logger(`[agent-sdk] GitHub auth: channel API calls route through ${githubProxyUrl}`);
+                        logger(`[bdk] GitHub auth: channel API calls route through ${githubProxyUrl}`);
                     }
                     else {
                         for (const target of cursorGithubTargets) {
@@ -316,7 +316,7 @@ export function startServer(mounts_1) {
                         getApiKey: requireGithubApiKey,
                         transport: proxyTransport,
                     });
-                    logger(`[agent-sdk] GitHub auth: channel and host API calls route through ${githubProxyUrl} (repo scope per request)`);
+                    logger(`[bdk] GitHub auth: channel and host API calls route through ${githubProxyUrl} (repo scope per request)`);
                 }
             }
         }
@@ -351,7 +351,7 @@ export function startServer(mounts_1) {
                 }
             }
             if (gitlabTargets > 0) {
-                logger(`[agent-sdk] GitLab auth: channel API calls route through ${gitlabProxyUrl}`);
+                logger(`[bdk] GitLab auth: channel API calls route through ${gitlabProxyUrl}`);
             }
             // Bitbucket `cursorAccount` channels: same shape, `/v0/bitbucket-proxy`
             // with `x-cursor-bitbucket-repos` scope. The proxy picks Cloud 2.0 or
@@ -384,7 +384,7 @@ export function startServer(mounts_1) {
                 }
             }
             if (bitbucketTargets > 0) {
-                logger(`[agent-sdk] Bitbucket auth: channel API calls route through ${bitbucketProxyUrl}`);
+                logger(`[bdk] Bitbucket auth: channel API calls route through ${bitbucketProxyUrl}`);
             }
         }
         const resolvedCursorGithubCredentials = cursorGithubCredentials;
@@ -403,7 +403,7 @@ export function startServer(mounts_1) {
             yield ensureDocsSiteBundle(logger);
         }
         if (options.allowAnonymous === true) {
-            logger("[agent-sdk] warning: --allow-anonymous admits every HTTP caller as the same principal; use only on a trusted network (e.g. Tailscale) and prefer --bearer-token for shared hosts");
+            logger("[bdk] warning: --allow-anonymous admits every HTTP caller as the same principal; use only on a trusted network (e.g. Tailscale) and prefer --bearer-token for shared hosts");
         }
         // v2 hosted engines mirror the SDK conversation store to the deployment's
         // shared file storage so a fresh pod resumes threads instead of forking
@@ -461,7 +461,7 @@ export function startServer(mounts_1) {
             if (options.allowAnonymousGrokbot !== true) {
                 throw new Error('runtime: "grokbot" cannot be served with --allow-anonymous because admitted callers could drive the signed-in account\'s hosted Grok Bot computer. If every admitted caller is trusted (e.g. behind an SSO proxy), opt in with --allow-anonymous-grokbot.');
             }
-            logger("[agent-sdk] warning: --allow-anonymous-grokbot — every admitted HTTP caller can drive turns on the signed-in account's hosted Grok Bot computer; serve this only behind a trusted boundary (e.g. an SSO proxy)");
+            logger("[bdk] warning: --allow-anonymous-grokbot — every admitted HTTP caller can drive turns on the signed-in account's hosted Grok Bot computer; serve this only behind a trusted boundary (e.g. an SSO proxy)");
         }
         let runner = sdkRunner;
         if (hasGrokBotMounts && options.runner === undefined) {
@@ -482,7 +482,7 @@ export function startServer(mounts_1) {
                     backendUrl: cursorExternalApiUrl(),
                 }),
             });
-            logger("[agent-sdk] grokbot runtime: remote client (turns run on the hosted Grok Bot harness)");
+            logger("[bdk] grokbot runtime: remote client (turns run on the hosted Grok Bot harness)");
         }
         const router = new Router();
         const runtimes = [];
@@ -505,7 +505,7 @@ export function startServer(mounts_1) {
         if (options.allowAnonymous === true &&
             options.allowAnonymousCursorAccountMcp === true &&
             accountRefsBySlug.size > 0) {
-            logger("[agent-sdk] warning: --allow-anonymous-cursor-account-mcp — every admitted HTTP caller can drive Cursor account MCP connectors; serve this only behind a trusted boundary (e.g. an SSO proxy or hosted alias token)");
+            logger("[bdk] warning: --allow-anonymous-cursor-account-mcp — every admitted HTTP caller can drive Cursor account MCP connectors; serve this only behind a trusted boundary (e.g. an SSO proxy or hosted alias token)");
         }
         let accountBridge;
         if (accountRefsBySlug.size > 0) {
@@ -513,7 +513,7 @@ export function startServer(mounts_1) {
                 throw new Error(`This project has Cursor account MCP connections (defineConnection({ cursorAccount: true })) but the host is not signed in to Cursor. ${SIGN_IN_HINT}`);
             }
             if (accountKey === undefined) {
-                logger("[agent-sdk] Cursor account MCP: listening unsigned; credentials bind at task via CURSOR_API_KEY or CURSOR_API_KEY_FILE");
+                logger("[bdk] Cursor account MCP: listening unsigned; credentials bind at task via CURSOR_API_KEY or CURSOR_API_KEY_FILE");
             }
             accountBridge = new CursorAccountMcpBridge({
                 client: new CursorBackendClient({
@@ -676,7 +676,7 @@ export function startServer(mounts_1) {
                         yield definition.onStart(startArgs);
                     }
                     catch (error) {
-                        logger(`[agent-sdk] channel "${channel.id}" onStart failed: ${error instanceof Error ? ((_0 = error.stack) !== null && _0 !== void 0 ? _0 : error.message) : String(error)}`);
+                        logger(`[bdk] channel "${channel.id}" onStart failed: ${error instanceof Error ? ((_0 = error.stack) !== null && _0 !== void 0 ? _0 : error.message) : String(error)}`);
                     }
                 }
             }
@@ -797,7 +797,7 @@ export function startServer(mounts_1) {
             if (options.evals !== true) {
                 throw error;
             }
-            logger(`[agent-sdk] GitHub auth: no Cursor account credential (${error instanceof Error ? error.message : String(error)}); GitHub calls from eval sessions will fail`);
+            logger(`[bdk] GitHub auth: no Cursor account credential (${error instanceof Error ? error.message : String(error)}); GitHub calls from eval sessions will fail`);
         }
         // Cursor SCM events: v1 stays on the engine poll. v2 ingest is local-CP
         // only — hosted `--no-control-plane` skips the July poll (hosted CP wakes).
@@ -820,13 +820,13 @@ export function startServer(mounts_1) {
                 localCp.attachScmEvents(controlPlaneScmRelay);
             }
             else {
-                logger("[agent-sdk] cursor-events: skipping v2 scm-events poll (--no-control-plane); hosted CP owns ingest");
+                logger("[bdk] cursor-events: skipping v2 scm-events poll (--no-control-plane); hosted CP owns ingest");
             }
         }
         else if (hostedControlPlaneOwnsIngest && effectiveCursorEvents !== undefined) {
             // No credential was required above, so no relay object was built; the
             // outcome is the same skip.
-            logger("[agent-sdk] cursor-events: skipping v2 scm-events poll (--no-control-plane); hosted CP owns ingest");
+            logger("[bdk] cursor-events: skipping v2 scm-events poll (--no-control-plane); hosted CP owns ingest");
         }
         // Cursor deployment-events relay: automatic when a mounted agent authored
         // `deploymentsChannel({ ... })`.
@@ -903,7 +903,7 @@ export function startServer(mounts_1) {
                     : `${options.publicUrl.replace(/\/$/, "")}${basePath}${TOOL_MCP_ENDPOINT_PATH}`);
                 if (publicToolsUrl === undefined) {
                     if (hasServerTools) {
-                        logger(`[agent-sdk] warning: agent "${runtime.project.name}" has server tools but no --public-url or --cloud-tools-url; cloud turns omit those tools.`);
+                        logger(`[bdk] warning: agent "${runtime.project.name}" has server tools but no --public-url or --cloud-tools-url; cloud turns omit those tools.`);
                     }
                 }
                 else {
@@ -922,7 +922,7 @@ export function startServer(mounts_1) {
                         if (options.allowAnonymous !== true) {
                             throw new Error(`Agent "${runtime.project.name}" needs a Cursor API key to authenticate --cloud-tools-url. ${SIGN_IN_HINT}`);
                         }
-                        logger(`[agent-sdk] --cloud-tools-url: listening unsigned; Bearer resolves after task-time credential binding`);
+                        logger(`[bdk] --cloud-tools-url: listening unsigned; Bearer resolves after task-time credential binding`);
                     }
                     runtime.engine.setCloudServerToolsConnection(Object.assign({ type: "http", url: publicToolsUrl }, (headers === undefined ? {} : { headers })), resolveCloudToolsHeaders);
                 }
@@ -1045,7 +1045,7 @@ export function startServer(mounts_1) {
                         yield stop();
                     }
                     catch (error) {
-                        logger(`[agent-sdk] channel onStop failed: ${error instanceof Error ? ((_b = error.stack) !== null && _b !== void 0 ? _b : error.message) : String(error)}`);
+                        logger(`[bdk] channel onStop failed: ${error instanceof Error ? ((_b = error.stack) !== null && _b !== void 0 ? _b : error.message) : String(error)}`);
                     }
                 }
                 server.close();
@@ -1264,9 +1264,8 @@ function mountAgentRoutes(router, runtime, args) {
                 const includeAll = relaxSessionReadAuth &&
                     (relaxSessionReadAuthBeyondLoopback ||
                         (typeof ctx.requestIp === "string" && isLoopbackAddress(ctx.requestIp)));
-                // `?latest=1` — only the newest visible session. Clients binding a
-                // default session (agsh) do not need the whole list, and on hosted
-                // storage the whole list is a database scan.
+                // `?latest=1` returns only the newest visible session. Clients
+                // binding a default session do not need the cost of a full listing.
                 const latest = new URL(request.url).searchParams.get("latest");
                 const listed = latest === "1" || latest === "true"
                     ? yield engine.latestSessionWithSource(ctx.auth, { includeAll })
@@ -1877,7 +1876,7 @@ function requireCursorEventsAuth(config, accountKey) {
     var _a, _b, _c;
     const apiKey = ((_b = (_a = config.apiKey) !== null && _a !== void 0 ? _a : accountKey === null || accountKey === void 0 ? void 0 : accountKey.apiKey) !== null && _b !== void 0 ? _b : "").trim();
     if (apiKey === "") {
-        throw new Error(`[agent-sdk] --cursor-events (serve({ cursorEvents })) requires a signed-in Cursor account: the SCM event stream is read as the host's user. ${SIGN_IN_HINT}`);
+        throw new Error(`[bdk] --cursor-events (serve({ cursorEvents })) requires a signed-in Cursor account: the SCM event stream is read as the host's user. ${SIGN_IN_HINT}`);
     }
     return {
         apiKey,
@@ -1942,7 +1941,7 @@ function assertSingleCursorEventsLane(input) {
         collectCursorEventSubscriptions(Object.assign({ mounts: input.v2Mounts }, shared)).length === 0) {
         return;
     }
-    throw new Error("[agent-sdk] cursor-events: refusing to serve v1 and v2 github/origin agents in one process — they would open two /v0/scm-events consumers. Serve one architecture per process.");
+    throw new Error("[bdk] cursor-events: refusing to serve v1 and v2 github/origin agents in one process — they would open two /v0/scm-events consumers. Serve one architecture per process.");
 }
 function startCursorEventRelay(input) {
     var _a;
@@ -1958,17 +1957,17 @@ function startCursorEventRelay(input) {
     });
     if (subscriptions.length === 0) {
         if (input.lane === "engine" && input.skippedV2 === true) {
-            logger("[agent-sdk] cursor-events: no v1 github/origin targets; v2 ingest is control-plane only");
+            logger("[bdk] cursor-events: no v1 github/origin targets; v2 ingest is control-plane only");
         }
         else if (input.lane === "control-plane") {
             return undefined;
         }
         else if (input.githubRepos.every(repo => repo.trim() === "") &&
             input.originRepos.every(repo => repo.trim() === "")) {
-            logger("[agent-sdk] cursor-events: no repos configured (pass --repo owner/name); relay disabled");
+            logger("[bdk] cursor-events: no repos configured (pass --repo owner/name); relay disabled");
         }
         else {
-            logger("[agent-sdk] cursor-events: no mounted agent declares a github or origin channel; relay disabled");
+            logger("[bdk] cursor-events: no mounted agent declares a github or origin channel; relay disabled");
         }
         return undefined;
     }
@@ -2021,16 +2020,16 @@ function startCursorEventRelay(input) {
         return relay;
     }
     relay.start();
-    logger(`[agent-sdk] cursor-events: relaying ${subscriptions.length} subscription(s) from ${auth.baseUrl}`);
+    logger(`[bdk] cursor-events: relaying ${subscriptions.length} subscription(s) from ${auth.baseUrl}`);
     return relay;
 }
 function logCursorScmDispatch(logger, event, result) {
     const outcomes = result.targets.map(target => formatCursorScmDispatchOutcome(target)).join(", ");
     const rejected = result.targets.filter(target => target.status >= 400);
     if (rejected.length > 0) {
-        logger(`[agent-sdk] cursor-events: dropped ${formatCursorScmEventLog(event)} before hook: ${rejected.map(formatCursorScmDispatchOutcome).join(", ")}`);
+        logger(`[bdk] cursor-events: dropped ${formatCursorScmEventLog(event)} before hook: ${rejected.map(formatCursorScmDispatchOutcome).join(", ")}`);
     }
-    logger(`[agent-sdk] cursor-events: dispatched ${formatCursorScmEventLog(event)}${outcomes === "" ? "" : ` → ${outcomes}`}`);
+    logger(`[bdk] cursor-events: dispatched ${formatCursorScmEventLog(event)}${outcomes === "" ? "" : ` → ${outcomes}`}`);
 }
 function collectCursorGithubTargets(mounts) {
     const targets = [];
@@ -2173,7 +2172,7 @@ function startCursorDeploymentRelay(input) {
     }
     if (accountKey === undefined) {
         if (input.options.allowAnonymous === true) {
-            logger("[agent-sdk] deployment-events: skipped while unsigned; long-poll relays need a key at start");
+            logger("[bdk] deployment-events: skipped while unsigned; long-poll relays need a key at start");
             return undefined;
         }
         throw new Error(`This project has channels subscribed to deployment events (deploymentsChannel({ ... })) but the host is not signed in to Cursor. ${SIGN_IN_HINT}`);
@@ -2183,7 +2182,7 @@ function startCursorDeploymentRelay(input) {
     // names every source, so a channel that omits the option registers nothing.
     const initial = liveDeploymentSubscriptionUnion(targets);
     if (initial.length === 0) {
-        logger(`[agent-sdk] deployment-events: no deploy sources yet on ${targets
+        logger(`[bdk] deployment-events: no deploy sources yet on ${targets
             .map(target => `${target.runtime.slug || target.runtime.project.name}/${target.channelId}`)
             .join(", ")}; the relay will register when a channel lists some`);
     }
@@ -2216,7 +2215,7 @@ function startCursorDeploymentRelay(input) {
         }),
     });
     relay.start();
-    logger(`[agent-sdk] deployment-events: relaying ${initial.length} deploy-source subscription(s) to ${targets.length} channel(s)`);
+    logger(`[bdk] deployment-events: relaying ${initial.length} deploy-source subscription(s) to ${targets.length} channel(s)`);
     return relay;
 }
 function buildChannelHandlerArgs(input) {
@@ -2301,7 +2300,7 @@ function handleRequest(router, req, res, logger, browserOriginGuard) {
                     : errorResponse(mapped.status, mapped.code, mapped.message);
             }
             else {
-                logger(`[agent-sdk] request failed: ${error instanceof Error ? ((_c = error.stack) !== null && _c !== void 0 ? _c : error.message) : String(error)}`);
+                logger(`[bdk] request failed: ${error instanceof Error ? ((_c = error.stack) !== null && _c !== void 0 ? _c : error.message) : String(error)}`);
                 const snippet = hostedErrorStackSnippet(error);
                 const message = hostedDeliveryRequest
                     ? hostedErrorMessageOnly(error)
@@ -2322,7 +2321,7 @@ function handleRequest(router, req, res, logger, browserOriginGuard) {
             yield writeFetchResponse(response, res, method);
         }
         catch (error) {
-            logger(`[agent-sdk] response write failed: ${error instanceof Error ? error.message : String(error)}`);
+            logger(`[bdk] response write failed: ${error instanceof Error ? error.message : String(error)}`);
             res.destroy();
         }
     });
@@ -2388,7 +2387,7 @@ function readBody(req) {
         return Buffer.concat(chunks);
     });
 }
-function writeFetchResponse(response_1, res_1) {
+export function writeFetchResponse(response_1, res_1) {
     return __awaiter(this, arguments, void 0, function* (response, res, method = "GET") {
         const headers = {};
         response.headers.forEach((value, key) => {
@@ -2397,8 +2396,10 @@ function writeFetchResponse(response_1, res_1) {
         res.writeHead(response.status, headers);
         // HEAD responses must not include a body (RFC 9110 §9.3.2). Cancel any
         // handler-produced stream so long-lived GET handlers (e.g. session SSE)
-        // still unsubscribe when served via the HEAD→GET fallback.
-        if (method === "HEAD" || response.body === null) {
+        // still unsubscribe when served via the HEAD→GET fallback. A client that
+        // left while the handler ran gets no body either: its `close` has already
+        // fired, so the loop below would wait on a drain that never comes.
+        if (method === "HEAD" || response.body === null || res.destroyed) {
             if (response.body !== null) {
                 void response.body.cancel().catch(() => { });
             }