@cursor/july 0.1.1

package/dist/internal/cli-ax.js

@@ -0,0 +1,345 @@
+/**
+ * Agent-experience CLI commands:
+ *   init / run / trajectory / eval
+ *
+ * Coding agents get JSON-first output, ephemeral local servers, and
+ * filesystem-first evals under evals/ (*.eval.ts). Live A/B metrics
+ * (`defineAB` under `agent/ab`) plug into serve — there is no `ab` CLI.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { serve } from "../index.js";
+import { CLI_COMMAND_NAME } from "./distribution.js";
+import { discoverEvals, filterDiscoveredEvals, runDiscoveredEvals, } from "./eval-runner.js";
+import { initProject, printInitGuide } from "./init-project.js";
+import { runSession } from "./run-client.js";
+import { createStreamProgress } from "./stream-progress.js";
+import { formatTrajectoryText, loadTrajectoryFromEventsFile, } from "./trajectory.js";
+function shouldStreamProgress(options) {
+    if (options.stream === false) {
+        return false;
+    }
+    if (options.stream === true) {
+        return true;
+    }
+    return process.stderr.isTTY === true;
+}
+function die(message) {
+    process.stderr.write(`${message}\n`);
+    process.exit(1);
+}
+function pickAgentUrl(handle, slug) {
+    if (handle.agents.length === 0) {
+        die("No agents discovered.");
+    }
+    if (slug !== undefined && slug !== "") {
+        const match = handle.agents.find((a) => a.slug === slug);
+        if (match === undefined) {
+            die(`Unknown agent slug "${slug}". Available: ${handle.agents
+                .map((a) => a.slug || "(root)")
+                .join(", ")}`);
+        }
+        return match.url;
+    }
+    const root = handle.agents.find((a) => a.slug === "");
+    return (root !== null && root !== void 0 ? root : handle.agents[0]).url;
+}
+function startEphemeral(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const dir = resolve((_a = options.cwd) !== null && _a !== void 0 ? _a : process.cwd(), options.dir);
+        const stateRoot = (_b = options.stateRoot) !== null && _b !== void 0 ? _b : (yield mkdtemp(join(tmpdir(), "agent-serve-ax-")));
+        const handle = yield serve(dir, Object.assign({ host: "127.0.0.1", port: 0, stateRoot, playground: false, schedules: false, 
+            // Keep host/tool timing off stdout so `run`/`eval` JSON stays clean.
+            logger: (line) => {
+                process.stderr.write(`${line}\n`);
+            } }, (options.bearerToken === undefined
+            ? {}
+            : { authToken: options.bearerToken })));
+        return {
+            agentUrl: pickAgentUrl(handle, options.slug),
+            close: () => __awaiter(this, void 0, void 0, function* () {
+                // engine.close() can hang on open SDK streams; don't block the CLI.
+                yield Promise.race([
+                    handle.close(),
+                    new Promise((resolve) => setTimeout(resolve, 2000)),
+                ]);
+            }),
+        };
+    });
+}
+function resolveTarget(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (options.url !== undefined) {
+            return { agentUrl: options.url.replace(/\/$/, "") };
+        }
+        return startEphemeral(options);
+    });
+}
+export function cmdInit(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const target = options.initTarget;
+        if (target === undefined || target === "") {
+            printInitGuide();
+            return 0;
+        }
+        const dir = resolve((_a = options.cwd) !== null && _a !== void 0 ? _a : process.cwd(), target);
+        const result = yield initProject({ dir });
+        process.stdout.write(`${JSON.stringify({
+            ok: true,
+            directory: result.rootDir,
+            created: result.files,
+            next: [
+                `cd ${dir === process.cwd() ? "." : dir}`,
+                `${CLI_COMMAND_NAME} validate`,
+                `${CLI_COMMAND_NAME} info --json`,
+                `${CLI_COMMAND_NAME} run --message "hello"`,
+                `${CLI_COMMAND_NAME} eval`,
+            ],
+        }, null, 2)}\n`);
+        return 0;
+    });
+}
+export function cmdRun(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const messages = (_a = options.messages) !== null && _a !== void 0 ? _a : [];
+        if (messages.length === 0) {
+            die("Provide --message (repeatable) or --messages-file");
+        }
+        const stream = shouldStreamProgress(options);
+        const progress = stream ? createStreamProgress() : undefined;
+        const target = yield resolveTarget(options);
+        try {
+            if (stream) {
+                process.stderr.write(`→ ${target.agentUrl}\n`);
+            }
+            const result = yield runSession(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ baseUrl: target.agentUrl, messages }, (options.sessionId === undefined
+                ? {}
+                : { sessionId: options.sessionId })), (options.continuationToken === undefined
+                ? {}
+                : { continuationToken: options.continuationToken })), (options.bearerToken === undefined
+                ? {}
+                : { bearerToken: options.bearerToken })), (options.timeoutMs === undefined
+                ? {}
+                : { timeoutMs: options.timeoutMs })), (progress === undefined
+                ? {}
+                : { onEvent: (e) => progress.onEvent(e) })));
+            let eventsPath;
+            const writeEvents = options.events !== false;
+            if (writeEvents) {
+                if (typeof options.events === "string") {
+                    eventsPath = resolve(options.events);
+                }
+                else {
+                    const root = resolve((_b = options.cwd) !== null && _b !== void 0 ? _b : process.cwd(), options.dir);
+                    const tracesDir = join(root, ".agent-serve", "traces");
+                    yield mkdir(tracesDir, { recursive: true });
+                    eventsPath = join(tracesDir, `${result.sessionId}.ndjson`);
+                }
+                yield writeFile(eventsPath, `${result.events.map((e) => JSON.stringify(e)).join("\n")}\n`, "utf8");
+            }
+            const playgroundUrl = options.url !== undefined
+                ? `${target.agentUrl.replace(/\/$/, "")}/playground?sessionId=${encodeURIComponent(result.sessionId)}`
+                : null;
+            if (options.text) {
+                process.stdout.write(formatTrajectoryText(result.trajectory));
+                if (eventsPath !== undefined) {
+                    process.stderr.write(`\ntrace: ${eventsPath}\n`);
+                }
+                if (playgroundUrl !== null) {
+                    process.stderr.write(`playground: ${playgroundUrl}\n`);
+                }
+            }
+            else {
+                console.log(JSON.stringify({
+                    ok: result.ok,
+                    sessionId: result.sessionId,
+                    continuationToken: (_c = result.continuationToken) !== null && _c !== void 0 ? _c : null,
+                    trace: eventsPath !== null && eventsPath !== void 0 ? eventsPath : null,
+                    playgroundUrl,
+                    visualize: playgroundUrl !== null
+                        ? `Open ${playgroundUrl}`
+                        : eventsPath !== undefined
+                            ? `Start the playground (${CLI_COMMAND_NAME} serve --dir ${options.dir}), then Open trace → ${eventsPath}`
+                            : null,
+                    trajectory: result.trajectory,
+                }, null, 2));
+            }
+            return result.ok ? 0 : 1;
+        }
+        finally {
+            progress === null || progress === void 0 ? void 0 : progress.close();
+            if (target.close !== undefined) {
+                yield target.close();
+            }
+        }
+    });
+}
+/**
+ * `agent-serve call <tool>` — deterministic tool invocation over
+ * `POST /v1/tools/:toolName` (ephemeral local server unless --url).
+ */
+export function cmdCall(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const toolName = options.toolName;
+        if (toolName === undefined || toolName === "") {
+            die(`Provide a tool name: ${CLI_COMMAND_NAME} call <tool> [--input '{...}']`);
+        }
+        let input = {};
+        if (options.toolInput !== undefined) {
+            try {
+                input = JSON.parse(options.toolInput);
+            }
+            catch (error) {
+                die(`--input must be valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        const target = yield resolveTarget(options);
+        try {
+            const response = yield fetch(`${target.agentUrl}/v1/tools/${encodeURIComponent(toolName)}`, {
+                method: "POST",
+                headers: Object.assign({ "content-type": "application/json" }, (options.bearerToken === undefined
+                    ? {}
+                    : { authorization: `Bearer ${options.bearerToken}` })),
+                body: JSON.stringify(Object.assign({ input }, (options.sessionId === undefined
+                    ? {}
+                    : { sessionId: options.sessionId }))),
+            });
+            const payload = yield response
+                .json()
+                .catch(() => ({ ok: false, error: "invalid_response" }));
+            console.log(JSON.stringify(payload, null, 2));
+            const ok = response.ok &&
+                typeof payload === "object" &&
+                payload !== null &&
+                payload.ok === true;
+            return ok ? 0 : 1;
+        }
+        finally {
+            if (target.close !== undefined) {
+                yield target.close();
+            }
+        }
+    });
+}
+export function cmdTrajectory(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (typeof options.events !== "string") {
+            die(`trajectory requires --events <file.ndjson> (write one with: ${CLI_COMMAND_NAME} run --events …)`);
+        }
+        const trajectory = yield loadTrajectoryFromEventsFile(resolve(options.events));
+        if (options.text) {
+            process.stdout.write(formatTrajectoryText(trajectory));
+        }
+        else {
+            console.log(JSON.stringify(trajectory, null, 2));
+        }
+        return trajectory.ok ? 0 : 1;
+    });
+}
+export function cmdEval(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const projectRoot = resolve((_a = options.cwd) !== null && _a !== void 0 ? _a : process.cwd(), options.dir);
+        if (options.list) {
+            const { evals } = yield discoverEvals(projectRoot);
+            const listed = filterDiscoveredEvals(evals, {
+                filterIds: options.evalIds,
+                tags: options.tags,
+            });
+            if (options.json) {
+                console.log(JSON.stringify(listed.map((e) => { var _a; return ({
+                    id: e.id,
+                    fileId: e.fileId,
+                    path: e.path,
+                    description: e.definition.description,
+                    tags: (_a = e.definition.tags) !== null && _a !== void 0 ? _a : [],
+                }); }), null, 2));
+            }
+            else if (listed.length === 0) {
+                process.stdout.write(`No evals under ${projectRoot}/evals\n`);
+            }
+            else {
+                for (const e of listed) {
+                    const tags = e.definition.tags && e.definition.tags.length > 0
+                        ? `  [${e.definition.tags.join(", ")}]`
+                        : "";
+                    const desc = e.definition.description !== undefined
+                        ? ` — ${e.definition.description}`
+                        : "";
+                    process.stdout.write(`${e.id}${tags}${desc}\n`);
+                }
+            }
+            return 0;
+        }
+        const target = yield resolveTarget(options);
+        const stream = shouldStreamProgress(options);
+        const progress = stream ? createStreamProgress() : undefined;
+        try {
+            if (options.verbose || stream) {
+                process.stderr.write(`eval target: ${target.agentUrl}\n`);
+            }
+            const results = yield runDiscoveredEvals(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ projectRoot, baseUrl: target.agentUrl }, (options.evalIds === undefined || options.evalIds.length === 0
+                ? {}
+                : { filterIds: options.evalIds })), (options.tags === undefined || options.tags.length === 0
+                ? {}
+                : { tags: options.tags })), (options.timeoutMs === undefined
+                ? {}
+                : { timeoutMs: options.timeoutMs })), (options.bearerToken === undefined
+                ? {}
+                : { bearerToken: options.bearerToken })), { verbose: Boolean(options.verbose) || stream }), (progress === undefined
+                ? {}
+                : { onEvent: (e) => progress.onEvent(e) })));
+            if (results.length === 0) {
+                process.stderr.write("No matching evals found.\n");
+                return 2;
+            }
+            return printEvalResults(results, options);
+        }
+        finally {
+            progress === null || progress === void 0 ? void 0 : progress.close();
+            if (target.close !== undefined) {
+                yield target.close();
+            }
+        }
+    });
+}
+function printEvalResults(results, options) {
+    const passed = results.filter((r) => r.ok).length;
+    const failed = results.length - passed;
+    if (options.json) {
+        console.log(JSON.stringify({ ok: failed === 0, passed, failed, results }, null, 2));
+    }
+    else {
+        for (const r of results) {
+            process.stdout.write(`${r.ok ? "PASS" : "FAIL"}  ${r.id} (${(r.durationMs / 1000).toFixed(1)}s)`);
+            if (r.description !== undefined) {
+                process.stdout.write(` — ${r.description}`);
+            }
+            process.stdout.write("\n");
+            for (const a of r.assertions) {
+                process.stdout.write(`  ${a.passed ? "✓" : "✗"} ${a.name}${a.detail !== undefined ? ` (${a.detail})` : ""}\n`);
+            }
+            if (r.error !== undefined) {
+                process.stdout.write(`  error: ${r.error}\n`);
+            }
+            if (options.verbose && r.finalText !== undefined) {
+                process.stdout.write(`  reply: ${r.finalText.slice(0, 200).replace(/\s+/g, " ")}\n`);
+            }
+        }
+        process.stdout.write(`\n${passed} passed, ${failed} failed, ${results.length} total\n`);
+    }
+    return failed === 0 ? 0 : 1;
+}

package/dist/internal/cli-cursor.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `agent-serve login | logout | whoami` — the Cursor account CLI.
+ *
+ * `login` runs the same PKCE browser flow as `cursor-agent`, then uses the
+ * short-lived session exactly once to mint a named, dashboard-revocable
+ * user API key. Only the key is stored (see `../cursor/credentials.ts`);
+ * everything on the host — inference, cloud runtime, account MCP
+ * connections — flows from it.
+ */
+export interface CursorCliOptions {
+    /** `login --api-key <key>`: store this key instead of browser login. */
+    apiKey?: string;
+    /** `login --key-name <name>`: label for the minted key. */
+    keyName?: string;
+    json?: boolean;
+}
+export declare function cmdLogin(options: CursorCliOptions): Promise<number>;
+export declare function cmdLogout(): Promise<number>;
+export declare function cmdWhoami(options: CursorCliOptions): Promise<number>;
+//# sourceMappingURL=cli-cursor.d.ts.map

package/dist/internal/cli-cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-cursor.d.ts","sourceRoot":"","sources":["../../src/internal/cli-cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0BH,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+FzE;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAWjD;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC1E"}

package/dist/internal/cli-cursor.js

@@ -0,0 +1,227 @@
+/**
+ * `agent-serve login | logout | whoami` — the Cursor account CLI.
+ *
+ * `login` runs the same PKCE browser flow as `cursor-agent`, then uses the
+ * short-lived session exactly once to mint a named, dashboard-revocable
+ * user API key. Only the key is stored (see `../cursor/credentials.ts`);
+ * everything on the host — inference, cloud runtime, account MCP
+ * connections — flows from it.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { spawn } from "node:child_process";
+import { hostname } from "node:os";
+import { join } from "node:path";
+import { CursorBackendClient, CursorBackendError, createUserApiKeyWithSessionToken, revokeMintedUserApiKey, } from "./cursor/backend-client.js";
+import { clearStoredCredentials, credentialsFilePath, cursorBackendUrl, pollForLoginTokens, readStoredCredentials, resolveApiKey, SIGN_IN_HINT, startBrowserLogin, writeStoredCredentials, } from "./cursor/credentials.js";
+import { CLI_COMMAND_NAME } from "./distribution.js";
+export function cmdLogin(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const backendUrl = cursorBackendUrl();
+        let apiKey;
+        // Set only on the browser-mint path; carries what the revoke-on-failure
+        // cleanup needs (the session token that minted the key + its label).
+        let minted;
+        if (options.apiKey !== undefined && options.apiKey.trim() !== "") {
+            // Headless path: the operator brings a key (dashboard → Integrations).
+            apiKey = options.apiKey.trim();
+        }
+        else {
+            const { loginUrl, uuid, verifier } = startBrowserLogin();
+            process.stderr.write(`Opening your browser to sign in to Cursor…\n\n  ${loginUrl}\n\n(waiting for the browser sign-in to complete)\n`);
+            openBrowser(loginUrl);
+            const login = yield pollForLoginTokens({
+                uuid,
+                verifier,
+                backendUrl,
+                logger: (line) => process.stderr.write(`warning: ${line}\n`),
+            });
+            if (login.status !== "signed_in") {
+                process.stderr.write(`${describeLoginPollFailure(login)}\n`);
+                return 1;
+            }
+            const requestedKeyName = (_a = options.keyName) === null || _a === void 0 ? void 0 : _a.trim();
+            const keyName = requestedKeyName === undefined || requestedKeyName === ""
+                ? `${CLI_COMMAND_NAME} (${hostname()})`
+                : requestedKeyName;
+            try {
+                apiKey = yield createUserApiKeyWithSessionToken({
+                    backendUrl,
+                    sessionToken: login.accessToken,
+                    keyName,
+                });
+            }
+            catch (error) {
+                if (error instanceof CursorBackendError && error.status === 401) {
+                    // Team policy: non-admin members may be blocked from minting keys.
+                    process.stderr.write(`${error.message}\nYour team may restrict API key creation. Ask a team admin, or run \`${CLI_COMMAND_NAME} login --api-key <key>\` with a key from the Cursor dashboard.\n`);
+                    return 1;
+                }
+                throw error;
+            }
+            minted = { keyName, sessionToken: login.accessToken };
+            process.stderr.write(`Minted the "${keyName}" API key.\n`);
+        }
+        // Revoke the just-minted key when a later step fails, so a botched login
+        // never leaves an orphaned live credential (no-op on the headless path).
+        const rollbackMintedKey = () => __awaiter(this, void 0, void 0, function* () {
+            if (minted !== undefined) {
+                yield revokeMintedUserApiKey({
+                    backendUrl,
+                    keyName: minted.keyName,
+                    apiKey,
+                    sessionToken: minted.sessionToken,
+                }).catch(() => { });
+            }
+        });
+        // Prove the credential end-to-end (exchange + GetMe) before storing it.
+        const client = new CursorBackendClient({ backendUrl, apiKey });
+        let identity;
+        try {
+            identity = yield client.getMe();
+        }
+        catch (error) {
+            yield rollbackMintedKey();
+            process.stderr.write(`The API key did not authenticate against ${backendUrl}: ${describeError(error)}\n`);
+            return 1;
+        }
+        try {
+            yield writeStoredCredentials({ backendUrl, apiKey });
+        }
+        catch (error) {
+            yield rollbackMintedKey();
+            process.stderr.write(`Could not store credentials at ${credentialsFilePath()}: ${describeError(error)}\n`);
+            return 1;
+        }
+        process.stdout.write(`Signed in as ${formatIdentity(identity)} (${backendUrl})\nCredentials stored at ${credentialsFilePath()}\n`);
+        if (process.env.CURSOR_API_KEY !== undefined) {
+            process.stderr.write("note: CURSOR_API_KEY is set in this shell and takes precedence over the stored login.\n");
+        }
+        return 0;
+    });
+}
+export function cmdLogout() {
+    return __awaiter(this, void 0, void 0, function* () {
+        const stored = yield readStoredCredentials();
+        const removed = yield clearStoredCredentials();
+        if (!removed || stored === undefined) {
+            process.stdout.write("No stored Cursor credentials.\n");
+            return 0;
+        }
+        process.stdout.write(`Signed out (removed ${credentialsFilePath()}). The API key still exists — revoke it in the Cursor dashboard if it should stop working.\n`);
+        return 0;
+    });
+}
+export function cmdWhoami(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const resolved = yield resolveApiKey();
+        if (resolved === undefined) {
+            process.stderr.write(`Not signed in to Cursor. ${SIGN_IN_HINT}\n`);
+            return 1;
+        }
+        const client = new CursorBackendClient({
+            backendUrl: resolved.backendUrl,
+            apiKey: resolved.apiKey,
+        });
+        let identity;
+        try {
+            identity = yield client.getMe();
+        }
+        catch (error) {
+            process.stderr.write(`The ${describeSource(resolved.source)} did not authenticate against ${resolved.backendUrl}: ${describeError(error)}\n`);
+            return 1;
+        }
+        if (options.json === true) {
+            process.stdout.write(`${JSON.stringify({
+                email: (_a = identity.email) !== null && _a !== void 0 ? _a : null,
+                authId: (_b = identity.authId) !== null && _b !== void 0 ? _b : null,
+                teamName: (_c = identity.teamName) !== null && _c !== void 0 ? _c : null,
+                backendUrl: resolved.backendUrl,
+                credentialSource: resolved.source,
+            }, null, 2)}\n`);
+            return 0;
+        }
+        process.stdout.write(`${formatIdentity(identity)}\n  backend:    ${resolved.backendUrl}\n  credential: ${describeSource(resolved.source)}\n`);
+        return 0;
+    });
+}
+function formatIdentity(identity) {
+    var _a, _b;
+    const name = [identity.firstName, identity.lastName]
+        .filter((part) => part !== undefined && part !== "")
+        .join(" ");
+    const email = (_b = (_a = identity.email) !== null && _a !== void 0 ? _a : identity.authId) !== null && _b !== void 0 ? _b : "(unknown user)";
+    const team = identity.teamName === undefined ? "" : ` — team ${identity.teamName}`;
+    return name === "" ? `${email}${team}` : `${name} <${email}>${team}`;
+}
+function describeSource(source) {
+    switch (source) {
+        case "option":
+            return "explicit --api-key / serve({ apiKey })";
+        case "env":
+            return "CURSOR_API_KEY environment variable";
+        case "login":
+            return `stored login (${credentialsFilePath()})`;
+    }
+}
+/**
+ * Never report a backend failure as a timeout: a wrong-verb poll used to print
+ * "Login timed out or was cancelled" ~200ms in, which reads as "you were too
+ * slow" and hides the actual 404.
+ */
+function describeLoginPollFailure(result) {
+    switch (result.status) {
+        case "cancelled":
+            return "Login cancelled.";
+        case "timed_out":
+            return `Login timed out — the browser sign-in was never completed. Run \`${CLI_COMMAND_NAME} login\` to try again.`;
+        case "failed":
+            return [
+                `Login failed: ${result.message}`,
+                "This is not a timeout — the sign-in never got a chance to complete.",
+                `Sign in without the browser flow with \`${CLI_COMMAND_NAME} login --api-key <key>\` (Cursor dashboard → Integrations).`,
+            ].join("\n");
+    }
+}
+/** Best-effort browser open; the URL is always printed as the fallback. */
+function openBrowser(url) {
+    var _a;
+    const command = process.platform === "darwin"
+        ? { cmd: "open", args: [url] }
+        : process.platform === "win32"
+            ? {
+                cmd: join((_a = process.env.SYSTEMROOT) !== null && _a !== void 0 ? _a : "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+                args: [
+                    "-NoProfile",
+                    "-NonInteractive",
+                    "-WindowStyle",
+                    "Hidden",
+                    "-Command",
+                    `Start-Process '${url.replace(/'/g, "''")}'`,
+                ],
+            }
+            : { cmd: "xdg-open", args: [url] };
+    try {
+        const child = spawn(command.cmd, command.args, {
+            stdio: "ignore",
+            detached: true,
+        });
+        child.on("error", () => { });
+        child.unref();
+    }
+    catch (_b) {
+        // The printed URL is the fallback.
+    }
+}
+function describeError(error) {
+    return error instanceof Error ? error.message : String(error);
+}

package/dist/internal/cli-github.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `agent-serve github …` CLI — forward live GitHub webhooks to a locally
+ * served agent via the `cli/gh-webhook` extension, plus a doctor and an
+ * events lister.
+ *
+ * @see https://docs.github.com/en/webhooks/testing-and-troubleshooting-webhooks/using-the-github-cli-to-forward-webhooks-for-testing
+ */
+export interface GithubCliOptions {
+    dir: string;
+    /** Select one agent mount by slug. */
+    slug?: string;
+    /** Select one channel id (when an agent has several GitHub channels). */
+    channel?: string;
+    /** Local server host (default 127.0.0.1). */
+    host?: string;
+    /** Local server port (default 3000). */
+    port?: number;
+    /** Explicit forward URL (skips URL derivation). */
+    url?: string;
+    /** Comma/space-separated event override. */
+    events?: string;
+    /** `owner/repo` to forward from. */
+    repo?: string;
+    /** Organization login (org-level hooks). */
+    org?: string;
+    /** Webhook signing secret (defaults to GITHUB_WEBHOOK_SECRET). */
+    secret?: string;
+    /** Install the `cli/gh-webhook` extension if missing. */
+    install?: boolean;
+    json?: boolean;
+    /** replay: PR URL or `owner/repo#N`. */
+    prUrl?: string;
+    /** replay: override the event action (e.g. opened, synchronize). */
+    action?: string;
+    /** replay: CI conclusion for check_run/check_suite/workflow_run. */
+    conclusion?: string;
+    /** replay: commit-status context. */
+    context?: string;
+    /** replay: comment body for issue_comment / review comment. */
+    comment?: string;
+    /** replay: print synthesized payloads instead of POSTing. */
+    dryRun?: boolean;
+    /** replay: write synthesized payloads as fixtures into this dir. */
+    out?: string;
+}
+export declare function cmdGithub(subcommand: string | undefined, options: GithubCliOptions): Promise<number>;
+//# sourceMappingURL=cli-github.d.ts.map

package/dist/internal/cli-github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-github.d.ts","sourceRoot":"","sources":["../../src/internal/cli-github.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6CH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgDD,wBAAsB,SAAS,CAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,CAAC,CAqBjB"}