@stigmer/runner 3.0.1

package/dist/shared/workspace/types.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Workspace provisioning domain types.
+ *
+ * These types represent the result of workspace provisioning — they are
+ * harness-agnostic and used by both ExecuteCursor and ExecuteDeepAgent.
+ */
+export declare enum SourceType {
+    GIT_REPO = "git_repo",
+    LOCAL_PATH = "local_path",
+    EMPTY = "empty"
+}
+export interface GitMetadata {
+    readonly repoUrl: string;
+    readonly branch: string;
+    readonly baseCommit: string;
+    readonly gitCredentialsConfigured: boolean;
+}
+export interface ProvisionResult {
+    readonly rootDir: string;
+    readonly sourceType: SourceType;
+    readonly consumedKeys: readonly string[];
+    readonly workspaceDescription: string;
+    readonly fileTree?: string;
+    readonly gitMetadata?: GitMetadata;
+    readonly entryName: string;
+}
+export declare class WorkspaceProvisionError extends Error {
+    readonly sourceType: SourceType;
+    readonly cause?: Error;
+    readonly transient: boolean;
+    constructor(sourceType: SourceType, message: string, options?: {
+        cause?: Error;
+        transient?: boolean;
+    });
+}
+/**
+ * Abstraction for executing commands inside a workspace.
+ *
+ * In local mode, commands run via child_process. In cloud mode (Phase 3),
+ * commands route through the Daytona sandbox proxy.
+ *
+ * When `platformDir` is set, paths under `.stigmer/` are transparently
+ * routed to the platform directory instead of the workspace root. This
+ * keeps platform files (skills, inputs) physically separate from the
+ * user's workspace while presenting a unified `.stigmer/` namespace to
+ * the agent.
+ */
+export interface WorkspaceBackend {
+    readonly rootDir: string;
+    readonly platformDir?: string;
+    execute(command: string, options?: {
+        cwd?: string;
+    }): Promise<string>;
+    readFile(path: string): Promise<string>;
+    writeFile(path: string, content: string): Promise<void>;
+    writeFileBuffer(path: string, content: Buffer): Promise<void>;
+    exists(path: string): Promise<boolean>;
+}

package/dist/shared/workspace/types.js

@@ -0,0 +1,25 @@
+/**
+ * Workspace provisioning domain types.
+ *
+ * These types represent the result of workspace provisioning — they are
+ * harness-agnostic and used by both ExecuteCursor and ExecuteDeepAgent.
+ */
+export var SourceType;
+(function (SourceType) {
+    SourceType["GIT_REPO"] = "git_repo";
+    SourceType["LOCAL_PATH"] = "local_path";
+    SourceType["EMPTY"] = "empty";
+})(SourceType || (SourceType = {}));
+export class WorkspaceProvisionError extends Error {
+    sourceType;
+    cause;
+    transient;
+    constructor(sourceType, message, options) {
+        super(`[${sourceType}] ${message}`);
+        this.name = "WorkspaceProvisionError";
+        this.sourceType = sourceType;
+        this.cause = options?.cause;
+        this.transient = options?.transient ?? false;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/shared/workspace/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/workspace/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAN,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,uCAAyB,CAAA;IACzB,6BAAe,CAAA;AACjB,CAAC,EAJW,UAAU,KAAV,UAAU,QAIrB;AAmBD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,UAAU,CAAa;IACvB,KAAK,CAAS;IACd,SAAS,CAAU;IAE5B,YACE,UAAsB,EACtB,OAAe,EACf,OAAgD;QAEhD,KAAK,CAAC,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC;IAC/C,CAAC;CACF"}

package/dist/shared/zip-extract.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Minimal, dependency-free ZIP archive parser.
+ *
+ * Handles the local file header format, supporting stored (method 0) and
+ * deflated (method 8) entries. Returns parsed entries as path + content
+ * pairs — consumers bring their own write mechanism (WorkspaceBackend,
+ * node:fs, etc.).
+ *
+ * Extracted from skill-writer.ts so both the deep-agent and Cursor
+ * harnesses can share the same ZIP parsing logic without coupling to
+ * a specific workspace abstraction.
+ */
+export interface ZipFileEntry {
+    /** Relative path within the archive (forward-slash separated). */
+    readonly path: string;
+    /** Decoded text content of the file. */
+    readonly content: string;
+}
+/**
+ * Parse and decompress all file entries from a ZIP archive.
+ *
+ * Directory entries are always skipped. An optional `exclude` list filters
+ * entries whose filename (basename or full path) matches any excluded name.
+ *
+ * Returns an empty array for empty, truncated, or non-ZIP input rather
+ * than throwing — callers treat missing artifacts as non-fatal.
+ */
+export declare function extractZipFileEntries(zipBytes: Uint8Array, options?: {
+    exclude?: readonly string[];
+}): Promise<ZipFileEntry[]>;

package/dist/shared/zip-extract.js

@@ -0,0 +1,150 @@
+/**
+ * Minimal, dependency-free ZIP archive parser.
+ *
+ * Handles the local file header format, supporting stored (method 0) and
+ * deflated (method 8) entries. Returns parsed entries as path + content
+ * pairs — consumers bring their own write mechanism (WorkspaceBackend,
+ * node:fs, etc.).
+ *
+ * Extracted from skill-writer.ts so both the deep-agent and Cursor
+ * harnesses can share the same ZIP parsing logic without coupling to
+ * a specific workspace abstraction.
+ */
+import { createInflateRaw } from "node:zlib";
+/**
+ * Parse and decompress all file entries from a ZIP archive.
+ *
+ * Directory entries are always skipped. An optional `exclude` list filters
+ * entries whose filename (basename or full path) matches any excluded name.
+ *
+ * Returns an empty array for empty, truncated, or non-ZIP input rather
+ * than throwing — callers treat missing artifacts as non-fatal.
+ */
+export async function extractZipFileEntries(zipBytes, options) {
+    if (zipBytes.length < 4)
+        return [];
+    let entries;
+    try {
+        entries = parseZipEntries(zipBytes);
+    }
+    catch {
+        return [];
+    }
+    const excludeSet = new Set(options?.exclude ?? []);
+    const results = [];
+    for (const entry of entries) {
+        if (entry.isDirectory)
+            continue;
+        if (isExcluded(entry.name, excludeSet))
+            continue;
+        const content = await decompressEntry(entry);
+        results.push({ path: entry.name, content });
+    }
+    return results;
+}
+function isExcluded(name, excludeSet) {
+    if (excludeSet.size === 0)
+        return false;
+    if (excludeSet.has(name))
+        return true;
+    const basename = name.includes("/") ? name.slice(name.lastIndexOf("/") + 1) : name;
+    return excludeSet.has(basename);
+}
+function parseZipEntries(data) {
+    const entries = [];
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    let offset = 0;
+    while (offset < data.length - 4) {
+        const signature = view.getUint32(offset, true);
+        if (signature !== 0x04034b50)
+            break; // Local file header signature
+        const generalFlags = view.getUint16(offset + 6, true);
+        const hasDataDescriptor = (generalFlags & 0x08) !== 0;
+        const compressionMethod = view.getUint16(offset + 8, true);
+        let compressedSize = view.getUint32(offset + 18, true);
+        let uncompressedSize = view.getUint32(offset + 22, true);
+        const fileNameLength = view.getUint16(offset + 26, true);
+        const extraFieldLength = view.getUint16(offset + 28, true);
+        const fileNameStart = offset + 30;
+        const fileName = new TextDecoder().decode(data.subarray(fileNameStart, fileNameStart + fileNameLength));
+        const dataStart = fileNameStart + fileNameLength + extraFieldLength;
+        if (hasDataDescriptor && compressedSize === 0) {
+            const sizes = findDataDescriptor(data, view, dataStart, compressionMethod);
+            compressedSize = sizes.compressedSize;
+            uncompressedSize = sizes.uncompressedSize;
+        }
+        const compressedData = data.subarray(dataStart, dataStart + compressedSize);
+        entries.push({
+            name: fileName,
+            isDirectory: fileName.endsWith("/"),
+            compressedData,
+            compressionMethod,
+            uncompressedSize,
+        });
+        let nextOffset = dataStart + compressedSize;
+        if (hasDataDescriptor) {
+            if (nextOffset + 4 <= data.length && view.getUint32(nextOffset, true) === 0x08074b50) {
+                nextOffset += 16; // signature(4) + crc(4) + compressedSize(4) + uncompressedSize(4)
+            }
+            else {
+                nextOffset += 12; // crc(4) + compressedSize(4) + uncompressedSize(4)
+            }
+        }
+        offset = nextOffset;
+    }
+    return entries;
+}
+/**
+ * Scan forward from dataStart to find the data descriptor that contains
+ * the actual compressed and uncompressed sizes. Looks for either the
+ * optional signature 0x08074b50 or falls back to scanning the central
+ * directory for the matching entry.
+ */
+function findDataDescriptor(data, view, dataStart, _compressionMethod) {
+    for (let pos = dataStart; pos < data.length - 16; pos++) {
+        const sig = view.getUint32(pos, true);
+        if (sig === 0x08074b50) {
+            return {
+                compressedSize: view.getUint32(pos + 8, true),
+                uncompressedSize: view.getUint32(pos + 12, true),
+            };
+        }
+        if (sig === 0x04034b50 || sig === 0x02014b50) {
+            const descStart = pos - 12;
+            if (descStart >= dataStart) {
+                return {
+                    compressedSize: view.getUint32(descStart + 4, true),
+                    uncompressedSize: view.getUint32(descStart + 8, true),
+                };
+            }
+            break;
+        }
+    }
+    for (let pos = dataStart; pos < data.length - 4; pos++) {
+        const sig = view.getUint32(pos, true);
+        if (sig === 0x04034b50 || sig === 0x02014b50 || sig === 0x08074b50) {
+            const compressedSize = sig === 0x08074b50
+                ? view.getUint32(pos + 8, true)
+                : pos - dataStart;
+            return { compressedSize, uncompressedSize: 0 };
+        }
+    }
+    return { compressedSize: data.length - dataStart, uncompressedSize: 0 };
+}
+async function decompressEntry(entry) {
+    if (entry.compressionMethod === 0) {
+        return new TextDecoder().decode(entry.compressedData);
+    }
+    if (entry.compressionMethod === 8) {
+        return new Promise((resolve, reject) => {
+            const inflate = createInflateRaw();
+            const chunks = [];
+            inflate.on("data", (chunk) => chunks.push(chunk));
+            inflate.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+            inflate.on("error", reject);
+            inflate.end(Buffer.from(entry.compressedData));
+        });
+    }
+    throw new Error(`Unsupported ZIP compression method: ${entry.compressionMethod}`);
+}
+//# sourceMappingURL=zip-extract.js.map

package/dist/shared/zip-extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip-extract.js","sourceRoot":"","sources":["../../src/shared/zip-extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAW7C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAoB,EACpB,OAAyC;IAEzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW;YAAE,SAAS;QAChC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS;QAEjD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAYD,SAAS,UAAU,CAAC,IAAY,EAAE,UAA+B;IAC/D,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB;IACvC,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,UAAU;YAAE,MAAM,CAAC,8BAA8B;QAEnE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,iBAAiB,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAG,MAAM,GAAG,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACvC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CAAC,CAC7D,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,CAAC;QAEpE,IAAI,iBAAiB,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC3E,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAC5C,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC;QAE5E,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACnC,cAAc;YACd,iBAAiB;YACjB,gBAAgB;SACjB,CAAC,CAAC;QAEH,IAAI,UAAU,GAAG,SAAS,GAAG,cAAc,CAAC;QAC5C,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACrF,UAAU,IAAI,EAAE,CAAC,CAAC,kEAAkE;YACtF,CAAC;iBAAM,CAAC;gBACN,UAAU,IAAI,EAAE,CAAC,CAAC,mDAAmD;YACvE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,IAAgB,EAChB,IAAc,EACd,SAAiB,EACjB,kBAA0B;IAE1B,KAAK,IAAI,GAAG,GAAG,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,OAAO;gBACL,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC;gBAC7C,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,GAAG,GAAG,EAAE,CAAC;YAC3B,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;gBAC3B,OAAO;oBACL,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC;oBACnD,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC;iBACtD,CAAC;YACJ,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;IACD,KAAK,IAAI,GAAG,GAAG,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,GAAG,KAAK,UAAU;gBACvC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC;gBAC/B,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC;YACpB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAe;IAC5C,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Temporal worker setup for the unified runner service.
+ *
+ * Registers both activities and workflows on a single queue.
+ *
+ * Workflows:
+ * - "stigmer/mcp-server/connect" — ConnectMcpServerWorkflow (discover + classify)
+ * - "stigmer/mcp-server/discover" — Legacy discover-only workflow
+ * - "stigmer/workflow/execute" — CNCF Serverless Workflow execution
+ *
+ * Architecture:
+ * - Java backend starts connect workflows on the runner's task queue
+ * - This TypeScript worker handles both workflow and activity tasks
+ * - Activities are dispatched by name within the same queue
+ */
+import { Worker } from "@temporalio/worker";
+import type { PayloadCodec } from "@temporalio/common";
+import type { Config } from "./config.js";
+export interface WorkerActivities {
+    [key: string]: (...args: any[]) => Promise<unknown>;
+}
+export interface StartWorkerOptions {
+    config: Config;
+    activities: WorkerActivities;
+    payloadCodec?: PayloadCodec;
+}
+export declare function startWorker(opts: StartWorkerOptions): Promise<Worker>;

package/dist/worker.js

@@ -0,0 +1,65 @@
+/**
+ * Temporal worker setup for the unified runner service.
+ *
+ * Registers both activities and workflows on a single queue.
+ *
+ * Workflows:
+ * - "stigmer/mcp-server/connect" — ConnectMcpServerWorkflow (discover + classify)
+ * - "stigmer/mcp-server/discover" — Legacy discover-only workflow
+ * - "stigmer/workflow/execute" — CNCF Serverless Workflow execution
+ *
+ * Architecture:
+ * - Java backend starts connect workflows on the runner's task queue
+ * - This TypeScript worker handles both workflow and activity tasks
+ * - Activities are dispatched by name within the same queue
+ */
+import { fileURLToPath } from "node:url";
+import { createRequire } from "node:module";
+import { NativeConnection, Worker } from "@temporalio/worker";
+export async function startWorker(opts) {
+    const { config, activities, payloadCodec } = opts;
+    const connection = await NativeConnection.connect({
+        address: config.temporalAddress,
+    });
+    const { createWorkflowMetricsSinks } = await import("./interceptors/workflow-metrics-sink.js");
+    const activityInterceptors = [];
+    let sinks = { ...createWorkflowMetricsSinks() };
+    const workflowInterceptorModules = [];
+    if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {
+        const { OpenTelemetryActivityInboundInterceptor, makeWorkflowExporter, } = await import("@temporalio/interceptors-opentelemetry");
+        const { OTLPTraceExporter } = await import("@opentelemetry/exporter-trace-otlp-grpc");
+        const { resourceFromAttributes } = await import("@opentelemetry/resources");
+        activityInterceptors.push((ctx) => ({ inbound: new OpenTelemetryActivityInboundInterceptor(ctx) }));
+        const resource = resourceFromAttributes({ "service.name": "stigmer-runner" });
+        const exporter = new OTLPTraceExporter({
+            url: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,
+        });
+        // Type assertion needed due to OTel SDK version mismatch between
+        // @temporalio/interceptors-opentelemetry's bundled types and ours.
+        // Runtime types are compatible — this is a pure type-system issue.
+        const otelSinks = makeWorkflowExporter(exporter, resource);
+        sinks = { ...sinks, ...otelSinks };
+        const esmRequire = createRequire(import.meta.url);
+        workflowInterceptorModules.push(esmRequire.resolve("@temporalio/interceptors-opentelemetry/lib/workflow-interceptors"));
+        console.log("Temporal OpenTelemetry interceptors enabled (activity + workflow)");
+    }
+    const workflowsPath = fileURLToPath(new URL("./workflows/index.js", import.meta.url));
+    const worker = await Worker.create({
+        connection,
+        namespace: config.temporalNamespace,
+        taskQueue: config.taskQueue,
+        activities,
+        workflowsPath,
+        maxConcurrentActivityTaskExecutions: config.maxConcurrentActivities,
+        dataConverter: payloadCodec
+            ? { payloadCodecs: [payloadCodec] }
+            : undefined,
+        sinks,
+        interceptors: {
+            ...(activityInterceptors.length > 0 ? { activity: activityInterceptors } : {}),
+            ...(workflowInterceptorModules.length > 0 ? { workflowModules: workflowInterceptorModules } : {}),
+        },
+    });
+    return worker;
+}
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAwD,MAAM,oBAAoB,CAAC;AAcpH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAElD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC;QAChD,OAAO,EAAE,MAAM,CAAC,eAAe;KAChC,CAAC,CAAC;IAEH,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;IAE/F,MAAM,oBAAoB,GAAkC,EAAE,CAAC;IAC/D,IAAI,KAAK,GAAuB,EAAE,GAAG,0BAA0B,EAAE,EAAE,CAAC;IACpE,MAAM,0BAA0B,GAAa,EAAE,CAAC;IAEhD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;QAC5C,MAAM,EACJ,uCAAuC,EACvC,oBAAoB,GACrB,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;QAC3D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACtF,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE5E,oBAAoB,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,uCAAuC,CAAC,GAAG,CAAC,EAAE,CAAC,CACzE,CAAC;QAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YACrC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;SAC7C,CAAC,CAAC;QACH,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAe,EAAE,QAAe,CAAkC,CAAC;QAC1G,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAEnC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,0BAA0B,CAAC,IAAI,CAC7B,UAAU,CAAC,OAAO,CAAC,kEAAkE,CAAC,CACvF,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,aAAa,GAAG,aAAa,CACjC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACjD,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;QACjC,UAAU;QACV,SAAS,EAAE,MAAM,CAAC,iBAAiB;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU;QACV,aAAa;QACb,mCAAmC,EAAE,MAAM,CAAC,uBAAuB;QACnE,aAAa,EAAE,YAAY;YACzB,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE;YACnC,CAAC,CAAC,SAAS;QACb,KAAK;QACL,YAAY,EAAE;YACZ,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClG;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/workflow-engine/clone.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Sandbox-safe deep clone. Prefers `structuredClone` when available
+ * (Node 17+), falls back to JSON round-trip for environments that
+ * lack it — notably the Temporal deterministic V8 isolate which
+ * patches many global APIs but omits `structuredClone`.
+ *
+ * Safe for all JSON-serializable values (workflow definitions,
+ * config objects, state snapshots). Not suitable for values
+ * containing functions, Dates, or circular references.
+ */
+export declare function deepClone<T>(value: T): T;

package/dist/workflow-engine/clone.js

@@ -0,0 +1,21 @@
+/**
+ * Sandbox-safe deep clone. Prefers `structuredClone` when available
+ * (Node 17+), falls back to JSON round-trip for environments that
+ * lack it — notably the Temporal deterministic V8 isolate which
+ * patches many global APIs but omits `structuredClone`.
+ *
+ * Safe for all JSON-serializable values (workflow definitions,
+ * config objects, state snapshots). Not suitable for values
+ * containing functions, Dates, or circular references.
+ */
+export function deepClone(value) {
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value !== "object")
+        return value;
+    if (typeof globalThis.structuredClone === "function") {
+        return structuredClone(value);
+    }
+    return JSON.parse(JSON.stringify(value));
+}
+//# sourceMappingURL=clone.js.map

package/dist/workflow-engine/clone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.js","sourceRoot":"","sources":["../../src/workflow-engine/clone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,UAAU,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/workflow-engine/do-executor.d.ts

@@ -0,0 +1,27 @@
+/**
+ * DoTask executor — the core of the workflow engine. Iterates
+ * through an ordered list of tasks, handling state flow, conditional
+ * execution, output/export processing, and flow directives.
+ *
+ * This is the TypeScript equivalent of Go's `DoTaskBuilder.iterateTasks()`
+ * in `task_builder_do.go`. The execution model is an interpreter over
+ * an ordered task list with name-based jumps, not a graph walker.
+ *
+ * Flow control:
+ * - `then: "continue"` → proceed to next task (default)
+ * - `then: "end"` / `then: "exit"` → terminate
+ * - `then: "<taskName>"` → jump to the named task
+ * - Switch tasks return a `__flow_directive__` in their output
+ */
+import type { TaskList, WorkflowModel, WorkflowState, TaskExecutionContext, ExpressionEvaluator } from "./types.js";
+import type { RecoveryContext } from "./recovery.js";
+/**
+ * Executes a `do` task list — the top-level entry point and the
+ * recursive handler for nested `do` blocks.
+ *
+ * Accepts the full TaskExecutionContext for call task support.
+ * The `evaluateExpressions` parameter is kept for backward
+ * compatibility with `for.ts` — when `ctx` is omitted, a minimal
+ * context is constructed from `evaluateExpressions` and `doc`.
+ */
+export declare function executeDoTasks(tasks: TaskList, input: unknown, state: WorkflowState, doc: WorkflowModel, evaluateExpressions: ExpressionEvaluator, ctx?: TaskExecutionContext, recoveryContext?: RecoveryContext): Promise<unknown>;