@cursor/bdk 0.2.9 → 0.2.10

package/dist/internal/host-platforms.js

@@ -2,15 +2,6 @@
  * Host-side GitHub + Slack clients shared across tools, channel routes,
  * schedules, and channel packs — same injection pattern as MCP.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { WebClient } from "@slack/web-api";
 import { createGitHubOctokit } from "../channels/github/api.js";
 import { ensureGhCliTokenEnv, hasGitHubAppCredentials, resolveCredentialValue, resolveGitHubInstallationId, tryResolveGhAuthToken, } from "../channels/github/auth.js";
@@ -19,9 +10,9 @@ import { slackEnvKeys, tryResolveBotToken } from "../channels/slack/credentials.
 export function createHostSlackClient(options = {}) {
     let slackPromise;
     return {
-        getClient: () => __awaiter(this, void 0, void 0, function* () {
-            slackPromise !== null && slackPromise !== void 0 ? slackPromise : (slackPromise = (() => __awaiter(this, void 0, void 0, function* () {
-                const token = yield tryResolveBotToken(options.credentials);
+        getClient: async () => {
+            slackPromise ??= (async () => {
+                const token = await tryResolveBotToken(options.credentials);
                 if (token === undefined) {
                     const botKey = slackEnvKeys(options.envPrefix).bot;
                     const hint = options.envPrefix === undefined || options.envPrefix.trim() === ""
@@ -30,9 +21,9 @@ export function createHostSlackClient(options = {}) {
                     throw new Error(`No Slack bot token available (set ${hint}).`);
                 }
                 return new WebClient(token);
-            }))());
+            })();
             return slackPromise;
-        }),
+        },
     };
 }
 /**
@@ -45,9 +36,9 @@ export function createHostPlatforms(options = {}) {
     return {
         github: {
             getOctokit: () => {
-                octokitPromise !== null && octokitPromise !== void 0 ? octokitPromise : (octokitPromise = createGitHubOctokit({
+                octokitPromise ??= createGitHubOctokit({
                     credentials: options.githubCredentials,
-                }));
+                });
                 return octokitPromise;
             },
         },
@@ -62,19 +53,17 @@ export function createHostPlatforms(options = {}) {
  * Order matches {@link createGitHubOctokit}: App installation, then
  * `GITHUB_TOKEN` / `GH_TOKEN`, then `gh auth token`.
  */
-export function resolveHostGitHubAuthSource() {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        if ((yield hasGitHubAppCredentials()) && (yield resolveGitHubInstallationId()) !== undefined) {
-            return "app";
-        }
-        const fromEnv = (_a = (yield resolveCredentialValue(process.env.GITHUB_TOKEN))) !== null && _a !== void 0 ? _a : (yield resolveCredentialValue(process.env.GH_TOKEN));
-        if (fromEnv !== undefined) {
-            return "env";
-        }
-        const fromGh = yield tryResolveGhAuthToken();
-        return fromGh === undefined ? "unavailable" : "gh";
-    });
+export async function resolveHostGitHubAuthSource() {
+    if ((await hasGitHubAppCredentials()) && (await resolveGitHubInstallationId()) !== undefined) {
+        return "app";
+    }
+    const fromEnv = (await resolveCredentialValue(process.env.GITHUB_TOKEN)) ??
+        (await resolveCredentialValue(process.env.GH_TOKEN));
+    if (fromEnv !== undefined) {
+        return "env";
+    }
+    const fromGh = await tryResolveGhAuthToken();
+    return fromGh === undefined ? "unavailable" : "gh";
 }
 /**
  * Soft boot-time GitHub auth check: log the resolved source and optionally
@@ -84,43 +73,40 @@ export function resolveHostGitHubAuthSource() {
  * authenticate on corp hosts that have no PAT / `gh
  * auth login`. Never fails serve — missing auth is logged as a warning.
  */
-export function warmupHostGitHubAuth(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        const source = (_a = options.authSource) !== null && _a !== void 0 ? _a : (yield resolveHostGitHubAuthSource());
-        if (source === "unavailable") {
-            options.logger("[bdk] GitHub auth: unavailable (set GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY + GITHUB_APP_INSTALLATION_ID, or GITHUB_TOKEN / GH_TOKEN, or run `gh auth login`)");
-            return source;
-        }
-        let exportedGhToken = false;
-        if (source === "app") {
-            try {
-                exportedGhToken = yield ensureGhCliTokenEnv();
-            }
-            catch (error) {
-                options.logger(`[bdk] GitHub auth: failed to export GH_TOKEN for gh CLI: ${error instanceof Error ? error.message : String(error)}`);
-            }
-        }
-        const label = source === "cursor-account"
-            ? "Cursor account repo-scoped credential (also exported as GH_TOKEN for gh CLI)"
-            : source === "app"
-                ? exportedGhToken
-                    ? "GitHub App installation token (also exported as GH_TOKEN for gh CLI)"
-                    : "GitHub App installation token"
-                : source === "env"
-                    ? "GITHUB_TOKEN/GH_TOKEN"
-                    : "gh auth token";
-        if (options.github === undefined) {
-            options.logger(`[bdk] GitHub auth: ${label}`);
-            return source;
-        }
+export async function warmupHostGitHubAuth(options) {
+    const source = options.authSource ?? (await resolveHostGitHubAuthSource());
+    if (source === "unavailable") {
+        options.logger("[bdk] GitHub auth: unavailable (set GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY + GITHUB_APP_INSTALLATION_ID, or GITHUB_TOKEN / GH_TOKEN, or run `gh auth login`)");
+        return source;
+    }
+    let exportedGhToken = false;
+    if (source === "app") {
         try {
-            yield options.github.getOctokit();
-            options.logger(`[bdk] GitHub auth: ${label}`);
+            exportedGhToken = await ensureGhCliTokenEnv();
         }
         catch (error) {
-            options.logger(`[bdk] GitHub auth: ${label} resolved but Octokit warmup failed: ${error instanceof Error ? error.message : String(error)}`);
+            options.logger(`[bdk] GitHub auth: failed to export GH_TOKEN for gh CLI: ${error instanceof Error ? error.message : String(error)}`);
         }
+    }
+    const label = source === "cursor-account"
+        ? "Cursor account repo-scoped credential (also exported as GH_TOKEN for gh CLI)"
+        : source === "app"
+            ? exportedGhToken
+                ? "GitHub App installation token (also exported as GH_TOKEN for gh CLI)"
+                : "GitHub App installation token"
+            : source === "env"
+                ? "GITHUB_TOKEN/GH_TOKEN"
+                : "gh auth token";
+    if (options.github === undefined) {
+        options.logger(`[bdk] GitHub auth: ${label}`);
         return source;
-    });
+    }
+    try {
+        await options.github.getOctokit();
+        options.logger(`[bdk] GitHub auth: ${label}`);
+    }
+    catch (error) {
+        options.logger(`[bdk] GitHub auth: ${label} resolved but Octokit warmup failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return source;
 }

package/dist/internal/hosted-catch-protocol.d.ts

@@ -16,6 +16,7 @@ export declare const AGENT_SDK_CATCH_ENVELOPE_VERSION = 1;
 export declare const AGENT_SDK_CATCH_EVENT_TYPE = "http.request";
 export declare const AGENT_SDK_CUSTOM_CHANNEL_KIND = "custom";
 export declare const AGENT_SDK_SESSION_EVENT_TYPE = "agentsdk.session";
+export declare const AGENT_SDK_EVAL_CASE_EVENT_TYPE = "agentsdk.eval-case";
 export declare const AGENT_SDK_HTTP_CHANNEL_ID = "http";
 export declare const AGENT_SDK_HTTP_CHANNEL_KIND = "http";
 export declare const AGENT_SDK_SESSION_RESUME_KEY_PREFIX = "cont:session:";

package/dist/internal/hosted-catch-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-catch-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-catch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AACzD,eAAO,MAAM,6BAA6B,WAAW,CAAC;AACtD,eAAO,MAAM,4BAA4B,qBAAqB,CAAC;AAC/D,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAChD,eAAO,MAAM,2BAA2B,SAAS,CAAC;AAClD,eAAO,MAAM,mCAAmC,kBAAkB,CAAC;AACnE,eAAO,MAAM,8BAA8B,EAAE,MAAmB,CAAC;AAEjE,eAAO,MAAM,6BAA6B,YAAI,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAChG,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,gBAAgB,CAAC;IACzB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAEtE;AASD,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CA2C1F;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,MAAM,CAK1E"}
+{"version":3,"file":"hosted-catch-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-catch-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AACzD,eAAO,MAAM,6BAA6B,WAAW,CAAC;AACtD,eAAO,MAAM,4BAA4B,qBAAqB,CAAC;AAC/D,eAAO,MAAM,8BAA8B,uBAAuB,CAAC;AACnE,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAChD,eAAO,MAAM,2BAA2B,SAAS,CAAC;AAClD,eAAO,MAAM,mCAAmC,kBAAkB,CAAC;AACnE,eAAO,MAAM,8BAA8B,EAAE,MAAmB,CAAC;AAEjE,eAAO,MAAM,6BAA6B,YAAI,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAChG,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,gBAAgB,CAAC;IACzB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAEtE;AASD,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CA2C1F;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,MAAM,CAK1E"}

package/dist/internal/hosted-catch-protocol.js

@@ -17,6 +17,7 @@ export const AGENT_SDK_CATCH_ENVELOPE_VERSION = 1;
 export const AGENT_SDK_CATCH_EVENT_TYPE = "http.request";
 export const AGENT_SDK_CUSTOM_CHANNEL_KIND = "custom";
 export const AGENT_SDK_SESSION_EVENT_TYPE = "agentsdk.session";
+export const AGENT_SDK_EVAL_CASE_EVENT_TYPE = "agentsdk.eval-case";
 export const AGENT_SDK_HTTP_CHANNEL_ID = "http";
 export const AGENT_SDK_HTTP_CHANNEL_KIND = "http";
 export const AGENT_SDK_SESSION_RESUME_KEY_PREFIX = "cont:session:";

package/dist/internal/hosted-catch.d.ts

@@ -33,9 +33,11 @@ export declare function replayCatchRequest(input: {
 }): Promise<Response>;
 /**
  * Attach catch admission to an authored channel. Provider packs attach
- * their own adapter afterwards and replace this one. A pack that also
- * declares `publicEndpoint()` must replay `http.request` itself —
- * `githubChannel` does — because that catch is no longer this adapter.
+ * their own adapter afterwards and replace this one. A pack whose routes
+ * are catchable (`publicEndpoint()`, or a named webhook secret that makes
+ * the provider signature the route policy) must replay `http.request`
+ * itself — `githubChannel` does — because that catch is no longer this
+ * adapter.
  */
 export declare function attachCatchAdmission(definition: ChannelDefinition<unknown>, routes: readonly ChannelRoute[]): void;
 //# sourceMappingURL=hosted-catch.d.ts.map

package/dist/internal/hosted-catch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-catch.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-catch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMpG,OAAO,EAGL,KAAK,oBAAoB,EAG1B,MAAM,4BAA4B,CAAC;AAIpC,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAIlE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAIhC,CAAC;AAIF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,OAAO,CAcV;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiFpB;AAgBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,IAAI,CAgBN"}
+{"version":3,"file":"hosted-catch.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-catch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMpG,OAAO,EAGL,KAAK,oBAAoB,EAG1B,MAAM,4BAA4B,CAAC;AAIpC,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAIlE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAIhC,CAAC;AAIF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,OAAO,CAcV;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiFpB;AAgBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,EACtC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,IAAI,CAgBN"}

package/dist/internal/hosted-catch.js

@@ -9,15 +9,6 @@
  * authenticated principal. A captured `send()` becomes the pending send;
  * a handler that answers without sending is a `skip`.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { acknowledgeTurn, dispatchOutcome, skipped, tagOutcome } from "./channel-dispatch.js";
 import { classifyHostedAdmissionRejection } from "./hosted-delivery-protocol.js";
 import { invokeChannelRoute } from "./channel-route-dispatch.js";
@@ -53,107 +44,107 @@ export function catchRequestFromEnvelope(input) {
         body: body.length === 0 || BODYLESS_METHODS.has(envelope.method) ? undefined : new Uint8Array(body),
     });
 }
-export function replayCatchRequest(input) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const envelope = parseCatchRequestEnvelope(input.payload);
-        if (envelope === undefined) {
-            return errorResponse(400, "invalid_catch_envelope", "Expected a supported Agent SDK catch request envelope.");
-        }
-        const router = new Router();
-        for (const route of input.routes) {
-            router.add({
-                method: route.method,
-                pattern: route.path,
-                auth: "none",
-                handler: () => errorResponse(500, "unreachable", "unreachable"),
-            });
-        }
-        const matched = router.match(envelope.method, envelope.path);
-        const route = input.routes.find(candidate => candidate.method === (matched === null || matched === void 0 ? void 0 : matched.route.method) && candidate.path === matched.route.pattern);
-        if (matched === undefined || route === undefined) {
-            // The control plane routes from the same pinned manifest this VM was
-            // frozen from; a miss here is drift, not a caller error.
-            return errorResponse(404, "route_not_declared", `No ${envelope.method} ${envelope.path} route is mounted on channel "${input.channelId}".`);
-        }
-        const request = catchRequestFromEnvelope({
-            channelId: input.channelId,
-            deliveryId: input.deliveryId,
-            envelope,
+export async function replayCatchRequest(input) {
+    const envelope = parseCatchRequestEnvelope(input.payload);
+    if (envelope === undefined) {
+        return errorResponse(400, "invalid_catch_envelope", "Expected a supported Agent SDK catch request envelope.");
+    }
+    const router = new Router();
+    for (const route of input.routes) {
+        router.add({
+            method: route.method,
+            pattern: route.path,
+            auth: "none",
+            handler: () => errorResponse(500, "unreachable", "unreachable"),
         });
-        let response;
-        try {
-            response = yield invokeChannelRoute({
-                route,
-                request,
-                handlerArgs: Object.assign(Object.assign({}, input.args), { params: matched.params, auth: CATCH_AUTH_CONTEXT }),
-            });
-        }
-        catch (error) {
-            // `return Response.json({ sessionId: session.id })` after `send()` is
-            // the ordinary local webhook shape. Hosted, `send()` is captured and the
-            // handle is deferred, so reading `.id` throws — but nobody reads this
-            // handler's HTTP reply hosted; the captured send is the outcome.
-            if (error instanceof DeferredChannelSessionError) {
-                return acknowledgeTurn();
-            }
-            throw error;
-        }
-        // A 2xx the handler did not tag and in which nothing was captured means
-        // it handled the request itself (acknowledged, ignored, replied). There is
-        // nothing to execute: report skip instead of failing the delivery.
-        if (response.ok && dispatchOutcome(response) === undefined) {
-            return tagOutcome(response, "skip");
-        }
-        // A 4xx is the handler rejecting the sender (bad signature on a
-        // handler-verified `publicEndpoint()` route, schema mismatch, unknown
-        // event). The sender already has its 202; retrying the delivery cannot
-        // change the verdict, so report a cheap skip that lets the control plane
-        // discard the compute instead of failing and retrying the activity.
-        if (response.status >= 400 && response.status < 500) {
-            // A handler 4xx (bad Hub signature, schema mismatch, unknown event) is a
-            // skip so the control plane does not retry it. The reason is what the
-            // control plane logs; this line is the guest copy. Neither includes the
-            // secret or the request body.
-            const reason = classifyHostedAdmissionRejection(yield handlerErrorCode(response));
-            console.info(`[bdk] catch replay rejected by handler deliveryId=${input.deliveryId} channelId=${input.channelId} route=${envelope.method} ${route.path} status=${String(response.status)} reason=${reason}`);
-            return skipped(reason, { status: response.status });
-        }
-        return response;
+    }
+    const matched = router.match(envelope.method, envelope.path);
+    const route = input.routes.find(candidate => candidate.method === matched?.route.method && candidate.path === matched.route.pattern);
+    if (matched === undefined || route === undefined) {
+        // The control plane routes from the same pinned manifest this VM was
+        // frozen from; a miss here is drift, not a caller error.
+        return errorResponse(404, "route_not_declared", `No ${envelope.method} ${envelope.path} route is mounted on channel "${input.channelId}".`);
+    }
+    const request = catchRequestFromEnvelope({
+        channelId: input.channelId,
+        deliveryId: input.deliveryId,
+        envelope,
     });
+    let response;
+    try {
+        response = await invokeChannelRoute({
+            route,
+            request,
+            handlerArgs: {
+                ...input.args,
+                params: matched.params,
+                auth: CATCH_AUTH_CONTEXT,
+            },
+        });
+    }
+    catch (error) {
+        // `return Response.json({ sessionId: session.id })` after `send()` is
+        // the ordinary local webhook shape. Hosted, `send()` is captured and the
+        // handle is deferred, so reading `.id` throws — but nobody reads this
+        // handler's HTTP reply hosted; the captured send is the outcome.
+        if (error instanceof DeferredChannelSessionError) {
+            return acknowledgeTurn();
+        }
+        throw error;
+    }
+    // A 2xx the handler did not tag and in which nothing was captured means
+    // it handled the request itself (acknowledged, ignored, replied). There is
+    // nothing to execute: report skip instead of failing the delivery.
+    if (response.ok && dispatchOutcome(response) === undefined) {
+        return tagOutcome(response, "skip");
+    }
+    // A 4xx is the handler rejecting the sender (bad signature on a
+    // handler-verified `publicEndpoint()` route, schema mismatch, unknown
+    // event). The sender already has its 202; retrying the delivery cannot
+    // change the verdict, so report a cheap skip that lets the control plane
+    // discard the compute instead of failing and retrying the activity.
+    if (response.status >= 400 && response.status < 500) {
+        // A handler 4xx (bad Hub signature, schema mismatch, unknown event) is a
+        // skip so the control plane does not retry it. The reason is what the
+        // control plane logs; this line is the guest copy. Neither includes the
+        // secret or the request body.
+        const reason = classifyHostedAdmissionRejection(await handlerErrorCode(response));
+        console.info(`[bdk] catch replay rejected by handler deliveryId=${input.deliveryId} channelId=${input.channelId} route=${envelope.method} ${route.path} status=${String(response.status)} reason=${reason}`);
+        return skipped(reason, { status: response.status });
+    }
+    return response;
 }
 /** Short handler error token, such as `missing_secret`. Never a secret or a body. */
-function handlerErrorCode(response) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            const body = (yield response.clone().json());
-            if (typeof body !== "object" || body === null || Array.isArray(body)) {
-                return undefined;
-            }
-            const error = body.error;
-            return typeof error === "string" && /^[a-z0-9_]{1,64}$/.test(error) ? error : undefined;
-        }
-        catch (_a) {
+async function handlerErrorCode(response) {
+    try {
+        const body = (await response.clone().json());
+        if (typeof body !== "object" || body === null || Array.isArray(body)) {
             return undefined;
         }
-    });
+        const error = body.error;
+        return typeof error === "string" && /^[a-z0-9_]{1,64}$/.test(error) ? error : undefined;
+    }
+    catch {
+        return undefined;
+    }
 }
 /**
  * Attach catch admission to an authored channel. Provider packs attach
- * their own adapter afterwards and replace this one. A pack that also
- * declares `publicEndpoint()` must replay `http.request` itself —
- * `githubChannel` does — because that catch is no longer this adapter.
+ * their own adapter afterwards and replace this one. A pack whose routes
+ * are catchable (`publicEndpoint()`, or a named webhook secret that makes
+ * the provider signature the route policy) must replay `http.request`
+ * itself — `githubChannel` does — because that catch is no longer this
+ * adapter.
  */
 export function attachCatchAdmission(definition, routes) {
-    var _a;
-    var _b;
     attachHostedAdmissionAdapter(definition, {
-        kind: (_b = (_a = definition.meta) === null || _a === void 0 ? void 0 : _a.kind) !== null && _b !== void 0 ? _b : AGENT_SDK_CUSTOM_CHANNEL_KIND,
+        kind: definition.meta?.kind ?? AGENT_SDK_CUSTOM_CHANNEL_KIND,
         dispatch: ({ channelId, eventType, payload, deliveryId, args }) => {
             if (eventType !== AGENT_SDK_CATCH_EVENT_TYPE) {
                 return Promise.resolve(skipped("not a caught http request"));
             }
             return replayCatchRequest({
-                channelId: channelId !== null && channelId !== void 0 ? channelId : "channel",
+                channelId: channelId ?? "channel",
                 deliveryId,
                 routes,
                 payload,

package/dist/internal/hosted-delivery-protocol.js

@@ -61,12 +61,11 @@ export const HOSTED_FAILURE_CLASSIFICATIONS = {
     v2_identity_conflict: { domain: "protocol", source: "engine" },
 };
 export function hostedFailureClassification(code) {
-    var _a, _b;
     const known = HOSTED_FAILURE_CLASSIFICATIONS[code];
     return {
         v: HOSTED_FAILURE_CLASSIFICATION_VERSION,
-        domain: (_a = known === null || known === void 0 ? void 0 : known.domain) !== null && _a !== void 0 ? _a : "unknown",
-        source: (_b = known === null || known === void 0 ? void 0 : known.source) !== null && _b !== void 0 ? _b : "engine",
+        domain: known?.domain ?? "unknown",
+        source: known?.source ?? "engine",
     };
 }
 export function parseHostedFailureClassification(value) {
@@ -261,9 +260,13 @@ function parseManagedAutomation(value) {
         }
     }
     return {
-        managedAutomation: Object.assign({ automationUuid: body.automationUuid, mcpServerNames: body.mcpServerNames }, (body.slackChannels === undefined
-            ? {}
-            : { slackChannels: body.slackChannels })),
+        managedAutomation: {
+            automationUuid: body.automationUuid,
+            mcpServerNames: body.mcpServerNames,
+            ...(body.slackChannels === undefined
+                ? {}
+                : { slackChannels: body.slackChannels }),
+        },
     };
 }
 /**
@@ -507,7 +510,7 @@ function parseOptionalJsonObjectField(value, maxBytes) {
         }
         return roundTrip;
     }
-    catch (_a) {
+    catch {
         return undefined;
     }
 }
@@ -592,7 +595,28 @@ export function parseHostedReminderFireDescriptorPayload(value) {
     if (body.args !== undefined && args === undefined) {
         return undefined;
     }
-    return Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ protocolVersion: 1, id: body.id, fireCount: body.fireCount, generation: body.generation, purpose: body.purpose, channelId: body.channelId, continuationToken: body.continuationToken }, (target === undefined ? {} : { target })), { scheduleKind: body.scheduleKind, scheduleValue: body.scheduleValue }), (body.intervalMs === undefined ? {} : { intervalMs: body.intervalMs })), (body.prompt === undefined ? {} : { prompt: body.prompt })), (body.handler === undefined ? {} : { handler: body.handler })), (args === undefined ? {} : { args })), { hasRunHandler: body.hasRunHandler, hasUntilFn: body.hasUntilFn }), (body.untilPrompt === undefined ? {} : { untilPrompt: body.untilPrompt })), { busyPolicy: body.busyPolicy, nextFireAtMs: body.nextFireAtMs, claimedAtMs: body.claimedAtMs });
+    return {
+        protocolVersion: 1,
+        id: body.id,
+        fireCount: body.fireCount,
+        generation: body.generation,
+        purpose: body.purpose,
+        channelId: body.channelId,
+        continuationToken: body.continuationToken,
+        ...(target === undefined ? {} : { target }),
+        scheduleKind: body.scheduleKind,
+        scheduleValue: body.scheduleValue,
+        ...(body.intervalMs === undefined ? {} : { intervalMs: body.intervalMs }),
+        ...(body.prompt === undefined ? {} : { prompt: body.prompt }),
+        ...(body.handler === undefined ? {} : { handler: body.handler }),
+        ...(args === undefined ? {} : { args }),
+        hasRunHandler: body.hasRunHandler,
+        hasUntilFn: body.hasUntilFn,
+        ...(body.untilPrompt === undefined ? {} : { untilPrompt: body.untilPrompt }),
+        busyPolicy: body.busyPolicy,
+        nextFireAtMs: body.nextFireAtMs,
+        claimedAtMs: body.claimedAtMs,
+    };
 }
 const HOSTED_ADMISSION_OUTCOME_KEYS = new Set([
     "ok",

package/dist/internal/hosted-delivery.d.ts

@@ -1,4 +1,4 @@
-import type { ChannelHandlerArgs, SendMessageOptions } from "../types.js";
+import type { ChannelHandlerArgs, ChannelSession, SendMessageOptions } from "../types.js";
 import { type HostedBoundSecretsResult } from "./cursor/hosted-bound-secrets.js";
 import { type GuestNetworkWaitResult } from "./guest-network.js";
 import { type HostedAdmissionInput, type HostedReminderFireDescriptorPayload } from "./hosted-delivery-protocol.js";
@@ -10,6 +10,13 @@ type DispatchInput = {
     definition: object;
     args: ChannelHandlerArgs;
 };
+export type HostedStartedSend = Pick<ChannelSession, "id" | "waitForCompletion">;
+export type HostedSendStart = (input: {
+    args: ChannelHandlerArgs;
+    message: string;
+    options: SendMessageOptions;
+    sessionPublicId: string;
+}) => Promise<HostedStartedSend>;
 type PendingSend = {
     channelId: string;
     message: string;
@@ -105,6 +112,11 @@ export declare function registerHostedDeliveryRoute(input: {
      * stub.
      */
     consumeBoundSecrets?(): HostedBoundSecretsResult;
+    /**
+     * Start the captured send on the allocated session. Defaults to one turn
+     * through the channel's `send`.
+     */
+    startSend?: HostedSendStart;
 }): void;
 export {};
 //# sourceMappingURL=hosted-delivery.d.ts.map

package/dist/internal/hosted-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAc,kBAAkB,EAAE,kBAAkB,EAAe,MAAM,aAAa,CAAC;AAEnG,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EAKL,KAAK,sBAAsB,EAG5B,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EAQL,KAAK,oBAAoB,EAIzB,KAAK,mCAAmC,EASzC,MAAM,+BAA+B,CAAC;AAoBvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAIlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,KAAK,aAAa,GAAG;IACnB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AA8JF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAU9F;AA2RD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAClF;;;;OAIG;IACH,YAAY,CAAC,CACX,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;OAGG;IACH,yBAAyB,CAAC,CAAC,UAAU,EAAE,mCAAmC,GAAG,OAAO,CAAC;QACnF,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;OAGG;IACH,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,8DAA8D;IAC9D,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,wDAAwD;IACxD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;IAChC;;;;;OAKG;IACH,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C;;;OAGG;IACH,mBAAmB,CAAC,IAAI,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,CAAC;IAClE;;;;OAIG;IACH,mBAAmB,CAAC,IAAI,wBAAwB,CAAC;CAClD,GAAG,IAAI,CA+nBP"}
+{"version":3,"file":"hosted-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAEnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EAKL,KAAK,sBAAsB,EAG5B,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EAQL,KAAK,oBAAoB,EAIzB,KAAK,mCAAmC,EASzC,MAAM,+BAA+B,CAAC;AAoBvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAIlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,KAAK,aAAa,GAAG;IACnB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,mBAAmB,CAAC,CAAC;AAEjF,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACpC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEjC,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AA8JF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAU9F;AA2RD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAClF;;;;OAIG;IACH,YAAY,CAAC,CACX,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;OAGG;IACH,yBAAyB,CAAC,CAAC,UAAU,EAAE,mCAAmC,GAAG,OAAO,CAAC;QACnF,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;OAGG;IACH,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,8DAA8D;IAC9D,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,wDAAwD;IACxD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;IAChC;;;;;OAKG;IACH,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C;;;OAGG;IACH,mBAAmB,CAAC,IAAI,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,CAAC;IAClE;;;;OAIG;IACH,mBAAmB,CAAC,IAAI,wBAAwB,CAAC;IACjD;;;OAGG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B,GAAG,IAAI,CAwoBP"}