@cursor/july 0.1.109 → 0.1.112

package/dist/internal/server.js

@@ -44,6 +44,7 @@ import { CURSOR_GITLAB_PROJECTS_HEADER, } from "../channels/gitlab/api.js";
 import { getGitLabCursorAccountRuntime, resolveCursorGitLabProxyUrl, } from "../channels/gitlab/cursor-account.js";
 import { getOriginCursorAccountRuntime, parseCursorOriginRepoScope, } from "../channels/origin/cursor-account.js";
 import { findOriginChannelTargets } from "../channels/origin/origin-channel.js";
+import { appendSlackQuietHint } from "../channels/slack/agentic-posted.js";
 import { allowAll, bearerAuth, localDevStrict } from "../channels.js";
 import { invokeChannelRoute } from "./channel-route-dispatch.js";
 import { selectConversationMirror } from "./conversation-mirror.js";
@@ -67,6 +68,7 @@ import { HOSTED_DELIVERY_HEADER, HOSTED_GUEST_RETRY_TERMINAL, hostedGuestErrorRe
 import { hostedErrorStackSnippet } from "./hosted-execution-diag.js";
 import { flushHostedExecutionProcessDeath } from "./hosted-execution-flush.js";
 import { buildHttpChannelRoutes, errorResponse, jsonResponse, readJsonObject, requireSessionOwner, } from "./http-channel.js";
+import { incomingHeadersToFetch, incomingRequestHost, } from "./incoming-headers-to-fetch.js";
 import { DEFAULT_SERVE_PORT, listenHttpServer } from "./listen-port.js";
 import { createLocalControlPlane, } from "./local-control-plane.js";
 import { createLogRing } from "./log-ring.js";
@@ -94,11 +96,12 @@ import { CursorSdkRunner } from "./sdk-runner.js";
 import { HTTP_CHANNEL_ID, InvalidContinuationTokenError, SessionEngine, ToolInputError, ToolNotDirectlyCallableError, UnknownToolError, WorkspaceUnavailableError, } from "./session-engine.js";
 import { registerSessionRunFatalFlush, selectSessionRunLogStore, unregisterSessionRunFatalFlush, } from "./session-run-log.js";
 import { sessionUrlsForRequest } from "./session-urls.js";
+import { readSkillDetail, skillListEntry, UnknownSkillError, } from "./skill-catalog.js";
 import { flushLocalStartLog, selectStartLogStore } from "./start-log-store.js";
 import { catalogDetailEntry, catalogListEntry } from "./tool-catalog.js";
 function memoryHealthFields(engines) {
     return collectMemoryHealthFields({
-        eventLog: () => sumEventLogStats(engines.map((engine) => engine.eventLogMemoryStats())),
+        eventLog: () => sumEventLogStats(engines.map(engine => engine.eventLogMemoryStats())),
     });
 }
 const MAX_BODY_BYTES = 32 * 1024 * 1024;
@@ -108,14 +111,14 @@ const ARTIFACTS_LIST_MAX_LIMIT = 1000;
 function localControlPlaneRoute(runtimes) {
     for (const runtime of runtimes) {
         if (runtime.controlPlane !== undefined) {
-            return (input) => runtime.controlPlane.routeContinuation(input);
+            return input => runtime.controlPlane.routeContinuation(input);
         }
     }
     return undefined;
 }
 function firstLocalControlPlane(runtimes) {
     var _a;
-    return (_a = runtimes.find((runtime) => runtime.controlPlane !== undefined)) === null || _a === void 0 ? void 0 : _a.controlPlane;
+    return (_a = runtimes.find(runtime => runtime.controlPlane !== undefined)) === null || _a === void 0 ? void 0 : _a.controlPlane;
 }
 function isV2Project(project) {
     return project.agent.architecture === "v2";
@@ -137,7 +140,7 @@ export function startServer(mounts_1) {
         for (const { slug, project } of mounts) {
             if (hasErrorDiagnostics(project)) {
                 const label = slug === "" ? project.name : `${slug} (${project.name})`;
-                throw new Error(`Refusing to serve agent ${label} — it has errors:\n${formatDiagnostics(project.diagnostics.filter((d) => d.severity === "error"))}`);
+                throw new Error(`Refusing to serve agent ${label} — it has errors:\n${formatDiagnostics(project.diagnostics.filter(d => d.severity === "error"))}`);
             }
         }
         const logRing = createLogRing({ capacity: 2000 });
@@ -146,14 +149,14 @@ export function startServer(mounts_1) {
         const playground = (_j = options.playground) !== null && _j !== void 0 ? _j : true;
         const hosted = options;
         const noControlPlane = hosted.noControlPlane === true;
-        const scmProxyRequested = hosted.cursorScmProxy === true || hosted.cursorGithubProxy === true;
+        const scmProxyRequested = hosted.cursorScmProxy === true;
         const runSchedules = (_k = options.schedules) !== null && _k !== void 0 ? _k : !dev;
         const runReminders = (_l = options.reminders) !== null && _l !== void 0 ? _l : !dev;
         // CURSOR_AGENTKIT_VERSION is still the env the SDK reads when building
         // its client-version header (wire prefix remains `agentkit-`). Setting it
         // here makes the internal-only agentkit_enabled gate apply to every turn.
         (_m = (_7 = process.env).CURSOR_AGENTKIT_VERSION) !== null && _m !== void 0 ? _m : (_7.CURSOR_AGENTKIT_VERSION = packageVersion());
-        const authoredOtel = pickAuthoredOtel(mounts.map((m) => ({
+        const authoredOtel = pickAuthoredOtel(mounts.map(m => ({
             slug: m.slug,
             name: m.project.name,
             otel: m.project.otel,
@@ -203,8 +206,8 @@ export function startServer(mounts_1) {
             noControlPlane,
             config: effectiveCursorEvents,
             auth: cursorEventsAuth,
-            v1Mounts: mounts.filter((mount) => !isV2Project(mount.project)),
-            v2Mounts: mounts.filter((mount) => isV2Project(mount.project)),
+            v1Mounts: mounts.filter(mount => !isV2Project(mount.project)),
+            v2Mounts: mounts.filter(mount => isV2Project(mount.project)),
             githubRepos: (_q = (_c = cursorGithubConfig.cursorEvents) === null || _c === void 0 ? void 0 : _c.repos) !== null && _q !== void 0 ? _q : [],
             originRepos: (_r = cursorOriginScope === null || cursorOriginScope === void 0 ? void 0 : cursorOriginScope.repos) !== null && _r !== void 0 ? _r : [],
         });
@@ -449,7 +452,7 @@ export function startServer(mounts_1) {
         // the /v0/grokbot session API; the SDK side is a thin remote client. The
         // dispatching runner is only interposed when a mount needs it. An
         // injected test runner receives every turn, grokbot included.
-        const hasGrokBotMounts = mounts.some((mount) => mount.project.agent.runtime === "grokbot");
+        const hasGrokBotMounts = mounts.some(mount => mount.project.agent.runtime === "grokbot");
         // Fail closed like cursor-account GitHub/MCP: grokbot turns execute on the
         // signed-in account's hosted computer, so anonymous admission needs its
         // own opt-in.
@@ -568,9 +571,9 @@ export function startServer(mounts_1) {
             const useReminderCpProtocol = architecture === "v2";
             const localControlPlane = noControlPlane
                 ? undefined
-                : yield createLocalControlPlane(Object.assign(Object.assign({ fireSchedule: (name) => scheduleRunner.dispatch(name) }, (useReminderCpProtocol
+                : yield createLocalControlPlane(Object.assign(Object.assign({ fireSchedule: name => scheduleRunner.dispatch(name) }, (useReminderCpProtocol
                     ? {
-                        executeReminder: (descriptor) => reminderRunner.executeFire(descriptor),
+                        executeReminder: descriptor => reminderRunner.executeFire(descriptor),
                     }
                     : {
                         fireReminder: (id, fireCount) => reminderRunner.dispatch(id, {
@@ -604,19 +607,19 @@ export function startServer(mounts_1) {
             // boot and makes /v1/dev/evals complete from the first request).
             yield evalRuns.hydrate();
             engine.setReminders({
-                create: (input) => reminderRunner.create(input),
-                list: (filter) => reminderRunner.list(filter),
+                create: input => reminderRunner.create(input),
+                list: filter => reminderRunner.list(filter),
                 cancel: (id, reason) => reminderRunner.cancel(id, reason),
                 cancelForContinuation: (token, reason) => reminderRunner.cancelForContinuation(token, reason),
                 rekeyContinuation: (channelId, oldToken, newToken) => reminderRunner.rekeyContinuation(channelId, oldToken, newToken),
-                dispatch: (id) => reminderRunner.dispatch(id),
+                dispatch: id => reminderRunner.dispatch(id),
             });
             engine.setEvals({
                 list: () => evalRuns.list(),
-                get: (runId) => evalRuns.get(runId),
+                get: runId => evalRuns.get(runId),
                 listRunsWithActive: () => evalRuns.listRunsWithActive(),
-                start: (input) => evalRuns.start(input),
-                cancel: (runId) => evalRuns.cancel(runId),
+                start: input => evalRuns.start(input),
+                cancel: runId => evalRuns.cancel(runId),
             });
             const runtime = Object.assign(Object.assign({ slug,
                 project,
@@ -654,20 +657,20 @@ export function startServer(mounts_1) {
                     const startArgs = {
                         send: (message, sendOptions) => engine.send(channel.id, message, sendOptions),
                         architecture: project.agent.architecture,
-                        getSession: (sessionId) => engine.getChannelSession(channel.id, sessionId),
+                        getSession: sessionId => engine.getChannelSession(channel.id, sessionId),
                         receive: (target, input) => engine.receive(target, input),
                         callTool: (toolName, input, callOptions) => engine.callTool(toolName, input, callOptions),
                         emitAssistantMessage: (sessionId, text) => engine.emitAssistantMessage(sessionId, text),
                         host: engine.host,
-                        waitUntil: (promise) => {
+                        waitUntil: promise => {
                             engine.trackBackground(promise);
                         },
                         resolveApproval: (sessionId, callId, decision, auth) => engine.resolveApproval(sessionId, callId, decision, auth),
                         resolveAuth: (sessionId, callId, decision, auth) => engine.resolveAuth(sessionId, callId, decision, auth),
-                        hasContinuationSession: (continuationToken) => engine.hasContinuationSession(channel.id, continuationToken),
-                        isContinuationBusy: (continuationToken) => engine.isContinuationBusy(channel.id, continuationToken),
-                        getContinuationLastBotMessageTs: (continuationToken) => engine.getContinuationLastBotMessageTs(channel.id, continuationToken),
-                        interruptContinuation: (continuationToken) => engine.interruptContinuation(channel.id, continuationToken),
+                        hasContinuationSession: continuationToken => engine.hasContinuationSession(channel.id, continuationToken),
+                        isContinuationBusy: continuationToken => engine.isContinuationBusy(channel.id, continuationToken),
+                        getContinuationLastBotMessageTs: continuationToken => engine.getContinuationLastBotMessageTs(channel.id, continuationToken),
+                        interruptContinuation: continuationToken => engine.interruptContinuation(channel.id, continuationToken),
                         logger,
                         artifacts: engine.artifacts,
                     };
@@ -721,7 +724,7 @@ export function startServer(mounts_1) {
                 handler: () => jsonResponse(Object.assign({ ok: true, agents: runtimes.map(({ slug, project }) => ({
                         slug,
                         name: project.name,
-                    })) }, memoryHealthFields(runtimes.map((runtime) => runtime.engine)))),
+                    })) }, memoryHealthFields(runtimes.map(runtime => runtime.engine)))),
             });
         }
         // Orienting `/` for every layout (single empty-slug and multi).
@@ -755,24 +758,24 @@ export function startServer(mounts_1) {
         // so this route is not a public unsigned endpoint. Agents decide whether
         // to run via their onPullRequest / onComment / … hooks.
         const collectGitHubTargetsFrom = (selected) => collectGitHubTriggerTargets({
-            mounts: selected.map((runtime) => ({
+            mounts: selected.map(runtime => ({
                 slug: runtime.slug,
                 channels: runtime.project.channels,
-                buildHandlerArgs: (channelId) => buildChannelHandlerArgs({ runtime, channelId }),
+                buildHandlerArgs: channelId => buildChannelHandlerArgs({ runtime, channelId }),
             })),
         });
         const collectOriginTargetsFrom = (selected) => collectOriginTriggerTargets({
-            mounts: selected.map((runtime) => ({
+            mounts: selected.map(runtime => ({
                 slug: runtime.slug,
                 channels: runtime.project.channels,
-                buildHandlerArgs: (channelId) => buildChannelHandlerArgs({ runtime, channelId }),
+                buildHandlerArgs: channelId => buildChannelHandlerArgs({ runtime, channelId }),
             })),
         });
         const collectGitHubTargets = () => collectGitHubTargetsFrom(runtimes);
-        const v1Runtimes = runtimes.filter((runtime) => !isV2Project(runtime.project));
-        const v2Runtimes = runtimes.filter((runtime) => isV2Project(runtime.project));
-        const v1Mounts = mounts.filter((mount) => !isV2Project(mount.project));
-        const v2Mounts = mounts.filter((mount) => isV2Project(mount.project));
+        const v1Runtimes = runtimes.filter(runtime => !isV2Project(runtime.project));
+        const v2Runtimes = runtimes.filter(runtime => isV2Project(runtime.project));
+        const v1Mounts = mounts.filter(mount => !isV2Project(mount.project));
+        const v2Mounts = mounts.filter(mount => isV2Project(mount.project));
         router.add({
             method: "POST",
             pattern: "/v1/webhooks/github",
@@ -874,14 +877,14 @@ export function startServer(mounts_1) {
             if (accountBridge !== undefined && accountRefs !== undefined) {
                 const bridge = accountBridge;
                 runtime.engine.setCursorAccountAuthProbe((connection) => __awaiter(this, void 0, void 0, function* () {
-                    const ref = accountRefs.find((entry) => entry.name === connection);
+                    const ref = accountRefs.find(entry => entry.name === connection);
                     if (ref === undefined) {
                         return undefined;
                     }
                     return yield bridge.probeAuthUrl(ref);
                 }));
             }
-            const hasServerTools = runtime.project.agent.tools.some((tool) => tool.execution === "server");
+            const hasServerTools = runtime.project.agent.tools.some(tool => tool.execution === "server");
             // Host-bridged connections ride the same endpoint as server tools, so
             // the cloud tools connection is set whenever either needs it.
             const bridgeableNames = runtime.engine.cloudBridgeableConnectionNames();
@@ -924,7 +927,7 @@ export function startServer(mounts_1) {
             runtime.evalRuns.loopbackUrl =
                 runtime.slug === "" ? url : `${url}/${runtime.slug}`;
         }
-        const runtimeBySlug = new Map(runtimes.map((r) => [r.slug, r]));
+        const runtimeBySlug = new Map(runtimes.map(r => [r.slug, r]));
         // --dev: spawn Vite HMR. Single-agent infers the slug base; multi-agent
         // serves `/<slug>/playground` on the HMR origin (optional AGENT_SERVE_BASE
         // pins one slug at the HMR root instead).
@@ -1011,7 +1014,7 @@ export function startServer(mounts_1) {
                 var _b;
                 if (sessionRunLog !== undefined) {
                     yield flushHostedExecutionProcessDeath({
-                        flushProcessDeath: (reason) => sessionRunLog.flushProcessDeath(reason),
+                        flushProcessDeath: reason => sessionRunLog.flushProcessDeath(reason),
                         flushStartLog,
                         startLogId: lastStartLogId,
                         reason: "process_exit",
@@ -1043,7 +1046,7 @@ export function startServer(mounts_1) {
                 server.close();
                 server.closeAllConnections();
                 try {
-                    yield Promise.all(runtimes.map((runtime) => runtime.engine.close()));
+                    yield Promise.all(runtimes.map(runtime => runtime.engine.close()));
                 }
                 finally {
                     cursorGithubCredentials === null || cursorGithubCredentials === void 0 ? void 0 : cursorGithubCredentials.stop();
@@ -1070,7 +1073,7 @@ function mountAgentRoutes(router, runtime, args) {
     // loopback-only + per-boot bearer secret, never on the public auth chain.
     if (args.accountBridge !== undefined && args.accountRefs !== undefined) {
         const bridge = args.accountBridge;
-        const refByName = new Map(args.accountRefs.map((ref) => [ref.name, ref]));
+        const refByName = new Map(args.accountRefs.map(ref => [ref.name, ref]));
         router.add({
             method: "POST",
             pattern: `${base}${cursorAccountMcpPath(":connection")}`,
@@ -1081,7 +1084,7 @@ function mountAgentRoutes(router, runtime, args) {
                 if (ref === undefined) {
                     return errorResponse(404, "not_found", `No Cursor account MCP connection named "${(_b = ctx.params.connection) !== null && _b !== void 0 ? _b : ""}" on this agent.`);
                 }
-                return bridge.handle(request, ref);
+                return bridge.handle(request, ref, appendSlackQuietHint);
             },
         });
     }
@@ -1093,7 +1096,7 @@ function mountAgentRoutes(router, runtime, args) {
     const httpAuth = (_a = project.httpChannel.auth) !== null && _a !== void 0 ? _a : defaultAuth;
     // Temporal posts this marker on a direct pod port-token fetch. The alias
     // proxy strips it, so webhook/playground tokens cannot present it.
-    const platformTimerFireAuth = (request) => {
+    const platformTimerFireAuth = request => {
         if (request.headers.get("x-agent-serve-timed-work") === "1") {
             return {
                 authenticator: "app",
@@ -1103,7 +1106,15 @@ function mountAgentRoutes(router, runtime, args) {
         }
         return null;
     };
-    if (noControlPlane === true && isV2Project(project)) {
+    // A v2 mount served under `--no-control-plane` is a hosted v2 guest: the
+    // hosted control plane drives it through the hosted delivery route below.
+    // Session HTTP is a control-plane surface, so such a guest mounts no
+    // `/v1/session*` or `/v1/sessions` routes — session starts arrive as hosted
+    // admissions (`agentsdk.session` on the built-in http channel) and session
+    // reads come from the control plane's runs surface and durable storage.
+    // Local dev, self-hosted serve, and hosted v1 keep the engine mounts.
+    const hostedV2Guest = noControlPlane === true && isV2Project(project);
+    if (hostedV2Guest) {
         registerHostedDeliveryRoute(Object.assign(Object.assign(Object.assign(Object.assign({ router,
             base, 
             // The built-in http channel is not in `project.channels`; the control
@@ -1138,7 +1149,7 @@ function mountAgentRoutes(router, runtime, args) {
                     reminderId: descriptor.id,
                     outcome: "fired",
                 };
-            }), drainSessionDurability: (sessionId) => engine.drainSessionDurability(sessionId), flushOtel: args.flushOtel }, (args.diagStateRoot === undefined
+            }), drainSessionDurability: sessionId => engine.drainSessionDurability(sessionId), flushOtel: args.flushOtel }, (args.diagStateRoot === undefined
             ? {}
             : { stateRoot: args.diagStateRoot })), (sessionRunLog === undefined
             ? {}
@@ -1166,7 +1177,7 @@ function mountAgentRoutes(router, runtime, args) {
         method: "GET",
         pattern: `${base}${mcpOauthServeCallbackPath()}`,
         auth: "none",
-        handler: (request) => engine.oauthCallbackHub.handleCallback(request),
+        handler: request => engine.oauthCallbackHub.handleCallback(request),
     });
     router.add({
         method: "GET",
@@ -1226,7 +1237,7 @@ function mountAgentRoutes(router, runtime, args) {
         method: "GET",
         pattern: `${base}/v1/logs`,
         auth: httpAuth,
-        handler: (request) => {
+        handler: request => {
             var _a;
             var _b;
             const url = new URL(request.url);
@@ -1244,32 +1255,36 @@ function mountAgentRoutes(router, runtime, args) {
             });
         },
     });
-    router.add({
-        method: "GET",
-        pattern: `${base}/v1/sessions`,
-        auth: httpAuth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            // Same gate as requireSessionOwner / relaxSessionReadAuth: never with
-            // bearer or custom channel auth (strict per-principal isolation).
-            // `--allow-anonymous` alone is a shared-principal trust boundary (corp
-            // Okta ALB); `--dev` alone stays loopback-only.
-            const includeAll = relaxSessionReadAuth &&
-                (relaxSessionReadAuthBeyondLoopback ||
-                    (typeof ctx.requestIp === "string" &&
-                        isLoopbackAddress(ctx.requestIp)));
-            // `?latest=1` — only the newest visible session. Clients binding a
-            // default session (agsh) do not need the whole list, and on hosted
-            // storage the whole list is a database scan.
-            const latest = new URL(request.url).searchParams.get("latest");
-            const listed = latest === "1" || latest === "true"
-                ? yield engine.latestSessionWithSource(ctx.auth, { includeAll })
-                : yield engine.listSessionsWithSource(ctx.auth, { includeAll });
-            return jsonResponse({
-                sessions: listed.sessions,
-                source: listed.source,
-            });
-        }),
-    });
+    // Session list is session surface: not mounted on a hosted v2 guest (the
+    // control plane owns session reads there; see hostedV2Guest above).
+    if (!hostedV2Guest) {
+        router.add({
+            method: "GET",
+            pattern: `${base}/v1/sessions`,
+            auth: httpAuth,
+            handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
+                // Same gate as requireSessionOwner / relaxSessionReadAuth: never with
+                // bearer or custom channel auth (strict per-principal isolation).
+                // `--allow-anonymous` alone is a shared-principal trust boundary (corp
+                // Okta ALB); `--dev` alone stays loopback-only.
+                const includeAll = relaxSessionReadAuth &&
+                    (relaxSessionReadAuthBeyondLoopback ||
+                        (typeof ctx.requestIp === "string" &&
+                            isLoopbackAddress(ctx.requestIp)));
+                // `?latest=1` — only the newest visible session. Clients binding a
+                // default session (agsh) do not need the whole list, and on hosted
+                // storage the whole list is a database scan.
+                const latest = new URL(request.url).searchParams.get("latest");
+                const listed = latest === "1" || latest === "true"
+                    ? yield engine.latestSessionWithSource(ctx.auth, { includeAll })
+                    : yield engine.listSessionsWithSource(ctx.auth, { includeAll });
+                return jsonResponse({
+                    sessions: listed.sessions,
+                    source: listed.source,
+                });
+            }),
+        });
+    }
     // Durable artifacts (ctx.artifacts / tag_artifact), newest-updated first.
     router.add({
         method: "GET",
@@ -1510,6 +1525,41 @@ function mountAgentRoutes(router, runtime, args) {
             }
         }),
     });
+    // Deterministic skill reads: the body the harness would receive, plus
+    // resolved sibling files. Read-only, so plain GETs with no session binding.
+    router.add({
+        method: "GET",
+        pattern: `${base}/v1/skills`,
+        auth: httpAuth,
+        handler: () => __awaiter(this, void 0, void 0, function* () {
+            return jsonResponse({
+                skills: project.agent.skills.map(skillListEntry),
+            });
+        }),
+    });
+    router.add({
+        method: "GET",
+        pattern: `${base}/v1/skills/:skillName`,
+        auth: httpAuth,
+        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const skillName = (_a = ctx.params.skillName) !== null && _a !== void 0 ? _a : "";
+            try {
+                return jsonResponse(yield readSkillDetail(project.agent.skills, skillName));
+            }
+            catch (error) {
+                if (error instanceof UnknownSkillError) {
+                    return jsonResponse({
+                        ok: false,
+                        error: "unknown_skill",
+                        message: error.message,
+                        availableSkills: error.availableSkillNames,
+                    }, { status: 404 });
+                }
+                throw error;
+            }
+        }),
+    });
     if (playground) {
         // Serve the built Vite SPA. `<base href>` is injected so the SPA's relative
         // asset URLs resolve under this mount regardless of the trailing slash the
@@ -1531,18 +1581,25 @@ function mountAgentRoutes(router, runtime, args) {
             handler: (_request, ctx) => { var _a; return renderPlaygroundAsset((_a = ctx.params.file) !== null && _a !== void 0 ? _a : ""); },
         });
     }
-    for (const route of buildHttpChannelRoutes({
-        engine,
-        config: project.httpChannel,
-        auth: httpAuth,
-        basePath: base,
-        // Dev playground lists every session (`includeAll`); allow opening them
-        // (see relaxSessionReadAuth above).
-        relaxSessionReadAuth,
-        relaxSessionReadAuthBeyondLoopback,
-        relaxSessionApprovalAuth,
-    })) {
-        router.add(route);
+    // The built-in HTTP session channel (`/v1/session*`, including the
+    // session-scoped approvals/auths routes) is session surface: not mounted on
+    // a hosted v2 guest (see hostedV2Guest above). The `http` channel itself
+    // stays registered with the hosted delivery route, which is how the control
+    // plane's session starts reach it.
+    if (!hostedV2Guest) {
+        for (const route of buildHttpChannelRoutes({
+            engine,
+            config: project.httpChannel,
+            auth: httpAuth,
+            basePath: base,
+            // Dev playground lists every session (`includeAll`); allow opening them
+            // (see relaxSessionReadAuth above).
+            relaxSessionReadAuth,
+            relaxSessionReadAuthBeyondLoopback,
+            relaxSessionApprovalAuth,
+        })) {
+            router.add(route);
+        }
     }
     // Playground eval list/run — available without `--dev` (corp / allow-anonymous).
     // Schedule/reminder hand-dispatch stays `--dev` only below.
@@ -1728,9 +1785,9 @@ function mountAgentRoutes(router, runtime, args) {
                 const reminderId = (_a = ctx.params.reminderId) !== null && _a !== void 0 ? _a : "";
                 try {
                     const listed = yield reminderRunner.list();
-                    const reminder = listed.find((r) => r.id === reminderId);
+                    const reminder = listed.find(r => r.id === reminderId);
                     if (reminder === undefined) {
-                        const ids = listed.map((r) => r.id);
+                        const ids = listed.map(r => r.id);
                         throw new UnknownReminderError(reminderId, ids);
                     }
                     const ownership = yield assertReminderReadable({
@@ -1841,17 +1898,17 @@ function collectCursorEventSubscriptions(input) {
     const githubTargets = findGitHubChannelTargets(input.mounts);
     const originTargets = findOriginChannelTargets(input.mounts);
     const githubEvents = [
-        ...new Set(githubTargets.flatMap((target) => target.events)),
+        ...new Set(githubTargets.flatMap(target => target.events)),
     ];
     const originEvents = [
-        ...new Set(originTargets.flatMap((target) => target.events)),
+        ...new Set(originTargets.flatMap(target => target.events)),
     ];
     const githubRepos = [
-        ...new Set(input.githubRepos.map((repo) => repo.trim().toLowerCase())),
-    ].filter((repo) => repo.length > 0);
+        ...new Set(input.githubRepos.map(repo => repo.trim().toLowerCase())),
+    ].filter(repo => repo.length > 0);
     const originRepos = [
-        ...new Set(input.originRepos.map((repo) => repo.trim().toLowerCase())),
-    ].filter((repo) => repo.length > 0);
+        ...new Set(input.originRepos.map(repo => repo.trim().toLowerCase())),
+    ].filter(repo => repo.length > 0);
     const subscriptions = [];
     if (githubEvents.length > 0 && githubRepos.length > 0) {
         for (const repo of githubRepos) {
@@ -1915,8 +1972,8 @@ function startCursorEventRelay(input) {
         else if (input.lane === "control-plane") {
             return undefined;
         }
-        else if (input.githubRepos.every((repo) => repo.trim() === "") &&
-            input.originRepos.every((repo) => repo.trim() === "")) {
+        else if (input.githubRepos.every(repo => repo.trim() === "") &&
+            input.originRepos.every(repo => repo.trim() === "")) {
             logger("[agent-sdk] cursor-events: no repos configured (pass --repo owner/name); relay disabled");
         }
         else {
@@ -1933,7 +1990,7 @@ function startCursorEventRelay(input) {
         logger,
         dispatch: (event) => __awaiter(this, void 0, void 0, function* () {
             if (event.provider === "origin") {
-                const targets = input.collectOriginTargets().filter((target) => {
+                const targets = input.collectOriginTargets().filter(target => {
                     const cursorAccount = target.options.cursorAccount;
                     if (input.cursorAccountOnly &&
                         cursorAccount !== true &&
@@ -1942,7 +1999,7 @@ function startCursorEventRelay(input) {
                     }
                     return typeof cursorAccount !== "object"
                         ? true
-                        : cursorAccount.repos.some((repo) => repo.toLowerCase() === event.repo.toLowerCase());
+                        : cursorAccount.repos.some(repo => repo.toLowerCase() === event.repo.toLowerCase());
                 });
                 const result = yield handleAgentServeTrigger(Object.assign({ type: "origin", bodyText: JSON.stringify(scmMetadataToOriginPayload(event)), targets }, (input.routeContinuation === undefined
                     ? {}
@@ -1952,7 +2009,7 @@ function startCursorEventRelay(input) {
             }
             if (event.provider !== "github")
                 return;
-            const targets = input.collectGitHubTargets().filter((target) => {
+            const targets = input.collectGitHubTargets().filter(target => {
                 const cursorAccount = target.options.cursorAccount;
                 if (input.cursorAccountOnly &&
                     cursorAccount !== true &&
@@ -1961,7 +2018,7 @@ function startCursorEventRelay(input) {
                 }
                 return typeof cursorAccount !== "object"
                     ? true
-                    : cursorAccount.repos.some((repo) => repo.toLowerCase() === event.repo.toLowerCase());
+                    : cursorAccount.repos.some(repo => repo.toLowerCase() === event.repo.toLowerCase());
             });
             const result = yield handleAgentServeTrigger(Object.assign({ type: "github", bodyText: JSON.stringify(scmEventToGitHubPayload(event)), eventName: event.eventName, deliveryId: event.deliveryId, targets }, (input.routeContinuation === undefined
                 ? {}
@@ -1978,9 +2035,9 @@ function startCursorEventRelay(input) {
 }
 function logCursorScmDispatch(logger, event, result) {
     const outcomes = result.targets
-        .map((target) => formatCursorScmDispatchOutcome(target))
+        .map(target => formatCursorScmDispatchOutcome(target))
         .join(", ");
-    const rejected = result.targets.filter((target) => target.status >= 400);
+    const rejected = result.targets.filter(target => target.status >= 400);
     if (rejected.length > 0) {
         logger(`[agent-sdk] cursor-events: dropped ${formatCursorScmEventLog(event)} before hook: ${rejected.map(formatCursorScmDispatchOutcome).join(", ")}`);
     }
@@ -2022,7 +2079,7 @@ function resolveCursorGithubEventConfig(input) {
     }
     const repos = [
         ...((_b = (_a = input.configured) === null || _a === void 0 ? void 0 : _a.repos) !== null && _b !== void 0 ? _b : []),
-        ...input.targets.flatMap((target) => { var _a; var _b; return [
+        ...input.targets.flatMap(target => { var _a; var _b; return [
             ...((_b = (_a = target.accountRuntime.scope) === null || _a === void 0 ? void 0 : _a.repos) !== null && _b !== void 0 ? _b : []),
         ]; }),
     ];
@@ -2065,10 +2122,10 @@ function resolveCursorOriginRepoScope(input) {
     if (input.targets.length === 0) {
         return undefined;
     }
-    const wantsHostRepos = input.targets.some((target) => target.accountRuntime.options.cursorAccount === true);
+    const wantsHostRepos = input.targets.some(target => target.accountRuntime.options.cursorAccount === true);
     const repos = [
         ...(wantsHostRepos ? input.explicitRepos : []),
-        ...input.targets.flatMap((target) => { var _a; var _b; return (_b = (_a = target.accountRuntime.scope) === null || _a === void 0 ? void 0 : _a.repos) !== null && _b !== void 0 ? _b : []; }),
+        ...input.targets.flatMap(target => { var _a; var _b; return (_b = (_a = target.accountRuntime.scope) === null || _a === void 0 ? void 0 : _a.repos) !== null && _b !== void 0 ? _b : []; }),
     ];
     if (repos.length === 0) {
         return undefined;
@@ -2079,7 +2136,7 @@ function buildAgentIndexEntries(runtimes) {
     return runtimes.map(({ slug, project }) => {
         var _a;
         var _b;
-        const hasSlack = project.channels.some((channel) => { var _a; return ((_a = channel.definition.meta) === null || _a === void 0 ? void 0 : _a.kind) === "slack"; });
+        const hasSlack = project.channels.some(channel => { var _a; return ((_a = channel.definition.meta) === null || _a === void 0 ? void 0 : _a.kind) === "slack"; });
         return {
             slug,
             name: project.name,
@@ -2111,7 +2168,7 @@ function collectCursorDeploymentTargets(runtimes) {
     return targets;
 }
 function liveDeploymentSubscriptionUnion(targets) {
-    return mergeResolvedSubscriptions(targets.map((target) => resolveDeploymentSubscriptions(target.options)));
+    return mergeResolvedSubscriptions(targets.map(target => resolveDeploymentSubscriptions(target.options)));
 }
 /**
  * Cursor deployment-events relay: automatic when a mounted agent authored
@@ -2140,7 +2197,7 @@ function startCursorDeploymentRelay(input) {
     const initial = liveDeploymentSubscriptionUnion(targets);
     if (initial.length === 0) {
         logger(`[agent-sdk] deployment-events: no deploy sources yet on ${targets
-            .map((target) => `${target.runtime.slug || target.runtime.project.name}/${target.channelId}`)
+            .map(target => `${target.runtime.slug || target.runtime.project.name}/${target.channelId}`)
             .join(", ")}; the relay will register when a channel lists some`);
     }
     // Same host split as scm-events: `/v0/deployment-events/*` is on
@@ -2156,10 +2213,10 @@ function startCursorDeploymentRelay(input) {
             return fanOutDeploymentEvent({
                 event,
                 logger,
-                targets: targets.map((target) => ({
+                targets: targets.map(target => ({
                     name: `${target.runtime.slug || target.runtime.project.name}/${target.channelId}`,
                     subscriptions: resolveDeploymentSubscriptions(target.options),
-                    deliver: (delivered) => dispatchDeploymentEvent({
+                    deliver: delivered => dispatchDeploymentEvent({
                         options: target.options,
                         event: delivered,
                         args: buildChannelHandlerArgs({
@@ -2187,13 +2244,17 @@ function buildChannelHandlerArgs(input) {
         host: runtime.engine.host,
         artifacts: runtime.engine.artifacts,
         send: (message, sendOptions = {}) => runtime.engine.send(channelId, message, Object.assign(Object.assign({}, sendOptions), { auth: sendOptions.auth !== undefined ? sendOptions.auth : auth, hostedSessionId: input.hostedSessionId })),
-        getSession: (sessionId) => runtime.engine.getChannelSession(channelId, sessionId),
+        getSession: sessionId => runtime.engine.getChannelSession(channelId, sessionId),
         receive: (target, inputReceive) => runtime.engine.receive(target, inputReceive),
         callTool: (toolName, toolInput, callOptions) => runtime.engine.callTool(toolName, toolInput, callOptions),
-        waitUntil: (promise) => {
+        waitUntil: promise => {
             runtime.engine.trackBackground(promise);
         },
         sessionUrls: (req, sessionId) => sessionUrlsForRequest(req, base, sessionId),
+        hasContinuationSession: continuationToken => runtime.engine.hasContinuationSession(channelId, continuationToken),
+        isContinuationBusy: continuationToken => runtime.engine.isContinuationBusy(channelId, continuationToken),
+        getContinuationLastBotMessageTs: continuationToken => runtime.engine.getContinuationLastBotMessageTs(channelId, continuationToken),
+        interruptContinuation: continuationToken => runtime.engine.interruptContinuation(channelId, continuationToken),
     };
 }
 function handleRequest(router, req, res, logger) {
@@ -2289,24 +2350,12 @@ function resolveAuth(policies, request, requestIp) {
 }
 function toFetchRequest(req) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c;
+        var _a, _b;
         const method = (_a = req.method) !== null && _a !== void 0 ? _a : "GET";
-        const hostHeader = (_b = req.headers.host) !== null && _b !== void 0 ? _b : "127.0.0.1";
-        const url = new URL((_c = req.url) !== null && _c !== void 0 ? _c : "/", `http://${hostHeader}`);
-        const headers = new Headers();
-        for (const [key, value] of Object.entries(req.headers)) {
-            if (value === undefined) {
-                continue;
-            }
-            if (Array.isArray(value)) {
-                for (const item of value) {
-                    headers.append(key, item);
-                }
-            }
-            else {
-                headers.set(key, value);
-            }
-        }
+        const hostHeader = incomingRequestHost(req.headers);
+        const url = new URL((_b = req.url) !== null && _b !== void 0 ? _b : "/", `http://${hostHeader}`);
+        // Drop HTTP/2 pseudo-headers (`:method`, …) — Fetch `Headers` rejects them.
+        const headers = incomingHeadersToFetch(req.headers);
         if (method === "GET" || method === "HEAD") {
             return new Request(url, { method, headers });
         }
@@ -2368,7 +2417,7 @@ function writeFetchResponse(response_1, res_1) {
         }
         const reader = response.body.getReader();
         let clientGone = false;
-        const closed = new Promise((resolve) => {
+        const closed = new Promise(resolve => {
             res.once("close", () => {
                 if (!res.writableFinished) {
                     clientGone = true;