@cursor/july 0.1.97 → 0.1.100

package/docs/evals.md

@@ -428,7 +428,7 @@ resolution for other file formats).
 `maxConcurrency` limits parallel datapoints. It does not limit model or
 API fan-out inside one datapoint. Materialized fixtures prevent a large
 suite from exhausting provider and GitHub rate limits. The
-[evals skill](../skills/evals/SKILL.md) has the full fixture workflow.
+[evals skill](./skills/evals.md) has the full fixture workflow.
 
 ## Keep improvements with regression evals
 

package/docs/guides/github.md

@@ -11,7 +11,7 @@ event stream for repos you've connected to Cursor. You still declare a
 `githubChannel` so hooks decide what each event does.
 
 The companion skill for coding agents is
-[`skills/github/SKILL.md`](../../skills/github/SKILL.md).
+[`skills/github/SKILL.md`](../skills/github.md).
 
 ## Pull events from Cursor
 

package/docs/guides/mcp-oauth.md

@@ -13,7 +13,7 @@ deployment as secrets so prod can reconnect after a redeploy. Hosted
 Connect lets the current process retry.
 
 The companion skill is
-[`skills/mcp-auth/SKILL.md`](../../skills/mcp-auth/SKILL.md).
+[`skills/mcp-auth/SKILL.md`](../skills/mcp-auth.md).
 
 ## What can host MCP OAuth do?
 

package/docs/guides/opentelemetry.md

@@ -91,7 +91,7 @@ You can also pass the same object to `serve(dir, { otel })`. Precedence
 is `serve({ otel })` over `agent/otel.ts` over env. An empty
 `defineOtel()` still enables export when `OTEL_EXPORTER_OTLP_*` is set.
 
-The companion skill is [`skills/otel/SKILL.md`](../../skills/otel/SKILL.md).
+The companion skill is [`skills/otel/SKILL.md`](../skills/otel.md).
 
 ## What spans does a session produce?
 
@@ -206,7 +206,7 @@ through `serve({ otel })` or env.
 
 ## What's next
 
-- [`skills/otel/SKILL.md`](../../skills/otel/SKILL.md): compact
+- [`skills/otel/SKILL.md`](../skills/otel.md): compact
   `defineOtel` reference for coding agents
 - [Hooks](../reference/hooks.md): observe the same session event stream
   in-process

package/docs/guides/slack.md

@@ -12,7 +12,7 @@ Replies stream there, with thinking steps and suggested prompts.
 Use `agent-sdk slack create` when Cursor should own the Slack app. Use
 `agent-sdk slack init --manual` when you own it. Commands and flags live
 in the [CLI reference](../reference/cli.md#slack). Coding agents should
-follow [`skills/setup-slack/SKILL.md`](../../skills/setup-slack/SKILL.md).
+follow [`skills/setup-slack/SKILL.md`](../skills/setup-slack.md).
 
 ## Define the channel
 
@@ -55,6 +55,85 @@ export default slackChannel({
 });
 ```
 
+## Choose how the reply arrives
+
+Slack gives an agent two places to show progress while a turn runs: the
+status chip under the thread ("Running grep…") and the reply message
+itself. It won't fill both at once. While a message is streaming, Slack
+shows its own "is working…" chip and hides any status text you set. Cards
+only exist inside a streamed message. `reply.mode` picks which one you get.
+
+### `post` (default): status chip, then one message
+
+Tool calls and the first line of each reasoning block show in the chip as
+they happen. The answer lands as a single message when the turn finishes.
+
+```ts
+export default slackChannel({
+  reply: {
+    mode: "post",
+    status: {
+      reasoning: true,
+      tools: true,
+      idle: ["Checking the monorepo…", "Poking Datadog…"],
+    },
+  },
+});
+```
+
+`idle` is the rotation Slack cycles through when nothing more specific is
+known, up to 5 lines of 50 characters. Pass a function to `tools` to write
+your own line from the calls in flight.
+
+### `stream`: live text, with cards
+
+The answer streams into one message as the model writes it. Slack owns the
+chip for the duration, so live feedback inside the message comes from
+cards. Both are off unless you turn them on.
+
+```ts
+export default slackChannel({
+  reply: {
+    mode: "stream",
+    reasoningCard: true,
+    toolCards: { group: "per-tool" },
+  },
+  toolLabels: { grep: "Searching code", read: "Reading files" },
+});
+```
+
+The reasoning card is one task card, titled "Thinking", that receives the
+model's reasoning as it streams and completes when the answer text starts.
+`maxChars` (default 1500) caps how much it collects. Slack caps a streamed
+message near 12k characters including cards; when an answer outgrows that,
+the streamed message closes where it stands and the rest continues in a
+new message.
+
+Tool cards default to one card per tool name with a call count in the title
+(`grep ×3`), updated in place as calls finish. `group: "per-call"` shows one
+card per call instead.
+
+Cards are collapsible by default: each call adds one line under the title,
+the same summary the playground shows in a tool's header (the grep pattern,
+the file path, the shell command), and the group expands the same way the
+reasoning card does. `collapsible: false` keeps cards to their titles. On a
+collapsible card, `details(call)` returns the line to add when a call starts
+and `output(result)` the text to add when it finishes.
+
+`toolLabels` renames tools everywhere they appear: the chip, card titles,
+and the default `Running …` line.
+
+### Migrating from `streaming` and `thinkingSteps`
+
+`streaming: false` is `reply: { mode: "post" }`. `streaming: true` is
+`reply: { mode: "stream", toolCards: { group: "per-call", collapsible:
+false } }`, the title-only cards it used to show. `loadingMessages` moves
+to `reply.status.idle`. The old options still work and `agent-sdk validate`
+prints the rewrite for each one.
+
+A channel that set none of these used to stream. It now posts. Set
+`reply: { mode: "stream" }` to keep streaming.
+
 ## Set it up
 
 `slack create` opens the Cursor dashboard wizard. Finish Slack consent

package/docs/hillclimbing.md

@@ -22,7 +22,7 @@ flowchart LR
 
 ## How do I hillclimb an agent with a coding agent?
 
-Have Cursor read [`skills/hillclimb/SKILL.md`](../skills/hillclimb/SKILL.md).
+Have Cursor read [`skills/hillclimb/SKILL.md`](./skills/hillclimb.md).
 
 Tell it:
 
@@ -36,10 +36,10 @@ Other skills cover the edges:
 
 | When you need… | Skill |
 | --- | --- |
-| The measured improvement loop | [`skills/hillclimb/SKILL.md`](../skills/hillclimb/SKILL.md) |
-| An eval that locks a kept win | [`skills/evals/SKILL.md`](../skills/evals/SKILL.md) |
-| Repeatable GitHub webhook inputs | [`skills/github/SKILL.md`](../skills/github/SKILL.md) |
-| A run that misbehaves | [`skills/debug/SKILL.md`](../skills/debug/SKILL.md) |
+| The measured improvement loop | [`skills/hillclimb/SKILL.md`](./skills/hillclimb.md) |
+| An eval that locks a kept win | [`skills/evals/SKILL.md`](./skills/evals.md) |
+| Repeatable GitHub webhook inputs | [`skills/github/SKILL.md`](./skills/github.md) |
+| A run that misbehaves | [`skills/debug/SKILL.md`](./skills/debug.md) |
 
 See [Building agents with agents](./building-with-agents.md) for every framework skill and a good first prompt.
 

package/docs/quickstart.md

@@ -13,7 +13,7 @@ review. Add GitHub event handling so pull requests can trigger reviews.
 
 - **Get started with an agent in Cursor:** follow
   [Scaffold an agent with Cursor](./scaffolding-agents.md) and ask Cursor
-  to read [`skills/create-agent/SKILL.md`](../skills/create-agent/SKILL.md).
+  to read [`skills/create-agent/SKILL.md`](./skills/create-agent.md).
 - **Get started in the CLI:** continue below.
 
 ## Prerequisites

package/docs/reference/cli.md

@@ -594,7 +594,7 @@ commands with an explicit `--json` flag skip this automatic check.
 agent-sdk deploy [--dir <path>] [--slug <slug> | --all] [--team <id>]
                 [--repo <https-url>] [--ref <git-ref>] [--path <agent-path>]
                 [--cursor-events-repo owner/name]...
-                [--allow-domain <domain>]... [--multi-tenant]
+                [--allow-domain <domain>]...
                 [--no-wait] [--json]
 ```
 
@@ -622,12 +622,6 @@ be a lowercase hostname with at least two labels and an alphabetic
 top-level domain. One leading `*.` wildcard is allowed. A deployment
 can declare at most 20 domains.
 
-`--multi-tenant` adds a release to an existing Cursor-managed
-(multi-tenant) product such as `security-reviewer`. It is valid only
-for `architecture: "v2"` and cannot create a new multi-tenant
-application — those stay on the operator seed path. Without the flag,
-HTTP deploy stays single-tenant and a managed slug 409s.
-
 By default, the command polls every three seconds for up to ten minutes
 and succeeds only when the deployment reaches `running`. `--no-wait`
 returns after the deployment request is accepted. Multi-agent deploys

package/docs/reference/connections.md

@@ -54,7 +54,7 @@ agent-sdk mcp oauth inventory --store   # also upsert deployment secrets
 ```
 
 Full walkthrough: [Host MCP OAuth](../guides/mcp-oauth.md). Companion
-skill: [`skills/mcp-auth/SKILL.md`](../../skills/mcp-auth/SKILL.md).
+skill: [`skills/mcp-auth/SKILL.md`](../skills/mcp-auth.md).
 
 Account MCP (`cursorAccount: true`) is the right choice for connectors
 already linked in the Cursor dashboard. Omit `servers` (or pass `"*"`)

package/docs/reference/http-api.md

@@ -53,6 +53,7 @@ and `playgroundUrl` deep-links the session in the playground.
 | `message` | Required user message |
 | `title` | Session title |
 | `dryRun` | Run read tools and stub write tools |
+| `asOf` | ISO-8601 instant with a timezone, frozen at create; the prompt states it, `ctx.now()` returns it, and tools declaring `timeArgs` refuse calls not bounded at or before it. `400` when unusable |
 | `workspaceFiles` | UTF-8 files written into the session workspace |
 | `cloud` | Per-session cloud options merged over the agent defaults |
 

package/docs/reference/tools.md

@@ -147,6 +147,31 @@ export default defineTool({
 `dryRunResult` keeps the result shape stable. Without it, a stubbed write
 returns `"Operation acknowledged."`. Traces mark the result as stubbed.
 
+### Bound time arguments under `asOf`
+
+Declare `timeArgs` with the input properties that carry time bounds. In a
+session created with `asOf`, every named argument must be an absolute
+ISO-8601 instant with a timezone, no later than the session's frozen
+instant. A call that omits one, or supplies a relative or later value, is
+refused with an error telling the model to retry with absolute bounds.
+Sessions without `asOf` ignore the declaration.
+
+```ts
+export default defineTool({
+  description: "Query telemetry between two instants.",
+  inputSchema: z.object({ since: z.string(), until: z.string() }),
+  effect: "read",
+  timeArgs: ["since", "until"],
+  async execute({ since, until }) {
+    return queryTelemetry(since, until);
+  },
+});
+```
+
+Every name in `timeArgs` must exist in the input schema; a session with
+`asOf` refuses to start otherwise, because a misspelled name would silently
+check nothing.
+
 ## Define an agent tool
 
 Set `execution: "agent"` and the tool materializes as a shell script

package/docs/scaffolding-agents.md

@@ -11,7 +11,7 @@ decision.
 ## What does the create-agent skill do?
 
 The bundled
-[`create-agent` skill](../skills/create-agent/SKILL.md) turns your goal
+[`create-agent` skill](./skills/create-agent.md) turns your goal
 into a small working project. Have Cursor read that file and follow it.
 
 Where to find the file depends on how you got the package:
@@ -26,7 +26,7 @@ Where to find the file depends on how you got the package:
 - Installed `@cursor/july` as a dependency? The skill also ships inside
   the package at `node_modules/@cursor/july/skills/create-agent/SKILL.md`.
 - Working from this package's source? The skill is at
-  [`skills/create-agent/SKILL.md`](../skills/create-agent/SKILL.md). Run
+  [`skills/create-agent/SKILL.md`](./skills/create-agent.md). Run
   `agent-sdk install-skills` if you want the same copies in
   `~/.cursor/skills/agentsdk/` (the package postinstall skips the
   source checkout).
@@ -119,7 +119,7 @@ without a Cursor credential. Model turns and evals need
 
 Choose one to three fixed inputs, define what should improve, and name
 what must stay unchanged. Then have Cursor follow
-[`skills/hillclimb/SKILL.md`](../skills/hillclimb/SKILL.md).
+[`skills/hillclimb/SKILL.md`](./skills/hillclimb.md).
 
 The hillclimb skill measures a baseline, changes one lever, runs the same
 inputs again, and adds an eval for each improvement you keep.

package/docs/skills/index.md

@@ -0,0 +1,26 @@
+---
+title: "Coding-agent skills"
+description: "Task guides that ship with the Agent SDK for scaffolding, evals, channels, and hillclimbing."
+---
+
+# Coding-agent skills
+
+Each skill is a procedure a coding agent can follow. Installing
+`@cursor/july` copies them into `~/.cursor/skills/agentsdk/`. This site
+publishes the same files.
+
+See [Building agents with agents](../building-with-agents.md) for when
+to use each one.
+
+| Skill | Use it to |
+| --- | --- |
+| [framework-map](./framework-map.md) | Learn the project layout and runtimes |
+| [create-agent](./create-agent.md) | Scaffold and verify a new agent |
+| [evals](./evals.md) | Write fixtures and regression checks |
+| [ab](./ab.md) | Compare variants on live traffic |
+| [otel](./otel.md) | Export OpenTelemetry traces |
+| [hillclimb](./hillclimb.md) | Improve an agent against fixed inputs |
+| [github](./github.md) | Add GitHub webhooks and replay events |
+| [setup-slack](./setup-slack.md) | Connect an agent to Slack |
+| [mcp-auth](./mcp-auth.md) | Authorize host MCP OAuth |
+| [debug](./debug.md) | Diagnose a local run |

package/docs/troubleshooting.md

@@ -74,7 +74,7 @@ not on `PATH`, use `npx @cursor/july`.
 | Model asks for `mcp_auth` or IDE MCP for a connector it already has | Attached MCP is behind meta-tools. Set `advertiseTools: true` for named tools on local turns, or call it from a host tool via `ctx.host.mcp`. |
 
 See [Host MCP OAuth](./guides/mcp-oauth.md) and
-[`skills/mcp-auth/SKILL.md`](../skills/mcp-auth/SKILL.md).
+[`skills/mcp-auth/SKILL.md`](./skills/mcp-auth.md).
 
 ## What if a secret showed up in a terminal transcript?
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cursor/july",
-  "version": "0.1.97",
+  "version": "0.1.100",
   "description": "(early alpha) Filesystem-first framework for defining Cursor agents as markdown and TypeScript and serving them over channels with the Cursor SDK.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {

package/src/bin/agent-serve.ts

@@ -71,6 +71,7 @@ import {
   isServeRestartWorker,
   runEnterRestartSupervisor,
 } from "../internal/serve-restart.js";
+import { flushSessionRunFatal } from "../internal/session-run-log.js";
 import { clearTerminal, stdoutPalette } from "../internal/terminal-style.js";
 import { cmdUpdate, warnIfOutdated } from "../internal/update-check.js";
 import type { AgentProject, AgentServeHandle } from "../types.js";
@@ -140,7 +141,7 @@ Usage:
   ${CLI} deploy      [--dir <path>] [--slug <slug> | --all] [--team <id>] [--json]
                           [--no-wait] [--repo <url>] [--ref <ref>]
                           [--path <agentPath>] [--cursor-events-repo <owner/name>]...
-                          [--allow-domain <domain>]... [--multi-tenant]
+                          [--allow-domain <domain>]...
   ${CLI} manifest    [--dir <path>] [--json]
   ${CLI} deployments [--team <id>] [--json]
   ${CLI} deployment  <slug> [--team <id>] [--json]
@@ -268,8 +269,6 @@ Commands:
               (flags always win). When --dir is a multi-agent parent,
               pick one interactively, or pass --slug / --all. First deploy
               of a slug prints the alias token exactly once — save it.
-              --multi-tenant adds a release to an existing Cursor-managed
-              product (v2 only); it cannot create a new multi-tenant app.
   deployments List the team's deployments (slug, status, generation, kind).
   deployment  Show one deployment in full (status, lastError, engine info).
   stop        Stop a deployment and wait until it reports stopped.
@@ -432,9 +431,6 @@ Options:
   --allow-domain     deploy: egress domain the engine pod may reach
                      (repeatable; unioned with hosting.egressDomains from the
                      agent manifest). Repo-backed deploys only.
-  --multi-tenant     deploy: add a release to an existing Cursor-managed
-                     (multi-tenant) product. architecture v2 only. Cannot
-                     create a new multi-tenant application.
   --from-argv        secrets set: allow NAME=VALUE on argv (leaks into shell
                      history and agent-captured terminals). Default is names
                      only with a hidden prompt or piped stdin.
@@ -578,6 +574,7 @@ async function main(argv: string[]): Promise<number> {
       all: { type: "boolean", default: false },
       "cursor-events-repo": { type: "string", multiple: true },
       "allow-domain": { type: "string", multiple: true },
+      // Hidden Anysphere-only flag; omitted from help.
       "multi-tenant": { type: "boolean", default: false },
       "from-argv": { type: "boolean", default: false },
       strict: { type: "boolean", default: false },
@@ -1729,7 +1726,9 @@ function installTransportErrorGuards(): void {
     process.stderr.write(
       `[agent-sdk] uncaughtException: ${error.stack ?? error.message}\n`
     );
-    process.exit(1);
+    void flushSessionRunFatal(error).finally(() => {
+      process.exit(1);
+    });
   });
 }
 

package/src/channels/github/defaults.ts

@@ -27,9 +27,18 @@ export function buildDefaultGitHubEvents(
   options: BuildDefaultGitHubEventsOptions = {}
 ): ChannelEventHandlers<GitHubChannelState> {
   const deliverReplies = options.deliverReplies !== false;
+  const requiredSuccessfulTools = new Set(
+    options.progress?.requireSuccessfulTools
+      ?.map((toolName) => toolName.trim())
+      .filter((toolName) => toolName !== "") ?? []
+  );
+  const toolOutcomesBySession = new Map<string, Map<string, boolean>>();
 
   return {
-    async "turn.started"(_event, channel) {
+    async "turn.started"(event, channel) {
+      if (requiredSuccessfulTools.size > 0) {
+        toolOutcomesBySession.set(event.sessionId, new Map());
+      }
       await applyGitHubProgress({
         phase: "pending",
         channel,
@@ -52,9 +61,31 @@ export function buildDefaultGitHubEvents(
       }
     },
 
-    async "turn.completed"(_event, channel) {
+    async "action.result"(event) {
+      if (
+        event.data.parentCallId !== undefined ||
+        !requiredSuccessfulTools.has(event.data.toolName)
+      ) {
+        return;
+      }
+      const outcomes = toolOutcomesBySession.get(event.sessionId) ?? new Map();
+      outcomes.set(
+        event.data.toolName,
+        !event.data.isError && event.data.stubbed !== true
+      );
+      toolOutcomesBySession.set(event.sessionId, outcomes);
+    },
+
+    async "turn.completed"(event, channel) {
+      const outcomes = toolOutcomesBySession.get(event.sessionId);
+      const pipelineSucceeded =
+        requiredSuccessfulTools.size === 0 ||
+        [...requiredSuccessfulTools].every(
+          (toolName) => outcomes?.get(toolName) === true
+        );
+      toolOutcomesBySession.delete(event.sessionId);
       await applyGitHubProgress({
-        phase: "success",
+        phase: pipelineSucceeded ? "success" : "failure",
         channel,
         options,
       });
@@ -82,6 +113,7 @@ export function buildDefaultGitHubEvents(
     },
 
     async "turn.failed"(event, channel) {
+      toolOutcomesBySession.delete(event.sessionId);
       await applyGitHubProgress({
         phase: "failure",
         channel,
@@ -91,6 +123,7 @@ export function buildDefaultGitHubEvents(
     },
 
     async "session.failed"(event, channel) {
+      toolOutcomesBySession.delete(event.sessionId);
       await applyGitHubProgress({
         phase: "failure",
         channel,

package/src/channels/github/github-channel.ts

@@ -13,6 +13,7 @@ import {
 } from "../../internal/continuation-identity.js";
 import { isDeferredChannelSession } from "../../internal/deferred-channel-session.js";
 import { isDevMode } from "../../internal/dev-mode.js";
+import { attachHostedAdmissionAdapter } from "../../internal/hosted-admission-adapter.js";
 import { bindLocalIngressSend } from "../../internal/local-ingress.js";
 import type {
   AgentCloudOptions,
@@ -804,6 +805,22 @@ export function githubChannel(
     ],
   });
   githubChannelOptionsByDefinition.set(definition, channelOptions);
+  attachHostedAdmissionAdapter(definition, {
+    kind: GITHUB_CHANNEL_KIND,
+    prepareArgs: withPropagatingGitHubBackgroundErrors,
+    dispatch: ({ eventType, payload, deliveryId, args }) =>
+      dispatchGitHubWebhook({
+        options: channelOptions,
+        eventName: eventType,
+        payload,
+        deliveryId,
+        args,
+      }),
+    getOutcome: (response) => {
+      const outcome = getGitHubDispatchOutcome(response);
+      return outcome === "skip" || outcome === "task" ? outcome : undefined;
+    },
+  });
   if (cursorCredentials !== undefined) {
     registerGithubCursorAccountRuntime(definition, {
       options,

package/src/channels/github/progress.ts

@@ -35,6 +35,13 @@ export type GitHubBannerProgress = GitHubProgressPhaseCopy;
 export interface GitHubProgressConfig {
   /** When false, skip the eyes reaction on turn.started. Defaults to true. */
   reactions?: boolean;
+  /**
+   * Top-level tools that must each finish successfully before a completed
+   * turn is reported as successful. A missing, stubbed, or ultimately failed
+   * tool reports failure instead. Later successful retries replace an earlier
+   * failure for the same tool.
+   */
+  requireSuccessfulTools?: readonly string[];
   /**
    * Opt-in Checks API run on the PR head. Omit or `false` keeps today's
    * behavior (no check from default events). With `cursorAccount`, enabling

package/src/channels/origin/origin-channel.ts

@@ -10,7 +10,9 @@ import {
   continuationSource,
   normalizeIdentity,
 } from "../../internal/continuation-identity.js";
+import { isDeferredChannelSession } from "../../internal/deferred-channel-session.js";
 import { isDevMode } from "../../internal/dev-mode.js";
+import { attachHostedAdmissionAdapter } from "../../internal/hosted-admission-adapter.js";
 import { bindLocalIngressSend } from "../../internal/local-ingress.js";
 import type {
   AgentCloudOptions,
@@ -441,11 +443,35 @@ function enrichEventContext(input: {
   };
 }
 
+export type OriginDispatchOutcome = "skip" | "send" | "task";
+
+const dispatchOutcomeByResponse = new WeakMap<
+  Response,
+  OriginDispatchOutcome
+>();
+
+function withDispatchOutcome(
+  response: Response,
+  outcome: OriginDispatchOutcome
+): Response {
+  dispatchOutcomeByResponse.set(response, outcome);
+  return response;
+}
+
+export function getOriginDispatchOutcome(
+  response: Response
+): OriginDispatchOutcome | undefined {
+  return dispatchOutcomeByResponse.get(response);
+}
+
 function skipped(
   reason: string,
   extra: Record<string, unknown> = {}
 ): Response {
-  return Response.json({ ok: true, skipped: true, reason, ...extra });
+  return withDispatchOutcome(
+    Response.json({ ok: true, skipped: true, reason, ...extra }),
+    "skip"
+  );
 }
 
 function acknowledgeTask(
@@ -462,9 +488,12 @@ function acknowledgeTask(
       });
     })
   );
-  return Response.json(
-    { ok: true, dispatched: true, mode: "task", ...extra },
-    { status: 202 }
+  return withDispatchOutcome(
+    Response.json(
+      { ok: true, dispatched: true, mode: "task", ...extra },
+      { status: 202 }
+    ),
+    "task"
   );
 }
 
@@ -485,12 +514,26 @@ async function startTurn(input: {
     title: input.dispatch.title ?? defaultOriginTitle(input.ctx),
     ...(input.cloud === undefined ? {} : { cloud: input.cloud }),
   });
-  return Response.json({
-    ok: true,
-    sessionId: session.id,
-    isNew: session.isNew,
-    continuationToken: session.continuationToken,
-  });
+  if (isDeferredChannelSession(session)) {
+    // Hosted admission captured the send; the control plane allocates the
+    // session after acknowledgement, so there is nothing to report yet.
+    return withDispatchOutcome(
+      Response.json(
+        { ok: true, dispatched: true, mode: "turn" },
+        { status: 202 }
+      ),
+      "send"
+    );
+  }
+  return withDispatchOutcome(
+    Response.json({
+      ok: true,
+      sessionId: session.id,
+      isNew: session.isNew,
+      continuationToken: session.continuationToken,
+    }),
+    "send"
+  );
 }
 
 async function resolveCloudOptions(
@@ -812,6 +855,27 @@ export function originChannel(
     ],
   });
   originChannelOptionsByDefinition.set(definition, channelOptions);
+  attachHostedAdmissionAdapter(definition, {
+    kind: ORIGIN_CHANNEL_KIND,
+    dispatch: async ({ payload, args }) => {
+      const envelope = parseOriginWebhookEnvelope(payload);
+      if (envelope === null) {
+        return Response.json(
+          { ok: false, error: "invalid_origin_payload" },
+          { status: 400 }
+        );
+      }
+      return dispatchOriginWebhook({
+        options: channelOptions,
+        envelope,
+        args,
+      });
+    },
+    getOutcome: (response) => {
+      const outcome = getOriginDispatchOutcome(response);
+      return outcome === "skip" || outcome === "task" ? outcome : undefined;
+    },
+  });
   if (usesCursorAccount) {
     registerOriginCursorAccountRuntime(definition, {
       options: channelOptions,