@stigmer/runner 3.10.0 → 3.11.1-dev.20260812192248

package/src/workflows/engine-core.ts

@@ -145,7 +145,21 @@ export async function runWorkflowEngine(
 
   recordExecutionStartMetric(model.document.name);
 
-  await eventProxy.ResetEventSequence(executionId);
+  // Event sequence numbers are workflow state: assigned here in the
+  // deterministic sandbox (seeded from the persisted high-water mark) so
+  // they are stable across activity retries, worker restarts, and
+  // concurrent executions — the store can then treat re-sent sequences as
+  // idempotent duplicates. Pre-patch histories recorded the activity
+  // result as void and assigned sequences inside the emit activity from a
+  // process-global counter; they must keep doing so on replay, hence the
+  // gate. Remove the gate (and the activity's legacy counter) once
+  // pre-patch executions have drained.
+  const workflowAssignedSequences = patched("workflow-assigned-event-sequences");
+  const eventLogHighWaterMark = await eventProxy.ResetEventSequence(executionId);
+  let eventSequence = workflowAssignedSequences ? Number(eventLogHighWaterMark ?? 0) : 0;
+  const nextEventSequence = workflowAssignedSequences
+    ? () => ++eventSequence
+    : undefined;
 
   let recoveryContext: RecoveryContext | undefined;
   if (options?.recoveryMode && executionId) {
@@ -170,9 +184,15 @@ export async function runWorkflowEngine(
 
   const emitEvents = async (events: WorkflowEventDescriptor[]): Promise<void> => {
     if (!executionId || events.length === 0) return;
+    const stamped = nextEventSequence
+      ? events.map(e => ({ ...e, sequenceNumber: nextEventSequence() }))
+      : events;
     try {
-      await eventProxy.EmitWorkflowEvents(executionId, events, taskStatusAccumulator.toArray());
+      await eventProxy.EmitWorkflowEvents(executionId, stamped, taskStatusAccumulator.toArray());
     } catch (err) {
+      // Final guard after the activity's retries are exhausted: a run must
+      // not die because its timeline write failed. With workflow-assigned
+      // sequences the result is a gap in the log, never a poisoned log.
       log.warn("Failed to emit workflow events (non-fatal)", {
         executionId,
         eventCount: events.length,
@@ -246,6 +266,7 @@ export async function runWorkflowEngine(
         parentWorkflowId: agentMeta.parentWorkflowId || workflowInfo().workflowId,
         taskName: agentMeta.taskName,
         workflowExecutionId: agentMeta.workflowExecutionId || executionId,
+        nextEventSequence,
       }),
     promoteTaskOutput: (taskOutput: unknown, wexId: string, taskName: string, displayName?: string) =>
       promoteProxy.PromoteTaskOutput(taskOutput, wexId || executionId, taskName, displayName),

package/src/workflows/execute-from-execution.ts

@@ -63,7 +63,7 @@ export interface ExecuteFromExecutionInput {
 
 export async function executeFromExecution(
   input: ExecuteFromExecutionInput,
-): Promise<unknown> {
+): Promise<void> {
   const { checkPause } = setupPauseResumeHandlers();
 
   log.info("Hydrating workflow execution from slim IDs", {
@@ -86,7 +86,17 @@ export async function executeFromExecution(
   });
 
   try {
-    return await runWorkflowEngine(materialized, {
+    // The engine's output is deliberately NOT returned. Both orchestrator
+    // parents discard this workflow's result (Java awaits it as Void, Go
+    // passes nil to Get), and the output already reaches users through
+    // PromoteTaskOutput and the event log. Returning it would (a) persist
+    // the full workflow output — which may embed secrets — as a plaintext
+    // payload in the cross-language parent's history, and (b) hand the Java
+    // parent a payload it must decode: once the payload-encryption codec is
+    // active, an encrypted result would fail Java's converter lookup
+    // (fromPayloads has no Void special-case). A void return produces a
+    // data-less binary/null payload that every SDK handles natively.
+    await runWorkflowEngine(materialized, {
       checkPause,
       recoveryMode: input.recovery_mode ?? false,
     });

package/src/workflows/types.ts

@@ -19,6 +19,14 @@
 export interface ConnectMcpServerWorkflowInput {
   mcp_server_id: string;
   execution_context_id?: string | null;
+  /**
+   * Execution-scoped token for reading the connect ExecutionContext's
+   * decrypted credentials (oss#535). Populated by the OSS Go handler, whose
+   * EC read RPCs redact secrets for tokenless callers; absent on cloud,
+   * where the discovery activity's ambient connect_sandbox credential
+   * decrypts on its own.
+   */
+  execution_context_token?: string | null;
   invoker_identity_account_id?: string | null;
 }
 

package/dist/activities/execute-cursor/mcp-config.d.ts

@@ -1,30 +0,0 @@
-/**
- * Cursor-specific MCP config mapping.
- *
- * Converts harness-agnostic ResolvedMcpServer into the Cursor SDK's
- * McpServerConfig shape for Agent.create(). The resolution logic lives
- * in shared/mcp-resolver.ts; this module only handles the final transform.
- */
-import type { ResolvedMcpServer } from "../../shared/mcp-resolver.js";
-export type { ResolvedMcpServer, McpResolutionResult } from "../../shared/mcp-resolver.js";
-export { resolveMcpServers, extractMcpServerSlugs, PlaceholderResolutionError, } from "../../shared/mcp-resolver.js";
-/**
- * Cursor SDK MCP server config shape (matches @cursor/sdk McpServerConfig).
- * Defined here to avoid tight coupling to the SDK's internal types.
- */
-export type CursorMcpServerConfig = {
-    type?: "stdio";
-    command: string;
-    args?: string[];
-    env?: Record<string, string>;
-    cwd?: string;
-} | {
-    type?: "http" | "sse";
-    url: string;
-    headers?: Record<string, string>;
-};
-/**
- * Transform resolved MCP servers into the Cursor SDK's mcpServers config
- * for Agent.create().
- */
-export declare function toCursorMcpConfig(servers: ResolvedMcpServer[]): Record<string, CursorMcpServerConfig>;

package/dist/activities/execute-cursor/mcp-config.js

@@ -1,39 +0,0 @@
-/**
- * Cursor-specific MCP config mapping.
- *
- * Converts harness-agnostic ResolvedMcpServer into the Cursor SDK's
- * McpServerConfig shape for Agent.create(). The resolution logic lives
- * in shared/mcp-resolver.ts; this module only handles the final transform.
- */
-export { resolveMcpServers, extractMcpServerSlugs, PlaceholderResolutionError, } from "../../shared/mcp-resolver.js";
-/**
- * Transform resolved MCP servers into the Cursor SDK's mcpServers config
- * for Agent.create().
- */
-export function toCursorMcpConfig(servers) {
-    const result = {};
-    for (const server of servers) {
-        if (server.connectionType === "stdio") {
-            if (!server.command)
-                continue;
-            result[server.slug] = {
-                type: "stdio",
-                command: server.command,
-                args: server.args,
-                env: server.env,
-                cwd: server.cwd,
-            };
-        }
-        else {
-            if (!server.url)
-                continue;
-            result[server.slug] = {
-                type: server.connectionType,
-                url: server.url,
-                headers: server.headers,
-            };
-        }
-    }
-    return result;
-}
-//# sourceMappingURL=mcp-config.js.map

package/dist/activities/execute-cursor/mcp-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-config.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/mcp-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAoBtC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA4B;IAE5B,MAAM,MAAM,GAA0C,EAAE,CAAC;IAEzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,SAAS;YAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;aAChB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,GAAG;gBAAE,SAAS;YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,IAAI,EAAE,MAAM,CAAC,cAAc;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/src/activities/execute-cursor/mcp-config.ts

@@ -1,66 +0,0 @@
-/**
- * Cursor-specific MCP config mapping.
- *
- * Converts harness-agnostic ResolvedMcpServer into the Cursor SDK's
- * McpServerConfig shape for Agent.create(). The resolution logic lives
- * in shared/mcp-resolver.ts; this module only handles the final transform.
- */
-
-import type { ResolvedMcpServer } from "../../shared/mcp-resolver.js";
-
-export type { ResolvedMcpServer, McpResolutionResult } from "../../shared/mcp-resolver.js";
-export {
-  resolveMcpServers,
-  extractMcpServerSlugs,
-  PlaceholderResolutionError,
-} from "../../shared/mcp-resolver.js";
-
-/**
- * Cursor SDK MCP server config shape (matches @cursor/sdk McpServerConfig).
- * Defined here to avoid tight coupling to the SDK's internal types.
- */
-export type CursorMcpServerConfig =
-  | {
-      type?: "stdio";
-      command: string;
-      args?: string[];
-      env?: Record<string, string>;
-      cwd?: string;
-    }
-  | {
-      type?: "http" | "sse";
-      url: string;
-      headers?: Record<string, string>;
-    };
-
-/**
- * Transform resolved MCP servers into the Cursor SDK's mcpServers config
- * for Agent.create().
- */
-export function toCursorMcpConfig(
-  servers: ResolvedMcpServer[],
-): Record<string, CursorMcpServerConfig> {
-  const result: Record<string, CursorMcpServerConfig> = {};
-
-  for (const server of servers) {
-    if (server.connectionType === "stdio") {
-      if (!server.command) continue;
-      result[server.slug] = {
-        type: "stdio",
-        command: server.command,
-        args: server.args,
-        env: server.env,
-        cwd: server.cwd,
-      };
-    } else {
-      if (!server.url) continue;
-      result[server.slug] = {
-        type: server.connectionType,
-        url: server.url,
-        headers: server.headers,
-      };
-    }
-  }
-
-  return result;
-}