@cursor/july 0.1.109 → 0.1.112

package/AGENTS.md

@@ -44,7 +44,7 @@ which reads these files. Open them directly. There are no
 | `skills/framework-map/SKILL.md` | First contact: folder structure, runtimes, sessions, state, invariants |
 | `skills/create-agent/SKILL.md` | Scaffolding a new agent (interview → scaffold → verify) |
 | `skills/evals/SKILL.md` | Writing evals; fixture strategy; the regression ratchet |
-| `skills/otel/SKILL.md` | OpenTelemetry export (`defineOtel` / OTLP env / `ctx.host.otel`) |
+| `skills/otel/SKILL.md` | OpenTelemetry export (OTLP env / `serve({ otel })` / `ctx.host.otel`) |
 | `skills/hillclimb/SKILL.md` | Improving an existing agent measurably |
 | `skills/github/SKILL.md` | GitHub webhook agents; replay / forward / fixtures / cursor-events |
 | `skills/setup-slack/SKILL.md` | Slack wiring and Slack tool approvals |

package/README.md

@@ -791,21 +791,6 @@ default multi-agent layout; at the server root with `mode: "single"`):
 - `POST /v1/tools/:toolName`: call a server tool deterministically
   (`{"input": {...}, "sessionId"?}`; see "Deterministic tool calls")
 - `GET /v1/health`, `GET /v1/info`: liveness and the manifest snapshot
-Author `agent/channels/http.ts` only to override its defaults:
-
-```ts
-import {
-  bearerAuth,
-  httpChannel,
-  localDevStrict,
-} from "@cursor/july/channels";
-
-export default httpChannel({
-  auth: [localDevStrict(), bearerAuth(process.env.AGENT_TOKEN ?? "")],
-  onMessage: (message, { auth }) =>
-    `[caller ${auth?.principalId ?? "anonymous"}] ${message}`,
-});
-```
 
 **Custom channels** declare their own routes (mounted under
 `/v1/channels/<id>`), observe stream events for the sessions they own, and

package/dist/bin/agent-serve.js

@@ -30,9 +30,8 @@ import { resolve } from "node:path";
 import { parseArgs } from "node:util";
 import { formatDiagnostics, projectInfo, resolveAgentMounts, serve, } from "../index.js";
 import { registerAuthoredModuleLoaders } from "../internal/authored-loaders.js";
-import { cmdCall, cmdChat, cmdCost, cmdEval, cmdEvalCancel, cmdEvalStatus, cmdInit, cmdLogs, cmdPlayground, cmdResume, cmdRun, cmdSession, cmdSessions, cmdTrajectory, } from "../internal/cli-ax.js";
-import { ensureCursorLogin } from "../internal/cli-cursor.js";
-import { cmdDelete, cmdDeploy, cmdDeploymentStatus, cmdDeployments, cmdRotatePodCredential, cmdRotateToken, cmdSecretsList, cmdSecretsSet, cmdSecretsUnset, cmdStop, } from "../internal/cli-deploy.js";
+import { cmdCall, cmdChat, cmdCost, cmdEval, cmdEvalCancel, cmdEvalStatus, cmdInit, cmdLogs, cmdPlayground, cmdResume, cmdRun, cmdSession, cmdSessions, cmdSkill, cmdTrajectory, } from "../internal/cli-ax.js";
+import { cmdCancelRuns, cmdDelete, cmdDeploy, cmdDeploymentStatus, cmdDeployments, cmdEventRepos, cmdRotateToken, cmdSecretsList, cmdSecretsSet, cmdSecretsUnset, cmdStart, cmdStop, cmdUpgrade, } from "../internal/cli-deploy.js";
 import { cmdManifest } from "../internal/cli-manifest.js";
 import { CLI_COMMAND_NAME as CLI, formatCliVersion, PACKAGE_NAME, packageVersion, } from "../internal/distribution.js";
 import { loadAgentLocalEnv } from "../internal/local-env.js";
@@ -77,6 +76,8 @@ Usage:
   ${CLI} trajectory  --events <file.ndjson> [--text]
   ${CLI} call        <tool> [--input <json>] [--dir <path> | --url <baseUrl> | --prod]
                           [--session <id>] [--slug <slug>] [--team <id>]
+  ${CLI} skill       <name> [--dir <path> | --url <baseUrl> | --prod]
+                          [--slug <slug>] [--team <id>] [--text]
   ${CLI} init        [dir] [--template <name>] [--var id=value]... [--json]
   ${CLI} convert-automation <url> [--dir <path>] [--json]
   ${CLI} install-skills [--print] [--json]
@@ -111,10 +112,12 @@ Usage:
   ${CLI} manifest    [--dir <path>] [--json]
   ${CLI} deployments [--team <id>] [--json]
   ${CLI} deployment  <slug> [--team <id>] [--json]
-  ${CLI} stop        <slug> [--team <id>] [--json] [--no-wait]
+  ${CLI} stop        <slug> [--team <id>] [--json] [--no-wait] [--cancel-runs]
+  ${CLI} cancel-runs <slug> [--team <id>] [--json]
+  ${CLI} event-repos <slug> [--repo <owner/name>]... [--team <id>] [--json]
+  ${CLI} upgrade     <slug> [--release <id|version>] [--team <id>] [--json]
   ${CLI} delete      <slug> [--team <id>] [--json] [--no-wait]
   ${CLI} rotate-token <slug> [--team <id>]
-  ${CLI} rotate-pod-credential <slug> [--team <id>]
   ${CLI} secrets     set <slug> NAME... | list <slug> | unset <slug> NAME
                           [--team <id>] [--json] [--from-argv]
   ${CLI} slack       <subcommand> …
@@ -171,6 +174,8 @@ Commands:
   call        Call an authored server tool deterministically (no model turn)
               via POST /v1/tools/:toolName. --session runs it inside an
               existing session and records it on that session's event stream.
+  skill       Read an authored skill deterministically (no model turn)
+              via GET /v1/skills/:skillName. --text prints SKILL.md.
   init        Scaffold a project (skipping existing files), npm install,
               run login when unsigned, then print next steps. Templates
               with init.json interview on a TTY; --var answers without a
@@ -242,13 +247,22 @@ Commands:
   deployments List the team's deployments (slug, status, generation, kind).
   deployment  Show one deployment in full (status, lastError, engine info).
   stop        Stop a deployment and wait until it reports stopped.
+  cancel-runs Request cancellation for active Agent SDK v2 session runs
+              and reminder clocks, and mark factory creating/active
+              sessions failed. For a multi-tenant application this
+              cancels every install, not just the caller's, and requires
+              a team admin (service accounts cannot). Install-local
+              cancel is stop --cancel-runs.
+  event-repos Set the repositories a multi-tenant install receives events
+              for. A deploy cannot carry these; pass every repository you
+              want, since the list is replaced rather than merged.
+  upgrade     Move this team's install onto a release, the newest ready one
+              by default. Deploying a multi-tenant application publishes a
+              release without moving any tenant onto it.
   delete      Delete a deployment (teardown + purge the record) and wait
               until GET 404s. The slug is then free to redeploy.
   rotate-token Mint a new alias token for a deployment (shown once); the old
               token stops working immediately.
-  rotate-pod-credential
-              Rotate a deployment's pod credential (prints the masked key);
-              the running pod keeps the old one until the next deploy.
   secrets     Manage deployment secrets: set (names only by default: hidden
               prompt or piped stdin; NAME=VALUE requires --from-argv), list
               (names + createdAt; never values), unset.
@@ -335,6 +349,8 @@ Options:
                      \`${CLI} login\`. For eval, this is how you opt into the
                      persisted server-side batch (default is local).
   --dry-run          run/session --prod: mark the hosted v2 turn non-mutating.
+  --component        run/session --prod: wake this v2 component key,
+                     not the application default.
   --as-of            run/session --prod: freeze the session clock at this
                      timezone-bearing ISO-8601 instant.
   --once             logs: print current progress / log buffer once and exit
@@ -345,6 +361,9 @@ Options:
   --no-wait          deploy/stop/eval: return right after the request is
                      accepted instead of polling until a terminal status.
                      For eval, prints the runId (deployment / --url only).
+  --cancel-runs      stop: also cancel this install's active Agent SDK v2
+                     session runs and reminder clocks, and mark factory
+                     creating/active sessions failed (not every tenant).
   --no-playground    Disable the bundled web playground at /playground (also skips
                      auto-build / HMR).
   --no-docs          Disable the documentation site at /docs (also skips its
@@ -436,7 +455,7 @@ Options:
 `;
 function writeStdout(text) {
     return new Promise((resolve, reject) => {
-        process.stdout.write(text, (error) => {
+        process.stdout.write(text, error => {
             if (error) {
                 reject(error);
                 return;
@@ -448,7 +467,7 @@ function writeStdout(text) {
 function main(argv) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
-        var _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y;
+        var _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z;
         const [command, ...restIn] = argv;
         if (command === undefined ||
             command === "help" ||
@@ -466,7 +485,7 @@ function main(argv) {
         // `session --events` means "dump raw events" (boolean). Rewrite so it does
         // not collide with run/trajectory's `--events <file.ndjson>` string flag.
         const rest = command === "session"
-            ? restIn.map((arg) => (arg === "--events" ? "--raw-events" : arg))
+            ? restIn.map(arg => (arg === "--events" ? "--raw-events" : arg))
             : restIn;
         const { values, positionals } = parseArgs({
             args: rest,
@@ -544,10 +563,14 @@ function main(argv) {
                 comment: { type: "string" },
                 "dry-run": { type: "boolean", default: false },
                 "as-of": { type: "string" },
+                component: { type: "string" },
                 out: { type: "string" },
                 team: { type: "string" },
                 "no-wait": { type: "boolean", default: false },
+                "cancel-runs": { type: "boolean", default: false },
+                global: { type: "boolean", default: false },
                 ref: { type: "string" },
+                release: { type: "string" },
                 path: { type: "string" },
                 all: { type: "boolean", default: false },
                 "cursor-events-repo": { type: "string", multiple: true },
@@ -707,7 +730,7 @@ function main(argv) {
             }
             case "convert-automation": {
                 const { cmdConvertAutomation } = yield import("../internal/cli-convert-automation.js");
-                const dirFlagPassed = rest.includes("--dir") || rest.some((arg) => arg.startsWith("--dir="));
+                const dirFlagPassed = rest.includes("--dir") || rest.some(arg => arg.startsWith("--dir="));
                 return cmdConvertAutomation({
                     url: positionals[0],
                     // Default target is ./<automation-name-slug>, not the cwd.
@@ -785,15 +808,24 @@ function main(argv) {
             case "stop": {
                 return cmdStop(positionals[0], deployOptionsFromValues(values));
             }
+            case "start": {
+                return cmdStart(positionals[0], deployOptionsFromValues(values));
+            }
+            case "cancel-runs": {
+                return cmdCancelRuns(positionals[0], deployOptionsFromValues(values));
+            }
+            case "event-repos": {
+                return cmdEventRepos(positionals[0], (_m = values.repo) !== null && _m !== void 0 ? _m : [], deployOptionsFromValues(values));
+            }
+            case "upgrade": {
+                return cmdUpgrade({ slug: positionals[0], release: values.release }, deployOptionsFromValues(values));
+            }
             case "delete": {
                 return cmdDelete(positionals[0], deployOptionsFromValues(values));
             }
             case "rotate-token": {
                 return cmdRotateToken(positionals[0], deployOptionsFromValues(values));
             }
-            case "rotate-pod-credential": {
-                return cmdRotatePodCredential(positionals[0], deployOptionsFromValues(values));
-            }
             case "secrets": {
                 const base = deployOptionsFromValues(values);
                 switch (positionals[0]) {
@@ -813,7 +845,7 @@ function main(argv) {
                 return cmdRun(axFromOptions({
                     dir,
                     messages,
-                    sessionId: (_m = values["session-id"]) !== null && _m !== void 0 ? _m : values.session,
+                    sessionId: (_o = values["session-id"]) !== null && _o !== void 0 ? _o : values.session,
                     continuationToken: values["continuation-token"],
                     events: values["no-events"]
                         ? false
@@ -832,6 +864,7 @@ function main(argv) {
                     stream: values["no-stream"] ? false : undefined,
                     dryRun: values["dry-run"],
                     asOf: values["as-of"],
+                    componentKey: values.component,
                 }));
             }
             case "call": {
@@ -839,7 +872,20 @@ function main(argv) {
                     dir,
                     toolName: positionals[0],
                     toolInput: values.input,
-                    sessionId: (_o = values["session-id"]) !== null && _o !== void 0 ? _o : values.session,
+                    sessionId: (_p = values["session-id"]) !== null && _p !== void 0 ? _p : values.session,
+                    url: values.url,
+                    prod: values.prod,
+                    team: values.team,
+                    apiKey: values["api-key"],
+                    slug: values.slug,
+                    bearerToken: values["bearer-token"],
+                    stateRoot: values["state-root"],
+                }));
+            }
+            case "skill": {
+                return cmdSkill(positionals[0], axFromOptions({
+                    dir,
+                    text: values.text,
                     url: values.url,
                     prod: values.prod,
                     team: values.team,
@@ -924,7 +970,7 @@ function main(argv) {
                     team: values.team,
                     apiKey: values["api-key"],
                     slug: values.slug,
-                    sessionId: (_p = values["session-id"]) !== null && _p !== void 0 ? _p : values.session,
+                    sessionId: (_q = values["session-id"]) !== null && _q !== void 0 ? _q : values.session,
                     resume: values.resume,
                     continuationToken: values["continuation-token"],
                     bearerToken: values["bearer-token"],
@@ -944,7 +990,7 @@ function main(argv) {
                     slug: values.slug,
                     // Positional wins; --session is accepted as a redundant alias.
                     // No id → resume previous (cmdResume sets resume: true).
-                    sessionId: (_r = (_q = positionals[0]) !== null && _q !== void 0 ? _q : values["session-id"]) !== null && _r !== void 0 ? _r : values.session,
+                    sessionId: (_s = (_r = positionals[0]) !== null && _r !== void 0 ? _r : values["session-id"]) !== null && _s !== void 0 ? _s : values.session,
                     continuationToken: values["continuation-token"],
                     bearerToken: values["bearer-token"],
                     json: values.json,
@@ -992,13 +1038,14 @@ function main(argv) {
                     rawEvents: values["raw-events"],
                     out: values.out,
                     messages,
-                    sessionId: (_s = values["session-id"]) !== null && _s !== void 0 ? _s : values.session,
+                    sessionId: (_t = values["session-id"]) !== null && _t !== void 0 ? _t : values.session,
                     dryRun: values["dry-run"],
                     asOf: values["as-of"],
+                    componentKey: values.component,
                 }));
             }
             case "cost": {
-                return cmdCost((_u = (_t = positionals[0]) !== null && _t !== void 0 ? _t : values["session-id"]) !== null && _u !== void 0 ? _u : values.session, axFromOptions({
+                return cmdCost((_v = (_u = positionals[0]) !== null && _u !== void 0 ? _u : values["session-id"]) !== null && _v !== void 0 ? _v : values.session, axFromOptions({
                     dir,
                     url: values.url,
                     prod: values.prod,
@@ -1018,7 +1065,7 @@ function main(argv) {
                     apiKey: values["api-key"],
                     slug: values.slug,
                     bearerToken: values["bearer-token"],
-                    sessionId: (_v = values["session-id"]) !== null && _v !== void 0 ? _v : values.session,
+                    sessionId: (_w = values["session-id"]) !== null && _w !== void 0 ? _w : values.session,
                     print: values.print,
                 }));
             }
@@ -1045,7 +1092,7 @@ function main(argv) {
                         continue;
                     }
                     process.stdout.write(`${label}:\n${formatDiagnostics(project.diagnostics)}\n`);
-                    hasError || (hasError = project.diagnostics.some((d) => d.severity === "error"));
+                    hasError || (hasError = project.diagnostics.some(d => d.severity === "error"));
                 }
                 return hasError ? 1 : 0;
             }
@@ -1066,7 +1113,7 @@ function main(argv) {
                         const info = projectInfo(project);
                         process.stdout.write(`  /${slug}  —  ${info.name}  (${formatModel(info.model)}, ${info.tools.length} tools, ${info.channels.length} channels)\n`);
                     }
-                    const anyError = mounts.some((m) => m.project.diagnostics.some((d) => d.severity === "error"));
+                    const anyError = mounts.some(m => m.project.diagnostics.some(d => d.severity === "error"));
                     return anyError ? 1 : 0;
                 }
                 const project = (_h = mounts[0]) === null || _h === void 0 ? void 0 : _h.project;
@@ -1078,22 +1125,22 @@ function main(argv) {
                 if (info.instructions !== undefined) {
                     lines.push(`instructions: ${info.instructions.chars} chars`);
                 }
-                lines.push(section("tools", info.tools.map((t) => `${t.name} — ${t.description}`)));
-                lines.push(section("skills", info.skills.map((s) => `${s.name} — ${s.description}`)));
-                lines.push(section("extensions", info.extensions.map((e) => `${e.name} — ${[...e.tools, ...e.skills].join(", ") || "(nothing contributed)"}`)));
-                lines.push(section("MCP connections", info.connections.map((c) => `${c.name} — ${c.transport}`)));
-                lines.push(section("subagents", info.subagents.map((s) => { var _a; return `${s.name} — ${(_a = s.description) !== null && _a !== void 0 ? _a : ""}`; })));
-                lines.push(section("channels", info.channels.map((c) => `${c.id}: ${c.routes.map((r) => `${r.method} ${r.url}`).join(", ") ||
+                lines.push(section("tools", info.tools.map(t => `${t.name} — ${t.description}`)));
+                lines.push(section("skills", info.skills.map(s => `${s.name} — ${s.description}`)));
+                lines.push(section("extensions", info.extensions.map(e => `${e.name} — ${[...e.tools, ...e.skills].join(", ") || "(nothing contributed)"}`)));
+                lines.push(section("MCP connections", info.connections.map(c => `${c.name} — ${c.transport}`)));
+                lines.push(section("subagents", info.subagents.map(s => { var _a; return `${s.name} — ${(_a = s.description) !== null && _a !== void 0 ? _a : ""}`; })));
+                lines.push(section("channels", info.channels.map(c => `${c.id}: ${c.routes.map(r => `${r.method} ${r.url}`).join(", ") ||
                     "(events only)"}`)));
-                lines.push(section("schedules", info.schedules.map((s) => `${s.name} (${s.cron}, ${s.kind})`)));
+                lines.push(section("schedules", info.schedules.map(s => `${s.name} (${s.cron}, ${s.kind})`)));
                 lines.push(section("hooks", info.hooks));
-                lines.push(section("hosting egress domains", (_w = (_j = info.hosting) === null || _j === void 0 ? void 0 : _j.egressDomains) !== null && _w !== void 0 ? _w : []));
-                lines.push(section("hosting secret names", (_x = (_k = info.hosting) === null || _k === void 0 ? void 0 : _k.secretNames) !== null && _x !== void 0 ? _x : []));
+                lines.push(section("hosting egress domains", (_x = (_j = info.hosting) === null || _j === void 0 ? void 0 : _j.egressDomains) !== null && _x !== void 0 ? _x : []));
+                lines.push(section("hosting secret names", (_y = (_k = info.hosting) === null || _k === void 0 ? void 0 : _k.secretNames) !== null && _y !== void 0 ? _y : []));
                 if (info.diagnostics.length > 0) {
                     lines.push(`\ndiagnostics:\n${formatDiagnostics(info.diagnostics)}`);
                 }
-                process.stdout.write(`${lines.filter((line) => line !== "").join("\n")}\n`);
-                return info.diagnostics.some((d) => d.severity === "error") ? 1 : 0;
+                process.stdout.write(`${lines.filter(line => line !== "").join("\n")}\n`);
+                return info.diagnostics.some(d => d.severity === "error") ? 1 : 0;
             }
             case "dev":
             case "serve": {
@@ -1158,7 +1205,7 @@ function main(argv) {
                     publicUrl: values["public-url"],
                     cloudToolsUrl: values["cloud-tools-url"],
                     cursorEvents: values["cursor-events"] === true
-                        ? { repos: (_y = values.repo) !== null && _y !== void 0 ? _y : [] }
+                        ? { repos: (_z = values.repo) !== null && _z !== void 0 ? _z : [] }
                         : undefined,
                     // Soft boot logs stay secondary to the banner. `dim` is a no-op on
                     // already-styled lines (the MCP warning box).
@@ -1183,35 +1230,17 @@ function main(argv) {
                 };
                 const start = () => __awaiter(this, void 0, void 0, function* () {
                     loadLocalEnv();
-                    // Model turns need a Cursor credential. Prompt login before listen
-                    // so the first playground turn does not fail with a late auth error.
-                    // `--allow-anonymous` is the hosted trust boundary (alias token /
-                    // freeze bake): skip the login gate so health can bind without a
-                    // key. v1 hosted injects CURSOR_API_KEY at exec; freeze bind drops
-                    // CURSOR_API_KEY / CURSOR_API_KEY_FILE onto the listening process.
-                    // Self-hosted omit the flag and still fail-fast unsigned on a TTY-less host.
-                    const loginExit = yield ensureCursorLogin({
-                        apiKey: values["api-key"],
-                        allowAnonymous: values["allow-anonymous"] === true,
-                    });
-                    if (loginExit !== 0) {
-                        return { kind: "login-failed", exitCode: loginExit };
-                    }
                     const next = yield serve(serveDir, serveOptions);
                     printServeBanner(next, bannerOpts);
                     if (enterToRestart) {
                         process.stdout.write(style.dim("  press Enter to restart\n"));
                     }
-                    return { kind: "ready", handle: next };
+                    return next;
                 });
-                const started = yield start();
-                if (started.kind === "login-failed") {
-                    return started.exitCode;
-                }
-                const handle = started.handle;
+                const handle = yield start();
                 let closing = false;
                 let restartRequested = false;
-                yield new Promise((resolve) => {
+                yield new Promise(resolve => {
                     const shutdown = () => {
                         if (closing) {
                             return;
@@ -1252,6 +1281,8 @@ function deployOptionsFromValues(values) {
         team: values.team,
         json: values.json === true,
         noWait: values["no-wait"] === true,
+        cancelRuns: values["cancel-runs"] === true,
+        global: values.global === true,
         apiKey: values["api-key"],
         fromArgv: values["from-argv"] === true ? true : undefined,
     };
@@ -1269,6 +1300,7 @@ function axFromOptions(partial) {
         continuationToken: partial.continuationToken,
         dryRun: partial.dryRun,
         asOf: partial.asOf,
+        componentKey: partial.componentKey,
         timeoutMs: partial.timeoutMs,
         events: partial.events,
         text: partial.text,
@@ -1354,10 +1386,10 @@ function section(title, items) {
     if (items.length === 0) {
         return "";
     }
-    return `${title}:\n${items.map((item) => `  - ${item}`).join("\n")}`;
+    return `${title}:\n${items.map(item => `  - ${item}`).join("\n")}`;
 }
 function isEnterOnly(text) {
-    return text.length > 0 && [...text].every((ch) => ch === "\n" || ch === "\r");
+    return text.length > 0 && [...text].every(ch => ch === "\n" || ch === "\r");
 }
 /**
  * `dev [path]` takes a positional project root; `serve` keeps `--dir` only.
@@ -1433,7 +1465,7 @@ function printServeBanner(handle, opts) {
                 const scheduleMode = opts.noSchedules
                     ? "disabled"
                     : "running on cron cadence (UTC)";
-                process.stdout.write(c.dim(`  schedules: ${info.schedules.map((s) => s.name).join(", ")} — ${scheduleMode}\n`));
+                process.stdout.write(c.dim(`  schedules: ${info.schedules.map(s => s.name).join(", ")} — ${scheduleMode}\n`));
             }
         }
         if (handle.docsUrl !== undefined) {
@@ -1446,19 +1478,19 @@ function printServeBanner(handle, opts) {
     if (opts.dev &&
         (process.env.GITHUB_WEBHOOK_SECRET === undefined ||
             process.env.GITHUB_WEBHOOK_SECRET === "") &&
-        handle.agents.some((agent) => projectInfo(agent.project).channels.some((c) => c.kind === "github"))) {
+        handle.agents.some(agent => projectInfo(agent.project).channels.some(c => c.kind === "github"))) {
         process.stdout.write(c.dim(`  github: dev accepts unsigned loopback deliveries (${CLI} github forward works without a secret; set GITHUB_WEBHOOK_SECRET to verify signatures)\n`));
     }
     if (opts.dev &&
         (process.env.GITLAB_WEBHOOK_SECRET === undefined ||
             process.env.GITLAB_WEBHOOK_SECRET === "") &&
-        handle.agents.some((agent) => projectInfo(agent.project).channels.some((c) => c.kind === "gitlab"))) {
+        handle.agents.some(agent => projectInfo(agent.project).channels.some(c => c.kind === "gitlab"))) {
         process.stdout.write(c.dim(`  gitlab: dev accepts unsigned loopback deliveries (${CLI} gitlab replay works without a secret; set GITLAB_WEBHOOK_SECRET to verify X-Gitlab-Token)\n`));
     }
     if (opts.dev &&
         (process.env.BITBUCKET_WEBHOOK_SECRET === undefined ||
             process.env.BITBUCKET_WEBHOOK_SECRET === "") &&
-        handle.agents.some((agent) => projectInfo(agent.project).channels.some((c) => c.kind === "bitbucket"))) {
+        handle.agents.some(agent => projectInfo(agent.project).channels.some(c => c.kind === "bitbucket"))) {
         process.stdout.write(c.dim(`  bitbucket: dev accepts unsigned loopback deliveries (${CLI} bitbucket replay works without a secret; set BITBUCKET_WEBHOOK_SECRET to verify X-Hub-Signature)\n`));
     }
 }
@@ -1524,14 +1556,14 @@ function installTransportErrorGuards() {
         const text = reason instanceof Error ? reason.message : String(reason);
         process.stderr.write(`[agent-sdk] ${label} (server stays up): ${text.slice(0, 400)}\n`);
     };
-    process.on("unhandledRejection", (reason) => {
+    process.on("unhandledRejection", reason => {
         if (isTransportNoise(reason)) {
             log("swallowed unhandledRejection", reason);
             return;
         }
         log("unhandledRejection", reason);
     });
-    process.on("uncaughtException", (error) => {
+    process.on("uncaughtException", error => {
         var _a;
         if (isTransportNoise(error)) {
             log("swallowed uncaughtException", error);
@@ -1549,10 +1581,10 @@ installTransportErrorGuards();
 // command touches a project. In-repo CLI is `bin/agent-serve.ts`.
 registerAuthoredModuleLoaders()
     .then(() => main(process.argv.slice(2)))
-    .then((code) => {
+    .then(code => {
     // Ephemeral run/eval can leave SDK/HTTP handles open; force exit.
     process.exit(code);
-}, (error) => {
+}, error => {
     process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
     process.exit(1);
 });

package/dist/channels/bitbucket/api.js

@@ -265,8 +265,8 @@ export function splitBitbucketUnifiedDiff(diff) {
 function encodePath(path) {
     return path
         .split("/")
-        .filter((segment) => segment !== "")
-        .map((segment) => encodeURIComponent(segment))
+        .filter(segment => segment !== "")
+        .map(segment => encodeURIComponent(segment))
         .join("/");
 }
 function fallbackUrl(repository) {
@@ -383,14 +383,14 @@ export function createBitbucketPullRequestReadApi(bitbucket, options = {}) {
                     return normalized;
                 }
                 const [headSha, baseSha] = yield Promise.all([
-                    expandBitbucketCloudCommitSha(bitbucket, repository, pullRequest.headSha, (error) => { var _a; return pullRequest.headSha === undefined
+                    expandBitbucketCloudCommitSha(bitbucket, repository, pullRequest.headSha, error => { var _a; return pullRequest.headSha === undefined
                         ? undefined
                         : (_a = options.onDiagnostic) === null || _a === void 0 ? void 0 : _a.call(options, {
                             kind: "commit-expansion-failed",
                             sha: pullRequest.headSha,
                             error,
                         }); }),
-                    expandBitbucketCloudCommitSha(bitbucket, repository, pullRequest.baseSha, (error) => { var _a; return pullRequest.baseSha === undefined
+                    expandBitbucketCloudCommitSha(bitbucket, repository, pullRequest.baseSha, error => { var _a; return pullRequest.baseSha === undefined
                         ? undefined
                         : (_a = options.onDiagnostic) === null || _a === void 0 ? void 0 : _a.call(options, {
                             kind: "commit-expansion-failed",
@@ -490,7 +490,7 @@ export function cloudBitbucketApi(client, repository) {
                 };
             });
         },
-        getPullRequestDiff: (id) => client.request({
+        getPullRequestDiff: id => client.request({
             method: "GET",
             path: `${repo}/pullrequests/${id}/diff`,
             accept: "text/plain",
@@ -541,7 +541,7 @@ export function cloudBitbucketApi(client, repository) {
                 return mapComment(raw);
             });
         },
-        setBuildStatus: (input) => { var _a, _b; return client.request({
+        setBuildStatus: input => { var _a, _b; return client.request({
             method: "POST",
             path: `${repo}/commit/${encodeURIComponent(input.sha)}/statuses/build`,
             body: Object.assign({ key: input.key, state: input.state, name: (_a = input.name) !== null && _a !== void 0 ? _a : input.key, url: (_b = input.url) !== null && _b !== void 0 ? _b : fallbackUrl(repository) }, (input.description === undefined
@@ -602,7 +602,7 @@ export function dcBitbucketApi(client, repository) {
         },
         // `/pull-requests/{id}.diff` streams the raw unified diff; the sibling
         // `/pull-requests/{id}/diff` route returns a JSON `RestDiff` instead.
-        getPullRequestDiff: (id) => client.request({
+        getPullRequestDiff: id => client.request({
             method: "GET",
             path: `${repo}/pull-requests/${id}.diff`,
             accept: "text/plain",
@@ -656,7 +656,7 @@ export function dcBitbucketApi(client, repository) {
         // Repository-scoped build status (DC 7.14+), which lives under
         // `rest/api/1.0` so the proxy's single upstream base reaches it; the
         // older `rest/build-status/1.0/commits/{sha}` sits outside that base.
-        setBuildStatus: (input) => { var _a, _b; return client.request({
+        setBuildStatus: input => { var _a, _b; return client.request({
             method: "POST",
             path: `${repo}/commits/${encodeURIComponent(input.sha)}/builds`,
             body: Object.assign({ key: input.key, state: input.state === "STOPPED" ? "CANCELLED" : input.state, name: (_a = input.name) !== null && _a !== void 0 ? _a : input.key, url: (_b = input.url) !== null && _b !== void 0 ? _b : fallbackUrl(repository) }, (input.description === undefined

package/dist/channels/bitbucket/binding.js

@@ -46,9 +46,9 @@ export function buildBitbucketBinding(input) {
         get api() {
             return getApi();
         },
-        request: (request) => getClient().request(request),
-        setBuildStatus: (status) => getApi().setBuildStatus(status),
-        createCheck: (check) => createBitbucketCheck(Object.assign(Object.assign({}, check), { bitbucket: getApi() })),
+        request: request => getClient().request(request),
+        setBuildStatus: status => getApi().setBuildStatus(status),
+        createCheck: check => createBitbucketCheck(Object.assign(Object.assign({}, check), { bitbucket: getApi() })),
     };
 }
 export function asRecord(value) {
@@ -262,7 +262,7 @@ export function bitbucketPushFromPayload(payload) {
         return undefined;
     }
     return {
-        changes: changes.flatMap((entry) => {
+        changes: changes.flatMap(entry => {
             var _a, _b, _c;
             var _d, _e, _f, _g, _h, _j, _k, _l;
             const change = asRecord(entry);

package/dist/channels/bitbucket/bitbucket-channel.js

@@ -107,7 +107,7 @@ export function findBitbucketChannelTargets(mounts) {
             if ((meta === null || meta === void 0 ? void 0 : meta.kind) !== BITBUCKET_CHANNEL_KIND) {
                 continue;
             }
-            const postRoute = ((_a = channel.definition.routes) !== null && _a !== void 0 ? _a : []).find((route) => route.method === "POST");
+            const postRoute = ((_a = channel.definition.routes) !== null && _a !== void 0 ? _a : []).find(route => route.method === "POST");
             targets.push({
                 slug,
                 channelId: channel.id,

package/dist/channels/bitbucket/bitbucket-webhook.js

@@ -140,7 +140,7 @@ function configuredRepoAllowlist(options) {
         repos.push(...options.cursorAccount.repos);
     }
     const normalized = repos
-        .map((repo) => repo
+        .map(repo => repo
         .trim()
         .replace(/^\/+|\/+$/g, "")
         .toLowerCase())

package/dist/channels/bitbucket/checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/channels/bitbucket/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAIxB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAExE,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;AAExE,uEAAuE;AACvE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC,GAAG,yBAAyB,CAiB5B;AAED,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAC;AACjD,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAC3D,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAE/D,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,2BAA2B;IAC1C,6DAA6D;IAC7D,SAAS,EAAE,oBAAoB,CAAC;IAChC,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,yBACf,SAAQ,2BAA2B,EACjC,kBAAkB;CAAG;AAiCzB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAEzB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,2BAA2B,GAAG;IACnC,sDAAsD;IACtD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GACA,cAAc,CAKhB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,oBAAoB,CAAC;CACjC,GAAG,cAAc,CAKjB"}
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/channels/bitbucket/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAIxB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAExE,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;AAExE,uEAAuE;AACvE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC,GAAG,yBAAyB,CAiB5B;AAED,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAC;AACjD,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAC3D,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAE/D,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,2BAA2B;IAC1C,6DAA6D;IAC7D,SAAS,EAAE,oBAAoB,CAAC;IAChC,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,yBACf,SAAQ,2BAA2B,EAAE,kBAAkB;CAAG;AAiC5D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAEzB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,2BAA2B,GAAG;IACnC,sDAAsD;IACtD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GACA,cAAc,CAKhB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,oBAAoB,CAAC;CACjC,GAAG,cAAc,CAKjB"}

package/dist/channels/bitbucket/checks.js

@@ -97,6 +97,6 @@ export function resumeBitbucketCheck(input) {
  */
 export function bindBitbucketChecks(input) {
     return {
-        createCheck: (check) => createBitbucketCheck(Object.assign(Object.assign({}, check), { bitbucket: input.bitbucket })),
+        createCheck: check => createBitbucketCheck(Object.assign(Object.assign({}, check), { bitbucket: input.bitbucket })),
     };
 }

package/dist/channels/bitbucket/cursor-account.js

@@ -16,7 +16,7 @@ const runtimeByDefinition = new WeakMap();
 export function parseCursorBitbucketRepoScope(values) {
     const repos = [
         ...new Set(values
-            .map((repo) => repo
+            .map(repo => repo
             .trim()
             .replace(/^\/+|\/+$/g, "")
             .toLowerCase())

package/dist/channels/bitbucket/events.js

@@ -50,7 +50,7 @@ export function deriveBitbucketWebhookEvents(options) {
     if (options.webhookEvents !== undefined) {
         return [
             ...new Set(options.webhookEvents
-                .map((event) => normalizeBitbucketEventKey(event))
+                .map(event => normalizeBitbucketEventKey(event))
                 .filter(Boolean)),
         ];
     }

package/dist/channels/change-monitors/change-monitors-channel.js

@@ -18,7 +18,7 @@ const checkpointResourceSchema = z
     inconclusive: z.object({}).passthrough().optional(),
 })
     .passthrough()
-    .refine((checkpoint) => [checkpoint.clear, checkpoint.issues, checkpoint.inconclusive].filter((arm) => arm !== undefined).length === 1, { message: "checkpoint must have exactly one result arm" });
+    .refine(checkpoint => [checkpoint.clear, checkpoint.issues, checkpoint.inconclusive].filter(arm => arm !== undefined).length === 1, { message: "checkpoint must have exactly one result arm" });
 const checkpointCreatedEventSchema = z.object({
     eventId: z.string().min(1),
     eventType: z.literal(CHECKPOINT_CREATED_EVENT_TYPE),