@stigmer/runner 3.14.0 → 3.15.0

package/dist/__test-utils__/hermetic-activity.js

@@ -0,0 +1,385 @@
+/**
+ * Hermetic activity driver — run a REAL runner activity end to end with no
+ * network, no credentials, and no live Temporal worker, and read back every
+ * status it persisted.
+ *
+ * Why this exists: the runner's activities (`ExecuteCursor`, `ExecuteDeepAgent`)
+ * are the wire contract the control plane's workflow keys on — the phases they
+ * persist, the copy they write, whether they RETURN a slim status or THROW
+ * `CancelledFailure`. Refactoring them safely needs goldens recorded through the
+ * activity whole, not through its modules one at a time. The native harness
+ * tests already run their activity hermetically by mocking three modules at the
+ * boundary (`execute-deep-agent/__tests__/{index,hitl-*,sequential-gate-resume}.test.ts`);
+ * this module is that convention made reusable, harness-agnostic, and driven by
+ * the framework's own activity environment instead of a hand-written stand-in.
+ *
+ * What is generic here and what is not: everything an activity touches that is
+ * NOT the vendor SDK — the Temporal `Context`, the control-plane client, the
+ * runner-owned `~/.stigmer` tree, artifact storage, the model registry, the
+ * clock, the worker-shutdown signal — is set up here. The vendor SDK double
+ * belongs to the harness (`activities/execute-cursor/__test-utils__/scripted-*.ts`),
+ * the same split as `approval-contract/` (runner-wide kit) + each harness's
+ * `gateway-substrate.ts`.
+ *
+ * Three substitutions, and why each is shaped the way it is:
+ *
+ *  1. `Context.current()` — `MockActivityEnvironment` from `@temporalio/testing`,
+ *     ONE PER INVOCATION. It gives the activity a real `Context` (real
+ *     `cancellationSignal`, real `heartbeat()` surfaced as events, real
+ *     `CancelledFailure` on throw). The native tests' stand-in mints a fresh
+ *     `AbortController` on every `Context.current()` call and so cannot drive a
+ *     pause; production hands each attempt one `Context`, and so does this. The
+ *     environment's documented caveat — once cancelled it stays cancelled — is
+ *     why it is per invocation and never shared.
+ *
+ *  2. `StigmerClient` — the test file mocks the module (`vi.mock` is hoisted and
+ *     must live in the test file; see {@link hermeticStigmerClientModule}) and
+ *     the constructor hands back whatever client {@link bindHermeticClient} bound
+ *     for the current run. The client is `mockStigmerClient` over an
+ *     {@link ExecutionRecord}: `updateStatus` writes back into the record the way
+ *     the server would, so a REINVOCATION (`threadId` set) reads the transcript
+ *     the first invocation persisted — the resume path runs on real data, not on
+ *     a hand-built status.
+ *
+ *  3. The environment — a temp `HOME` (the runner-owned `~/.stigmer` tree,
+ *     `platform-dir.ts` reads `process.env.HOME`), a temp workspace root, local
+ *     artifact storage in a temp dir, and the HITL fingerprint secret pinned by
+ *     env var (`fingerprint-secret.ts` falls back to `randomBytes` — the ONE
+ *     source of randomness on the activity path — and memoizes on first call, so
+ *     the pin must precede the first invocation in the process).
+ *
+ * Determinism: the clock is faked for `Date` ONLY (`vi.useFakeTimers({ toFake:
+ * ["Date"] })`) and TICKS — the harness double advances it a fixed quantum per
+ * script step through {@link ScriptedClock}. Frozen time would make
+ * `delta-enricher.ts`'s persist debounce (`Date.now() - lastPersistTime`) never
+ * elapse and silently skip the mid-stream persist path production always runs;
+ * a ticking clock runs the same path and lands on the same instants every run.
+ * Timers stay real so the periodic heartbeat and the stall watchdog behave.
+ *
+ * Not in scope: this module never edits a production module and never
+ * normalizes output. If a golden is not byte-stable, the volatile source is
+ * controlled at its origin or the surprise is escalated — never redacted here.
+ */
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { vi } from "vitest";
+import { MockActivityEnvironment } from "@temporalio/testing";
+import { CancelledFailure } from "@temporalio/activity";
+import { Code, ConnectError } from "@connectrpc/connect";
+import { clone, create } from "@bufbuild/protobuf";
+import { AgentExecutionSchema, AgentExecutionStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ExecutionControlSignal, ExecutionPhase, ToolCallStatus, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { UpdateStatusResponseSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import { SessionSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import { registerWorkerShutdownSignal, signalWorkerShutdown, unregisterWorkerShutdownSignal, } from "../shared/worker-shutdown.js";
+import { mockStigmerClient } from "./mock-client.js";
+/**
+ * An in-memory stand-in for the server's execution row, with the TWO merge
+ * rules and the ONE control lever the activity depends on, and no others:
+ *
+ *  - A status whose phase is UNSPECIFIED is a setup-progress report
+ *    (`reportSetupProgress`): the server keeps `setup_progress` and leaves the
+ *    phase and transcript alone. Modelled as: record the label, change nothing else.
+ *  - Any other status replaces the held status wholesale (the runner is the
+ *    writer of the transcript; the server's own field-ownership merge — approval
+ *    fields it owns — is exercised by the test SETTING `approvalAction` on the
+ *    record between invocations, exactly as `SubmitApproval` would).
+ *  - Every `UpdateStatus` answers a control signal ({@link ExecutionRecordInput.controlSignal});
+ *    the server's STOP is the one instruction that travels back to the runner
+ *    on this channel, and it is a server decision, so it is modelled here and
+ *    not by the test hand-writing the client.
+ *
+ * Every persisted status is also kept in order (`persisted`) so a test can
+ * assert the phase sequence the activity wrote, independent of the final state.
+ */
+export class ExecutionRecord {
+    execution;
+    session;
+    agentInstance;
+    agent;
+    controlSignal;
+    /** Every `updateStatus` payload, in order, snapshotted at write time. */
+    persisted = [];
+    /** Setup-progress labels reported before the stream started, in order. */
+    setupProgress = [];
+    /**
+     * Every `updateSession` payload, in order (the `harness_state_id` write-back),
+     * snapshotted at write time: the activity re-binds the SAME session object on
+     * a fresh-agent recovery, so a live reference would show the second id twice.
+     */
+    sessionUpdates = [];
+    constructor(input) {
+        this.execution = clone(AgentExecutionSchema, input.execution);
+        this.session = input.session;
+        this.agentInstance = input.agentInstance;
+        this.agent = input.agent;
+        this.controlSignal = input.controlSignal ?? (() => ExecutionControlSignal.UNSPECIFIED);
+    }
+    get executionId() {
+        return this.execution.metadata?.id ?? "";
+    }
+    /** The status the server would currently hold (what `getExecution` returns). */
+    get status() {
+        return this.execution.status;
+    }
+    /** The last FULL status written (phase set), or undefined if none yet. */
+    get lastFullStatus() {
+        for (let i = this.persisted.length - 1; i >= 0; i--) {
+            const s = this.persisted[i];
+            if (s.phase !== ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED)
+                return s;
+        }
+        return undefined;
+    }
+    /**
+     * The ORDERED, DISTINCT phases the activity persisted — the deterministic
+     * shape of the persist cadence. The COUNT of persists depends on the
+     * debounce timer and is deliberately not exposed as an assertion surface.
+     */
+    get persistedPhases() {
+        const out = [];
+        for (const s of this.persisted) {
+            if (s.phase === ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED)
+                continue;
+            if (out[out.length - 1] !== s.phase)
+                out.push(s.phase);
+        }
+        return out;
+    }
+    /** Every tool call on the held transcript (top-level messages), in order. */
+    toolCalls() {
+        return this.execution.status?.messages.flatMap((m) => m.toolCalls) ?? [];
+    }
+    /** The tool calls currently paused for a decision. */
+    waitingToolCalls() {
+        return this.toolCalls().filter((tc) => tc.status === ToolCallStatus.TOOL_CALL_WAITING_APPROVAL);
+    }
+    /**
+     * What the server's `SubmitApproval` does to the row: record the decision on
+     * the tool call the runner wrote. The runner owns `status`; the server owns
+     * `approval_action` (field ownership, 005 mandate 2) — so this is the ONE
+     * place a test writes it, and the status stays WAITING_APPROVAL until the
+     * resumed turn runs the tool, exactly as in production.
+     */
+    decideWaitingToolCalls(action, decidedAt) {
+        const waiting = this.waitingToolCalls();
+        for (const tc of waiting) {
+            tc.approvalAction = action;
+            tc.approvalDecidedAt = decidedAt;
+        }
+        return waiting.length;
+    }
+    /**
+     * Apply one `UpdateStatus` write and answer the control signal the server
+     * would. A setup-progress report never carries a signal (the runner ignores
+     * the response there; the server has nothing to say about a label).
+     */
+    applyStatusUpdate(status) {
+        const snapshot = clone(AgentExecutionStatusSchema, status);
+        this.persisted.push(snapshot);
+        if (snapshot.phase === ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED) {
+            if (snapshot.setupProgress?.currentPhase) {
+                this.setupProgress.push(snapshot.setupProgress.currentPhase);
+            }
+            return ExecutionControlSignal.UNSPECIFIED;
+        }
+        this.execution.status = clone(AgentExecutionStatusSchema, snapshot);
+        return this.controlSignal(snapshot);
+    }
+    /**
+     * The control-plane client the activity sees: every read answers from this
+     * record; every write lands in it. Reads the activity makes for optional
+     * facets (execution context, channels, skills) answer the everyday shape —
+     * NOT_FOUND for the execution context (an execution with no env vars), no
+     * channels, no scoped token (the OSS/local posture) — so a scenario opts INTO
+     * a facet by overriding.
+     */
+    client(overrides = {}) {
+        return mockStigmerClient({
+            getExecution: vi.fn(async () => clone(AgentExecutionSchema, this.execution)),
+            getSession: vi.fn(async () => this.session),
+            getAgentInstance: vi.fn(async () => this.agentInstance),
+            getAgent: vi.fn(async () => this.agent),
+            updateStatus: vi.fn(async (_id, status) => {
+                // The activity reads only `.signal`; UNSPECIFIED means "keep going".
+                return create(UpdateStatusResponseSchema, { signal: this.applyStatusUpdate(status) });
+            }),
+            updateSession: vi.fn(async (session) => {
+                this.sessionUpdates.push(clone(SessionSchema, session));
+                return session;
+            }),
+            getExecutionContextByExecutionId: vi.fn(async () => {
+                throw new ConnectError("execution context not found", Code.NotFound);
+            }),
+            ...overrides,
+        });
+    }
+}
+// ---------------------------------------------------------------------------
+// The module-boundary seam for StigmerClient
+// ---------------------------------------------------------------------------
+let boundClient;
+/**
+ * Bind the client the mocked `StigmerClient` constructor hands out for the
+ * current run. Called by the harness driver immediately before invoking the
+ * activity factory (`createCursorActivities(config)` constructs its client
+ * inside the factory, so the bind must precede the factory call).
+ */
+export function bindHermeticClient(client) {
+    boundClient = client;
+}
+/**
+ * The factory a test passes to `vi.mock(".../client/stigmer-client.js", ...)`.
+ * `vi.mock` is hoisted and must appear in the test file itself; the factory can
+ * `await import()` this module. Usage:
+ *
+ * ```ts
+ * vi.mock("../../../../client/stigmer-client.js", async () =>
+ *   (await import("../../../../__test-utils__/hermetic-activity.js")).hermeticStigmerClientModule(),
+ * );
+ * ```
+ */
+export function hermeticStigmerClientModule() {
+    return {
+        StigmerClient: class {
+            constructor() {
+                if (!boundClient) {
+                    throw new Error("hermetic-activity: no StigmerClient bound — call bindHermeticClient(record.client()) " +
+                        "before constructing the activities");
+                }
+                return boundClient;
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// The environment: temp HOME, temp workspace root, local artifact storage
+// ---------------------------------------------------------------------------
+/**
+ * The env-var pins a hermetic run needs, and the reason for each:
+ *  - `HOME`: `platform-dir.ts` roots the runner-owned `~/.stigmer` tree (HITL
+ *    gate dir, session dirs, denial ledger) on it.
+ *  - `ARTIFACT_STORAGE_TYPE=local` + `LOCAL_ARTIFACT_PATH`: a writable local
+ *    store so capture mode and tool-output offload run the production path
+ *    (an absent store flips capture off — a different code path).
+ *  - `STIGMER_RUNNER_HITL_SECRET`: the one randomness source on the activity
+ *    path, pinned so grant tokens and fingerprints are byte-stable.
+ *  - `CURSOR_EVENT_RECORD_DIR` cleared: never write recordings from a test.
+ */
+const PINNED_ENV = {
+    ARTIFACT_STORAGE_TYPE: "local",
+    STIGMER_RUNNER_HITL_SECRET: "hermetic-fixture-secret-do-not-use-in-production",
+};
+const CLEARED_ENV = ["CURSOR_EVENT_RECORD_DIR", "STIGMER_PROXY_ENDPOINT", "STIGMER_CLOUD_API_URL"];
+/**
+ * Create the temp tree and pin the env vars. Call once per test FILE (in
+ * `beforeAll`) — the fingerprint secret is memoized per process on first use,
+ * and vitest isolates files in forks, so per-file is the natural unit.
+ */
+export function createHermeticEnvironment() {
+    const root = mkdtempSync(join(tmpdir(), "stigmer-hermetic-"));
+    const home = join(root, "home");
+    const workspaceRootDir = join(root, "workspaces");
+    const artifactPath = join(root, "artifacts");
+    const saved = new Map();
+    const set = (key, value) => {
+        if (!saved.has(key))
+            saved.set(key, process.env[key]);
+        if (value === undefined)
+            delete process.env[key];
+        else
+            process.env[key] = value;
+    };
+    set("HOME", home);
+    set("LOCAL_ARTIFACT_PATH", artifactPath);
+    for (const [k, v] of Object.entries(PINNED_ENV))
+        set(k, v);
+    for (const k of CLEARED_ENV)
+        set(k, undefined);
+    let disposed = false;
+    return {
+        home,
+        workspaceRootDir,
+        artifactPath,
+        dispose() {
+            if (disposed)
+                return;
+            disposed = true;
+            for (const [k, v] of saved) {
+                if (v === undefined)
+                    delete process.env[k];
+                else
+                    process.env[k] = v;
+            }
+            rmSync(root, { recursive: true, force: true });
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// The clock
+// ---------------------------------------------------------------------------
+/**
+ * A deterministic, TICKING `Date`. Only `Date` is faked; timers stay real (the
+ * periodic heartbeat, the stall watchdog, `withTimeout` all need them). The
+ * harness double calls {@link ScriptedClock.tick} once per script step, so
+ * every `Date.now()`-based decision on the activity path (status timestamps,
+ * the enricher's persist debounce, cache TTLs) sees the same instants run after
+ * run and runs the same branches production runs.
+ */
+export class ScriptedClock {
+    /** A fixed epoch: 2026-01-01T00:00:00.000Z. Chosen for readability in goldens. */
+    static EPOCH_MS = Date.UTC(2026, 0, 1, 0, 0, 0, 0);
+    /** One second per step — well under any stall or cache horizon. */
+    static STEP_MS = 1_000;
+    nowMs = ScriptedClock.EPOCH_MS;
+    install() {
+        vi.useFakeTimers({ toFake: ["Date"], now: this.nowMs });
+    }
+    tick(ms = ScriptedClock.STEP_MS) {
+        this.nowMs += ms;
+        vi.setSystemTime(this.nowMs);
+    }
+    /** Back to the epoch — for a second scenario in the same file. */
+    reset() {
+        this.nowMs = ScriptedClock.EPOCH_MS;
+        vi.setSystemTime(this.nowMs);
+    }
+    uninstall() {
+        vi.useRealTimers();
+    }
+}
+/**
+ * Run one activity function under a fresh `MockActivityEnvironment` and
+ * capture how it ended. `CancelledFailure` is caught like any other throw and
+ * reported as `{ kind: "threw" }` — the throw-vs-return table is the thing
+ * under test, so the driver never interprets it.
+ */
+export async function runActivityHermetically(activity, args, options = {}) {
+    const taskQueue = options.taskQueue ?? "hermetic-test-queue";
+    const env = new MockActivityEnvironment({ taskQueue });
+    const heartbeats = [];
+    env.on("heartbeat", (details) => heartbeats.push(details));
+    // The worker-shutdown signal is process-global per queue; register for this
+    // invocation and always unregister so no state leaks into the next one.
+    registerWorkerShutdownSignal(taskQueue);
+    options.onControls?.({
+        cancel: () => env.cancel(),
+        signalWorkerShutdown: () => signalWorkerShutdown(taskQueue),
+    });
+    try {
+        const value = await env.run(activity, ...args);
+        return { outcome: { kind: "returned", value }, heartbeats, taskQueue };
+    }
+    catch (error) {
+        return { outcome: { kind: "threw", error }, heartbeats, taskQueue };
+    }
+    finally {
+        unregisterWorkerShutdownSignal(taskQueue);
+    }
+}
+/** True when the outcome is a thrown Temporal `CancelledFailure`. */
+export function threwCancelledFailure(outcome) {
+    return outcome.kind === "threw" && outcome.error instanceof CancelledFailure;
+}
+//# sourceMappingURL=hermetic-activity.js.map

package/dist/__test-utils__/hermetic-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermetic-activity.js","sourceRoot":"","sources":["../../src/__test-utils__/hermetic-activity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAG3B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAEL,sBAAsB,EACtB,cAAc,EACd,cAAc,GACf,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AAExG,OAAO,EAAE,aAAa,EAAgB,MAAM,sDAAsD,CAAC;AAInG,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA2BrD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,eAAe;IACjB,SAAS,CAAiB;IAC1B,OAAO,CAAU;IACjB,aAAa,CAAgB;IAC7B,KAAK,CAAQ;IACL,aAAa,CAA2D;IACzF,yEAAyE;IAChE,SAAS,GAA2B,EAAE,CAAC;IAChD,0EAA0E;IACjE,aAAa,GAAa,EAAE,CAAC;IACtC;;;;OAIG;IACM,cAAc,GAAc,EAAE,CAAC;IAExC,YAAY,KAA2B;QACrC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,gFAAgF;IAChF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,0EAA0E;IAC1E,IAAI,cAAc;QAChB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,2BAA2B;gBAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,IAAI,eAAe;QACjB,MAAM,GAAG,GAAqB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,2BAA2B;gBAAE,SAAS;YACrE,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IAC7E,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3E,CAAC;IAED,sDAAsD;IACtD,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B,CAAC,CAAC;IAClG,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB,CAAC,MAAsB,EAAE,SAAiB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,EAAE,CAAC,cAAc,GAAG,MAAM,CAAC;YAC3B,EAAE,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,MAA4B;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,KAAK,KAAK,cAAc,CAAC,2BAA2B,EAAE,CAAC;YAClE,IAAI,QAAQ,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,sBAAsB,CAAC,WAAW,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,YAAoC,EAAE;QAC3C,OAAO,iBAAiB,CAAC;YACvB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5E,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YAC3C,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC;YACvD,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YACvC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,MAA4B,EAAE,EAAE;gBACtE,qEAAqE;gBACrE,OAAO,MAAM,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC,CAAC;YACF,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,OAAgB,EAAE,EAAE;gBAC9C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;gBACxD,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;YACF,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBACjD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,GAAG,SAAS;SACa,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E,IAAI,WAAsC,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,WAAW,GAAG,MAAM,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO;QACL,aAAa,EAAE;YACb;gBACE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CACb,uFAAuF;wBACrF,oCAAoC,CACvC,CAAC;gBACJ,CAAC;gBACD,OAAO,WAAW,CAAC;YACrB,CAAC;SACoC;KACxC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG;IACjB,qBAAqB,EAAE,OAAO;IAC9B,0BAA0B,EAAE,kDAAkD;CACtE,CAAC;AAEX,MAAM,WAAW,GAAG,CAAC,yBAAyB,EAAE,wBAAwB,EAAE,uBAAuB,CAAU,CAAC;AAa5G;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAyB,EAAQ,EAAE;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;YAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAChC,CAAC,CAAC;IACF,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClB,GAAG,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAE/C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,IAAI;QACJ,gBAAgB;QAChB,YAAY;QACZ,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;oBACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACxB,kFAAkF;IAClF,MAAM,CAAU,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,mEAAmE;IACnE,MAAM,CAAU,OAAO,GAAG,KAAK,CAAC;IAExB,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC;IAEvC,OAAO;QACL,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,KAAa,aAAa,CAAC,OAAO;QACrC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACjB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,kEAAkE;IAClE,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC;QACpC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS;QACP,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC;;AAyCH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAA0C,EAC1C,IAAO,EACP,UAA8B,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qBAAqB,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,uBAAuB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,MAAM,UAAU,GAAc,EAAE,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,OAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpE,4EAA4E;IAC5E,wEAAwE;IACxE,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;QAC1B,oBAAoB,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC;KAC5D,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,YAAY,gBAAgB,CAAC;AAC/E,CAAC"}

package/dist/__test-utils__/mock-client.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Shared mock factory for StigmerClient used across test suites.
+ *
+ * StigmerClient is a class (not an interface), so mocks use
+ * `as unknown as StigmerClient` — matching the established pattern
+ * in grpc-retry.test.ts and connect-backfill.test.ts.
+ */
+import type { StigmerClient } from "../client/stigmer-client.js";
+type MockMethods = {
+    [K in keyof StigmerClient]?: StigmerClient[K];
+};
+export declare function mockStigmerClient(overrides?: MockMethods): StigmerClient;
+export {};

package/dist/__test-utils__/mock-client.js

@@ -0,0 +1,45 @@
+/**
+ * Shared mock factory for StigmerClient used across test suites.
+ *
+ * StigmerClient is a class (not an interface), so mocks use
+ * `as unknown as StigmerClient` — matching the established pattern
+ * in grpc-retry.test.ts and connect-backfill.test.ts.
+ */
+import { vi } from "vitest";
+import { ExecutionControlSignal } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+export function mockStigmerClient(overrides = {}) {
+    return {
+        updateStatus: vi.fn().mockResolvedValue({
+            signal: ExecutionControlSignal.UNSPECIFIED,
+        }),
+        getExecution: vi.fn().mockResolvedValue({}),
+        getExecutionContextByExecutionId: vi.fn().mockResolvedValue({}),
+        // No scoped token by default — the OSS/local shape (no runner credential).
+        acquireScopedRunnerToken: vi.fn().mockResolvedValue(undefined),
+        getRunnerScopedToken: vi.fn().mockResolvedValue(undefined),
+        getSession: vi.fn().mockResolvedValue({}),
+        updateSession: vi.fn().mockResolvedValue({}),
+        // No proactive channels by default — the everyday answer for most
+        // agents (DD-006 D2); tests opt in to a channel-bound agent.
+        listMessagingChannels: vi.fn().mockResolvedValue([]),
+        listChannelTemplates: vi.fn().mockResolvedValue([]),
+        getAgent: vi.fn().mockResolvedValue({}),
+        getAgentInstance: vi.fn().mockResolvedValue({}),
+        getMcpServer: vi.fn().mockResolvedValue({}),
+        getMcpServerByReference: vi.fn().mockResolvedValue({}),
+        connectMcpServer: vi.fn().mockResolvedValue({}),
+        getSkill: vi.fn().mockResolvedValue({}),
+        getSkillByReference: vi.fn().mockResolvedValue({}),
+        getSkillArtifact: vi.fn().mockResolvedValue({}),
+        recordLlmCallUsage: vi.fn().mockResolvedValue({}),
+        getWorkflowExecution: vi.fn().mockResolvedValue({}),
+        getWorkflow: vi.fn().mockResolvedValue({}),
+        getWorkflowInstance: vi.fn().mockResolvedValue({}),
+        updateWorkflowExecutionStatus: vi.fn().mockResolvedValue({}),
+        getAgentByReference: vi.fn().mockResolvedValue({}),
+        createSession: vi.fn().mockResolvedValue({}),
+        createAgentExecution: vi.fn().mockResolvedValue({}),
+        ...overrides,
+    };
+}
+//# sourceMappingURL=mock-client.js.map

package/dist/__test-utils__/mock-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-client.js","sourceRoot":"","sources":["../../src/__test-utils__/mock-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AAOtG,MAAM,UAAU,iBAAiB,CAAC,YAAyB,EAAE;IAC3D,OAAO;QACL,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YACtC,MAAM,EAAE,sBAAsB,CAAC,WAAW;SAC3C,CAAC;QACF,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,gCAAgC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/D,2EAA2E;QAC3E,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC9D,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC1D,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,kEAAkE;QAClE,6DAA6D;QAC7D,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpD,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACjD,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,6BAA6B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5D,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClD,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,GAAG,SAAS;KACe,CAAC;AAChC,CAAC"}

package/dist/__test-utils__/mock-workspace.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Shared mock factory for WorkspaceBackend used across test suites.
+ *
+ * Returns a typed mock that satisfies the WorkspaceBackend interface.
+ * Individual tests can override specific methods via the overrides param
+ * or by reassigning the mock after creation.
+ */
+import type { WorkspaceBackend } from "../shared/workspace/types.js";
+type MockOverrides = {
+    [K in keyof Omit<WorkspaceBackend, "rootDir">]?: WorkspaceBackend[K];
+} & {
+    rootDir?: string;
+};
+export declare function mockWorkspaceBackend(overrides?: MockOverrides): WorkspaceBackend;
+export {};

package/dist/__test-utils__/mock-workspace.js

@@ -0,0 +1,21 @@
+/**
+ * Shared mock factory for WorkspaceBackend used across test suites.
+ *
+ * Returns a typed mock that satisfies the WorkspaceBackend interface.
+ * Individual tests can override specific methods via the overrides param
+ * or by reassigning the mock after creation.
+ */
+import { vi } from "vitest";
+export function mockWorkspaceBackend(overrides = {}) {
+    const { rootDir = "/tmp/test-workspace", ...methodOverrides } = overrides;
+    return {
+        rootDir,
+        execute: vi.fn().mockResolvedValue(""),
+        readFile: vi.fn().mockResolvedValue(""),
+        writeFile: vi.fn().mockResolvedValue(undefined),
+        writeFileBuffer: vi.fn().mockResolvedValue(undefined),
+        exists: vi.fn().mockResolvedValue(false),
+        ...methodOverrides,
+    };
+}
+//# sourceMappingURL=mock-workspace.js.map

package/dist/__test-utils__/mock-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-workspace.js","sourceRoot":"","sources":["../../src/__test-utils__/mock-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAO5B,MAAM,UAAU,oBAAoB,CAAC,YAA2B,EAAE;IAChE,MAAM,EAAE,OAAO,GAAG,qBAAqB,EAAE,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC;IAE1E,OAAO;QACL,OAAO;QACP,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC/C,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QACrD,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC;QACxC,GAAG,eAAe;KACnB,CAAC;AACJ,CAAC"}

package/dist/__test-utils__/model-registry-fixture.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The model registry document a hermetic activity run reads, and the `fetch`
+ * stub that serves it and refuses everything else.
+ *
+ * The activity's only HTTP fetch is the model registry (`shared/model-
+ * registry.ts` for vision capability; the Cursor harness's `model-pricing-
+ * data.ts` for pricing). Both fail SOFT to defaults with a 60 s failure
+ * cache, which would make a golden depend on DEFAULT_PRICING and log a
+ * warning on every run, so a hermetic run stubs `fetch` to answer one
+ * registry document — and to THROW for any other URL, so a new network
+ * dependency on the activity path fails the run instead of leaking.
+ *
+ * One entry, `composer-2.5`, priced at round numbers so a golden's
+ * `estimatedCostUsd` is legible (600 000 input tokens = $0.60). The entry is
+ * a Cursor-harness model because that is what the registry lists; the
+ * document itself is the control plane's, read by every harness's runtime.
+ * `parsePricingTable` wants `harness: "cursor"` + `pricing`; `parseRegistry`
+ * wants `id` + `provider` and reads `capabilities.vision`.
+ */
+/** The pinned model of every hermetic run; in the registry document AND in the Cursor double's catalog. */
+export declare const FIXTURE_MODEL = "composer-2.5";
+export declare const REGISTRY_DOCUMENT: {
+    readonly models: readonly [{
+        readonly id: "composer-2.5";
+        readonly displayName: "Composer 2.5 (hermetic fixture)";
+        readonly provider: "cursor";
+        readonly harness: "cursor";
+        readonly costTier: "standard";
+        readonly featured: true;
+        readonly capabilities: {
+            readonly vision: true;
+        };
+        readonly pricing: {
+            readonly inputPricePerMillion: 1;
+            readonly outputPricePerMillion: 4;
+            readonly cacheWritePricePerMillion: 1;
+            readonly cacheReadPricePerMillion: 0.1;
+        };
+        readonly pricingVariants: {
+            readonly fast: {
+                readonly inputPricePerMillion: 3;
+                readonly outputPricePerMillion: 12;
+                readonly cacheWritePricePerMillion: 3;
+                readonly cacheReadPricePerMillion: 0.3;
+            };
+        };
+    }];
+};
+/**
+ * Stub `fetch` to answer the registry document and refuse everything else.
+ * Returns the URLs fetched, for the "no other network" assertion.
+ */
+export declare function stubRegistryFetch(): {
+    readonly urls: string[];
+    restore(): void;
+};

package/dist/__test-utils__/model-registry-fixture.js

@@ -0,0 +1,66 @@
+/**
+ * The model registry document a hermetic activity run reads, and the `fetch`
+ * stub that serves it and refuses everything else.
+ *
+ * The activity's only HTTP fetch is the model registry (`shared/model-
+ * registry.ts` for vision capability; the Cursor harness's `model-pricing-
+ * data.ts` for pricing). Both fail SOFT to defaults with a 60 s failure
+ * cache, which would make a golden depend on DEFAULT_PRICING and log a
+ * warning on every run, so a hermetic run stubs `fetch` to answer one
+ * registry document — and to THROW for any other URL, so a new network
+ * dependency on the activity path fails the run instead of leaking.
+ *
+ * One entry, `composer-2.5`, priced at round numbers so a golden's
+ * `estimatedCostUsd` is legible (600 000 input tokens = $0.60). The entry is
+ * a Cursor-harness model because that is what the registry lists; the
+ * document itself is the control plane's, read by every harness's runtime.
+ * `parsePricingTable` wants `harness: "cursor"` + `pricing`; `parseRegistry`
+ * wants `id` + `provider` and reads `capabilities.vision`.
+ */
+import { vi } from "vitest";
+/** The pinned model of every hermetic run; in the registry document AND in the Cursor double's catalog. */
+export const FIXTURE_MODEL = "composer-2.5";
+export const REGISTRY_DOCUMENT = {
+    models: [
+        {
+            id: FIXTURE_MODEL,
+            displayName: "Composer 2.5 (hermetic fixture)",
+            provider: "cursor",
+            harness: "cursor",
+            costTier: "standard",
+            featured: true,
+            capabilities: { vision: true },
+            pricing: {
+                inputPricePerMillion: 1.0,
+                outputPricePerMillion: 4.0,
+                cacheWritePricePerMillion: 1.0,
+                cacheReadPricePerMillion: 0.1,
+            },
+            pricingVariants: {
+                fast: {
+                    inputPricePerMillion: 3.0,
+                    outputPricePerMillion: 12.0,
+                    cacheWritePricePerMillion: 3.0,
+                    cacheReadPricePerMillion: 0.3,
+                },
+            },
+        },
+    ],
+};
+/**
+ * Stub `fetch` to answer the registry document and refuse everything else.
+ * Returns the URLs fetched, for the "no other network" assertion.
+ */
+export function stubRegistryFetch() {
+    const urls = [];
+    vi.stubGlobal("fetch", vi.fn(async (input) => {
+        const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+        urls.push(url);
+        if (!url.includes("/model-registry")) {
+            throw new Error(`hermetic run attempted a non-registry network call: ${url}`);
+        }
+        return { ok: true, status: 200, json: async () => REGISTRY_DOCUMENT };
+    }));
+    return { urls, restore: () => vi.unstubAllGlobals() };
+}
+//# sourceMappingURL=model-registry-fixture.js.map

package/dist/__test-utils__/model-registry-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-registry-fixture.js","sourceRoot":"","sources":["../../src/__test-utils__/model-registry-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B,2GAA2G;AAC3G,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAE5C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE;QACN;YACE,EAAE,EAAE,aAAa;YACjB,WAAW,EAAE,iCAAiC;YAC9C,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC9B,OAAO,EAAE;gBACP,oBAAoB,EAAE,GAAG;gBACzB,qBAAqB,EAAE,GAAG;gBAC1B,yBAAyB,EAAE,GAAG;gBAC9B,wBAAwB,EAAE,GAAG;aAC9B;YACD,eAAe,EAAE;gBACf,IAAI,EAAE;oBACJ,oBAAoB,EAAE,GAAG;oBACzB,qBAAqB,EAAE,IAAI;oBAC3B,yBAAyB,EAAE,GAAG;oBAC9B,wBAAwB,EAAE,GAAG;iBAC9B;aACF;SACF;KACF;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAA6B,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACpG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,iBAAiB,EAAyB,CAAC;IAC/F,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC;AACxD,CAAC"}