@stigmer/cli 3.0.8

package/resources/run/attachments.d.ts

@@ -0,0 +1,24 @@
+import { type Attachment } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { type UploadAttachmentRequest, type UploadAttachmentResponse } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+/** A sink for human progress/warning lines (attachments are not byte-parity output). */
+export type ProgressSink = (line: string) => void;
+/** The minimal UploadAttachment RPC surface, injectable for testing. */
+export interface AttachmentUploader {
+    uploadAttachment(req: UploadAttachmentRequest): Promise<UploadAttachmentResponse>;
+}
+/**
+ * The split result of processing `--attach` paths. Mirrors Go's
+ * AttachmentResult: in-workspace files become relative references, everything
+ * else becomes an uploaded Attachment.
+ */
+export interface AttachmentResult {
+    readonly attachments: Attachment[];
+    readonly workspaceFileRefs: string[];
+}
+/**
+ * Process `--attach` paths against the local workspace roots. The first root a
+ * path falls inside wins and yields a workspace-relative reference; otherwise
+ * the path is uploaded. Mirrors Go's AttachmentProcessor.ProcessFiles.
+ */
+export declare function processAttachments(uploader: AttachmentUploader, paths: readonly string[], workspaceRoots: readonly string[], progress?: ProgressSink): Promise<AttachmentResult>;
+//# sourceMappingURL=attachments.d.ts.map

package/resources/run/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/resources/run/attachments.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,8DAA8D,CAAC;AACjH,OAAO,EACL,KAAK,uBAAuB,EAE5B,KAAK,wBAAwB,EAC9B,MAAM,4DAA4D,CAAC;AAMpE,wFAAwF;AACxF,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAElD,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACnF;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,QAAQ,CAAC,EAAE,YAAY,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAgB3B"}

package/resources/run/attachments.js

@@ -0,0 +1,209 @@
+// Attachment processing for agent execution.
+//
+// Ports the Go CLI's run_attachments.go + run_attachments_zip.go. Each `--attach`
+// path is either recorded as a workspace-relative reference (when it lives inside
+// a local workspace root — no upload, the agent reads it directly) or uploaded
+// via the UploadAttachment RPC and returned as an Attachment proto. Directories
+// are zipped (hidden entries and symlinks skipped) and capped at 10 MB to match
+// the server's gRPC receive limit.
+import { readdirSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { extname, join, relative, resolve, sep } from "node:path";
+import { create } from "@bufbuild/protobuf";
+import { zipSync } from "fflate";
+import { AttachmentSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { UploadAttachmentRequestSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import { UsageError } from "../../errors/index.js";
+// Must match the server's grpc.MaxRecvMsgSize (Go: maxAttachmentSize).
+const MAX_ATTACHMENT_SIZE = 10 * 1024 * 1024; // 10 MB
+/**
+ * Process `--attach` paths against the local workspace roots. The first root a
+ * path falls inside wins and yields a workspace-relative reference; otherwise
+ * the path is uploaded. Mirrors Go's AttachmentProcessor.ProcessFiles.
+ */
+export async function processAttachments(uploader, paths, workspaceRoots, progress) {
+    const attachments = [];
+    const workspaceFileRefs = [];
+    if (paths.length === 0)
+        return { attachments, workspaceFileRefs };
+    for (const path of paths) {
+        const rel = matchWorkspaceRoot(path, workspaceRoots);
+        if (rel !== null) {
+            progress?.(`Referencing workspace file: ${rel}`);
+            workspaceFileRefs.push(rel);
+            continue;
+        }
+        attachments.push(await processFile(uploader, path, progress));
+    }
+    return { attachments, workspaceFileRefs };
+}
+// Returns the workspace-relative path if `path` is inside any root (first match
+// wins), else null. Mirrors Go's matchWorkspaceRoot + workspaceRelativePath:
+// both sides are resolved through realpath to prevent symlink escapes.
+function matchWorkspaceRoot(path, roots) {
+    for (const root of roots) {
+        let evalFile;
+        let evalRoot;
+        try {
+            evalFile = realpathSync(resolve(path));
+            evalRoot = realpathSync(root);
+        }
+        catch {
+            continue; // unresolvable path is treated as outside this root
+        }
+        if (evalFile === evalRoot || evalFile.startsWith(evalRoot + sep)) {
+            return toSlash(relative(evalRoot, evalFile));
+        }
+    }
+    return null;
+}
+// Stat the path, then upload a file or zip+upload a directory. Mirrors Go's
+// processFile.
+async function processFile(uploader, path, progress) {
+    let stat;
+    try {
+        stat = statSync(path);
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "ENOENT")
+            throw new UsageError(`file not found: ${path}`);
+        throw new UsageError(`failed to stat attachment "${path}": ${e.message}`);
+    }
+    if (stat.isDirectory())
+        return processDirectory(uploader, path, progress);
+    const absPath = resolve(path);
+    const filename = basenameOf(path);
+    const contentType = detectContentType(filename);
+    progress?.(`Uploading ${filename} (${formatFileSize(stat.size)})...`);
+    const attachment = await uploadBytes(uploader, readFileSync(path), filename, contentType, progress);
+    attachment.localPath = absPath;
+    return attachment;
+}
+// Zip a directory (extract=true so the runner unpacks it at mount_path) and
+// upload it as one archive. Mirrors Go's processDirectory.
+async function processDirectory(uploader, path, progress) {
+    const absPath = resolve(path);
+    const dirname = basenameOf(absPath);
+    const { bytes, fileCount, originalSize } = zipDirectory(absPath, progress);
+    const zipSize = bytes.byteLength;
+    progress?.(`Zipping directory: ${dirname}/ (${fileCount} files, ` +
+        `${formatFileSize(originalSize)} -> ${formatFileSize(zipSize)} compressed)`);
+    if (zipSize > MAX_ATTACHMENT_SIZE) {
+        throw new UsageError(`zipped directory too large (${formatFileSize(zipSize)}). ` +
+            `Maximum attachment size is ${formatFileSize(MAX_ATTACHMENT_SIZE)}`);
+    }
+    const attachment = await uploadBytes(uploader, bytes, `${dirname}.zip`, "application/zip", progress);
+    attachment.extract = true;
+    attachment.mountPath = `inputs/${dirname}/`;
+    attachment.localPath = absPath;
+    return attachment;
+}
+// Upload raw bytes via the RPC and build an Attachment. Mirrors Go's uploadBytes.
+async function uploadBytes(uploader, content, filename, contentType, progress) {
+    const req = create(UploadAttachmentRequestSchema, { filename, content, contentType });
+    let resp;
+    try {
+        resp = await uploader.uploadAttachment(req);
+    }
+    catch (err) {
+        throw new UsageError(`failed to upload attachment "${filename}": ${err.message}`);
+    }
+    progress?.(`Uploaded ${filename}`);
+    return create(AttachmentSchema, { filename, storageKey: resp.storageKey, contentType });
+}
+// Build a zip of dirPath's contents, skipping hidden entries (and their
+// subtrees) and symlinks. Mirrors Go's zipDirectory.
+function zipDirectory(dirPath, progress) {
+    const files = {};
+    let fileCount = 0;
+    let originalSize = 0;
+    const walk = (current, prefix) => {
+        const entries = readdirSync(current, { withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.name.startsWith("."))
+                continue; // hidden entry (and subtree if dir)
+            const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
+            const full = join(current, entry.name);
+            if (entry.isSymbolicLink()) {
+                progress?.(`Skipping symlink: ${full}`);
+                continue;
+            }
+            if (entry.isDirectory()) {
+                walk(full, rel);
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            const content = new Uint8Array(readFileSync(full));
+            files[rel] = content;
+            fileCount++;
+            originalSize += content.byteLength;
+        }
+    };
+    walk(dirPath, "");
+    if (fileCount === 0) {
+        throw new UsageError(`directory contains no attachable files: ${dirPath}`);
+    }
+    return { bytes: zipSync(files, { level: 6 }), fileCount, originalSize };
+}
+// MIME by extension. Go consults the OS mime DB first (non-deterministic across
+// hosts) and falls back to a fixed switch; we use a curated table so the result
+// is deterministic. content_type is advisory — the server re-guesses from the
+// filename when absent — so exact parity with Go's OS DB is not required.
+const MIME_BY_EXT = {
+    ".md": "text/markdown",
+    ".markdown": "text/markdown",
+    ".yaml": "application/x-yaml",
+    ".yml": "application/x-yaml",
+    ".toml": "application/toml",
+    ".csv": "text/csv",
+    ".tsv": "text/tab-separated-values",
+    ".log": "text/plain",
+    ".sql": "application/sql",
+    ".parquet": "application/vnd.apache.parquet",
+    ".avro": "application/avro",
+    ".json": "application/json",
+    ".txt": "text/plain",
+    ".pdf": "application/pdf",
+    ".html": "text/html",
+    ".htm": "text/html",
+    ".xml": "text/xml",
+    ".zip": "application/zip",
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".svg": "image/svg+xml",
+    ".js": "text/javascript",
+    ".ts": "text/plain",
+};
+function detectContentType(filename) {
+    const ext = extname(filename).toLowerCase();
+    if (ext === "")
+        return "application/octet-stream";
+    return MIME_BY_EXT[ext] ?? "application/octet-stream";
+}
+// Human-readable byte size. Mirrors Go's formatFileSize (1024-based, one decimal).
+function formatFileSize(bytes) {
+    const KB = 1024;
+    const MB = KB * 1024;
+    const GB = MB * 1024;
+    if (bytes >= GB)
+        return `${(bytes / GB).toFixed(1)} GB`;
+    if (bytes >= MB)
+        return `${(bytes / MB).toFixed(1)} MB`;
+    if (bytes >= KB)
+        return `${(bytes / KB).toFixed(1)} KB`;
+    return `${bytes} B`;
+}
+// path.basename, but resilient to trailing slashes (matches Go filepath.Base
+// semantics closely enough for display/name derivation).
+function basenameOf(p) {
+    const cleaned = p.replace(/[/\\]+$/, "");
+    const idx = Math.max(cleaned.lastIndexOf("/"), cleaned.lastIndexOf("\\"));
+    return idx === -1 ? cleaned : cleaned.slice(idx + 1);
+}
+function toSlash(p) {
+    return p.split(sep).join("/");
+}
+//# sourceMappingURL=attachments.js.map

package/resources/run/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/resources/run/attachments.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,mCAAmC;AAEnC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAmB,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AACjH,OAAO,EAEL,6BAA6B,GAE9B,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAoBtD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA4B,EAC5B,KAAwB,EACxB,cAAiC,EACjC,QAAuB;IAEvB,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAElE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACrD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,QAAQ,EAAE,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;YACjD,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,uEAAuE;AACvE,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAwB;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAgB,CAAC;QACrB,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,oDAAoD;QAChE,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,eAAe;AACf,KAAK,UAAU,WAAW,CAAC,QAA4B,EAAE,IAAY,EAAE,QAAuB;IAC5F,IAAI,IAAiC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,UAAU,CAAC,8BAA8B,IAAI,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE1E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,QAAQ,EAAE,CAAC,aAAa,QAAQ,KAAK,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpG,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,4EAA4E;AAC5E,2DAA2D;AAC3D,KAAK,UAAU,gBAAgB,CAAC,QAA4B,EAAE,IAAY,EAAE,QAAuB;IACjG,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;IACjC,QAAQ,EAAE,CACR,sBAAsB,OAAO,MAAM,SAAS,UAAU;QACpD,GAAG,cAAc,CAAC,YAAY,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,cAAc,CAC9E,CAAC;IACF,IAAI,OAAO,GAAG,mBAAmB,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAClB,+BAA+B,cAAc,CAAC,OAAO,CAAC,KAAK;YACzD,8BAA8B,cAAc,CAAC,mBAAmB,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrG,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,SAAS,GAAG,UAAU,OAAO,GAAG,CAAC;IAC5C,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,WAAW,CACxB,QAA4B,EAC5B,OAAmB,EACnB,QAAgB,EAChB,WAAmB,EACnB,QAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACtF,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC,gCAAgC,QAAQ,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,QAAQ,EAAE,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1F,CAAC;AAQD,wEAAwE;AACxE,qDAAqD;AACrD,SAAS,YAAY,CAAC,OAAe,EAAE,QAAuB;IAC5D,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,MAAc,EAAQ,EAAE;QACrD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,QAAQ,EAAE,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;YACrB,SAAS,EAAE,CAAC;YACZ,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC;QACrC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAElB,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAC1E,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,WAAW,GAAqC;IACpD,KAAK,EAAE,eAAe;IACtB,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,iBAAiB;IACzB,UAAU,EAAE,gCAAgC;IAC5C,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,iBAAiB;IACzB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,iBAAiB;IACxB,KAAK,EAAE,YAAY;CACpB,CAAC;AAEF,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,0BAA0B,CAAC;IAClD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC;AAED,6EAA6E;AAC7E,yDAAyD;AACzD,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC"}

package/resources/run/create.d.ts

@@ -0,0 +1,56 @@
+import type { Client } from "@connectrpc/connect";
+import { type DescService } from "@bufbuild/protobuf";
+import { type AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { Attachment } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { type Session } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import type { WorkspaceEntry } from "@stigmer/protos/ai/stigmer/agentic/session/v1/workspace_pb";
+import { type WorkflowExecution } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import type { RuntimeEnv } from "./env.js";
+import type { RunMode } from "./prepare.js";
+export type ControllerFn = <Desc extends DescService>(service: Desc) => Client<Desc>;
+/**
+ * Inputs for creating an agent execution. At least one of agentId/sessionId
+ * must be set: agentId-only starts a new backend-managed session, sessionId
+ * threads a follow-up, both pins the agent within an existing session.
+ */
+export interface CreateAgentExecutionInput {
+    readonly agentId?: string;
+    readonly sessionId?: string;
+    readonly orgId: string;
+    readonly message: string;
+    readonly runtimeEnv: RuntimeEnv;
+    readonly attachments: readonly Attachment[];
+    readonly workspaceFileRefs: readonly string[];
+    readonly model: string;
+    readonly mode: RunMode;
+    readonly autoApproveAll: boolean;
+}
+/** Create an agent execution. Mirrors Go's createAgentExecution. */
+export declare function createAgentExecution(controller: ControllerFn, input: CreateAgentExecutionInput): Promise<AgentExecution>;
+/** Inputs for creating a workspace-bearing session. */
+export interface CreateSessionInput {
+    readonly agentInstanceId: string;
+    readonly orgId: string;
+    readonly workspaceEntries: readonly WorkspaceEntry[];
+}
+/**
+ * Create a session with explicit workspace entries. Mirrors Go's
+ * createSessionForAgent: the backend's auto-create flow has no workspace
+ * passthrough, so the CLI creates the session itself. The "Auto-created session"
+ * subject matches the backend sentinel, so the async title activity replaces it.
+ */
+export declare function createSessionForAgent(controller: ControllerFn, input: CreateSessionInput): Promise<Session>;
+/** Inputs for creating a workflow execution. */
+export interface CreateWorkflowExecutionInput {
+    readonly workflowId: string;
+    readonly orgId: string;
+    readonly message: string;
+    readonly runtimeEnv: RuntimeEnv;
+}
+/**
+ * Create a workflow execution. Mirrors Go's createWorkflowExecution. The caller
+ * either detaches (prints IDs) or streams the execution live over the canonical
+ * event stream (resources/run/workflow-stream.ts).
+ */
+export declare function createWorkflowExecution(controller: ControllerFn, input: CreateWorkflowExecutionInput): Promise<WorkflowExecution>;
+//# sourceMappingURL=create.d.ts.map

package/resources/run/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/resources/run/create.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAU,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,6DAA6D,CAAC;AAGxH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAO/F,OAAO,EAAE,KAAK,OAAO,EAAiB,MAAM,sDAAsD,CAAC;AAGnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,gEAAgE,CAAC;AAKxE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAM5C,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,SAAS,WAAW,EAAE,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,oEAAoE;AACpE,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,YAAY,EACxB,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAiBzB;AAED,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,SAAS,cAAc,EAAE,CAAC;CACtD;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAYjH;AAED,gDAAgD;AAChD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,YAAY,EACxB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}

package/resources/run/create.js

@@ -0,0 +1,105 @@
+// Resource creation for the run path: AgentExecution, the workspace Session it
+// may need, and WorkflowExecution.
+//
+// Ports the Go CLI's run_create.go. We build the full proto messages and drive
+// the generated command controllers directly — the Wave-2 fidelity rule (see
+// resources/apply/handlers.ts): the SDK's typed `create(input)` wrappers model a
+// subset of fields, and our attachments/workspace entries are already proto
+// messages, so a round-trip through the input types would be lossy and pointless.
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { InteractionMode } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { AgentExecutionSpecSchema, ExecutionConfigSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+import { SessionSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import { SessionCommandController } from "@stigmer/protos/ai/stigmer/agentic/session/v1/command_pb";
+import { SessionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/spec_pb";
+import { WorkflowExecutionSchema, } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { WorkflowExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/command_pb";
+import { WorkflowExecutionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/spec_pb";
+import { ExecutionValueSchema } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+const API_VERSION = "agentic.stigmer.ai/v1";
+/** Create an agent execution. Mirrors Go's createAgentExecution. */
+export async function createAgentExecution(controller, input) {
+    const execution = create(AgentExecutionSchema, {
+        apiVersion: API_VERSION,
+        kind: "AgentExecution",
+        metadata: create(ApiResourceMetadataSchema, { name: executionName(), org: input.orgId }),
+        spec: create(AgentExecutionSpecSchema, {
+            message: input.message === "" ? "execute" : input.message,
+            runtimeEnv: toExecutionValues(input.runtimeEnv),
+            attachments: [...input.attachments],
+            workspaceFileRefs: [...input.workspaceFileRefs],
+            autoApproveAll: input.autoApproveAll,
+            sessionId: input.sessionId ?? "",
+            agentId: input.agentId ?? "",
+            executionConfig: buildExecutionConfig(input.model, input.mode),
+        }),
+    });
+    return controller(AgentExecutionCommandController).create(execution);
+}
+/**
+ * Create a session with explicit workspace entries. Mirrors Go's
+ * createSessionForAgent: the backend's auto-create flow has no workspace
+ * passthrough, so the CLI creates the session itself. The "Auto-created session"
+ * subject matches the backend sentinel, so the async title activity replaces it.
+ */
+export async function createSessionForAgent(controller, input) {
+    const session = create(SessionSchema, {
+        apiVersion: API_VERSION,
+        kind: "Session",
+        metadata: create(ApiResourceMetadataSchema, { name: `session-${Date.now()}`, org: input.orgId }),
+        spec: create(SessionSpecSchema, {
+            agentInstanceId: input.agentInstanceId,
+            subject: "Auto-created session",
+            workspaceEntries: [...input.workspaceEntries],
+        }),
+    });
+    return controller(SessionCommandController).create(session);
+}
+/**
+ * Create a workflow execution. Mirrors Go's createWorkflowExecution. The caller
+ * either detaches (prints IDs) or streams the execution live over the canonical
+ * event stream (resources/run/workflow-stream.ts).
+ */
+export async function createWorkflowExecution(controller, input) {
+    const execution = create(WorkflowExecutionSchema, {
+        apiVersion: API_VERSION,
+        kind: "WorkflowExecution",
+        metadata: create(ApiResourceMetadataSchema, { name: executionName(), org: input.orgId }),
+        spec: create(WorkflowExecutionSpecSchema, {
+            workflowId: input.workflowId,
+            triggerMessage: input.message === "" ? "execute" : input.message,
+            runtimeEnv: toExecutionValues(input.runtimeEnv),
+        }),
+    });
+    return controller(WorkflowExecutionCommandController).create(execution);
+}
+// Build ExecutionConfig, or undefined when neither flag is set so the backend
+// applies its defaults. Mirrors Go's buildExecutionConfig (only "plan" maps to a
+// non-default InteractionMode; "agent"/"" leave it unspecified).
+function buildExecutionConfig(model, mode) {
+    if (model === "" && mode === "")
+        return undefined;
+    const cfg = create(ExecutionConfigSchema);
+    if (model !== "")
+        cfg.modelName = model;
+    if (mode === "plan")
+        cfg.interactionMode = InteractionMode.PLAN;
+    return cfg;
+}
+// Convert the merged runtime env to the proto map of ExecutionValue.
+function toExecutionValues(env) {
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        out[key] = create(ExecutionValueSchema, { value: value.value, isSecret: value.isSecret ?? false });
+    }
+    return out;
+}
+// Unique-enough placeholder name; the backend owns final identity. Mirrors Go's
+// fmt.Sprintf("execution-%d", time.Now().UnixMicro()).
+function executionName() {
+    return `execution-${Date.now() * 1000}`;
+}
+//# sourceMappingURL=create.js.map

package/resources/run/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/resources/run/create.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mCAAmC;AACnC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,iFAAiF;AACjF,4EAA4E;AAC5E,kFAAkF;AAGlF,OAAO,EAAE,MAAM,EAAoB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAuB,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACxH,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EAAE,eAAe,EAAE,MAAM,8DAA8D,CAAC;AAE/F,OAAO,EACL,wBAAwB,EAExB,qBAAqB,GACtB,MAAM,8DAA8D,CAAC;AAEtE,OAAO,EAAgB,aAAa,EAAE,MAAM,sDAAsD,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F,OAAO,EAEL,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,oEAAoE,CAAC;AACxH,OAAO,EAAE,2BAA2B,EAAE,MAAM,iEAAiE,CAAC;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AAIvG,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAwB5C,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAwB,EACxB,KAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,EAAE;QAC7C,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACxF,IAAI,EAAE,MAAM,CAAC,wBAAwB,EAAE;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;YACzD,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/C,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;YACnC,iBAAiB,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC;YAC/C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;YAC5B,eAAe,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;SAC/D,CAAC;KACH,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,+BAA+B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACvE,CAAC;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAwB,EAAE,KAAyB;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE;QACpC,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAChG,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,sBAAsB;YAC/B,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC;SAC9C,CAAC;KACH,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAwB,EACxB,KAAmC;IAEnC,MAAM,SAAS,GAAG,MAAM,CAAC,uBAAuB,EAAE;QAChD,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACxF,IAAI,EAAE,MAAM,CAAC,2BAA2B,EAAE;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,cAAc,EAAE,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;YAChE,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC;SAChD,CAAC;KACH,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,kCAAkC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC1E,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,iEAAiE;AACjE,SAAS,oBAAoB,CAAC,KAAa,EAAE,IAAa;IACxD,IAAI,KAAK,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,EAAE;QAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;IACxC,IAAI,IAAI,KAAK,MAAM;QAAE,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,SAAS,iBAAiB,CAAC,GAAe;IACxC,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,uDAAuD;AACvD,SAAS,aAAa;IACpB,OAAO,aAAa,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;AAC1C,CAAC"}

package/resources/run/env.d.ts

@@ -0,0 +1,18 @@
+import type { EnvVarInput } from "@stigmer/sdk";
+/** A merged runtime environment: variable name -> value + secret flag. */
+export type RuntimeEnv = Record<string, EnvVarInput>;
+/** The four raw env sources collected from CLI flags, in precedence groups. */
+export interface EnvSources {
+    readonly envFlags: readonly string[];
+    readonly secretFlags: readonly string[];
+    readonly envFiles: readonly string[];
+    readonly secretFiles: readonly string[];
+}
+/**
+ * Load and merge every env source into one map. Mirrors Go's
+ * LoadAndMergeWithSecrets: files are processed before flags, and within each
+ * tier secrets are layered after plaintext, so the precedence is
+ * env-files < secret-files < --env < --secret (later wins).
+ */
+export declare function loadAndMergeEnv(sources: EnvSources): RuntimeEnv;
+//# sourceMappingURL=env.d.ts.map

package/resources/run/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/resources/run/env.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,0EAA0E;AAC1E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAErD,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAO/D"}

package/resources/run/env.js

@@ -0,0 +1,147 @@
+// Runtime-environment assembly for agent execution.
+//
+// Ports the Go CLI's `internal/cli/envfile` package (parser.go + merge.go): it
+// parses `--env`/`--secret` flags and `--env-file`/`--secret-file` files into a
+// single merged map of runtime values, each tagged secret or plaintext.
+//
+// Precedence is load-order, lowest to highest (mirrors LoadAndMergeWithSecrets):
+//   env-files (in order) < secret-files (in order) < --env flags < --secret flags
+// so a later source overrides an earlier one on key collision, and a secret
+// source overriding a plaintext source flips the value to secret. This exact
+// ordering is a wire-parity contract with the Go CLI.
+import { readFileSync } from "node:fs";
+import { UsageError } from "../../errors/index.js";
+/**
+ * Load and merge every env source into one map. Mirrors Go's
+ * LoadAndMergeWithSecrets: files are processed before flags, and within each
+ * tier secrets are layered after plaintext, so the precedence is
+ * env-files < secret-files < --env < --secret (later wins).
+ */
+export function loadAndMergeEnv(sources) {
+    const layers = [];
+    for (const path of sources.envFiles)
+        layers.push(parseEnvFile(path, false));
+    for (const path of sources.secretFiles)
+        layers.push(parseEnvFile(path, true));
+    if (sources.envFlags.length > 0)
+        layers.push(parseEnvFlags(sources.envFlags, false));
+    if (sources.secretFlags.length > 0)
+        layers.push(parseEnvFlags(sources.secretFlags, true));
+    return mergeEnv(layers);
+}
+// Later layers override earlier ones; mirrors Go's MergeEnvSources.
+function mergeEnv(layers) {
+    const result = {};
+    for (const layer of layers) {
+        for (const [key, value] of Object.entries(layer))
+            result[key] = value;
+    }
+    return result;
+}
+// Parse a dotenv-style file: comments (#), blank lines, optional `export `
+// prefix, and quoted values with escapes. Every value carries the file's
+// secret tag. Mirrors Go's parseFileWithSecretFlag.
+function parseEnvFile(path, isSecret) {
+    let contents;
+    try {
+        contents = readFileSync(path, "utf8");
+    }
+    catch (err) {
+        throw new UsageError(`failed to open environment file ${path}: ${err.message}`);
+    }
+    const result = {};
+    const lines = contents.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const parsed = parseLine(lines[i]);
+        if (parsed === null)
+            continue; // comment or blank
+        if (parsed instanceof Error) {
+            throw new UsageError(`${path}:${i + 1}: ${parsed.message}`);
+        }
+        result[parsed.key] = { value: parsed.value, isSecret };
+    }
+    return result;
+}
+// Parse repeated `KEY=VALUE` flag values. Unlike file parsing, a comment/blank
+// flag value is an error (the user explicitly passed it). Mirrors Go's
+// parseFlagsWithSecretFlag.
+function parseEnvFlags(vars, isSecret) {
+    const result = {};
+    for (const raw of vars) {
+        const parsed = parseLine(raw);
+        if (parsed === null) {
+            throw new UsageError(`invalid environment variable "${raw}": empty or comment`);
+        }
+        if (parsed instanceof Error) {
+            throw new UsageError(`invalid environment variable "${raw}": ${parsed.message}`);
+        }
+        result[parsed.key] = { value: parsed.value, isSecret };
+    }
+    return result;
+}
+// Parse one `KEY=VALUE` line. Returns null for comments/blanks, an Error for a
+// malformed entry, or the parsed pair. Mirrors Go's ParseLine.
+function parseLine(line) {
+    let trimmed = line.trim();
+    if (trimmed === "" || trimmed.startsWith("#"))
+        return null;
+    if (trimmed.startsWith("export "))
+        trimmed = trimmed.slice("export ".length);
+    const eq = trimmed.indexOf("=");
+    if (eq === -1)
+        return new Error("invalid format: missing '=' separator");
+    const key = trimmed.slice(0, eq).trim();
+    if (key === "")
+        return new Error("empty key");
+    if (!isValidEnvKey(key)) {
+        return new Error(`invalid key "${key}": must contain only letters, numbers, and underscores`);
+    }
+    return { key, value: parseValue(trimmed.slice(eq + 1)) };
+}
+// First char a letter or underscore, rest alphanumeric/underscore. Mirrors Go's
+// isValidEnvKey (notably: a leading digit is rejected).
+function isValidEnvKey(key) {
+    return /^[A-Za-z_][A-Za-z0-9_]*$/.test(key);
+}
+// Trim, then strip matching single/double quotes and unescape. Mirrors Go's
+// parseValue + unescapeValue.
+function parseValue(raw) {
+    const value = raw.trim();
+    if (value.length >= 2) {
+        const first = value[0];
+        const last = value[value.length - 1];
+        if ((first === '"' && last === '"') || (first === "'" && last === "'")) {
+            return unescapeValue(value.slice(1, -1));
+        }
+    }
+    return value;
+}
+// Escape map for the single-pass scan below.
+const ESCAPES = {
+    "\\": "\\",
+    '"': '"',
+    "'": "'",
+    n: "\n",
+    t: "\t",
+    r: "\r",
+};
+// Single-pass unescape, matching Go's strings.NewReplacer semantics: each `\x`
+// is consumed at most once (a chained string-replace would double-process, e.g.
+// turning a literal "\\n" into a newline). An unrecognized `\x` is left verbatim.
+function unescapeValue(value) {
+    let out = "";
+    for (let i = 0; i < value.length; i++) {
+        if (value[i] === "\\" && i + 1 < value.length) {
+            const next = value[i + 1];
+            const mapped = ESCAPES[next];
+            if (mapped !== undefined) {
+                out += mapped;
+                i++;
+                continue;
+            }
+        }
+        out += value[i];
+    }
+    return out;
+}
+//# sourceMappingURL=env.js.map

package/resources/run/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/resources/run/env.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,4EAA4E;AAC5E,6EAA6E;AAC7E,sDAAsD;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAanD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAmB;IACjD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1F,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAC,MAA6B;IAC7C,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,yEAAyE;AACzE,oDAAoD;AACpD,SAAS,YAAY,CAAC,IAAY,EAAE,QAAiB;IACnD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC,mCAAmC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS,CAAC,mBAAmB;QAClD,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,4BAA4B;AAC5B,SAAS,aAAa,CAAC,IAAuB,EAAE,QAAiB;IAC/D,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,UAAU,CAAC,iCAAiC,GAAG,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,iCAAiC,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,+EAA+E;AAC/E,+DAA+D;AAC/D,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3D,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE7E,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAEzE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,KAAK,CAAC,gBAAgB,GAAG,wDAAwD,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,gFAAgF;AAChF,wDAAwD;AACxD,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,8BAA8B;AAC9B,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6CAA6C;AAC7C,MAAM,OAAO,GAAqC;IAChD,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;CACR,CAAC;AAEF,+EAA+E;AAC/E,gFAAgF;AAChF,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,GAAG,IAAI,MAAM,CAAC;gBACd,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;QACH,CAAC;QACD,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/resources/run/epilogue.d.ts

@@ -0,0 +1,9 @@
+import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { Stigmer } from "@stigmer/sdk";
+import type { HeadlessResult } from "../stream/headless.js";
+/**
+ * Fetch the final execution + usage and print the exit summary. Returns the
+ * final execution so the caller can act on its artifacts (e.g. --download).
+ */
+export declare function runEpilogue(client: Stigmer, sessionId: string, executionId: string, result: HeadlessResult): Promise<AgentExecution>;
+//# sourceMappingURL=epilogue.d.ts.map

package/resources/run/epilogue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"epilogue.d.ts","sourceRoot":"","sources":["../../../src/resources/run/epilogue.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAGlG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAI5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,CAAC,CAkBzB"}