@stigmer/runner 3.1.3 → 3.1.5

package/dist/shared/tool-row.d.ts

@@ -115,3 +115,19 @@ export declare function isToolCallRowHidden(tc: ToolCall): boolean;
  * none; Cursor clones them in) — the snapshot reflects whatever is present.
  */
 export declare function collectSubAgentToolCallIds(subAgents: readonly SubAgentExecution[]): Set<string>;
+/**
+ * Collect the ids of tool-call rows that have already SETTLED (reached a terminal
+ * state: completed, failed, or skipped) in a transcript.
+ *
+ * The deep-agent turn-boundary provenance derivation (DD-28) snapshots this
+ * BEFORE a turn's stream to scope "this turn's tool calls" by identity: a call
+ * whose id is absent from the snapshot is this-turn's — either freshly streamed,
+ * or a prior gate that was WAITING_APPROVAL before the stream and executes now on
+ * resume (StatusBuilder updates the seeded row in place, so it keeps its id).
+ * Unlike the Cursor harness, the deep-agent cannot scope positionally — an
+ * approved command executes at its SEEDED position — so identity is the only
+ * correct scope, mirroring {@link collectSubAgentToolCallIds}. Terminal (not just
+ * completed) so a PRIOR turn's failed/skipped non-shell call is excluded and
+ * cannot spuriously disqualify this turn.
+ */
+export declare function collectSettledToolCallIds(messages: readonly AgentMessage[]): Set<string>;

package/dist/shared/tool-row.js

@@ -173,4 +173,35 @@ export function collectSubAgentToolCallIds(subAgents) {
     }
     return ids;
 }
+/** Terminal tool-call statuses — a row that has finished (however it finished). */
+const TERMINAL_TOOL_CALL_STATUSES = new Set([
+    ToolCallStatus.TOOL_CALL_COMPLETED,
+    ToolCallStatus.TOOL_CALL_FAILED,
+    ToolCallStatus.TOOL_CALL_SKIPPED,
+]);
+/**
+ * Collect the ids of tool-call rows that have already SETTLED (reached a terminal
+ * state: completed, failed, or skipped) in a transcript.
+ *
+ * The deep-agent turn-boundary provenance derivation (DD-28) snapshots this
+ * BEFORE a turn's stream to scope "this turn's tool calls" by identity: a call
+ * whose id is absent from the snapshot is this-turn's — either freshly streamed,
+ * or a prior gate that was WAITING_APPROVAL before the stream and executes now on
+ * resume (StatusBuilder updates the seeded row in place, so it keeps its id).
+ * Unlike the Cursor harness, the deep-agent cannot scope positionally — an
+ * approved command executes at its SEEDED position — so identity is the only
+ * correct scope, mirroring {@link collectSubAgentToolCallIds}. Terminal (not just
+ * completed) so a PRIOR turn's failed/skipped non-shell call is excluded and
+ * cannot spuriously disqualify this turn.
+ */
+export function collectSettledToolCallIds(messages) {
+    const ids = new Set();
+    for (const msg of messages) {
+        for (const tc of msg.toolCalls) {
+            if (TERMINAL_TOOL_CALL_STATUSES.has(tc.status))
+                ids.add(tc.id);
+        }
+    }
+    return ids;
+}
 //# sourceMappingURL=tool-row.js.map

package/dist/shared/tool-row.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-row.js","sourceRoot":"","sources":["../../src/shared/tool-row.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAG9F,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,WAAmB;IAChE,IAAI,EAAE,CAAC,eAAe;QAAE,OAAO;IAC/B,EAAE,CAAC,eAAe,GAAG,WAAW,CAAC;IAEjC,IAAI,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,EAAY;IACpD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAAiC,EACjC,SAAwC;IAExC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,oBAAoB,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC9C,yBAAyB,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACjC,iCAAiC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,EAAY;IAC1C,EAAE,CAAC,MAAM,GAAG,cAAc,CAAC,iBAAiB,CAAC;IAC7C,EAAE,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAC5B,EAAE,CAAC,mBAAmB,GAAG,EAAE,CAAC;IAC5B,EAAE,CAAC,eAAe,GAAG,EAAE,CAAC;IACxB,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;IACd,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;IACf,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC;IACpB,EAAE,CAAC,IAAI,GAAG,SAAS,CAAC;IACpB,IAAI,CAAC,EAAE,CAAC,WAAW;QAAE,EAAE,CAAC,WAAW,GAAG,YAAY,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAY;IAC9C,OAAO,CACL,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,iBAAiB;QAC9C,CAAC,EAAE,CAAC,gBAAgB;QACpB,EAAE,CAAC,IAAI,KAAK,SAAS;QACrB,CAAC,EAAE,CAAC,MAAM;QACV,CAAC,EAAE,CAAC,KAAK,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAuC;IAEvC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"tool-row.js","sourceRoot":"","sources":["../../src/shared/tool-row.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAG9F,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,WAAmB;IAChE,IAAI,EAAE,CAAC,eAAe;QAAE,OAAO;IAC/B,EAAE,CAAC,eAAe,GAAG,WAAW,CAAC;IAEjC,IAAI,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,EAAY;IACpD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAAiC,EACjC,SAAwC;IAExC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,oBAAoB,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC9C,yBAAyB,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACjC,iCAAiC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,EAAY;IAC1C,EAAE,CAAC,MAAM,GAAG,cAAc,CAAC,iBAAiB,CAAC;IAC7C,EAAE,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAC5B,EAAE,CAAC,mBAAmB,GAAG,EAAE,CAAC;IAC5B,EAAE,CAAC,eAAe,GAAG,EAAE,CAAC;IACxB,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;IACd,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;IACf,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC;IACpB,EAAE,CAAC,IAAI,GAAG,SAAS,CAAC;IACpB,IAAI,CAAC,EAAE,CAAC,WAAW;QAAE,EAAE,CAAC,WAAW,GAAG,YAAY,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAY;IAC9C,OAAO,CACL,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,iBAAiB;QAC9C,CAAC,EAAE,CAAC,gBAAgB;QACpB,EAAE,CAAC,IAAI,KAAK,SAAS;QACrB,CAAC,EAAE,CAAC,MAAM;QACV,CAAC,EAAE,CAAC,KAAK,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAuC;IAEvC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,2BAA2B,GAAgC,IAAI,GAAG,CAAC;IACvE,cAAc,CAAC,mBAAmB;IAClC,cAAc,CAAC,gBAAgB;IAC/B,cAAc,CAAC,iBAAiB;CACjC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAiC;IAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/shared/workspace/git-identity.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The public git identity for commits the agent authors on the user's behalf.
+ *
+ * Write-back commits (branch/commit/push/PR — see WriteBackCoordinator) land
+ * on real branches in the user's repository, so they carry a dedicated,
+ * recognizable agent identity in every mode — local and cloud alike. This is
+ * deliberate: a commit authored by the agent should never be silently
+ * attributed to whatever identity happens to live in the host's `~/.gitconfig`
+ * (local), and the cloud sandbox has no identity at all, which makes a bare
+ * `git commit` fail with "Author identity unknown".
+ *
+ * Distinct from the *internal* snapshot identity in
+ * `../filereview/git-substrate.ts` (`stigmer-runner <runner@stigmer.local>`):
+ * those commit objects are never on a branch and never pushed — they exist
+ * only to pin trees against GC. This identity is the public-facing one that
+ * appears in `git log`, on GitHub, and in pull requests.
+ */
+export declare const AGENT_GIT_AUTHOR_NAME = "Stigmer Agent";
+export declare const AGENT_GIT_AUTHOR_EMAIL = "noreply@stigmer.ai";
+/**
+ * `git -c` config flags that pin the agent identity for a single command.
+ *
+ * Per-command `-c` flags (rather than repo-local or global `git config`) keep
+ * the identity deterministic in every environment without mutating the user's
+ * repository config — the same never-mutate reasoning documented on
+ * `SNAPSHOT_IDENTITY_ENV` in `git-substrate.ts`. Env-var injection is not an
+ * option here: `WorkspaceBackend.execute()` takes no env parameter, and
+ * widening that contract for one caller would be a larger change than the
+ * problem deserves.
+ */
+export declare const AGENT_GIT_IDENTITY_FLAGS = "-c user.name='Stigmer Agent' -c user.email='noreply@stigmer.ai'";
+/**
+ * Build a `git commit` command that is always authored by the agent identity,
+ * regardless of what identity (if any) the surrounding environment provides.
+ */
+export declare function gitCommitAsAgent(commitMsg: string): string;

package/dist/shared/workspace/git-identity.js

@@ -0,0 +1,39 @@
+/**
+ * The public git identity for commits the agent authors on the user's behalf.
+ *
+ * Write-back commits (branch/commit/push/PR — see WriteBackCoordinator) land
+ * on real branches in the user's repository, so they carry a dedicated,
+ * recognizable agent identity in every mode — local and cloud alike. This is
+ * deliberate: a commit authored by the agent should never be silently
+ * attributed to whatever identity happens to live in the host's `~/.gitconfig`
+ * (local), and the cloud sandbox has no identity at all, which makes a bare
+ * `git commit` fail with "Author identity unknown".
+ *
+ * Distinct from the *internal* snapshot identity in
+ * `../filereview/git-substrate.ts` (`stigmer-runner <runner@stigmer.local>`):
+ * those commit objects are never on a branch and never pushed — they exist
+ * only to pin trees against GC. This identity is the public-facing one that
+ * appears in `git log`, on GitHub, and in pull requests.
+ */
+export const AGENT_GIT_AUTHOR_NAME = "Stigmer Agent";
+export const AGENT_GIT_AUTHOR_EMAIL = "noreply@stigmer.ai";
+/**
+ * `git -c` config flags that pin the agent identity for a single command.
+ *
+ * Per-command `-c` flags (rather than repo-local or global `git config`) keep
+ * the identity deterministic in every environment without mutating the user's
+ * repository config — the same never-mutate reasoning documented on
+ * `SNAPSHOT_IDENTITY_ENV` in `git-substrate.ts`. Env-var injection is not an
+ * option here: `WorkspaceBackend.execute()` takes no env parameter, and
+ * widening that contract for one caller would be a larger change than the
+ * problem deserves.
+ */
+export const AGENT_GIT_IDENTITY_FLAGS = `-c user.name='${AGENT_GIT_AUTHOR_NAME}' -c user.email='${AGENT_GIT_AUTHOR_EMAIL}'`;
+/**
+ * Build a `git commit` command that is always authored by the agent identity,
+ * regardless of what identity (if any) the surrounding environment provides.
+ */
+export function gitCommitAsAgent(commitMsg) {
+    return `git ${AGENT_GIT_IDENTITY_FLAGS} commit -m "${commitMsg}"`;
+}
+//# sourceMappingURL=git-identity.js.map

package/dist/shared/workspace/git-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-identity.js","sourceRoot":"","sources":["../../../src/shared/workspace/git-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,iBAAiB,qBAAqB,oBAAoB,sBAAsB,GAAG,CAAC;AAEtF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,OAAO,wBAAwB,eAAe,SAAS,GAAG,CAAC;AACpE,CAAC"}

package/dist/shared/workspace/local-backend.d.ts

@@ -6,8 +6,12 @@
  * sandbox) backend will be added in Phase 3.
  *
  * When `platformDir` is provided, paths under `.stigmer/` are
- * transparently routed to the platform directory. The agent sees a
- * unified namespace; the workspace directory is never polluted.
+ * transparently routed to the platform directory, keeping platform files
+ * out of the workspace tree. This routing serves the RUNNER's own I/O
+ * (skill/attachment materialization, `execute` command rewriting) — the
+ * agent's file tools do not go through this backend. Agent-visible reads
+ * of `.stigmer/…` reach the same physical files through the per-turn
+ * workspace symlink instead (see shared/workspace/stigmer-link.ts).
  */
 import type { WorkspaceBackend } from "./types.js";
 export declare class LocalWorkspaceBackend implements WorkspaceBackend {

package/dist/shared/workspace/local-backend.js

@@ -6,8 +6,12 @@
  * sandbox) backend will be added in Phase 3.
  *
  * When `platformDir` is provided, paths under `.stigmer/` are
- * transparently routed to the platform directory. The agent sees a
- * unified namespace; the workspace directory is never polluted.
+ * transparently routed to the platform directory, keeping platform files
+ * out of the workspace tree. This routing serves the RUNNER's own I/O
+ * (skill/attachment materialization, `execute` command rewriting) — the
+ * agent's file tools do not go through this backend. Agent-visible reads
+ * of `.stigmer/…` reach the same physical files through the per-turn
+ * workspace symlink instead (see shared/workspace/stigmer-link.ts).
  */
 import { execFile } from "node:child_process";
 import { readFile, writeFile, access, mkdir } from "node:fs/promises";

package/dist/shared/workspace/local-backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-backend.js","sourceRoot":"","sources":["../../../src/shared/workspace/local-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAY,MAAM,WAAW,CAAC;AAEhE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,OAAO,qBAAqB;IACvB,OAAO,CAAS;IAChB,WAAW,CAAU;IAE9B,YAAY,OAAe,EAAE,WAAoB;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAA0B;QACvD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG;YACtB,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3E,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAEjB,IAAI,eAAe,GAAG,OAAO,CAAC;QAC9B,MAAM,GAAG,GAAuC,IAAI,CAAC,WAAW;YAC9D,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAA6B,EAAE,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE;YAC5F,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,QAAQ,CACN,IAAI,EACJ,CAAC,IAAI,EAAE,eAAe,CAAC,EACvB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC7D,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,OAAe;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,YAAoB,EAAE,YAAoB;QACtE,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC1D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,WAAW,CAAC,IAAY;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAElC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACtD,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBACtF,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,uCAAuC,CACzE,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe,EACf,WAAoB;IAEpB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"local-backend.js","sourceRoot":"","sources":["../../../src/shared/workspace/local-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAY,MAAM,WAAW,CAAC;AAEhE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,OAAO,qBAAqB;IACvB,OAAO,CAAS;IAChB,WAAW,CAAU;IAE9B,YAAY,OAAe,EAAE,WAAoB;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAA0B;QACvD,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG;YACtB,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3E,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAEjB,IAAI,eAAe,GAAG,OAAO,CAAC;QAC9B,MAAM,GAAG,GAAuC,IAAI,CAAC,WAAW;YAC9D,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAA6B,EAAE,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE;YAC5F,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,QAAQ,CACN,IAAI,EACJ,CAAC,IAAI,EAAE,eAAe,CAAC,EACvB,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC7D,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,OAAe;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,YAAoB,EAAE,YAAoB;QACtE,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC1D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,WAAW,CAAC,IAAY;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAElC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACtD,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBACtF,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,uCAAuC,CACzE,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe,EACf,WAAoB;IAEpB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC"}

package/dist/shared/workspace/stigmer-link.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The workspace `.stigmer` symlink — the bridge from the session's workspace
+ * to its platform-managed directory (~/.stigmer/sessions/{id}/platform/, see
+ * platform-dir.ts), shared by BOTH harnesses.
+ *
+ * Platform-injected content (skills, attachment inputs, the approved plan)
+ * physically lives in the platform dir, outside the workspace, so a real repo
+ * is never polluted with Stigmer files (issue #173). But the agent reads from
+ * the workspace: the Cursor SDK resolves paths against the workspace CWD, and
+ * the native (deepagents) harness's file tools resolve against a
+ * `FilesystemBackend` rooted at the workspace. The symlink is what makes the
+ * `.stigmer/…` paths those agents are prompted with (skill locations,
+ * `.stigmer/inputs/…` attachments) actually resolve.
+ *
+ * Lifecycle contract (same for both harnesses):
+ * - Created per turn, under the workspace turn lock — the link is a
+ *   working-tree mutation, and re-pointing it while another session's turn is
+ *   running on a shared tree would redirect that turn's reads mid-flight.
+ *   Cursor creates it in its skill/attachment resolvers (which run after lock
+ *   acquisition); the native harness creates it right after acquiring the
+ *   lock (execute-deep-agent/index.ts).
+ * - Removed at turn end ({@link removeStigmerSymlink} in the activity's
+ *   cleanup), so a real repo is left untouched once the turn ends; a
+ *   multi-turn session recreates the link on the next turn.
+ * - {@link ensureStigmerSymlink} is idempotent, so multiple populaters may
+ *   run in any order within a turn.
+ *
+ * OWNERSHIP SHARP EDGE: the platform owns the `.stigmer` name inside a
+ * workspace. {@link ensureStigmerSymlink} REPLACES a real (non-symlink)
+ * `.stigmer` directory it finds there — deliberate, so a directory left
+ * behind by an older runner can never shadow the platform mount. (A user's
+ * own `.stigmer` content is unreachable anyway: the runner's
+ * `LocalWorkspaceBackend` routes every `.stigmer/…` path to the platform
+ * dir.) Turn-end removal is the conservative half: it only ever removes a
+ * SYMLINK.
+ */
+/** The workspace-visible name of the platform namespace. */
+export declare const STIGMER_LOCAL_STATE_DIR = ".stigmer";
+/**
+ * Ensure the workspace `.stigmer` symlink points to the platform dir.
+ * Idempotent: an existing correct link is kept; a stale link (or a non-link
+ * left behind by an older runner) is replaced.
+ */
+export declare function ensureStigmerSymlink(workspaceDir: string, platformDir: string): Promise<void>;
+/**
+ * Remove the workspace `.stigmer` symlink created by
+ * {@link ensureStigmerSymlink}.
+ *
+ * Called in the activity's cleanup so attaching a real repo leaves no Stigmer
+ * symlink behind once the turn ends (issue #173). Only ever removes a
+ * SYMLINK — a real `.stigmer` directory (which would be the user's own, not
+ * ours) is left untouched. Best-effort.
+ */
+export declare function removeStigmerSymlink(workspaceDir: string): Promise<void>;

package/dist/shared/workspace/stigmer-link.js

@@ -0,0 +1,92 @@
+/**
+ * The workspace `.stigmer` symlink — the bridge from the session's workspace
+ * to its platform-managed directory (~/.stigmer/sessions/{id}/platform/, see
+ * platform-dir.ts), shared by BOTH harnesses.
+ *
+ * Platform-injected content (skills, attachment inputs, the approved plan)
+ * physically lives in the platform dir, outside the workspace, so a real repo
+ * is never polluted with Stigmer files (issue #173). But the agent reads from
+ * the workspace: the Cursor SDK resolves paths against the workspace CWD, and
+ * the native (deepagents) harness's file tools resolve against a
+ * `FilesystemBackend` rooted at the workspace. The symlink is what makes the
+ * `.stigmer/…` paths those agents are prompted with (skill locations,
+ * `.stigmer/inputs/…` attachments) actually resolve.
+ *
+ * Lifecycle contract (same for both harnesses):
+ * - Created per turn, under the workspace turn lock — the link is a
+ *   working-tree mutation, and re-pointing it while another session's turn is
+ *   running on a shared tree would redirect that turn's reads mid-flight.
+ *   Cursor creates it in its skill/attachment resolvers (which run after lock
+ *   acquisition); the native harness creates it right after acquiring the
+ *   lock (execute-deep-agent/index.ts).
+ * - Removed at turn end ({@link removeStigmerSymlink} in the activity's
+ *   cleanup), so a real repo is left untouched once the turn ends; a
+ *   multi-turn session recreates the link on the next turn.
+ * - {@link ensureStigmerSymlink} is idempotent, so multiple populaters may
+ *   run in any order within a turn.
+ *
+ * OWNERSHIP SHARP EDGE: the platform owns the `.stigmer` name inside a
+ * workspace. {@link ensureStigmerSymlink} REPLACES a real (non-symlink)
+ * `.stigmer` directory it finds there — deliberate, so a directory left
+ * behind by an older runner can never shadow the platform mount. (A user's
+ * own `.stigmer` content is unreachable anyway: the runner's
+ * `LocalWorkspaceBackend` routes every `.stigmer/…` path to the platform
+ * dir.) Turn-end removal is the conservative half: it only ever removes a
+ * SYMLINK.
+ */
+import { symlink, readlink, unlink, rm, lstat } from "node:fs/promises";
+import { join } from "node:path";
+/** The workspace-visible name of the platform namespace. */
+export const STIGMER_LOCAL_STATE_DIR = ".stigmer";
+/**
+ * Ensure the workspace `.stigmer` symlink points to the platform dir.
+ * Idempotent: an existing correct link is kept; a stale link (or a non-link
+ * left behind by an older runner) is replaced.
+ */
+export async function ensureStigmerSymlink(workspaceDir, platformDir) {
+    const linkPath = join(workspaceDir, STIGMER_LOCAL_STATE_DIR);
+    try {
+        const existing = await readlink(linkPath);
+        if (existing === platformDir)
+            return;
+        await unlink(linkPath);
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            // No existing symlink
+        }
+        else if (err.code === "EINVAL") {
+            // Exists but is not a symlink — remove the directory
+            await rm(linkPath, { recursive: true, force: true });
+        }
+        else {
+            throw err;
+        }
+    }
+    await symlink(platformDir, linkPath, "dir");
+}
+/**
+ * Remove the workspace `.stigmer` symlink created by
+ * {@link ensureStigmerSymlink}.
+ *
+ * Called in the activity's cleanup so attaching a real repo leaves no Stigmer
+ * symlink behind once the turn ends (issue #173). Only ever removes a
+ * SYMLINK — a real `.stigmer` directory (which would be the user's own, not
+ * ours) is left untouched. Best-effort.
+ */
+export async function removeStigmerSymlink(workspaceDir) {
+    const linkPath = join(workspaceDir, STIGMER_LOCAL_STATE_DIR);
+    try {
+        const stat = await lstat(linkPath);
+        if (stat.isSymbolicLink()) {
+            await unlink(linkPath);
+        }
+    }
+    catch (err) {
+        if (err?.code !== "ENOENT") {
+            console.warn(`removeStigmerSymlink: failed to remove ${linkPath} (non-fatal): ` +
+                `${err instanceof Error ? err.message : err}`);
+        }
+    }
+}
+//# sourceMappingURL=stigmer-link.js.map

package/dist/shared/workspace/stigmer-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stigmer-link.js","sourceRoot":"","sources":["../../../src/shared/workspace/stigmer-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,WAAW;YAAE,OAAO;QACrC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,sBAAsB;QACxB,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,qDAAqD;YACrD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,YAAoB;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CACV,0CAA0C,QAAQ,gBAAgB;gBAClE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/shared/workspace/types.d.ts

@@ -40,10 +40,12 @@ export declare class WorkspaceProvisionError extends Error {
  * commands route through the Daytona sandbox proxy.
  *
  * When `platformDir` is set, paths under `.stigmer/` are transparently
- * routed to the platform directory instead of the workspace root. This
- * keeps platform files (skills, inputs) physically separate from the
- * user's workspace while presenting a unified `.stigmer/` namespace to
- * the agent.
+ * routed to the platform directory instead of the workspace root, keeping
+ * platform files (skills, inputs) physically separate from the user's
+ * workspace. The routing covers the RUNNER's own reads/writes through
+ * this interface; the agent's file tools resolve against the workspace
+ * root and see the same files through the per-turn `.stigmer` symlink
+ * (see stigmer-link.ts).
  */
 export interface WorkspaceBackend {
     readonly rootDir: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/runner",
-  "version": "3.1.3",
+  "version": "3.1.5",
   "description": "Embeddable Temporal worker for the Stigmer AI agent platform — handles agent execution, workflow orchestration, and MCP server management",
   "license": "Apache-2.0",
   "type": "module",
@@ -85,7 +85,7 @@
     "@opentelemetry/sdk-metrics": "^2.0.0",
     "@opentelemetry/sdk-trace-base": "^2.0.0",
     "@opentelemetry/sdk-trace-node": "^2.0.0",
-    "@stigmer/protos": "3.1.3",
+    "@stigmer/protos": "3.1.5",
     "@temporalio/activity": "^1.11.0",
     "@temporalio/client": "^1.11.0",
     "@temporalio/common": "^1.11.0",

package/src/__tests__/otel-turn-span.test.ts

@@ -0,0 +1,61 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+
+// Spy span/tracer, hoisted so the vi.mock factory (which runs before imports)
+// can close over them without a temporal-dead-zone error.
+const { spanEnd, spanSetAttribute, startSpan } = vi.hoisted(() => {
+  const spanEnd = vi.fn();
+  const spanSetAttribute = vi.fn();
+  const startSpan = vi.fn(() => ({ end: spanEnd, setAttribute: spanSetAttribute }));
+  return { spanEnd, spanSetAttribute, startSpan };
+});
+
+vi.mock("@opentelemetry/api", () => ({
+  trace: { getTracer: () => ({ startSpan }) },
+}));
+
+import {
+  startCursorTurnSpan,
+  ATTR_LLM_INPUT_TOKENS,
+  ATTR_LLM_OUTPUT_TOKENS,
+} from "../otel.js";
+
+const spanAttrs = { model: "gpt-x", mode: "local", sessionId: "sess-1" };
+
+describe("startCursorTurnSpan", () => {
+  beforeEach(() => {
+    spanEnd.mockClear();
+    spanSetAttribute.mockClear();
+    startSpan.mockClear();
+  });
+
+  it("records the input and output token attributes", async () => {
+    const span = await startCursorTurnSpan(spanAttrs);
+    span.setTokens(1200, 340);
+    expect(spanSetAttribute).toHaveBeenCalledWith(ATTR_LLM_INPUT_TOKENS, 1200);
+    expect(spanSetAttribute).toHaveBeenCalledWith(ATTR_LLM_OUTPUT_TOKENS, 340);
+  });
+
+  it("omits zero-valued token attributes (no count = no attribute)", async () => {
+    const span = await startCursorTurnSpan(spanAttrs);
+    span.setTokens(0, 0);
+    expect(spanSetAttribute).not.toHaveBeenCalled();
+  });
+
+  it("ends the span exactly once even when end() is called repeatedly", async () => {
+    // finishTurnTelemetry is invoked from the activity's finally on every exit
+    // path; a second end() (e.g. a defensive double-invoke) must be a no-op so
+    // OTel never warns about ending an already-ended span.
+    const span = await startCursorTurnSpan(spanAttrs);
+    span.end();
+    span.end();
+    span.end();
+    expect(spanEnd).toHaveBeenCalledTimes(1);
+  });
+
+  it("ignores setTokens after the span has ended (no late mutation)", async () => {
+    const span = await startCursorTurnSpan(spanAttrs);
+    span.end();
+    span.setTokens(1200, 340);
+    expect(spanSetAttribute).not.toHaveBeenCalled();
+  });
+});

package/src/activities/execute-cursor/__tests__/progress-substrate.test.ts

@@ -0,0 +1,169 @@
+/**
+ * Unit tests for the Cursor mid-run progress substrate selection (DD-33) —
+ * `buildCursorProgressSubstrate`. This is the Cursor adapter's responsibility:
+ * pick git / non-git CAS / hybrid for the turn's workspace shape (the CAS + git
+ * capture behaviors themselves are covered in shared/filereview/__tests__).
+ *
+ * The chosen substrate is driven against a real temp workspace to prove WHICH
+ * kind was built: a git-only substrate surfaces the tracked change; a hybrid adds
+ * the (empty here) CAS slice; a non-git substrate reads the (empty) hook sidecar
+ * without touching git.
+ */
+
+import { execFile } from "node:child_process";
+import { mkdtemp, mkdir, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { promisify } from "node:util";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { buildCursorProgressSubstrate } from "../capture-flow.js";
+import { snapshotBaseline, dropCaptureRefs } from "../../../shared/filereview/git-substrate.js";
+import { makeInMemoryArtifactStorage } from "../../../__test-utils__/fake-artifact-storage.js";
+
+const execFileAsync = promisify(execFile);
+const EXEC_ID = "exec-cursor-progress";
+
+let repo: string;
+let hitlDir: string;
+
+async function git(args: string[]): Promise<void> {
+  await execFileAsync("git", args, { cwd: repo });
+}
+
+async function write(rel: string, content: string): Promise<void> {
+  await mkdir(join(repo, rel, ".."), { recursive: true });
+  await writeFile(join(repo, rel), content, "utf-8");
+}
+
+beforeEach(async () => {
+  repo = await mkdtemp(join(tmpdir(), "cursor-progress-"));
+  hitlDir = await mkdtemp(join(tmpdir(), "cursor-progress-hitl-"));
+  await git(["init", "-q"]);
+  await git(["config", "user.email", "t@t.local"]);
+  await git(["config", "user.name", "t"]);
+  await write("src/main.ts", "export const x = 1;\n");
+  await git(["add", "-A"]);
+  await git(["commit", "-q", "-m", "initial"]);
+});
+
+afterEach(async () => {
+  await dropCaptureRefs(repo, EXEC_ID).catch(() => {});
+  await rm(repo, { recursive: true, force: true });
+  await rm(hitlDir, { recursive: true, force: true });
+});
+
+describe("buildCursorProgressSubstrate — selection", () => {
+  it("returns undefined outside capture mode", () => {
+    const sub = buildCursorProgressSubstrate({
+      captureMode: false,
+      gitWorkspace: true,
+      workspaceRoot: repo,
+      baselineTree: "sha",
+      executionId: EXEC_ID,
+      hitlDir,
+      storage: undefined,
+    });
+    expect(sub).toBeUndefined();
+  });
+
+  it("returns undefined with no workspace root", () => {
+    const sub = buildCursorProgressSubstrate({
+      captureMode: true,
+      gitWorkspace: true,
+      workspaceRoot: undefined,
+      baselineTree: "sha",
+      executionId: EXEC_ID,
+      hitlDir,
+      storage: undefined,
+    });
+    expect(sub).toBeUndefined();
+  });
+
+  it("returns undefined for a git tree with no baseline tree yet", () => {
+    const sub = buildCursorProgressSubstrate({
+      captureMode: true,
+      gitWorkspace: true,
+      workspaceRoot: repo,
+      baselineTree: undefined,
+      executionId: EXEC_ID,
+      hitlDir,
+      storage: undefined,
+    });
+    expect(sub).toBeUndefined();
+  });
+
+  it("returns undefined for a non-git workspace with no storage/sidecar", () => {
+    const sub = buildCursorProgressSubstrate({
+      captureMode: true,
+      gitWorkspace: false,
+      workspaceRoot: repo,
+      baselineTree: undefined,
+      executionId: EXEC_ID,
+      hitlDir: undefined,
+      storage: undefined,
+    });
+    expect(sub).toBeUndefined();
+  });
+
+  it("builds a git-only substrate (no storage) that surfaces the tracked change", async () => {
+    const baselineTree = await snapshotBaseline(repo, EXEC_ID);
+    const sub = buildCursorProgressSubstrate({
+      captureMode: true,
+      gitWorkspace: true,
+      workspaceRoot: repo,
+      baselineTree,
+      executionId: EXEC_ID,
+      hitlDir,
+      storage: undefined,
+    });
+    expect(sub).toBeDefined();
+
+    await write("src/main.ts", "export const x = 2;\nexport const y = 3;\n");
+    const { delta, changed } = await sub!.capture();
+    expect(changed).toBe(true);
+    expect(delta.entries.some((e) => e.pathAfter === "src/main.ts")).toBe(true);
+  });
+
+  it("builds a hybrid substrate (git + storage) surfacing the git slice + empty CAS", async () => {
+    const baselineTree = await snapshotBaseline(repo, EXEC_ID);
+    const { storage } = makeInMemoryArtifactStorage();
+    const sub = buildCursorProgressSubstrate({
+      captureMode: true,
+      gitWorkspace: true,
+      workspaceRoot: repo,
+      baselineTree,
+      executionId: EXEC_ID,
+      hitlDir,
+      storage,
+    });
+    expect(sub).toBeDefined();
+
+    await write("src/main.ts", "export const x = 9;\n");
+    const { delta } = await sub!.capture();
+    // The git slice contributes the tracked change; the CAS sidecar is empty, so
+    // it adds nothing — total equals the git entries.
+    expect(delta.entries.some((e) => e.pathAfter === "src/main.ts")).toBe(true);
+    expect(delta.totalFilesChanged).toBe(delta.entries.length);
+  });
+
+  it("builds a non-git CAS substrate that reads the (empty) sidecar without git", async () => {
+    const { storage } = makeInMemoryArtifactStorage();
+    const sub = buildCursorProgressSubstrate({
+      captureMode: true,
+      gitWorkspace: false,
+      workspaceRoot: repo,
+      baselineTree: undefined,
+      executionId: EXEC_ID,
+      hitlDir,
+      storage,
+    });
+    expect(sub).toBeDefined();
+
+    // Even with a git change on disk, the non-git substrate ignores git entirely;
+    // the sidecar is empty, so it reports zero changed files.
+    await write("src/main.ts", "export const x = 42;\n");
+    const { delta } = await sub!.capture();
+    expect(delta.totalFilesChanged).toBe(0);
+    expect(delta.entries).toHaveLength(0);
+  });
+});