@cursor/july 0.1.88 → 0.1.90

package/dist/internal/convert-automation/convert-workflow.js

@@ -1,5 +1,5 @@
 /**
- * Pure Workflow → agentkit project converter.
+ * Pure Workflow → agentsdk project converter.
  *
  * Maps an exported Cursor automation (proto3 workflow JSON + enriched MCP
  * server list) to project files, warnings, and setup steps. No I/O, no
@@ -119,7 +119,7 @@ function renderInstructions(automation, workflow, exportedAt, warnings) {
     return `${header}\n\n${heading}${sanitizePromptText((_b = prompt.prompt) !== null && _b !== void 0 ? _b : "", warnings)}\n`;
 }
 /**
- * Strip Cursor-backend prompt markup that means nothing in agentkit:
+ * Strip Cursor-backend prompt markup that means nothing in agentsdk:
  * `@[label](action:...)` action tokens become their label text, and
  * unresolvable `%%INLINECODE<n>%%` storage placeholders are flagged (their
  * content is not in the export).
@@ -662,7 +662,7 @@ function emitSlackChannel(automation, triggers, slugs, out) {
         const kind = trigger.slackChannelCreated !== undefined
             ? "channel-created"
             : "reaction-added";
-        out.warnings.push(`Slack ${kind} trigger has no agentkit equivalent — its config is inlined as a comment in ${path}; handle the Slack event yourself on a dedicated Socket Mode app.`);
+        out.warnings.push(`Slack ${kind} trigger has no agentsdk equivalent — its config is inlined as a comment in ${path}; handle the Slack event yourself on a dedicated Socket Mode app.`);
     }
     let reactionDropped = false;
     for (const watch of watches) {
@@ -679,7 +679,7 @@ function emitSlackChannel(automation, triggers, slugs, out) {
         }
     }
     if (reactionDropped) {
-        out.warnings.push("The Slack trigger marked triggering messages with a completion reaction; agentkit has no completion-reaction option, so that signal is lost unless agent/instructions.md tells the agent to add the reaction itself via Slack tools.");
+        out.warnings.push("The Slack trigger marked triggering messages with a completion reaction; agentsdk has no completion-reaction option, so that signal is lost unless agent/instructions.md tells the agent to add the reaction itself via Slack tools.");
     }
     if (socketMode) {
         out.setupSteps.push(`Slack channel-watch / reaction / channel-created triggers need a dedicated Socket Mode Slack app (not the Cursor connection): run \`${CLI_COMMAND_NAME} slack create --channel-posts\`, then finish in the dashboard wizard.`);
@@ -708,8 +708,8 @@ function emitSlackChannel(automation, triggers, slugs, out) {
                 .blockUnauthenticatedSlackUsers !== true);
         if (blocksUnauthenticated) {
             out.warnings.push(includeBotPosts
-                ? "Some Slack watches only fired for authenticated Cursor users while others allowed anyone; agentkit has one bot-post setting per channel, so the export keeps bot posts ENABLED (the open watches depend on them) and the authenticated-only watches lose both their sender gate and their bot exclusion. Split the channels or add an onChannelPost gate."
-                : "The Slack trigger only fired for authenticated Cursor users (linked accounts on the owning team); agentkit has no equivalent sender gate, so the exported watch dispatches for ANY channel member (bot posts stay excluded). Add an onChannelPost gate in the channel if that matters.");
+                ? "Some Slack watches only fired for authenticated Cursor users while others allowed anyone; agentsdk has one bot-post setting per channel, so the export keeps bot posts ENABLED (the open watches depend on them) and the authenticated-only watches lose both their sender gate and their bot exclusion. Split the channels or add an onChannelPost gate."
+                : "The Slack trigger only fired for authenticated Cursor users (linked accounts on the owning team); agentsdk has no equivalent sender gate, so the exported watch dispatches for ANY channel member (bot posts stay excluded). Add an onChannelPost gate in the channel if that matters.");
         }
         const engagement = [];
         if (allow.length > 0) {
@@ -912,8 +912,8 @@ const ACTION_STEPS = {
     requestReviewers: "Verify: request_reviewers — no built-in equivalent; request reviewers via ctx.github in a github channel hook.",
     approvePr: 'Verify: approve_pr — PR approval needs githubChannel "pr-write" plus explicit approval guidance in agent/instructions.md.',
     resolveReviewThreads: "Verify: resolve_review_threads — no built-in equivalent; resolve threads via the GitHub GraphQL API in a hook or tool.",
-    microsoftTeams: "Verify: microsoft_teams post — agentkit has no Teams channel; wire the Microsoft Teams API yourself.",
-    readMicrosoftTeams: "Verify: read_microsoft_teams — agentkit has no Teams tools; wire the Microsoft Teams API yourself.",
+    microsoftTeams: "Verify: microsoft_teams post — agentsdk has no Teams channel; wire the Microsoft Teams API yourself.",
+    readMicrosoftTeams: "Verify: read_microsoft_teams — agentsdk has no Teams tools; wire the Microsoft Teams API yourself.",
 };
 function slackActionStep(action, { hasSlackChannel, hasSlackConnection }) {
     const channels = dedupe(slackChannelList(action));
@@ -957,7 +957,7 @@ function behaviorSteps(workflow, warnings, slack) {
     }
     const disabled = (_c = workflow.disabledDefaultTools) !== null && _c !== void 0 ? _c : [];
     if (disabled.length > 0) {
-        steps.push(`Verify: disabled_default_tools (${disabled.join(", ")}) — agentkit has no default automation tools; enforce the equivalent restriction in agent/instructions.md.`);
+        steps.push(`Verify: disabled_default_tools (${disabled.join(", ")}) — agentsdk has no default automation tools; enforce the equivalent restriction in agent/instructions.md.`);
     }
     return steps;
 }

package/dist/internal/convert-automation/types.d.ts

@@ -1,5 +1,5 @@
 /**
- * Types for `convertWorkflow` — the pure automation → agentkit project
+ * Types for `convertWorkflow` — the pure automation → agentsdk project
  * converter behind `agent-serve convert-automation`.
  *
  * The workflow arrives as generic proto3 JSON (lowerCamelCase field names,

package/dist/internal/convert-automation/types.js

@@ -1,5 +1,5 @@
 /**
- * Types for `convertWorkflow` — the pure automation → agentkit project
+ * Types for `convertWorkflow` — the pure automation → agentsdk project
  * converter behind `agent-serve convert-automation`.
  *
  * The workflow arrives as generic proto3 JSON (lowerCamelCase field names,

package/dist/internal/cursor/account-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-mcp.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/account-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAU/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAU7B,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,8CACA,CAAC;AAC9C,2EAA2E;AAC3E,eAAO,MAAM,oCAAoC,yDACO,CAAC;AAMzD,MAAM,WAAW,0BAA0B;IACzC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GACrD,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAoB3C;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACnC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,wBAAwB,EAAE,CAkB7B;AAmCD,qBAAa,sBAAsB;IACjC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,YAAY,IAAI,EAAE;QAChB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAChC,2EAA2E;QAC3E,OAAO,CAAC,EAAE,eAAe,CAAC;QAC1B;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,EAMA;IAED;;;;OAIG;IACH,UAAU,IAAI,UAAU,CAgBvB;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO3E;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,IAAI,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9D;YAEa,YAAY;IAiE1B,OAAO,CAAC,WAAW;IA8EnB,0EAA0E;YAC5D,QAAQ;IAatB;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAwCnB;AA0ED,MAAM,WAAW,6BAA6B;IAC5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+CD;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAClD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,MAAM,CAWT;AAwDD,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,gBAAgB,EACxB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAkBR;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAC1D,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B"}
+{"version":3,"file":"account-mcp.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/account-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EAEX,MAAM,gBAAgB,CAAC;AAUxB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAU7B,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,8CACA,CAAC;AAC9C,2EAA2E;AAC3E,eAAO,MAAM,oCAAoC,yDACO,CAAC;AAMzD,MAAM,WAAW,0BAA0B;IACzC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GACrD,GAAG,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAoB3C;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACnC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,wBAAwB,EAAE,CAkB7B;AAqCD,qBAAa,sBAAsB;IACjC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,YAAY,IAAI,EAAE;QAChB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAChC,2EAA2E;QAC3E,OAAO,CAAC,EAAE,eAAe,CAAC;QAC1B;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,EAMA;IAED;;;;OAIG;IACH,UAAU,IAAI,UAAU,CAgBvB;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO3E;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,IAAI,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAI9D;YAEa,YAAY;IAiE1B,OAAO,CAAC,WAAW;IAmFnB,0EAA0E;YAC5D,QAAQ;IAatB;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAwCnB;AA6ED,MAAM,WAAW,6BAA6B;IAC5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+CD;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAClD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,MAAM,CAWT;AAwDD,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,gBAAgB,EACxB,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAkBR;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAC1D,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B"}

package/dist/internal/cursor/account-mcp.js

@@ -201,9 +201,11 @@ export class CursorAccountMcpBridge {
         server.setRequestHandler(ListToolsRequestSchema, () => __awaiter(this, void 0, void 0, function* () {
             const catalog = yield this.getCatalog(ref);
             return {
-                tools: catalog.tools.map((tool) => (Object.assign({ name: tool.exposedName, description: tool.description, inputSchema: tool.inputSchema }, (tool.outputSchema === undefined
+                tools: catalog.tools.map((tool) => (Object.assign(Object.assign({ name: tool.exposedName, description: tool.description, inputSchema: tool.inputSchema }, (tool.outputSchema === undefined
                     ? {}
-                    : { outputSchema: tool.outputSchema })))),
+                    : { outputSchema: tool.outputSchema })), (tool.annotations === undefined
+                    ? {}
+                    : { annotations: tool.annotations })))),
             };
         }));
         server.setRequestHandler(CallToolRequestSchema, (request) => __awaiter(this, void 0, void 0, function* () {
@@ -347,9 +349,11 @@ function buildCatalog(servers) {
                 suffixIndex++;
                 exposedName = suffixMcpToolName(base, suffixIndex);
             }
-            const entry = Object.assign({ exposedName, backendName: tool.name, serverIdentifier, description: tool.description, inputSchema: tool.inputSchema }, (tool.outputSchema === undefined
+            const entry = Object.assign(Object.assign({ exposedName, backendName: tool.name, serverIdentifier, description: tool.description, inputSchema: tool.inputSchema }, (tool.outputSchema === undefined
+                ? {}
+                : { outputSchema: tool.outputSchema })), (tool.annotations === undefined
                 ? {}
-                : { outputSchema: tool.outputSchema }));
+                : { annotations: tool.annotations }));
             tools.push(entry);
             byExposedName.set(entry.exposedName, entry);
         });

package/dist/internal/cursor/backend-client.d.ts

@@ -13,6 +13,7 @@
  * cached until shortly before expiry and re-exchanged once on a 401.
  */
 import { z } from "zod";
+import type { McpToolAnnotations } from "../../types.js";
 export declare class CursorBackendError extends Error {
     readonly status?: number | undefined;
     readonly retryAfterMs?: number | undefined;
@@ -57,6 +58,13 @@ export interface AccountMcpTool {
      * matching the optional MCP `Tool.outputSchema` field.
      */
     outputSchema?: Record<string, unknown>;
+    /**
+     * MCP spec tool annotations as the connector's server reported them,
+     * bounded to the spec fields at parse time. Absent stays absent —
+     * untrusted hints, and the fail-closed signal for consumers that classify
+     * on them (dry-run effect resolution).
+     */
+    annotations?: McpToolAnnotations;
 }
 export interface AccountMcpServer {
     serverIdentifier: string;
@@ -79,18 +87,26 @@ export interface AccountMcpCallResult {
 export interface CursorBackendClientOptions {
     backendUrl: string;
     apiKey: string;
+    /**
+     * Re-read the key on each authenticated call. Hosted freeze listens
+     * unsigned and the binder drops the key after restore; a constructor-frozen
+     * key would miss that bind.
+     */
+    getApiKey?: () => string;
     logger?: (line: string) => void;
     /** Test seam; defaults to global fetch. */
     fetchImpl?: typeof fetch;
 }
 export declare class CursorBackendClient {
     private readonly backendUrl;
-    private readonly apiKey;
+    private readonly resolveApiKey;
     private readonly logger;
     private readonly fetchImpl;
     private token;
     private tokenExchange;
+    private lastExchangedApiKey;
     constructor(options: CursorBackendClientOptions);
+    private currentApiKey;
     /** Who this API key acts as. */
     getMe(): Promise<CursorIdentity>;
     /**

package/dist/internal/cursor/backend-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend-client.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/backend-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;IAHhC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,YAAY,CAAC,EAAE,MAAM,YAAA,EAI/B;CACF;AAMD,QAAA,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,CACpC;IACE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;CACtC,EACD,OAAO,CAQP,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMjE,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AA+BD,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAeD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAgDD,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,KAAK,CACV;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CACrD,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAkED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAqD;IAClE,OAAO,CAAC,aAAa,CAA8B;IAEnD,YAAY,OAAO,EAAE,0BAA0B,EAO9C;IAED,gCAAgC;IAC1B,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAErC;IAED;;;;OAIG;IACG,mBAAmB,CACvB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAoB7B;IAED;;;;OAIG;IACG,qBAAqB,CAAC,IAAI,EAAE;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAahC;IAED;;;;OAIG;IACG,sBAAsB,CAAC,OAAO,CAAC,EAAE;QACrC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAahC;IAED;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE;QAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAiBhC;IAED,4EAA4E;IACtE,cAAc,CAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,gBAAgB,CAAA;KAAE,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAsC5B;YAEa,GAAG;IA+CjB;;;OAGG;IACH,OAAO,CAAC,cAAc;YAgBR,cAAc;CAuC7B;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB;AAqBD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChB"}
+{"version":3,"file":"backend-client.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/backend-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAczD,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM;IAHhC,YACE,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,YAAY,CAAC,EAAE,MAAM,YAAA,EAI/B;CACF;AAMD,QAAA,MAAM,mBAAmB,EAAE,CAAC,CAAC,SAAS,CACpC;IACE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;CACtC,EACD,OAAO,CAQP,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMjE,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAiCD,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAeD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAgDD,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,KAAK,CACV;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CACrD,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAkED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAqD;IAClE,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,mBAAmB,CAAqB;IAEhD,YAAY,OAAO,EAAE,0BAA0B,EAO9C;IAED,OAAO,CAAC,aAAa;IAIrB,gCAAgC;IAC1B,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAErC;IAED;;;;OAIG;IACG,mBAAmB,CACvB,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAsB7B;IAED;;;;OAIG;IACG,qBAAqB,CAAC,IAAI,EAAE;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAahC;IAED;;;;OAIG;IACG,sBAAsB,CAAC,OAAO,CAAC,EAAE;QACrC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAahC;IAED;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE;QAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAiBhC;IAED,4EAA4E;IACtE,cAAc,CAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,gBAAgB,CAAA;KAAE,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAsC5B;YAEa,GAAG;IA+CjB;;;OAGG;IACH,OAAO,CAAC,cAAc;YA4BR,cAAc;CAyC7B;AAED;;;GAGG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB;AAqBD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmChB"}

package/dist/internal/cursor/backend-client.js

@@ -23,6 +23,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
+import { boundedToolAnnotations } from "../mcp-host.js";
 const CLIENT_VERSION = "agent-serve-0.1.0";
 const EXCHANGE_PATH = "/auth/exchange_user_api_key";
 const SERVICE_PREFIX = "/aiserver.v1.DashboardService";
@@ -68,6 +69,8 @@ const mcpToolSchema = z.object({
     inputSchema: z.unknown().optional(),
     /** Flat JSON-string output schema (`output_schema_json` on the proto). */
     outputSchemaJson: z.string().optional(),
+    /** Flat JSON-string MCP annotations (`annotations_json` on the proto). */
+    annotationsJson: z.string().optional(),
 });
 const getAvailableMcpServersResponseSchema = z.object({
     servers: z
@@ -178,13 +181,16 @@ function parseRpcResponse(method, response) {
 }
 export class CursorBackendClient {
     constructor(options) {
-        var _a, _b;
+        var _a, _b, _c;
         this.backendUrl = options.backendUrl.endsWith("/")
             ? options.backendUrl.slice(0, -1)
             : options.backendUrl;
-        this.apiKey = options.apiKey;
-        this.logger = (_a = options.logger) !== null && _a !== void 0 ? _a : (() => { });
-        this.fetchImpl = (_b = options.fetchImpl) !== null && _b !== void 0 ? _b : fetch;
+        this.resolveApiKey = (_a = options.getApiKey) !== null && _a !== void 0 ? _a : (() => options.apiKey);
+        this.logger = (_b = options.logger) !== null && _b !== void 0 ? _b : (() => { });
+        this.fetchImpl = (_c = options.fetchImpl) !== null && _c !== void 0 ? _c : fetch;
+    }
+    currentApiKey() {
+        return this.resolveApiKey().trim();
     }
     /** Who this API key acts as. */
     getMe() {
@@ -208,7 +214,8 @@ export class CursorBackendClient {
                 tools: ((_a = server.tools) !== null && _a !== void 0 ? _a : []).map((tool) => {
                     var _a;
                     const outputSchema = parseOutputSchemaJson(tool.outputSchemaJson);
-                    return Object.assign({ name: tool.name, description: (_a = tool.description) !== null && _a !== void 0 ? _a : "", inputSchema: normalizeInputSchema(tool.inputSchema) }, (outputSchema === undefined ? {} : { outputSchema }));
+                    const annotations = parseAnnotationsJson(tool.annotationsJson);
+                    return Object.assign(Object.assign({ name: tool.name, description: (_a = tool.description) !== null && _a !== void 0 ? _a : "", inputSchema: normalizeInputSchema(tool.inputSchema) }, (outputSchema === undefined ? {} : { outputSchema })), (annotations === undefined ? {} : { annotations }));
                 }),
             }); });
         });
@@ -287,7 +294,7 @@ export class CursorBackendClient {
                     method: "POST",
                     headers: {
                         "content-type": "application/json",
-                        authorization: `Bearer ${this.apiKey}`,
+                        authorization: `Bearer ${this.currentApiKey()}`,
                     },
                     body: JSON.stringify({ repos: [...repos], permissions }),
                     signal: AbortSignal.timeout(30000),
@@ -358,6 +365,14 @@ export class CursorBackendClient {
      * when none is cached or it is near expiry.
      */
     getAccessToken() {
+        const apiKey = this.currentApiKey();
+        if (apiKey === "") {
+            return Promise.reject(new CursorBackendError("The Cursor backend client has no API key yet. Bind CURSOR_API_KEY or CURSOR_API_KEY_FILE before authenticated calls."));
+        }
+        if (this.lastExchangedApiKey !== apiKey) {
+            this.token = undefined;
+            this.tokenExchange = undefined;
+        }
         if (this.token !== undefined &&
             Date.now() < this.token.expiresAtMs - TOKEN_EXPIRY_LEEWAY_MS) {
             return Promise.resolve(this.token.value);
@@ -372,13 +387,14 @@ export class CursorBackendClient {
     }
     exchangeApiKey() {
         return __awaiter(this, void 0, void 0, function* () {
+            const apiKey = this.currentApiKey();
             let response;
             try {
                 response = yield this.fetchImpl(`${this.backendUrl}${EXCHANGE_PATH}`, {
                     method: "POST",
                     headers: {
                         "content-type": "application/json",
-                        authorization: `Bearer ${this.apiKey}`,
+                        authorization: `Bearer ${apiKey}`,
                     },
                     body: "{}",
                     signal: AbortSignal.timeout(30000),
@@ -401,6 +417,7 @@ export class CursorBackendClient {
                 value: body.data.accessToken,
                 expiresAtMs: jwtExpiryMs(body.data.accessToken),
             };
+            this.lastExchangedApiKey = apiKey;
             this.logger("[agent-sdk] cursor account: minted a fresh access token");
             return body.data.accessToken;
         });
@@ -521,6 +538,24 @@ function parseOutputSchemaJson(outputSchemaJson) {
         ? parsed
         : undefined;
 }
+/**
+ * Parse the flat JSON-string annotations off the wire and bound them to the
+ * MCP-spec fields. Malformed or non-object payloads behave like absent ones,
+ * so readers fail closed.
+ */
+function parseAnnotationsJson(annotationsJson) {
+    if (annotationsJson === undefined) {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(annotationsJson);
+    }
+    catch (_a) {
+        return undefined;
+    }
+    return boundedToolAnnotations(parsed);
+}
 function toCallResult(result) {
     var _a;
     if (result.success !== undefined) {

package/dist/internal/cursor/credentials.d.ts

@@ -9,6 +9,10 @@
  *   dashboard-revocable user API key — only the key is stored.
  * - `CURSOR_API_KEY` (or `serve({ apiKey })`) wins over the stored key, so
  *   CI and hosted deployments stay env-driven.
+ * - `CURSOR_API_KEY_FILE` (or the hosted default path) is next: freeze bind
+ *   drops the key at task time without restarting July.
+ * - Stored `july login` is last. Same order for hosted and self-hosted:
+ *   option → env → file → login.
  *
  * There is deliberately no session-token storage, refresh-token rotation, or
  * cross-tool credential sharing here: short-lived access tokens are minted
@@ -27,10 +31,11 @@ export declare const DEFAULT_CURSOR_EXTERNAL_API_URL = "https://api.cursor.com";
 export declare function cursorBackendUrl(): string;
 /**
  * External API base URL for routes served only by the external-api
- * microlith (`/internal/agent-serve/*`, engine aliases). In production
- * these are mounted on api.cursor.com and 404 on api2.cursor.sh, so the
- * deploy surface needs its own default. `CURSOR_API_BASE_URL` still
- * overrides everything for local dev, where one server mounts all routes.
+ * microlith (`/internal/agent-serve/*`, `/v0/grokbot/*`, engine aliases).
+ * In production these are mounted on api.cursor.com and 404 on
+ * api2.cursor.sh, so the deploy surface needs its own default.
+ * `CURSOR_API_BASE_URL` still overrides everything for local dev, where
+ * one server mounts all routes.
  */
 export declare function cursorExternalApiUrl(): string;
 /** Website base URL for the login deep link (`CURSOR_WEBSITE_URL` override). */
@@ -48,20 +53,41 @@ export type StoredCredentials = z.infer<typeof storedCredentialsSchema>;
 export declare function configDirPath(): string;
 /** `<configDir>/credentials.json` (0600). */
 export declare function credentialsFilePath(): string;
+export declare function readStoredCredentialsSync(): StoredCredentials | undefined;
 export declare function readStoredCredentials(): Promise<StoredCredentials | undefined>;
 export declare function writeStoredCredentials(credentials: StoredCredentials): Promise<void>;
 export declare function clearStoredCredentials(): Promise<boolean>;
-export type ApiKeySource = "option" | "env" | "login";
+export type ApiKeySource = "option" | "env" | "file" | "login";
 export interface ResolvedApiKey {
     apiKey: string;
     source: ApiKeySource;
     backendUrl: string;
 }
 /**
- * Resolve the account API key for `backendUrl` (defaults to the active
- * backend): explicit option → `CURSOR_API_KEY` → stored login. A stored key
- * minted against a different backend is ignored rather than sent to the
- * wrong host.
+ * Hosted task-bind path. Not a secret: the snapshot may name this path.
+ * The binder writes the key here after restore; July re-reads on each use.
+ * Override with `CURSOR_API_KEY_FILE`. A missing file is unsigned — self-hosted
+ * then uses `CURSOR_API_KEY` or stored login.
+ */
+export declare const DEFAULT_CURSOR_API_KEY_FILE: string;
+/**
+ * Read `CURSOR_API_KEY_FILE` (or {@link DEFAULT_CURSOR_API_KEY_FILE} when
+ * unset). Missing/empty files are unsigned, not an error — freeze bake
+ * listens before the binder drops the key; self-hosted falls through to
+ * env or login.
+ */
+export declare function readApiKeyFromFile(filePath?: string): string | undefined;
+/**
+ * First present source wins. We define the order; operators do not.
+ * `--api-key` / `serve({ apiKey })` → `CURSOR_API_KEY` → `CURSOR_API_KEY_FILE`
+ * (hosted default path if unset) → stored `july login`.
+ */
+export declare function resolveApiKeySync(options?: {
+    apiKey?: string;
+    backendUrl?: string;
+}): ResolvedApiKey | undefined;
+/**
+ * {@link resolveApiKeySync} as a Promise for call sites that already await.
  */
 export declare function resolveApiKey(options?: {
     apiKey?: string;

package/dist/internal/cursor/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAGxE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAI7C;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAUD,QAAA,MAAM,uBAAuB,EAAE,CAAC,CAAC,SAAS,CACxC;IAAE,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAA;CAAE,EAChD,OAAO,CAKP,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAED,6CAA6C;AAC7C,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CACpD,iBAAiB,GAAG,SAAS,CAC9B,CAsBA;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO/D;AAMD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,CAAC,EAAE;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CActC;AAED,yEAAyE;AACzE,eAAO,MAAM,YAAY,EAAE,MAA8F,CAAC;AAQ1H,MAAM,WAAW,UAAU;IACzB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CAU9C;AAKD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmG3B"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/internal/cursor/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AACnE,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAGxE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAI7C;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAUD,QAAA,MAAM,uBAAuB,EAAE,CAAC,CAAC,SAAS,CACxC;IAAE,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAA;CAAE,EAChD,OAAO,CAKP,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAQtC;AAED,6CAA6C;AAC7C,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAqBD,wBAAgB,yBAAyB,IAAI,iBAAiB,GAAG,SAAS,CAQzE;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CACpD,iBAAiB,GAAG,SAAS,CAC9B,CAQA;AAED,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO/D;AAMD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAE,MACJ,CAAC;AAEvC;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYxE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,cAAc,GAAG,SAAS,CAkB7B;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,CAAC,EAAE;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAEtC;AAED,yEAAyE;AACzE,eAAO,MAAM,YAAY,EAAE,MAAoH,CAAC;AAQhJ,MAAM,WAAW,UAAU;IACzB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CAU9C;AAKD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmG3B"}

package/dist/internal/cursor/credentials.js

@@ -9,6 +9,10 @@
  *   dashboard-revocable user API key — only the key is stored.
  * - `CURSOR_API_KEY` (or `serve({ apiKey })`) wins over the stored key, so
  *   CI and hosted deployments stay env-driven.
+ * - `CURSOR_API_KEY_FILE` (or the hosted default path) is next: freeze bind
+ *   drops the key at task time without restarting July.
+ * - Stored `july login` is last. Same order for hosted and self-hosted:
+ *   option → env → file → login.
  *
  * There is deliberately no session-token storage, refresh-token rotation, or
  * cross-tool credential sharing here: short-lived access tokens are minted
@@ -24,6 +28,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { readFileSync } from "node:fs";
 import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
@@ -45,10 +50,11 @@ export function cursorBackendUrl() {
 }
 /**
  * External API base URL for routes served only by the external-api
- * microlith (`/internal/agent-serve/*`, engine aliases). In production
- * these are mounted on api.cursor.com and 404 on api2.cursor.sh, so the
- * deploy surface needs its own default. `CURSOR_API_BASE_URL` still
- * overrides everything for local dev, where one server mounts all routes.
+ * microlith (`/internal/agent-serve/*`, `/v0/grokbot/*`, engine aliases).
+ * In production these are mounted on api.cursor.com and 404 on
+ * api2.cursor.sh, so the deploy surface needs its own default.
+ * `CURSOR_API_BASE_URL` still overrides everything for local dev, where
+ * one server mounts all routes.
  */
 export function cursorExternalApiUrl() {
     var _a;
@@ -83,6 +89,33 @@ export function configDirPath() {
 export function credentialsFilePath() {
     return join(configDirPath(), "credentials.json");
 }
+function parseStoredCredentialsJson(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (_a) {
+        return undefined;
+    }
+    const credentials = storedCredentialsSchema.safeParse(parsed);
+    if (!credentials.success) {
+        return undefined;
+    }
+    return {
+        backendUrl: trimTrailingSlash(credentials.data.backendUrl),
+        apiKey: credentials.data.apiKey,
+    };
+}
+export function readStoredCredentialsSync() {
+    let raw;
+    try {
+        raw = readFileSync(credentialsFilePath(), "utf8");
+    }
+    catch (_a) {
+        return undefined;
+    }
+    return parseStoredCredentialsJson(raw);
+}
 export function readStoredCredentials() {
     return __awaiter(this, void 0, void 0, function* () {
         let raw;
@@ -92,22 +125,7 @@ export function readStoredCredentials() {
         catch (_a) {
             return undefined;
         }
-        let parsed;
-        try {
-            parsed = JSON.parse(raw);
-        }
-        catch (_b) {
-            // Corrupt file — treat as signed out; login rewrites it.
-            return undefined;
-        }
-        const credentials = storedCredentialsSchema.safeParse(parsed);
-        if (!credentials.success) {
-            return undefined;
-        }
-        return {
-            backendUrl: trimTrailingSlash(credentials.data.backendUrl),
-            apiKey: credentials.data.apiKey,
-        };
+        return parseStoredCredentialsJson(raw);
     });
 }
 export function writeStoredCredentials(credentials) {
@@ -133,31 +151,66 @@ export function clearStoredCredentials() {
     });
 }
 /**
- * Resolve the account API key for `backendUrl` (defaults to the active
- * backend): explicit option → `CURSOR_API_KEY` → stored login. A stored key
- * minted against a different backend is ignored rather than sent to the
- * wrong host.
+ * Hosted task-bind path. Not a secret: the snapshot may name this path.
+ * The binder writes the key here after restore; July re-reads on each use.
+ * Override with `CURSOR_API_KEY_FILE`. A missing file is unsigned — self-hosted
+ * then uses `CURSOR_API_KEY` or stored login.
+ */
+export const DEFAULT_CURSOR_API_KEY_FILE = "/run/cursor/secrets/CURSOR_API_KEY";
+/**
+ * Read `CURSOR_API_KEY_FILE` (or {@link DEFAULT_CURSOR_API_KEY_FILE} when
+ * unset). Missing/empty files are unsigned, not an error — freeze bake
+ * listens before the binder drops the key; self-hosted falls through to
+ * env or login.
+ */
+export function readApiKeyFromFile(filePath) {
+    const configured = filePath !== null && filePath !== void 0 ? filePath : process.env.CURSOR_API_KEY_FILE;
+    const path = configured !== undefined && configured.trim() !== ""
+        ? configured.trim()
+        : DEFAULT_CURSOR_API_KEY_FILE;
+    try {
+        const raw = readFileSync(path, "utf8").trim();
+        return raw === "" ? undefined : raw;
+    }
+    catch (_a) {
+        return undefined;
+    }
+}
+/**
+ * First present source wins. We define the order; operators do not.
+ * `--api-key` / `serve({ apiKey })` → `CURSOR_API_KEY` → `CURSOR_API_KEY_FILE`
+ * (hosted default path if unset) → stored `july login`.
+ */
+export function resolveApiKeySync(options) {
+    var _a;
+    const backendUrl = (_a = options === null || options === void 0 ? void 0 : options.backendUrl) !== null && _a !== void 0 ? _a : cursorBackendUrl();
+    if ((options === null || options === void 0 ? void 0 : options.apiKey) !== undefined && options.apiKey.trim() !== "") {
+        return { apiKey: options.apiKey.trim(), source: "option", backendUrl };
+    }
+    const envKey = process.env.CURSOR_API_KEY;
+    if (envKey !== undefined && envKey.trim() !== "") {
+        return { apiKey: envKey.trim(), source: "env", backendUrl };
+    }
+    const fileKey = readApiKeyFromFile();
+    if (fileKey !== undefined) {
+        return { apiKey: fileKey, source: "file", backendUrl };
+    }
+    const stored = readStoredCredentialsSync();
+    if (stored !== undefined && stored.backendUrl === backendUrl) {
+        return { apiKey: stored.apiKey, source: "login", backendUrl };
+    }
+    return undefined;
+}
+/**
+ * {@link resolveApiKeySync} as a Promise for call sites that already await.
  */
 export function resolveApiKey(options) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        const backendUrl = (_a = options === null || options === void 0 ? void 0 : options.backendUrl) !== null && _a !== void 0 ? _a : cursorBackendUrl();
-        if ((options === null || options === void 0 ? void 0 : options.apiKey) !== undefined && options.apiKey.trim() !== "") {
-            return { apiKey: options.apiKey.trim(), source: "option", backendUrl };
-        }
-        const envKey = process.env.CURSOR_API_KEY;
-        if (envKey !== undefined && envKey.trim() !== "") {
-            return { apiKey: envKey.trim(), source: "env", backendUrl };
-        }
-        const stored = yield readStoredCredentials();
-        if (stored !== undefined && stored.backendUrl === backendUrl) {
-            return { apiKey: stored.apiKey, source: "login", backendUrl };
-        }
-        return undefined;
+        return resolveApiKeySync(options);
     });
 }
 /** One-line hint for "no credentials" errors, shared across surfaces. */
-export const SIGN_IN_HINT = `Run \`${CLI_COMMAND_NAME} login\` (or set CURSOR_API_KEY / pass serve({ apiKey })).`;
+export const SIGN_IN_HINT = `Run \`${CLI_COMMAND_NAME} login\` (or set CURSOR_API_KEY / CURSOR_API_KEY_FILE / pass serve({ apiKey })).`;
 // ============================================================================
 // PKCE browser login (mirrors cursor-agent / Sand)
 // ============================================================================

package/dist/internal/deploy-client.d.ts

@@ -1,6 +1,7 @@
 /**
  * Thin client for the Agent Serve deployment management API
- * (`/internal/agent-serve/deployments` on the Cursor backend). Pure
+ * (`/internal/agent-serve/deployments` on the Cursor backend) and the v2
+ * AgentSDK accept path (`/internal/agentkit/deployments`). Pure
  * request/response + error mapping — no console I/O, no polling loops;
  * rendering lives in `cli-deploy.ts`.
  *
@@ -131,6 +132,29 @@ export interface StopAccepted {
     status: string;
 }
 export type DeleteAccepted = StopAccepted;
+/**
+ * `POST /internal/agentkit/deployments` 202 body. Distinct from v1
+ * {@link DeployAccepted}: the v2 control plane returns catalog ids, not
+ * an engine alias or one-shot alias token.
+ */
+export interface AgentkitDeployAccepted {
+    applicationId: string;
+    releaseId: string;
+    status: string;
+}
+/** Customer-visible v2 deploy status (`GET /internal/agentkit/deployments/:slug`). */
+export type AgentkitCustomerStatus = "pending" | "deploying" | "running" | "failed" | "stopped";
+export type AgentkitDeployProgress = "queued" | "creating" | "building" | "starting" | "finalizing" | "running" | "failed" | "stopped";
+export interface AgentkitDeployStatus {
+    applicationId: string;
+    releaseId: string;
+    slug: string;
+    teamId: number;
+    status: AgentkitCustomerStatus;
+    progress: AgentkitDeployProgress;
+    statusMessage: string | null;
+}
+export declare const TERMINAL_AGENTKIT_DEPLOY_STATUSES: ReadonlySet<AgentkitCustomerStatus>;
 /** One secret's metadata from the list endpoint — names only, never values. */
 export interface SecretInfo {
     name: string;
@@ -176,6 +200,23 @@ export declare class AgentServeDeployClient {
         source: DeploySource;
         template?: string;
     }): Promise<DeployAccepted>;
+    /**
+     * Create or redeploy onto the v2 control plane
+     * (`POST /internal/agentkit/deployments`). 202 means accepted; poll
+     * {@link getAgentkitDeploy} until a terminal status.
+     */
+    deployAgentkit(args: {
+        teamId: number;
+        slug: string;
+        gitRepoUrl: string;
+        gitRef?: string;
+        agentPath?: string;
+        repositories?: string[];
+    }): Promise<AgentkitDeployAccepted>;
+    getAgentkitDeploy(args: {
+        teamId: number;
+        slug: string;
+    }): Promise<AgentkitDeployStatus>;
     listDeployments(args: {
         teamId: number;
     }): Promise<Deployment[]>;