npm - @cursor/july - Versions diffs - 0.1.94 → 0.1.95 - Mend

@cursor/july 0.1.94 → 0.1.95

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (209) hide show

package/dist/playground/index.html CHANGED Viewed

@@ -8,8 +8,8 @@
     />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>agent-serve playground</title>
-    <script type="module" crossorigin src="./assets/index-B3JCyigB.js"></script>
-    <link rel="stylesheet" crossorigin href="./assets/index-D9N7-q97.css">
+    <script type="module" crossorigin src="./assets/index-CZA1uEWA.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-CF7hUDnQ.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/storage-backends/cursor-hosted.d.ts CHANGED Viewed

@@ -47,8 +47,13 @@ export interface CursorHostedStorageOptions {
      * `https://api.cursor.com`).
      */
     baseUrl?: string;
-    /** Bearer credential (default: `CURSOR_API_KEY`). */
-    apiKey?: string;
+    /**
+     * Bearer credential (default: `CURSOR_API_KEY`). A function is
+     * re-resolved on every call: hosted freeze snapshots listen unsigned and
+     * bind the key file after serve start, so a value captured at construct
+     * time would be permanently absent.
+     */
+    apiKey?: string | (() => string | undefined);
     /** Injected for tests. */
     fetch?: typeof fetch;
 }

package/dist/storage-backends/cursor-hosted.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"cursor-hosted.d.ts","sourceRoot":"","sources":["../../src/storage-backends/cursor-hosted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,aAAa,EAEb,iBAAiB,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,SAAS,EAAiC,MAAM,aAAa,CAAC;AAW5E;;;GAGG;AACH,eAAO,MAAM,+CAA+C,EAC1D,cAAuB,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,iCAAiC,EAC5C,2BAAoC,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS;IACpD,OAAO,+CAA+C;IACtD,OAAO,iCAAiC;CAIzC,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB~~,qDAAqD~~;~~IACrD~~,MAAM,CAAC,EAAE,MAAM,CAAC;~~IAChB~~,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,MAE1C,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAM7D;AAED,KAAK,0BAA0B,GAAG,QAAQ,CACxC,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC,CACvD,GAAG;IACF,QAAQ,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC;IACvC,GAAG,EAAE,eAAe,CAAC;IACrB,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,cAAc,CAAC;CACrB,CAAC;AA4BF,6EAA6E;AAC7E,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,2CAA2C;IAC3C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,OAAO,EAAE;QAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC9D;AAED,2CAA2C;AAC3C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;~~AAiFD~~;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,0BAA+B,GACvC,0BAA0B,CA2I5B"}
1	+ {"version":3,"file":"cursor-hosted.d.ts","sourceRoot":"","sources":["../../src/storage-backends/cursor-hosted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,aAAa,EAEb,iBAAiB,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,SAAS,EAAiC,MAAM,aAAa,CAAC;AAW5E;;;GAGG;AACH,eAAO,MAAM,+CAA+C,EAC1D,cAAuB,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,iCAAiC,EAC5C,2BAAoC,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS;IACpD,OAAO,+CAA+C;IACtD,OAAO,iCAAiC;CAIzC,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,MAE1C,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAM7D;AAED,KAAK,0BAA0B,GAAG,QAAQ,CACxC,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC,CACvD,GAAG;IACF,QAAQ,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC;IACvC,GAAG,EAAE,eAAe,CAAC;IACrB,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,cAAc,CAAC;CACrB,CAAC;AA4BF,6EAA6E;AAC7E,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,2CAA2C;IAC3C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,OAAO,EAAE;QAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC9D;AAED,2CAA2C;AAC3C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAmFD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,0BAA+B,GACvC,0BAA0B,CA2I5B"}

package/dist/storage-backends/cursor-hosted.js CHANGED Viewed

@@ -87,8 +87,8 @@ function toCasResult(response) {
 }
 function resolveApiKey(options) {
     var _a;
-    var _b;
-    const key = (_a = ((_b = options.apiKey) !== null && _b !== void 0 ? _b : process.env.CURSOR_API_KEY)) === null || _a === void 0 ? void 0 : _a.trim();
+    const configured = typeof options.apiKey === "function" ? options.apiKey() : options.apiKey;
+    const key = (_a = (configured !== null && configured !== void 0 ? configured : process.env.CURSOR_API_KEY)) === null || _a === void 0 ? void 0 : _a.trim();
     if (key === undefined || key === "") {
         throw new Error("cursorHostedStorage requires CURSOR_API_KEY (deployment pod credential on Cursor hosting)");
     }

package/docs/README.md CHANGED Viewed

@@ -35,7 +35,7 @@ npx @cursor/july docs
 | Building a new agent with Cursor | [Scaffold an agent with Cursor](./scaffolding-agents.md) |
 | Turning a Cursor Automation into a project | [Convert a Cursor Automation](./guides/convert-automation.md) |
 | Wiring an agent to Slack | [Slack guide](./guides/slack.md) |
-| Starting from a packaged template | [Demo](./templates/demo.md), [Security reviewer](./templates/security-reviewer.md), [Triage](./templates/triage.md), or [Agentic Owners](./templates/agentic-owners.md) |
+| Starting from a packaged template | [Demo](./templates/demo.md), [Security reviewer](./templates/security-reviewer.md), [Security help](./templates/security-help.md), [Triage](./templates/triage.md), or [Agentic Owners](./templates/agentic-owners.md) |
 | Wiring an agent to GitHub webhooks | [GitHub guide](./guides/github.md) |
 | Driving PRs from a cloud VM | [PR autofixer template](./templates/pr-autofixer.md) |
 | Driving an agent from Linear (or another tracker) | [Webhooks guide: Linear example](./guides/webhooks.md#example-linear-as-the-control-plane) |
@@ -63,6 +63,8 @@ npx @cursor/july docs
   collects the PR, the model records, then comments.
 - [Security reviewer](./templates/security-reviewer.md): review pull
   requests for exploitable bugs and post one comment.
+- [Answer security questions in Slack](./templates/security-help.md):
+  answer from your skills, or take a first look at a pasted PR.
 - [Triage Linear or Jira issues in place](./templates/triage.md): classify
   existing tickets and comment on them.
 - [Review pull requests with owners policies](./templates/agentic-owners.md):

package/docs/reference/cli.md CHANGED Viewed

@@ -415,6 +415,7 @@ non-zero when the reconstructed trajectory failed.
 agent-sdk init ./my-agent          # scaffold package.json, tsconfig.json, agent/ + a demo tool
 agent-sdk init ./my-demo --template demo              # record a PR walkthrough
 agent-sdk init ./my-reviewer --template security-reviewer   # review PRs for security bugs
+agent-sdk init ./security-help --template security-help   # answer security questions in Slack
 agent-sdk init ./my-triage --template triage-linear   # comment on Linear issues
 agent-sdk init ./my-triage --template triage-jira     # comment on Jira issues
 agent-sdk init ./my-owners --template agentic-owners  # review PRs via owners policies
@@ -430,7 +431,8 @@ agent-sdk init                     # no directory: print the setup guide
 `@cursor/july` resolves for `dev` and `run`.
 Templates may ship `init.json`. On a TTY, `init` asks those questions
-before writing files. `pr-autofixer` asks for GitHub repos. Repeat
+before writing files. `pr-autofixer` and `security-help` ask for GitHub
+repos. Repeat
 `--var id=value` to answer without a prompt.
 `--json` and non-TTY hosts skip the interview unless `--var` is set.

package/docs/templates/agentic-owners.md CHANGED Viewed

@@ -49,7 +49,7 @@ low risk approve, medium and above hold with a comment. Route reviews by
 committing policies:
 ```yaml
-# .agentic-owners/policy.yml — anywhere in the repo; closest wins.
+# .agentic-owners/policy.yml. Anywhere in the repo; closest wins.
 # paths are repo-root-relative globs, wherever the policy file lives.
 version: 1
 policies:

package/docs/templates/demo.md CHANGED Viewed

@@ -44,13 +44,14 @@ curl -X POST http://127.0.0.1:3000/demo-agent/v1/channels/queue/pr \
 ```
 The host fetches title, body, and files, writes `pr.md` and `files.md`,
-and starts the turn. Retries coalesce on `pr:owner/repo#N`.
+and starts the turn. Retries for the same PR coalesce.
 GitHub label `demo` or comment `/demo` when you terminate webhooks
 yourself: self-host and set `GITHUB_WEBHOOK_SECRET`. Hosted Cursor
 aliases require `X-Agent-Alias-Token`, which GitHub cannot send.
-`record_demo` comments on that key. Eval sessions skip the comment.
+`record_demo` comments on that pull request. Eval sessions skip the
+comment.
 ## First walkthrough

package/docs/templates/pr-autofixer.md CHANGED Viewed

@@ -83,17 +83,11 @@ with `git push origin HEAD:<headRef>`. Workflow actions run through
 ## GitHub wakes
-Mounted at `/v1/channels/github`. Cursor relays pull request, comment,
-review, check, and failing status events for the repos you listed. A
-wake only starts or resumes a cloud conversation after that PR has been
-driven. `pull_request.opened` is ignored. A PR comment or review on an
-opted-in PR wakes the agent. A comment on a plain GitHub issue does
-not. The channel buffers about 3 seconds per PR. Payload details are
-dropped on purpose. The follow-up says something changed.
-Pending wakes and the PR-to-cloud-agent map persist in `host.kv` so
-they survive restart. `cursorHostedStorage` keeps both across replace.
-Without that plug-in, `host.kv` is local-only.
+Cursor relays pull request, comment, review, check, and failing status
+events for the repos you listed. A wake only starts or resumes a cloud
+conversation after that PR has been driven. `pull_request.opened` is
+ignored. A PR comment or review on an opted-in PR wakes the agent. A
+comment on a plain GitHub issue does not.
 Closing a PR cancels its merge-conflict reminder and drops buffered
 wakes.
@@ -105,8 +99,8 @@ fixture replay.
 `agent/channels/slack.ts` is a dedicated Socket Mode bot
 (`PR_AUTOFIXER_SLACK_*`). Mint it with `agent-sdk slack create`, then
-mention the bot or DM it with a PR URL.
-Same `drive_pr` path as the playground. See [Slack](../guides/slack.md).
+mention the bot or DM it with a PR URL. Same `drive_pr` path as the
+playground. See [Slack](../guides/slack.md).
 ## Evals

package/docs/templates/security-help.md ADDED Viewed

@@ -0,0 +1,70 @@
+---
+title: "Answer security questions in Slack"
+description: "Scaffold the agent, connect Slack, and answer from your skills. Paste a GitHub pull request for a first look."
+---
+# Answer security questions in Slack
+This agent answers security questions in Slack from files you edit.
+Paste a GitHub pull request URL for a first look. Access grants,
+incident close-out, and GitHub writes stay with a person.
+## Scaffold
+```bash
+npx @cursor/july init ./security-help --template security-help
+```
+`init` asks which GitHub repos it may read. Every repo must share one
+owner. Pass `--var repos=acme/api,acme/web` to skip the prompt.
+The list lands in `agent/lib/repos.ts`. Slack uses it when someone
+pastes a PR URL.
+## Connect Slack and GitHub
+```bash
+cd security-help
+agent-sdk login
+agent-sdk slack create --name "Security Help" --channel-posts
+agent-sdk dev
+```
+`--channel-posts` is required to watch channels. Mentions and DMs work
+without it. Connect GitHub in Cursor for the watched repos. Slack
+starts the session. See [Slack](../guides/slack.md) and
+[GitHub](../guides/github.md).
+## First answer
+Mention the bot or DM it. Edit `agent/skills/faq.md` before you rely
+on the answers; the shipped file is a placeholder.
+Paste a watched PR URL for a first look. A repo outside the list is
+refused.
+## What to edit
+- `agent/lib/repos.ts`: repos it may read
+- `agent/channels/slack.ts`: channel ids to watch (`watch`)
+- `agent/skills/faq.md`: answers for your company
+- `agent/skills/`: how to look at a PR, a leak, or an access ask
+- `agent/instructions.md`: routing
+## Evals
+```bash
+agent-sdk eval
+```
+Three smoke cases: phishing, SaaS access, and a seeded PR look. Eval
+sessions skip Slack and GitHub writes.
+## Deploy
+```bash
+agent-sdk deploy
+```
+Run it from the agent's git checkout. Set Slack tokens on the
+deployment after `slack create`. See [Deployment](../deployment.md).

package/docs/templates/security-reviewer.md CHANGED Viewed

@@ -9,8 +9,7 @@ This agent reads a pull request diff and posts one review comment. It
 reports exploitable bugs: injection, authz bypass, secret leaks, SSRF,
 RCE. Style nits stay out.
-The in-repo factory Security Reviewer runs a staged pipeline with
-parallel workers. This template is one model turn.
+This template is one model turn: read the diff, then post one comment.
 ## Scaffold

package/docs/templates/triage.md CHANGED Viewed

@@ -51,8 +51,7 @@ agent-sdk dev
 Open the playground. Run `/queue/issue` and paste an existing issue.
-Local multi-agent mode mounts this project as `triage-agent`. You can
-also POST:
+You can also POST:
 ```bash
 curl -X POST http://127.0.0.1:3000/triage-agent/v1/channels/queue/issue \
@@ -64,14 +63,11 @@ curl -X POST http://127.0.0.1:3000/triage-agent/v1/channels/queue/issue \
   }'
 ```
-`POST /v1/channels/queue/issue` accepts
-`{ identifier, title?, description? }` from the playground.
 For create webhooks, set `LINEAR_WEBHOOK_SECRET` or
 `JIRA_WEBHOOK_SECRET`. Point the provider at the deployed alias under
 `/v1/channels/webhook`. Signed events start or resume triage for that issue.
-`record_triage` comments on the issue in the continuation key, not
+`record_triage` comments on the issue that started the session, not
 whatever identifier the model copies out of the ticket body.
 ## Rubric

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/july",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "description": "(early alpha) Filesystem-first framework for defining Cursor agents as markdown and TypeScript and serving them over channels with the Cursor SDK.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {

package/src/channels/github/github-channel.ts CHANGED Viewed

@@ -11,6 +11,7 @@ import {
   continuationSource,
   normalizeIdentity,
 } from "../../internal/continuation-identity.js";
+import { isDeferredChannelSession } from "../../internal/deferred-channel-session.js";
 import { isDevMode } from "../../internal/dev-mode.js";
 import { bindLocalIngressSend } from "../../internal/local-ingress.js";
 import type {
@@ -1622,16 +1623,15 @@ async function startTurn(input: {
     scheduleAfterAck(input.args, async () => {
       await sendTurn();
     });
-    return withDispatchOutcome(
-      Response.json(
-        { ok: true, dispatched: true, mode: "turn" },
-        { status: 202 }
-      ),
-      "send"
-    );
+    return acknowledgeTurn();
   }
   const session = await sendTurn();
+  if (isDeferredChannelSession(session)) {
+    // Hosted admission captured the send; the control plane allocates the
+    // session after acknowledgement, so there is nothing to report yet.
+    return acknowledgeTurn();
+  }
   return withDispatchOutcome(
     Response.json({
       ok: true,
@@ -1677,12 +1677,27 @@ function scheduleAfterAck(
   );
 }
+/** 202 ack for a turn whose send completes after the response flushes. */
+function acknowledgeTurn(): Response {
+  return withDispatchOutcome(
+    Response.json(
+      { ok: true, dispatched: true, mode: "turn" },
+      { status: 202 }
+    ),
+    "send"
+  );
+}
 function acknowledgeTask(
   args: ChannelHandlerArgs,
   dispatch: GitHubTaskDispatch,
   extra: Record<string, unknown>
 ): Response {
-  scheduleAfterAck(args, dispatch.task);
+  // Hand the task the per-delivery send/waitUntil so hosted admission can
+  // capture task-initiated sends; startup-captured sends bypass capture.
+  scheduleAfterAck(args, () =>
+    dispatch.task({ send: args.send, waitUntil: args.waitUntil })
+  );
   return withDispatchOutcome(
     Response.json(
       { ok: true, dispatched: true, mode: "task", ...extra },

package/src/channels/github/types.ts CHANGED Viewed

@@ -7,6 +7,7 @@ import type {
   ChannelEventHandlers,
   ChannelStartArgs,
   HostContext,
+  SendMessageFn,
   SendMessageOptions,
 } from "../../types.js";
 import type { GitHubApiOptions } from "./api.js";
@@ -370,13 +371,29 @@ export interface GitHubTurnDispatch {
         | Promise<GitHubWorkspaceFiles | undefined>);
 }
+/** Bound per-delivery helpers passed to a {@link GitHubTaskDispatch.task}. */
+export interface GitHubTaskArgs {
+  /**
+   * Start (or resume) a session for this delivery. Locally this runs a real
+   * turn and returns the live session. In hosted admission it captures the
+   * send for the control plane to execute after `ses_…` is allocated and
+   * returns an inert deferred handle, so the task body keeps running.
+   * Always use this over a send captured at `onStart` — a startup-captured
+   * send bypasses hosted capture and is rejected during hosted admission.
+   */
+  send: SendMessageFn;
+  /** Extend the delivery's background window past the task promise. */
+  waitUntil: (promise: Promise<unknown>) => void;
+}
 /**
  * Run a host-side handler for the event instead of a model turn. The task
  * runs in the background (`waitUntil`) after the webhook is acknowledged
- * with a 202, so it can outlive GitHub's ~10s delivery timeout.
+ * with a 202, so it can outlive GitHub's ~10s delivery timeout. The callback
+ * receives {@link GitHubTaskArgs}; zero-argument tasks remain valid.
  */
 export interface GitHubTaskDispatch {
-  task: () => void | Promise<void>;
+  task: (args: GitHubTaskArgs) => void | Promise<void>;
 }
 export type GitHubDispatchResult =

package/src/channels/origin/origin-channel.ts CHANGED Viewed

@@ -26,6 +26,7 @@ import {
 import { deriveOriginWebhookEvents, ORIGIN_CHANNEL_KIND } from "./events.js";
 import {
   DEFAULT_ORIGIN_API_BASE_URL,
+  OriginJwksUnavailableError,
   type OriginWebhookHeaders,
   verifyOriginWebhook,
 } from "./origin-webhook.js";
@@ -300,10 +301,12 @@ export function parseOriginPullRequestEvent(input: {
     ctx: {
       deliveryId: input.envelope.deliveryId,
       eventType,
+      eventTime: input.envelope.event.eventTime,
       installationId: input.envelope.installationId,
       repository,
       pullRequestNumber: number,
       pullRequestUrl: url,
+      payload,
       sender: originSender(input.envelope, payload),
     },
     pullRequest: {
@@ -687,7 +690,16 @@ export async function handleOriginWebhookRequest(input: {
       await verifyOriginWebhook(bodyText, originHeaders(input.request), {
         apiBaseUrl: resolveApiBaseUrl(input.options),
       });
-    } catch {
+    } catch (error) {
+      // A JWKS outage means the delivery was never checked: answer 503 so
+      // Origin's delivery worker retries. Only a real signature mismatch
+      // is the terminal 401.
+      if (error instanceof OriginJwksUnavailableError) {
+        return Response.json(
+          { ok: false, error: "signature_verification_unavailable" },
+          { status: 503 }
+        );
+      }
       return Response.json(
         { ok: false, error: "invalid_signature" },
         { status: 401 }

package/src/channels/origin/origin-webhook.ts CHANGED Viewed

@@ -247,7 +247,31 @@ export interface VerifyOriginWebhookOptions {
 }
 /**
- * Verify a Standard-Webhooks v1ed Origin payload. Throws on failure.
+ * The signing JWKS could not be fetched (and no cached copy applies), so
+ * the delivery was never actually checked. Callers must answer retryably
+ * (5xx) — a 401 would make Origin's delivery worker drop the wake as
+ * terminal on what is only a transient outage.
+ */
+export class OriginJwksUnavailableError extends Error {}
+async function fetchJwksOrUnavailable(
+  apiBaseUrl: string,
+  fetchImpl: typeof fetch,
+  options?: FetchOriginJwksOptions
+): Promise<readonly OriginJwk[]> {
+  try {
+    return await fetchOriginJwks(apiBaseUrl, fetchImpl, options);
+  } catch (error) {
+    throw new OriginJwksUnavailableError(
+      `Origin JWKS unavailable: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+/**
+ * Verify a Standard-Webhooks v1ed Origin payload. Throws
+ * {@link OriginJwksUnavailableError} when the keys cannot be fetched, and a
+ * plain error when the signature does not verify against them.
  */
 export async function verifyOriginWebhook(
   body: string | Buffer,
@@ -256,7 +280,7 @@ export async function verifyOriginWebhook(
 ): Promise<void> {
   const apiBaseUrl = options?.apiBaseUrl ?? DEFAULT_ORIGIN_API_BASE_URL;
   const fetchImpl = options?.fetchImpl ?? fetch;
-  const keys = await fetchOriginJwks(apiBaseUrl, fetchImpl);
+  const keys = await fetchJwksOrUnavailable(apiBaseUrl, fetchImpl);
   if (
     verifyV1edWebhookPayload({
       publicJwks: keys,
@@ -267,7 +291,7 @@ export async function verifyOriginWebhook(
   ) {
     return;
   }
-  const refreshed = await fetchOriginJwks(apiBaseUrl, fetchImpl, {
+  const refreshed = await fetchJwksOrUnavailable(apiBaseUrl, fetchImpl, {
     force: true,
   });
   if (

package/src/channels/origin/types.ts CHANGED Viewed

@@ -51,11 +51,19 @@ export interface OriginReview {
 export interface OriginEventContext {
   deliveryId?: string;
   eventType: string;
+  /** Delivery envelope `event.eventTime`, when present. */
+  eventTime?: string;
   /** Origin app installation id from the delivery envelope, when present. */
   installationId?: string;
   repository: OriginRepositoryRef;
   pullRequestNumber: number;
   pullRequestUrl: string;
+  /**
+   * Raw parsed `event.payload` record (`{}` when absent), for consumers
+   * whose normalization needs more than the typed event — the GitHub
+   * channel's hook ctx exposes the same.
+   */
+  payload: Record<string, unknown>;
   sender?: OriginActor;
   host: HostContext;
   artifacts: ArtifactsApi;

package/src/channels/slack/pr-ref.ts CHANGED Viewed

@@ -1,7 +1,9 @@
 /**
- * Best-effort GitHub PR references from free-form chat (Slack, etc.).
+ * Best-effort PR references from free-form chat (Slack, etc.).
  */
+import { type PrProvider, parsePrUrl } from "../../internal/scm/pr-url.js";
 export interface GithubPrRef {
   /** Normalized URL `https://github.com/owner/repo/pull/N`. */
   url: string;
@@ -12,39 +14,68 @@ export interface GithubPrRef {
   number: number;
 }
+export type OriginPrRef = GithubPrRef;
+const URL_IN_TEXT = /https?:\/\/[^\s>|]+/gi;
+function githubRef(owner: string, repo: string, number: number): GithubPrRef {
+  return {
+    owner,
+    repo,
+    number,
+    url: `https://github.com/${owner}/${repo}/pull/${number}`,
+    label: `${owner}/${repo}#${number}`,
+  };
+}
+function firstUrlRef(
+  text: string,
+  provider: PrProvider
+): GithubPrRef | undefined {
+  const matches = text.match(URL_IN_TEXT);
+  if (matches === null) {
+    return undefined;
+  }
+  for (const raw of matches) {
+    const parsed = parsePrUrl(raw);
+    if (parsed?.provider === provider) {
+      return {
+        owner: parsed.owner,
+        repo: parsed.repo,
+        number: parsed.number,
+        url: parsed.url,
+        label: `${parsed.owner}/${parsed.repo}#${parsed.number}`,
+      };
+    }
+  }
+  return undefined;
+}
+/**
+ * Find the first Origin PR URL in `text`.
+ * Does not treat bare `owner/repo#N` as Origin.
+ */
+export function extractOriginPrRef(text: string): OriginPrRef | undefined {
+  return firstUrlRef(text, "origin");
+}
 /**
  * Find the first GitHub PR URL or `owner/repo#N` in `text`.
  * Returns `undefined` when none is present.
  */
 export function extractGithubPrRef(text: string): GithubPrRef | undefined {
-  const urlMatch = text.match(
-    /https?:\/\/(?:www\.)?github\.com\/([\w.-]+)\/([\w.-]+)\/pull\/(\d+)/i
-  );
-  if (urlMatch !== null) {
-    const owner = urlMatch[1] as string;
-    const repo = urlMatch[2] as string;
-    const number = Number(urlMatch[3]);
-    return {
-      owner,
-      repo,
-      number,
-      url: `https://github.com/${owner}/${repo}/pull/${number}`,
-      label: `${owner}/${repo}#${number}`,
-    };
+  const fromUrl = firstUrlRef(text, "github");
+  if (fromUrl !== undefined) {
+    return fromUrl;
   }
   const hashMatch = text.match(/\b([\w.-]+)\/([\w.-]+)#(\d+)\b/);
   if (hashMatch === null) {
     return undefined;
   }
-  const owner = hashMatch[1] as string;
-  const repo = hashMatch[2] as string;
-  const number = Number(hashMatch[3]);
-  return {
-    owner,
-    repo,
-    number,
-    url: `https://github.com/${owner}/${repo}/pull/${number}`,
-    label: `${owner}/${repo}#${number}`,
-  };
+  return githubRef(
+    hashMatch[1] as string,
+    hashMatch[2] as string,
+    Number(hashMatch[3])
+  );
 }

package/src/files-backends/cursor-hosted.ts CHANGED Viewed

@@ -125,8 +125,12 @@ export function isCursorUserStoreFilesAvailable(
 export interface CursorHostedFilesOptions {
   /** Control-plane base URL (default: `CURSOR_API_BASE_URL`, else api.cursor.com). */
   baseUrl?: string;
-  /** Bearer credential (default: `CURSOR_API_KEY`). */
-  apiKey?: string;
+  /**
+   * Bearer credential (default: `CURSOR_API_KEY`). A function is re-resolved
+   * on every call — hosted freeze snapshots listen unsigned and bind the key
+   * file after serve start.
+   */
+  apiKey?: string | (() => string | undefined);
   /** File store to address (default: `AGENT_SERVE_STORE_SOURCE_ID`). */
   storeSourceId?: string;
   /** Test seam; defaults to global fetch. */
@@ -622,7 +626,9 @@ function resolveStoreSourceId(options: CursorHostedFilesOptions): string {
 }
 function resolveApiKey(options: CursorHostedFilesOptions): string {
-  const key = (options.apiKey ?? process.env.CURSOR_API_KEY)?.trim();
+  const configured =
+    typeof options.apiKey === "function" ? options.apiKey() : options.apiKey;
+  const key = (configured ?? process.env.CURSOR_API_KEY)?.trim();
   if (key === undefined || key === "") {
     throw new Error(
       "cursorHostedFiles requires CURSOR_API_KEY (deployment pod credential on Cursor hosting)"

package/src/files.ts CHANGED Viewed

@@ -184,6 +184,17 @@ export const agentStoreKeys = {
     `${STORAGE_KEY_ROOT}/${agent}/memory/journal.jsonl`,
   memoryJournalRotated: (agent: string, stamp: string): string =>
     `${STORAGE_KEY_ROOT}/${agent}/memory/journal-${stamp}.jsonl`,
+  // SDK conversation mirror (the runner's SQLite store, exported through the
+  // store APIs): one manifest per SDK agent id plus its content-addressed
+  // checkpoint blobs. See internal/conversation-mirror.ts.
+  conversationManifest: (agent: string, sdkAgentId: string): string =>
+    `${STORAGE_KEY_ROOT}/${agent}/conversations/${encodeURIComponent(sdkAgentId)}/manifest.json`,
+  conversationBlob: (
+    agent: string,
+    sdkAgentId: string,
+    blobId: string
+  ): string =>
+    `${STORAGE_KEY_ROOT}/${agent}/conversations/${encodeURIComponent(sdkAgentId)}/blobs/${encodeURIComponent(blobId)}`,
 } as const;
 /**