npm - @cursor/july - Versions diffs - 0.1.19 → 0.1.21 - Mend

@cursor/july 0.1.19 → 0.1.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (217) hide show

package/AGENTS.md +10 -0
package/dist/bin/agent-serve.js +0 -0
package/dist/channels/github/instrument.d.ts +20 -0
package/dist/channels/github/instrument.d.ts.map +1 -0
package/dist/channels/slack/api.d.ts +2 -0
package/dist/channels/slack/api.d.ts.map +1 -1
package/dist/channels/slack/api.js +3 -0
package/dist/channels/slack/bot-mentions.d.ts +106 -0
package/dist/channels/slack/bot-mentions.d.ts.map +1 -0
package/dist/channels/slack/bot-mentions.js +243 -0
package/dist/channels/slack/dispatch.d.ts +6 -0
package/dist/channels/slack/dispatch.d.ts.map +1 -1
package/dist/channels/slack/dispatch.js +24 -3
package/dist/channels/slack/inbound.d.ts +10 -1
package/dist/channels/slack/inbound.d.ts.map +1 -1
package/dist/channels/slack/inbound.js +12 -4
package/dist/channels/slack/index.d.ts +1 -0
package/dist/channels/slack/index.d.ts.map +1 -1
package/dist/channels/slack/index.js +1 -0
package/dist/channels/slack/slack-channel.d.ts.map +1 -1
package/dist/channels/slack/slack-channel.js +61 -22
package/dist/channels/slack/types.d.ts +58 -0
package/dist/channels/slack/types.d.ts.map +1 -1
package/dist/docs/404.html +1 -1
package/dist/docs/ab.html +2 -2
package/dist/docs/assets/{app.CrsWMchO.js → app.jDxLzWv4.js} +1 -1
package/dist/docs/assets/chunks/@localSearchIndexroot.DoJHJjqF.js +1 -0
package/dist/docs/assets/chunks/{VPLocalSearchBox.D1JqzSh8.js → VPLocalSearchBox.Y6bDR1-a.js} +1 -1
package/dist/docs/assets/chunks/{theme.DaBvZYwl.js → theme.CLazCWlJ.js} +2 -2
package/dist/docs/building-with-agents.html +2 -2
package/dist/docs/concepts.html +2 -2
package/dist/docs/deployment.html +2 -2
package/dist/docs/evals.html +2 -2
package/dist/docs/example-agents/approval-buddy.html +2 -2
package/dist/docs/example-agents/benny.html +2 -2
package/dist/docs/example-agents/bugbot.html +2 -2
package/dist/docs/example-agents/codebase-wiki.html +2 -2
package/dist/docs/example-agents/codeowners-review.html +2 -2
package/dist/docs/example-agents/concierge.html +2 -2
package/dist/docs/example-agents/fsd.html +2 -2
package/dist/docs/example-agents/index.html +2 -2
package/dist/docs/example-agents/knowledge-base.html +2 -2
package/dist/docs/example-agents/oncall.html +2 -2
package/dist/docs/example-agents/security-reviewer.html +2 -2
package/dist/docs/example-agents/slack-agent.html +2 -2
package/dist/docs/example-agents/weather-agent.html +2 -2
package/dist/docs/guides/agent-to-agent.html +2 -2
package/dist/docs/guides/cloud-runtime.html +2 -2
package/dist/docs/guides/github.html +2 -2
package/dist/docs/guides/human-in-the-loop.html +2 -2
package/dist/docs/guides/mcp-oauth.html +2 -2
package/dist/docs/guides/slack.html +2 -2
package/dist/docs/guides/webhooks.html +2 -2
package/dist/docs/hillclimbing.html +2 -2
package/dist/docs/index.html +2 -2
package/dist/docs/quickstart.html +2 -2
package/dist/docs/reference/agent-config.html +2 -2
package/dist/docs/reference/channels.html +2 -2
package/dist/docs/reference/cli.html +2 -2
package/dist/docs/reference/connections.html +2 -2
package/dist/docs/reference/hooks.html +2 -2
package/dist/docs/reference/http-api.html +2 -2
package/dist/docs/reference/instructions.html +2 -2
package/dist/docs/reference/playground.html +2 -2
package/dist/docs/reference/project-layout.html +2 -2
package/dist/docs/reference/prompt.html +2 -2
package/dist/docs/reference/schedules.html +2 -2
package/dist/docs/reference/sessions.html +2 -2
package/dist/docs/reference/skills.html +2 -2
package/dist/docs/reference/subagents.html +2 -2
package/dist/docs/reference/tools.html +2 -2
package/dist/docs/scaffolding-agents.html +2 -2
package/dist/docs/storage.html +2 -2
package/dist/docs/troubleshooting.html +2 -2
package/dist/internal/json-dir-store.d.ts +32 -0
package/dist/internal/json-dir-store.d.ts.map +1 -0
package/dist/internal/json-dir-store.js +100 -0
package/dist/internal/resolved-connections.d.ts +1 -1
package/dist/internal/resolved-connections.d.ts.map +1 -1
package/dist/internal/resolved-connections.js +10 -0
package/dist/internal/session-engine.d.ts +4 -1
package/dist/internal/session-engine.d.ts.map +1 -1
package/dist/internal/session-engine.js +13 -2
package/dist/playground/assets/index-CjOQ4hN9.css +1 -0
package/dist/playground/assets/{index-C2SU2xV5.js → index-dshZQJCp.js} +46 -46
package/dist/playground/index.html +2 -2
package/dist/types.d.ts +7 -0
package/dist/types.d.ts.map +1 -1
package/dist/types.js +9 -0
package/package.json +25 -25
package/skills/create-agent/SKILL.md +36 -4
package/skills/evals/SKILL.md +3 -0
package/skills/framework-map/SKILL.md +14 -0
package/skills/github/SKILL.md +6 -1
package/skills/hillclimb/SKILL.md +28 -7
package/src/bin/agent-serve.version.test.ts +62 -0
package/src/channels/github/api.test.ts +64 -0
package/src/channels/github/auth.test.ts +105 -0
package/src/channels/github/cursor-account.test.ts +204 -0
package/src/channels/github/forward.test.ts +457 -0
package/src/channels/github/github.test.ts +937 -0
package/src/channels/github/replay.test.ts +179 -0
package/src/channels/slack/api.post-message.test.ts +148 -0
package/src/channels/slack/api.ts +5 -0
package/src/channels/slack/approvals.test.ts +328 -0
package/src/channels/slack/block-actions.test.ts +452 -0
package/src/channels/slack/bot-mentions.test.ts +217 -0
package/src/channels/slack/bot-mentions.ts +315 -0
package/src/channels/slack/channel-watch.test.ts +363 -0
package/src/channels/slack/cursor-account.test.ts +253 -0
package/src/channels/slack/defaults.final-post.test.ts +182 -0
package/src/channels/slack/dispatch.test.ts +795 -0
package/src/channels/slack/dispatch.ts +27 -1
package/src/channels/slack/eval-directive.test.ts +273 -0
package/src/channels/slack/inbound.ts +25 -4
package/src/channels/slack/index.ts +1 -0
package/src/channels/slack/message-body.test.ts +54 -0
package/src/channels/slack/nudge-store.test.ts +143 -0
package/src/channels/slack/slack-channel.ts +66 -8
package/src/channels/slack/slack.test.ts +391 -0
package/src/channels/slack/stop.test.ts +23 -0
package/src/channels/slack/thread-context.test.ts +202 -0
package/src/channels/slack/types.ts +60 -0
package/src/evals/assertions.test.ts +580 -0
package/src/evals/expect.test.ts +144 -0
package/src/evals/judge.test.ts +181 -0
package/src/evals/loaders.test.ts +132 -0
package/src/evals/matchers.test.ts +95 -0
package/src/evals/reporters.test.ts +303 -0
package/src/evals/run-facts.test.ts +259 -0
package/src/internal/ab-snapshot.test.ts +325 -0
package/src/internal/approval-gate.test.ts +49 -0
package/src/internal/approvals.integration.test.ts +383 -0
package/src/internal/authored-loaders.test.ts +31 -0
package/src/internal/builtin-tools/reminders.test.ts +201 -0
package/src/internal/channel-route-schema.test.ts +294 -0
package/src/internal/chat-attach.test.ts +262 -0
package/src/internal/cli-deploy.test.ts +1991 -0
package/src/internal/cli-mcp.test.ts +789 -0
package/src/internal/cli-skills.test.ts +133 -0
package/src/internal/cli-slack.test.ts +1647 -0
package/src/internal/cloud-merge.test.ts +74 -0
package/src/internal/cron.test.ts +22 -0
package/src/internal/cursor/account-mcp.test.ts +807 -0
package/src/internal/cursor/backend-client.test.ts +591 -0
package/src/internal/cursor/credentials.test.ts +351 -0
package/src/internal/cursor/github-credentials.test.ts +136 -0
package/src/internal/cursor-account-mcp-auth.test.ts +310 -0
package/src/internal/cursor-account.integration.test.ts +441 -0
package/src/internal/cursor-event-relay.test.ts +746 -0
package/src/internal/cursor-github-credentials.integration.test.ts +271 -0
package/src/internal/cursor-slack-relay.test.ts +525 -0
package/src/internal/deploy-source.test.ts +111 -0
package/src/internal/discovery.builtin-tools.test.ts +94 -0
package/src/internal/discovery.concurrency.test.ts +60 -0
package/src/internal/discovery.cursor-account.test.ts +133 -0
package/src/internal/discovery.cwd.test.ts +83 -0
package/src/internal/discovery.hosting.test.ts +80 -0
package/src/internal/discovery.identity.test.ts +44 -0
package/src/internal/docs-site.test.ts +66 -0
package/src/internal/duration.test.ts +29 -0
package/src/internal/eval-judge-model.test.ts +187 -0
package/src/internal/eval-run-store.cancel.test.ts +142 -0
package/src/internal/eval-run-store.storage.test.ts +211 -0
package/src/internal/eval-runner.http.test.ts +403 -0
package/src/internal/eval-runner.run.test.ts +928 -0
package/src/internal/evals-client.test.ts +307 -0
package/src/internal/event-mapper.test.ts +243 -0
package/src/internal/github-fanout.test.ts +213 -0
package/src/internal/handleAgentServeTrigger.test.ts +179 -0
package/src/internal/host-kv.test.ts +82 -0
package/src/internal/host-platforms.test.ts +126 -0
package/src/internal/http-channel.test.ts +402 -0
package/src/internal/init-project.test.ts +269 -0
package/src/internal/install-cursor-skills.test.ts +262 -0
package/src/internal/local-env.test.ts +100 -0
package/src/internal/log-ring.test.ts +31 -0
package/src/internal/logs-client.test.ts +350 -0
package/src/internal/mcp-endpoint.test.ts +436 -0
package/src/internal/mcp-host.test.ts +298 -0
package/src/internal/mcp-oauth.test.ts +148 -0
package/src/internal/net.test.ts +17 -0
package/src/internal/peer-connections.test.ts +128 -0
package/src/internal/peer-mcp.integration.test.ts +289 -0
package/src/internal/playground/toolchain.test.ts +53 -0
package/src/internal/playground-cli.test.ts +187 -0
package/src/internal/playground-proxy.test.ts +376 -0
package/src/internal/prompt-context.integration.test.ts +232 -0
package/src/internal/prompt-context.test.ts +127 -0
package/src/internal/reminder-runner.test.ts +390 -0
package/src/internal/reminder-store.test.ts +53 -0
package/src/internal/request-headers.test.ts +27 -0
package/src/internal/resolve-prod-target.test.ts +787 -0
package/src/internal/resolved-connections.test.ts +295 -0
package/src/internal/resolved-connections.ts +18 -1
package/src/internal/router.test.ts +57 -0
package/src/internal/sdk-runner.test.ts +290 -0
package/src/internal/session-engine.coalesce.test.ts +169 -0
package/src/internal/session-engine.concurrency.test.ts +250 -0
package/src/internal/session-engine.host-oauth-mcp.test.ts +110 -0
package/src/internal/session-engine.interrupt.test.ts +577 -0
package/src/internal/session-engine.storage.test.ts +547 -0
package/src/internal/session-engine.ts +15 -1
package/src/internal/session-urls.test.ts +28 -0
package/src/internal/sessions-client.test.ts +518 -0
package/src/internal/storage-coordinator.test.ts +517 -0
package/src/internal/tool-call.test.ts +458 -0
package/src/internal/tool-result.test.ts +52 -0
package/src/internal/trajectory.approvals.test.ts +83 -0
package/src/internal/trajectory.subagents.test.ts +198 -0
package/src/internal/turn-governor.test.ts +137 -0
package/src/internal/update-check.test.ts +485 -0
package/src/internal/workspace.test.ts +81 -0
package/src/storage-backends/cursor-hosted.test.ts +121 -0
package/src/types.ts +12 -0
package/dist/docs/assets/chunks/@localSearchIndexroot.BnHRjfoe.js +0 -1
package/dist/playground/assets/index-CidizGZv.css +0 -1

package/src/internal/playground-proxy.test.ts ADDED Viewed

@@ -0,0 +1,376 @@
+import { createServer, type Server } from "node:http";
+import { afterEach, describe, expect, it } from "vitest";
+import { startPlaygroundProxy } from "./playground-proxy.js";
+const servers: Server[] = [];
+const proxies: Array<{ close: () => Promise<void> }> = [];
+afterEach(async () => {
+  while (proxies.length > 0) {
+    const proxy = proxies.pop();
+    await proxy?.close().catch(() => {});
+  }
+  await Promise.all(
+    servers.splice(0).map(
+      (server) =>
+        new Promise<void>((resolve) => {
+          server.close(() => resolve());
+        })
+    )
+  );
+});
+function listen(
+  handler: (
+    req: import("node:http").IncomingMessage,
+    res: import("node:http").ServerResponse
+  ) => void
+): Promise<{ url: string; server: Server }> {
+  const server = createServer(handler);
+  servers.push(server);
+  return new Promise((resolve, reject) => {
+    server.listen(0, "127.0.0.1", () => {
+      const address = server.address();
+      if (address === null || typeof address === "string") {
+        reject(new Error("expected AddressInfo"));
+        return;
+      }
+      resolve({ url: `http://127.0.0.1:${address.port}`, server });
+    });
+  });
+}
+function cookieHeader(accessToken: string): Record<string, string> {
+  return { cookie: `agentkit_playground_proxy=${accessToken}` };
+}
+describe("startPlaygroundProxy", () => {
+  it("injects headers and forwards path + query", async () => {
+    let seenAuth: string | undefined;
+    let seenWake: string | undefined;
+    let seenPath: string | undefined;
+    const upstream = await listen((req, res) => {
+      seenAuth = req.headers.authorization;
+      seenWake = req.headers["x-anyrun-hibernation-lower-bound-s"] as
+        | string
+        | undefined;
+      seenPath = req.url;
+      if (req.url?.startsWith("/playground")) {
+        res.writeHead(200, { "content-type": "text/html" });
+        res.end("<html>ok</html>");
+        return;
+      }
+      if (req.url?.startsWith("/v1/health")) {
+        res.writeHead(200, { "content-type": "application/json" });
+        res.end(JSON.stringify({ ok: true }));
+        return;
+      }
+      res.writeHead(404);
+      res.end();
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      headers: {
+        authorization: "Bearer engine-token",
+        "x-anyrun-hibernation-lower-bound-s": "1800",
+      },
+    });
+    proxies.push(proxy);
+    const playground = await fetch(
+      `${proxy.localUrl}/playground?sessionId=ses_1`,
+      { headers: cookieHeader(proxy.accessToken) }
+    );
+    expect(playground.status).toBe(200);
+    expect(await playground.text()).toBe("<html>ok</html>");
+    expect(seenPath).toBe("/playground?sessionId=ses_1");
+    expect(seenAuth).toBe("Bearer engine-token");
+    expect(seenWake).toBe("1800");
+    const health = await fetch(`${proxy.localUrl}/v1/health`, {
+      headers: cookieHeader(proxy.accessToken),
+    });
+    expect(health.status).toBe(200);
+    expect(await health.json()).toEqual({ ok: true });
+  });
+  it("bootstraps access via query token then cookie", async () => {
+    const upstream = await listen((_req, res) => {
+      res.writeHead(200);
+      res.end("ok");
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      accessToken: "test-token",
+    });
+    proxies.push(proxy);
+    const denied = await fetch(`${proxy.localUrl}/v1/health`);
+    expect(denied.status).toBe(401);
+    const bootstrap = await fetch(proxy.playgroundUrl(), {
+      redirect: "manual",
+    });
+    expect(bootstrap.status).toBe(302);
+    expect(bootstrap.headers.get("location")).toBe("/playground");
+    expect(bootstrap.headers.get("set-cookie")).toContain(
+      "agentkit_playground_proxy=test-token"
+    );
+    const allowed = await fetch(`${proxy.localUrl}/v1/health`, {
+      headers: cookieHeader("test-token"),
+    });
+    expect(allowed.status).toBe(200);
+  });
+  it("streams NDJSON responses without buffering the whole body", async () => {
+    const upstream = await listen((req, res) => {
+      if (req.url !== "/v1/session/ses_x/stream?startIndex=0") {
+        res.writeHead(404);
+        res.end();
+        return;
+      }
+      res.writeHead(200, {
+        "content-type": "application/x-ndjson",
+        "cache-control": "no-cache",
+      });
+      res.write('{"type":"a"}\n');
+      setTimeout(() => {
+        res.write('{"type":"b"}\n');
+        res.end();
+      }, 20);
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      headers: { "x-test": "1" },
+    });
+    proxies.push(proxy);
+    const resp = await fetch(
+      `${proxy.localUrl}/v1/session/ses_x/stream?startIndex=0`,
+      { headers: cookieHeader(proxy.accessToken) }
+    );
+    expect(resp.status).toBe(200);
+    const text = await resp.text();
+    expect(text).toBe('{"type":"a"}\n{"type":"b"}\n');
+  });
+  it("prefers bearerToken over client Authorization", async () => {
+    let seenAuth: string | undefined;
+    const upstream = await listen((req, res) => {
+      seenAuth = req.headers.authorization;
+      res.writeHead(200);
+      res.end("ok");
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      bearerToken: "from-cli",
+    });
+    proxies.push(proxy);
+    await fetch(`${proxy.localUrl}/v1/info`, {
+      headers: {
+        ...cookieHeader(proxy.accessToken),
+        authorization: "Bearer from-browser",
+      },
+    });
+    expect(seenAuth).toBe("Bearer from-cli");
+  });
+  it("prefixes upstream pathname mounts", async () => {
+    let seenPath: string | undefined;
+    const upstream = await listen((req, res) => {
+      seenPath = req.url;
+      res.writeHead(200);
+      res.end("ok");
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: `${upstream.url}/my-agent`,
+    });
+    proxies.push(proxy);
+    await fetch(`${proxy.localUrl}/playground`, {
+      headers: cookieHeader(proxy.accessToken),
+    });
+    expect(seenPath).toBe("/my-agent/playground");
+  });
+  it("does not treat a short mount prefix as a path match", async () => {
+    let seenPath: string | undefined;
+    const upstream = await listen((req, res) => {
+      seenPath = req.url;
+      res.writeHead(200);
+      res.end("ok");
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: `${upstream.url}/v`,
+    });
+    proxies.push(proxy);
+    await fetch(`${proxy.localUrl}/v1/health`, {
+      headers: cookieHeader(proxy.accessToken),
+    });
+    expect(seenPath).toBe("/v/v1/health");
+  });
+  it("rejects mutating requests from another 127.0.0.1 origin", async () => {
+    let hits = 0;
+    const upstream = await listen((_req, res) => {
+      hits += 1;
+      res.writeHead(200);
+      res.end("ok");
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      headers: { authorization: "Bearer secret" },
+    });
+    proxies.push(proxy);
+    const csrf = await fetch(`${proxy.localUrl}/v1/session`, {
+      method: "POST",
+      headers: {
+        ...cookieHeader(proxy.accessToken),
+        origin: "http://127.0.0.1:9",
+        "content-type": "text/plain",
+      },
+      body: '{"message":"pwn"}',
+    });
+    expect(csrf.status).toBe(403);
+    expect(hits).toBe(0);
+    const ok = await fetch(`${proxy.localUrl}/v1/session`, {
+      method: "POST",
+      headers: {
+        ...cookieHeader(proxy.accessToken),
+        origin: proxy.localUrl,
+        "content-type": "application/json",
+      },
+      body: '{"message":"hi"}',
+    });
+    expect(ok.status).toBe(200);
+    expect(hits).toBe(1);
+  });
+  it("rejects absolute-form targets without forwarding credentials", async () => {
+    let hits = 0;
+    const upstream = await listen((_req, res) => {
+      hits += 1;
+      res.writeHead(200);
+      res.end("ok");
+    });
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      headers: { authorization: "Bearer secret" },
+    });
+    proxies.push(proxy);
+    const { request } = await import("node:http");
+    const status = await new Promise<number>((resolve, reject) => {
+      const req = request(
+        {
+          hostname: "127.0.0.1",
+          port: proxy.port,
+          path: "http://127.0.0.1:9/exfil",
+          method: "GET",
+          headers: cookieHeader(proxy.accessToken),
+        },
+        (res) => {
+          res.resume();
+          res.on("end", () => resolve(res.statusCode ?? 0));
+        }
+      );
+      req.on("error", reject);
+      req.end();
+    });
+    expect(status).toBe(400);
+    expect(hits).toBe(0);
+  });
+  it("refreshes credentials on upstream 401 and retries once", async () => {
+    const seen: string[] = [];
+    const upstream = await listen((req, res) => {
+      const token = String(req.headers["x-port-token"] ?? "");
+      seen.push(token);
+      if (token !== "fresh") {
+        res.writeHead(401);
+        res.end("expired");
+        return;
+      }
+      res.writeHead(200);
+      res.end("ok");
+    });
+    let refreshCount = 0;
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      headers: { "x-port-token": "stale" },
+      refreshUpstream: async () => {
+        refreshCount += 1;
+        return {
+          upstreamUrl: upstream.url,
+          headers: { "x-port-token": "fresh" },
+          expiresAt: "2099-01-01T00:00:00.000Z",
+        };
+      },
+    });
+    proxies.push(proxy);
+    const resp = await fetch(`${proxy.localUrl}/v1/health`, {
+      headers: cookieHeader(proxy.accessToken),
+    });
+    expect(resp.status).toBe(200);
+    expect(await resp.text()).toBe("ok");
+    expect(seen).toEqual(["stale", "fresh"]);
+    expect(refreshCount).toBe(1);
+  });
+  it("proactively refreshes near expiresAt", async () => {
+    let seenToken: string | undefined;
+    const upstream = await listen((req, res) => {
+      seenToken = req.headers["x-port-token"] as string | undefined;
+      res.writeHead(200);
+      res.end("ok");
+    });
+    let nowMs = Date.parse("2026-01-01T00:00:00.000Z");
+    let refreshCount = 0;
+    const proxy = await startPlaygroundProxy({
+      upstreamUrl: upstream.url,
+      headers: { "x-port-token": "old" },
+      // Within the 5-minute leeway of "now".
+      expiresAt: "2026-01-01T00:04:00.000Z",
+      now: () => nowMs,
+      refreshUpstream: async () => {
+        refreshCount += 1;
+        return {
+          upstreamUrl: upstream.url,
+          headers: { "x-port-token": "new" },
+          expiresAt: "2099-01-01T00:00:00.000Z",
+        };
+      },
+    });
+    proxies.push(proxy);
+    const resp = await fetch(`${proxy.localUrl}/v1/health`, {
+      headers: cookieHeader(proxy.accessToken),
+    });
+    expect(resp.status).toBe(200);
+    expect(seenToken).toBe("new");
+    expect(refreshCount).toBe(1);
+    // Still valid — no second refresh.
+    nowMs = Date.parse("2026-01-01T00:01:00.000Z");
+    await fetch(`${proxy.localUrl}/v1/health`, {
+      headers: cookieHeader(proxy.accessToken),
+    });
+    expect(refreshCount).toBe(1);
+  });
+});

package/src/internal/prompt-context.integration.test.ts ADDED Viewed

@@ -0,0 +1,232 @@
+import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, describe, expect, it } from "vitest";
+import { httpChannel } from "../channels.js";
+import { defineTool } from "../tools.js";
+import type {
+  AgentProject,
+  AgentRuntime,
+  DiscoveredTool,
+  RunnerTurnRequest,
+  TurnOutcome,
+} from "../types.js";
+import { setDevMode } from "./dev-mode.js";
+import { toolInputJsonSchema } from "./json-schema.js";
+import type { AgentRunner } from "./sdk-runner.js";
+import { SessionEngine } from "./session-engine.js";
+function testProject(
+  rootDir: string,
+  options: {
+    runtime?: AgentRuntime;
+    localCwd?: string;
+    tools?: DiscoveredTool[];
+  } = {}
+): AgentProject {
+  return {
+    rootDir,
+    agentDir: join(rootDir, "agent"),
+    name: "prompt-context-test",
+    agent: {
+      name: "prompt-context-test",
+      description: "Exercises framework prompt context.",
+      runtime: options.runtime ?? "local",
+      instructions: "Answer briefly.",
+      local: { cwd: options.localCwd },
+      tools: options.tools ?? [],
+      skills: [],
+      connections: [],
+      subagents: [],
+      seedFiles: [],
+    },
+    httpChannel: httpChannel(),
+    channels: [],
+    schedules: [],
+    hooks: [],
+    abs: [],
+    diagnostics: [],
+  };
+}
+function recordingRunner(requests: RunnerTurnRequest[]): AgentRunner {
+  return {
+    runTurn: async (request): Promise<TurnOutcome> => {
+      requests.push(request);
+      return { status: "finished", result: "ok" };
+    },
+  };
+}
+const cleanups: Array<() => Promise<void>> = [];
+afterEach(async () => {
+  setDevMode(false);
+  while (cleanups.length > 0) {
+    await cleanups.pop()?.();
+  }
+});
+async function makeEngine(options: {
+  runtime?: AgentRuntime;
+  localCwd?: string;
+  tools?: DiscoveredTool[];
+}): Promise<{ engine: SessionEngine; requests: RunnerTurnRequest[] }> {
+  const stateRoot = await mkdtemp(join(tmpdir(), "agent-serve-promptctx-"));
+  cleanups.push(() => rm(stateRoot, { recursive: true, force: true }));
+  const requests: RunnerTurnRequest[] = [];
+  const engine = new SessionEngine({
+    project: testProject(stateRoot, options),
+    stateRoot,
+    runner: recordingRunner(requests),
+  });
+  cleanups.push(() => engine.close());
+  return { engine, requests };
+}
+describe("framework prompt context (local runtime)", () => {
+  it("writes the identity section into AGENTS.md after the instructions", async () => {
+    const { engine } = await makeEngine({});
+    const session = await engine.send("http", "hello", { auth: null });
+    await session.waitForCompletion();
+    const agentsMd = await readFile(
+      join(engine.sessions.workspaceDir(session.id), "AGENTS.md"),
+      "utf8"
+    );
+    expect(agentsMd.startsWith("Answer briefly.")).toBe(true);
+    expect(agentsMd).toContain("## About you");
+    expect(agentsMd).toContain(
+      'You are "prompt-context-test" — Exercises framework prompt context.'
+    );
+  });
+  it("prepends the context block to the first turn only", async () => {
+    setDevMode(true);
+    const { engine, requests } = await makeEngine({});
+    const session = await engine.send("http", "hello", { auth: null });
+    await session.waitForCompletion();
+    const follow = await engine.send("http", "again", {
+      auth: null,
+      continuationToken: session.continuationToken ?? undefined,
+    });
+    await follow.waitForCompletion();
+    const first = requests[0]?.prompt ?? "";
+    expect(first.startsWith("<agentkit_context>\n")).toBe(true);
+    expect(first).toContain(`session: ${session.id}`);
+    expect(first).toContain("channel: http");
+    expect(first).toContain("environment: local dev server");
+    expect(first.endsWith("\n\nhello")).toBe(true);
+    expect(requests[1]?.prompt).toBe("again");
+  });
+  it("reports hosted deployment outside dev mode", async () => {
+    const { engine, requests } = await makeEngine({});
+    const session = await engine.send("http", "hello", { auth: null });
+    await session.waitForCompletion();
+    expect(requests[0]?.prompt).toContain("environment: hosted deployment");
+  });
+  it("inlines instructions on the first turn when the workspace is nested inside a git repo", async () => {
+    // The harness roots project rules at the nearest enclosing git root, so
+    // the scaffolded AGENTS.md in a nested (gitignored) session workspace
+    // never loads — instructions must ride in the first prompt instead.
+    const repoDir = await mkdtemp(join(tmpdir(), "agent-serve-nested-repo-"));
+    cleanups.push(() => rm(repoDir, { recursive: true, force: true }));
+    await mkdir(join(repoDir, ".git"), { recursive: true });
+    const harnessParent = join(repoDir, ".state", "harness");
+    const { engine, requests } = await makeEngine({ localCwd: harnessParent });
+    const session = await engine.send("http", "hello", { auth: null });
+    await session.waitForCompletion();
+    const follow = await engine.send("http", "again", {
+      auth: null,
+      continuationToken: session.continuationToken ?? undefined,
+    });
+    await follow.waitForCompletion();
+    const first = requests[0]?.prompt ?? "";
+    expect(first.startsWith("Answer briefly.")).toBe(true);
+    expect(first).toContain("## About you");
+    const blockIndex = first.indexOf("<agentkit_context>");
+    expect(blockIndex).toBeGreaterThan(first.indexOf("## About you"));
+    expect(first.endsWith("\n\nhello")).toBe(true);
+    expect(requests[1]?.prompt).toBe("again");
+  });
+  it("inlines instructions when the harness cwd is a per-session override", async () => {
+    // With a workspace override (e.g. a PR worktree) the scaffold lands in
+    // the durable session workspace, which the harness never roots at.
+    const overrideDir = await mkdtemp(join(tmpdir(), "agent-serve-override-"));
+    cleanups.push(() => rm(overrideDir, { recursive: true, force: true }));
+    const { engine, requests } = await makeEngine({});
+    const session = await engine.send("http", "hello", {
+      auth: null,
+      workspaceDir: overrideDir,
+    });
+    await session.waitForCompletion();
+    const first = requests[0]?.prompt ?? "";
+    expect(first.startsWith("Answer briefly.")).toBe(true);
+    expect(first).toContain("## About you");
+    expect(first).toContain("<agentkit_context>");
+  });
+  it("embeds agent tool scripts when inlining with a workspace override", async () => {
+    const overrideDir = await mkdtemp(
+      join(tmpdir(), "agent-serve-override-tools-")
+    );
+    cleanups.push(() => rm(overrideDir, { recursive: true, force: true }));
+    const pipeTool = defineTool({
+      description: "Pipe stdin to stdout.",
+      execution: "agent",
+      script: "#!/usr/bin/env bash\ncat\n",
+    });
+    const agentTool: DiscoveredTool = {
+      name: "pipe",
+      description: pipeTool.description,
+      inputSchema: toolInputJsonSchema(pipeTool.inputSchema),
+      execution: "agent",
+      script: pipeTool.script,
+      needsApproval: false,
+      definition: pipeTool,
+    };
+    const { engine, requests } = await makeEngine({ tools: [agentTool] });
+    const session = await engine.send("http", "hello", {
+      auth: null,
+      workspaceDir: overrideDir,
+    });
+    await session.waitForCompletion();
+    const first = requests[0]?.prompt ?? "";
+    expect(first).toContain(
+      "Script body (write to the path above if missing):"
+    );
+    expect(first).toContain("#!/usr/bin/env bash");
+  });
+});
+describe("framework prompt context (cloud runtime)", () => {
+  it("prepends instructions, identity, and context block on the first turn only", async () => {
+    const { engine, requests } = await makeEngine({ runtime: "cloud" });
+    const session = await engine.send("http", "hello", { auth: null });
+    await session.waitForCompletion();
+    const follow = await engine.send("http", "again", {
+      auth: null,
+      continuationToken: session.continuationToken ?? undefined,
+    });
+    await follow.waitForCompletion();
+    const first = requests[0]?.prompt ?? "";
+    expect(first.startsWith("Answer briefly.")).toBe(true);
+    expect(first).toContain("## About you");
+    const blockIndex = first.indexOf("<agentkit_context>");
+    expect(blockIndex).toBeGreaterThan(first.indexOf("## About you"));
+    expect(first).toContain(`session: ${session.id}`);
+    expect(first.endsWith("\n\nhello")).toBe(true);
+    expect(requests[1]?.prompt).toBe("again");
+  });
+});