@stigmer/runner 3.1.2 → 3.1.3

package/dist/.build-fingerprint

@@ -1 +1 @@
-{"hash":"63dd2c451162293e","builtAt":"2026-07-04T19:34:42.064Z","fileCount":234}
+{"hash":"21af7d0537f439ed","builtAt":"2026-07-05T14:32:49.617Z","fileCount":237}

package/dist/activities/execute-cursor/attachment-resolver.d.ts

@@ -17,7 +17,7 @@
  * Placement is always `inputs/{filename}` — the platform namespace this
  * harness can surface in the workspace. An attachment's `mountPath` is
  * honored by convention, not mechanism: the standard mounts (e.g. the
- * approved plan at `.stigmer/inputs/plan.md`) resolve to exactly this
+ * approved plan at `.stigmer/inputs/<slug>_<id>.plan.md`) resolve to exactly this
  * placement, and the prompt's `<input_files>` section plus any path-derived
  * directives are built from the RESOLVED paths, so prompt and filesystem can
  * never disagree.

package/dist/activities/execute-cursor/attachment-resolver.js

@@ -17,7 +17,7 @@
  * Placement is always `inputs/{filename}` — the platform namespace this
  * harness can surface in the workspace. An attachment's `mountPath` is
  * honored by convention, not mechanism: the standard mounts (e.g. the
- * approved plan at `.stigmer/inputs/plan.md`) resolve to exactly this
+ * approved plan at `.stigmer/inputs/<slug>_<id>.plan.md`) resolve to exactly this
  * placement, and the prompt's `<input_files>` section plus any path-derived
  * directives are built from the RESOLVED paths, so prompt and filesystem can
  * never disagree.

package/dist/activities/execute-cursor/capture-flow.d.ts

@@ -21,6 +21,7 @@ import type { AgentMessage } from "@stigmer/protos/ai/stigmer/agentic/agentexecu
 import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import type { FileChangeSet, TurnCommandProvenance } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
 import { type CaptureResumeResult } from "../../shared/filereview/capture.js";
+import { type ProgressCaptureState } from "../../shared/filereview/progress.js";
 import type { GitSubstrateChange as GitCapturedChange } from "../../shared/filereview/git-substrate.js";
 import type { ArtifactStorage } from "../../shared/artifact-storage.js";
 export type { CaptureResumeResult };
@@ -100,6 +101,23 @@ export declare function captureTurnToLedger(opts: {
      */
     readonly commandProvenance?: TurnCommandProvenance;
 }): Promise<readonly GitCapturedChange[]>;
+/**
+ * Mid-run: attach the live "N files changed so far" snapshot onto
+ * `status.file_change_progress` (DD-32), throttled by the floor + tree-sha
+ * short-circuit inside {@link captureFileChangeProgress}. The Cursor adapter binds
+ * `CURSOR_RUNNER_OWNED_PATHS` so the progress diff excludes the gate's own files —
+ * the SAME exclusion {@link captureTurnToLedger} uses for the turn-boundary
+ * candidate, so the live count and the reviewed set agree. Content-free and
+ * secret-safe; a no-op when nothing changed since the last capture.
+ */
+export declare function captureProgressToStatus(opts: {
+    readonly status: AgentExecutionStatus;
+    readonly gitRoot: string;
+    readonly executionId: string;
+    readonly changeSetId: string;
+    readonly baselineTree: string;
+    readonly state: ProgressCaptureState;
+}): Promise<void>;
 /**
  * Resume: reconcile the working tree to the change set's DECIDED decisions
  * (keep approved "after" bytes, snap rejected/undecided back to baseline,

package/dist/activities/execute-cursor/capture-flow.js

@@ -26,6 +26,7 @@ import { readCasObservations } from "./cas-observations.js";
 import { contentDigest } from "../../shared/file-tools.js";
 import { isToolCallRowHidden, stampFileEditRow } from "../../shared/tool-row.js";
 import { applyCaptureDecisions as sharedApplyCaptureDecisions, captureBaselineToLedger as sharedCaptureBaselineToLedger, captureCandidateToLedger as sharedCaptureCandidateToLedger, } from "../../shared/filereview/capture.js";
+import { captureFileChangeProgress, } from "../../shared/filereview/progress.js";
 import { hasCandidateCaptured } from "../../shared/filereview/events.js";
 import { partitionIgnoredPathsBySecret } from "../../shared/filereview/secret-paths.js";
 import { casBlobReader } from "../../shared/filereview/cas-substrate.js";
@@ -131,6 +132,26 @@ export async function captureTurnToLedger(opts) {
     }
     return changes;
 }
+/**
+ * Mid-run: attach the live "N files changed so far" snapshot onto
+ * `status.file_change_progress` (DD-32), throttled by the floor + tree-sha
+ * short-circuit inside {@link captureFileChangeProgress}. The Cursor adapter binds
+ * `CURSOR_RUNNER_OWNED_PATHS` so the progress diff excludes the gate's own files —
+ * the SAME exclusion {@link captureTurnToLedger} uses for the turn-boundary
+ * candidate, so the live count and the reviewed set agree. Content-free and
+ * secret-safe; a no-op when nothing changed since the last capture.
+ */
+export async function captureProgressToStatus(opts) {
+    await captureFileChangeProgress({
+        status: opts.status,
+        gitRoot: opts.gitRoot,
+        executionId: opts.executionId,
+        changeSetId: opts.changeSetId,
+        baselineTree: opts.baselineTree,
+        excludePaths: CURSOR_RUNNER_OWNED_PATHS,
+        state: opts.state,
+    });
+}
 /**
  * Compose this turn's CAS captures from the sidecar the hook staged, mirroring
  * deep-agent's `buildCasTurnCaptures`: for each non-secret observed path, the

package/dist/activities/execute-cursor/capture-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture-flow.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/capture-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EACL,qBAAqB,IAAI,2BAA2B,EACpD,uBAAuB,IAAI,6BAA6B,EACxD,wBAAwB,IAAI,8BAA8B,GAE3D,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,aAAa,EAAuB,MAAM,0CAA0C,CAAC;AAM9F,oFAAoF;AACpF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,yBAAyB,GAAsB;IACnD,oBAAoB;IACpB,yCAAyC;CAC1C,CAAC;AAEF,iFAAiF;AACjF,mFAAmF;AACnF,gFAAgF;AAChF,qBAAqB;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IA+BzC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAChK,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAE/C,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,gBAAgB,CAAC,oBAAoB;QACvC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,oBAAoB,CACnE,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,CAChB,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,MAAM;QACN,OAAO;QACP,WAAW;QACX,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,WAAW;QACX,OAAO;QACP,iBAAiB;QACjB,wBAAwB,EAAE,eAAe;QACzC,YAAY;QACZ,iBAAiB;KAClB,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,uBAAuB,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC7D,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;QAC5E,+DAA+D;QAC/D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC3C,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,OAA2B,EAC3B,OAAoC,EACpC,YAA8B;IAE9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC;IAC/E,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,6BAA6B,CAC1E,YAAY,CAAC,IAAI,EAAE,EACnB,IAAI,GAAG,CAAC,WAAW,CAAC,CACrB,CAAC;IAEF,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;YACzC,KAAK;YACL,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,cAAc,CAAC,YAAoB;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAYrC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,uBAAuB,CAC9B,QAAiC,EACjC,YAAiC,EACjC,WAAmB,EACnB,eAAqC;IAErC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,eAAe;gBAAE,SAAS;YACjC,IAAI,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC1C,IAAI,mBAAmB,CAAC,EAAE,CAAC;gBAAE,SAAS;YACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAC5D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACxD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,mCAAmC;YAC1E,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"capture-flow.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/capture-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EACL,qBAAqB,IAAI,2BAA2B,EACpD,uBAAuB,IAAI,6BAA6B,EACxD,wBAAwB,IAAI,8BAA8B,GAE3D,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,yBAAyB,GAE1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,aAAa,EAAuB,MAAM,0CAA0C,CAAC;AAM9F,oFAAoF;AACpF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,yBAAyB,GAAsB;IACnD,oBAAoB;IACpB,yCAAyC;CAC1C,CAAC;AAEF,iFAAiF;AACjF,mFAAmF;AACnF,gFAAgF;AAChF,qBAAqB;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IA+BzC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAChK,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAE/C,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,gBAAgB,CAAC,oBAAoB;QACvC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,oBAAoB,CACnE,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,CAChB,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,MAAM;QACN,OAAO;QACP,WAAW;QACX,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,WAAW;QACX,OAAO;QACP,iBAAiB;QACjB,wBAAwB,EAAE,eAAe;QACzC,YAAY;QACZ,iBAAiB;KAClB,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,uBAAuB,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC7D,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;QAC5E,+DAA+D;QAC/D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC3C,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAO7C;IACC,MAAM,yBAAyB,CAAC;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,yBAAyB;QACvC,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,OAA2B,EAC3B,OAAoC,EACpC,YAA8B;IAE9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC;IAC/E,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,6BAA6B,CAC1E,YAAY,CAAC,IAAI,EAAE,EACnB,IAAI,GAAG,CAAC,WAAW,CAAC,CACrB,CAAC;IAEF,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;YACzC,KAAK;YACL,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,cAAc,CAAC,YAAoB;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAYrC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,uBAAuB,CAC9B,QAAiC,EACjC,YAAiC,EACjC,WAAmB,EACnB,eAAqC;IAErC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,eAAe;gBAAE,SAAS;YACjC,IAAI,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC1C,IAAI,mBAAmB,CAAC,EAAE,CAAC;gBAAE,SAAS;YACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAC5D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACxD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,mCAAmC;YAC1E,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/activities/execute-cursor/index.js

@@ -35,9 +35,9 @@ import { StigmerClient } from "../../client/stigmer-client.js";
 import { resolveAgent } from "./session-lifecycle.js";
 import { CursorMode } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
 import { determineCursorMode, isCloudMode } from "./cursor-mode.js";
-import { MessageAccumulator, reconcileDeniedToolCalls, clearProvisionalPostDenialNarration, cancelInProgressSubAgentProtos, collapseRedundantToolCallTwins } from "./message-translator.js";
+import { MessageAccumulator, cancelInProgressSubAgentProtos, collapseRedundantToolCallTwins } from "./message-translator.js";
 import { utcTimestamp, persistStatus, reportSetupProgress, slimStatus } from "../../shared/status.js";
-import { collectSubAgentToolCallIds, withholdSecretContentFromMessages } from "../../shared/tool-row.js";
+import { withholdSecretContentFromMessages } from "../../shared/tool-row.js";
 import { startStallWatchdog, StallTimeoutError, formatStallFailure } from "../../shared/stall-watchdog.js";
 import { resolveUsableArtifactStorage, loadArtifactStorageConfig } from "../../shared/artifact-storage.js";
 import { publishPlanArtifact } from "../../shared/plan-artifact.js";
@@ -61,11 +61,12 @@ import { installHitlGate, removeHitlGate } from "./workspace-setup.js";
 import { ensureHitlDir } from "../../shared/workspace/platform-dir.js";
 import { acquireWorkspaceLock, WorkspaceLockCancelledError, WorkspaceLockTimeoutError, } from "../../shared/workspace/workspace-lock.js";
 import { LocalWorkspaceBackend } from "../../shared/workspace/local-backend.js";
-import { buildApprovalState, buildApprovalGrants, emitCursorGrantReceipts, primaryToken, readDenialLedger, reconstructAdjudicatedApprovals, watchDenialLedger } from "./approval-state.js";
-import { deriveTurnCommandProvenance } from "./command-provenance.js";
+import { buildApprovalState, buildApprovalGrants, emitCursorGrantReceipts, readDenialLedger, reconstructAdjudicatedApprovals, watchDenialLedger } from "./approval-state.js";
 import { applyApprovedWholeFileWrites, excludeAppliedFromGrants } from "./exact-apply.js";
 import { isGitWorkTree } from "../../shared/filereview/git-substrate.js";
-import { captureBaselineToLedger, captureTurnToLedger, applyCaptureDecisions, deriveCaptureMode, } from "./capture-flow.js";
+import { captureBaselineToLedger, captureProgressToStatus, applyCaptureDecisions, deriveCaptureMode, } from "./capture-flow.js";
+import { runTurnBoundary } from "./turn-boundary.js";
+import { newProgressCaptureState, } from "../../shared/filereview/progress.js";
 import { deriveExecutionFingerprintKey } from "../../shared/approval-fingerprint.js";
 import { getRunnerHitlMasterSecret } from "../../shared/fingerprint-secret.js";
 import { provisionCursorWorkspace } from "./workspace-provision.js";
@@ -82,11 +83,6 @@ import { createAgent, createCloudAgent } from "./session-lifecycle.js";
 import { setMaxListeners } from "node:events";
 import { startHeartbeat } from "../../shared/heartbeat.js";
 import { getShutdownSignalForQueue } from "../../runner-manager.js";
-// How long Phase 12 waits for the first-denial-stop's run.cancel() to settle
-// before reading the final denial ledger and capturing the turn's tree. Long
-// enough for the SDK's normal teardown, short enough that a wedged cancel
-// cannot noticeably delay the approval pause the user is already waiting on.
-const FIRST_DENIAL_CANCEL_TIMEOUT_MS = 5_000;
 /**
  * Creates the activity functions bound to the runner config.
  * Returned object is passed to Temporal Worker.create({ activities }).
@@ -254,6 +250,9 @@ turnSeq) {
         // Pre-turn baseline tree, pinned before the agent runs (capture mode only)
         // so the turn-end capture diffs against it and the tree restores exactly.
         let baselineTree;
+        // Per-turn state for mid-run live capture (DD-32): the last progress tree sha
+        // (short-circuit) + last capture time (floor), threaded across persists.
+        const progressState = newProgressCaptureState();
         // Deterministic id of the change set this turn may produce:
         // `${executionId}:${turnSeq}`. Minted from the workflow-threaded turn index
         // so it is stable across a Temporal retry (idempotent ledger authoring) and
@@ -893,6 +892,22 @@ turnSeq) {
                     // accumulator tracked sub-agents in memory but they only reached the
                     // status (and the subscriber stream) after the loop ended.
                     status.subAgentExecutions = accumulator.subAgentExecutions;
+                    // Mid-run live capture (DD-32): attach the "N files changed so far"
+                    // snapshot onto status.file_change_progress, throttled internally by the
+                    // floor + tree-sha short-circuit. Git capture mode only (a pinned baseline
+                    // exists); shell + sub-agent + tool edits are all captured for free by the
+                    // workspace-wide diff. Never authoritative — the turn-boundary candidate
+                    // remains the reviewed diff.
+                    if (captureMode && gitWorkspace && baselineTree && primaryWorkspaceDir) {
+                        await captureProgressToStatus({
+                            status,
+                            gitRoot: primaryWorkspaceDir,
+                            executionId,
+                            changeSetId,
+                            baselineTree,
+                            state: progressState,
+                        });
+                    }
                     const signal = await persist(status);
                     deltaEnricher.markPersisted();
                     todoTracker.markPersisted();
@@ -1060,134 +1075,80 @@ turnSeq) {
             console.log(`ExecuteCursor completed (platform stop): execution=${executionId}`);
             return slimStatus(status);
         }
-        // Phase 12: Surface tools the preToolUse hook gated (HITL).
-        //
-        // The hook records each denial to the ledger; we mark the corresponding tool
-        // calls WAITING_APPROVAL. The backend projects pending_approvals from that
-        // tool-call status (PendingApprovalComputer), so — exactly like the native
-        // harness — the approval surface is driven entirely by tool-call status. We
-        // deliberately do NOT set status.pendingApprovals here: any value would be
-        // discarded by the backend's recompute on the next updateStatus.
-        //
-        // Before reading the ledger, wait (timeboxed) for the first-denial-stop's
-        // run.cancel() to settle. run.cancel() races the SDK's auto-execution: until
-        // it lands, the agent process may still attempt a post-denial workaround
-        // whose hook denial would land AFTER a premature ledger read — the row then
-        // never collapses and renders as RUNNING forever (production case
-        // aex_01kwj07f7g23c3wp9sn8496z5g) — or a late tool could mutate the tree
-        // mid-capture. The timebox keeps a wedged cancel from hanging the pause;
-        // the Phase 12 trims below remain the backstop for that degraded case.
-        if (firstDenialDetected && denialCancelSettled) {
-            await Promise.race([
-                denialCancelSettled,
-                new Promise((resolve) => {
-                    const timer = setTimeout(resolve, FIRST_DENIAL_CANCEL_TIMEOUT_MS);
-                    timer.unref();
-                }),
-            ]);
-        }
-        const deniedLedger = await readDenialLedger(hitlDir ?? "");
-        // Capture mode: author the net change set to the file_review ledger as the
-        // CANDIDATE_CAPTURED event (projected server-side to a file_change_set
-        // AWAITING_REVIEW — the single review surface). The runner-owned gate files
-        // are excluded from the capture. The agent's edits are LEFT applied on the
-        // working tree (Cursor parity — the user reviews the real change; nothing is
-        // committed and the next turn is blocked until approval, and a reject snaps
-        // each file back on resume). Runs BEFORE the denial reconcile so a denied
-        // (gitignored) write stays on the deny-gate path while every flowed edit is
-        // captured to the ledger.
-        let capturedChangeCount = 0;
-        // `baselineTree !== undefined` means a baseline was authored this turn — the
-        // git tree sha for a git workspace, or "" (empty, but authored) for a non-git
-        // one. A plain truthiness check would wrongly skip the non-git capture.
-        if (captureMode && baselineTree !== undefined && primaryWorkspaceDir) {
-            const deniedTokens = new Set(deniedLedger.map((e) => e.token));
-            // Approved-command turn facts (DD-28): when every mutation-capable call
-            // this turn was a consented shell command, attach the provenance so the
-            // backend can verify the cited consent rows and auto-keep the set instead
-            // of arming a second gate. Fail-closed: any non-qualifying turn attaches
-            // nothing and reviews manually exactly as before.
-            const commandProvenance = deriveTurnCommandProvenance({
-                messages: status.messages,
-                turnStartIndex: turnStartMessageIndex,
-                deniedTokens,
-                grantTokenToConsentId: new Map((approvalGrants ?? []).map((g) => [
-                    primaryToken(g.key, g.salient, g.contentDigest),
-                    g.sourceToolCallId,
-                ])),
-                globalBypass,
-            });
-            if (commandProvenance) {
-                console.log(`ExecuteCursor capture: turn qualifies for approved-command auto-keep ` +
-                    `(consent rows: ${commandProvenance.consentToolCallIds.join(",") || "(auto_approve_all)"}); ` +
-                    `attaching provenance to candidate (execution=${executionId})`);
-            }
-            const captured = await captureTurnToLedger({
-                status,
-                gitRoot: primaryWorkspaceDir,
-                executionId,
-                changeSetId,
-                baselineTree,
-                messages: status.messages,
-                deniedTokens,
-                commandProvenance,
-                // Scope sub-agent row stamping to this turn: the seeded prior sub-agents
-                // (cloned in on resume) are the "before this turn" rows to skip.
-                priorSubAgentToolCallIds: collectSubAgentToolCallIds(seededSubAgents),
-                // The CAS half: read the sidecar the hook staged this turn and compose it
-                // into the change set. hitlDir + storage are present when captureIgnored
-                // was on (a git tree's gitignored writes, or ALL writes in a non-git
-                // workspace). In a git tree this composes with the git diff (HYBRID); in a
-                // non-git workspace it IS the whole change set (CAS-only).
-                hitlDir,
-                storage: artifactStorage,
-                gitWorkspace,
-            });
-            capturedChangeCount = captured.length;
-            if (capturedChangeCount > 0) {
-                console.log(`ExecuteCursor capture: ${capturedChangeCount} file change(s) authored to the ` +
-                    `file_review ledger (change_set=${changeSetId}), working tree left applied ` +
-                    `for review (execution=${executionId})`);
-            }
-        }
-        // The gate reads each denied file's pre-edit `before` from the workspace the
-        // runner is co-located with (local FS for OSS; the sandbox in cloud), so a
-        // whole-file rewrite gate renders a true before/after diff. The tool was
-        // DENIED, so disk still holds the old content. User files are never platform
-        // paths, so no platformDir routing is needed here.
-        const gateWorkspaceBackend = new LocalWorkspaceBackend(primaryWorkspaceDir);
-        const deniedToolCalls = await reconcileDeniedToolCalls(status.messages, deniedLedger, mergedPolicies, gateWorkspaceBackend);
-        // Observability: a synthesized placeholder (id `approval:*`) means a denial
-        // correlated to NO streamed tool call in either the exact or the normalized
-        // pass. After the normalized-path fallback this should be ~0; a non-zero rate
-        // is the early-warning signal of a NEW identity drift (the gate would then
-        // show "No preview available" with no diff). Logged, not thrown — the
-        // synthesized gate still safely surfaces the approval.
-        const synthesizedGateCount = deniedToolCalls.filter((tc) => tc.id.startsWith("approval:")).length;
-        if (synthesizedGateCount > 0) {
-            console.warn(`ExecuteCursor reconcile synthesized ${synthesizedGateCount} placeholder gate(s) ` +
-                `with no correlated stream call (execution=${executionId}); ` +
-                `possible hook/stream identity drift — gate(s) will lack a diff`);
-        }
-        if (deniedToolCalls.length > 0 || capturedChangeCount > 0) {
-            if (deniedToolCalls.length > 0) {
-                // Deterministic clean-pause: a turn that pauses for approval must read as
-                // the same shape the native harness produces — pre-tool text + the gated
-                // tool calls — never the model's provisional reaction to Cursor's deny
-                // (e.g. "blocked by a hook; enable it in your Cursor settings"). We blank
-                // that reaction in place (keeping the message count, so the finalize stays
-                // append-only) rather than removing it. See
-                // clearProvisionalPostDenialNarration for the full rationale.
-                const redactedNarration = clearProvisionalPostDenialNarration(status.messages, deniedToolCalls);
-                if (redactedNarration.length > 0) {
-                    console.log(`ExecuteCursor redacted ${redactedNarration.length} provisional post-denial narration message(s) before pausing for approval`);
-                }
-            }
+        // Phase 12: The turn boundary — author this turn's change set to the
+        // file_review ledger (CANDIDATE_CAPTURED) and overlay the hook's denials as
+        // WAITING_APPROVAL gate rows. The full pipeline and its ordering rationale
+        // live in turn-boundary.ts; this closure binds the turn's state so the
+        // recovery retries below (which re-run the agent AFTER this primary call)
+        // can re-enter the IDENTICAL pipeline — a retry's edits must reach the
+        // ledger or they silently escape review. `baselineTree` is read at call
+        // time, so both entries see the baseline authored at turn start.
+        const runBoundary = (denialSettled) => runTurnBoundary({
+            status,
+            executionId,
+            changeSetId,
+            hitlDir,
+            captureMode,
+            baselineTree,
+            primaryWorkspaceDir,
+            gitWorkspace,
+            turnStartMessageIndex,
+            approvalGrants,
+            globalBypass,
+            seededSubAgents,
+            artifactStorage,
+            mergedPolicies,
+            denialCancelSettled: denialSettled,
+        });
+        // Pauses for review exactly like the native harness: the boundary mutated
+        // the transcript in place; we flip the phase, persist, and RETURN to the
+        // workflow, which waits for the approval/file-review signal and reinvokes.
+        const enterApprovalPause = async (boundary) => {
             status.phase = ExecutionPhase.EXECUTION_WAITING_FOR_APPROVAL;
             await persist(status);
-            console.log(`ExecuteCursor returning WAITING_FOR_APPROVAL: ${deniedToolCalls.length} gated tool(s), ` +
-                `${capturedChangeCount} file card(s) pending`);
+            console.log(`ExecuteCursor returning WAITING_FOR_APPROVAL: ${boundary.deniedToolCallCount} gated tool(s), ` +
+                `${boundary.capturedChangeCount} file card(s) pending`);
             return slimStatus(status);
+        };
+        // Stream epilogue + boundary re-entry for a recovery retry (poisoned-handle /
+        // transport-timeout). The retry re-runs the agent AFTER the primary epilogue
+        // and boundary already ran, so its stream state must be settled the same way:
+        //  - flush the enricher's buffered deltas onto the rows (the primary loop
+        //    applies them every iteration; the bare retry loop does not — without the
+        //    flush, a completed tool call never receives its completedAt evidence and
+        //    finalize's reconciliation sweep leaves it RUNNING forever);
+        //  - finalize streaming state and sync sub-agents;
+        //  - refresh streaming usage (the retry's turns accumulated in memory only)
+        //    and re-stamp completedAt (stamped below BEFORE the retry ran);
+        //  - re-enter the turn boundary so edits made by the retry reach the
+        //    file_review ledger / approval gates — without this, a retry's file
+        //    edits silently escape review (production case
+        //    aex_01kws27q1e2esvkqjpvectttxf).
+        // Returns undefined for a cancelled retry: parity with the primary path,
+        // where cancellation exits before the boundary — there is no review to open.
+        const settleRetryTurn = async (retryResultStatus) => {
+            accumulator.finalize();
+            deltaEnricher.applyEnrichments(status.messages);
+            deltaEnricher.finalize(status.messages);
+            status.subAgentExecutions = accumulator.subAgentExecutions;
+            if (usageAccumulator.hasTurns) {
+                status.streamingUsage = create(StreamingUsageSummarySchema, usageAccumulator.snapshot());
+            }
+            // Re-flush the (dev-only) event recorder: flush rewrites the full JSONL,
+            // so the recorded trace now includes the retry's events too.
+            await eventRecorder?.flush();
+            const retryBoundary = retryResultStatus === "cancelled" ? undefined : await runBoundary();
+            // Phase 13 stamped completedAt BEFORE the retry ran. A terminal outcome
+            // re-stamps it to the true end; a review pause CLEARS it — the primary
+            // pause path never stamps it (a waiting turn is not complete).
+            status.completedAt = retryBoundary?.waiting ? "" : utcTimestamp();
+            return retryBoundary;
+        };
+        // The denial-settle wait applies only when a first denial stopped THIS run;
+        // the recovery retries have no early stop and pass no promise.
+        const boundary = await runBoundary(firstDenialDetected ? denialCancelSettled : undefined);
+        if (boundary.waiting) {
+            return enterApprovalPause(boundary);
         }
         // Phase 13: Map final result
         const result = await run.wait();
@@ -1301,7 +1262,9 @@ turnSeq) {
                             if (Context.current().cancellationSignal.aborted)
                                 break;
                             retryWatchdog.recordActivity();
+                            eventRecorder?.record(retryEvent, eventCount);
                             accumulator.processEvent(retryEvent);
+                            eventCount++;
                             if (retryEvent.type === "status") {
                                 const retryStatusEvent = retryEvent;
                                 if (retryStatusEvent.status === "ERROR" && retryStatusEvent.message) {
@@ -1317,6 +1280,15 @@ turnSeq) {
                     const retryResult = await retryRun.wait();
                     console.log(`ExecuteCursor retry run.wait(): execution=${executionId}, ` +
                         `retryResult=${JSON.stringify(retryResult)}`);
+                    const retryBoundary = await settleRetryTurn(retryResult.status);
+                    if (retryBoundary?.waiting) {
+                        // The retry's edits/denials armed the gate — pause for review. On a
+                        // retry error this supersedes the failure, exactly as on the primary
+                        // path (a captured change pauses the turn before run.wait() is
+                        // consulted).
+                        console.log(`ExecuteCursor poisoned-handle recovery paused for review: execution=${executionId}`);
+                        return enterApprovalPause(retryBoundary);
+                    }
                     if (retryResult.status === "finished") {
                         status.phase = ExecutionPhase.EXECUTION_COMPLETED;
                         console.log(`ExecuteCursor poisoned-handle recovery SUCCEEDED: execution=${executionId}`);
@@ -1398,7 +1370,9 @@ turnSeq) {
                             if (Context.current().cancellationSignal.aborted)
                                 break;
                             retryWatchdog.recordActivity();
+                            eventRecorder?.record(retryEvent, eventCount);
                             accumulator.processEvent(retryEvent);
+                            eventCount++;
                             if (retryEvent.type === "status") {
                                 const retryStatusEvent = retryEvent;
                                 if (retryStatusEvent.status === "ERROR" && retryStatusEvent.message) {
@@ -1412,6 +1386,14 @@ turnSeq) {
                         retryWatchdog.stop();
                     }
                     const retryResult = await retryRun.wait();
+                    const retryBoundary = await settleRetryTurn(retryResult.status);
+                    if (retryBoundary?.waiting) {
+                        // The retry's edits/denials armed the gate — pause for review (see
+                        // the poisoned-handle branch above for the precedence rationale).
+                        console.log(`ExecuteCursor transport-timeout recovery paused for review: execution=${executionId}`);
+                        resolution = { ...resolution, agent: freshAgent, agentId: freshAgent.agentId, isNew: true };
+                        return enterApprovalPause(retryBoundary);
+                    }
                     if (retryResult.status === "finished") {
                         status.phase = ExecutionPhase.EXECUTION_COMPLETED;
                         resolution = { ...resolution, agent: freshAgent, agentId: freshAgent.agentId, isNew: true };
@@ -1471,10 +1453,10 @@ turnSeq) {
             if (structuredOutput !== undefined) {
                 status.structuredOutput = structuredOutput;
             }
-            // Plan mode: publish the final plan message as a plan.md artifact. The
-            // Cursor harness has no auto-publish pipeline, so this is the only
-            // artifact path; build storage from the same config-driven factory the
-            // native harness uses.
+            // Plan mode: publish the final plan message as a plan artifact (named
+            // from the plan's title). The Cursor harness has no auto-publish
+            // pipeline, so this is the only artifact path; build storage from the
+            // same config-driven factory the native harness uses.
             if (interactionMode === InteractionMode.PLAN && finalText && artifactStorage) {
                 try {
                     await publishPlanArtifact({ status, executionId, planText: finalText, artifactStorage });