@cursor/july 0.1.102 → 0.1.103

package/dist/internal/session-engine.js

@@ -23,7 +23,7 @@ import { SLACK_CHANNEL_ID } from "../channels/slack/constants.js";
 import { materializeSlackNudgeCarrier } from "../channels/slack/nudge-carrier.js";
 import { SlackAskDedupeStore, SlackNudgeStore, } from "../channels/slack/nudge-store.js";
 import { resolveDedicatedSlackHostBinding } from "../channels/slack/slack-channel.js";
-import { AGENT_SERVE_USER_STORE_FILES_SOURCE_ID, agentStoreKeys, } from "../files.js";
+import { AGENT_SERVE_USER_STORE_FILES_SOURCE_ID, agentStoreKeys, DEPLOYMENT_STORE_MOUNT_PATH, USER_STORE_MOUNT_PATH, } from "../files.js";
 import { cursorHostedFiles, isCursorHostedFilesAvailable, isCursorUserStoreFilesAvailable, } from "../files-backends/cursor-hosted.js";
 import { storageKeysForArchitecture } from "../storage.js";
 import { DEFAULT_MODEL, DIRECT_TOOL_CALL_CHANNEL_ID, isCursorAccountTransport, isHostOauthConnectionTransport, isSymbolicConnectionTransport, } from "../types.js";
@@ -39,6 +39,7 @@ import { mergeCloudOptions, resolveSessionRuntime } from "./cloud-merge.js";
 import { applyCloudUsageToEvents, cloudSdkAgentIdFromEvents, isUnpricedCompletedTurn, mapSdkTokenUsage, } from "./cloud-turn-cost.js";
 import { applyAgentContinuationDefaults, channelContinuationIdentity, httpContinuationIdentity, } from "./continuation-channel.js";
 import { continuationSource, resolveV2Key, V2EngineError, } from "./continuation-identity.js";
+import { describeError } from "./describe-error.js";
 import { isDevMode } from "./dev-mode.js";
 import { EventLogStore } from "./event-log.js";
 import { TurnEventMapper } from "./event-mapper.js";
@@ -55,6 +56,7 @@ import { McpOauthOnDemandHub } from "./mcp-oauth-on-demand.js";
 import { shouldStartProcessMemoryTelemetry, startProcessMemoryTelemetry, } from "./process-memory-telemetry.js";
 import { buildSessionContextBlock, SCHEDULE_CHANNEL_PREFIX, } from "./prompt-context.js";
 import { assertCloudCanHonorAccountServersFilters } from "./resolved-connections.js";
+import { applyAuthoredResult } from "./result-output.js";
 import { sessionExternalLinks } from "./session-links.js";
 import { SessionStore } from "./session-store.js";
 import { syncSkillsToStore } from "./skills-sync.js";
@@ -67,7 +69,8 @@ import { TurnGovernor } from "./turn-governor.js";
 import { TurnLeaseStore } from "./turn-lease-store.js";
 import { TurnOutbox } from "./turn-outbox.js";
 import { resolveAgentV2Hosting } from "./v2-hosting.js";
-import { buildAgentsMdContent, buildCloudMemorySection, ensureOwnGitRoot, isNestedInGitRepo, materializeWorkspace, SERVER_TOOLS_MCP_SERVER_NAME, writeWorkspaceFiles, } from "./workspace.js";
+import { buildAgentsMdContent, buildCloudMemorySection, buildCloudWorkspaceSection, ensureOwnGitRoot, isNestedInGitRepo, materializeWorkspace, SERVER_TOOLS_MCP_SERVER_NAME, writeWorkspaceFiles, } from "./workspace.js";
+import { syncWorkspaceToStore } from "./workspace-sync.js";
 export const HTTP_CHANNEL_ID = "http";
 export { SCHEDULE_CHANNEL_PREFIX } from "./prompt-context.js";
 export class SessionBusyError extends Error {
@@ -158,6 +161,8 @@ export class SessionEngine {
         var _a, _b, _c, _d, _e;
         /** In-flight lazy restores, deduped per channel + continuation key. */
         this.restoreInFlight = new Map();
+        /** In-flight authored files → Agent Store syncs (see syncToCloudStore). */
+        this.cloudSyncs = new Map();
         this.channelsById = new Map();
         /** Sessions with a turn being admitted (before the run promise exists). */
         this.pendingTurns = new Set();
@@ -353,9 +358,9 @@ export class SessionEngine {
         };
     }
     /**
-     * Host services with `files` bound to one session, so a relative path in a
-     * tool or hook resolves to that session's scope and can never be read as
-     * another session's. Unbound (no session) keeps `host.files` usable for
+     * Host services with `files` and `otel` bound to one session, so a relative
+     * path resolves to that session's scope and can never read another
+     * session's. Unbound (no session) keeps `host.files` usable for
      * `{ scope: "deployment" }` and fails loudly on session-scoped calls.
      */
     hostForSession(sessionId) {
@@ -1435,7 +1440,7 @@ export class SessionEngine {
                     this.activeToolContexts.set(sessionId, { record, turnId, emit });
                     this.stubbedCallIds.set(sessionId, stubbed);
                     try {
-                        outcome = yield this.runner.runTurn(request);
+                        outcome = yield this.runTurnExecute(record, turnId, () => this.runner.runTurn(request));
                     }
                     finally {
                         this.activeToolContexts.delete(sessionId);
@@ -1476,11 +1481,39 @@ export class SessionEngine {
             if (finalCost !== undefined) {
                 outcome = Object.assign(Object.assign({}, outcome), { cost: finalCost });
             }
+            const authored = this.project.result;
+            if (outcome.status === "finished" && authored !== undefined) {
+                const settled = yield applyAuthoredResult({
+                    definition: authored,
+                    text: finalResult,
+                    dryRun: record.dryRun === true,
+                    ctx: {
+                        session: this.sessionInfo(record),
+                        host: this.hostForSession(sessionId),
+                        artifacts: this.artifactsApi({ sessionId, turnId }),
+                        stateRoot: this.stateRoot,
+                        workspaceDir: harnessCwd,
+                    },
+                });
+                if (!settled.ok) {
+                    outcome = {
+                        status: "error",
+                        result: finalResult,
+                        errorMessage: `turn output failed: ${settled.message}`,
+                        usage: finalUsage,
+                        cost: finalCost,
+                    };
+                }
+            }
             if (outcome.status === "finished") {
                 yield this.appendEvent(sessionId, {
                     type: "turn.completed",
                     turnId,
-                    data: Object.assign(Object.assign(Object.assign({}, (finalResult === undefined ? {} : { result: finalResult })), (finalUsage === undefined ? {} : { usage: finalUsage })), (finalCost === undefined ? {} : { cost: finalCost })),
+                    data: {
+                        result: finalResult,
+                        usage: finalUsage,
+                        cost: finalCost,
+                    },
                 });
             }
             else {
@@ -1515,7 +1548,7 @@ export class SessionEngine {
                     data: {},
                 });
             }
-            return Object.assign(Object.assign(Object.assign({}, outcome), (finalResult === undefined ? {} : { result: finalResult })), (finalUsage === undefined ? {} : { usage: finalUsage }));
+            return Object.assign(Object.assign({}, outcome), { result: finalResult, usage: finalUsage });
         });
     }
     /**
@@ -1525,75 +1558,89 @@ export class SessionEngine {
      * first-turn S3 scan can discover them. False when the sync fails: the
      * turn then runs without store skills rather than pointing discovery at
      * paths that do not exist.
-     *
-     * With skills authored, every first cloud turn re-copies the authored
+     */
+    ensureCloudSkillsSynced(store) {
+        const skills = this.project.agent.skills;
+        return this.syncToCloudStore("skills", store, skills.length > 0, () => syncSkillsToStore({
+            sink: store.sink,
+            agentName: this.project.name,
+            skills,
+            skillsPrefix: store.skillsPrefix,
+        }));
+    }
+    /**
+     * Sync `agent/sandbox/workspace/**` seeds onto the Agent Store at
+     * `workspace/…` (hosted) or `agent-serve/<agent>/workspace/…`
+     * (personal-key local+cloud) before the first cloud prompt, which names
+     * the mounted directory (see buildCloudWorkspaceSection).
+     */
+    ensureCloudWorkspaceSynced(store) {
+        const seedFiles = this.project.agent.seedFiles;
+        return this.syncToCloudStore("workspace", store, seedFiles.length > 0, () => syncWorkspaceToStore({
+            sink: store.sink,
+            seedFiles,
+            workspacePrefix: store.workspacePrefix,
+        }));
+    }
+    /**
+     * With files authored, every first cloud turn re-copies the authored
      * bytes and the memo only dedupes concurrent first turns. The mount is
      * writable from cloud sessions, so a once-per-process copy would let one
      * session's edits masquerade as agent definition for every later session
      * until the engine restarts; re-syncing keeps the store true to discovery
      * the same way local materialization always rewrites skills. Without
-     * skills the sync is best-effort stale cleanup and one attempt per
-     * process is enough, success or not — a deployment without the files
+     * authored files the sync is best-effort stale cleanup and one attempt
+     * per process is enough, success or not — a deployment without the files
      * surface must not fail and log on every new session for a feature it
      * does not use.
      */
-    ensureCloudSkillsSynced() {
-        if (this.cloudSkillsSync !== undefined) {
-            return this.cloudSkillsSync;
-        }
-        const target = this.cloudSkillsStore();
-        if (target === undefined) {
-            this.cloudSkillsSync = Promise.resolve(false);
-            return this.cloudSkillsSync;
+    syncToCloudStore(surface, store, authored, run) {
+        const inFlight = this.cloudSyncs.get(surface);
+        if (inFlight !== undefined) {
+            return inFlight;
         }
-        const skills = this.project.agent.skills;
-        let sync = syncSkillsToStore({
-            sink: target.sink,
-            agentName: this.project.name,
-            skills,
-            skillsPrefix: target.skillsPrefix,
-        }).then(() => true, (error) => {
-            this.logger(`[skills] ${target.label} sync failed: ${error instanceof Error ? error.message : String(error)}`);
+        let sync = run().then(() => true, (error) => {
+            this.logger(`[${surface}] ${store.label} sync failed: ${error instanceof Error ? error.message : String(error)}`);
             return false;
         });
-        if (skills.length > 0) {
+        if (authored) {
             sync = sync.finally(() => {
-                this.cloudSkillsSync = undefined;
+                this.cloudSyncs.delete(surface);
             });
         }
-        this.cloudSkillsSync = sync;
+        this.cloudSyncs.set(surface, sync);
         return sync;
     }
     /**
      * Hosted deployments own the deployment store. Local `serve`/`run` with
      * a personal API key writes into the USER store under `agent-serve/`.
      */
-    cloudSkillsStore() {
+    cloudStore() {
         const v2Hosting = resolveAgentV2Hosting({
             architecture: this.project.agent.architecture,
         });
+        const deployment = {
+            mountPath: DEPLOYMENT_STORE_MOUNT_PATH,
+            skillsPrefix: agentStoreKeys.skillsPrefix(),
+            workspacePrefix: agentStoreKeys.workspacePrefix(),
+            label: "deployment store",
+        };
         if (v2Hosting.kind === "cursor-managed") {
-            return {
-                sink: cursorHostedFiles({
+            return Object.assign({ sink: cursorHostedFiles({
                     resolveStoreSourceId: () => v2Hosting.resolveStoreIds().deploymentStoreSourceId,
-                }),
-                skillsPrefix: agentStoreKeys.skillsPrefix(),
-                label: "deployment store",
-            };
+                }) }, deployment);
         }
         if (v2Hosting.kind === "not-v2" && isCursorHostedFilesAvailable()) {
-            return {
-                sink: cursorHostedFiles(),
-                skillsPrefix: agentStoreKeys.skillsPrefix(),
-                label: "deployment store",
-            };
+            return Object.assign({ sink: cursorHostedFiles() }, deployment);
         }
         if (isCursorUserStoreFilesAvailable()) {
             return {
                 sink: cursorHostedFiles({
                     storeSourceId: AGENT_SERVE_USER_STORE_FILES_SOURCE_ID,
                 }),
+                mountPath: USER_STORE_MOUNT_PATH,
                 skillsPrefix: agentStoreKeys.userSkillsPrefix(this.project.name),
+                workspacePrefix: agentStoreKeys.userWorkspacePrefix(this.project.name),
                 label: "user store",
             };
         }
@@ -1646,13 +1693,14 @@ export class SessionEngine {
             if (isFirstTurn) {
                 if (runtime === "cloud") {
                     // Cloud VMs have no materialized workspace: ship the full context,
-                    // including agent tool script bodies. On hosted deployments authored
-                    // skills land on the store mount for native discovery, and the
-                    // shared memory journal is on that mount too — say where. When the
-                    // turn carries the session-bound server-tool MCP endpoint, the
-                    // preamble catalogs server tools under that MCP server name *before*
-                    // the agent-tool "write the script if missing" recipe, so a model
-                    // told to "use <server tool>" calls MCP instead of inventing a .sh.
+                    // including agent tool script bodies. Authored skills and workspace
+                    // seeds land on the store mount (skills for native discovery, seeds
+                    // for the model's file tools), and on hosted deployments the shared
+                    // memory journal is on that mount too — say where. When the turn
+                    // carries the session-bound server-tool MCP endpoint, the preamble
+                    // catalogs server tools under that MCP server name *before* the
+                    // agent-tool "write the script if missing" recipe, so a model told
+                    // to "use <server tool>" calls MCP instead of inventing a .sh.
                     const preamble = buildAgentsMdContent(agent, {
                         includeScripts: true,
                         serverToolsMcpName: this.cloudServerToolsConnection === undefined
@@ -1660,17 +1708,29 @@ export class SessionEngine {
                             : SERVER_TOOLS_MCP_SERVER_NAME,
                     });
                     const hosted = isCursorHostedFilesAvailable();
-                    // Synced whenever a store is reachable, not just when skills exist:
-                    // removing the last skill has to delete its store copies too.
-                    // Discovery is native (`--agent-store-skills-dir`); this only has
-                    // to land the bytes.
-                    if (hosted || isCursorUserStoreFilesAvailable()) {
-                        yield this.ensureCloudSkillsSynced();
+                    // Synced whenever a store is reachable, not just when skills or
+                    // seeds exist: removing the last one has to delete its store copies
+                    // too.
+                    const store = hosted || isCursorUserStoreFilesAvailable()
+                        ? this.cloudStore()
+                        : undefined;
+                    let sections = "";
+                    if (store !== undefined) {
+                        const [, seedsSynced] = yield Promise.all([
+                            this.ensureCloudSkillsSynced(store),
+                            this.ensureCloudWorkspaceSynced(store),
+                        ]);
+                        // Only name the mount when the bytes landed; a failed sync must
+                        // not send the model looking for files that are not there.
+                        if (seedsSynced && agent.seedFiles.length > 0) {
+                            const dir = `${store.mountPath}/${store.workspacePrefix}`;
+                            sections += `\n\n${buildCloudWorkspaceSection(dir)}`;
+                        }
+                    }
+                    if (hosted) {
+                        sections += `\n\n${buildCloudMemorySection(this.project.name)}`;
                     }
-                    const memorySection = hosted
-                        ? `\n\n${buildCloudMemorySection(this.project.name)}`
-                        : "";
-                    turnPrompt = `${preamble}${memorySection}\n\n${turnPrompt}`;
+                    turnPrompt = `${preamble}${sections}\n\n${turnPrompt}`;
                 }
                 else if (runtime === "local" && instructionsInvisibleToHarness) {
                     // Local workspace whose AGENTS.md the harness will not load. With a
@@ -2091,6 +2151,23 @@ export class SessionEngine {
             }
         });
     }
+    /**
+     * Bind outbound inject (Factory / Cursor API `traceparent`) to the
+     * turn span for the whole harness run. Host files / VFS RPCs happen
+     * here, not under `runInCall`. No-op when OTel is off.
+     */
+    runTurnExecute(record, turnId, fn) {
+        const otel = this.otel;
+        const run = () => Promise.resolve(fn());
+        if (otel === undefined) {
+            return run();
+        }
+        return otel.runInTurn({
+            sessionId: record.sessionId,
+            session: this.sessionInfo(record),
+            turnId,
+        }, run);
+    }
     /**
      * Bind outbound inject (Factory / Cursor API `traceparent`) to the
      * tool span. No-op when OTel is off.
@@ -2946,7 +3023,10 @@ export class SessionEngine {
             if (record === undefined) {
                 return;
             }
-            const sessionCtx = { session: this.sessionInfo(record) };
+            const sessionCtx = {
+                session: this.sessionInfo(record),
+                host: this.hostForSession(record.sessionId),
+            };
             const channelEvents = this.channelEventHandlersFor(record.channelId);
             if (channelEvents !== undefined) {
                 // Handlers are declared against the narrowed event for their key; the
@@ -2985,20 +3065,13 @@ export class SessionEngine {
                         continue;
                     }
                     try {
-                        yield handler(event, {
-                            agent: { name: this.project.name },
-                            channel: {
+                        yield handler(event, Object.assign(Object.assign({}, sessionCtx), { agent: { name: this.project.name }, channel: {
                                 id: record.channelId,
                                 continuationToken: record.continuationKey,
-                            },
-                            session: this.sessionInfo(record),
-                            stateRoot: this.stateRoot,
-                            host: this.hostForSession(record.sessionId),
-                            artifacts: this.artifactsApi({
+                            }, stateRoot: this.stateRoot, artifacts: this.artifactsApi({
                                 sessionId: record.sessionId,
                                 turnId: event.turnId,
-                            }),
-                        });
+                            }) }));
                     }
                     catch (error) {
                         this.logger(`[agent-sdk] hook "${hook.name}" handler for ${event.type} threw: ${describeError(error)}`);
@@ -3006,9 +3079,9 @@ export class SessionEngine {
                 }
             }
             if (this.abCollector.enabled) {
-                yield this.abCollector.onEvent(event, this.sessionInfo(record), this.project.name);
+                yield this.abCollector.onEvent(event, sessionCtx.session, this.project.name);
             }
-            (_a = this.otel) === null || _a === void 0 ? void 0 : _a.onEvent(event, this.sessionInfo(record));
+            (_a = this.otel) === null || _a === void 0 ? void 0 : _a.onEvent(event, sessionCtx.session);
         });
     }
     channelEventHandlersFor(channelId) {
@@ -3910,9 +3983,6 @@ function subagentPrompt(subagent) {
 function buildRunnerSubagents(agent) {
     return agent.subagents.map((subagent) => { var _a; return (Object.assign({ name: subagent.name, description: (_a = subagent.description) !== null && _a !== void 0 ? _a : subagent.name, prompt: subagentPrompt(subagent) }, (subagent.model === undefined ? {} : { model: subagent.model }))); });
 }
-function describeError(error) {
-    return error instanceof Error ? error.message : String(error);
-}
 function toolErrorResult(message) {
     return {
         content: [{ type: "text", text: message }],

package/dist/internal/session-run-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-run-log.d.ts","sourceRoot":"","sources":["../../src/internal/session-run-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,oDAAoD;AACpD,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAIjD,yDAAyD;AACzD,eAAO,MAAM,kCAAkC,OAAQ,CAAC;AAExD,MAAM,MAAM,qBAAqB,GAC7B,8BAA8B,GAC9B,cAAc,GACd,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG;IAClC,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,wBAAwB,GAAG,mBAAmB,GAAG;IAC3D,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC1E;;;;OAIG;IACH,iBAAiB,CACf,MAAM,EAAE,OAAO,CACb,qBAAqB,EACrB,cAAc,GAAG,oBAAoB,GAAG,qBAAqB,CAC9D,EACD,KAAK,CAAC,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAWD;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GACvC,IAAI,CAEN;AAED,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxE;AAgBD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAa3E;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,YAAY,EAAE,CAOhB;AA6FD,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,SAAS,mBAAmB,EAAE,GACzC,qBAAqB,GAAG,SAAS,CAgBnC;AAuFD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,qBAAqB,GAAG,SAAS,CAkCnC;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;CAC9C,GAAG,kBAAkB,CAiHrB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;CAC9C,GAAG,kBAAkB,GAAG,SAAS,CAoBjC"}
+{"version":3,"file":"session-run-log.d.ts","sourceRoot":"","sources":["../../src/internal/session-run-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAEjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,oDAAoD;AACpD,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAIjD,yDAAyD;AACzD,eAAO,MAAM,kCAAkC,OAAQ,CAAC;AAExD,MAAM,MAAM,qBAAqB,GAC7B,8BAA8B,GAC9B,cAAc,GACd,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG;IAClC,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,wBAAwB,GAAG,mBAAmB,GAAG;IAC3D,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC1E;;;;OAIG;IACH,iBAAiB,CACf,MAAM,EAAE,OAAO,CACb,qBAAqB,EACrB,cAAc,GAAG,oBAAoB,GAAG,qBAAqB,CAC9D,EACD,KAAK,CAAC,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAWD;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GACvC,IAAI,CAEN;AAED,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxE;AAgBD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAa3E;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,YAAY,EAAE,CAOhB;AAyFD,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,SAAS,mBAAmB,EAAE,GACzC,qBAAqB,GAAG,SAAS,CAgBnC;AAuFD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,qBAAqB,GAAG,SAAS,CAkCnC;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;CAC9C,GAAG,kBAAkB,CAiHrB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,SAAS,YAAY,EAAE,CAAC;CAC9C,GAAG,kBAAkB,GAAG,SAAS,CAoBjC"}

package/dist/internal/session-run-log.js

@@ -31,6 +31,7 @@ import { cursorHostedFiles } from "../files-backends/cursor-hosted.js";
 import { agentSdkStorageKeys } from "../storage-protocol.js";
 import { resolveApiKeySync } from "./cursor/credentials.js";
 import { describeError } from "./describe-error.js";
+import { isRecord } from "./is-record.js";
 import { resolveAgentV2Hosting } from "./v2-hosting.js";
 export const SESSION_RUN_LOG_VERSION = 1;
 /** Last N log-ring lines kept on each execution. */
@@ -99,9 +100,6 @@ export function snapshotSessionRunLogs(entries) {
         line: boundedText(entry.line, SESSION_RUN_LOG_MAX_LINE_CHARS),
     }));
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function decodeSinkBody(body) {
     return body instanceof Uint8Array ? body : body.body;
 }

package/dist/internal/skills-sync.d.ts

@@ -11,10 +11,7 @@ import type { DiscoveredSkill } from "../types.js";
  * Mirror the agent's skills onto the store: write every SKILL.md (with the
  * same generated frontmatter local materialization uses) plus sibling files,
  * and delete keys no authored skill claims so redeploys drop removed skills.
- *
- * Everything loads and validates before the store is touched, and writes
- * land before stale deletes, so a failed sync never leaves a gap a
- * concurrent cloud reader could see.
+ * Everything loads and validates before the store is touched.
  */
 export declare function syncSkillsToStore(args: {
     sink: FileSink;

package/dist/internal/skills-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills-sync.d.ts","sourceRoot":"","sources":["../../src/internal/skills-sync.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAqC,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AAQpE;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,QAAQ,CAAC;IACf,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB"}
+{"version":3,"file":"skills-sync.d.ts","sourceRoot":"","sources":["../../src/internal/skills-sync.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AASpE;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,QAAQ,CAAC;IACf,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB"}

package/dist/internal/skills-sync.js

@@ -15,9 +15,9 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { readFile } from "node:fs/promises";
-import { posix } from "node:path";
-import { agentStoreKeys, FileConflictError } from "../files.js";
+import { agentStoreKeys } from "../files.js";
 import { STORAGE_KEY_ROOT } from "../storage.js";
+import { mirrorToStore, storeRelPath } from "./store-mirror.js";
 import { buildSkillMd } from "./workspace.js";
 /** Pre-native layout. Deleted on every sync so a rolled-forward deploy does not leave undiscoverable copies. */
 function legacySkillsPrefix(agent) {
@@ -27,10 +27,7 @@ function legacySkillsPrefix(agent) {
  * Mirror the agent's skills onto the store: write every SKILL.md (with the
  * same generated frontmatter local materialization uses) plus sibling files,
  * and delete keys no authored skill claims so redeploys drop removed skills.
- *
- * Everything loads and validates before the store is touched, and writes
- * land before stale deletes, so a failed sync never leaves a gap a
- * concurrent cloud reader could see.
+ * Everything loads and validates before the store is touched.
  */
 export function syncSkillsToStore(args) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -41,52 +38,15 @@ export function syncSkillsToStore(args) {
             const key = (relPath) => agentStoreKeys.skillFile(skill.name, relPath, skillsPrefix);
             desired.set(key("SKILL.md"), Buffer.from(buildSkillMd(skill), "utf8"));
             for (const [relPath, source] of Object.entries(skill.files)) {
-                desired.set(key(storeRelPath(relPath)), yield sourceBytes(source));
+                desired.set(key(storeRelPath(relPath, "skill file")), yield sourceBytes(source));
             }
         }
-        yield Promise.all([...desired].map(([key, body]) => putLastWriterWins(args.sink, key, body)));
-        const [existing, leftover] = yield Promise.all([
-            args.sink.list(skillsPrefix),
-            args.sink.list(legacySkillsPrefix(args.agentName)),
-        ]);
-        yield Promise.all([...existing.filter((entry) => !desired.has(entry.key)), ...leftover].map((entry) => args.sink.delete(entry.key)));
-    });
-}
-/**
- * Same refusals as local materialization's `resolveInside`: a rel that
- * escapes the skill directory or would not round-trip through the FUSE
- * mount (`..`, `.`, `//`, absolute) fails the sync, exactly as it fails a
- * local turn's workspace write. Backslashes are refused too — the store
- * normalizes `\` to `/` on write, so the stored key would differ from the
- * desired one and the stale pass would delete the file it just wrote.
- */
-function storeRelPath(relPath) {
-    if (relPath.includes("\0") ||
-        relPath.includes("\\") ||
-        posix.isAbsolute(relPath) ||
-        relPath.endsWith("/") ||
-        relPath.split("/").some((seg) => seg === ".." || seg === ".") ||
-        posix.normalize(relPath) !== relPath) {
-        throw new Error(`Refusing skill file path "${relPath}" (must be a normalized relative path)`);
-    }
-    return relPath;
-}
-/**
- * Last writer wins. A raced conditional put (dual engine pods during a
- * deploy rollover) clears the sink's cached etag, so one retry re-learns
- * the current version and lands.
- */
-function putLastWriterWins(sink, key, body) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            yield sink.put(key, body);
-        }
-        catch (error) {
-            if (!(error instanceof FileConflictError)) {
-                throw error;
-            }
-            yield sink.put(key, body);
-        }
+        yield mirrorToStore({
+            sink: args.sink,
+            prefix: skillsPrefix,
+            desired,
+            legacyPrefixes: [legacySkillsPrefix(args.agentName)],
+        });
     });
 }
 function sourceBytes(source) {

package/dist/internal/sleep.d.ts

@@ -0,0 +1,2 @@
+export declare function sleep(ms: number): Promise<void>;
+//# sourceMappingURL=sleep.d.ts.map

package/dist/internal/sleep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sleep.d.ts","sourceRoot":"","sources":["../../src/internal/sleep.ts"],"names":[],"mappings":"AAAA,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/internal/sleep.js

@@ -0,0 +1,3 @@
+export function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}

package/dist/internal/store-mirror.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Mirror an authored file tree onto an Agent Store prefix. Shared by the
+ * skills and workspace seed syncs so both keep the same write-then-sweep
+ * discipline and the same path refusals.
+ */
+import { type FileSink } from "../files.js";
+/**
+ * Write every `desired` key, then delete keys under `prefix` (and the
+ * `legacyPrefixes`) that nothing claims, so a redeploy drops removed files.
+ * Writes land before stale deletes, so a failed sync never leaves a gap a
+ * concurrent cloud reader could see.
+ */
+export declare function mirrorToStore(args: {
+    sink: FileSink;
+    prefix: string;
+    desired: ReadonlyMap<string, Uint8Array>;
+    /** Pre-native layouts emptied on every sync so a rolled-forward deploy does not leave undiscoverable copies. */
+    legacyPrefixes?: readonly string[];
+}): Promise<void>;
+/**
+ * Same refusals as local materialization's `resolveInside`: a rel that
+ * escapes its directory or would not round-trip through the FUSE mount
+ * (`..`, `.`, `//`, absolute) fails the sync, exactly as it fails a local
+ * turn's workspace write. Backslashes are refused too — the store
+ * normalizes `\` to `/` on write, so the stored key would differ from the
+ * desired one and the stale pass would delete the file it just wrote.
+ */
+export declare function storeRelPath(relPath: string, what: "skill file" | "workspace file"): string;
+//# sourceMappingURL=store-mirror.d.ts.map

package/dist/internal/store-mirror.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-mirror.d.ts","sourceRoot":"","sources":["../../src/internal/store-mirror.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAqB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE/D;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,gHAAgH;IAChH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GAAG,gBAAgB,GACpC,MAAM,CAcR"}

package/dist/internal/store-mirror.js

@@ -0,0 +1,70 @@
+/**
+ * Mirror an authored file tree onto an Agent Store prefix. Shared by the
+ * skills and workspace seed syncs so both keep the same write-then-sweep
+ * discipline and the same path refusals.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { posix } from "node:path";
+import { FileConflictError } from "../files.js";
+/**
+ * Write every `desired` key, then delete keys under `prefix` (and the
+ * `legacyPrefixes`) that nothing claims, so a redeploy drops removed files.
+ * Writes land before stale deletes, so a failed sync never leaves a gap a
+ * concurrent cloud reader could see.
+ */
+export function mirrorToStore(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        yield Promise.all([...args.desired].map(([key, body]) => putLastWriterWins(args.sink, key, body)));
+        const listed = yield Promise.all([args.prefix, ...((_a = args.legacyPrefixes) !== null && _a !== void 0 ? _a : [])].map((prefix) => args.sink.list(prefix)));
+        yield Promise.all(listed
+            .flat()
+            .filter((entry) => !args.desired.has(entry.key))
+            .map((entry) => args.sink.delete(entry.key)));
+    });
+}
+/**
+ * Same refusals as local materialization's `resolveInside`: a rel that
+ * escapes its directory or would not round-trip through the FUSE mount
+ * (`..`, `.`, `//`, absolute) fails the sync, exactly as it fails a local
+ * turn's workspace write. Backslashes are refused too — the store
+ * normalizes `\` to `/` on write, so the stored key would differ from the
+ * desired one and the stale pass would delete the file it just wrote.
+ */
+export function storeRelPath(relPath, what) {
+    if (relPath.includes("\0") ||
+        relPath.includes("\\") ||
+        posix.isAbsolute(relPath) ||
+        relPath.endsWith("/") ||
+        relPath.split("/").some((seg) => seg === ".." || seg === ".") ||
+        posix.normalize(relPath) !== relPath) {
+        throw new Error(`Refusing ${what} path "${relPath}" (must be a normalized relative path)`);
+    }
+    return relPath;
+}
+/**
+ * Last writer wins. A raced conditional put (dual engine pods during a
+ * deploy rollover) clears the sink's cached etag, so one retry re-learns
+ * the current version and lands.
+ */
+function putLastWriterWins(sink, key, body) {
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            yield sink.put(key, body);
+        }
+        catch (error) {
+            if (!(error instanceof FileConflictError)) {
+                throw error;
+            }
+            yield sink.put(key, body);
+        }
+    });
+}