@stigmer/runner 3.0.1

package/dist/runner-token-coordinator.js

@@ -0,0 +1,84 @@
+/**
+ * Owns the runner's two-writer token model.
+ *
+ * The runner authenticates two surfaces with two credentials that may diverge:
+ *
+ *   - the control-plane token (the host's durable credential, e.g. the desktop's
+ *     Auth0 token), used for Authorization on control-plane gRPC; and
+ *   - the proxy token (x-stigmer-auth), used for Cursor-proxy traffic.
+ *
+ * On most hosts these are the same token. On cloud the control plane mints a
+ * dedicated iss=stigmer proxy token during bootstrap; from that point the proxy
+ * token is a *separate* credential with its own TTL, owned and refreshed here.
+ *
+ * This coordinator exists because the proxy token's freshness was the subject of
+ * two production fixes (stigmer-cloud _changelog 2026-05-26 and 2026-06-01):
+ * before them, the proxy token froze at startup and silently 401'd after the
+ * host's token refreshed. The lockstep those fixes established — "every token
+ * refresh updates the proxy sink too" — is preserved here for hosts that do not
+ * mint (see {@link RunnerTokenCoordinator.onControlPlaneTokenChanged}). Once a
+ * token is minted, freshness is instead guaranteed by {@link reMint} on a timer,
+ * and a control-plane refresh must NOT overwrite the minted token. Keeping that
+ * gate in one tested place is the whole point of this module.
+ */
+/** Fraction of a minted token's lifetime after which the runner re-mints. */
+const REFRESH_FRACTION = 0.8;
+/** Floor for the refresh delay so a tiny/absent TTL cannot spin a hot loop. */
+const MIN_REFRESH_MS = 5_000;
+/** Fallback lifetime when the server omits an expiry alongside a minted token. */
+const FALLBACK_TTL_SECONDS = 3_600;
+/** Retry delay after a failed re-mint, short enough to recover before expiry. */
+const RETRY_DELAY_MS = 60_000;
+export function createRunnerTokenCoordinator(options) {
+    const log = options.log ?? console;
+    let proxyTokenIsMinted = false;
+    let refreshTimer = null;
+    const clearTimer = () => {
+        if (refreshTimer) {
+            clearTimeout(refreshTimer);
+            refreshTimer = null;
+        }
+    };
+    const scheduleRefresh = (expiresInSeconds) => {
+        clearTimer();
+        const ttlSeconds = expiresInSeconds && expiresInSeconds > 0
+            ? expiresInSeconds
+            : FALLBACK_TTL_SECONDS;
+        const delayMs = Math.max(MIN_REFRESH_MS, Math.floor(ttlSeconds * REFRESH_FRACTION * 1000));
+        refreshTimer = setTimeout(() => {
+            void refresh();
+        }, delayMs);
+        // Do not keep the process alive solely for a token refresh.
+        refreshTimer.unref?.();
+    };
+    const refresh = async () => {
+        const refreshed = await options.reMint();
+        if (refreshed) {
+            options.applyProxyToken(refreshed.token);
+            scheduleRefresh(refreshed.expiresInSeconds);
+            log.log("[runner-token] Proxy token refreshed");
+        }
+        else {
+            // Re-mint failed or yielded no token; retry soon. The host keeps the
+            // control-plane token fresh, so a later attempt (e.g. after laptop wake)
+            // recovers without a process restart.
+            scheduleRefresh(RETRY_DELAY_MS / 1000);
+            log.warn("[runner-token] Proxy token refresh failed; will retry");
+        }
+    };
+    return {
+        adoptMintedToken(token, expiresInSeconds) {
+            proxyTokenIsMinted = true;
+            options.applyProxyToken(token);
+            scheduleRefresh(expiresInSeconds);
+        },
+        onControlPlaneTokenChanged(token) {
+            if (!proxyTokenIsMinted && token) {
+                options.applyProxyToken(token);
+            }
+        },
+        isProxyTokenMinted: () => proxyTokenIsMinted,
+        stop: clearTimer,
+    };
+}
+//# sourceMappingURL=runner-token-coordinator.js.map

package/dist/runner-token-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-token-coordinator.js","sourceRoot":"","sources":["../src/runner-token-coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,+EAA+E;AAC/E,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,kFAAkF;AAClF,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,iFAAiF;AACjF,MAAM,cAAc,GAAG,MAAM,CAAC;AAsC9B,MAAM,UAAU,4BAA4B,CAC1C,OAAsC;IAEtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;IACnC,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,YAAY,GAAyC,IAAI,CAAC;IAE9D,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,gBAAoC,EAAQ,EAAE;QACrE,UAAU,EAAE,CAAC;QACb,MAAM,UAAU,GACd,gBAAgB,IAAI,gBAAgB,GAAG,CAAC;YACtC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,oBAAoB,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,cAAc,EACd,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAAC,CACjD,CAAC;QACF,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,KAAK,OAAO,EAAE,CAAC;QACjB,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,4DAA4D;QAC5D,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,eAAe,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC5C,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,yEAAyE;YACzE,sCAAsC;YACtC,eAAe,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,gBAAgB,CAAC,KAAK,EAAE,gBAAgB;YACtC,kBAAkB,GAAG,IAAI,CAAC;YAC1B,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC/B,eAAe,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,0BAA0B,CAAC,KAAK;YAC9B,IAAI,CAAC,kBAAkB,IAAI,KAAK,EAAE,CAAC;gBACjC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,kBAAkB;QAC5C,IAAI,EAAE,UAAU;KACjB,CAAC;AACJ,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Public factory for the unified Stigmer runner.
+ *
+ * Encapsulates the full boot sequence: fetch interceptor installation,
+ * dynamic activity imports, Temporal worker creation. Consumers call
+ * {@link createStigmerRunner} with typed options and get back a handle
+ * to start/shutdown the worker.
+ *
+ * OTel tracing and metrics are intentionally excluded — they mutate
+ * global state and should be initialized by the consumer before calling
+ * this factory. The Temporal OTel activity interceptor is still wired
+ * internally when OTEL_EXPORTER_OTLP_ENDPOINT is set.
+ */
+import type { Config } from "./config.js";
+/**
+ * Configuration for creating a Stigmer runner.
+ *
+ * Required fields must be provided by the consumer. Optional fields
+ * have sensible defaults for local development.
+ */
+export interface StigmerRunnerOptions {
+    /** Temporal task queue to poll for work. */
+    readonly taskQueue: string;
+    /**
+     * Temporal server address (e.g. "localhost:7233"). Optional: when omitted, the
+     * runner self-discovers it during boot from the control plane using
+     * {@link stigmerToken} (see bootstrap.ts). An explicit value always wins.
+     */
+    readonly temporalAddress?: string;
+    /** Stigmer server endpoint for status updates, artifacts, and blueprints. */
+    readonly stigmerEndpoint: string;
+    /** Temporal namespace. @default "default" */
+    readonly temporalNamespace?: string;
+    /** Auth token for authenticating with the Stigmer server. */
+    readonly stigmerToken?: string;
+    /** Cursor API key for direct mode (not needed in proxy mode). */
+    readonly cursorApiKey?: string;
+    /** Root directory for agent workspaces. Defaults to ~/.stigmer/workspaces/runner. */
+    readonly workspaceRootDir?: string;
+    /** Maximum concurrent Temporal activity executions. @default 5 */
+    readonly maxConcurrentActivities?: number;
+    /**
+     * Stigmer proxy endpoint. When set, activates proxy mode: the fetch
+     * interceptor rewrites outbound Cursor SDK requests through the proxy,
+     * and cloud-specific behaviors (HTTP checkpointer, required auth) activate.
+     */
+    readonly proxyEndpoint?: string;
+    /** Default LLM model identifier. @default "gpt-4.1" */
+    readonly primaryModel?: string;
+    /** Checkpointer type for LangGraph agent state. @default "memory" (or "http" if proxyEndpoint is set) */
+    readonly checkpointerType?: "memory" | "http";
+    /** Checkpointer proxy endpoint. Falls back to proxyEndpoint. */
+    readonly checkpointerProxyEndpoint?: string;
+    /** Enable Cursor cloud mode for workspace-less execution. @default false */
+    readonly cloudModeEnabled?: boolean;
+    /**
+     * Workspace/filesystem execution location — where the agent actually runs.
+     *
+     * - "local": the agent operates on the host filesystem (local-path workspace
+     *   entries are valid; the desktop app and CLI daemon use this).
+     * - "cloud": the agent runs in a server-provisioned sandbox (git-only).
+     *
+     * This is intentionally distinct from {@link proxyEndpoint}, which controls
+     * credential/artifact *transport*. The desktop runner is the canonical case
+     * where the two diverge: it executes locally while routing Cursor traffic and
+     * artifacts through the proxy.
+     *
+     * When unset, the location is derived from {@link proxyEndpoint} for backward
+     * compatibility (proxy ⇒ "cloud", otherwise "local"). Set this explicitly to
+     * express local execution with proxy transport — the same decoupling
+     * {@link createStigmerRunnerManager} provides via its own `executionMode`.
+     */
+    readonly executionMode?: "local" | "cloud";
+}
+/** Handle returned by {@link createStigmerRunner}. */
+export interface StigmerRunner {
+    /** Start polling for tasks. Blocks until the worker is shut down. */
+    start(): Promise<void>;
+    /** Signal graceful shutdown — drains in-flight activities then stops. */
+    shutdown(): void;
+}
+/**
+ * Create a Stigmer runner ready to poll a Temporal task queue.
+ *
+ * Handles all internal setup: Cursor SDK fetch interceptor, activity
+ * registration, and Temporal worker creation. Returns a handle with
+ * `start()` and `shutdown()` methods.
+ *
+ * @example
+ * ```ts
+ * import { createStigmerRunner } from '@stigmer/runner';
+ *
+ * const runner = await createStigmerRunner({
+ *   taskQueue: 'session:abc-123',
+ *   temporalAddress: 'localhost:7233',
+ *   stigmerEndpoint: 'http://localhost:7234',
+ * });
+ *
+ * process.on('SIGTERM', () => runner.shutdown());
+ * await runner.start();
+ * ```
+ */
+export declare function createStigmerRunner(options: StigmerRunnerOptions): Promise<StigmerRunner>;
+export declare function mapOptionsToConfig(options: StigmerRunnerOptions): Config;

package/dist/runner.js

@@ -0,0 +1,234 @@
+/**
+ * Public factory for the unified Stigmer runner.
+ *
+ * Encapsulates the full boot sequence: fetch interceptor installation,
+ * dynamic activity imports, Temporal worker creation. Consumers call
+ * {@link createStigmerRunner} with typed options and get back a handle
+ * to start/shutdown the worker.
+ *
+ * OTel tracing and metrics are intentionally excluded — they mutate
+ * global state and should be initialized by the consumer before calling
+ * this factory. The Temporal OTel activity interceptor is still wired
+ * internally when OTEL_EXPORTER_OTLP_ENDPOINT is set.
+ */
+import { mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { homedir, tmpdir } from "node:os";
+import { resolveRunnerBootstrap } from "./bootstrap.js";
+/**
+ * Create a Stigmer runner ready to poll a Temporal task queue.
+ *
+ * Handles all internal setup: Cursor SDK fetch interceptor, activity
+ * registration, and Temporal worker creation. Returns a handle with
+ * `start()` and `shutdown()` methods.
+ *
+ * @example
+ * ```ts
+ * import { createStigmerRunner } from '@stigmer/runner';
+ *
+ * const runner = await createStigmerRunner({
+ *   taskQueue: 'session:abc-123',
+ *   temporalAddress: 'localhost:7233',
+ *   stigmerEndpoint: 'http://localhost:7234',
+ * });
+ *
+ * process.on('SIGTERM', () => runner.shutdown());
+ * await runner.start();
+ * ```
+ */
+export async function createStigmerRunner(options) {
+    validateOptions(options);
+    const baseConfig = mapOptionsToConfig(options);
+    // Install the Cursor SDK interceptors BEFORE resolving Temporal coordinates.
+    // Coordinate discovery dials the control plane via StigmerClient, which loads
+    // @connectrpc/connect-node and snapshots the node:http2 ESM facade on first
+    // import. The HTTP/2 interceptor patches http2.connect and only propagates to
+    // that facade if it runs first, so install MUST precede any connect-node load
+    // (discovery here, and the SDK later). The interceptors depend only on
+    // proxyEndpoint/stigmerToken (already in baseConfig), not resolved coordinates.
+    // The Cursor SDK captures a reference to global.fetch at import time.
+    // The fetch interceptor MUST be installed before any @cursor/sdk import.
+    const { installFetchInterceptor, getExecutionContext } = await import("./activities/execute-cursor/fetch-interceptor.js");
+    installFetchInterceptor({
+        proxyEndpoint: baseConfig.proxyEndpoint ?? undefined,
+        stigmerToken: baseConfig.stigmerToken ?? undefined,
+    });
+    // The Cursor SDK's Connect RPC transport uses native HTTP/2, bypassing
+    // globalThis.fetch. This interceptor injects x-stigmer-execution-id and
+    // the Stigmer auth token on HTTP/2 streams so the BiDi proxy can
+    // authenticate and meter billing.
+    const { installHttp2Interceptor, assertHttp2ConnectPatched } = await import("./activities/execute-cursor/http2-interceptor.js");
+    installHttp2Interceptor({
+        proxyEndpoint: baseConfig.proxyEndpoint ?? undefined,
+        stigmerToken: baseConfig.stigmerToken ?? undefined,
+    });
+    // Fail loudly at boot if a load-order regression left the node:http2 ESM
+    // facade unpatched (otherwise BiDi streams would silently 401). No-op when
+    // the interceptor is unconfigured (no proxy/token).
+    await assertHttp2ConnectPatched();
+    // Resolve Temporal coordinates after the http2 patch is in place (discovery
+    // dials the control plane through connect-node). Explicit address wins;
+    // otherwise a token triggers control-plane discovery; otherwise localhost.
+    // Activities that dial Temporal at runtime (e.g. emit-event) read
+    // config.temporalAddress, so this must precede their creation.
+    //
+    // The static runner brings its own already-proxy-valid token (harness/CLI),
+    // so it does not consume the minted runner token from the bootstrap response;
+    // that proxy-credential lifecycle lives in createStigmerRunnerManager (the
+    // long-lived desktop host that needs it). Only the coordinates are used here.
+    const coordinates = await resolveRunnerBootstrap({
+        explicitAddress: options.temporalAddress,
+        explicitNamespace: options.temporalNamespace,
+        token: options.stigmerToken,
+        stigmerEndpoint: baseConfig.stigmerBackendEndpoint,
+    });
+    const config = {
+        ...baseConfig,
+        temporalAddress: coordinates.temporalAddress,
+        temporalNamespace: coordinates.temporalNamespace,
+    };
+    const { setExecutionContextRef } = await import("./activities/execute-cursor/rejection-capture.js");
+    setExecutionContextRef(getExecutionContext());
+    const activities = await createAllActivities(config);
+    console.log(`[runner] Registered activities: ${Object.keys(activities).join(", ")}`);
+    console.log(`[runner] Task queue: ${config.taskQueue} | ` +
+        `Mode: ${config.mode} | ` +
+        `Max concurrency: ${config.maxConcurrentActivities}`);
+    const payloadCodec = await createPayloadCodec(config);
+    const { startWorker } = await import("./worker.js");
+    const worker = await startWorker({ config, activities, payloadCodec });
+    return {
+        async start() {
+            console.log("Worker ready, polling for tasks...");
+            await worker.run();
+            console.log("Worker stopped");
+        },
+        shutdown() {
+            worker.shutdown();
+        },
+    };
+}
+function validateOptions(options) {
+    if (!options.taskQueue) {
+        throw new Error("StigmerRunnerOptions.taskQueue is required — specify the Temporal task queue to poll");
+    }
+    if (!options.stigmerEndpoint) {
+        throw new Error("StigmerRunnerOptions.stigmerEndpoint is required — specify the Stigmer server endpoint (e.g. 'http://localhost:7234')");
+    }
+    // temporalAddress is intentionally NOT required: when omitted, the runner
+    // discovers it from the control plane (token-only embedding), falling back to
+    // localhost when no token is present.
+}
+export function mapOptionsToConfig(options) {
+    const proxyActive = !!options.proxyEndpoint;
+    // Execution location is independent of proxy transport. An explicit
+    // `executionMode` always wins; otherwise fall back to the proxy-derived
+    // default for backward compatibility. Setting `executionMode: "local"` with a
+    // proxy is the desktop case (local-path workspaces + proxied Cursor traffic).
+    const mode = options.executionMode ?? (proxyActive ? "cloud" : "local");
+    return {
+        taskQueue: options.taskQueue,
+        // May be empty here; createStigmerRunner resolves it via
+        // resolveRunnerBootstrap before the worker connects to Temporal.
+        temporalAddress: options.temporalAddress ?? "",
+        temporalNamespace: options.temporalNamespace ?? "default",
+        stigmerBackendEndpoint: normalizeEndpoint(options.stigmerEndpoint),
+        stigmerToken: options.stigmerToken ?? null,
+        cursorApiKey: proxyActive
+            ? (options.cursorApiKey ?? "proxy-managed")
+            : (options.cursorApiKey ?? ""),
+        workspaceRootDir: options.workspaceRootDir ?? resolveDefaultWorkspaceDir(),
+        mode,
+        proxyEndpoint: options.proxyEndpoint ?? null,
+        maxConcurrentActivities: options.maxConcurrentActivities ?? 5,
+        idleTimeoutSeconds: null,
+        cloudModeEnabled: options.cloudModeEnabled ?? false,
+        checkpointerType: options.checkpointerType
+            ?? (proxyActive ? "http" : "memory"),
+        checkpointerProxyEndpoint: options.checkpointerProxyEndpoint
+            ?? options.proxyEndpoint
+            ?? null,
+        primaryModel: options.primaryModel ?? "gpt-4.1",
+    };
+}
+/**
+ * Dynamically import all activity factories and merge into a single map.
+ *
+ * Dynamic imports are required because several modules transitively import
+ * @cursor/sdk, which captures global.fetch at import time. The fetch
+ * interceptor must be installed before these imports.
+ */
+async function createAllActivities(config) {
+    const [{ createCursorActivities }, { createDeepAgentActivities }, { createEnsureThreadActivities }, { createClassifyToolApprovalsActivities }, { createDiscoverMcpServerActivities }, { createEvaluateExpressionsActivities }, { createCallHttpActivities }, { createCallGrpcActivities }, { createCallFunctionActivities }, { createCallLlmActivities }, { createCallAgentActivities }, { createCallAgentStatusActivities }, { createRunCommandActivities }, { createHydrateWorkflowActivities }, { createWorkflowEventActivities }, { createPromoteTaskOutputActivities },] = await Promise.all([
+        import("./activities/execute-cursor/index.js"),
+        import("./activities/execute-deep-agent/index.js"),
+        import("./activities/ensure-thread.js"),
+        import("./activities/classify-tool-approvals.js"),
+        import("./activities/discover-mcp-server.js"),
+        import("./activities/evaluate-expressions.js"),
+        import("./activities/call-http.js"),
+        import("./activities/call-grpc.js"),
+        import("./activities/call-function.js"),
+        import("./activities/call-llm.js"),
+        import("./activities/call-agent.js"),
+        import("./activities/call-agent-status.js"),
+        import("./activities/run-command.js"),
+        import("./activities/hydrate-workflow-execution.js"),
+        import("./activities/workflow-event-activities.js"),
+        import("./activities/promote-task-output.js"),
+    ]);
+    return {
+        ...createCursorActivities(config),
+        ...createDeepAgentActivities(config),
+        ...createEnsureThreadActivities(),
+        ...createClassifyToolApprovalsActivities(config),
+        ...createDiscoverMcpServerActivities(config),
+        ...createEvaluateExpressionsActivities(),
+        ...createCallHttpActivities(),
+        ...createCallGrpcActivities(),
+        ...createCallFunctionActivities(),
+        ...createCallLlmActivities(),
+        ...createCallAgentActivities(),
+        ...createCallAgentStatusActivities(),
+        ...createRunCommandActivities(),
+        ...createHydrateWorkflowActivities(config),
+        ...createWorkflowEventActivities(),
+        ...createPromoteTaskOutputActivities(),
+    };
+}
+async function createPayloadCodec(config) {
+    const { loadClaimcheckConfig, ClaimcheckPayloadCodec } = await import("./claimcheck/index.js");
+    const claimcheckConfig = loadClaimcheckConfig();
+    if (!claimcheckConfig.enabled) {
+        return undefined;
+    }
+    const { loadArtifactStorageConfig, createArtifactStorage } = await import("./shared/artifact-storage.js");
+    const storageConfig = loadArtifactStorageConfig(config);
+    const storage = createArtifactStorage(storageConfig);
+    console.log(`[runner] Claimcheck enabled (threshold=${claimcheckConfig.thresholdBytes}B, ` +
+        `compression=${claimcheckConfig.compressionEnabled}, ` +
+        `storage=${storageConfig.type})`);
+    return new ClaimcheckPayloadCodec(storage, claimcheckConfig);
+}
+function resolveDefaultWorkspaceDir() {
+    try {
+        const dir = join(homedir(), ".stigmer", "workspaces", "runner");
+        mkdirSync(dir, { recursive: true });
+        return dir;
+    }
+    catch {
+        const dir = join(tmpdir(), "stigmer-runner-workspace");
+        mkdirSync(dir, { recursive: true });
+        return dir;
+    }
+}
+function normalizeEndpoint(endpoint) {
+    if (endpoint.startsWith("http://") || endpoint.startsWith("https://")) {
+        return endpoint;
+    }
+    if (endpoint.endsWith(":443")) {
+        return `https://${endpoint}`;
+    }
+    return `http://${endpoint}`;
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAI1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAqFxD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA6B;IAE7B,eAAe,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE/C,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,uEAAuE;IACvE,gFAAgF;IAEhF,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CACnE,kDAAkD,CACnD,CAAC;IACF,uBAAuB,CAAC;QACtB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;QACpD,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,SAAS;KACnD,CAAC,CAAC;IAEH,uEAAuE;IACvE,wEAAwE;IACxE,iEAAiE;IACjE,kCAAkC;IAClC,MAAM,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CACzE,kDAAkD,CACnD,CAAC;IACF,uBAAuB,CAAC;QACtB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;QACpD,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,SAAS;KACnD,CAAC,CAAC;IACH,yEAAyE;IACzE,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,yBAAyB,EAAE,CAAC;IAElC,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,kEAAkE;IAClE,+DAA+D;IAC/D,EAAE;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC;QAC/C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,KAAK,EAAE,OAAO,CAAC,YAAY;QAC3B,eAAe,EAAE,UAAU,CAAC,sBAAsB;KACnD,CAAC,CAAC;IACH,MAAM,MAAM,GAAW;QACrB,GAAG,UAAU;QACb,eAAe,EAAE,WAAW,CAAC,eAAe;QAC5C,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;KACjD,CAAC;IAEF,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC7C,kDAAkD,CACnD,CAAC;IACF,sBAAsB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAErD,OAAO,CAAC,GAAG,CACT,mCAAmC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACF,OAAO,CAAC,GAAG,CACT,wBAAwB,MAAM,CAAC,SAAS,KAAK;QAC3C,SAAS,MAAM,CAAC,IAAI,KAAK;QACzB,oBAAoB,MAAM,CAAC,uBAAuB,EAAE,CACvD,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEtD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAEvE,OAAO;QACL,KAAK,CAAC,KAAK;YACT,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAClD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;QACD,QAAQ;YACN,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAA6B;IACpD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,uHAAuH,CACxH,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,sCAAsC;AACxC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA6B;IAC9D,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAE5C,oEAAoE;IACpE,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAExE,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,yDAAyD;QACzD,iEAAiE;QACjE,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;QAC9C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,SAAS;QACzD,sBAAsB,EAAE,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC;QAClE,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,YAAY,EAAE,WAAW;YACvB,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC;YAC3C,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,EAAE;QAC1E,IAAI;QACJ,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,IAAI,CAAC;QAC7D,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;QACnD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;eACrC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtC,yBAAyB,EAAE,OAAO,CAAC,yBAAyB;eACvD,OAAO,CAAC,aAAa;eACrB,IAAI;QACT,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAAC,MAAc;IAC/C,MAAM,CACJ,EAAE,sBAAsB,EAAE,EAC1B,EAAE,yBAAyB,EAAE,EAC7B,EAAE,4BAA4B,EAAE,EAChC,EAAE,qCAAqC,EAAE,EACzC,EAAE,iCAAiC,EAAE,EACrC,EAAE,mCAAmC,EAAE,EACvC,EAAE,wBAAwB,EAAE,EAC5B,EAAE,wBAAwB,EAAE,EAC5B,EAAE,4BAA4B,EAAE,EAChC,EAAE,uBAAuB,EAAE,EAC3B,EAAE,yBAAyB,EAAE,EAC7B,EAAE,+BAA+B,EAAE,EACnC,EAAE,0BAA0B,EAAE,EAC9B,EAAE,+BAA+B,EAAE,EACnC,EAAE,6BAA6B,EAAE,EACjC,EAAE,iCAAiC,EAAE,EACtC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,sCAAsC,CAAC;QAC9C,MAAM,CAAC,0CAA0C,CAAC;QAClD,MAAM,CAAC,+BAA+B,CAAC;QACvC,MAAM,CAAC,yCAAyC,CAAC;QACjD,MAAM,CAAC,qCAAqC,CAAC;QAC7C,MAAM,CAAC,sCAAsC,CAAC;QAC9C,MAAM,CAAC,2BAA2B,CAAC;QACnC,MAAM,CAAC,2BAA2B,CAAC;QACnC,MAAM,CAAC,+BAA+B,CAAC;QACvC,MAAM,CAAC,0BAA0B,CAAC;QAClC,MAAM,CAAC,4BAA4B,CAAC;QACpC,MAAM,CAAC,mCAAmC,CAAC;QAC3C,MAAM,CAAC,6BAA6B,CAAC;QACrC,MAAM,CAAC,4CAA4C,CAAC;QACpD,MAAM,CAAC,2CAA2C,CAAC;QACnD,MAAM,CAAC,qCAAqC,CAAC;KAC9C,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,sBAAsB,CAAC,MAAM,CAAC;QACjC,GAAG,yBAAyB,CAAC,MAAM,CAAC;QACpC,GAAG,4BAA4B,EAAE;QACjC,GAAG,qCAAqC,CAAC,MAAM,CAAC;QAChD,GAAG,iCAAiC,CAAC,MAAM,CAAC;QAC5C,GAAG,mCAAmC,EAAE;QACxC,GAAG,wBAAwB,EAAE;QAC7B,GAAG,wBAAwB,EAAE;QAC7B,GAAG,4BAA4B,EAAE;QACjC,GAAG,uBAAuB,EAAE;QAC5B,GAAG,yBAAyB,EAAE;QAC9B,GAAG,+BAA+B,EAAE;QACpC,GAAG,0BAA0B,EAAE;QAC/B,GAAG,+BAA+B,CAAC,MAAM,CAAC;QAC1C,GAAG,6BAA6B,EAAE;QAClC,GAAG,iCAAiC,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC/F,MAAM,gBAAgB,GAAG,oBAAoB,EAAE,CAAC;IAChD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CACvE,8BAA8B,CAC/B,CAAC;IACF,MAAM,aAAa,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAErD,OAAO,CAAC,GAAG,CACT,0CAA0C,gBAAgB,CAAC,cAAc,KAAK;QAC5E,eAAe,gBAAgB,CAAC,kBAAkB,IAAI;QACtD,WAAW,aAAa,CAAC,IAAI,GAAG,CACnC,CAAC;IAEF,OAAO,IAAI,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,0BAA0B;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAChE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACvD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,WAAW,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,UAAU,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/dist/shared/approval-policy.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Tool approval policy evaluation — harness-agnostic.
+ *
+ * Implements the four-level policy chain:
+ * 1. McpServerStatus.tool_approvals — system-generated defaults
+ * 2. McpServerSpec.pinned_tool_approvals — manual overrides
+ * 3. McpServerUsage.tool_approval_overrides — per-agent customization
+ * 4. AgentExecutionSpec.auto_approve_all — runtime bypass
+ *
+ * Used by both ExecuteCursor (hook-deny model) and ExecuteDeepAgent
+ * (middleware interruptOn model) to determine which tools need approval.
+ */
+import type { ToolApprovalOverride } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { ResolvedMcpServer } from "./mcp-resolver.js";
+/**
+ * Returns true if any tool call in the execution history (root or sub-agent)
+ * carries an APPROVE_ALL decision.
+ *
+ * This is the runner-side realization of the APPROVE_ALL contract (see the
+ * ApprovalAction doc in enum.proto): once a user has chosen "approve and don't
+ * ask again" at any gate, the rest of THIS execution runs un-gated — exactly as
+ * if spec.auto_approve_all were true. Both harnesses (native deepagents and
+ * cursor) call this so the behavior is defined in exactly one place.
+ */
+export declare function hasApproveAllDecision(execution: AgentExecution): boolean;
+export interface MergedToolPolicy {
+    toolName: string;
+    mcpServerSlug: string;
+    requiresApproval: boolean;
+    approvalMessage: string;
+}
+/**
+ * Merge approval policies from all four levels into a single lookup map.
+ *
+ * Keys are "serverSlug/toolName" to avoid collisions between servers.
+ * When autoApproveAll is true, the returned map is empty.
+ */
+export declare function mergeApprovalPolicies(resolvedServers: ResolvedMcpServer[], agentOverrides: ToolApprovalOverride[], autoApproveAll: boolean): Map<string, MergedToolPolicy>;
+export declare function lookupMcpToolPolicy(toolName: string, mcpServerSlug: string, policies: Map<string, MergedToolPolicy>): MergedToolPolicy | undefined;
+/**
+ * Resolve {{args.field}} placeholders in an approval message using the
+ * tool's actual arguments.
+ */
+export declare function resolveApprovalMessage(template: string, toolName: string, args: Record<string, unknown>): string;

package/dist/shared/approval-policy.js

@@ -0,0 +1,122 @@
+/**
+ * Tool approval policy evaluation — harness-agnostic.
+ *
+ * Implements the four-level policy chain:
+ * 1. McpServerStatus.tool_approvals — system-generated defaults
+ * 2. McpServerSpec.pinned_tool_approvals — manual overrides
+ * 3. McpServerUsage.tool_approval_overrides — per-agent customization
+ * 4. AgentExecutionSpec.auto_approve_all — runtime bypass
+ *
+ * Used by both ExecuteCursor (hook-deny model) and ExecuteDeepAgent
+ * (middleware interruptOn model) to determine which tools need approval.
+ */
+import { ApprovalAction } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+/**
+ * Returns true if any tool call in the execution history (root or sub-agent)
+ * carries an APPROVE_ALL decision.
+ *
+ * This is the runner-side realization of the APPROVE_ALL contract (see the
+ * ApprovalAction doc in enum.proto): once a user has chosen "approve and don't
+ * ask again" at any gate, the rest of THIS execution runs un-gated — exactly as
+ * if spec.auto_approve_all were true. Both harnesses (native deepagents and
+ * cursor) call this so the behavior is defined in exactly one place.
+ */
+export function hasApproveAllDecision(execution) {
+    const status = execution.status;
+    if (!status)
+        return false;
+    for (const message of status.messages) {
+        for (const tc of message.toolCalls) {
+            if (tc.approvalAction === ApprovalAction.APPROVE_ALL)
+                return true;
+        }
+    }
+    for (const sa of status.subAgentExecutions) {
+        for (const message of sa.messages) {
+            for (const tc of message.toolCalls) {
+                if (tc.approvalAction === ApprovalAction.APPROVE_ALL)
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Merge approval policies from all four levels into a single lookup map.
+ *
+ * Keys are "serverSlug/toolName" to avoid collisions between servers.
+ * When autoApproveAll is true, the returned map is empty.
+ */
+export function mergeApprovalPolicies(resolvedServers, agentOverrides, autoApproveAll) {
+    const merged = new Map();
+    if (autoApproveAll)
+        return merged;
+    for (const server of resolvedServers) {
+        const serverPolicies = new Map();
+        for (const policy of server.toolApprovals) {
+            if (!policy.toolName)
+                continue;
+            serverPolicies.set(policy.toolName, {
+                requiresApproval: true,
+                message: policy.message || `Execute tool: ${policy.toolName}`,
+            });
+        }
+        for (const pinned of server.pinnedToolApprovals) {
+            if (!pinned.toolName)
+                continue;
+            serverPolicies.set(pinned.toolName, {
+                requiresApproval: true,
+                message: pinned.message || serverPolicies.get(pinned.toolName)?.message || `Execute tool: ${pinned.toolName}`,
+            });
+        }
+        for (const override of agentOverrides) {
+            if (!override.toolName)
+                continue;
+            const existing = serverPolicies.get(override.toolName);
+            if (existing) {
+                existing.requiresApproval = override.requiresApproval;
+                if (override.message) {
+                    existing.message = override.message;
+                }
+            }
+            else if (override.requiresApproval) {
+                serverPolicies.set(override.toolName, {
+                    requiresApproval: true,
+                    message: override.message || `Execute tool: ${override.toolName}`,
+                });
+            }
+        }
+        for (const [toolName, policy] of serverPolicies) {
+            if (!policy.requiresApproval)
+                continue;
+            const key = `${server.slug}/${toolName}`;
+            merged.set(key, {
+                toolName,
+                mcpServerSlug: server.slug,
+                requiresApproval: true,
+                approvalMessage: policy.message,
+            });
+        }
+    }
+    return merged;
+}
+export function lookupMcpToolPolicy(toolName, mcpServerSlug, policies) {
+    return policies.get(`${mcpServerSlug}/${toolName}`);
+}
+/**
+ * Resolve {{args.field}} placeholders in an approval message using the
+ * tool's actual arguments.
+ */
+export function resolveApprovalMessage(template, toolName, args) {
+    return template
+        .replace(/\{\{tool_name\}\}/g, toolName)
+        .replace(/\{\{args\.(\w+)\}\}/g, (_match, field) => {
+        const value = args[field];
+        if (value === undefined || value === null)
+            return "<unknown>";
+        if (typeof value === "string")
+            return value;
+        return JSON.stringify(value);
+    });
+}
+//# sourceMappingURL=approval-policy.js.map

package/dist/shared/approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../src/shared/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAG9F;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAyB;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;QACpE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAClC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;oBAAE,OAAO,IAAI,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAoC,EACpC,cAAsC,EACtC,cAAuB;IAEvB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,IAAI,cAAc;QAAE,OAAO,MAAM,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0D,CAAC;QAEzF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;aAC9G,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;gBACtD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBACtC,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACrC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;oBACpC,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iBAAiB,QAAQ,CAAC,QAAQ,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,QAAQ;gBACR,aAAa,EAAE,MAAM,CAAC,IAAI;gBAC1B,gBAAgB,EAAE,IAAI;gBACtB,eAAe,EAAE,MAAM,CAAC,OAAO;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,aAAqB,EACrB,QAAuC;IAEvC,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAgB,EAChB,IAA6B;IAE7B,OAAO,QAAQ;SACZ,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC;SACvC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/shared/artifact-storage.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Artifact storage abstraction for the unified runner.
+ *
+ * Two backends:
+ * - Local: writes to the filesystem, served by stigmer-server (OSS mode).
+ * - Proxy: uses presigned URLs from the Stigmer Side-Channel Proxy (cloud mode).
+ *
+ * The runner never holds R2/S3 credentials — in cloud mode it calls the proxy
+ * to obtain a presigned upload URL, then PUTs content over plain HTTPS.
+ *
+ * DD-6: No direct R2 backend. Local + Proxy only.
+ */
+import type { Config } from "../config.js";
+export interface ArtifactStorage {
+    upload(key: string, content: Buffer, contentType?: string): Promise<string>;
+    getDownloadUrl(key: string): Promise<string>;
+    exists(key: string): Promise<boolean>;
+}
+export type ArtifactStorageType = "local" | "proxy";
+export declare class LocalArtifactStorage implements ArtifactStorage {
+    private readonly basePath;
+    private readonly serveUrlBase;
+    constructor(basePath: string, serveUrlBase: string);
+    upload(key: string, content: Buffer, _contentType?: string): Promise<string>;
+    getDownloadUrl(key: string): Promise<string>;
+    exists(key: string): Promise<boolean>;
+}
+export declare class ProxyArtifactStorage implements ArtifactStorage {
+    private readonly baseUrl;
+    private readonly authToken;
+    constructor(proxyEndpoint: string, authToken: string);
+    upload(key: string, content: Buffer, contentType?: string): Promise<string>;
+    getDownloadUrl(key: string): Promise<string>;
+    exists(key: string): Promise<boolean>;
+}
+export interface ArtifactStorageConfig {
+    readonly type: ArtifactStorageType;
+    readonly localPath: string;
+    readonly localServeUrl: string;
+    readonly proxyEndpoint: string | null;
+    readonly proxyAuthToken: string | null;
+}
+export declare function loadArtifactStorageConfig(config: Config): ArtifactStorageConfig;
+export declare function createArtifactStorage(cfg: ArtifactStorageConfig): ArtifactStorage;