@cursor/july 0.1.102 → 0.1.103

package/AGENTS.md

@@ -13,16 +13,18 @@ Start machine-readable docs at `dist/docs/llms.txt` when it exists, or at
 `/docs/llms.txt` on a running host. Use `llms-full.txt` only when the whole
 documentation set is needed.
 
-Before committing or reviewing any Agent SDK documentation change, read
-`docs/.cursor/skills/writing/SKILL.md` and
-`docs/.cursor/skills/docs-lint/SKILL.md`. Run `/docs-lint` on every change.
+Before committing or reviewing any Agent SDK documentation change, read the
+repo-wide writing skill at `.cursor/skills/docs/writing/SKILL.md` (repo root)
+and run `/docs-lint` on every change. The Agent SDK naming, skill-link, and
+verify rules live in `.cursor/rules/packages/agent-sdk-docs-style.mdc` and
+attach automatically when a published docs file is in context.
 
 Before writing or editing a template, read
 [`docs/.cursor/skills/template-lint/SKILL.md`](./docs/.cursor/skills/template-lint/SKILL.md).
 Run `/template-lint` before every commit or review that changes `templates/`.
 
-Run the CLI under **Node, never Bun** — use the installed `agent-serve`
-(or `agent-sdk`) bin; from a source checkout of this package,
+Run the CLI under **Node, never Bun** — use the installed `agent-sdk`
+bin; from a source checkout of this package,
 `pnpm exec tsx src/bin/agent-serve.ts <command> …` is equivalent. Bun's
 HTTP/2 client corrupts local harness
 tool-result streams (`NGHTTP2_FRAME_SIZE_ERROR`), which makes every
@@ -60,31 +62,31 @@ not ship with `@cursor/july`. Dual-pod alerts:
 
 ```bash
 # 1. Discover / validate
-agent-serve validate --dir .
-agent-serve info --dir . --json
+agent-sdk validate --dir .
+agent-sdk info --dir . --json
 
 # One-shot turn (ephemeral server, JSON trajectory + single NDJSON trace)
-agent-serve run --dir . --message "What's the temperature in NYC?"
+agent-sdk run --dir . --message "What's the temperature in NYC?"
 # → trace at <dir>/.agent-serve/traces/<sessionId>.ndjson
-# Visualize: agent-serve serve --dir .  then playground → Open trace
+# Visualize: agent-sdk serve --dir .  then playground → Open trace
 
 # Against a running server (deep-linkable in the playground)
-agent-serve serve --dir . &
-agent-serve run --url http://127.0.0.1:3000 --message "..."
+agent-sdk serve --dir . &
+agent-sdk run --url http://127.0.0.1:3000 --message "..."
 # → JSON includes playgroundUrl?sessionId=...
 
 # Optional: custom path / offline summary
-agent-serve run --dir . --message "..." --events /tmp/run.ndjson
-agent-serve trajectory --events /tmp/run.ndjson
+agent-sdk run --dir . --message "..." --events /tmp/run.ndjson
+agent-sdk trajectory --events /tmp/run.ndjson
 
 # Deterministic tool call (no model turn, no API key needed)
-agent-serve call get_weather --dir . --input '{"city":"NYC"}'
+agent-sdk call get_weather --dir . --input '{"city":"NYC"}'
 # → POST /v1/tools/get_weather; validates input, runs execute in-process
 
 # 3. Evals (defineEval under evals/)
-agent-serve eval --dir . --list
-agent-serve eval --dir . --json
-agent-serve eval --dir . weather/nyc
+agent-sdk eval --dir . --list
+agent-sdk eval --dir . --json
+agent-sdk eval --dir . weather/nyc
 
 # Live A/B metrics: author agent/ab.ts (defineAB) — runs under serve, no CLI
 ```
@@ -196,23 +198,23 @@ instructions so A→B→A recursion cannot happen (e.g. a parent agent that
 delegates *only* weather questions to a `weather-agent` peer).
 
 ```bash
-agent-serve dev ./agents
-agent-serve chat --url http://127.0.0.1:3000/concierge --message "Weather in Paris?"
+agent-sdk dev ./agents
+agent-sdk chat --url http://127.0.0.1:3000/concierge --message "Weather in Paris?"
 ```
 
 ## Slack channel
 
 `slackChannel()` is a dedicated Socket Mode Slack app (no public Request
 URL). Import from `@cursor/july/channels/slack`. Mint the app with
-`agent-serve slack create`; mention the bot (or DM it) in Slack.
+`agent-sdk slack create`; mention the bot (or DM it) in Slack.
 
 ```bash
-agent-serve slack setup
-agent-serve slack create --dir ./my-agent --channel-posts
+agent-sdk slack setup
+agent-sdk slack create --dir ./my-agent --channel-posts
 # envPrefix from the directory name (MY_AGENT_SLACK_*)
-# Manual path: agent-serve slack init --manual --dir ./my-agent
-agent-serve slack doctor --prefix MY_AGENT
-agent-serve dev ./my-agent
+# Manual path: agent-sdk slack init --manual --dir ./my-agent
+agent-sdk slack doctor --prefix MY_AGENT
+agent-sdk dev ./my-agent
 ```
 
 Multi-agent serve needs **one Slack app (and token pair) per agent**:
@@ -233,7 +235,7 @@ Guided skill: `skills/setup-slack/SKILL.md`.
 The web playground is a Vite + React SPA under `playground/` (entry
 `playground/src/main.tsx`).
 
-`agent-serve serve` handles the Vite side for you:
+`agent-sdk serve` handles the Vite side for you:
 
 - If `dist/playground/` is missing and the local vite toolchain is present,
   serve auto-runs `vite build` before listening.
@@ -275,15 +277,15 @@ remote):
 
 ```bash
 # one-time: gh + the cli/gh-webhook extension
-agent-serve github doctor --install
+agent-sdk github doctor --install
 
 # what would be forwarded, per agent (URL + events)
-agent-serve github events --dir ./agents --json
+agent-sdk github events --dir ./agents --json
 
 # forward live deliveries to a served agent (no secret needed against --dev;
 # set GITHUB_WEBHOOK_SECRET to verify signatures)
-agent-serve dev ./my-agent &
-agent-serve github forward --dir ./my-agent
+agent-sdk dev ./my-agent &
+agent-sdk github forward --dir ./my-agent
 ```
 
 When several channels match (e.g. a folder of agent projects), one forwarder fans out to
@@ -297,11 +299,11 @@ target, `--events` narrows the set, `--url` points at a tunnel, and `--slug` /
 authenticates its relay with the GitHub CLI's own login — so a `GITHUB_TOKEN` /
 `GH_TOKEN` env override makes deliveries **401** (hook creation still succeeds,
 which is the confusing part). Blank it for the command (`GITHUB_TOKEN= GH_TOKEN=
-agent-serve github forward …`) or `unset` it; `github doctor` / `forward` warn
+agent-sdk github forward …`) or `unset` it; `github doctor` / `forward` warn
 when they detect an env token.
 
 When you lack repo admin, or want deterministic runs (hillclimbing), use
-`agent-serve github replay <pr_url>` instead: it **reads** the PR via `gh api`
+`agent-sdk github replay <pr_url>` instead: it **reads** the PR via `gh api`
 (pull access only, `GITHUB_TOKEN` is fine), synthesizes GitHub-shaped payloads,
 signs them (`--secret`/`GITHUB_WEBHOOK_SECRET`), and POSTs them at the channel —
 no admin, no relay. `--events` defaults to `pull_request` (`*` = the channel's

package/README.md

@@ -46,6 +46,7 @@ my-agent/
     │   └── audit.ts         # observe the runtime event stream
     ├── storage.ts           # optional durable storage
     ├── artifacts.ts         # optional artifact kinds and retention
+    ├── result.ts            # optional host commit on the final assistant text
     ├── otel.ts              # optional OpenTelemetry export
     ├── playground/          # optional custom playground tool chips
     ├── ab.ts                # optional live A/B experiment
@@ -396,9 +397,9 @@ Cloud turns run on a Cursor cloud agent. The session stream records
 `agent.bound` with the cloud conversation URL.
 
 Authored files reach the model as instructions, tools, skills, and
-workspace seed files. The mapping differs by runtime; see
-[Cloud runtime](./docs/guides/cloud-runtime.md). Sessions and their
-event streams survive server restarts. Reconnect with `?startIndex=` to
+workspace seed files. The mapping differs by runtime; see the runtime
+table in [Concepts](./docs/concepts.md). Sessions and their event
+streams survive server restarts. Reconnect with `?startIndex=` to
 replay.
 
 ## Folder structure
@@ -749,11 +750,9 @@ they inherit the parent's execution surface, so per-subagent `tools/`,
 
 ### Extensions (`agent/extensions/<ns>.ts`)
 
-An extension is a package of tools and skills mounted with one file; the
-filename is the namespace and every contribution appears as `<ns>__<name>`.
-A Cursor plugin (the marketplace format) mounts the same way with
-`cursorPlugin`: its skills and commands become skills, its agents
-subagents, and its MCP servers connections under the namespace.
+An extension is a package of agent contributions mounted with one file;
+the filename is the namespace and every contribution appears as
+`<ns>__<name>`. A Cursor plugin mounts the same way with `cursorPlugin`.
 
 ```ts
 // agent/extensions/ci.ts
@@ -769,10 +768,9 @@ export default cursorPlugin({
 ```
 
 Mount as a directory (`agent/extensions/<ns>/extension.ts`) to overlay
-`tools/` and `skills/`, or a plugin's `mcp-connections/`; `disableTool()`
-and `disableConnection()` remove a contribution. Mounting a plugin trusts
-it like authored code. Details in
-[Extensions](./docs/reference/extensions.md).
+any slot; `disableTool()`, `disableConnection()`, and `disable()` remove
+a contribution. Mounting a plugin trusts it like authored code. Details
+in [Extensions](./docs/reference/extensions.md).
 
 ### Channels (`agent/channels/*.ts`)
 

package/dist/ab.d.ts

@@ -6,7 +6,7 @@
  * `ab.assigned` events; arms are exposed on {@link SessionInfo.abs} for the
  * agent loop (tools / optional per-variant `instructions`). {@link ABCollector}
  * folds the event stream into metrics and calls {@link ABConfig.onSample}.
- * There is no `agent-serve ab` test runner.
+ * There is no `agent-sdk ab` test runner.
  *
  * Assignments and foldable metrics live in each session's `events.ndjson`
  * (survive serve restart). Optional project defaults in `agent/ab.config.ts`

package/dist/ab.js

@@ -6,7 +6,7 @@
  * `ab.assigned` events; arms are exposed on {@link SessionInfo.abs} for the
  * agent loop (tools / optional per-variant `instructions`). {@link ABCollector}
  * folds the event stream into metrics and calls {@link ABConfig.onSample}.
- * There is no `agent-serve ab` test runner.
+ * There is no `agent-sdk ab` test runner.
  *
  * Assignments and foldable metrics live in each session's `events.ndjson`
  * (survive serve restart). Optional project defaults in `agent/ab.config.ts`

package/dist/bin/agent-serve.d.ts

@@ -2,18 +2,18 @@
 /**
  * agent-serve CLI.
  *
- *   agent-serve serve      [--dir .] [--port 3000] [--host 127.0.0.1] [--dev]
- *   agent-serve dev        [path] [--port 3000] [--host 127.0.0.1]
- *   agent-serve docs       [--port 0] [--host 127.0.0.1] [--print]
- *   agent-serve chat      [--url http://127.0.0.1:3000] [--message "..."] [--json]
- *   agent-serve resume    [sessionId] [--url | --prod] [--message "..."]
- *   agent-serve run       [--dir .] [--message "..."] [--json|--text]
- *   agent-serve trajectory --events <file.ndjson>
- *   agent-serve init      [dir] [--json]
- *   agent-serve convert-automation <url> [--dir <path>] [--json]
- *   agent-serve eval        [--dir .] [evalId...]
- *   agent-serve validate   [--dir .]
- *   agent-serve slack     <subcommand>
+ *   agent-sdk serve      [--dir .] [--port 3000] [--host 127.0.0.1] [--dev]
+ *   agent-sdk dev        [path] [--port 3000] [--host 127.0.0.1]
+ *   agent-sdk docs       [--port 0] [--host 127.0.0.1] [--print]
+ *   agent-sdk chat      [--url http://127.0.0.1:3000] [--message "..."] [--json]
+ *   agent-sdk resume    [sessionId] [--url | --prod] [--message "..."]
+ *   agent-sdk run       [--dir .] [--message "..."] [--json|--text]
+ *   agent-sdk trajectory --events <file.ndjson>
+ *   agent-sdk init      [dir] [--json]
+ *   agent-sdk convert-automation <url> [--dir <path>] [--json]
+ *   agent-sdk eval        [--dir .] [evalId...]
+ *   agent-sdk validate   [--dir .]
+ *   agent-sdk slack     <subcommand>
  */
 export {};
 //# sourceMappingURL=agent-serve.d.ts.map

package/dist/bin/agent-serve.js

@@ -2,18 +2,18 @@
 /**
  * agent-serve CLI.
  *
- *   agent-serve serve      [--dir .] [--port 3000] [--host 127.0.0.1] [--dev]
- *   agent-serve dev        [path] [--port 3000] [--host 127.0.0.1]
- *   agent-serve docs       [--port 0] [--host 127.0.0.1] [--print]
- *   agent-serve chat      [--url http://127.0.0.1:3000] [--message "..."] [--json]
- *   agent-serve resume    [sessionId] [--url | --prod] [--message "..."]
- *   agent-serve run       [--dir .] [--message "..."] [--json|--text]
- *   agent-serve trajectory --events <file.ndjson>
- *   agent-serve init      [dir] [--json]
- *   agent-serve convert-automation <url> [--dir <path>] [--json]
- *   agent-serve eval        [--dir .] [evalId...]
- *   agent-serve validate   [--dir .]
- *   agent-serve slack     <subcommand>
+ *   agent-sdk serve      [--dir .] [--port 3000] [--host 127.0.0.1] [--dev]
+ *   agent-sdk dev        [path] [--port 3000] [--host 127.0.0.1]
+ *   agent-sdk docs       [--port 0] [--host 127.0.0.1] [--print]
+ *   agent-sdk chat      [--url http://127.0.0.1:3000] [--message "..."] [--json]
+ *   agent-sdk resume    [sessionId] [--url | --prod] [--message "..."]
+ *   agent-sdk run       [--dir .] [--message "..."] [--json|--text]
+ *   agent-sdk trajectory --events <file.ndjson>
+ *   agent-sdk init      [dir] [--json]
+ *   agent-sdk convert-automation <url> [--dir <path>] [--json]
+ *   agent-sdk eval        [--dir .] [evalId...]
+ *   agent-sdk validate   [--dir .]
+ *   agent-sdk slack     <subcommand>
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
@@ -250,6 +250,10 @@ Commands:
               doctor (see slack help).
   github      GitHub webhook pack: forward live deliveries, events, doctor
               (wraps \`gh webhook forward\`; see github help).
+  gitlab      GitLab webhook pack: replay a merge request, events, forward
+              recipe (see gitlab help).
+  bitbucket   Bitbucket webhook pack (Cloud + Data Center): replay a pull
+              request, events, forward recipe (see bitbucket help).
 
 Agent loop:
   ${CLI} validate --dir .
@@ -296,11 +300,14 @@ Options:
                      defineConnection({ cursorAccount: true }). Admitted callers
                      can drive the account's MCP connectors, so use only behind
                      a trusted boundary (e.g. an SSO proxy or hosted alias token).
+  --cursor-scm-proxy serve: route every SCM channel's cursorAccount API calls
+                     (githubChannel, gitlabChannel, bitbucketChannel) through
+                     the Cursor backend's per-forge forwarder instead of
+                     minting raw tokens into this process
+                     (AGENT_SERVE_<FORGE>_PROXY_URL overrides a base URL).
   --cursor-github-proxy
-                     serve: route githubChannel({ cursorAccount }) API calls
-                     through the Cursor backend's GitHub forwarder instead of
-                     minting raw installation tokens into this process
-                     (AGENT_SERVE_GITHUB_PROXY_URL overrides the base URL).
+                     serve: deprecated alias for --cursor-scm-proxy; removed
+                     one release after --cursor-scm-proxy ships.
   --public-url       serve: base URL where this host is reachable from outside
                      (e.g. https://agent-serve.example.com). Required for peer
                      connections (defineConnection({ agent })) on cloud-runtime
@@ -406,9 +413,10 @@ Options:
   --install          github: install the cli/gh-webhook extension if missing.
                      slack init --manual: require Slack CLI app install.
   --no-install       slack init --manual: skip Slack CLI app install.
-  --action           github replay: event action (e.g. opened, synchronize).
+  --action           github/gitlab replay: event action (e.g. opened, open).
   --conclusion       github replay: CI conclusion (check_run/suite/status).
-  --comment          github replay: comment body for comment events.
+                     gitlab replay: pipeline status (success, failed, …).
+  --comment          github/gitlab/bitbucket replay: comment / note body.
   --context          github replay: commit-status context.
   --dry-run          github replay: print synthesized payloads, don't POST.
   --out              eval / eval status <runId>: also write the full results
@@ -430,8 +438,8 @@ function writeStdout(text) {
 }
 function main(argv) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c, _d, _e, _f, _g, _h;
-        var _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+        var _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x;
         const [command, ...restIn] = argv;
         if (command === undefined ||
             command === "help" ||
@@ -470,6 +478,7 @@ function main(argv) {
                 "allow-anonymous-cursor-github": { type: "boolean", default: false },
                 "allow-anonymous-cursor-account-mcp": { type: "boolean", default: false },
                 "allow-anonymous-grokbot": { type: "boolean", default: false },
+                "cursor-scm-proxy": { type: "boolean", default: false },
                 "cursor-github-proxy": { type: "boolean", default: false },
                 "no-schedules": { type: "boolean", default: false },
                 "no-control-plane": { type: "boolean", default: false },
@@ -546,7 +555,7 @@ function main(argv) {
                 version: { type: "boolean", short: "V", default: false },
             },
         });
-        const dir = (_j = values.dir) !== null && _j !== void 0 ? _j : ".";
+        const dir = (_l = values.dir) !== null && _l !== void 0 ? _l : ".";
         if (values.version === true) {
             yield writeStdout(formatCliVersion({ json: values.json === true }));
             return 0;
@@ -624,6 +633,60 @@ function main(argv) {
                     out: values.out,
                 });
             }
+            case "gitlab": {
+                const port = values.port === undefined
+                    ? undefined
+                    : Number.parseInt(values.port, 10);
+                if (port !== undefined &&
+                    (Number.isNaN(port) || port < 0 || port > 65535)) {
+                    process.stderr.write(`invalid --port: ${values.port}\n`);
+                    return 1;
+                }
+                const { cmdGitlab } = yield import("../internal/cli-gitlab.js");
+                return cmdGitlab(positionals[0], {
+                    dir,
+                    slug: values.slug,
+                    channel: (_c = values.channel) === null || _c === void 0 ? void 0 : _c.at(-1),
+                    host: values.host,
+                    port,
+                    url: values.url,
+                    events: values.events,
+                    secret: values.secret,
+                    json: values.json,
+                    mrUrl: positionals[1],
+                    action: values.action,
+                    conclusion: values.conclusion,
+                    comment: values.comment,
+                    dryRun: values["dry-run"],
+                    out: values.out,
+                });
+            }
+            case "bitbucket": {
+                const port = values.port === undefined
+                    ? undefined
+                    : Number.parseInt(values.port, 10);
+                if (port !== undefined &&
+                    (Number.isNaN(port) || port < 0 || port > 65535)) {
+                    process.stderr.write(`invalid --port: ${values.port}\n`);
+                    return 1;
+                }
+                const { cmdBitbucket } = yield import("../internal/cli-bitbucket.js");
+                return cmdBitbucket(positionals[0], {
+                    dir,
+                    slug: values.slug,
+                    channel: (_d = values.channel) === null || _d === void 0 ? void 0 : _d.at(-1),
+                    host: values.host,
+                    port,
+                    url: values.url,
+                    events: values.events,
+                    secret: values.secret,
+                    json: values.json,
+                    prUrl: positionals[1],
+                    comment: values.comment,
+                    dryRun: values["dry-run"],
+                    out: values.out,
+                });
+            }
             case "init": {
                 return cmdInit({
                     dir,
@@ -691,7 +754,7 @@ function main(argv) {
             case "deploy": {
                 // `--repo` is repeatable for `serve --cursor-events`; deploy targets a
                 // single source repo, so the last one wins.
-                const repo = (_c = values.repo) === null || _c === void 0 ? void 0 : _c.at(-1);
+                const repo = (_e = values.repo) === null || _e === void 0 ? void 0 : _e.at(-1);
                 return cmdDeploy(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, deployOptionsFromValues(values)), { dir }), (values.slug === undefined ? {} : { slug: values.slug })), { all: values.all === true }), (repo === undefined ? {} : { repo })), (values.ref === undefined ? {} : { ref: values.ref })), (values.path === undefined ? {} : { path: values.path })), (values["cursor-events-repo"] === undefined
                     ? {}
                     : { cursorEventsRepos: values["cursor-events-repo"] })), (values["allow-domain"] === undefined
@@ -741,7 +804,7 @@ function main(argv) {
                 return cmdRun(axFromOptions({
                     dir,
                     messages,
-                    sessionId: (_k = values["session-id"]) !== null && _k !== void 0 ? _k : values.session,
+                    sessionId: (_m = values["session-id"]) !== null && _m !== void 0 ? _m : values.session,
                     continuationToken: values["continuation-token"],
                     events: values["no-events"]
                         ? false
@@ -765,7 +828,7 @@ function main(argv) {
                     dir,
                     toolName: positionals[0],
                     toolInput: values.input,
-                    sessionId: (_l = values["session-id"]) !== null && _l !== void 0 ? _l : values.session,
+                    sessionId: (_o = values["session-id"]) !== null && _o !== void 0 ? _o : values.session,
                     url: values.url,
                     prod: values.prod,
                     team: values.team,
@@ -850,7 +913,7 @@ function main(argv) {
                     team: values.team,
                     apiKey: values["api-key"],
                     slug: values.slug,
-                    sessionId: (_m = values["session-id"]) !== null && _m !== void 0 ? _m : values.session,
+                    sessionId: (_p = values["session-id"]) !== null && _p !== void 0 ? _p : values.session,
                     resume: values.resume,
                     continuationToken: values["continuation-token"],
                     bearerToken: values["bearer-token"],
@@ -870,7 +933,7 @@ function main(argv) {
                     slug: values.slug,
                     // Positional wins; --session is accepted as a redundant alias.
                     // No id → resume previous (cmdResume sets resume: true).
-                    sessionId: (_p = (_o = positionals[0]) !== null && _o !== void 0 ? _o : values["session-id"]) !== null && _p !== void 0 ? _p : values.session,
+                    sessionId: (_r = (_q = positionals[0]) !== null && _q !== void 0 ? _q : values["session-id"]) !== null && _r !== void 0 ? _r : values.session,
                     continuationToken: values["continuation-token"],
                     bearerToken: values["bearer-token"],
                     json: values.json,
@@ -919,7 +982,7 @@ function main(argv) {
                 }));
             }
             case "cost": {
-                return cmdCost((_r = (_q = positionals[0]) !== null && _q !== void 0 ? _q : values["session-id"]) !== null && _r !== void 0 ? _r : values.session, axFromOptions({
+                return cmdCost((_t = (_s = positionals[0]) !== null && _s !== void 0 ? _s : values["session-id"]) !== null && _t !== void 0 ? _t : values.session, axFromOptions({
                     dir,
                     url: values.url,
                     prod: values.prod,
@@ -939,7 +1002,7 @@ function main(argv) {
                     apiKey: values["api-key"],
                     slug: values.slug,
                     bearerToken: values["bearer-token"],
-                    sessionId: (_s = values["session-id"]) !== null && _s !== void 0 ? _s : values.session,
+                    sessionId: (_u = values["session-id"]) !== null && _u !== void 0 ? _u : values.session,
                     print: values.print,
                 }));
             }
@@ -973,7 +1036,7 @@ function main(argv) {
             case "info": {
                 const mounts = yield loadMounts(dir);
                 if (values.json) {
-                    const payload = mounts.length === 1 && ((_d = mounts[0]) === null || _d === void 0 ? void 0 : _d.slug) === ""
+                    const payload = mounts.length === 1 && ((_f = mounts[0]) === null || _f === void 0 ? void 0 : _f.slug) === ""
                         ? projectInfo(mounts[0].project)
                         : {
                             agents: mounts.map(({ slug, project }) => (Object.assign({ slug }, projectInfo(project)))),
@@ -981,7 +1044,7 @@ function main(argv) {
                     process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
                     return 0;
                 }
-                if (mounts.length > 1 || ((_e = mounts[0]) === null || _e === void 0 ? void 0 : _e.slug) !== "") {
+                if (mounts.length > 1 || ((_g = mounts[0]) === null || _g === void 0 ? void 0 : _g.slug) !== "") {
                     process.stdout.write(`${mounts.length} agents under ${dir}:\n\n`);
                     for (const { slug, project } of mounts) {
                         const info = projectInfo(project);
@@ -990,7 +1053,7 @@ function main(argv) {
                     const anyError = mounts.some((m) => m.project.diagnostics.some((d) => d.severity === "error"));
                     return anyError ? 1 : 0;
                 }
-                const project = (_f = mounts[0]) === null || _f === void 0 ? void 0 : _f.project;
+                const project = (_h = mounts[0]) === null || _h === void 0 ? void 0 : _h.project;
                 const info = projectInfo(project);
                 const lines = [];
                 lines.push(`agent: ${info.name}`);
@@ -1008,8 +1071,8 @@ function main(argv) {
                     "(events only)"}`)));
                 lines.push(section("schedules", info.schedules.map((s) => `${s.name} (${s.cron}, ${s.kind})`)));
                 lines.push(section("hooks", info.hooks));
-                lines.push(section("hosting egress domains", (_t = (_g = info.hosting) === null || _g === void 0 ? void 0 : _g.egressDomains) !== null && _t !== void 0 ? _t : []));
-                lines.push(section("hosting secret names", (_u = (_h = info.hosting) === null || _h === void 0 ? void 0 : _h.secretNames) !== null && _u !== void 0 ? _u : []));
+                lines.push(section("hosting egress domains", (_v = (_j = info.hosting) === null || _j === void 0 ? void 0 : _j.egressDomains) !== null && _v !== void 0 ? _v : []));
+                lines.push(section("hosting secret names", (_w = (_k = info.hosting) === null || _k === void 0 ? void 0 : _k.secretNames) !== null && _w !== void 0 ? _w : []));
                 if (info.diagnostics.length > 0) {
                     lines.push(`\ndiagnostics:\n${formatDiagnostics(info.diagnostics)}`);
                 }
@@ -1071,7 +1134,10 @@ function main(argv) {
                         ? true
                         : undefined,
                     allowAnonymousGrokbot: values["allow-anonymous-grokbot"] === true ? true : undefined,
-                    cursorGithubProxy: values["cursor-github-proxy"] === true ? true : undefined,
+                    cursorScmProxy: values["cursor-scm-proxy"] === true ||
+                        values["cursor-github-proxy"] === true
+                        ? true
+                        : undefined,
                     schedules: values["no-schedules"] === true ? false : undefined,
                     noControlPlane: values["no-control-plane"] === true ? true : undefined,
                     playground: values["no-playground"] === true ? false : undefined,
@@ -1079,7 +1145,7 @@ function main(argv) {
                     publicUrl: values["public-url"],
                     cloudToolsUrl: values["cloud-tools-url"],
                     cursorEvents: values["cursor-events"] === true
-                        ? { repos: (_v = values.repo) !== null && _v !== void 0 ? _v : [] }
+                        ? { repos: (_x = values.repo) !== null && _x !== void 0 ? _x : [] }
                         : undefined,
                     // Soft boot logs stay secondary to the banner. `dim` is a no-op on
                     // already-styled lines (the MCP warning box).
@@ -1368,6 +1434,18 @@ function printServeBanner(handle, opts) {
         handle.agents.some((agent) => projectInfo(agent.project).channels.some((c) => c.kind === "github"))) {
         process.stdout.write(c.dim(`  github: dev accepts unsigned loopback deliveries (${CLI} github forward works without a secret; set GITHUB_WEBHOOK_SECRET to verify signatures)\n`));
     }
+    if (opts.dev &&
+        (process.env.GITLAB_WEBHOOK_SECRET === undefined ||
+            process.env.GITLAB_WEBHOOK_SECRET === "") &&
+        handle.agents.some((agent) => projectInfo(agent.project).channels.some((c) => c.kind === "gitlab"))) {
+        process.stdout.write(c.dim(`  gitlab: dev accepts unsigned loopback deliveries (${CLI} gitlab replay works without a secret; set GITLAB_WEBHOOK_SECRET to verify X-Gitlab-Token)\n`));
+    }
+    if (opts.dev &&
+        (process.env.BITBUCKET_WEBHOOK_SECRET === undefined ||
+            process.env.BITBUCKET_WEBHOOK_SECRET === "") &&
+        handle.agents.some((agent) => projectInfo(agent.project).channels.some((c) => c.kind === "bitbucket"))) {
+        process.stdout.write(c.dim(`  bitbucket: dev accepts unsigned loopback deliveries (${CLI} bitbucket replay works without a secret; set BITBUCKET_WEBHOOK_SECRET to verify X-Hub-Signature)\n`));
+    }
 }
 /** Prefer the Vite playground URL in --dev; otherwise the static SPA path. */
 function resolvePlaygroundBannerUrl(handle, noPlayground) {
@@ -1453,7 +1531,7 @@ function installTransportErrorGuards() {
 installTransportErrorGuards();
 // Authored agent files are TypeScript imported at runtime; install the tsx
 // loader (and the framework import aliases on compiled runs) before any
-// command touches a project. In-repo CLI is `bin/agentsdk`.
+// command touches a project. In-repo CLI is `bin/agent-serve.ts`.
 registerAuthoredModuleLoaders()
     .then(() => main(process.argv.slice(2)))
     .then((code) => {