@cursor/july 0.1.31 → 0.1.33

package/dist/internal/cursor-relay-core.js

@@ -92,6 +92,30 @@ function splitOffset(offset) {
 export function describeRelayError(error) {
     return error instanceof Error ? error.message : String(error);
 }
+/** Must match server-shared `AGENT_SERVE_GENERATION_HEADER`. */
+export const AGENT_SERVE_GENERATION_HEADER = "x-agent-serve-generation";
+/** Must match server-shared `AGENT_SERVE_GENERATION_ENV_VAR`. */
+export const AGENT_SERVE_GENERATION_ENV_VAR = "AGENT_SERVE_GENERATION";
+export function resolveAgentServeDeploymentGeneration(explicit) {
+    var _a;
+    if (explicit !== undefined &&
+        Number.isSafeInteger(explicit) &&
+        explicit > 0) {
+        return explicit;
+    }
+    const raw = (_a = process.env[AGENT_SERVE_GENERATION_ENV_VAR]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (raw === undefined || raw.length === 0) {
+        return undefined;
+    }
+    if (!/^\d+$/.test(raw)) {
+        return undefined;
+    }
+    const parsed = Number(raw);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+        return undefined;
+    }
+    return parsed;
+}
 export class CursorRelayCore {
     constructor(options) {
         var _a;
@@ -102,6 +126,7 @@ export class CursorRelayCore {
         this.registeredOnce = false;
         this.offsetStore = new RelayOffsetStore(options.stateDir);
         this.fetchImpl = (_a = options.fetchImpl) !== null && _a !== void 0 ? _a : fetch;
+        this.deploymentGeneration = resolveAgentServeDeploymentGeneration(options.deploymentGeneration);
     }
     start() {
         if (this.running)
@@ -216,10 +241,11 @@ export class CursorRelayCore {
             try {
                 const response = yield this.fetchImpl(url, {
                     method: "PUT",
-                    headers: {
-                        authorization: `Bearer ${this.options.apiKey}`,
-                        "content-type": "application/json",
-                    },
+                    headers: Object.assign({ authorization: `Bearer ${this.options.apiKey}`, "content-type": "application/json" }, (this.deploymentGeneration === undefined
+                        ? {}
+                        : {
+                            [AGENT_SERVE_GENERATION_HEADER]: String(this.deploymentGeneration),
+                        })),
                     body: JSON.stringify(adapter.buildDeregistrationBody(this.consumerId)),
                     signal: controller.signal,
                 });
@@ -244,7 +270,11 @@ export class CursorRelayCore {
     request(method, path, body) {
         return __awaiter(this, void 0, void 0, function* () {
             const url = `${this.options.baseUrl.replace(/\/+$/, "")}${path}`;
-            return this.fetchImpl(url, Object.assign(Object.assign({ method, headers: Object.assign({ authorization: `Bearer ${this.options.apiKey}` }, (body === undefined ? {} : { "content-type": "application/json" })) }, (body === undefined ? {} : { body: JSON.stringify(body) })), (this.abort === undefined ? {} : { signal: this.abort.signal })));
+            return this.fetchImpl(url, Object.assign(Object.assign({ method, headers: Object.assign(Object.assign({ authorization: `Bearer ${this.options.apiKey}` }, (body === undefined ? {} : { "content-type": "application/json" })), (this.deploymentGeneration === undefined
+                    ? {}
+                    : {
+                        [AGENT_SERVE_GENERATION_HEADER]: String(this.deploymentGeneration),
+                    })) }, (body === undefined ? {} : { body: JSON.stringify(body) })), (this.abort === undefined ? {} : { signal: this.abort.signal })));
         });
     }
     /** Retry registration with backoff until it succeeds or the relay stops. */
@@ -412,12 +442,16 @@ export class CursorRelayCore {
     /** Log the failure, sleep, and return the backoff for the NEXT failure. */
     backoffAfterHttpFailure(response, backoffMs) {
         return __awaiter(this, void 0, void 0, function* () {
-            const isAuthFailure = response.status === 401 || response.status === 403;
-            const sleepMs = isAuthFailure ? AUTH_FAILURE_BACKOFF_MS : backoffMs;
+            // 409 = generation fence (stale resident after redeploy). Same long
+            // backoff as auth: retrying every second cannot heal a wrong generation.
+            const isAuthOrFenceFailure = response.status === 401 ||
+                response.status === 403 ||
+                response.status === 409;
+            const sleepMs = isAuthOrFenceFailure ? AUTH_FAILURE_BACKOFF_MS : backoffMs;
             const text = yield response.text().catch(() => "");
             this.log(`poll failed: ${response.status} ${text.slice(0, 300)} (retrying in ${Math.round(sleepMs / 1000)}s)`);
             yield this.sleep(sleepMs);
-            return isAuthFailure
+            return isAuthOrFenceFailure
                 ? AUTH_FAILURE_BACKOFF_MS
                 : Math.min(backoffMs * 2, MAX_BACKOFF_MS);
         });

package/dist/internal/review-comments.d.ts

@@ -1,4 +1,5 @@
-export type ReviewCommentPublisher = "local_gh";
+import type { HostGitHubClient } from "../types.js";
+export type ReviewCommentPublisher = "local_gh" | "host_github";
 export type ReviewCommentPostResult = {
     posted: boolean;
     publisher: ReviewCommentPublisher;
@@ -47,4 +48,11 @@ export declare function prepareReviewCommentsRequest(args: ReviewCommentPostArgs
  * GH_TOKEN). Does not use the security-bugbot comments service.
  */
 export declare function createLocalGhReviewPublisher(): ReviewCommentPublisherImplementation;
+/**
+ * Posts a PR review through the host GitHub client (Cursor account lease,
+ * App installation token, or PAT). Prefer this on Cursor-deployed agents —
+ * no separate GitHub write secret is required when `githubChannel({
+ * cursorAccount })` is bound.
+ */
+export declare function createHostGithubReviewPublisher(github: HostGitHubClient): ReviewCommentPublisherImplementation;
 //# sourceMappingURL=review-comments.d.ts.map

package/dist/internal/review-comments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-comments.d.ts","sourceRoot":"","sources":["../../src/internal/review-comments.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,sBAAsB,CAAC;IAClC,IAAI,EAAE,6BAA6B,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,UAAU,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/E,CAAC;AAOF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,qBAAqB,GAEzB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAkBvD;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,oCAAoC,CAMnF"}
+{"version":3,"file":"review-comments.d.ts","sourceRoot":"","sources":["../../src/internal/review-comments.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,aAAa,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,sBAAsB,CAAC;IAClC,IAAI,EAAE,6BAA6B,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,UAAU,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/E,CAAC;AAOF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,qBAAqB,GAEzB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAkBvD;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,oCAAoC,CAMnF;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,gBAAgB,GACvB,oCAAoC,CAMtC"}

package/dist/internal/review-comments.js

@@ -43,6 +43,70 @@ export function createLocalGhReviewPublisher() {
         },
     };
 }
+/**
+ * Posts a PR review through the host GitHub client (Cursor account lease,
+ * App installation token, or PAT). Prefer this on Cursor-deployed agents —
+ * no separate GitHub write secret is required when `githubChannel({
+ * cursorAccount })` is bound.
+ */
+export function createHostGithubReviewPublisher(github) {
+    return {
+        postReview(args) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return postReviewViaHostGithub(github, args);
+            });
+        },
+    };
+}
+function postReviewViaHostGithub(github, args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const prepared = prepareReviewCommentsRequest(args);
+        if (prepared.kind === "skipped") {
+            return Object.assign(Object.assign({}, prepared.result), { publisher: "host_github" });
+        }
+        const { request } = prepared;
+        const [owner, repo] = request.repo.split("/", 2);
+        if (owner === undefined || repo === undefined || repo === "") {
+            return skippedHost("unparseable owner/repo from PR URL");
+        }
+        try {
+            (_a = args.signal) === null || _a === void 0 ? void 0 : _a.throwIfAborted();
+            const octokit = yield github.getOctokit();
+            (_b = args.signal) === null || _b === void 0 ? void 0 : _b.throwIfAborted();
+            const response = yield octokit.rest.pulls.createReview({
+                owner,
+                repo,
+                pull_number: request.prNumber,
+                commit_id: request.headSha,
+                body: request.message,
+                event: "COMMENT",
+                comments: request.comments.map(toGithubPullRequestReviewComment),
+            });
+            const htmlUrl = typeof response.data.html_url === "string"
+                ? response.data.html_url
+                : undefined;
+            const inlineCommentCount = request.comments.length;
+            return {
+                posted: true,
+                publisher: "host_github",
+                mode: inlineCommentCount > 0
+                    ? "review_with_inline_comments"
+                    : "review_body_only",
+                inlineCommentCount,
+                detail: htmlUrl
+                    ? `posted via host GitHub: ${htmlUrl}`
+                    : `posted via host GitHub with ${inlineCommentCount} inline comment(s)`,
+            };
+        }
+        catch (error) {
+            if ((_c = args.signal) === null || _c === void 0 ? void 0 : _c.aborted) {
+                throw error;
+            }
+            return skippedHost(`host GitHub review post failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    });
+}
 function postReviewViaLocalGh(args) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b;
@@ -84,6 +148,9 @@ function postReviewViaLocalGh(args) {
     });
 }
 function toGithubReviewComment(comment) {
+    return toGithubPullRequestReviewComment(comment);
+}
+function toGithubPullRequestReviewComment(comment) {
     const body = {
         path: comment.file,
         body: comment.body,
@@ -107,6 +174,15 @@ function skipped(detail) {
         detail,
     };
 }
+function skippedHost(detail) {
+    return {
+        posted: false,
+        publisher: "host_github",
+        mode: "skipped",
+        inlineCommentCount: 0,
+        detail,
+    };
+}
 function parseGithubPrUrl(prUrl) {
     let url;
     try {

package/dist/internal/server.js

@@ -727,7 +727,14 @@ function mountAgentRoutes(router, runtime, args) {
         method: "GET",
         pattern: `${base}/v1/health`,
         auth: "none",
-        handler: () => jsonResponse({ ok: true, name: project.name }),
+        // Temporal consumes this response before promoting a newly deployed pod.
+        // Include the framework build there so deploy observability gets the
+        // version from the process that will serve turns, with no second request.
+        handler: () => jsonResponse({
+            ok: true,
+            name: project.name,
+            version: packageVersion(),
+        }),
     });
     // Bootstrap the SPA can't derive from its own URL (agent name, dev mode, and
     // — in multi-agent mode — where the agents index lives).