@stigmer/runner 3.1.3 → 3.1.4

package/dist/.build-fingerprint

@@ -1 +1 @@
-{"hash":"21af7d0537f439ed","builtAt":"2026-07-05T14:32:49.617Z","fileCount":237}
+{"hash":"4a20d226fffa581f","builtAt":"2026-07-06T13:51:05.592Z","fileCount":242}

package/dist/activities/execute-cursor/capture-flow.d.ts

@@ -21,7 +21,7 @@ import type { AgentMessage } from "@stigmer/protos/ai/stigmer/agentic/agentexecu
 import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import type { FileChangeSet, TurnCommandProvenance } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
 import { type CaptureResumeResult } from "../../shared/filereview/capture.js";
-import { type ProgressCaptureState } from "../../shared/filereview/progress.js";
+import { type ProgressSubstrate } from "../../shared/filereview/progress.js";
 import type { GitSubstrateChange as GitCapturedChange } from "../../shared/filereview/git-substrate.js";
 import type { ArtifactStorage } from "../../shared/artifact-storage.js";
 export type { CaptureResumeResult };
@@ -102,22 +102,33 @@ export declare function captureTurnToLedger(opts: {
     readonly commandProvenance?: TurnCommandProvenance;
 }): Promise<readonly GitCapturedChange[]>;
 /**
- * Mid-run: attach the live "N files changed so far" snapshot onto
- * `status.file_change_progress` (DD-32), throttled by the floor + tree-sha
- * short-circuit inside {@link captureFileChangeProgress}. The Cursor adapter binds
- * `CURSOR_RUNNER_OWNED_PATHS` so the progress diff excludes the gate's own files —
- * the SAME exclusion {@link captureTurnToLedger} uses for the turn-boundary
- * candidate, so the live count and the reviewed set agree. Content-free and
- * secret-safe; a no-op when nothing changed since the last capture.
+ * Choose the mid-run progress substrate for this turn's workspace shape (DD-32 /
+ * DD-33), returning `undefined` when there is nothing to observe (not capture
+ * mode, or no workspace). Built ONCE per turn — the substrate owns its own
+ * short-circuit cache across the loop's persists; the floor lives in the caller's
+ * `ProgressCaptureState`. The live count and the turn-boundary reviewed set agree
+ * by construction: the git slice binds the SAME `CURSOR_RUNNER_OWNED_PATHS`
+ * exclusion {@link captureTurnToLedger} uses, and the CAS slice reads the SAME
+ * hook sidecar ({@link readCasObservations}) the boundary reads.
+ *
+ *  - git tree, no storage      -> git substrate only (tracked-file `--numstat`);
+ *  - git tree, storage (HYBRID) -> git + CAS (the gitignored writes the hook staged);
+ *  - non-git workspace          -> CAS only (every tool-mediated write is CAS-staged).
+ *
+ * The CAS slice needs the hook sidecar, which exists only when `captureIgnored`
+ * is on (storage configured). A non-git capture already required storage
+ * (`deriveCaptureMode`), so its sidecar is always present; a git tree with no
+ * storage simply gets the git-only substrate (parity with the pre-DD-33 behavior).
  */
-export declare function captureProgressToStatus(opts: {
-    readonly status: AgentExecutionStatus;
-    readonly gitRoot: string;
+export declare function buildCursorProgressSubstrate(opts: {
+    readonly captureMode: boolean;
+    readonly gitWorkspace: boolean;
+    readonly workspaceRoot: string | undefined;
+    readonly baselineTree: string | undefined;
     readonly executionId: string;
-    readonly changeSetId: string;
-    readonly baselineTree: string;
-    readonly state: ProgressCaptureState;
-}): Promise<void>;
+    readonly hitlDir: string | undefined;
+    readonly storage: ArtifactStorage | undefined;
+}): ProgressSubstrate | undefined;
 /**
  * Resume: reconcile the working tree to the change set's DECIDED decisions
  * (keep approved "after" bytes, snap rejected/undecided back to baseline,

package/dist/activities/execute-cursor/capture-flow.js

@@ -26,7 +26,8 @@ import { readCasObservations } from "./cas-observations.js";
 import { contentDigest } from "../../shared/file-tools.js";
 import { isToolCallRowHidden, stampFileEditRow } from "../../shared/tool-row.js";
 import { applyCaptureDecisions as sharedApplyCaptureDecisions, captureBaselineToLedger as sharedCaptureBaselineToLedger, captureCandidateToLedger as sharedCaptureCandidateToLedger, } from "../../shared/filereview/capture.js";
-import { captureFileChangeProgress, } from "../../shared/filereview/progress.js";
+import { createGitProgressSubstrate, createHybridProgressSubstrate, } from "../../shared/filereview/progress.js";
+import { createCasProgressSubstrate, } from "../../shared/filereview/cas-progress.js";
 import { hasCandidateCaptured } from "../../shared/filereview/events.js";
 import { partitionIgnoredPathsBySecret } from "../../shared/filereview/secret-paths.js";
 import { casBlobReader } from "../../shared/filereview/cas-substrate.js";
@@ -133,24 +134,61 @@ export async function captureTurnToLedger(opts) {
     return changes;
 }
 /**
- * Mid-run: attach the live "N files changed so far" snapshot onto
- * `status.file_change_progress` (DD-32), throttled by the floor + tree-sha
- * short-circuit inside {@link captureFileChangeProgress}. The Cursor adapter binds
- * `CURSOR_RUNNER_OWNED_PATHS` so the progress diff excludes the gate's own files —
- * the SAME exclusion {@link captureTurnToLedger} uses for the turn-boundary
- * candidate, so the live count and the reviewed set agree. Content-free and
- * secret-safe; a no-op when nothing changed since the last capture.
+ * Choose the mid-run progress substrate for this turn's workspace shape (DD-32 /
+ * DD-33), returning `undefined` when there is nothing to observe (not capture
+ * mode, or no workspace). Built ONCE per turn — the substrate owns its own
+ * short-circuit cache across the loop's persists; the floor lives in the caller's
+ * `ProgressCaptureState`. The live count and the turn-boundary reviewed set agree
+ * by construction: the git slice binds the SAME `CURSOR_RUNNER_OWNED_PATHS`
+ * exclusion {@link captureTurnToLedger} uses, and the CAS slice reads the SAME
+ * hook sidecar ({@link readCasObservations}) the boundary reads.
+ *
+ *  - git tree, no storage      -> git substrate only (tracked-file `--numstat`);
+ *  - git tree, storage (HYBRID) -> git + CAS (the gitignored writes the hook staged);
+ *  - non-git workspace          -> CAS only (every tool-mediated write is CAS-staged).
+ *
+ * The CAS slice needs the hook sidecar, which exists only when `captureIgnored`
+ * is on (storage configured). A non-git capture already required storage
+ * (`deriveCaptureMode`), so its sidecar is always present; a git tree with no
+ * storage simply gets the git-only substrate (parity with the pre-DD-33 behavior).
  */
-export async function captureProgressToStatus(opts) {
-    await captureFileChangeProgress({
-        status: opts.status,
-        gitRoot: opts.gitRoot,
-        executionId: opts.executionId,
-        changeSetId: opts.changeSetId,
-        baselineTree: opts.baselineTree,
-        excludePaths: CURSOR_RUNNER_OWNED_PATHS,
-        state: opts.state,
-    });
+export function buildCursorProgressSubstrate(opts) {
+    const { captureMode, gitWorkspace, workspaceRoot, baselineTree, executionId, hitlDir, storage } = opts;
+    if (!captureMode || !workspaceRoot)
+        return undefined;
+    const casReader = hitlDir && storage ? createSidecarTouchedReader(hitlDir) : undefined;
+    if (gitWorkspace) {
+        if (!baselineTree)
+            return undefined;
+        const git = createGitProgressSubstrate({
+            workspaceRoot,
+            executionId,
+            baselineTree,
+            excludePaths: CURSOR_RUNNER_OWNED_PATHS,
+        });
+        return casReader
+            ? createHybridProgressSubstrate(git, createCasProgressSubstrate({ workspaceRoot, read: casReader }))
+            : git;
+    }
+    // Non-git: every tool-mediated write is CAS-staged; there is no git slice.
+    return casReader ? createCasProgressSubstrate({ workspaceRoot, read: casReader }) : undefined;
+}
+/**
+ * A {@link CasTouchedReader} over the Cursor hook's on-disk sidecar. Each capture
+ * reads the current observations ({@link readCasObservations}) and maps them to
+ * the substrate's snapshot shape. Reads are bounded by the caller's capture floor
+ * (default 2s), and the sidecar is small (one small marker + before-blob per
+ * touched gitignored path), so re-reading per capture is cheap and always
+ * reflects sub-agent writes staged since the last one.
+ */
+function createSidecarTouchedReader(hitlDir) {
+    return async () => {
+        const { captured, secretPaths } = await readCasObservations(hitlDir);
+        const before = new Map();
+        for (const c of captured)
+            before.set(c.path, c.before);
+        return { before, blockedSecretPaths: new Set(secretPaths) };
+    };
 }
 /**
  * Compose this turn's CAS captures from the sidecar the hook staged, mirroring

package/dist/activities/execute-cursor/capture-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture-flow.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/capture-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EACL,qBAAqB,IAAI,2BAA2B,EACpD,uBAAuB,IAAI,6BAA6B,EACxD,wBAAwB,IAAI,8BAA8B,GAE3D,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,yBAAyB,GAE1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,aAAa,EAAuB,MAAM,0CAA0C,CAAC;AAM9F,oFAAoF;AACpF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,yBAAyB,GAAsB;IACnD,oBAAoB;IACpB,yCAAyC;CAC1C,CAAC;AAEF,iFAAiF;AACjF,mFAAmF;AACnF,gFAAgF;AAChF,qBAAqB;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IA+BzC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAChK,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAE/C,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,gBAAgB,CAAC,oBAAoB;QACvC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,oBAAoB,CACnE,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,CAChB,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,MAAM;QACN,OAAO;QACP,WAAW;QACX,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,WAAW;QACX,OAAO;QACP,iBAAiB;QACjB,wBAAwB,EAAE,eAAe;QACzC,YAAY;QACZ,iBAAiB;KAClB,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,uBAAuB,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC7D,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;QAC5E,+DAA+D;QAC/D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC3C,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAO7C;IACC,MAAM,yBAAyB,CAAC;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,yBAAyB;QACvC,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,OAA2B,EAC3B,OAAoC,EACpC,YAA8B;IAE9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC;IAC/E,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,6BAA6B,CAC1E,YAAY,CAAC,IAAI,EAAE,EACnB,IAAI,GAAG,CAAC,WAAW,CAAC,CACrB,CAAC;IAEF,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;YACzC,KAAK;YACL,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,cAAc,CAAC,YAAoB;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAYrC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,uBAAuB,CAC9B,QAAiC,EACjC,YAAiC,EACjC,WAAmB,EACnB,eAAqC;IAErC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,eAAe;gBAAE,SAAS;YACjC,IAAI,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC1C,IAAI,mBAAmB,CAAC,EAAE,CAAC;gBAAE,SAAS;YACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAC5D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACxD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,mCAAmC;YAC1E,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"capture-flow.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/capture-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EACL,qBAAqB,IAAI,2BAA2B,EACpD,uBAAuB,IAAI,6BAA6B,EACxD,wBAAwB,IAAI,8BAA8B,GAE3D,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAE9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,0BAA0B,GAG3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,aAAa,EAAuB,MAAM,0CAA0C,CAAC;AAM9F,oFAAoF;AACpF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,yBAAyB,GAAsB;IACnD,oBAAoB;IACpB,yCAAyC;CAC1C,CAAC;AAEF,iFAAiF;AACjF,mFAAmF;AACnF,gFAAgF;AAChF,qBAAqB;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,OAAO,6BAA6B,CAAC;QACnC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;KACxC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IA+BzC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAChK,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAE/C,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,gBAAgB,CAAC,oBAAoB;QACvC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,oBAAoB,CACnE,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,CAChB,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,MAAM;QACN,OAAO;QACP,WAAW;QACX,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,WAAW;QACX,OAAO;QACP,iBAAiB;QACjB,wBAAwB,EAAE,eAAe;QACzC,YAAY;QACZ,iBAAiB;KAClB,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,uBAAuB,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC7D,8EAA8E;QAC9E,mEAAmE;QACnE,4EAA4E;QAC5E,+DAA+D;QAC/D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC3C,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAQ5C;IACC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACvG,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAErD,MAAM,SAAS,GACb,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvE,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,GAAG,GAAG,0BAA0B,CAAC;YACrC,aAAa;YACb,WAAW;YACX,YAAY;YACZ,YAAY,EAAE,yBAAyB;SACxC,CAAC,CAAC;QACH,OAAO,SAAS;YACd,CAAC,CAAC,6BAA6B,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACpG,CAAC,CAAC,GAAG,CAAC;IACV,CAAC;IAED,2EAA2E;IAC3E,OAAO,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CAAC,OAAe;IACjD,OAAO,KAAK,IAAiC,EAAE;QAC7C,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,OAA2B,EAC3B,OAAoC,EACpC,YAA8B;IAE9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC;IAC/E,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,6BAA6B,CAC1E,YAAY,CAAC,IAAI,EAAE,EACnB,IAAI,GAAG,CAAC,WAAW,CAAC,CACrB,CAAC;IAEF,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;YACzC,KAAK;YACL,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,cAAc,CAAC,YAAoB;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAYrC;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,GAAG,IAAI;QACP,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,yBAAyB;QACvC,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAS,uBAAuB,CAC9B,QAAiC,EACjC,YAAiC,EACjC,WAAmB,EACnB,eAAqC;IAErC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,eAAe;gBAAE,SAAS;YACjC,IAAI,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC1C,IAAI,mBAAmB,CAAC,EAAE,CAAC;gBAAE,SAAS;YACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAC5D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YACxD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,mCAAmC;YAC1E,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/activities/execute-cursor/command-provenance.d.ts

@@ -1,28 +1,14 @@
 /**
- * Approved-command turn provenance (DD-28): the runner-owned qualification for
- * the auto-keep policy.
+ * Approved-command turn provenance (DD-28) — the CURSOR harness adapter over the
+ * shared qualification rule ({@link qualifyTurnCommandProvenance}).
  *
- * A turn whose ONLY mutation source was shell commands the human had already
- * authorized should not re-gate its file effects at the turn-boundary review —
- * the user consented to the command, and the command's file effects are the
- * consented outcome. The server cannot derive this itself (tool calls carry no
- * turn marker), so the runner — the only component that owns turn scoping —
- * derives the facts here and attaches them to the CANDIDATE_CAPTURED event as
- * {@link TurnCommandProvenance}.
+ * The Cursor harness scopes a turn POSITIONALLY (messages from the turn's first
+ * streamed index onward) and maps an executed command to its consent row through
+ * the reinvocation grant tokens the deny-gate minted. Both mappings are Cursor's
+ * own; the DD-28 rule they feed lives in `shared/filereview/command-provenance.ts`
+ * so the Cursor and deep-agent qualifications cannot drift.
  *
- * TRUST BOUNDARY. This module asserts turn FACTS (which tools ran this turn),
- * the same trust level as the captured bytes themselves. It never asserts
- * CONSENT: `consentToolCallIds` merely POINT at transcript rows whose
- * `approval_action` was authored by the server's SubmitApproval (and is
- * preserved against runner writes) — the backend re-verifies every claimed row
- * against that server-owned record before authoring the policy decision, so a
- * runner cannot mint authorization it was never given.
- *
- * FAIL-CLOSED. Every uncertainty disqualifies (returns undefined → the set
- * reviews manually, exactly as before DD-28): a file-tool call, an MCP tool, a
- * sub-agent delegation, an unrecognized tool name, or an executed shell command
- * with no provable consent source. Being conservative here costs only an extra
- * review; being permissive would silently waive one.
+ * (Trust boundary + fail-closed contract: see the shared module.)
  */
 import type { AgentMessage } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
 import type { TurnCommandProvenance } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
@@ -55,8 +41,8 @@ export interface CommandProvenanceInputs {
 }
 /**
  * Derive the {@link TurnCommandProvenance} for the turn, or undefined when the
- * turn does not qualify (any non-shell mutation-capable call, any unknown tool,
- * any executed command without a provable consent source, or no executed
- * consented command at all).
+ * turn does not qualify. Scopes this turn's tool calls positionally, resolves
+ * consent through the deny-gate grant tokens, and delegates the DD-28 rule to
+ * {@link qualifyTurnCommandProvenance}.
  */
 export declare function deriveTurnCommandProvenance(inputs: CommandProvenanceInputs): TurnCommandProvenance | undefined;

package/dist/activities/execute-cursor/command-provenance.js

@@ -1,128 +1,38 @@
 /**
- * Approved-command turn provenance (DD-28): the runner-owned qualification for
- * the auto-keep policy.
+ * Approved-command turn provenance (DD-28) — the CURSOR harness adapter over the
+ * shared qualification rule ({@link qualifyTurnCommandProvenance}).
  *
- * A turn whose ONLY mutation source was shell commands the human had already
- * authorized should not re-gate its file effects at the turn-boundary review —
- * the user consented to the command, and the command's file effects are the
- * consented outcome. The server cannot derive this itself (tool calls carry no
- * turn marker), so the runner — the only component that owns turn scoping —
- * derives the facts here and attaches them to the CANDIDATE_CAPTURED event as
- * {@link TurnCommandProvenance}.
+ * The Cursor harness scopes a turn POSITIONALLY (messages from the turn's first
+ * streamed index onward) and maps an executed command to its consent row through
+ * the reinvocation grant tokens the deny-gate minted. Both mappings are Cursor's
+ * own; the DD-28 rule they feed lives in `shared/filereview/command-provenance.ts`
+ * so the Cursor and deep-agent qualifications cannot drift.
  *
- * TRUST BOUNDARY. This module asserts turn FACTS (which tools ran this turn),
- * the same trust level as the captured bytes themselves. It never asserts
- * CONSENT: `consentToolCallIds` merely POINT at transcript rows whose
- * `approval_action` was authored by the server's SubmitApproval (and is
- * preserved against runner writes) — the backend re-verifies every claimed row
- * against that server-owned record before authoring the policy decision, so a
- * runner cannot mint authorization it was never given.
- *
- * FAIL-CLOSED. Every uncertainty disqualifies (returns undefined → the set
- * reviews manually, exactly as before DD-28): a file-tool call, an MCP tool, a
- * sub-agent delegation, an unrecognized tool name, or an executed shell command
- * with no provable consent source. Being conservative here costs only an extra
- * review; being permissive would silently waive one.
+ * (Trust boundary + fail-closed contract: see the shared module.)
  */
-import { create } from "@bufbuild/protobuf";
-import { TurnCommandProvenanceSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
-import { ApprovalAction, ToolKind } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
-import { classifyTool, toolApprovalCategory } from "../../shared/tool-kind.js";
-import { isToolCallRowHidden } from "../../shared/tool-row.js";
+import { qualifyTurnCommandProvenance } from "../../shared/filereview/command-provenance.js";
 import { toolCallIdentityToken } from "./message-translator.js";
-/**
- * Tool kinds that can never mutate the workspace: their presence in a turn is
- * irrelevant to change-set provenance. Everything OUTSIDE this set is either a
- * consent-mapped shell command or a disqualifier — never silently ignored.
- */
-const NON_MUTATING_KINDS = new Set([
-    ToolKind.FILE_READ,
-    ToolKind.SEARCH,
-    ToolKind.LIST,
-    ToolKind.FETCH,
-    ToolKind.WEB_SEARCH,
-    ToolKind.THINK,
-    ToolKind.TODO,
-]);
 /**
  * Derive the {@link TurnCommandProvenance} for the turn, or undefined when the
- * turn does not qualify (any non-shell mutation-capable call, any unknown tool,
- * any executed command without a provable consent source, or no executed
- * consented command at all).
+ * turn does not qualify. Scopes this turn's tool calls positionally, resolves
+ * consent through the deny-gate grant tokens, and delegates the DD-28 rule to
+ * {@link qualifyTurnCommandProvenance}.
  */
 export function deriveTurnCommandProvenance(inputs) {
     const { messages, turnStartIndex, deniedTokens, grantTokenToConsentId, globalBypass } = inputs;
-    const consentIds = new Set();
-    let authorizedByAutoApproveAll = false;
-    let executedCommandCount = 0;
-    for (let i = turnStartIndex; i < messages.length; i++) {
-        for (const tc of messages[i].toolCalls) {
-            // A hidden row is a collapsed twin/reaction — it never executed.
-            if (isToolCallRowHidden(tc))
-                continue;
-            const kind = classifyTool(tc.name, tc.mcpServerSlug);
-            if (NON_MUTATING_KINDS.has(kind))
-                continue;
-            if (kind !== ToolKind.SHELL) {
-                // A file tool (mixed turn), a sub-agent (unattributable mutations), an
-                // MCP tool (opaque side effects), or an unrecognized name — the turn's
-                // mutations cannot be attributed to consented commands. Fail closed.
-                return undefined;
-            }
-            const token = toolCallIdentityToken(tc);
-            if (deniedTokens.has(token)) {
-                // This turn's pending gate — denied by the hook, never executed.
-                continue;
-            }
-            executedCommandCount++;
-            const consentId = grantTokenToConsentId.get(token);
-            if (consentId) {
-                consentIds.add(consentId);
-                continue;
-            }
-            const leaseConsentId = findLeaseConsentId(messages, tc.name);
-            if (leaseConsentId) {
-                consentIds.add(leaseConsentId);
-                continue;
-            }
-            if (globalBypass) {
-                authorizedByAutoApproveAll = true;
-                continue;
-            }
-            // An executed shell command with no grant, no lease, and no bypass should
-            // be impossible (the hook gates every un-consented shell); if it ever
-            // happens, the honest answer is a manual review, not a waived one.
-            return undefined;
-        }
-    }
-    // A turn that executed no consented command has nothing to attribute the
-    // change set to — whatever changed came from somewhere else. Manual review.
-    if (executedCommandCount === 0)
-        return undefined;
-    return create(TurnCommandProvenanceSchema, {
-        consentToolCallIds: [...consentIds],
-        authorizedByAutoApproveAll,
+    // This turn's tool calls are the positional tail from the first message this
+    // turn's stream produced; everything before was seeded from prior turns.
+    const turnToolCalls = messages.slice(turnStartIndex).flatMap((m) => m.toolCalls);
+    return qualifyTurnCommandProvenance({
+        turnToolCalls,
+        messages,
+        // A shell whose identity token is in the denial ledger was denied by the
+        // hook — this turn's pending gate, never executed.
+        isExecutedCommand: (tc) => !deniedTokens.has(toolCallIdentityToken(tc)),
+        // A grant token maps back to the consent row (the row carrying the
+        // server-authored approval_action) that authorized this reinvocation.
+        resolveDirectConsent: (tc) => grantTokenToConsentId.get(toolCallIdentityToken(tc)),
+        globalBypass,
     });
 }
-/**
- * Find the transcript row whose APPROVE_ALL authored the run-lifetime lease
- * covering `toolName`'s category — the consent row a lease-executed command
- * cites. Searched across the whole transcript (a lease usually originates in a
- * prior turn); the first (earliest) APPROVE_ALL of the category is the lease's
- * origin. Returns undefined when no lease row exists for the category.
- */
-function findLeaseConsentId(messages, toolName) {
-    const category = toolApprovalCategory(toolName);
-    if (!category)
-        return undefined;
-    for (const msg of messages) {
-        for (const tc of msg.toolCalls) {
-            if (tc.approvalAction !== ApprovalAction.APPROVE_ALL)
-                continue;
-            if (toolApprovalCategory(tc.name) === category)
-                return tc.id;
-        }
-    }
-    return undefined;
-}
 //# sourceMappingURL=command-provenance.js.map

package/dist/activities/execute-cursor/command-provenance.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-provenance.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/command-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oEAAoE,CAAC;AAEjH,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,8DAA8D,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,kBAAkB,GAA0B,IAAI,GAAG,CAAC;IACxD,QAAQ,CAAC,SAAS;IAClB,QAAQ,CAAC,MAAM;IACf,QAAQ,CAAC,IAAI;IACb,QAAQ,CAAC,KAAK;IACd,QAAQ,CAAC,UAAU;IACnB,QAAQ,CAAC,KAAK;IACd,QAAQ,CAAC,IAAI;CACd,CAAC,CAAC;AA8BH;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA+B;IAE/B,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAE/F,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,0BAA0B,GAAG,KAAK,CAAC;IACvC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACvC,iEAAiE;YACjE,IAAI,mBAAmB,CAAC,EAAE,CAAC;gBAAE,SAAS;YAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;YACrD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAE3C,IAAI,IAAI,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC5B,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,iEAAiE;gBACjE,SAAS;YACX,CAAC;YACD,oBAAoB,EAAE,CAAC;YAEvB,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,SAAS,EAAE,CAAC;gBACd,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,cAAc,EAAE,CAAC;gBACnB,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,0BAA0B,GAAG,IAAI,CAAC;gBAClC,SAAS;YACX,CAAC;YACD,0EAA0E;YAC1E,sEAAsE;YACtE,mEAAmE;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,oBAAoB,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjD,OAAO,MAAM,CAAC,2BAA2B,EAAE;QACzC,kBAAkB,EAAE,CAAC,GAAG,UAAU,CAAC;QACnC,0BAA0B;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,QAAiC,EACjC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;gBAAE,SAAS;YAC/D,IAAI,oBAAoB,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"command-provenance.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/command-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AA8BhE;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA+B;IAE/B,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAE/F,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjF,OAAO,4BAA4B,CAAC;QAClC,aAAa;QACb,QAAQ;QACR,yEAAyE;QACzE,mDAAmD;QACnD,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACvE,mEAAmE;QACnE,sEAAsE;QACtE,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAClF,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}