@stigmer/runner 3.0.9-dev.20260615153829 → 3.1.0

package/dist/shared/artifact-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-storage.js","sourceRoot":"","sources":["../../src/shared/artifact-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAY,MAAM,EAAU,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAa1C,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAS;IACjB,YAAY,CAAS;IAEtC,YAAY,QAAgB,EAAE,YAAoB;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,YAAqB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,YAAY,aAAqB,EAAE,SAAiB;QAClD,IAAI,CAAC,OAAO,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,WAAoB;QAC7D,MAAM,EAAE,GAAG,WAAW,IAAI,0BAA0B,CAAC;QAErD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,uBAAuB,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,CAAC,MAAM,KAAK;gBACnE,MAAM,WAAW,CAAC,IAAI,EAAE,CACzB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAuD,CAAC;QAE3F,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,0DAA0D;QAC1D,yEAAyE;QACzE,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;gBAAE,SAAS;YAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YACpE,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,kCAAkC;QAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,aAAa,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,MAAM,KAAK;gBACpD,MAAM,OAAO,CAAC,IAAI,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,yBAAyB,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,MAAM,KAAK;gBAC9D,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAqB,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,yBAAyB,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;oBAC3C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAYD,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,4EAA4E;IAC5E,+EAA+E;IAC/E,wEAAwE;IACxE,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAClD,MAAM,IAAI,GACR,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAE3C,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;QACtE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,uBAAuB;QAC9E,aAAa,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACvE,cAAc,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAA0B;IAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;AACpE,CAAC"}
+{"version":3,"file":"artifact-storage.js","sourceRoot":"","sources":["../../src/shared/artifact-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwB1C,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAS;IACjB,YAAY,CAAS;IAEtC,YAAY,QAAgB,EAAE,YAAoB;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,YAAqB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,2EAA2E;QAC3E,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AAExE,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,YAAY,aAAqB,EAAE,SAAiB;QAClD,IAAI,CAAC,OAAO,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,OAAe,EAAE,WAAoB;QAC7D,MAAM,EAAE,GAAG,WAAW,IAAI,0BAA0B,CAAC;QAErD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,uBAAuB,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,CAAC,MAAM,KAAK;gBACnE,MAAM,WAAW,CAAC,IAAI,EAAE,CACzB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAuD,CAAC;QAE3F,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,0DAA0D;QAC1D,yEAAyE;QACzE,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM;gBAAE,SAAS;YAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YACpE,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,kCAAkC;QAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,aAAa,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,MAAM,KAAK;gBACpD,MAAM,OAAO,CAAC,IAAI,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,yBAAyB,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,MAAM,KAAK;gBAC9D,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAqB,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,MAAM,cAAc,GAAG,KAAK;gBACnE,MAAM,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,yEAAyE;QACzE,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,kEAAkE;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;QAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnF,8EAA8E;QAC9E,uEAAuE;QACvE,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,MAAM,cAAc,GAAG,GAAG,CACzE,CAAC;IACJ,CAAC;CACF;AAYD,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,4EAA4E;IAC5E,+EAA+E;IAC/E,wEAAwE;IACxE,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAClD,MAAM,IAAI,GACR,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAE3C,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,wBAAwB;QACtE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,uBAAuB;QAC9E,aAAa,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACvE,cAAc,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAA0B;IAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;AACpE,CAAC"}

package/dist/shared/file-change.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Pure path + binary-detection helpers shared by the native (deepagents) and
+ * Cursor harnesses' file-review capture.
+ *
+ * Deliberately dependency-free and side-effect-free: no file IO, no diff
+ * computation, no proto knowledge. `resolveWorkspacePath` normalizes a touched
+ * path to (display path, absolute path); `looksBinary`/`bytesLookBinary` are the
+ * single definition of "binary" across every capture substrate.
+ *
+ * @since First-Class Diff Review (#186)
+ */
+/**
+ * Heuristic binary detection: a NUL byte never appears in valid UTF-8 text. This
+ * is a safety net, not a feature — the native edit/write tools are string-based,
+ * so captured content is text in practice.
+ */
+export declare function looksBinary(content: string): boolean;
+/**
+ * Byte-level binary detection: a NUL byte never appears in valid UTF-8 text. The
+ * single definition of "binary" shared by every substrate that reads raw bytes
+ * (the git substrate's blob reads and the CAS substrate's captured bodies), so
+ * "what is binary" is decided one way across the whole file-review subsystem.
+ *
+ * Prefer this over {@link looksBinary} whenever the raw bytes are in hand: it is
+ * exact, whereas scanning a UTF-8-decoded string can miss a NUL that a lossy
+ * decode dropped.
+ */
+export declare function bytesLookBinary(bytes: Uint8Array): boolean;
+/**
+ * Derive the workspace-root-relative display path and the absolute on-disk path
+ * for a file a tool touched.
+ *
+ * `virtualRoot` distinguishes the two harness path conventions:
+ *  - native (deepagents) addresses files against a virtual root where a leading
+ *    "/" denotes the workspace root — mirrors `InlinePublisher.normalizePath`;
+ *  - Cursor passes real filesystem paths that may be absolute.
+ *
+ * A path that is absolute but outside `rootDir` is displayed as-is (we never
+ * surface an escaping `../../` relative path).
+ */
+export declare function resolveWorkspacePath(rawPath: string, rootDir: string, virtualRoot: boolean): {
+    path: string;
+    absolutePath: string;
+};

package/dist/shared/file-change.js

@@ -0,0 +1,57 @@
+/**
+ * Pure path + binary-detection helpers shared by the native (deepagents) and
+ * Cursor harnesses' file-review capture.
+ *
+ * Deliberately dependency-free and side-effect-free: no file IO, no diff
+ * computation, no proto knowledge. `resolveWorkspacePath` normalizes a touched
+ * path to (display path, absolute path); `looksBinary`/`bytesLookBinary` are the
+ * single definition of "binary" across every capture substrate.
+ *
+ * @since First-Class Diff Review (#186)
+ */
+import { isAbsolute, join, relative } from "node:path";
+/**
+ * Heuristic binary detection: a NUL byte never appears in valid UTF-8 text. This
+ * is a safety net, not a feature — the native edit/write tools are string-based,
+ * so captured content is text in practice.
+ */
+export function looksBinary(content) {
+    return content.includes("\u0000");
+}
+/**
+ * Byte-level binary detection: a NUL byte never appears in valid UTF-8 text. The
+ * single definition of "binary" shared by every substrate that reads raw bytes
+ * (the git substrate's blob reads and the CAS substrate's captured bodies), so
+ * "what is binary" is decided one way across the whole file-review subsystem.
+ *
+ * Prefer this over {@link looksBinary} whenever the raw bytes are in hand: it is
+ * exact, whereas scanning a UTF-8-decoded string can miss a NUL that a lossy
+ * decode dropped.
+ */
+export function bytesLookBinary(bytes) {
+    return bytes.includes(0);
+}
+/**
+ * Derive the workspace-root-relative display path and the absolute on-disk path
+ * for a file a tool touched.
+ *
+ * `virtualRoot` distinguishes the two harness path conventions:
+ *  - native (deepagents) addresses files against a virtual root where a leading
+ *    "/" denotes the workspace root — mirrors `InlinePublisher.normalizePath`;
+ *  - Cursor passes real filesystem paths that may be absolute.
+ *
+ * A path that is absolute but outside `rootDir` is displayed as-is (we never
+ * surface an escaping `../../` relative path).
+ */
+export function resolveWorkspacePath(rawPath, rootDir, virtualRoot) {
+    if (virtualRoot || !isAbsolute(rawPath)) {
+        const rel = rawPath.replace(/^\/+/, "").replace(/^\.\//, "");
+        return { path: rel, absolutePath: join(rootDir, rel) };
+    }
+    const rel = relative(rootDir, rawPath);
+    if (rel && !rel.startsWith("..") && !isAbsolute(rel)) {
+        return { path: rel, absolutePath: rawPath };
+    }
+    return { path: rawPath, absolutePath: rawPath };
+}
+//# sourceMappingURL=file-change.js.map

package/dist/shared/file-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-change.js","sourceRoot":"","sources":["../../src/shared/file-change.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,OAAe,EACf,WAAoB;IAEpB,IAAI,WAAW,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC"}

package/dist/shared/file-tools.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Introspection of file-modifying tools, shared by every runner surface that
+ * reacts to a file edit: the native (deepagents) streaming side-effects (publish,
+ * git writeback, post-exec file-change capture), the Cursor streaming capture,
+ * and BOTH harnesses' approval-gate pre-execution capture (shared/gate-file-change.ts).
+ *
+ * This is the single source of truth for "which tools mutate files" and "where
+ * their path / whole-file content / edit replacement lives in the tool
+ * arguments". It is deliberately pure — no IO, no proto knowledge — so the same
+ * identification logic is used whether args come from a streamed `on_tool_*`
+ * event, a v3 protocol event, an AI-message tool call read out of graph state at
+ * an interrupt, or the Cursor preToolUse hook's captured `tool_input`.
+ *
+ * Both taxonomies are covered in one place on purpose: the deepagents harness
+ * names a file write `write_file`/`write`, the Cursor SDK stream names it
+ * `edit`/`write`, and the Cursor preToolUse hook names it `Write`/`StrReplace`/
+ * `EditNotebook`. The four extractors below span every arg-field name these
+ * surfaces use, so a single capture path is correct for all of them.
+ *
+ * @since First-Class Diff Review (#186); cross-harness gate unification (HITL diff)
+ */
+/**
+ * The file-modifying tools, across both harness taxonomies.
+ *
+ * - deepagents (native): `write_file`/`edit_file`/`create_file` (stream) and
+ *   `write`/`edit`/`create`/`str_replace_editor` (SDK names);
+ * - Cursor: `write`/`edit` (SDK stream, shared with native) and
+ *   `Write`/`StrReplace`/`EditNotebook` (preToolUse hook + tool names).
+ *
+ * Delete is intentionally absent: it has no whole-file content or hunk to
+ * preview, so it is not "file-modifying" in the diff-capture sense.
+ */
+export declare const FILE_MODIFYING_TOOLS: ReadonlySet<string>;
+/** Whether `toolName` is a file-modifying tool in either harness taxonomy. */
+export declare function isFileModifyingTool(toolName: string): boolean;
+/**
+ * Extract the target file path from a file-modifying tool's arguments. Returns
+ * `null` when no recognized path key is present. The key set is the union across
+ * both taxonomies: deepagents/Cursor write+edit use `path`/`file_path`; a Cursor
+ * notebook edit uses `target_notebook`; the rest are defensive against drift.
+ */
+export declare function extractFilePath(args: Record<string, unknown>): string | null;
+/**
+ * Top-level arg keys, in priority order, that carry a write-family tool's
+ * WHOLE-FILE body, across both harness taxonomies (Cursor `Write` uses
+ * `content`; the SDK stream uses `contents`). Exported so the generated Cursor
+ * hook injects the SAME list into its inline content-digest extractor — the
+ * field names diverge across the hook/stream layers, so a single shared list is
+ * what keeps the runner-side and hook-side digests byte-identical.
+ */
+export declare const WRITE_CONTENT_FIELDS: readonly ["content", "contents", "file_content"];
+/**
+ * Extract the WHOLE-FILE content from a write-family tool's arguments. Returns
+ * `null` for an edit-family call (which carries `old_string`/`new_string`, not a
+ * whole-file body) or when no content key is present. An empty string is a real
+ * value (an empty file) and is preserved.
+ *
+ * Critical: this is kept strictly separate from {@link extractEditNewString}.
+ * `new_string` is an edit replacement fragment, NOT whole-file content;
+ * conflating the two would make an edit look like a whole-file capture and read
+ * the wrong `before` at the gate.
+ */
+export declare function extractWriteContent(args: Record<string, unknown>): string | null;
+/**
+ * Top-level arg keys for an edit-family tool's pre-/post-edit fragments, across
+ * both taxonomies. Exported for the same reason as {@link WRITE_CONTENT_FIELDS}:
+ * the Cursor hook injects them into its inline digest extractor so its content
+ * digest matches the runner's byte-for-byte.
+ */
+export declare const EDIT_OLD_FIELDS: readonly ["old_string", "old_text", "oldText"];
+export declare const EDIT_NEW_FIELDS: readonly ["new_string", "new_text", "newText", "replacement"];
+/**
+ * Extract an edit-family tool's pre-edit fragment (`old_string` and its
+ * variants). Returns `null` when absent; an empty string is preserved (an
+ * insertion has an empty `old_string`), matching the native gate capture.
+ */
+export declare function extractEditOldString(args: Record<string, unknown>): string | null;
+/**
+ * Extract an edit-family tool's post-edit fragment (`new_string` and its
+ * variants, including `replacement`). Returns `null` when absent; an empty
+ * string is preserved (a deletion has an empty `new_string`).
+ */
+export declare function extractEditNewString(args: Record<string, unknown>): string | null;
+/**
+ * Stable content digest of a file-mutating tool call's arguments — the content
+ * discriminator the deny-only Cursor HITL identity adds on top of
+ * (category, path) so a DIFFERENT edit to the same file re-gates rather than
+ * riding an earlier approval through.
+ *
+ * It hashes ONLY the edit content, never the path (the path is the identity's
+ * "salient" already). A whole-file write hashes its body; an edit hashes its
+ * (old, new) fragment pair. Returns "" for a call with no recoverable edit
+ * content — a shell command, a delete, a read, an MCP tool, or the hook's
+ * grep-fallback denial — which keep the coarse (category, salient) identity
+ * (already content-exact for a command / delete path).
+ *
+ * THE FORMAT IS A CROSS-LAYER CONTRACT. The Cursor preToolUse hook recomputes
+ * this digest inline from `tool_input`, running the SAME Node binary as the
+ * runner (see buildContentDigestScript in execute-cursor/hook-script.ts), so the
+ * two values must be byte-identical — any change here MUST be mirrored there.
+ * JSON.stringify of a fixed-shape string array is deterministic and identical on
+ * both sides; the leading tag ("w"/"e") keeps a write body from ever colliding
+ * with an edit pair, and the union field lists above are injected into the hook
+ * so both extract the same value despite the file_path/path & content/contents
+ * cross-layer name divergence.
+ */
+export declare function contentDigest(args: Record<string, unknown>): string;

package/dist/shared/file-tools.js

@@ -0,0 +1,168 @@
+/**
+ * Introspection of file-modifying tools, shared by every runner surface that
+ * reacts to a file edit: the native (deepagents) streaming side-effects (publish,
+ * git writeback, post-exec file-change capture), the Cursor streaming capture,
+ * and BOTH harnesses' approval-gate pre-execution capture (shared/gate-file-change.ts).
+ *
+ * This is the single source of truth for "which tools mutate files" and "where
+ * their path / whole-file content / edit replacement lives in the tool
+ * arguments". It is deliberately pure — no IO, no proto knowledge — so the same
+ * identification logic is used whether args come from a streamed `on_tool_*`
+ * event, a v3 protocol event, an AI-message tool call read out of graph state at
+ * an interrupt, or the Cursor preToolUse hook's captured `tool_input`.
+ *
+ * Both taxonomies are covered in one place on purpose: the deepagents harness
+ * names a file write `write_file`/`write`, the Cursor SDK stream names it
+ * `edit`/`write`, and the Cursor preToolUse hook names it `Write`/`StrReplace`/
+ * `EditNotebook`. The four extractors below span every arg-field name these
+ * surfaces use, so a single capture path is correct for all of them.
+ *
+ * @since First-Class Diff Review (#186); cross-harness gate unification (HITL diff)
+ */
+import { createHash } from "node:crypto";
+/**
+ * The file-modifying tools, across both harness taxonomies.
+ *
+ * - deepagents (native): `write_file`/`edit_file`/`create_file` (stream) and
+ *   `write`/`edit`/`create`/`str_replace_editor` (SDK names);
+ * - Cursor: `write`/`edit` (SDK stream, shared with native) and
+ *   `Write`/`StrReplace`/`EditNotebook` (preToolUse hook + tool names).
+ *
+ * Delete is intentionally absent: it has no whole-file content or hunk to
+ * preview, so it is not "file-modifying" in the diff-capture sense.
+ */
+export const FILE_MODIFYING_TOOLS = new Set([
+    // deepagents (native) taxonomy
+    "write_file", "edit_file", "create_file",
+    "write", "edit", "create",
+    "str_replace_editor",
+    // Cursor taxonomy (PascalCase preToolUse hook + tool names; `write`/`edit`
+    // above are shared with the SDK stream).
+    "Write", "StrReplace", "EditNotebook",
+]);
+/** Whether `toolName` is a file-modifying tool in either harness taxonomy. */
+export function isFileModifyingTool(toolName) {
+    return FILE_MODIFYING_TOOLS.has(toolName);
+}
+/**
+ * Extract the target file path from a file-modifying tool's arguments. Returns
+ * `null` when no recognized path key is present. The key set is the union across
+ * both taxonomies: deepagents/Cursor write+edit use `path`/`file_path`; a Cursor
+ * notebook edit uses `target_notebook`; the rest are defensive against drift.
+ */
+export function extractFilePath(args) {
+    if (typeof args.path === "string")
+        return args.path;
+    if (typeof args.file_path === "string")
+        return args.file_path;
+    if (typeof args.filePath === "string")
+        return args.filePath;
+    if (typeof args.filename === "string")
+        return args.filename;
+    if (typeof args.file === "string")
+        return args.file;
+    if (typeof args.target_notebook === "string")
+        return args.target_notebook;
+    return null;
+}
+/**
+ * Top-level arg keys, in priority order, that carry a write-family tool's
+ * WHOLE-FILE body, across both harness taxonomies (Cursor `Write` uses
+ * `content`; the SDK stream uses `contents`). Exported so the generated Cursor
+ * hook injects the SAME list into its inline content-digest extractor — the
+ * field names diverge across the hook/stream layers, so a single shared list is
+ * what keeps the runner-side and hook-side digests byte-identical.
+ */
+export const WRITE_CONTENT_FIELDS = ["content", "contents", "file_content"];
+/**
+ * Extract the WHOLE-FILE content from a write-family tool's arguments. Returns
+ * `null` for an edit-family call (which carries `old_string`/`new_string`, not a
+ * whole-file body) or when no content key is present. An empty string is a real
+ * value (an empty file) and is preserved.
+ *
+ * Critical: this is kept strictly separate from {@link extractEditNewString}.
+ * `new_string` is an edit replacement fragment, NOT whole-file content;
+ * conflating the two would make an edit look like a whole-file capture and read
+ * the wrong `before` at the gate.
+ */
+export function extractWriteContent(args) {
+    for (const field of WRITE_CONTENT_FIELDS) {
+        const v = args[field];
+        if (typeof v === "string")
+            return v;
+    }
+    return null;
+}
+/**
+ * Top-level arg keys for an edit-family tool's pre-/post-edit fragments, across
+ * both taxonomies. Exported for the same reason as {@link WRITE_CONTENT_FIELDS}:
+ * the Cursor hook injects them into its inline digest extractor so its content
+ * digest matches the runner's byte-for-byte.
+ */
+export const EDIT_OLD_FIELDS = ["old_string", "old_text", "oldText"];
+export const EDIT_NEW_FIELDS = ["new_string", "new_text", "newText", "replacement"];
+/**
+ * Extract an edit-family tool's pre-edit fragment (`old_string` and its
+ * variants). Returns `null` when absent; an empty string is preserved (an
+ * insertion has an empty `old_string`), matching the native gate capture.
+ */
+export function extractEditOldString(args) {
+    for (const field of EDIT_OLD_FIELDS) {
+        const v = args[field];
+        if (typeof v === "string")
+            return v;
+    }
+    return null;
+}
+/**
+ * Extract an edit-family tool's post-edit fragment (`new_string` and its
+ * variants, including `replacement`). Returns `null` when absent; an empty
+ * string is preserved (a deletion has an empty `new_string`).
+ */
+export function extractEditNewString(args) {
+    for (const field of EDIT_NEW_FIELDS) {
+        const v = args[field];
+        if (typeof v === "string")
+            return v;
+    }
+    return null;
+}
+/**
+ * Stable content digest of a file-mutating tool call's arguments — the content
+ * discriminator the deny-only Cursor HITL identity adds on top of
+ * (category, path) so a DIFFERENT edit to the same file re-gates rather than
+ * riding an earlier approval through.
+ *
+ * It hashes ONLY the edit content, never the path (the path is the identity's
+ * "salient" already). A whole-file write hashes its body; an edit hashes its
+ * (old, new) fragment pair. Returns "" for a call with no recoverable edit
+ * content — a shell command, a delete, a read, an MCP tool, or the hook's
+ * grep-fallback denial — which keep the coarse (category, salient) identity
+ * (already content-exact for a command / delete path).
+ *
+ * THE FORMAT IS A CROSS-LAYER CONTRACT. The Cursor preToolUse hook recomputes
+ * this digest inline from `tool_input`, running the SAME Node binary as the
+ * runner (see buildContentDigestScript in execute-cursor/hook-script.ts), so the
+ * two values must be byte-identical — any change here MUST be mirrored there.
+ * JSON.stringify of a fixed-shape string array is deterministic and identical on
+ * both sides; the leading tag ("w"/"e") keeps a write body from ever colliding
+ * with an edit pair, and the union field lists above are injected into the hook
+ * so both extract the same value despite the file_path/path & content/contents
+ * cross-layer name divergence.
+ */
+export function contentDigest(args) {
+    const content = extractWriteContent(args);
+    if (content !== null) {
+        return sha256Hex(JSON.stringify(["w", content]));
+    }
+    const oldString = extractEditOldString(args);
+    const newString = extractEditNewString(args);
+    if (oldString !== null || newString !== null) {
+        return sha256Hex(JSON.stringify(["e", oldString ?? "", newString ?? ""]));
+    }
+    return "";
+}
+function sha256Hex(s) {
+    return createHash("sha256").update(s, "utf8").digest("hex");
+}
+//# sourceMappingURL=file-tools.js.map

package/dist/shared/file-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-tools.js","sourceRoot":"","sources":["../../src/shared/file-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,+BAA+B;IAC/B,YAAY,EAAE,WAAW,EAAE,aAAa;IACxC,OAAO,EAAE,MAAM,EAAE,QAAQ;IACzB,oBAAoB;IACpB,2EAA2E;IAC3E,yCAAyC;IACzC,OAAO,EAAE,YAAY,EAAE,cAAc;CACtC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAA6B;IAC3D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC9D,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAC5D,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAC5D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,CAAU,CAAC;AAErF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC/D,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAU,CAAC;AAE7F;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA6B;IAChE,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA6B;IAChE,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,aAAa,CAAC,IAA6B;IACzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,SAAS,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/dist/shared/filereview/capture.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Harness-agnostic capture-mode turn orchestration for the apply-then-review
+ * HITL subsystem. This is the glue between the git snapshot/restore substrate
+ * ({@link ./git-substrate.js}) and the file-review ledger ({@link ./events.js}):
+ * it turns "the agent edited files freely this turn" into the append-only
+ * `file_review` events the server folds into `file_change_sets` (the single
+ * review surface), and on resume reconciles the tree to the user's decisions.
+ *
+ * It is parameterized by `harnessId` (stamped onto the BASELINE payload, which is
+ * the projection's source of truth for `turn_id`/`harness_id`) and `excludePaths`
+ * (the runner-owned files a harness writes into the workspace), so the Cursor and
+ * deep-agent harnesses author IDENTICAL ledger entries through this one seam. Each
+ * harness keeps only its presentation concerns (e.g. hiding flowed transcript
+ * rows) in its own adapter.
+ *
+ * Identity: the change set id is `${executionId}:${turnSeq}` (one turn = one
+ * change set), minted by the caller; each file's stable id is
+ * `${changeSetId}:${pathAfter||pathBefore}` so the resume can map a per-file
+ * decision back to its path without depending on any other identity.
+ */
+import { FileCaptureClass } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { FileChangeSet, TurnCommandProvenance } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
+import { type GitSubstrateChange as GitCapturedChange } from "./git-substrate.js";
+import type { ArtifactStorage } from "../artifact-storage.js";
+import { type BlobReader, type CasPathCapture } from "./cas-substrate.js";
+/**
+ * Whether a turn runs in apply-then-review CAPTURE mode (file edits flow and are
+ * reviewed post-hoc) rather than the classic pre-write DENY-GATE. Shared by BOTH
+ * harnesses (Cursor and deep-agent) so the capture-vs-deny-gate decision is made
+ * one way everywhere — the single point where a workspace's substrate availability
+ * decides the HITL model.
+ *
+ * Capture needs a primary workspace AND a substrate to capture into:
+ *  - a git work tree captures tracked edits from the git diff (no storage needed);
+ *  - a NON-git workspace captures every write via the path-scoped CAS substrate,
+ *    which needs artifact storage to persist blobs.
+ *
+ * So a non-git workspace with NO artifact storage — or no workspace at all — has
+ * no capture substrate and falls back to the deny-gate: the agent still runs, but
+ * file writes gate pre-execution instead of flowing. In the Cursor harness that
+ * fallback is also the ONLY branch that arms the resume-time exact-apply guarantee
+ * (see execute-cursor/exact-apply.ts); the deep-agent harness re-applies an
+ * approved write via LangGraph checkpoint replay and needs no exact-apply. Keeping
+ * this the single, named, truth-table-tested decision pins exactly when the
+ * no-storage deny-gate engages in either harness.
+ */
+export declare function deriveCaptureMode(primaryWorkspaceDir: string | undefined, gitWorkspace: boolean, hasArtifactStorage: boolean): boolean;
+/**
+ * Turn start: pin the pre-turn working tree behind the baseline ref and author
+ * the BASELINE_CAPTURED event. The projection reads `turn_id`/`harness_id` ONLY
+ * from this payload, so `turnId == changeSetId` (one turn = one change set) and
+ * `harnessId` identifies the producer. Returns the baseline tree sha for the
+ * turn-end diff. Appends onto `status.fileReviewEventStream`; the event rides the
+ * next persist.
+ *
+ * `gitWorkspace=false` (a non-git workspace, DD-21 D2) has no whole-tree baseline
+ * to pin — a file's pre-edit bytes are captured per-path by the CAS observer at
+ * mutation time, and the reconcile sources them from the durable CAS manifest,
+ * not this snapshot. The BASELINE event is still authored (it is the projection's
+ * sole source for `turn_id`/`harness_id`), carrying a `CAS_MANIFEST` snapshot with
+ * no manifest yet (the manifest is authored at candidate time). Returns "".
+ */
+export declare function captureBaselineToLedger(opts: {
+    readonly status: AgentExecutionStatus;
+    readonly gitRoot: string;
+    readonly executionId: string;
+    readonly changeSetId: string;
+    readonly harnessId: string;
+    readonly excludePaths?: readonly string[];
+    /** True (default) for a git work tree; false for a CAS-only non-git workspace. */
+    readonly gitWorkspace?: boolean;
+}): Promise<string>;
+/**
+ * Turn end: capture the change set, LEAVE the working tree in its applied
+ * ("after") state (the user reviews the real change; nothing is committed and the
+ * next turn is blocked until they decide), and author the CANDIDATE_CAPTURED
+ * event. The pinned baseline/after refs are the authoritative source for the
+ * resume-time reconcile ({@link applyCaptureDecisions}).
+ *
+ * Presentation (hiding the harness's flowed transcript rows so `file_change_sets`
+ * is the single review surface) is the harness adapter's concern, not this seam's.
+ * Returns the captured changes. No-op authoring when the turn changed nothing.
+ */
+export declare function captureCandidateToLedger(opts: {
+    readonly status: AgentExecutionStatus;
+    readonly gitRoot: string;
+    readonly executionId: string;
+    readonly changeSetId: string;
+    readonly baselineTree: string;
+    readonly harnessId: string;
+    readonly excludePaths?: readonly string[];
+    /**
+     * Ignored / non-git paths captured this turn (before/after bytes the harness
+     * recorded at mutation time). When present, they are stored as content-
+     * addressed CAS blobs and composed with the git-tracked changes into ONE
+     * hybrid change set (design doc 11). Omit for a git-only turn — existing
+     * callers are unaffected.
+     */
+    readonly casCaptures?: readonly CasPathCapture[];
+    /** The CAS blob store; required when {@link casCaptures} is non-empty. */
+    readonly storage?: ArtifactStorage;
+    /**
+     * Gitignored paths whose bytes are deliberately NOT captured — the DD-E secret
+     * gate refused them. Each is authored as a content-less `DIFF_UNREVIEWABLE`
+     * change entry (`diff_complete=false`, no before/after) so the change set is
+     * PARTIAL_BLOCKED (approval blocked) and the path is honestly surfaced, while
+     * its content never enters the ledger or storage. Never overlaps `casCaptures`.
+     */
+    readonly unreviewablePaths?: readonly string[];
+    /**
+     * Capture class stamped on the content-less DIFF_UNREVIEWABLE entries — the CAS
+     * class of THIS turn's substrate: `GIT_IGNORED_CAPTURED` for a git work tree's
+     * ignored paths, `NON_GIT_CAS` for a non-git workspace. Content-addressed
+     * `casCaptures` carry their own per-item class; this only labels the blocked
+     * (content-less) ones so a non-git blocked secret is not mislabeled "gitignored".
+     * Defaults to `GIT_IGNORED_CAPTURED` (git callers are unaffected).
+     */
+    readonly unreviewableCaptureClass?: FileCaptureClass;
+    /**
+     * True (default) for a git work tree — git-tracked edits are diffed from the
+     * pinned baseline/after trees and composed with any CAS captures. False for a
+     * CAS-only non-git workspace (DD-21 D2): there is no git tree to diff, so the
+     * change set is sourced ENTIRELY from `casCaptures` (+ `unreviewablePaths`) and
+     * the snapshot is `CAS_MANIFEST`, not `GIT_TREE_REF`/`HYBRID`.
+     */
+    readonly gitWorkspace?: boolean;
+    /**
+     * The harness's approved-command turn facts (DD-28): present only when the
+     * turn's sole mutation source was consented shell commands. Carried verbatim
+     * on the CANDIDATE event for the backend to verify and — on success — author
+     * the policy auto-keep decision. Omitted → the set reviews manually.
+     */
+    readonly commandProvenance?: TurnCommandProvenance;
+}): Promise<readonly GitCapturedChange[]>;
+/** Outcome of reconciling a DECIDED change set's decisions on resume. */
+export interface CaptureResumeResult {
+    /** False when this resume is not a capture turn (no capture ref present). */
+    readonly isCaptureTurn: boolean;
+    /** Repo-relative paths applied (approved) to the working tree. */
+    readonly approvedPaths: readonly string[];
+    /** Repo-relative paths discarded (rejected / undecided-then-skipped). */
+    readonly rejectedPaths: readonly string[];
+    /** True when at least one file was rejected. */
+    readonly hadReject: boolean;
+    /**
+     * True when an approved file's on-disk bytes no longer hash to the digest the
+     * user approved: a FileReviewFailure(HASH_MISMATCH) was authored and NOTHING
+     * was applied (what-you-approve-is-what-applies is a hard gate).
+     */
+    readonly failed: boolean;
+    /** Human-readable detail when {@link failed} (the diverged paths). */
+    readonly failureDetail?: string;
+}
+/**
+ * Resume: reconcile the working tree to the change set's DECIDED decisions
+ * (projected server-side onto `FileChangeSet.decisions`), sourced entirely from
+ * the pinned baseline/after refs — approved files are ensured at their "after"
+ * bytes (uncommitted; normally already on disk from the review window, re-asserted
+ * idempotently), rejected/undecided files are snapped back to baseline. Then
+ * author RECONCILED with the post-reconcile approved snapshot and release the
+ * refs. Because both sides are ref-sourced, the result is correct regardless of
+ * the tree's current contents (idempotent under a Temporal retry or a tree reset).
+ *
+ * Scope precedence is runner-owned, most-specific-wins: the CHANGE_SET decision
+ * (if any) seeds every file, then per-file FILE decisions override it.
+ *
+ * Enforcement ("what you approve is what applies"): before keeping an approved
+ * file, the recomputed bytes must still hash to the reviewed digest. Any mismatch
+ * authors a FileReviewFailure(HASH_MISMATCH) and applies NOTHING.
+ *
+ * Mutates `status.fileReviewEventStream` in place (authors RECONCILED / FAILED).
+ */
+export declare function applyCaptureDecisions(opts: {
+    readonly status: AgentExecutionStatus;
+    readonly gitRoot: string;
+    readonly executionId: string;
+    readonly changeSet: FileChangeSet;
+    readonly harnessId: string;
+    readonly excludePaths?: readonly string[];
+    /**
+     * The CAS blob reader, used to reconcile ignored / non-git (CAS) files from the
+     * durable manifest — approved after-blobs re-written (hash-verified), rejected
+     * files snapped back to their before-blobs. Whether the CAS branch runs at all
+     * is decided by the change set's CANDIDATE snapshot (a git-only turn carries no
+     * CAS ref), NOT by probing storage. Omit for a harness with no artifact storage;
+     * a CAS/HYBRID change set then cannot be reconciled.
+     *
+     * `storage` is accepted so callers can pass the store they derived `readBlob`
+     * from (via {@link casBlobReader}); the reconcile itself reads only through
+     * `readBlob` and never probes `storage`.
+     */
+    readonly storage?: ArtifactStorage;
+    readonly readBlob?: BlobReader;
+    /**
+     * True (default) for a git work tree; false for a CAS-only non-git workspace
+     * (DD-21 D2). When false, git refs are never consulted — the reconcile is driven
+     * entirely by the durable CAS manifest, and RECONCILED carries a `CAS_MANIFEST`
+     * snapshot instead of a re-pinned git tree.
+     */
+    readonly gitWorkspace?: boolean;
+}): Promise<CaptureResumeResult>;