@cursor/july 0.1.99 → 0.1.101

package/dist/internal/distribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../src/internal/distribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,sEAAsE;AACtE,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,WAAW,cAAc,CAAC;AACvC,eAAO,MAAM,UAAU,EAAE,MAA2B,CAAC;AACrD,eAAO,MAAM,gBAAgB,EAAE,MAAiC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAA+B,CAAC;AAc/D;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,MAAM,CAOvC;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,cAAc,IAAI,cAAc,CAM/C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAMrE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAC/C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CA2BzC,CAAC"}
+{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../src/internal/distribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,sEAAsE;AACtE,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,WAAW,cAAc,CAAC;AACvC,eAAO,MAAM,UAAU,EAAE,MAA2B,CAAC;AACrD,eAAO,MAAM,gBAAgB,EAAE,MAAiC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAA+B,CAAC;AAc/D;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAGhD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,MAAM,CAOvC;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,cAAc,IAAI,cAAc,CAM/C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAMrE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAC/C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAgCzC,CAAC"}

package/dist/internal/distribution.js

@@ -103,6 +103,11 @@ export const AUTHORING_ENTRY_FILES = [
     ["channels/origin", "channels/origin/index.js"],
     ["channels/deployments", "channels/deployments/index.js"],
     ["skills", "skills.js"],
+    ["extensions", "extensions.js"],
+    [
+        "extensions/cursor-cloud-agents",
+        "extensions/cursor-cloud-agents/extension.js",
+    ],
     ["schedules", "schedules.js"],
     ["reminders", "reminders.js"],
     ["connections", "connections.js"],

package/dist/internal/framework-file-storage.d.ts

@@ -15,9 +15,9 @@
  * {@link storageKeys} scheme was designed for exactly this: keys are a
  * stable versioned contract that sinks may route on, so
  * {@link composeFrameworkStorage} splits one {@link StorageConfig} by key
- * kind — `session` / `session-events` / `session-runs` / `continuation`
- * go to the framework file store (file-shaped; the store accepts values
- * up to 64 MiB per
+ * kind — `session` / `session-events` / `session-runs` / `logs` /
+ * `continuation` go to the framework file store (file-shaped; the store
+ * accepts values up to 64 MiB per
  * object without chunking, versus the KV proxy's 1 MiB row cap), while
  * author `kv`, eval runs, A/B samples, and conditional writes stay on the
  * control-plane KV proxy (the dashboard reads them there, and CAS needs a
@@ -42,14 +42,21 @@ export declare function fileSinkStorageCore(sink: FileSink): FileSinkStorageCore
  * Split one storage core by key kind: framework session state to `files`,
  * everything else to `kv`. Spread over the KV backend when building the
  * full definition so its `evals` / `abs` groups (and the cursor-hosted
- * marker) ride along untouched. A KV `cas` group must not be spread as-is:
- * conditional writes run on a KV database row, so one over a `session/` or
- * `continuation/` key would read and write a different store than the
- * routed plain core — silent split-brain. Nothing in the package CASes
- * those kinds today.
+ * marker) ride along untouched; wrap the KV `cas` group with
+ * {@link frameworkGuardedCas} rather than spreading it as-is.
  */
 export declare function composeFrameworkStorage(input: {
     kv: FileSinkStorageCore;
     files: FileSinkStorageCore;
 }): FileSinkStorageCore & Pick<StorageConfig, "listNewest">;
+/**
+ * The KV backend's conditional writes, refusing framework-file keys.
+ *
+ * CAS runs on the KV proxy (a database row version); the plain core routes
+ * framework session state to the file store. A future coordination path
+ * that CASes a `session/` or `continuation/` key would otherwise read and
+ * write a different store than the plain path — silent split-brain. Fail
+ * loudly instead; nothing in the package CASes those kinds today.
+ */
+export declare function frameworkGuardedCas(cas: NonNullable<StorageConfig["cas"]>): NonNullable<StorageConfig["cas"]>;
 //# sourceMappingURL=framework-file-storage.d.ts.map

package/dist/internal/framework-file-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"framework-file-storage.d.ts","sourceRoot":"","sources":["../../src/internal/framework-file-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,eAAe,CAAC;AAgBjE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAavD;AAED,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CACxC,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC,CACvD,CAAC;AA0BF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,GAAG,mBAAmB,CAuDvE;AAcD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,EAAE,EAAE,mBAAmB,CAAC;IACxB,KAAK,EAAE,mBAAmB,CAAC;CAC5B,GAAG,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAe1D"}
+{"version":3,"file":"framework-file-storage.d.ts","sourceRoot":"","sources":["../../src/internal/framework-file-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,eAAe,CAAC;AAiBjE;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAavD;AAED,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CACxC,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC,CACvD,CAAC;AA0BF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,GAAG,mBAAmB,CAuDvE;AA+CD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,EAAE,EAAE,mBAAmB,CAAC;IACxB,KAAK,EAAE,mBAAmB,CAAC;CAC5B,GAAG,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAe1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,GACrC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CA0BnC"}

package/dist/internal/framework-file-storage.js

@@ -15,9 +15,9 @@
  * {@link storageKeys} scheme was designed for exactly this: keys are a
  * stable versioned contract that sinks may route on, so
  * {@link composeFrameworkStorage} splits one {@link StorageConfig} by key
- * kind — `session` / `session-events` / `session-runs` / `continuation`
- * go to the framework file store (file-shaped; the store accepts values
- * up to 64 MiB per
+ * kind — `session` / `session-events` / `session-runs` / `logs` /
+ * `continuation` go to the framework file store (file-shaped; the store
+ * accepts values up to 64 MiB per
  * object without chunking, versus the KV proxy's 1 MiB row cap), while
  * author `kv`, eval runs, A/B samples, and conditional writes stay on the
  * control-plane KV proxy (the dashboard reads them there, and CAS needs a
@@ -46,6 +46,7 @@ const FRAMEWORK_FILE_KINDS = new Set([
     "session",
     "session-events",
     "session-runs",
+    "logs",
     "continuation",
 ]);
 /**
@@ -99,7 +100,7 @@ export function fileSinkStorageCore(sink) {
                     // believe an impossible write landed.
                     throw new Error(`framework file storage: key "${key}" has a path segment the store cannot represent`);
                 }
-                yield sink.put(key, new TextEncoder().encode(JSON.stringify(value)));
+                yield sink.put(key, encodeDocument(key, value));
             });
         },
         get(key) {
@@ -146,9 +147,37 @@ export function fileSinkStorageCore(sink) {
         },
     };
 }
+function frameworkFileKind(key) {
+    if (!key.startsWith(`${STORAGE_KEY_ROOT}/`)) {
+        return undefined;
+    }
+    const rest = key.slice(STORAGE_KEY_ROOT.length + 1);
+    const agentEnd = rest.indexOf("/");
+    if (agentEnd === -1) {
+        return undefined;
+    }
+    const afterAgent = rest.slice(agentEnd + 1);
+    const kindEnd = afterAgent.indexOf("/");
+    return kindEnd === -1 ? afterAgent : afterAgent.slice(0, kindEnd);
+}
+function isLogKey(key) {
+    return frameworkFileKind(key) === "logs";
+}
+function encodeDocument(key, value) {
+    // start.log is raw UTF-8, not a JSON document. Stringify would quote
+    // every line and store a JSON string literal instead of the tee.
+    if (isLogKey(key)) {
+        return new TextEncoder().encode(typeof value === "string" ? value : JSON.stringify(value));
+    }
+    return new TextEncoder().encode(JSON.stringify(value));
+}
 function decodeDocument(key, bytes) {
+    const text = new TextDecoder().decode(bytes);
+    if (isLogKey(key)) {
+        return text;
+    }
     try {
-        return JSON.parse(new TextDecoder().decode(bytes));
+        return JSON.parse(text);
     }
     catch (error) {
         throw new Error(`framework file storage: stored document at "${key}" is not JSON (${error instanceof Error ? error.message : String(error)})`);
@@ -158,11 +187,8 @@ function decodeDocument(key, bytes) {
  * Split one storage core by key kind: framework session state to `files`,
  * everything else to `kv`. Spread over the KV backend when building the
  * full definition so its `evals` / `abs` groups (and the cursor-hosted
- * marker) ride along untouched. A KV `cas` group must not be spread as-is:
- * conditional writes run on a KV database row, so one over a `session/` or
- * `continuation/` key would read and write a different store than the
- * routed plain core — silent split-brain. Nothing in the package CASes
- * those kinds today.
+ * marker) ride along untouched; wrap the KV `cas` group with
+ * {@link frameworkGuardedCas} rather than spreading it as-is.
  */
 export function composeFrameworkStorage(input) {
     const route = (key) => isFrameworkFileKey(key) ? input.files : input.kv;
@@ -179,3 +205,37 @@ export function composeFrameworkStorage(input) {
         listNewest: undefined,
     };
 }
+/**
+ * The KV backend's conditional writes, refusing framework-file keys.
+ *
+ * CAS runs on the KV proxy (a database row version); the plain core routes
+ * framework session state to the file store. A future coordination path
+ * that CASes a `session/` or `continuation/` key would otherwise read and
+ * write a different store than the plain path — silent split-brain. Fail
+ * loudly instead; nothing in the package CASes those kinds today.
+ */
+export function frameworkGuardedCas(cas) {
+    const refuse = (key) => {
+        if (isFrameworkFileKey(key)) {
+            throw new Error(`framework file storage: conditional writes are KV-only, but "${key}" routes to the framework file store`);
+        }
+    };
+    return {
+        getWithVersion: (key, ctx) => {
+            refuse(key);
+            return cas.getWithVersion(key, ctx);
+        },
+        putIfAbsent: (key, value, ctx) => {
+            refuse(key);
+            return cas.putIfAbsent(key, value, ctx);
+        },
+        putIfVersion: (key, value, expectedVersion, ctx) => {
+            refuse(key);
+            return cas.putIfVersion(key, value, expectedVersion, ctx);
+        },
+        listKeys: (prefix, ctx) => {
+            refuse(prefix);
+            return cas.listKeys(prefix, ctx);
+        },
+    };
+}

package/dist/internal/framework-storage-selection.d.ts

@@ -18,18 +18,18 @@
  * - **Cursor-managed hosting** (the deployment-generation environment
  *   variable is set, same signal that registers `GET /v1/manifest`):
  *   the deployment's **framework-level file store**
- *   (`AGENT_SERVE_FRAMEWORK_STORE_SOURCE_ID`) holds session records, event
- *   transcripts, and the continuation index — file-shaped state on file
- *   storage, apart from the author-facing user store. The control-plane KV
- *   proxy is *not* used: it authorizes by mapping a pod service account to
- *   a v1 deployment row, which no v2 deployment has, so every call 403s and
- *   fails the delivery that read it. The KV half is inert until the proxy
- *   resolves v2 deployments (see null-kv-storage.ts). Without a framework
- *   store (a deploy predating framework-store provisioning) there is
- *   nothing left to mirror to, so the state root is again the only copy.
- *   The API key resolves through the full credential chain on every call
- *   because hosted freeze snapshots listen unsigned and the binder drops
- *   the key file after restore.
+ *   (`AGENT_SERVE_FRAMEWORK_STORE_SOURCE_ID`, bound at task time) holds
+ *   session records, event transcripts, and the continuation index —
+ *   file-shaped state on file storage, apart from the author-facing user
+ *   store. Author `host.kv`, eval runs, A/B samples, and conditional writes
+ *   ride the AgentSDK v2 KV proxy (cursor-hosted-v2.ts), which resolves the
+ *   pod service account to the factorydb deployment row (the v1 Bugbot
+ *   proxy cannot resolve v2 pods at all). Framework session state never
+ *   routes to the KV proxy — the composite splits by key kind — so
+ *   transcripts stay off the author-reachable KV namespace. The API key
+ *   resolves through the full credential chain on every call because hosted
+ *   freeze snapshots listen unsigned and the binder drops the key file
+ *   after restore.
  * - **Self-hosted**: no mirror. `--state-root` is the durable copy, which
  *   is correct when the operator owns the disk.
  *

package/dist/internal/framework-storage-selection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"framework-storage-selection.d.ts","sourceRoot":"","sources":["../../src/internal/framework-storage-selection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAMH,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAWrD,MAAM,WAAW,8BAA8B;IAC7C,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACjD,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtD,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACnD;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,8BAA8B,GACpC,iBAAiB,GAAG,SAAS,CAgE/B"}
+{"version":3,"file":"framework-storage-selection.d.ts","sourceRoot":"","sources":["../../src/internal/framework-storage-selection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAMH,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,MAAM,WAAW,8BAA8B;IAC7C,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACjD,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtD,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACnD;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,8BAA8B,GACpC,iBAAiB,GAAG,SAAS,CAqD/B"}

package/dist/internal/framework-storage-selection.js

@@ -18,18 +18,18 @@
  * - **Cursor-managed hosting** (the deployment-generation environment
  *   variable is set, same signal that registers `GET /v1/manifest`):
  *   the deployment's **framework-level file store**
- *   (`AGENT_SERVE_FRAMEWORK_STORE_SOURCE_ID`) holds session records, event
- *   transcripts, and the continuation index — file-shaped state on file
- *   storage, apart from the author-facing user store. The control-plane KV
- *   proxy is *not* used: it authorizes by mapping a pod service account to
- *   a v1 deployment row, which no v2 deployment has, so every call 403s and
- *   fails the delivery that read it. The KV half is inert until the proxy
- *   resolves v2 deployments (see null-kv-storage.ts). Without a framework
- *   store (a deploy predating framework-store provisioning) there is
- *   nothing left to mirror to, so the state root is again the only copy.
- *   The API key resolves through the full credential chain on every call
- *   because hosted freeze snapshots listen unsigned and the binder drops
- *   the key file after restore.
+ *   (`AGENT_SERVE_FRAMEWORK_STORE_SOURCE_ID`, bound at task time) holds
+ *   session records, event transcripts, and the continuation index —
+ *   file-shaped state on file storage, apart from the author-facing user
+ *   store. Author `host.kv`, eval runs, A/B samples, and conditional writes
+ *   ride the AgentSDK v2 KV proxy (cursor-hosted-v2.ts), which resolves the
+ *   pod service account to the factorydb deployment row (the v1 Bugbot
+ *   proxy cannot resolve v2 pods at all). Framework session state never
+ *   routes to the KV proxy — the composite splits by key kind — so
+ *   transcripts stay off the author-reachable KV namespace. The API key
+ *   resolves through the full credential chain on every call because hosted
+ *   freeze snapshots listen unsigned and the binder drops the key file
+ *   after restore.
  * - **Self-hosted**: no mirror. `--state-root` is the durable copy, which
  *   is correct when the operator owns the disk.
  *
@@ -43,12 +43,10 @@
  */
 import { cursorFrameworkStoreSourceId, cursorHostedFiles, } from "../files-backends/cursor-hosted.js";
 import { defineStorage } from "../storage.js";
-import { CURSOR_HOSTED_STORAGE } from "../storage-backends/cursor-hosted.js";
+import { cursorHostedStorageV2 } from "../storage-backends/cursor-hosted-v2.js";
 import { resolveApiKeySync } from "./cursor/credentials.js";
 import { AGENT_SERVE_GENERATION_ENV_VAR } from "./cursor-relay-core.js";
-import { composeFrameworkStorage, fileSinkStorageCore, } from "./framework-file-storage.js";
-import { nullKvStorage } from "./null-kv-storage.js";
-const cursorHostedMarker = { [CURSOR_HOSTED_STORAGE]: true };
+import { composeFrameworkStorage, fileSinkStorageCore, frameworkGuardedCas, } from "./framework-file-storage.js";
 /**
  * Pick the backend for framework session state.
  *
@@ -78,30 +76,26 @@ export function selectFrameworkStorageDefinition(input) {
     // comes up). Follow-ups restore lazily by continuation or session id;
     // GET /v1/sessions lists from the sink either way.
     const policy = { restore: "off" };
-    const frameworkStoreId = cursorFrameworkStoreSourceId(env);
-    if (frameworkStoreId === undefined) {
-        // Nothing to mirror to: the KV proxy rejects v2 service accounts, so a
-        // definition over it would fail every delivery that reads it. The state
-        // root is the durable copy, as when self-hosted.
-        return undefined;
-    }
-    // Full chain (env → key file → stored login): frozen engines listen
-    // unsigned and bind CURSOR_API_KEY_FILE at task time, after this
+    const envSnapshot = env;
+    // Full chain (env → bind file → stored login): frozen engines listen
+    // unsigned and bind store ids + CURSOR_API_KEY at task time, after this
     // definition is constructed.
     const resolveApiKey = () => { var _a; return (_a = resolveApiKeySync()) === null || _a === void 0 ? void 0 : _a.apiKey; };
-    // Framework session state on the framework-level file store, which
-    // authorizes by store source id and so works for v2. Everything the KV
-    // proxy used to serve — author kv, eval runs, A/B samples, conditional
-    // writes — is inert; `defineStorage` derives the eval/A/B tables over the
-    // core, which means that bookkeeping reads back empty rather than 403ing.
-    //
-    // Restoring `cursorHostedStorage()` here once the proxy resolves v2
-    // deployments also means restoring the guard its `cas` group needs: a
-    // conditional write over a `session/` or `continuation/` key would run on
-    // the KV database while the plain core routes that key to the file store.
-    const kv = nullKvStorage();
-    return defineStorage(Object.assign(Object.assign(Object.assign({ name: "cursor-hosted (framework files)", policy }, cursorHostedMarker), kv), composeFrameworkStorage({
+    // v2 pods carry a factorydb-bound service account, which the v1 Bugbot
+    // storage proxy cannot resolve; author KV, CAS coordination, and the
+    // eval/A-B tables speak the AgentSDK v2 KV proxy instead. It also carries
+    // the cursor-hosted marker, so GET /v1/sessions prefers the durable list
+    // (session records are on the framework store, which the composed core
+    // lists).
+    const kv = cursorHostedStorageV2({ resolveApiKey });
+    return defineStorage(Object.assign(Object.assign(Object.assign({ name: "cursor-hosted (framework files)", policy }, kv), composeFrameworkStorage({
         kv,
-        files: fileSinkStorageCore(cursorHostedFiles({ storeSourceId: frameworkStoreId, resolveApiKey })),
-    })));
+        files: fileSinkStorageCore(cursorHostedFiles({
+            resolveStoreSourceId: () => cursorFrameworkStoreSourceId(envSnapshot),
+            resolveApiKey,
+        })),
+    })), { 
+        // CAS stays on the KV proxy but must refuse framework-file keys, or a
+        // future coordination path would split-brain against the plain core.
+        cas: frameworkGuardedCas(kv.cas) }));
 }

package/dist/internal/hosted-delivery.d.ts

@@ -2,7 +2,7 @@ import type { ChannelHandlerArgs, SendMessageOptions } from "../types.js";
 import { type HostedAdmission } from "./hosted-delivery-protocol.js";
 import type { LogRingEntry } from "./log-ring.js";
 import type { Router } from "./router.js";
-import { type SessionRunExecutionWrite } from "./session-run-log.js";
+import type { SessionRunExecutionWrite } from "./session-run-log.js";
 type DispatchInput = {
     delivery: HostedAdmission;
     definition: object;
@@ -57,6 +57,8 @@ export declare function registerHostedDeliveryRoute(input: {
      * store; this path still awaits so a parked pod cannot shed the write.
      */
     persistSessionRun?(write: SessionRunExecutionWrite): Promise<void>;
+    /** Snapshot the local `start.log` tee onto `logs/{ses_…}`. */
+    flushStartLog?(startLogId: string): Promise<void>;
     /** Snapshot of the process log ring at persist time. */
     snapshotLogs?(): LogRingEntry[];
 }): void;

package/dist/internal/hosted-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAarB,OAAO,EAKL,KAAK,eAAe,EAGrB,MAAM,+BAA+B,CAAC;AAUvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,KAAK,wBAAwB,EAG9B,MAAM,sBAAsB,CAAC;AAE9B,KAAK,aAAa,GAAG;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AA6DF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AA2GD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GACvB,kBAAkB,CAAC;IACtB;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,wDAAwD;IACxD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;CACjC,GAAG,IAAI,CAyQP"}
+{"version":3,"file":"hosted-delivery.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-delivery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAcrB,OAAO,EAKL,KAAK,eAAe,EAGrB,MAAM,+BAA+B,CAAC;AAYvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,KAAK,aAAa,GAAG;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AA6DF;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AA2GD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GACvB,kBAAkB,CAAC;IACtB;;;;;OAKG;IACH,sBAAsB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,8DAA8D;IAC9D,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,wDAAwD;IACxD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;CACjC,GAAG,IAAI,CA+OP"}

package/dist/internal/hosted-delivery.js

@@ -8,14 +8,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { randomBytes } from "node:crypto";
+import { refreshBoundDeploymentSecrets } from "./cursor/hosted-deployment-secrets.js";
 import { createDeferredChannelSession, DeferredChannelSessionError, } from "./deferred-channel-session.js";
 import { getHostedAdmissionAdapter, } from "./hosted-admission-adapter.js";
 import { HostedAdmissionLocalSendError, runDuringHostedAdmission, } from "./hosted-admission-context.js";
 import { HOSTED_ADMISSION_PATH, HOSTED_DELIVERY_HEADER, HOSTED_DELIVERY_PROTOCOL_VERSION, HOSTED_EXECUTION_PATH, parseHostedAdmission, parseHostedExecution, } from "./hosted-delivery-protocol.js";
-import { abortReasonFromTurnStatus, HOSTED_EXECUTION_DIAG_RUNNING_STATUS, hostedErrorStackSnippet, hostedExecutionDiagId, writeHostedExecutionDiag, } from "./hosted-execution-diag.js";
+import { abortReasonFromTurnStatus, HOSTED_EXECUTION_DIAG_RUNNING_STATUS, hostedExecutionDiagId, } from "./hosted-execution-diag.js";
+import { flushHostedExecutionRecord, } from "./hosted-execution-flush.js";
 import { recordHostedManagedAutomation } from "./hosted-managed-automation.js";
 import { errorResponse, readJsonObject } from "./http-channel.js";
-import { serializeSessionRunError, snapshotSessionRunLogs, } from "./session-run-log.js";
 /**
  * A second `send()` in one delivery is a deterministic authored bug — the
  * wire protocol carries exactly one pending send per delivery — so it must
@@ -198,6 +199,7 @@ export function registerHostedDeliveryRoute(input) {
         pattern: `${input.base}${HOSTED_ADMISSION_PATH}`,
         auth: [auth],
         handler: (request) => __awaiter(this, void 0, void 0, function* () {
+            refreshBoundDeploymentSecrets();
             const startedAt = performance.now();
             const finish = (response) => withServerTiming(response, performance.now() - startedAt);
             const delivery = parseHostedAdmission(yield readJsonObject(request));
@@ -237,6 +239,7 @@ export function registerHostedDeliveryRoute(input) {
         auth: [auth],
         handler: (request) => __awaiter(this, void 0, void 0, function* () {
             var _a;
+            refreshBoundDeploymentSecrets();
             const startedAt = performance.now();
             const finish = (response) => withServerTiming(response, performance.now() - startedAt);
             const execution = parseHostedExecution(yield readJsonObject(request));
@@ -257,37 +260,21 @@ export function registerHostedDeliveryRoute(input) {
                 var _a;
                 const startedAt = performance.now();
                 const executionId = hostedExecutionDiagId(execution.admissionToken);
+                const sinks = Object.assign(Object.assign(Object.assign(Object.assign({}, (input.stateRoot === undefined
+                    ? {}
+                    : { stateRoot: input.stateRoot })), (input.persistSessionRun === undefined
+                    ? {}
+                    : { persistSessionRun: input.persistSessionRun })), (input.flushStartLog === undefined
+                    ? {}
+                    : { flushStartLog: input.flushStartLog })), (input.snapshotLogs === undefined
+                    ? {}
+                    : { snapshotLogs: input.snapshotLogs }));
                 const writeDiag = (fields) => __awaiter(this, void 0, void 0, function* () {
-                    var _a;
-                    var _b;
-                    const durationMs = Math.max(0, Math.round(performance.now() - startedAt));
-                    const message = fields.message === undefined
-                        ? undefined
-                        : boundedMessage(fields.message);
-                    const stack = fields.error === undefined
-                        ? undefined
-                        : hostedErrorStackSnippet(fields.error);
-                    if (input.stateRoot !== undefined) {
-                        yield writeHostedExecutionDiag(input.stateRoot, Object.assign(Object.assign(Object.assign(Object.assign({ v: 1, executionId, writtenAt: new Date().toISOString(), sessionPublicId: execution.sessionPublicId, sessionId: fields.sessionId, turnStatus: fields.turnStatus, durationMs }, (message === undefined ? {} : { message })), (stack === undefined || stack.length === 0 ? {} : { stack })), (message !== undefined && /abort/i.test(message)
-                            ? { signalAborted: true }
-                            : {})), (fields.abortReason === undefined
-                            ? {}
-                            : { abortReason: fields.abortReason })));
-                    }
-                    if (input.persistSessionRun === undefined) {
-                        return;
-                    }
-                    const error = fields.error === undefined
-                        ? undefined
-                        : serializeSessionRunError(fields.error);
-                    try {
-                        yield input.persistSessionRun(Object.assign(Object.assign(Object.assign(Object.assign({ executionId, writtenAt: new Date().toISOString(), sessionPublicId: execution.sessionPublicId, sessionId: fields.sessionId, turnStatus: fields.turnStatus, durationMs }, (fields.abortReason === undefined
-                            ? {}
-                            : { abortReason: fields.abortReason })), (message === undefined ? {} : { message })), (error === undefined ? {} : { error })), { logs: snapshotSessionRunLogs((_b = (_a = input.snapshotLogs) === null || _a === void 0 ? void 0 : _a.call(input)) !== null && _b !== void 0 ? _b : []) }));
-                    }
-                    catch (_c) {
-                        // Soft-fail: a store outage must not change the HTTP reply.
-                    }
+                    yield flushHostedExecutionRecord(sinks, Object.assign(Object.assign(Object.assign({ executionId, sessionPublicId: execution.sessionPublicId, sessionId: fields.sessionId, turnStatus: fields.turnStatus, durationMs: Math.max(0, Math.round(performance.now() - startedAt)) }, (fields.message === undefined
+                        ? {}
+                        : { message: fields.message })), (fields.abortReason === undefined
+                        ? {}
+                        : { abortReason: fields.abortReason })), (fields.error === undefined ? {} : { error: fields.error })));
                 });
                 // Claim the file before the turn runs. The host reads it after its
                 // own POST returns, which for a 9-minute timeout is while this turn

package/dist/internal/hosted-execution-diag.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Guest-local TAS diag (`hosted-execution.json`). Flushed with the durable
+ * session-run document and the `start.log` tee by
+ * `hosted-execution-flush.ts`.
+ */
 export declare const HOSTED_EXECUTION_DIAG_VERSION = 1;
 /** Cap so a runaway message cannot fill the guest disk or the host log. */
 export declare const HOSTED_EXECUTION_DIAG_MAX_BYTES = 4096;

package/dist/internal/hosted-execution-diag.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-execution-diag.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-execution-diag.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C,2EAA2E;AAC3E,eAAO,MAAM,+BAA+B,OAAO,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,MAAM,MAAM,8BAA8B,GACtC,cAAc,GACd,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,CAAC,EAAE,OAAO,6BAA6B,CAAC;IACxC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,8BAA8B,CAAC;CAC9C,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,oCAAoC,YAAY,CAAC;AAmC9D,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyB9D;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,8BAA8B,GAAG,SAAS,CAU5C;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CA2EjC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAmBf"}
+{"version":3,"file":"hosted-execution-diag.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-execution-diag.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C,2EAA2E;AAC3E,eAAO,MAAM,+BAA+B,OAAO,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,MAAM,MAAM,8BAA8B,GACtC,cAAc,GACd,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,CAAC,EAAE,OAAO,6BAA6B,CAAC;IACxC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,8BAA8B,CAAC;CAC9C,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,oCAAoC,YAAY,CAAC;AAmC9D,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyB9D;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,8BAA8B,GAAG,SAAS,CAU5C;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CA2EjC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist/internal/hosted-execution-diag.js

@@ -1,3 +1,8 @@
+/**
+ * Guest-local TAS diag (`hosted-execution.json`). Flushed with the durable
+ * session-run document and the `start.log` tee by
+ * `hosted-execution-flush.ts`.
+ */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {

package/dist/internal/hosted-execution-flush.d.ts

@@ -0,0 +1,46 @@
+/**
+ * One hosted-execution flush. Two artifacts, same moments:
+ *
+ * - Guest-local `hosted-execution.json` — TAS failed-execute diag.
+ * - Durable `session-runs/{ses_…}` plus the `start.log` tee — dashboard.
+ *
+ * Claim (`running`) → terminal → process-death. Process-death upgrades the
+ * durable document and re-snapshots the tee; the local json stays `running`
+ * so TAS does not treat a previous delivery's terminal record as this one.
+ */
+import { type HostedExecutionDiagAbortReason } from "./hosted-execution-diag.js";
+import type { LogRingEntry } from "./log-ring.js";
+import { type SessionRunAbortReason, type SessionRunExecutionWrite } from "./session-run-log.js";
+export type HostedExecutionFlushSinks = {
+    /** Serve `--state-root`. Omit to skip the guest-local TAS diag. */
+    stateRoot?: string;
+    persistSessionRun?(write: SessionRunExecutionWrite): Promise<void>;
+    flushStartLog?(startLogId: string): Promise<void>;
+    snapshotLogs?(): LogRingEntry[];
+};
+export type HostedExecutionFlushFields = {
+    executionId: string;
+    sessionPublicId: string;
+    sessionId: string;
+    turnStatus: string;
+    durationMs: number;
+    message?: string;
+    abortReason?: HostedExecutionDiagAbortReason;
+    error?: unknown;
+};
+/**
+ * Write the local TAS diag and the durable session-run + tee together.
+ * Soft-fail per sink so a store outage does not change hosted HTTP.
+ */
+export declare function flushHostedExecutionRecord(sinks: HostedExecutionFlushSinks, fields: HostedExecutionFlushFields): Promise<void>;
+/**
+ * Durable-only crash flush. Leaves `hosted-execution.json` at `running`.
+ */
+export declare function flushHostedExecutionProcessDeath(args: {
+    flushProcessDeath: (reason: Extract<SessionRunAbortReason, "process_exit" | "uncaught_exception" | "unhandled_rejection">, error?: unknown) => Promise<void>;
+    flushStartLog?: (startLogId: string) => Promise<void>;
+    startLogId?: string;
+    reason: Extract<SessionRunAbortReason, "process_exit" | "uncaught_exception" | "unhandled_rejection">;
+    error?: unknown;
+}): Promise<void>;
+//# sourceMappingURL=hosted-execution-flush.d.ts.map

package/dist/internal/hosted-execution-flush.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-execution-flush.d.ts","sourceRoot":"","sources":["../../src/internal/hosted-execution-flush.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,8BAA8B,EAGpC,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAG9B,MAAM,sBAAsB,CAAC;AAU9B,MAAM,MAAM,yBAAyB,GAAG;IACtC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,8BAA8B,CAAC;IAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,yBAAyB,EAChC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,IAAI,CAAC,CA0Df;AAED;;GAEG;AACH,wBAAsB,gCAAgC,CAAC,IAAI,EAAE;IAC3D,iBAAiB,EAAE,CACjB,MAAM,EAAE,OAAO,CACb,qBAAqB,EACrB,cAAc,GAAG,oBAAoB,GAAG,qBAAqB,CAC9D,EACD,KAAK,CAAC,EAAE,OAAO,KACZ,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CACb,qBAAqB,EACrB,cAAc,GAAG,oBAAoB,GAAG,qBAAqB,CAC9D,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB"}

package/dist/internal/hosted-execution-flush.js

@@ -0,0 +1,81 @@
+/**
+ * One hosted-execution flush. Two artifacts, same moments:
+ *
+ * - Guest-local `hosted-execution.json` — TAS failed-execute diag.
+ * - Durable `session-runs/{ses_…}` plus the `start.log` tee — dashboard.
+ *
+ * Claim (`running`) → terminal → process-death. Process-death upgrades the
+ * durable document and re-snapshots the tee; the local json stays `running`
+ * so TAS does not treat a previous delivery's terminal record as this one.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { hostedErrorStackSnippet, writeHostedExecutionDiag, } from "./hosted-execution-diag.js";
+import { serializeSessionRunError, snapshotSessionRunLogs, } from "./session-run-log.js";
+const MAX_ERROR_MESSAGE_LENGTH = 1024;
+function boundedMessage(text) {
+    return text.length > MAX_ERROR_MESSAGE_LENGTH
+        ? `${text.slice(0, MAX_ERROR_MESSAGE_LENGTH)}…`
+        : text;
+}
+/**
+ * Write the local TAS diag and the durable session-run + tee together.
+ * Soft-fail per sink so a store outage does not change hosted HTTP.
+ */
+export function flushHostedExecutionRecord(sinks, fields) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        var _b;
+        const writtenAt = new Date().toISOString();
+        const message = fields.message === undefined ? undefined : boundedMessage(fields.message);
+        const stack = fields.error === undefined
+            ? undefined
+            : hostedErrorStackSnippet(fields.error);
+        if (sinks.stateRoot !== undefined) {
+            yield writeHostedExecutionDiag(sinks.stateRoot, Object.assign(Object.assign(Object.assign(Object.assign({ v: 1, executionId: fields.executionId, writtenAt, sessionPublicId: fields.sessionPublicId, sessionId: fields.sessionId, turnStatus: fields.turnStatus, durationMs: fields.durationMs }, (message === undefined ? {} : { message })), (stack === undefined || stack.length === 0 ? {} : { stack })), (message !== undefined && /abort/i.test(message)
+                ? { signalAborted: true }
+                : {})), (fields.abortReason === undefined
+                ? {}
+                : { abortReason: fields.abortReason })));
+        }
+        if (sinks.persistSessionRun !== undefined) {
+            const error = fields.error === undefined
+                ? undefined
+                : serializeSessionRunError(fields.error);
+            try {
+                yield sinks.persistSessionRun(Object.assign(Object.assign(Object.assign(Object.assign({ executionId: fields.executionId, writtenAt, sessionPublicId: fields.sessionPublicId, sessionId: fields.sessionId, turnStatus: fields.turnStatus, durationMs: fields.durationMs }, (fields.abortReason === undefined
+                    ? {}
+                    : { abortReason: fields.abortReason })), (message === undefined ? {} : { message })), (error === undefined ? {} : { error })), { logs: snapshotSessionRunLogs((_b = (_a = sinks.snapshotLogs) === null || _a === void 0 ? void 0 : _a.call(sinks)) !== null && _b !== void 0 ? _b : []) }));
+            }
+            catch (_c) {
+                // Soft-fail: a store outage must not change the HTTP reply.
+            }
+        }
+        if (sinks.flushStartLog !== undefined) {
+            try {
+                yield sinks.flushStartLog(fields.sessionPublicId);
+            }
+            catch (_d) {
+                // Soft-fail: same posture as the session-run persist.
+            }
+        }
+    });
+}
+/**
+ * Durable-only crash flush. Leaves `hosted-execution.json` at `running`.
+ */
+export function flushHostedExecutionProcessDeath(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        yield args.flushProcessDeath(args.reason, args.error);
+        if (args.startLogId !== undefined && args.flushStartLog !== undefined) {
+            yield args.flushStartLog(args.startLogId);
+        }
+    });
+}

package/dist/internal/mcp-endpoint.js

@@ -222,6 +222,7 @@ function buildConnectionBridgeMcpServer(engine, sessionId, connectionName) {
             sessionId: sessionId !== null && sessionId !== void 0 ? sessionId : "",
             connectionName,
             toolName: request.params.name,
+            input: request.params.arguments,
         });
         if (answer.answered) {
             return sdkResultToMcpResult(answer.result);