@cursor/july 0.1.38 → 0.1.40

package/dist/internal/cursor-event-relay.js

@@ -36,22 +36,44 @@ export function formatCursorScmEventLog(event) {
     const delivery = (_a = event.deliveryId) !== null && _a !== void 0 ? _a : "no delivery id";
     return `${event.eventName}${action} on ${pr} received=${received}${occurred} (${delivery})`;
 }
+/** Relay log suffix for one fan-out target, including parse errors on 4xx. */
+export function formatCursorScmDispatchOutcome(target) {
+    const slug = target.slug === "" ? "default" : target.slug;
+    if (target.status < 400) {
+        return `${slug}:${target.status}`;
+    }
+    const error = readDispatchError(target.body);
+    return error === undefined
+        ? `${slug}:${target.status}`
+        : `${slug}:${target.status} ${error}`;
+}
+function readDispatchError(body) {
+    if (typeof body !== "object" || body === null)
+        return undefined;
+    if (!("error" in body))
+        return undefined;
+    const error = body.error;
+    return typeof error === "string" && error !== "" ? error : undefined;
+}
 /**
  * Minimal GitHub webhook body from an SCM-events metadata envelope.
  * When `pullRequest` has title + head/base refs+shas, emits a Zod-valid
  * `pull_request` object for `onPullRequest`; otherwise identity-only stubs.
  * When `comment` is present, emits a Zod-valid `comment` object so relayed
  * `issue_comment` / `pull_request_review_comment` deliveries dispatch.
+ * When a CI snapshot is present, emits `check_run` / `check_suite` /
+ * `workflow_run` so those typed hooks parse on the `--cursor-events` path.
  */
 export function scmMetadataToGitHubPayload(event) {
     var _a, _b, _c;
+    var _d, _e, _f, _g, _h;
     const slash = event.repo.indexOf("/");
     const owner = slash === -1 ? "" : event.repo.slice(0, slash);
     const name = slash === -1 ? event.repo : event.repo.slice(slash + 1);
     const repoUrl = `https://github.com/${event.repo}`;
     const prMeta = event.pullRequest;
-    const prNumber = (_a = prMeta === null || prMeta === void 0 ? void 0 : prMeta.number) !== null && _a !== void 0 ? _a : event.prNumber;
-    const prUrl = (_c = (_b = prMeta === null || prMeta === void 0 ? void 0 : prMeta.url) !== null && _b !== void 0 ? _b : event.prUrl) !== null && _c !== void 0 ? _c : (prNumber !== undefined ? `${repoUrl}/pull/${prNumber}` : undefined);
+    const prNumber = (_d = prMeta === null || prMeta === void 0 ? void 0 : prMeta.number) !== null && _d !== void 0 ? _d : event.prNumber;
+    const prUrl = (_f = (_e = prMeta === null || prMeta === void 0 ? void 0 : prMeta.url) !== null && _e !== void 0 ? _e : event.prUrl) !== null && _f !== void 0 ? _f : (prNumber !== undefined ? `${repoUrl}/pull/${prNumber}` : undefined);
     const payload = {
         repository: {
             full_name: event.repo,
@@ -96,6 +118,20 @@ export function scmMetadataToGitHubPayload(event) {
         }
         payload.comment = comment;
     }
+    const checkPullRequests = stubGitHubCiPullRequests({
+        snapshot: (_h = (_g = (_a = event.checkRun) === null || _a === void 0 ? void 0 : _a.pullRequests) !== null && _g !== void 0 ? _g : (_b = event.checkSuite) === null || _b === void 0 ? void 0 : _b.pullRequests) !== null && _h !== void 0 ? _h : (_c = event.workflowRun) === null || _c === void 0 ? void 0 : _c.pullRequests,
+        prNumber,
+        prUrl,
+    });
+    if (event.checkRun !== undefined) {
+        payload.check_run = stubGitHubCheckRun(event.checkRun, checkPullRequests);
+    }
+    if (event.checkSuite !== undefined) {
+        payload.check_suite = stubGitHubCheckSuite(event.checkSuite, checkPullRequests);
+    }
+    if (event.workflowRun !== undefined) {
+        payload.workflow_run = stubGitHubWorkflowRun(event.workflowRun, checkPullRequests);
+    }
     const title = prMeta === null || prMeta === void 0 ? void 0 : prMeta.title;
     const headRef = prMeta === null || prMeta === void 0 ? void 0 : prMeta.headRef;
     const headSha = prMeta === null || prMeta === void 0 ? void 0 : prMeta.headSha;
@@ -143,6 +179,64 @@ export function scmMetadataToGitHubPayload(event) {
     }
     return payload;
 }
+function stubGitHubCiPullRequests(input) {
+    if (input.snapshot !== undefined && input.snapshot.length > 0) {
+        return input.snapshot.map((pr) => (Object.assign({ number: pr.number }, (pr.url === undefined ? {} : { html_url: pr.url }))));
+    }
+    if (input.prNumber === undefined)
+        return [];
+    return [
+        Object.assign({ number: input.prNumber }, (input.prUrl === undefined ? {} : { html_url: input.prUrl })),
+    ];
+}
+function stubGitHubCiApp(app) {
+    if (app === undefined)
+        return undefined;
+    const out = {};
+    if (app.slug !== undefined)
+        out.slug = app.slug;
+    if (app.name !== undefined)
+        out.name = app.name;
+    return out;
+}
+function stubGitHubCiBase(meta, pullRequests) {
+    const object = {
+        id: meta.id,
+        head_sha: meta.headSha,
+    };
+    if (meta.status !== undefined)
+        object.status = meta.status;
+    if (meta.conclusion !== undefined)
+        object.conclusion = meta.conclusion;
+    if (meta.htmlUrl !== undefined)
+        object.html_url = meta.htmlUrl;
+    const app = stubGitHubCiApp(meta.app);
+    if (app !== undefined)
+        object.app = app;
+    if (pullRequests.length > 0)
+        object.pull_requests = pullRequests;
+    return object;
+}
+function stubGitHubCheckRun(meta, pullRequests) {
+    const object = stubGitHubCiBase(meta, pullRequests);
+    if (meta.name !== undefined)
+        object.name = meta.name;
+    if (meta.checkSuiteId !== undefined) {
+        object.check_suite = { id: meta.checkSuiteId };
+    }
+    return object;
+}
+function stubGitHubCheckSuite(meta, pullRequests) {
+    return stubGitHubCiBase(meta, pullRequests);
+}
+function stubGitHubWorkflowRun(meta, pullRequests) {
+    const object = stubGitHubCiBase(meta, pullRequests);
+    if (meta.name !== undefined)
+        object.name = meta.name;
+    if (meta.workflowId !== undefined)
+        object.workflow_id = meta.workflowId;
+    return object;
+}
 /**
  * GitHub SCM-events relay: a thin {@link CursorRelayCore} adapter. Consumers
  * keep the same `new CursorEventRelay(options).start()/.stop()` surface.

package/dist/internal/json-dir-store.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Small filesystem helpers for one-JSON-file-per-id persistence under a
+ * project-relative directory (eval run snapshots, A/B aggregate snapshots).
+ */
+export declare function assertNonEmptyDir(dir: string, fnName: string): string;
+/** Resolve `dir` against `projectRoot` when relative. */
+export declare function resolveProjectRelativeDir(args: {
+    dir: string;
+    projectRoot: string;
+}): string;
+/** List `*.json` basenames in `root` (any order). Missing dir → []. */
+export declare function listJsonBasenames(root: string): Promise<string[]>;
+/**
+ * Read and JSON.parse every `*.json` file under `root`. Missing dir → [].
+ * Unreadable or corrupt files are skipped so one bad snapshot cannot wipe
+ * the rest of the history.
+ */
+export declare function readJsonDir<T>(root: string, options?: {
+    sortBasenames?: "asc" | "desc";
+}): Promise<T[]>;
+/** Atomically write JSON under `root`/`fileName` (temp file + rename). */
+export declare function writeJsonFile(args: {
+    root: string;
+    fileName: string;
+    value: unknown;
+}): Promise<void>;
+/** Best-effort delete; ignores missing files. */
+export declare function deleteFileInDir(args: {
+    root: string;
+    fileName: string;
+}): Promise<void>;
+//# sourceMappingURL=json-dir-store.d.ts.map

package/dist/internal/json-dir-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-dir-store.d.ts","sourceRoot":"","sources":["../../src/internal/json-dir-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAKrE;AAED,yDAAyD;AACzD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAET;AAWD,uEAAuE;AACvE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAWvE;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,EACjC,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,CAAC,EAAE,CAAC,CAiBd;AAED,0EAA0E;AAC1E,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED,iDAAiD;AACjD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB"}

package/dist/internal/mcp-oauth.d.ts

@@ -78,7 +78,18 @@ export type OAuthCallbackResult = {
     code: string;
     state?: string;
 };
-export declare function waitForMcpOAuthCallback(args?: {
+/**
+ * Deliberately not `@anysphere/mcp-core/oauth/loopback`, which is the canonical
+ * implementation every other Cursor surface shares. `@cursor/july` publishes to
+ * public npm with no private workspace dependencies, and its OAuth state is a
+ * bare UUID rather than the payload that module's validator expects.
+ *
+ * Nothing here reads Statsig, so this listener is outside
+ * `unified_mcp_loopback`: turning that gate off restores the other surfaces'
+ * original servers but leaves this one, and its state check, in place.
+ */
+export declare function waitForMcpOAuthCallback(args: {
+    authorizationUrl: string;
     port?: number;
     path?: string;
     timeoutMs?: number;

package/dist/internal/mcp-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-oauth.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EACV,0BAA0B,EAC1B,mBAAmB,EACnB,WAAW,EACZ,MAAM,0CAA0C,CAAC;AAGlD,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,uBAAuB,cAAc,CAAC;AACnD,eAAO,MAAM,sBAAsB,EAAE,MAAgF,CAAC;AAEtH,uCAAuC;AACvC,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAO5D;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAO3E;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,WAAW,GAAG,SAAS,CAazB;AAED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,0BAA0B,GAAG,SAAS,CASxC;AAaD,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgB3D;AAED,qBAAa,iBAAiB;IAIhB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAHjC,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,OAAO,CAAgC;IAE/C,YAAqB,IAAI,GAAE,MAA6B,EAAI;IAEtD,UAAU,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAElC;IAEK,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAEjD;IAEK,UAAU,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,0BAA0B,GACrC,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMjD;YAEa,QAAQ;YAeR,MAAM;YAkBN,IAAI;YAWJ,QAAQ;YAoBR,KAAK;YASL,QAAQ;CAgBvB;AAED,KAAK,YAAY,GAAG;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;CAChD,CAAC;AAEF,qBAAa,oBAAqB,YAAW,mBAAmB;IAC9D,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,UAAU,CAAyC;IAC3D,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;IAEpC,YAAY,IAAI,EAAE,YAAY,EAW7B;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED,IAAI,eAAe,IAAI,GAAG,GAAG,SAAS,CAErC;IAED,KAAK,IAAI,MAAM,CAEd;IAED,iBAAiB,IAAI,0BAA0B,GAAG,SAAS,CAE1D;IAEK,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;IAED,MAAM,IAAI,WAAW,GAAG,SAAS,CAEhC;IAEK,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnD;IAED,uBAAuB,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAGtC;IAEK,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;IAED,YAAY,IAAI,MAAM,CAKrB;IAEK,qBAAqB,CACzB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAC9C,OAAO,CAAC,IAAI,CAAC,CAcf;CACF;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;CACjC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAchC;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAsB,uBAAuB,CAAC,IAAI,CAAC,EAAE;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgF/B;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAsB7C"}
+{"version":3,"file":"mcp-oauth.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EACV,0BAA0B,EAC1B,mBAAmB,EACnB,WAAW,EACZ,MAAM,0CAA0C,CAAC;AAGlD,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,uBAAuB,cAAc,CAAC;AACnD,eAAO,MAAM,sBAAsB,EAAE,MAAgF,CAAC;AAEtH,uCAAuC;AACvC,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAO5D;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAO3E;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,WAAW,GAAG,SAAS,CAazB;AAED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,0BAA0B,GAAG,SAAS,CASxC;AAaD,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgB3D;AAED,qBAAa,iBAAiB;IAIhB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAHjC,OAAO,CAAC,KAAK,CAAuB;IACpC,OAAO,CAAC,OAAO,CAAgC;IAE/C,YAAqB,IAAI,GAAE,MAA6B,EAAI;IAEtD,UAAU,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAElC;IAEK,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAEjD;IAEK,UAAU,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,0BAA0B,GACrC,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMjD;YAEa,QAAQ;YAeR,MAAM;YAkBN,IAAI;YAWJ,QAAQ;YAoBR,KAAK;YASL,QAAQ;CAgBvB;AAED,KAAK,YAAY,GAAG;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;CAChD,CAAC;AAEF,qBAAa,oBAAqB,YAAW,mBAAmB;IAC9D,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,UAAU,CAAyC;IAC3D,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;IAEpC,YAAY,IAAI,EAAE,YAAY,EAW7B;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED,IAAI,eAAe,IAAI,GAAG,GAAG,SAAS,CAErC;IAED,KAAK,IAAI,MAAM,CAEd;IAED,iBAAiB,IAAI,0BAA0B,GAAG,SAAS,CAE1D;IAEK,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;IAED,MAAM,IAAI,WAAW,GAAG,SAAS,CAEhC;IAEK,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnD;IAED,uBAAuB,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAGtC;IAEK,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;IAED,YAAY,IAAI,MAAM,CAKrB;IAEK,qBAAqB,CACzB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAC9C,OAAO,CAAC,IAAI,CAAC,CAcf;CACF;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;CACjC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAchC;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8F/B;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAsB7C"}

package/dist/internal/mcp-oauth.js

@@ -307,12 +307,23 @@ export function createHostMcpOAuthProvider(args) {
         });
     });
 }
+/**
+ * Deliberately not `@anysphere/mcp-core/oauth/loopback`, which is the canonical
+ * implementation every other Cursor surface shares. `@cursor/july` publishes to
+ * public npm with no private workspace dependencies, and its OAuth state is a
+ * bare UUID rather than the payload that module's validator expects.
+ *
+ * Nothing here reads Statsig, so this listener is outside
+ * `unified_mcp_loopback`: turning that gate off restores the other surfaces'
+ * original servers but leaves this one, and its state check, in place.
+ */
 export function waitForMcpOAuthCallback(args) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a, _b, _c;
-        const port = (_a = args === null || args === void 0 ? void 0 : args.port) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_PORT;
-        const path = (_b = args === null || args === void 0 ? void 0 : args.path) !== null && _b !== void 0 ? _b : MCP_OAUTH_CALLBACK_PATH;
-        const timeoutMs = (_c = args === null || args === void 0 ? void 0 : args.timeoutMs) !== null && _c !== void 0 ? _c : 5 * 60 * 1000;
+        const port = (_a = args.port) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_PORT;
+        const path = (_b = args.path) !== null && _b !== void 0 ? _b : MCP_OAUTH_CALLBACK_PATH;
+        const timeoutMs = (_c = args.timeoutMs) !== null && _c !== void 0 ? _c : 5 * 60 * 1000;
+        const expectedState = new URL(args.authorizationUrl).searchParams.get("state");
         return new Promise((resolve, reject) => {
             let done = false;
             const finish = (result, error) => {
@@ -344,6 +355,17 @@ export function waitForMcpOAuthCallback(args) {
                 const code = url.searchParams.get("code");
                 const oauthError = url.searchParams.get("error");
                 const state = (_b = url.searchParams.get("state")) !== null && _b !== void 0 ? _b : undefined;
+                // Without this, any page that can reach the loopback port during a login
+                // can inject its own authorization code into the exchange. Ignore what is
+                // not ours rather than failing the login: treating a stray request as
+                // fatal would let any page cancel a login, and free the port for someone
+                // else to bind before the real callback arrives.
+                if (state !== (expectedState !== null && expectedState !== void 0 ? expectedState : undefined)) {
+                    res
+                        .writeHead(404, { "content-type": "text/html; charset=utf-8" })
+                        .end("<!doctype html><html><body><h1>Not found</h1></body></html>");
+                    return;
+                }
                 if (code) {
                     res
                         .writeHead(200, { "content-type": "text/html; charset=utf-8" })

package/dist/internal/persistence-coordinator.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Runtime for `definePersistence` (`agent/persistence.ts`).
+ *
+ * The coordinator is the single funnel between the engine's hot paths and
+ * the author's key-value sink. The sink is four functions (`put` / `get` /
+ * `delete` / `list`); the coordinator owns everything else: it mints every
+ * key from the versioned scheme ({@link persistenceKeys}), coalesces
+ * session records and batches event chunks per turn (or debounce window),
+ * serializes delivery on one bounded queue per agent, and isolates
+ * failures — a throwing sink is logged and its write dropped; persistence
+ * must never stall or fail a turn.
+ *
+ * Scaling shape: sessions, evals, and A/Bs all reduce to keyed puts on the
+ * same queue, so one author-owned sink covers every domain, and new
+ * domains are new key prefixes — not new config surface.
+ */
+import type { ABSamplePersistence } from "../ab.js";
+import type { EvalRunPersistence } from "../evals.js";
+import { type PersistenceContext, type PersistenceDefinition, type ResolvedPersistencePolicy } from "../persistence.js";
+import type { SessionEvent, SessionRecord } from "../types.js";
+import type { ABSnapshot } from "./ab-snapshot.js";
+export interface PersistenceCoordinatorOptions {
+    definition: PersistenceDefinition;
+    agentName: string;
+    projectRoot: string;
+    logger: (line: string) => void;
+}
+export declare class PersistenceCoordinator {
+    readonly policy: ResolvedPersistencePolicy;
+    private readonly definition;
+    private readonly agentName;
+    private readonly projectRoot;
+    private readonly logger;
+    /** Per-session pending state (events + coalesced record). */
+    private readonly buffers;
+    /**
+     * Last continuation key written to the sink per session, so a token
+     * change emits a delete for the stale index entry alongside the new put.
+     */
+    private readonly continuationIndex;
+    /** Single delivery chain: writes reach the sink serialized, in order. */
+    private queue;
+    /** Ops on the queue not yet delivered (bounded by MAX_PENDING_OPS). */
+    private pending;
+    /** Ops dropped because the queue was full. */
+    private dropped;
+    private lastAbSnapshotAt;
+    private closed;
+    constructor(options: PersistenceCoordinatorOptions);
+    /** Durable session-record update (engine calls after every store save). */
+    sessionRecord(record: SessionRecord): void;
+    /** One appended session event (engine calls from its dispatch funnel). */
+    event(event: SessionEvent): void;
+    /**
+     * A boundary event's dispatch settled: channel/hook handlers ran and
+     * their record updates (channel state, continuation tokens) are
+     * buffered. This — not the append — is the turn-end flush point, so the
+     * persisted session record includes the boundary event's own handler
+     * mutations. Debounced batching intentionally ignores boundaries.
+     */
+    eventDispatched(event: SessionEvent): void;
+    /** Flush everything buffered for one session (ordered: events, record). */
+    flushSession(sessionId: string, reason?: PersistenceContext["reason"]): void;
+    /**
+     * Index maintenance for `continuation/{channelId}/{token}` → sessionId:
+     * put the current token, delete the previous one when it changed.
+     */
+    private continuationOps;
+    /** Whether the sink can serve the startup bulk restore (`list`). */
+    get canBulkRestore(): boolean;
+    /**
+     * Saved session records for this agent (startup restore). Errors are
+     * logged and read as "nothing saved" — a broken store must never block
+     * serve start.
+     */
+    listSessions(): Promise<SessionRecord[]>;
+    /**
+     * Saved event stream for one session: chunk values concatenated in key
+     * order (chunks are keyed by their first event's index, zero-padded, so
+     * ascending key order is append order). Errors read as an empty stream.
+     */
+    listSessionEvents(sessionId: string): Promise<SessionEvent[]>;
+    /**
+     * One saved session by channel continuation key (lazy restore). Unlike
+     * the startup reads, sink errors **propagate**: a failing store must
+     * fail the follow-up (which the caller can retry) rather than read as
+     * "unknown token" — that would mint a new session under the same
+     * continuation key and permanently shadow the real one on this host.
+     * A definitive miss (no index entry, or a write-only sink without
+     * `get`) resolves undefined.
+     */
+    getSessionByContinuation(channelId: string, continuationKey: string): Promise<SessionRecord | undefined>;
+    /**
+     * Adapter for {@link EvalRunPersistence} so the playground eval store
+     * can fall back to this sink when `evals.config.ts` sets no
+     * `persistRuns`.
+     */
+    asEvalRunPersistence(): EvalRunPersistence;
+    /**
+     * Adapter for {@link ABSamplePersistence} so the AB collector can fall
+     * back to this sink when `ab.config.ts` sets no `persistSamples`.
+     */
+    asABSamplePersistence(): ABSamplePersistence;
+    /**
+     * Refresh the persisted aggregate A/B snapshot, throttled to once per
+     * {@link AB_SNAPSHOT_MIN_INTERVAL_MS} (the playground recomputes the
+     * fold on every `GET /v1/abs` poll).
+     */
+    abSnapshot(snapshot: ABSnapshot): void;
+    /** Latest persisted aggregate A/B snapshot; errors read as absent. */
+    getLatestAbSnapshot(): Promise<ABSnapshot | undefined>;
+    /**
+     * Flush all buffers and drain the queue, giving the sink at most
+     * {@link CLOSE_DRAIN_TIMEOUT_MS} — a hung sink must not stall shutdown
+     * past the pod grace period. Called from engine close.
+     */
+    close(): Promise<void>;
+    /** Pending deliveries (exposed for tests and drain instrumentation). */
+    whenIdle(): Promise<void>;
+    private buffer;
+    private armDebounce;
+    /** `list` wrapper for the startup reads: missing hook or throw ⇒ empty. */
+    private tryList;
+    private enqueue;
+    private context;
+}
+//# sourceMappingURL=persistence-coordinator.d.ts.map

package/dist/internal/persistence-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-coordinator.d.ts","sourceRoot":"","sources":["../../src/internal/persistence-coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAkB,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAmB,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAE1B,KAAK,yBAAyB,EAE/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAa,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAyCnD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,qBAAqB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AASD,qBAAa,sBAAsB;IACjC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAE3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoC;IACtE,yEAAyE;IACzE,OAAO,CAAC,KAAK,CAAoC;IACjD,uEAAuE;IACvE,OAAO,CAAC,OAAO,CAAK;IACpB,8CAA8C;IAC9C,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAY,OAAO,EAAE,6BAA6B,EAMjD;IAMD,2EAA2E;IAC3E,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAMzC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAoB/B;IAED;;;;;;OAMG;IACH,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CASzC;IAED,2EAA2E;IAC3E,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,kBAAkB,CAAC,QAAQ,CAAY,GAC9C,IAAI,CAiCN;IAED;;;OAGG;IACH,OAAO,CAAC,eAAe;IAoCvB,oEAAoE;IACpE,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAO7C;IAED;;;;OAIG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAWlE;IAED;;;;;;;;OAQG;IACG,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAgDpC;IAMD;;;;OAIG;IACH,oBAAoB,IAAI,kBAAkB,CAkCzC;IAMD;;;OAGG;IACH,qBAAqB,IAAI,mBAAmB,CAmB3C;IAED;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAmBrC;IAED,sEAAsE;IAChE,mBAAmB,IAAI,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAiB3D;IAMD;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB3B;IAED,wEAAwE;IACxE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAExB;IAED,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,WAAW;IAgBnB,2EAA2E;YAC7D,OAAO;IAkBrB,OAAO,CAAC,OAAO;IAqCf,OAAO,CAAC,OAAO;CAGhB"}

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAmGrB,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAiBpE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAaD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAmuB3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAoGrB,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAiBpE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAaD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAmuB3B"}

package/dist/internal/server.js

@@ -44,7 +44,7 @@ import { CursorAccountMcpBridge, collectCursorAccountConnections, cursorAccountM
 import { CursorBackendClient } from "./cursor/backend-client.js";
 import { cursorExternalApiUrl, resolveApiKey, SIGN_IN_HINT, } from "./cursor/credentials.js";
 import { CursorGithubCredentialProvider } from "./cursor/github-credentials.js";
-import { CursorEventRelay, formatCursorScmEventLog, scmMetadataToGitHubPayload, } from "./cursor-event-relay.js";
+import { CursorEventRelay, formatCursorScmDispatchOutcome, formatCursorScmEventLog, scmMetadataToGitHubPayload, } from "./cursor-event-relay.js";
 import { CursorSlackRelay, createCursorSlackApiCaller, formatCursorSlackEventLog, } from "./cursor-slack-relay.js";
 import { formatDiagnostics, hasErrorDiagnostics, projectInfo, } from "./discovery.js";
 import { packageVersion } from "./distribution.js";
@@ -1401,8 +1401,12 @@ function startCursorEventRelay(input) {
                 targets,
             });
             const outcomes = result.targets
-                .map((target) => `${target.slug || "default"}:${target.status}`)
+                .map((target) => formatCursorScmDispatchOutcome(target))
                 .join(", ");
+            const rejected = result.targets.filter((target) => target.status >= 400);
+            if (rejected.length > 0) {
+                logger(`[agent-sdk] cursor-events: dropped ${formatCursorScmEventLog(event)} before hook: ${rejected.map(formatCursorScmDispatchOutcome).join(", ")}`);
+            }
             logger(`[agent-sdk] cursor-events: dispatched ${formatCursorScmEventLog(event)}${outcomes === "" ? "" : ` → ${outcomes}`}`);
         }),
     });

package/dist/multi-tenant.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Multi-customer managed-agent bindings for agentkit.
+ *
+ * Control plane checks the Statsig gate {@link MULTI_TENANT_ENABLED_GATE}
+ * before attaching bindings to a wake. Engines never call Statsig; they
+ * only react when a {@link TenantWakeContext} / binding list is present.
+ * Gate off ⇒ callers pass `multiTenant: false` and keep legacy allowlists.
+ */
+/** Statsig gate id — must match `FLAGS.multi_tenant_enabled`. */
+export declare const MULTI_TENANT_ENABLED_GATE: "multi_tenant_enabled";
+/**
+ * Per-customer binding for a catalog (managed) agentkit agent.
+ * Prompts / tools / MCP are overlays on the fixed agent image.
+ */
+export interface ManagedAgentBinding {
+    bindingId: string;
+    /** Catalog agent id (e.g. `security-reviewer`). */
+    agentId: string;
+    teamId: number;
+    /** `owner/name` repos this customer enabled. */
+    repos: readonly string[];
+    prompts?: {
+        /** Appended to base system instructions; does not replace them. */
+        overlay?: string;
+        /** Injected as the wake / task brief. */
+        task?: string;
+    };
+    tools?: {
+        /** When set, only these tool names are admitted for the wake. */
+        enable?: readonly string[];
+    };
+    mcp?: readonly {
+        id: string;
+        url: string;
+        secretRef?: string;
+    }[];
+    policy?: {
+        model?: string;
+        effort?: string;
+        [key: string]: unknown;
+    };
+}
+/** Request-scoped tenant bag attached to a managed-agent wake. */
+export interface TenantWakeContext {
+    binding: ManagedAgentBinding;
+}
+export declare function normalizeRepoFullName(repo: string): string;
+export declare function bindingAllowsRepo(binding: ManagedAgentBinding, repoFullName: string): boolean;
+export declare function findBindingForRepo(bindings: readonly ManagedAgentBinding[], agentId: string, repoFullName: string): ManagedAgentBinding | undefined;
+export type RepositoryAdmission = {
+    admitted: true;
+    binding?: ManagedAgentBinding;
+} | {
+    admitted: false;
+};
+/**
+ * Admit a repository for a managed agent.
+ * - `multiTenant: true` → matching binding required (fail closed).
+ * - `multiTenant: false` → legacy static allowlist only.
+ */
+export declare function admitRepository(args: {
+    multiTenant: boolean;
+    agentId: string;
+    repoFullName: string;
+    bindings: readonly ManagedAgentBinding[];
+    legacyAllowlist: readonly string[];
+}): RepositoryAdmission;
+/** Tools with no `enable` list stay admitted (compat with unconfigured bindings). */
+export declare function isToolAdmitted(binding: ManagedAgentBinding | undefined, toolName: string): boolean;
+/**
+ * Author-KV key scoped to a customer team under the existing `kv/` scheme:
+ * `agentkit/v1/{agent}/kv/t/{teamId}/{key}`.
+ */
+export declare function tenantKvKey(agent: string, teamId: number, key: string): string;
+/**
+ * Prefix for listing author-KV keys for one customer team.
+ * Matches the URI-encoded form produced by {@link tenantKvKey}.
+ */
+export declare function tenantKvPrefix(agent: string, teamId: number): string;
+//# sourceMappingURL=multi-tenant.d.ts.map

package/dist/multi-tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-tenant.d.ts","sourceRoot":"","sources":["../src/multi-tenant.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,EAAG,sBAA+B,CAAC;AAEzE;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,yCAAyC;QACzC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,CAAC,EAAE;QACN,iEAAiE;QACjE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC5B,CAAC;IACF,GAAG,CAAC,EAAE,SAAS;QACb,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,EAAE,CAAC;IACJ,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,mBAAmB,EAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAGT;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,EACxC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,mBAAmB,GAAG,SAAS,CAIjC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAE,GACjD;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC;AAExB;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACzC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,GAAG,mBAAmB,CAiBtB;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,mBAAmB,GAAG,SAAS,EACxC,QAAQ,EAAE,MAAM,GACf,OAAO,CAMT;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,MAAM,CAKR;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAKpE"}

package/dist/multi-tenant.js

@@ -0,0 +1,69 @@
+/**
+ * Multi-customer managed-agent bindings for agentkit.
+ *
+ * Control plane checks the Statsig gate {@link MULTI_TENANT_ENABLED_GATE}
+ * before attaching bindings to a wake. Engines never call Statsig; they
+ * only react when a {@link TenantWakeContext} / binding list is present.
+ * Gate off ⇒ callers pass `multiTenant: false` and keep legacy allowlists.
+ */
+import { STORAGE_KEY_ROOT, storageKeys } from "./storage.js";
+/** Statsig gate id — must match `FLAGS.multi_tenant_enabled`. */
+export const MULTI_TENANT_ENABLED_GATE = "multi_tenant_enabled";
+export function normalizeRepoFullName(repo) {
+    return repo.trim().toLowerCase();
+}
+export function bindingAllowsRepo(binding, repoFullName) {
+    const needle = normalizeRepoFullName(repoFullName);
+    return binding.repos.some((r) => normalizeRepoFullName(r) === needle);
+}
+export function findBindingForRepo(bindings, agentId, repoFullName) {
+    return bindings.find((b) => b.agentId === agentId && bindingAllowsRepo(b, repoFullName));
+}
+/**
+ * Admit a repository for a managed agent.
+ * - `multiTenant: true` → matching binding required (fail closed).
+ * - `multiTenant: false` → legacy static allowlist only.
+ */
+export function admitRepository(args) {
+    if (args.multiTenant) {
+        const binding = findBindingForRepo(args.bindings, args.agentId, args.repoFullName);
+        if (binding === undefined) {
+            return { admitted: false };
+        }
+        return { admitted: true, binding };
+    }
+    const needle = normalizeRepoFullName(args.repoFullName);
+    if (!args.legacyAllowlist.some((r) => normalizeRepoFullName(r) === needle)) {
+        return { admitted: false };
+    }
+    return { admitted: true };
+}
+/** Tools with no `enable` list stay admitted (compat with unconfigured bindings). */
+export function isToolAdmitted(binding, toolName) {
+    var _a;
+    const enable = (_a = binding === null || binding === void 0 ? void 0 : binding.tools) === null || _a === void 0 ? void 0 : _a.enable;
+    if (enable === undefined) {
+        return true;
+    }
+    return enable.includes(toolName);
+}
+/**
+ * Author-KV key scoped to a customer team under the existing `kv/` scheme:
+ * `agentkit/v1/{agent}/kv/t/{teamId}/{key}`.
+ */
+export function tenantKvKey(agent, teamId, key) {
+    if (!Number.isInteger(teamId) || teamId < 0) {
+        throw new Error(`invalid teamId for tenant storage: ${String(teamId)}`);
+    }
+    return storageKeys.kv(agent, `t/${teamId}/${key}`);
+}
+/**
+ * Prefix for listing author-KV keys for one customer team.
+ * Matches the URI-encoded form produced by {@link tenantKvKey}.
+ */
+export function tenantKvPrefix(agent, teamId) {
+    if (!Number.isInteger(teamId) || teamId < 0) {
+        throw new Error(`invalid teamId for tenant storage: ${String(teamId)}`);
+    }
+    return `${STORAGE_KEY_ROOT}/${agent}/kv/${encodeURIComponent(`t/${teamId}/`)}`;
+}