@stigmer/runner 3.0.1

package/dist/activities/execute-cursor/approval-state.js

@@ -0,0 +1,223 @@
+/**
+ * Approval state management for the hook-deny + reinvoke HITL model.
+ *
+ * Before starting a Cursor Agent run, the cursor-runner writes a state file
+ * to the workspace. The preToolUse hook script reads this file to decide
+ * whether to allow or deny each tool call.
+ *
+ * State file format (JSON):
+ * {
+ *   "autoApproveAll": false,
+ *   "builtInGatedList": ["Write", "StrReplace", "Shell", ...],
+ *   "mcpToolPolicies": {
+ *     "apply_cloud_resource": { "requiresApproval": true, "message": "..." }
+ *   },
+ *   "approvedGrants": [{ "toolName": "Write", "mcpServerSlug": "", "argKey": "a.txt" }],
+ *   "approvedGrantTokens": ["V3JpdGUKYS50eHQ="]
+ * }
+ *
+ * The hook gates only the explicitly dangerous set (builtInGatedList) and the
+ * MCP tools that require approval (mcpToolPolicies, which by construction holds
+ * only require-approval entries); every other tool is allowed. This mirrors the
+ * native harness and avoids denying auto-approved MCP tools, which are absent
+ * from the policy map and indistinguishable from unknown tools by name.
+ *
+ * Why grants instead of tool-call ids: a resumed Cursor agent re-issues the
+ * approved tool with a BRAND NEW call id, so matching on the original call id
+ * can never let the re-attempt through. Instead we grant by tool identity —
+ * tool name plus a "salient" argument (the file path for Write, the command for
+ * Shell, …; see extractArgKey). On reinvocation the hook allows a tool call
+ * only if its (name, salient-arg) matches an approved grant; rejected/skipped
+ * tools and any newly proposed dangerous tool are re-gated.
+ *
+ * Tokens: the hook is a self-contained bash script, so it cannot parse an array
+ * of grant objects. `approvedGrantTokens` is the flat, base64-encoded form of
+ * each grant that the hook matches by simple string membership. The structured
+ * `approvedGrants` is retained for readability, debugging, and tests; the two
+ * are always generated together from the same source.
+ *
+ * Denial ledger (hook → runner):
+ * The state file is the runner's INPUT to the hook. Its symmetric OUTPUT is the
+ * denial ledger (stigmer-denials.jsonl): when the hook denies a tool, it appends
+ * the call's identity token to this file. The runner reads the ledger after the
+ * run to learn which tool calls were gated — the hook is the only component that
+ * actually makes the per-call allow/deny decision, so its ledger is the
+ * authoritative "what was denied this turn" signal (the cursor analog of the
+ * native harness's LangGraph interrupts). The token uses the SAME identity space
+ * as approvedGrantTokens, so a denial token approved this turn becomes a grant
+ * token next turn.
+ */
+import { writeFile, readFile, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import { create } from "@bufbuild/protobuf";
+import { ApprovalAction, ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { PendingApprovalSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/approval_pb";
+import { getBuiltInGatedList, extractArgKey } from "./approval-policy.js";
+/**
+ * Compute the flat token the bash hook matches on. The hook recomputes the same
+ * token from the incoming tool call (`base64(toolName \n salientArg)`), so the
+ * encoding here must stay byte-identical to the hook script in hook-script.ts.
+ */
+export function grantToken(toolName, argKey) {
+    return Buffer.from(`${toolName}\n${argKey}`, "utf-8").toString("base64");
+}
+/**
+ * Build approval grants from the pending approvals the user adjudicated and
+ * their decisions. Only APPROVE decisions produce grants. Built-in tools are
+ * keyed by their salient argument; MCP tools are keyed by name only.
+ */
+export function buildApprovalGrants(pendingApprovals, decisions) {
+    const grants = [];
+    for (const pa of pendingApprovals) {
+        // Both APPROVE and APPROVE_ALL allow the adjudicated tool through on the
+        // resumed turn. APPROVE_ALL additionally flips autoApproveAll for the whole
+        // run (handled by the caller via hasApproveAllDecision), but we still emit a
+        // grant here so the clicked tool is allowed regardless of how the hook reads
+        // the state file.
+        const decision = decisions.get(pa.toolCallId);
+        if (decision !== ApprovalAction.APPROVE && decision !== ApprovalAction.APPROVE_ALL)
+            continue;
+        const argKey = pa.mcpServerSlug ? "" : extractArgKey(parseArgs(pa.argsPreview));
+        grants.push({
+            toolName: pa.toolName,
+            mcpServerSlug: pa.mcpServerSlug,
+            argKey,
+        });
+    }
+    return grants;
+}
+function parseArgs(argsPreview) {
+    if (!argsPreview)
+        return undefined;
+    try {
+        const parsed = JSON.parse(argsPreview);
+        return parsed && typeof parsed === "object" ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Build the approval state file content from merged policies and any approval
+ * grants from a previous HITL cycle.
+ *
+ * The state file drives the hook script's allow/deny decisions:
+ * - builtInGatedList: dangerous built-in tools the hook denies (unless granted)
+ * - mcpToolPolicies: per-tool policy for MCP tools requiring approval
+ * - approvedGrants / approvedGrantTokens: tools approved in the current HITL
+ *   cycle, allowed through on reinvocation
+ */
+export function buildApprovalState(mergedPolicies, autoApproveAll, grants) {
+    const approvedGrants = grants ?? [];
+    const mcpToolPolicies = {};
+    for (const policy of mergedPolicies.values()) {
+        mcpToolPolicies[policy.toolName] = {
+            requiresApproval: policy.requiresApproval,
+            message: policy.approvalMessage,
+        };
+    }
+    return {
+        autoApproveAll,
+        builtInGatedList: getBuiltInGatedList(),
+        mcpToolPolicies,
+        approvedGrants,
+        approvedGrantTokens: approvedGrants.map((g) => grantToken(g.toolName, g.argKey)),
+    };
+}
+const STATE_FILE_DIR = ".cursor/hooks";
+const STATE_FILE_NAME = "stigmer-approval-state.json";
+/**
+ * Write the approval state file to the workspace for the hook script to read.
+ *
+ * Written as COMPACT JSON (no indentation): the bash hook parses it with
+ * line-oriented grep patterns that assume `"key":value` with no spaces or
+ * newlines (e.g. `"autoApproveAll":true`, `"name":{...}`). Pretty-printing
+ * would break every lookup.
+ */
+export async function writeApprovalStateFile(workspaceRoot, state) {
+    const dir = join(workspaceRoot, STATE_FILE_DIR);
+    await mkdir(dir, { recursive: true });
+    const filePath = join(dir, STATE_FILE_NAME);
+    await writeFile(filePath, JSON.stringify(state), "utf-8");
+    return filePath;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Denial ledger (hook → runner): the authoritative record of what the hook gated
+// ─────────────────────────────────────────────────────────────────────────────
+const DENIAL_LEDGER_FILE = "stigmer-denials.jsonl";
+/** Absolute path of the per-turn denial ledger the hook appends to. */
+export function denialLedgerPath(workspaceRoot) {
+    return join(workspaceRoot, STATE_FILE_DIR, DENIAL_LEDGER_FILE);
+}
+/**
+ * Truncate the denial ledger to empty for a fresh turn, returning its path.
+ *
+ * Called every turn alongside writeApprovalStateFile (the workspace is durable
+ * and reused across HITL reinvocations), so the runner only ever reads denials
+ * produced by the current run. A Temporal activity retry re-runs this reset
+ * before re-running the agent, so the read stays deterministic under retries.
+ */
+export async function resetDenialLedger(workspaceRoot) {
+    const dir = join(workspaceRoot, STATE_FILE_DIR);
+    await mkdir(dir, { recursive: true });
+    const filePath = denialLedgerPath(workspaceRoot);
+    await writeFile(filePath, "", "utf-8");
+    return filePath;
+}
+/**
+ * Read the denial ledger written by the hook during the turn. Missing file →
+ * no denials. Blank or partially-written lines are tolerated (the hook appends
+ * line-by-line and a run can be interrupted), so a malformed tail never hides
+ * the valid denials before it.
+ */
+export async function readDenialLedger(workspaceRoot) {
+    let raw;
+    try {
+        raw = await readFile(denialLedgerPath(workspaceRoot), "utf-8");
+    }
+    catch {
+        return [];
+    }
+    const entries = [];
+    for (const line of raw.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const obj = JSON.parse(trimmed);
+            if (typeof obj.token === "string" && obj.token) {
+                entries.push({
+                    toolName: typeof obj.toolName === "string" ? obj.toolName : "",
+                    token: obj.token,
+                });
+            }
+        }
+        catch {
+            // Tolerate a partial trailing line from an interrupted hook append.
+        }
+    }
+    return entries;
+}
+export function reconstructAdjudicatedApprovals(messages) {
+    const pendingApprovals = [];
+    const decisions = new Map();
+    for (const msg of messages) {
+        for (const tc of msg.toolCalls) {
+            if (tc.status !== ToolCallStatus.TOOL_CALL_WAITING_APPROVAL)
+                continue;
+            if (tc.approvalAction === ApprovalAction.UNSPECIFIED)
+                continue;
+            decisions.set(tc.id, tc.approvalAction);
+            pendingApprovals.push(create(PendingApprovalSchema, {
+                toolCallId: tc.id,
+                toolName: tc.name,
+                message: tc.approvalMessage,
+                argsPreview: tc.argsPreview,
+                mcpServerSlug: tc.mcpServerSlug,
+                requestedAt: tc.approvalRequestedAt,
+            }));
+        }
+    }
+    return { pendingApprovals, decisions };
+}
+//# sourceMappingURL=approval-state.js.map

package/dist/activities/execute-cursor/approval-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-state.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AAIzG,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA6B1E;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,MAAc;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,gBAAmC,EACnC,SAAsC;IAEtC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClC,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,kBAAkB;QAClB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,cAAc,CAAC,OAAO,IAAI,QAAQ,KAAK,cAAc,CAAC,WAAW;YAAE,SAAS;QAE7F,MAAM,MAAM,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAA6C,EAC7C,cAAuB,EACvB,MAAwB;IAExB,MAAM,cAAc,GAAG,MAAM,IAAI,EAAE,CAAC;IAEpC,MAAM,eAAe,GAAuC,EAAE,CAAC;IAC/D,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,OAAO,EAAE,MAAM,CAAC,eAAe;SAChC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,cAAc;QACd,gBAAgB,EAAE,mBAAmB,EAAE;QACvC,eAAe;QACf,cAAc;QACd,mBAAmB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAqB,EACrB,KAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC5C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAanD,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,OAAO,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB;IAErB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA+B,CAAC;YAC9D,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;oBAC9D,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAsBD,MAAM,UAAU,+BAA+B,CAC7C,QAAwB;IAExB,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEpD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B;gBAAE,SAAS;YACtE,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;gBAAE,SAAS;YAE/D,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;YACxC,gBAAgB,CAAC,IAAI,CACnB,MAAM,CAAC,qBAAqB,EAAE;gBAC5B,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,QAAQ,EAAE,EAAE,CAAC,IAAI;gBACjB,OAAO,EAAE,EAAE,CAAC,eAAe;gBAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,WAAW,EAAE,EAAE,CAAC,mBAAmB;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC"}

package/dist/activities/execute-cursor/attachment-resolver.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Resolves execution attachments into the platform-managed directory.
+ *
+ * Attachments are files provided as inputs to the agent execution.
+ * In local mode, they are read directly from localPath. The files are
+ * placed under .stigmer/inputs/ using the platform mount pattern.
+ */
+import type { Attachment } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
+export interface ResolvedAttachment {
+    filename: string;
+    relativePath: string;
+}
+/**
+ * Resolve attachments by copying them to the platform-managed directory.
+ *
+ * In local mode: copies from localPath to .stigmer/inputs/{filename}
+ * Returns relative paths for prompt injection.
+ */
+export declare function resolveAttachments(attachments: Attachment[], sessionId: string, primaryWorkspaceDir: string, mode: "local" | "cloud"): Promise<ResolvedAttachment[]>;

package/dist/activities/execute-cursor/attachment-resolver.js

@@ -0,0 +1,52 @@
+/**
+ * Resolves execution attachments into the platform-managed directory.
+ *
+ * Attachments are files provided as inputs to the agent execution.
+ * In local mode, they are read directly from localPath. The files are
+ * placed under .stigmer/inputs/ using the platform mount pattern.
+ */
+import { mkdir, copyFile } from "node:fs/promises";
+import { join, basename } from "node:path";
+import { getPlatformDir } from "../../shared/workspace/platform-dir.js";
+const STIGMER_LOCAL_STATE_DIR = ".stigmer";
+const INPUTS_SUBDIR = "inputs";
+/**
+ * Resolve attachments by copying them to the platform-managed directory.
+ *
+ * In local mode: copies from localPath to .stigmer/inputs/{filename}
+ * Returns relative paths for prompt injection.
+ */
+export async function resolveAttachments(attachments, sessionId, primaryWorkspaceDir, mode) {
+    if (attachments.length === 0)
+        return [];
+    const platformDir = getPlatformDir(sessionId);
+    const inputsDir = join(platformDir, INPUTS_SUBDIR);
+    await mkdir(inputsDir, { recursive: true });
+    const results = [];
+    for (const attachment of attachments) {
+        try {
+            const resolved = await resolveAttachment(attachment, inputsDir, mode);
+            if (resolved)
+                results.push(resolved);
+        }
+        catch (err) {
+            console.warn(`Failed to resolve attachment ${attachment.filename}: ${err instanceof Error ? err.message : err}`);
+        }
+    }
+    return results;
+}
+async function resolveAttachment(attachment, inputsDir, mode) {
+    if (mode === "local" && attachment.localPath) {
+        const filename = attachment.filename || basename(attachment.localPath);
+        const destPath = join(inputsDir, filename);
+        await copyFile(attachment.localPath, destPath);
+        return {
+            filename,
+            relativePath: join(STIGMER_LOCAL_STATE_DIR, INPUTS_SUBDIR, filename),
+        };
+    }
+    // Cloud mode: download from storage_key (not yet implemented for cursor-runner)
+    console.warn(`Attachment ${attachment.filename}: cloud storage download not yet implemented for cursor-runner`);
+    return null;
+}
+//# sourceMappingURL=attachment-resolver.js.map

package/dist/activities/execute-cursor/attachment-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-resolver.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/attachment-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAExE,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC;AAO/B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAyB,EACzB,SAAiB,EACjB,mBAA2B,EAC3B,IAAuB;IAEvB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACnD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACtE,IAAI,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,gCAAgC,UAAU,CAAC,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,UAAsB,EACtB,SAAiB,EACjB,IAAuB;IAEvB,IAAI,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE/C,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,IAAI,CAAC,uBAAuB,EAAE,aAAa,EAAE,QAAQ,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAC,IAAI,CACV,cAAc,UAAU,CAAC,QAAQ,gEAAgE,CAClG,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/activities/execute-cursor/blueprint-resolver.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Resolves the agent blueprint chain: execution -> session -> agentInstance -> agent.
+ *
+ * Replicates the Python agent-runner's setup.py pipeline where the full agent
+ * resource is fetched to access instructions, sub_agents, skill_refs, and
+ * mcp_server_usages. Also merges agent-level and session-level MCP usages
+ * and skill refs following the same merge semantics.
+ *
+ * Workspace isolation: resolved workspace directories are validated to
+ * ensure they never point at the runner's own app directory. Paths
+ * containing runner-internal markers are rejected with a warning.
+ */
+import type { StigmerClient } from "../../client/stigmer-client.js";
+import type { Agent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import type { AgentSpec, McpServerUsage, SubAgent } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+import type { Session } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import type { SessionSpec } from "@stigmer/protos/ai/stigmer/agentic/session/v1/spec_pb";
+import type { WorkspaceEntry } from "@stigmer/protos/ai/stigmer/agentic/session/v1/workspace_pb";
+import type { ApiResourceReference } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import type { CloudRepo } from "./session-lifecycle.js";
+export interface ResolvedBlueprint {
+    agent: Agent;
+    agentSpec: AgentSpec;
+    session: Session;
+    sessionSpec: SessionSpec;
+    instructions: string;
+    subAgents: SubAgent[];
+    mergedMcpServerUsages: McpServerUsage[];
+    mergedSkillRefs: ApiResourceReference[];
+    workspaceDirs: string[];
+    cloudRepos: CloudRepo[];
+}
+/**
+ * Resolve the full agent blueprint from the execution chain.
+ *
+ * Chain: execution.spec.sessionId -> session.spec.agentInstanceId ->
+ *        agentInstance.spec.agentId -> agent (with full spec)
+ */
+export declare function resolveBlueprint(client: StigmerClient, session: Session, fallbackWorkspaceDir: string): Promise<ResolvedBlueprint>;
+/**
+ * Extract Cursor SDK-compatible repo descriptors from workspace entries.
+ *
+ * Maps Stigmer's GitRepoSource (url + branch) to the Cursor SDK's
+ * CloudAgentOptions.repos shape ({ url, startingRef? }). Only GitRepoSource
+ * entries produce output — LocalPathSource entries are silently skipped.
+ *
+ * Always computed (cheap iteration) but only consumed when mode is cloud.
+ */
+export declare function resolveCloudRepos(workspaceEntries: WorkspaceEntry[]): CloudRepo[];
+/**
+ * Merge MCP server usages from agent (base) and session (overlay).
+ *
+ * Replicates session_context_merge.py::merge_mcp_server_usages():
+ * - Agent-level usages are the base set
+ * - Session-level usages extend or override by mcp_server_ref.slug
+ * - If both reference the same slug, session-level takes precedence
+ */
+export declare function mergeMcpServerUsages(agentUsages: McpServerUsage[], sessionUsages: McpServerUsage[]): McpServerUsage[];
+/**
+ * Merge skill refs from agent and session.
+ *
+ * Replicates session_context_merge.py::merge_skill_refs():
+ * - Union of both sets, deduplicated by slug
+ * - Session refs take precedence on collision (may have different version)
+ */
+export declare function mergeSkillRefs(agentRefs: ApiResourceReference[], sessionRefs: ApiResourceReference[]): ApiResourceReference[];

package/dist/activities/execute-cursor/blueprint-resolver.js

@@ -0,0 +1,169 @@
+/**
+ * Resolves the agent blueprint chain: execution -> session -> agentInstance -> agent.
+ *
+ * Replicates the Python agent-runner's setup.py pipeline where the full agent
+ * resource is fetched to access instructions, sub_agents, skill_refs, and
+ * mcp_server_usages. Also merges agent-level and session-level MCP usages
+ * and skill refs following the same merge semantics.
+ *
+ * Workspace isolation: resolved workspace directories are validated to
+ * ensure they never point at the runner's own app directory. Paths
+ * containing runner-internal markers are rejected with a warning.
+ */
+import { resolve } from "node:path";
+/**
+ * Path segments that identify runner-internal directories. Any workspace dir
+ * whose resolved absolute path contains one of these is rejected.
+ */
+const RUNNER_INTERNAL_MARKERS = [
+    "/runtimes/cursor-runner/",
+    "/runtimes/agent-runner/",
+];
+/**
+ * Resolve the full agent blueprint from the execution chain.
+ *
+ * Chain: execution.spec.sessionId -> session.spec.agentInstanceId ->
+ *        agentInstance.spec.agentId -> agent (with full spec)
+ */
+export async function resolveBlueprint(client, session, fallbackWorkspaceDir) {
+    const sessionSpec = session.spec;
+    const agentInstance = await client.getAgentInstance(sessionSpec.agentInstanceId);
+    const agentId = agentInstance.spec.agentId;
+    const agent = await client.getAgent(agentId);
+    const agentSpec = agent.spec;
+    const mergedMcpServerUsages = mergeMcpServerUsages(agentSpec.mcpServerUsages, sessionSpec.mcpServerUsages);
+    const mergedSkillRefs = mergeSkillRefs(agentSpec.skillRefs, sessionSpec.skillRefs);
+    const workspaceDirs = resolveWorkspaceDirs(sessionSpec, fallbackWorkspaceDir);
+    const cloudRepos = resolveCloudRepos(sessionSpec.workspaceEntries);
+    return {
+        agent,
+        agentSpec,
+        session,
+        sessionSpec,
+        instructions: agentSpec.instructions,
+        subAgents: agentSpec.subAgents,
+        mergedMcpServerUsages,
+        mergedSkillRefs,
+        workspaceDirs,
+        cloudRepos,
+    };
+}
+// ---------------------------------------------------------------------------
+// Cloud repo extraction
+// ---------------------------------------------------------------------------
+/**
+ * Extract Cursor SDK-compatible repo descriptors from workspace entries.
+ *
+ * Maps Stigmer's GitRepoSource (url + branch) to the Cursor SDK's
+ * CloudAgentOptions.repos shape ({ url, startingRef? }). Only GitRepoSource
+ * entries produce output — LocalPathSource entries are silently skipped.
+ *
+ * Always computed (cheap iteration) but only consumed when mode is cloud.
+ */
+export function resolveCloudRepos(workspaceEntries) {
+    const repos = [];
+    for (const entry of workspaceEntries) {
+        if (entry.source?.source.case === "gitRepo") {
+            const git = entry.source.source.value;
+            repos.push({
+                url: git.url,
+                startingRef: git.branch || undefined,
+            });
+        }
+    }
+    return repos;
+}
+// ---------------------------------------------------------------------------
+// MCP and skill merging
+// ---------------------------------------------------------------------------
+/**
+ * Merge MCP server usages from agent (base) and session (overlay).
+ *
+ * Replicates session_context_merge.py::merge_mcp_server_usages():
+ * - Agent-level usages are the base set
+ * - Session-level usages extend or override by mcp_server_ref.slug
+ * - If both reference the same slug, session-level takes precedence
+ */
+export function mergeMcpServerUsages(agentUsages, sessionUsages) {
+    const bySlug = new Map();
+    for (const usage of agentUsages) {
+        const slug = usage.mcpServerRef?.slug;
+        if (slug)
+            bySlug.set(slug, usage);
+    }
+    for (const usage of sessionUsages) {
+        const slug = usage.mcpServerRef?.slug;
+        if (slug)
+            bySlug.set(slug, usage);
+    }
+    return [...bySlug.values()];
+}
+/**
+ * Merge skill refs from agent and session.
+ *
+ * Replicates session_context_merge.py::merge_skill_refs():
+ * - Union of both sets, deduplicated by slug
+ * - Session refs take precedence on collision (may have different version)
+ */
+export function mergeSkillRefs(agentRefs, sessionRefs) {
+    const bySlug = new Map();
+    for (const ref of agentRefs) {
+        if (ref.slug)
+            bySlug.set(ref.slug, ref);
+    }
+    for (const ref of sessionRefs) {
+        if (ref.slug)
+            bySlug.set(ref.slug, ref);
+    }
+    return [...bySlug.values()];
+}
+// ---------------------------------------------------------------------------
+// Local workspace resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolve workspace directories from session workspace entries.
+ *
+ * For local path entries: use the local path directly.
+ * Falls back to the config's workspaceRootDir when no entries exist.
+ *
+ * All resolved paths are validated to ensure they do not overlap with
+ * the runner's own internal directories. Any path that fails validation
+ * is replaced with the fallback directory.
+ */
+function resolveWorkspaceDirs(sessionSpec, fallbackDir) {
+    const safeFallback = validateWorkspaceDir(fallbackDir)
+        ? fallbackDir
+        : logAndSkipRunnerDir(fallbackDir, "fallback config");
+    if (!sessionSpec.workspaceEntries.length) {
+        return safeFallback ? [safeFallback] : [];
+    }
+    const dirs = [];
+    for (const entry of sessionSpec.workspaceEntries) {
+        if (entry.source?.source.case === "localPath") {
+            const path = entry.source.source.value.path;
+            if (validateWorkspaceDir(path)) {
+                dirs.push(path);
+            }
+            else {
+                logAndSkipRunnerDir(path, "session workspace entry");
+            }
+        }
+    }
+    if (dirs.length > 0) {
+        return dirs;
+    }
+    return safeFallback ? [safeFallback] : [];
+}
+/**
+ * Returns true if the directory is safe (not a runner-internal path).
+ */
+function validateWorkspaceDir(dir) {
+    const absolute = resolve(dir);
+    return !RUNNER_INTERNAL_MARKERS.some((marker) => absolute.includes(marker));
+}
+function logAndSkipRunnerDir(dir, source) {
+    console.warn(`Workspace dir from ${source} ("${dir}") is a runner-internal path — ` +
+        "rejecting to prevent implementation detail leakage.");
+    return undefined;
+}
+//# sourceMappingURL=blueprint-resolver.js.map

package/dist/activities/execute-cursor/blueprint-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-resolver.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/blueprint-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUpC;;;GAGG;AACH,MAAM,uBAAuB,GAAG;IAC9B,0BAA0B;IAC1B,yBAAyB;CACjB,CAAC;AAeX;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAqB,EACrB,OAAgB,EAChB,oBAA4B;IAE5B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAK,CAAC;IAElC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAK,CAAC;IAE9B,MAAM,qBAAqB,GAAG,oBAAoB,CAChD,SAAS,CAAC,eAAe,EACzB,WAAW,CAAC,eAAe,CAC5B,CAAC;IAEF,MAAM,eAAe,GAAG,cAAc,CACpC,SAAS,CAAC,SAAS,EACnB,WAAW,CAAC,SAAS,CACtB,CAAC;IAEF,MAAM,aAAa,GAAG,oBAAoB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAEnE,OAAO;QACL,KAAK;QACL,SAAS;QACT,OAAO;QACP,WAAW;QACX,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,UAAU;KACX,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,gBAAkC;IAClE,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC;gBACT,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,WAAW,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAA6B,EAC7B,aAA+B;IAE/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC;QACtC,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC;QACtC,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAiC,EACjC,WAAmC;IAEnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEvD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,WAAwB,EACxB,WAAmB;IAEnB,MAAM,YAAY,GAAG,oBAAoB,CAAC,WAAW,CAAC;QACpD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,mBAAmB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAExD,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5C,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,mBAAmB,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,MAAc;IACtD,OAAO,CAAC,IAAI,CACV,sBAAsB,MAAM,MAAM,GAAG,iCAAiC;QACtE,qDAAqD,CACtD,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/activities/execute-cursor/connect-backfill.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Connect backfill for MCP servers without discovered capabilities.
+ *
+ * Thin wrapper around the shared connect-backfill module that preserves
+ * the cursor-specific McpResolutionResult interface (which includes
+ * cursorConfig). The core backfill logic lives in shared/connect-backfill.ts.
+ *
+ * Non-fatal: if connect fails for any server, the original servers are
+ * kept and execution continues with empty policies (fail-closed).
+ */
+import type { McpResolutionResult } from "./mcp-resolver.js";
+import type { StigmerClient } from "../../client/stigmer-client.js";
+import type { McpServerUsage } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
+/**
+ * Run connect backfill and return an updated cursor-specific
+ * McpResolutionResult with rebuilt cursorConfig.
+ */
+export declare function backfillMcpServersIfNeeded(client: StigmerClient, currentResult: McpResolutionResult, usages: McpServerUsage[], envVars: Record<string, string>, org: string, onHeartbeat?: () => void, secretKeys?: ReadonlySet<string>): Promise<McpResolutionResult>;

package/dist/activities/execute-cursor/connect-backfill.js

@@ -0,0 +1,27 @@
+/**
+ * Connect backfill for MCP servers without discovered capabilities.
+ *
+ * Thin wrapper around the shared connect-backfill module that preserves
+ * the cursor-specific McpResolutionResult interface (which includes
+ * cursorConfig). The core backfill logic lives in shared/connect-backfill.ts.
+ *
+ * Non-fatal: if connect fails for any server, the original servers are
+ * kept and execution continues with empty policies (fail-closed).
+ */
+import { toCursorMcpConfig } from "./mcp-resolver.js";
+import { backfillMcpServersIfNeeded as sharedBackfill } from "../../shared/connect-backfill.js";
+/**
+ * Run connect backfill and return an updated cursor-specific
+ * McpResolutionResult with rebuilt cursorConfig.
+ */
+export async function backfillMcpServersIfNeeded(client, currentResult, usages, envVars, org, onHeartbeat, secretKeys) {
+    const updatedServers = await sharedBackfill(client, currentResult.resolvedServers, usages, envVars, org, onHeartbeat, secretKeys);
+    if (updatedServers === currentResult.resolvedServers) {
+        return currentResult;
+    }
+    return {
+        cursorConfig: toCursorMcpConfig(updatedServers),
+        resolvedServers: updatedServers,
+    };
+}
+//# sourceMappingURL=connect-backfill.js.map

package/dist/activities/execute-cursor/connect-backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-backfill.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/connect-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,0BAA0B,IAAI,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEhG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAqB,EACrB,aAAkC,EAClC,MAAwB,EACxB,OAA+B,EAC/B,GAAW,EACX,WAAwB,EACxB,UAAgC;IAEhC,MAAM,cAAc,GAAG,MAAM,cAAc,CACzC,MAAM,EACN,aAAa,CAAC,eAAe,EAC7B,MAAM,EACN,OAAO,EACP,GAAG,EACH,WAAW,EACX,UAAU,CACX,CAAC;IAEF,IAAI,cAAc,KAAK,aAAa,CAAC,eAAe,EAAE,CAAC;QACrD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,OAAO;QACL,YAAY,EAAE,iBAAiB,CAAC,cAAc,CAAC;QAC/C,eAAe,EAAE,cAAc;KAChC,CAAC;AACJ,CAAC"}

package/dist/activities/execute-cursor/cursor-event-recorder.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Cursor SDK event recorder for capturing raw SDKMessage events.
+ *
+ * Activated by the CURSOR_EVENT_RECORD_DIR environment variable. When set,
+ * the Cursor streaming loop records every SDKMessage and flushes them
+ * atomically to a JSONL file after the stream completes.
+ *
+ * This is development infrastructure for validating the agent_id-based
+ * sub-agent routing hypothesis. The captured events reveal whether
+ * sub-agent events carry distinct agent_id values and whether they
+ * flow through the parent's run.stream() at all.
+ *
+ * Mirrors the native harness's v3-event-recorder.ts / V3_EVENT_RECORD_DIR.
+ */
+import type { SDKMessage } from "@cursor/sdk";
+export interface CursorEventRecorder {
+    record(event: SDKMessage, seq: number): void;
+    flush(): Promise<void>;
+}
+/**
+ * Create a recorder if CURSOR_EVENT_RECORD_DIR is set, otherwise undefined.
+ * The caller does `recorder?.record(event, seq)` — zero overhead when off.
+ */
+export declare function createCursorEventRecorder(executionId: string): CursorEventRecorder | undefined;