@stigmer/runner 3.14.1 → 3.15.1

package/src/activities/execute-cursor/__tests__/approval-decisions-agree.test.ts

@@ -0,0 +1,90 @@
+/**
+ * Two readers of one fact must agree: the turn runtime reads the adjudicated
+ * approvals as the VERDICT (`harness/turn-context.ts` `approvalDecisionsOf`,
+ * the `TurnInput.approvalDecisions` the contract carries) and this adapter
+ * reads the same rows for the FACTS beside the verdict (the pending-approval
+ * protos the grant builder and the reinvocation prompt render, the content
+ * digest that authorizes an approved edit by its exact bytes —
+ * `reconstructAdjudicatedApprovals`). The contract's rule is that an adapter
+ * never re-derives the verdict itself, so the two functions must select the
+ * same rows in the same order or the grants would be minted for a different
+ * set than the runtime decided on.
+ *
+ * Lives on the adapter's side because `src/harness/` never imports
+ * `src/activities/`, tests included (`harness/__tests__/import-direction.test.ts`).
+ */
+
+import { describe, expect, it } from "vitest";
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentMessageSchema, ToolCallSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+import { ApprovalAction, MessageType, ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+
+import { approvalDecisionsOf } from "../../../harness/turn-context.js";
+import { reconstructAdjudicatedApprovals } from "../approval-state.js";
+
+describe("the runtime's approvalDecisionsOf and the adapter's reconstructAdjudicatedApprovals", () => {
+  it("select the same rows in the same order over every row shape a transcript carries", () => {
+    const status = create(AgentExecutionStatusSchema, {
+      messages: [
+        create(AgentMessageSchema, {
+          type: MessageType.MESSAGE_AI,
+          toolCalls: [
+            create(ToolCallSchema, {
+              id: "tc-approved",
+              name: "Shell",
+              status: ToolCallStatus.TOOL_CALL_WAITING_APPROVAL,
+              approvalAction: ApprovalAction.APPROVE,
+              approvalContentDigest: "sha256:approved",
+            }),
+            create(ToolCallSchema, {
+              id: "tc-undecided",
+              name: "Shell",
+              status: ToolCallStatus.TOOL_CALL_WAITING_APPROVAL,
+              approvalAction: ApprovalAction.UNSPECIFIED,
+            }),
+          ],
+        }),
+        create(AgentMessageSchema, {
+          type: MessageType.MESSAGE_AI,
+          toolCalls: [
+            create(ToolCallSchema, {
+              id: "tc-completed",
+              name: "Read",
+              status: ToolCallStatus.TOOL_CALL_COMPLETED,
+              approvalAction: ApprovalAction.APPROVE,
+            }),
+            create(ToolCallSchema, {
+              id: "tc-skipped",
+              name: "Write",
+              status: ToolCallStatus.TOOL_CALL_WAITING_APPROVAL,
+              approvalAction: ApprovalAction.SKIP,
+            }),
+            create(ToolCallSchema, {
+              id: "tc-rejected",
+              name: "Write",
+              status: ToolCallStatus.TOOL_CALL_WAITING_APPROVAL,
+              approvalAction: ApprovalAction.REJECT,
+            }),
+          ],
+        }),
+      ],
+    });
+
+    const runtime = approvalDecisionsOf(status);
+    const adapter = reconstructAdjudicatedApprovals(status.messages);
+
+    expect([...runtime.entries()]).toEqual([...adapter.decisions.entries()]);
+    expect(
+      adapter.pendingApprovals.map((pa) => pa.toolCallId),
+      "the adapter's row facts cover exactly the rows the runtime decided on",
+    ).toEqual([...runtime.keys()]);
+    expect([...runtime.keys()]).toEqual(["tc-approved", "tc-skipped", "tc-rejected"]);
+  });
+
+  it("both read nothing from a fresh transcript", () => {
+    const status = create(AgentExecutionStatusSchema, {});
+    expect(approvalDecisionsOf(status).size).toBe(0);
+    expect(reconstructAdjudicatedApprovals(status.messages).decisions.size).toBe(0);
+  });
+});

package/src/activities/execute-cursor/__tests__/build-prompt.test.ts

@@ -12,8 +12,8 @@ import { create } from "@bufbuild/protobuf";
 import { ApprovalAction, InteractionMode } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import { PendingApprovalSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/approval_pb";
 
-import { appendStructuredOutputDirective, buildPrompt, isHitlReinvocation, primarySendCarriesImages, promptCarriesStandingContext } from "../index.js";
-import type { BuildPromptInput } from "../index.js";
+import { appendStructuredOutputDirective, buildPrompt, isHitlReinvocation, primarySendCarriesImages, promptCarriesStandingContext } from "../prompt-builder.js";
+import type { BuildPromptInput } from "../prompt-builder.js";
 import { buildReinvocationPrompt, formatInteractionModePrefix, formatImplementPlanSection, formatToolApprovalProtocol, buildToolApprovalRuleFile } from "../prompt-builder.js";
 import { PLAN_MODE_DIRECTIVE } from "../../../shared/plan-mode-prompt.js";
 import type { AgentResolution, AgentResolutionReason } from "../session-lifecycle.js";
@@ -38,7 +38,7 @@ function resolution(
 function input(overrides: Partial<BuildPromptInput>): BuildPromptInput {
   return {
     resolution: resolution("local", "resumed_successfully"),
-    approvalDecisions: undefined,
+    approvalDecisions: new Map(),
     instructions: "You are a test agent.",
     userMessage: USER_MESSAGE,
     skills: [],
@@ -357,7 +357,7 @@ describe("buildPrompt", () => {
         const prompt = buildPrompt(
           input({
             resolution: resolution("local", reason),
-            approvalDecisions: hitl ? hitlDecisions : undefined,
+            approvalDecisions: hitl ? hitlDecisions : new Map(),
             pendingApprovals: hitl ? hitlApprovals : [],
             recalledMemories: { facts: ["Prefers OpenTofu."] },
           }),
@@ -395,8 +395,7 @@ describe("buildPrompt", () => {
 });
 
 describe("isHitlReinvocation (paired with resolution.reason at every consumer — issue #366)", () => {
-  it("is false with no decisions and false with an empty map", () => {
-    expect(isHitlReinvocation(undefined)).toBe(false);
+  it("is false with an empty map (the shape a turn with no adjudicated approvals carries)", () => {
     expect(isHitlReinvocation(new Map())).toBe(false);
   });
 
@@ -504,8 +503,8 @@ describe("HITL recovery — fresh agent mid-HITL (issue #366)", () => {
     // resolution-time resume failure.
     expect(primarySendCarriesImages(decisions(), "created_after_resume_failure")).toBe(true);
     // Non-HITL turns always carry the message's images, resumed or not.
-    expect(primarySendCarriesImages(undefined, "resumed_successfully")).toBe(true);
-    expect(primarySendCarriesImages(undefined, "created_first_execution")).toBe(true);
+    expect(primarySendCarriesImages(new Map(), "resumed_successfully")).toBe(true);
+    expect(primarySendCarriesImages(new Map(), "created_first_execution")).toBe(true);
   });
 
   it("the structured-output directive is a pure append shared by the primary and recovery sends — absent schema, absent suffix", () => {

package/src/activities/execute-cursor/__tests__/capture-flow.test.ts

@@ -44,7 +44,7 @@ import {
   ToolCallStatus,
 } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import {
-  applyCaptureDecisions,
+  CURSOR_FILE_REVIEW_IDENTITY,
   captureBaselineToLedger,
   captureTurnToLedger,
 } from "../capture-flow.js";
@@ -52,6 +52,33 @@ import { toolIdentity, primaryToken } from "../approval-state.js";
 import { contentDigest } from "../../../shared/file-tools.js";
 import { buildObservationStagingScript, casObservationsDir } from "../cas-observations.js";
 import { makeInMemoryArtifactStorage } from "../../../__test-utils__/fake-artifact-storage.js";
+import { applyCaptureDecisions as sharedApplyCaptureDecisions } from "../../../shared/filereview/capture.js";
+import { casBlobReader } from "../../../shared/filereview/cas-substrate.js";
+import type { ArtifactStorage } from "../../../shared/artifact-storage.js";
+import type { FileChangeSet } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
+
+/**
+ * The resume reconcile as the turn runtime runs it for this harness
+ * (`harness/turn-context.ts` `reconcileReinvocation`): the shared reconcile
+ * under Cursor's file-review identity, with the CAS blob reader derived from
+ * the same storage. Bound here so every resume case below proves the Cursor
+ * pair (harness id, excluded gate paths) over the shared code, exactly as
+ * production composes it.
+ */
+function applyCaptureDecisions(opts: {
+  readonly status: AgentExecutionStatus;
+  readonly gitRoot: string;
+  readonly executionId: string;
+  readonly changeSet: FileChangeSet;
+  readonly storage?: ArtifactStorage;
+  readonly gitWorkspace?: boolean;
+}) {
+  return sharedApplyCaptureDecisions({
+    ...opts,
+    ...CURSOR_FILE_REVIEW_IDENTITY,
+    readBlob: opts.storage ? casBlobReader(opts.storage) : undefined,
+  });
+}
 
 const execFileAsync = promisify(execFile);
 const EXEC_ID = "exec-capflow-1";

package/src/activities/execute-cursor/__tests__/deny-gate-exact-apply.test.ts

@@ -50,7 +50,7 @@ import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
-import { applyApprovedWholeFileWrites, excludeAppliedFromGrants } from "../exact-apply.js";
+import { applyApprovedWholeFileWrites, excludeAppliedFromGrants } from "../../../shared/exact-apply.js";
 import { reconstructAdjudicatedApprovals, buildApprovalGrants } from "../approval-state.js";
 import type { ApprovalGrant } from "../approval-state.js";
 import { LocalWorkspaceBackend } from "../../../shared/workspace/local-backend.js";

package/src/activities/execute-cursor/__tests__/fetch-interceptor.test.ts

@@ -19,7 +19,7 @@ describe("fetch-interceptor", () => {
   let calls: CapturedCall[];
   let installFetchInterceptor: typeof import("../fetch-interceptor.js").installFetchInterceptor;
   let uninstallFetchInterceptor: typeof import("../fetch-interceptor.js").uninstallFetchInterceptor;
-  let getExecutionContext: typeof import("../fetch-interceptor.js").getExecutionContext;
+  let getExecutionContext: typeof import("../../../shared/execution-context.js").getExecutionContext;
 
   beforeEach(async () => {
     calls = [];
@@ -40,7 +40,9 @@ describe("fetch-interceptor", () => {
     const mod = await import("../fetch-interceptor.js");
     installFetchInterceptor = mod.installFetchInterceptor;
     uninstallFetchInterceptor = mod.uninstallFetchInterceptor;
-    getExecutionContext = mod.getExecutionContext;
+    // The store lives in shared/ and must be the SAME fresh instance the
+    // interceptor just imported, so it is resolved after the reset too.
+    getExecutionContext = (await import("../../../shared/execution-context.js")).getExecutionContext;
   });
 
   afterEach(() => {
@@ -50,7 +52,7 @@ describe("fetch-interceptor", () => {
 
   describe("Connect-RPC paths via fetch (BiDi proxy auth injection)", () => {
     beforeEach(() => {
-      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, stigmerToken: STIGMER_TOKEN });
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: { current: STIGMER_TOKEN } });
     });
 
     it("injects x-stigmer-auth on /aiserver.v1 path targeting proxy endpoint", async () => {
@@ -139,7 +141,7 @@ describe("fetch-interceptor", () => {
 
   describe("REST path URL rewriting (existing behavior)", () => {
     beforeEach(() => {
-      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, stigmerToken: STIGMER_TOKEN });
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: { current: STIGMER_TOKEN } });
     });
 
     it("rewrites Cursor-domain REST URLs and replaces auth", async () => {
@@ -171,9 +173,65 @@ describe("fetch-interceptor", () => {
     });
   });
 
+  describe("the token ref is read per request (the root rotates it in place; Q-S2-7)", () => {
+    let proxyTokenRef: { current: string | null };
+
+    beforeEach(() => {
+      proxyTokenRef = { current: STIGMER_TOKEN };
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef });
+    });
+
+    it("a rotation reaches the next REST rewrite and the next BiDi-auth fetch without a call into the module", async () => {
+      proxyTokenRef.current = "refreshed-stigmer-jwt-token";
+
+      await globalThis.fetch("https://api.cursor.com/v1/models", { headers: { authorization: "Bearer original-key" } });
+      await globalThis.fetch(`${PROXY_ENDPOINT}/aiserver.v1.AnalyticsService/BootstrapStatsig`, { method: "POST" });
+
+      expect(calls).toHaveLength(2);
+      expect(new Headers(calls[0].init?.headers).get("authorization")).toBe("Bearer refreshed-stigmer-jwt-token");
+      expect(new Headers(calls[1].init?.headers).get("x-stigmer-auth")).toBe("Bearer refreshed-stigmer-jwt-token");
+    });
+
+    it("an emptied ref sends no proxy credential and never leaks the SDK's own authorization to the proxy", async () => {
+      proxyTokenRef.current = null;
+
+      await globalThis.fetch("https://api.cursor.com/v1/models", { headers: { authorization: "Bearer cursor-secret" } });
+      await globalThis.fetch(`${PROXY_ENDPOINT}/aiserver.v1.AnalyticsService/BootstrapStatsig`, { method: "POST" });
+
+      expect(new Headers(calls[0].init?.headers).get("authorization")).toBeNull();
+      expect(new Headers(calls[1].init?.headers).get("x-stigmer-auth")).toBeNull();
+    });
+  });
+
+  describe("install guard", () => {
+    it("a proxy endpoint with no bound ref fails the install, as a missing token always has, and leaves fetch untouched", () => {
+      const before = globalThis.fetch;
+      expect(() => installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: undefined })).toThrow(
+        /STIGMER_TOKEN is required when STIGMER_PROXY_ENDPOINT is set/,
+      );
+      expect(() => installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: { current: null } })).toThrow(
+        /STIGMER_TOKEN is required when STIGMER_PROXY_ENDPOINT is set/,
+      );
+      expect(globalThis.fetch).toBe(before);
+    });
+
+    it("is idempotent: a second install rebinds the ref and keeps delegating to the fetch captured at load", async () => {
+      const first = { current: "first-token" };
+      const second = { current: "second-token" };
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: first });
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: second });
+
+      await globalThis.fetch(`${PROXY_ENDPOINT}/aiserver.v1.AnalyticsService/BootstrapStatsig`, { method: "POST" });
+
+      // One hop to the captured fetch (a self-capture would recurse or double-wrap).
+      expect(calls).toHaveLength(1);
+      expect(new Headers(calls[0].init?.headers).get("x-stigmer-auth")).toBe("Bearer second-token");
+    });
+  });
+
   describe("timed REST path timing", () => {
     beforeEach(() => {
-      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, stigmerToken: STIGMER_TOKEN });
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: { current: STIGMER_TOKEN } });
     });
 
     /**
@@ -284,7 +342,7 @@ describe("fetch-interceptor", () => {
 
   describe("passthrough (no interception)", () => {
     beforeEach(() => {
-      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, stigmerToken: STIGMER_TOKEN });
+      installFetchInterceptor({ proxyEndpoint: PROXY_ENDPOINT, proxyTokenRef: { current: STIGMER_TOKEN } });
     });
 
     it("does NOT intercept Connect-RPC paths on non-proxy hosts", async () => {

package/src/activities/execute-cursor/__tests__/hermetic/deny-and-retry.test.ts

@@ -69,8 +69,8 @@ import {
   runCursorTurn,
   runWorkspaceHook,
   sessionWorkspaceDir,
-  stubRegistryFetch,
 } from "../../__test-utils__/hermetic-cursor.js";
+import { stubRegistryFetch } from "../../../../__test-utils__/model-registry-fixture.js";
 
 const AGENT_ID = "agent-hermetic-deny-0001";
 const RUN_1 = "run-hermetic-deny-0001";

package/src/activities/execute-cursor/__tests__/hermetic/file-review-capture.test.ts

@@ -62,8 +62,8 @@ import {
   localPathEntry,
   runCursorTurn,
   runWorkspaceHook,
-  stubRegistryFetch,
 } from "../../__test-utils__/hermetic-cursor.js";
+import { stubRegistryFetch } from "../../../../__test-utils__/model-registry-fixture.js";
 
 const AGENT_ID = "agent-hermetic-capture-0001";
 const RUN_ID = "run-hermetic-capture-0001";

package/src/activities/execute-cursor/__tests__/hermetic/goldens/cost-cap.status.json

@@ -0,0 +1,53 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_AI",
+      "content": "Reading the whole repository first.",
+      "timestamp": "2026-01-01T00:00:02.000Z"
+    },
+    {
+      "type": "MESSAGE_SYSTEM",
+      "content": "The agent reached the cost limit for this message. Work completed so far has been saved. Send another message to continue where the agent left off.",
+      "timestamp": "2026-01-01T00:00:03.000Z"
+    }
+  ],
+  "phase": "EXECUTION_TERMINATED",
+  "error": "Agent reached the cost limit for this message (~$0.6000 of the $0.50 budget). Send another message to continue.",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:03.000Z",
+  "streamingUsage": {
+    "inputTokens": "600000",
+    "totalTokens": "600000",
+    "turnCount": 1,
+    "estimatedCostUsd": 0.6,
+    "model": "composer-2.5",
+    "observedAt": "2026-01-01T00:00:03.000Z",
+    "requestedServiceTier": "SERVICE_TIER_STANDARD",
+    "requestedModelParams": "[{\"id\":\"fast\",\"value\":\"false\"},{\"id\":\"thinking\",\"value\":\"false\"}]",
+    "requestedThinkingMode": "THINKING_MODE_DISABLED"
+  },
+  "fileReviewEventStream": {
+    "executionId": "aex_hermetic_0001",
+    "events": [
+      {
+        "eventId": "aex_hermetic_0001:0:aex_hermetic_0001:0:FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "changeSetId": "aex_hermetic_0001:0",
+        "eventType": "FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "timestamp": "2026-01-01T00:00:00.000Z",
+        "actor": "runner",
+        "baselineCaptured": {
+          "changeSetId": "aex_hermetic_0001:0",
+          "turnId": "aex_hermetic_0001:0",
+          "harnessId": "cursor",
+          "baselineSnapshot": {
+            "kind": "SNAPSHOT_KIND_CAS_MANIFEST"
+          }
+        }
+      }
+    ]
+  },
+  "fileChangeProgress": {
+    "changeSetId": "aex_hermetic_0001:0",
+    "capturedAt": "2026-01-01T00:00:01.000Z"
+  }
+}

package/src/activities/execute-cursor/__tests__/hermetic/goldens/pause.status.json

@@ -8,12 +8,7 @@
     {
       "type": "MESSAGE_SYSTEM",
       "content": "Execution paused by user. Use resume to continue.",
-      "timestamp": "2026-01-01T00:00:04.000Z"
-    },
-    {
-      "type": "MESSAGE_SYSTEM",
-      "content": "Execution paused by user. Use resume to continue.",
-      "timestamp": "2026-01-01T00:00:04.000Z"
+      "timestamp": "2026-01-01T00:00:03.000Z"
     }
   ],
   "phase": "EXECUTION_PAUSED",

package/src/activities/execute-cursor/__tests__/hermetic/goldens/platform-stop.status.json

@@ -0,0 +1,56 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_AI",
+      "content": "Starting the suite.",
+      "timestamp": "2026-01-01T00:00:02.000Z",
+      "toolCalls": [
+        {
+          "id": "call-hermetic-platformstop-0001",
+          "name": "read",
+          "args": {
+            "path": "package.json"
+          },
+          "result": "{\"name\":\"demo\"}",
+          "status": "TOOL_CALL_COMPLETED",
+          "startedAt": "2026-01-01T00:00:03.000Z",
+          "completedAt": "2026-01-01T00:00:04.000Z",
+          "argsPreview": "{\"path\":\"package.json\"}",
+          "toolKind": "TOOL_KIND_FILE_READ"
+        }
+      ]
+    },
+    {
+      "type": "MESSAGE_SYSTEM",
+      "content": "Execution stopped by the platform.",
+      "timestamp": "2026-01-01T00:00:04.000Z"
+    }
+  ],
+  "phase": "EXECUTION_COMPLETED",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:04.000Z",
+  "fileReviewEventStream": {
+    "executionId": "aex_hermetic_0001",
+    "events": [
+      {
+        "eventId": "aex_hermetic_0001:0:aex_hermetic_0001:0:FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "changeSetId": "aex_hermetic_0001:0",
+        "eventType": "FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "timestamp": "2026-01-01T00:00:00.000Z",
+        "actor": "runner",
+        "baselineCaptured": {
+          "changeSetId": "aex_hermetic_0001:0",
+          "turnId": "aex_hermetic_0001:0",
+          "harnessId": "cursor",
+          "baselineSnapshot": {
+            "kind": "SNAPSHOT_KIND_CAS_MANIFEST"
+          }
+        }
+      }
+    ]
+  },
+  "fileChangeProgress": {
+    "changeSetId": "aex_hermetic_0001:0",
+    "capturedAt": "2026-01-01T00:00:01.000Z"
+  }
+}

package/src/activities/execute-cursor/__tests__/hermetic/goldens/recovery-transport-timeout.status.json

@@ -0,0 +1,48 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_AI",
+      "content": "There are three open pull requests: #12, #15 and #18.",
+      "timestamp": "2026-01-01T00:00:05.000Z"
+    }
+  ],
+  "phase": "EXECUTION_COMPLETED",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:07.000Z",
+  "streamingUsage": {
+    "inputTokens": "2200",
+    "outputTokens": "30",
+    "totalTokens": "2230",
+    "turnCount": 1,
+    "estimatedCostUsd": 0.00232,
+    "model": "composer-2.5",
+    "observedAt": "2026-01-01T00:00:06.000Z",
+    "requestedServiceTier": "SERVICE_TIER_STANDARD",
+    "requestedModelParams": "[{\"id\":\"fast\",\"value\":\"false\"},{\"id\":\"thinking\",\"value\":\"false\"}]",
+    "requestedThinkingMode": "THINKING_MODE_DISABLED"
+  },
+  "fileReviewEventStream": {
+    "executionId": "aex_hermetic_0001",
+    "events": [
+      {
+        "eventId": "aex_hermetic_0001:0:aex_hermetic_0001:0:FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "changeSetId": "aex_hermetic_0001:0",
+        "eventType": "FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "timestamp": "2026-01-01T00:00:00.000Z",
+        "actor": "runner",
+        "baselineCaptured": {
+          "changeSetId": "aex_hermetic_0001:0",
+          "turnId": "aex_hermetic_0001:0",
+          "harnessId": "cursor",
+          "baselineSnapshot": {
+            "kind": "SNAPSHOT_KIND_CAS_MANIFEST"
+          }
+        }
+      }
+    ]
+  },
+  "fileChangeProgress": {
+    "changeSetId": "aex_hermetic_0001:0",
+    "capturedAt": "2026-01-01T00:00:01.000Z"
+  }
+}

package/src/activities/execute-cursor/__tests__/hermetic/goldens/resolution-error.status.json

@@ -0,0 +1,18 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_SYSTEM",
+      "content": "Internal system error occurred. Please contact support if this issue persists.",
+      "timestamp": "2026-01-01T00:00:00.000Z"
+    },
+    {
+      "type": "MESSAGE_SYSTEM",
+      "content": "Error details: [Error] hermetic fault injected at getAgent",
+      "timestamp": "2026-01-01T00:00:00.000Z"
+    }
+  ],
+  "phase": "EXECUTION_FAILED",
+  "error": "Execution failed: [Error] hermetic fault injected at getAgent",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:00.000Z"
+}

package/src/activities/execute-cursor/__tests__/hermetic/goldens/run-cancelled.status.json

@@ -0,0 +1,36 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_AI",
+      "content": "Looking at the pull requests.",
+      "timestamp": "2026-01-01T00:00:02.000Z"
+    }
+  ],
+  "phase": "EXECUTION_CANCELLED",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:03.000Z",
+  "fileReviewEventStream": {
+    "executionId": "aex_hermetic_0001",
+    "events": [
+      {
+        "eventId": "aex_hermetic_0001:0:aex_hermetic_0001:0:FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "changeSetId": "aex_hermetic_0001:0",
+        "eventType": "FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "timestamp": "2026-01-01T00:00:00.000Z",
+        "actor": "runner",
+        "baselineCaptured": {
+          "changeSetId": "aex_hermetic_0001:0",
+          "turnId": "aex_hermetic_0001:0",
+          "harnessId": "cursor",
+          "baselineSnapshot": {
+            "kind": "SNAPSHOT_KIND_CAS_MANIFEST"
+          }
+        }
+      }
+    ]
+  },
+  "fileChangeProgress": {
+    "changeSetId": "aex_hermetic_0001:0",
+    "capturedAt": "2026-01-01T00:00:01.000Z"
+  }
+}

package/src/activities/execute-cursor/__tests__/hermetic/goldens/run-error-non-retryable.status.json

@@ -0,0 +1,37 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_AI",
+      "content": "Checking the repository.",
+      "timestamp": "2026-01-01T00:00:02.000Z"
+    }
+  ],
+  "phase": "EXECUTION_FAILED",
+  "error": "UNAUTHENTICATED: invalid api key [category=auth, source=sdk, retryable=false]",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:03.000Z",
+  "fileReviewEventStream": {
+    "executionId": "aex_hermetic_0001",
+    "events": [
+      {
+        "eventId": "aex_hermetic_0001:0:aex_hermetic_0001:0:FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "changeSetId": "aex_hermetic_0001:0",
+        "eventType": "FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "timestamp": "2026-01-01T00:00:00.000Z",
+        "actor": "runner",
+        "baselineCaptured": {
+          "changeSetId": "aex_hermetic_0001:0",
+          "turnId": "aex_hermetic_0001:0",
+          "harnessId": "cursor",
+          "baselineSnapshot": {
+            "kind": "SNAPSHOT_KIND_CAS_MANIFEST"
+          }
+        }
+      }
+    ]
+  },
+  "fileChangeProgress": {
+    "changeSetId": "aex_hermetic_0001:0",
+    "capturedAt": "2026-01-01T00:00:01.000Z"
+  }
+}

package/src/activities/execute-cursor/__tests__/hermetic/goldens/sdk-error-at-create.status.json

@@ -0,0 +1,38 @@
+{
+  "messages": [
+    {
+      "type": "MESSAGE_SYSTEM",
+      "content": "Internal system error occurred. Please contact support if this issue persists.",
+      "timestamp": "2026-01-01T00:00:00.000Z"
+    },
+    {
+      "type": "MESSAGE_SYSTEM",
+      "content": "Error details: Cursor API rejected the request: invalid API key [category=auth, source=sdk, retryable=false]",
+      "timestamp": "2026-01-01T00:00:00.000Z"
+    }
+  ],
+  "phase": "EXECUTION_FAILED",
+  "error": "Cursor API rejected the request: invalid API key [category=auth, source=sdk, retryable=false]",
+  "startedAt": "2026-01-01T00:00:00.000Z",
+  "completedAt": "2026-01-01T00:00:00.000Z",
+  "fileReviewEventStream": {
+    "executionId": "aex_hermetic_0001",
+    "events": [
+      {
+        "eventId": "aex_hermetic_0001:0:aex_hermetic_0001:0:FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "changeSetId": "aex_hermetic_0001:0",
+        "eventType": "FILE_REVIEW_EVENT_TYPE_BASELINE_CAPTURED",
+        "timestamp": "2026-01-01T00:00:00.000Z",
+        "actor": "runner",
+        "baselineCaptured": {
+          "changeSetId": "aex_hermetic_0001:0",
+          "turnId": "aex_hermetic_0001:0",
+          "harnessId": "cursor",
+          "baselineSnapshot": {
+            "kind": "SNAPSHOT_KIND_CAS_MANIFEST"
+          }
+        }
+      }
+    ]
+  }
+}