@cursor/july 0.1.105 → 0.1.107

package/dist/internal/reminder-store.d.ts

@@ -2,14 +2,19 @@
  * Reminder document store used by the local control plane
  * (`<stateRoot>/control-plane/reminders/`).
  *
- * Handlers (`run` / function `until`) are not serializable — they live only
- * in the in-memory {@link ReminderRunner} registry. The control plane holds
- * schedule, prompt, target, and status so prompt-form reminders survive
- * restart.
+ * Anonymous `run` / function `until` handlers are not serializable — they live
+ * only in the in-memory {@link ReminderRunner} registry. Named `handler` +
+ * `args` and prompt-form reminders survive restart (handlers resolve from
+ * `agent/reminders/` on every fire).
  */
-import type { ReminderBusyPolicy, ReminderScheduleKind, ReminderStatus } from "../types.js";
+import type { JsonObject, ReminderBusyPolicy, ReminderScheduleKind, ReminderStatus } from "../types.js";
 export declare const REMINDER_SNAPSHOT_VERSION: 1;
 export type { ReminderBusyPolicy, ReminderScheduleKind, ReminderStatus, } from "../types.js";
+/**
+ * Internal record status. `firing` is CP claim state and must not appear on
+ * public {@link ReminderStatus} / {@link ReminderInfo}.
+ */
+export type ReminderRecordStatus = ReminderStatus | "firing";
 /** Serializable reminder record (no function bodies). */
 export interface ReminderRecord {
     version: typeof REMINDER_SNAPSHOT_VERSION;
@@ -25,8 +30,15 @@ export interface ReminderRecord {
     /** Raw schedule value: every/delay string, cron expression, or ISO `at`. */
     scheduleValue: string;
     intervalMs?: number;
-    /** Prompt form — mutually exclusive with in-memory `run`. */
+    /** Prompt form — mutually exclusive with `handler` and in-memory `run`. */
     prompt?: string;
+    /**
+     * Named handler stem (`agent/reminders/<name>.ts`). Mutually exclusive with
+     * `prompt` and in-memory `run`.
+     */
+    handler?: string;
+    /** Serializable args for {@link handler}. */
+    args?: JsonObject;
     /**
      * True when create() registered a `run` handler. Handlers are not
      * serializable; after restart, armed records with this flag and no live
@@ -38,9 +50,14 @@ export interface ReminderRecord {
     /** Natural-language until (agent-facing); function until is in-memory only. */
     untilPrompt?: string;
     busyPolicy: ReminderBusyPolicy;
-    status: ReminderStatus;
+    status: ReminderRecordStatus;
     disarmReason?: string;
     fireCount: number;
+    /**
+     * CAS generation. Cancel/rekey and successful outcome apply bump this so
+     * in-flight outcomes cannot resurrect a superseded reminder.
+     */
+    generation?: number;
     nextFireAtMs: number;
     createdAt: string;
     updatedAt: string;

package/dist/internal/reminder-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reminder-store.d.ts","sourceRoot":"","sources":["../../src/internal/reminder-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAEpD,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,yBAAyB,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,oBAAoB,CAAC;IACnC,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,yEAAyE;IACzE,UAAU,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAkBxE;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,MAAM,EAAI;IAEhD,OAAO,CAAC,QAAQ;IAIV,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAEhC;IAEK,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAiBtC;IAEK,SAAS,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAG3C;IAEK,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAsBzD;IAEK,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhD;IAEK,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtC;CACF"}
+{"version":3,"file":"reminder-store.d.ts","sourceRoot":"","sources":["../../src/internal/reminder-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAEpD,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE7D,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,yBAAyB,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,oBAAoB,CAAC;IACnC,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,yEAAyE;IACzE,UAAU,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAkBxE;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,MAAM,EAAI;IAEhD,OAAO,CAAC,QAAQ;IAIV,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAEhC;IAEK,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAiBtC;IAEK,SAAS,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAI3C;IAEK,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAsBzD;IAEK,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhD;IAEK,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtC;CACF"}

package/dist/internal/reminder-store.js

@@ -2,10 +2,10 @@
  * Reminder document store used by the local control plane
  * (`<stateRoot>/control-plane/reminders/`).
  *
- * Handlers (`run` / function `until`) are not serializable — they live only
- * in the in-memory {@link ReminderRunner} registry. The control plane holds
- * schedule, prompt, target, and status so prompt-form reminders survive
- * restart.
+ * Anonymous `run` / function `until` handlers are not serializable — they live
+ * only in the in-memory {@link ReminderRunner} registry. Named `handler` +
+ * `args` and prompt-form reminders survive restart (handlers resolve from
+ * `agent/reminders/` on every fire).
  */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
@@ -74,7 +74,8 @@ export class ReminderStore {
     listArmed() {
         return __awaiter(this, void 0, void 0, function* () {
             const all = yield this.list();
-            return all.filter((r) => r.status === "armed");
+            // Treat in-flight claims as still armed for restart / listing purposes.
+            return all.filter((r) => r.status === "armed" || r.status === "firing");
         });
     }
     get(id) {

package/dist/internal/request-error-status.d.ts

@@ -1,7 +1,9 @@
+import { type HostedGuestRetryDisposition } from "./hosted-delivery-protocol.js";
 export interface MappedRequestError {
     status: 400 | 403 | 409 | 503;
     code: string;
     message: string;
+    retry: HostedGuestRetryDisposition;
 }
 /**
  * Expected throw → HTTP mapping used by `handleRequest` and hosted flush.

package/dist/internal/request-error-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-error-status.d.ts","sourceRoot":"","sources":["../../src/internal/request-error-status.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,SAAS,CA4ChC;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElE"}
+{"version":3,"file":"request-error-status.d.ts","sourceRoot":"","sources":["../../src/internal/request-error-status.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,+BAA+B,CAAC;AAGvC,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,2BAA2B,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,SAAS,CA8DhC;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElE"}

package/dist/internal/request-error-status.js

@@ -1,6 +1,7 @@
 import { InvalidAsOfError, VacuousTimeArgsError } from "./as-of.js";
 import { V2EngineError } from "./continuation-identity.js";
 import { GUEST_CONNECT_STALLED, GUEST_NETWORK_UNAVAILABLE, GuestNetworkUnavailableError, hasGuestNetworkErrno, isQuietGuestConnectStall, } from "./guest-network.js";
+import { HOSTED_GUEST_RETRY_TERMINAL, HOSTED_GUEST_RETRY_TRANSIENT, } from "./hosted-delivery-protocol.js";
 import { SessionAuthError, SessionBusyError } from "./session-engine.js";
 /**
  * Expected throw → HTTP mapping used by `handleRequest` and hosted flush.
@@ -8,21 +9,37 @@ import { SessionAuthError, SessionBusyError } from "./session-engine.js";
  */
 export function mapThrownRequestError(error) {
     if (error instanceof SessionBusyError) {
-        return { status: 409, code: "session_busy", message: error.message };
+        return {
+            status: 409,
+            code: "session_busy",
+            message: error.message,
+            retry: HOSTED_GUEST_RETRY_TRANSIENT,
+        };
     }
     if (error instanceof V2EngineError) {
         return {
             status: 409,
             code: "v2_identity_conflict",
             message: "Control-plane session identity conflicts with existing state.",
+            retry: HOSTED_GUEST_RETRY_TERMINAL,
         };
     }
     if (error instanceof SessionAuthError) {
-        return { status: 403, code: "forbidden", message: error.message };
+        return {
+            status: 403,
+            code: "forbidden",
+            message: error.message,
+            retry: HOSTED_GUEST_RETRY_TERMINAL,
+        };
     }
     if (error instanceof InvalidAsOfError ||
         error instanceof VacuousTimeArgsError) {
-        return { status: 400, code: "invalid_request", message: error.message };
+        return {
+            status: 400,
+            code: "invalid_request",
+            message: error.message,
+            retry: HOSTED_GUEST_RETRY_TERMINAL,
+        };
     }
     if (error instanceof GuestNetworkUnavailableError ||
         hasGuestNetworkErrno(error)) {
@@ -32,6 +49,7 @@ export function mapThrownRequestError(error) {
             message: error instanceof Error
                 ? error.message
                 : "Guest network is not ready for outbound requests.",
+            retry: HOSTED_GUEST_RETRY_TRANSIENT,
         };
     }
     if (isQuietGuestConnectStall(error)) {
@@ -41,6 +59,7 @@ export function mapThrownRequestError(error) {
             message: error instanceof Error
                 ? error.message
                 : "Guest Connect stalled without a network errno.",
+            retry: HOSTED_GUEST_RETRY_TRANSIENT,
         };
     }
     return undefined;

package/dist/internal/scm/pr-url.d.ts

@@ -1,8 +1,18 @@
 /**
  * Provider-neutral PR URL parse. GitHub.com plus the Origin page shapes
  * humans paste: cursor.com/codebase, review.cursor.com/pr, origin.cursor.com.
+ *
+ * {@link parseScmPrUrl} is the wider parse the review seams use: it also
+ * recognizes GitLab merge requests (`/-/merge_requests/<iid>` on any host),
+ * Bitbucket Cloud / Data Center pull requests, and GitHub Enterprise Server
+ * (`/<owner>/<repo>/pull/<n>` on a host that is none of the above). The
+ * narrow {@link parsePrUrl} keeps its github.com + Origin contract for the
+ * free-text callers (Slack `pr-ref`) where "any host with /pull/N" would be
+ * too eager.
  */
 export type PrProvider = "github" | "origin";
+/** Every SCM the review seams can address. */
+export type ScmPrProvider = PrProvider | "gitlab" | "bitbucket";
 export type ParsedPrUrl = {
     provider: PrProvider;
     owner: string;
@@ -10,5 +20,35 @@ export type ParsedPrUrl = {
     number: number;
     url: string;
 };
+export type ParsedScmPrUrl = {
+    provider: ScmPrProvider;
+    /**
+     * Namespace half of the repo: GitHub owner, GitLab group path (nested
+     * groups joined with `/`), Bitbucket workspace / project key (`~user`
+     * for Data Center personal repos).
+     */
+    owner: string;
+    repo: string;
+    number: number;
+    /** Canonical PR page URL. */
+    url: string;
+    /**
+     * Hostname the PR lives on (lowercase). `github.com` for dotcom, the
+     * GHES hostname for GitHub Enterprise, `gitlab.com` or the self-managed
+     * host for GitLab, `bitbucket.org` or the Data Center host for Bitbucket.
+     * Origin PRs report the Origin page host.
+     */
+    host: string;
+};
+/** github.com and Origin only — the contract free-text PR references use. */
 export declare function parsePrUrl(raw: string): ParsedPrUrl | undefined;
+/**
+ * Every provider shape, including GitHub Enterprise Server. The GitLab and
+ * Bitbucket path shapes are unambiguous on any host; a plain
+ * `/<owner>/<repo>/pull/<n>` on a host that is not github.com, Origin,
+ * GitLab, or Bitbucket is taken as GHES (the only remaining forge with that
+ * route). Callers that must not accept arbitrary hosts use
+ * {@link parsePrUrl}.
+ */
+export declare function parseScmPrUrl(raw: string): ParsedScmPrUrl | undefined;
 //# sourceMappingURL=pr-url.d.ts.map

package/dist/internal/scm/pr-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr-url.d.ts","sourceRoot":"","sources":["../../../src/internal/scm/pr-url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7C,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAuCF,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CA0C/D"}
+{"version":3,"file":"pr-url.d.ts","sourceRoot":"","sources":["../../../src/internal/scm/pr-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7C,8CAA8C;AAC9C,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAoDF,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAY/D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAyHrE"}

package/dist/internal/scm/pr-url.js

@@ -1,6 +1,14 @@
 /**
  * Provider-neutral PR URL parse. GitHub.com plus the Origin page shapes
  * humans paste: cursor.com/codebase, review.cursor.com/pr, origin.cursor.com.
+ *
+ * {@link parseScmPrUrl} is the wider parse the review seams use: it also
+ * recognizes GitLab merge requests (`/-/merge_requests/<iid>` on any host),
+ * Bitbucket Cloud / Data Center pull requests, and GitHub Enterprise Server
+ * (`/<owner>/<repo>/pull/<n>` on a host that is none of the above). The
+ * narrow {@link parsePrUrl} keeps its github.com + Origin contract for the
+ * free-text callers (Slack `pr-ref`) where "any host with /pull/N" would be
+ * too eager.
  */
 const ORIGIN_PAGE = /^origin(-[a-z0-9]+)?\.cursor\.com$/i;
 function positiveInt(raw) {
@@ -13,14 +21,18 @@ function positiveInt(raw) {
     }
     return n;
 }
-function parsed(provider, owner, repo, number) {
-    if (owner === undefined || repo === undefined || number === undefined) {
+function parsed(provider, host, owner, repo, number, url) {
+    if (owner === undefined ||
+        owner === "" ||
+        repo === undefined ||
+        repo === "" ||
+        number === undefined) {
         return undefined;
     }
-    const url = provider === "origin"
+    const canonical = url !== null && url !== void 0 ? url : (provider === "origin"
         ? `https://cursor.com/codebase/${owner}/${repo}/pull/${number}`
-        : `https://github.com/${owner}/${repo}/pull/${number}`;
-    return { provider, owner, repo, number, url };
+        : `https://${host}/${owner}/${repo}/pull/${number}`);
+    return { provider, owner, repo, number, url: canonical, host };
 }
 /** Strip Slack mrkdwn wrappers and trailing punctuation before `URL`. */
 function normalizeRaw(raw) {
@@ -29,7 +41,32 @@ function normalizeRaw(raw) {
         .replace(/^[<[]+/, "")
         .replace(/[>\].,;]+$/, "");
 }
+function isGithubDotCom(host) {
+    return host === "github.com" || host === "www.github.com";
+}
+/** github.com and Origin only — the contract free-text PR references use. */
 export function parsePrUrl(raw) {
+    const wide = parseScmPrUrl(raw);
+    if (wide === undefined) {
+        return undefined;
+    }
+    if (wide.provider === "origin") {
+        return Object.assign(Object.assign({}, wide), { provider: "origin" });
+    }
+    if (wide.provider === "github" && isGithubDotCom(wide.host)) {
+        return Object.assign(Object.assign({}, wide), { provider: "github" });
+    }
+    return undefined;
+}
+/**
+ * Every provider shape, including GitHub Enterprise Server. The GitLab and
+ * Bitbucket path shapes are unambiguous on any host; a plain
+ * `/<owner>/<repo>/pull/<n>` on a host that is not github.com, Origin,
+ * GitLab, or Bitbucket is taken as GHES (the only remaining forge with that
+ * route). Callers that must not accept arbitrary hosts use
+ * {@link parsePrUrl}.
+ */
+export function parseScmPrUrl(raw) {
     let url;
     try {
         url = new URL(normalizeRaw(raw));
@@ -37,29 +74,71 @@ export function parsePrUrl(raw) {
     catch (_a) {
         return undefined;
     }
+    if (url.protocol !== "https:" && url.protocol !== "http:") {
+        return undefined;
+    }
     const parts = url.pathname.split("/").filter(Boolean);
     const host = url.hostname.toLowerCase();
-    if ((host === "github.com" || host === "www.github.com") &&
-        parts.length >= 4 &&
-        parts[2] === "pull") {
-        return parsed("github", parts[0], parts[1], positiveInt(parts[3]));
-    }
     if (ORIGIN_PAGE.test(host) && parts.length >= 4 && parts[2] === "github") {
-        return parsed("origin", parts[0], parts[1], positiveInt(parts[3]));
+        return parsed("origin", host, parts[0], parts[1], positiveInt(parts[3]));
     }
     if ((host === "cursor.com" || host === "www.cursor.com") &&
         parts[0] === "codebase" &&
         parts.length >= 5 &&
         parts[3] === "pull") {
-        return parsed("origin", parts[1], parts[2], positiveInt(parts[4]));
+        return parsed("origin", host, parts[1], parts[2], positiveInt(parts[4]));
     }
     if (host === "review.cursor.com" && parts[0] === "pr") {
         if (parts.length >= 5 && parts[3] === "github") {
-            return parsed("origin", parts[1], parts[2], positiveInt(parts[4]));
+            return parsed("origin", host, parts[1], parts[2], positiveInt(parts[4]));
         }
         if (parts.length >= 4) {
-            return parsed("origin", parts[1], parts[2], positiveInt(parts[3]));
+            return parsed("origin", host, parts[1], parts[2], positiveInt(parts[3]));
         }
     }
+    // GitLab MR page: /<group>/[<subgroup>/…]<project>/-/merge_requests/<iid>
+    const separator = parts.indexOf("-");
+    if (separator >= 2 &&
+        parts[separator + 1] === "merge_requests" &&
+        parts.length >= separator + 3) {
+        const owner = parts.slice(0, separator - 1).join("/");
+        const repo = parts[separator - 1];
+        const number = positiveInt(parts[separator + 2]);
+        return parsed("gitlab", host, owner, repo, number, number === undefined
+            ? undefined
+            : `https://${host}/${owner}/${repo}/-/merge_requests/${number}`);
+    }
+    // Bitbucket Cloud: bitbucket.org/<workspace>/<slug>/pull-requests/<id>
+    if ((host === "bitbucket.org" || host === "www.bitbucket.org") &&
+        parts.length >= 4 &&
+        parts[2] === "pull-requests") {
+        const number = positiveInt(parts[3]);
+        return parsed("bitbucket", "bitbucket.org", parts[0], parts[1], number, number === undefined
+            ? undefined
+            : `https://bitbucket.org/${parts[0]}/${parts[1]}/pull-requests/${number}`);
+    }
+    // Bitbucket Data Center: [/<context>]/projects/<KEY>/repos/<slug>/pull-requests/<id>
+    // (personal repos: /users/<name>/repos/<slug>/…, full name `~name/slug`).
+    const dc = parts.findIndex((part, index) => (part === "projects" || part === "users") &&
+        parts[index + 2] === "repos" &&
+        parts[index + 4] === "pull-requests");
+    if (dc !== -1 && parts.length >= dc + 6) {
+        const number = positiveInt(parts[dc + 5]);
+        const owner = parts[dc] === "users" ? `~${parts[dc + 1]}` : parts[dc + 1];
+        const slug = parts[dc + 3];
+        const context = parts.slice(0, dc).join("/");
+        return parsed("bitbucket", host, owner, slug, number, number === undefined
+            ? undefined
+            : `${url.origin}/${context === "" ? "" : `${context}/`}${parts.slice(dc, dc + 4).join("/")}/pull-requests/${number}`);
+    }
+    // GitHub (dotcom or Enterprise Server): /<owner>/<repo>/pull/<n>. Checked
+    // last so the forge-specific shapes above win on shared hosts.
+    if (parts.length >= 4 &&
+        parts[2] === "pull" &&
+        !ORIGIN_PAGE.test(host) &&
+        !/(^|\.)cursor\.com$/.test(host)) {
+        const githubHost = isGithubDotCom(host) ? "github.com" : host;
+        return parsed("github", githubHost, parts[0], parts[1], positiveInt(parts[3]));
+    }
     return undefined;
 }

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoDH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AA2FrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AA8CpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AASpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAgB/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAmCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CA0mC3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoDH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAgGrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AA+CpE,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AASpE,OAAO,EAEL,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAsB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAgB/E,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAmCD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,yEAAyE;IACzE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAC5D,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CA4nC3B"}

package/dist/internal/server.js

@@ -62,6 +62,7 @@ import { GUEST_NETWORK_PATH, guestNetworkReadinessResponse, } from "./guest-netw
 import { collectGitHubTriggerTargets, collectOriginTriggerTargets, handleAgentServeTrigger, } from "./handleAgentServeTrigger.js";
 import { createHostPlatforms, warmupHostGitHubAuth } from "./host-platforms.js";
 import { registerHostedDeliveryRoute } from "./hosted-delivery.js";
+import { HOSTED_DELIVERY_HEADER, HOSTED_GUEST_RETRY_TERMINAL, hostedGuestErrorResponse, } from "./hosted-delivery-protocol.js";
 import { hostedErrorStackSnippet } from "./hosted-execution-diag.js";
 import { flushHostedExecutionProcessDeath } from "./hosted-execution-flush.js";
 import { buildHttpChannelRoutes, errorResponse, jsonResponse, readJsonObject, requireSessionOwner, } from "./http-channel.js";
@@ -82,7 +83,7 @@ import { createCursorHostedPlatformTimers } from "./platform-timers.js";
 import { renderAgentsIndexHtml, renderPlaygroundAsset, renderPlaygroundIndexHtml, } from "./playground/static.js";
 import { ensurePlaygroundBundle, playgroundDevBaseFromEnv, playgroundDevBasePath, startPlaygroundDevServer, } from "./playground/toolchain.js";
 import { collectMemoryHealthFields, sumEventLogStats, } from "./process-memory-telemetry.js";
-import { ReminderRunner, ReminderValidationError, UnknownReminderError, } from "./reminder-runner.js";
+import { ReminderRunner, ReminderValidationError, rejectAnonymousReminderHandlers, UnknownReminderError, } from "./reminder-runner.js";
 import { mapThrownRequestError } from "./request-error-status.js";
 import { assertAccountConnectionsNotAnonymous, resolveMountConnections, validateMountConnectionsConfig, } from "./resolved-connections.js";
 import { Router } from "./router.js";
@@ -126,8 +127,8 @@ function isV2Project(project) {
 export function startServer(mounts_1) {
     return __awaiter(this, arguments, void 0, function* (mounts, options = {}) {
         var _a, _b, _c, _d, _e, _f;
-        var _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5;
-        var _6;
+        var _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6;
+        var _7;
         if (mounts.length === 0) {
             throw new Error("startServer requires at least one agent mount");
         }
@@ -144,13 +145,13 @@ export function startServer(mounts_1) {
         const playground = (_j = options.playground) !== null && _j !== void 0 ? _j : true;
         const hosted = options;
         const noControlPlane = hosted.noControlPlane === true;
-        const scmProxyRequested = hosted.cursorScmProxy === true || hosted.cursorGithubProxy === true;
+        const scmProxyRequested = hosted.cursorScmProxy === true;
         const runSchedules = (_k = options.schedules) !== null && _k !== void 0 ? _k : !dev;
         const runReminders = (_l = options.reminders) !== null && _l !== void 0 ? _l : !dev;
         // CURSOR_AGENTKIT_VERSION is still the env the SDK reads when building
         // its client-version header (wire prefix remains `agentkit-`). Setting it
         // here makes the internal-only agentkit_enabled gate apply to every turn.
-        (_m = (_6 = process.env).CURSOR_AGENTKIT_VERSION) !== null && _m !== void 0 ? _m : (_6.CURSOR_AGENTKIT_VERSION = packageVersion());
+        (_m = (_7 = process.env).CURSOR_AGENTKIT_VERSION) !== null && _m !== void 0 ? _m : (_7.CURSOR_AGENTKIT_VERSION = packageVersion());
         const authoredOtel = pickAuthoredOtel(mounts.map((m) => ({
             slug: m.slug,
             name: m.project.name,
@@ -560,19 +561,32 @@ export function startServer(mounts_1) {
             }
             const scheduleRunner = new ScheduleRunner(engine, project, logger);
             let reminderRunner;
+            const architecture = project.agent.architecture;
+            const useReminderCpProtocol = !noControlPlane && architecture === "v2";
             const localControlPlane = noControlPlane
                 ? undefined
-                : yield createLocalControlPlane({
-                    fireSchedule: (name) => scheduleRunner.dispatch(name),
-                    fireReminder: (id, fireCount) => reminderRunner.dispatch(id, { expectedFireCount: fireCount }),
-                    stateDir: join(stateRoot, "control-plane"),
-                    armReminderClocks: runReminders,
-                    logger,
-                });
+                : yield createLocalControlPlane(Object.assign(Object.assign({ fireSchedule: (name) => scheduleRunner.dispatch(name) }, (useReminderCpProtocol
+                    ? {
+                        executeReminder: (descriptor) => reminderRunner.executeFire(descriptor),
+                    }
+                    : {
+                        fireReminder: (id, fireCount) => reminderRunner.dispatch(id, {
+                            expectedFireCount: fireCount,
+                        }),
+                    })), { stateDir: join(stateRoot, "control-plane"), armReminderClocks: runReminders, logger }));
             const timerClient = noControlPlane
                 ? createCursorHostedPlatformTimers()
                 : localControlPlane;
-            reminderRunner = new ReminderRunner(engine, logger, timerClient);
+            reminderRunner = new ReminderRunner(engine, logger, timerClient, {
+                namedHandlers: (_z = project.reminders) !== null && _z !== void 0 ? _z : [],
+                // Architecture v2 rejects anonymous run/until everywhere (local + hosted).
+                rejectAnonymousHandlers: rejectAnonymousReminderHandlers({
+                    noControlPlane,
+                    architecture,
+                }),
+                architecture,
+                controlPlane: useReminderCpProtocol ? localControlPlane : undefined,
+            });
             const evalRuns = new EvalRunStore(project.rootDir, logger, 
             // Playground eval history mirrors onto the defineStorage evals table.
             (_d = engine.storage) === null || _d === void 0 ? void 0 : _d.evalRuns());
@@ -630,6 +644,7 @@ export function startServer(mounts_1) {
                 if (definition.onStart !== undefined) {
                     const startArgs = {
                         send: (message, sendOptions) => engine.send(channel.id, message, sendOptions),
+                        architecture: project.agent.architecture,
                         getSession: (sessionId) => engine.getChannelSession(channel.id, sessionId),
                         receive: (target, input) => engine.receive(target, input),
                         callTool: (toolName, input, callOptions) => engine.callTool(toolName, input, callOptions),
@@ -652,7 +667,7 @@ export function startServer(mounts_1) {
                     }
                     catch (error) {
                         logger(`[agent-sdk] channel "${channel.id}" onStart failed: ${error instanceof Error
-                            ? ((_z = error.stack) !== null && _z !== void 0 ? _z : error.message)
+                            ? ((_0 = error.stack) !== null && _0 !== void 0 ? _0 : error.message)
                             : String(error)}`);
                     }
                 }
@@ -775,8 +790,8 @@ export function startServer(mounts_1) {
         const routeContinuation = localControlPlaneRoute(runtimes);
         const cursorEventsCommon = {
             config: effectiveCursorEvents,
-            githubRepos: (_0 = (_e = cursorGithubConfig.cursorEvents) === null || _e === void 0 ? void 0 : _e.repos) !== null && _0 !== void 0 ? _0 : [],
-            originRepos: (_1 = cursorOriginScope === null || cursorOriginScope === void 0 ? void 0 : cursorOriginScope.repos) !== null && _1 !== void 0 ? _1 : [],
+            githubRepos: (_1 = (_e = cursorGithubConfig.cursorEvents) === null || _e === void 0 ? void 0 : _e.repos) !== null && _1 !== void 0 ? _1 : [],
+            originRepos: (_2 = cursorOriginScope === null || cursorOriginScope === void 0 ? void 0 : cursorOriginScope.repos) !== null && _2 !== void 0 ? _2 : [],
             stateRoot: options.stateRoot,
             auth: cursorEventsAuth,
             logger,
@@ -805,9 +820,9 @@ export function startServer(mounts_1) {
         const server = createServer((req, res) => {
             void instrumentHttp(otelRuntime, req, res, () => handleRequest(router, req, res, logger));
         });
-        const host = (_2 = options.host) !== null && _2 !== void 0 ? _2 : "127.0.0.1";
+        const host = (_3 = options.host) !== null && _3 !== void 0 ? _3 : "127.0.0.1";
         const portWasExplicit = options.port !== undefined;
-        const requestedPort = (_3 = options.port) !== null && _3 !== void 0 ? _3 : DEFAULT_SERVE_PORT;
+        const requestedPort = (_4 = options.port) !== null && _4 !== void 0 ? _4 : DEFAULT_SERVE_PORT;
         let boundPort;
         try {
             boundPort = yield listenHttpServer({
@@ -829,7 +844,7 @@ export function startServer(mounts_1) {
         const address = server.address();
         const displayHost = host === "0.0.0.0" || host === "::" ? "127.0.0.1" : host;
         const url = `http://${displayHost}:${boundPort}`;
-        const oauthOrigin = ((_4 = options.publicUrl) !== null && _4 !== void 0 ? _4 : url).replace(/\/$/, "");
+        const oauthOrigin = ((_5 = options.publicUrl) !== null && _5 !== void 0 ? _5 : url).replace(/\/$/, "");
         // Resolve peer + Cursor account MCP connections now that the listen port is
         // known (see resolved-connections.ts for the URL/runtime rules).
         for (const runtime of runtimes) {
@@ -865,7 +880,7 @@ export function startServer(mounts_1) {
                 runtime.project.agent.cloud !== undefined;
             if ((hasServerTools || bridgeableNames.length > 0) && cloudCapable) {
                 const basePath = runtime.slug === "" ? "" : `/${runtime.slug}`;
-                const publicToolsUrl = (_5 = options.cloudToolsUrl) !== null && _5 !== void 0 ? _5 : (options.publicUrl === undefined
+                const publicToolsUrl = (_6 = options.cloudToolsUrl) !== null && _6 !== void 0 ? _6 : (options.publicUrl === undefined
                     ? undefined
                     : `${options.publicUrl.replace(/\/$/, "")}${basePath}${TOOL_MCP_ENDPOINT_PATH}`);
                 if (publicToolsUrl === undefined) {
@@ -1085,7 +1100,7 @@ function mountAgentRoutes(router, runtime, args) {
                 runtime,
                 channelId,
                 hostedSessionId,
-            }), drainSessionDurability: (sessionId) => engine.drainSessionDurability(sessionId), flushOtel: args.flushOtel }, (args.diagStateRoot === undefined
+            }), fireReminder: (reminderId, fireCount) => reminderRunner.dispatch(reminderId, { expectedFireCount: fireCount }), drainSessionDurability: (sessionId) => engine.drainSessionDurability(sessionId), flushOtel: args.flushOtel }, (args.diagStateRoot === undefined
             ? {}
             : { stateRoot: args.diagStateRoot })), (sessionRunLog === undefined
             ? {}
@@ -2198,15 +2213,25 @@ function handleRequest(router, req, res, logger) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b, _c;
         let response;
+        let hostedDeliveryRequest = false;
         const method = (_a = req.method) !== null && _a !== void 0 ? _a : "GET";
         try {
             const request = yield toFetchRequest(req);
+            hostedDeliveryRequest = request.headers.get(HOSTED_DELIVERY_HEADER) === "1";
+            const requestErrorResponse = (status, error, message) => hostedDeliveryRequest
+                ? hostedGuestErrorResponse({
+                    status,
+                    error,
+                    retry: HOSTED_GUEST_RETRY_TERMINAL,
+                    message,
+                })
+                : errorResponse(status, error, message);
             const url = new URL(request.url);
             const match = router.match(request.method, url.pathname);
             if (match === undefined) {
                 response = router.hasPath(url.pathname)
-                    ? errorResponse(405, "method_not_allowed", `${request.method} is not supported on ${url.pathname}.`)
-                    : errorResponse(404, "not_found", `No route for ${request.method} ${url.pathname}.`);
+                    ? requestErrorResponse(405, "method_not_allowed", `${request.method} is not supported on ${url.pathname}.`)
+                    : requestErrorResponse(404, "not_found", `No route for ${request.method} ${url.pathname}.`);
             }
             else {
                 const requestIp = (_b = req.socket.remoteAddress) !== null && _b !== void 0 ? _b : null;
@@ -2217,7 +2242,7 @@ function handleRequest(router, req, res, logger) {
                     unauthorized = auth === null;
                 }
                 response = unauthorized
-                    ? errorResponse(401, "unauthorized", "No auth policy admitted this request. In production, configure channel auth (e.g. bearerAuth) — the default localDevStrict() policy only admits loopback callers with a loopback Host.")
+                    ? requestErrorResponse(401, "unauthorized", "No auth policy admitted this request. In production, configure channel auth (e.g. bearerAuth) — the default localDevStrict() policy only admits loopback callers with a loopback Host.")
                     : yield match.route.handler(request, {
                         params: match.params,
                         requestIp,
@@ -2228,16 +2253,31 @@ function handleRequest(router, req, res, logger) {
         catch (error) {
             const mapped = mapThrownRequestError(error);
             if (mapped !== undefined) {
-                response = errorResponse(mapped.status, mapped.code, mapped.message);
+                response = hostedDeliveryRequest
+                    ? hostedGuestErrorResponse({
+                        status: mapped.status,
+                        error: mapped.code,
+                        retry: mapped.retry,
+                        message: mapped.message,
+                    })
+                    : errorResponse(mapped.status, mapped.code, mapped.message);
             }
             else {
                 logger(`[agent-sdk] request failed: ${error instanceof Error
                     ? ((_c = error.stack) !== null && _c !== void 0 ? _c : error.message)
                     : String(error)}`);
                 const snippet = hostedErrorStackSnippet(error);
-                response = errorResponse(500, "internal_error", snippet.length > 0
+                const message = snippet.length > 0
                     ? `Internal server error: ${snippet}`
-                    : "Internal server error.");
+                    : "Internal server error.";
+                response = hostedDeliveryRequest
+                    ? hostedGuestErrorResponse({
+                        status: 500,
+                        error: "internal_error",
+                        retry: HOSTED_GUEST_RETRY_TERMINAL,
+                        message,
+                    })
+                    : errorResponse(500, "internal_error", message);
             }
         }
         try {

package/dist/internal/session-engine.d.ts

@@ -715,6 +715,10 @@ export declare class SessionEngine {
      * conversation whose blobs persisted but whose record (which selects the
      * conversation to hydrate) never reached the sink. No-op without a
      * storage mirror.
+     *
+     * Under a debounced event policy the turn-end flush is a timer, not the
+     * chain's tail, so flush explicitly before waiting on the queue; a no-op
+     * when the chain already flushed.
      */
     drainSessionDurability(sessionId: string): Promise<void>;
     waitForCompletion(sessionId: string): Promise<TurnOutcome>;