@cursor/july 0.1.100 → 0.1.102

package/README.md

@@ -747,6 +747,33 @@ default). On the Cursor harness, subagents run as SDK custom subagents:
 they inherit the parent's execution surface, so per-subagent `tools/`,
 `skills/`, and `mcp-connections/` are reported as warnings and ignored for now.
 
+### Extensions (`agent/extensions/<ns>.ts`)
+
+An extension is a package of tools and skills mounted with one file; the
+filename is the namespace and every contribution appears as `<ns>__<name>`.
+A Cursor plugin (the marketplace format) mounts the same way with
+`cursorPlugin`: its skills and commands become skills, its agents
+subagents, and its MCP servers connections under the namespace.
+
+```ts
+// agent/extensions/ci.ts
+import ci from "@acme/ci-triage";
+export default ci({ org: "acme", token: process.env.BUILDKITE_TOKEN! });
+
+// agent/extensions/notion.ts
+import { cursorPlugin } from "@cursor/july/extensions";
+export default cursorPlugin({
+  path: "plugins/notion-workspace",
+  variables: { NOTION_TOKEN: process.env.NOTION_TOKEN! },
+});
+```
+
+Mount as a directory (`agent/extensions/<ns>/extension.ts`) to overlay
+`tools/` and `skills/`, or a plugin's `mcp-connections/`; `disableTool()`
+and `disableConnection()` remove a contribution. Mounting a plugin trusts
+it like authored code. Details in
+[Extensions](./docs/reference/extensions.md).
+
 ### Channels (`agent/channels/*.ts`)
 
 The **built-in HTTP channel** is always mounted (under `/<slug>` in the

package/dist/bin/agent-serve.js

@@ -390,8 +390,8 @@ Options:
   --all              deploy: every child agent under a multi-agent --dir
                      (skips the interactive picker; mutually exclusive with
                      --slug).
-  --cursor-events-repo  deploy: repo (owner/name) whose SCM events the
-                     deployed engine pulls (repeatable).
+  --cursor-events-repo  deploy: repo (owner/name) the deployed agent
+                     watches (repeatable).
   --allow-domain     deploy: egress domain the engine pod may reach
                      (repeatable; unioned with hosting.egressDomains from the
                      agent manifest). Repo-backed deploys only.
@@ -1001,6 +1001,7 @@ function main(argv) {
                 }
                 lines.push(section("tools", info.tools.map((t) => `${t.name} — ${t.description}`)));
                 lines.push(section("skills", info.skills.map((s) => `${s.name} — ${s.description}`)));
+                lines.push(section("extensions", info.extensions.map((e) => `${e.name} — ${[...e.tools, ...e.skills].join(", ") || "(nothing contributed)"}`)));
                 lines.push(section("MCP connections", info.connections.map((c) => `${c.name} — ${c.transport}`)));
                 lines.push(section("subagents", info.subagents.map((s) => { var _a; return `${s.name} — ${(_a = s.description) !== null && _a !== void 0 ? _a : ""}`; })));
                 lines.push(section("channels", info.channels.map((c) => `${c.id}: ${c.routes.map((r) => `${r.method} ${r.url}`).join(", ") ||

package/dist/channels/deployments/deployments-channel.d.ts

@@ -8,20 +8,49 @@ export declare function getDeploymentsChannelOptions(definition: object): Deploy
 /**
  * Events a {@link deploymentsChannel} dispatches on, unioned from its
  * subscriptions. Published as `meta.deploymentEventTypes` so the deploy
- * manifest can extract `eventTypes`. An empty deploy-source list is an
- * inert channel and yields no events.
+ * manifest can extract `eventTypes`.
+ *
+ * A channel with no resolved subscriptions declares the full event set:
+ * deploy sources usually come from env vars read at module load, and the
+ * hosted freeze bakes hermetically (no customer env/secrets), so deriving
+ * `[]` there would leave the manifest without event types and no
+ * subscription edge could ever materialize (invariant 26). Capability is
+ * the channel's code shape — `onEvent` handles any deployment event —
+ * while sources/environments/event narrowing are runtime subscription
+ * config; the hosted-admission adapter re-applies them before authored
+ * code runs. Inertness is still guaranteed by scope: a deploy that names
+ * no deploy sources binds no edges.
  */
 export declare function deriveDeploymentEventTypes(options: Pick<DeploymentsChannelOptions, "deploySourceUris" | "events">): string[];
 /**
- * Core deployment-event dispatch, used by the channel's replay route and by
- * the serve host's relay fan-out. Whether the event matches this channel's
- * subscriptions is the caller's decision.
+ * Core deployment-event dispatch, used by the channel's replay route, the
+ * serve host's relay fan-out, and the hosted-admission adapter. Whether the
+ * event matches this channel's subscriptions is the caller's decision.
  */
 export declare function dispatchDeploymentEvent(input: {
     options: DeploymentsChannelOptions;
     event: DeploymentEvent;
     args: ChannelHandlerArgs;
 }): Promise<Response>;
+export type DeploymentsDispatchOutcome = "skip" | "task";
+export declare function getDeploymentsDispatchOutcome(response: Response): DeploymentsDispatchOutcome | undefined;
+/**
+ * Whether this channel admits the event on a hosted pod. The hosted
+ * control plane fans out on `(deploy_source, eventType, team)` edges only —
+ * environments are not edge identity — so this is where the environment
+ * filter (and a stale-edge guard for sources/events) lives, mirroring what
+ * the v1 relay does before `onEvent`.
+ *
+ * A channel with NO resolved subscriptions admits everything the control
+ * plane delivered: deploy sources usually come from env vars read at
+ * module load, and the hosted freeze bakes hermetically (no customer env),
+ * so on a restored pod an env-configured channel resolves empty — the
+ * deploy-time edges (bound from the watched repositories) already carry
+ * the customer's scope, and refusing here would silently drop every
+ * delivery. Same posture as {@link deriveDeploymentEventTypes}: authored
+ * subscriptions narrow; an unconfigured channel defers to the deploy scope.
+ */
+export declare function deploymentEventMatchesChannel(options: DeploymentsChannelOptions, event: DeploymentEvent): boolean;
 /**
  * Deployment events channel.
  *
@@ -44,6 +73,13 @@ export declare function dispatchDeploymentEvent(input: {
  * have. Nothing is pushed to this deployment and no shared secret exists on
  * either side.
  *
+ * Hosted v2 deployments do not poll: the control plane fans verified factory
+ * deployment events out on `deploy_source` subscription edges — derived from
+ * the deploy's watched `repositories`, since factory records deploy sources
+ * as Origin repo URLs — and delivers through hosted admission. The attached
+ * adapter re-applies this channel's subscription filter — environments are
+ * not edge identity — and skips before authored code runs.
+ *
  * The route on this channel exists for local replay (`agent-sdk` and tests):
  * POST an event body and it runs the same `onEvent`.
  */

package/dist/channels/deployments/deployments-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployments-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/deployments/deployments-channel.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC/B,MAAM,YAAY,CAAC;AAqBpB;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CAEvC;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,GAAG,QAAQ,CAAC,GACtE,MAAM,EAAE,CAQV;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,OAAO,EAAE,yBAAyB,CAAC;IACnC,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAWpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,iBAAiB,CA8BnB"}
+{"version":3,"file":"deployments-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/deployments/deployments-channel.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC/B,MAAM,YAAY,CAAC;AAqBpB;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CAEvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,GAAG,QAAQ,CAAC,GACtE,MAAM,EAAE,CAYV;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,OAAO,EAAE,yBAAyB,CAAC;IACnC,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAapB;AAED,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,MAAM,CAAC;AAezD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,QAAQ,GACjB,0BAA0B,GAAG,SAAS,CAExC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,yBAAyB,EAClC,KAAK,EAAE,eAAe,GACrB,OAAO,CAUT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,iBAAiB,CA4DnB"}

package/dist/channels/deployments/deployments-channel.js

@@ -9,7 +9,8 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 import { z } from "zod";
 import { defineChannel, localDevStrict, POST } from "../../channels.js";
-import { resolveDeploymentSubscriptions } from "../../internal/cursor-deployment-relay.js";
+import { deploymentEventMatches, resolveDeploymentSubscriptions, } from "../../internal/cursor-deployment-relay.js";
+import { attachHostedAdmissionAdapter } from "../../internal/hosted-admission-adapter.js";
 import { bindLocalIngressSend } from "../../internal/local-ingress.js";
 import { DEPLOYMENT_EVENT_TYPES, DEPLOYMENTS_CHANNEL_KIND, } from "./types.js";
 const deploymentEventSchema = z.object({
@@ -36,12 +37,26 @@ export function getDeploymentsChannelOptions(definition) {
 /**
  * Events a {@link deploymentsChannel} dispatches on, unioned from its
  * subscriptions. Published as `meta.deploymentEventTypes` so the deploy
- * manifest can extract `eventTypes`. An empty deploy-source list is an
- * inert channel and yields no events.
+ * manifest can extract `eventTypes`.
+ *
+ * A channel with no resolved subscriptions declares the full event set:
+ * deploy sources usually come from env vars read at module load, and the
+ * hosted freeze bakes hermetically (no customer env/secrets), so deriving
+ * `[]` there would leave the manifest without event types and no
+ * subscription edge could ever materialize (invariant 26). Capability is
+ * the channel's code shape — `onEvent` handles any deployment event —
+ * while sources/environments/event narrowing are runtime subscription
+ * config; the hosted-admission adapter re-applies them before authored
+ * code runs. Inertness is still guaranteed by scope: a deploy that names
+ * no deploy sources binds no edges.
  */
 export function deriveDeploymentEventTypes(options) {
+    const subscriptions = resolveDeploymentSubscriptions(options);
+    if (subscriptions.length === 0) {
+        return [...DEPLOYMENT_EVENT_TYPES].sort();
+    }
     const events = new Set();
-    for (const subscription of resolveDeploymentSubscriptions(options)) {
+    for (const subscription of subscriptions) {
         for (const event of subscription.events) {
             events.add(event);
         }
@@ -49,9 +64,9 @@ export function deriveDeploymentEventTypes(options) {
     return [...events].sort();
 }
 /**
- * Core deployment-event dispatch, used by the channel's replay route and by
- * the serve host's relay fan-out. Whether the event matches this channel's
- * subscriptions is the caller's decision.
+ * Core deployment-event dispatch, used by the channel's replay route, the
+ * serve host's relay fan-out, and the hosted-admission adapter. Whether the
+ * event matches this channel's subscriptions is the caller's decision.
  */
 export function dispatchDeploymentEvent(input) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -61,9 +76,43 @@ export function dispatchDeploymentEvent(input) {
             eventType: input.event.eventType,
             payload: input.event,
         }));
-        return Response.json({ ok: true });
+        // "task": authored `onEvent` ran to completion without a captured send.
+        // Hosted admission only consults this when no send was captured.
+        return withDispatchOutcome(Response.json({ ok: true }), "task");
     });
 }
+const dispatchOutcomeByResponse = new WeakMap();
+function withDispatchOutcome(response, outcome) {
+    dispatchOutcomeByResponse.set(response, outcome);
+    return response;
+}
+export function getDeploymentsDispatchOutcome(response) {
+    return dispatchOutcomeByResponse.get(response);
+}
+/**
+ * Whether this channel admits the event on a hosted pod. The hosted
+ * control plane fans out on `(deploy_source, eventType, team)` edges only —
+ * environments are not edge identity — so this is where the environment
+ * filter (and a stale-edge guard for sources/events) lives, mirroring what
+ * the v1 relay does before `onEvent`.
+ *
+ * A channel with NO resolved subscriptions admits everything the control
+ * plane delivered: deploy sources usually come from env vars read at
+ * module load, and the hosted freeze bakes hermetically (no customer env),
+ * so on a restored pod an env-configured channel resolves empty — the
+ * deploy-time edges (bound from the watched repositories) already carry
+ * the customer's scope, and refusing here would silently drop every
+ * delivery. Same posture as {@link deriveDeploymentEventTypes}: authored
+ * subscriptions narrow; an unconfigured channel defers to the deploy scope.
+ */
+export function deploymentEventMatchesChannel(options, event) {
+    const subscriptions = resolveDeploymentSubscriptions(options);
+    if (subscriptions.length === 0) {
+        return true;
+    }
+    return subscriptions.some((subscription) => subscription.deploySourceUri === event.deploySourceUri.toLowerCase() &&
+        deploymentEventMatches(subscription, event));
+}
 /**
  * Deployment events channel.
  *
@@ -86,6 +135,13 @@ export function dispatchDeploymentEvent(input) {
  * have. Nothing is pushed to this deployment and no shared secret exists on
  * either side.
  *
+ * Hosted v2 deployments do not poll: the control plane fans verified factory
+ * deployment events out on `deploy_source` subscription edges — derived from
+ * the deploy's watched `repositories`, since factory records deploy sources
+ * as Origin repo URLs — and delivers through hosted admission. The attached
+ * adapter re-applies this channel's subscription filter — environments are
+ * not edge identity — and skips before authored code runs.
+ *
  * The route on this channel exists for local replay (`agent-sdk` and tests):
  * POST an event body and it runs the same `onEvent`.
  */
@@ -113,5 +169,29 @@ export function deploymentsChannel(options) {
             }),
         ] }));
     deploymentsChannelOptionsByDefinition.set(definition, options);
+    // Hosted v2 delivery: the control plane admits a deployments mailbox item
+    // (deploy_source edge match) and posts the claim-checked factory envelope
+    // here. Environments are not edge identity, so non-matching environments
+    // (and stale-edge sources/events) are filtered to `skip` before authored
+    // code runs — the same pre-`onEvent` filter the v1 relay applies.
+    attachHostedAdmissionAdapter(definition, {
+        kind: DEPLOYMENTS_CHANNEL_KIND,
+        dispatch: (_a) => __awaiter(this, [_a], void 0, function* ({ payload, args }) {
+            const parsed = deploymentEventSchema.safeParse(payload);
+            if (!parsed.success) {
+                return Response.json({ ok: false, error: "invalid_deployment_event" }, { status: 400 });
+            }
+            const event = parsed.data;
+            if (!deploymentEventMatchesChannel(options, event)) {
+                return withDispatchOutcome(Response.json({
+                    ok: true,
+                    skipped: true,
+                    reason: "subscription_mismatch",
+                }), "skip");
+            }
+            return dispatchDeploymentEvent({ options, event, args });
+        }),
+        getOutcome: (response) => getDeploymentsDispatchOutcome(response),
+    });
     return definition;
 }

package/dist/channels/deployments/types.d.ts

@@ -44,9 +44,10 @@ export interface DeploymentsChannelOptions {
      * and then receives nothing. A bare string takes the default environment and
      * event filters.
      *
-     * There is no team-wide subscription: every deploy source is named. At least
-     * one is required — an empty list is how a consumer *deregisters*, so it
-     * cannot also mean "everything".
+     * There is no team-wide subscription: every deploy source is named. An
+     * empty list is how a consumer *deregisters*, so it cannot also mean
+     * "everything". A live array that starts empty and is filled later is
+     * re-read on each registration heartbeat.
      */
     deploySourceUris: readonly (string | DeploymentSubscription)[];
     /**

package/dist/channels/deployments/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/channels/deployments/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAEtD,eAAO,MAAM,sBAAsB,YACjC,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,CACX,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEhF,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,0CAA0C;IAC1C,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;OAWG;IACH,gBAAgB,EAAE,SAAS,CAAC,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAC;IAC/D;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxC,6EAA6E;IAC7E,OAAO,EAAE,CACP,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,kBAAkB,KACrB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/channels/deployments/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAEtD,eAAO,MAAM,sBAAsB,YACjC,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,CACX,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEhF,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,0CAA0C;IAC1C,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;;;;OAYG;IACH,gBAAgB,EAAE,SAAS,CAAC,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAC;IAC/D;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxC,6EAA6E;IAC7E,OAAO,EAAE,CACP,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,kBAAkB,KACrB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC"}

package/dist/channels/origin/defaults.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Default stream-event handlers for the Origin channel: reply delivery.
+ *
+ * The GitHub channel posts completed assistant messages back to the PR via
+ * `buildDefaultGitHubEvents`; this is the Origin analogue. Outbound
+ * credentials resolve exactly like `ctx.origin` in hooks (see
+ * ./binding.ts): channel app credentials / `ORIGIN_APP_*` env when
+ * configured, otherwise — for `cursorAccount` channels — the Cursor-account
+ * session exchange, which on hosted v2 acts as the deployment
+ * service-account principal. The `agent-serve` SA scope allowlist includes
+ * `repository:pull_requests:reviews:write`, the scope
+ * `CreatePullRequestComment` checks, so no extra grant is needed.
+ */
+import type { ChannelEventHandlers } from "../../types.js";
+import { buildOriginBinding } from "./binding.js";
+import type { OriginChannelState } from "./state.js";
+import type { OriginAppOptions } from "./types.js";
+/** Hidden marker on outbound Origin comments so consumers can spot them. */
+export declare const ORIGIN_OUTBOUND_MARKER = "<!-- agent-serve-origin -->";
+export declare function formatOriginOutboundComment(body: string): string;
+export interface BuildDefaultOriginEventsOptions {
+    /** Force the signed-in Cursor account / deployment SA credential path. */
+    cursorAccount?: boolean | {
+        repos: readonly string[];
+    };
+    /** Channel-authored outbound app credentials / API base. */
+    app?: OriginAppOptions;
+    /**
+     * When false, skip posting completed assistant messages (and failure
+     * notices) back to the Origin pull request. Defaults to true.
+     */
+    deliverReplies?: boolean;
+    /** Injectable binding builder for tests. */
+    buildBinding?: typeof buildOriginBinding;
+}
+/**
+ * Built-in delivery: post assistant text on `message.completed`, and a
+ * short error comment on turn/session failure. Every post soft-fails so a
+ * missing outbound credential (or an Origin refusal) never crashes the
+ * session — the GitHub defaults' posture.
+ */
+export declare function buildDefaultOriginEvents(options?: BuildDefaultOriginEventsOptions): ChannelEventHandlers<OriginChannelState>;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/channels/origin/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/channels/origin/defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,MAAM,WAAW,+BAA+B;IAC9C,0EAA0E;IAC1E,aAAa,CAAC,EAAE,OAAO,GAAG;QAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACvD,4DAA4D;IAC5D,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,OAAO,kBAAkB,CAAC;CAC1C;AA4CD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,+BAAoC,GAC5C,oBAAoB,CAAC,kBAAkB,CAAC,CA0B1C"}

package/dist/channels/origin/defaults.js

@@ -0,0 +1,111 @@
+/**
+ * Default stream-event handlers for the Origin channel: reply delivery.
+ *
+ * The GitHub channel posts completed assistant messages back to the PR via
+ * `buildDefaultGitHubEvents`; this is the Origin analogue. Outbound
+ * credentials resolve exactly like `ctx.origin` in hooks (see
+ * ./binding.ts): channel app credentials / `ORIGIN_APP_*` env when
+ * configured, otherwise — for `cursorAccount` channels — the Cursor-account
+ * session exchange, which on hosted v2 acts as the deployment
+ * service-account principal. The `agent-serve` SA scope allowlist includes
+ * `repository:pull_requests:reviews:write`, the scope
+ * `CreatePullRequestComment` checks, so no extra grant is needed.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { buildOriginBinding } from "./binding.js";
+/** Hidden marker on outbound Origin comments so consumers can spot them. */
+export const ORIGIN_OUTBOUND_MARKER = "<!-- agent-serve-origin -->";
+export function formatOriginOutboundComment(body) {
+    if (body.includes(ORIGIN_OUTBOUND_MARKER)) {
+        return body;
+    }
+    return `${body.trimEnd()}\n\n${ORIGIN_OUTBOUND_MARKER}`;
+}
+function bindingForState(options, state) {
+    var _a;
+    const build = (_a = options.buildBinding) !== null && _a !== void 0 ? _a : buildOriginBinding;
+    return build(Object.assign(Object.assign({ repository: {
+            owner: state.owner,
+            name: state.repo,
+            fullName: `${state.owner}/${state.repo}`,
+        } }, (state.installationId === null
+        ? {}
+        : { installationId: state.installationId })), { cursorAccount: options.cursorAccount !== undefined && options.cursorAccount !== false, app: options.app }));
+}
+function postPullRequestComment(options, state, body) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (state.owner === "" ||
+            state.repo === "" ||
+            state.pullRequestNumber === null) {
+            return;
+        }
+        const origin = bindingForState(options, state);
+        yield origin.request({
+            method: "POST",
+            path: `/v1/origin/repos/${encodeURIComponent(state.owner)}/${encodeURIComponent(state.repo)}/pulls/${state.pullRequestNumber}/comments`,
+            body: { body: formatOriginOutboundComment(body) },
+        });
+    });
+}
+/**
+ * Built-in delivery: post assistant text on `message.completed`, and a
+ * short error comment on turn/session failure. Every post soft-fails so a
+ * missing outbound credential (or an Origin refusal) never crashes the
+ * session — the GitHub defaults' posture.
+ */
+export function buildDefaultOriginEvents(options = {}) {
+    const deliverReplies = options.deliverReplies !== false;
+    return {
+        "message.completed"(event, channel) {
+            return __awaiter(this, void 0, void 0, function* () {
+                if (!deliverReplies) {
+                    return;
+                }
+                if (event.data.finishReason === "tool_call" || event.data.text === "") {
+                    return;
+                }
+                try {
+                    yield postPullRequestComment(options, channel.state, event.data.text);
+                }
+                catch (_a) {
+                    // Soft-fail delivery so a missing credential does not crash the session.
+                }
+            });
+        },
+        "turn.failed"(_event, channel) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield postFailure(options, channel, deliverReplies);
+            });
+        },
+        "session.failed"(_event, channel) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield postFailure(options, channel, deliverReplies);
+            });
+        },
+    };
+}
+function postFailure(options, channel, deliverReplies) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!deliverReplies) {
+            return;
+        }
+        try {
+            yield postPullRequestComment(options, channel.state, [
+                "I hit an error while handling your request.",
+                "",
+                "Please try again, or reach out if it keeps failing.",
+            ].join("\n"));
+        }
+        catch (_a) {
+            // Soft-fail.
+        }
+    });
+}

package/dist/channels/origin/index.d.ts

@@ -25,9 +25,11 @@ export * from "./api.js";
 export * from "./binding.js";
 export * from "./checks.js";
 export * from "./cursor-account.js";
+export * from "./defaults.js";
 export * from "./events.js";
 export * from "./origin-channel.js";
 export * from "./origin-webhook.js";
 export * from "./reactions.js";
+export * from "./state.js";
 export * from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/channels/origin/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/origin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/origin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/channels/origin/index.js

@@ -25,8 +25,10 @@ export * from "./api.js";
 export * from "./binding.js";
 export * from "./checks.js";
 export * from "./cursor-account.js";
+export * from "./defaults.js";
 export * from "./events.js";
 export * from "./origin-channel.js";
 export * from "./origin-webhook.js";
 export * from "./reactions.js";
+export * from "./state.js";
 export * from "./types.js";

package/dist/channels/origin/origin-channel.d.ts

@@ -1,4 +1,5 @@
 import type { AuthContext, ChannelDefinition, ChannelHandlerArgs } from "../../types.js";
+import { type OriginChannelState } from "./state.js";
 import type { OriginChannelOptions, OriginEventContext, OriginPullRequestEvent, OriginTurnDispatch, OriginWebhookEnvelope } from "./types.js";
 /** `AGENT_SERVE_ORIGIN_APP_ID` fallback for {@link OriginChannelOptions.appId}. */
 export declare function envOriginAppId(): string | undefined;
@@ -51,7 +52,7 @@ export declare function handleOriginWebhookRequest(input: {
     skipSignatureVerification?: boolean;
 }): Promise<Response>;
 export declare function getOriginChannelOptions(definition: object): OriginChannelOptions | undefined;
-export declare function originChannel(options?: OriginChannelOptions): ChannelDefinition;
+export declare function originChannel(options?: OriginChannelOptions): ChannelDefinition<OriginChannelState>;
 /** Minimal mount shape shared by `serve` / trigger fan-out. */
 export interface OriginAgentMountLike {
     slug: string;

package/dist/channels/origin/origin-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"origin-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/origin/origin-channel.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAEV,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AAaxB,OAAO,KAAK,EAEV,oBAAoB,EAGpB,kBAAkB,EAClB,sBAAsB,EAItB,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAiFpB,mFAAmF;AACnF,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAGnD;AAqGD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,qBAAqB,GAAG,IAAI,CAG9B;AAuCD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,EAAE,qBAAqB,CAAC;CACjC,GAAG;IACF,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC;IAC/D,WAAW,EAAE,sBAAsB,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GAAG,IAAI,CAwDP;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,GAC7D,WAAW,CAeb;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,mBAAmB,CAAC,GAChE,MAAM,CAER;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAST;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,mBAAmB,CAAC,GAChE,MAAM,CAER;AAED,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,EAC9D,WAAW,EAAE,sBAAsB,GAClC,MAAM,CAaR;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,EAC9D,WAAW,EAAE,sBAAsB,GAClC,kBAAkB,GAAG,IAAI,CAK3B;AA4BD,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAe7D,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,QAAQ,GACjB,qBAAqB,GAAG,SAAS,CAEnC;AAgID;;;;GAIG;AACH;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgHpB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,0EAA0E;IAC1E,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwDpB;AAOD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,GACjB,oBAAoB,GAAG,SAAS,CAElC;AAED,wBAAgB,aAAa,CAC3B,OAAO,GAAE,oBAAyB,GACjC,iBAAiB,CAqFnB;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QACP,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,UAAU,EAAE;gBACV,IAAI,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;oBAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;iBAAE,CAAC;aACnE,CAAC;SACH,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,GAC1C,mBAAmB,EAAE,CAgBvB"}
+{"version":3,"file":"origin-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/origin/origin-channel.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAEV,WAAW,EACX,iBAAiB,EAEjB,kBAAkB,EAEnB,MAAM,gBAAgB,CAAC;AAcxB,OAAO,EAEL,KAAK,kBAAkB,EAExB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAEV,oBAAoB,EAGpB,kBAAkB,EAClB,sBAAsB,EAItB,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAiFpB,mFAAmF;AACnF,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAGnD;AAqGD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,qBAAqB,GAAG,IAAI,CAG9B;AAuCD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,EAAE,qBAAqB,CAAC;CACjC,GAAG;IACF,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC;IAC/D,WAAW,EAAE,sBAAsB,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GAAG,IAAI,CAwDP;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,GAC7D,WAAW,CAeb;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,mBAAmB,CAAC,GAChE,MAAM,CAER;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAST;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,mBAAmB,CAAC,GAChE,MAAM,CAER;AAED,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,EAC9D,WAAW,EAAE,sBAAsB,GAClC,MAAM,CAaR;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,EAC9D,WAAW,EAAE,sBAAsB,GAClC,kBAAkB,GAAG,IAAI,CAK3B;AA6BD,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAe7D,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,QAAQ,GACjB,qBAAqB,GAAG,SAAS,CAEnC;AA+ID;;;;GAIG;AACH;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiHpB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,0EAA0E;IAC1E,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwDpB;AAOD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,GACjB,oBAAoB,GAAG,SAAS,CAElC;AAED,wBAAgB,aAAa,CAC3B,OAAO,GAAE,oBAAyB,GACjC,iBAAiB,CAAC,kBAAkB,CAAC,CAgGvC;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QACP,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,UAAU,EAAE;gBACV,IAAI,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;oBAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;iBAAE,CAAC;aACnE,CAAC;SACH,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,GAC1C,mBAAmB,EAAE,CAgBvB"}

package/dist/channels/origin/origin-channel.js

@@ -16,8 +16,10 @@ import { attachHostedAdmissionAdapter } from "../../internal/hosted-admission-ad
 import { bindLocalIngressSend } from "../../internal/local-ingress.js";
 import { buildOriginBinding } from "./binding.js";
 import { parseCursorOriginRepoScope, registerOriginCursorAccountRuntime, } from "./cursor-account.js";
+import { buildDefaultOriginEvents } from "./defaults.js";
 import { deriveOriginWebhookEvents, ORIGIN_CHANNEL_KIND } from "./events.js";
 import { DEFAULT_ORIGIN_API_BASE_URL, OriginJwksUnavailableError, verifyOriginWebhook, } from "./origin-webhook.js";
+import { emptyOriginChannelState, originChannelStateForEvent, } from "./state.js";
 /**
  * Default dispatch gate when no `onPullRequest` hook is declared: the common
  * review triggers start a turn as the delivery's actor.
@@ -304,7 +306,7 @@ function isTaskDispatch(dispatch) {
     return "task" in dispatch;
 }
 function enrichEventContext(input) {
-    return Object.assign(Object.assign({}, input.ctx), { host: input.args.host, artifacts: input.args.artifacts, origin: buildOriginBinding({
+    return Object.assign(Object.assign({}, input.ctx), { host: input.args.host, artifacts: input.args.artifacts, send: input.args.send, origin: buildOriginBinding({
             repository: input.ctx.repository,
             installationId: input.ctx.installationId,
             cursorAccount: input.options.cursorAccount !== undefined &&
@@ -337,9 +339,12 @@ function startTurn(input) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
         const source = continuationSource(input.options.continuation, "origin");
-        const session = yield input.args.send(input.message, Object.assign(Object.assign(Object.assign({ auth: input.dispatch.auth }, (source === "engine"
+        const session = yield input.args.send(input.message, Object.assign(Object.assign(Object.assign(Object.assign({ auth: input.dispatch.auth }, (source === "engine"
             ? { continuationToken: originContinuationKey(input.ctx) }
-            : {})), { title: (_a = input.dispatch.title) !== null && _a !== void 0 ? _a : defaultOriginTitle(input.ctx) }), (input.cloud === undefined ? {} : { cloud: input.cloud })));
+            : {})), { title: (_a = input.dispatch.title) !== null && _a !== void 0 ? _a : defaultOriginTitle(input.ctx) }), (input.cloud === undefined ? {} : { cloud: input.cloud })), { state: input.state, 
+            // Resume must refresh the triggering comment / delivery identifiers so
+            // reply delivery targets the latest wake, not the session's first.
+            refreshState: input.state }));
         if (isDeferredChannelSession(session)) {
             // Hosted admission captured the send; the control plane allocates the
             // session after acknowledgement, so there is nothing to report yet.
@@ -395,6 +400,14 @@ function applyDispatch(input) {
             message,
             dispatch: input.dispatch,
             cloud: input.cloud,
+            state: originChannelStateForEvent({
+                repository: input.ctx.repository,
+                pullRequestNumber: input.ctx.pullRequestNumber,
+                installationId: input.ctx.installationId,
+                deliveryId: input.ctx.deliveryId,
+                eventType: input.ctx.eventType,
+                triggeringCommentId: input.triggeringCommentId,
+            }),
         });
     });
 }
@@ -450,6 +463,7 @@ export function dispatchOriginWebhook(input) {
                 dispatch,
                 extra: { event: eventType },
                 message: `Origin comment on ${ctx.repository.fullName}#${ctx.pullRequestNumber}`,
+                triggeringCommentId: commentId,
             });
         }
         if (eventType.startsWith("pull_request.review.")) {
@@ -587,8 +601,15 @@ export function originChannel(options = {}) {
     if (channelOptions.continuation !== undefined) {
         channelOptions.continuation = normalizeIdentity(channelOptions.continuation, "origin");
     }
+    const events = Object.assign(Object.assign({}, buildDefaultOriginEvents({
+        cursorAccount: channelOptions.cursorAccount,
+        app: channelOptions.app,
+        deliverReplies: channelOptions.deliverReplies,
+    })), options.events);
     const definition = defineChannel({
         auth,
+        state: emptyOriginChannelState(),
+        events,
         onStart: options.onStart,
         onStop: options.onStop,
         meta: {

package/dist/channels/origin/state.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Durable per-session Origin channel state.
+ *
+ * Persisted with the turn (same mechanism as `GitHubChannelState`) so
+ * channel stream-event handlers — reply delivery in ./defaults.ts — can
+ * rebuild a repo-bound Origin handle without re-parsing the webhook.
+ */
+export interface OriginChannelState {
+    owner: string;
+    repo: string;
+    pullRequestNumber: number | null;
+    /** Origin app installation id from the delivery envelope, when present. */
+    installationId: string | null;
+    /** Comment id that woke the turn (comment events only). */
+    triggeringCommentId: string | null;
+    deliveryId: string | null;
+    eventType: string | null;
+}
+export declare function emptyOriginChannelState(overrides?: Partial<OriginChannelState>): OriginChannelState;
+/** Build the per-turn channel state from a dispatched event's context. */
+export declare function originChannelStateForEvent(input: {
+    repository: {
+        owner: string;
+        name: string;
+    };
+    pullRequestNumber: number;
+    installationId?: string;
+    deliveryId?: string;
+    eventType: string;
+    triggeringCommentId?: string;
+}): OriginChannelState;
+//# sourceMappingURL=state.d.ts.map

package/dist/channels/origin/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/channels/origin/state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,2EAA2E;IAC3E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2DAA2D;IAC3D,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAgB,uBAAuB,CACrC,SAAS,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAC1C,kBAAkB,CAWpB;AAED,0EAA0E;AAC1E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,kBAAkB,CAUrB"}