@cursor/july 0.1.96 → 0.1.99

package/docs/reference/sessions.md

@@ -67,8 +67,10 @@ message. Interrupted turns record `turn.failed` with
 Slack `stop` / `@agent stop` does the same for that thread and clears
 pending coalesced nudges.
 
-Session-bound deterministic tool calls share the same execution lock.
-They return `409 session_busy` while a model turn is running.
+Session-bound deterministic tool calls share the lock only for writes: a
+write-effect call returns `409 session_busy` while a model turn is
+running, a read-effect call runs alongside the turn (see
+[Tools](./tools.md#call-a-tool-without-a-model-turn)).
 
 ## Which events can I stream?
 

package/docs/reference/tools.md

@@ -147,6 +147,31 @@ export default defineTool({
 `dryRunResult` keeps the result shape stable. Without it, a stubbed write
 returns `"Operation acknowledged."`. Traces mark the result as stubbed.
 
+### Bound time arguments under `asOf`
+
+Declare `timeArgs` with the input properties that carry time bounds. In a
+session created with `asOf`, every named argument must be an absolute
+ISO-8601 instant with a timezone, no later than the session's frozen
+instant. A call that omits one, or supplies a relative or later value, is
+refused with an error telling the model to retry with absolute bounds.
+Sessions without `asOf` ignore the declaration.
+
+```ts
+export default defineTool({
+  description: "Query telemetry between two instants.",
+  inputSchema: z.object({ since: z.string(), until: z.string() }),
+  effect: "read",
+  timeArgs: ["since", "until"],
+  async execute({ since, until }) {
+    return queryTelemetry(since, until);
+  },
+});
+```
+
+Every name in `timeArgs` must exist in the input schema; a session with
+`asOf` refuses to start otherwise, because a misspelled name would silently
+check nothing.
+
 ## Define an agent tool
 
 Set `execution: "agent"` and the tool materializes as a shell script
@@ -263,7 +288,14 @@ when the call returns. Pass a `sessionId` (a body field over
 HTTP, `--session` on the CLI, `options.sessionId` programmatically) to
 run inside an existing session instead: the tool sees that session's
 workspace, and the call is recorded on the session's event stream.
-Session-bound calls return `409 session_busy` while a turn runs. When the
+While a model turn is running, a session-bound call is admitted by its
+effect: a read-effect call (a declared `effect: "read"`, or an advertised
+MCP tool whose server annotates it read-only) runs alongside the turn,
+reading the workspace as the turn has left it, and is recorded under its
+own per-call `turnId` so trajectories keep it apart from the turn's own
+calls; a write-effect call — including an undeclared tool, which counts
+as a write — returns `409 session_busy` until the turn finishes, because
+a running turn owns the workspace. When the
 session's harness cwd cannot be materialized, a read-effect call runs
 in a scratch workspace instead and the outcome carries
 `scratchWorkspace: true`; a write-effect call fails with
@@ -273,7 +305,7 @@ A session can also be addressed by its continuation token: an optional
 `continuationToken` (`<channelId>:<key>`, as `/v1/sessions` lists it;
 mutually exclusive with `sessionId`). A token that maps to a live
 session behaves exactly like passing that session's id — same ownership
-check, same `409 session_busy`, same event recording. A token with no
+check, same busy semantics, same event recording. A token with no
 session behind it runs the call scratch-bound with the token's channel
 id and continuation key as the call's session identity, so a deployment
 whose tools resolve state from the continuation key can serve it with

package/docs/templates/agents-md.md

@@ -0,0 +1,110 @@
+---
+title: "Keep AGENTS.md current from last week's work"
+description: "Scaffold the agent, pick a repo and Slack channels, dispatch the weekly job, and deploy."
+---
+
+# Keep AGENTS.md current from last week's work
+
+This agent runs every Monday at 09:00 UTC. It reads last week's merged
+pull requests and the Slack channels you list. When a durable rule
+showed up, `apply_agents` parks the write until a person approves it,
+then opens a draft follow-up pull request against the default branch.
+Chores and rules the file already states stay quiet.
+
+This template is one model turn: read the week, then call
+`apply_agents`.
+
+Init once per app. Pass a different repo and channel list each time.
+
+## Scaffold
+
+```bash
+npx @cursor/july init ./agents-md --template agents-md
+```
+
+`init` asks which GitHub repo to watch and which Slack channels to
+read. Pass `--var repos=acme/api --var slack=#eng-api,#api-private`
+to skip the prompt. Use `--var slack=none` when Slack is out of
+scope.
+
+The answers land in `agent/lib/config.ts`. Edit that file when the
+set changes.
+
+## Connect GitHub and Slack
+
+Connect GitHub in Cursor for that repository (Settings or
+[cursor.com/dashboard](https://cursor.com/dashboard)). Sign the host
+in:
+
+```bash
+cd agents-md
+agent-sdk login
+```
+
+`cursorAccount` mints a short-lived, repo-scoped credential with
+`contents-write` so the agent can open the follow-up PR. See the
+[GitHub guide](../guides/github.md).
+
+Create the Slack app and invite the bot to each listed channel,
+including private ones:
+
+```bash
+agent-sdk slack create --dir .
+```
+
+See the [Slack guide](../guides/slack.md).
+
+## First weekly run
+
+```bash
+agent-sdk dev
+```
+
+Schedules never fire under `dev`. Dispatch the same path production
+uses:
+
+```bash
+curl -X POST http://127.0.0.1:3000/v1/dev/schedules/weekly
+```
+
+The playground can run `/queue/run` too.
+
+The host writes `week/prs.md`, `week/slack.md`, `week/window.txt`,
+and `week/tree/**.txt` snapshots of the current `AGENTS.md` files,
+then starts a model turn. The
+model calls `apply_agents` once. A skip finishes. An update parks in
+the playground until someone approves; then a draft PR opens against
+the repository default branch. Later updates to the same base stack
+on `agents-md/<base>`. Pull requests from those branches are ignored
+so the follow-up cannot feed the next week.
+
+Chat replies stay in the playground. `apply_agents` records a skip,
+or parks the write. Approve there or with
+`POST /v1/session/:id/approvals/:callId`.
+
+## What to edit
+
+- `agent/lib/config.ts`: repo and Slack channels
+- `agent/instructions.md`: what counts as an update
+- `evals/agents.eval.ts`: smoke cases
+
+## Evals
+
+Four smoke cases: a lint-only week, a billing rule that parks the
+write, the same rule already in `AGENTS.md`, and an empty week.
+
+```bash
+agent-sdk eval
+```
+
+Eval sessions skip the GitHub write.
+
+## Deploy
+
+```bash
+agent-sdk deploy
+```
+
+Run it from the agent's git checkout. The command infers repository,
+ref, path, and slug. Production fires the Monday cron. The deployment
+uses the team's Cursor GitHub connection for the watched repo.

package/docs/troubleshooting.md

@@ -42,7 +42,7 @@ not on `PATH`, use `npx @cursor/july`.
 | What you see | What to do |
 | --- | --- |
 | `409` on a follow-up message | Refresh the `continuationToken` or confirm the session is a chat session. Task sessions do not accept follow-ups. |
-| `409 session_busy` on `call --session` | Wait for the model turn to finish, or omit `--session` for a one-off call. |
+| `409 session_busy` on `call --session` | The tool is a write (or declares no effect) and a model turn is running. Wait for the turn to finish, omit `--session` for a one-off call, or declare `effect: "read"` on a tool that only reads so it runs alongside turns. |
 | `403` on stream or follow-up | Use the same auth identity that created the session. Off localhost, pass `--bearer-token` and send it on every request. |
 | Works on localhost; blocked through a tunnel or LAN | Default auth allows only direct loopback callers. Share the host with `--bearer-token <secret>` (or authored `bearerAuth`). Use `--allow-anonymous` only on a trusted private network. |
 | A channel route fails to compile with a schema type error | `GET` routes need a Zod `querySchema`. `POST` / `PUT` / `PATCH` need a Zod `bodySchema`. Use `z.object({})` or `z.unknown()` for open shapes. |
@@ -70,7 +70,7 @@ not on `PATH`, use `npx @cursor/july`.
 | What you see | What to do |
 | --- | --- |
 | `must be defineConnection({ url, oauth: true })` | The connection file needs `oauth: true`, or you passed the wrong connection name to `agent-sdk mcp oauth`. |
-| Local auth works; hosted calls unauthorized | Run `agent-sdk mcp oauth <name> --store`, confirm names with `agent-sdk secrets list <slug>`, then redeploy. |
+| Local auth works; hosted calls unauthorized | Finish Connect on the hosted engine, or run `agent-sdk mcp oauth <name> --store`. Confirm names with `agent-sdk secrets list <slug>`, then redeploy. |
 | Model asks for `mcp_auth` or IDE MCP for a connector it already has | Attached MCP is behind meta-tools. Set `advertiseTools: true` for named tools on local turns, or call it from a host tool via `ctx.host.mcp`. |
 
 See [Host MCP OAuth](./guides/mcp-oauth.md) and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/july",
-  "version": "0.1.96",
+  "version": "0.1.99",
   "description": "(early alpha) Filesystem-first framework for defining Cursor agents as markdown and TypeScript and serving them over channels with the Cursor SDK.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {

package/skills/create-agent/SKILL.md

@@ -111,7 +111,8 @@ agent-sdk init ./<slug>
    `subagents/<id>/` (needs `description`), `schedules/`, `hooks/`.
    Slack: `agent-sdk slack create --dir ./<slug> --name "<Name>"`,
    not a hand-written channel. Manual Slack app:
-   `agent-sdk slack init --manual`.
+   `agent-sdk slack init --manual` (Slack CLI, or paste at
+   api.slack.com).
 4. `evals/evals.config.ts` with `maxConcurrency: 20` (required;
    cap 200) plus `evals/**/*.eval.ts`. Assert `t.succeeded()` +
    `t.calledTool(...)`. API: `skills/evals/SKILL.md`.

package/skills/mcp-auth/SKILL.md

@@ -30,8 +30,11 @@ can still call `ctx.host.mcp`.
 3. **Allow egress** on hosted non-bootstrap hosts:
    `hosting.egressDomains`.
 4. **Authorize.** Local: `agent-sdk mcp oauth <name>`. Hosted:
-   `agent-sdk mcp oauth <name> --store` then `agent-sdk deploy`.
-   `secrets list` shows the names.
+   finish Connect so the current process can retry, then
+   `agent-sdk mcp oauth <name> --store` and `agent-sdk deploy` so
+   the next pod gets `MCP_OAUTH_*`. `secrets list` shows the names.
+   Secrets are deployment-wide, not per caller. `cursorAccount: true`
+   stays on the Cursor backend.
 
 ```ts
 // agent/mcp-connections/inventory.ts
@@ -75,7 +78,7 @@ the CLI config directory (`mcp-auth.json` or
 | `must be defineConnection({ url, oauth: true })` | Wrong name or missing `oauth: true` |
 | `Unknown MCP connection` | Filename must match the CLI arg |
 | Callback hang | Free port 8787; finish the browser flow here |
-| Hosted 401 | `secrets list`; `--store`; redeploy |
+| Hosted 401 | `secrets list`; Connect or `--store`; redeploy |
 | Model invents `mcp_auth` / IDE MCP | `advertiseTools: true` on local turns |
 
 No raw tokens in git.

package/skills/setup-slack/SKILL.md

@@ -64,28 +64,38 @@ Local serve does not need a hosted engine. Next
 
 ## 2. Manual (`slack init --manual`)
 
-Only when they own the app at api.slack.com.
+Only when they own the app. Preferred: Slack CLI
+(`~/.slack/bin/slack`). Paste at api.slack.com if the CLI is
+missing. Never `slack deploy`; Agent SDK serve owns Socket Mode.
 
 ```bash
 agent-sdk slack init --manual --dir . --name "My Agent"
+# --slack-team T0123ABCD when several workspaces are logged in
+# --no-install to scaffold only
 ```
 
 Writes `agent/channels/slack.ts` (`envPrefix` from the directory),
-manifests under the project state directory, and `env.example`.
-`--channel-posts` subscribes `message.channels` /
-`message.groups`.
+manifests, a `.slack/` project (`get-manifest` → those JSON files),
+and `env.example`. `--channel-posts` subscribes `message.channels`
+/ `message.groups`. If Slack CLI is logged in, this installs the
+app. `--install` fails when that cannot run.
 
 Human gates, one at a time. Stop after each.
 
-1. **Create the app.** Create New App → From a manifest. Start
-   with `manifest.dev.json`.
-2. **Install.** Install to Workspace. Copy the bot token
-   (`xoxb-...`).
-3. **App token.** Create an app-level token with
-   `connections:write` (`xapp-...`).
-4. **Write env.** Put both in `.env.local`. Then doctor.
-
-Repeat for prod with the prod manifest.
+1. **Install the app.** If `next` starts with "Ask the user to
+   install this Slack app", stop and prompt them. Slack CLI: they
+   run `slack login --no-prompt`, send `/slackauthticket <ticket>`,
+   then `slack login --ticket <ticket> --challenge <code>`, then
+   `slack app install --environment local --team <T> --force`.
+   Prod: `SLACK_ENV=deployed slack app install --environment
+   deployed --team <T> --force`. Fallback: Create New App → From a
+   manifest, start with `.slack/manifest.dev.json`.
+2. **Tokens.** Slack CLI leaves xoxb / xapp in that process only.
+   Copy the bot token from the app's OAuth page. Mint an app-level
+   token with `connections:write`. Put both in `.env.local` using
+   `env.example` names. If Slack CLI wrote `SLACK_*` to `.env`,
+   copy those values to the prefixed keys.
+3. **Doctor.**
 
 ## 3. Doctor and smoke
 

package/src/bin/agent-serve.ts

@@ -71,6 +71,7 @@ import {
   isServeRestartWorker,
   runEnterRestartSupervisor,
 } from "../internal/serve-restart.js";
+import { flushSessionRunFatal } from "../internal/session-run-log.js";
 import { clearTerminal, stdoutPalette } from "../internal/terminal-style.js";
 import { cmdUpdate, warnIfOutdated } from "../internal/update-check.js";
 import type { AgentProject, AgentServeHandle } from "../types.js";
@@ -439,6 +440,8 @@ Options:
                      GITHUB_WEBHOOK_SECRET). github: --events overrides the
                      derived webhook event list.
   --install          github: install the cli/gh-webhook extension if missing.
+                     slack init --manual: require Slack CLI app install.
+  --no-install       slack init --manual: skip Slack CLI app install.
   --action           github replay: event action (e.g. opened, synchronize).
   --conclusion       github replay: CI conclusion (check_run/suite/status).
   --comment          github replay: comment body for comment events.
@@ -557,6 +560,7 @@ async function main(argv: string[]): Promise<number> {
       secret: { type: "string" },
       channel: { type: "string", multiple: true },
       install: { type: "boolean", default: false },
+      "no-install": { type: "boolean", default: false },
       action: { type: "string" },
       conclusion: { type: "string" },
       context: { type: "string" },
@@ -570,6 +574,8 @@ async function main(argv: string[]): Promise<number> {
       all: { type: "boolean", default: false },
       "cursor-events-repo": { type: "string", multiple: true },
       "allow-domain": { type: "string", multiple: true },
+      // Hidden Anysphere-only flag; omitted from help.
+      "multi-tenant": { type: "boolean", default: false },
       "from-argv": { type: "boolean", default: false },
       strict: { type: "boolean", default: false },
       junit: { type: "string" },
@@ -622,6 +628,8 @@ async function main(argv: string[]): Promise<number> {
         icon: values.icon,
         force: values.force,
         manual: values.manual,
+        install: values.install,
+        noInstall: values["no-install"],
         iconSource: positionals[0] === "icon" ? positionals[1] : undefined,
       });
     }
@@ -757,6 +765,7 @@ async function main(argv: string[]): Promise<number> {
         ...(values["allow-domain"] === undefined
           ? {}
           : { allowDomains: values["allow-domain"] }),
+        multiTenant: values["multi-tenant"] === true,
       });
     }
 
@@ -1717,7 +1726,9 @@ function installTransportErrorGuards(): void {
     process.stderr.write(
       `[agent-sdk] uncaughtException: ${error.stack ?? error.message}\n`
     );
-    process.exit(1);
+    void flushSessionRunFatal(error).finally(() => {
+      process.exit(1);
+    });
   });
 }
 

package/src/channels/github/github-channel.ts

@@ -13,6 +13,7 @@ import {
 } from "../../internal/continuation-identity.js";
 import { isDeferredChannelSession } from "../../internal/deferred-channel-session.js";
 import { isDevMode } from "../../internal/dev-mode.js";
+import { attachHostedAdmissionAdapter } from "../../internal/hosted-admission-adapter.js";
 import { bindLocalIngressSend } from "../../internal/local-ingress.js";
 import type {
   AgentCloudOptions,
@@ -804,6 +805,22 @@ export function githubChannel(
     ],
   });
   githubChannelOptionsByDefinition.set(definition, channelOptions);
+  attachHostedAdmissionAdapter(definition, {
+    kind: GITHUB_CHANNEL_KIND,
+    prepareArgs: withPropagatingGitHubBackgroundErrors,
+    dispatch: ({ eventType, payload, deliveryId, args }) =>
+      dispatchGitHubWebhook({
+        options: channelOptions,
+        eventName: eventType,
+        payload,
+        deliveryId,
+        args,
+      }),
+    getOutcome: (response) => {
+      const outcome = getGitHubDispatchOutcome(response);
+      return outcome === "skip" || outcome === "task" ? outcome : undefined;
+    },
+  });
   if (cursorCredentials !== undefined) {
     registerGithubCursorAccountRuntime(definition, {
       options,

package/src/channels/origin/api.ts

@@ -9,8 +9,8 @@
  * from options first, then the environment: `ORIGIN_APP_ID` (or
  * `AGENT_SERVE_ORIGIN_APP_ID`), `ORIGIN_APP_INSTALLATION_ID`,
  * `ORIGIN_APP_PRIVATE_KEY` (PKCS8 PEM for the app's Ed25519 key; literal
- * `\n` sequences are normalized), and `ORIGIN_API_BASE_URL` for the public
- * REST base.
+ * `\n` sequences are normalized), `ORIGIN_API_BASE_URL` for the public REST
+ * base, and `ORIGIN_RPC_BASE_URL` for the first-party ConnectRPC base.
  *
  * Hosted v2 forks configure none of that: their only credential is the
  * deployment service account's `CURSOR_API_KEY`, exchanged for a Cursor
@@ -40,6 +40,15 @@ import {
  */
 export const DEFAULT_ORIGIN_PUBLIC_API_BASE_URL = "https://api.cursor.com";
 
+/**
+ * Origin's first-party ConnectRPC host (`origin.v1.OriginService`). Separate
+ * deployment from {@link DEFAULT_ORIGIN_PUBLIC_API_BASE_URL}: a handful of
+ * workflow operations — comment reactions among them — have no
+ * `/v1/origin/...` REST binding yet and are only reachable as Connect unary
+ * JSON here.
+ */
+export const DEFAULT_ORIGIN_RPC_BASE_URL = "https://api.origin.cursor.com";
+
 /** Fixed audience for Origin app JWTs (`APP_TOKEN_AUDIENCE` backend-side). */
 const ORIGIN_APP_TOKEN_AUDIENCE = "origin-apps";
 const APP_JWT_TTL_SECONDS = 5 * 60;
@@ -139,6 +148,12 @@ export function originPublicApiBaseUrl(
   return fromEnv ?? DEFAULT_ORIGIN_PUBLIC_API_BASE_URL;
 }
 
+/** Origin ConnectRPC base. Trailing slashes are stripped for path joins. */
+export function originRpcBaseUrl(env: NodeJS.ProcessEnv = process.env): string {
+  const fromEnv = envValue(env.ORIGIN_RPC_BASE_URL)?.replace(/\/+$/, "");
+  return fromEnv ?? DEFAULT_ORIGIN_RPC_BASE_URL;
+}
+
 function base64UrlJson(value: unknown): string {
   return Buffer.from(JSON.stringify(value)).toString("base64url");
 }
@@ -376,9 +391,10 @@ export interface OriginClientOptions {
   token?: string | OriginTokenProvider;
   /**
    * App credentials to mint installation tokens from. Defaults to the
-   * environment ({@link resolveOriginAppCredentials}).
+   * environment ({@link resolveOriginAppCredentials}). Pass `false` to
+   * disable app credential lookup and force the Cursor-account exchange.
    */
-  credentials?: OriginAppCredentials;
+  credentials?: OriginAppCredentials | false;
   /** Public Origin REST base. Defaults to `ORIGIN_API_BASE_URL` / prod. */
   apiBaseUrl?: string;
   /** Injectable fetch for tests. */
@@ -441,7 +457,10 @@ export function createOriginClient(
       return await options.token();
     }
     if (tokenProvider === undefined) {
-      const credentials = options.credentials ?? resolveOriginAppCredentials();
+      const credentials =
+        options.credentials === false
+          ? undefined
+          : (options.credentials ?? resolveOriginAppCredentials());
       const exchange = options.cursorAccountExchange ?? true;
       const exchangeOptions =
         exchange === false ? undefined : exchange === true ? {} : exchange;

package/src/channels/origin/binding.ts

@@ -13,6 +13,7 @@ import {
   createOriginClient,
   type OriginApiMethod,
   type OriginClient,
+  originRpcBaseUrl,
   resolveOriginAppCredentialParts,
 } from "./api.js";
 import {
@@ -20,6 +21,10 @@ import {
   type OriginCheck,
   type OriginCheckCreateInput,
 } from "./checks.js";
+import {
+  type OriginCommentReactionInput,
+  setOriginCommentReaction,
+} from "./reactions.js";
 import type { OriginAppOptions, OriginRepositoryRef } from "./types.js";
 
 /** Origin operations exposed to hooks (`ctx.origin`). */
@@ -44,53 +49,77 @@ export interface OriginHandle {
   createCheck(
     input: Omit<OriginCheckCreateInput, "origin" | "owner" | "repo">
   ): Promise<OriginCheck>;
+  /**
+   * Add or remove one reaction on a PR comment — the Origin analogue of
+   * GitHub's `thread.react("eyes")`. Needs
+   * `repository:pull_requests:reviews:write`. Reactions have no REST
+   * binding, so this call goes to Origin's ConnectRPC host rather than the
+   * public API base {@link request} uses.
+   */
+  reactToComment(input: OriginCommentReactionInput): Promise<void>;
 }
 
 export function buildOriginBinding(input: {
   repository: OriginRepositoryRef;
   /** Installation id from the delivery envelope, when present. */
   installationId?: string;
+  /** Force the signed-in Cursor account / deployment SA credential path. */
+  cursorAccount?: boolean;
   /** Channel-authored outbound app credentials / API base. */
   app?: OriginAppOptions;
   /** Injectable fetch for tests. */
   fetch?: typeof fetch;
 }): OriginHandle {
-  let client: OriginClient | undefined;
-  const getClient = (): OriginClient => {
-    if (client === undefined) {
-      const fromEnv = resolveOriginAppCredentialParts();
-      const appId = input.app?.appId ?? fromEnv.appId;
-      const installationId =
-        input.app?.installationId ??
-        input.installationId ??
-        fromEnv.installationId;
-      const privateKey = input.app?.privateKey ?? fromEnv.privateKey;
-      const credentials =
-        appId !== undefined &&
-        installationId !== undefined &&
-        privateKey !== undefined
-          ? { appId, installationId, privateKey }
-          : undefined;
-      client = createOriginClient({
-        token: input.app?.token,
-        credentials,
-        apiBaseUrl: input.app?.apiBaseUrl,
-        fetch: input.fetch,
-      });
-    }
-    return client;
+  const buildClient = (apiBaseUrl: string | undefined): OriginClient => {
+    const fromEnv = input.cursorAccount
+      ? {}
+      : resolveOriginAppCredentialParts();
+    const appId = input.app?.appId ?? fromEnv.appId;
+    const installationId =
+      input.app?.installationId ??
+      input.installationId ??
+      fromEnv.installationId;
+    const privateKey = input.app?.privateKey ?? fromEnv.privateKey;
+    const credentials =
+      appId !== undefined &&
+      installationId !== undefined &&
+      privateKey !== undefined
+        ? { appId, installationId, privateKey }
+        : undefined;
+    return createOriginClient({
+      token: input.cursorAccount ? undefined : input.app?.token,
+      credentials: input.cursorAccount ? false : credentials,
+      apiBaseUrl,
+      fetch: input.fetch,
+    });
+  };
+
+  // Public REST and ConnectRPC are separate Origin deployments, so the
+  // handle keeps a client per host. Both stay lazy: a hook that touches
+  // neither needs no credential.
+  let restClient: OriginClient | undefined;
+  const getRestClient = (): OriginClient => {
+    restClient ??= buildClient(input.app?.apiBaseUrl);
+    return restClient;
+  };
+  let rpcClient: OriginClient | undefined;
+  const getRpcClient = (): OriginClient => {
+    rpcClient ??= buildClient(input.app?.rpcBaseUrl ?? originRpcBaseUrl());
+    return rpcClient;
   };
 
   return {
     installationId: input.app?.installationId ?? input.installationId,
     repository: input.repository,
-    request: (request) => getClient().request(request),
+    request: (request) => getRestClient().request(request),
     createCheck: (check) =>
       createOriginCheck({
         ...check,
-        origin: getClient(),
+        origin: getRestClient(),
         owner: input.repository.owner,
         repo: input.repository.name,
       }),
+    reactToComment: (reaction) =>
+      setOriginCommentReaction({ ...reaction, origin: getRpcClient() }),
   };
 }

package/src/channels/origin/index.ts

@@ -29,4 +29,5 @@ export * from "./cursor-account.js";
 export * from "./events.js";
 export * from "./origin-channel.js";
 export * from "./origin-webhook.js";
+export * from "./reactions.js";
 export * from "./types.js";