@cursor/july 0.1.101 → 0.1.103

package/dist/internal/convert-automation/index.d.ts

@@ -1,3 +0,0 @@
-export { convertWorkflow } from "./convert-workflow.js";
-export type { ConvertAutomationMetadata, ConvertedFile, ConvertedMcpConnection, ConvertMcpServer, ConvertWorkflowInput, ConvertWorkflowResult, WorkflowJson, } from "./types.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/internal/convert-automation/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/convert-automation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EACV,yBAAyB,EACzB,aAAa,EACb,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/internal/convert-automation/index.js

@@ -1 +0,0 @@
-export { convertWorkflow } from "./convert-workflow.js";

package/dist/internal/grokbot/runner.d.ts

@@ -1,64 +0,0 @@
-/**
- * The grokbot runtime's remote client — a thin client like `"cloud"`.
- * Turns execute on Cursor's hosted Grok Bot (Sand) harness (the Temporal
- * turn workflow and the account's own computer), reached through the
- * public `/v0/grokbot` session API.
- *
- * Sand delivery contract, preserved end to end: only content the agent
- * delivers through SendToUser becomes the user-visible reply. The hosted
- * transcript exposes those deliveries as `send-message` entries; the
- * agent's internal monologue never appears in the transcript, so it can
- * never leak into the session reply.
- */
-import type { RunnerTurnRequest, TurnOutcome } from "../../types.js";
-import type { AgentRunner } from "./../sdk-runner.js";
-export interface GrokBotRunnerOptions {
-    /** Cursor API key. Resolved as option → env → file → stored login. */
-    apiKey?: string;
-    /** Test seam. Defaults to global fetch. */
-    fetchImpl?: typeof fetch;
-    /**
-     * Test seam. Defaults to {@link cursorExternalApiUrl} (`api.cursor.com`).
-     * `/v0/grokbot` is an external-api microlith route — it 404s on api2.
-     */
-    backendUrl?: string;
-    /** Test seam. Poll interval while a turn runs. */
-    pollIntervalMs?: number;
-    /** Test seam. Hard turn deadline. */
-    turnTimeoutMs?: number;
-}
-/** One transcript entry as `/v0/grokbot/sessions/:id/entries` exposes it. */
-export interface GrokBotEntry {
-    seq: string;
-    updatedSeq: string;
-    kind: string;
-    role?: string;
-    text?: string;
-    createdAtMs: number;
-}
-export declare class GrokBotRunner implements AgentRunner {
-    private readonly options;
-    /**
-     * One hosted Grok Bot agent per SDK agent name — the backend
-     * get-or-creates by name, so every SDK session forwards into the same
-     * hosted agent and conversation, and the Grok Bot app shows one agent
-     * rather than one per session.
-     */
-    private readonly agents;
-    /**
-     * Per-hosted-agent turn chain. Sessions share one hosted conversation
-     * and one transcript cursor, so turns run one at a time per agent:
-     * deliveries attribute to the turn that sent them, and an abort only
-     * interrupts its own turn — mirroring the hosted workflow's own queue.
-     */
-    private readonly turns;
-    private client;
-    constructor(options?: GrokBotRunnerOptions);
-    runTurn(request: RunnerTurnRequest): Promise<TurnOutcome>;
-    private executeTurn;
-    dispose(): Promise<void>;
-    private ensureClient;
-    private getAgent;
-    private sleep;
-}
-//# sourceMappingURL=runner.d.ts.map

package/dist/internal/grokbot/runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/internal/grokbot/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAuID,qBAAa,aAAc,YAAW,WAAW;IAiBnC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAhBpC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,MAAM,CAA+B;IAE7C,YAA6B,OAAO,GAAE,oBAAyB,EAAI;IAE7D,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAsB9D;YAEa,WAAW;IAiFnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAI7B;IAED,OAAO,CAAC,YAAY;YAKN,QAAQ;YAyBR,KAAK;CAgBpB"}

package/dist/internal/grokbot/runner.js

@@ -1,282 +0,0 @@
-/**
- * The grokbot runtime's remote client — a thin client like `"cloud"`.
- * Turns execute on Cursor's hosted Grok Bot (Sand) harness (the Temporal
- * turn workflow and the account's own computer), reached through the
- * public `/v0/grokbot` session API.
- *
- * Sand delivery contract, preserved end to end: only content the agent
- * delivers through SendToUser becomes the user-visible reply. The hosted
- * transcript exposes those deliveries as `send-message` entries; the
- * agent's internal monologue never appears in the transcript, so it can
- * never leak into the session reply.
- */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-import { randomUUID } from "node:crypto";
-import { cursorExternalApiUrl, resolveApiKeySync, } from "../cursor/credentials.js";
-const DEFAULT_POLL_INTERVAL_MS = 750;
-const DEFAULT_TURN_TIMEOUT_MS = 20 * 60 * 1000;
-/**
- * Idle polls required after a send before the turn is considered settled
- * when the workflow never reported busy — covers the window between the
- * accepted dispatch and the workflow picking the signal up.
- */
-const MIN_IDLE_POLLS_WITHOUT_BUSY = 4;
-class GrokBotApiError extends Error {
-    constructor(status, path, body) {
-        super(`Grok Bot API ${path} failed (HTTP ${status}): ${body.slice(0, 300)}`);
-        this.status = status;
-        this.path = path;
-        this.name = "GrokBotApiError";
-    }
-}
-/** Minimal `/v0/grokbot` client: bearer API key, JSON in/out. */
-class GrokBotApiClient {
-    constructor(options) {
-        var _a;
-        var _b, _c;
-        this.fetchImpl = (_b = options.fetchImpl) !== null && _b !== void 0 ? _b : fetch;
-        this.baseUrl = ((_c = options.backendUrl) !== null && _c !== void 0 ? _c : cursorExternalApiUrl()).replace(/\/$/, "");
-        const apiKey = (_a = resolveApiKeySync({
-            apiKey: options.apiKey,
-            backendUrl: options.backendUrl,
-        })) === null || _a === void 0 ? void 0 : _a.apiKey;
-        if (apiKey === undefined || apiKey === "") {
-            throw new Error('runtime: "grokbot" needs a Cursor API key (CURSOR_API_KEY, CURSOR_API_KEY_FILE, or agent-sdk login) to reach the hosted Grok Bot harness.');
-        }
-        this.apiKey = apiKey;
-    }
-    request(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const headers = {
-                authorization: `Bearer ${this.apiKey}`,
-            };
-            if (args.body !== undefined) {
-                headers["content-type"] = "application/json";
-            }
-            const response = yield this.fetchImpl(`${this.baseUrl}${args.path}`, {
-                method: args.method,
-                headers,
-                body: args.body === undefined ? undefined : JSON.stringify(args.body),
-            });
-            if (!response.ok) {
-                throw new GrokBotApiError(response.status, args.path, yield response.text().catch(() => ""));
-            }
-            return (yield response.json());
-        });
-    }
-    createSession(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.request({
-                method: "POST",
-                path: "/v0/grokbot/sessions",
-                body: { name: args.name, instructions: args.instructions },
-            });
-        });
-    }
-    sendMessage(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.request({
-                method: "POST",
-                path: `/v0/grokbot/sessions/${args.sessionId}/messages`,
-                body: { text: args.text, messageId: randomUUID() },
-            });
-        });
-    }
-    listEntries(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return yield this.request({
-                method: "GET",
-                path: `/v0/grokbot/sessions/${args.sessionId}/entries?afterUpdatedSeq=${args.afterUpdatedSeq}`,
-            });
-        });
-    }
-    interrupt(args) {
-        return __awaiter(this, void 0, void 0, function* () {
-            yield this.request({
-                method: "POST",
-                path: `/v0/grokbot/sessions/${args.sessionId}/interrupt`,
-                body: { reason: args.reason },
-            });
-        });
-    }
-}
-export class GrokBotRunner {
-    constructor(options = {}) {
-        this.options = options;
-        /**
-         * One hosted Grok Bot agent per SDK agent name — the backend
-         * get-or-creates by name, so every SDK session forwards into the same
-         * hosted agent and conversation, and the Grok Bot app shows one agent
-         * rather than one per session.
-         */
-        this.agents = new Map();
-        /**
-         * Per-hosted-agent turn chain. Sessions share one hosted conversation
-         * and one transcript cursor, so turns run one at a time per agent:
-         * deliveries attribute to the turn that sent them, and an abort only
-         * interrupts its own turn — mirroring the hosted workflow's own queue.
-         */
-        this.turns = new Map();
-    }
-    runTurn(request) {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            if (request.runtime !== "grokbot") {
-                throw new Error(`Session ${request.sessionId} is a ${request.runtime} turn, which the Grok Bot runner cannot execute.`);
-            }
-            if (request.images !== undefined && request.images.length > 0) {
-                // Attachments ride the hosted box's upload path, which the /v0
-                // session API does not expose yet. Refuse rather than silently
-                // dropping what the user attached.
-                throw new Error("Image attachments are not supported on grokbot turns yet.");
-            }
-            const name = hostedAgentName(request);
-            const previous = (_a = this.turns.get(name)) !== null && _a !== void 0 ? _a : Promise.resolve();
-            const run = previous.then(() => this.executeTurn(request));
-            this.turns.set(name, run.catch(() => { }));
-            return yield run;
-        });
-    }
-    executeTurn(request) {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            const signal = request.signal;
-            if ((signal === null || signal === void 0 ? void 0 : signal.aborted) === true) {
-                return { status: "cancelled" };
-            }
-            const client = this.ensureClient();
-            const entry = yield this.getAgent(client, request);
-            const send = yield client.sendMessage({
-                sessionId: entry.remoteId,
-                text: request.prompt,
-            });
-            if (send.delivery !== "accepted_temporal" &&
-                send.delivery !== "duplicate") {
-                throw new Error(`The hosted Grok Bot harness did not accept the turn (delivery: ${send.delivery}).`);
-            }
-            const pollIntervalMs = (_a = this.options.pollIntervalMs) !== null && _a !== void 0 ? _a : DEFAULT_POLL_INTERVAL_MS;
-            const turnTimeoutMs = (_b = this.options.turnTimeoutMs) !== null && _b !== void 0 ? _b : DEFAULT_TURN_TIMEOUT_MS;
-            const deadline = Date.now() + turnTimeoutMs;
-            const delivered = [];
-            let sawBusy = false;
-            let idlePolls = 0;
-            while (true) {
-                // On abort: interrupt the hosted run, drain entries once so a reply
-                // that already landed still streams out, then cancel.
-                const aborted = isAborted(signal);
-                if (aborted) {
-                    yield client
-                        .interrupt({
-                        sessionId: entry.remoteId,
-                        reason: "The user sent a new message.",
-                    })
-                        .catch(() => { });
-                }
-                const page = yield client.listEntries({
-                    sessionId: entry.remoteId,
-                    afterUpdatedSeq: entry.lastUpdatedSeq,
-                });
-                entry.lastUpdatedSeq = BigInt(page.latestUpdatedSeq);
-                for (const item of page.entries) {
-                    if (item.kind !== "send-message" || item.text === undefined) {
-                        continue;
-                    }
-                    const delta = delivered.length === 0 ? item.text : `\n\n${item.text}`;
-                    delivered.push(item.text);
-                    // The emit callback may be async; a rejection must never escape
-                    // the poll loop.
-                    void Promise.resolve(request.onUpdate({ type: "text-delta", text: delta })).catch(() => { });
-                }
-                if (aborted) {
-                    return { status: "cancelled" };
-                }
-                if (page.turn.inFlight || page.turn.queued > 0) {
-                    sawBusy = true;
-                }
-                else if (page.turn.idle) {
-                    idlePolls += 1;
-                    if (sawBusy || idlePolls >= MIN_IDLE_POLLS_WITHOUT_BUSY) {
-                        return {
-                            status: "finished",
-                            result: delivered.length === 0 ? undefined : delivered.join("\n\n"),
-                        };
-                    }
-                }
-                if (Date.now() >= deadline) {
-                    throw new Error(`The grokbot turn for session ${request.sessionId} did not settle within ${Math.round(turnTimeoutMs / 60000)} minutes.`);
-                }
-                yield this.sleep(pollIntervalMs, signal);
-            }
-        });
-    }
-    dispose() {
-        return __awaiter(this, void 0, void 0, function* () {
-            // Hosted agents live server-side (the account's Grok Bot agents);
-            // nothing in this process holds conversation state.
-            this.agents.clear();
-        });
-    }
-    ensureClient() {
-        var _a;
-        (_a = this.client) !== null && _a !== void 0 ? _a : (this.client = new GrokBotApiClient(this.options));
-        return this.client;
-    }
-    getAgent(client, request) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const name = hostedAgentName(request);
-            const existing = this.agents.get(name);
-            if (existing !== undefined) {
-                return existing;
-            }
-            // Get-or-create: a reconnect (new process, same agent name) lands on
-            // the existing hosted agent. The returned tail seq starts the cursor
-            // after the hosted conversation's history so an old transcript never
-            // replays into this turn's reply.
-            const created = yield client.createSession({
-                name,
-                instructions: request.instructions,
-            });
-            const entry = {
-                remoteId: created.id,
-                lastUpdatedSeq: BigInt(created.latestUpdatedSeq),
-            };
-            this.agents.set(name, entry);
-            return entry;
-        });
-    }
-    sleep(ms, signal) {
-        return __awaiter(this, void 0, void 0, function* () {
-            yield new Promise((resolve) => {
-                const timer = setTimeout(() => {
-                    signal === null || signal === void 0 ? void 0 : signal.removeEventListener("abort", onAbort);
-                    resolve();
-                }, ms);
-                const onAbort = () => {
-                    clearTimeout(timer);
-                    resolve();
-                };
-                signal === null || signal === void 0 ? void 0 : signal.addEventListener("abort", onAbort, { once: true });
-            });
-        });
-    }
-}
-function hostedAgentName(request) {
-    var _a;
-    return (_a = request.agentName) !== null && _a !== void 0 ? _a : "Agent SDK agent";
-}
-/**
- * `AbortSignal.aborted` is readonly to TypeScript, so an inline recheck
- * after an await narrows to the stale pre-await value; the function
- * boundary keeps the recheck honest.
- */
-function isAborted(signal) {
-    return (signal === null || signal === void 0 ? void 0 : signal.aborted) === true;
-}

package/dist/internal/managed-delivery.d.ts

@@ -1,80 +0,0 @@
-/**
- * Envelope-carried installation config for managed-product deliveries
- * (plan 0002 Stack H1; envelope shape from Stack B1).
- *
- * On the v2 architecture a managed product (security-reviewer, …) is many
- * single-tenant deployments: the pre-signal trigger gate matches the
- * customer's automation trigger before a workflow starts and stamps the
- * matched automation uuid + an opaque installation-config reference on the
- * attributed session envelope. The delivery activity forwards the matched
- * installation-config document to the fork **inside the webhook payload it
- * POSTs to the channel**, under {@link MANAGED_DELIVERY_PAYLOAD_KEY} — the
- * same embed-in-payload pattern the legacy deployment event stream used
- * for its source marker.
- *
- * This module is the one contract both sides share: the control-plane
- * delivery path embeds with {@link withManagedDeliveryConfig}; the agent's
- * channels detect and read with {@link parseManagedDeliveryConfig}. The
- * document mirrors the sync layer's `ManagedAutomationConfigDoc` **policy**
- * fields that "ride the delivery envelope to the fork" (posting mode,
- * managed config, trigger snapshots for the channel's staleness guard);
- * readers ignore unknown fields so a newer sync can add material without
- * breaking older forks. The automation's MCP server refs deliberately do
- * NOT ride here: they travel on the hosted-admission envelope's
- * `managedAutomation` slice (plan 0002 G2, `hosted-delivery-protocol.ts` /
- * `hosted-managed-automation.ts`) so one mechanism owns MCP attach.
- *
- * INTERNAL: first-party host plumbing shared by agents in `factory/*`,
- * consumed via relative source imports. Deliberately excluded from the
- * published `@cursor/july` npm package (see the `files` whitelist).
- */
-/**
- * Key inside the delivered webhook payload under which the delivery
- * activity embeds the matched installation config. Chosen to never
- * collide with a provider webhook field (GitHub and Origin payloads have
- * no `cursor*` keys).
- */
-export declare const MANAGED_DELIVERY_PAYLOAD_KEY: "cursorManagedDelivery";
-/**
- * The matched installation-config document as it rides the delivery to
- * the fork. Required: the matched automation uuid (B1 attribution).
- * Everything else is optional; absent fields keep the channel's default
- * posture (post, all modules enabled, no staleness guard).
- */
-export interface ManagedDeliveryInstallationConfig {
-    /** Source managed automation uuid the pre-signal gate matched. */
-    matchedAutomationUuid: string;
-    /** Opaque `<installationId>@<resourceVersion>` config reference. */
-    installationConfigRef?: string;
-    managedType?: string;
-    name?: string;
-    /**
-     * Whether product output (PR comments, …) posts for this installation,
-     * or the run stays check/shadow-only. Channels post only on `"post"`
-     * (or when the field is absent) — any other value fails closed to
-     * shadow, so a newer mode name never posts by accident.
-     */
-    postingMode?: string;
-    managedConfig?: Record<string, unknown>;
-    /**
-     * The automation's git triggers as `GitTrigger.toJson()` snapshots.
-     * The channel re-checks the delivery against them (staleness guard:
-     * the config may have changed between admission and delivery).
-     */
-    triggerSnapshots?: unknown[];
-}
-/**
- * Read the embedded installation config out of a delivered webhook
- * payload. Returns undefined for payloads without the key (legacy
- * deliveries, host relay, fixtures) and for documents missing the
- * required matched automation uuid — the channel then runs its legacy
- * path unchanged. Malformed optional fields are dropped, not fatal.
- */
-export declare function parseManagedDeliveryConfig(payload: unknown): ManagedDeliveryInstallationConfig | undefined;
-/**
- * Embed one matched installation config into the webhook payload the
- * delivery activity POSTs to the channel. Pure; used by the control-plane
- * delivery path and by channel tests building fixture envelopes.
- */
-export declare function withManagedDeliveryConfig(payload: Record<string, unknown>, config: ManagedDeliveryInstallationConfig): Record<string, unknown>;
-//# sourceMappingURL=managed-delivery.d.ts.map

package/dist/internal/managed-delivery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/managed-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,EAAG,uBAAgC,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IAChD,kEAAkE;IAClE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;CAC9B;AAcD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,GACf,iCAAiC,GAAG,SAAS,CAuB/C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,iCAAiC,GACxC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB"}

package/dist/internal/managed-delivery.js

@@ -1,86 +0,0 @@
-/**
- * Envelope-carried installation config for managed-product deliveries
- * (plan 0002 Stack H1; envelope shape from Stack B1).
- *
- * On the v2 architecture a managed product (security-reviewer, …) is many
- * single-tenant deployments: the pre-signal trigger gate matches the
- * customer's automation trigger before a workflow starts and stamps the
- * matched automation uuid + an opaque installation-config reference on the
- * attributed session envelope. The delivery activity forwards the matched
- * installation-config document to the fork **inside the webhook payload it
- * POSTs to the channel**, under {@link MANAGED_DELIVERY_PAYLOAD_KEY} — the
- * same embed-in-payload pattern the legacy deployment event stream used
- * for its source marker.
- *
- * This module is the one contract both sides share: the control-plane
- * delivery path embeds with {@link withManagedDeliveryConfig}; the agent's
- * channels detect and read with {@link parseManagedDeliveryConfig}. The
- * document mirrors the sync layer's `ManagedAutomationConfigDoc` **policy**
- * fields that "ride the delivery envelope to the fork" (posting mode,
- * managed config, trigger snapshots for the channel's staleness guard);
- * readers ignore unknown fields so a newer sync can add material without
- * breaking older forks. The automation's MCP server refs deliberately do
- * NOT ride here: they travel on the hosted-admission envelope's
- * `managedAutomation` slice (plan 0002 G2, `hosted-delivery-protocol.ts` /
- * `hosted-managed-automation.ts`) so one mechanism owns MCP attach.
- *
- * INTERNAL: first-party host plumbing shared by agents in `factory/*`,
- * consumed via relative source imports. Deliberately excluded from the
- * published `@cursor/july` npm package (see the `files` whitelist).
- */
-/**
- * Key inside the delivered webhook payload under which the delivery
- * activity embeds the matched installation config. Chosen to never
- * collide with a provider webhook field (GitHub and Origin payloads have
- * no `cursor*` keys).
- */
-export const MANAGED_DELIVERY_PAYLOAD_KEY = "cursorManagedDelivery";
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function nonEmptyString(value) {
-    if (typeof value !== "string") {
-        return undefined;
-    }
-    const trimmed = value.trim();
-    return trimmed === "" ? undefined : trimmed;
-}
-/**
- * Read the embedded installation config out of a delivered webhook
- * payload. Returns undefined for payloads without the key (legacy
- * deliveries, host relay, fixtures) and for documents missing the
- * required matched automation uuid — the channel then runs its legacy
- * path unchanged. Malformed optional fields are dropped, not fatal.
- */
-export function parseManagedDeliveryConfig(payload) {
-    if (!isRecord(payload)) {
-        return undefined;
-    }
-    const doc = payload[MANAGED_DELIVERY_PAYLOAD_KEY];
-    if (!isRecord(doc)) {
-        return undefined;
-    }
-    const matchedAutomationUuid = nonEmptyString(doc.matchedAutomationUuid);
-    if (matchedAutomationUuid === undefined) {
-        return undefined;
-    }
-    return {
-        matchedAutomationUuid,
-        installationConfigRef: nonEmptyString(doc.installationConfigRef),
-        managedType: nonEmptyString(doc.managedType),
-        name: nonEmptyString(doc.name),
-        postingMode: nonEmptyString(doc.postingMode),
-        managedConfig: isRecord(doc.managedConfig) ? doc.managedConfig : undefined,
-        triggerSnapshots: Array.isArray(doc.triggerSnapshots)
-            ? doc.triggerSnapshots
-            : undefined,
-    };
-}
-/**
- * Embed one matched installation config into the webhook payload the
- * delivery activity POSTs to the channel. Pure; used by the control-plane
- * delivery path and by channel tests building fixture envelopes.
- */
-export function withManagedDeliveryConfig(payload, config) {
-    return Object.assign(Object.assign({}, payload), { [MANAGED_DELIVERY_PAYLOAD_KEY]: config });
-}