@stigmer/runner 3.0.1

package/dist/activities/execute-cursor/error-classifier.js

@@ -0,0 +1,185 @@
+/**
+ * Classifies Cursor SDK errors into actionable categories.
+ *
+ * Used after run.wait() returns status: "error" to:
+ * 1. Determine whether the poisoned-handle retry should fire
+ * 2. Prefix status.error with a human-readable category
+ * 3. Surface isRetryable for future workflow-level retry decisions
+ *
+ * Error detail can come from several sources (in priority order):
+ * - A thrown CursorSdkError's structured fields (highest fidelity)
+ * - run.wait().result (SDK-provided string, often bare/generic)
+ * - SDKStatusMessage with status "ERROR" from the stream
+ * - ConnectError captured from process unhandledRejection
+ * - Text extracted from the failing run.conversation() turn
+ *
+ * Execution context (isResumedHandle) is applied as a post-classification
+ * override: when no source can positively identify the error category and
+ * the agent was obtained via resume, the error is upgraded to "agent-stale"
+ * so that poisoned-handle recovery fires.
+ */
+const AUTH_PATTERNS = [
+    "unauthenticated", "unauthorized", "401", "forbidden",
+    "permission_denied", "invalid api key", "not logged in",
+];
+const RATE_LIMIT_PATTERNS = [
+    "resource_exhausted", "rate limit", "429", "too many",
+    "usage limit",
+];
+const NETWORK_PATTERNS = [
+    "unavailable", "deadline_exceeded", "503", "504",
+    "timeout", "econnrefused", "econnreset", "enotfound",
+    "network error", "fetch failed", "refused_stream",
+];
+const MODEL_PATTERNS = [
+    "invalid model", "model not found", "model.*not available",
+    "unsupported model",
+];
+function matchesAny(text, patterns) {
+    const lower = text.toLowerCase();
+    return patterns.some((p) => lower.includes(p));
+}
+function classifyText(text) {
+    if (matchesAny(text, AUTH_PATTERNS))
+        return { category: "auth", retryable: false };
+    if (matchesAny(text, RATE_LIMIT_PATTERNS))
+        return { category: "rate-limit", retryable: true };
+    if (matchesAny(text, NETWORK_PATTERNS))
+        return { category: "network", retryable: true };
+    if (matchesAny(text, MODEL_PATTERNS))
+        return { category: "model", retryable: false };
+    return { category: "unknown", retryable: false };
+}
+/**
+ * Synthesize a classified error from up to three sources, then apply
+ * execution context.
+ *
+ * Two-step process:
+ * 1. Classify from the best available source (SDK > stream > rejection > fallback).
+ * 2. Apply execution context: on resumed handles, "unknown" from any source
+ *    is upgraded to "agent-stale" so poisoned-handle recovery can fire.
+ *
+ * The override only applies to "unknown" — specific diagnoses (auth,
+ * rate-limit, network, model) are never overridden, even on resumed handles.
+ */
+export function synthesizeError(opts) {
+    console.log(`[error-classifier] synthesizeError diagnostic: ` +
+        `sdkError=${JSON.stringify(opts.sdkError)}, ` +
+        `sdkResultFields=${JSON.stringify(opts.sdkResultFields)}, ` +
+        `streamErrorMessage=${JSON.stringify(opts.streamErrorMessage)}, ` +
+        `hasCapturedRejection=${!!opts.capturedRejection}, ` +
+        `conversationErrorText=${JSON.stringify(opts.conversationErrorText)}, ` +
+        `isResumedHandle=${opts.isResumedHandle}, ` +
+        `model=${opts.fallbackContext.model}, mode=${opts.fallbackContext.mode}`);
+    const classified = classifyFromSources(opts);
+    if (classified.category === "unknown" && opts.isResumedHandle) {
+        return { ...classified, category: "agent-stale", retryable: true };
+    }
+    return classified;
+}
+/**
+ * Classify from the best available error source.
+ *
+ * Priority: thrown CursorSdkError > SDK result fields > stream ERROR message >
+ * captured ConnectError > conversation error turn > transport-timeout heuristic.
+ * Falls back to a diagnostic message with model/mode/agentId context.
+ */
+function classifyFromSources(opts) {
+    if (opts.sdkError) {
+        const { code, status, message } = opts.sdkError;
+        // Classify across all structured fields so a code/status alone (no message
+        // text) still resolves a category.
+        const text = [code, status != null ? String(status) : undefined, message]
+            .filter((v) => typeof v === "string" && v.length > 0)
+            .join(" ");
+        if (text.trim().length > 0) {
+            const { category, retryable } = classifyText(text);
+            return {
+                category,
+                message: message ?? text,
+                retryable,
+                source: "sdk",
+            };
+        }
+    }
+    if (opts.sdkResultFields) {
+        const isBareGeneric = opts.sdkResultFields === "Cursor run failed";
+        if (!isBareGeneric) {
+            const { category, retryable } = classifyText(opts.sdkResultFields);
+            return {
+                category,
+                message: opts.sdkResultFields,
+                retryable,
+                source: "sdk",
+            };
+        }
+    }
+    if (opts.streamErrorMessage) {
+        const { category, retryable } = classifyText(opts.streamErrorMessage);
+        return {
+            category,
+            message: opts.streamErrorMessage,
+            retryable,
+            source: "stream",
+        };
+    }
+    if (opts.capturedRejection) {
+        const { category } = classifyText(`${opts.capturedRejection.code} ${opts.capturedRejection.message}`);
+        return {
+            category: category === "unknown" ? "network" : category,
+            message: `[${opts.capturedRejection.code}] ${opts.capturedRejection.message}`,
+            retryable: category !== "auth",
+            source: "rejection",
+        };
+    }
+    // The SDK frequently swallows the real reason in run.wait() but retains it on
+    // the failing conversation turn. Surface that text even when it does not match
+    // a known pattern — a specific message beats the generic fallback.
+    if (opts.conversationErrorText) {
+        const { category, retryable } = classifyText(opts.conversationErrorText);
+        return {
+            category,
+            message: opts.conversationErrorText,
+            retryable,
+            source: "conversation",
+        };
+    }
+    // Transport timeout heuristic: SDK returned error with 0 messages and
+    // duration ~30s (default SDK timeout). This indicates the proxy connection
+    // was degraded and the agent stream could not be established at all.
+    if (opts.messageCount === 0
+        && opts.durationMs != null
+        && opts.durationMs >= 25000
+        && opts.durationMs <= 35000
+        && !opts.isResumedHandle) {
+        const { model, mode, agentId } = opts.fallbackContext;
+        return {
+            category: "network",
+            message: `Transport timeout (${opts.durationMs}ms, 0 messages received). Model=${model}, mode=${mode}, agentId=${agentId}`,
+            retryable: true,
+            source: "fallback",
+        };
+    }
+    if (opts.isResumedHandle) {
+        return {
+            category: "agent-stale",
+            message: "Cursor run failed (no detail from SDK, resumed agent handle may be stale)",
+            retryable: true,
+            source: "fallback",
+        };
+    }
+    const { model, mode, agentId } = opts.fallbackContext;
+    return {
+        category: "unknown",
+        message: `Cursor run failed (no detail from SDK). Model=${model}, mode=${mode}, agentId=${agentId}`,
+        retryable: false,
+        source: "fallback",
+    };
+}
+export function formatClassifiedError(err) {
+    return `${err.message} [category=${err.category}, source=${err.source}, retryable=${err.retryable}]`;
+}
+export function shouldRetryWithFreshAgent(err) {
+    return err.category === "agent-stale" || err.category === "network";
+}
+//# sourceMappingURL=error-classifier.js.map

package/dist/activities/execute-cursor/error-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-classifier.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/error-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8BH,MAAM,aAAa,GAAG;IACpB,iBAAiB,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW;IACrD,mBAAmB,EAAE,iBAAiB,EAAE,eAAe;CACxD,CAAC;AACF,MAAM,mBAAmB,GAAG;IAC1B,oBAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU;IACrD,aAAa;CACd,CAAC;AACF,MAAM,gBAAgB,GAAG;IACvB,aAAa,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK;IAChD,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW;IACpD,eAAe,EAAE,cAAc,EAAE,gBAAgB;CAClD,CAAC;AACF,MAAM,cAAc,GAAG;IACrB,eAAe,EAAE,iBAAiB,EAAE,sBAAsB;IAC1D,mBAAmB;CACpB,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY,EAAE,QAAkB;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnF,IAAI,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9F,IAAI,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAkBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,OAAO,CAAC,GAAG,CACT,iDAAiD;QACjD,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;QAC7C,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI;QAC3D,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI;QACjE,wBAAwB,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI;QACpD,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI;QACvE,mBAAmB,IAAI,CAAC,eAAe,IAAI;QAC3C,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,UAAU,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CACzE,CAAC;IAEF,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,OAAO,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAyB;IACpD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAChD,2EAA2E;QAC3E,mCAAmC;QACnC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC;aACtE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aACjE,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO;gBACL,QAAQ;gBACR,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,SAAS;gBACT,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,KAAK,mBAAmB,CAAC;QACnE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACnE,OAAO;gBACL,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,eAAe;gBAC7B,SAAS;gBACT,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtE,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,kBAAkB;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAC/B,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CACnE,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACvD,OAAO,EAAE,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE;YAC7E,SAAS,EAAE,QAAQ,KAAK,MAAM;YAC9B,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,mEAAmE;IACnE,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/B,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzE,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,qBAAqB;YACnC,SAAS;YACT,MAAM,EAAE,cAAc;SACvB,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,IACE,IAAI,CAAC,YAAY,KAAK,CAAC;WACpB,IAAI,CAAC,UAAU,IAAI,IAAI;WACvB,IAAI,CAAC,UAAU,IAAI,KAAK;WACxB,IAAI,CAAC,UAAU,IAAI,KAAK;WACxB,CAAC,IAAI,CAAC,eAAe,EACxB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;QACtD,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,sBAAsB,IAAI,CAAC,UAAU,mCAAmC,KAAK,UAAU,IAAI,aAAa,OAAO,EAAE;YAC1H,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,UAAU;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,2EAA2E;YACpF,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,UAAU;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;IACtD,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,iDAAiD,KAAK,UAAU,IAAI,aAAa,OAAO,EAAE;QACnG,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,UAAU;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAoB;IACxD,OAAO,GAAG,GAAG,CAAC,OAAO,cAAc,GAAG,CAAC,QAAQ,YAAY,GAAG,CAAC,MAAM,eAAe,GAAG,CAAC,SAAS,GAAG,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAoB;IAC5D,OAAO,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC;AACtE,CAAC"}

package/dist/activities/execute-cursor/fetch-interceptor.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Global fetch interceptor for Cursor SDK proxy support.
+ *
+ * In cloud mode, the cursor-runner must be credential-free -- it holds only
+ * STIGMER_TOKEN, never CURSOR_API_KEY. To achieve this, we intercept all
+ * outbound fetch() calls to Cursor's backend and rewrite them to go through
+ * Stigmer's CursorProxyController, which injects the real Cursor API key.
+ *
+ * This is the JavaScript-level equivalent of LangChain's base_url parameter
+ * that the Python agent-runner uses for the LLM proxy pattern.
+ *
+ * IMPORTANT: This module must be imported BEFORE @cursor/sdk to ensure the
+ * interceptor is in place when the SDK initializes its HTTP client.
+ *
+ * When STIGMER_PROXY_ENDPOINT is not set, this module is a no-op.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+interface ExecutionContextStore {
+    executionId: string;
+}
+export declare function getExecutionContext(): AsyncLocalStorage<ExecutionContextStore>;
+/**
+ * Install the global fetch interceptor. Call once at startup, BEFORE
+ * importing @cursor/sdk.
+ *
+ * When proxyEndpoint is empty or not provided, the interceptor is not
+ * installed and all fetch calls pass through to the original implementation.
+ */
+export declare function installFetchInterceptor(config: {
+    proxyEndpoint: string | undefined;
+    stigmerToken: string | undefined;
+}): void;
+/**
+ * Update the auth token on the live interceptor config. Must be called
+ * whenever the Stigmer JWT is refreshed (e.g. via IPC updateToken) so
+ * that fetch-intercepted REST calls (token exchange, /v1/models) use the
+ * current token instead of the one frozen at install time.
+ */
+export declare function updateInterceptorToken(token: string): void;
+/**
+ * Update the execution ID on the active interceptor (legacy global path).
+ * Prefer {@link runWithExecutionContext} for concurrent-safe isolation.
+ *
+ * @deprecated Use runWithExecutionContext() instead for concurrent activities.
+ */
+export declare function setInterceptorExecutionId(executionId: string | undefined): void;
+/**
+ * Run an async function with execution-scoped context. The executionId is
+ * propagated through the async call chain via AsyncLocalStorage, ensuring
+ * concurrent activities on the same runner process don't overwrite each
+ * other's proxy headers.
+ */
+export declare function runWithExecutionContext<T>(executionId: string, fn: () => Promise<T>): Promise<T>;
+/**
+ * Remove the interceptor and restore the original fetch. Primarily for
+ * testing.
+ */
+export declare function uninstallFetchInterceptor(): void;
+export {};

package/dist/activities/execute-cursor/fetch-interceptor.js

@@ -0,0 +1,317 @@
+/**
+ * Global fetch interceptor for Cursor SDK proxy support.
+ *
+ * In cloud mode, the cursor-runner must be credential-free -- it holds only
+ * STIGMER_TOKEN, never CURSOR_API_KEY. To achieve this, we intercept all
+ * outbound fetch() calls to Cursor's backend and rewrite them to go through
+ * Stigmer's CursorProxyController, which injects the real Cursor API key.
+ *
+ * This is the JavaScript-level equivalent of LangChain's base_url parameter
+ * that the Python agent-runner uses for the LLM proxy pattern.
+ *
+ * IMPORTANT: This module must be imported BEFORE @cursor/sdk to ensure the
+ * interceptor is in place when the SDK initializes its HTTP client.
+ *
+ * When STIGMER_PROXY_ENDPOINT is not set, this module is a no-op.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+const CURSOR_DOMAINS = [
+    "api2.cursor.sh",
+    "api.cursor.com",
+    "api.cursor.sh",
+];
+let interceptorConfig = null;
+const originalFetch = globalThis.fetch;
+const executionContext = new AsyncLocalStorage();
+export function getExecutionContext() {
+    return executionContext;
+}
+/**
+ * Connect RPC path prefixes used by the Cursor SDK. Most requests with
+ * these prefixes go through connect-node (native HTTP/2) and are handled
+ * by the HTTP/2 interceptor. However, some SDK calls to these paths use
+ * fetch (HTTP/1.1) instead — e.g. BootstrapStatsig, LogStatsigExposure.
+ * Those still need proxy auth injection even though they don't need URL
+ * rewriting.
+ */
+const CONNECT_RPC_PREFIXES = ["/agent.v1.", "/aiserver.v1."];
+function isConnectRpcPath(pathname) {
+    return CONNECT_RPC_PREFIXES.some((p) => pathname.startsWith(p));
+}
+/**
+ * Checks whether the URL targets the proxy endpoint itself. When
+ * CURSOR_BACKEND_URL is set to proxyEndpoint, SDK REST calls (token
+ * exchange, CloudApiClient) target this host instead of Cursor domains.
+ */
+function isProxyEndpointHost(parsed, proxyEndpoint) {
+    try {
+        const proxy = new URL(proxyEndpoint);
+        return parsed.hostname === proxy.hostname && parsed.port === proxy.port;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Determines whether a fetch request needs URL rewriting through the
+ * CursorProxyController (/v1/proxy/cursor/...). This applies to REST
+ * calls (token exchange, /v1/models, agent CRUD) but NOT to Connect
+ * RPC paths which are dispatched directly by path routing.
+ */
+function needsUrlRewrite(url) {
+    try {
+        const parsed = new URL(url);
+        if (CURSOR_DOMAINS.some((d) => parsed.hostname === d || parsed.hostname.endsWith(`.${d}`))) {
+            return true;
+        }
+        if (interceptorConfig && isProxyEndpointHost(parsed, interceptorConfig.proxyEndpoint)) {
+            return !isConnectRpcPath(parsed.pathname) && !parsed.pathname.startsWith("/v1/proxy/");
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Determines whether a fetch request targets the proxy endpoint with a
+ * Connect-RPC-like path. The Cursor SDK sends some /aiserver.v1.* calls
+ * (BootstrapStatsig, analytics, telemetry) via fetch (HTTP/1.1) rather
+ * than connect-node (HTTP/2). These bypass the HTTP/2 interceptor, so
+ * this fetch interceptor must inject x-stigmer-auth to authenticate
+ * with the BiDi proxy. The URL is NOT rewritten — path routing delivers
+ * them to the BiDi proxy directly.
+ */
+function needsProxyAuthOnly(url) {
+    try {
+        const parsed = new URL(url);
+        if (!interceptorConfig)
+            return false;
+        if (!isProxyEndpointHost(parsed, interceptorConfig.proxyEndpoint))
+            return false;
+        return isConnectRpcPath(parsed.pathname);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Determines the upstream Cursor host for a given REST path.
+ *
+ * - /auth/* → api2.cursor.sh (token exchange, served by this host)
+ * - everything else → api.cursor.com (CloudApiClient REST: /v1/models, agent CRUD)
+ */
+function resolveUpstreamHost(pathname) {
+    if (pathname.startsWith("/auth/") || pathname === "/auth") {
+        return "api2.cursor.sh";
+    }
+    return "api.cursor.com";
+}
+/**
+ * Rewrites a Cursor-bound URL to route through the Stigmer proxy.
+ *
+ * Two cases:
+ * 1. Direct Cursor-domain request (e.g. from CloudApiClient when CURSOR_BACKEND_URL unset):
+ *    https://api2.cursor.sh/auth/exchange_user_api_key
+ *    → https://api.stigmer.ai/v1/proxy/cursor/api2.cursor.sh/auth/exchange_user_api_key
+ *
+ * 2. Proxy-endpoint-targeted REST (when CURSOR_BACKEND_URL = proxyEndpoint):
+ *    http://localhost:9090/auth/exchange_user_api_key
+ *    → http://localhost:9090/v1/proxy/cursor/api2.cursor.sh/auth/exchange_user_api_key
+ *    The upstream host is inferred from the path since it's not in the URL.
+ *
+ * The proxy uses the embedded original hostname to route to the correct
+ * upstream Cursor service.
+ */
+function rewriteUrl(originalUrl, proxyEndpoint) {
+    const parsed = new URL(originalUrl);
+    const proxyBase = proxyEndpoint.replace(/\/+$/, "");
+    // Proxy-endpoint-targeted request: CURSOR_BACKEND_URL sent this here.
+    // The hostname IS the proxy, so infer the upstream from the path.
+    if (interceptorConfig && isProxyEndpointHost(parsed, proxyEndpoint)) {
+        const upstream = resolveUpstreamHost(parsed.pathname);
+        return `${proxyBase}/v1/proxy/cursor/${upstream}${parsed.pathname}${parsed.search}`;
+    }
+    // Direct Cursor-domain request: hostname IS the upstream.
+    return `${proxyBase}/v1/proxy/cursor/${parsed.hostname}${parsed.pathname}${parsed.search}`;
+}
+/**
+ * Replaces the authorization header with the Stigmer token. Used for
+ * REST calls routed through CursorProxyController, where the proxy
+ * itself authenticates with Cursor using the configured API key.
+ */
+function replaceAuth(init, config) {
+    const headers = new Headers(init?.headers);
+    headers.set("authorization", `Bearer ${config.stigmerToken}`);
+    const ctx = executionContext.getStore();
+    const effectiveExecutionId = ctx?.executionId ?? config.executionId;
+    if (effectiveExecutionId) {
+        headers.set("x-stigmer-execution-id", effectiveExecutionId);
+    }
+    return { ...init, headers };
+}
+/**
+ * Injects x-stigmer-auth alongside the existing authorization header.
+ * Used for Connect-RPC-like paths that arrive via fetch — the BiDi
+ * proxy authenticates the runner via x-stigmer-auth and forwards the
+ * original authorization (Cursor access token) to upstream Cursor.
+ */
+function injectProxyAuth(init, config) {
+    const headers = new Headers(init?.headers);
+    headers.set("x-stigmer-auth", `Bearer ${config.stigmerToken}`);
+    const ctx = executionContext.getStore();
+    const effectiveExecutionId = ctx?.executionId ?? config.executionId;
+    if (effectiveExecutionId) {
+        headers.set("x-stigmer-execution-id", effectiveExecutionId);
+    }
+    return { ...init, headers };
+}
+function extractPath(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        return url;
+    }
+}
+/**
+ * Paths that Cursor SDK calls for analytics, telemetry, or feature flags.
+ * Failures on these endpoints are non-critical and should not pollute logs.
+ */
+const NON_CRITICAL_PATHS = [
+    "/aiserver.v1.AnalyticsService/BootstrapStatsig",
+    "/aiserver.v1.AnalyticsService/LogStatsigExposure",
+    "/aiserver.v1.AnalyticsService/LogStatsigEvent",
+    "/analytics/",
+    "/telemetry/",
+];
+function isNonCriticalPath(path) {
+    return NON_CRITICAL_PATHS.some(p => path.includes(p));
+}
+const interceptedFetch = async (input, init) => {
+    if (!interceptorConfig) {
+        return originalFetch(input, init);
+    }
+    const url = typeof input === "string"
+        ? input
+        : input instanceof URL
+            ? input.toString()
+            : input instanceof Request
+                ? input.url
+                : String(input);
+    if (needsUrlRewrite(url)) {
+        return fetchWithUrlRewrite(url, init, interceptorConfig);
+    }
+    if (needsProxyAuthOnly(url)) {
+        return fetchWithProxyAuth(url, init, interceptorConfig);
+    }
+    return originalFetch(input, init);
+};
+/**
+ * REST path: rewrite URL to /v1/proxy/cursor/{upstream}{path} and
+ * replace auth with Stigmer token for CursorProxyController.
+ */
+async function fetchWithUrlRewrite(url, init, config) {
+    const rewrittenUrl = rewriteUrl(url, config.proxyEndpoint);
+    const rewrittenInit = replaceAuth(init, config);
+    const path = extractPath(url);
+    try {
+        const response = await originalFetch(rewrittenUrl, rewrittenInit);
+        if (!response.ok) {
+            if (isNonCriticalPath(path)) {
+                console.debug(`[proxy-interceptor] Non-critical Cursor request failed (expected): ${init?.method ?? "GET"} ${path} → proxy status=${response.status}`);
+            }
+            else {
+                console.warn(`[proxy-interceptor] Cursor request failed: ${init?.method ?? "GET"} ${path} → proxy status=${response.status}`);
+            }
+        }
+        return response;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[proxy-interceptor] Cursor request error: ${init?.method ?? "GET"} ${path} → ${msg}`);
+        throw err;
+    }
+}
+/**
+ * Connect-RPC-via-fetch path: inject x-stigmer-auth for BiDi proxy
+ * authentication without rewriting the URL or replacing authorization.
+ */
+async function fetchWithProxyAuth(url, init, config) {
+    const augmentedInit = injectProxyAuth(init, config);
+    const path = extractPath(url);
+    try {
+        const response = await originalFetch(url, augmentedInit);
+        if (!response.ok && !isNonCriticalPath(path)) {
+            console.warn(`[proxy-interceptor] BiDi fetch request failed: ${init?.method ?? "GET"} ${path} → proxy status=${response.status}`);
+        }
+        return response;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[proxy-interceptor] BiDi fetch request error: ${init?.method ?? "GET"} ${path} → ${msg}`);
+        throw err;
+    }
+}
+/**
+ * Install the global fetch interceptor. Call once at startup, BEFORE
+ * importing @cursor/sdk.
+ *
+ * When proxyEndpoint is empty or not provided, the interceptor is not
+ * installed and all fetch calls pass through to the original implementation.
+ */
+export function installFetchInterceptor(config) {
+    if (!config.proxyEndpoint) {
+        return;
+    }
+    if (!config.stigmerToken) {
+        throw new Error("STIGMER_TOKEN is required when STIGMER_PROXY_ENDPOINT is set. " +
+            "In proxy mode, the runner authenticates with Stigmer's proxy using STIGMER_TOKEN.");
+    }
+    interceptorConfig = {
+        proxyEndpoint: config.proxyEndpoint,
+        stigmerToken: config.stigmerToken,
+    };
+    globalThis.fetch = interceptedFetch;
+    console.log(`Cursor proxy interceptor installed: Cursor traffic → ${config.proxyEndpoint}/v1/proxy/cursor/`);
+}
+/**
+ * Update the auth token on the live interceptor config. Must be called
+ * whenever the Stigmer JWT is refreshed (e.g. via IPC updateToken) so
+ * that fetch-intercepted REST calls (token exchange, /v1/models) use the
+ * current token instead of the one frozen at install time.
+ */
+export function updateInterceptorToken(token) {
+    if (interceptorConfig) {
+        interceptorConfig = { ...interceptorConfig, stigmerToken: token };
+    }
+}
+/**
+ * Update the execution ID on the active interceptor (legacy global path).
+ * Prefer {@link runWithExecutionContext} for concurrent-safe isolation.
+ *
+ * @deprecated Use runWithExecutionContext() instead for concurrent activities.
+ */
+export function setInterceptorExecutionId(executionId) {
+    if (interceptorConfig) {
+        interceptorConfig = { ...interceptorConfig, executionId };
+    }
+}
+/**
+ * Run an async function with execution-scoped context. The executionId is
+ * propagated through the async call chain via AsyncLocalStorage, ensuring
+ * concurrent activities on the same runner process don't overwrite each
+ * other's proxy headers.
+ */
+export function runWithExecutionContext(executionId, fn) {
+    return executionContext.run({ executionId }, fn);
+}
+/**
+ * Remove the interceptor and restore the original fetch. Primarily for
+ * testing.
+ */
+export function uninstallFetchInterceptor() {
+    interceptorConfig = null;
+    globalThis.fetch = originalFetch;
+}
+//# sourceMappingURL=fetch-interceptor.js.map

package/dist/activities/execute-cursor/fetch-interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-interceptor.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/fetch-interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,cAAc,GAAG;IACrB,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;CAChB,CAAC;AAQF,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AACjD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;AAMvC,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,EAAyB,CAAC;AAExE,MAAM,UAAU,mBAAmB;IACjC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AAE7D,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAW,EAAE,aAAqB;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,iBAAiB,IAAI,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;YACtF,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QAChF,OAAO,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,UAAU,CAAC,WAAmB,EAAE,aAAqB;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEpD,sEAAsE;IACtE,kEAAkE;IAClE,IAAI,iBAAiB,IAAI,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,GAAG,SAAS,oBAAoB,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IACtF,CAAC;IAED,0DAA0D;IAC1D,OAAO,GAAG,SAAS,oBAAoB,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAA6B,EAAE,MAAmB;IACrE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;IACxC,MAAM,oBAAoB,GAAG,GAAG,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IACpE,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAA6B,EAAE,MAAmB;IACzE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;IACxC,MAAM,oBAAoB,GAAG,GAAG,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IACpE,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,kBAAkB,GAAG;IACzB,gDAAgD;IAChD,kDAAkD;IAClD,+CAA+C;IAC/C,aAAa;IACb,aAAa;CACd,CAAC;AAEF,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,gBAAgB,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,YAAY,GAAG;YACpB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;YAClB,CAAC,CAAC,KAAK,YAAY,OAAO;gBACxB,CAAC,CAAC,KAAK,CAAC,GAAG;gBACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAChC,GAAW,EAAE,IAA6B,EAAE,MAAmB;IAE/D,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAElE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CACX,sEAAsE,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CACxI,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,8CAA8C,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAChH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,6CAA6C,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,EAAE,CACtF,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EAAE,IAA6B,EAAE,MAAmB;IAE/D,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAEzD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CACV,kDAAkD,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CACpH,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,iDAAiD,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,EAAE,CAC1F,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAGvC;IACC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,gEAAgE;YAChE,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,iBAAiB,GAAG;QAClB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC;IAEF,UAAU,CAAC,KAAK,GAAG,gBAAgB,CAAC;IAEpC,OAAO,CAAC,GAAG,CACT,wDAAwD,MAAM,CAAC,aAAa,mBAAmB,CAChG,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,IAAI,iBAAiB,EAAE,CAAC;QACtB,iBAAiB,GAAG,EAAE,GAAG,iBAAiB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAA+B;IACvE,IAAI,iBAAiB,EAAE,CAAC;QACtB,iBAAiB,GAAG,EAAE,GAAG,iBAAiB,EAAE,WAAW,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,EAAoB;IAEpB,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,iBAAiB,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;AACnC,CAAC"}

package/dist/activities/execute-cursor/hitl-diagnostics.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Deny-time diagnostic utilities for HITL (human-in-the-loop) approvals.
+ *
+ * These helpers capture the agent's rationale and the workspace's git state
+ * at the moment a tool call is proposed/denied, so the approval record
+ * (PendingApproval.agent_rationale / branch_at_deny / head_sha_at_deny)
+ * carries enough context for a human reviewer and for later reinvocation.
+ */
+import type { AgentMessage } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+/**
+ * Extract the agent's rationale for a tool call from the message history.
+ *
+ * Heuristic: Takes the content of the last AI message, which typically
+ * contains the agent's explanation of what it's about to do. Truncated
+ * to MAX_RATIONALE_CHARS to keep the approval record concise.
+ *
+ * Returns empty string if no AI messages exist.
+ */
+export declare function extractAgentRationale(messages: AgentMessage[], _toolCallId: string): string;
+/**
+ * Get the current git branch name for a workspace directory.
+ *
+ * Best-effort: returns empty string on failure (non-git workspace,
+ * missing git binary, detached HEAD). Never throws.
+ */
+export declare function getGitBranch(workspaceDir: string): Promise<string>;
+/**
+ * Get the current git HEAD SHA for a workspace directory.
+ *
+ * Best-effort: returns empty string on failure. Never throws.
+ */
+export declare function getGitHeadSha(workspaceDir: string): Promise<string>;