@stigmer/runner 3.0.1

package/dist/activities/workflow-event-activities.js

@@ -0,0 +1,415 @@
+/**
+ * Local activities for emitting workflow execution events.
+ *
+ * Converts plain event descriptors (safe for the Temporal deterministic
+ * sandbox) into WorkflowExecutionEvent proto objects and sends them
+ * alongside a status update via gRPC. Best-effort — failures are logged
+ * but do not fail the activity.
+ *
+ * Registered as proxyLocalActivities in engine-core.ts so the workflow
+ * sandbox can emit events at task boundaries and approval gates.
+ */
+import { StigmerClient } from "../client/stigmer-client.js";
+import { loadConfig } from "../config.js";
+import { create } from "@bufbuild/protobuf";
+import { WorkflowExecutionEventSchema, WorkflowEventType, ExecutionStartedPayloadSchema, ExecutionCompletedPayloadSchema, ExecutionFailedPayloadSchema, TaskStartedPayloadSchema, TaskCompletedPayloadSchema, TaskFailedPayloadSchema, TaskSkippedPayloadSchema, TaskRetryingPayloadSchema, ApprovalRequestedPayloadSchema, ApprovalResolvedPayloadSchema, AgentCallStartedPayloadSchema, AgentCallProgressPayloadSchema, AgentCallCompletedPayloadSchema, ArtifactCreatedPayloadSchema, HumanInputOutcomeInfoSchema, } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/event_pb";
+import { WorkflowExecutionStatusSchema, WorkflowTaskSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { WorkflowExecutionUpdateStatusInputSchema, } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/io_pb";
+import { ExecutionPhase, WorkflowTaskStatus, WorkflowTaskType } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/enum_pb";
+import { WorkflowTaskKind } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+const TASK_STATUS_MAP = {
+    started: WorkflowTaskStatus.WORKFLOW_TASK_IN_PROGRESS,
+    completed: WorkflowTaskStatus.WORKFLOW_TASK_COMPLETED,
+    failed: WorkflowTaskStatus.WORKFLOW_TASK_FAILED,
+    skipped: WorkflowTaskStatus.WORKFLOW_TASK_SKIPPED,
+    waiting_approval: WorkflowTaskStatus.WORKFLOW_TASK_WAITING_APPROVAL,
+};
+/**
+ * Maps internal DSL task kind strings to proto WorkflowTaskKind enum values.
+ *
+ * IMPORTANT: Values must match the proto enum in
+ * apis/ai/stigmer/agentic/workflow/v1/enum.proto — use the imported
+ * WorkflowTaskKind enum to prevent drift.
+ *
+ * The "call:function:<sub>" entries handle call:function sub-types.
+ * The do-executor emits these composite strings so the event carries
+ * the specific proto kind (llm_call, eval, etc.) instead of the
+ * generic activity_call fallback.
+ */
+const TASK_KIND_MAP = {
+    "set": WorkflowTaskKind.set_vars,
+    "call:http": WorkflowTaskKind.http_call,
+    "call:grpc": WorkflowTaskKind.grpc_call,
+    "call:function": WorkflowTaskKind.activity_call,
+    "call:function:llm": WorkflowTaskKind.llm_call,
+    "call:function:transform": WorkflowTaskKind.transform,
+    "call:function:validate": WorkflowTaskKind.validate,
+    "call:function:emit_event": WorkflowTaskKind.emit_event,
+    "call:function:notification": WorkflowTaskKind.notification,
+    "call:function:eval": WorkflowTaskKind.eval,
+    "switch": WorkflowTaskKind.switch_case,
+    "for": WorkflowTaskKind.for_each,
+    "fork": WorkflowTaskKind.fork,
+    "try": WorkflowTaskKind.try_catch,
+    "listen": WorkflowTaskKind.listen,
+    "wait": WorkflowTaskKind.wait,
+    "raise": WorkflowTaskKind.raise_error,
+    "run": WorkflowTaskKind.run_workflow,
+    "call:function:cursor": WorkflowTaskKind.agent_call,
+    "call:agent": WorkflowTaskKind.agent_call,
+    "human_input": WorkflowTaskKind.human_input,
+};
+/**
+ * Maps DSL task kind strings to the runtime WorkflowTaskType enum
+ * for the per-task status snapshot on WorkflowExecutionStatus.tasks[].
+ */
+const TASK_KIND_TO_TYPE_MAP = {
+    "call:agent": WorkflowTaskType.WORKFLOW_TASK_AGENT_INVOCATION,
+    "call:function:llm": WorkflowTaskType.WORKFLOW_TASK_API_CALL,
+    "call:function:eval": WorkflowTaskType.WORKFLOW_TASK_API_CALL,
+    "call:function:cursor": WorkflowTaskType.WORKFLOW_TASK_AGENT_INVOCATION,
+    "call:http": WorkflowTaskType.WORKFLOW_TASK_API_CALL,
+    "call:grpc": WorkflowTaskType.WORKFLOW_TASK_API_CALL,
+    "call:function": WorkflowTaskType.WORKFLOW_TASK_API_CALL,
+    "human_input": WorkflowTaskType.WORKFLOW_TASK_APPROVAL,
+    "switch": WorkflowTaskType.WORKFLOW_TASK_CONDITIONAL,
+    "fork": WorkflowTaskType.WORKFLOW_TASK_PARALLEL,
+    "for": WorkflowTaskType.WORKFLOW_TASK_PARALLEL,
+    "set": WorkflowTaskType.WORKFLOW_TASK_TRANSFORM,
+    "call:function:transform": WorkflowTaskType.WORKFLOW_TASK_TRANSFORM,
+    "call:function:validate": WorkflowTaskType.WORKFLOW_TASK_TRANSFORM,
+    "try": WorkflowTaskType.WORKFLOW_TASK_CUSTOM,
+    "listen": WorkflowTaskType.WORKFLOW_TASK_CUSTOM,
+    "do": WorkflowTaskType.WORKFLOW_TASK_CUSTOM,
+    "wait": WorkflowTaskType.WORKFLOW_TASK_CUSTOM,
+    "raise": WorkflowTaskType.WORKFLOW_TASK_CUSTOM,
+    "run": WorkflowTaskType.WORKFLOW_TASK_CUSTOM,
+};
+/**
+ * Converts a plain JS value to a JsonObject suitable for proto Struct fields.
+ * Returns undefined if the value is not a valid JSON-serializable object.
+ */
+function toJsonObject(value) {
+    if (value === null || value === undefined)
+        return undefined;
+    if (typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    try {
+        return JSON.parse(JSON.stringify(value));
+    }
+    catch {
+        return undefined;
+    }
+}
+function buildClient() {
+    const config = loadConfig();
+    return new StigmerClient({
+        endpoint: config.stigmerBackendEndpoint,
+        token: config.stigmerToken,
+    });
+}
+let sequenceCounter = 0;
+function nextSequence() {
+    sequenceCounter += 1;
+    return BigInt(sequenceCounter);
+}
+/**
+ * Initialize the event sequence counter from the persisted high-water mark.
+ *
+ * On first run (no prior events), the counter stays at 0 and the first
+ * event gets sequence_number = 1 — identical to the original behavior.
+ *
+ * On recovery (events already persisted from a failed run), the counter
+ * is set to the highest persisted sequence_number so that new events
+ * continue from N+1, avoiding duplicate-key collisions in storage.
+ *
+ * When executionId is empty (direct executeServerlessWorkflow without a
+ * persisted execution), the counter resets to 0 as a safe fallback.
+ */
+export async function initSequenceFromEventLog(executionId) {
+    if (!executionId) {
+        sequenceCounter = 0;
+        return;
+    }
+    const client = buildClient();
+    const highWaterMark = await client.getEventLogHighWaterMark(executionId);
+    sequenceCounter = Number(highWaterMark);
+}
+/** @internal Exported for unit testing only. */
+export function toProtoEvent(desc) {
+    const base = create(WorkflowExecutionEventSchema, {
+        eventId: crypto.randomUUID(),
+        sequenceNumber: nextSequence(),
+        occurredAt: desc.occurredAt,
+        taskName: desc.taskName ?? "",
+    });
+    switch (desc.type) {
+        case "execution_started":
+            base.eventType = WorkflowEventType.execution_started;
+            base.payload = {
+                case: "executionStarted",
+                value: create(ExecutionStartedPayloadSchema, {
+                    totalTasks: desc.totalTasks,
+                    workflowId: desc.workflowId,
+                    workflowInstanceId: desc.workflowInstanceId,
+                }),
+            };
+            break;
+        case "execution_completed":
+            base.eventType = WorkflowEventType.execution_completed;
+            base.payload = {
+                case: "executionCompleted",
+                value: create(ExecutionCompletedPayloadSchema, {
+                    durationMs: BigInt(desc.durationMs),
+                    totalCostMicros: BigInt(desc.totalCostMicros),
+                    totalTokens: BigInt(desc.totalTokens),
+                }),
+            };
+            break;
+        case "execution_failed":
+            base.eventType = WorkflowEventType.execution_failed;
+            base.payload = {
+                case: "executionFailed",
+                value: create(ExecutionFailedPayloadSchema, {
+                    error: desc.error,
+                    failedTaskName: desc.failedTaskName,
+                    durationMs: BigInt(desc.durationMs),
+                }),
+            };
+            break;
+        case "task_started":
+            base.eventType = WorkflowEventType.task_started;
+            base.payload = {
+                case: "taskStarted",
+                value: create(TaskStartedPayloadSchema, {
+                    taskKind: TASK_KIND_MAP[desc.taskKind] ?? 0,
+                    attemptNumber: desc.attemptNumber,
+                }),
+            };
+            break;
+        case "task_completed":
+            base.eventType = WorkflowEventType.task_completed;
+            base.payload = {
+                case: "taskCompleted",
+                value: create(TaskCompletedPayloadSchema, {
+                    taskKind: TASK_KIND_MAP[desc.taskKind] ?? 0,
+                    durationMs: BigInt(desc.durationMs),
+                    costMicros: BigInt(desc.costMicros),
+                    tokensUsed: BigInt(desc.tokensUsed),
+                }),
+            };
+            break;
+        case "task_failed":
+            base.eventType = WorkflowEventType.task_failed;
+            base.payload = {
+                case: "taskFailed",
+                value: create(TaskFailedPayloadSchema, {
+                    taskKind: TASK_KIND_MAP[desc.taskKind] ?? 0,
+                    error: desc.error,
+                    attemptNumber: desc.attemptNumber,
+                    willRetry: desc.willRetry,
+                    durationMs: BigInt(desc.durationMs),
+                }),
+            };
+            break;
+        case "task_skipped":
+            base.eventType = WorkflowEventType.task_skipped;
+            base.payload = {
+                case: "taskSkipped",
+                value: create(TaskSkippedPayloadSchema, {
+                    taskKind: TASK_KIND_MAP[desc.taskKind] ?? 0,
+                    reason: desc.reason,
+                }),
+            };
+            break;
+        case "task_retrying":
+            base.eventType = WorkflowEventType.task_retrying;
+            base.payload = {
+                case: "taskRetrying",
+                value: create(TaskRetryingPayloadSchema, {
+                    failedAttempt: desc.failedAttempt,
+                    nextAttempt: desc.nextAttempt,
+                    delayMs: BigInt(desc.delayMs),
+                }),
+            };
+            break;
+        case "approval_requested":
+            base.eventType = WorkflowEventType.approval_requested;
+            base.payload = {
+                case: "approvalRequested",
+                value: create(ApprovalRequestedPayloadSchema, {
+                    prompt: desc.prompt,
+                    approvers: [...desc.approvers],
+                    timeoutSeconds: desc.timeoutSeconds,
+                    outcomes: desc.outcomes.map((o) => create(HumanInputOutcomeInfoSchema, { name: o.name, label: o.label })),
+                    formSchema: desc.formSchema
+                        ? desc.formSchema
+                        : undefined,
+                }),
+            };
+            break;
+        case "approval_resolved":
+            base.eventType = WorkflowEventType.approval_resolved;
+            base.payload = {
+                case: "approvalResolved",
+                value: create(ApprovalResolvedPayloadSchema, {
+                    resolvedBy: desc.resolvedBy,
+                    comment: desc.comment,
+                    waitDurationMs: BigInt(desc.waitDurationMs),
+                }),
+            };
+            break;
+        case "agent_call_started":
+            base.eventType = WorkflowEventType.agent_call_started;
+            base.payload = {
+                case: "agentCallStarted",
+                value: create(AgentCallStartedPayloadSchema, {
+                    childExecutionId: desc.childExecutionId,
+                    agentSlug: desc.agentSlug,
+                    messageSummary: desc.messageSummary,
+                }),
+            };
+            break;
+        case "agent_call_progress":
+            base.eventType = WorkflowEventType.agent_call_progress;
+            base.payload = {
+                case: "agentCallProgress",
+                value: create(AgentCallProgressPayloadSchema, {
+                    childExecutionId: desc.childExecutionId,
+                    agentPhase: desc.agentPhase,
+                    currentToolName: desc.currentToolName,
+                    tokensConsumed: BigInt(desc.tokensConsumed),
+                    messagesCount: desc.messagesCount,
+                    toolCallsCount: desc.toolCallsCount,
+                }),
+            };
+            break;
+        case "agent_call_completed":
+            base.eventType = WorkflowEventType.agent_call_completed;
+            base.payload = {
+                case: "agentCallCompleted",
+                value: create(AgentCallCompletedPayloadSchema, {
+                    childExecutionId: desc.childExecutionId,
+                    durationMs: BigInt(desc.durationMs),
+                    tokensConsumed: BigInt(desc.tokensConsumed),
+                    costMicros: BigInt(desc.costMicros),
+                    error: desc.error,
+                }),
+            };
+            break;
+        case "artifact_created":
+            base.eventType = WorkflowEventType.artifact_created;
+            base.payload = {
+                case: "artifactCreated",
+                value: create(ArtifactCreatedPayloadSchema, {
+                    artifactId: desc.artifactId,
+                    displayName: desc.displayName,
+                    contentType: desc.contentType,
+                    sizeBytes: BigInt(desc.sizeBytes),
+                }),
+            };
+            break;
+    }
+    return base;
+}
+export async function emitWorkflowEvents(executionId, events, taskStatuses) {
+    if (!executionId || events.length === 0)
+        return;
+    try {
+        const client = buildClient();
+        const protoEvents = events.map(toProtoEvent);
+        const protoTasks = (taskStatuses ?? []).map(ts => create(WorkflowTaskSchema, {
+            taskId: ts.taskId ?? "",
+            taskName: ts.taskName,
+            taskType: TASK_KIND_TO_TYPE_MAP[ts.taskKind] ?? WorkflowTaskType.WORKFLOW_TASK_TYPE_UNSPECIFIED,
+            status: TASK_STATUS_MAP[ts.status],
+            startedAt: ts.startedAt ?? "",
+            completedAt: ts.completedAt ?? "",
+            error: ts.error ?? "",
+            input: toJsonObject(ts.input),
+            output: toJsonObject(ts.output),
+            metadata: toJsonObject(ts.metadata),
+            costMicros: BigInt(ts.costMicros ?? 0),
+            inputTokens: BigInt(ts.inputTokens ?? 0),
+            outputTokens: BigInt(ts.outputTokens ?? 0),
+        }));
+        const startedEvent = events.find(e => e.type === "execution_started");
+        const completedEvent = events.find(e => e.type === "execution_completed");
+        const failedEvent = events.find(e => e.type === "execution_failed");
+        const statusFields = { tasks: protoTasks };
+        if (startedEvent) {
+            statusFields.phase = ExecutionPhase.EXECUTION_IN_PROGRESS;
+            statusFields.startedAt = startedEvent.occurredAt;
+        }
+        if (completedEvent && completedEvent.type === "execution_completed") {
+            statusFields.phase = ExecutionPhase.EXECUTION_COMPLETED;
+            statusFields.completedAt = completedEvent.occurredAt;
+            statusFields.totalCostMicros = BigInt(completedEvent.totalCostMicros);
+            statusFields.totalInputTokens = BigInt(completedEvent.totalInputTokens ?? 0);
+            statusFields.totalOutputTokens = BigInt(completedEvent.totalOutputTokens ?? 0);
+        }
+        if (failedEvent && failedEvent.type === "execution_failed") {
+            statusFields.phase = ExecutionPhase.EXECUTION_FAILED;
+            statusFields.completedAt = failedEvent.occurredAt;
+            statusFields.error = failedEvent.error;
+        }
+        const input = create(WorkflowExecutionUpdateStatusInputSchema, {
+            executionId,
+            status: create(WorkflowExecutionStatusSchema, statusFields),
+            events: protoEvents,
+        });
+        await client.workflowExecutionCommand.updateStatus(input);
+    }
+    catch (err) {
+        console.error(`Failed to emit ${events.length} workflow event(s) for ${executionId}:`, err);
+    }
+}
+const PROTO_STATUS_TO_STRING = {
+    [WorkflowTaskStatus.WORKFLOW_TASK_IN_PROGRESS]: "started",
+    [WorkflowTaskStatus.WORKFLOW_TASK_COMPLETED]: "completed",
+    [WorkflowTaskStatus.WORKFLOW_TASK_FAILED]: "failed",
+    [WorkflowTaskStatus.WORKFLOW_TASK_SKIPPED]: "skipped",
+    [WorkflowTaskStatus.WORKFLOW_TASK_WAITING_APPROVAL]: "waiting_approval",
+};
+/**
+ * Converts a proto Struct field to a plain JS object safe for Temporal
+ * serialization. Returns undefined when the field is not set.
+ */
+function structToPlain(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        return JSON.parse(JSON.stringify(value));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Loads recovery context data from the previous run's status snapshot.
+ *
+ * Fetches the WorkflowExecution and extracts status.tasks[] as plain
+ * serializable objects. The workflow sandbox builds the RecoveryContext
+ * from this data via buildRecoveryContext().
+ *
+ * Unlike emitWorkflowEvents (best-effort), this activity propagates
+ * errors — recovery context loading is required for correctness.
+ */
+export async function loadRecoveryContext(executionId) {
+    const client = buildClient();
+    const execution = await client.getWorkflowExecution(executionId);
+    const tasks = execution.status?.tasks ?? [];
+    return tasks.map(t => ({
+        taskName: t.taskName,
+        status: PROTO_STATUS_TO_STRING[t.status] ?? "unknown",
+        output: structToPlain(t.output),
+    }));
+}
+export function createWorkflowEventActivities() {
+    return {
+        EmitWorkflowEvents: emitWorkflowEvents,
+        ResetEventSequence: initSequenceFromEventLog,
+        LoadRecoveryContext: loadRecoveryContext,
+    };
+}
+//# sourceMappingURL=workflow-event-activities.js.map

package/dist/activities/workflow-event-activities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-event-activities.js","sourceRoot":"","sources":["../../src/activities/workflow-event-activities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,4BAA4B,EAE5B,iBAAiB,EACjB,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,kBAAkB,EAAE,MAAM,gEAAgE,CAAC;AACnI,OAAO,EACL,wCAAwC,GACzC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iEAAiE,CAAC;AAEvI,OAAO,EAAE,gBAAgB,EAAE,MAAM,wDAAwD,CAAC;AAM1F,MAAM,eAAe,GAA0D;IAC7E,OAAO,EAAE,kBAAkB,CAAC,yBAAyB;IACrD,SAAS,EAAE,kBAAkB,CAAC,uBAAuB;IACrD,MAAM,EAAE,kBAAkB,CAAC,oBAAoB;IAC/C,OAAO,EAAE,kBAAkB,CAAC,qBAAqB;IACjD,gBAAgB,EAAE,kBAAkB,CAAC,8BAA8B;CACpE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAE,gBAAgB,CAAC,QAAQ;IAChC,WAAW,EAAE,gBAAgB,CAAC,SAAS;IACvC,WAAW,EAAE,gBAAgB,CAAC,SAAS;IACvC,eAAe,EAAE,gBAAgB,CAAC,aAAa;IAC/C,mBAAmB,EAAE,gBAAgB,CAAC,QAAQ;IAC9C,yBAAyB,EAAE,gBAAgB,CAAC,SAAS;IACrD,wBAAwB,EAAE,gBAAgB,CAAC,QAAQ;IACnD,0BAA0B,EAAE,gBAAgB,CAAC,UAAU;IACvD,4BAA4B,EAAE,gBAAgB,CAAC,YAAY;IAC3D,oBAAoB,EAAE,gBAAgB,CAAC,IAAI;IAC3C,QAAQ,EAAE,gBAAgB,CAAC,WAAW;IACtC,KAAK,EAAE,gBAAgB,CAAC,QAAQ;IAChC,MAAM,EAAE,gBAAgB,CAAC,IAAI;IAC7B,KAAK,EAAE,gBAAgB,CAAC,SAAS;IACjC,QAAQ,EAAE,gBAAgB,CAAC,MAAM;IACjC,MAAM,EAAE,gBAAgB,CAAC,IAAI;IAC7B,OAAO,EAAE,gBAAgB,CAAC,WAAW;IACrC,KAAK,EAAE,gBAAgB,CAAC,YAAY;IACpC,sBAAsB,EAAE,gBAAgB,CAAC,UAAU;IACnD,YAAY,EAAE,gBAAgB,CAAC,UAAU;IACzC,aAAa,EAAE,gBAAgB,CAAC,WAAW;CAC5C,CAAC;AAEF;;;GAGG;AACH,MAAM,qBAAqB,GAAqC;IAC9D,YAAY,EAAE,gBAAgB,CAAC,8BAA8B;IAC7D,mBAAmB,EAAE,gBAAgB,CAAC,sBAAsB;IAC5D,oBAAoB,EAAE,gBAAgB,CAAC,sBAAsB;IAC7D,sBAAsB,EAAE,gBAAgB,CAAC,8BAA8B;IACvE,WAAW,EAAE,gBAAgB,CAAC,sBAAsB;IACpD,WAAW,EAAE,gBAAgB,CAAC,sBAAsB;IACpD,eAAe,EAAE,gBAAgB,CAAC,sBAAsB;IACxD,aAAa,EAAE,gBAAgB,CAAC,sBAAsB;IACtD,QAAQ,EAAE,gBAAgB,CAAC,yBAAyB;IACpD,MAAM,EAAE,gBAAgB,CAAC,sBAAsB;IAC/C,KAAK,EAAE,gBAAgB,CAAC,sBAAsB;IAC9C,KAAK,EAAE,gBAAgB,CAAC,uBAAuB;IAC/C,yBAAyB,EAAE,gBAAgB,CAAC,uBAAuB;IACnE,wBAAwB,EAAE,gBAAgB,CAAC,uBAAuB;IAClE,KAAK,EAAE,gBAAgB,CAAC,oBAAoB;IAC5C,QAAQ,EAAE,gBAAgB,CAAC,oBAAoB;IAC/C,IAAI,EAAE,gBAAgB,CAAC,oBAAoB;IAC3C,MAAM,EAAE,gBAAgB,CAAC,oBAAoB;IAC7C,OAAO,EAAE,gBAAgB,CAAC,oBAAoB;IAC9C,KAAK,EAAE,gBAAgB,CAAC,oBAAoB;CAC7C,CAAC;AAEF;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAe,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,IAAI,aAAa,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,IAAI,eAAe,GAAG,CAAC,CAAC;AAExB,SAAS,YAAY;IACnB,eAAe,IAAI,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,WAAmB;IAChE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,eAAe,GAAG,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACzE,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,IAA6B;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,4BAA4B,EAAE;QAChD,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;QAC5B,cAAc,EAAE,YAAY,EAAE;QAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;KAC9B,CAAC,CAAC;IAEH,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,mBAAmB;YACtB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,iBAAiB,CAAC;YACrD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,MAAM,CAAC,6BAA6B,EAAE;oBAC3C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;iBAC5C,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,qBAAqB;YACxB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,mBAAmB,CAAC;YACvD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE,MAAM,CAAC,+BAA+B,EAAE;oBAC7C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACnC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC7C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;iBACtC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,kBAAkB;YACrB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,gBAAgB,CAAC;YACpD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,MAAM,CAAC,4BAA4B,EAAE;oBAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;iBACpC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,cAAc;YACjB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,YAAY,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,MAAM,CAAC,wBAAwB,EAAE;oBACtC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3C,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,gBAAgB;YACnB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,cAAc,CAAC;YAClD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,MAAM,CAAC,0BAA0B,EAAE;oBACxC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACnC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACnC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;iBACpC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,aAAa;YAChB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,WAAW,CAAC;YAC/C,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,MAAM,CAAC,uBAAuB,EAAE;oBACrC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3C,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;iBACpC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,cAAc;YACjB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,YAAY,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,MAAM,CAAC,wBAAwB,EAAE;oBACtC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,eAAe;YAClB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC;YACjD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,MAAM,CAAC,yBAAyB,EAAE;oBACvC,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;iBAC9B,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,oBAAoB;YACvB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,kBAAkB,CAAC;YACtD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,MAAM,CAAC,8BAA8B,EAAE;oBAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;oBAC9B,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChC,MAAM,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CACtE;oBACD,UAAU,EAAE,IAAI,CAAC,UAAU;wBACzB,CAAC,CAAE,IAAI,CAAC,UAAyB;wBACjC,CAAC,CAAC,SAAS;iBACd,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,mBAAmB;YACtB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,iBAAiB,CAAC;YACrD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,MAAM,CAAC,6BAA6B,EAAE;oBAC3C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;iBAC5C,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,oBAAoB;YACvB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,kBAAkB,CAAC;YACtD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,MAAM,CAAC,6BAA6B,EAAE;oBAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,qBAAqB;YACxB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,mBAAmB,CAAC;YACvD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,MAAM,CAAC,8BAA8B,EAAE;oBAC5C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,UAAU,EAAE,IAAI,CAAC,UAAiC;oBAClD,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;oBAC3C,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,sBAAsB;YACzB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,oBAAoB,CAAC;YACxD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE,MAAM,CAAC,+BAA+B,EAAE;oBAC7C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACnC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;oBAC3C,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACnC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC;aACH,CAAC;YACF,MAAM;QAER,KAAK,kBAAkB;YACrB,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,gBAAgB,CAAC;YACpD,IAAI,CAAC,OAAO,GAAG;gBACb,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,MAAM,CAAC,4BAA4B,EAAE;oBAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;iBAClC,CAAC;aACH,CAAC;YACF,MAAM;IACV,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,MAAiC,EACjC,YAAgC;IAEhC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAC/C,MAAM,CAAC,kBAAkB,EAAE;YACzB,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE;YACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,8BAA8B;YAC/F,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC,MAAM,CAAC;YAClC,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE;YAC7B,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE;YACjC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;YACrB,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC;YAC7B,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC;YAC/B,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC;YACnC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC;YACtC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC;YACxC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,YAAY,IAAI,CAAC,CAAC;SAC3C,CAAC,CACH,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;QAEpE,MAAM,YAAY,GAA4B,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAEpE,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,GAAG,cAAc,CAAC,qBAAqB,CAAC;YAC1D,YAAY,CAAC,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC;QACnD,CAAC;QACD,IAAI,cAAc,IAAI,cAAc,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACpE,YAAY,CAAC,KAAK,GAAG,cAAc,CAAC,mBAAmB,CAAC;YACxD,YAAY,CAAC,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC;YACrD,YAAY,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACtE,YAAY,CAAC,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;YAC7E,YAAY,CAAC,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3D,YAAY,CAAC,KAAK,GAAG,cAAc,CAAC,gBAAgB,CAAC;YACrD,YAAY,CAAC,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC;YAClD,YAAY,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QACzC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,wCAAwC,EAAE;YAC7D,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,6BAA6B,EAAE,YAA4C,CAAC;YAC3F,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,kBAAkB,MAAM,CAAC,MAAM,0BAA0B,WAAW,GAAG,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,sBAAsB,GAA2B;IACrD,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,SAAS;IACzD,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,EAAE,WAAW;IACzD,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,QAAQ;IACnD,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,EAAE,SAAS;IACrD,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,EAAE,kBAAkB;CACxE,CAAC;AAEF;;;GAGG;AACH,SAAS,aAAa,CAAC,KAA6B;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;IAE5C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS;QACrD,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,kBAAkB,EAAE,kBAAkB;QACtC,kBAAkB,EAAE,wBAAwB;QAC5C,mBAAmB,EAAE,mBAAmB;KACzC,CAAC;AACJ,CAAC"}

package/dist/bootstrap.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Runner self-bootstrap for embedded runners.
+ *
+ * A cloud embedder's contract should be one endpoint plus one token. From that
+ * the runner needs two things it should not have to know or hold ahead of time:
+ * the Temporal frontend coordinates to poll for work, and (on cloud) a minted
+ * iss=stigmer access token for its Cursor-proxy traffic. This module resolves
+ * both at boot from a single control-plane call:
+ *
+ *   1. Explicit address wins. If TEMPORAL_SERVICE_ADDRESS (or the equivalent
+ *      option) is set, use it verbatim — preserves local dev and any caller that
+ *      already passes coordinates. Note: this branch does NOT call the control
+ *      plane, so no runner token is minted; pinning the address against cloud
+ *      means the runner keeps using its existing proxy token. Production desktop
+ *      does not pin the address, so this is a dev-only edge.
+ *   2. Otherwise discover. With only a token + backend endpoint, ask the control
+ *      plane (getRunnerBootstrapConfig). The token presence is the trigger: a
+ *      desktop runs MODE=local with a token + proxy, and must still discover the
+ *      cloud Temporal it cannot be expected to hardcode. The same response
+ *      carries the minted runner token (when the server mints one).
+ *   3. Otherwise localhost. A tokenless local runner (OSS, no auth) falls back
+ *      to the standard local Temporal.
+ *
+ * Two distinct failure semantics: the Temporal coordinates are load-bearing, so
+ * discovery failure throws — there is no silent localhost fallback once we have
+ * committed to discovery, because in a cloud deployment a wrong address fails
+ * later in a far more confusing way. The runner token is best-effort: a response
+ * that omits it is normal (OSS, or no signing key) and never throws — the runner
+ * just keeps its existing token.
+ */
+import type { RunnerBootstrapConfig } from "./client/stigmer-client.js";
+export interface ResolveTemporalOptions {
+    /** Explicit Temporal address from env/options. When non-empty it always wins. */
+    readonly explicitAddress?: string | null;
+    /** Explicit Temporal namespace, applied alongside an explicit/local address. */
+    readonly explicitNamespace?: string | null;
+    /** Auth token. Its presence (with no explicit address) triggers discovery. */
+    readonly token?: string | null;
+    /** Stigmer backend endpoint the runner authenticates against for discovery. */
+    readonly stigmerEndpoint: string;
+}
+/**
+ * A minimal discovery client seam, so the resolver can be unit-tested without a
+ * live control plane. Defaults to a real {@link StigmerClient}.
+ *
+ * Async because the default factory loads StigmerClient via dynamic import to
+ * keep @connectrpc/connect-node out of the pre-install module graph (see the
+ * note on the omitted static import at the top of this file).
+ */
+export type BootstrapClientFactory = (endpoint: string, token: string) => Promise<{
+    getRunnerBootstrapConfig(): Promise<RunnerBootstrapConfig>;
+}>;
+export declare function resolveRunnerBootstrap(options: ResolveTemporalOptions, clientFactory?: BootstrapClientFactory): Promise<RunnerBootstrapConfig>;
+/** A freshly minted runner proxy token and its remaining lifetime. */
+export interface RefreshedRunnerToken {
+    token: string;
+    expiresInSeconds?: number;
+}
+/**
+ * Re-mint the runner's proxy token from the control plane (best-effort).
+ *
+ * A long-lived embedded runner holds a minted iss=stigmer token with a TTL and
+ * must refresh it before expiry. Unlike {@link resolveRunnerBootstrap}, this:
+ *
+ *   - ignores the Temporal coordinates — they are resolved once at boot and do
+ *     not change for the life of the runner;
+ *   - never throws — a transient failure should trigger a retry, not crash a
+ *     running runner;
+ *   - authenticates with the caller's current control-plane token, which the
+ *     host keeps fresh independently, so re-minting works even after the
+ *     previous proxy token has fully expired (the chicken-and-egg a self-signed
+ *     refresh would hit).
+ *
+ * Returns undefined when there is no token to authenticate with, the server
+ * mints no token, or the call fails — the caller retries.
+ */
+export declare function refreshRunnerAccessToken(options: {
+    token: string | null;
+    stigmerEndpoint: string;
+}, clientFactory?: BootstrapClientFactory): Promise<RefreshedRunnerToken | undefined>;

package/dist/bootstrap.js

@@ -0,0 +1,114 @@
+/**
+ * Runner self-bootstrap for embedded runners.
+ *
+ * A cloud embedder's contract should be one endpoint plus one token. From that
+ * the runner needs two things it should not have to know or hold ahead of time:
+ * the Temporal frontend coordinates to poll for work, and (on cloud) a minted
+ * iss=stigmer access token for its Cursor-proxy traffic. This module resolves
+ * both at boot from a single control-plane call:
+ *
+ *   1. Explicit address wins. If TEMPORAL_SERVICE_ADDRESS (or the equivalent
+ *      option) is set, use it verbatim — preserves local dev and any caller that
+ *      already passes coordinates. Note: this branch does NOT call the control
+ *      plane, so no runner token is minted; pinning the address against cloud
+ *      means the runner keeps using its existing proxy token. Production desktop
+ *      does not pin the address, so this is a dev-only edge.
+ *   2. Otherwise discover. With only a token + backend endpoint, ask the control
+ *      plane (getRunnerBootstrapConfig). The token presence is the trigger: a
+ *      desktop runs MODE=local with a token + proxy, and must still discover the
+ *      cloud Temporal it cannot be expected to hardcode. The same response
+ *      carries the minted runner token (when the server mints one).
+ *   3. Otherwise localhost. A tokenless local runner (OSS, no auth) falls back
+ *      to the standard local Temporal.
+ *
+ * Two distinct failure semantics: the Temporal coordinates are load-bearing, so
+ * discovery failure throws — there is no silent localhost fallback once we have
+ * committed to discovery, because in a cloud deployment a wrong address fails
+ * later in a far more confusing way. The runner token is best-effort: a response
+ * that omits it is normal (OSS, or no signing key) and never throws — the runner
+ * just keeps its existing token.
+ */
+const LOCAL_TEMPORAL_ADDRESS = "localhost:7233";
+const DEFAULT_TEMPORAL_NAMESPACE = "default";
+const defaultClientFactory = async (endpoint, token) => {
+    const { StigmerClient } = await import("./client/stigmer-client.js");
+    return new StigmerClient({ endpoint, token });
+};
+export async function resolveRunnerBootstrap(options, clientFactory = defaultClientFactory) {
+    const explicit = options.explicitAddress?.trim();
+    const namespace = options.explicitNamespace?.trim() || DEFAULT_TEMPORAL_NAMESPACE;
+    if (explicit) {
+        return { temporalAddress: explicit, temporalNamespace: namespace };
+    }
+    const token = options.token?.trim();
+    if (!token) {
+        return {
+            temporalAddress: LOCAL_TEMPORAL_ADDRESS,
+            temporalNamespace: namespace,
+        };
+    }
+    let discovered;
+    try {
+        const client = await clientFactory(options.stigmerEndpoint, token);
+        discovered = await client.getRunnerBootstrapConfig();
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to discover Temporal coordinates from ${options.stigmerEndpoint}: ${reason}. ` +
+            "Set TEMPORAL_SERVICE_ADDRESS explicitly, or upgrade the Stigmer server to one that " +
+            "supports runner bootstrap (getRunnerBootstrapConfig).");
+    }
+    if (!discovered.temporalAddress?.trim()) {
+        throw new Error(`Runner bootstrap from ${options.stigmerEndpoint} returned an empty Temporal address. ` +
+            "Set TEMPORAL_SERVICE_ADDRESS explicitly or check the server's runner-bootstrap configuration.");
+    }
+    return {
+        temporalAddress: discovered.temporalAddress.trim(),
+        temporalNamespace: discovered.temporalNamespace?.trim() || DEFAULT_TEMPORAL_NAMESPACE,
+        // Best-effort: pass the minted token through when present. Absence is normal
+        // (OSS / no signing key) and is handled by the runner, not treated as fatal.
+        runnerAccessToken: discovered.runnerAccessToken,
+        runnerAccessTokenExpiresInSeconds: discovered.runnerAccessTokenExpiresInSeconds,
+    };
+}
+/**
+ * Re-mint the runner's proxy token from the control plane (best-effort).
+ *
+ * A long-lived embedded runner holds a minted iss=stigmer token with a TTL and
+ * must refresh it before expiry. Unlike {@link resolveRunnerBootstrap}, this:
+ *
+ *   - ignores the Temporal coordinates — they are resolved once at boot and do
+ *     not change for the life of the runner;
+ *   - never throws — a transient failure should trigger a retry, not crash a
+ *     running runner;
+ *   - authenticates with the caller's current control-plane token, which the
+ *     host keeps fresh independently, so re-minting works even after the
+ *     previous proxy token has fully expired (the chicken-and-egg a self-signed
+ *     refresh would hit).
+ *
+ * Returns undefined when there is no token to authenticate with, the server
+ * mints no token, or the call fails — the caller retries.
+ */
+export async function refreshRunnerAccessToken(options, clientFactory = defaultClientFactory) {
+    const token = options.token?.trim();
+    if (!token) {
+        return undefined;
+    }
+    try {
+        const client = await clientFactory(options.stigmerEndpoint, token);
+        const config = await client.getRunnerBootstrapConfig();
+        if (!config.runnerAccessToken) {
+            return undefined;
+        }
+        return {
+            token: config.runnerAccessToken,
+            expiresInSeconds: config.runnerAccessTokenExpiresInSeconds,
+        };
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        console.warn(`[runner] Failed to refresh runner access token: ${reason}`);
+        return undefined;
+    }
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAeH,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAChD,MAAM,0BAA0B,GAAG,SAAS,CAAC;AA0B7C,MAAM,oBAAoB,GAA2B,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;IAC7E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACrE,OAAO,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA+B,EAC/B,gBAAwC,oBAAoB;IAE5D,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,0BAA0B,CAAC;IAElF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,eAAe,EAAE,sBAAsB;YACvC,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,UAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACnE,UAAU,GAAG,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,gDAAgD,OAAO,CAAC,eAAe,KAAK,MAAM,IAAI;YACpF,qFAAqF;YACrF,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,eAAe,uCAAuC;YACrF,+FAA+F,CAClG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE;QAClD,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,0BAA0B;QACrF,6EAA6E;QAC7E,6EAA6E;QAC7E,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,iCAAiC,EAAE,UAAU,CAAC,iCAAiC;KAChF,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA0D,EAC1D,gBAAwC,oBAAoB;IAE5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,iBAAiB;YAC/B,gBAAgB,EAAE,MAAM,CAAC,iCAAiC;SAC3D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,mDAAmD,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/budget/index.d.ts

@@ -0,0 +1 @@
+export { BudgetTracker, extractCostFromOutput, type WorkflowBudget, type BudgetExceededPolicy, type CheckResult, type LimitKind, type TaskCostInfo, } from "./tracker.js";

package/dist/budget/index.js

@@ -0,0 +1,2 @@
+export { BudgetTracker, extractCostFromOutput, } from "./tracker.js";
+//# sourceMappingURL=index.js.map

package/dist/budget/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/budget/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,qBAAqB,GAMtB,MAAM,cAAc,CAAC"}