@cursor/july 0.1.62 → 0.1.68

package/dist/internal/cli-manifest.js

@@ -0,0 +1,49 @@
+/**
+ * `july manifest` — print the offline deploy manifest (Wd-1 of
+ * `docs/agent-serve/agent-sdk-event-ingress-plan.md`).
+ *
+ * Loads the agent project from disk and emits the statically-derived
+ * metadata the control plane stores at deploy time: declared GitHub webhook
+ * events, egress domains, public routes, and the full `/v1/info` payload.
+ * Runs entirely offline — no VM, no engine, no network.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { buildAgentDeployManifest, parseAgentDeployManifest, } from "./deploy-manifest.js";
+import { isAgentProjectDir, loadAgentProject } from "./discovery.js";
+export function cmdManifest(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const out = (_a = options.out) !== null && _a !== void 0 ? _a : ((line) => process.stdout.write(line));
+        const err = (_b = options.err) !== null && _b !== void 0 ? _b : ((line) => process.stderr.write(line));
+        if (!(yield isAgentProjectDir(options.dir))) {
+            err(`No agent project found at ${options.dir} (expected an agent.ts default-exporting defineAgent({ ... })).\n`);
+            return 1;
+        }
+        const project = yield loadAgentProject(options.dir);
+        for (const diagnostic of project.diagnostics) {
+            err(`${diagnostic.severity}: ${diagnostic.message}\n`);
+        }
+        if (project.diagnostics.some((d) => d.severity === "error")) {
+            return 1;
+        }
+        const manifest = buildAgentDeployManifest(project);
+        // Round-trip through the wire schema so `july manifest` can never emit
+        // something the control plane contract would reject.
+        if (parseAgentDeployManifest(JSON.parse(JSON.stringify(manifest))) === undefined) {
+            err("internal error: generated manifest failed schema validation\n");
+            return 1;
+        }
+        out(options.json === true
+            ? `${JSON.stringify(manifest)}\n`
+            : `${JSON.stringify(manifest, null, 2)}\n`);
+        return 0;
+    });
+}

package/dist/internal/cli-slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-slack.d.ts","sourceRoot":"","sources":["../../src/internal/cli-slack.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAIL,cAAc,EAGf,MAAM,4BAA4B,CAAC;AAqBpC,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kBAAkB;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,cAAc,CAAC;IACnC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AA4CD,wBAAsB,QAAQ,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAoRD,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAoLjB;AAiDD,wBAAsB,eAAe,CACnC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA4CjB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAsD5E"}
+{"version":3,"file":"cli-slack.d.ts","sourceRoot":"","sources":["../../src/internal/cli-slack.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAIL,cAAc,EAGf,MAAM,4BAA4B,CAAC;AAqBpC,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kBAAkB;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,cAAc,CAAC;IACnC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AA4CD,wBAAsB,QAAQ,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA4BjB;AA6RD,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAoLjB;AAiDD,wBAAsB,eAAe,CACnC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA4CjB;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAsD5E"}

package/dist/internal/cli-slack.js

@@ -283,7 +283,15 @@ function writePendingAdminWait(ctx, poll) {
         ? poll.oauthAuthorizeUrl
         : undefined;
     ctx.err(`Waiting for a Slack admin to approve the app${appSuffix}.\n\n`);
-    if (requestUrl !== undefined) {
+    if (poll.approvalRequest === "pending") {
+        // Already in the admin queue: nothing to file, so no browser hop.
+        ctx.err(ctx.dim(`  Approval request sent; workspace owners were notified.\n\n`));
+        if (requestUrl !== undefined) {
+            ctx.err(ctx.dim(`  Send a reminder from:\n\n`));
+            ctx.err(`  ${requestUrl}\n\n`);
+        }
+    }
+    else if (requestUrl !== undefined) {
         ctx.err(ctx.dim(`  Slack will notify workspace owners once the request is in their queue.\n` +
             `  Open this page to file it or send a reminder:\n\n`));
         ctx.err(`  ${requestUrl}\n\n`);

package/dist/internal/cursor-agent-template.d.ts

@@ -0,0 +1,9 @@
+declare const TEMPLATE_NAMES: readonly ["agentic-owners", "demo", "pr-autofixer", "security-reviewer", "triage-linear", "triage-jira"];
+export type TemplateName = (typeof TEMPLATE_NAMES)[number];
+export declare function canonicalTemplateName(name: string): string;
+export declare function isTemplateName(name: string): name is TemplateName;
+/** Raw scaffold marker. Validation depends on the consuming boundary. */
+export declare function readCursorAgentTemplate(rootDir: string): string | undefined;
+export declare function readDeployTemplate(rootDir: string): string | undefined;
+export {};
+//# sourceMappingURL=cursor-agent-template.d.ts.map

package/dist/internal/cursor-agent-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-agent-template.d.ts","sourceRoot":"","sources":["../../src/internal/cursor-agent-template.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,cAAc,YAClB,gBAAgB,EAChB,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,aAAa,CACL,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAG3D,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,YAAY,CAEjE;AAED,yEAAyE;AACzE,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY3E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOtE"}

package/dist/internal/cursor-agent-template.js

@@ -0,0 +1,37 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+const MAX = 64;
+const TEMPLATE_NAMES = [
+    "agentic-owners",
+    "demo",
+    "pr-autofixer",
+    "security-reviewer",
+    "triage-linear",
+    "triage-jira",
+];
+const NAMES = new Set(TEMPLATE_NAMES);
+export function canonicalTemplateName(name) {
+    return name === "triage" ? "triage-linear" : name;
+}
+export function isTemplateName(name) {
+    return NAMES.has(name);
+}
+/** Raw scaffold marker. Validation depends on the consuming boundary. */
+export function readCursorAgentTemplate(rootDir) {
+    try {
+        const pkg = JSON.parse(readFileSync(join(rootDir, "package.json"), "utf8"));
+        const stamp = pkg.cursorAgentTemplate;
+        return typeof stamp === "string" ? stamp : undefined;
+    }
+    catch (_a) {
+        return undefined;
+    }
+}
+export function readDeployTemplate(rootDir) {
+    const stamp = readCursorAgentTemplate(rootDir);
+    if (stamp === undefined || stamp.length === 0 || stamp.length > MAX) {
+        return undefined;
+    }
+    const name = canonicalTemplateName(stamp);
+    return isTemplateName(name) ? name : undefined;
+}

package/dist/internal/deploy-client.d.ts

@@ -9,6 +9,7 @@
  * The endpoints are gated on the `agent_serve_mvp` Statsig gate and 404
  * when it is off — the error mapping says so instead of "not found".
  */
+import type { AgentDeployManifestV1 } from "./deploy-manifest.js";
 export type DeploymentStatus = "pending" | "deploying" | "running" | "degraded" | "failed" | "stopping" | "stopped" | "deleting";
 /** Customer-safe deploy progress (no hosting phase / infra names). */
 export type DeploymentProgress = "queued" | "preparing" | "creating" | "building" | "starting" | "finalizing" | "running" | "failed" | "stopping" | "stopped" | "deleting" | "degraded";
@@ -37,6 +38,12 @@ export type DeploySource = {
      * `X-Agent-Alias-Token` (channels authored with `publicEndpoint()`).
      */
     publicRoutePaths?: string[];
+    /**
+     * Offline deploy manifest (Wd): derived declarations + `/v1/info`
+     * payload, extracted at deploy time with no VM. Optional — servers that
+     * predate manifest storage strip unknown fields.
+     */
+    manifest?: AgentDeployManifestV1;
 };
 /** Returns a human error message, or undefined when the slug is valid. */
 export declare function validateDeploymentSlug(slug: string): string | undefined;
@@ -174,6 +181,7 @@ export declare class AgentServeDeployClient {
         teamId: number;
         slug: string;
         source: DeploySource;
+        template?: string;
     }): Promise<DeployAccepted>;
     listDeployments(args: {
         teamId: number;

package/dist/internal/deploy-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy-client.d.ts","sourceRoot":"","sources":["../../src/internal/deploy-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,WAAW,GACX,SAAS,GACT,UAAU,GACV,QAAQ,GACR,UAAU,GACV,SAAS,GACT,UAAU,CAAC;AAEf,sEAAsE;AACtE,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,WAAW,GACX,UAAU,GACV,UAAU,GACV,UAAU,GACV,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,UAAU,GACV,SAAS,GACT,UAAU,GACV,UAAU,CAAC;AAEf,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,gBAAgB,CAKjE,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAIF,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvE;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOtE;AAED,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,oEAAoE;IACpE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM;IAJrC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;IACvB,oEAAoE;IAC3D,iBAAiB,CAAC,EAAE,MAAM,YAAA,EAIpC;CACF;AASD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,sDAAsD;IACtD,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,GAC/C,MAAM,GAAG,SAAS,CAOpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;AAE1C,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,yBAAyB,EAAE,CAAC;CACzC;AA6JD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,YAAY,OAAO,EAAE,6BAA6B,EAMjD;IAED,yEAAyE;IACnE,MAAM,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,YAAY,CAAC;KACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuC1B;IAEK,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOrE;IAEK,aAAa,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAO5B;IAEK,cAAc,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,YAAY,CAAC,CAOxB;IAEK,gBAAgB,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,cAAc,CAAC,CAO1B;IAED,sEAAsE;IAChE,gBAAgB,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;IAED;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjD,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0BpB;IAED,gEAAgE;IAC1D,WAAW,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOxB;IAED,yDAAyD;IACnD,YAAY,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;IAED;;;;OAIG;IACG,mBAAmB,CAAC,IAAI,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;IAED;;;;;OAKG;IACG,gBAAgB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsBxE;IAED,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpC;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;YAEa,OAAO;CAyCtB"}
+{"version":3,"file":"deploy-client.d.ts","sourceRoot":"","sources":["../../src/internal/deploy-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAQlE,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,WAAW,GACX,SAAS,GACT,UAAU,GACV,QAAQ,GACR,UAAU,GACV,SAAS,GACT,UAAU,CAAC;AAEf,sEAAsE;AACtE,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,WAAW,GACX,UAAU,GACV,UAAU,GACV,UAAU,GACV,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,UAAU,GACV,SAAS,GACT,UAAU,GACV,UAAU,CAAC;AAEf,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,gBAAgB,CAKjE,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,CAAC;AAIF,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKvE;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOtE;AAED,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,oEAAoE;IACpE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM;IAJrC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;IACvB,oEAAoE;IAC3D,iBAAiB,CAAC,EAAE,MAAM,YAAA,EAIpC;CACF;AASD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,sDAAsD;IACtD,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,GAC/C,MAAM,GAAG,SAAS,CAOpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;AAE1C,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,yBAAyB,EAAE,CAAC;CACzC;AA6JD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,YAAY,OAAO,EAAE,6BAA6B,EAMjD;IAED,yEAAyE;IACnE,MAAM,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,YAAY,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CA4D1B;IAEK,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOrE;IAEK,aAAa,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAO5B;IAEK,cAAc,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,YAAY,CAAC,CAOxB;IAEK,gBAAgB,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,cAAc,CAAC,CAO1B;IAED,sEAAsE;IAChE,gBAAgB,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;IAED;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjD,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0BpB;IAED,gEAAgE;IAC1D,WAAW,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOxB;IAED,yDAAyD;IACnD,YAAY,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;IAED;;;;OAIG;IACG,mBAAmB,CAAC,IAAI,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;IAED;;;;;OAKG;IACG,gBAAgB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsBxE;IAED,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpC;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;YAEa,OAAO;CAyCtB"}

package/dist/internal/deploy-client.js

@@ -227,7 +227,7 @@ export class AgentServeDeployClient {
             }
             // Only the git-ref member exists today; a future artifact member would
             // upload the build first and post a different body from this branch.
-            const body = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ teamId: args.teamId, slug: args.slug, gitRepoUrl: args.source.gitRepoUrl }, (args.source.gitRef === undefined
+            const body = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ teamId: args.teamId, slug: args.slug, gitRepoUrl: args.source.gitRepoUrl }, (args.source.gitRef === undefined
                 ? {}
                 : { gitRef: args.source.gitRef })), (args.source.agentPath === undefined
                 ? {}
@@ -237,13 +237,31 @@ export class AgentServeDeployClient {
                 ? {}
                 : { egressAllowedDomains: args.source.egressAllowedDomains })), { 
                 // JSON.stringify drops undefined keys.
-                publicRoutePaths: args.source.publicRoutePaths });
-            const raw = yield this.request({
+                publicRoutePaths: args.source.publicRoutePaths }), (args.source.manifest === undefined
+                ? {}
+                : { manifest: args.source.manifest })), { template: args.template });
+            const send = () => this.request({
                 method: "POST",
                 path: "/internal/agent-serve/deployments",
                 body,
                 context: { verb: "deploy", slug: args.slug },
             });
+            let raw;
+            try {
+                raw = yield send();
+            }
+            catch (error) {
+                const unsupportedTemplate = args.template !== undefined &&
+                    error instanceof DeployApiError &&
+                    error.status === 400 &&
+                    error.message.toLowerCase().includes("template") &&
+                    /unrecognized|unknown/i.test(error.message);
+                if (!unsupportedTemplate) {
+                    throw error;
+                }
+                delete body.template;
+                raw = yield send();
+            }
             return deployAcceptedSchema.parse(raw);
         });
     }

package/dist/internal/deploy-manifest.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Offline deploy manifest (workstream Wd of
+ * `docs/agent-serve/agent-sdk-event-ingress-plan.md`, Wd-0/Wd-1).
+ *
+ * The manifest is every piece of deployment metadata that is statically
+ * derivable from the agent project — extracted at build/deploy time, with no
+ * VM, no engine, and no network — so the control plane can store it before
+ * any pod starts and keep answering metadata questions while a deployment is
+ * offline or hibernated.
+ *
+ * Two layers with different stability contracts:
+ *
+ * - `declarations` is the **versioned wire contract** consumed by the
+ *   control plane (Wd-2): GitHub webhook events the mounted channels can
+ *   dispatch on, egress domains, and public route paths. Validated by
+ *   {@link agentDeployManifestV1Schema}; the CP stores these as columns /
+ *   column views. Repos are deliberately NOT here — which repos a
+ *   deployment watches is per-instance deploy configuration, not a property
+ *   of the code.
+ * - `info` is the full static project description — the same payload the
+ *   engine serves at `GET /v1/info` (`projectInfo`). Stored opaquely by the
+ *   CP so `/v1/info`-class reads can be served for offline deployments
+ *   (Wd-5). Its shape evolves with the SDK and is intentionally not pinned
+ *   by the wire schema beyond "is an object".
+ *
+ * Event derivation note: each mounted `githubChannel()` publishes its
+ * derived event set on `ChannelMeta.githubWebhookEvents` (computed by
+ * `deriveGitHubWebhookEvents` from the declared hooks). The manifest is the
+ * union across mounted channels; a project with no GitHub channel gets no
+ * `githubWebhookEvents` key at all — such a deployment subscribes to
+ * nothing, regardless of the repos configured at deploy time.
+ */
+import type { AgentProject, AgentProjectInfo } from "../types.js";
+export declare const DEPLOY_MANIFEST_VERSION: 1;
+export interface AgentDeployManifestDeclarations {
+    /**
+     * Union of every mounted GitHub channel's derived webhook events.
+     * Absent (not empty) when the project mounts no GitHub channel.
+     */
+    githubWebhookEvents?: string[];
+    egressDomains: string[];
+    publicRoutePaths: string[];
+    /** Where this runtime mirrors framework-owned sessions and event chunks. */
+    frameworkStorage?: "cursor-hosted" | "other" | "none";
+    /**
+     * Mounted channels with their kinds. The control plane derives the
+     * continuation identity (session key) for **defined** kinds it knows
+     * ("github", "slack"); a custom channel with no kind gets per-deployment
+     * serialization until a declared continuation config exists (a future
+     * schema field — reserved, deliberately not implemented yet). This is
+     * what lets the CP compute workflow/session identity before any engine
+     * runs.
+     */
+    channels: Array<{
+        id: string;
+        kind?: string;
+    }>;
+}
+export interface AgentDeployManifestV1 {
+    manifestVersion: 1;
+    /** Unix ms at extraction. */
+    generatedAtMs: number;
+    /** `@cursor/july` version that produced the manifest. */
+    cliVersion: string;
+    declarations: AgentDeployManifestDeclarations;
+    /**
+     * Full `projectInfo` payload (see `GET /v1/info`). Opaque to the wire
+     * contract; the CP stores it verbatim.
+     */
+    info: AgentProjectInfo;
+}
+/**
+ * Extract the offline deploy manifest from a loaded project. Pure: no
+ * network, no filesystem beyond what `loadAgentProject` already read.
+ */
+export declare function buildAgentDeployManifest(project: AgentProject, options?: {
+    nowMs?: number;
+    cliVersion?: string;
+}): AgentDeployManifestV1;
+/**
+ * Parse an untrusted manifest (round-trip check for the CLI's own output;
+ * the CP re-validates server-side with its own copy of the contract).
+ */
+export declare function parseAgentDeployManifest(raw: unknown): AgentDeployManifestV1 | undefined;
+//# sourceMappingURL=deploy-manifest.d.ts.map

package/dist/internal/deploy-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-manifest.d.ts","sourceRoot":"","sources":["../../src/internal/deploy-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIlE,eAAO,MAAM,uBAAuB,EAAE,CAAK,CAAC;AA6B5C,MAAM,WAAW,+BAA+B;IAC9C;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;IACtD;;;;;;;;OAQG;IACH,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,CAAC,CAAC;IACnB,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,+BAA+B,CAAC;IAC9C;;;OAGG;IACH,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD,qBAAqB,CAuCvB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,OAAO,GACX,qBAAqB,GAAG,SAAS,CAOnC"}

package/dist/internal/deploy-manifest.js

@@ -0,0 +1,106 @@
+/**
+ * Offline deploy manifest (workstream Wd of
+ * `docs/agent-serve/agent-sdk-event-ingress-plan.md`, Wd-0/Wd-1).
+ *
+ * The manifest is every piece of deployment metadata that is statically
+ * derivable from the agent project — extracted at build/deploy time, with no
+ * VM, no engine, and no network — so the control plane can store it before
+ * any pod starts and keep answering metadata questions while a deployment is
+ * offline or hibernated.
+ *
+ * Two layers with different stability contracts:
+ *
+ * - `declarations` is the **versioned wire contract** consumed by the
+ *   control plane (Wd-2): GitHub webhook events the mounted channels can
+ *   dispatch on, egress domains, and public route paths. Validated by
+ *   {@link agentDeployManifestV1Schema}; the CP stores these as columns /
+ *   column views. Repos are deliberately NOT here — which repos a
+ *   deployment watches is per-instance deploy configuration, not a property
+ *   of the code.
+ * - `info` is the full static project description — the same payload the
+ *   engine serves at `GET /v1/info` (`projectInfo`). Stored opaquely by the
+ *   CP so `/v1/info`-class reads can be served for offline deployments
+ *   (Wd-5). Its shape evolves with the SDK and is intentionally not pinned
+ *   by the wire schema beyond "is an object".
+ *
+ * Event derivation note: each mounted `githubChannel()` publishes its
+ * derived event set on `ChannelMeta.githubWebhookEvents` (computed by
+ * `deriveGitHubWebhookEvents` from the declared hooks). The manifest is the
+ * union across mounted channels; a project with no GitHub channel gets no
+ * `githubWebhookEvents` key at all — such a deployment subscribes to
+ * nothing, regardless of the repos configured at deploy time.
+ */
+import { z } from "zod";
+import { isPublicEndpointPolicy } from "../channels.js";
+import { isCursorHostedStorage } from "../storage-backends/cursor-hosted.js";
+import { projectInfo } from "./discovery.js";
+import { packageVersion } from "./distribution.js";
+export const DEPLOY_MANIFEST_VERSION = 1;
+/**
+ * Versioned wire contract for the CP-consumed declaration fields. Kept
+ * module-private (the package builds with isolated declarations); consumers
+ * use {@link parseAgentDeployManifest} and the explicit interfaces below.
+ */
+const agentDeployManifestV1Schema = z.object({
+    manifestVersion: z.literal(DEPLOY_MANIFEST_VERSION),
+    generatedAtMs: z.number().int().nonnegative(),
+    cliVersion: z.string().min(1),
+    declarations: z.object({
+        githubWebhookEvents: z.array(z.string().min(1).max(64)).max(64).optional(),
+        egressDomains: z.array(z.string().min(1)).max(64),
+        publicRoutePaths: z.array(z.string().min(1)).max(64),
+        frameworkStorage: z.enum(["cursor-hosted", "other", "none"]).optional(),
+        channels: z
+            .array(z.object({
+            id: z.string().min(1).max(128),
+            kind: z.string().min(1).max(32).optional(),
+        }))
+            .max(64),
+    }),
+    // Full `projectInfo` payload — opaque to the wire contract.
+    info: z.record(z.unknown()),
+});
+/**
+ * Extract the offline deploy manifest from a loaded project. Pure: no
+ * network, no filesystem beyond what `loadAgentProject` already read.
+ */
+export function buildAgentDeployManifest(project, options) {
+    var _a, _b;
+    var _c, _d, _e, _f;
+    const events = new Set();
+    for (const channel of project.channels) {
+        for (const event of (_c = (_a = channel.definition.meta) === null || _a === void 0 ? void 0 : _a.githubWebhookEvents) !== null && _c !== void 0 ? _c : []) {
+            events.add(event);
+        }
+    }
+    // Same mapping as `july deploy` (cli-deploy.ts): channels declared public
+    // via `publicEndpoint()` become alias-token-free route prefixes.
+    const publicRoutePaths = project.channels
+        .filter((channel) => { var _a; return ((_a = channel.definition.auth) !== null && _a !== void 0 ? _a : []).some(isPublicEndpointPolicy); })
+        .map((channel) => `/v1/channels/${channel.id}`);
+    return {
+        manifestVersion: DEPLOY_MANIFEST_VERSION,
+        generatedAtMs: (_d = options === null || options === void 0 ? void 0 : options.nowMs) !== null && _d !== void 0 ? _d : Date.now(),
+        cliVersion: (_e = options === null || options === void 0 ? void 0 : options.cliVersion) !== null && _e !== void 0 ? _e : packageVersion(),
+        declarations: Object.assign(Object.assign({}, (events.size === 0 ? {} : { githubWebhookEvents: [...events].sort() })), { egressDomains: [...((_f = (_b = project.agent.hosting) === null || _b === void 0 ? void 0 : _b.egressDomains) !== null && _f !== void 0 ? _f : [])], publicRoutePaths, frameworkStorage: project.storage === undefined
+                ? "none"
+                : isCursorHostedStorage(project.storage)
+                    ? "cursor-hosted"
+                    : "other", channels: project.channels.map((channel) => { var _a; return (Object.assign({ id: channel.id }, (((_a = channel.definition.meta) === null || _a === void 0 ? void 0 : _a.kind) === undefined
+                ? {}
+                : { kind: channel.definition.meta.kind }))); }) }),
+        info: projectInfo(project),
+    };
+}
+/**
+ * Parse an untrusted manifest (round-trip check for the CLI's own output;
+ * the CP re-validates server-side with its own copy of the contract).
+ */
+export function parseAgentDeployManifest(raw) {
+    const parsed = agentDeployManifestV1Schema.safeParse(raw);
+    // `info` is opaque to the wire schema (validated as a plain object) but
+    // typed as AgentProjectInfo for producers/consumers inside the SDK.
+    return parsed.success
+        ? parsed.data
+        : undefined;
+}

package/dist/internal/deployment-scm-event-stream.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Deployment-scoped SCM event intake for hosted multi-tenant agents.
+ *
+ * Instead of receiving HMAC-signed webhook forwards from the backend (which
+ * required a shared `GITHUB_WEBHOOK_SECRET` / forward-secret pair), the
+ * engine pulls its deliveries from the control plane's deployment-scoped
+ * event stream:
+ *
+ *   GET /internal/agent-serve/automation-agent-sdk/events
+ *
+ * authenticated with the engine pod's `CURSOR_API_KEY` — the same
+ * credential (and server-side deployment allowlist) that authorizes the
+ * consuming agent's customer list read. The backend writes each envelope's
+ * `installationId` itself from the verified GitHub delivery, so agent-side
+ * tenant binding does not depend on an HMAC-covered payload.
+ *
+ * Each envelope is stubbed into a GitHub-shaped `pull_request` webhook body
+ * and POSTed to this process's own github channel route over loopback
+ * (admitted by the channel's no-secret `localDevStrict` policy), so the
+ * consuming agent's whole pipeline — Zod parse, cursorAccount credential
+ * lease, customer routing, tools — runs unchanged. Loopback (rather than
+ * the in-process `handleAgentServeTrigger` fan-out the `--cursor-events`
+ * relay uses) is deliberate: this stream is started from a channel's
+ * `onStart`, which cannot reach the serve-level mount/handler wiring.
+ *
+ * Offsets are client-owned (`<ms>-<seq>` Redis stream ids) and persisted
+ * under the state dir so a restart resumes where it left off instead of
+ * dropping deliveries (the old push path was fire-and-forget).
+ *
+ * INTERNAL: first-party host plumbing shared by agents in `factory/*`.
+ * Consumed via relative source imports, following
+ * `tenant-mcp/run-mcp-registry.ts`. Policy (which deliveries to act on,
+ * tenant routing) stays in the consuming agent; this module is transport
+ * only.
+ */
+export interface AgentSdkScmPullRequestMeta {
+    number: number;
+    url: string;
+    title: string;
+    body?: string | null | undefined;
+    draft?: boolean | undefined;
+    merged?: boolean | undefined;
+    authorLogin?: string | undefined;
+    headRef: string;
+    headSha: string;
+    baseRef: string;
+    baseSha?: string | undefined;
+}
+/** One entry from the deployment-scoped control-plane event stream. */
+export interface AgentSdkScmEventEnvelope {
+    provider: "github";
+    eventName: string;
+    deliveryId: string;
+    repo: string;
+    receivedAtMs: number;
+    action: string;
+    /** Tenant-binding material, written by the control plane. */
+    installationId: number;
+    pullRequest: AgentSdkScmPullRequestMeta;
+    occurredAtMs?: number | undefined;
+}
+/** Unknown envelope shapes return undefined (skipped, forward compat). */
+export declare function parseAgentSdkScmEventEnvelope(value: unknown): AgentSdkScmEventEnvelope | undefined;
+/**
+ * Stub a GitHub-shaped `pull_request` webhook body from an envelope —
+ * enough for agent-serve's pull_request Zod schema, plus `installation.id`
+ * so the channel's `ctx.installationId` tenant binding keeps working.
+ * Pure — exported for tests.
+ */
+export declare function envelopeToGitHubPayload(envelope: AgentSdkScmEventEnvelope): Record<string, unknown>;
+export interface AgentSdkEventStreamOptions {
+    logger?: (line: string) => void;
+    env?: NodeJS.ProcessEnv;
+    /** Injected for tests. */
+    fetch?: typeof fetch;
+    /** Injected for tests (default `process.argv`). */
+    argv?: readonly string[];
+    /**
+     * Prefix for the consumer-scoped env overrides
+     * `<prefix>_SELF_WEBHOOK_URL` and `<prefix>_EVENTS_STATE_DIR`
+     * (default `AGENT_SERVE`; e.g. the security reviewer passes
+     * `SECURITY_REVIEWER` to keep its existing deployment env vars working).
+     */
+    envPrefix?: string;
+    /** Log-line prefix (default `agent-sdk/deployment-events`). */
+    logLabel?: string;
+    /**
+     * Offset state directory name under `<cwd>/.agent-serve`
+     * (default `deployment-events`). Consumers with persisted offsets must
+     * keep their historical name or a restart re-anchors at `$`.
+     */
+    stateDirName?: string;
+}
+/**
+ * Port the serve process is actually listening on, read from its own argv.
+ *
+ * The channel runs inside the serve process, so `--port <n>` / `--port=<n>`
+ * on the command line is authoritative. Hosted-platform engines start with
+ * `--port 26100` and export no `PORT` env, so guessing a fixed default posts
+ * self-dispatches at a port nothing listens on ("fetch failed" for every
+ * delivery).
+ */
+export declare function servePortFromArgv(argv: readonly string[]): string | undefined;
+export interface AgentSdkEventStream {
+    stop(): Promise<void>;
+}
+/**
+ * Start the pull loop. Returns undefined (with a log line) when required
+ * config is missing so `serve` still starts — mirroring how other relays
+ * degrade instead of failing the host.
+ */
+export declare function startAgentSdkEventStream(options?: AgentSdkEventStreamOptions): AgentSdkEventStream | undefined;
+//# sourceMappingURL=deployment-scm-event-stream.d.ts.map

package/dist/internal/deployment-scm-event-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-scm-event-stream.d.ts","sourceRoot":"","sources":["../../src/internal/deployment-scm-event-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA2BH,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,uEAAuE;AACvE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,0BAA0B,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAiED,0EAA0E;AAC1E,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,wBAAwB,GAAG,SAAS,CAqCtC;AAqCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,wBAAwB,GACjC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2BzB;AAmDD,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,mDAAmD;IACnD,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAkB7E;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAeD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,0BAA+B,GACvC,mBAAmB,GAAG,SAAS,CAwLjC"}