npm - @cursor/july - Versions diffs - 0.1.61 → 0.1.68 - Mend

@cursor/july 0.1.61 → 0.1.68

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (196) hide show

package/dist/bin/agent-serve.js +8 -0
package/dist/channels/github/github-channel.d.ts +1 -1
package/dist/channels/github/github-channel.d.ts.map +1 -1
package/dist/channels/github/github-channel.js +14 -1
package/dist/channels/github/types.d.ts +2 -0
package/dist/channels/github/types.d.ts.map +1 -1
package/dist/channels/slack/channel-watch.d.ts +2 -1
package/dist/channels/slack/channel-watch.d.ts.map +1 -1
package/dist/channels/slack/channel-watch.js +7 -3
package/dist/channels/slack/dispatch.d.ts +9 -0
package/dist/channels/slack/dispatch.d.ts.map +1 -1
package/dist/channels/slack/dispatch.js +41 -21
package/dist/channels/slack/manifest.d.ts.map +1 -1
package/dist/channels/slack/manifest.js +1 -0
package/dist/channels/slack/nudge-store.d.ts +16 -0
package/dist/channels/slack/nudge-store.d.ts.map +1 -1
package/dist/channels/slack/nudge-store.js +53 -0
package/dist/channels/slack/slack-channel.d.ts.map +1 -1
package/dist/channels/slack/slack-channel.js +4 -1
package/dist/channels/slack/types.d.ts +22 -5
package/dist/channels/slack/types.d.ts.map +1 -1
package/dist/docs/404.html +2 -2
package/dist/docs/ab.html +3 -3
package/dist/docs/assets/{app.CW3KJh72.js → app.C5XUTCw9.js} +1 -1
package/dist/docs/assets/chunks/@localSearchIndexroot.DvUR3lv9.js +1 -0
package/dist/docs/assets/chunks/{VPLocalSearchBox.Bk6EWpPj.js → VPLocalSearchBox.CGDTAYHY.js} +1 -1
package/dist/docs/assets/chunks/{theme.Bz9AodBA.js → theme.lPixh250.js} +2 -2
package/dist/docs/assets/{reference_connections.md.CSQiNzre.js → reference_connections.md.Bwswbm6H.js} +13 -3
package/dist/docs/assets/{reference_connections.md.CSQiNzre.lean.js → reference_connections.md.Bwswbm6H.lean.js} +1 -1
package/dist/docs/assets/{reference_tools.md.kJfJAP2m.js → reference_tools.md.Wmvb7Lob.js} +2 -2
package/dist/docs/assets/{reference_tools.md.kJfJAP2m.lean.js → reference_tools.md.Wmvb7Lob.lean.js} +1 -1
package/dist/docs/building-with-agents.html +3 -3
package/dist/docs/concepts.html +3 -3
package/dist/docs/deployment.html +3 -3
package/dist/docs/evals.html +3 -3
package/dist/docs/example-agents/approval-buddy.html +3 -3
package/dist/docs/example-agents/benny.html +3 -3
package/dist/docs/example-agents/bugbot.html +3 -3
package/dist/docs/example-agents/codebase-wiki.html +3 -3
package/dist/docs/example-agents/codeowners-review.html +3 -3
package/dist/docs/example-agents/concierge.html +3 -3
package/dist/docs/example-agents/fsd.html +3 -3
package/dist/docs/example-agents/index.html +3 -3
package/dist/docs/example-agents/knowledge-base.html +3 -3
package/dist/docs/example-agents/oncall.html +3 -3
package/dist/docs/example-agents/security-reviewer.html +3 -3
package/dist/docs/example-agents/slack-agent.html +3 -3
package/dist/docs/example-agents/weather-agent.html +3 -3
package/dist/docs/guides/agent-to-agent.html +3 -3
package/dist/docs/guides/cloud-runtime.html +3 -3
package/dist/docs/guides/convert-automation.html +3 -3
package/dist/docs/guides/github.html +3 -3
package/dist/docs/guides/human-in-the-loop.html +3 -3
package/dist/docs/guides/mcp-oauth.html +3 -3
package/dist/docs/guides/opentelemetry.html +3 -3
package/dist/docs/guides/slack.html +3 -3
package/dist/docs/guides/webhooks.html +3 -3
package/dist/docs/hashmap.json +1 -1
package/dist/docs/hillclimbing.html +3 -3
package/dist/docs/index.html +3 -3
package/dist/docs/quickstart.html +3 -3
package/dist/docs/reference/agent-config.html +3 -3
package/dist/docs/reference/artifacts.html +3 -3
package/dist/docs/reference/channels.html +3 -3
package/dist/docs/reference/cli.html +3 -3
package/dist/docs/reference/connections.html +15 -5
package/dist/docs/reference/hooks.html +3 -3
package/dist/docs/reference/http-api.html +3 -3
package/dist/docs/reference/instructions.html +3 -3
package/dist/docs/reference/playground.html +3 -3
package/dist/docs/reference/project-layout.html +3 -3
package/dist/docs/reference/prompt.html +3 -3
package/dist/docs/reference/schedules.html +3 -3
package/dist/docs/reference/sessions.html +3 -3
package/dist/docs/reference/skills.html +3 -3
package/dist/docs/reference/subagents.html +3 -3
package/dist/docs/reference/tools.html +5 -5
package/dist/docs/scaffolding-agents.html +3 -3
package/dist/docs/storage.html +3 -3
package/dist/docs/templates/agentic-owners.html +3 -3
package/dist/docs/templates/demo.html +3 -3
package/dist/docs/templates/pr-autofixer.html +3 -3
package/dist/docs/templates/security-reviewer.html +3 -3
package/dist/docs/templates/triage.html +3 -3
package/dist/docs/troubleshooting.html +3 -3
package/dist/files-backends/agent-store-presigned-url.js +1 -1
package/dist/index.d.ts +2 -2
package/dist/index.d.ts.map +1 -1
package/dist/index.js +1 -1
package/dist/internal/advertise-tools.d.ts +74 -0
package/dist/internal/advertise-tools.d.ts.map +1 -0
package/dist/internal/advertise-tools.js +152 -0
package/dist/internal/cli-deploy.d.ts.map +1 -1
package/dist/internal/cli-deploy.js +11 -3
package/dist/internal/cli-manifest.d.ts +19 -0
package/dist/internal/cli-manifest.d.ts.map +1 -0
package/dist/internal/cli-manifest.js +49 -0
package/dist/internal/cli-slack.d.ts.map +1 -1
package/dist/internal/cli-slack.js +9 -1
package/dist/internal/cursor-agent-template.d.ts +9 -0
package/dist/internal/cursor-agent-template.d.ts.map +1 -0
package/dist/internal/cursor-agent-template.js +37 -0
package/dist/internal/cursor-event-relay.d.ts +5 -1
package/dist/internal/cursor-event-relay.d.ts.map +1 -1
package/dist/internal/cursor-event-relay.js +5 -0
package/dist/internal/deploy-client.d.ts +8 -0
package/dist/internal/deploy-client.d.ts.map +1 -1
package/dist/internal/deploy-client.js +21 -3
package/dist/internal/deploy-manifest.d.ts +85 -0
package/dist/internal/deploy-manifest.d.ts.map +1 -0
package/dist/internal/deploy-manifest.js +106 -0
package/dist/internal/deployment-scm-event-stream.d.ts +113 -0
package/dist/internal/deployment-scm-event-stream.d.ts.map +1 -0
package/dist/internal/deployment-scm-event-stream.js +460 -0
package/dist/internal/discovery.d.ts.map +1 -1
package/dist/internal/discovery.js +69 -0
package/dist/internal/init-project.d.ts.map +1 -1
package/dist/internal/init-project.js +5 -17
package/dist/internal/mcp-host.d.ts +18 -0
package/dist/internal/mcp-host.d.ts.map +1 -1
package/dist/internal/mcp-host.js +41 -5
package/dist/internal/mcp-oauth.d.ts +0 -4
package/dist/internal/mcp-oauth.d.ts.map +1 -1
package/dist/internal/mcp-oauth.js +0 -4
package/dist/internal/sdk-runner.d.ts +1 -1
package/dist/internal/sdk-runner.d.ts.map +1 -1
package/dist/internal/sdk-runner.js +36 -13
package/dist/internal/server.d.ts.map +1 -1
package/dist/internal/server.js +20 -2
package/dist/internal/session-engine.d.ts +66 -0
package/dist/internal/session-engine.d.ts.map +1 -1
package/dist/internal/session-engine.js +430 -110
package/dist/internal/shallow-clone.d.ts +115 -0
package/dist/internal/shallow-clone.d.ts.map +1 -0
package/dist/internal/shallow-clone.js +292 -0
package/dist/internal/slack-provision-client.d.ts +2 -0
package/dist/internal/slack-provision-client.d.ts.map +1 -1
package/dist/internal/slack-provision-client.js +1 -0
package/dist/internal/turn-lease-store.d.ts +44 -0
package/dist/internal/turn-lease-store.d.ts.map +1 -0
package/dist/internal/turn-lease-store.js +139 -0
package/dist/internal/workspace.d.ts +12 -0
package/dist/internal/workspace.d.ts.map +1 -1
package/dist/internal/workspace.js +28 -0
package/dist/playground/assets/index-CoL7xCJl.css +1 -0
package/dist/playground/assets/index-yxs1heea.js +85 -0
package/dist/playground/index.html +2 -2
package/dist/storage-protocol.d.ts +122 -0
package/dist/storage-protocol.d.ts.map +1 -0
package/dist/storage-protocol.js +173 -0
package/dist/storage.d.ts +2 -72
package/dist/storage.d.ts.map +1 -1
package/dist/storage.js +2 -82
package/dist/types.d.ts +114 -4
package/dist/types.d.ts.map +1 -1
package/docs/reference/connections.md +80 -0
package/docs/reference/tools.md +14 -0
package/package.json +4 -2
package/skills/github/SKILL.md +2 -1
package/src/bin/agent-serve.ts +9 -0
package/src/channels/github/github-channel.ts +18 -2
package/src/channels/github/types.ts +2 -0
package/src/channels/slack/channel-watch.ts +6 -3
package/src/channels/slack/dispatch.ts +40 -3
package/src/channels/slack/manifest.ts +1 -0
package/src/channels/slack/nudge-store.ts +56 -0
package/src/channels/slack/slack-channel.ts +3 -0
package/src/channels/slack/types.ts +22 -5
package/src/index.ts +5 -0
package/src/internal/advertise-tools.ts +229 -0
package/src/internal/cli-deploy.ts +22 -1
package/src/internal/cli-manifest.ts +63 -0
package/src/internal/cli-slack.ts +10 -1
package/src/internal/cursor-agent-template.ts +46 -0
package/src/internal/cursor-event-relay.ts +8 -1
package/src/internal/deploy-client.ts +35 -6
package/src/internal/deploy-manifest.ts +167 -0
package/src/internal/deployment-scm-event-stream.ts +577 -0
package/src/internal/discovery.ts +85 -0
package/src/internal/init-project.ts +11 -20
package/src/internal/mcp-host.ts +66 -9
package/src/internal/mcp-oauth.ts +0 -4
package/src/internal/sdk-runner.ts +50 -11
package/src/internal/server.ts +21 -2
package/src/internal/session-engine.ts +385 -19
package/src/internal/shallow-clone.ts +407 -0
package/src/internal/slack-provision-client.ts +3 -0
package/src/internal/turn-lease-store.ts +147 -0
package/src/internal/workspace.ts +27 -0
package/src/storage-protocol.ts +247 -0
package/src/storage.ts +16 -110
package/src/types.ts +118 -4
package/templates/pr-autofixer/agent/lib/drive-schemas.ts +4 -1
package/dist/docs/assets/chunks/@localSearchIndexroot.BuymfBAo.js +0 -1
package/dist/playground/assets/index-ClbuaLpm.css +0 -1
package/dist/playground/assets/index-SqkR13k_.js +0 -85

package/dist/internal/shallow-clone.d.ts ADDED Viewed

@@ -0,0 +1,115 @@
+/**
+ * Shallow GitHub PR checkout for SDK agents that review a PR's code.
+ *
+ * Mirrors Bugbot's `shallow_fetch` prefetch strategy
+ * (`backend/crates/napi_bugbot/src/temp_clone.rs`): instead of cloning the
+ * whole repository, run a single `git fetch --depth=1 --no-tags origin <head>
+ * <merge_base>` into a fresh checkout so the agents get the PR head working
+ * tree (plus the merge-base commit for `git diff baseSha headSha`) with one
+ * bounded network round-trip. Bugbot keeps a bare `--filter=tree:0` partial
+ * clone because its tools stream objects on demand; SDK agents read a real
+ * working tree, so we materialize the head checkout instead.
+ *
+ * Auth also mirrors Bugbot's provider model (`IGitProvider.getAccessToken`
+ * → token handed straight to git): the clone takes one explicit repo-scoped
+ * bearer token. The default source is the serve host's Cursor-account
+ * GitHub lease — the same backend `GithubAccessService` mint Bugbot uses —
+ * which `CursorGithubCredentialProvider` installs as `GH_TOKEN` for child
+ * processes. Where Bugbot embeds the token in the clone URL, this module
+ * serves it through an inline credential helper that reads a child-process
+ * env var, so the token never lands in argv or in `.git/config` inside a
+ * working tree that untrusted PR code later executes in.
+ *
+ * INTERNAL: first-party host plumbing shared by agents in `factory/*` (e.g.
+ * the security reviewer's `prepare_review` stage). Consumed via relative
+ * source imports, following `tenant-mcp/run-mcp-registry.ts`.
+ */
+export type ShallowPrCheckout = {
+    /** Directory containing the PR head working tree (detached at headSha). */
+    checkoutDir: string;
+    headSha: string;
+    /** True when the merge-base commit was also fetched (enables local diffs). */
+    baseFetched: boolean;
+    /** How the head commit was obtained. */
+    headSource: "sha_fetch" | "pr_ref_fetch";
+};
+/** Repo-scoped bearer for git-over-HTTPS (installation token or PAT). */
+export type ShallowCloneAuth = {
+    token: string;
+};
+/**
+ * Default clone credential: the serve host's Cursor-account GitHub lease.
+ * `CursorGithubCredentialProvider` mints it repo-scoped from the backend and
+ * keeps `GH_TOKEN` refreshed for child processes; `GITHUB_TOKEN` covers
+ * local/CI runs that export the conventional variable instead.
+ */
+export declare function serveHostGithubAuth(env?: NodeJS.ProcessEnv): ShallowCloneAuth | undefined;
+/**
+ * Create a fresh shallow checkout of a GitHub PR head at `checkoutDir`.
+ *
+ * Fetch order (both single depth-1 round-trips):
+ * 1. Fetch `headSha` (and `baseSha` when known) directly — GitHub advertises
+ *    `allow-reachable-sha1-in-want`, and this pins the exact reviewed commit
+ *    the way Bugbot's `shallow_fetch` does.
+ * 2. Fall back to `refs/pull/<n>/head`, verifying it still resolves to
+ *    `headSha` so the working tree cannot silently drift from the pinned
+ *    patch in the review bundle.
+ *
+ * A missing merge-base commit is non-fatal (agents still have the pinned
+ * patch text in their prompt); a missing head checkout throws.
+ */
+export declare function createShallowPrCheckout(args: {
+    /** `owner/name`. */
+    repo: string;
+    prNumber?: number | undefined;
+    headSha: string;
+    /** Merge-base SHA; fetched too so `git diff baseSha headSha` works locally. */
+    baseSha?: string | undefined;
+    checkoutDir: string;
+    /** Clone credential; required for GitHub remotes, unused for file fixtures. */
+    auth?: ShallowCloneAuth | undefined;
+    /** Test seam: clone from this URL instead of `https://github.com/<repo>.git`. */
+    remoteUrl?: string | undefined;
+}): Promise<ShallowPrCheckout>;
+/** True for `https://github.com/<owner>/<repo>/pull/<n>` URLs. */
+export declare function isGithubPrUrl(prUrl: string): boolean;
+export type TryShallowPrCheckoutOptions = {
+    /** PR URL; only GitHub PR URLs are cloned (others skip). */
+    prUrl: string;
+    /** `owner/name`. */
+    repo: string;
+    prNumber?: number | undefined;
+    /** Pinned head SHA; skipped (undefined result) when unknown. */
+    headSha?: string | undefined;
+    /** Merge-base SHA; fetched too so `git diff baseSha headSha` works locally. */
+    baseSha?: string | undefined;
+    checkoutDir: string;
+    /** Clone credential; defaults to {@link serveHostGithubAuth}. */
+    auth?: ShallowCloneAuth | undefined;
+    /** Test seam: clone from this URL instead of `https://github.com/<repo>.git`. */
+    remoteUrl?: string | undefined;
+};
+export type TryShallowPrCheckoutResult = {
+    /** Set when the shallow checkout succeeded. */
+    checkout?: ShallowPrCheckout;
+    /**
+     * Why there is no checkout: a skip gate or the clone failure's first error
+     * line. Callers surface this in their own results/logs so the reason is
+     * visible on hosts that do not capture this module's stderr.
+     */
+    fallbackReason?: string;
+};
+/**
+ * Best-effort shallow PR checkout for hosts whose SDK agents should read the
+ * reviewed repo instead of the host's own checkout.
+ *
+ * Returns no checkout — leaving the caller on its fallback working
+ * directory — when the PR is not on GitHub (e.g. Origin PRs, where the host
+ * checkout is the reviewed repo), when no head SHA is pinned, when no clone
+ * credential is available, or when the clone fails; `fallbackReason` says
+ * which. Failures are logged, never thrown: agents still have the pinned
+ * patch in their prompts, so a missing checkout degrades quality rather
+ * than the run.
+ */
+export declare function tryCreateShallowPrCheckout(options: TryShallowPrCheckoutOptions): Promise<TryShallowPrCheckoutResult>;
+//# sourceMappingURL=shallow-clone.d.ts.map

package/dist/internal/shallow-clone.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"shallow-clone.d.ts","sourceRoot":"","sources":["../../src/internal/shallow-clone.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,WAAW,EAAE,OAAO,CAAC;IACrB,wCAAwC;IACxC,UAAU,EAAE,WAAW,GAAG,cAAc,CAAC;CAC1C,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,GAAG,SAAS,CAG9B;AA0GD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpC,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgH7B;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAapD;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,IAAI,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpC,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CA2CrC"}

package/dist/internal/shallow-clone.js ADDED Viewed

@@ -0,0 +1,292 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { execFile } from "node:child_process";
+import { mkdirSync, rmSync } from "node:fs";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+/**
+ * Default clone credential: the serve host's Cursor-account GitHub lease.
+ * `CursorGithubCredentialProvider` mints it repo-scoped from the backend and
+ * keeps `GH_TOKEN` refreshed for child processes; `GITHUB_TOKEN` covers
+ * local/CI runs that export the conventional variable instead.
+ */
+export function serveHostGithubAuth(env = process.env) {
+    var _a, _b;
+    const token = ((_b = (_a = env.GH_TOKEN) !== null && _a !== void 0 ? _a : env.GITHUB_TOKEN) !== null && _b !== void 0 ? _b : "").trim();
+    return token === "" ? undefined : { token };
+}
+function logShallowClone(message, fields = {}) {
+    const suffix = Object.entries(fields)
+        .filter(([, value]) => value !== undefined)
+        .map(([key, value]) => `${key}=${String(value)}`)
+        .join(" ");
+    process.stderr.write(`[shallow-clone] ${message}${suffix ? ` ${suffix}` : ""}\n`);
+}
+function errorSummary(error) {
+    var _a;
+    return error instanceof Error
+        ? ((_a = error.message.split("\n")[0]) !== null && _a !== void 0 ? _a : String(error))
+        : String(error);
+}
+/**
+ * Single-line git failure: the invoked git args (without the credential
+ * config noise) plus the first meaningful stderr line — the actual git
+ * diagnostic (auth, ref, network) — so fallback reasons surfaced to tool
+ * results say why, not just what ran.
+ */
+function gitError(args, error) {
+    var _a;
+    const stderr = error.stderr;
+    const detail = typeof stderr === "string"
+        ? stderr
+            .split("\n")
+            .map((line) => line.trim())
+            .find((line) => line.length > 0)
+        : error instanceof Error
+            ? ((_a = error.message.split("\n")[0]) !== null && _a !== void 0 ? _a : String(error))
+            : String(error);
+    return new Error(`git ${args.join(" ")} failed — ${detail}`);
+}
+/**
+ * The one credential helper git may use: serve the caller-provided token
+ * from the child process env at request time. The shell reads
+ * `$SHALLOW_CLONE_GIT_TOKEN` when git asks, keeping the token out of argv.
+ */
+const TOKEN_CREDENTIAL_HELPER = '!f() { test "$1" = get && printf "username=x-access-token\\npassword=$SHALLOW_CLONE_GIT_TOKEN\\n"; }; f';
+function git(cwd, args, auth) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // Async on purpose: fetches/checkouts of large repos take minutes, and the
+        // serve host runs the clone in-process. A synchronous git call blocks the
+        // event loop for the whole clone, freezing /v1/health and session streams
+        // long enough for the platform's probe budget to replace the engine.
+        try {
+            const { stdout } = yield execFileAsync("git", [
+                ...(auth === undefined
+                    ? []
+                    : ["-c", `credential.helper=${TOKEN_CREDENTIAL_HELPER}`]),
+                ...args,
+            ], {
+                cwd,
+                encoding: "utf8",
+                maxBuffer: 32 * 1024 * 1024,
+                env: Object.assign(Object.assign(Object.assign({}, process.env), {
+                    // Hermetic git: ignore global/system config so host-provisioned
+                    // credential rewrites (`url.https://x-access-token:<token>@github
+                    // .com/.insteadOf` entries scoped to a *different* repo, as cloud
+                    // VMs bake in) cannot hijack auth away from the explicit token,
+                    // and no ambient credential helpers run against PR-author input.
+                    GIT_CONFIG_GLOBAL: "/dev/null", GIT_CONFIG_SYSTEM: "/dev/null", GIT_TERMINAL_PROMPT: "0" }), (auth === undefined
+                    ? {}
+                    : { SHALLOW_CLONE_GIT_TOKEN: auth.token })),
+            });
+            return stdout;
+        }
+        catch (error) {
+            throw gitError(args, error);
+        }
+    });
+}
+function revParse(cwd, rev) {
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            const sha = (yield git(cwd, ["rev-parse", "--verify", `${rev}^{commit}`])).trim();
+            return sha === "" ? undefined : sha;
+        }
+        catch (_a) {
+            return undefined;
+        }
+    });
+}
+const FETCH_ARGS = ["fetch", "--depth=1", "--no-tags", "--quiet", "origin"];
+/**
+ * Create a fresh shallow checkout of a GitHub PR head at `checkoutDir`.
+ *
+ * Fetch order (both single depth-1 round-trips):
+ * 1. Fetch `headSha` (and `baseSha` when known) directly — GitHub advertises
+ *    `allow-reachable-sha1-in-want`, and this pins the exact reviewed commit
+ *    the way Bugbot's `shallow_fetch` does.
+ * 2. Fall back to `refs/pull/<n>/head`, verifying it still resolves to
+ *    `headSha` so the working tree cannot silently drift from the pinned
+ *    patch in the review bundle.
+ *
+ * A missing merge-base commit is non-fatal (agents still have the pinned
+ * patch text in their prompt); a missing head checkout throws.
+ */
+export function createShallowPrCheckout(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const { repo, prNumber, headSha, baseSha, checkoutDir, auth } = args;
+        const startedAt = Date.now();
+        logShallowClone("cloning PR head", { repo, prNumber, headSha, baseSha });
+        rmSync(checkoutDir, { recursive: true, force: true });
+        mkdirSync(checkoutDir, { recursive: true });
+        yield git(checkoutDir, ["init", "--quiet"]);
+        yield git(checkoutDir, [
+            "remote",
+            "add",
+            "origin",
+            (_a = args.remoteUrl) !== null && _a !== void 0 ? _a : `https://github.com/${repo}.git`,
+        ]);
+        const shaFetch = () => __awaiter(this, void 0, void 0, function* () {
+            const extraBase = baseSha === undefined || baseSha === headSha ? [] : [baseSha];
+            try {
+                yield git(checkoutDir, [...FETCH_ARGS, headSha, ...extraBase], auth);
+            }
+            catch (error) {
+                if (extraBase.length === 0) {
+                    throw error;
+                }
+                // The merge-base SHA may have aged out of reachability; the head commit
+                // is the part the review cannot proceed without, so retry it alone.
+                logShallowClone("combined sha fetch failed; retrying head sha alone", {
+                    repo,
+                    headSha,
+                    baseSha,
+                    error: errorSummary(error),
+                });
+                yield git(checkoutDir, [...FETCH_ARGS, headSha], auth);
+            }
+        });
+        let headSource;
+        let shaFetchError;
+        try {
+            yield shaFetch();
+            headSource = "sha_fetch";
+        }
+        catch (error) {
+            shaFetchError = errorSummary(error);
+            if (prNumber === undefined) {
+                throw new Error(`Shallow SHA fetch failed for ${repo}@${headSha} and no PR number is available for a ref fallback: ${shaFetchError}`);
+            }
+            logShallowClone("sha fetch failed; falling back to PR head ref", {
+                repo,
+                prNumber,
+                headSha,
+                error: shaFetchError,
+            });
+            const prRef = `refs/pull/${prNumber}/head`;
+            yield git(checkoutDir, [...FETCH_ARGS, `+${prRef}:refs/remotes/origin/pr/${prNumber}/head`], auth);
+            const fetchedSha = yield revParse(checkoutDir, `refs/remotes/origin/pr/${prNumber}/head`);
+            if (fetchedSha !== headSha) {
+                throw new Error(`Shallow PR ref fetch for ${repo}#${prNumber} resolved to ${fetchedSha !== null && fetchedSha !== void 0 ? fetchedSha : "nothing"}, expected pinned head ${headSha} (sha fetch error: ${shaFetchError})`);
+            }
+            headSource = "pr_ref_fetch";
+        }
+        if ((yield revParse(checkoutDir, headSha)) === undefined) {
+            throw new Error(`Shallow fetch completed but head commit ${headSha} is missing from ${checkoutDir}`);
+        }
+        logShallowClone("fetch complete; materializing working tree", {
+            repo,
+            headSha,
+            fetchMs: Date.now() - startedAt,
+        });
+        yield git(checkoutDir, ["checkout", "--quiet", "--detach", headSha]);
+        let baseFetched = baseSha !== undefined &&
+            (yield revParse(checkoutDir, baseSha)) !== undefined;
+        if (baseSha !== undefined && baseSha !== headSha && !baseFetched) {
+            // Best-effort: local diffs are nice-to-have, the pinned patch in the
+            // prompt is the authoritative delta either way.
+            try {
+                yield git(checkoutDir, [...FETCH_ARGS, baseSha], auth);
+                baseFetched = (yield revParse(checkoutDir, baseSha)) !== undefined;
+            }
+            catch (error) {
+                logShallowClone("merge-base fetch failed; continuing without it", {
+                    repo,
+                    baseSha,
+                    error: errorSummary(error),
+                });
+            }
+        }
+        logShallowClone("checkout ready", {
+            repo,
+            prNumber,
+            headSha,
+            baseSha,
+            headSource,
+            baseFetched,
+            durationMs: Date.now() - startedAt,
+            checkoutDir,
+        });
+        return { checkoutDir, headSha, baseFetched, headSource };
+    });
+}
+/** True for `https://github.com/<owner>/<repo>/pull/<n>` URLs. */
+export function isGithubPrUrl(prUrl) {
+    try {
+        const url = new URL(prUrl);
+        const parts = url.pathname.split("/").filter(Boolean);
+        return (url.hostname === "github.com" &&
+            parts.length >= 4 &&
+            parts[2] === "pull" &&
+            Number.isInteger(Number(parts[3])));
+    }
+    catch (_a) {
+        return false;
+    }
+}
+/**
+ * Best-effort shallow PR checkout for hosts whose SDK agents should read the
+ * reviewed repo instead of the host's own checkout.
+ *
+ * Returns no checkout — leaving the caller on its fallback working
+ * directory — when the PR is not on GitHub (e.g. Origin PRs, where the host
+ * checkout is the reviewed repo), when no head SHA is pinned, when no clone
+ * credential is available, or when the clone fails; `fallbackReason` says
+ * which. Failures are logged, never thrown: agents still have the pinned
+ * patch in their prompts, so a missing checkout degrades quality rather
+ * than the run.
+ */
+export function tryCreateShallowPrCheckout(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const { prUrl, repo, prNumber, headSha, baseSha, checkoutDir, remoteUrl } = options;
+        if (remoteUrl === undefined && !isGithubPrUrl(prUrl)) {
+            logShallowClone("skipped: not a GitHub PR URL", { prUrl });
+            return { fallbackReason: "skipped: not a GitHub PR URL" };
+        }
+        if (headSha === undefined) {
+            logShallowClone("skipped: no pinned head SHA", { repo, prUrl });
+            return { fallbackReason: "skipped: no pinned head SHA" };
+        }
+        const auth = (_a = options.auth) !== null && _a !== void 0 ? _a : serveHostGithubAuth();
+        if (remoteUrl === undefined && auth === undefined) {
+            // Fail fast instead of letting an unauthenticated fetch 404/hang: real
+            // GitHub clones need the serve host's lease (or an explicit token).
+            logShallowClone("skipped: no GitHub clone credential", { repo, prUrl });
+            return {
+                fallbackReason: "skipped: no GitHub clone credential (serve host GH_TOKEN lease not installed)",
+            };
+        }
+        try {
+            return {
+                checkout: yield createShallowPrCheckout({
+                    repo,
+                    prNumber,
+                    headSha,
+                    baseSha,
+                    checkoutDir,
+                    auth,
+                    remoteUrl,
+                }),
+            };
+        }
+        catch (error) {
+            const reason = errorSummary(error);
+            logShallowClone("failed; caller falls back to host checkout", {
+                repo,
+                prNumber,
+                headSha,
+                error: reason,
+            });
+            return { fallbackReason: `clone failed: ${reason}` };
+        }
+    });
+}

package/dist/internal/slack-provision-client.d.ts CHANGED Viewed

@@ -92,6 +92,8 @@ export interface SlackWizardPollResult {
     status: string;
     appId?: string;
     oauthAuthorizeUrl?: string;
+    /** "pending" means the admin-approval request is already in Slack's queue. */
+    approvalRequest?: string;
     error?: string;
     localEnv?: {
         botToken: string;

package/dist/internal/slack-provision-client.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"slack-provision-client.d.ts","sourceRoot":"","sources":["../../src/internal/slack-provision-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEzC,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;AAE/E,yEAAyE;AACzE,MAAM,MAAM,iBAAiB,GACzB;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACf;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC/B,GACD;IACE,MAAM,EAAE,wBAAwB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEN,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,iEAAiE;IACjE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC,YACE,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,EAQF;CACF;~~AAwGD~~,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,YAAY,OAAO,EAAE,4BAA4B,EAMhD;IAED,gEAAgE;IAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAO1D;IAED;;;OAGG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ7C;IAEK,UAAU,CACd,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAQhC;IAEK,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOjE;IAED;;;;OAIG;IACG,YAAY,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,WAAW,CAAC;QACjB,2CAA2C;QAC3C,QAAQ,EAAE,MAAM,CAAC;QACjB,sEAAsE;QACtE,IAAI,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;QACvB,sEAAsE;QACtE,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAgBnC;IAED,kDAAkD;IAC5C,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;IAED,8EAA8E;IACxE,UAAU,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,iBAAiB,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;YAEa,OAAO;CA0CtB"}
1	+ {"version":3,"file":"slack-provision-client.d.ts","sourceRoot":"","sources":["../../src/internal/slack-provision-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEzC,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;AAE/E,yEAAyE;AACzE,MAAM,MAAM,iBAAiB,GACzB;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACf;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC/B,GACD;IACE,MAAM,EAAE,wBAAwB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEN,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,iEAAiE;IACjE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC,YACE,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,EAQF;CACF;AAyGD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,YAAY,OAAO,EAAE,4BAA4B,EAMhD;IAED,gEAAgE;IAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAO1D;IAED;;;OAGG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ7C;IAEK,UAAU,CACd,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAQhC;IAEK,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOjE;IAED;;;;OAIG;IACG,YAAY,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,WAAW,CAAC;QACjB,2CAA2C;QAC3C,QAAQ,EAAE,MAAM,CAAC;QACjB,sEAAsE;QACtE,IAAI,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;QACvB,sEAAsE;QACtE,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAgBnC;IAED,kDAAkD;IAC5C,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;IAED,8EAA8E;IACxE,UAAU,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,iBAAiB,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;YAEa,OAAO;CA0CtB"}

package/dist/internal/slack-provision-client.js CHANGED Viewed

@@ -114,6 +114,7 @@ const wizardPollResponseSchema = z
     status: z.string(),
     appId: z.string().optional(),
     oauthAuthorizeUrl: z.string().optional(),
+    approvalRequest: z.string().optional(),
     error: z.string().optional(),
     localEnv: z
         .object({

package/dist/internal/turn-lease-store.d.ts ADDED Viewed

@@ -0,0 +1,44 @@
+/**
+ * Durable per-session turn ownership: `activeTurns` is in-memory, so servers
+ * sharing a state root would otherwise both run the same session.
+ *
+ * Exclusion, staleness and liveness refresh come from `proper-lockfile`, which
+ * the monorepo already uses for the git cache. Hand-rolling them means
+ * inferring that a process died — timeouts, heartbeats, and a takeover path
+ * that has to stay atomic while removing another owner's claim. That is where
+ * the subtle races live, and none of it is specific to turns.
+ *
+ * Liveness is lock age, not pid: containers have separate PID namespaces.
+ */
+/** A held turn lease. Releasing is idempotent. */
+export interface TurnLease {
+    release(): Promise<void>;
+}
+export declare class TurnLeaseStore {
+    private readonly dir;
+    private readonly staleMs;
+    /** Locks this process holds. Their release closures cannot live on disk. */
+    private readonly held;
+    constructor(dir: string, options?: {
+        ttlMs?: number;
+    });
+    private path;
+    /**
+     * Undefined when another process holds this session and is still refreshing.
+     *
+     * `onCompromised` fires when the lock is lost mid-turn — the owner stalled
+     * past the stale window and a successor took over. No lease scheme can stop
+     * that; the callback is how the displaced turn learns to stand down instead
+     * of answering alongside its successor.
+     */
+    acquire(sessionId: string, onCompromised?: () => void): Promise<TurnLease | undefined>;
+    private handle;
+    /** Graceful shutdown: drop every claim so a successor need not wait it out. */
+    releaseAll(): Promise<void>;
+    /**
+     * The session is running in another server process. Mirrors the engine's
+     * in-memory `isTurnRunning`, which only ever sees this process.
+     */
+    runningElsewhere(sessionId: string): Promise<boolean>;
+}
+//# sourceMappingURL=turn-lease-store.d.ts.map

package/dist/internal/turn-lease-store.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"turn-lease-store.d.ts","sourceRoot":"","sources":["../../src/internal/turn-lease-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,kDAAkD;AAClD,MAAM,WAAW,SAAS;IACxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAmBD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IAEpD,YAAY,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,EAIxD;IAED,OAAO,CAAC,IAAI;IAIZ;;;;;;;OAOG;IACG,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,IAAI,GACzB,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CA6BhC;IAED,OAAO,CAAC,MAAM;IAwBd,+EAA+E;IACzE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAKhC;IAED;;;OAGG;IACG,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY1D;CACF"}

package/dist/internal/turn-lease-store.js ADDED Viewed

@@ -0,0 +1,139 @@
+/**
+ * Durable per-session turn ownership: `activeTurns` is in-memory, so servers
+ * sharing a state root would otherwise both run the same session.
+ *
+ * Exclusion, staleness and liveness refresh come from `proper-lockfile`, which
+ * the monorepo already uses for the git cache. Hand-rolling them means
+ * inferring that a process died — timeouts, heartbeats, and a takeover path
+ * that has to stay atomic while removing another owner's claim. That is where
+ * the subtle races live, and none of it is specific to turns.
+ *
+ * Liveness is lock age, not pid: containers have separate PID namespaces.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import * as lockfile from "proper-lockfile";
+/** Reject path traversal; session ids are opaque strings from the caller. */
+function safeKey(sessionId) {
+    const sanitized = sessionId
+        .trim()
+        .replace(/[^a-zA-Z0-9._-]+/g, "_")
+        .replace(/^\.+/, "")
+        .replace(/\.+/g, "_")
+        .slice(0, 180);
+    return sanitized === "" ? "_empty" : sanitized;
+}
+export class TurnLeaseStore {
+    constructor(dir, options = {}) {
+        var _a;
+        /** Locks this process holds. Their release closures cannot live on disk. */
+        this.held = new Map();
+        this.dir = dir;
+        // Several refreshes, so a slow owner is not mistaken for a dead one.
+        this.staleMs = (_a = options.ttlMs) !== null && _a !== void 0 ? _a : 30000;
+    }
+    path(sessionId) {
+        return join(this.dir, `${safeKey(sessionId)}.lease`);
+    }
+    /**
+     * Undefined when another process holds this session and is still refreshing.
+     *
+     * `onCompromised` fires when the lock is lost mid-turn — the owner stalled
+     * past the stale window and a successor took over. No lease scheme can stop
+     * that; the callback is how the displaced turn learns to stand down instead
+     * of answering alongside its successor.
+     */
+    acquire(sessionId, onCompromised) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const existing = this.held.get(sessionId);
+            if (existing !== undefined) {
+                existing.refs += 1;
+                return this.handle(sessionId);
+            }
+            yield mkdir(this.dir, { recursive: true });
+            let release;
+            try {
+                release = yield lockfile.lock(this.path(sessionId), {
+                    realpath: false,
+                    retries: 0,
+                    stale: this.staleMs,
+                    // How often the library refreshes the lock's mtime while we hold it.
+                    update: 5000,
+                    onCompromised: () => {
+                        this.held.delete(sessionId);
+                        onCompromised === null || onCompromised === void 0 ? void 0 : onCompromised();
+                    },
+                });
+            }
+            catch (_a) {
+                // Held elsewhere, or the store is unusable. Either way this process must
+                // not run the turn: coalescing costs latency, two servers on one session
+                // costs the conversation.
+                return undefined;
+            }
+            this.held.set(sessionId, { release, refs: 1 });
+            return this.handle(sessionId);
+        });
+    }
+    handle(sessionId) {
+        let released = false;
+        return {
+            release: () => __awaiter(this, void 0, void 0, function* () {
+                if (released) {
+                    return;
+                }
+                released = true;
+                const lock = this.held.get(sessionId);
+                if (lock === undefined) {
+                    return;
+                }
+                lock.refs -= 1;
+                if (lock.refs > 0) {
+                    return;
+                }
+                this.held.delete(sessionId);
+                // Throws if the lock was already compromised, which is not our problem
+                // to solve here: the successor owns it.
+                yield lock.release().catch(() => { });
+            }),
+        };
+    }
+    /** Graceful shutdown: drop every claim so a successor need not wait it out. */
+    releaseAll() {
+        return __awaiter(this, void 0, void 0, function* () {
+            for (const [sessionId, lock] of [...this.held]) {
+                this.held.delete(sessionId);
+                yield lock.release().catch(() => { });
+            }
+        });
+    }
+    /**
+     * The session is running in another server process. Mirrors the engine's
+     * in-memory `isTurnRunning`, which only ever sees this process.
+     */
+    runningElsewhere(sessionId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (this.held.has(sessionId)) {
+                return false;
+            }
+            try {
+                return yield lockfile.check(this.path(sessionId), {
+                    realpath: false,
+                    stale: this.staleMs,
+                });
+            }
+            catch (_a) {
+                return false;
+            }
+        });
+    }
+}

package/dist/internal/workspace.d.ts CHANGED Viewed

@@ -99,6 +99,18 @@ export declare function buildAgentsMdContent(agent: ResolvedAgent, options: {
  * are skipped by nested rule discovery.
  */
 export declare function isNestedInGitRepo(dir: string): Promise<boolean>;
+/**
+ * Give a session workspace its own git root so the harness roots *there*
+ * rather than at the enclosing repo (see {@link isNestedInGitRepo}). Without
+ * it the harness reads the outer repo's `.cursor/hooks.json`, rules, skills
+ * and `mcp.json`, and never sees the ones written into this workspace —
+ * instructions have an inline fallback, hooks have none.
+ *
+ * Best effort: a workspace that already has `.git` (a borrowed checkout or
+ * worktree) is left alone, and a failed `git init` leaves the harness where
+ * it already was.
+ */
+export declare function ensureOwnGitRoot(dir: string): Promise<boolean>;
 export declare function materializeWorkspace(options: MaterializeWorkspaceOptions): Promise<void>;
 /**
  * Generate the SKILL.md the harness reads: `name` + `description`