@cursor/july 0.1.32 → 0.1.34

package/dist/internal/init-project.js

@@ -151,7 +151,7 @@ export default memoryHook();
         };
     });
 }
-function isEexist(error) {
+export function isEexist(error) {
     return (error !== null &&
         typeof error === "object" &&
         "code" in error &&

package/dist/internal/mcp-endpoint.d.ts

@@ -22,6 +22,8 @@ import { type SessionEngine } from "./session-engine.js";
 export declare const MCP_CHANNEL_ID = "mcp";
 /** Mount path of the MCP surface, relative to the agent base. */
 export declare const MCP_ENDPOINT_PATH = "/v1/mcp";
+/** Direct authored server tools used by this agent's cloud turns. */
+export declare const TOOL_MCP_ENDPOINT_PATH = "/v1/mcp/tools";
 export interface AgentMcpEndpoint {
     /**
      * Handle one HTTP request to the MCP mount. `auth` is the principal
@@ -55,5 +57,9 @@ export declare function createAgentMcpEndpoint(args: {
     engine: SessionEngine;
     logger?: (line: string) => void;
 }): AgentMcpEndpoint;
+export declare function createToolMcpEndpoint(args: {
+    engine: SessionEngine;
+    logger?: (line: string) => void;
+}): AgentMcpEndpoint;
 export {};
 //# sourceMappingURL=mcp-endpoint.d.ts.map

package/dist/internal/mcp-endpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-endpoint.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AAEzH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAGZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,aAAa,EAKnB,MAAM,qBAAqB,CAAC;AAE7B,uEAAuE;AACvE,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAU3C,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvE;AAED,yEAAyE;AACzE,UAAU,oBAAoB;IAC5B,OAAO,CAAC,SAAS,EAAE,wCAAwC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,oBAAoB,CAAC;IACxC,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyCpB;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CAMpE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,GAAG,gBAAgB,CAanB"}
+{"version":3,"file":"mcp-endpoint.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AAOzH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAGZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,aAAa,EAKnB,MAAM,qBAAqB,CAAC;AAE7B,uEAAuE;AACvE,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAC3C,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AAUtD,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvE;AAED,yEAAyE;AACzE,UAAU,oBAAoB;IAC5B,OAAO,CAAC,SAAS,EAAE,wCAAwC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,oBAAoB,CAAC;IACxC,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyCpB;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CAMpE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,GAAG,gBAAgB,CAanB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,GAAG,gBAAgB,CAyBnB"}

package/dist/internal/mcp-endpoint.js

@@ -24,8 +24,10 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { z } from "zod";
 import { samePrincipal } from "./auth.js";
 import { SessionBusyError, ToolInputError, ToolNotDirectlyCallableError, UnknownSessionError, UnknownToolError, } from "./session-engine.js";
@@ -33,6 +35,8 @@ import { SessionBusyError, ToolInputError, ToolNotDirectlyCallableError, Unknown
 export const MCP_CHANNEL_ID = "mcp";
 /** Mount path of the MCP surface, relative to the agent base. */
 export const MCP_ENDPOINT_PATH = "/v1/mcp";
+/** Direct authored server tools used by this agent's cloud turns. */
+export const TOOL_MCP_ENDPOINT_PATH = "/v1/mcp/tools";
 /**
  * Bounded waits stay below the MCP client default request timeout (60s) so
  * a long model turn degrades to `status: "running"` instead of a client
@@ -103,6 +107,123 @@ export function createAgentMcpEndpoint(args) {
         },
     };
 }
+export function createToolMcpEndpoint(args) {
+    const { engine, logger } = args;
+    return {
+        handle(request) {
+            const url = new URL(request.url);
+            const sessionId = url.searchParams.get("agentkitSessionId");
+            // `connection=<name>` serves a host connection bridge instead of the
+            // authored server tools: same endpoint, same auth, same session
+            // binding, but tools/list and tools/call forward to `host.mcp` for
+            // that connection (see buildConnectionBridgeMcpServer).
+            const connection = url.searchParams.get("connection");
+            return handleStatelessMcpRequest(Object.assign({ request, buildServer: () => connection === null
+                    ? buildToolMcpServer(engine, sessionId)
+                    : buildConnectionBridgeMcpServer(engine, sessionId, connection), label: connection === null
+                    ? "tool mcp endpoint"
+                    : `connection bridge mcp endpoint (${connection})` }, (logger === undefined ? {} : { logger })));
+        },
+    };
+}
+function buildToolMcpServer(engine, sessionId) {
+    const server = new Server({ name: `${engine.project.name}:tools`, version: "0.1.0" }, {
+        capabilities: { tools: {} },
+        instructions: "Direct tools implemented by the AgentSDK deployment for its active cloud turn.",
+    });
+    const tools = engine.project.agent.tools.filter((tool) => tool.execution === "server");
+    server.setRequestHandler(ListToolsRequestSchema, () => Promise.resolve({
+        tools: tools.map((tool) => ({
+            name: tool.name,
+            description: tool.description,
+            inputSchema: tool.inputSchema,
+        })),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, (request) => __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        if (sessionId === null || sessionId === "") {
+            return errorResult("Missing AgentSDK session binding.");
+        }
+        const tool = tools.find((candidate) => candidate.name === request.params.name);
+        if (tool === undefined) {
+            return errorResult(`Unknown server tool "${request.params.name}".`);
+        }
+        const result = yield engine.callActiveServerTool(sessionId, tool.name, (_a = request.params.arguments) !== null && _a !== void 0 ? _a : {});
+        return sdkResultToMcpResult(result);
+    }));
+    return server;
+}
+/**
+ * Host connection bridge: one authored MCP connection served to a cloud turn
+ * over the tool MCP endpoint. Listing and calling forward to the host-side
+ * client (`host.mcp`), where the connection's credential — account bridge
+ * secret or host OAuth token — actually lives, so nothing key-shaped ever
+ * travels in the turn's MCP config or lands on the VM.
+ *
+ * The engine gates access twice, mirroring the authored server-tool path:
+ * only bridgeable names (`isCloudBridgedConnection`) — `hostOnly`
+ * connections and unknown names stay unreachable from a VM even with a
+ * valid endpoint credential — and only while the bound session has a turn
+ * in flight (`hasActiveTurn`), so a credential that persists on a VM after
+ * its turn cannot keep calling host connectors. Listing forwards per
+ * request, so a server that adds tools mid-session (`tools/list_changed`,
+ * e.g. Datadog's skills-first mode) is picked up on the next list instead
+ * of never.
+ */
+function buildConnectionBridgeMcpServer(engine, sessionId, connectionName) {
+    const server = new Server({
+        name: `${engine.project.name}:bridge:${connectionName}`,
+        version: "0.1.0",
+    }, {
+        capabilities: { tools: {} },
+        instructions: `Tools from the "${connectionName}" MCP connection, listed and called on the serve host where its credential lives.`,
+    });
+    const rejected = () => {
+        if (sessionId === null || sessionId === "") {
+            return "Missing AgentSDK session binding.";
+        }
+        if (!engine.isCloudBridgedConnection(connectionName)) {
+            return `MCP connection "${connectionName}" is not bridged to cloud turns.`;
+        }
+        if (!engine.hasActiveTurn(sessionId)) {
+            return `Session ${sessionId} has no active turn for connection "${connectionName}".`;
+        }
+        return undefined;
+    };
+    server.setRequestHandler(ListToolsRequestSchema, () => __awaiter(this, void 0, void 0, function* () {
+        const reason = rejected();
+        if (reason !== undefined) {
+            throw new Error(reason);
+        }
+        const tools = yield engine.host.mcp.listTools(connectionName);
+        return {
+            tools: tools.map((tool) => { var _a; return (Object.assign(Object.assign({ name: tool.name }, (tool.description === undefined
+                ? {}
+                : { description: tool.description })), { inputSchema: (_a = tool.inputSchema) !== null && _a !== void 0 ? _a : { type: "object" } })); }),
+        };
+    }));
+    server.setRequestHandler(CallToolRequestSchema, (request) => __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const reason = rejected();
+        if (reason !== undefined) {
+            return errorResult(reason);
+        }
+        try {
+            const result = yield engine.host.mcp.callTool(connectionName, request.params.name, (_a = request.params.arguments) !== null && _a !== void 0 ? _a : {});
+            return Object.assign(Object.assign({ 
+                // The host client already speaks MCP, so the content array is valid
+                // CallToolResult content; HostMcpCallResult just types the tail of
+                // the union open-endedly.
+                content: result.content }, (result.isError === undefined ? {} : { isError: result.isError })), (result.structuredContent === undefined
+                ? {}
+                : { structuredContent: result.structuredContent }));
+        }
+        catch (error) {
+            return errorResult(`MCP connection "${connectionName}" is not reachable from the serve host: ${describeError(error)}`);
+        }
+    }));
+    return server;
+}
 // ============================================================================
 // Server construction (per request; tools close over the caller principal)
 // ============================================================================
@@ -335,6 +456,53 @@ function errorResult(message) {
         isError: true,
     };
 }
+function sdkResultToMcpResult(result) {
+    if (isSdkToolEnvelope(result)) {
+        return Object.assign(Object.assign({ content: result.content.map(toMcpContent) }, (result.isError === true ? { isError: true } : {})), (result.structuredContent === undefined
+            ? {}
+            : { structuredContent: result.structuredContent }));
+    }
+    if (typeof result === "string") {
+        return { content: [{ type: "text", text: result }] };
+    }
+    return Object.assign({ content: [{ type: "text", text: JSON.stringify(result) }] }, (isJsonObject(result) ? { structuredContent: result } : {}));
+}
+function toMcpContent(content) {
+    var _a;
+    if (content.type === "text") {
+        return content;
+    }
+    return {
+        type: "image",
+        data: content.data,
+        mimeType: (_a = content.mimeType) !== null && _a !== void 0 ? _a : "application/octet-stream",
+    };
+}
+function isSdkToolEnvelope(result) {
+    return (typeof result === "object" &&
+        result !== null &&
+        !Array.isArray(result) &&
+        "content" in result &&
+        Array.isArray(result.content) &&
+        result.content.every(isSdkToolContent));
+}
+function isSdkToolContent(value) {
+    if (typeof value !== "object" || value === null || !("type" in value)) {
+        return false;
+    }
+    if (value.type === "text") {
+        return "text" in value && typeof value.text === "string";
+    }
+    return (value.type === "image" &&
+        "data" in value &&
+        typeof value.data === "string" &&
+        (!("mimeType" in value) ||
+            value.mimeType === undefined ||
+            typeof value.mimeType === "string"));
+}
+function isJsonObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 /** Resolve to the promise value, or undefined once `ms` elapses first. */
 function raceTimeout(promise, ms) {
     return new Promise((resolve, reject) => {

package/dist/internal/resolved-connections.d.ts

@@ -16,11 +16,24 @@ export declare function validateMountConnectionsConfig(args: {
     project: AgentProject;
     accountRefs?: CursorAccountConnectionRef[];
     publicUrl?: string;
+    /**
+     * True when serve has a cloud tools URL (`--cloud-tools-url`, always set on
+     * managed hosting): cloud turns then reach filtered account connections
+     * through the host connection bridge on the tool MCP endpoint, so the
+     * filter is honored host-side and no `--public-url` is needed.
+     */
+    cloudToolsBridge?: boolean;
 }): void;
 /** Fail closed when a cloud turn cannot honor a `servers` filter. */
 export declare function assertCloudCanHonorAccountServersFilters(args: {
     runtime: "local" | "cloud";
     resolvedConnections: readonly EngineResolvedConnection[];
+    /**
+     * Connection names this cloud turn reaches through the host connection
+     * bridge (tool MCP endpoint). The filter is honored on the serve host
+     * there, so a missing `cloudUrl` is not a fail-open.
+     */
+    bridgedNames?: ReadonlySet<string>;
 }): void;
 /** Fail closed when anonymous HTTP admission would expose account connectors. */
 export declare function assertAccountConnectionsNotAnonymous(args: {
@@ -42,6 +55,8 @@ export declare function resolveMountConnections(args: {
     accountBridge?: CursorAccountMcpBridge;
     publicUrl?: string;
     authToken?: string;
+    /** See {@link validateMountConnectionsConfig}. */
+    cloudToolsBridge?: boolean;
     logger: (line: string) => void;
 }): EngineResolvedConnection[];
 //# sourceMappingURL=resolved-connections.d.ts.map

package/dist/internal/resolved-connections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-connections.d.ts","sourceRoot":"","sources":["../../src/internal/resolved-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAkC,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAE5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CA4BP;AAED,qEAAqE;AACrE,wBAAgB,wCAAwC,CAAC,IAAI,EAAE;IAC7D,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAC3B,mBAAmB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC1D,GAAG,IAAI,CAmBP;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,IAAI,CAUP;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA8D7B"}
+{"version":3,"file":"resolved-connections.d.ts","sourceRoot":"","sources":["../../src/internal/resolved-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAkC,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAE5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,IAAI,CAgCP;AAED,qEAAqE;AACrE,wBAAgB,wCAAwC,CAAC,IAAI,EAAE;IAC7D,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAC3B,mBAAmB,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACzD;;;;OAIG;IACH,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACpC,GAAG,IAAI,CAoBP;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,IAAI,CAUP;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,wBAAwB,EAAE,CAoE7B"}

package/dist/internal/resolved-connections.js

@@ -16,7 +16,9 @@ export function validateMountConnectionsConfig(args) {
     }
     const agent = args.project.agent;
     const cloudCapable = agent.runtime === "cloud" || agent.cloud !== undefined;
-    if (!cloudCapable || args.publicUrl !== undefined) {
+    if (!cloudCapable ||
+        args.publicUrl !== undefined ||
+        args.cloudToolsBridge === true) {
         return;
     }
     const label = args.slug === "" ? args.project.name : args.slug;
@@ -36,8 +38,9 @@ export function assertCloudCanHonorAccountServersFilters(args) {
     if (args.runtime !== "cloud") {
         return;
     }
-    const blocked = args.resolvedConnections.filter((connection) => connection.accountServersFilter !== undefined &&
-        connection.cloudUrl === undefined);
+    const blocked = args.resolvedConnections.filter((connection) => { var _a; return connection.accountServersFilter !== undefined &&
+        connection.cloudUrl === undefined &&
+        ((_a = args.bridgedNames) === null || _a === void 0 ? void 0 : _a.has(connection.name)) !== true; });
     if (blocked.length === 0) {
         return;
     }
@@ -66,7 +69,9 @@ export function resolveMountConnections(args) {
             isHostOauthConnectionTransport(connection.transport))
             .map((connection) => connection.name);
         if (hostOauthNames.length > 0) {
-            args.logger(`[agent-sdk] warning: agent "${label}" has host-OAuth MCP connections (${hostOauthNames.join(", ")}) whose tokens live on this serve host; cloud-runtime turns omit them. Mark them \`hostOnly: true\` and call them from host tools, or drop \`oauth\` and authorize the server another way.`);
+            args.logger(args.cloudToolsBridge === true
+                ? `[agent-sdk] agent "${label}": host-OAuth MCP connections (${hostOauthNames.join(", ")}) reach cloud turns through the host connection bridge; their tokens stay on this serve host.`
+                : `[agent-sdk] warning: agent "${label}" has host-OAuth MCP connections (${hostOauthNames.join(", ")}) whose tokens live on this serve host; cloud-runtime turns omit them. Mark them \`hostOnly: true\` and call them from host tools, or drop \`oauth\` and authorize the server another way.`);
         }
     }
     if (args.peerRefs !== undefined && args.peerRefs.length > 0) {
@@ -83,7 +88,9 @@ export function resolveMountConnections(args) {
         // Non-blocking startup DX: connector statuses land in the serve log.
         args.accountBridge.logPreflight(args.accountRefs);
         if (cloudCapable && args.publicUrl === undefined) {
-            args.logger(`[agent-sdk] agent "${label}": cloud-runtime turns omit the account bridge without --public-url (cloud agents fall back to the account's native connectors).`);
+            args.logger(args.cloudToolsBridge === true
+                ? `[agent-sdk] agent "${label}": cloud-runtime turns reach filtered account connections through the host connection bridge (unfiltered ones fall back to the account's native connectors).`
+                : `[agent-sdk] agent "${label}": cloud-runtime turns omit the account bridge without --public-url (cloud agents fall back to the account's native connectors).`);
         }
     }
     return resolved;

package/dist/internal/review-comments.d.ts

@@ -1,4 +1,5 @@
-export type ReviewCommentPublisher = "local_gh";
+import type { HostGitHubClient } from "../types.js";
+export type ReviewCommentPublisher = "local_gh" | "host_github";
 export type ReviewCommentPostResult = {
     posted: boolean;
     publisher: ReviewCommentPublisher;
@@ -47,4 +48,11 @@ export declare function prepareReviewCommentsRequest(args: ReviewCommentPostArgs
  * GH_TOKEN). Does not use the security-bugbot comments service.
  */
 export declare function createLocalGhReviewPublisher(): ReviewCommentPublisherImplementation;
+/**
+ * Posts a PR review through the host GitHub client (Cursor account lease,
+ * App installation token, or PAT). Prefer this on Cursor-deployed agents —
+ * no separate GitHub write secret is required when `githubChannel({
+ * cursorAccount })` is bound.
+ */
+export declare function createHostGithubReviewPublisher(github: HostGitHubClient): ReviewCommentPublisherImplementation;
 //# sourceMappingURL=review-comments.d.ts.map

package/dist/internal/review-comments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-comments.d.ts","sourceRoot":"","sources":["../../src/internal/review-comments.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,sBAAsB,CAAC;IAClC,IAAI,EAAE,6BAA6B,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,UAAU,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/E,CAAC;AAOF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,qBAAqB,GAEzB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAkBvD;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,oCAAoC,CAMnF"}
+{"version":3,"file":"review-comments.d.ts","sourceRoot":"","sources":["../../src/internal/review-comments.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,aAAa,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,sBAAsB,CAAC;IAClC,IAAI,EAAE,6BAA6B,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,UAAU,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/E,CAAC;AAOF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,qBAAqB,GAEzB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAkBvD;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,oCAAoC,CAMnF;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,gBAAgB,GACvB,oCAAoC,CAMtC"}

package/dist/internal/review-comments.js

@@ -43,6 +43,70 @@ export function createLocalGhReviewPublisher() {
         },
     };
 }
+/**
+ * Posts a PR review through the host GitHub client (Cursor account lease,
+ * App installation token, or PAT). Prefer this on Cursor-deployed agents —
+ * no separate GitHub write secret is required when `githubChannel({
+ * cursorAccount })` is bound.
+ */
+export function createHostGithubReviewPublisher(github) {
+    return {
+        postReview(args) {
+            return __awaiter(this, void 0, void 0, function* () {
+                return postReviewViaHostGithub(github, args);
+            });
+        },
+    };
+}
+function postReviewViaHostGithub(github, args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const prepared = prepareReviewCommentsRequest(args);
+        if (prepared.kind === "skipped") {
+            return Object.assign(Object.assign({}, prepared.result), { publisher: "host_github" });
+        }
+        const { request } = prepared;
+        const [owner, repo] = request.repo.split("/", 2);
+        if (owner === undefined || repo === undefined || repo === "") {
+            return skippedHost("unparseable owner/repo from PR URL");
+        }
+        try {
+            (_a = args.signal) === null || _a === void 0 ? void 0 : _a.throwIfAborted();
+            const octokit = yield github.getOctokit();
+            (_b = args.signal) === null || _b === void 0 ? void 0 : _b.throwIfAborted();
+            const response = yield octokit.rest.pulls.createReview({
+                owner,
+                repo,
+                pull_number: request.prNumber,
+                commit_id: request.headSha,
+                body: request.message,
+                event: "COMMENT",
+                comments: request.comments.map(toGithubPullRequestReviewComment),
+            });
+            const htmlUrl = typeof response.data.html_url === "string"
+                ? response.data.html_url
+                : undefined;
+            const inlineCommentCount = request.comments.length;
+            return {
+                posted: true,
+                publisher: "host_github",
+                mode: inlineCommentCount > 0
+                    ? "review_with_inline_comments"
+                    : "review_body_only",
+                inlineCommentCount,
+                detail: htmlUrl
+                    ? `posted via host GitHub: ${htmlUrl}`
+                    : `posted via host GitHub with ${inlineCommentCount} inline comment(s)`,
+            };
+        }
+        catch (error) {
+            if ((_c = args.signal) === null || _c === void 0 ? void 0 : _c.aborted) {
+                throw error;
+            }
+            return skippedHost(`host GitHub review post failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    });
+}
 function postReviewViaLocalGh(args) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b;
@@ -84,6 +148,9 @@ function postReviewViaLocalGh(args) {
     });
 }
 function toGithubReviewComment(comment) {
+    return toGithubPullRequestReviewComment(comment);
+}
+function toGithubPullRequestReviewComment(comment) {
     const body = {
         path: comment.file,
         body: comment.body,
@@ -107,6 +174,15 @@ function skipped(detail) {
         detail,
     };
 }
+function skippedHost(detail) {
+    return {
+        posted: false,
+        publisher: "host_github",
+        mode: "skipped",
+        inlineCommentCount: 0,
+        detail,
+    };
+}
 function parseGithubPrUrl(prUrl) {
     let url;
     try {

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AA8FrB,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAiBpE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAaD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAsrB3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAmGrB,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAiBpE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAaD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAmuB3B"}

package/dist/internal/server.js

@@ -56,7 +56,7 @@ import { buildHttpChannelRoutes, errorResponse, jsonResponse, readJsonObject, re
 import { validateToolInput } from "./json-schema.js";
 import { createLocalControlPlane, } from "./local-control-plane.js";
 import { createLogRing } from "./log-ring.js";
-import { createAgentMcpEndpoint, MCP_ENDPOINT_PATH } from "./mcp-endpoint.js";
+import { createAgentMcpEndpoint, createToolMcpEndpoint, MCP_ENDPOINT_PATH, TOOL_MCP_ENDPOINT_PATH, } from "./mcp-endpoint.js";
 import { isLoopbackAddress } from "./net.js";
 import { collectPeerConnections } from "./peer-connections.js";
 import { PLATFORM_SCHEDULE_CATALOG_FILENAME, syncHostedPlatformSchedules, } from "./platform-schedule-sync.js";
@@ -82,8 +82,8 @@ const ARTIFACTS_LIST_MAX_LIMIT = 1000;
 export function startServer(mounts_1) {
     return __awaiter(this, arguments, void 0, function* (mounts, options = {}) {
         var _a, _b, _c;
-        var _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
-        var _r;
+        var _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r;
+        var _s;
         if (mounts.length === 0) {
             throw new Error("startServer requires at least one agent mount");
         }
@@ -104,7 +104,7 @@ export function startServer(mounts_1) {
         // Identify this process to the Cursor backend as agentkit (the SDK reads
         // this when building its client-version header) so the internal-only
         // agentkit_enabled gate applies to every turn.
-        (_j = (_r = process.env).CURSOR_AGENTKIT_VERSION) !== null && _j !== void 0 ? _j : (_r.CURSOR_AGENTKIT_VERSION = packageVersion());
+        (_j = (_s = process.env).CURSOR_AGENTKIT_VERSION) !== null && _j !== void 0 ? _j : (_s.CURSOR_AGENTKIT_VERSION = packageVersion());
         const cursorGithubTargets = collectCursorGithubTargets(mounts);
         const cursorGithubConfig = resolveCursorGithubEventConfig({
             configured: options.cursorEvents,
@@ -469,10 +469,10 @@ export function startServer(mounts_1) {
             }),
         });
         for (const { slug, project } of mounts) {
-            validateMountConnectionsConfig(Object.assign({ slug,
+            validateMountConnectionsConfig(Object.assign(Object.assign({ slug,
                 project, accountRefs: accountRefsBySlug.get(slug) }, (options.publicUrl === undefined
                 ? {}
-                : { publicUrl: options.publicUrl })));
+                : { publicUrl: options.publicUrl })), { cloudToolsBridge: options.cloudToolsUrl !== undefined }));
         }
         // Cursor Slack relay: automatic when a mounted agent authored
         // `slackChannel({ cursorAccount: true })`. Inbound rides the account's
@@ -530,10 +530,40 @@ export function startServer(mounts_1) {
                 ? {}
                 : { publicUrl: options.publicUrl })), (options.authToken === undefined
                 ? {}
-                : { authToken: options.authToken })), { logger }));
+                : { authToken: options.authToken })), { cloudToolsBridge: options.cloudToolsUrl !== undefined, logger }));
             if (resolved.length > 0) {
                 runtime.engine.setResolvedConnections(resolved);
             }
+            const hasServerTools = runtime.project.agent.tools.some((tool) => tool.execution === "server");
+            // Host-bridged connections ride the same endpoint as server tools, so
+            // the cloud tools connection is set whenever either needs it.
+            const bridgeableNames = runtime.engine.cloudBridgeableConnectionNames();
+            const cloudCapable = runtime.project.agent.runtime === "cloud" ||
+                runtime.project.agent.cloud !== undefined;
+            if ((hasServerTools || bridgeableNames.length > 0) && cloudCapable) {
+                const basePath = runtime.slug === "" ? "" : `/${runtime.slug}`;
+                const publicToolsUrl = (_r = options.cloudToolsUrl) !== null && _r !== void 0 ? _r : (options.publicUrl === undefined
+                    ? undefined
+                    : `${options.publicUrl.replace(/\/$/, "")}${basePath}${TOOL_MCP_ENDPOINT_PATH}`);
+                if (publicToolsUrl === undefined) {
+                    if (hasServerTools) {
+                        logger(`[agent-sdk] warning: agent "${runtime.project.name}" has server tools but no --public-url or --cloud-tools-url; cloud turns omit those tools.`);
+                    }
+                }
+                else {
+                    const headers = options.cloudToolsUrl !== undefined
+                        ? accountKey === undefined
+                            ? undefined
+                            : { authorization: `Bearer ${accountKey.apiKey}` }
+                        : options.authToken === undefined
+                            ? undefined
+                            : { authorization: `Bearer ${options.authToken}` };
+                    if (options.cloudToolsUrl !== undefined && headers === undefined) {
+                        throw new Error(`Agent "${runtime.project.name}" needs a Cursor API key to authenticate --cloud-tools-url. ${SIGN_IN_HINT}`);
+                    }
+                    runtime.engine.setCloudServerToolsConnection(Object.assign({ type: "http", url: publicToolsUrl }, (headers === undefined ? {} : { headers })));
+                }
+            }
         }
         const agents = runtimes.map(({ slug, project }) => ({
             slug,
@@ -727,7 +757,14 @@ function mountAgentRoutes(router, runtime, args) {
         method: "GET",
         pattern: `${base}/v1/health`,
         auth: "none",
-        handler: () => jsonResponse({ ok: true, name: project.name }),
+        // Temporal consumes this response before promoting a newly deployed pod.
+        // Include the framework build there so deploy observability gets the
+        // version from the process that will serve turns, with no second request.
+        handler: () => jsonResponse({
+            ok: true,
+            name: project.name,
+            version: packageVersion(),
+        }),
     });
     // Bootstrap the SPA can't derive from its own URL (agent name, dev mode, and
     // — in multi-agent mode — where the agents index lives).
@@ -840,6 +877,35 @@ function mountAgentRoutes(router, runtime, args) {
             return jsonResponse({ artifacts: artifacts.slice(0, limit) });
         }),
     });
+    // File/blob payload of one artifact (`tag({ contents })`).
+    router.add({
+        method: "GET",
+        pattern: `${base}/v1/artifacts/:id/content`,
+        auth: httpAuth,
+        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            var _b, _c;
+            const includeAll = relaxSessionReadAuth &&
+                (relaxSessionReadAuthBeyondLoopback ||
+                    (typeof ctx.requestIp === "string" &&
+                        isLoopbackAddress(ctx.requestIp)));
+            const found = yield engine.getArtifactContent(ctx.auth, (_b = ctx.params.id) !== null && _b !== void 0 ? _b : "", { includeAll });
+            if (found === undefined) {
+                return errorResponse(404, "not_found", "No such artifact, or it carries no content.");
+            }
+            // A view over bytes is a valid fetch body; the DOM lib types are
+            // narrower than the runtime.
+            // contentType is author/model-controlled and the playground shares
+            // this origin: force download, never render or sniff.
+            return new Response(found.body, {
+                headers: {
+                    "content-type": (_c = (_a = found.record.content) === null || _a === void 0 ? void 0 : _a.contentType) !== null && _c !== void 0 ? _c : "application/octet-stream",
+                    "content-disposition": "attachment",
+                    "x-content-type-options": "nosniff",
+                },
+            });
+        }),
+    });
     // The agent's MCP surface: peers and external MCP clients delegate to
     // this agent (ask / check / call_tool) over streamable HTTP. Stateless —
     // POST only; GET/DELETE get a spec-compliant 405 from the endpoint.
@@ -852,6 +918,15 @@ function mountAgentRoutes(router, runtime, args) {
             handler: (request, ctx) => mcpEndpoint.handle(request, ctx.auth),
         });
     }
+    const toolMcpEndpoint = createToolMcpEndpoint({ engine, logger });
+    for (const method of ["POST", "GET", "DELETE"]) {
+        router.add({
+            method,
+            pattern: `${base}${TOOL_MCP_ENDPOINT_PATH}`,
+            auth: defaultAuth,
+            handler: (request, ctx) => toolMcpEndpoint.handle(request, ctx.auth),
+        });
+    }
     // Deterministic tool invocation: run an authored server tool directly,
     // without a model turn deciding to call it.
     router.add({