@cursor/july 0.1.30 → 0.1.31

package/dist/internal/github-fanout.js

@@ -105,13 +105,13 @@ export function fanoutDelivery(body_1, headers_1, targets_1) {
                     body: payload,
                 });
                 if (!response.ok) {
-                    log(`[agentkit] delivery to ${label} failed: HTTP ${response.status}\n`);
+                    log(`[agent-sdk] delivery to ${label} failed: HTTP ${response.status}\n`);
                     return;
                 }
                 delivered.push(label);
             }
             catch (error) {
-                log(`[agentkit] delivery to ${label} failed: ${error instanceof Error ? error.message : String(error)}\n`);
+                log(`[agent-sdk] delivery to ${label} failed: ${error instanceof Error ? error.message : String(error)}\n`);
             }
         })));
         if (recipients.length > 0 && delivered.length === 0) {

package/dist/internal/host-files.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Author-facing durable file storage for {@link HostContext.files}.
+ *
+ * On Cursor-managed hosting the bytes live in the deployment's durable
+ * store; otherwise they land under `--state-root/files` on local disk, which
+ * is what makes `host.files` work self-hosted with no storage service at all.
+ *
+ * Everything that decides *which* bytes an author may reach lives here rather
+ * than in the sink: scope selection, path validation, and key minting through
+ * {@link fileKeys}. A sink only ever sees a fully-qualified opaque key, so an
+ * authored sink — including one a customer wrote against their own Dropbox —
+ * cannot be steered into another deployment's or another session's files.
+ */
+import { type FileSink } from "../files.js";
+import type { HostFilesApi } from "../types.js";
+export interface CreateHostFilesApiOptions {
+    agentName: string;
+    /** Local disk root for the default sink. Required unless `sink` is supplied. */
+    stateRoot?: string;
+    /** Explicit sink override (tests). Omitted → hosted store or local disk. */
+    sink?: FileSink;
+    /** Session bound for `scope: "session"` calls; prefer {@link HostFilesApi.forSession}. */
+    sessionId?: string;
+    /** Environment consulted when choosing the default sink (tests). */
+    env?: NodeJS.ProcessEnv;
+}
+/** Build the host file API for one agent process. */
+export declare function createHostFilesApi(options: CreateHostFilesApiOptions): HostFilesApi;
+//# sourceMappingURL=host-files.d.ts.map

package/dist/internal/host-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-files.d.ts","sourceRoot":"","sources":["../../src/internal/host-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAGL,KAAK,QAAQ,EAId,MAAM,aAAa,CAAC;AAMrB,OAAO,KAAK,EAGV,YAAY,EAGb,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,qDAAqD;AACrD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,YAAY,CASd"}

package/dist/internal/host-files.js

@@ -0,0 +1,283 @@
+/**
+ * Author-facing durable file storage for {@link HostContext.files}.
+ *
+ * On Cursor-managed hosting the bytes live in the deployment's durable
+ * store; otherwise they land under `--state-root/files` on local disk, which
+ * is what makes `host.files` work self-hosted with no storage service at all.
+ *
+ * Everything that decides *which* bytes an author may reach lives here rather
+ * than in the sink: scope selection, path validation, and key minting through
+ * {@link fileKeys}. A sink only ever sees a fully-qualified opaque key, so an
+ * authored sink — including one a customer wrote against their own Dropbox —
+ * cannot be steered into another deployment's or another session's files.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { join, normalize, sep } from "node:path";
+import { FilePathRejectedError, FileSessionRequiredError, FileTooLargeError, fileKeys, } from "../files.js";
+import { cursorHostedFiles, isCursorHostedFilesAvailable, } from "../files-backends/cursor-hosted.js";
+import { localFiles } from "../files-backends/local-fs.js";
+/** Build the host file API for one agent process. */
+export function createHostFilesApi(options) {
+    var _a;
+    const sink = (_a = options.sink) !== null && _a !== void 0 ? _a : createDefaultSink(options);
+    return createBoundHostFilesApi(Object.assign({ agentName: options.agentName, sink }, (options.sessionId === undefined
+        ? {}
+        : { sessionId: options.sessionId })));
+}
+/**
+ * Pick the default sink.
+ *
+ * On Cursor-managed hosting the durable store is the only correct answer —
+ * falling back to pod-local disk there would accept writes that vanish with
+ * the pod, which is the failure this surface exists to remove. Off hosting,
+ * local disk keeps `serve --dev`, replay, fixtures, and evals working with no
+ * storage service. This is the gate all six hosted agents write by hand in
+ * their `agent/storage.ts`; resolving it here means authors do not repeat it.
+ */
+function createDefaultSink(options) {
+    var _a;
+    if (isCursorHostedFilesAvailable((_a = options.env) !== null && _a !== void 0 ? _a : process.env)) {
+        return cursorHostedFiles();
+    }
+    if (options.stateRoot === undefined) {
+        throw new Error("createHostFilesApi needs a stateRoot for the default local-disk sink, or an explicit sink");
+    }
+    return localFiles({
+        filesRoot: join(options.stateRoot, "files"),
+        stripKeyPrefix: localKeyPrefix(options.agentName),
+    });
+}
+/** On-disk layout drops the framework key prefix so paths stay navigable. */
+function localKeyPrefix(agentName) {
+    return fileKeys.deploymentPrefix(agentName).replace(/deployment\/$/, "");
+}
+function createBoundHostFilesApi(state) {
+    var _a;
+    const sinkCaps = (_a = state.sink.capabilities) !== null && _a !== void 0 ? _a : {};
+    const capabilities = Object.assign({ conflictDetection: sinkCaps.etags === true, materialized: sinkCaps.materialized === true &&
+            typeof state.sink.materializedPath === "function" }, (sinkCaps.maxBytes === undefined ? {} : { maxBytes: sinkCaps.maxBytes }));
+    const keyFor = (path, scope) => mintKey(state, path, scope);
+    const api = {
+        capabilities,
+        forSession(sessionId) {
+            const trimmed = sessionId.trim();
+            if (trimmed === "") {
+                throw new FileSessionRequiredError("host.files.forSession requires a non-empty session id");
+            }
+            return createBoundHostFilesApi(Object.assign(Object.assign({}, state), { sessionId: trimmed }));
+        },
+        read(path, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a;
+                const bytes = yield api.readBytes(path, options);
+                return bytes === undefined
+                    ? undefined
+                    : Buffer.from(bytes).toString((_a = options === null || options === void 0 ? void 0 : options.encoding) !== null && _a !== void 0 ? _a : "utf8");
+            });
+        },
+        readBytes(path, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const found = yield state.sink.get(keyFor(path, options === null || options === void 0 ? void 0 : options.scope));
+                if (found === undefined) {
+                    return undefined;
+                }
+                return found instanceof Uint8Array ? found : found.body;
+            });
+        },
+        write(path, data, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const key = keyFor(path, options === null || options === void 0 ? void 0 : options.scope);
+                const body = typeof data === "string"
+                    ? Buffer.from(data, "utf8")
+                    : Buffer.from(data);
+                const maxBytes = capabilities.maxBytes;
+                if (maxBytes !== undefined && body.byteLength > maxBytes) {
+                    throw new FileTooLargeError(key, body.byteLength, maxBytes);
+                }
+                yield state.sink.put(key, body, (options === null || options === void 0 ? void 0 : options.ifMatch) === undefined
+                    ? undefined
+                    : { ifMatch: options.ifMatch });
+            });
+        },
+        remove(path, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                yield state.sink.delete(keyFor(path, options === null || options === void 0 ? void 0 : options.scope));
+            });
+        },
+        exists(path, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return (yield api.stat(path, options)) !== undefined;
+            });
+        },
+        stat(path, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const key = keyFor(path, options === null || options === void 0 ? void 0 : options.scope);
+                const entry = yield statKey(state.sink, key);
+                if (entry === undefined) {
+                    return undefined;
+                }
+                return Object.assign(Object.assign({ size: entry.size }, (entry.mtimeMs === undefined ? {} : { mtimeMs: entry.mtimeMs })), (entry.etag === undefined ? {} : { etag: entry.etag }));
+            });
+        },
+        list(prefix, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const scopePrefix = mintPrefix(state, options === null || options === void 0 ? void 0 : options.scope);
+                const rel = prefix === undefined ? "" : normalizeRelPath(prefix, true);
+                const entries = yield state.sink.list(`${scopePrefix}${rel}`);
+                const out = [];
+                for (const entry of entries) {
+                    if (!entry.key.startsWith(scopePrefix)) {
+                        // A sink that widens the prefix must not leak keys from another
+                        // scope through a listing.
+                        continue;
+                    }
+                    out.push(Object.assign({ path: entry.key.slice(scopePrefix.length), size: entry.size }, (entry.mtimeMs === undefined ? {} : { mtimeMs: entry.mtimeMs })));
+                }
+                return out.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+            });
+        },
+        materializedPath(path, options) {
+            var _a, _b;
+            if (!capabilities.materialized) {
+                return undefined;
+            }
+            return (_b = (_a = state.sink).materializedPath) === null || _b === void 0 ? void 0 : _b.call(_a, keyFor(path, options === null || options === void 0 ? void 0 : options.scope));
+        },
+    };
+    return api;
+}
+function statKey(sink, key) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (typeof sink.stat === "function") {
+            return yield sink.stat(key);
+        }
+        const entries = yield sink.list(key);
+        return entries.find((entry) => entry.key === key);
+    });
+}
+// ============================================================================
+// Key minting
+// ============================================================================
+function mintKey(state, path, scope) {
+    const rel = normalizeRelPath(path, false);
+    const resolved = resolveScope(state, scope);
+    if (resolved.kind === "session") {
+        return fileKeys.session(state.agentName, resolved.sessionId, rel);
+    }
+    return resolved.partition === undefined
+        ? fileKeys.deployment(state.agentName, rel)
+        : fileKeys.deploymentPartition(state.agentName, resolved.partition, rel);
+}
+function mintPrefix(state, scope) {
+    const resolved = resolveScope(state, scope);
+    if (resolved.kind === "session") {
+        return fileKeys.sessionPrefix(state.agentName, resolved.sessionId);
+    }
+    const base = fileKeys.deploymentPrefix(state.agentName);
+    return resolved.partition === undefined
+        ? base
+        : `${base}${resolved.partition}/`;
+}
+function resolveScope(state, scope) {
+    var _a;
+    if (scope === "deployment") {
+        return { kind: "deployment" };
+    }
+    if (scope !== undefined && typeof scope === "object") {
+        if (scope.kind === "deployment") {
+            return scope.partition === undefined
+                ? { kind: "deployment" }
+                : { kind: "deployment", partition: segment(scope.partition) };
+        }
+        const explicit = (_a = scope.sessionId) !== null && _a !== void 0 ? _a : state.sessionId;
+        return { kind: "session", sessionId: requireSession(explicit) };
+    }
+    // Default and explicit `"session"` both bind to the caller's own session, so
+    // a relative path can never be re-read as another session's.
+    return { kind: "session", sessionId: requireSession(state.sessionId) };
+}
+function requireSession(sessionId) {
+    if (sessionId === undefined || sessionId.trim() === "") {
+        throw new FileSessionRequiredError("host.files needs a session in scope: call forSession(sessionId), pass { scope: { kind: 'session', sessionId } }, or use { scope: 'deployment' }");
+    }
+    return segment(sessionId);
+}
+/**
+ * Normalize an author path into key-relative form. Rejects traversal, NUL,
+ * backslashes, trailing slashes, and the `.cursor*` prefix the Agent Store
+ * reserves for Cursor-managed content — refusing here turns an opaque failure
+ * deep in a sink (or a 400 from the hosted API, which accepts each path in
+ * exactly one spelling) into one the author can act on, and keeps the rule
+ * identical across sinks.
+ */
+function normalizeRelPath(path, allowEmpty) {
+    if (typeof path !== "string") {
+        throw new FilePathRejectedError("host.files path must be a string");
+    }
+    const trimmed = path.trim().replace(/^\/+/, "");
+    if (trimmed === "") {
+        if (allowEmpty) {
+            return "";
+        }
+        throw new FilePathRejectedError("host.files path must be non-empty");
+    }
+    if (trimmed.includes("\0")) {
+        throw new FilePathRejectedError(`host.files path is not allowed: ${path}`);
+    }
+    // A backslash is a separator on Windows and a literal on POSIX, so a key
+    // minted from one would name different objects on different hosts — and the
+    // hosted API refuses it. Same rule as `segment()` below.
+    if (trimmed.includes("\\")) {
+        throw new FilePathRejectedError(`host.files path is not allowed: ${path}`);
+    }
+    // On an object path, a trailing slash would mint a key ending in "/" — an
+    // empty "directory marker" object, never what an author writing a file
+    // meant, and refused by the hosted API. A listing prefix (`allowEmpty`) is
+    // a different thing: there a trailing slash legitimately scopes to a
+    // directory's contents.
+    if (!allowEmpty && trimmed.endsWith("/")) {
+        throw new FilePathRejectedError(`host.files path is not allowed: ${path}`);
+    }
+    const normalized = normalize(trimmed).split(sep).join("/");
+    if (normalized === ".." ||
+        normalized === "." ||
+        normalized.startsWith("../") ||
+        normalized.includes("/../") ||
+        normalized.endsWith("/..")) {
+        throw new FilePathRejectedError(`host.files path is not allowed: ${path}`);
+    }
+    for (const part of normalized.split("/")) {
+        if (isReservedSegment(part)) {
+            throw new FilePathRejectedError(`host.files path segment "${part}" is reserved for Cursor-managed content: ${path}`);
+        }
+    }
+    return normalized;
+}
+/** One key segment (session id, partition): no separators, no traversal. */
+function segment(value) {
+    const trimmed = value.trim();
+    if (trimmed === "" ||
+        trimmed === "." ||
+        trimmed === ".." ||
+        trimmed.includes("/") ||
+        trimmed.includes("\\") ||
+        trimmed.includes("\0")) {
+        throw new FilePathRejectedError(`host.files key segment is not allowed: ${value}`);
+    }
+    if (isReservedSegment(trimmed)) {
+        throw new FilePathRejectedError(`host.files key segment "${trimmed}" is reserved for Cursor-managed content`);
+    }
+    return trimmed;
+}
+/** Mirrors the server's reserved-prefix rule (`AGENT_STORE_RESERVED_CURSOR_PATH_PREFIX`). */
+function isReservedSegment(value) {
+    return value.toLowerCase().startsWith(".cursor");
+}

package/dist/internal/host-platforms.js

@@ -90,7 +90,7 @@ export function warmupHostGitHubAuth(options) {
         var _a;
         const source = (_a = options.authSource) !== null && _a !== void 0 ? _a : (yield resolveHostGitHubAuthSource());
         if (source === "unavailable") {
-            options.logger("[agentkit] GitHub auth: unavailable (set GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY + GITHUB_APP_INSTALLATION_ID, or GITHUB_TOKEN / GH_TOKEN, or run `gh auth login`)");
+            options.logger("[agent-sdk] GitHub auth: unavailable (set GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY + GITHUB_APP_INSTALLATION_ID, or GITHUB_TOKEN / GH_TOKEN, or run `gh auth login`)");
             return source;
         }
         let exportedGhToken = false;
@@ -99,7 +99,7 @@ export function warmupHostGitHubAuth(options) {
                 exportedGhToken = yield ensureGhCliTokenEnv();
             }
             catch (error) {
-                options.logger(`[agentkit] GitHub auth: failed to export GH_TOKEN for gh CLI: ${error instanceof Error ? error.message : String(error)}`);
+                options.logger(`[agent-sdk] GitHub auth: failed to export GH_TOKEN for gh CLI: ${error instanceof Error ? error.message : String(error)}`);
             }
         }
         const label = source === "cursor-account"
@@ -112,15 +112,15 @@ export function warmupHostGitHubAuth(options) {
                     ? "GITHUB_TOKEN/GH_TOKEN"
                     : "gh auth token";
         if (options.github === undefined) {
-            options.logger(`[agentkit] GitHub auth: ${label}`);
+            options.logger(`[agent-sdk] GitHub auth: ${label}`);
             return source;
         }
         try {
             yield options.github.getOctokit();
-            options.logger(`[agentkit] GitHub auth: ${label}`);
+            options.logger(`[agent-sdk] GitHub auth: ${label}`);
         }
         catch (error) {
-            options.logger(`[agentkit] GitHub auth: ${label} resolved but Octokit warmup failed: ${error instanceof Error ? error.message : String(error)}`);
+            options.logger(`[agent-sdk] GitHub auth: ${label} resolved but Octokit warmup failed: ${error instanceof Error ? error.message : String(error)}`);
         }
         return source;
     });

package/dist/internal/hosting.d.ts

@@ -1,7 +1,7 @@
 /**
  * Client-side mirrors of the Agent Serve hosting validation rules
  * (backend/server/src/agentServe/agentServeShared.ts). Shared by discovery
- * (`hosting` block diagnostics on `agentkit validate`) and the deploy /
+ * (`hosting` block diagnostics on `agent-sdk validate`) and the deploy /
  * secrets CLI verbs (actionable errors before any network call). The
  * backend stays authoritative — these exist so mistakes fail fast and
  * locally with the same grammar the server enforces.

package/dist/internal/hosting.js

@@ -1,7 +1,7 @@
 /**
  * Client-side mirrors of the Agent Serve hosting validation rules
  * (backend/server/src/agentServe/agentServeShared.ts). Shared by discovery
- * (`hosting` block diagnostics on `agentkit validate`) and the deploy /
+ * (`hosting` block diagnostics on `agent-sdk validate`) and the deploy /
  * secrets CLI verbs (actionable errors before any network call). The
  * backend stays authoritative — these exist so mistakes fail fast and
  * locally with the same grammar the server enforces.

package/dist/internal/http-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-channel.d.ts","sourceRoot":"","sources":["../../src/internal/http-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,UAAU,EACV,qBAAqB,EAErB,aAAa,EACd,MAAM,aAAa,CAAC;AAQrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAML,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAQ7B,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,kCAAkC,CAAC,EAAE,OAAO,CAAC;IAC7C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GAAG,WAAW,EAAE,CA0YhB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,WAAW,GAAG,IAAI,EAC1B,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GACA,QAAQ,GAAG,SAAS,CAiBtB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,OAAO,EACb,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAC/D,QAAQ,CAQV;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,QAAQ,CAEV;AAoGD,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAc9C"}
+{"version":3,"file":"http-channel.d.ts","sourceRoot":"","sources":["../../src/internal/http-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,UAAU,EACV,qBAAqB,EAErB,aAAa,EACd,MAAM,aAAa,CAAC;AAQrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAML,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAQ7B,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,kCAAkC,CAAC,EAAE,OAAO,CAAC;IAC7C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GAAG,WAAW,EAAE,CAwahB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,WAAW,GAAG,IAAI,EAC1B,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GACA,QAAQ,GAAG,SAAS,CAiBtB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,OAAO,EACb,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAC/D,QAAQ,CAQV;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,QAAQ,CAEV;AAoGD,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAc9C"}

package/dist/internal/http-channel.js

@@ -216,6 +216,31 @@ export function buildHttpChannelRoutes(args) {
             });
         }),
     };
+    const cost = {
+        method: "GET",
+        pattern: `${base}/v1/session/:sessionId/cost`,
+        auth,
+        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
+            const record = yield engine.getOrRestoreSession(sessionId);
+            if (record === undefined) {
+                return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
+            }
+            const ownership = requireSessionOwner(record, ctx.auth, {
+                relax: relaxSessionReadAuth,
+                beyondLoopback: relaxSessionReadAuthBeyondLoopback,
+                requestIp: ctx.requestIp,
+            });
+            if (ownership !== undefined) {
+                return ownership;
+            }
+            const payload = yield engine.sessionCost(sessionId);
+            return jsonResponse(payload, {
+                headers: { [SESSION_ID_HEADER]: sessionId },
+            });
+        }),
+    };
     const listApprovals = {
         method: "GET",
         pattern: `${base}/v1/session/:sessionId/approvals`,
@@ -325,6 +350,7 @@ export function buildHttpChannelRoutes(args) {
         stop,
         stream,
         events,
+        cost,
         listApprovals,
         resolveApproval,
     ];

package/dist/internal/install-cursor-skills.d.ts

@@ -69,7 +69,7 @@ export declare function planSkillInstall(options?: {
     packageRoot?: string;
     skillsHome?: string;
 }): Promise<SkillInstallPlan>;
-/** `Installed 9 agentkit skills`, what it dropped, and where it went. */
+/** `Installed 9 Agent SDK skills`, what it dropped, and where it went. */
 export declare function formatSkillInstall(plan: SkillInstallPlan, result: SkillInstallResult): string;
 export interface OfferInstallCursorSkillsOptions {
     /** Skip when false (non-TTY / `--json`). */

package/dist/internal/install-cursor-skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-cursor-skills.d.ts","sourceRoot":"","sources":["../../src/internal/install-cursor-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,aAAa,CAAC;AAElD,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,MAAsC,GAC3C,MAAM,CAGR;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,UAAU,GAAE,MAA2B,GACtC,MAAM,CAER;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EACpC,UAAU,GAAE,MAA2B,GACtC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,GAAE,MAAyB,GACrC,OAAO,CAAC,YAAY,EAAE,CAAC,CA2BzB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAY1B;AAED,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,UAAU,GAAE,MAA2B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAsB7B;AAmBD,oFAAoF;AACpF,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAY5E;AAoBD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,+EAA+E;IAC/E,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,kBAAkB,GACzB,MAAM,CASR;AAED,MAAM,WAAW,+BAA+B;IAC9C,4CAA4C;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA2DpD;AAmBD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAsB9B"}
+{"version":3,"file":"install-cursor-skills.d.ts","sourceRoot":"","sources":["../../src/internal/install-cursor-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,aAAa,CAAC;AAElD,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,MAAsC,GAC3C,MAAM,CAGR;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,UAAU,GAAE,MAA2B,GACtC,MAAM,CAER;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EACpC,UAAU,GAAE,MAA2B,GACtC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,GAAE,MAAyB,GACrC,OAAO,CAAC,YAAY,EAAE,CAAC,CA2BzB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAY1B;AAED,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,UAAU,GAAE,MAA2B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CA2B7B;AAwCD,oFAAoF;AACpF,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAY5E;AAoBD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,+EAA+E;IAC/E,YAAY,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,kBAAkB,GACzB,MAAM,CASR;AAED,MAAM,WAAW,+BAA+B;IAC9C,4CAA4C;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA2DpD;AAmBD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAsB9B"}

package/dist/internal/install-cursor-skills.js

@@ -15,7 +15,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import { access, cp, mkdir, readdir, readFile, rm, writeFile, } from "node:fs/promises";
+import { access, chmod, cp, mkdir, readdir, readFile, rm, stat, writeFile, } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { CLI_COMMAND_NAME, packageRootDir } from "./distribution.js";
@@ -115,6 +115,11 @@ export function installCursorSkills(skills_1) {
         for (const skill of skills) {
             const target = skillInstallPath(skill, skillsHome);
             yield cp(skill.sourceDir, target, { recursive: true, force: true });
+            // cp() preserves source modes, and installs can come from read-only
+            // stores (Bazel runfiles, pnpm's content-addressed store, nix). Make the
+            // copies writable so the SKILL.md rewrite below and the overwrite on the
+            // next upgrade both work.
+            yield makeTreeWritable(target);
             const skillMdPath = join(target, "SKILL.md");
             const raw = yield readFile(skillMdPath, "utf8");
             const adjusted = prepareSkillMarkdownForCursorInstall(raw);
@@ -126,6 +131,30 @@ export function installCursorSkills(skills_1) {
         return { installed, removed };
     });
 }
+function makeTreeWritable(root) {
+    return __awaiter(this, void 0, void 0, function* () {
+        yield addOwnerWrite(root);
+        const entries = yield readdir(root, { withFileTypes: true });
+        for (const entry of entries) {
+            const child = join(root, entry.name);
+            if (entry.isDirectory()) {
+                yield makeTreeWritable(child);
+            }
+            else {
+                yield addOwnerWrite(child);
+            }
+        }
+    });
+}
+/** Add owner-write, preserving every other mode bit (e.g. exec on scripts). */
+function addOwnerWrite(path) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const mode = (yield stat(path)).mode & 0o7777;
+        if ((mode & 0o200) === 0) {
+            yield chmod(path, mode | 0o200);
+        }
+    });
+}
 /** Installed leaf dirs the package no longer ships. Installing deletes these. */
 function orphanLeaves(namespaceDir, skills) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -193,11 +222,11 @@ export function planSkillInstall(options) {
         };
     });
 }
-/** `Installed 9 agentkit skills`, what it dropped, and where it went. */
+/** `Installed 9 Agent SDK skills`, what it dropped, and where it went. */
 export function formatSkillInstall(plan, result) {
     const noun = result.installed.length === 1 ? "skill" : "skills";
     const verb = plan.firstInstall ? "Installed" : "Updated";
-    const lines = [`${verb} ${result.installed.length} agentkit ${noun}`];
+    const lines = [`${verb} ${result.installed.length} Agent SDK ${noun}`];
     if (result.removed.length > 0) {
         lines.push(`  removed:  ${result.removed.join(", ")}`);
     }
@@ -228,7 +257,7 @@ export function offerInstallCursorSkills() {
         const noun = plan.shipped.length === 1 ? "skill" : "skills";
         const verb = plan.firstInstall ? "Install" : "Update";
         const c = stdoutPalette();
-        out(`${verb} ${plan.shipped.length} agentkit ${noun} in ${plan.directory}?\n`);
+        out(`${verb} ${plan.shipped.length} Agent SDK ${noun} in ${plan.directory}?\n`);
         out(c.dim(`  ${plan.leaves.join(", ")}\n`));
         if (!plan.firstInstall) {
             out(c.dim("  (overwrites existing copies with the package version)\n"));

package/dist/internal/local-control-plane.js

@@ -74,7 +74,7 @@ export function createLocalControlPlane(opts) {
                         continue;
                     }
                     void opts.fireSchedule(name).catch((error) => {
-                        logger(`[agentkit] schedule "${name}" dispatch failed: ${error instanceof Error ? error.message : String(error)}`);
+                        logger(`[agent-sdk] schedule "${name}" dispatch failed: ${error instanceof Error ? error.message : String(error)}`);
                     });
                 }
             }
@@ -102,7 +102,7 @@ export function createLocalControlPlane(opts) {
                     return;
                 }
                 void opts.fireReminder(current.id, current.fireCount).catch((error) => {
-                    logger(`[agentkit] reminder "${current.id}" dispatch failed: ${error instanceof Error ? error.message : String(error)}`);
+                    logger(`[agent-sdk] reminder "${current.id}" dispatch failed: ${error instanceof Error ? error.message : String(error)}`);
                 });
             }, delay);
             (_a = timer.unref) === null || _a === void 0 ? void 0 : _a.call(timer);

package/dist/internal/logs-client.d.ts

@@ -1,5 +1,5 @@
 /**
- * `agentkit logs` — follow deploy progress (hosted) then runtime `/v1/logs`.
+ * `agent-sdk logs` — follow deploy progress (hosted) then runtime `/v1/logs`.
  *
  * Customer-facing output never includes hosting URLs, tokens, or infra jargon.
  */
@@ -24,7 +24,7 @@ export declare function progressMessage(progress: LogsProgress, lastError?: stri
 /** Strip obvious hosting internals from error text shown to customers. */
 export declare function sanitizeCustomerError(message: string): string;
 /**
- * One-line label for `agentkit deploy` polling (TTY spinner / non-TTY
+ * One-line label for `agent-sdk deploy` polling (TTY spinner / non-TTY
  * transitions). Uses statusMessage → progress → raw status.
  */
 export declare function deployProgressLabel(detail: {

package/dist/internal/logs-client.js

@@ -1,5 +1,5 @@
 /**
- * `agentkit logs` — follow deploy progress (hosted) then runtime `/v1/logs`.
+ * `agent-sdk logs` — follow deploy progress (hosted) then runtime `/v1/logs`.
  *
  * Customer-facing output never includes hosting URLs, tokens, or infra jargon.
  */
@@ -75,7 +75,7 @@ export function sanitizeCustomerError(message) {
         .replace(/\bgitCheckout:fetch\b/gi, "checkout");
 }
 /**
- * One-line label for `agentkit deploy` polling (TTY spinner / non-TTY
+ * One-line label for `agent-sdk deploy` polling (TTY spinner / non-TTY
  * transitions). Uses statusMessage → progress → raw status.
  */
 export function deployProgressLabel(detail) {

package/dist/internal/mcp-endpoint.js

@@ -75,7 +75,7 @@ export function handleStatelessMcpRequest(args) {
             return yield transport.handleRequest(args.request);
         }
         catch (error) {
-            logger(`[agentkit] ${args.label} request failed: ${describeError(error)}`);
+            logger(`[agent-sdk] ${args.label} request failed: ${describeError(error)}`);
             return new Response(JSON.stringify({
                 jsonrpc: "2.0",
                 error: { code: -32603, message: "Internal server error." },

package/dist/internal/mcp-oauth.js

@@ -221,7 +221,7 @@ export class HostMcpOAuthProvider {
             token_endpoint_auth_method: "none",
             grant_types: ["authorization_code", "refresh_token"],
             response_types: ["code"],
-            client_name: "agentkit",
+            client_name: "Agent SDK",
         };
     }
     get redirectUrl() {
@@ -347,7 +347,7 @@ export function waitForMcpOAuthCallback(args) {
                 if (code) {
                     res
                         .writeHead(200, { "content-type": "text/html; charset=utf-8" })
-                        .end("<!doctype html><html><body><h1>Authorized</h1><p>Return to agentkit.</p></body></html>");
+                        .end("<!doctype html><html><body><h1>Authorized</h1><p>Return to Agent SDK.</p></body></html>");
                     finish({ code, state });
                     return;
                 }

package/dist/internal/platform-schedule-sync.js

@@ -30,7 +30,7 @@ export function syncHostedPlatformSchedules(args) {
             }
             catch (error) {
                 failedDeletes.push(name);
-                args.logger(`[agentkit] platform timer delete failed for schedule "${name}": ${error instanceof Error ? error.message : String(error)}`);
+                args.logger(`[agent-sdk] platform timer delete failed for schedule "${name}": ${error instanceof Error ? error.message : String(error)}`);
             }
         }
         for (const schedule of args.schedules) {
@@ -41,7 +41,7 @@ export function syncHostedPlatformSchedules(args) {
                 });
             }
             catch (error) {
-                args.logger(`[agentkit] platform timer upsert failed for schedule "${schedule.name}": ${error instanceof Error ? error.message : String(error)}`);
+                args.logger(`[agent-sdk] platform timer upsert failed for schedule "${schedule.name}": ${error instanceof Error ? error.message : String(error)}`);
             }
         }
         // Keep failed removals in the catalog so the next boot retries them.