@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/activities/execute-cursor/__test-utils__/cursor-hook-harness.js

@@ -0,0 +1,254 @@
+/**
+ * Test harness for the generated Cursor preToolUse bash hook.
+ *
+ * Runs the ACTUAL bash script the runner writes into the workspace, feeding it
+ * the REAL hook-input shapes captured from `@cursor/sdk`. It is the out-of-process
+ * deny-oracle's only honest test surface: write the runner-owned state file (with
+ * any approval grants), invoke the hook, and read back its allow/deny decision
+ * and the denial ledger.
+ *
+ * Extracted from `__tests__/hook-script.test.ts` so it is shared by both that
+ * behavior suite and the deny-oracle adapter in the gateway Contract Test Kit
+ * (`__test-utils__/gateway-substrate.ts`) — one harness, no drift.
+ *
+ * Each harness owns a throwaway workspace under the OS temp dir and self-cleans
+ * via `onTestFinished`, so it must be called from within a running test.
+ */
+import { onTestFinished } from "vitest";
+import { execFileSync, execSync, spawn } from "node:child_process";
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, readFileSync, existsSync, readlinkSync, realpathSync, symlinkSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { generateHookScript } from "../hook-script.js";
+import { buildApprovalState } from "../approval-state.js";
+import { mcpToolKey } from "../../../shared/approval-policy.js";
+import { ToolScope } from "../../../shared/tool-lists.js";
+import { compileHookToolScope } from "../hook-scope.js";
+import { readCasObservations } from "../cas-observations.js";
+/**
+ * Whether `bash` is available on this machine. Hook tests must be skipped where
+ * it is not — use `const d = hasBash ? describe : describe.skip`.
+ */
+export const hasBash = (() => {
+    try {
+        execSync("bash -c 'exit 0'", { stdio: "ignore" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+})();
+/** The turn start's listing of the harness's servers: a `null` tool list is a server whose listing failed. */
+export function listingOf(servers) {
+    return {
+        listed: servers.flatMap(({ slug, listedTools }) => (listedTools === null ? [] : [{ server: slug, tools: listedTools }])),
+        destructive: [],
+        unlisted: servers.filter(({ listedTools }) => listedTools === null).map(({ slug }) => slug),
+    };
+}
+/** A gate answer's permission, as the SDK reads it; "?" when it carries none. */
+function permissionOf(raw) {
+    return raw.includes('"permission":"deny"') ? "deny" : raw.includes('"permission":"allow"') ? "allow" : "?";
+}
+/** The approval default of a turn whose servers mark nothing destructive and hold no lease. */
+export const NO_MCP_DEFAULT = { destructive: new Set(), unlisted: new Set(), leasedServers: new Set() };
+/**
+ * Build a throwaway workspace, write the generated hook + (optionally) the
+ * approval state file, and return a driver for the real bash hook.
+ */
+export function setupCursorHookHarness(opts = {}) {
+    const ws = mkdtempSync(join(tmpdir(), "hook-script-"));
+    onTestFinished(() => rmSync(ws, { recursive: true, force: true }));
+    // Capture-mode tests need a real git repo so `git check-ignore` resolves. A
+    // non-git test (gitWorkspace:false) deliberately leaves the workspace un-inited
+    // so the hook's substrate matches the state's gitWorkspace flag.
+    if ((opts.captureMode || opts.fileReview === false || opts.gitignored) && opts.gitWorkspace !== false) {
+        execSync("git init -q", { cwd: ws });
+        if (opts.gitignored && opts.gitignored.length > 0) {
+            writeFileSync(join(ws, ".gitignore"), opts.gitignored.join("\n") + "\n", "utf-8");
+        }
+    }
+    const dir = join(ws, ".cursor", "hooks");
+    mkdirSync(dir, { recursive: true });
+    const statePath = join(dir, "state.json");
+    const ledgerPath = join(dir, "denials.jsonl");
+    const pointerPath = join(dir, "active.json");
+    const scriptPath = join(dir, "hook.sh");
+    // The hook script is STABLE (no baked per-turn paths); it resolves the current
+    // turn's state/ledger/runner from the active-turn pointer it re-reads each call.
+    // The workspace root is baked so capture mode's gitignore check finds the repo.
+    writeFileSync(scriptPath, generateHookScript(pointerPath, ws), "utf-8");
+    writeFileSync(pointerPath, JSON.stringify({
+        stateFile: statePath,
+        ledgerFile: ledgerPath,
+        runnerPid: opts.runnerPid ?? process.pid,
+        ...(opts.hookServer ? { hookSocket: opts.hookServer.socketPath, hookToken: opts.hookServer.token } : {}),
+    }), "utf-8");
+    const platformDir = mkdtempSync(join(tmpdir(), "hook-platform-"));
+    onTestFinished(() => rmSync(platformDir, { recursive: true, force: true }));
+    const link = opts.stigmerLink ?? (opts.lists ? "platform" : "none");
+    if (link === "platform")
+        symlinkSync(platformDir, join(ws, ".stigmer"), "dir");
+    if (link === "repo") {
+        mkdirSync(join(ws, "repo-state"), { recursive: true });
+        symlinkSync(join(ws, "repo-state"), join(ws, ".stigmer"), "dir");
+    }
+    // `platformReadRoot`'s rule, synchronously: the platform dir's real path
+    // only when the workspace's `.stigmer` is the link to it.
+    const linkTarget = link === "none" ? "" : readlinkSync(join(ws, ".stigmer"));
+    const readRoot = linkTarget === platformDir ? realpathSync(platformDir) : "";
+    if (!opts.noStateFile) {
+        const mcpDefault = {
+            destructive: new Set((opts.destructiveMcpTools ?? []).map((tool) => mcpToolKey(opts.destructiveMcpServer ?? "srv", tool))),
+            unlisted: new Set(opts.unlistedMcpServers ?? []),
+            leasedServers: new Set(opts.leasedMcpServers ?? []),
+        };
+        const servers = opts.mcpServers ?? [];
+        const toolScope = compileHookToolScope({
+            scope: opts.lists ? ToolScope.of('Agent "test"', opts.lists) : ToolScope.unrestricted(),
+            servers,
+            listing: listingOf(servers),
+            platformServerSlugs: new Set(opts.platformServerSlugs ?? []),
+            readRoot,
+            platformRoot: realpathSync(platformDir),
+            subAgentTypes: opts.subAgentTypes ?? [],
+        });
+        const state = buildApprovalState(mcpDefault, opts.autoApproveAll ?? false, new Set(opts.leasedCategories ?? []), opts.grants, opts.captureMode ?? false, opts.captureIgnored ?? false, opts.gitWorkspace ?? true, opts.unattendedSkip ?? false, toolScope, opts.fileReview ?? true);
+        writeFileSync(statePath, JSON.stringify(state), "utf-8");
+    }
+    return {
+        root: ws,
+        platformDir,
+        hitlDir: dir,
+        decide(input) {
+            const raw = execFileSync("bash", [scriptPath], { input: JSON.stringify(input) }).toString();
+            return { permission: permissionOf(raw), raw };
+        },
+        decideAsync(input) {
+            return new Promise((resolve, reject) => {
+                const child = spawn("bash", [scriptPath], { stdio: ["pipe", "pipe", "inherit"] });
+                let raw = "";
+                child.stdout.on("data", (chunk) => {
+                    raw += chunk.toString("utf-8");
+                });
+                child.on("error", reject);
+                child.on("close", () => resolve({ permission: permissionOf(raw), raw }));
+                child.stdin.end(JSON.stringify(input));
+            });
+        },
+        ledger() {
+            if (!existsSync(ledgerPath))
+                return [];
+            return readFileSync(ledgerPath, "utf-8")
+                .split("\n")
+                .filter(Boolean)
+                .map((l) => JSON.parse(l));
+        },
+        resetLedger() {
+            writeFileSync(ledgerPath, "", "utf-8");
+        },
+        // The sidecar lives beside the state/ledger files (its `dir` is the harness's
+        // hitlDir analog), exactly as the runner derives it from dirname(STATE_FILE).
+        observations() {
+            return readCasObservations(dir);
+        },
+    };
+}
+// Real preToolUse hook-input shapes (PascalCase name, file_path/command in
+// tool_input). These omit hook_event_name on purpose: a payload with no event
+// must still take the built-in arm (the script only diverts to the MCP arm on an
+// explicit beforeMCPExecution).
+export const hookWrite = (filePath, content = "x") => ({ tool_name: "Write", tool_input: { file_path: filePath, content } });
+export const hookEdit = (filePath, oldString = "a", newString = "b") => ({ tool_name: "StrReplace", tool_input: { file_path: filePath, old_string: oldString, new_string: newString } });
+export const hookShell = (command) => ({ tool_name: "Shell", tool_input: { command, cwd: "/x", timeout: 30000 } });
+export const hookDelete = (filePath) => ({ tool_name: "Delete", tool_input: { file_path: filePath } });
+export const hookRead = (filePath) => ({ tool_name: "Read", tool_input: { file_path: filePath } });
+// Real beforeMCPExecution shape (captured live): bare tool_name, tool_input as a
+// JSON STRING, server identity, and the hook_event_name discriminator.
+export const hookMcp = (name, input = {}, server = "srv") => ({
+    tool_name: name,
+    tool_input: JSON.stringify(input),
+    mcp_server_name: server,
+    command: `npx -y ${server} mcp`,
+    hook_event_name: "beforeMCPExecution",
+});
+// The preToolUse invocation Cursor makes for the same MCP call (its hooks
+// reference: MCP tools appear there as `MCP:<tool_name>`); the MCP event, not
+// this one, decides it.
+export const hookMcpPreToolUse = (name) => ({ tool_name: `MCP:${name}`, tool_input: {}, hook_event_name: "preToolUse" });
+// The subagentStart payload (`@cursor/sdk` 1.0.31 bundle): the hook answers it
+// from the agent's `Agent(type, …)` list.
+export const hookSubagentStart = (subagentType) => ({
+    subagent_id: "sa-1",
+    subagent_type: subagentType,
+    task: "do the thing",
+    parent_conversation_id: "conv-1",
+    tool_call_id: "tc-1",
+    hook_event_name: "subagentStart",
+});
+// A built-in preToolUse call by its hook name, with a cwd as Cursor sends it.
+export const hookBuiltin = (toolName, toolInput, cwd) => ({
+    tool_name: toolName,
+    tool_input: toolInput,
+    ...(cwd !== undefined ? { cwd } : {}),
+    hook_event_name: "preToolUse",
+});
+// ── The contract kits' abstract action, in both of Cursor's taxonomies ──────
+//
+// Both kits (`approval-contract`, `harness-contract`) speak of a side effect as
+// a taxonomy-free `ProposedAction`; Cursor sees the same act twice, as the
+// STREAM tool call the SDK emits (`edit` / `shell` / `delete`, lowercase) and
+// as the HOOK payload the preToolUse script judges (`Write` / `Shell` /
+// `Delete`). One translation here, so every Cursor-side substrate and subject
+// exercises the same category collapse that lets a stream-minted grant match a
+// hook-named call.
+/** Build the real preToolUse hook-input payload for an abstract action. */
+export function hookInputFor(action) {
+    switch (action.kind) {
+        case "write":
+            return hookWrite(action.resource, action.content ?? "x");
+        case "shell":
+            return hookShell(action.resource);
+        case "delete":
+            return hookDelete(action.resource);
+        case "read":
+            return hookRead(action.resource);
+        case "mcp":
+            return hookMcp(action.mcpToolName ?? "mcp_tool");
+        default: {
+            const exhaustive = action.kind;
+            throw new Error(`hookInputFor: unknown action kind ${String(exhaustive)}`);
+        }
+    }
+}
+/**
+ * Stream-side (SDK) tool name per gated category — deliberately the OTHER
+ * taxonomy from the hook input, so a grant minted from the stream matches a
+ * hook-named call only via the canonical category, not the raw name.
+ */
+export const STREAM_NAME = {
+    write: "edit",
+    shell: "shell",
+    delete: "delete",
+};
+/**
+ * The stream-side args of a gated action, mirroring {@link hookInputFor}: a
+ * write carries whole-file content (so its digest is content-exact and matches
+ * the hook's), a delete carries only a path, and a shell carries its command
+ * (the salient is already exact). The shapes the goldens' `edit` events use.
+ */
+export function streamArgsFor(action) {
+    switch (action.kind) {
+        case "shell":
+            return { command: action.resource };
+        case "delete":
+            return { path: action.resource };
+        case "write":
+            return { path: action.resource, content: action.content ?? "x" };
+        default: {
+            const exhaustive = action.kind;
+            throw new Error(`streamArgsFor: unknown gated kind ${String(exhaustive)}`);
+        }
+    }
+}
+//# sourceMappingURL=cursor-hook-harness.js.map

package/dist/activities/execute-cursor/__test-utils__/cursor-hook-harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-hook-harness.js","sourceRoot":"","sources":["../../../../src/activities/execute-cursor/__test-utils__/cursor-hook-harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3I,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAsB,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAkB,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,wBAAwB,CAAC;AAGnF;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAY,CAAC,GAAG,EAAE;IACpC,IAAI,CAAC;QACH,QAAQ,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAqHL,8GAA8G;AAC9G,MAAM,UAAU,SAAS,CAAC,OAA2E;IACnG,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACxH,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC7G,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,MAAM,cAAc,GAAuB,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAEpI;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiC,EAAE;IACxE,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IACvD,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnE,4EAA4E;IAC5E,gFAAgF;IAChF,iEAAiE;IACjE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACtG,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,+EAA+E;IAC/E,iFAAiF;IACjF,gFAAgF;IAChF,aAAa,CAAC,UAAU,EAAE,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,aAAa,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG;QACxC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzG,CAAC,EACF,OAAO,CACR,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClE,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,IAAI,KAAK,UAAU;QAAE,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,yEAAyE;IACzE,0DAA0D;IAC1D,MAAM,UAAU,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,UAAU,GAAuB;YACrC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1H,QAAQ,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC;YAChD,aAAa,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACpD,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,oBAAoB,CAAC;YACrC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE;YACvF,OAAO;YACP,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;YAC3B,mBAAmB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC;YAC5D,QAAQ;YACR,YAAY,EAAE,YAAY,CAAC,WAAW,CAAC;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,kBAAkB,CAC9B,UAAU,EACV,IAAI,CAAC,cAAc,IAAI,KAAK,EAC5B,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,EACpC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,IAAI,KAAK,EACzB,IAAI,CAAC,cAAc,IAAI,KAAK,EAC5B,IAAI,CAAC,YAAY,IAAI,IAAI,EACzB,IAAI,CAAC,cAAc,IAAI,KAAK,EAC5B,SAAS,EACT,IAAI,CAAC,UAAU,IAAI,IAAI,CACxB,CAAC;QACF,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE;QACR,WAAW;QACX,OAAO,EAAE,GAAG;QACZ,MAAM,CAAC,KAAa;YAClB,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5F,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;QAChD,CAAC;QACD,WAAW,CAAC,KAAa;YACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBAClF,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACxC,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM;YACJ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvC,OAAO,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;iBACrC,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,WAAW;YACT,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,YAAY;YACV,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,iFAAiF;AACjF,gCAAgC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,OAAO,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACrI,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,SAAS,GAAG,GAAG,EAAE,SAAS,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AACjM,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3H,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAE3G,iFAAiF;AACjF,uEAAuE;AACvE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,QAAiC,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7F,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IACjC,eAAe,EAAE,MAAM;IACvB,OAAO,EAAE,UAAU,MAAM,MAAM;IAC/B,eAAe,EAAE,oBAAoB;CACtC,CAAC,CAAC;AAEH,0EAA0E;AAC1E,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;AAEjI,+EAA+E;AAC/E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,YAAoB,EAAE,EAAE,CAAC,CAAC;IAC1D,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,YAAY;IAC3B,IAAI,EAAE,cAAc;IACpB,sBAAsB,EAAE,QAAQ;IAChC,YAAY,EAAE,MAAM;IACpB,eAAe,EAAE,eAAe;CACjC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,SAAkC,EAAE,GAAY,EAAE,EAAE,CAAC,CAAC;IAClG,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,SAAS;IACrB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,eAAe,EAAE,YAAY;CAC9B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAC9E,+EAA+E;AAC/E,mBAAmB;AAEnB,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QAC3D,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,MAAM,CAAC,IAAI,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAKD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAoC;IAC1D,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkD;IAC9E,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;QACnE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,MAAM,CAAC,IAAI,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/activities/execute-cursor/__test-utils__/fold.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Drive Cursor SDK events through the REAL pair the harness runs in production
+ * — `CursorTranslator` into `TranscriptBuilder` over the turn's `TurnRows`
+ * — and hand back what they built. The unit-test seam that replaced
+ * `new <accumulator>(messages, options)` in #1097 (the accumulator folded
+ * rows itself; now the translator emits events and the shared builder folds
+ * them), so the arms that read a row's shape after a sequence of SDK events
+ * keep their shape while the module under them changed.
+ *
+ * The same shape as the native translator's local `feedAll` in
+ * `execute-deep-agent/__tests__/translator-through-builder.test.ts`, shared
+ * here because seven Cursor test files read through it.
+ *
+ * Deltas follow the loop's discipline (`turn-stream.ts`): `observeDelta`
+ * queues, and the queue is drained into the builder after the NEXT stream
+ * event — or at {@link CursorFold.drain} for a caller that wants them applied
+ * now, the settle's own last drain before `finalize()`.
+ */
+import type { InteractionUpdate, SDKMessage } from "@cursor/sdk";
+import { TranscriptBuilder, type TranscriptObserver } from "../../../harness/transcript/builder.js";
+import { CursorTranslator, type CursorTranslatorOptions } from "../translator.js";
+import { type AgentMessage, type ToolCall, type TurnRows } from "../../../gen/turn/ai/stigmer/runner/turn/v1/rows_pb.js";
+export interface CursorFoldOptions {
+    /** The rows to build into; fresh empty ones when omitted. Their `messages` are the translator's seed. */
+    readonly turnRows?: TurnRows;
+    /**
+     * An existing `messages` array to build into BY REFERENCE (a test that
+     * hand-built its seeded rows and keeps asserting on the same objects). Wins
+     * over `turnRows`'s own array.
+     */
+    readonly messages?: AgentMessage[];
+    readonly mcpDefault?: CursorTranslatorOptions["mcpDefault"];
+    readonly leases?: CursorTranslatorOptions["leases"];
+    /** The builder's observer, as the runtime passes its turn timeline; a test that moves a fake clock between folds passes one. */
+    readonly observer?: TranscriptObserver;
+}
+export declare class CursorFold {
+    readonly turnRows: TurnRows;
+    readonly translator: CursorTranslator;
+    readonly builder: TranscriptBuilder;
+    constructor(options?: CursorFoldOptions);
+    /** One stream event, translated and folded as one observation, then the deltas queued so far — the loop's order. */
+    event(event: SDKMessage): this;
+    events(...events: SDKMessage[]): this;
+    /** One delta, queued — applied at the next {@link event} or {@link drain}. */
+    delta(update: InteractionUpdate): this;
+    drain(): this;
+    finalize(): this;
+    get messages(): AgentMessage[];
+    /** Every root row, in transcript order. */
+    rows(): ToolCall[];
+    row(callId: string): ToolCall;
+}
+/** Fold a sequence of stream events into a fresh transcript; the common one-liner. */
+export declare function foldCursorEvents(events: readonly SDKMessage[], options?: CursorFoldOptions): CursorFold;
+/**
+ * A builder over an existing `messages` array, kept BY REFERENCE (the rows
+ * are given the array itself, never a copy), so a boundary test that built
+ * its rows by hand can hand them to `reconcileDeniedToolCalls` and keep
+ * asserting on the same objects.
+ */
+export declare function builderOver(messages: AgentMessage[], executionId?: string): TranscriptBuilder;

package/dist/activities/execute-cursor/__test-utils__/fold.js

@@ -0,0 +1,94 @@
+/**
+ * Drive Cursor SDK events through the REAL pair the harness runs in production
+ * — `CursorTranslator` into `TranscriptBuilder` over the turn's `TurnRows`
+ * — and hand back what they built. The unit-test seam that replaced
+ * `new <accumulator>(messages, options)` in #1097 (the accumulator folded
+ * rows itself; now the translator emits events and the shared builder folds
+ * them), so the arms that read a row's shape after a sequence of SDK events
+ * keep their shape while the module under them changed.
+ *
+ * The same shape as the native translator's local `feedAll` in
+ * `execute-deep-agent/__tests__/translator-through-builder.test.ts`, shared
+ * here because seven Cursor test files read through it.
+ *
+ * Deltas follow the loop's discipline (`turn-stream.ts`): `observeDelta`
+ * queues, and the queue is drained into the builder after the NEXT stream
+ * event — or at {@link CursorFold.drain} for a caller that wants them applied
+ * now, the settle's own last drain before `finalize()`.
+ */
+import { create } from "@bufbuild/protobuf";
+import { RunStatusSchema } from "@stigmer/apis/ai/stigmer/agentic/run/v1/api_pb";
+import { TranscriptBuilder } from "../../../harness/transcript/builder.js";
+import { CursorTranslator } from "../translator.js";
+import { TurnRowsSchema } from "../../../gen/turn/ai/stigmer/runner/turn/v1/rows_pb.js";
+export class CursorFold {
+    turnRows;
+    translator;
+    builder;
+    constructor(options = {}) {
+        this.turnRows = options.turnRows ?? create(TurnRowsSchema, {});
+        if (options.messages)
+            this.turnRows.messages = options.messages;
+        this.translator = new CursorTranslator({
+            mcpDefault: options.mcpDefault ?? { destructive: new Set(), unlisted: new Set(), leasedServers: new Set() },
+            leases: options.leases ?? { global: false, categories: new Set() },
+            seeded: this.turnRows.messages,
+        });
+        this.builder = new TranscriptBuilder("exec-fold", this.turnRows, create(RunStatusSchema, {}), options.observer);
+    }
+    /** One stream event, translated and folded as one observation, then the deltas queued so far — the loop's order. */
+    event(event) {
+        this.builder.applyObservation(this.translator.translate(event));
+        this.drain();
+        return this;
+    }
+    events(...events) {
+        for (const e of events)
+            this.event(e);
+        return this;
+    }
+    /** One delta, queued — applied at the next {@link event} or {@link drain}. */
+    delta(update) {
+        this.translator.observeDelta(update);
+        return this;
+    }
+    drain() {
+        for (const e of this.translator.drainDeltas())
+            this.builder.apply(e);
+        return this;
+    }
+    finalize() {
+        this.drain();
+        this.builder.finalize();
+        return this;
+    }
+    get messages() {
+        return this.turnRows.messages;
+    }
+    /** Every root row, in transcript order. */
+    rows() {
+        return this.turnRows.messages.flatMap((m) => m.toolCalls);
+    }
+    row(callId) {
+        const found = this.rows().find((tc) => tc.id === callId);
+        if (!found)
+            throw new Error(`CursorFold: no row ${callId}`);
+        return found;
+    }
+}
+/** Fold a sequence of stream events into a fresh transcript; the common one-liner. */
+export function foldCursorEvents(events, options = {}) {
+    return new CursorFold(options).events(...events);
+}
+/**
+ * A builder over an existing `messages` array, kept BY REFERENCE (the rows
+ * are given the array itself, never a copy), so a boundary test that built
+ * its rows by hand can hand them to `reconcileDeniedToolCalls` and keep
+ * asserting on the same objects.
+ */
+export function builderOver(messages, executionId = "exec-boundary") {
+    const rows = create(TurnRowsSchema, {});
+    rows.messages = messages;
+    return new TranscriptBuilder(executionId, rows, create(RunStatusSchema, {}));
+}
+//# sourceMappingURL=fold.js.map

package/dist/activities/execute-cursor/__test-utils__/fold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fold.js","sourceRoot":"","sources":["../../../../src/activities/execute-cursor/__test-utils__/fold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAA2B,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAgC,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAmD,MAAM,wDAAwD,CAAC;AAiBzI,MAAM,OAAO,UAAU;IACZ,QAAQ,CAAW;IACnB,UAAU,CAAmB;IAC7B,OAAO,CAAoB;IAEpC,YAAY,UAA6B,EAAE;QACzC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC;YACrC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE;YACnH,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE;YAClE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClH,CAAC;IAED,oHAAoH;IACpH,KAAK,CAAC,KAAiB;QACrB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,GAAG,MAAoB;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,MAAyB;QAC7B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,2CAA2C;IAC3C,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,MAA6B,EAAE,UAA6B,EAAE;IAC7F,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAAwB,EAAE,WAAW,GAAG,eAAe;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,OAAO,IAAI,iBAAiB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/activities/execute-cursor/__test-utils__/gateway-substrate.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Cursor deny-oracle adapter for the HITL gateway Contract Test Kit.
+ *
+ * Drives the REAL out-of-process gateway: the runner writes the approval state
+ * file (with any grants), then the generated bash preToolUse hook makes the
+ * allow/deny decision for the tool the agent would run inside cursor-agent. There
+ * is no in-process execution to observe, so `executed` means "the hook allowed
+ * it" and the substrate cannot count executions (`observesExecution: false`).
+ *
+ * Cross-taxonomy by construction: grants are minted from the STREAM-side identity
+ * (`edit`/`shell`/`delete`), while the hook is fed the HOOK-side payload
+ * (`Write`/`Shell`/`Delete`). So every approve drive exercises the category
+ * collapse that lets a stream-minted grant match a hook-named call. The grant
+ * token binds the exact resource, so this substrate enforces lease isolation
+ * (`enforcesExactResource: true`) and implements `authorizeAfterGrant`.
+ *
+ * The lists drive compiles the agent's lists into the state file exactly as
+ * the runner does (`hook-scope.ts`), then asks the same hook. A refusal is
+ * told apart from an approval gate by the out-of-scope message the hook hands
+ * the model. Sub-agent lists are not driven here: the hook cannot tell which
+ * sub-agent calls, so the engine refuses such a turn at setup instead
+ * (`enforcesSubAgentLists: false`, pinned by `__tests__/check-tool-scope.test.ts`).
+ *
+ * The hooks drive runs the agent's hooks as the engine does: the real gate
+ * script asks a real hook server (`hook-server.ts`) in this process, which
+ * runs the contract's real commands through the evaluator over this
+ * engine's views (`hook-views.ts`). `executed` is again the gate's allow; a
+ * card is an approval-kind ledger entry; a decision on it is the next
+ * turn's gate, with the approval's grant or the person's refusal, as the
+ * runtime installs them. An allowed MCP call then gets its `postToolUse`
+ * run, and the model reads the context the gate hands back.
+ */
+import type { GatewaySubstrate } from "../../../__test-utils__/approval-contract/types.js";
+export declare function createCursorSubstrate(): GatewaySubstrate;