@stigmer/runner 3.0.9-dev.20260615153829 → 3.1.0

package/dist/activities/execute-deep-agent/__test-utils__/scripted-model.js

@@ -0,0 +1,81 @@
+/**
+ * Scripted deep-agent test harness: a deterministic chat model plus the
+ * parent-checkpoint interrupt reader.
+ *
+ * These two helpers are what every "drive a real deepagents/LangGraph graph
+ * through the approval gate" test needs, and they were previously copy-pasted
+ * inline. They are shared by:
+ * - `__tests__/subagent-approval-propagation.test.ts` (sub-agent interrupt
+ *   propagation against the real runtime), and
+ * - `__test-utils__/gateway-substrate.ts` (the deep-agent adapter for the
+ *   gateway Contract Test Kit).
+ *
+ * Keeping one copy means a change to how the runner reads pending interrupts (or
+ * how a scripted run is driven) updates every consumer at once.
+ */
+import { BaseChatModel } from "@langchain/core/language_models/chat_models";
+import { AIMessage, ToolMessage } from "@langchain/core/messages";
+/**
+ * A deterministic two-turn chat model: on the first turn it proposes the
+ * selected role's tool calls; once a tool result comes back it returns the
+ * role's terminating text. No LLM, no network — the role is keyed on the bound
+ * tool names so the same model instance drives a parent and its sub-agents.
+ */
+export class ScriptedModel extends BaseChatModel {
+    toolNames = [];
+    select;
+    constructor(select) {
+        super({});
+        this.select = select;
+    }
+    _llmType() {
+        return "scripted";
+    }
+    bindTools(tools) {
+        const next = new ScriptedModel(this.select);
+        next.toolNames = tools.map((t) => t?.name ?? "");
+        return next;
+    }
+    async _generate(messages) {
+        const step = this.select(this.toolNames);
+        const lastIsToolResult = messages[messages.length - 1] instanceof ToolMessage;
+        const message = lastIsToolResult
+            ? new AIMessage({ content: step.done })
+            : new AIMessage({
+                content: "",
+                tool_calls: step.toolCalls.map((tc) => ({ ...tc, type: "tool_call" })),
+            });
+        const text = typeof message.content === "string" ? message.content : "";
+        return { generations: [{ message, text }] };
+    }
+}
+/**
+ * Read the pending approval interrupts from a graph state, exactly as the
+ * production resume path does (`hitl.ts` / `index.ts`): scan the parent's
+ * top-level `tasks[].interrupts`, skipping any already carrying a resume value.
+ *
+ * Crucially `interruptId` is the interrupt's OWN id (`interrupts[].id`), not the
+ * owning `task.id` — for a nested sub-agent interrupt the two differ, and only
+ * the interrupt id routes a `Command(resume=...)` value back into the nested
+ * `interrupt()`.
+ */
+export function readPendingInterrupts(state) {
+    const out = [];
+    for (const task of state.tasks ?? []) {
+        for (const intr of task.interrupts ?? []) {
+            if (intr.resumeValue !== undefined)
+                continue;
+            const v = (intr.value ?? {});
+            out.push({
+                taskId: task.id,
+                interruptId: intr.id ?? task.id,
+                toolCallId: v.tool_call_id ?? "",
+                toolName: v.tool_name ?? "",
+                message: v.message ?? "",
+                policySource: v.policy_source ?? "",
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=scripted-model.js.map

package/dist/activities/execute-deep-agent/__test-utils__/scripted-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scripted-model.js","sourceRoot":"","sources":["../../../../src/activities/execute-deep-agent/__test-utils__/scripted-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAoB,MAAM,0BAA0B,CAAC;AA2BpF;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,aAAa;IAC9C,SAAS,GAAa,EAAE,CAAC;IACR,MAAM,CAAiB;IAExC,YAAY,MAAsB;QAChC,KAAK,CAAC,EAAE,CAAC,CAAC;QACV,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ;QACN,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,KAAgB;QACxB,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAI,KAAkC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAuB,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAuB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,WAAW,CAAC;QAE9E,MAAM,OAAO,GAAG,gBAAgB;YAC9B,CAAC,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvC,CAAC,CAAC,IAAI,SAAS,CAAC;gBACZ,OAAO,EAAE,EAAE;gBACX,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAoB,EAAE,CAAC,CAAC;aAChF,CAAC,CAAC;QAEP,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;CACF;AAkBD;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,SAAS;YAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,WAAW,EAAG,IAAI,CAAC,EAAa,IAAI,IAAI,CAAC,EAAE;gBAC3C,UAAU,EAAG,CAAC,CAAC,YAAuB,IAAI,EAAE;gBAC5C,QAAQ,EAAG,CAAC,CAAC,SAAoB,IAAI,EAAE;gBACvC,OAAO,EAAG,CAAC,CAAC,OAAkB,IAAI,EAAE;gBACpC,YAAY,EAAG,CAAC,CAAC,aAAwB,IAAI,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/activities/execute-deep-agent/approval-file-change.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Pre-execution args capture for the HITL approval gate (native harness).
+ *
+ * When the graph pauses for approval — before the tool runs — this captures a
+ * sanitized args preview so the gate can show the proposed change. It owns only
+ * the native-specific seam: correlating a gated `tool_call_id` to its arguments
+ * from graph state (the authoritative single source of truth at the interrupt,
+ * since the streamed input cache is empty and the interrupt value carries only a
+ * few fields). The approval card renders the proposed write/edit content from
+ * these args; there is no separate captured `file_changes` (removed in Phase 5
+ * Slice 4 — the args are the single source, and the Cursor deny-gate's
+ * exact-apply reads the same args on resume; see execute-cursor/exact-apply.ts).
+ *
+ * @since First-Class Diff Review (#186), approval-gate phase
+ */
+/** What the gate capture contributes to a `WAITING_APPROVAL` `ToolCall`. */
+export interface ApprovalCaptureResult {
+    /** Sanitized JSON args preview, omitted when there are no args to show. */
+    readonly argsPreview?: string;
+}
+/**
+ * Correlate a gated `tool_call_id` to its arguments by scanning graph-state
+ * messages for the AI-message tool call that emitted it.
+ *
+ * Matching keys on the presence of a `tool_calls` array, which is robust to
+ * whether the message is a hydrated LangChain class instance or a plain
+ * serialized object: a `ToolMessage` carries a singular `tool_call_id`, never a
+ * `tool_calls` array, so it cannot be mistaken for the emitting AI message.
+ *
+ * Returns the args object (possibly empty when the tool call took no arguments),
+ * or `undefined` when no message in scope emitted this id — e.g. a tool call
+ * whose AI message lives only inside a nested sub-agent state, which this
+ * parent-scope scan does not reach. That degrades the gate to an args-less
+ * preview for that one interrupt, exactly as today.
+ */
+export declare function findAiMessageToolCallArgs(messages: readonly unknown[], toolCallId: string): Record<string, unknown> | undefined;
+/**
+ * Capture the gate's args preview from a single correlation lookup, keeping the
+ * call site thin.
+ *
+ * Returns an empty result when the tool call cannot be correlated or took no
+ * arguments, so the gate falls back to today's behavior for that interrupt.
+ */
+export declare function captureApprovalArtifacts(opts: {
+    readonly toolCallId: string;
+    readonly messages: readonly unknown[];
+}): ApprovalCaptureResult;

package/dist/activities/execute-deep-agent/approval-file-change.js

@@ -0,0 +1,68 @@
+/**
+ * Pre-execution args capture for the HITL approval gate (native harness).
+ *
+ * When the graph pauses for approval — before the tool runs — this captures a
+ * sanitized args preview so the gate can show the proposed change. It owns only
+ * the native-specific seam: correlating a gated `tool_call_id` to its arguments
+ * from graph state (the authoritative single source of truth at the interrupt,
+ * since the streamed input cache is empty and the interrupt value carries only a
+ * few fields). The approval card renders the proposed write/edit content from
+ * these args; there is no separate captured `file_changes` (removed in Phase 5
+ * Slice 4 — the args are the single source, and the Cursor deny-gate's
+ * exact-apply reads the same args on resume; see execute-cursor/exact-apply.ts).
+ *
+ * @since First-Class Diff Review (#186), approval-gate phase
+ */
+import { sanitizeArgsPreview } from "./status-builder-shared.js";
+/**
+ * Correlate a gated `tool_call_id` to its arguments by scanning graph-state
+ * messages for the AI-message tool call that emitted it.
+ *
+ * Matching keys on the presence of a `tool_calls` array, which is robust to
+ * whether the message is a hydrated LangChain class instance or a plain
+ * serialized object: a `ToolMessage` carries a singular `tool_call_id`, never a
+ * `tool_calls` array, so it cannot be mistaken for the emitting AI message.
+ *
+ * Returns the args object (possibly empty when the tool call took no arguments),
+ * or `undefined` when no message in scope emitted this id — e.g. a tool call
+ * whose AI message lives only inside a nested sub-agent state, which this
+ * parent-scope scan does not reach. That degrades the gate to an args-less
+ * preview for that one interrupt, exactly as today.
+ */
+export function findAiMessageToolCallArgs(messages, toolCallId) {
+    for (const msg of messages) {
+        if (!msg || typeof msg !== "object")
+            continue;
+        const toolCalls = msg.tool_calls;
+        if (!Array.isArray(toolCalls))
+            continue;
+        for (const tc of toolCalls) {
+            if (!tc || typeof tc !== "object")
+                continue;
+            const entry = tc;
+            if (entry.id !== toolCallId)
+                continue;
+            return entry.args &&
+                typeof entry.args === "object" &&
+                !Array.isArray(entry.args)
+                ? entry.args
+                : {};
+        }
+    }
+    return undefined;
+}
+/**
+ * Capture the gate's args preview from a single correlation lookup, keeping the
+ * call site thin.
+ *
+ * Returns an empty result when the tool call cannot be correlated or took no
+ * arguments, so the gate falls back to today's behavior for that interrupt.
+ */
+export function captureApprovalArtifacts(opts) {
+    const args = findAiMessageToolCallArgs(opts.messages, opts.toolCallId);
+    if (!args || Object.keys(args).length === 0)
+        return {};
+    const argsPreview = sanitizeArgsPreview(args) || undefined;
+    return { argsPreview };
+}
+//# sourceMappingURL=approval-file-change.js.map

package/dist/activities/execute-deep-agent/approval-file-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-file-change.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/approval-file-change.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAA4B,EAC5B,UAAkB;IAElB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,SAAS,GAAI,GAAgC,CAAC,UAAU,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,SAAS;QAExC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,SAAS;YAC5C,MAAM,KAAK,GAAG,EAAsC,CAAC;YACrD,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU;gBAAE,SAAS;YAEtC,OAAO,KAAK,CAAC,IAAI;gBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC1B,CAAC,CAAE,KAAK,CAAC,IAAgC;gBACzC,CAAC,CAAC,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAGxC;IACC,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAC3D,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC"}

package/dist/activities/execute-deep-agent/attachment-injector.d.ts

@@ -27,7 +27,14 @@ export interface InjectedFile {
 export interface InjectAttachmentsOptions {
     readonly backend: WorkspaceBackend;
     readonly attachments: readonly Attachment[];
-    readonly storage: ArtifactStorage;
+    /**
+     * Artifact storage for cloud-mode attachment download. `undefined` when the
+     * runner could not build a store (proxy misconfig). With no attachments this is
+     * never touched (the function early-returns); a cloud-mode attachment that
+     * genuinely needs storage surfaces a clear {@link AttachmentInjectionError}
+     * rather than dereferencing undefined.
+     */
+    readonly storage: ArtifactStorage | undefined;
     readonly isLocalMode: boolean;
 }
 export interface ZipEntryInfo {

package/dist/activities/execute-deep-agent/attachment-injector.js

@@ -216,14 +216,14 @@ async function downloadAttachment(attachment, storage, isLocalMode) {
     if (!attachment.storageKey) {
         throw new AttachmentInjectionError(attachment.filename, "missing storageKey — cannot download attachment from storage");
     }
+    // The attachment must come from storage, but the runner could not build one
+    // (proxy misconfig). Fail with an actionable message rather than dereferencing
+    // undefined — consistent with the degraded posture, never a silent skip.
+    if (!storage) {
+        throw new AttachmentInjectionError(attachment.filename, `artifact storage is unavailable, so this attachment (key: ${attachment.storageKey}) cannot be downloaded`);
+    }
     try {
-        const url = await storage.getDownloadUrl(attachment.storageKey);
-        const response = await fetch(url);
-        if (!response.ok) {
-            throw new Error(`HTTP ${response.status}: ${response.statusText}`);
-        }
-        const arrayBuffer = await response.arrayBuffer();
-        return Buffer.from(arrayBuffer);
+        return await storage.download(attachment.storageKey);
     }
     catch (err) {
         if (err instanceof AttachmentInjectionError)

package/dist/activities/execute-deep-agent/attachment-injector.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-injector.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/attachment-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAK5C,wEAAwE;AAExE,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAC3D,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAChD,MAAM,+BAA+B,GAAG,UAAU,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;AAsBjD,wEAAwE;AAExE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,kBAAkB,CAAS;IAC3B,MAAM,CAAS;IAExB,YAAY,kBAA0B,EAAE,MAAc;QACpD,KAAK,CAAC,eAAe,kBAAkB,MAAM,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,kBAAkB,CAAS;IAC3B,MAAM,CAAS;IAExB,YAAY,kBAA0B,EAAE,MAAc;QACpD,KAAK,CAAC,eAAe,kBAAkB,MAAM,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,wEAAwE;AAExE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,cAAsB;IAEtB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAE/C,IAAI,cAAc,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,+BAA+B;YAAE,MAAM;QAEzD,IAAI,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAG,MAAM,GAAG,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,aAAa,GAAG,cAAc,CAAC;QAEnD,IAAI,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,oEAAoE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEzD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,mEAAmE,QAAQ,EAAE,CAC9E,CAAC;YACJ,CAAC;YAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,mEAAmE,QAAQ,EAAE,CAC9E,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC3D,iBAAiB,IAAI,gBAAgB,CAAC;QACxC,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,CAAC;QAEpE,yDAAyD;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,QAAQ,GAAG,cAAc,CAAC;QAE9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YACxD,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,IAAI,CAAC,WAAW,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,gGAAgG,CACjG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,YAAY,OAAO,CAAC,MAAM,kBAAkB,aAAa,GAAG,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,GAAG,sBAAsB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,iBAAiB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,CAAC,sBAAsB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,oBAAoB,MAAM,eAAe,OAAO,MAAM,CACvD,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA8B;IACpE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE5D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,yDAAyD;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAElD,yDAAyD;IACzD,MAAM,aAAa,GAAmB,EAAE,CAAC;IAEzC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAE9C,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvE,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAC3C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CACrC,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,aAAa,CAAC,IAAI,CAAC;gBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC;gBACpD,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,OAAO,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CACT,kCAAkC,aAAa,CAAC,MAAM,yBAAyB,CAChF,CAAC;IAEF,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,wEAAwE;AAExE,SAAS,iBAAiB,CACxB,WAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,eAAe,SAAS,+BAA+B,QAAQ,CAAC,QAAQ,KAAK;gBAC7E,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAsB;IAC9C,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,wBAAwB,CAChC,WAAW,EACX,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,qBAAqB,IAAI,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAsB,EACtB,OAAwB,EACxB,WAAoB;IAEpB,sDAAsD;IACtD,IAAI,WAAW,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,8BAA8B,UAAU,CAAC,SAAS,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAwB;YAAE,MAAM,GAAG,CAAC;QACvD,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,yCAAyC,UAAU,CAAC,UAAU,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAe,EACf,OAAgC,EAChC,QAAgB,EAChB,OAAyB;IAEzB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,GAAG,aAAa,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAE5D,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5C,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,OAAO,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,+BAA+B;YAAE,MAAM;QAEzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAG,MAAM,GAAG,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CAAC,CAChE,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,CAAC;QACpE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC;QAE/E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACnB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC3C,iBAAiB;aAClB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,SAAS,GAAG,cAAc,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAkB;IAC/C,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,cAAc,CAAC;IAC9B,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAErE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"attachment-injector.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/attachment-injector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAK5C,wEAAwE;AAExE,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAC3D,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAChD,MAAM,+BAA+B,GAAG,UAAU,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC;AA6BjD,wEAAwE;AAExE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,kBAAkB,CAAS;IAC3B,MAAM,CAAS;IAExB,YAAY,kBAA0B,EAAE,MAAc;QACpD,KAAK,CAAC,eAAe,kBAAkB,MAAM,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,kBAAkB,CAAS;IAC3B,MAAM,CAAS;IAExB,YAAY,kBAA0B,EAAE,MAAc;QACpD,KAAK,CAAC,eAAe,kBAAkB,MAAM,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,wEAAwE;AAExE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,cAAsB;IAEtB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAE/C,IAAI,cAAc,KAAK,+BAA+B,EAAE,CAAC;QACvD,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,+BAA+B;YAAE,MAAM;QAEzD,IAAI,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAG,MAAM,GAAG,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,aAAa,GAAG,cAAc,CAAC;QAEnD,IAAI,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,oEAAoE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEzD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,mEAAmE,QAAQ,EAAE,CAC9E,CAAC;YACJ,CAAC;YAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,mEAAmE,QAAQ,EAAE,CAC9E,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC3D,iBAAiB,IAAI,gBAAgB,CAAC;QACxC,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,CAAC;QAEpE,yDAAyD;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,QAAQ,GAAG,cAAc,CAAC;QAE9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YACxD,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,IAAI,CAAC,WAAW,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,gGAAgG,CACjG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,YAAY,OAAO,CAAC,MAAM,kBAAkB,aAAa,GAAG,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,GAAG,sBAAsB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,iBAAiB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,CAAC,sBAAsB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,yBAAyB,CACjC,cAAc,EACd,oBAAoB,MAAM,eAAe,OAAO,MAAM,CACvD,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA8B;IACpE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE5D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,yDAAyD;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAElD,yDAAyD;IACzD,MAAM,aAAa,GAAmB,EAAE,CAAC;IAEzC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAE9C,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvE,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAC3C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CACrC,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,aAAa,CAAC,IAAI,CAAC;gBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC;gBACpD,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,OAAO,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CACT,kCAAkC,aAAa,CAAC,MAAM,yBAAyB,CAChF,CAAC;IAEF,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,wEAAwE;AAExE,SAAS,iBAAiB,CACxB,WAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,eAAe,SAAS,+BAA+B,QAAQ,CAAC,QAAQ,KAAK;gBAC7E,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAsB;IAC9C,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,wBAAwB,CAChC,WAAW,EACX,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,qBAAqB,IAAI,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAsB,EACtB,OAAoC,EACpC,WAAoB;IAEpB,sDAAsD;IACtD,IAAI,WAAW,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,8BAA8B,UAAU,CAAC,SAAS,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,6DAA6D,UAAU,CAAC,UAAU,wBAAwB,CAC3G,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAwB;YAAE,MAAM,GAAG,CAAC;QACvD,MAAM,IAAI,wBAAwB,CAChC,UAAU,CAAC,QAAQ,EACnB,yCAAyC,UAAU,CAAC,UAAU,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAe,EACf,OAAgC,EAChC,QAAgB,EAChB,OAAyB;IAEzB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,GAAG,aAAa,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAE5D,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5C,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,OAAO,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,+BAA+B;YAAE,MAAM;QAEzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAG,MAAM,GAAG,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,cAAc,CAAC,CAChE,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,CAAC;QACpE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC;QAE/E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACnB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC3C,iBAAiB;aAClB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,SAAS,GAAG,cAAc,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAkB;IAC/C,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,cAAc,CAAC;IAC9B,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAErE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/activities/execute-deep-agent/cas-capture-backend.d.ts

@@ -0,0 +1,42 @@
+/**
+ * A capture-mode `FilesystemBackend` that observes gitignored file mutations for
+ * CAS review (design docs 08/11/12; the `.gitignored` half of apply-then-review).
+ *
+ * WHY A BACKEND WRAPPER, NOT THE APPROVAL GATE
+ * --------------------------------------------
+ * Capture is a property of the TURN, not of authorization — exactly like the git
+ * substrate, which snapshots the working tree at the turn boundary regardless of
+ * how or whether a tool was gated. File review opens even under the global bypass
+ * (`spec.auto_approve_all`), where the approval gate is not installed at all, so
+ * sourcing the before-bytes from the gate would let gitignored edits silently
+ * escape review under auto-approve-all. Observing at the backend keeps CAS
+ * capture gate-independent, so it is symmetric with the git-tracked path.
+ *
+ * THIS CLASS IS A THIN ADAPTER
+ * ----------------------------
+ * All capture state and logic live in the shared {@link CasCaptureObserver} (one
+ * per turn). The parent graph and every sub-agent graph are each handed a backend
+ * pointing at the SAME observer, so their gitignored writes compose into one CAS
+ * change set with race-free first-touch-wins (see the observer's docs). This
+ * backend only forwards the mutation point to the observer before delegating to
+ * the base `FilesystemBackend`.
+ *
+ * deepagents mutates only via `write` (create/overwrite) and `edit` (modify);
+ * there is no backend delete/rename, so this observes CREATE and MODIFY. A
+ * gitignored delete can only arrive via shell, which stays on the approval gate.
+ *
+ * @since File-Change HITL Redesign (Phase 3 — CAS deep-agent wiring); sub-agent
+ * gitignored capture parity (Session 26, DD-19)
+ */
+import { FilesystemBackend } from "deepagents";
+import type { CasCaptureObserver } from "./cas-capture-observer.js";
+export type { CasBeforeMap } from "./cas-capture-observer.js";
+type FilesystemBackendOptions = NonNullable<ConstructorParameters<typeof FilesystemBackend>[0]>;
+export declare class CasCaptureFilesystemBackend extends FilesystemBackend {
+    private readonly observer;
+    constructor(options: FilesystemBackendOptions, deps: {
+        readonly observer: CasCaptureObserver;
+    });
+    write(filePath: string, content: string): Promise<import("deepagents").WriteResult>;
+    edit(filePath: string, oldString: string, newString: string, replaceAll?: boolean): Promise<import("deepagents").EditResult>;
+}

package/dist/activities/execute-deep-agent/cas-capture-backend.js

@@ -0,0 +1,47 @@
+/**
+ * A capture-mode `FilesystemBackend` that observes gitignored file mutations for
+ * CAS review (design docs 08/11/12; the `.gitignored` half of apply-then-review).
+ *
+ * WHY A BACKEND WRAPPER, NOT THE APPROVAL GATE
+ * --------------------------------------------
+ * Capture is a property of the TURN, not of authorization — exactly like the git
+ * substrate, which snapshots the working tree at the turn boundary regardless of
+ * how or whether a tool was gated. File review opens even under the global bypass
+ * (`spec.auto_approve_all`), where the approval gate is not installed at all, so
+ * sourcing the before-bytes from the gate would let gitignored edits silently
+ * escape review under auto-approve-all. Observing at the backend keeps CAS
+ * capture gate-independent, so it is symmetric with the git-tracked path.
+ *
+ * THIS CLASS IS A THIN ADAPTER
+ * ----------------------------
+ * All capture state and logic live in the shared {@link CasCaptureObserver} (one
+ * per turn). The parent graph and every sub-agent graph are each handed a backend
+ * pointing at the SAME observer, so their gitignored writes compose into one CAS
+ * change set with race-free first-touch-wins (see the observer's docs). This
+ * backend only forwards the mutation point to the observer before delegating to
+ * the base `FilesystemBackend`.
+ *
+ * deepagents mutates only via `write` (create/overwrite) and `edit` (modify);
+ * there is no backend delete/rename, so this observes CREATE and MODIFY. A
+ * gitignored delete can only arrive via shell, which stays on the approval gate.
+ *
+ * @since File-Change HITL Redesign (Phase 3 — CAS deep-agent wiring); sub-agent
+ * gitignored capture parity (Session 26, DD-19)
+ */
+import { FilesystemBackend } from "deepagents";
+export class CasCaptureFilesystemBackend extends FilesystemBackend {
+    observer;
+    constructor(options, deps) {
+        super(options);
+        this.observer = deps.observer;
+    }
+    async write(filePath, content) {
+        await this.observer.recordBefore(filePath);
+        return super.write(filePath, content);
+    }
+    async edit(filePath, oldString, newString, replaceAll) {
+        await this.observer.recordBefore(filePath);
+        return super.edit(filePath, oldString, newString, replaceAll);
+    }
+}
+//# sourceMappingURL=cas-capture-backend.js.map

package/dist/activities/execute-deep-agent/cas-capture-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cas-capture-backend.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/cas-capture-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAS/C,MAAM,OAAO,2BAA4B,SAAQ,iBAAiB;IAC/C,QAAQ,CAAqB;IAE9C,YACE,OAAiC,EACjC,IAA+C;QAE/C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,OAAe;QACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAEQ,KAAK,CAAC,IAAI,CACjB,QAAgB,EAChB,SAAiB,EACjB,SAAiB,EACjB,UAAoB;QAEpB,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/activities/execute-deep-agent/cas-capture-observer.d.ts

@@ -0,0 +1,79 @@
+/**
+ * The single owner of one turn's CAS (content-addressed) capture state for the
+ * deep-agent activity — the `.gitignored` half of apply-then-review (design docs
+ * 08/11/12).
+ *
+ * WHY ONE SHARED OBSERVER (NOT PER-BACKEND STATE)
+ * -----------------------------------------------
+ * Capture is a property of the TURN, not of any single graph. The parent graph
+ * AND every sub-agent graph run against the same workspace root within one turn,
+ * and up to {@link SubAgentGate} sub-agents run CONCURRENTLY. If each filesystem
+ * backend held its own before-map + reservation, two graphs touching the same
+ * gitignored path could each read a "before" — the later one reading mid-turn
+ * (post-write) bytes as the baseline, corrupting the reviewed diff and breaking
+ * the "reviewed == applied" invariant.
+ *
+ * Making ONE observer own the before-map AND the reservation set fixes this by
+ * construction: `reserving.add` is synchronous (executes before the first
+ * `await` in {@link recordBefore}), so first-touch-wins holds across every
+ * backend instance that delegates here — the parent and all sub-agents.
+ *
+ * WHAT IT OWNS
+ * ------------
+ *  - `before`: the pre-turn bytes of each first-touched gitignored path
+ *    (`null` = the path did not exist → an ADD), read at the turn boundary to
+ *    build the CAS `before` side.
+ *  - `blockedSecretPaths`: gitignored paths the approval gate hard-blocked as
+ *    secret-like (DD-E) — never applied, never captured; the boundary authors a
+ *    content-less `DIFF_UNREVIEWABLE` entry for each (path only — the name is not
+ *    the secret; the CONTENT never leaves the workspace).
+ *
+ * The AFTER bytes are re-read from disk at the turn boundary (the authoritative
+ * net result of the turn), so multiple edits to one path collapse to one
+ * before/after. Git-tracked paths are never recorded here — the turn-boundary git
+ * diff captures them — so memory is bounded to the gitignored scope.
+ *
+ * @since File-Change HITL Redesign (Phase 3 — CAS deep-agent wiring); sub-agent
+ * gitignored capture parity (Session 26, DD-19)
+ */
+/**
+ * Pre-turn bytes of each first-touched gitignored path, keyed by workspace-root-
+ * relative path. `null` means the path did not exist before the turn (an ADD).
+ */
+export type CasBeforeMap = Map<string, Uint8Array | null>;
+export declare class CasCaptureObserver {
+    private readonly rootDir;
+    /** Raw (uncached) gitignore predicate; results are memoized in {@link ignoredCache}. */
+    private readonly isIgnoredRaw;
+    /** Pre-turn bytes of first-touched gitignored paths (see {@link CasBeforeMap}). */
+    readonly before: CasBeforeMap;
+    /** Paths whose before-read is in flight — the synchronous first-touch lock. */
+    private readonly reserving;
+    /** Memoized `git check-ignore` results (one classification per distinct path). */
+    private readonly ignoredCache;
+    /** Gitignored paths hard-blocked as secret-like (never applied, never captured). */
+    private readonly blocked;
+    constructor(deps: {
+        readonly rootDir: string;
+        /** True when the workspace-relative path is gitignored (CAS-owned). Uncached. */
+        readonly isIgnored: (relPath: string) => Promise<boolean>;
+    });
+    /** Gitignored paths the gate refused as secret-like, read at the turn boundary. */
+    get blockedSecretPaths(): ReadonlySet<string>;
+    /**
+     * Record the pre-turn bytes of `rawPath` when it is a first-touched gitignored
+     * path. First-touch-wins across ALL backends sharing this observer: the slot is
+     * reserved SYNCHRONOUSLY (before the first `await`), so two concurrent
+     * mutations of the same path — even from different graphs — cannot both read a
+     * post-write "before". Non-gitignored paths (git-tracked) are ignored here; the
+     * turn-boundary git diff captures them.
+     */
+    recordBefore(rawPath: string): Promise<void>;
+    /**
+     * Record a gitignored path the approval gate hard-blocked as secret-like. The
+     * raw path is resolved to the same workspace-relative key the CAS reconcile
+     * uses, so the boundary can author its `DIFF_UNREVIEWABLE` entry. Idempotent.
+     */
+    recordBlockedSecret(rawPath: string): void;
+    private isPathIgnored;
+}

package/dist/activities/execute-deep-agent/cas-capture-observer.js

@@ -0,0 +1,112 @@
+/**
+ * The single owner of one turn's CAS (content-addressed) capture state for the
+ * deep-agent activity — the `.gitignored` half of apply-then-review (design docs
+ * 08/11/12).
+ *
+ * WHY ONE SHARED OBSERVER (NOT PER-BACKEND STATE)
+ * -----------------------------------------------
+ * Capture is a property of the TURN, not of any single graph. The parent graph
+ * AND every sub-agent graph run against the same workspace root within one turn,
+ * and up to {@link SubAgentGate} sub-agents run CONCURRENTLY. If each filesystem
+ * backend held its own before-map + reservation, two graphs touching the same
+ * gitignored path could each read a "before" — the later one reading mid-turn
+ * (post-write) bytes as the baseline, corrupting the reviewed diff and breaking
+ * the "reviewed == applied" invariant.
+ *
+ * Making ONE observer own the before-map AND the reservation set fixes this by
+ * construction: `reserving.add` is synchronous (executes before the first
+ * `await` in {@link recordBefore}), so first-touch-wins holds across every
+ * backend instance that delegates here — the parent and all sub-agents.
+ *
+ * WHAT IT OWNS
+ * ------------
+ *  - `before`: the pre-turn bytes of each first-touched gitignored path
+ *    (`null` = the path did not exist → an ADD), read at the turn boundary to
+ *    build the CAS `before` side.
+ *  - `blockedSecretPaths`: gitignored paths the approval gate hard-blocked as
+ *    secret-like (DD-E) — never applied, never captured; the boundary authors a
+ *    content-less `DIFF_UNREVIEWABLE` entry for each (path only — the name is not
+ *    the secret; the CONTENT never leaves the workspace).
+ *
+ * The AFTER bytes are re-read from disk at the turn boundary (the authoritative
+ * net result of the turn), so multiple edits to one path collapse to one
+ * before/after. Git-tracked paths are never recorded here — the turn-boundary git
+ * diff captures them — so memory is bounded to the gitignored scope.
+ *
+ * @since File-Change HITL Redesign (Phase 3 — CAS deep-agent wiring); sub-agent
+ * gitignored capture parity (Session 26, DD-19)
+ */
+import { readFile } from "node:fs/promises";
+import { resolveWorkspacePath } from "../../shared/file-change.js";
+export class CasCaptureObserver {
+    rootDir;
+    /** Raw (uncached) gitignore predicate; results are memoized in {@link ignoredCache}. */
+    isIgnoredRaw;
+    /** Pre-turn bytes of first-touched gitignored paths (see {@link CasBeforeMap}). */
+    before = new Map();
+    /** Paths whose before-read is in flight — the synchronous first-touch lock. */
+    reserving = new Set();
+    /** Memoized `git check-ignore` results (one classification per distinct path). */
+    ignoredCache = new Map();
+    /** Gitignored paths hard-blocked as secret-like (never applied, never captured). */
+    blocked = new Set();
+    constructor(deps) {
+        this.rootDir = deps.rootDir;
+        this.isIgnoredRaw = deps.isIgnored;
+    }
+    /** Gitignored paths the gate refused as secret-like, read at the turn boundary. */
+    get blockedSecretPaths() {
+        return this.blocked;
+    }
+    /**
+     * Record the pre-turn bytes of `rawPath` when it is a first-touched gitignored
+     * path. First-touch-wins across ALL backends sharing this observer: the slot is
+     * reserved SYNCHRONOUSLY (before the first `await`), so two concurrent
+     * mutations of the same path — even from different graphs — cannot both read a
+     * post-write "before". Non-gitignored paths (git-tracked) are ignored here; the
+     * turn-boundary git diff captures them.
+     */
+    async recordBefore(rawPath) {
+        const { path: relPath, absolutePath } = resolveWorkspacePath(rawPath, this.rootDir, true);
+        if (this.before.has(relPath) || this.reserving.has(relPath))
+            return;
+        this.reserving.add(relPath);
+        try {
+            if (!(await this.isPathIgnored(relPath)))
+                return;
+            // Re-check after the await: a concurrent call may have won the slot.
+            if (this.before.has(relPath))
+                return;
+            this.before.set(relPath, await readBytesOrNull(absolutePath));
+        }
+        finally {
+            this.reserving.delete(relPath);
+        }
+    }
+    /**
+     * Record a gitignored path the approval gate hard-blocked as secret-like. The
+     * raw path is resolved to the same workspace-relative key the CAS reconcile
+     * uses, so the boundary can author its `DIFF_UNREVIEWABLE` entry. Idempotent.
+     */
+    recordBlockedSecret(rawPath) {
+        this.blocked.add(resolveWorkspacePath(rawPath, this.rootDir, true).path);
+    }
+    async isPathIgnored(relPath) {
+        const cached = this.ignoredCache.get(relPath);
+        if (cached !== undefined)
+            return cached;
+        const ignored = await this.isIgnoredRaw(relPath);
+        this.ignoredCache.set(relPath, ignored);
+        return ignored;
+    }
+}
+/** Raw bytes of a file, or `null` when it does not exist (an ADD). */
+async function readBytesOrNull(absolutePath) {
+    try {
+        return await readFile(absolutePath);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=cas-capture-observer.js.map

package/dist/activities/execute-deep-agent/cas-capture-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cas-capture-observer.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/cas-capture-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAQnE,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAAS;IACjC,wFAAwF;IACvE,YAAY,CAAwC;IAErE,mFAAmF;IAC1E,MAAM,GAAiB,IAAI,GAAG,EAAE,CAAC;IAE1C,+EAA+E;IAC9D,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,kFAAkF;IACjE,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3D,oFAAoF;IACnE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,YAAY,IAIX;QACC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,mFAAmF;IACnF,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YACjD,qEAAqE;YACrE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO;YACrC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,OAAe;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAe;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,sEAAsE;AACtE,KAAK,UAAU,eAAe,CAAC,YAAoB;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/activities/execute-deep-agent/hitl.d.ts

@@ -31,6 +31,16 @@ export interface GraphInterrupt {
     readonly interrupts?: readonly InterruptValue[];
 }
 export interface InterruptValue {
+    /**
+     * The interrupt's own id — the canonical key LangGraph matches a
+     * `Command(resume={...})` map against. For a parent-level tool interrupt this
+     * coincides with the owning task id, but for a *nested sub-agent* interrupt
+     * the two differ: the sub-agent's interrupt surfaces under the parent task
+     * that ran the `task` tool, and ONLY this id routes the resume value back into
+     * the sub-agent's `interrupt()`. Keying by `task.id` silently skips sub-agent
+     * approvals (verified empirically in subagent-approval-propagation.test.ts).
+     */
+    readonly id?: string;
     readonly value: Record<string, unknown>;
     readonly resumeValue?: unknown;
 }
@@ -40,10 +50,13 @@ export interface InterruptValue {
  * Returns a `Command(resume=...)` if there are pending interrupts with
  * matching approval decisions, or a fresh user message input if this is
  * not a resume scenario.
+ *
+ * The graph checkpoint snapshot is read once by the caller and passed in: the
+ * same snapshot also decides whether status must be seeded from the persisted
+ * transcript (see `index.ts`), and on the durable (http) saver an extra
+ * `getState` is a network round-trip best avoided.
  */
-export declare function resolveResumeInput(execution: AgentExecution, agentGraph: {
-    getState(config: Record<string, unknown>): Promise<GraphStateSnapshot>;
-}, langgraphConfig: Record<string, unknown>, userMessage: string): Promise<ResumeResult>;
+export declare function resolveResumeInput(execution: AgentExecution, graphState: GraphStateSnapshot, userMessage: string): ResumeResult;
 interface ApprovalDecisionEntry {
     readonly action: ApprovalAction;
     readonly comment: string;