@cursor/july 0.1.101 → 0.1.103

package/dist/internal/guest-network.js

@@ -0,0 +1,304 @@
+/**
+ * Guest egress readiness for hosted v2.
+ *
+ * `waitForEngineReady` only polls July `/v1/health` (process listening). After
+ * a freeze restore the guest network (DNS, egress programming, dead sockets)
+ * often comes up later. Authored admission/execution that `fetch`es in that
+ * window throws undici `TypeError: fetch failed`, which used to become a
+ * redacted HTTP 500 `internal_error` and a minutes-long Temporal retry.
+ *
+ * TAS waits on GET `/v1/guest-network` (90s, Sand's resume bar) before
+ * opening the hosted POST. The in-POST wait stays a short last-line check
+ * so leftover races still return 503 `guest_network_unavailable` instead of
+ * a redacted 500.
+ *
+ * Quiet guest Connect (`TypeError: fetch failed` with no errno, Connect
+ * `[unknown]`/`[canceled]`/`[unavailable]`, headers/body timeout) is a
+ * stall, not a dead NIC. Those become `guest_connect_stalled` so TAS does
+ * not treat them as restore-window mystery 503s.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+export const GUEST_NETWORK_UNAVAILABLE = "guest_network_unavailable";
+export const GUEST_CONNECT_STALLED = "guest_connect_stalled";
+/** Control-plane readiness probe. Auth none, same as `/v1/health`. */
+export const GUEST_NETWORK_PATH = "/v1/guest-network";
+/**
+ * Sand `READY_TIMEOUT_MS` / resume reachability bar. The in-POST wait stays
+ * at {@link DEFAULT_WAIT_TIMEOUT_MS}; this budget is for GET `/v1/guest-network`
+ * so TAS does not open a hosted turn on a dead NIC.
+ */
+export const GUEST_NETWORK_READY_WAIT_TIMEOUT_MS = 90000;
+/**
+ * Node/undici codes that mean the request never produced an HTTP response.
+ * `ENOTFOUND`/`EAI_AGAIN` cover restored-pod DNS races.
+ */
+const TRANSIENT_NETWORK_ERROR_CODES = new Set([
+    "ECONNREFUSED",
+    "ECONNRESET",
+    "EAI_AGAIN",
+    "EHOSTUNREACH",
+    "ENETDOWN",
+    "ENETUNREACH",
+    "ENOTFOUND",
+    "EPIPE",
+    "ETIMEDOUT",
+    "UND_ERR_CONNECT_TIMEOUT",
+    "UND_ERR_SOCKET",
+    "UND_ERR_CLOSED",
+]);
+const MAX_CAUSE_DEPTH = 8;
+export class GuestNetworkUnavailableError extends Error {
+    constructor(message = "Guest network is not ready for outbound requests.", extras = {}) {
+        var _a, _b;
+        super(message);
+        this.code = GUEST_NETWORK_UNAVAILABLE;
+        this.name = "GuestNetworkUnavailableError";
+        this.waitMs = (_a = extras.waitMs) !== null && _a !== void 0 ? _a : 0;
+        this.probeAttempts = (_b = extras.probeAttempts) !== null && _b !== void 0 ? _b : 0;
+    }
+}
+/**
+ * True when the error (or anything on its `cause` chain, or inside an
+ * `AggregateError`) is a network-level fetch failure. Connect-web wraps
+ * undici's `TypeError: fetch failed` as `ConnectError` and keeps the
+ * original on `cause`.
+ */
+export function isTransientGuestNetworkError(error) {
+    return isTransientAtDepth(error, 0);
+}
+/**
+ * Connect/undici codes that mean the socket was up but the RPC went quiet
+ * (headers never arrived, body stalled, caller aborted). Not a DNS/egress
+ * miss — those live in the network errno set.
+ */
+const QUIET_CONNECT_ERROR_CODES = new Set([
+    "ABORT_ERR",
+    "UND_ERR_BODY_TIMEOUT",
+    "UND_ERR_HEADERS_TIMEOUT",
+]);
+const QUIET_CONNECT_MESSAGE = /^(?:\[(?:unknown|canceled|unavailable)\])|connection stalled|this operation was aborted/i;
+export function hasGuestNetworkErrno(error) {
+    return hasCodeAtDepth(error, 0, TRANSIENT_NETWORK_ERROR_CODES);
+}
+/**
+ * Quiet guest Connect: the request left the guest but never produced a
+ * useful RPC outcome. Distinct from {@link isTransientGuestNetworkError}
+ * so the in-POST wait still retries bare `fetch failed`, while the HTTP
+ * mapper can return `guest_connect_stalled` instead of a mystery 503.
+ */
+export function isQuietGuestConnectStall(error) {
+    if (error instanceof GuestNetworkUnavailableError) {
+        return false;
+    }
+    if (hasGuestNetworkErrno(error)) {
+        return false;
+    }
+    return isQuietSignatureAtDepth(error, 0);
+}
+function errorCode(error) {
+    const code = error.code;
+    return typeof code === "string" && code.length > 0 ? code : undefined;
+}
+function hasCodeAtDepth(error, depth, codes) {
+    if (depth >= MAX_CAUSE_DEPTH || !(error instanceof Error)) {
+        return false;
+    }
+    const code = errorCode(error);
+    if (code !== undefined && codes.has(code)) {
+        return true;
+    }
+    if (error instanceof AggregateError &&
+        error.errors.some((inner) => hasCodeAtDepth(inner, depth + 1, codes))) {
+        return true;
+    }
+    return hasCodeAtDepth(error.cause, depth + 1, codes);
+}
+function isQuietSignatureAtDepth(error, depth) {
+    if (depth >= MAX_CAUSE_DEPTH || !(error instanceof Error)) {
+        return false;
+    }
+    if (error instanceof TypeError && error.message === "fetch failed") {
+        return true;
+    }
+    const code = errorCode(error);
+    if (code !== undefined && QUIET_CONNECT_ERROR_CODES.has(code)) {
+        return true;
+    }
+    if (QUIET_CONNECT_MESSAGE.test(error.message)) {
+        return true;
+    }
+    if (error instanceof AggregateError &&
+        error.errors.some((inner) => isQuietSignatureAtDepth(inner, depth + 1))) {
+        return true;
+    }
+    return isQuietSignatureAtDepth(error.cause, depth + 1);
+}
+function isTransientAtDepth(error, depth) {
+    if (depth >= MAX_CAUSE_DEPTH || !(error instanceof Error)) {
+        return false;
+    }
+    if (error instanceof TypeError && error.message === "fetch failed") {
+        return true;
+    }
+    if (error instanceof GuestNetworkUnavailableError) {
+        return true;
+    }
+    const code = errorCode(error);
+    if (code !== undefined &&
+        (TRANSIENT_NETWORK_ERROR_CODES.has(code) ||
+            QUIET_CONNECT_ERROR_CODES.has(code))) {
+        return true;
+    }
+    if (error instanceof AggregateError &&
+        error.errors.some((inner) => isTransientAtDepth(inner, depth + 1))) {
+        return true;
+    }
+    return isTransientAtDepth(error.cause, depth + 1);
+}
+const DEFAULT_PROBE_TIMEOUT_MS = 2000;
+/** Last-line wait inside an already-open hosted POST. */
+export const DEFAULT_WAIT_TIMEOUT_MS = 8000;
+const DEFAULT_POLL_MS = 250;
+function defaultSleep(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+function resolveProbeUrl(explicit) {
+    var _a, _b;
+    const raw = (_a = explicit !== null && explicit !== void 0 ? explicit : process.env.AGENT_SERVE_EGRESS_PROBE_URL) !== null && _a !== void 0 ? _a : process.env.AGENT_SERVE_CURSOR_BACKEND_URL;
+    const trimmed = (_b = raw === null || raw === void 0 ? void 0 : raw.trim()) !== null && _b !== void 0 ? _b : "";
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function waitEnabled(options) {
+    if (options.enabled !== undefined) {
+        return options.enabled;
+    }
+    if (process.env.VITEST === "true") {
+        return false;
+    }
+    if (process.env.AGENT_SERVE_SKIP_GUEST_NETWORK_WAIT === "1") {
+        return false;
+    }
+    return resolveProbeUrl(options.probeUrl) !== undefined;
+}
+function defaultProbe(probeUrl, probeTimeoutMs) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        // Any HTTP response means egress and DNS work. 401/404 are ready.
+        const response = yield fetch(probeUrl, {
+            method: "GET",
+            redirect: "manual",
+            signal: AbortSignal.timeout(probeTimeoutMs),
+        });
+        void ((_a = response.body) === null || _a === void 0 ? void 0 : _a.cancel());
+    });
+}
+/**
+ * `Server-Timing` metric the control plane scrapes for Datadog
+ * `hosted_*.guest_network_wait_ms`. Any HTTP response (ok or 503) can
+ * carry it so restore time-to-egress is visible on both paths.
+ */
+export function formatGuestNetworkServerTiming(stats) {
+    return `guest_net;desc="${stats.outcome}";dur=${Math.max(0, stats.waitMs).toFixed(1)};probes=${String(stats.probeAttempts)}`;
+}
+/**
+ * Poll until a cheap allowlisted GET succeeds or the wait budget expires.
+ * Throws {@link GuestNetworkUnavailableError} on timeout so hosted routes
+ * can return 503 without running authored code.
+ */
+export function waitForGuestNetworkReady() {
+    return __awaiter(this, arguments, void 0, function* (options = {}) {
+        var _a, _b, _c, _d, _e;
+        if (!waitEnabled(options)) {
+            return { outcome: "skipped", waitMs: 0, probeAttempts: 0 };
+        }
+        const probeUrl = resolveProbeUrl(options.probeUrl);
+        const probe = (_a = options.probe) !== null && _a !== void 0 ? _a : (probeUrl === undefined
+            ? undefined
+            : () => { var _a; return defaultProbe(probeUrl, (_a = options.probeTimeoutMs) !== null && _a !== void 0 ? _a : DEFAULT_PROBE_TIMEOUT_MS); });
+        if (probe === undefined) {
+            return { outcome: "skipped", waitMs: 0, probeAttempts: 0 };
+        }
+        const waitTimeoutMs = (_b = options.waitTimeoutMs) !== null && _b !== void 0 ? _b : DEFAULT_WAIT_TIMEOUT_MS;
+        const pollMs = (_c = options.pollMs) !== null && _c !== void 0 ? _c : DEFAULT_POLL_MS;
+        const now = (_d = options.now) !== null && _d !== void 0 ? _d : Date.now;
+        const sleep = (_e = options.sleep) !== null && _e !== void 0 ? _e : defaultSleep;
+        const startedAt = now();
+        let lastError;
+        let probeAttempts = 0;
+        for (;;) {
+            probeAttempts += 1;
+            try {
+                yield probe();
+                return {
+                    outcome: "ready",
+                    waitMs: Math.max(0, now() - startedAt),
+                    probeAttempts,
+                };
+            }
+            catch (error) {
+                lastError = error;
+                if (!isTransientGuestNetworkError(error)) {
+                    throw error;
+                }
+            }
+            const elapsedMs = now() - startedAt;
+            if (elapsedMs >= waitTimeoutMs) {
+                const detail = lastError instanceof Error ? lastError.message : String(lastError);
+                throw new GuestNetworkUnavailableError(`Guest network did not become ready within ${String(waitTimeoutMs)}ms (${detail}).`, { waitMs: Math.max(0, elapsedMs), probeAttempts });
+            }
+            yield sleep(pollMs);
+        }
+    });
+}
+/**
+ * GET `/v1/guest-network`: wait up to
+ * {@link GUEST_NETWORK_READY_WAIT_TIMEOUT_MS} and return 200 (ready/skipped)
+ * or 503 `guest_network_unavailable`. Server-Timing matches the hosted POST
+ * so TAS can scrape the same `guest_net` metric before `postHosted`.
+ */
+export function guestNetworkReadinessResponse() {
+    return __awaiter(this, arguments, void 0, function* (options = {}) {
+        try {
+            const result = yield waitForGuestNetworkReady(Object.assign({ waitTimeoutMs: GUEST_NETWORK_READY_WAIT_TIMEOUT_MS }, options));
+            return new Response(JSON.stringify(Object.assign({ ok: true }, result)), {
+                status: 200,
+                headers: {
+                    "content-type": "application/json; charset=utf-8",
+                    "server-timing": formatGuestNetworkServerTiming(result),
+                },
+            });
+        }
+        catch (error) {
+            if (!(error instanceof GuestNetworkUnavailableError)) {
+                throw error;
+            }
+            return new Response(JSON.stringify({
+                ok: false,
+                error: GUEST_NETWORK_UNAVAILABLE,
+                message: error.message,
+                waitMs: error.waitMs,
+                probeAttempts: error.probeAttempts,
+            }), {
+                status: 503,
+                headers: {
+                    "content-type": "application/json; charset=utf-8",
+                    "server-timing": formatGuestNetworkServerTiming({
+                        outcome: "unavailable",
+                        waitMs: error.waitMs,
+                        probeAttempts: error.probeAttempts,
+                    }),
+                },
+            });
+        }
+    });
+}

package/dist/internal/host-otel.d.ts

@@ -2,9 +2,9 @@
  * Author-facing OpenTelemetry surface for {@link HostContext.otel}.
  *
  * Always present on `ctx.host`. Counters and histograms no-op when no meter
- * is running. `setAttributes` still tags the open session when a collector
- * is attached. `forSession` is engine-only so a tool cannot retarget another
- * conversation's tags.
+ * is running. `setAttributes` still tags open turn/tool spans when a
+ * collector is attached. `forSession` is engine-only so a tool cannot
+ * retarget another conversation's tags.
  */
 import type { Meter } from "@opentelemetry/api";
 import type { HostOtelApi } from "../types.js";

package/dist/internal/host-otel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-otel.d.ts","sourceRoot":"","sources":["../../src/internal/host-otel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAsB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAqBzD,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACnD;AAsBD,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,GAChC,kBAAkB,CAYpB"}
+{"version":3,"file":"host-otel.d.ts","sourceRoot":"","sources":["../../src/internal/host-otel.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAsB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAsBzD,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACnD;AAsBD,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,GAChC,kBAAkB,CAYpB"}

package/dist/internal/host-otel.js

@@ -2,9 +2,9 @@
  * Author-facing OpenTelemetry surface for {@link HostContext.otel}.
  *
  * Always present on `ctx.host`. Counters and histograms no-op when no meter
- * is running. `setAttributes` still tags the open session when a collector
- * is attached. `forSession` is engine-only so a tool cannot retarget another
- * conversation's tags.
+ * is running. `setAttributes` still tags open turn/tool spans when a
+ * collector is attached. `forSession` is engine-only so a tool cannot
+ * retarget another conversation's tags.
  */
 import { attrs } from "./otel/attrs.js";
 const METRIC_NAME = /^[A-Za-z][A-Za-z0-9_./-]*$/;
@@ -19,6 +19,7 @@ const RESERVED_METRICS = new Set([
 ]);
 const RESERVED_ATTRIBUTES = new Set([
     "cursor.conversation.id",
+    "agent_sdk.session_id",
     "agent_sdk.agent",
     "agent_sdk.turn_id",
     "agent_sdk.framework",
@@ -87,7 +88,10 @@ function mergeSessionTags(state, sessionId, incoming) {
 function emitAttributes(state, callSite) {
     return attrs(Object.assign(Object.assign(Object.assign(Object.assign({}, sessionBag(state)), validateAttributes(callSite)), { "agent_sdk.agent": state.shared.agentName }), (state.sessionId === undefined
         ? {}
-        : { "cursor.conversation.id": state.sessionId })));
+        : {
+            "cursor.conversation.id": state.sessionId,
+            "agent_sdk.session_id": state.sessionId,
+        })));
 }
 function sessionBag(state) {
     var _a;

package/dist/internal/hosted-admission-adapter.d.ts

@@ -3,16 +3,18 @@ import type { ChannelHandlerArgs } from "../types.js";
  * Hosted-admission hook a channel pack attaches to its definition.
  *
  * Hosted delivery looks this up from the mounted definition — it does not
- * switch on `channelKind`. A new forge implements `dispatch` / `getOutcome`
- * next to its webhook handler and calls {@link attachHostedAdmissionAdapter}
- * from the channel constructor.
+ * switch on `channelKind`. A new forge implements `dispatch` next to its
+ * webhook handler and calls {@link attachHostedAdmissionAdapter} from the
+ * channel constructor. Every 2xx from `dispatch` must carry a tag from
+ * `internal/channel-dispatch`; an untagged one is answered with 502
+ * `channel_outcome_missing`.
  */
-export type HostedAdmissionDispatchOutcome = "skip" | "task";
 export type HostedAdmissionAdapter = {
     kind: string;
     /**
-     * Optional wrap of the capturing `send` / `waitUntil` args (GitHub uses
-     * this to propagate background-task errors). Identity when omitted.
+     * Optional wrap of the capturing `send` / `waitUntil` args (the PR
+     * channels use this to propagate background-task errors). Identity when
+     * omitted.
      */
     prepareArgs?(args: ChannelHandlerArgs): ChannelHandlerArgs;
     dispatch(input: {
@@ -21,7 +23,6 @@ export type HostedAdmissionAdapter = {
         deliveryId: string;
         args: ChannelHandlerArgs;
     }): Promise<Response>;
-    getOutcome(response: Response): HostedAdmissionDispatchOutcome | undefined;
 };
 export declare function attachHostedAdmissionAdapter(definition: object, adapter: HostedAdmissionAdapter): void;
 export declare function getHostedAdmissionAdapter(definition: object): HostedAdmissionAdapter | undefined;

package/dist/internal/hosted-admission-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-admission-adapter.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-admission-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7D,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,CAAC,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,kBAAkB,CAAC;KAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,8BAA8B,GAAG,SAAS,CAAC;CAC5E,CAAC;AAIF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAEN;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,sBAAsB,GAAG,SAAS,CAEpC"}
+{"version":3,"file":"hosted-admission-adapter.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-admission-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,kBAAkB,CAAC;KAC1B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvB,CAAC;AAIF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAEN;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,sBAAsB,GAAG,SAAS,CAEpC"}

package/dist/internal/hosted-delivery-protocol.d.ts

@@ -12,6 +12,12 @@ export declare const HOSTED_EXECUTION_DIAG_FILENAME = "hosted-execution.json";
 export type HostedAdmissionManagedAutomation = {
     automationUuid: string;
     mcpServerNames: string[];
+    /**
+     * Slack channel ids the automation's "Send to Slack" action targets,
+     * posted through the control-plane Slack relay. Omitted when the action
+     * is toggled off (never empty).
+     */
+    slackChannels?: string[];
 };
 export type HostedAdmission = {
     v: 2;

package/dist/internal/hosted-delivery-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-delivery-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery-protocol.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,GAAG,cAAc,CAAC;IACtC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,CAAC,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAsDF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAuB7B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAe7B;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb,sBAAsB,GAAG,SAAS,CAkBpC"}
+{"version":3,"file":"hosted-delivery-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery-protocol.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AACpE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AACrE;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,GAAG,cAAc,CAAC;IACtC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,gCAAgC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,CAAC,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,CAAC,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAyEF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAuB7B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,eAAe,GAAG,SAAS,CAe7B;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb,sBAAsB,GAAG,SAAS,CAkBpC"}

package/dist/internal/hosted-delivery-protocol.js

@@ -20,9 +20,15 @@ const DELIVERY_KEYS = new Set([
     "payload",
     "managedAutomation",
 ]);
-const MANAGED_AUTOMATION_KEYS = new Set(["automationUuid", "mcpServerNames"]);
+const MANAGED_AUTOMATION_KEYS = new Set([
+    "automationUuid",
+    "mcpServerNames",
+    "slackChannels",
+]);
 /** More names than any real automation configures is a malformed envelope. */
 const MANAGED_AUTOMATION_MAX_SERVERS = 64;
+/** More channels than the dashboard picker allows is a malformed envelope. */
+const MANAGED_AUTOMATION_MAX_SLACK_CHANNELS = 64;
 const EXECUTION_KEYS = new Set(["v", "admissionToken", "sessionPublicId"]);
 function boundedString(value, max) {
     return typeof value === "string" && value.length > 0 && value.length <= max;
@@ -47,11 +53,18 @@ function parseManagedAutomation(value) {
         !body.mcpServerNames.every((name) => boundedString(name, 256))) {
         return undefined;
     }
+    if (body.slackChannels !== undefined) {
+        if (!Array.isArray(body.slackChannels) ||
+            body.slackChannels.length === 0 ||
+            body.slackChannels.length > MANAGED_AUTOMATION_MAX_SLACK_CHANNELS ||
+            !body.slackChannels.every((channel) => boundedString(channel, 64))) {
+            return undefined;
+        }
+    }
     return {
-        managedAutomation: {
-            automationUuid: body.automationUuid,
-            mcpServerNames: body.mcpServerNames,
-        },
+        managedAutomation: Object.assign({ automationUuid: body.automationUuid, mcpServerNames: body.mcpServerNames }, (body.slackChannels === undefined
+            ? {}
+            : { slackChannels: body.slackChannels })),
     };
 }
 export function parseHostedAdmission(value) {

package/dist/internal/hosted-delivery.d.ts

@@ -1,4 +1,6 @@
 import type { ChannelHandlerArgs, SendMessageOptions } from "../types.js";
+import { type HostedBoundSecretsResult } from "./cursor/hosted-bound-secrets.js";
+import { type GuestNetworkWaitResult } from "./guest-network.js";
 import { type HostedAdmission } from "./hosted-delivery-protocol.js";
 import type { LogRingEntry } from "./log-ring.js";
 import type { Router } from "./router.js";
@@ -44,6 +46,11 @@ export declare function registerHostedDeliveryRoute(input: {
      * the conversation on the next wake.
      */
     drainSessionDurability?(sessionId: string): Promise<void>;
+    /**
+     * Export in-memory OTel batches before the HTTP reply. Hosted v2 may
+     * destroy the VM as soon as that reply lands; SIGTERM is not guaranteed.
+     */
+    flushOtel?(): Promise<void>;
     /**
      * Serve `--state-root` (not the per-slug SessionEngine dir). Hosted
      * freeze is `/workspace/.agent-serve`; the Temporal host reads
@@ -61,6 +68,17 @@ export declare function registerHostedDeliveryRoute(input: {
     flushStartLog?(startLogId: string): Promise<void>;
     /** Snapshot of the process log ring at persist time. */
     snapshotLogs?(): LogRingEntry[];
+    /**
+     * Wait until guest egress works before authored admission/execution.
+     * Defaults to {@link waitForGuestNetworkReady}. Tests inject a stub.
+     */
+    waitForGuestNetwork?(): Promise<GuestNetworkWaitResult | unknown>;
+    /**
+     * Hydrate `process.env` from the task-bind secret files and remove them
+     * from disk. Defaults to {@link consumeHostedBoundSecrets}. Tests inject a
+     * stub.
+     */
+    consumeBoundSecrets?(): HostedBoundSecretsResult;
 }): void;
 export {};
 //# sourceMappingURL=hosted-delivery.d.ts.map

package/dist/internal/hosted-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAcrB,OAAO,EAKL,KAAK,eAAe,EAGrB,MAAM,+BAA+B,CAAC;AAYvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,KAAK,aAAa,GAAG;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AA6DF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AA2GD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GACvB,kBAAkB,CAAC;IACtB;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,8DAA8D;IAC9D,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,wDAAwD;IACxD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;CACjC,GAAG,IAAI,CA+OP"}
+{"version":3,"file":"hosted-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EAIL,KAAK,sBAAsB,EAG5B,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EAKL,KAAK,eAAe,EAGrB,MAAM,+BAA+B,CAAC;AAYvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,KAAK,aAAa,GAAG;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AA6DF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAkKD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GACvB,kBAAkB,CAAC;IACtB;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;OAGG;IACH,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,8DAA8D;IAC9D,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,wDAAwD;IACxD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;IAChC;;;OAGG;IACH,mBAAmB,CAAC,IAAI,OAAO,CAAC,sBAAsB,GAAG,OAAO,CAAC,CAAC;IAClE;;;;OAIG;IACH,mBAAmB,CAAC,IAAI,wBAAwB,CAAC;CAClD,GAAG,IAAI,CAyTP"}