pi-cursor-sdk 0.5.0 → 0.5.3

package/docs/cursor-testing-lessons.md

@@ -50,9 +50,63 @@ If resync runs but `context.tools` is still stale (e.g. only `read` listed), the
 
 ## Stock/transcript provider contract
 
-`test/cursor-provider-pi-context.test.ts` drives real `ModelRuntime` / `ModelRegistry` requests into `streamCursor`, with only Cursor SDK execution mocked. Run it against each supported host with all Pi peer imports pinned to that host (including nested native imports); a top-level package version alone is not resolution evidence. Cover official Pi 0.87.1, official latest, and current `fitchmultz/pi` main. The exact development Pi cohort is 0.99.1, with host TypeBox 1.3.27.
+`test/cursor-provider-pi-context.test.ts` drives real `ModelRuntime` / `ModelRegistry` requests into `streamCursor`, with only Cursor SDK execution mocked. Run it against each supported host with all Pi peer imports pinned to that host (including nested native imports); a top-level package version alone is not resolution evidence. Cover official Pi 0.87.1, official latest, and current `fitchmultz/pi` main. The direct development Pi packages are locked 1.0.4 snapshots, not qualification targets; resolve latest stable official Pi and current `fitchmultz/pi` main once per workflow run. Their actual nested resolution is recorded with each check, including host TypeBox 1.3.27.
 
-The test covers bootstrap/incremental prompts, empty-vs-absent request tools, native replay/drain, cloud fresh/bootstrap selection, and actual host prompt serialization for context files and skills. `test/native-cursor-flow.test.mjs` additionally exercises the compiled extension through the real loader and registered Cursor provider, substituting only the external SDK transport/storage. It verifies actual bridge tool execution, replay without file access, persisted usage/lineage, tree, compaction, queued steering, abort and reload/disposal. Explicit `tools` is now an allowlist, not merely an initial active set; use `defaultTools` for a native fixture that allows replay wrappers to activate. It is offline contract evidence. Add live proof only for changed behavior that still needs real-service evidence under the cost policy above; do not rerun unchanged live lanes or infer full live coverage from offline tests.
+The test covers bootstrap/incremental prompts, empty-vs-absent request tools, native replay/drain, cloud fresh/bootstrap selection, and actual host prompt serialization for context files and skills. `test/native-cursor-flow.test.mjs` additionally exercises the compiled extension through the real loader and registered Cursor provider, substituting only the external SDK transport/storage. It verifies actual bridge tool execution, pending-work idle/abort/shutdown/deadline ownership, replay without file access, persisted usage/lineage, tree, compaction, queued steering, abort and reload/disposal. `test/native-cursor-prompt.test.mjs` owns genuine native input, hidden notices, required-budget input, current attachments, custom-only continuation, equivalent conversion, payload/order-changing rejection, and GitHub comment soft guidance across bootstrap/incremental/custom-only sends. `test/native-cursor-ownership.test.mjs` owns concurrent-session contracts, including independently reopened managers for the same file, pending bridge survival across sibling reload/tree/shutdown, durable-key stability and atomic live-handle exclusion. These owners use `test/helpers/native-cursor-harness.mjs` and run in the explicit `check:compat` list and manual official-host compatibility route; the native-platform Vitest job is not execution evidence for these Node test owners. Explicit `tools` is now an allowlist, not merely an initial active set; use `defaultTools` for a native fixture that allows replay wrappers to activate. `test/native-provider.test.mjs` additionally verifies canonical `SessionManager.appendContextEdit()` plus `refreshContext()`, unchanged raw history, and conversation filtering that preserves system instructions, the current tool declaration, and explicit tool removal (the focused native slice from #271). It is offline contract evidence. Add live proof only for changed behavior that still needs real-service evidence under the cost policy above; do not rerun unchanged live lanes or infer full live coverage from offline tests.
+
+## Installed SDK vs native host evidence
+
+The native harness substitutes external Cursor SDK transport/storage. It qualifies Pi ownership, scheduling and persisted-session behavior, not real SDK request-time linking. `test/cursor-sdk-lazy-import.test.ts` separately drives public installed `Agent.create()` → `send()` → `run.wait()` with `JsonlLocalAgentStore`, an empty credential environment/private HOME, and pre-import Node network/process guards. The positive case reaches exactly one blocked key-exchange fetch; the negative case denies an SDK module only after creation and fails before network. This protects first-send linking beyond a successful static import. The guards are public Node API interception, not an OS sandbox, and neither case qualifies authenticated gRPC, compiled Pi or the original Windows embedded hosts.
+
+For missing exports, inspect resolution **from the failing importer**, not a root-level import. The installed SDK 1.0.36 nested Connect 1.7.0 / Protobuf 1.10.0 graph links; forcing that import to root Protobuf 2.16.0 reproduces `protoBase64`'s absence. This establishes a mechanism, not #233's unnamed host mapping. SDK-declared ranges, installed dependency versions and vendored transport versions are distinct facts.
+
+An installed-package research probe can isolate a mechanism but cannot certify the public runtime. Exact SDK 1.0.23 source already has settings-selected hook loading, config leases, and Shell/ShellStream `updated_input.command` rewriting. Its direct hook-payload transport depends on `hooks_stdin_transport` (false by default or if initialization fails); false still delivers JSON through a POSIX heredoc or Windows PowerShell here-string, not missing hooks or missing stdin payload. SDK 1.0.36 always selects the direct transport mode. These are source endpoints, not a verified change date or rtk repair. The retained SDK 1.0.36 Shell-hook canary used private lexical bindings and a permissive approval collaborator: it read user hooks, passed the invocation ID, applied `updated_input.command`, and observed rewritten file output, with both native parsing and `parsingFailed`. It is not execution evidence for SDK 1.0.23, Pi/rtk integration or security-policy enforcement and must not become production integration. Replay arguments may precede rewriting; require original input, hook decision and actual executed command for the same invocation before diagnosing #173. The parser-warning branch does not establish the emitter or SIGTERM sender in #339.
+
+For #247, exact SDK 1.0.27 source caches the exchanged bearer until invalidation, without expiry-based refresh; SDK 1.0.36 adds JWT-aware refresh, a 30-minute fallback when expiry cannot be parsed, and raw-Unauthenticated stream invalidation without interceptor resend. These source endpoints establish neither a change date, backend TTL, the original failure cause nor service recovery. SDK 1.0.27 already distinguishes classified authentication errors from raw Connect retry, shares reference-counted executor leases, and limits `agent.reload()` to workspace reload—not an auth-reset API. Failed provider runs reset their owned pool, but disposing one agent need not dispose an executor leased elsewhere. Require the redacted error chain and agent/executor/run transitions around retry and reload; do not infer a safe resend or add a guessed TTL from sanitized text.
+
+The integrity-verified [SDK 1.0.37 package](https://registry.npmjs.org/@cursor/sdk/-/sdk-1.0.37.tgz) source comparison retains those SDK 1.0.36 bearer, executor-lease, workspace-reload, Shell/ShellStream hook-rewrite and parser-warning mechanisms. Public `index.d.ts`, `options.d.ts` and `sdk-config.d.ts` are byte-identical: both commit/PR attribution controls remain absent, with no new auth-reset, hook-transport, MCP timeout/readiness or local GUI option. LOCAL custom-subagent conversion remains ID/inherit-only; inspected SQLite/checkpoint/default-root factories retain the same layouts and MD5-to-SHA256 migration. This comparison establishes bounded source equivalence, not executed SDK 1.0.37 hook-canary, SQLite-migration or platform qualification. Keep the retained SDK 1.0.36 canary and 2026-10-06 45-model catalog attributed to their actual version.
+
+A subsequent authenticated SDK 1.0.37 catalog-only refresh on 2026-10-07 returned 46 models and regenerated `src/cursor-fallback-models.generated.ts`, adding Claude Haiku 5.5 (`claude-haiku-5-5`) while preserving all 45 prior records. Its 20 variants expose `thinking=false|true`, `context=300k|1m` and `reasoning_effort=low|medium|high|xhigh|max`, with defaults `true`, `1m` and `high`. No checkpoint input was supplied: all 33 bundled checkpoint-derived entries were retained unchanged. This is catalog metadata proof only; it started no Agent/model turn or Cloud run and does not qualify hook execution, effective checkpoint limits, SQLite migration or native/platform behavior.
+
+SDK 1.0.37 does materially change its vendored transport/retry source: HTTP/2 ping verification gains bounded completion and listener cleanup, HTTP/1 and HTTP/2 response iteration awaits the iterator directly while preserving already-rejected sentinel errors, and local retry classification adds `UND_ERR_SOCKET` plus failure-kind budget selection. SDK-declared external ranges are unchanged; neither those ranges nor a new vendored patch identity proves the resolved host graph or service recovery. Requalify installed-source transport and first-send contracts against the actual package; none of this establishes #247's original auth cause, #339's signal sender, #173's rtk behavior, #233's Windows importer graph or #206's readiness.
+
+The 60-second MCP protocol default and lack of a public timeout option remain. SDK 1.0.37's internal `setToolCallRequestOptions`, `setToolCallOutputSchemaPassthrough` and `setListingDeadline` each occur only as definitions in the inspected ESM JavaScript, with no invocation found. They are not supported public setters or proof of readiness; preserve the extension's verified timeout compatibility path rather than adding private patches. The new public `computerUse` output variant uses the existing bounded generic replay fallback, not dedicated action/screenshot rendering or a new local execution option; see the [canonical replay matrix](./cursor-native-tool-replay.md#sdk-tooltype-replay-matrix).
+
+## Maintainer-only offline proof retention
+
+Native SQLite fixtures should open the public `SqliteLocalAgentStore` from `@cursor/sdk/sqlite` with an explicit `stateRoot` under their temporary directory, pass it as `localStore` to `createAgentPlatform`, and await `dispose()` in `finally` before removing that directory. `scopedWorkspaceRef` filters agents; it does not relocate storage. Assert the owned `index.db` exists to guard isolation. A fresh missing-agent `checkpointStore.loadLatest()` returning `null` checks the lookup boundary, not per-agent checkpoint database I/O; see `test/cursor-sdk-lazy-import.test.ts`.
+
+Two existing test flags retain raw proof in a **fresh private** directory outside the repository (or a gitignored scratch directory):
+
+- `PI_CURSOR_TEST_EVIDENCE_DIR` retains native SessionManager JSONL with run/metadata/options sidecars, prompt payloads/roles/images, accepted catalog bytes, terminal/late usage facts and byte-preserving journals, and custom-agent resume proof.
+- `PI_CURSOR_BOOTSTRAP_PROOF_DIR` retains installed SDK output-filter captures as `sdk-capture-{plain,ansi}.json`. Run `test/cursor-sdk-output-filter.test.ts` **before** `test/native-cursor-flow.test.mjs`: the latter consumes `sdk-capture-ansi.json` for its receipt/deferred-wait diagnostic checks. Do not invent capture payloads or reuse an old sealed run directory.
+
+The lightweight `test/helpers/raw-test-evidence.mjs` owns only directory/file writes. Payload construction and explicit flag guards stay with each owning test; unset flags perform no evidence I/O. Existing filenames, JSON fields and raw JSONL/journal/Buffer bytes are retained, not converted into a uniform schema. Writes overwrite the same filename within an owned run.
+
+For an installed development checkout, this example builds and runs only the offline owners, with Node 24+ and no inherited credentials/profile/host selectors:
+
+```bash
+NODE24="$(command -v node)" # must resolve to Node 24+
+PROOF="$(mktemp -d "${TMPDIR:-/tmp}/cursor-offline-proof.XXXXXX")"
+chmod 700 "$PROOF"
+mkdir -p "$PROOF/home" "$PROOF/agent" "$PROOF/tmp" "$PROOF/xdg"
+offline() {
+  env -i PATH="$(dirname "$NODE24"):/usr/bin:/bin" \
+    HOME="$PROOF/home" USERPROFILE="$PROOF/home" XDG_CONFIG_HOME="$PROOF/xdg" \
+    PI_CODING_AGENT_DIR="$PROOF/agent" TMPDIR="$PROOF/tmp" \
+    PI_OFFLINE=1 PI_TELEMETRY=0 PI_SKIP_VERSION_CHECK=1 PI_CURSOR_SETTING_SOURCES=none \
+    PI_CURSOR_TEST_EVIDENCE_DIR="$PROOF/sessions" \
+    PI_CURSOR_BOOTSTRAP_PROOF_DIR="$PROOF/bootstrap" "$NODE24" "$@"
+}
+offline scripts/build.mjs
+offline node_modules/vitest/vitest.mjs run test/cursor-sdk-output-filter.test.ts \
+  test/cursor-provider-stream-usage.test.ts test/cursor-provider-replay-live-run.test.ts \
+  test/cursor-session-agent-local-resume.test.ts
+offline --test test/native-provider.test.mjs test/native-cursor-flow.test.mjs \
+  test/native-cursor-prompt.test.mjs test/native-cursor-ownership.test.mjs
+```
+
+These artifacts may include prompts, tool arguments/results, local paths and private session facts. Never print, commit or publish them; never supply real keys to this offline workflow. Inspect persisted joins and bytes privately, then retain or remove only your owned proof directory. Offline artifacts establish the tested local SDK/native contracts, **not** all-host/backend qualification or paid-service acceptance.
 
 ## Auth: use `auth.json`, not only env
 
@@ -184,7 +238,7 @@ For LOCAL summary isolation, inspect actual SDK create/send options and persiste
 
 `test/cursor-usage-ledger.test.ts` uses real public SessionManager custom entries and bounded filesystem journals. It protects restart, optional mirror failure, backward/equal snapshot clocks, revised/aggregate-only/large bills, linear compact-revision storage, unavailable-to-late observations, abandon without a billing fetch, late abort, owner/sibling switches, inherited cross-directory gaps, lost native claims, pricing tiers, torn-tail prefix export/native-fork recovery and malformed/symlink files. Export is a canonical view of facts and uncertainty, not an invented client-run billing join. A failed durable append must not advance recognized accounting.
 
-For supported official hosts without committing a repair, use `node scripts/ci-compatibility.mjs --working-tree --official-only --versions 0.87.1,0.99.1,1.0.2`. This hashes an isolated source snapshot, builds/packs it, tests package loading and runs real native session contracts. Keep matching host-peer resolution and exact source evidence; offline SDK transport substitution proves integration, not live service availability. See [context/accounting boundaries](./cursor-model-ux-spec.md#context-and-accounting-boundaries) for the operational ledger ceiling and public-API limits.
+For supported official hosts without committing a repair, use `node scripts/ci-compatibility.mjs --working-tree --official-only --versions 0.87.1,0.99.1,1.0.3`. This hashes an isolated source snapshot, builds/packs it, tests package loading and runs real native session contracts. Keep matching host-peer resolution and exact source evidence; offline SDK transport substitution proves integration, not live service availability. See [context/accounting boundaries](./cursor-model-ux-spec.md#context-and-accounting-boundaries) for the operational ledger ceiling and public-API limits.
 
 ### False-positive edge case (2026-05-23)
 
@@ -220,7 +274,7 @@ Pass criteria:
 
 Run offline checks first, then reuse retained proof whose tested inputs are unchanged. If changed behavior still needs real-service proof, choose one existing meaningful check on a representative environment. Do not run every command below as a paid ladder; docs/metadata-only changes need zero paid runs.
 
-TypeScript 7 owns builds and type checks. `@typescript/typescript6` is dev-only for the AST architecture test because TypeScript 7 has no stable compiler API. Vitest 5 defaults `clearMocks` to `true`.
+TypeScript 7 owns builds and type checks. Build and typecheck commands invoke `node_modules/typescript/bin/tsc` explicitly to avoid npm's shared `tsc` shim selecting a different compiler. `@typescript/typescript6` is dev-only for AST architecture and installed-SDK contract tests because TypeScript 7 has no stable compiler API. Vitest 5 defaults `clearMocks` to `true`.
 
 ```bash
 npm test
@@ -289,7 +343,7 @@ The script writes timestamped artifacts under `--out` (default `/tmp/pi-cursor-s
 
 Stdout prints artifact paths and summary counts only. Raw payloads stay on disk and may contain local paths, project text, tool args/results, or secrets — do not commit or share them.
 
-Hard repo rule: Cursor SDK behavior claims must come from the installed `@cursor/sdk` package and/or https://cursor.com/docs/sdk/typescript, not from memory or ad-hoc probes alone. Current validation targets Node 24+, exact `@cursor/sdk@1.0.32`, official Pi 0.87.1/latest, and current `fitchmultz/pi` main.
+Hard repo rule: Cursor SDK behavior claims must come from the installed `@cursor/sdk` package and/or https://cursor.com/docs/sdk/typescript, not from memory or ad-hoc probes alone. Current validation targets Node 24+, exact `@cursor/sdk@1.0.37`, official Pi 0.87.1/latest, and current `fitchmultz/pi` main.
 
 ## Pi provider SDK event capture
 
@@ -380,7 +434,7 @@ Stderr output for these records requires `PI_CURSOR_SDK_EVENT_DEBUG_STDERR=1`. T
 
 **Symptom:** Assistant output lists tool invocations (for example `Tool call`, `Cursor activity`, `call cursor-replay-…`, `toolName`, `browser_navigate`) instead of pi tool execution cards/results.
 
-**What the screenshot in [#40](https://github.com/fitchmultz/pi-cursor-sdk/issues/40) shows:** Plain assistant text that mirrors pi's **prompt transcript format** for replay tool calls (`Tool call (Cursor activity, call cursor-replay-…): …` from `src/context.ts`) rather than a rendered pi `toolCall` card. That pattern usually means the Cursor model **narrated** a tool call as text; it is not proof that pi failed to emit `toolcall_start` / `toolUse`.
+**What the screenshot in [#40](https://github.com/fitchmultz/pi-cursor-sdk/issues/40) shows:** Plain assistant text that mirrors the old prompt transcript format (`Tool call (Cursor activity, call cursor-replay-…): …`) rather than a rendered pi `toolCall` card. That pattern is narration, not proof that pi failed to emit `toolcall_start` / `toolUse`. Structured tool history now uses `Historical tool request/result/error` in `src/context.ts`; an unmatched request remains a request. Regression coverage retains arguments, IDs, errors, raw messages/fingerprints, prose/code fences, prompt paths and coherent estimates. The change removes an imitable template, not prior assistant text or the underlying model behavior in #257.
 
 **Do not close #40 as duplicate of #55 without session JSONL.** #55 surfaces scrubbed SDK run failures and abort causes in the TUI. #40 can occur with no error toast when the model prints tool metadata as assistant text, when replay is display-only but the user expected real execution, when stale native replay routing or plan-strip resync gaps produce `Tool * not found` errors (see **#52**), or when started SDK tools were discarded at run end (see **#52** maintainer debug and [Discarded incomplete SDK tool calls](#discarded-incomplete-sdk-tool-calls) above). A hard **process exit** from uncaught `ConnectError` / `ETIMEDOUT` is **#43**, not #40 text echo.
 
@@ -454,7 +508,7 @@ Then inspect the failing assistant turn in `$SMOKE_DIR/session/*.jsonl`:
 3. **`content` is only `type: "text"` and text contains `Tool call (` / `cursor-replay-` / serialized arg keys** — model text echo of prompt transcript format; not #55, not #52 stale routing. Compare with `buildCursorPrompt()` output in the prior turn.
 4. **No `toolCall` blocks, no error toast, user expected real execution** — check whether names are replay-only (`cursor-replay-*`) or Cursor-native MCP; replay never re-runs work ([replay doc](./cursor-native-tool-replay.md)).
 5. **`stopReason: "error"` or scrubbed `errorMessage`** — classify under **#55**; check whether incomplete started tools were discarded (`discardIncompleteStartedToolCalls()`). Discarded starts with no completion and no model text echo: see `coordinator-events.jsonl` phase `discarded-incomplete-started-tool-call` ([Discarded incomplete SDK tool calls](#discarded-incomplete-sdk-tool-calls) above); route broader stale/inactive replay gaps to **#52**.
-6. **Bridge expected (`pi__*` in Cursor MCP)** — inspect stderr `[pi-cursor-sdk:bridge]` JSONL with `PI_CURSOR_PI_TOOL_BRIDGE_DEBUG=1` for pending/unresolved bridge requests.
+6. **Bridge expected (`pi__*` in Cursor MCP)** — inspect stderr `[pi-cursor-sdk:bridge]` JSONL with `PI_CURSOR_PI_TOOL_BRIDGE_DEBUG=1`. Exposure records are not connection proof; `mcp_initialized` is a validated server notification receipt, `mcp_tools_list` is catalog-handler output, and request records establish actual call handling. None proves model consumption or ongoing health. See [bridge diagnostic boundaries](./cursor-tool-surfaces.md#diagnosing-advertised-but-unused-bridge-tools).
 
 Quick structural scan (no secrets):
 
@@ -482,3 +536,5 @@ rg '"type": "toolCall"|Tool call \(Cursor|cursor-replay-' "$SMOKE_DIR/session"/*
 - `scripts/lib/` — maintainer plumbing (CLI arg parsing, secret-aware `fail()`, child-process shutdown, shell timeout/auth helpers). Re-exports `shared/` helpers so published smoke/debug scripts stay aligned with provider runtime (`test/maintainer-scripts-lib.test.ts`).
 - `test/helpers/pi-harness.ts` — canonical fake pi/extension harness (`createPiHarness`, shared model/context/event helpers)
 - `test/helpers/cursor-provider-harness.ts` — Cursor SDK provider mocks and stream helpers (re-exports pi-harness fixtures; `createNativeToolDisplayPiForTest` for native replay)
+
+Compatibility campaign watchdogs must bound setup and suite phases separately. A Linux run passed all unit assertions in 153.52 seconds but exhausted the old combined 180-second build/verify/native command budget as native tests started; killing only npm left children alive while cleanup removed their workspace. A later Ubuntu run exhausted even the independent 180-second verification budget while tests were still passing; it produced no terminal suite summary, so eventual completion and success are unknown. The command helper now defaults build/native and other commands to 180 seconds, and exactly `npm` with arguments `["run", "verify"]` to 360 seconds; explicit caller timeouts, including zero, take precedence. The campaign retains independent phases, stops owned POSIX descendants on a watchdog error, and allows twenty minutes for the complete two-host job. Keep every individual case deadline/assertion unchanged; downstream ENOENT after workspace removal is teardown evidence, not a product regression.

package/docs/cursor-tool-surfaces.md

@@ -19,7 +19,22 @@ Pi CLI tool toggles apply at the pi tool-registry boundary. `--no-tools`, `--too
 - **MCP `listTools`** (and pi's MCP catalog when present) lists **MCP servers only** — for example `pi_tools` with `pi__cursor_ask_question`. It does **not** enumerate Cursor SDK host tools such as `Read` or `Shell`.
 - **Bootstrap prompts** include a short **Cursor SDK tool boundary** block plus a compact **callable tool surfaces** manifest by default (disable manifest with `PI_CURSOR_TOOL_MANIFEST=0`). The manifest reminds the model that Cursor host/configured MCP tools are controlled by Cursor, while pi tool toggles only affect pi tools/bridge exposure; when bridge tools are exposed, it lists the current `pi__*` names. MCP `listTools` entries for bridged pi tools point back to the bootstrap prompt instead of repeating the full contract.
 - **Incremental prompts** omit the full boundary block but keep a short tail guard (including an explicit shell `cd` hint); the session agent retains prior bootstrap context. They also omit invariant Pi system instructions; a changed system prompt forces bootstrap with the new section.
-- **In-session debug:** `/cursor-tools` prints bridge enablement, manifest enablement, effective `PI_CURSOR_SETTING_SOURCES`, and the current callable-surface snapshot.
+- **In-session debug:** `/cursor-tools` prints bridge/manifest enablement, effective `PI_CURSOR_SETTING_SOURCES`, and current-registry exposure eligibility, including the builtin-exposure setting. It is not a live-run catalog or health check.
+
+## Diagnosing advertised but unused bridge tools
+
+Enable `PI_CURSOR_PI_TOOL_BRIDGE_DEBUG=1` before the turn. The existing scrubbed stderr records correlate observations by safe run ID:
+
+| Record | What it establishes |
+| --- | --- |
+| `run_created` / `tools_exposed` | Run exposure and pi↔MCP name mapping, not connection |
+| `mcp_initialized` | Server receipt of validated `notifications/initialized` |
+| `mcp_tools_list` | Catalog-handler output after request validation, with `toolCount` |
+| `request_queued` / `request_resolved` / `request_rejected` | Actual bridge call handling |
+
+Initialization/catalog receipts are server observations, not Cursor-client identity, response delivery, model consumption or ongoing health. Absence does not explain why no request occurred. `/cursor-tools` reflects the registry now, not an earlier run's captured surface; exposure alone is not invocation proof. These diagnostics do not enumerate Cursor-configured MCP connections. Do not share logs where tool names are sensitive; endpoint credentials and raw args/results are excluded.
+
+For an advertised-but-unused `pi__subagent`, first identify the active provider/version (especially with multiple Cursor providers installed), then compare the run's exposure, initialization/catalog and call records with persisted pi `toolCall`/`toolResult` rows. Bash-spawned Pi is not evidence of bridged `subagent` execution. The original Windows/two-provider report remains open in [#206](https://github.com/fitchmultz/pi-cursor-sdk/issues/206).
 
 ## Pi bridge vs Cursor native
 
@@ -30,11 +45,11 @@ Default behavior:
 - The pi bridge exposes **active pi tools** as `pi__*` MCP names when `PI_CURSOR_PI_TOOL_BRIDGE` is enabled (default on).
 - Overlapping pi builtins (`read`, `bash`, `write`, `edit`, `grep`, `find`, `ls`) are **hidden** from the bridge unless `PI_CURSOR_EXPOSE_BUILTIN_TOOLS=1`.
 
-`pi-cursor-sdk` registers `cursor_ask_question` for Cursor models when the bridge is on and `PI_CURSOR_ASK_QUESTION` is enabled (the default); Cursor sees `pi__cursor_ask_question`. The tool is sequential and emits `pi-cursor-sdk:ask-question:blocked` `{ active }` while awaiting UI input. Set `PI_CURSOR_ASK_QUESTION=0` to remove only this tool while preserving the rest of the bridge. Pending bridged calls use a local deadline capped by the effective MCP tool timeout; `PI_CURSOR_PI_BRIDGE_CALL_TIMEOUT_MS` can lower it. When pi has visible Agent Skills loaded, the extension also rewrites pi's skill catalog for Cursor and activates `cursor_activate_skill`; Cursor sees `pi__cursor_activate_skill` and should call it with a listed skill name before applying that skill. The activation result returns the full `SKILL.md`, the skill directory for relative paths, and a bounded list of bundled `scripts/`, `references/`, and `assets/` files without eagerly reading those resources.
+`pi-cursor-sdk` registers `cursor_ask_question` for Cursor models when the bridge is on and `PI_CURSOR_ASK_QUESTION=1`; Cursor sees `pi__cursor_ask_question`. The tool is sequential and emits `pi-cursor-sdk:ask-question:blocked` `{ active }` while awaiting UI input. It is off by default so Cursor proceeds with a stated assumption instead of prompting. Pending bridged calls use a local deadline capped by the effective MCP tool timeout; `PI_CURSOR_PI_BRIDGE_CALL_TIMEOUT_MS` can lower it. When pi has visible Agent Skills loaded, the extension also rewrites pi's skill catalog for Cursor and activates `cursor_activate_skill`; Cursor sees `pi__cursor_activate_skill` and should call it with a listed skill name before applying that skill. The activation result returns the full `SKILL.md`, the skill directory for relative paths, and a bounded list of bundled `scripts/`, `references/`, and `assets/` files without eagerly reading those resources.
 
 ```bash
-# Disable only Cursor's interactive question tool
-PI_CURSOR_ASK_QUESTION=0 pi --model cursor/grok-4.6
+# Enable Cursor's interactive question tool
+PI_CURSOR_ASK_QUESTION=1 pi --model cursor/grok-4.6
 
 # Disable pi bridge entirely
 PI_CURSOR_PI_TOOL_BRIDGE=0 pi --model cursor/grok-4.6

package/node_modules/@hono/node-server/README.md

@@ -5,20 +5,20 @@ Initially, Hono wasn't designed for Node.js, but with this adapter, you can now
 
 ## Benchmarks
 
-Hono is 4.1 times faster than Express.
+Hono is 3.1 times faster than Express.
 
-Express:
+Express v5:
 
 ```txt
 $ bombardier -d 10s --fasthttp http://localhost:3000/
 
 Statistics        Avg      Stdev        Max
-  Reqs/sec     20803.37    1713.06   24910.85
-  Latency        6.01ms     5.21ms   451.37ms
+  Reqs/sec     24380.41    1409.74   26604.88
+  Latency        5.12ms     2.95ms   305.21ms
   HTTP codes:
-    1xx - 0, 2xx - 208131, 3xx - 0, 4xx - 0, 5xx - 0
+    1xx - 0, 2xx - 243915, 3xx - 0, 4xx - 0, 5xx - 0
     others - 0
-  Throughput:     5.75MB/s
+  Throughput:     6.98MB/s
 ```
 
 Hono + `@hono/node-server`:
@@ -27,12 +27,12 @@ Hono + `@hono/node-server`:
 $ bombardier -d 10s --fasthttp http://localhost:3000/
 
 Statistics        Avg      Stdev        Max
-  Reqs/sec     85405.51    7250.65  102658.51
-  Latency        1.46ms     1.00ms   149.95ms
+  Reqs/sec     74428.96    3815.27   88228.32
+  Latency        1.68ms   621.25us   106.20ms
   HTTP codes:
-    1xx - 0, 2xx - 854120, 3xx - 0, 4xx - 0, 5xx - 0
+    1xx - 0, 2xx - 744378, 3xx - 0, 4xx - 0, 5xx - 0
     others - 0
-  Throughput:    18.49MB/s
+  Throughput:    16.82MB/s
 ```
 
 ## Requirements
@@ -226,6 +226,17 @@ Notice that `root` here is not relative to `src/index.ts`, rather to `my-hono-pr
 
 ### Options
 
+#### `allowPercentInPath`
+
+By default, `serveStatic` skips request paths that still contain `%` after routing. This prevents a second decoding step from serving a file under a different path than the one checked by route middleware. Set `allowPercentInPath: true` to keep the previous behavior when serving files whose names contain percent signs.
+
+If you restrict access to only some paths under `root` (for example, `/static/admin/*`), enabling this option may let requests bypass those restrictions. Apply access control to the same route pattern as `serveStatic` (for example, `/static/*`), before the static middleware:
+
+```ts
+app.use('/static/*', authMiddleware)
+app.use('/static/*', serveStatic({ root: './static', allowPercentInPath: true }))
+```
+
 #### `rewriteRequestPath`
 
 If you want to serve files in `./.foojs` with the request path `/__foo/*`, you can write like the following.

package/node_modules/@hono/node-server/dist/early-hints.cjs

@@ -15,7 +15,7 @@ const earlyHints = (options) => {
 		const dest = c.req.header("Sec-Fetch-Dest");
 		if (mode && mode !== "navigate" || dest && dest !== "document") return next();
 		const env = c.env || {};
-		const outgoing = (env.server ? env.server : env)?.outgoing;
+		const outgoing = ("server" in env ? env.server : env)?.outgoing;
 		if (typeof outgoing?.writeEarlyHints !== "function") {
 			if (!warned) {
 				console.warn("Early Hints Middleware is not supported because writeEarlyHints is not defined.");

package/node_modules/@hono/node-server/dist/early-hints.mjs

@@ -13,7 +13,7 @@ const earlyHints = (options) => {
 		const dest = c.req.header("Sec-Fetch-Dest");
 		if (mode && mode !== "navigate" || dest && dest !== "document") return next();
 		const env = c.env || {};
-		const outgoing = (env.server ? env.server : env)?.outgoing;
+		const outgoing = ("server" in env ? env.server : env)?.outgoing;
 		if (typeof outgoing?.writeEarlyHints !== "function") {
 			if (!warned) {
 				console.warn("Early Hints Middleware is not supported because writeEarlyHints is not defined.");

package/node_modules/@hono/node-server/dist/index.cjs

@@ -868,7 +868,10 @@ const handleResponseError = (e, outgoing) => {
 	if (err.code === "ERR_STREAM_PREMATURE_CLOSE") console.info("The user aborted a request.");
 	else {
 		console.error(e);
-		if (!outgoing.headersSent) outgoing.writeHead(500, { "Content-Type": "text/plain" });
+		if (!outgoing.headersSent) {
+			if (outgoing instanceof node_http.ServerResponse) outgoing._contentLength = null;
+			outgoing.writeHead(500, { "Content-Type": "text/plain" });
+		}
 		outgoing.end(`Error: ${err.message}`);
 		outgoing.destroy(err);
 	}
@@ -876,6 +879,21 @@ const handleResponseError = (e, outgoing) => {
 const flushHeaders = (outgoing) => {
 	if ("flushHeaders" in outgoing && outgoing.writable) outgoing.flushHeaders();
 };
+const trySetContentLength = (outgoing, status, length) => {
+	const http1 = outgoing;
+	if (http1._contentLength === null && http1._hasBody && http1.useChunkedEncodingByDefault && !http1._removedContLen && status >= 200 && status !== 204 && status !== 304 && !outgoing.hasHeader("content-length") && !outgoing.hasHeader("transfer-encoding") && !outgoing.hasHeader("trailer")) {
+		http1._contentLength = length;
+		return true;
+	}
+	return false;
+};
+const writeDefaultHeaders = (outgoing, status, length) => {
+	if (trySetContentLength(outgoing, status, length)) outgoing.writeHead(status, { "Content-Type": defaultContentType });
+	else outgoing.writeHead(status, {
+		"Content-Type": defaultContentType,
+		"Content-Length": length
+	});
+};
 const responseViaCache = async (res, outgoing) => {
 	let [status, body, header] = res[cacheKey];
 	if (!header) {
@@ -883,22 +901,13 @@ const responseViaCache = async (res, outgoing) => {
 			outgoing.writeHead(status);
 			outgoing.end();
 		} else if (typeof body === "string") {
-			outgoing.writeHead(status, {
-				"Content-Type": defaultContentType,
-				"Content-Length": Buffer.byteLength(body)
-			});
+			writeDefaultHeaders(outgoing, status, Buffer.byteLength(body));
 			outgoing.end(body);
 		} else if (body instanceof Uint8Array) {
-			outgoing.writeHead(status, {
-				"Content-Type": defaultContentType,
-				"Content-Length": body.byteLength
-			});
+			writeDefaultHeaders(outgoing, status, body.byteLength);
 			outgoing.end(body);
 		} else if (body instanceof Blob) {
-			outgoing.writeHead(status, {
-				"Content-Type": defaultContentType,
-				"Content-Length": body.size
-			});
+			writeDefaultHeaders(outgoing, status, body.size);
 			outgoing.end(new Uint8Array(await body.arrayBuffer()));
 		} else {
 			outgoing.writeHead(status, { "Content-Type": defaultContentType });
@@ -909,6 +918,8 @@ const responseViaCache = async (res, outgoing) => {
 		return;
 	}
 	let hasContentLength = false;
+	let plainHeaders = false;
+	let canAutoLength = true;
 	if (header instanceof Headers) {
 		hasContentLength = header.has("content-length");
 		header = buildOutgoingHttpHeaders(header, body === null ? void 0 : defaultContentType);
@@ -916,14 +927,25 @@ const responseViaCache = async (res, outgoing) => {
 		const headerObj = new Headers(header);
 		hasContentLength = headerObj.has("content-length");
 		header = buildOutgoingHttpHeaders(headerObj, body === null ? void 0 : defaultContentType);
-	} else for (const key in header) if (key.length === 14 && key.toLowerCase() === "content-length") {
-		hasContentLength = true;
-		break;
+	} else {
+		plainHeaders = true;
+		for (const key in header) {
+			if (key.length === 14 && key.toLowerCase() === "content-length") {
+				hasContentLength = true;
+				break;
+			}
+			if (key.length === 17 && key.toLowerCase() === "transfer-encoding" || key.length === 7 && key.toLowerCase() === "trailer") canAutoLength = false;
+		}
 	}
 	if (!hasContentLength) {
-		if (typeof body === "string") header["Content-Length"] = Buffer.byteLength(body);
-		else if (body instanceof Uint8Array) header["Content-Length"] = body.byteLength;
-		else if (body instanceof Blob) header["Content-Length"] = body.size;
+		let length;
+		if (typeof body === "string") length = Buffer.byteLength(body);
+		else if (body instanceof Uint8Array) length = body.byteLength;
+		else if (body instanceof Blob) length = body.size;
+		if (length !== void 0 && (!plainHeaders || !canAutoLength || !trySetContentLength(outgoing, status, length))) {
+			if (plainHeaders) header = { ...header };
+			header["Content-Length"] = length;
+		}
 	}
 	outgoing.writeHead(status, header);
 	if (body == null) outgoing.end();

package/node_modules/@hono/node-server/dist/index.mjs

@@ -1,5 +1,5 @@
 import { t as X_ALREADY_SENT } from "./constants-BLSFu_RU.mjs";
-import { STATUS_CODES, createServer } from "node:http";
+import { STATUS_CODES, ServerResponse, createServer } from "node:http";
 import { Http2ServerRequest, constants } from "node:http2";
 import { Readable } from "node:stream";
 import { defineWebSocketHelper } from "hono/ws";
@@ -867,7 +867,10 @@ const handleResponseError = (e, outgoing) => {
 	if (err.code === "ERR_STREAM_PREMATURE_CLOSE") console.info("The user aborted a request.");
 	else {
 		console.error(e);
-		if (!outgoing.headersSent) outgoing.writeHead(500, { "Content-Type": "text/plain" });
+		if (!outgoing.headersSent) {
+			if (outgoing instanceof ServerResponse) outgoing._contentLength = null;
+			outgoing.writeHead(500, { "Content-Type": "text/plain" });
+		}
 		outgoing.end(`Error: ${err.message}`);
 		outgoing.destroy(err);
 	}
@@ -875,6 +878,21 @@ const handleResponseError = (e, outgoing) => {
 const flushHeaders = (outgoing) => {
 	if ("flushHeaders" in outgoing && outgoing.writable) outgoing.flushHeaders();
 };
+const trySetContentLength = (outgoing, status, length) => {
+	const http1 = outgoing;
+	if (http1._contentLength === null && http1._hasBody && http1.useChunkedEncodingByDefault && !http1._removedContLen && status >= 200 && status !== 204 && status !== 304 && !outgoing.hasHeader("content-length") && !outgoing.hasHeader("transfer-encoding") && !outgoing.hasHeader("trailer")) {
+		http1._contentLength = length;
+		return true;
+	}
+	return false;
+};
+const writeDefaultHeaders = (outgoing, status, length) => {
+	if (trySetContentLength(outgoing, status, length)) outgoing.writeHead(status, { "Content-Type": defaultContentType });
+	else outgoing.writeHead(status, {
+		"Content-Type": defaultContentType,
+		"Content-Length": length
+	});
+};
 const responseViaCache = async (res, outgoing) => {
 	let [status, body, header] = res[cacheKey];
 	if (!header) {
@@ -882,22 +900,13 @@ const responseViaCache = async (res, outgoing) => {
 			outgoing.writeHead(status);
 			outgoing.end();
 		} else if (typeof body === "string") {
-			outgoing.writeHead(status, {
-				"Content-Type": defaultContentType,
-				"Content-Length": Buffer.byteLength(body)
-			});
+			writeDefaultHeaders(outgoing, status, Buffer.byteLength(body));
 			outgoing.end(body);
 		} else if (body instanceof Uint8Array) {
-			outgoing.writeHead(status, {
-				"Content-Type": defaultContentType,
-				"Content-Length": body.byteLength
-			});
+			writeDefaultHeaders(outgoing, status, body.byteLength);
 			outgoing.end(body);
 		} else if (body instanceof Blob) {
-			outgoing.writeHead(status, {
-				"Content-Type": defaultContentType,
-				"Content-Length": body.size
-			});
+			writeDefaultHeaders(outgoing, status, body.size);
 			outgoing.end(new Uint8Array(await body.arrayBuffer()));
 		} else {
 			outgoing.writeHead(status, { "Content-Type": defaultContentType });
@@ -908,6 +917,8 @@ const responseViaCache = async (res, outgoing) => {
 		return;
 	}
 	let hasContentLength = false;
+	let plainHeaders = false;
+	let canAutoLength = true;
 	if (header instanceof Headers) {
 		hasContentLength = header.has("content-length");
 		header = buildOutgoingHttpHeaders(header, body === null ? void 0 : defaultContentType);
@@ -915,14 +926,25 @@ const responseViaCache = async (res, outgoing) => {
 		const headerObj = new Headers(header);
 		hasContentLength = headerObj.has("content-length");
 		header = buildOutgoingHttpHeaders(headerObj, body === null ? void 0 : defaultContentType);
-	} else for (const key in header) if (key.length === 14 && key.toLowerCase() === "content-length") {
-		hasContentLength = true;
-		break;
+	} else {
+		plainHeaders = true;
+		for (const key in header) {
+			if (key.length === 14 && key.toLowerCase() === "content-length") {
+				hasContentLength = true;
+				break;
+			}
+			if (key.length === 17 && key.toLowerCase() === "transfer-encoding" || key.length === 7 && key.toLowerCase() === "trailer") canAutoLength = false;
+		}
 	}
 	if (!hasContentLength) {
-		if (typeof body === "string") header["Content-Length"] = Buffer.byteLength(body);
-		else if (body instanceof Uint8Array) header["Content-Length"] = body.byteLength;
-		else if (body instanceof Blob) header["Content-Length"] = body.size;
+		let length;
+		if (typeof body === "string") length = Buffer.byteLength(body);
+		else if (body instanceof Uint8Array) length = body.byteLength;
+		else if (body instanceof Blob) length = body.size;
+		if (length !== void 0 && (!plainHeaders || !canAutoLength || !trySetContentLength(outgoing, status, length))) {
+			if (plainHeaders) header = { ...header };
+			header["Content-Length"] = length;
+		}
 	}
 	outgoing.writeHead(status, header);
 	if (body == null) outgoing.end();

package/node_modules/@hono/node-server/dist/serve-static.cjs

@@ -77,6 +77,7 @@ const serveStatic = (options = { root: "" }) => {
 		let filename;
 		if (optionPath) filename = optionPath;
 		else try {
+			if (!options.allowPercentInPath && c.req.path.includes("%")) throw new Error();
 			filename = tryDecodeURI(c.req.path);
 			if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) throw new Error();
 		} catch {

package/node_modules/@hono/node-server/dist/serve-static.d.cts

@@ -8,7 +8,8 @@ type ServeStaticOptions<E extends Env = Env> = {
   root?: string;
   path?: string;
   index?: string;
-  precompressed?: boolean;
+  precompressed?: boolean; /** Allow percent signs in the routed request path. Defaults to false. */
+  allowPercentInPath?: boolean;
   rewriteRequestPath?: (path: string, c: Context<E>) => string;
   onFound?: (path: string, c: Context<E>) => void | Promise<void>;
   onNotFound?: (path: string, c: Context<E>) => void | Promise<void>;

package/node_modules/@hono/node-server/dist/serve-static.d.mts

@@ -8,7 +8,8 @@ type ServeStaticOptions<E extends Env = Env> = {
   root?: string;
   path?: string;
   index?: string;
-  precompressed?: boolean;
+  precompressed?: boolean; /** Allow percent signs in the routed request path. Defaults to false. */
+  allowPercentInPath?: boolean;
   rewriteRequestPath?: (path: string, c: Context<E>) => string;
   onFound?: (path: string, c: Context<E>) => void | Promise<void>;
   onNotFound?: (path: string, c: Context<E>) => void | Promise<void>;

package/node_modules/@hono/node-server/dist/serve-static.mjs

@@ -76,6 +76,7 @@ const serveStatic = (options = { root: "" }) => {
 		let filename;
 		if (optionPath) filename = optionPath;
 		else try {
+			if (!options.allowPercentInPath && c.req.path.includes("%")) throw new Error();
 			filename = tryDecodeURI(c.req.path);
 			if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) throw new Error();
 		} catch {

package/node_modules/@hono/node-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hono/node-server",
-  "version": "2.1.1",
+  "version": "2.1.3",
   "description": "Node.js Adapter for Hono",
   "main": "dist/index.mjs",
   "type": "module",
@@ -100,7 +100,7 @@
     "@types/ws": "^8.18.1",
     "@whatwg-node/fetch": "^0.9.14",
     "eslint": "^9.10.0",
-    "hono": "^4.12.8",
+    "hono": "^4.13.9",
     "np": "^11.2.1",
     "prettier": "^3.2.4",
     "publint": "^0.3.18",
@@ -119,6 +119,7 @@
     "postbuild": "publint",
     "prerelease": "pnpm run build && pnpm run test --run",
     "release": "np --no-publish",
+    "typecheck": "tsc --noEmit",
     "lint": "eslint src test",
     "lint:fix": "eslint src test --fix",
     "format": "prettier --check \"src/**/*.{js,ts}\" \"test/**/*.{js,ts}\"",

package/node_modules/@modelcontextprotocol/core/dist/{auth--n_Yzytt.d.cts → auth-Anm-lwWi.d.mts}

@@ -8368,6 +8368,7 @@ declare const OAuthTokensSchema: z.ZodObject<{
   expires_in: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
   scope: z.ZodOptional<z.ZodString>;
   refresh_token: z.ZodOptional<z.ZodString>;
+  issuer: z.ZodCatch<z.ZodOptional<z.ZodString>>;
 }, z.core.$strip>;
 /**
  * RFC 8693 §2.2.1 Token Exchange response for ID-JAG tokens.
@@ -8426,6 +8427,7 @@ declare const OAuthClientInformationSchema: z.ZodObject<{
   client_secret: z.ZodOptional<z.ZodString>;
   client_id_issued_at: z.ZodOptional<z.ZodNumber>;
   client_secret_expires_at: z.ZodOptional<z.ZodNumber>;
+  issuer: z.ZodCatch<z.ZodOptional<z.ZodString>>;
 }, z.core.$strip>;
 /**
  * RFC 7591 OAuth 2.0 Dynamic Client Registration full response (client information plus metadata)
@@ -8452,6 +8454,7 @@ declare const OAuthClientInformationFullSchema: z.ZodObject<{
   client_secret: z.ZodOptional<z.ZodString>;
   client_id_issued_at: z.ZodOptional<z.ZodNumber>;
   client_secret_expires_at: z.ZodOptional<z.ZodNumber>;
+  issuer: z.ZodCatch<z.ZodOptional<z.ZodString>>;
 }, z.core.$strip>;
 /**
  * RFC 7591 OAuth 2.0 Dynamic Client Registration error response
@@ -8480,22 +8483,20 @@ type OAuthClientInformationMixed = OAuthClientInformation | OAuthClientInformati
  * {@linkcode OAuthTokens} as persisted by an `OAuthClientProvider`. Adds an
  * SDK-stamped authorization-server `issuer` identifier so stored tokens are
  * bound to the AS that issued them. The `issuer` field is **not** part of the
- * RFC 6749 wire response and is intentionally absent from the wire-response
- * schema; the client SDK writes it before calling `saveTokens`.
+ * RFC 6749 wire response; the client SDK writes it before calling `saveTokens`.
  */
 type StoredOAuthTokens = OAuthTokens & {
-  issuer?: string;
+  issuer?: string | undefined;
 };
 /**
  * {@linkcode OAuthClientInformationMixed} as persisted by an
  * `OAuthClientProvider`. Adds an SDK-stamped authorization-server `issuer`
  * identifier so stored client credentials are bound to the AS that issued them.
- * The `issuer` field is **not** part of the RFC 7591 wire response and is
- * intentionally absent from the wire-response schema; the client SDK writes it
- * before calling `saveClientInformation`.
+ * The `issuer` field is **not** part of the RFC 7591 wire response; the client SDK
+ * writes it before calling `saveClientInformation`.
  */
 type StoredOAuthClientInformation = OAuthClientInformationMixed & {
-  issuer?: string;
+  issuer?: string | undefined;
 };
 type OAuthClientRegistrationError = z.infer<typeof OAuthClientRegistrationErrorSchema>;
 type OAuthTokenRevocationRequest = z.infer<typeof OAuthTokenRevocationRequestSchema>;
@@ -8503,4 +8504,4 @@ type OAuthProtectedResourceMetadata = z.infer<typeof OAuthProtectedResourceMetad
 type AuthorizationServerMetadata = OAuthMetadata | OpenIdProviderDiscoveryMetadata;
 //#endregion
 export { ContentBlockSchema as $, ServerTasksCapabilitySchema as $n, ListTasksResultSchema as $t, StoredOAuthTokens as A, RequestMetaSchema as An, ToolUseContentSchema as Ar, InitializeRequestSchema as At, CancelTaskRequestSchema as B, ResourceUpdatedNotificationSchema as Bn, JSONRPCResultResponseSchema as Bt, OpenIdProviderDiscoveryMetadata as C, PromptReferenceSchema as Cn, TitledSingleSelectEnumSchemaSchema as Cr, GetTaskRequestSchema as Ct, OptionalSafeUrlSchema as D, ReadResourceResultSchema as Dn, ToolListChangedNotificationSchema as Dr, ImageContentSchema as Dt, OpenIdProviderMetadataSchema as E, ReadResourceRequestSchema as En, ToolExecutionSchema as Er, IconsSchema as Et, BlobResourceContentsSchema as F, ResourceRequestParamsSchema as Fn, JSONArray as Fr, JSONRPCErrorResponseSchema as Ft, ClientNotificationSchema as G, RootsListChangedNotificationSchema as Gn, ListPromptsResultSchema as Gt, CancelledNotificationParamsSchema as H, ResultSchema as Hn, LegacyTitledEnumSchemaSchema as Ht, BooleanSchemaSchema as I, ResourceSchema as In, JSONObject as Ir, JSONRPCMessageSchema as It, ClientTasksCapabilitySchema as J, SamplingMessageSchema as Jn, ListResourcesRequestSchema as Jt, ClientRequestSchema as K, SamplingContentSchema as Kn, ListResourceTemplatesRequestSchema as Kt, CallToolRequestParamsSchema as L, ResourceTemplateReferenceSchema as Ln, JSONValue as Lr, JSONRPCNotificationSchema as Lt, AudioContentSchema as M, ResourceContentsSchema as Mn, UnsubscribeRequestSchema as Mr, InitializedNotificationSchema as Mt, BaseMetadataSchema as N, ResourceLinkSchema as Nn, UntitledMultiSelectEnumSchemaSchema as Nr, JSONArraySchema as Nt, SafeUrlSchema as O, RelatedTaskMetadataSchema as On, ToolResultContentSchema as Or, ImplementationSchema as Ot, BaseRequestParamsSchema as P, ResourceListChangedNotificationSchema as Pn, UntitledSingleSelectEnumSchemaSchema as Pr, JSONObjectSchema as Pt, CompleteResultSchema as Q, ServerResultSchema as Qn, ListTasksRequestSchema as Qt, CallToolRequestSchema as R, ResourceTemplateSchema as Rn, JSONRPCRequestSchema as Rt, OAuthTokensSchema as S, PromptMessageSchema as Sn, TitledMultiSelectEnumSchemaSchema as Sr, GetTaskPayloadResultSchema as St, OpenIdProviderMetadata as T, ReadResourceRequestParamsSchema as Tn, ToolChoiceSchema as Tr, IconSchema as Tt, CancelledNotificationSchema as U, RoleSchema as Un, ListChangedOptionsBaseSchema as Ut, CancelTaskResultSchema as V, ResultMetaObjectSchema as Vn, JSONValueSchema as Vt, ClientCapabilitiesSchema as W, RootSchema as Wn, ListPromptsRequestSchema as Wt, CompleteRequestParamsSchema as X, ServerNotificationSchema as Xn, ListRootsRequestSchema as Xt, CompatibilityCallToolResultSchema as Y, ServerCapabilitiesSchema as Yn, ListResourcesResultSchema as Yt, CompleteRequestSchema as Z, ServerRequestSchema as Zn, ListRootsResultSchema as Zt, OAuthProtectedResourceMetadata as _, ProgressNotificationSchema as _n, TaskStatusNotificationParamsSchema as _r, EnumSchemaSchema as _t, OAuthClientInformationFull as a, ModelHintSchema as an, SubscribeRequestSchema as ar, CursorSchema as at, OAuthTokenRevocationRequestSchema as b, PromptArgumentSchema as bn, TextContentSchema as br, GetPromptResultSchema as bt, OAuthClientInformationSchema as c, NotificationSchema as cn, SubscriptionsAcknowledgedNotificationSchema as cr, ElicitRequestFormParamsSchema as ct, OAuthClientRegistrationError as d, PaginatedRequestParamsSchema as dn, SubscriptionsListenResultMetaSchema as dr, ElicitRequestURLParamsSchema as dt, ListToolsRequestSchema as en, SetLevelRequestParamsSchema as er, CreateMessageRequestParamsSchema as et, OAuthClientRegistrationErrorSchema as f, PaginatedRequestSchema as fn, SubscriptionsListenResultSchema as fr, ElicitResultSchema as ft, OAuthMetadataSchema as g, ProgressNotificationParamsSchema as gn, TaskSchema as gr, EmptyResultSchema as gt, OAuthMetadata as h, PrimitiveSchemaDefinitionSchema as hn, TaskMetadataSchema as hr, EmbeddedResourceSchema as ht, OAuthClientInformation as i, LoggingMessageNotificationSchema as in, SubscribeRequestParamsSchema as ir, CreateTaskResultSchema as it, AnnotationsSchema as j, RequestSchema as jn, UnsubscribeRequestParamsSchema as jr, InitializeResultSchema as jt, StoredOAuthClientInformation as k, RequestIdSchema as kn, ToolSchema as kr, InitializeRequestParamsSchema as kt, OAuthClientMetadata as l, NotificationsParamsSchema as ln, SubscriptionsListenRequestParamsSchema as lr, ElicitRequestParamsSchema as lt, OAuthErrorResponseSchema as m, PingRequestSchema as mn, TaskCreationParamsSchema as mr, ElicitationCompleteNotificationSchema as mt, IdJagTokenExchangeResponse as n, LoggingLevelSchema as nn, SingleSelectEnumSchemaSchema as nr, CreateMessageResultSchema as nt, OAuthClientInformationFullSchema as o, ModelPreferencesSchema as on, SubscriptionFilterSchema as or, DiscoverRequestSchema as ot, OAuthErrorResponse as p, PaginatedResultSchema as pn, TaskAugmentedRequestParamsSchema as pr, ElicitationCompleteNotificationParamsSchema as pt, ClientResultSchema as q, SamplingMessageContentBlockSchema as qn, ListResourceTemplatesResultSchema as qt, IdJagTokenExchangeResponseSchema as r, LoggingMessageNotificationParamsSchema as rn, StringSchemaSchema as rr, CreateMessageResultWithToolsSchema as rt, OAuthClientInformationMixed as s, MultiSelectEnumSchemaSchema as sn, SubscriptionsAcknowledgedNotificationParamsSchema as sr, DiscoverResultSchema as st, AuthorizationServerMetadata as t, ListToolsResultSchema as tn, SetLevelRequestSchema as tr, CreateMessageRequestSchema as tt, OAuthClientMetadataSchema as u, NumberSchemaSchema as un, SubscriptionsListenRequestSchema as ur, ElicitRequestSchema as ut, OAuthProtectedResourceMetadataSchema as v, ProgressSchema as vn, TaskStatusNotificationSchema as vr, GetPromptRequestParamsSchema as vt, OpenIdProviderDiscoveryMetadataSchema as w, PromptSchema as wn, ToolAnnotationsSchema as wr, GetTaskResultSchema as wt, OAuthTokens as x, PromptListChangedNotificationSchema as xn, TextResourceContentsSchema as xr, GetTaskPayloadRequestSchema as xt, OAuthTokenRevocationRequest as y, ProgressTokenSchema as yn, TaskStatusSchema as yr, GetPromptRequestSchema as yt, CallToolResultSchema as z, ResourceUpdatedNotificationParamsSchema as zn, JSONRPCResponseSchema as zt };
-//# sourceMappingURL=auth--n_Yzytt.d.cts.map
+//# sourceMappingURL=auth-Anm-lwWi.d.mts.map