@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/agent-host/host-sink.js

@@ -0,0 +1,136 @@
+/**
+ * The agent host's `TurnSink`: what an adapter running in the host sees as
+ * the runtime, built over the host's own copy of the turn's rows and status
+ * and answered by the runner over the pipe (`protocol.ts`).
+ *
+ * The adapter folds its engine into this copy synchronously, exactly as it
+ * folds into the runtime's rows when it runs in the runner's process:
+ * the copy, its transcript builder (`harness/transcript/builder.ts`) and
+ * the setup timeline are all local, so the adapter's code path is the one
+ * it always had. What leaves the host:
+ *
+ *  - `requestPersist` ships the adapter-owned fields as of the request
+ *    (`codec.ts`) and resolves when the runtime's chokepoint has written
+ *    them, with the runtime-owned fields that changed since applied to the
+ *    copy. Single-flight with one coalesced follow-up, as the chokepoint is
+ *    (`harness/persist-chokepoint.ts`), so a fast stream does not queue a
+ *    snapshot per request; it never rejects.
+ *  - `recordActivity`, `reportUsage` and every event the builder folds are
+ *    notices: the runtime's watchdog, cost cap and turn timeline read them.
+ *  - `reportProgress` and `bindHarnessState` are calls, because the
+ *    contract lets an adapter await them. `bindHarnessState` sends the
+ *    engine-minted id alone: the runtime records it through the session's
+ *    door, and nothing on the session record the adapter holds changes.
+ *  - `bindCasObservations` keeps the reader here and tells the runtime one
+ *    exists; the runtime pulls through `readCasObservations`.
+ *
+ * The stop is the runner's: its `stopTurn` notice aborts {@link HostTurn.stop},
+ * which is the adapter's `stopSignal`. One cause is also seen here, because
+ * it must land synchronously: the cost cap. The runtime stops a turn inside
+ * `reportUsage` on the delta that reaches the cap, so in-process the engine
+ * stops at its next step boundary; a stop that crossed the pipe would land a
+ * step later, with the next model call already in flight. So the host watches
+ * the same deltas with the same rule (`harness/cost-cap-watch.ts`) and aborts
+ * locally; the terminal is still the runtime's, from its own watch.
+ */
+import { RunStatusSchema } from "@stigmer/apis/ai/stigmer/agentic/run/v1/api_pb";
+import { TurnRowsSchema } from "../gen/turn/ai/stigmer/runner/turn/v1/rows_pb.js";
+import { CostCapWatch } from "../harness/cost-cap-watch.js";
+import { TranscriptBuilder } from "../harness/transcript/builder.js";
+import { TimingRecorder } from "../shared/cold-start-timing.js";
+import { adoptOffloadedOutputs } from "../shared/status-offload.js";
+import { applyRuntimeFields, decodeMessage, decodeOffloads, encodeAdapterProjection } from "./codec.js";
+/** One turn the host is running: its sink, its stop, and the CAS reader the adapter bound. */
+export class HostTurn {
+    peer;
+    turnId;
+    sink;
+    status;
+    rows;
+    stopController = new AbortController();
+    casReader;
+    persistInFlight;
+    persistFollowUp;
+    constructor(peer, turnId, input, status, rows, timing) {
+        this.peer = peer;
+        this.turnId = turnId;
+        this.status = decodeMessage(RunStatusSchema, status);
+        this.rows = decodeMessage(TurnRowsSchema, rows);
+        const transcript = new TranscriptBuilder(input.executionId, this.rows, this.status, (event, _atMs, place) => peer.notify("event", {
+            turnId,
+            event,
+            atWallMs: performance.timeOrigin + performance.now(),
+            messageIndex: place?.messageIndex ?? null,
+        }));
+        const setupTiming = TimingRecorder.fromWire(timing);
+        const costCap = new CostCapWatch(input.execution.status?.runConfig?.maxCostUsd ?? 0, input.model.serviceTier, input.model.thinkingMode);
+        this.sink = {
+            status: this.status,
+            rows: this.rows,
+            transcript,
+            stopSignal: this.stopController.signal,
+            setupTiming,
+            requestPersist: () => this.requestPersist(),
+            recordActivity: (detail) => peer.notify("activity", { turnId, detail: detail ?? null }),
+            reportUsage: (delta) => {
+                peer.notify("usage", { turnId, delta });
+                if (costCap.add(delta))
+                    this.stop("cost-cap");
+            },
+            reportProgress: async (label) => {
+                try {
+                    await peer.call("reportProgress", { turnId, label });
+                }
+                catch (err) {
+                    console.warn(`[agent-host] progress label not reported: execution=${input.executionId}, ${describe(err)}`);
+                }
+            },
+            bindHarnessState: async (harnessStateId) => {
+                await peer.call("bindHarnessState", { turnId, harnessStateId });
+            },
+            bindCasObservations: (read) => {
+                this.casReader = read;
+                peer.notify("bindCas", { turnId });
+            },
+        };
+    }
+    /** The runtime's stop fired. */
+    stop(reason) {
+        if (!this.stopController.signal.aborted)
+            this.stopController.abort(new Error(reason));
+    }
+    /** The reader the adapter bound, if any. */
+    get cas() {
+        return this.casReader;
+    }
+    requestPersist() {
+        if (this.persistInFlight === undefined) {
+            const write = this.persistNow().finally(() => {
+                this.persistInFlight = undefined;
+            });
+            this.persistInFlight = write;
+            return write;
+        }
+        if (this.persistFollowUp === undefined) {
+            this.persistFollowUp = this.persistInFlight.then(() => {
+                this.persistFollowUp = undefined;
+                return this.requestPersist();
+            });
+        }
+        return this.persistFollowUp;
+    }
+    async persistNow() {
+        try {
+            const { runtime, offloads } = await this.peer.call("persist", { turnId: this.turnId, projection: encodeAdapterProjection(this) });
+            applyRuntimeFields(this.status, runtime);
+            adoptOffloadedOutputs(this.rows, decodeOffloads(offloads));
+        }
+        catch (err) {
+            console.warn(`[agent-host] persist request failed: turn=${this.turnId}, ${describe(err)}`);
+        }
+    }
+}
+function describe(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=host-sink.js.map

package/dist/agent-host/host-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-sink.js","sourceRoot":"","sources":["../../src/agent-host/host-sink.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,eAAe,EAAkB,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,cAAc,EAAiB,MAAM,kDAAkD,CAAC;AAGjG,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,EAAE,cAAc,EAA2B,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,uBAAuB,EAAiB,MAAM,YAAY,CAAC;AAOvH,8FAA8F;AAC9F,MAAM,OAAO,QAAQ;IAUA;IACR;IAVF,IAAI,CAAW;IACf,MAAM,CAAY;IAClB,IAAI,CAAW;IACP,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;IAChD,SAAS,CAA+B;IACxC,eAAe,CAA4B;IAC3C,eAAe,CAA4B;IAEnD,YACmB,IAAc,EACtB,MAAc,EACvB,KAAgB,EAChB,MAAc,EACd,IAAY,EACZ,MAA0B;QALT,SAAI,GAAJ,IAAI,CAAU;QACtB,WAAM,GAAN,MAAM,CAAQ;QAMvB,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAC1G,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACnB,MAAM;YACN,KAAK;YACL,QAAQ,EAAE,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACpD,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,IAAI;SAC1C,CAAC,CACH,CAAC;QACF,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,IAAI,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxI,IAAI,CAAC,IAAI,GAAG;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU;YACV,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM;YACtC,WAAW;YACX,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE;YAC3C,cAAc,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;YAChG,WAAW,EAAE,CAAC,KAAiB,EAAE,EAAE;gBACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,CAAC;YACD,cAAc,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBACtC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7G,CAAC;YACH,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,cAAsB,EAAE,EAAE;gBACjD,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,mBAAmB,EAAE,CAAC,IAAsB,EAAE,EAAE;gBAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC;SACF,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,MAAc;QACjB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,4CAA4C;IAC5C,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC3C,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;gBACjC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClI,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6CAA6C,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/agent-host/host.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The agent host's server: the real harness adapters (`harness-adapters.ts`)
+ * driven over the pipe by the runner's remote adapters (`remote-adapter.ts`).
+ *
+ * One host serves every remote harness of one runner process, as one
+ * adapter object serves every turn of its harness in-process
+ * (`harness/types.ts`): `boot` boots a harness's real adapter, `runTurn`
+ * decodes the input (`codec.ts`), runs the adapter against a host sink
+ * (`host-sink.ts`) inside the execution's context, and answers with the
+ * settlement. The settlement always carries the adapter-owned fields, even
+ * when the adapter broke its contract and threw, so the runtime settles
+ * over the rows the engine produced, as it does in-process.
+ *
+ * The adapters boot with a `Config` built from the runner's (`HostConfigWire`):
+ * the runner's non-secret settings, every endpoint the adapters dial
+ * pointed at the runner's local proxy (the Cursor SDK's at its Cursor
+ * lane), and the host's own token in every credential slot. The Temporal and control-plane coordinates are inert:
+ * the host dials neither, and an accidental dial reaches the proxy, which
+ * serves no such lane.
+ *
+ * What is process-wide — the model registry's route, the provider lanes,
+ * the receipt-key source — is the host process's to install
+ * (`entry.ts`, {@link AgentHostServerHooks.onConfigured}); this server
+ * touches no module state, so the tests can serve a host inside the
+ * runner's own process without rerouting the runner.
+ *
+ * A message for a turn this host has not started, or has already settled,
+ * is answered with an error or dropped: the runner minted the id and owns
+ * the turn's lifetime.
+ */
+import { type HarnessRow } from "../harness/registry.js";
+import { type LineChannel } from "./channel.js";
+import { type HostConfigWire } from "./protocol.js";
+export interface AgentHostServerHooks {
+    /** The runner's configuration arrived with the first boot; the boot waits for it. */
+    readonly onConfigured?: (config: HostConfigWire) => void | Promise<void>;
+}
+/** A host serving one runner. */
+export interface AgentHostServer {
+    /** Settles with the reason once the channel has closed. */
+    readonly closed: Promise<Error>;
+    /** The approval-receipt key the runner handed for a running turn of `executionId`. */
+    fingerprintKey(executionId: string): Buffer | undefined;
+    /** The harnesses booted and not shut down, in boot order. */
+    readonly booted: readonly HarnessRow[];
+}
+/** Serve the runner over `channel` with the adapters in `rows`. */
+export declare function serveAgentHost(channel: LineChannel, rows: readonly HarnessRow[], hooks?: AgentHostServerHooks): AgentHostServer;

package/dist/agent-host/host.js

@@ -0,0 +1,191 @@
+/**
+ * The agent host's server: the real harness adapters (`harness-adapters.ts`)
+ * driven over the pipe by the runner's remote adapters (`remote-adapter.ts`).
+ *
+ * One host serves every remote harness of one runner process, as one
+ * adapter object serves every turn of its harness in-process
+ * (`harness/types.ts`): `boot` boots a harness's real adapter, `runTurn`
+ * decodes the input (`codec.ts`), runs the adapter against a host sink
+ * (`host-sink.ts`) inside the execution's context, and answers with the
+ * settlement. The settlement always carries the adapter-owned fields, even
+ * when the adapter broke its contract and threw, so the runtime settles
+ * over the rows the engine produced, as it does in-process.
+ *
+ * The adapters boot with a `Config` built from the runner's (`HostConfigWire`):
+ * the runner's non-secret settings, every endpoint the adapters dial
+ * pointed at the runner's local proxy (the Cursor SDK's at its Cursor
+ * lane), and the host's own token in every credential slot. The Temporal and control-plane coordinates are inert:
+ * the host dials neither, and an accidental dial reaches the proxy, which
+ * serves no such lane.
+ *
+ * What is process-wide — the model registry's route, the provider lanes,
+ * the receipt-key source — is the host process's to install
+ * (`entry.ts`, {@link AgentHostServerHooks.onConfigured}); this server
+ * touches no module state, so the tests can serve a host inside the
+ * runner's own process without rerouting the runner.
+ *
+ * A message for a turn this host has not started, or has already settled,
+ * is answered with an error or dropped: the runner minted the id and owns
+ * the turn's lifetime.
+ */
+import { harnessRowFor } from "../harness/registry.js";
+import { runWithExecutionContext } from "../shared/execution-context.js";
+import { withTraceparent } from "../shared/trace-context.js";
+import { Peer } from "./channel.js";
+import { serveExec, serveFs } from "./fs-service.js";
+import { decodeRunEvents, decodeTurnInput, encodeAdapterProjection, encodeCasSnapshot } from "./codec.js";
+import { HostTurn } from "./host-sink.js";
+import { AGENT_HOST_PROTOCOL_VERSION, toWireError, } from "./protocol.js";
+/** Serve the runner over `channel` with the adapters in `rows`. */
+export function serveAgentHost(channel, rows, hooks = {}) {
+    const peer = new Peer(channel, "agent host");
+    const turns = new Map();
+    const keys = new Map();
+    const booted = [];
+    let configured;
+    // The first boot's configuration is the host's; every boot waits until the
+    // process-wide part of it (the routes, telemetry) is installed.
+    const configure = async (wire) => {
+        configured ??= { wire, done: Promise.resolve(hooks.onConfigured?.(wire)) };
+        await configured.done;
+        return hostConfig(configured.wire);
+    };
+    peer.handle("boot", async ({ harness, config }) => {
+        const row = harnessRowFor(rows, harness);
+        await row.adapter.boot(await configure(config));
+        if (!booted.includes(row))
+            booted.push(row);
+        return null;
+    });
+    peer.handle("shutdown", async ({ harness }) => {
+        const row = harnessRowFor(rows, harness);
+        const index = booted.indexOf(row);
+        if (index !== -1)
+            booted.splice(index, 1);
+        await row.adapter.shutdown();
+        return null;
+    });
+    peer.handle("releaseSession", async ({ harness, sessionId }) => {
+        await harnessRowFor(rows, harness).adapter.releaseSession(sessionId);
+        return null;
+    });
+    peer.handle("readCasObservations", async ({ turnId }) => {
+        const reader = turns.get(turnId)?.cas;
+        if (!reader)
+            throw new Error(`agent host: no CAS observations bound for turn ${turnId}`);
+        return encodeCasSnapshot(await reader());
+    });
+    peer.onNotice("stopTurn", ({ turnId, reason }) => turns.get(turnId)?.stop(reason));
+    // The runtime's operations on the agent's paths, performed with the agent's rights.
+    peer.handle("fs", (request) => serveFs(request));
+    peer.handle("exec", (request) => serveExec(request));
+    // The SDK the warm-up loads is the host's: the runner loads no engine.
+    peer.handle("warmCursorSdk", async () => {
+        const { warmCursorSdkStateStores } = await import("../activities/execute-cursor/sdk-warmup.js");
+        const result = await warmCursorSdkStateStores();
+        return { warmed: result.warmed, durationMs: result.durationMs, error: result.error ?? null };
+    });
+    peer.handle("runTurn", async (args) => {
+        const { turnId, harness, input: wireInput } = args;
+        const adapter = harnessRowFor(rows, harness).adapter;
+        const input = decodeTurnInput(wireInput, {
+            selectRecalledMemories: async () => (await peer.call("selectRecalledMemories", { turnId })) ?? undefined,
+            artifactStorage: remoteArtifactStorage(peer, turnId),
+            verifyPlugin: async (slug) => {
+                await peer.call("verifyPlugin", { turnId, slug });
+            },
+            readRunEvents: async () => decodeRunEvents(await peer.call("readRunEvents", { turnId })),
+        });
+        const turn = new HostTurn(peer, turnId, input, args.status, args.rows, args.timing);
+        turns.set(turnId, turn);
+        keys.set(input.executionId, Buffer.from(args.fingerprintKey, "base64"));
+        if (args.stopped !== null)
+            turn.stop(args.stopped);
+        let outcome;
+        let thrown;
+        try {
+            // Under the run's span, so the engines' spans join the run's trace.
+            outcome = await withTraceparent(args.traceparent, () => runWithExecutionContext(input.executionId, () => adapter.runTurn(input, turn.sink), args.turnKey));
+        }
+        catch (err) {
+            thrown = err;
+        }
+        try {
+            // The runtime finalizes its builder the moment `runTurn` returns; the
+            // rows are this builder's, so they are finalized before they cross.
+            turn.sink.transcript.finalize();
+            const reader = turn.cas;
+            return {
+                outcome: outcome === undefined ? null : toWireOutcome(outcome),
+                thrown: outcome === undefined ? toWireError(thrown) : null,
+                projection: encodeAdapterProjection(turn),
+                cas: reader ? encodeCasSnapshot(await reader()) : null,
+            };
+        }
+        finally {
+            turns.delete(turnId);
+            keys.delete(input.executionId);
+        }
+    });
+    peer.sendHello(AGENT_HOST_PROTOCOL_VERSION);
+    return {
+        closed: new Promise((resolve) => peer.onClose(resolve)),
+        fingerprintKey: (executionId) => keys.get(executionId),
+        booted,
+    };
+}
+/** The `Config` the host's adapters boot with (the module header says what is in it). */
+function hostConfig(wire) {
+    const tokenRef = { current: wire.token };
+    return {
+        taskQueue: "agent-host",
+        temporalAddress: "",
+        temporalNamespace: "",
+        temporalConnection: {},
+        stigmerBackendEndpoint: wire.proxyEndpoint,
+        stigmerTokenRef: tokenRef,
+        stigmerRunnerTokenRef: tokenRef,
+        proxyTokenRef: tokenRef,
+        mcpBridgeEndpoint: wire.mcpBridgeEndpoint,
+        mcpPublicEndpoint: wire.mcpPublicEndpoint,
+        cursorApiKey: "",
+        workspaceRootDir: wire.workspaceRootDir,
+        mode: wire.mode,
+        proxyEndpoint: wire.platformProxied ? wire.proxyEndpoint : null,
+        ...(wire.cursorEndpoint !== null ? { cursorEndpoint: wire.cursorEndpoint } : {}),
+        maxConcurrentActivities: wire.maxConcurrentActivities,
+        idleTimeoutSeconds: null,
+        cloudModeEnabled: wire.cloudModeEnabled,
+        checkpointerType: wire.checkpointerType,
+        checkpointerProxyEndpoint: wire.checkpointerType === "http" ? wire.proxyEndpoint : null,
+        artifactProxyEndpoint: null,
+        primaryModel: wire.primaryModel,
+        cursorStreamStallTimeoutMs: wire.cursorStreamStallTimeoutMs,
+        agentResolveTimeoutMs: wire.agentResolveTimeoutMs,
+        workspaceLockTimeoutMs: wire.workspaceLockTimeoutMs,
+    };
+}
+/**
+ * The turn's artifact store as the host sees it: uploads go to the runner,
+ * which holds the store's credential and confines the key to the turn's
+ * own prefix (`remote-adapter.ts`). The engines only upload; a read is
+ * refused here rather than given a path to the runner's whole store.
+ */
+function remoteArtifactStorage(peer, turnId) {
+    return {
+        upload: (key, content, contentType) => peer.call("uploadArtifact", { turnId, key, content: content.toString("base64"), contentType: contentType ?? null }),
+        download: (key) => Promise.reject(new Error(`agent host: artifact reads are not served (${key})`)),
+        exists: (key) => Promise.reject(new Error(`agent host: artifact reads are not served (${key})`)),
+    };
+}
+function toWireOutcome(outcome) {
+    if (outcome.kind !== "failed")
+        return { kind: outcome.kind };
+    return {
+        kind: "failed",
+        message: outcome.message,
+        surface: outcome.surface,
+        ...(outcome.cause !== undefined ? { cause: toWireError(outcome.cause) } : {}),
+    };
+}
+//# sourceMappingURL=host.js.map

package/dist/agent-host/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/agent-host/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,aAAa,EAAmB,MAAM,wBAAwB,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,IAAI,EAAoB,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAiB,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACL,2BAA2B,EAC3B,WAAW,GAQZ,MAAM,eAAe,CAAC;AAiBvB,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,OAAoB,EAAE,IAA2B,EAAE,QAA8B,EAAE;IAChH,MAAM,IAAI,GAAa,IAAI,IAAI,CAAqD,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,UAAuF,CAAC;IAE5F,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,SAAS,GAAG,KAAK,EAAE,IAAoB,EAAmB,EAAE;QAChE,UAAU,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,UAAU,CAAC,IAAI,CAAC;QACtB,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QAC7D,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,EAAE,CAAC,CAAC;QACzF,OAAO,iBAAiB,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnF,oFAAoF;IACpF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,uEAAuE;IACvE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAA2B,EAAE;QAC7D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QACnD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACrD,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE;YACvC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,SAAS;YACxG,eAAe,EAAE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC;YACpD,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC3B,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;SACzF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,OAAgC,CAAC;QACrC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,oEAAoE;YACpE,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CACrD,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAClG,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,sEAAsE;YACtE,oEAAoE;YACpE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;gBAC9D,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1D,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC;gBACzC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;aACvD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvD,cAAc,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QACtD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,IAAoB;IACtC,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACzC,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,eAAe,EAAE,EAAE;QACnB,iBAAiB,EAAE,EAAE;QACrB,kBAAkB,EAAE,EAAE;QACtB,sBAAsB,EAAE,IAAI,CAAC,aAAa;QAC1C,eAAe,EAAE,QAAQ;QACzB,qBAAqB,EAAE,QAAQ;QAC/B,aAAa,EAAE,QAAQ;QACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,YAAY,EAAE,EAAE;QAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QAC/D,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,yBAAyB,EAAE,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QACvF,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;KACpD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,IAAc,EAAE,MAAc;IAC3D,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC;QACrH,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,GAAG,GAAG,CAAC,CAAC;QAClG,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,GAAG,GAAG,CAAC,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAoB;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC"}

package/dist/agent-host/hosting.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The composition roots' one call into the agent host: start the local
+ * proxy, set up the supervisor, and hand back the harness table with every
+ * hosted harness's adapter replaced by its remote stand-in
+ * (`remote-adapter.ts`). The roots then boot, bind, release and shut down
+ * the returned rows exactly as they did the table itself; the registry
+ * (`harness/registry.ts`) cannot tell the difference, by design.
+ *
+ * Which harnesses are hosted is `harness-adapters.ts`'s to say
+ * (`HOSTED_HARNESSES`). The host runs in every shape the runner runs in, as
+ * the runner's own user until a separating shape starts it as another one,
+ * so the engines run in one kind of process everywhere and the one path is
+ * the one every test sees.
+ *
+ * The host sees the environment the agent's tools have always seen
+ * (`environment.ts`), plus one setting: `NODE_EXTRA_CA_CERTS` names a file
+ * holding the Cursor lane's certificate (`agent-proxy/cursor-lane.ts`), and
+ * the operator's own extra certificates when they named some, so the host's
+ * Cursor SDK trusts the lane on loopback and everything it trusted before.
+ * Once configured, the host also sets `CURSOR_BACKEND_URL` to the lane for
+ * its Cursor SDK (`entry.ts`); the agent's shells and hooks leave it out.
+ *
+ * THIS MODULE IS IMPORTED BEFORE THE HARNESSES BOOT, so its static graph
+ * stays connect- and SDK-free like the table's
+ * (`__tests__/harness-boot-order.test.ts` boots through it).
+ */
+import type { Config } from "../config.js";
+import type { HarnessRow } from "../harness/registry.js";
+import { type HandoverIo } from "../shared/agent-handover.js";
+import { type AgentIdentity } from "../shared/agent-identity.js";
+import { type HostStarter } from "./supervisor.js";
+/** The table the root runs, and what to release once its harnesses have shut down. */
+export interface HostedHarnesses {
+    readonly rows: readonly HarnessRow[];
+    /** Close the local proxy; after `shutdownHarnesses`, which stops the host. */
+    close(): Promise<void>;
+    /** Warm the Cursor SDK in the host, for an idle pool member; never throws. */
+    warmCursorSdk(): Promise<{
+        readonly warmed: boolean;
+        readonly durationMs: number;
+        readonly error: string | null;
+    }>;
+}
+export interface HostHarnessesOptions {
+    /** How the host is started; the tests serve one in-process. Defaults to a child process. */
+    readonly start?: HostStarter;
+    /** Who the host runs as; defaults to this process's facts (`shared/agent-identity.ts`). */
+    readonly identity?: AgentIdentity | null;
+    /** How a separating runner that cannot drop to the agent leaves; defaults to `process.exit`. */
+    readonly exit?: (code: number) => void;
+    /** The separation's preparation; the tests stand one in. */
+    readonly prepareSeparation?: (identity: AgentIdentity) => string | null;
+}
+/** The exit code of a runner that cannot start its host as the agent: a configuration error, as `layer/start.sh` refuses one. */
+export declare const SEPARATION_REFUSED_EXIT = 78;
+export declare function hostHarnesses(rows: readonly HarnessRow[], config: Config, options?: HostHarnessesOptions): Promise<HostedHarnesses>;
+/**
+ * Hand the agent its files on a separating runner's first boot
+ * (`shared/agent-handover.ts`), and its workspace root on every boot;
+ * `null` when done, else the line the runner refuses to start with.
+ */
+export declare function handOver(identity: AgentIdentity, workspaceRoot: string, runnerHome?: string, io?: HandoverIo): string | null;
+/** The pool member's log line for a warm-up's result. */
+export declare function logCursorWarmup(result: {
+    readonly warmed: boolean;
+    readonly durationMs: number;
+    readonly error: string | null;
+}): void;
+/**
+ * The file the host's `NODE_EXTRA_CA_CERTS` names: the lane's certificate,
+ * after the operator's extra certificates when `operatorFile` names a
+ * readable file (Node reads one such file, so both go in it). The folder
+ * and the file are readable by any user, so a host started as another user
+ * reads them too; the certificate is public, its key never leaves the
+ * runner's memory.
+ */
+export declare function writeTrustedCertificates(certPem: string, operatorFile: string | undefined): {
+    readonly file: string;
+    remove(): void;
+};

package/dist/agent-host/hosting.js

@@ -0,0 +1,126 @@
+/**
+ * The composition roots' one call into the agent host: start the local
+ * proxy, set up the supervisor, and hand back the harness table with every
+ * hosted harness's adapter replaced by its remote stand-in
+ * (`remote-adapter.ts`). The roots then boot, bind, release and shut down
+ * the returned rows exactly as they did the table itself; the registry
+ * (`harness/registry.ts`) cannot tell the difference, by design.
+ *
+ * Which harnesses are hosted is `harness-adapters.ts`'s to say
+ * (`HOSTED_HARNESSES`). The host runs in every shape the runner runs in, as
+ * the runner's own user until a separating shape starts it as another one,
+ * so the engines run in one kind of process everywhere and the one path is
+ * the one every test sees.
+ *
+ * The host sees the environment the agent's tools have always seen
+ * (`environment.ts`), plus one setting: `NODE_EXTRA_CA_CERTS` names a file
+ * holding the Cursor lane's certificate (`agent-proxy/cursor-lane.ts`), and
+ * the operator's own extra certificates when they named some, so the host's
+ * Cursor SDK trusts the lane on loopback and everything it trusted before.
+ * Once configured, the host also sets `CURSOR_BACKEND_URL` to the lane for
+ * its Cursor SDK (`entry.ts`); the agent's shells and hooks leave it out.
+ *
+ * THIS MODULE IS IMPORTED BEFORE THE HARNESSES BOOT, so its static graph
+ * stays connect- and SDK-free like the table's
+ * (`__tests__/harness-boot-order.test.ts` boots through it).
+ */
+import { chmodSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { homedir, tmpdir } from "node:os";
+import { join } from "node:path";
+import { HOSTED_HARNESSES } from "../harness-adapters.js";
+import { AgentProxy } from "../agent-proxy/server.js";
+import { agentHostEnvironment } from "./environment.js";
+import { installAgentFs, refusingAgentFs } from "../shared/agent-fs.js";
+import { handOverToAgent } from "../shared/agent-handover.js";
+import { agentIdentity, prepareAgentSeparation } from "../shared/agent-identity.js";
+import { createRemoteAdapter } from "./remote-adapter.js";
+import { remoteAgentFs } from "./remote-fs.js";
+import { AgentHostSupervisor, processHostStarter } from "./supervisor.js";
+/** The exit code of a runner that cannot start its host as the agent: a configuration error, as `layer/start.sh` refuses one. */
+export const SEPARATION_REFUSED_EXIT = 78;
+export async function hostHarnesses(rows, config, options = {}) {
+    const identity = options.identity === undefined ? agentIdentity() : options.identity;
+    if (identity !== null) {
+        // A container runner never runs the agent's side as root: one that
+        // cannot drop to the agent user stops here, before any harness boots.
+        const refusal = (options.prepareSeparation ?? ((who) => prepareAgentSeparation(who) ?? handOver(who, config.workspaceRootDir)))(identity);
+        if (refusal !== null) {
+            console.error(`[agent-host] ${refusal}`);
+            (options.exit ?? process.exit)(SEPARATION_REFUSED_EXIT);
+            throw new Error(refusal);
+        }
+    }
+    const proxy = await AgentProxy.start(config);
+    const trust = writeTrustedCertificates(proxy.cursorCertificate, process.env.NODE_EXTRA_CA_CERTS);
+    const supervisor = new AgentHostSupervisor({
+        proxy,
+        start: options.start ?? processHostStarter(() => ({ ...agentHostEnvironment(), NODE_EXTRA_CA_CERTS: trust.file })),
+    });
+    // From here on, the runtime's operations on the agent's paths are the host's.
+    const restoreFs = installAgentFs(remoteAgentFs({
+        fs: async (request) => (await supervisor.connection()).call("fs", request),
+        exec: async (request) => (await supervisor.connection()).call("exec", request),
+    }));
+    return {
+        rows: rows.map((row) => HOSTED_HARNESSES.has(row.harness)
+            ? { harness: row.harness, adapter: createRemoteAdapter(row.harness, row.adapter, supervisor, proxy) }
+            : row),
+        warmCursorSdk: () => supervisor.warmCursorSdk().catch((err) => ({ warmed: false, durationMs: 0, error: err instanceof Error ? err.message : String(err) })),
+        close: async () => {
+            restoreFs();
+            // A separating runner never performs them itself: after the host, they fail.
+            if (identity !== null)
+                installAgentFs(refusingAgentFs("the agent host has closed; the runner performs no operation on the agent's paths itself"));
+            await proxy.close();
+            trust.remove();
+        },
+    };
+}
+/**
+ * Hand the agent its files on a separating runner's first boot
+ * (`shared/agent-handover.ts`), and its workspace root on every boot;
+ * `null` when done, else the line the runner refuses to start with.
+ */
+export function handOver(identity, workspaceRoot, runnerHome = process.env.HOME || homedir(), io) {
+    try {
+        const result = handOverToAgent(identity, { runnerHome, workspaceRoot }, io);
+        if (result.firstTime)
+            console.log(`[agent-host] handed the agent's files to ${identity.name}${result.moved.length > 0 ? ` (moved ${result.moved.join(", ")})` : ""}`);
+        return null;
+    }
+    catch (err) {
+        return `the runner cannot hand the agent user its files: ${err instanceof Error ? err.message : String(err)}`;
+    }
+}
+/** The pool member's log line for a warm-up's result. */
+export function logCursorWarmup(result) {
+    if (result.warmed)
+        console.log(`[pool-member] Cursor SDK state stores warmed in ${result.durationMs}ms`);
+    else
+        console.warn(`[pool-member] Cursor SDK warm-up skipped (non-fatal): ${result.error} (${result.durationMs}ms)`);
+}
+/**
+ * The file the host's `NODE_EXTRA_CA_CERTS` names: the lane's certificate,
+ * after the operator's extra certificates when `operatorFile` names a
+ * readable file (Node reads one such file, so both go in it). The folder
+ * and the file are readable by any user, so a host started as another user
+ * reads them too; the certificate is public, its key never leaves the
+ * runner's memory.
+ */
+export function writeTrustedCertificates(certPem, operatorFile) {
+    let operator = "";
+    if (operatorFile) {
+        try {
+            operator = readFileSync(operatorFile, "utf8");
+        }
+        catch (err) {
+            console.warn(`[agent-host] NODE_EXTRA_CA_CERTS=${operatorFile} could not be read, so the agent host trusts only the Cursor lane's certificate besides the defaults: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    const dir = mkdtempSync(join(tmpdir(), "stigmer-agent-proxy-"));
+    chmodSync(dir, 0o755);
+    const file = join(dir, "trusted.pem");
+    writeFileSync(file, `${operator}${operator && !operator.endsWith("\n") ? "\n" : ""}${certPem}`, { mode: 0o644 });
+    return { file, remove: () => rmSync(dir, { recursive: true, force: true }) };
+}
+//# sourceMappingURL=hosting.js.map

package/dist/agent-host/hosting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.js","sourceRoot":"","sources":["../../src/agent-host/hosting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAmB,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAsB,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAoB,MAAM,iBAAiB,CAAC;AAsB5F,iIAAiI;AACjI,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA2B,EAC3B,MAAc,EACd,UAAgC,EAAE;IAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAkB,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzJ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;YACzC,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC;QACzC,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,oBAAoB,EAAE,EAAE,mBAAmB,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;KACnH,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,SAAS,GAAG,cAAc,CAC9B,aAAa,CAAC;QACZ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1E,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;KAC/E,CAAC,CACH,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;YACrG,CAAC,CAAC,GAAG,CACR;QACD,aAAa,EAAE,GAAG,EAAE,CAClB,UAAU,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjJ,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,SAAS,EAAE,CAAC;YACZ,6EAA6E;YAC7E,IAAI,QAAQ,KAAK,IAAI;gBAAE,cAAc,CAAC,eAAe,CAAC,yFAAyF,CAAC,CAAC,CAAC;YAClJ,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAuB,EACvB,aAAqB,EACrB,aAAqB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAClD,EAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,4CAA4C,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtK,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChH,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,MAAgG;IAC9H,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,mDAAmD,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;;QACpG,OAAO,CAAC,IAAI,CAAC,yDAAyD,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;AACtH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,YAAgC;IACxF,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,oCAAoC,YAAY,yGAAyG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5N,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAChE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,EAAE,GAAG,QAAQ,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC"}