@stigmer/runner 3.0.1

package/dist/activities/execute-deep-agent/auto-publish.js

@@ -0,0 +1,71 @@
+/**
+ * Post-stream safety net for artifact publishing.
+ *
+ * Scans completed tool calls for file-modifying operations (write, edit,
+ * create) and publishes any files that were not already published inline.
+ * This catches files modified by paths not triggered during streaming
+ * (e.g., shell commands, race conditions in fire-and-forget publish).
+ */
+const FILE_MODIFYING_TOOLS = new Set([
+    "write_file",
+    "edit_file",
+    "create_file",
+    "write",
+    "edit",
+    "create",
+    "str_replace_editor",
+]);
+/**
+ * Scan all tool calls in the execution status for file-modifying operations
+ * and publish any files that were not already published inline.
+ *
+ * Returns the count of additionally published artifacts.
+ */
+export async function autoPublishWrittenFiles(status, inlinePublisher) {
+    const alreadyPublished = inlinePublisher.publishedPaths;
+    const pathsToPublish = [];
+    for (const message of status.messages) {
+        for (const tc of message.toolCalls) {
+            if (!FILE_MODIFYING_TOOLS.has(tc.name))
+                continue;
+            const filePath = extractFilePath(tc.args);
+            if (!filePath)
+                continue;
+            const normalized = filePath.replace(/^\/+/, "");
+            if (alreadyPublished.has(normalized))
+                continue;
+            if (pathsToPublish.includes(normalized))
+                continue;
+            pathsToPublish.push(normalized);
+        }
+    }
+    let count = 0;
+    for (const path of pathsToPublish) {
+        try {
+            await inlinePublisher.publish(path);
+            count++;
+        }
+        catch {
+            // InlinePublisher.publish already swallows errors internally.
+            // This catch is defense-in-depth.
+        }
+    }
+    if (count > 0) {
+        console.log(`[autoPublish] Published ${count} additional artifact(s) via safety net`);
+    }
+    return count;
+}
+function extractFilePath(args) {
+    if (!args)
+        return null;
+    if (typeof args.path === "string")
+        return args.path;
+    if (typeof args.file_path === "string")
+        return args.file_path;
+    if (typeof args.filename === "string")
+        return args.filename;
+    if (typeof args.file === "string")
+        return args.file;
+    return null;
+}
+//# sourceMappingURL=auto-publish.js.map

package/dist/activities/execute-deep-agent/auto-publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-publish.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/auto-publish.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,YAAY;IACZ,WAAW;IACX,aAAa;IACb,OAAO;IACP,MAAM;IACN,QAAQ;IACR,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA4B,EAC5B,eAAgC;IAEhC,MAAM,gBAAgB,GAAG,eAAe,CAAC,cAAc,CAAC;IACxD,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEjD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,IAA2C,CAAC,CAAC;YACjF,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC/C,IAAI,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,SAAS;YAElD,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,EAAE,CAAC;QACV,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,2BAA2B,KAAK,wCAAwC,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAyC;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC9D,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAC5D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAEpD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/activities/execute-deep-agent/environment.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Environment variable resolution for deep agent execution.
+ *
+ * Resolves the merged environment from ExecutionContext — the single
+ * source of truth for execution-scoped variables. The workflow injects
+ * all resolved variables into ExecutionContext before the activity starts.
+ *
+ * The returned result separates plaintext keys from secret keys so that
+ * downstream consumers (e.g., StatusBuilder in Phase 3b) can redact
+ * secret values in user-facing displays.
+ */
+import type { StigmerClient } from "../../client/stigmer-client.js";
+export interface EnvironmentResult {
+    readonly mergedEnvVars: Record<string, string>;
+    readonly secretKeys: ReadonlySet<string>;
+}
+/**
+ * Fetch the ExecutionContext for the given execution and extract the
+ * merged environment variables.
+ *
+ * If no ExecutionContext exists (e.g., the agent has no environment or
+ * secrets configured), returns an empty result so execution can proceed.
+ */
+export declare function resolveEnvironment(client: StigmerClient, executionId: string): Promise<EnvironmentResult>;

package/dist/activities/execute-deep-agent/environment.js

@@ -0,0 +1,50 @@
+/**
+ * Environment variable resolution for deep agent execution.
+ *
+ * Resolves the merged environment from ExecutionContext — the single
+ * source of truth for execution-scoped variables. The workflow injects
+ * all resolved variables into ExecutionContext before the activity starts.
+ *
+ * The returned result separates plaintext keys from secret keys so that
+ * downstream consumers (e.g., StatusBuilder in Phase 3b) can redact
+ * secret values in user-facing displays.
+ */
+/**
+ * Fetch the ExecutionContext for the given execution and extract the
+ * merged environment variables.
+ *
+ * If no ExecutionContext exists (e.g., the agent has no environment or
+ * secrets configured), returns an empty result so execution can proceed.
+ */
+export async function resolveEnvironment(client, executionId) {
+    let execCtx;
+    try {
+        execCtx = await client.getExecutionContextByExecutionId(executionId);
+    }
+    catch (err) {
+        // ConnectError uses numeric Code.NotFound (5); match the pattern
+        // from execute-cursor/env-resolver.ts.
+        const code = err?.code;
+        if (code === 5 || code === "not_found" || code === "NOT_FOUND") {
+            console.log(`[env] No ExecutionContext found for execution ${executionId} — ` +
+                `proceeding with empty environment.`);
+            return { mergedEnvVars: {}, secretKeys: new Set() };
+        }
+        throw err;
+    }
+    const mergedEnvVars = {};
+    const secretKeys = new Set();
+    const data = execCtx.spec?.data;
+    if (data) {
+        for (const [key, execValue] of Object.entries(data)) {
+            mergedEnvVars[key] = execValue.value;
+            if (execValue.isSecret) {
+                secretKeys.add(key);
+            }
+        }
+    }
+    console.log(`[env] Resolved environment: env_count=${Object.keys(mergedEnvVars).length}, ` +
+        `secret_count=${secretKeys.size}`);
+    return { mergedEnvVars, secretKeys };
+}
+//# sourceMappingURL=environment.js.map

package/dist/activities/execute-deep-agent/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAqB,EACrB,WAAmB;IAEnB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,iEAAiE;QACjE,uCAAuC;QACvC,MAAM,IAAI,GAAI,GAAkC,EAAE,IAAI,CAAC;QACvD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CACT,iDAAiD,WAAW,KAAK;gBACjE,oCAAoC,CACrC,CAAC;YACF,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;IAChC,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;YACrC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,IAAI;QAC9E,gBAAgB,UAAU,CAAC,IAAI,EAAE,CAClC,CAAC;IAEF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC"}

package/dist/activities/execute-deep-agent/event-recorder.d.ts

@@ -0,0 +1,21 @@
+/**
+ * V2 event recorder for capturing raw streamEvents v2 data.
+ *
+ * Activated by the V2_EVENT_RECORD_DIR environment variable. When set,
+ * the streaming loop records every raw event and flushes them atomically
+ * to a JSON file after the stream completes.
+ *
+ * This is test/development infrastructure for the v3 streaming migration.
+ * The captured events serve as a reference for building the
+ * V3ProtocolNormalizer and validating event shape mappings.
+ */
+import type { StreamEvent } from "./status-builder.js";
+export interface V2EventRecorder {
+    record(event: StreamEvent, seq: number): void;
+    flush(): Promise<void>;
+}
+/**
+ * Create a recorder if V2_EVENT_RECORD_DIR is set, otherwise return undefined.
+ * The caller does `recorder?.record(event, seq)` — zero overhead when off.
+ */
+export declare function createV2EventRecorder(executionId: string, recordDir: string | undefined): V2EventRecorder | undefined;

package/dist/activities/execute-deep-agent/event-recorder.js

@@ -0,0 +1,67 @@
+/**
+ * V2 event recorder for capturing raw streamEvents v2 data.
+ *
+ * Activated by the V2_EVENT_RECORD_DIR environment variable. When set,
+ * the streaming loop records every raw event and flushes them atomically
+ * to a JSON file after the stream completes.
+ *
+ * This is test/development infrastructure for the v3 streaming migration.
+ * The captured events serve as a reference for building the
+ * V3ProtocolNormalizer and validating event shape mappings.
+ */
+import { writeFile, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+/**
+ * Create a recorder if V2_EVENT_RECORD_DIR is set, otherwise return undefined.
+ * The caller does `recorder?.record(event, seq)` — zero overhead when off.
+ */
+export function createV2EventRecorder(executionId, recordDir) {
+    if (!recordDir)
+        return undefined;
+    return new FileV2EventRecorder(executionId, recordDir);
+}
+class FileV2EventRecorder {
+    executionId;
+    outputDir;
+    events = [];
+    constructor(executionId, outputDir) {
+        this.executionId = executionId;
+        this.outputDir = outputDir;
+    }
+    record(event, seq) {
+        this.events.push({
+            seq,
+            timestamp: new Date().toISOString(),
+            event: event.event,
+            name: event.name,
+            run_id: event.run_id,
+            data: safeClone(event.data),
+            metadata: event.metadata ? safeClone(event.metadata) : undefined,
+        });
+    }
+    async flush() {
+        if (this.events.length === 0)
+            return;
+        await mkdir(this.outputDir, { recursive: true });
+        const filePath = join(this.outputDir, `${this.executionId}.v2-events.json`);
+        const payload = {
+            executionId: this.executionId,
+            recordedAt: new Date().toISOString(),
+            eventCount: this.events.length,
+            events: this.events,
+        };
+        await writeFile(filePath, JSON.stringify(payload, bigintReplacer, 2));
+    }
+}
+function safeClone(obj) {
+    try {
+        return JSON.parse(JSON.stringify(obj, bigintReplacer));
+    }
+    catch {
+        return { _serializationError: true, keys: Object.keys(obj) };
+    }
+}
+function bigintReplacer(_key, value) {
+    return typeof value === "bigint" ? value.toString() : value;
+}
+//# sourceMappingURL=event-recorder.js.map

package/dist/activities/execute-deep-agent/event-recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-recorder.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/event-recorder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,SAA6B;IAE7B,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,IAAI,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,mBAAmB;IAIJ;IACA;IAJF,MAAM,GAAoB,EAAE,CAAC;IAE9C,YACmB,WAAmB,EACnB,SAAiB;QADjB,gBAAW,GAAX,WAAW,CAAQ;QACnB,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEJ,MAAM,CAAC,KAAkB,EAAE,GAAW;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,GAAG;YACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACjE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAI,CACnB,IAAI,CAAC,SAAS,EACd,GAAG,IAAI,CAAC,WAAW,iBAAiB,CACrC,CAAC;QAEF,MAAM,OAAO,GAAG;YACd,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;QAEF,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAA4B;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC"}

package/dist/activities/execute-deep-agent/execution-state.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Mutable execution state for the StatusBuilder.
+ *
+ * Holds the AgentExecutionStatus proto being progressively built and
+ * O(1) lookup indexes into its repeated fields. Mutations to indexed
+ * references (ToolCall, AgentMessage) propagate directly to the proto
+ * because they share the same object reference.
+ *
+ * Phase 3b-i scope: core indexes for main-agent streaming.
+ * Sub-agent routing maps and approval tracking are added in Phase 3c.
+ */
+import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { AgentMessage, ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+export declare class ExecutionState {
+    /** The protobuf projection being built. */
+    readonly proto: AgentExecutionStatus;
+    /**
+     * tool_call_id -> live ToolCall reference inside a message's repeated
+     * field. Mutations propagate directly to the proto.
+     */
+    readonly toolCalls: Map<string, ToolCall>;
+    /**
+     * LLM run_id -> the AgentMessage that run is streaming into.
+     * Prevents token interleaving when the model produces multiple runs.
+     */
+    readonly messagesByRun: Map<string, AgentMessage>;
+    /**
+     * Namespace -> most recently created AI message in that execution
+     * context. Tool calls are appended to this message's toolCalls field.
+     * Empty string key represents the main agent.
+     */
+    readonly currentAiMessage: Map<string, AgentMessage>;
+    /**
+     * Namespace -> latest LLM run_id for turn-boundary detection.
+     * When a new run_id appears in the same namespace, a new AgentMessage
+     * is created rather than appending to the existing one.
+     */
+    readonly lastLlmRunId: Map<string, string>;
+    /**
+     * Tool run_id -> monotonic start time (ms) for duration calculation.
+     * Set on on_tool_start, consumed and removed on on_tool_end.
+     */
+    readonly toolStartTimes: Map<string, number>;
+    constructor(proto: AgentExecutionStatus);
+    /**
+     * Reset all ephemeral indexes. The proto itself is not cleared —
+     * this is used when resuming from a persisted status where the proto
+     * already has messages and tool calls, but runtime tracking state
+     * (run_id maps, timing) must start fresh.
+     */
+    resetEphemeralState(): void;
+    /**
+     * Rebuild the toolCalls index from the proto's messages.
+     *
+     * Used on the resume path where the StatusBuilder is initialized
+     * with a persisted AgentExecutionStatus that already contains
+     * messages and tool calls. Only proto-derivable indexes are rebuilt;
+     * ephemeral runtime state starts fresh.
+     */
+    rebuildToolCallIndex(): void;
+}

package/dist/activities/execute-deep-agent/execution-state.js

@@ -0,0 +1,76 @@
+/**
+ * Mutable execution state for the StatusBuilder.
+ *
+ * Holds the AgentExecutionStatus proto being progressively built and
+ * O(1) lookup indexes into its repeated fields. Mutations to indexed
+ * references (ToolCall, AgentMessage) propagate directly to the proto
+ * because they share the same object reference.
+ *
+ * Phase 3b-i scope: core indexes for main-agent streaming.
+ * Sub-agent routing maps and approval tracking are added in Phase 3c.
+ */
+export class ExecutionState {
+    /** The protobuf projection being built. */
+    proto;
+    /**
+     * tool_call_id -> live ToolCall reference inside a message's repeated
+     * field. Mutations propagate directly to the proto.
+     */
+    toolCalls = new Map();
+    /**
+     * LLM run_id -> the AgentMessage that run is streaming into.
+     * Prevents token interleaving when the model produces multiple runs.
+     */
+    messagesByRun = new Map();
+    /**
+     * Namespace -> most recently created AI message in that execution
+     * context. Tool calls are appended to this message's toolCalls field.
+     * Empty string key represents the main agent.
+     */
+    currentAiMessage = new Map();
+    /**
+     * Namespace -> latest LLM run_id for turn-boundary detection.
+     * When a new run_id appears in the same namespace, a new AgentMessage
+     * is created rather than appending to the existing one.
+     */
+    lastLlmRunId = new Map();
+    /**
+     * Tool run_id -> monotonic start time (ms) for duration calculation.
+     * Set on on_tool_start, consumed and removed on on_tool_end.
+     */
+    toolStartTimes = new Map();
+    constructor(proto) {
+        this.proto = proto;
+    }
+    /**
+     * Reset all ephemeral indexes. The proto itself is not cleared —
+     * this is used when resuming from a persisted status where the proto
+     * already has messages and tool calls, but runtime tracking state
+     * (run_id maps, timing) must start fresh.
+     */
+    resetEphemeralState() {
+        this.messagesByRun.clear();
+        this.currentAiMessage.clear();
+        this.lastLlmRunId.clear();
+        this.toolStartTimes.clear();
+    }
+    /**
+     * Rebuild the toolCalls index from the proto's messages.
+     *
+     * Used on the resume path where the StatusBuilder is initialized
+     * with a persisted AgentExecutionStatus that already contains
+     * messages and tool calls. Only proto-derivable indexes are rebuilt;
+     * ephemeral runtime state starts fresh.
+     */
+    rebuildToolCallIndex() {
+        this.toolCalls.clear();
+        for (const message of this.proto.messages) {
+            for (const tc of message.toolCalls) {
+                if (tc.id) {
+                    this.toolCalls.set(tc.id, tc);
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=execution-state.js.map

package/dist/activities/execute-deep-agent/execution-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-state.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/execution-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,OAAO,cAAc;IACzB,2CAA2C;IAClC,KAAK,CAAuB;IAErC;;;OAGG;IACM,SAAS,GAA0B,IAAI,GAAG,EAAE,CAAC;IAEtD;;;OAGG;IACM,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;IAE9D;;;;OAIG;IACM,gBAAgB,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEjE;;;;OAIG;IACM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEvD;;;OAGG;IACM,cAAc,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEzD,YAAY,KAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB;QAClB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;oBACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/activities/execute-deep-agent/execution-status-writer.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Shared interface for proto mutation consumed by side-effect classes
+ * (InlinePublisher, WriteBackCoordinator) and streaming loops.
+ *
+ * Both v2 StatusBuilder and V3StatusBuilder implement this interface,
+ * decoupling side-effect classes from the specific builder version.
+ */
+import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { ExecutionArtifact } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/artifact_pb";
+import type { WorkspaceWriteBack } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/writeback_pb";
+export interface ExecutionStatusWriter {
+    readonly currentStatus: AgentExecutionStatus;
+    readonly forceNextUpdate: boolean;
+    clearForceFlag(): void;
+    addArtifact(artifact: ExecutionArtifact): void;
+    addWriteBack(wb: WorkspaceWriteBack): void;
+}

package/dist/activities/execute-deep-agent/execution-status-writer.js

@@ -0,0 +1,9 @@
+/**
+ * Shared interface for proto mutation consumed by side-effect classes
+ * (InlinePublisher, WriteBackCoordinator) and streaming loops.
+ *
+ * Both v2 StatusBuilder and V3StatusBuilder implement this interface,
+ * decoupling side-effect classes from the specific builder version.
+ */
+export {};
+//# sourceMappingURL=execution-status-writer.js.map

package/dist/activities/execute-deep-agent/execution-status-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-status-writer.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/execution-status-writer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/activities/execute-deep-agent/hitl.d.ts

@@ -0,0 +1,58 @@
+/**
+ * HITL (human-in-the-loop) resume infrastructure for ExecuteDeepAgent.
+ *
+ * On reinvocation after an approval signal, this module:
+ * 1. Reads the persisted execution status from the database
+ * 2. Queries the LangGraph checkpoint for pending interrupts
+ * 3. Matches each interrupt's tool_call_id to the user's approval decision
+ * 4. Builds a `Command(resume={...})` payload for LangGraph
+ * 5. Reconciles tool call statuses in the StatusBuilder
+ *
+ * DB-driven resume: Approval decisions are read from the persisted
+ * execution status (via `client.getExecution()`), NOT passed as Temporal
+ * activity arguments. This matches the Go workflow contract.
+ */
+import { Command } from "@langchain/langgraph";
+import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ApprovalAction } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import type { ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+export interface ResumeResult {
+    readonly graphInput: Command | Record<string, unknown>;
+    readonly isResumeFromApproval: boolean;
+    readonly hasRejection: boolean;
+    readonly rejectionReason: string;
+}
+export interface GraphStateSnapshot {
+    readonly values: Record<string, unknown>;
+    readonly tasks: readonly GraphInterrupt[];
+}
+export interface GraphInterrupt {
+    readonly id: string;
+    readonly interrupts?: readonly InterruptValue[];
+}
+export interface InterruptValue {
+    readonly value: Record<string, unknown>;
+    readonly resumeValue?: unknown;
+}
+/**
+ * Resolve the resume input for a reinvocation after approval.
+ *
+ * Returns a `Command(resume=...)` if there are pending interrupts with
+ * matching approval decisions, or a fresh user message input if this is
+ * not a resume scenario.
+ */
+export declare function resolveResumeInput(execution: AgentExecution, agentGraph: {
+    getState(config: Record<string, unknown>): Promise<GraphStateSnapshot>;
+}, langgraphConfig: Record<string, unknown>, userMessage: string): Promise<ResumeResult>;
+interface ApprovalDecisionEntry {
+    readonly action: ApprovalAction;
+    readonly comment: string;
+}
+/**
+ * Reconcile tool call statuses after resume decisions are applied.
+ *
+ * Updates the StatusBuilder's tool call entries to reflect the approval
+ * outcomes: APPROVE → RUNNING, SKIP → SKIPPED, REJECT → FAILED.
+ */
+export declare function reconcileToolCallStatuses(toolCalls: ReadonlyMap<string, ToolCall>, decisions: ReadonlyMap<string, ApprovalDecisionEntry>): void;
+export {};

package/dist/activities/execute-deep-agent/hitl.js

@@ -0,0 +1,155 @@
+/**
+ * HITL (human-in-the-loop) resume infrastructure for ExecuteDeepAgent.
+ *
+ * On reinvocation after an approval signal, this module:
+ * 1. Reads the persisted execution status from the database
+ * 2. Queries the LangGraph checkpoint for pending interrupts
+ * 3. Matches each interrupt's tool_call_id to the user's approval decision
+ * 4. Builds a `Command(resume={...})` payload for LangGraph
+ * 5. Reconciles tool call statuses in the StatusBuilder
+ *
+ * DB-driven resume: Approval decisions are read from the persisted
+ * execution status (via `client.getExecution()`), NOT passed as Temporal
+ * activity arguments. This matches the Go workflow contract.
+ */
+import { Command } from "@langchain/langgraph";
+import { ApprovalAction, ToolCallStatus, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+// APPROVE_ALL resumes the interrupted tool exactly like APPROVE. Its
+// "auto-approve the rest of the run" effect is realized in setup.ts (the
+// approval gate is disabled for the whole execution once any APPROVE_ALL
+// decision exists), not here — this map only resolves the currently
+// interrupted tool calls.
+const ACTION_MAP = new Map([
+    [ApprovalAction.APPROVE, "approve"],
+    [ApprovalAction.APPROVE_ALL, "approve"],
+    [ApprovalAction.SKIP, "skip"],
+    [ApprovalAction.REJECT, "reject"],
+]);
+/**
+ * Resolve the resume input for a reinvocation after approval.
+ *
+ * Returns a `Command(resume=...)` if there are pending interrupts with
+ * matching approval decisions, or a fresh user message input if this is
+ * not a resume scenario.
+ */
+export async function resolveResumeInput(execution, agentGraph, langgraphConfig, userMessage) {
+    const graphState = await agentGraph.getState(langgraphConfig);
+    const pendingInterrupts = extractPendingInterrupts(graphState);
+    if (pendingInterrupts.length === 0) {
+        return {
+            graphInput: { messages: [{ role: "user", content: userMessage }] },
+            isResumeFromApproval: false,
+            hasRejection: false,
+            rejectionReason: "",
+        };
+    }
+    const decisions = extractApprovalDecisions(execution);
+    if (decisions.size === 0) {
+        return {
+            graphInput: { messages: [{ role: "user", content: userMessage }] },
+            isResumeFromApproval: false,
+            hasRejection: false,
+            rejectionReason: "",
+        };
+    }
+    const resumeDict = {};
+    let hasRejection = false;
+    let rejectionReason = "";
+    for (const intr of pendingInterrupts) {
+        const toolCallId = intr.toolCallId;
+        const decision = decisions.get(toolCallId);
+        if (!decision)
+            continue;
+        const actionStr = ACTION_MAP.get(decision.action);
+        if (!actionStr)
+            continue;
+        resumeDict[intr.interruptId] = {
+            action: actionStr,
+            ...(decision.comment ? { comment: decision.comment } : {}),
+        };
+        if (decision.action === ApprovalAction.REJECT) {
+            hasRejection = true;
+            rejectionReason = decision.comment || "Rejected by user";
+        }
+    }
+    if (Object.keys(resumeDict).length === 0) {
+        return {
+            graphInput: { messages: [{ role: "user", content: userMessage }] },
+            isResumeFromApproval: false,
+            hasRejection: false,
+            rejectionReason: "",
+        };
+    }
+    console.log(`[hitl] Building resume for ${Object.keys(resumeDict).length} interrupt(s), ` +
+        `rejection=${hasRejection}`);
+    return {
+        graphInput: new Command({ resume: resumeDict }),
+        isResumeFromApproval: true,
+        hasRejection,
+        rejectionReason,
+    };
+}
+function extractPendingInterrupts(state) {
+    const result = [];
+    for (const task of state.tasks) {
+        if (!task.interrupts)
+            continue;
+        for (const intr of task.interrupts) {
+            if (intr.resumeValue !== undefined)
+                continue;
+            const value = intr.value;
+            if (typeof value === "object" && value !== null) {
+                const toolCallId = value.tool_call_id;
+                if (typeof toolCallId === "string" && toolCallId) {
+                    result.push({ interruptId: task.id, toolCallId });
+                }
+            }
+        }
+    }
+    return result;
+}
+function extractApprovalDecisions(execution) {
+    const decisions = new Map();
+    const status = execution.status;
+    if (!status)
+        return decisions;
+    for (const message of status.messages) {
+        for (const tc of message.toolCalls) {
+            if (tc.approvalAction !== ApprovalAction.UNSPECIFIED &&
+                tc.status === ToolCallStatus.TOOL_CALL_WAITING_APPROVAL) {
+                decisions.set(tc.id, {
+                    action: tc.approvalAction,
+                    comment: "",
+                });
+            }
+        }
+    }
+    return decisions;
+}
+/**
+ * Reconcile tool call statuses after resume decisions are applied.
+ *
+ * Updates the StatusBuilder's tool call entries to reflect the approval
+ * outcomes: APPROVE → RUNNING, SKIP → SKIPPED, REJECT → FAILED.
+ */
+export function reconcileToolCallStatuses(toolCalls, decisions) {
+    for (const [toolCallId, decision] of decisions) {
+        const tc = toolCalls.get(toolCallId);
+        if (!tc)
+            continue;
+        switch (decision.action) {
+            case ApprovalAction.APPROVE:
+            case ApprovalAction.APPROVE_ALL:
+                tc.status = ToolCallStatus.TOOL_CALL_RUNNING;
+                break;
+            case ApprovalAction.SKIP:
+                tc.status = ToolCallStatus.TOOL_CALL_SKIPPED;
+                break;
+            case ApprovalAction.REJECT:
+                tc.status = ToolCallStatus.TOOL_CALL_FAILED;
+                tc.error = `Rejected by user: ${decision.comment || "no reason given"}`;
+                break;
+        }
+    }
+}
+//# sourceMappingURL=hitl.js.map

package/dist/activities/execute-deep-agent/hitl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hitl.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/hitl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,8DAA8D,CAAC;AAGtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,oEAAoE;AACpE,0BAA0B;AAC1B,MAAM,UAAU,GAAwC,IAAI,GAAG,CAAC;IAC9D,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;IACnC,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC;IACvC,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;IAC7B,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;CAClC,CAAC,CAAC;AAwBH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAyB,EACzB,UAAsF,EACtF,eAAwC,EACxC,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE9D,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE;YAClE,oBAAoB,EAAE,KAAK;YAC3B,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE;YAClE,oBAAoB,EAAE,KAAK;YAC3B,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAyD,EAAE,CAAC;IAC5E,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,eAAe,GAAG,EAAE,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;YAC7B,MAAM,EAAE,SAAS;YACjB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YAC9C,YAAY,GAAG,IAAI,CAAC;YACpB,eAAe,GAAG,QAAQ,CAAC,OAAO,IAAI,kBAAkB,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE;YAClE,oBAAoB,EAAE,KAAK;YAC3B,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CACT,8BAA8B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,iBAAiB;QAC7E,aAAa,YAAY,EAAE,CAC5B,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC/C,oBAAoB,EAAE,IAAI;QAC1B,YAAY;QACZ,eAAe;KAChB,CAAC;AACJ,CAAC;AAOD,SAAS,wBAAwB,CAAC,KAAyB;IACzD,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,SAAS;YAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,UAAU,GAAI,KAAiC,CAAC,YAAY,CAAC;gBACnE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;oBACjD,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,SAAS,wBAAwB,CAC/B,SAAyB;IAEzB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IACE,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;gBAChD,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B,EACvD,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;oBACnB,MAAM,EAAE,EAAE,CAAC,cAAc;oBACzB,OAAO,EAAE,EAAE;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAwC,EACxC,SAAqD;IAErD,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,SAAS;QAElB,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,cAAc,CAAC,OAAO,CAAC;YAC5B,KAAK,cAAc,CAAC,WAAW;gBAC7B,EAAE,CAAC,MAAM,GAAG,cAAc,CAAC,iBAAiB,CAAC;gBAC7C,MAAM;YACR,KAAK,cAAc,CAAC,IAAI;gBACtB,EAAE,CAAC,MAAM,GAAG,cAAc,CAAC,iBAAiB,CAAC;gBAC7C,MAAM;YACR,KAAK,cAAc,CAAC,MAAM;gBACxB,EAAE,CAAC,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC;gBAC5C,EAAE,CAAC,KAAK,GAAG,qBAAqB,QAAQ,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;gBACxE,MAAM;QACV,CAAC;IACH,CAAC;AACH,CAAC"}