@cursor/july 0.1.9 → 0.1.11

package/dist/internal/mcp-oauth.js

@@ -0,0 +1,385 @@
+/**
+ * Host-side MCP OAuth for `defineConnection({ url, oauth: true })`.
+ * Local: mcp-auth.json. Prod secrets: `mcp oauth <name> --store`.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { execFile } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { createServer } from "node:http";
+import { dirname, join } from "node:path";
+import { configDirPath } from "./cursor/credentials.js";
+export const MCP_OAUTH_CALLBACK_PORT = 8787;
+export const MCP_OAUTH_CALLBACK_PATH = "/callback";
+export const MCP_OAUTH_CALLBACK_URL = `http://localhost:${MCP_OAUTH_CALLBACK_PORT}${MCP_OAUTH_CALLBACK_PATH}`;
+/** `anytool` → `MCP_OAUTH_ANYTOOL`. */
+export function mcpOauthEnvPrefix(connection) {
+    const key = connection
+        .trim()
+        .toUpperCase()
+        .replace(/[^A-Z0-9]+/g, "_")
+        .replace(/^_+|_+$/g, "");
+    return `MCP_OAUTH_${key.length > 0 ? key : "CONNECTION"}`;
+}
+export function mcpOauthSecretNames(connection) {
+    const prefix = mcpOauthEnvPrefix(connection);
+    return {
+        accessToken: `${prefix}_ACCESS_TOKEN`,
+        refreshToken: `${prefix}_REFRESH_TOKEN`,
+        clientId: `${prefix}_CLIENT_ID`,
+    };
+}
+export function tokensFromEnv(connection, env = process.env) {
+    var _a, _b;
+    const names = mcpOauthSecretNames(connection);
+    const access = (_a = env[names.accessToken]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (access === undefined || access === "") {
+        return undefined;
+    }
+    const refresh = (_b = env[names.refreshToken]) === null || _b === void 0 ? void 0 : _b.trim();
+    return {
+        access_token: access,
+        refresh_token: refresh === undefined || refresh === "" ? undefined : refresh,
+        token_type: "Bearer",
+    };
+}
+export function clientIdFromEnv(connection, env = process.env) {
+    var _a;
+    const clientId = (_a = env[mcpOauthSecretNames(connection).clientId]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (clientId === undefined || clientId === "") {
+        return undefined;
+    }
+    return {
+        client_id: clientId,
+        redirect_uris: [MCP_OAUTH_CALLBACK_URL],
+    };
+}
+const locks = new Map();
+/** Sibling of `credentials.json` under `~/.config/agent-serve/`. */
+export function defaultMcpAuthPath() {
+    return join(configDirPath(), "mcp-auth.json");
+}
+/** Canonical MCP resource key for binding stored tokens to a server URL. */
+export function normalizeMcpResourceUrl(url) {
+    const parsed = new URL(url);
+    parsed.hash = "";
+    parsed.search = "";
+    // Drop default ports so http://h:80 and http://h match.
+    if ((parsed.protocol === "https:" && parsed.port === "443") ||
+        (parsed.protocol === "http:" && parsed.port === "80")) {
+        parsed.port = "";
+    }
+    let path = parsed.pathname;
+    if (path.length > 1 && path.endsWith("/")) {
+        path = path.slice(0, -1);
+    }
+    return `${parsed.origin}${path === "/" ? "" : path}`;
+}
+export class FileMcpOAuthStore {
+    constructor(path = defaultMcpAuthPath()) {
+        this.path = path;
+    }
+    loadTokens(id, resourceUrl) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return (_a = (yield this.entryFor(id, resourceUrl))) === null || _a === void 0 ? void 0 : _a.tokens;
+        });
+    }
+    loadClientInformation(id, resourceUrl) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return (_a = (yield this.entryFor(id, resourceUrl))) === null || _a === void 0 ? void 0 : _a.clientInfo;
+        });
+    }
+    saveTokens(id, resourceUrl, tokens) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.update(id, resourceUrl, (entry) => {
+                entry.tokens = tokens;
+            });
+        });
+    }
+    saveClientInformation(id, resourceUrl, clientInfo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.update(id, resourceUrl, (entry) => {
+                entry.clientInfo = clientInfo;
+            });
+        });
+    }
+    deleteCredentials(id) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.withLock(() => __awaiter(this, void 0, void 0, function* () {
+                const data = yield this.read();
+                delete data[id];
+                yield this.write(data);
+            }));
+        });
+    }
+    entryFor(id, resourceUrl) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const entry = (yield this.read())[id];
+            if (entry === undefined) {
+                return undefined;
+            }
+            const bound = entry.resourceUrl;
+            if (bound === undefined || bound !== normalizeMcpResourceUrl(resourceUrl)) {
+                return undefined;
+            }
+            return entry;
+        });
+    }
+    update(id, resourceUrl, mutate) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const normalized = normalizeMcpResourceUrl(resourceUrl);
+            yield this.withLock(() => __awaiter(this, void 0, void 0, function* () {
+                const data = yield this.read();
+                const existing = data[id];
+                const entry = (existing === null || existing === void 0 ? void 0 : existing.resourceUrl) === normalized ? Object.assign({}, existing) : {};
+                entry.resourceUrl = normalized;
+                mutate(entry);
+                data[id] = entry;
+                yield this.write(data);
+            }));
+        });
+    }
+    read() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            if (this.cache !== undefined) {
+                return this.cache;
+            }
+            (_a = this.loading) !== null && _a !== void 0 ? _a : (this.loading = this.readDisk().then((data) => {
+                this.cache = data;
+                return data;
+            }));
+            return this.loading;
+        });
+    }
+    readDisk() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const parsed = JSON.parse(yield readFile(this.path, "utf8"));
+                if (typeof parsed !== "object" || parsed === null) {
+                    return {};
+                }
+                return parsed;
+            }
+            catch (error) {
+                if (typeof error === "object" &&
+                    error !== null &&
+                    "code" in error &&
+                    error.code === "ENOENT") {
+                    return {};
+                }
+                throw error;
+            }
+        });
+    }
+    write(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.cache = data;
+            yield mkdir(dirname(this.path), { recursive: true, mode: 0o700 });
+            yield writeFile(this.path, `${JSON.stringify(data, null, 2)}\n`, {
+                mode: 0o600,
+            });
+            yield chmod(this.path, 0o600);
+        });
+    }
+    withLock(fn) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const prev = (_a = locks.get(this.path)) !== null && _a !== void 0 ? _a : Promise.resolve();
+            let release;
+            locks.set(this.path, new Promise((resolve) => {
+                release = resolve;
+            }));
+            try {
+                yield prev;
+                return yield fn();
+            }
+            finally {
+                release();
+            }
+        });
+    }
+}
+export class HostMcpOAuthProvider {
+    constructor(args) {
+        var _a;
+        this.args = args;
+        this.tokensValue = args.tokens;
+        this.clientInfo = args.clientInformation;
+        this.meta = {
+            redirect_uris: [(_a = args.redirectUrl) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_URL],
+            token_endpoint_auth_method: "none",
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            client_name: "agentkit",
+        };
+    }
+    get redirectUrl() {
+        var _a;
+        return (_a = this.args.redirectUrl) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_URL;
+    }
+    get clientMetadata() {
+        return this.meta;
+    }
+    get lastRedirectUrl() {
+        return this.redirect;
+    }
+    state() {
+        return randomUUID();
+    }
+    clientInformation() {
+        return this.clientInfo;
+    }
+    saveClientInformation(info) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.clientInfo = info;
+            yield this.args.store.saveClientInformation(this.args.identifier, this.args.resourceUrl, info);
+        });
+    }
+    tokens() {
+        return this.tokensValue;
+    }
+    saveTokens(tokens) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.tokensValue = tokens;
+            yield this.args.store.saveTokens(this.args.identifier, this.args.resourceUrl, tokens);
+        });
+    }
+    redirectToAuthorization(url) {
+        var _a, _b;
+        this.redirect = url;
+        (_b = (_a = this.args).onRedirect) === null || _b === void 0 ? void 0 : _b.call(_a, url);
+    }
+    saveCodeVerifier(codeVerifier) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.verifier = codeVerifier;
+        });
+    }
+    codeVerifier() {
+        if (this.verifier === undefined) {
+            throw new Error("No PKCE code verifier saved for this OAuth attempt.");
+        }
+        return this.verifier;
+    }
+    invalidateCredentials(scope) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (scope === "tokens" || scope === "all") {
+                this.tokensValue = undefined;
+            }
+            if (scope === "client" || scope === "all") {
+                this.clientInfo = undefined;
+            }
+            if (scope === "verifier" || scope === "all") {
+                this.verifier = undefined;
+                this.redirect = undefined;
+            }
+            if (scope === "all") {
+                yield this.args.store.deleteCredentials(this.args.identifier);
+            }
+        });
+    }
+}
+export function createHostMcpOAuthProvider(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const store = (_a = args.store) !== null && _a !== void 0 ? _a : new FileMcpOAuthStore();
+        const [fileTokens, fileClient] = yield Promise.all([
+            store.loadTokens(args.identifier, args.resourceUrl),
+            store.loadClientInformation(args.identifier, args.resourceUrl),
+        ]);
+        return new HostMcpOAuthProvider({
+            identifier: args.identifier,
+            resourceUrl: args.resourceUrl,
+            store,
+            tokens: fileTokens !== null && fileTokens !== void 0 ? fileTokens : tokensFromEnv(args.identifier),
+            clientInformation: fileClient !== null && fileClient !== void 0 ? fileClient : clientIdFromEnv(args.identifier),
+            onRedirect: args.onRedirect,
+        });
+    });
+}
+export function waitForMcpOAuthCallback(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const port = (_a = args === null || args === void 0 ? void 0 : args.port) !== null && _a !== void 0 ? _a : MCP_OAUTH_CALLBACK_PORT;
+        const path = (_b = args === null || args === void 0 ? void 0 : args.path) !== null && _b !== void 0 ? _b : MCP_OAUTH_CALLBACK_PATH;
+        const timeoutMs = (_c = args === null || args === void 0 ? void 0 : args.timeoutMs) !== null && _c !== void 0 ? _c : 5 * 60 * 1000;
+        return new Promise((resolve, reject) => {
+            let done = false;
+            const finish = (result, error) => {
+                if (done) {
+                    return;
+                }
+                done = true;
+                clearTimeout(timer);
+                server.close();
+                if (error !== undefined) {
+                    reject(error);
+                    return;
+                }
+                if (result !== undefined) {
+                    resolve(result);
+                }
+            };
+            const server = createServer((req, res) => {
+                var _a, _b;
+                if (req.url === "/favicon.ico") {
+                    res.writeHead(404).end();
+                    return;
+                }
+                const url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : "", `http://localhost:${port}`);
+                if (url.pathname !== path) {
+                    res.writeHead(404).end("Not found");
+                    return;
+                }
+                const code = url.searchParams.get("code");
+                const oauthError = url.searchParams.get("error");
+                const state = (_b = url.searchParams.get("state")) !== null && _b !== void 0 ? _b : undefined;
+                if (code) {
+                    res
+                        .writeHead(200, { "content-type": "text/html; charset=utf-8" })
+                        .end("<!doctype html><html><body><h1>Authorized</h1><p>Return to agentkit.</p></body></html>");
+                    finish({ code, state });
+                    return;
+                }
+                res
+                    .writeHead(400, { "content-type": "text/html; charset=utf-8" })
+                    .end(`<!doctype html><html><body><h1>Authorization failed</h1><p>${oauthError !== null && oauthError !== void 0 ? oauthError : "missing code"}</p></body></html>`);
+                finish(undefined, new Error(`OAuth authorization failed: ${oauthError !== null && oauthError !== void 0 ? oauthError : "missing code"}`));
+            });
+            const timer = setTimeout(() => {
+                finish(undefined, new Error(`Timed out waiting for OAuth callback on http://localhost:${port}${path}`));
+            }, timeoutMs);
+            server.on("error", (error) => {
+                finish(undefined, new Error(`OAuth callback port ${port} failed: ${error instanceof Error ? error.message : String(error)}`));
+            });
+            server.listen(port, "127.0.0.1");
+        });
+    });
+}
+export function openBrowser(url) {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+        throw new Error(`Refusing to open non-http(s) authorization URL: ${parsed.protocol}`);
+    }
+    const href = parsed.href;
+    if (process.platform === "darwin") {
+        execFile("open", [href], () => undefined);
+        return;
+    }
+    if (process.platform === "win32") {
+        // Avoid `cmd /c start` — authorize URLs with `&` are shell-metachar risks.
+        execFile("rundll32", ["url.dll,FileProtocolHandler", href], () => undefined);
+        return;
+    }
+    execFile("xdg-open", [href], () => undefined);
+}

package/dist/internal/resolved-connections.d.ts

@@ -25,6 +25,12 @@ export declare function assertCloudCanHonorAccountServersFilters(args: {
 /** Fail closed when anonymous HTTP admission would expose account connectors. */
 export declare function assertAccountConnectionsNotAnonymous(args: {
     allowAnonymous?: boolean;
+    /**
+     * Opt in when every admitted caller is already trusted (e.g. behind an
+     * authenticating proxy / hosted alias token). Same trust model as
+     * `--allow-anonymous-cursor-github`.
+     */
+    allowAnonymousCursorAccountMcp?: boolean;
     hasAccountConnections: boolean;
 }): void;
 export declare function resolveMountConnections(args: {

package/dist/internal/resolved-connections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-connections.d.ts","sourceRoot":"","sources":["../../src/internal/resolved-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAE5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAuBP;AAED,qEAAqE;AACrE,wBAAgB,wCAAwC,CAAC,IAAI,EAAE;IAC7D,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAC3B,mBAAmB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC1D,GAAG,IAAI,CAmBP;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,IAAI,CAMP;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA6C7B"}
+{"version":3,"file":"resolved-connections.d.ts","sourceRoot":"","sources":["../../src/internal/resolved-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAE5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CA4BP;AAED,qEAAqE;AACrE,wBAAgB,wCAAwC,CAAC,IAAI,EAAE;IAC7D,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAC3B,mBAAmB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC1D,GAAG,IAAI,CAmBP;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,IAAI,CAUP;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC3C,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA6C7B"}

package/dist/internal/resolved-connections.js

@@ -19,7 +19,10 @@ export function validateMountConnectionsConfig(args) {
         return;
     }
     const label = args.slug === "" ? args.project.name : args.slug;
-    const filteredRefs = args.accountRefs.filter((ref) => ref.servers !== undefined);
+    const hostOnlyNames = new Set(agent.connections
+        .filter((connection) => connection.hostOnly === true)
+        .map((connection) => connection.name));
+    const filteredRefs = args.accountRefs.filter((ref) => ref.servers !== undefined && !hostOnlyNames.has(ref.name));
     if (filteredRefs.length === 0) {
         return;
     }
@@ -43,9 +46,13 @@ export function assertCloudCanHonorAccountServersFilters(args) {
 }
 /** Fail closed when anonymous HTTP admission would expose account connectors. */
 export function assertAccountConnectionsNotAnonymous(args) {
-    if (args.allowAnonymous === true && args.hasAccountConnections) {
-        throw new Error("[agentkit] --allow-anonymous cannot be used with Cursor account MCP connections (defineConnection({ cursorAccount: true })); use --bearer-token or remove the account MCP connections.");
+    if (args.allowAnonymous !== true || !args.hasAccountConnections) {
+        return;
+    }
+    if (args.allowAnonymousCursorAccountMcp === true) {
+        return;
     }
+    throw new Error("[agentkit] --allow-anonymous cannot be used with Cursor account MCP connections (defineConnection({ cursorAccount: true })); use --bearer-token, or opt in with --allow-anonymous-cursor-account-mcp behind a trusted boundary.");
 }
 export function resolveMountConnections(args) {
     const agent = args.project.agent;

package/dist/internal/sdk-runner.d.ts

@@ -21,6 +21,8 @@ export interface CursorSdkRunnerOptions {
      * `LocalAgentStore` for heavy multi-session concurrency.
      */
     store?: LocalAgentStore;
+    /** Diagnostics for degraded paths (resume-miss fallback). */
+    logger?: (line: string) => void;
 }
 export declare class CursorSdkRunner implements AgentRunner {
     private readonly options;
@@ -37,5 +39,12 @@ export declare class CursorSdkRunner implements AgentRunner {
 }
 /** Cloud agent ids minted by the server are `bc-…`; those always resume. */
 export declare function isServerMintedCloudAgentId(id: string): boolean;
+/**
+ * `Agent.resume` on a store with no row for the agent ("Agent <id> not
+ * found", surfaced by every built-in {@link LocalAgentStore} backend).
+ * Deliberately narrow: transient store/transport failures must propagate
+ * rather than silently fork the thread onto a fresh conversation.
+ */
+export declare function isLocalAgentNotFoundError(error: unknown, agentId: string): boolean;
 export declare function toModelSelection(model: ModelSetting): ModelSelection;
 //# sourceMappingURL=sdk-runner.d.ts.map

package/dist/internal/sdk-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../../src/internal/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,cAAc,EAGpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,qBAAa,eAAgB,YAAW,WAAW;IAIrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IAEtE,YAA6B,OAAO,GAAE,sBAA2B,EAAI;IAE/D,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA0D9D;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ7B;IAED,OAAO,CAAC,QAAQ;YAYF,SAAS;YA2BT,cAAc;YAwBd,cAAc;IAqC5B,OAAO,CAAC,QAAQ;CAUjB;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAQpE"}
+{"version":3,"file":"sdk-runner.d.ts","sourceRoot":"","sources":["../../src/internal/sdk-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,cAAc,EAGpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,qBAAa,eAAgB,YAAW,WAAW;IAIrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IAEtE,YAA6B,OAAO,GAAE,sBAA2B,EAAI;IAE/D,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA0D9D;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ7B;IAED,OAAO,CAAC,QAAQ;YAYF,SAAS;YA2BT,cAAc;YAyCd,cAAc;IAqC5B,OAAO,CAAC,QAAQ;CAUjB;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAMT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAQpE"}

package/dist/internal/sdk-runner.js

@@ -121,7 +121,7 @@ export class CursorSdkRunner {
     }
     openLocalAgent(request, shared) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _d;
             const store = (_a = this.options.store) !== null && _a !== void 0 ? _a : (yield this.getStore(request.runnerStateDir));
             const options = Object.assign(Object.assign({}, shared), { local: {
                     cwd: request.workspaceDir,
@@ -131,7 +131,22 @@ export class CursorSdkRunner {
             if (request.isFirstTurn || request.sdkAgentId === undefined) {
                 return Agent.create(Object.assign(Object.assign({}, options), { agentId: (_b = request.sdkAgentId) !== null && _b !== void 0 ? _b : request.sessionId }));
             }
-            return Agent.resume((_c = request.sdkAgentId) !== null && _c !== void 0 ? _c : request.sessionId, options);
+            const agentId = (_c = request.sdkAgentId) !== null && _c !== void 0 ? _c : request.sessionId;
+            try {
+                return yield Agent.resume(agentId, options);
+            }
+            catch (error) {
+                if (!isLocalAgentNotFoundError(error, agentId)) {
+                    throw error;
+                }
+                // Host replacement: the session record survived in durable storage,
+                // but the conversation store died with the old pod. A fresh
+                // conversation under the same id beats failing this thread's turns
+                // forever ("Agent … not found" on every follow-up). The channel's
+                // warm-turn prompt context re-hydrates the thread history.
+                ((_d = this.options.logger) !== null && _d !== void 0 ? _d : (() => { }))(`[agentkit] no stored conversation for ${agentId} on this host; starting a fresh one`);
+                return Agent.create(Object.assign(Object.assign({}, options), { agentId }));
+            }
         });
     }
     openCloudAgent(request, shared) {
@@ -175,6 +190,17 @@ export class CursorSdkRunner {
 export function isServerMintedCloudAgentId(id) {
     return id.startsWith("bc-");
 }
+/**
+ * `Agent.resume` on a store with no row for the agent ("Agent <id> not
+ * found", surfaced by every built-in {@link LocalAgentStore} backend).
+ * Deliberately narrow: transient store/transport failures must propagate
+ * rather than silently fork the thread onto a fresh conversation.
+ */
+export function isLocalAgentNotFoundError(error, agentId) {
+    return (error instanceof Error &&
+        error.message.includes(agentId) &&
+        /\bnot found\b/i.test(error.message));
+}
 export function toModelSelection(model) {
     if (typeof model === "string") {
         return { id: model };

package/dist/internal/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2BH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAoFrB,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAapE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAYD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAsmB3B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/internal/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2BH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAOhB,YAAY,EACb,MAAM,aAAa,CAAC;AAmFrB,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AAapE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAYD,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAAE,EACpB,OAAO,GAAE,YAAY,GAAG,0BAA+B,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAunB3B"}

package/dist/internal/server.js

@@ -42,7 +42,7 @@ import { assertSlackCursorAgentName } from "../channels/slack/types.js";
 import { allowAll, bearerAuth, localDevStrict } from "../channels.js";
 import { CursorAccountMcpBridge, collectCursorAccountConnections, cursorAccountMcpPath, } from "./cursor/account-mcp.js";
 import { CursorBackendClient } from "./cursor/backend-client.js";
-import { cursorBackendUrl, cursorExternalApiUrl, resolveApiKey, SIGN_IN_HINT, } from "./cursor/credentials.js";
+import { cursorExternalApiUrl, resolveApiKey, SIGN_IN_HINT, } from "./cursor/credentials.js";
 import { CursorGithubCredentialProvider } from "./cursor/github-credentials.js";
 import { CursorEventRelay, formatCursorScmEventLog, scmMetadataToGitHubPayload, } from "./cursor-event-relay.js";
 import { CursorSlackRelay, createCursorSlackApiCaller, formatCursorSlackEventLog, } from "./cursor-slack-relay.js";
@@ -163,7 +163,7 @@ export function startServer(mounts_1) {
         if (options.allowAnonymous === true) {
             logger("[agentkit] warning: --allow-anonymous admits every HTTP caller as the same principal; use only on a trusted network (e.g. Tailscale) and prefer --bearer-token for shared hosts");
         }
-        const runner = (_l = options.runner) !== null && _l !== void 0 ? _l : new CursorSdkRunner(accountKey === undefined ? {} : { apiKey: accountKey.apiKey });
+        const runner = (_l = options.runner) !== null && _l !== void 0 ? _l : new CursorSdkRunner(Object.assign(Object.assign({}, (accountKey === undefined ? {} : { apiKey: accountKey.apiKey })), { logger }));
         const router = new Router();
         const runtimes = [];
         const channelStopHooks = [];
@@ -179,8 +179,14 @@ export function startServer(mounts_1) {
         const accountRefsBySlug = collectCursorAccountConnections(mounts);
         assertAccountConnectionsNotAnonymous({
             allowAnonymous: options.allowAnonymous,
+            allowAnonymousCursorAccountMcp: options.allowAnonymousCursorAccountMcp,
             hasAccountConnections: accountRefsBySlug.size > 0,
         });
+        if (options.allowAnonymous === true &&
+            options.allowAnonymousCursorAccountMcp === true &&
+            accountRefsBySlug.size > 0) {
+            logger("[agentkit] warning: --allow-anonymous-cursor-account-mcp — every admitted HTTP caller can drive Cursor account MCP connectors; serve this only behind a trusted boundary (e.g. an SSO proxy or hosted alias token)");
+        }
         let accountBridge;
         if (accountRefsBySlug.size > 0) {
             if (accountKey === undefined) {
@@ -236,6 +242,12 @@ export function startServer(mounts_1) {
                 cancelForContinuation: (token, reason) => reminderRunner.cancelForContinuation(token, reason),
                 dispatch: (id) => reminderRunner.dispatch(id),
             });
+            engine.setEvals({
+                list: () => evalRuns.list(),
+                get: (runId) => evalRuns.get(runId),
+                listRunsWithActive: () => evalRuns.listRunsWithActive(),
+                start: (input) => evalRuns.start(input),
+            });
             const runtime = {
                 slug,
                 project,
@@ -696,8 +708,12 @@ function mountAgentRoutes(router, runtime, args) {
                 (relaxSessionReadAuthBeyondLoopback ||
                     (typeof ctx.requestIp === "string" &&
                         isLoopbackAddress(ctx.requestIp)));
+            const listed = yield engine.listSessionsWithSource(ctx.auth, {
+                includeAll,
+            });
             return jsonResponse({
-                sessions: yield engine.listSessions(ctx.auth, { includeAll }),
+                sessions: listed.sessions,
+                source: listed.source,
             });
         }),
     });
@@ -1217,7 +1233,7 @@ function collectCursorSlackTargets(runtimes) {
  */
 function startCursorSlackRelay(input) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b;
+        var _a;
         const { options, runtimes, accountKey, logger } = input;
         const targets = collectCursorSlackTargets(runtimes);
         if (targets.length === 0) {
@@ -1226,8 +1242,10 @@ function startCursorSlackRelay(input) {
         if (accountKey === undefined) {
             throw new Error(`This project has Slack channels using the Cursor account connection (slackChannel({ cursorAccount: true })) but the host is not signed in to Cursor. ${SIGN_IN_HINT}`);
         }
-        const baseUrl = (_a = accountKey.backendUrl) !== null && _a !== void 0 ? _a : cursorBackendUrl();
-        const baseStateRoot = (_b = options.stateRoot) !== null && _b !== void 0 ? _b : join(targets[0].runtime.project.rootDir, ".agent-serve");
+        // Same host split as scm-events: `/v0/slack-events/*` is on api.cursor.com,
+        // not api2 (accountKey.backendUrl 404s these routes).
+        const baseUrl = cursorExternalApiUrl();
+        const baseStateRoot = (_a = options.stateRoot) !== null && _a !== void 0 ? _a : join(targets[0].runtime.project.rootDir, ".agent-serve");
         const stateDir = join(baseStateRoot, "cursor-slack");
         // Optional fields may be undefined — the relay JSON-serializes the
         // registration body, which drops them.