@cursor/july 0.1.102 → 0.1.104

package/dist/internal/runtime-dispatch-runner.d.ts

@@ -3,26 +3,16 @@
  * turns stay on the Cursor SDK runner, grokbot turns go to the Grok Bot
  * remote client (`internal/grokbot/runner.ts`), which drives the hosted
  * Grok Bot (Sand) harness through the public `/v0/grokbot` session API.
- * Both runners ship in the published package.
  */
 import type { RunnerTurnRequest, TurnOutcome } from "../types.js";
-import type { GrokBotRunnerOptions } from "./grokbot/runner.js";
 import type { AgentRunner, PrewarmOutcome, RunnerPrewarmRequest, SteerAckOutcome } from "./sdk-runner.js";
 export interface RuntimeDispatchingRunnerOptions {
     sdkRunner: AgentRunner;
-    grokbot?: GrokBotRunnerOptions;
-    /** Test seam — replaces the real Grok Bot remote client. */
-    createGrokBotRunner?: (options: GrokBotRunnerOptions) => AgentRunner;
+    grokbot: AgentRunner;
 }
 export declare class RuntimeDispatchingRunner implements AgentRunner {
     private readonly options;
-    private grokbotRunner;
     constructor(options: RuntimeDispatchingRunnerOptions);
-    /**
-     * The Grok Bot remote client, created on first use; a missing API key
-     * surfaces on the first grokbot turn, not at serve start.
-     */
-    ensureGrokBotRunner(): AgentRunner;
     runTurn(request: RunnerTurnRequest): Promise<TurnOutcome>;
     steer(request: {
         sessionId: string;

package/dist/internal/runtime-dispatch-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-dispatch-runner.d.ts","sourceRoot":"","sources":["../../src/internal/runtime-dispatch-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,eAAe,EAChB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,WAAW,CAAC;CACtE;AAED,qBAAa,wBAAyB,YAAW,WAAW;IAG9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,aAAa,CAA0B;IAE/C,YAA6B,OAAO,EAAE,+BAA+B,EAAI;IAEzE;;;OAGG;IACH,mBAAmB,IAAI,WAAW,CAKjC;IAEK,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAK9D;IAEK,KAAK,CAAC,OAAO,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,eAAe,CAAC,CAI3B;IAEK,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CASpE;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAG7B;CACF"}
+{"version":3,"file":"runtime-dispatch-runner.d.ts","sourceRoot":"","sources":["../../src/internal/runtime-dispatch-runner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,eAAe,EAChB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,qBAAa,wBAAyB,YAAW,WAAW;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,+BAA+B,EAAI;IAEnE,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAK9D;IAEK,KAAK,CAAC,OAAO,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,eAAe,CAAC,CAI3B;IAEK,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CASpE;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAG7B;CACF"}

package/dist/internal/runtime-dispatch-runner.js

@@ -3,7 +3,6 @@
  * turns stay on the Cursor SDK runner, grokbot turns go to the Grok Bot
  * remote client (`internal/grokbot/runner.ts`), which drives the hosted
  * Grok Bot (Sand) harness through the public `/v0/grokbot` session API.
- * Both runners ship in the published package.
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
@@ -14,26 +13,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import { GrokBotRunner } from "./grokbot/runner.js";
 export class RuntimeDispatchingRunner {
     constructor(options) {
         this.options = options;
     }
-    /**
-     * The Grok Bot remote client, created on first use; a missing API key
-     * surfaces on the first grokbot turn, not at serve start.
-     */
-    ensureGrokBotRunner() {
-        var _a, _b;
-        var _c, _d, _e;
-        const options = (_c = this.options.grokbot) !== null && _c !== void 0 ? _c : {};
-        (_d = this.grokbotRunner) !== null && _d !== void 0 ? _d : (this.grokbotRunner = (_e = (_b = (_a = this.options).createGrokBotRunner) === null || _b === void 0 ? void 0 : _b.call(_a, options)) !== null && _e !== void 0 ? _e : new GrokBotRunner(options));
-        return this.grokbotRunner;
-    }
     runTurn(request) {
         return __awaiter(this, void 0, void 0, function* () {
             if (request.runtime === "grokbot") {
-                return this.ensureGrokBotRunner().runTurn(request);
+                return this.options.grokbot.runTurn(request);
             }
             return this.options.sdkRunner.runTurn(request);
         });
@@ -61,7 +48,7 @@ export class RuntimeDispatchingRunner {
         return __awaiter(this, void 0, void 0, function* () {
             var _a, _b, _c, _d;
             yield (_b = (_a = this.options.sdkRunner).dispose) === null || _b === void 0 ? void 0 : _b.call(_a);
-            yield (_d = (_c = this.grokbotRunner) === null || _c === void 0 ? void 0 : _c.dispose) === null || _d === void 0 ? void 0 : _d.call(_c);
+            yield (_d = (_c = this.options.grokbot).dispose) === null || _d === void 0 ? void 0 : _d.call(_c);
         });
     }
 }

package/dist/internal/sdk-runner.d.ts

@@ -31,7 +31,7 @@ export interface AgentRunner {
  * a subset of {@link RunnerTurnRequest} — anything that disagrees warms an
  * executor no turn will ask for.
  */
-export type RunnerPrewarmRequest = Pick<RunnerTurnRequest, "workspaceDir" | "runnerStateDir" | "sandbox" | "tools" | "mcpServers" | "perSendMcpServers" | "subagents" | "model">;
+export type RunnerPrewarmRequest = Pick<RunnerTurnRequest, "workspaceDir" | "runnerStateDir" | "sandbox" | "tools" | "disallowedTools" | "mcpServers" | "perSendMcpServers" | "subagents" | "model">;
 /** Whether a workspace was actually resolved, and why not when it wasn't. */
 export type PrewarmOutcome = {
     readonly warmed: true;

package/dist/internal/sdk-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../../src/internal/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAOL,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAInE,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,KAAK,CAAC,CAAC,OAAO,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,iBAAiB,EACf,cAAc,GACd,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,YAAY,GACZ,mBAAmB,GACnB,WAAW,GACX,OAAO,CACV,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAcxD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAA4B,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,IAAI,EAAE;IACxD,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,GAAG,SAAS,CAYrB;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAwBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKvE;AAwBD,qBAAa,eAAgB,YAAW,WAAW;IAMrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IACtE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAElE,YAA6B,OAAO,GAAE,sBAA2B,EAShE;IAEK,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwC9D;YAEa,cAAc;IA8HtB,KAAK,CAAC,OAAO,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,eAAe,CAAC,CAiB3B;IAED;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAepE;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAY7B;IAED,OAAO,CAAC,QAAQ;IA0BhB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,GAAG;IAIX;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;IAmB1B;;;OAGG;YACW,iBAAiB;YA0BjB,SAAS;YAOT,cAAc;YAsCd,cAAc;IA6C5B,OAAO,CAAC,YAAY;IAQpB;;;OAGG;YACW,mBAAmB;IAoBjC,OAAO,CAAC,QAAQ;CAajB;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAMT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAQpE;AAuGD,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,CAExE"}
+{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../../src/internal/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAOL,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAMnE,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,KAAK,CAAC,CAAC,OAAO,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,iBAAiB,EACf,cAAc,GACd,gBAAgB,GAChB,SAAS,GACT,OAAO,GACP,iBAAiB,GACjB,YAAY,GACZ,mBAAmB,GACnB,WAAW,GACX,OAAO,CACV,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAcxD;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,EAAE,MAA4B,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,IAAI,EAAE;IACxD,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,GAAG,SAAS,CAYrB;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAwBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKvE;AAwBD,qBAAa,eAAgB,YAAW,WAAW;IAMrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IACtE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAElE,YAA6B,OAAO,GAAE,sBAA2B,EAShE;IAEK,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwC9D;YAEa,cAAc;IA8HtB,KAAK,CAAC,OAAO,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,eAAe,CAAC,CAiB3B;IAED;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAepE;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAY7B;IAED,OAAO,CAAC,QAAQ;IA0BhB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,GAAG;IAIX;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;IAmB1B;;;OAGG;YACW,iBAAiB;YA6BjB,SAAS;YAOT,cAAc;YAsCd,cAAc;IA6C5B,OAAO,CAAC,YAAY;IAQpB;;;OAGG;YACW,mBAAmB;IAoBjC,OAAO,CAAC,QAAQ;CAajB;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAMT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAQpE;AAiGD,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,CAExE"}

package/dist/internal/sdk-runner.js

@@ -21,6 +21,8 @@ import { DEFAULT_MODEL, } from "../types.js";
 import { mapSdkTokenUsage, usageTokenSum } from "./cloud-turn-cost.js";
 import { resolveApiKeySync } from "./cursor/credentials.js";
 import { describeError } from "./describe-error.js";
+import { CLI_COMMAND_NAME as CLI } from "./distribution.js";
+import { sleep } from "./sleep.js";
 /**
  * How long a non-`--dev` serve holds workspace scans (rules, skills,
  * `AGENTS.md`, ignore files). The SDK default is 20s for an editor whose
@@ -349,7 +351,7 @@ export class CursorSdkRunner {
     requireApiKey() {
         const resolved = resolveApiKeySync({ apiKey: this.options.apiKey });
         if (resolved === undefined) {
-            throw new Error("The Cursor SDK runner requires a Cursor credential: run `agent-serve login`, set CURSOR_API_KEY or CURSOR_API_KEY_FILE, or pass serve({ apiKey }).");
+            throw new Error(`The Cursor SDK runner requires a Cursor credential: run \`${CLI} login\`, set CURSOR_API_KEY or CURSOR_API_KEY_FILE, or pass serve({ apiKey }).`);
         }
         return resolved.apiKey;
     }
@@ -372,7 +374,9 @@ export class CursorSdkRunner {
             // microtask, no thenable assimilation), exactly as before the mirror
             // existed.
             const store = (_a = this.options.store) !== null && _a !== void 0 ? _a : (yield this.getStore(request.runnerStateDir));
-            return Object.assign(Object.assign(Object.assign({}, this.buildSharedOptions(request)), (request.tools === undefined ? {} : { tools: request.tools })), { local: Object.assign({ cwd: request.workspaceDir, settingSources: ["project"], store }, (request.sandbox === true
+            return Object.assign(Object.assign(Object.assign(Object.assign({}, this.buildSharedOptions(request)), (request.tools === undefined ? {} : { tools: request.tools })), (request.disallowedTools === undefined
+                ? {}
+                : { disallowedTools: request.disallowedTools })), { local: Object.assign({ cwd: request.workspaceDir, settingSources: ["project"], store }, (request.sandbox === true
                     ? { sandboxOptions: { enabled: true } }
                     : {})) });
         });
@@ -575,11 +579,6 @@ function fillMissingCloudUsage(agent, runId, outcome) {
         return outcome;
     });
 }
-function sleep(ms) {
-    return new Promise((resolve) => {
-        setTimeout(resolve, ms);
-    });
-}
 export function runErrorMessage(result) {
     var _a, _b;
     return ((_b = (_a = result.error) === null || _a === void 0 ? void 0 : _a.message) === null || _b === void 0 ? void 0 : _b.trim()) || "The Cursor agent run failed";

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoCH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAyFrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAyCpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAWpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAgB/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAmCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CA2gC3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoDH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AA2FrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AA8CpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AASpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAgB/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAmCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAmmC3B"}

package/dist/internal/server.js

@@ -35,14 +35,16 @@ import { Buffer } from "node:buffer";
 import { once } from "node:events";
 import { createServer, } from "node:http";
 import { join } from "node:path";
+import { CURSOR_BITBUCKET_REPOS_HEADER, } from "../channels/bitbucket/api.js";
+import { getBitbucketCursorAccountRuntime, resolveCursorBitbucketProxyUrl, } from "../channels/bitbucket/cursor-account.js";
 import { dispatchDeploymentEvent, getDeploymentsChannelOptions, } from "../channels/deployments/deployments-channel.js";
 import { createCursorAccountGithubTokenResolver, createCursorGithubProxyHostResolver, cursorGithubPermissionsForChannel, getGithubCursorAccountRuntime, resolveCursorGithubCredentialScope, resolveCursorGithubPermissions, resolveCursorGithubProxyUrl, } from "../channels/github/cursor-account.js";
 import { findGitHubChannelTargets } from "../channels/github/forward.js";
+import { CURSOR_GITLAB_PROJECTS_HEADER, } from "../channels/gitlab/api.js";
+import { getGitLabCursorAccountRuntime, resolveCursorGitLabProxyUrl, } from "../channels/gitlab/cursor-account.js";
 import { getOriginCursorAccountRuntime, parseCursorOriginRepoScope, } from "../channels/origin/cursor-account.js";
 import { findOriginChannelTargets } from "../channels/origin/origin-channel.js";
 import { allowAll, bearerAuth, localDevStrict } from "../channels.js";
-import { InvalidAsOfError, VacuousTimeArgsError } from "./as-of.js";
-import { V2EngineError } from "./continuation-identity.js";
 import { selectConversationMirror } from "./conversation-mirror.js";
 import { CursorAccountMcpBridge, collectCursorAccountConnections, cursorAccountMcpPath, } from "./cursor/account-mcp.js";
 import { CursorBackendClient } from "./cursor/backend-client.js";
@@ -56,6 +58,7 @@ import { formatDiagnostics, hasErrorDiagnostics, projectInfo, } from "./discover
 import { packageVersion } from "./distribution.js";
 import { docsSiteExists, ensureDocsSiteBundle, renderDocsFile, } from "./docs-site.js";
 import { EvalRunConflictError, EvalRunEmptyError, EvalRunNotRunningError, EvalRunStore, EvalRunUnknownError, } from "./eval-run-store.js";
+import { GUEST_NETWORK_PATH, guestNetworkReadinessResponse, } from "./guest-network.js";
 import { collectGitHubTriggerTargets, collectOriginTriggerTargets, handleAgentServeTrigger, } from "./handleAgentServeTrigger.js";
 import { createHostPlatforms, warmupHostGitHubAuth } from "./host-platforms.js";
 import { registerHostedDeliveryRoute } from "./hosted-delivery.js";
@@ -72,7 +75,7 @@ import { isLoopbackAddress } from "./net.js";
 import { createOtelCollector } from "./otel/collector.js";
 import { pickAuthoredOtel, resolveOtelConfig } from "./otel/config.js";
 import { instrumentHttp } from "./otel/http.js";
-import { createOtelRuntime, shutdownOtelRuntime } from "./otel/runtime.js";
+import { createOtelRuntime, forceFlushOtelRuntime, shutdownOtelRuntime, } from "./otel/runtime.js";
 import { collectPeerConnections } from "./peer-connections.js";
 import { PLATFORM_SCHEDULE_CATALOG_FILENAME, syncHostedPlatformSchedules, } from "./platform-schedule-sync.js";
 import { createCursorHostedPlatformTimers } from "./platform-timers.js";
@@ -80,12 +83,13 @@ import { renderAgentsIndexHtml, renderPlaygroundAsset, renderPlaygroundIndexHtml
 import { ensurePlaygroundBundle, playgroundDevBaseFromEnv, playgroundDevBasePath, startPlaygroundDevServer, } from "./playground/toolchain.js";
 import { collectMemoryHealthFields, sumEventLogStats, } from "./process-memory-telemetry.js";
 import { ReminderRunner, ReminderValidationError, UnknownReminderError, } from "./reminder-runner.js";
+import { mapThrownRequestError } from "./request-error-status.js";
 import { assertAccountConnectionsNotAnonymous, resolveMountConnections, validateMountConnectionsConfig, } from "./resolved-connections.js";
 import { Router } from "./router.js";
 import { RuntimeDispatchingRunner } from "./runtime-dispatch-runner.js";
 import { ScheduleRunner, UnknownScheduleError } from "./schedule-runner.js";
 import { CursorSdkRunner } from "./sdk-runner.js";
-import { InvalidContinuationTokenError, SessionAuthError, SessionBusyError, SessionEngine, ToolInputError, ToolNotDirectlyCallableError, UnknownToolError, WorkspaceUnavailableError, } from "./session-engine.js";
+import { InvalidContinuationTokenError, SessionEngine, ToolInputError, ToolNotDirectlyCallableError, UnknownToolError, WorkspaceUnavailableError, } from "./session-engine.js";
 import { registerSessionRunFatalFlush, selectSessionRunLogStore, unregisterSessionRunFatalFlush, } from "./session-run-log.js";
 import { sessionUrlsForRequest } from "./session-urls.js";
 import { flushLocalStartLog, selectStartLogStore } from "./start-log-store.js";
@@ -140,6 +144,7 @@ export function startServer(mounts_1) {
         const playground = (_j = options.playground) !== null && _j !== void 0 ? _j : true;
         const hosted = options;
         const noControlPlane = hosted.noControlPlane === true;
+        const scmProxyRequested = hosted.cursorScmProxy === true || hosted.cursorGithubProxy === true;
         const runSchedules = (_k = options.schedules) !== null && _k !== void 0 ? _k : !dev;
         const runReminders = (_l = options.reminders) !== null && _l !== void 0 ? _l : !dev;
         // CURSOR_AGENTKIT_VERSION is still the env the SDK reads when building
@@ -151,15 +156,13 @@ export function startServer(mounts_1) {
             name: m.project.name,
             otel: m.project.otel,
         })));
-        const otelRuntime = createOtelRuntime(resolveOtelConfig({
+        const resolveOtelExport = () => resolveOtelConfig({
             authored: authoredOtel,
             serve: options.otel,
-        }), logger);
-        if (otelRuntime === undefined &&
-            options.otel !== false &&
-            authoredOtel !== undefined) {
-            logger("[agent-sdk] otel: agent/otel.ts present but no OTLP exporters configured (set exporters or OTEL_EXPORTER_OTLP_ENDPOINT)");
-        }
+        });
+        const otelRuntime = createOtelRuntime(resolveOtelExport(), logger, {
+            resolveExport: resolveOtelExport,
+        });
         const cursorGithubTargets = collectCursorGithubTargets(mounts);
         const cursorOriginTargets = collectCursorOriginTargets(mounts);
         const cursorGithubConfig = resolveCursorGithubEventConfig({
@@ -176,7 +179,7 @@ export function startServer(mounts_1) {
         // One resolution for every Cursor credential consumer (SDK runner, account
         // MCP bridge, SCM event relay, GitHub credentials): explicit option →
         // CURSOR_API_KEY → CURSOR_API_KEY_FILE (or the hosted default path) →
-        // stored `agent-serve login`. SDK / GitHub / account MCP re-read later;
+        // stored `agent-sdk login`. SDK / GitHub / account MCP re-read later;
         // Slack and deployment-event relays capture the key at start.
         const accountKey = yield resolveApiKey(options.apiKey === undefined ? {} : { apiKey: options.apiKey });
         // First present source wins (we define the order): option → env → file →
@@ -207,7 +210,7 @@ export function startServer(mounts_1) {
         // through github-proxy exactly like channel Octokit calls.
         let hostGithubProxyResolver;
         if (cursorGithubTargets.length > 0) {
-            const githubProxyRequested = hosted.cursorGithubProxy === true;
+            const githubProxyRequested = scmProxyRequested;
             const needsGithubAuth = cursorGithubConfig.scope !== undefined || githubProxyRequested;
             if (needsGithubAuth) {
                 const currentGithubApiKey = () => {
@@ -307,6 +310,73 @@ export function startServer(mounts_1) {
                 }
             }
         }
+        // GitLab `cursorAccount` channels: `ctx.gitlab` routes through the SCM
+        // proxy in proxy mode. Without `--cursor-scm-proxy` the runtime stays
+        // unbound and the handle falls back to direct `GITLAB_TOKEN` access.
+        if (scmProxyRequested) {
+            const gitlabProxyUrl = resolveCursorGitLabProxyUrl(cursorExternalApiUrl());
+            let gitlabTargets = 0;
+            for (const mount of mounts) {
+                for (const channel of mount.project.channels) {
+                    const runtime = getGitLabCursorAccountRuntime(channel.definition);
+                    if (runtime === undefined) {
+                        continue;
+                    }
+                    gitlabTargets += 1;
+                    const transport = Object.assign({ apiBaseUrl: gitlabProxyUrl }, (runtime.scope === undefined
+                        ? {}
+                        : {
+                            headers: {
+                                [CURSOR_GITLAB_PROJECTS_HEADER]: runtime.scope.projects.join(","),
+                            },
+                        }));
+                    runtime.credentials.bind(() => __awaiter(this, void 0, void 0, function* () {
+                        const apiKey = liveCursorApiKey();
+                        if (apiKey === undefined) {
+                            throw new Error(`gitlabChannel({ cursorAccount }) has no Cursor credential yet. ${SIGN_IN_HINT}`);
+                        }
+                        return apiKey;
+                    }));
+                    runtime.credentials.bindProxyTransport(transport);
+                }
+            }
+            if (gitlabTargets > 0) {
+                logger(`[agent-sdk] GitLab auth: channel API calls route through ${gitlabProxyUrl}`);
+            }
+            // Bitbucket `cursorAccount` channels: same shape, `/v0/bitbucket-proxy`
+            // with `x-cursor-bitbucket-repos` scope. The proxy picks Cloud 2.0 or
+            // the DC host's 1.0 upstream per tenant; the pack picks the dialect
+            // from the delivery payload.
+            const bitbucketProxyUrl = resolveCursorBitbucketProxyUrl(cursorExternalApiUrl());
+            let bitbucketTargets = 0;
+            for (const mount of mounts) {
+                for (const channel of mount.project.channels) {
+                    const runtime = getBitbucketCursorAccountRuntime(channel.definition);
+                    if (runtime === undefined) {
+                        continue;
+                    }
+                    bitbucketTargets += 1;
+                    const transport = Object.assign({ apiBaseUrl: bitbucketProxyUrl }, (runtime.scope === undefined
+                        ? {}
+                        : {
+                            headers: {
+                                [CURSOR_BITBUCKET_REPOS_HEADER]: runtime.scope.repos.join(","),
+                            },
+                        }));
+                    runtime.credentials.bind(() => __awaiter(this, void 0, void 0, function* () {
+                        const apiKey = liveCursorApiKey();
+                        if (apiKey === undefined) {
+                            throw new Error(`bitbucketChannel({ cursorAccount }) has no Cursor credential yet. ${SIGN_IN_HINT}`);
+                        }
+                        return apiKey;
+                    }));
+                    runtime.credentials.bindProxyTransport(transport);
+                }
+            }
+            if (bitbucketTargets > 0) {
+                logger(`[agent-sdk] Bitbucket auth: channel API calls route through ${bitbucketProxyUrl}`);
+            }
+        }
         const resolvedCursorGithubCredentials = cursorGithubCredentials;
         const hostGithubToken = hostGithubProxyResolver !== null && hostGithubProxyResolver !== void 0 ? hostGithubProxyResolver : (resolvedCursorGithubCredentials === undefined
             ? undefined
@@ -387,16 +457,22 @@ export function startServer(mounts_1) {
         }
         let runner = sdkRunner;
         if (hasGrokBotMounts && options.runner === undefined) {
+            // Cursor-internal client, left out of the npm tarball (`files`); loaded
+            // only when a mount needs it, so a published install fails here, before
+            // listen, rather than on the first turn.
+            const { GrokBotRunner } = yield import("./grokbot/runner.js").catch(() => {
+                throw new Error('runtime: "grokbot" is not available in the published @cursor/july package');
+            });
             runner = new RuntimeDispatchingRunner({
                 sdkRunner,
-                grokbot: Object.assign(Object.assign({}, (options.apiKey === undefined || options.apiKey.trim() === ""
-                    ? {}
-                    : { apiKey: options.apiKey })), { 
+                grokbot: new GrokBotRunner({
+                    apiKey: options.apiKey,
                     // `/v0/grokbot` lives on the external API (api.cursor.com), not
                     // api2. Prefer that default over the account key's backendUrl.
                     // Do not pass stored login as apiKey: that would pin it as an
                     // option and beat a later CURSOR_API_KEY_FILE bind.
-                    backendUrl: cursorExternalApiUrl() }),
+                    backendUrl: cursorExternalApiUrl(),
+                }),
             });
             logger("[agent-sdk] grokbot runtime: remote client (turns run on the hosted Grok Bot harness)");
         }
@@ -535,7 +611,7 @@ export function startServer(mounts_1) {
                 multi,
                 logger,
                 logRing, diagStateRoot: baseStateRoot, sessionRunLog,
-                flushStartLog }, (options.authToken === undefined
+                flushStartLog, flushOtel: () => forceFlushOtelRuntime(otelRuntime) }, (options.authToken === undefined
                 ? {}
                 : { authToken: options.authToken })), (options.allowAnonymous === true ? { allowAnonymous: true } : {})), (accountRefs !== undefined && accountBridge !== undefined
                 ? { accountBridge, accountRefs }
@@ -663,7 +739,6 @@ export function startServer(mounts_1) {
             })),
         });
         const collectGitHubTargets = () => collectGitHubTargetsFrom(runtimes);
-        const collectOriginTargets = () => collectOriginTargetsFrom(runtimes);
         const v1Runtimes = runtimes.filter((runtime) => !isV2Project(runtime.project));
         const v2Runtimes = runtimes.filter((runtime) => isV2Project(runtime.project));
         const v1Mounts = mounts.filter((mount) => !isV2Project(mount.project));
@@ -1004,7 +1079,7 @@ function mountAgentRoutes(router, runtime, args) {
                 runtime,
                 channelId,
                 hostedSessionId,
-            }), drainSessionDurability: (sessionId) => engine.drainSessionDurability(sessionId) }, (args.diagStateRoot === undefined
+            }), drainSessionDurability: (sessionId) => engine.drainSessionDurability(sessionId), flushOtel: args.flushOtel }, (args.diagStateRoot === undefined
             ? {}
             : { stateRoot: args.diagStateRoot })), (sessionRunLog === undefined
             ? {}
@@ -1041,6 +1116,15 @@ function mountAgentRoutes(router, runtime, args) {
         // version from the process that will serve turns, with no second request.
         handler: () => jsonResponse(Object.assign({ ok: true, name: project.name, version: packageVersion() }, memoryHealthFields([engine]))),
     });
+    // TAS polls this after `/v1/health` and before the hosted POST. Auth none
+    // mirrors health: the engine is reachable only through the anyrun port
+    // proxy (network token) or the alias route.
+    router.add({
+        method: "GET",
+        pattern: `${base}${GUEST_NETWORK_PATH}`,
+        auth: "none",
+        handler: () => guestNetworkReadinessResponse(),
+    });
     // Bootstrap the SPA can't derive from its own URL (agent name, dev mode, and
     // — in multi-agent mode — where the agents index lives).
     router.add({
@@ -2038,11 +2122,11 @@ function startCursorDeploymentRelay(input) {
             logger("[agent-sdk] deployment-events: skipped while unsigned; long-poll relays need a key at start");
             return undefined;
         }
-        throw new Error(`This project has channels subscribed to deployment events (deploymentsChannel({ deploySourceUris })) but the host is not signed in to Cursor. ${SIGN_IN_HINT}`);
+        throw new Error(`This project has channels subscribed to deployment events (deploymentsChannel({ ... })) but the host is not signed in to Cursor. ${SIGN_IN_HINT}`);
     }
     // Union is re-resolved on each heartbeat and fan-out so a channel that
-    // refreshes `deploySourceUris` after start (Change Monitor lists the
-    // team's sources every 10 minutes) registers the new URIs.
+    // fills `deploySourceUris` after start registers the new URIs. This wire
+    // names every source, so a channel that omits the option registers nothing.
     const initial = liveDeploymentSubscriptionUnion(targets);
     if (initial.length === 0) {
         logger(`[agent-sdk] deployment-events: no deploy sources yet on ${targets
@@ -2134,18 +2218,9 @@ function handleRequest(router, req, res, logger) {
             }
         }
         catch (error) {
-            if (error instanceof SessionBusyError) {
-                response = errorResponse(409, "session_busy", error.message);
-            }
-            else if (error instanceof V2EngineError) {
-                response = errorResponse(409, "v2_identity_conflict", "Control-plane session identity conflicts with existing state.");
-            }
-            else if (error instanceof SessionAuthError) {
-                response = errorResponse(403, "forbidden", error.message);
-            }
-            else if (error instanceof InvalidAsOfError ||
-                error instanceof VacuousTimeArgsError) {
-                response = errorResponse(400, "invalid_request", error.message);
+            const mapped = mapThrownRequestError(error);
+            if (mapped !== undefined) {
+                response = errorResponse(mapped.status, mapped.code, mapped.message);
             }
             else {
                 logger(`[agent-sdk] request failed: ${error instanceof Error

package/dist/internal/session-cost.d.ts

@@ -1,7 +1,7 @@
 /**
  * Per-session cost metrics folded from a durable session event stream.
  *
- * Powers `agent-serve cost [sessionId]`: each `turn.completed` event carries
+ * Powers `agent-sdk cost [sessionId]`: each `turn.completed` event carries
  * the turn's token usage and the estimated dollar cost recorded by the
  * engine via `POST /v1/models/estimate-cost`, so a session's spend is a
  * pure fold over its `events.ndjson`. `GET /v1/session/:id/cost` is the
@@ -36,7 +36,7 @@ export declare function emptySessionCostTotals(): SessionCostTotals;
 export declare function addSessionCostTotals(target: SessionCostTotals, delta: SessionCostTotals): void;
 /** Fold a session event stream into per-turn and total cost metrics. */
 export declare function buildSessionCostReport(events: readonly SessionEvent[]): SessionCostReport;
-/** Per-turn table for `agent-serve cost <sessionId>`. */
+/** Per-turn table for `agent-sdk cost <sessionId>`. */
 export declare function formatSessionCostText(report: SessionCostReport): string;
 export interface SessionCostRow {
     sessionId: string;
@@ -45,6 +45,6 @@ export interface SessionCostRow {
     updatedAt?: string;
     totals: SessionCostTotals;
 }
-/** All-sessions table for `agent-serve cost` (no session id). */
+/** All-sessions table for `agent-sdk cost` (no session id). */
 export declare function formatSessionsCostText(rows: SessionCostRow[]): string;
 //# sourceMappingURL=session-cost.d.ts.map

package/dist/internal/session-cost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-cost.d.ts","sourceRoot":"","sources":["../../src/internal/session-cost.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGrE,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,CAW1D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,iBAAiB,GACvB,IAAI,CASN;AAED,wEAAwE;AACxE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,iBAAiB,CAyCnB;AAMD,yDAAyD;AACzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA4CvE;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,MAAM,CAsCrE"}
+{"version":3,"file":"session-cost.d.ts","sourceRoot":"","sources":["../../src/internal/session-cost.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGrE,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,CAW1D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,iBAAiB,GACvB,IAAI,CASN;AAED,wEAAwE;AACxE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,iBAAiB,CAyCnB;AAMD,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA4CvE;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,MAAM,CAsCrE"}

package/dist/internal/session-cost.js

@@ -1,7 +1,7 @@
 /**
  * Per-session cost metrics folded from a durable session event stream.
  *
- * Powers `agent-serve cost [sessionId]`: each `turn.completed` event carries
+ * Powers `agent-sdk cost [sessionId]`: each `turn.completed` event carries
  * the turn's token usage and the estimated dollar cost recorded by the
  * engine via `POST /v1/models/estimate-cost`, so a session's spend is a
  * pure fold over its `events.ndjson`. `GET /v1/session/:id/cost` is the
@@ -76,7 +76,7 @@ export function buildSessionCostReport(events) {
 function formatCount(value) {
     return String(value);
 }
-/** Per-turn table for `agent-serve cost <sessionId>`. */
+/** Per-turn table for `agent-sdk cost <sessionId>`. */
 export function formatSessionCostText(report) {
     const lines = [];
     lines.push(`session ${report.sessionId || "(unknown)"}  cost: ${formatCostUsd(report.totals.costUsd)}`);
@@ -120,7 +120,7 @@ export function formatSessionCostText(report) {
     appendUnpricedNote(lines, report.totals.unpricedTurns);
     return `${lines.join("\n")}\n`;
 }
-/** All-sessions table for `agent-serve cost` (no session id). */
+/** All-sessions table for `agent-sdk cost` (no session id). */
 export function formatSessionsCostText(rows) {
     if (rows.length === 0) {
         return "No sessions.\n";

package/dist/internal/session-engine.d.ts

@@ -157,8 +157,8 @@ export declare class SessionEngine {
     private readonly restoreInFlight;
     /** Once-per-process cache for the A/B snapshot backfill (see abSnapshot). */
     private restoredAbSnapshot;
-    /** In-flight skills → Agent Store sync (see ensureCloudSkillsSynced). */
-    private cloudSkillsSync;
+    /** In-flight authored files → Agent Store syncs (see syncToCloudStore). */
+    private readonly cloudSyncs;
     private readonly runner;
     private readonly logger;
     private readonly logs;
@@ -236,6 +236,12 @@ export declare class SessionEngine {
     private readonly cloudCostBackfillDone;
     /** Deduped in-flight cloud cost backfills, keyed by session id. */
     private readonly cloudCostBackfill;
+    /** Per-session FileSystem handle cache (not a tree snapshot). */
+    private readonly sessionRoots;
+    /** In-flight factory resolves, so the first turn and a racing callTool share one handle. */
+    private readonly sessionRootInflight;
+    /** Per-turn `unionFs({ "/": authored, "/tmp": tempFs() })`. Dropped at end of turn. */
+    private readonly turnRoots;
     constructor(options: SessionEngineOptions);
     /**
      * Attach serve-time resolved connections (peers, Cursor account bridge).
@@ -252,9 +258,9 @@ export declare class SessionEngine {
     /** Shared host services (MCP / GitHub / Slack / reminders / evals / kv / files / otel / Slack nudges). */
     get host(): HostContext;
     /**
-     * Host services with `files` bound to one session, so a relative path in a
-     * tool or hook resolves to that session's scope and can never be read as
-     * another session's. Unbound (no session) keeps `host.files` usable for
+     * Host services with `files` and `otel` bound to one session, so a relative
+     * path resolves to that session's scope and can never read another
+     * session's. Unbound (no session) keeps `host.files` usable for
      * `{ scope: "deployment" }` and fails loudly on session-scoped calls.
      */
     private hostForSession;
@@ -417,6 +423,22 @@ export declare class SessionEngine {
      */
     getContinuationLastBotMessageTs(channelId: string, continuationToken: string): Promise<string | undefined>;
     interruptContinuation(channelId: string, continuationToken: string): Promise<boolean>;
+    private hasRootOverride;
+    /**
+     * FileSystem for this turn or `callTool`. Authored `root` (static or
+     * factory) is cached per session when `cache` is set; unscoped
+     * `callTool` passes the invocation id and does not cache, so factories
+     * cannot share one tree across callers. A static handle is used as
+     * authored — every session sees that same object. Host-default agents
+     * get `localFileSystem` against the harness cwd — same path verbs as
+     * the Cursor SDK natives, always through the synthesized tools.
+     */
+    private resolveFileSystem;
+    private resolveAuthoredFileSystem;
+    private dropTurnFileSystem;
+    private prepareScratchToolInput;
+    private withTurnScratchTools;
+    private nativeFileSystemOutcome;
     /**
      * Local harness cwd for a session: per-send override, else the shared
      * `agent.local.workspaceDir`, else `<agent.local.cwd>/<sessionId>`, else
@@ -449,24 +471,33 @@ export declare class SessionEngine {
      * first-turn S3 scan can discover them. False when the sync fails: the
      * turn then runs without store skills rather than pointing discovery at
      * paths that do not exist.
-     *
-     * With skills authored, every first cloud turn re-copies the authored
+     */
+    private ensureCloudSkillsSynced;
+    /**
+     * Sync `agent/sandbox/workspace/**` seeds onto the Agent Store at
+     * `workspace/…` (hosted) or `agent-serve/<agent>/workspace/…`
+     * (personal-key local+cloud) before the first cloud prompt, which names
+     * the mounted directory (see buildCloudWorkspaceSection).
+     */
+    private ensureCloudWorkspaceSynced;
+    /**
+     * With files authored, every first cloud turn re-copies the authored
      * bytes and the memo only dedupes concurrent first turns. The mount is
      * writable from cloud sessions, so a once-per-process copy would let one
      * session's edits masquerade as agent definition for every later session
      * until the engine restarts; re-syncing keeps the store true to discovery
      * the same way local materialization always rewrites skills. Without
-     * skills the sync is best-effort stale cleanup and one attempt per
-     * process is enough, success or not — a deployment without the files
+     * authored files the sync is best-effort stale cleanup and one attempt
+     * per process is enough, success or not — a deployment without the files
      * surface must not fail and log on every new session for a feature it
      * does not use.
      */
-    private ensureCloudSkillsSynced;
+    private syncToCloudStore;
     /**
      * Hosted deployments own the deployment store. Local `serve`/`run` with
      * a personal API key writes into the USER store under `agent-serve/`.
      */
-    private cloudSkillsStore;
+    private cloudStore;
     private buildTurnRequest;
     /**
      * Connection names a cloud turn can only reach through the host connection
@@ -523,6 +554,12 @@ export declare class SessionEngine {
     hasActiveTurn(sessionId: string): boolean;
     callActiveServerTool(sessionId: string, toolName: string, input: unknown): Promise<SDKCustomToolResult>;
     private executeServerTool;
+    /**
+     * Bind outbound inject (Factory / Cursor API `traceparent`) to the
+     * turn span for the whole harness run. Host files / VFS RPCs happen
+     * here, not under `runInCall`. No-op when OTel is off.
+     */
+    private runTurnExecute;
     /**
      * Bind outbound inject (Factory / Cursor API `traceparent`) to the
      * tool span. No-op when OTel is off.