@cursor/july 0.1.1

package/dist/channels/slack/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,WAAW,EACZ,MAAM,gBAAgB,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CACF,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrC;AAED,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAChC,iBAAiB,CAAC;AAEtB,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;CACtD;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,mBAAmB,CACjB,OAAO,EAAE,oBAAoB,EAAE,EAC/B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,mDAAmD;IACnD,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAChC,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,YAAY,KAEnB,qBAAqB,GACrB,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,qBAAqB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAC5B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,wBAAwB,CAAC;CACzC;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,SAAS,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC;;;OAGG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;OAGG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IACjD;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,GAAG,EAAE,KAAK,GAAG,MAAM,CAAC;IACpB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED,wDAAwD;AACxD,MAAM,MAAM,eAAe,CACzB,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACzD,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,CAAC,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC"}

package/dist/channels/slack/types.js

@@ -0,0 +1,4 @@
+/**
+ * Types for the Slack platform channel pack.
+ */
+export {};

package/dist/channels.d.ts

@@ -0,0 +1,116 @@
+/**
+ * `defineChannel` and the built-in HTTP channel — authored at
+ * `agent/channels/<name>.ts`.
+ *
+ * A channel is the surface an agent lives on. The built-in HTTP channel
+ * (session create / follow-up / NDJSON stream routes under `/v1/session*`)
+ * is always mounted; author `agent/channels/http.ts` with `httpChannel()`
+ * only to override its defaults. Custom channels declare their own routes
+ * and are mounted under `/v1/channels/<name>`:
+ *
+ * ```ts
+ * import { defineChannel, POST } from "@anysphere/agent-serve/channels";
+ * import { z } from "zod";
+ *
+ * export default defineChannel({
+ *   routes: [
+ *     POST("/message", {
+ *       bodySchema: z.object({
+ *         message: z.string(),
+ *         token: z.string().optional(),
+ *       }),
+ *       handler: async (_req, { send, body }) => {
+ *         const { message, token } = body as {
+ *           message: string;
+ *           token?: string;
+ *         };
+ *         const session = await send(message, {
+ *           continuationToken: token,
+ *         });
+ *         return Response.json({ sessionId: session.id });
+ *       },
+ *     }),
+ *   ],
+ *   events: {
+ *     "message.completed"(event, channel, ctx) {
+ *       // deliver completed messages back to the surface that owns this
+ *       // channel (post to a webhook, reply in a thread, ...)
+ *     },
+ *   },
+ * });
+ * ```
+ *
+ * Route helpers are typed so HTTP channels must declare **Zod** schemas at
+ * compile time: `GET` requires `querySchema`, `POST`/`PUT`/`PATCH` require
+ * `bodySchema`. Plain JSON Schema objects will not type-check. Use
+ * `z.object({})` / `z.unknown()` when the surface is intentionally open.
+ * Handlers receive `args.body` / `args.query` inferred from those schemas.
+ */
+import type { AuthContext, AuthPolicy, ChannelBodyRouteSpec, ChannelConfig, ChannelDefinition, ChannelDeleteRouteSpec, ChannelGetRouteSpec, ChannelRoute, ChannelRouteSchema, HttpChannelConfig, HttpChannelDefinition, JsonValue } from "./types.js";
+export type { AuthContext, AuthPolicy, ChannelBodyRouteSpec, ChannelConfig, ChannelDefinition, ChannelDeleteRouteSpec, ChannelEventContext, ChannelEventHandler, ChannelEventHandlers, ChannelGetRouteSpec, ChannelHandlerArgs, ChannelHandlerArgsWithBody, ChannelHandlerArgsWithBodyAndQuery, ChannelHandlerArgsWithQuery, ChannelRoute, ChannelRouteHandler, ChannelRouteSchema, ChannelRouteSpec, ChannelSession, ChannelStartArgs, HttpChannelConfig, HttpChannelDefinition, ReceiveInput, RouteMethod, SendMessageFn, SendMessageOptions, } from "./types.js";
+/** Define a custom channel. */
+export declare function defineChannel<TState = JsonValue>(config: ChannelConfig<TState>): ChannelDefinition<TState>;
+/**
+ * Configure the built-in HTTP session channel. Only meaningful as the
+ * default export of `agent/channels/http.ts`.
+ */
+export declare function httpChannel(config?: HttpChannelConfig): HttpChannelDefinition;
+/** GET — Zod `querySchema` is required (use `z.object({})` when unused). */
+export declare function GET<TQuery extends ChannelRouteSchema>(path: string, spec: ChannelGetRouteSpec<TQuery>): ChannelRoute;
+/** POST — Zod `bodySchema` is required. */
+export declare function POST<TBody extends ChannelRouteSchema, TQuery extends ChannelRouteSchema | undefined = undefined>(path: string, spec: ChannelBodyRouteSpec<TBody, TQuery>): ChannelRoute;
+/** PUT — Zod `bodySchema` is required. */
+export declare function PUT<TBody extends ChannelRouteSchema, TQuery extends ChannelRouteSchema | undefined = undefined>(path: string, spec: ChannelBodyRouteSpec<TBody, TQuery>): ChannelRoute;
+/** PATCH — Zod `bodySchema` is required. */
+export declare function PATCH<TBody extends ChannelRouteSchema, TQuery extends ChannelRouteSchema | undefined = undefined>(path: string, spec: ChannelBodyRouteSpec<TBody, TQuery>): ChannelRoute;
+/** DELETE — Zod schemas optional. */
+export declare function DELETE<TBody extends ChannelRouteSchema | undefined = undefined, TQuery extends ChannelRouteSchema | undefined = undefined>(path: string, spec: ChannelDeleteRouteSpec<TBody, TQuery>): ChannelRoute;
+/**
+ * Admit requests that arrive over the loopback interface with no proxy
+ * forwarding headers. The default route policy: local tooling works out of
+ * the box while remote (or reverse-proxied) callers are rejected until you
+ * wire real auth (e.g. {@link bearerAuth}).
+ *
+ * Requests carrying `X-Forwarded-For`, `X-Real-IP`, `Forwarded`, or
+ * `X-Forwarded-Host` are denied even when the TCP peer is 127.0.0.1 — that
+ * pattern is how tunnels and same-host reverse proxies re-expose loopback.
+ */
+export declare function localDev(): AuthPolicy;
+/**
+ * Like {@link localDev} but also requires the request URL hostname to be
+ * loopback. Rejects DNS-rebinding callers that reach 127.0.0.1 with a remote
+ * `Host` header (e.g. attacker.example after rebinding to localhost).
+ */
+export declare function localDevStrict(): AuthPolicy;
+/**
+ * Admit requests whose TCP peer is loopback, ignoring `Host` and
+ * proxy-forwarding headers. The peer address (`req.socket.remoteAddress`) is
+ * the real boundary: a loopback-bound server only accepts local processes, and
+ * a LAN caller's peer IP is non-loopback and rejected. Unlike {@link localDev},
+ * this does not veto on `X-Forwarded-*` headers — so it admits loopback clients
+ * that legitimately relay them, e.g. `gh webhook forward`, which forwards
+ * GitHub's edge `X-Forwarded-For` / `X-Real-Ip`. Intended for dev-only relaxed
+ * auth where remote exposure is still refused.
+ */
+export declare function loopbackOnly(): AuthPolicy;
+/**
+ * Dev-only GitHub channel auth without a webhook secret: loopback peer
+ * required. Plain local fixtures (no proxy headers) are admitted; deliveries
+ * relayed through `gh webhook forward` carry GitHub's `X-Forwarded-*` headers
+ * and are admitted only when `X-GitHub-Event` is present (GitHub deliveries
+ * always include it). Loopback tunnels that relay arbitrary remote traffic
+ * without those delivery headers stay rejected.
+ */
+export declare function loopbackGitHubDev(): AuthPolicy;
+/**
+ * Admit requests carrying `Authorization: Bearer <token>`. Pass the expected
+ * token (compared in constant time) or a verifier that maps a presented
+ * token to an {@link AuthContext}.
+ */
+export declare function bearerAuth(tokenOrVerify: string | ((token: string) => AuthContext | null | Promise<AuthContext | null>)): AuthPolicy;
+/**
+ * Admit every request as an anonymous principal. Only for surfaces that are
+ * intentionally public or protected upstream.
+ */
+export declare function allowAll(): AuthPolicy;
+//# sourceMappingURL=channels.d.ts.map

package/dist/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../src/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAMH,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EAEZ,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,SAAS,EAEV,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,WAAW,EACX,UAAU,EACV,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,EAC1B,kCAAkC,EAClC,2BAA2B,EAC3B,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,aAAa,EACb,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,+BAA+B;AAC/B,wBAAgB,aAAa,CAAC,MAAM,GAAG,SAAS,EAC9C,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAC5B,iBAAiB,CAAC,MAAM,CAAC,CAE3B;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,MAAM,GAAE,iBAAsB,GAC7B,qBAAqB,CAEvB;AAoCD,4EAA4E;AAC5E,wBAAgB,GAAG,CAAC,MAAM,SAAS,kBAAkB,EACnD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAChC,YAAY,CAMd;AAED,2CAA2C;AAC3C,wBAAgB,IAAI,CAClB,KAAK,SAAS,kBAAkB,EAChC,MAAM,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACzD,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY,CAOvE;AAED,0CAA0C;AAC1C,wBAAgB,GAAG,CACjB,KAAK,SAAS,kBAAkB,EAChC,MAAM,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACzD,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY,CAOvE;AAED,4CAA4C;AAC5C,wBAAgB,KAAK,CACnB,KAAK,SAAS,kBAAkB,EAChC,MAAM,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACzD,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY,CAOvE;AAED,qCAAqC;AACrC,wBAAgB,MAAM,CACpB,KAAK,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACxD,MAAM,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACzD,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY,CAOzE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,IAAI,UAAU,CAcrC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,UAAU,CAoB3C;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,IAAI,UAAU,CAWzC;AAOD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CAiB9C;AAWD;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,aAAa,EACT,MAAM,GACN,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,GACxE,UAAU,CAmBZ;AAWD;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,UAAU,CAMrC"}

package/dist/channels.js

@@ -0,0 +1,294 @@
+/**
+ * `defineChannel` and the built-in HTTP channel — authored at
+ * `agent/channels/<name>.ts`.
+ *
+ * A channel is the surface an agent lives on. The built-in HTTP channel
+ * (session create / follow-up / NDJSON stream routes under `/v1/session*`)
+ * is always mounted; author `agent/channels/http.ts` with `httpChannel()`
+ * only to override its defaults. Custom channels declare their own routes
+ * and are mounted under `/v1/channels/<name>`:
+ *
+ * ```ts
+ * import { defineChannel, POST } from "@anysphere/agent-serve/channels";
+ * import { z } from "zod";
+ *
+ * export default defineChannel({
+ *   routes: [
+ *     POST("/message", {
+ *       bodySchema: z.object({
+ *         message: z.string(),
+ *         token: z.string().optional(),
+ *       }),
+ *       handler: async (_req, { send, body }) => {
+ *         const { message, token } = body as {
+ *           message: string;
+ *           token?: string;
+ *         };
+ *         const session = await send(message, {
+ *           continuationToken: token,
+ *         });
+ *         return Response.json({ sessionId: session.id });
+ *       },
+ *     }),
+ *   ],
+ *   events: {
+ *     "message.completed"(event, channel, ctx) {
+ *       // deliver completed messages back to the surface that owns this
+ *       // channel (post to a webhook, reply in a thread, ...)
+ *     },
+ *   },
+ * });
+ * ```
+ *
+ * Route helpers are typed so HTTP channels must declare **Zod** schemas at
+ * compile time: `GET` requires `querySchema`, `POST`/`PUT`/`PATCH` require
+ * `bodySchema`. Plain JSON Schema objects will not type-check. Use
+ * `z.object({})` / `z.unknown()` when the surface is intentionally open.
+ * Handlers receive `args.body` / `args.query` inferred from those schemas.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Buffer } from "node:buffer";
+import { timingSafeEqual } from "node:crypto";
+import { brandDefinition } from "./internal/brand.js";
+import { isLoopbackAddress, isLoopbackHostname } from "./internal/net.js";
+/** Define a custom channel. */
+export function defineChannel(config) {
+    return brandDefinition("channel", config);
+}
+/**
+ * Configure the built-in HTTP session channel. Only meaningful as the
+ * default export of `agent/channels/http.ts`.
+ */
+export function httpChannel(config = {}) {
+    return brandDefinition("http-channel", config);
+}
+// ============================================================================
+// Route verbs
+// ============================================================================
+function route(method, path, spec) {
+    if (!path.startsWith("/")) {
+        throw new Error(`Channel route path must start with "/": ${path}`);
+    }
+    const result = {
+        method,
+        path,
+        handler: spec.handler,
+    };
+    if (spec.description !== undefined) {
+        result.description = spec.description;
+    }
+    if (spec.bodySchema !== undefined) {
+        result.bodySchema = spec.bodySchema;
+    }
+    if (spec.querySchema !== undefined) {
+        result.querySchema = spec.querySchema;
+    }
+    return result;
+}
+/** GET — Zod `querySchema` is required (use `z.object({})` when unused). */
+export function GET(path, spec) {
+    return route("GET", path, {
+        description: spec.description,
+        querySchema: spec.querySchema,
+        handler: spec.handler,
+    });
+}
+/** POST — Zod `bodySchema` is required. */
+export function POST(path, spec) {
+    return route("POST", path, {
+        description: spec.description,
+        bodySchema: spec.bodySchema,
+        querySchema: spec.querySchema,
+        handler: spec.handler,
+    });
+}
+/** PUT — Zod `bodySchema` is required. */
+export function PUT(path, spec) {
+    return route("PUT", path, {
+        description: spec.description,
+        bodySchema: spec.bodySchema,
+        querySchema: spec.querySchema,
+        handler: spec.handler,
+    });
+}
+/** PATCH — Zod `bodySchema` is required. */
+export function PATCH(path, spec) {
+    return route("PATCH", path, {
+        description: spec.description,
+        bodySchema: spec.bodySchema,
+        querySchema: spec.querySchema,
+        handler: spec.handler,
+    });
+}
+/** DELETE — Zod schemas optional. */
+export function DELETE(path, spec) {
+    return route("DELETE", path, {
+        description: spec.description,
+        bodySchema: spec.bodySchema,
+        querySchema: spec.querySchema,
+        handler: spec.handler,
+    });
+}
+// ============================================================================
+// Auth policies
+// ============================================================================
+/**
+ * Admit requests that arrive over the loopback interface with no proxy
+ * forwarding headers. The default route policy: local tooling works out of
+ * the box while remote (or reverse-proxied) callers are rejected until you
+ * wire real auth (e.g. {@link bearerAuth}).
+ *
+ * Requests carrying `X-Forwarded-For`, `X-Real-IP`, `Forwarded`, or
+ * `X-Forwarded-Host` are denied even when the TCP peer is 127.0.0.1 — that
+ * pattern is how tunnels and same-host reverse proxies re-expose loopback.
+ */
+export function localDev() {
+    return (request, info) => {
+        if (hasProxyForwardingHeaders(request)) {
+            return null;
+        }
+        if (info.requestIp !== null && isLoopbackAddress(info.requestIp)) {
+            return {
+                authenticator: "local-dev",
+                principalId: "local",
+                principalType: "user",
+            };
+        }
+        return null;
+    };
+}
+/**
+ * Like {@link localDev} but also requires the request URL hostname to be
+ * loopback. Rejects DNS-rebinding callers that reach 127.0.0.1 with a remote
+ * `Host` header (e.g. attacker.example after rebinding to localhost).
+ */
+export function localDevStrict() {
+    return (request, info) => {
+        if (localDev()(request, info) === null) {
+            return null;
+        }
+        let hostname;
+        try {
+            hostname = new URL(request.url).hostname;
+        }
+        catch (_a) {
+            return null;
+        }
+        if (!isLoopbackHostname(hostname)) {
+            return null;
+        }
+        return {
+            authenticator: "local-dev-strict",
+            principalId: "local",
+            principalType: "user",
+        };
+    };
+}
+/**
+ * Admit requests whose TCP peer is loopback, ignoring `Host` and
+ * proxy-forwarding headers. The peer address (`req.socket.remoteAddress`) is
+ * the real boundary: a loopback-bound server only accepts local processes, and
+ * a LAN caller's peer IP is non-loopback and rejected. Unlike {@link localDev},
+ * this does not veto on `X-Forwarded-*` headers — so it admits loopback clients
+ * that legitimately relay them, e.g. `gh webhook forward`, which forwards
+ * GitHub's edge `X-Forwarded-For` / `X-Real-Ip`. Intended for dev-only relaxed
+ * auth where remote exposure is still refused.
+ */
+export function loopbackOnly() {
+    return (_request, info) => {
+        if (info.requestIp !== null && isLoopbackAddress(info.requestIp)) {
+            return {
+                authenticator: "loopback-only",
+                principalId: "local",
+                principalType: "user",
+            };
+        }
+        return null;
+    };
+}
+function hasGitHubWebhookDeliveryHeaders(request) {
+    const event = request.headers.get("x-github-event");
+    return event !== null && event.trim() !== "";
+}
+/**
+ * Dev-only GitHub channel auth without a webhook secret: loopback peer
+ * required. Plain local fixtures (no proxy headers) are admitted; deliveries
+ * relayed through `gh webhook forward` carry GitHub's `X-Forwarded-*` headers
+ * and are admitted only when `X-GitHub-Event` is present (GitHub deliveries
+ * always include it). Loopback tunnels that relay arbitrary remote traffic
+ * without those delivery headers stay rejected.
+ */
+export function loopbackGitHubDev() {
+    return (request, info) => {
+        if (info.requestIp === null || !isLoopbackAddress(info.requestIp)) {
+            return null;
+        }
+        if (hasProxyForwardingHeaders(request) &&
+            !hasGitHubWebhookDeliveryHeaders(request)) {
+            return null;
+        }
+        return {
+            authenticator: "loopback-github-dev",
+            principalId: "local",
+            principalType: "user",
+        };
+    };
+}
+function hasProxyForwardingHeaders(request) {
+    return (request.headers.has("x-forwarded-for") ||
+        request.headers.has("x-forwarded-host") ||
+        request.headers.has("x-real-ip") ||
+        request.headers.has("forwarded"));
+}
+/**
+ * Admit requests carrying `Authorization: Bearer <token>`. Pass the expected
+ * token (compared in constant time) or a verifier that maps a presented
+ * token to an {@link AuthContext}.
+ */
+export function bearerAuth(tokenOrVerify) {
+    return (request) => __awaiter(this, void 0, void 0, function* () {
+        const header = request.headers.get("authorization");
+        if (header === null || !header.toLowerCase().startsWith("bearer ")) {
+            return null;
+        }
+        const presented = header.slice("bearer ".length).trim();
+        if (typeof tokenOrVerify === "function") {
+            return yield tokenOrVerify(presented);
+        }
+        if (tokenOrVerify !== "" && constantTimeEquals(presented, tokenOrVerify)) {
+            return {
+                authenticator: "bearer",
+                principalId: "bearer",
+                principalType: "service",
+            };
+        }
+        return null;
+    });
+}
+function constantTimeEquals(a, b) {
+    const aBytes = Buffer.from(a);
+    const bBytes = Buffer.from(b);
+    if (aBytes.length !== bBytes.length) {
+        return false;
+    }
+    return timingSafeEqual(aBytes, bBytes);
+}
+/**
+ * Admit every request as an anonymous principal. Only for surfaces that are
+ * intentionally public or protected upstream.
+ */
+export function allowAll() {
+    return () => ({
+        authenticator: "allow-all",
+        principalId: "anonymous",
+        principalType: "user",
+    });
+}

package/dist/connections.d.ts

@@ -0,0 +1,75 @@
+/**
+ * `defineConnection` — authored at `agent/mcp-connections/<name>.ts`.
+ *
+ * A connection gives tools from an external MCP server. The filename
+ * becomes the connection (server) name. Every connection is always
+ * available in three places:
+ * - the Cursor agent (local harness or cloud), via SDK `mcpServers`
+ * - the agent-serve host, via `ctx.host.mcp` on in-process tools
+ * - channel / schedule handlers, via `args.host.mcp`
+ *
+ * ```ts
+ * import { defineConnection } from "@anysphere/agent-serve/connections";
+ *
+ * export default defineConnection({
+ *   url: "https://mcp.linear.app/mcp",
+ *   headers: { authorization: `Bearer ${process.env.LINEAR_TOKEN}` },
+ * });
+ * ```
+ *
+ * A **Cursor account MCP connection** exposes the MCP connectors the operator
+ * already authorized in their Cursor account (dashboard → MCP). Every tool
+ * executes **on the Cursor backend** with the account's stored OAuth
+ * credentials, so the agent gets Linear / Notion / Slack / … tools with
+ * zero token plumbing and no OAuth secrets on this host. Requires the host
+ * to be signed in (`agent-serve login` or `CURSOR_API_KEY`):
+ *
+ * ```ts
+ * // agent/mcp-connections/cursor.ts — every connected server
+ * export default defineConnection({ cursorAccount: true });
+ *
+ * // or restrict to specific connectors by name
+ * export default defineConnection({ cursorAccount: true, servers: ["Linear"] });
+ * ```
+ *
+ * A **peer MCP connection** addresses another agent mounted on the same serve
+ * host by slug — every mounted agent is itself an MCP server at
+ * `/<slug>/v1/mcp` (tools: `ask`, `check`, and `call_tool` when it has
+ * server tools), so the model can delegate work to the peer, which runs
+ * in its own sessions with its own tools and context:
+ *
+ * ```ts
+ * export default defineConnection({
+ *   agent: "weather-agent",
+ *   description: "Delegate weather questions to the weather agent.",
+ * });
+ * ```
+ *
+ * Peer URLs resolve when the server starts: loopback for local-runtime
+ * turns and host-side calls, the serve `--public-url` for cloud-runtime
+ * turns (a cloud VM cannot reach this host's loopback address).
+ *
+ * Server tools can call the same connection:
+ *
+ * ```ts
+ * async execute(input, ctx) {
+ *   return ctx.host.mcp.callTool("linear", "list_issues", { query: input.q });
+ * }
+ * ```
+ *
+ * So can webhook / channel route handlers (deterministic, no agent loop):
+ *
+ * ```ts
+ * POST("/sync", {
+ *   bodySchema: z.object({}),
+ *   handler: async (_req, { host }) => {
+ *     const result = await host.mcp.callTool("linear", "list_issues", {});
+ *     return Response.json(result);
+ *   },
+ * });
+ * ```
+ */
+import type { ConnectionConfig, ConnectionDefinition } from "./types.js";
+export type { ConnectionConfig, ConnectionDefinition, ConnectionTransport, HostMcpCallResult, HostMcpRegistry, HostMcpToolInfo, } from "./types.js";
+export declare function defineConnection(config: ConnectionConfig): ConnectionDefinition;
+//# sourceMappingURL=connections.d.ts.map

package/dist/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEzE,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,GACvB,oBAAoB,CAEtB"}

package/dist/connections.js

@@ -0,0 +1,75 @@
+/**
+ * `defineConnection` — authored at `agent/mcp-connections/<name>.ts`.
+ *
+ * A connection gives tools from an external MCP server. The filename
+ * becomes the connection (server) name. Every connection is always
+ * available in three places:
+ * - the Cursor agent (local harness or cloud), via SDK `mcpServers`
+ * - the agent-serve host, via `ctx.host.mcp` on in-process tools
+ * - channel / schedule handlers, via `args.host.mcp`
+ *
+ * ```ts
+ * import { defineConnection } from "@anysphere/agent-serve/connections";
+ *
+ * export default defineConnection({
+ *   url: "https://mcp.linear.app/mcp",
+ *   headers: { authorization: `Bearer ${process.env.LINEAR_TOKEN}` },
+ * });
+ * ```
+ *
+ * A **Cursor account MCP connection** exposes the MCP connectors the operator
+ * already authorized in their Cursor account (dashboard → MCP). Every tool
+ * executes **on the Cursor backend** with the account's stored OAuth
+ * credentials, so the agent gets Linear / Notion / Slack / … tools with
+ * zero token plumbing and no OAuth secrets on this host. Requires the host
+ * to be signed in (`agent-serve login` or `CURSOR_API_KEY`):
+ *
+ * ```ts
+ * // agent/mcp-connections/cursor.ts — every connected server
+ * export default defineConnection({ cursorAccount: true });
+ *
+ * // or restrict to specific connectors by name
+ * export default defineConnection({ cursorAccount: true, servers: ["Linear"] });
+ * ```
+ *
+ * A **peer MCP connection** addresses another agent mounted on the same serve
+ * host by slug — every mounted agent is itself an MCP server at
+ * `/<slug>/v1/mcp` (tools: `ask`, `check`, and `call_tool` when it has
+ * server tools), so the model can delegate work to the peer, which runs
+ * in its own sessions with its own tools and context:
+ *
+ * ```ts
+ * export default defineConnection({
+ *   agent: "weather-agent",
+ *   description: "Delegate weather questions to the weather agent.",
+ * });
+ * ```
+ *
+ * Peer URLs resolve when the server starts: loopback for local-runtime
+ * turns and host-side calls, the serve `--public-url` for cloud-runtime
+ * turns (a cloud VM cannot reach this host's loopback address).
+ *
+ * Server tools can call the same connection:
+ *
+ * ```ts
+ * async execute(input, ctx) {
+ *   return ctx.host.mcp.callTool("linear", "list_issues", { query: input.q });
+ * }
+ * ```
+ *
+ * So can webhook / channel route handlers (deterministic, no agent loop):
+ *
+ * ```ts
+ * POST("/sync", {
+ *   bodySchema: z.object({}),
+ *   handler: async (_req, { host }) => {
+ *     const result = await host.mcp.callTool("linear", "list_issues", {});
+ *     return Response.json(result);
+ *   },
+ * });
+ * ```
+ */
+import { brandDefinition } from "./internal/brand.js";
+export function defineConnection(config) {
+    return brandDefinition("connection", config);
+}

package/dist/docs/404.html

@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<html lang="en-US" dir="ltr">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width,initial-scale=1">
+    <title>404 | agentkit</title>
+    <meta name="description" content="Not Found">
+    <meta name="generator" content="VitePress v1.6.4">
+    <link rel="preload stylesheet" href="/docs/assets/style.Bj-IXa5W.css" as="style">
+    <link rel="preload stylesheet" href="/docs/vp-icons.css" as="style">
+    
+    <script type="module" src="/docs/assets/app.DqfFEmJd.js"></script>
+    <link rel="preload" href="/docs/assets/inter-roman-latin.Di8DUHzh.woff2" as="font" type="font/woff2" crossorigin="">
+    <script id="check-dark-mode">(()=>{const e=localStorage.getItem("vitepress-theme-appearance")||"auto",a=window.matchMedia("(prefers-color-scheme: dark)").matches;(!e||e==="auto"?a:e==="dark")&&document.documentElement.classList.add("dark")})();</script>
+    <script id="check-mac-os">document.documentElement.classList.toggle("mac",/Mac|iPhone|iPod|iPad/i.test(navigator.platform));</script>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script>window.__VP_HASH_MAP__=JSON.parse("{\"ab.md\":\"COdXkces\",\"building-with-agents.md\":\"CJCtZCyi\",\"concepts.md\":\"Cfb9b-k1\",\"deployment.md\":\"Dx1TYNk5\",\"evals.md\":\"DPZ_MAnI\",\"guides_agent-to-agent.md\":\"CrtrsySy\",\"guides_cloud-runtime.md\":\"CYlNMTNp\",\"guides_github.md\":\"DwbKhCeS\",\"guides_human-in-the-loop.md\":\"Dvuctx7s\",\"guides_slack.md\":\"bv41fHfW\",\"guides_webhooks.md\":\"hFTik3lf\",\"hillclimbing.md\":\"DHNast08\",\"index.md\":\"BPKcj5AI\",\"quickstart.md\":\"tVPiGK_L\",\"reference_agent-config.md\":\"Bpd7HQwf\",\"reference_channels.md\":\"D7JTR03W\",\"reference_cli.md\":\"DA730zCu\",\"reference_connections.md\":\"C3vNH_DE\",\"reference_hooks.md\":\"BCEc3MyM\",\"reference_http-api.md\":\"DBAahtdz\",\"reference_instructions.md\":\"BC05LEQ8\",\"reference_playground.md\":\"CPZhfYaO\",\"reference_project-layout.md\":\"Bd_CKtNS\",\"reference_schedules.md\":\"D7qijxLk\",\"reference_sessions.md\":\"DdjWabnN\",\"reference_skills.md\":\"VQnlBT3Q\",\"reference_subagents.md\":\"CIRAVcPK\",\"reference_tools.md\":\"DF5kwlt0\",\"scaffolding-agents.md\":\"CyYfWGdc\",\"troubleshooting.md\":\"DkovjS7h\"}");window.__VP_SITE_DATA__=JSON.parse("{\"lang\":\"en-US\",\"dir\":\"ltr\",\"title\":\"agentkit\",\"description\":\"Filesystem-first framework for building and serving Cursor agents.\",\"base\":\"/docs/\",\"head\":[],\"router\":{\"prefetchLinks\":true},\"appearance\":true,\"themeConfig\":{\"nav\":[{\"text\":\"Quickstart\",\"link\":\"/quickstart\"},{\"text\":\"Guides\",\"link\":\"/guides/webhooks\"},{\"text\":\"Reference\",\"link\":\"/reference/project-layout\"}],\"search\":{\"provider\":\"local\"},\"outline\":{\"level\":[2,3]},\"sidebar\":[{\"text\":\"Getting started\",\"items\":[{\"text\":\"Overview\",\"link\":\"/\"},{\"text\":\"Quickstart\",\"link\":\"/quickstart\"},{\"text\":\"Scaffold an agent with Cursor\",\"link\":\"/scaffolding-agents\"},{\"text\":\"Concepts\",\"link\":\"/concepts\"}]},{\"text\":\"Improving agents\",\"items\":[{\"text\":\"Building agents with agents\",\"link\":\"/building-with-agents\"},{\"text\":\"Evals\",\"link\":\"/evals\"},{\"text\":\"Live A/B metrics\",\"link\":\"/ab\"},{\"text\":\"Hillclimbing\",\"link\":\"/hillclimbing\"}]},{\"text\":\"Guides\",\"items\":[{\"text\":\"Webhooks & custom channels\",\"link\":\"/guides/webhooks\"},{\"text\":\"GitHub\",\"link\":\"/guides/github\"},{\"text\":\"Slack\",\"link\":\"/guides/slack\"},{\"text\":\"Human-in-the-loop approvals\",\"link\":\"/guides/human-in-the-loop\"},{\"text\":\"Agent-to-agent\",\"link\":\"/guides/agent-to-agent\"},{\"text\":\"Cloud runtime\",\"link\":\"/guides/cloud-runtime\"}]},{\"text\":\"Operating\",\"items\":[{\"text\":\"Deployment\",\"link\":\"/deployment\"},{\"text\":\"Fix common problems\",\"link\":\"/troubleshooting\"}]},{\"text\":\"Reference\",\"collapsed\":false,\"items\":[{\"text\":\"Project layout\",\"link\":\"/reference/project-layout\"},{\"text\":\"Agent config\",\"link\":\"/reference/agent-config\"},{\"text\":\"Instructions\",\"link\":\"/reference/instructions\"},{\"text\":\"Tools\",\"link\":\"/reference/tools\"},{\"text\":\"Skills\",\"link\":\"/reference/skills\"},{\"text\":\"MCP Connections\",\"link\":\"/reference/connections\"},{\"text\":\"Subagents\",\"link\":\"/reference/subagents\"},{\"text\":\"Channels\",\"link\":\"/reference/channels\"},{\"text\":\"Schedules & reminders\",\"link\":\"/reference/schedules\"},{\"text\":\"Hooks\",\"link\":\"/reference/hooks\"},{\"text\":\"Sessions & streaming\",\"link\":\"/reference/sessions\"},{\"text\":\"Playground\",\"link\":\"/reference/playground\"},{\"text\":\"CLI\",\"link\":\"/reference/cli\"},{\"text\":\"HTTP API\",\"link\":\"/reference/http-api\"}]}]},\"locales\":{},\"scrollOffset\":134,\"cleanUrls\":false}");</script>
+    
+  </body>
+</html>