@cursor/july 0.1.33 → 0.1.34

package/dist/internal/session-engine.js

@@ -32,6 +32,7 @@ import { mergeABInstructions, resolveABMaxPlaygroundSessions, resolveABSplit, }
 import { slackThreadPermalink } from "../channels/slack/links.js";
 import { SlackAskDedupeStore, SlackNudgeStore, } from "../channels/slack/nudge-store.js";
 import { resolveDedicatedSlackHostBinding } from "../channels/slack/slack-channel.js";
+import { isCursorHostedFilesAvailable } from "../files-backends/cursor-hosted.js";
 import { DEFAULT_MODEL, DIRECT_TOOL_CALL_CHANNEL_ID, isHostOauthConnectionTransport, isSymbolicConnectionTransport, } from "../types.js";
 import { ABCollector } from "./ab-collector.js";
 import { foldABStream } from "./ab-fold.js";
@@ -57,7 +58,7 @@ import { StorageCoordinator } from "./storage-coordinator.js";
 import { normalizeToolResult, toolCallErrorMessage } from "./tool-result.js";
 import { estimateTurnCostFromApi, roundCostUsd, } from "./turn-cost.js";
 import { TurnGovernor } from "./turn-governor.js";
-import { buildAgentsMdContent, isNestedInGitRepo, materializeWorkspace, writeWorkspaceFiles, } from "./workspace.js";
+import { buildAgentsMdContent, buildCloudMemorySection, isNestedInGitRepo, materializeWorkspace, writeWorkspaceFiles, } from "./workspace.js";
 export const HTTP_CHANNEL_ID = "http";
 export { SCHEDULE_CHANNEL_PREFIX } from "./prompt-context.js";
 export class SessionBusyError extends Error {
@@ -124,6 +125,8 @@ export class SessionEngine {
         /** Sessions with a turn being admitted (before the run promise exists). */
         this.pendingTurns = new Set();
         this.activeTurns = new Map();
+        /** Context used by the cloud turn's HTTP MCP callbacks. */
+        this.activeToolContexts = new Map();
         /** Aborts the in-flight turn per session so a follow-up can preempt it. */
         this.turnAborts = new Map();
         /** Serializes turn admission per session (latest follow-up wins). */
@@ -176,7 +179,7 @@ export class SessionEngine {
         });
         this.artifactsStore = new ArtifactsStore({
             stateRoot: options.stateRoot,
-            storage: this.storage,
+            agentName: options.project.name,
             config: options.project.artifacts,
         });
         this.abCollector = new ABCollector(options.project.abs, this.logger, (sessionId) => __awaiter(this, void 0, void 0, function* () { return (yield this.logs.get(sessionId)).snapshot(0); }), 
@@ -219,6 +222,9 @@ export class SessionEngine {
             });
         }
     }
+    setCloudServerToolsConnection(connection) {
+        this.cloudServerToolsConnection = connection;
+    }
     /** Shared host services (MCP / GitHub / Slack / reminders / evals / kv / Slack nudges). */
     get host() {
         return {
@@ -933,7 +939,13 @@ export class SessionEngine {
                             yield yieldEventLoop();
                         }
                     }), signal);
-                    outcome = yield this.runner.runTurn(request);
+                    this.activeToolContexts.set(sessionId, { record, turnId, emit });
+                    try {
+                        outcome = yield this.runner.runTurn(request);
+                    }
+                    finally {
+                        this.activeToolContexts.delete(sessionId);
+                    }
                 }
                 catch (error) {
                     this.approvals.cancelSession(sessionId, "deny");
@@ -1032,9 +1044,13 @@ export class SessionEngine {
         if (isFirstTurn) {
             if (runtime === "cloud") {
                 // Cloud VMs have no materialized workspace: ship the full context,
-                // including agent tool script bodies.
+                // including agent tool script bodies. On hosted deployments the
+                // shared memory journal is on the store mount — say where.
                 const preamble = buildAgentsMdContent(agent, { includeScripts: true });
-                turnPrompt = `${preamble}\n\n${turnPrompt}`;
+                const memorySection = isCursorHostedFilesAvailable()
+                    ? `\n\n${buildCloudMemorySection(this.project.name)}`
+                    : "";
+                turnPrompt = `${preamble}${memorySection}\n\n${turnPrompt}`;
             }
             else if (instructionsInvisibleToHarness) {
                 // Local workspace whose AGENTS.md the harness will not load. With a
@@ -1048,7 +1064,7 @@ export class SessionEngine {
         }
         return Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ sessionId: record.sessionId }, (record.sdkAgentId === undefined
             ? {}
-            : { sdkAgentId: record.sdkAgentId })), { workspaceDir: this.harnessCwd(record), sandbox: ((_c = this.project.agent.local) === null || _c === void 0 ? void 0 : _c.sandbox) === true, runnerStateDir: join(this.stateRoot, "runner"), prompt: turnPrompt, isFirstTurn }), (agent.model === undefined ? {} : { model: agent.model })), { runtime }), (mergedCloud === undefined ? {} : { cloud: mergedCloud })), { customTools: runtime === "local" ? this.buildCustomTools(record, turnId, emit) : {}, mcpServers: this.buildMcpServers(runtime), subagents: buildRunnerSubagents(agent), onUpdate,
+            : { sdkAgentId: record.sdkAgentId })), { workspaceDir: this.harnessCwd(record), sandbox: ((_c = this.project.agent.local) === null || _c === void 0 ? void 0 : _c.sandbox) === true, runnerStateDir: join(this.stateRoot, "runner"), prompt: turnPrompt, isFirstTurn }), (agent.model === undefined ? {} : { model: agent.model })), { runtime }), (mergedCloud === undefined ? {} : { cloud: mergedCloud })), { customTools: runtime === "local" ? this.buildCustomTools(record, turnId, emit) : {}, mcpServers: this.buildMcpServers(runtime, record.sessionId), subagents: buildRunnerSubagents(agent), onUpdate,
             signal, 
             // Local follow-ups expire any lingering active run so a preempted turn
             // (or one orphaned by a crashed process) never blocks this send.
@@ -1068,17 +1084,85 @@ export class SessionEngine {
             }) });
     }
     /**
-     * Authored + resolved MCP servers for a turn; skips `hostOnly`, and skips
-     * host-OAuth connections on cloud turns (their tokens live on this host).
+     * Connection names a cloud turn can only reach through the host connection
+     * bridge on the tool MCP endpoint: filtered account connections without a
+     * public bridge URL, and host-OAuth connections whose tokens live on this
+     * host. `hostOnly` names are never bridged — that flag means the model
+     * must not see the connection at all, on any runtime.
+     */
+    cloudBridgeableConnectionNames() {
+        const hostOnlyNames = new Set(this.project.agent.connections
+            .filter((connection) => connection.hostOnly === true)
+            .map((connection) => connection.name));
+        const names = [];
+        for (const connection of this.project.agent.connections) {
+            if (!hostOnlyNames.has(connection.name) &&
+                isHostOauthConnectionTransport(connection.transport)) {
+                names.push(connection.name);
+            }
+        }
+        for (const resolved of this.resolvedConnections) {
+            if (!hostOnlyNames.has(resolved.name) &&
+                resolved.accountServersFilter !== undefined &&
+                resolved.cloudUrl === undefined) {
+                names.push(resolved.name);
+            }
+        }
+        return names;
+    }
+    /**
+     * True when cloud turns reach `name` through the host connection bridge —
+     * the gate the tool MCP endpoint applies before forwarding a bridge
+     * request to `host.mcp`, so `hostOnly` connections (and arbitrary names)
+     * stay unreachable from a VM.
+     */
+    isCloudBridgedConnection(name) {
+        if (this.cloudServerToolsConnection === undefined) {
+            return false;
+        }
+        return this.cloudBridgeableConnectionNames().includes(name);
+    }
+    /**
+     * Session-bound transport for one host-bridged connection: the tool MCP
+     * endpoint with the connection named, so `tools/list` / `tools/call`
+     * forward to the host-side client (`host.mcp`) where the credential —
+     * account bridge secret or host OAuth token — actually lives.
+     */
+    cloudBridgeTransport(sessionId, connectionName) {
+        const connection = this.cloudServerToolsConnection;
+        if (connection === undefined || !("url" in connection)) {
+            return undefined;
+        }
+        const url = new URL(connection.url);
+        url.searchParams.set("agentkitSessionId", sessionId);
+        url.searchParams.set("connection", connectionName);
+        return Object.assign(Object.assign({}, connection), { url: url.toString() });
+    }
+    /**
+     * Authored + resolved MCP servers for a turn. Skips `hostOnly`. On cloud
+     * turns, connections whose credential lives on this host — filtered
+     * account connections without a public bridge URL, host-OAuth servers —
+     * mount as host connection bridges over the tool MCP endpoint instead of
+     * being omitted or failing the turn closed.
      */
-    buildMcpServers(runtime) {
+    buildMcpServers(runtime, sessionId) {
         const hostOnlyNames = new Set(this.project.agent.connections
             .filter((connection) => connection.hostOnly === true)
             .map((connection) => connection.name));
+        const bridgedNames = new Set(runtime === "cloud" &&
+            sessionId !== undefined &&
+            this.cloudServerToolsConnection !== undefined &&
+            "url" in this.cloudServerToolsConnection
+            ? this.cloudBridgeableConnectionNames()
+            : []);
         assertCloudCanHonorAccountServersFilters({
             runtime,
             resolvedConnections: this.resolvedConnections.filter((resolved) => !hostOnlyNames.has(resolved.name)),
+            bridgedNames,
         });
+        const bridgeTransport = (name) => sessionId === undefined || !bridgedNames.has(name)
+            ? undefined
+            : this.cloudBridgeTransport(sessionId, name);
         const servers = {};
         for (const connection of this.project.agent.connections) {
             if (hostOnlyNames.has(connection.name)) {
@@ -1089,10 +1173,15 @@ export class SessionEngine {
             }
             // A cloud VM cannot use a credential that lives on this host, and the
             // cloud API rejects the `oauth` key outright ("Unrecognized key(s) in
-            // object: 'oauth'"), which fails the whole turn. Omit it there; host
-            // tools (`ctx.host.mcp`) still reach the server over the host client.
+            // object: 'oauth'"), which fails the whole turn. Mount the host
+            // connection bridge instead when serve has a cloud tools URL; omit
+            // otherwise (host tools via `ctx.host.mcp` still reach the server).
             if (runtime === "cloud" &&
                 isHostOauthConnectionTransport(connection.transport)) {
+                const bridged = bridgeTransport(connection.name);
+                if (bridged !== undefined) {
+                    servers[connection.name] = bridged;
+                }
                 continue;
             }
             servers[connection.name] = connection.transport;
@@ -1103,6 +1192,13 @@ export class SessionEngine {
             }
             const url = runtime === "cloud" ? resolved.cloudUrl : resolved.localUrl;
             if (url === undefined) {
+                // Filtered account connections bridge through the host so the
+                // `servers` filter is honored; unfiltered ones keep their documented
+                // fallback to the account's native connectors on the VM.
+                const bridged = bridgeTransport(resolved.name);
+                if (bridged !== undefined) {
+                    servers[resolved.name] = bridged;
+                }
                 continue;
             }
             servers[resolved.name] = {
@@ -1110,6 +1206,20 @@ export class SessionEngine {
                 headers: resolved.headers,
             };
         }
+        if (runtime === "cloud" &&
+            sessionId !== undefined &&
+            this.cloudServerToolsConnection !== undefined &&
+            this.project.agent.tools.some((tool) => tool.execution === "server")) {
+            if (servers["agentsdk-tools"] !== undefined) {
+                throw new Error('MCP connection name "agentsdk-tools" is reserved for authored server tools on cloud turns.');
+            }
+            const connection = this.cloudServerToolsConnection;
+            if ("url" in connection) {
+                const url = new URL(connection.url);
+                url.searchParams.set("agentkitSessionId", sessionId);
+                servers["agentsdk-tools"] = Object.assign(Object.assign({}, connection), { url: url.toString() });
+            }
+        }
         return servers;
     }
     buildCustomTools(record, turnId, emit) {
@@ -1126,81 +1236,105 @@ export class SessionEngine {
                 description: tool.description,
                 inputSchema: tool.inputSchema,
                 execute: (args, context) => __awaiter(this, void 0, void 0, function* () {
-                    var _a;
-                    const validation = validateToolInput(tool.definition.inputSchema, args);
-                    if (!validation.ok) {
-                        return {
-                            content: [
-                                {
-                                    type: "text",
-                                    text: `Invalid input for tool "${tool.name}": ${validation.message}`,
-                                },
-                            ],
-                            isError: true,
-                        };
-                    }
-                    const toolCallId = (_a = context.toolCallId) !== null && _a !== void 0 ? _a : newToolCallId(tool.name);
-                    const toolCtx = {
-                        toolCallId,
-                        session: this.sessionInfo(record),
-                        workspaceDir: this.harnessCwd(record),
-                        stateRoot: this.stateRoot,
-                        host: this.hostForSession(record.sessionId),
-                        artifacts: this.artifactsApi({
-                            sessionId: record.sessionId,
-                            turnId,
-                        }),
-                        send: (channelId, message, sendOptions = {}) => this.send(channelId, message, Object.assign(Object.assign({}, sendOptions), { auth: sendOptions.auth !== undefined
-                                ? sendOptions.auth
-                                : record.auth })),
-                        getSession: (channelId, sessionId) => this.getChannelSession(channelId, sessionId),
-                    };
-                    try {
-                        const needsGate = yield evaluateNeedsApproval(tool.definition.needsApproval, validation.value);
-                        if (needsGate) {
-                            const decision = yield this.parkForApproval({
-                                sessionId: record.sessionId,
-                                turnId,
-                                callId: toolCallId,
-                                toolName: tool.name,
-                                args: validation.value,
-                                emit,
-                            });
-                            if (decision === "deny") {
-                                return {
-                                    content: [
-                                        {
-                                            type: "text",
-                                            text: `Tool "${tool.name}" was denied by a human approver.`,
-                                        },
-                                    ],
-                                    isError: true,
-                                };
-                            }
-                        }
-                        const started = Date.now();
-                        this.logger(`[session] tool ${tool.name} start`);
-                        const result = yield execute(validation.value, toolCtx);
-                        this.logger(`[session] tool ${tool.name} done (${Date.now() - started}ms)`);
-                        return normalizeToolResult(result);
-                    }
-                    catch (error) {
-                        this.logger(`[session] tool ${tool.name} failed: ${describeError(error)}`);
-                        return {
-                            content: [
-                                {
-                                    type: "text",
-                                    text: `Tool "${tool.name}" failed: ${describeError(error)}`,
-                                },
-                            ],
-                            isError: true,
-                        };
-                    }
+                    return this.executeServerTool({
+                        tool,
+                        input: args,
+                        toolCallId: context.toolCallId,
+                        record,
+                        turnId,
+                        emit,
+                    });
                 }),
             };
         }
         return tools;
     }
+    /**
+     * True while `sessionId` has a turn in flight. The host connection bridge
+     * applies this before forwarding to `host.mcp` — the same window
+     * {@link callActiveServerTool} enforces for authored server tools — so an
+     * endpoint credential that outlives a turn (e.g. in a VM's MCP config)
+     * cannot reach host-credentialed connectors between turns.
+     */
+    hasActiveTurn(sessionId) {
+        return this.activeToolContexts.has(sessionId);
+    }
+    callActiveServerTool(sessionId, toolName, input) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const active = this.activeToolContexts.get(sessionId);
+            if (active === undefined) {
+                return toolErrorResult(`Session ${sessionId} has no active turn for tool "${toolName}".`);
+            }
+            const tool = this.project.agent.tools.find((candidate) => candidate.name === toolName && candidate.execution === "server");
+            if (tool === undefined) {
+                return toolErrorResult(`Unknown server tool "${toolName}".`);
+            }
+            const toolCallId = newToolCallId(toolName);
+            this.logger(`[session] cloud HTTP MCP tool ${toolName} dispatch (${sessionId}, ${toolCallId})`);
+            const result = yield this.executeServerTool({
+                tool,
+                input,
+                toolCallId,
+                record: active.record,
+                turnId: active.turnId,
+                emit: active.emit,
+            });
+            this.logger(`[session] cloud HTTP MCP tool ${toolName} complete (${sessionId}, ${toolCallId}, isError=${isErrorEnvelope(result)})`);
+            return result;
+        });
+    }
+    executeServerTool(args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const execute = args.tool.definition.execute;
+            if (args.tool.execution !== "server" || typeof execute !== "function") {
+                return toolErrorResult(`Tool "${args.tool.name}" is not a server tool.`);
+            }
+            const validation = validateToolInput(args.tool.definition.inputSchema, args.input);
+            if (!validation.ok) {
+                return toolErrorResult(`Invalid input for tool "${args.tool.name}": ${validation.message}`);
+            }
+            const toolCallId = (_a = args.toolCallId) !== null && _a !== void 0 ? _a : newToolCallId(args.tool.name);
+            const toolCtx = {
+                toolCallId,
+                session: this.sessionInfo(args.record),
+                workspaceDir: this.harnessCwd(args.record),
+                stateRoot: this.stateRoot,
+                host: this.hostForSession(args.record.sessionId),
+                artifacts: this.artifactsApi({
+                    sessionId: args.record.sessionId,
+                    turnId: args.turnId,
+                }),
+                send: (channelId, message, sendOptions = {}) => { var _a; return this.send(channelId, message, Object.assign(Object.assign({}, sendOptions), { auth: (_a = sendOptions.auth) !== null && _a !== void 0 ? _a : args.record.auth })); },
+                getSession: (channelId, sessionId) => this.getChannelSession(channelId, sessionId),
+            };
+            try {
+                const needsGate = yield evaluateNeedsApproval(args.tool.definition.needsApproval, validation.value);
+                if (needsGate) {
+                    const decision = yield this.parkForApproval({
+                        sessionId: args.record.sessionId,
+                        turnId: args.turnId,
+                        callId: toolCallId,
+                        toolName: args.tool.name,
+                        args: validation.value,
+                        emit: args.emit,
+                    });
+                    if (decision === "deny") {
+                        return toolErrorResult(`Tool "${args.tool.name}" was denied by a human approver.`);
+                    }
+                }
+                const started = Date.now();
+                this.logger(`[session] tool ${args.tool.name} start`);
+                const result = yield execute(validation.value, toolCtx);
+                this.logger(`[session] tool ${args.tool.name} done (${Date.now() - started}ms)`);
+                return normalizeToolResult(result);
+            }
+            catch (error) {
+                this.logger(`[session] tool ${args.tool.name} failed: ${describeError(error)}`);
+                return toolErrorResult(`Tool "${args.tool.name}" failed: ${describeError(error)}`);
+            }
+        });
+    }
     /**
      * Park a server-tool call until a human approves or denies. Emits
      * `action.approval_requested` / `action.approval_resolved` on the
@@ -1616,11 +1750,40 @@ export class SessionEngine {
             if ((options === null || options === void 0 ? void 0 : options.includeAll) === true) {
                 return records;
             }
+            const owned = yield this.ownedSessionIds(caller);
+            return records.filter((record) => record.sessionId !== undefined && owned.has(record.sessionId));
+        });
+    }
+    /**
+     * One artifact's file/blob payload for `GET /v1/artifacts/:id/content`.
+     * Same visibility rule as {@link listArtifacts}. Undefined when the
+     * artifact is missing, invisible to the caller, or carries no payload.
+     */
+    getArtifactContent(caller, id, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const record = yield this.artifactsStore.get(id);
+            if (record === undefined || record.content === undefined) {
+                return undefined;
+            }
+            if ((options === null || options === void 0 ? void 0 : options.includeAll) !== true) {
+                if (record.sessionId === undefined) {
+                    return undefined;
+                }
+                const owned = yield this.ownedSessionIds(caller);
+                if (!owned.has(record.sessionId)) {
+                    return undefined;
+                }
+            }
+            const body = yield this.artifactsStore.getContent(id);
+            return body === undefined ? undefined : { record, body };
+        });
+    }
+    ownedSessionIds(caller) {
+        return __awaiter(this, void 0, void 0, function* () {
             const sessions = yield this.sessions.list();
-            const owned = new Set(sessions
+            return new Set(sessions
                 .filter((record) => samePrincipal(record.auth, caller))
                 .map((record) => record.sessionId));
-            return records.filter((record) => record.sessionId !== undefined && owned.has(record.sessionId));
         });
     }
     /**
@@ -2273,6 +2436,12 @@ function buildRunnerSubagents(agent) {
 function describeError(error) {
     return error instanceof Error ? error.message : String(error);
 }
+function toolErrorResult(message) {
+    return {
+        content: [{ type: "text", text: message }],
+        isError: true,
+    };
+}
 function defaultGetCloudUsage(sdkAgentId) {
     return __awaiter(this, void 0, void 0, function* () {
         try {

package/dist/internal/storage-coordinator.d.ts

@@ -130,21 +130,6 @@ export declare class StorageCoordinator {
     kvPut(authorKey: string, value: JsonValue): Promise<void>;
     /** Awaited author KV delete. No-op when the sink omits `delete`. */
     kvDelete(authorKey: string): Promise<void>;
-    /**
-     * Whether the sink can serve awaited artifact rows: `get` (upsert
-     * read-back), `list` (listing + eviction), and `delete` (`max` cap
-     * eviction) are all required — without `delete` the retention cap
-     * could never evict, so rows fall back to the filesystem store.
-     */
-    get supportsArtifacts(): boolean;
-    /** Awaited artifact-row read. Errors propagate (read-after-write). */
-    artifactGet(id: string): Promise<JsonValue | undefined>;
-    /** Awaited artifact-row write (straight to the sink, like author KV). */
-    artifactPut(id: string, value: JsonValue): Promise<void>;
-    /** Awaited artifact-row delete. Errors propagate (cap eviction). */
-    artifactDelete(id: string): Promise<void>;
-    /** All artifact-row values for this agent. Errors propagate. */
-    artifactList(): Promise<JsonValue[]>;
     /**
      * Adapter over the sink's dedicated `evals` table for the playground
      * eval-run store. Undefined when the table is not configured — eval

package/dist/internal/storage-coordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-coordinator.d.ts","sourceRoot":"","sources":["../../src/internal/storage-coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAEvB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA0C1D,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AASD,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAEvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoC;IACtE,yEAAyE;IACzE,OAAO,CAAC,KAAK,CAAoC;IACjD,uEAAuE;IACvE,OAAO,CAAC,OAAO,CAAK;IACpB,8CAA8C;IAC9C,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAY,OAAO,EAAE,yBAAyB,EAM7C;IAMD,2EAA2E;IAC3E,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAMzC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAoB/B;IAED;;;;;;OAMG;IACH,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CASzC;IAED,2EAA2E;IAC3E,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,cAAc,CAAC,QAAQ,CAAY,GAC1C,IAAI,CA+BN;IAED;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0BvB,wCAAwC;IACxC,OAAO,CAAC,KAAK;IAOb,6EAA6E;IAC7E,OAAO,CAAC,QAAQ;IAWhB,oEAAoE;IACpE,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED;;;OAGG;IACH,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAO7C;IAED;;;;OAIG;IACG,oBAAoB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAoBrD;IAED;;;;OAIG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAWlE;IAED;;;;;OAKG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAsB1E;IAED;;;;;;;;OAQG;IACG,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA4CpC;IAMD;;;OAGG;IACH,IAAI,gBAAgB,IAAI,OAAO,CAE9B;IAED;;;OAGG;IACG,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAQ7D;IAED;;;OAGG;IACG,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9D;IAED,oEAAoE;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/C;IAMD;;;;;OAKG;IACH,IAAI,iBAAiB,IAAI,OAAO,CAM/B;IAED,sEAAsE;IAChE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAU5D;IAED,yEAAyE;IACnE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7D;IAED,oEAAoE;IAC9D,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM9C;IAED,gEAAgE;IAC1D,YAAY,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAUzC;IAMD;;;;OAIG;IACH,QAAQ,IAAI,cAAc,GAAG,SAAS,CA2CrC;IAMD,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAcrC;IAED;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAerC;IAED,sEAAsE;IAChE,mBAAmB,IAAI,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAc3D;IAMD;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB3B;IAED,wEAAwE;IACxE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAExB;IAED,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,WAAW;IAgBnB,2EAA2E;YAC7D,OAAO;IAkBrB,OAAO,CAAC,OAAO;IA8Bf,OAAO,CAAC,OAAO;CAGhB"}
+{"version":3,"file":"storage-coordinator.d.ts","sourceRoot":"","sources":["../../src/internal/storage-coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAEvB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA0C1D,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AASD,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAEvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoC;IACtE,yEAAyE;IACzE,OAAO,CAAC,KAAK,CAAoC;IACjD,uEAAuE;IACvE,OAAO,CAAC,OAAO,CAAK;IACpB,8CAA8C;IAC9C,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAY,OAAO,EAAE,yBAAyB,EAM7C;IAMD,2EAA2E;IAC3E,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAMzC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAoB/B;IAED;;;;;;OAMG;IACH,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CASzC;IAED,2EAA2E;IAC3E,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,cAAc,CAAC,QAAQ,CAAY,GAC1C,IAAI,CA+BN;IAED;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0BvB,wCAAwC;IACxC,OAAO,CAAC,KAAK;IAOb,6EAA6E;IAC7E,OAAO,CAAC,QAAQ;IAWhB,oEAAoE;IACpE,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED;;;OAGG;IACH,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAO7C;IAED;;;;OAIG;IACG,oBAAoB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAoBrD;IAED;;;;OAIG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAWlE;IAED;;;;;OAKG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAsB1E;IAED;;;;;;;;OAQG;IACG,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA4CpC;IAMD;;;OAGG;IACH,IAAI,gBAAgB,IAAI,OAAO,CAE9B;IAED;;;OAGG;IACG,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAQ7D;IAED;;;OAGG;IACG,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9D;IAED,oEAAoE;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/C;IAMD;;;;OAIG;IACH,QAAQ,IAAI,cAAc,GAAG,SAAS,CA2CrC;IAMD,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAcrC;IAED;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAerC;IAED,sEAAsE;IAChE,mBAAmB,IAAI,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAc3D;IAMD;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB3B;IAED,wEAAwE;IACxE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAExB;IAED,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,WAAW;IAgBnB,2EAA2E;YAC7D,OAAO;IAkBrB,OAAO,CAAC,OAAO;IA8Bf,OAAO,CAAC,OAAO;CAGhB"}

package/dist/internal/storage-coordinator.js

@@ -364,58 +364,6 @@ export class StorageCoordinator {
         });
     }
     // ==========================================================================
-    // Artifacts (`ctx.artifacts`)
-    // ==========================================================================
-    /**
-     * Whether the sink can serve awaited artifact rows: `get` (upsert
-     * read-back), `list` (listing + eviction), and `delete` (`max` cap
-     * eviction) are all required — without `delete` the retention cap
-     * could never evict, so rows fall back to the filesystem store.
-     */
-    get supportsArtifacts() {
-        return (this.definition.get !== undefined &&
-            this.definition.list !== undefined &&
-            this.definition.delete !== undefined);
-    }
-    /** Awaited artifact-row read. Errors propagate (read-after-write). */
-    artifactGet(id) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const get = this.definition.get;
-            if (get === undefined) {
-                throw new Error("storage get is not configured");
-            }
-            const value = yield get(storageKeys.artifact(this.agentName, id), this.context("restore"));
-            return value !== null && value !== void 0 ? value : undefined;
-        });
-    }
-    /** Awaited artifact-row write (straight to the sink, like author KV). */
-    artifactPut(id, value) {
-        return __awaiter(this, void 0, void 0, function* () {
-            yield this.definition.put(storageKeys.artifact(this.agentName, id), value, this.context("policy"));
-        });
-    }
-    /** Awaited artifact-row delete. Errors propagate (cap eviction). */
-    artifactDelete(id) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const del = this.definition.delete;
-            if (del === undefined) {
-                throw new Error("storage delete is not configured");
-            }
-            yield del(storageKeys.artifact(this.agentName, id), this.context("policy"));
-        });
-    }
-    /** All artifact-row values for this agent. Errors propagate. */
-    artifactList() {
-        return __awaiter(this, void 0, void 0, function* () {
-            const list = this.definition.list;
-            if (list === undefined) {
-                throw new Error("storage list is not configured");
-            }
-            const entries = yield list(storageKeys.artifactPrefix(this.agentName), this.context("restore"));
-            return Array.isArray(entries) ? entries.map((entry) => entry.value) : [];
-        });
-    }
-    // ==========================================================================
     // Evals (dedicated `evals` table)
     // ==========================================================================
     /**

package/dist/internal/workspace.d.ts

@@ -17,14 +17,19 @@ export interface MaterializeWorkspaceOptions {
     seed: boolean;
     /**
      * Agent state root. `<stateRoot>/memory/` (the durable cross-session
-     * directory the memory hook journals into) is created and symlinked into
-     * the workspace as `memory` so the agent reads it with plain file tools.
-     *
-     * TODO(agent-store): replace with the mounted AgentStore path so cloud
-     * VMs see the same directory.
+     * directory the memory hook journals into — on hosting a local mirror of
+     * the Agent Store journal) is created and symlinked into the workspace as
+     * `memory` so the agent reads it with plain file tools. Cloud VMs have no
+     * materialized workspace; they read the store mount directly (see
+     * {@link buildCloudMemorySection}).
      */
     stateRoot: string;
 }
+/**
+ * First-turn preamble section for cloud-runtime sessions on hosted
+ * deployments: cloud VMs read the memory journal from the store mount.
+ */
+export declare function buildCloudMemorySection(agentName: string): string;
 /** Relative path of an agent-side tool script inside the session workspace. */
 export declare function agentToolScriptPath(toolName: string): string;
 /**

package/dist/internal/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/internal/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,aAAa,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,IAAI,EAAE,OAAO,CAAC;IACd;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,GAAG,SAAS,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,cAAc,EAAE,EACvB,OAAO,GAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAA8B,GAC/D,MAAM,CA6CR;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,GACnC,MAAM,CAUR;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAcrE;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAkCf;AAqGD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAO3D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAMf"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/internal/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,aAAa,EACd,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,aAAa,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,IAAI,EAAE,OAAO,CAAC;IACd;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAOjE;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,GAAG,SAAS,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,cAAc,EAAE,EACvB,OAAO,GAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAA8B,GAC/D,MAAM,CA6CR;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,GACnC,MAAM,CAUR;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAcrE;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAkCf;AAqGD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAO3D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/internal/workspace.js

@@ -17,9 +17,22 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 import { chmod, copyFile, lstat, mkdir, readlink, rm, stat, symlink, writeFile, } from "node:fs/promises";
 import { dirname, join, parse, relative, resolve, sep } from "node:path";
+import { agentStoreKeys, DEPLOYMENT_STORE_MOUNT_PATH } from "../files.js";
 import { MEMORY_DIR_NAME } from "../memory.js";
 import { parseFrontmatter, serializeFrontmatter } from "./frontmatter.js";
 import { buildIdentitySection } from "./prompt-context.js";
+/**
+ * First-turn preamble section for cloud-runtime sessions on hosted
+ * deployments: cloud VMs read the memory journal from the store mount.
+ */
+export function buildCloudMemorySection(agentName) {
+    const dir = `${DEPLOYMENT_STORE_MOUNT_PATH}/${agentStoreKeys.memoryDir(agentName)}`;
+    return [
+        "## Shared session memory",
+        "",
+        `The cross-session memory journal (the \`memory/\` directory your instructions may reference) lives at \`${dir}\` on this machine — read \`${dir}/journal.jsonl\` with your normal file tools.`,
+    ].join("\n");
+}
 /** Relative path of an agent-side tool script inside the session workspace. */
 export function agentToolScriptPath(toolName) {
     return `.agent-serve/tools/${toolName}.sh`;