@stigmer/runner 3.15.0 → 3.15.2-dev.20260913223433

package/dist/activities/execute-deep-agent/adapter.js

@@ -0,0 +1,78 @@
+/**
+ * The native deep-agent harness as a `HarnessAdapter` — the worker- and
+ * session-lifetime half of its LangGraph slice, behind the turn runtime's
+ * contract (`harness/types.ts`). One engine turn is `turn.ts`'s
+ * `runDeepAgentTurn`; this module boots and delegates.
+ *
+ * What this adapter owns: the deepagents harness profiles (worker lifetime,
+ * registered once before the first `createDeepAgent`), and one engine turn
+ * (`runTurn`, through `turn.ts`). Everything else about a turn is the
+ * runtime's (`harness/run-turn.ts`).
+ *
+ * THIS MODULE'S STATIC GRAPH IS SDK-FREE, ON PURPOSE. The composition roots
+ * import the harness table (`src/harness-adapters.ts`) BEFORE they boot it,
+ * and that table's static graph must stay connect- and SDK-free (the Cursor
+ * adapter's boot patches `node:http2` before anything dials the control
+ * plane). So `deepagents` and `@langchain/*` — this harness's whole engine —
+ * are loaded with a dynamic import INSIDE `boot`, after the profiles are
+ * registered; a worker that does not serve this harness never pays for
+ * LangChain. `__tests__/adapter-graph-is-sdk-free.test.ts` pins it.
+ *
+ * Nothing is parked per session, and the header says so where the contract
+ * asks: the sqlite saver is opened and closed per turn and the MCP
+ * subprocesses are connected and closed per turn (`turn.ts`), so
+ * `shutdown` and `releaseSession` resolve as no-ops.
+ *
+ * What this adapter never does: throw out of `runTurn` (an engine failure is
+ * `failed` on the `internal` surface; the recursion limit is
+ * `tool_call_limit`; a `CancelledFailure` never exists here), branch on why
+ * `stopSignal` aborted, write a phase or a terminal copy, bind a state id
+ * (the thread id is the runtime's, `deterministic`), or import
+ * `@temporalio/*` (`__tests__/adapter-is-temporal-free.test.ts`).
+ *
+ * Extracted from `index.ts` `createDeepAgentActivities` at S3 M2a on the
+ * Cursor adapter's layout (`execute-cursor/adapter.ts`).
+ */
+import { DEEP_AGENT_CAPABILITIES } from "./deep-agent-capabilities.js";
+/** The config slice this adapter reads per turn, taken at `boot`; a whole `Config` satisfies it. */
+export function resolveDeepAgentConfig(config) {
+    return {
+        checkpointerType: config.checkpointerType,
+        checkpointerProxyEndpoint: config.checkpointerProxyEndpoint,
+        stigmerToken: config.stigmerToken,
+        proxyEndpoint: config.proxyEndpoint,
+        mode: config.mode,
+    };
+}
+export function createDeepAgentAdapter() {
+    let booted;
+    return {
+        name: "deep-agent",
+        capabilities: DEEP_AGENT_CAPABILITIES,
+        /**
+         * Register the harness profiles (deepagents would otherwise auto-inject
+         * an ungated `general-purpose` sub-agent into every graph), then load
+         * the engine slice. Idempotent: a re-boot re-reads the slice; the
+         * registration is once-guarded.
+         */
+        async boot(bootConfig) {
+            // `deepagents-profiles.ts` imports the SDK to register against it, so
+            // it too is loaded here and not at the top of this module.
+            const { registerStigmerDeepagentsProfiles } = await import("./deepagents-profiles.js");
+            registerStigmerDeepagentsProfiles();
+            const { runDeepAgentTurn } = await import("./turn.js");
+            booted = { config: resolveDeepAgentConfig(bootConfig), runDeepAgentTurn };
+        },
+        /** Nothing is held across turns (see the header). */
+        async shutdown() { },
+        /** Nothing is parked per session (see the header); an unknown id is a no-op by construction. */
+        async releaseSession(_sessionId) { },
+        async runTurn(input, sink) {
+            if (booted === undefined) {
+                throw new Error("deep-agent adapter: runTurn before boot (the registry boots every adapter before the worker polls)");
+            }
+            return booted.runDeepAgentTurn(input, sink, booted.config);
+        },
+    };
+}
+//# sourceMappingURL=adapter.js.map

package/dist/activities/execute-deep-agent/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,oGAAoG;AACpG,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,sBAAsB;IACpC,IAAI,MAA0C,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,uBAAuB;QAErC;;;;;WAKG;QACH,KAAK,CAAC,IAAI,CAAC,UAAkB;YAC3B,sEAAsE;YACtE,2DAA2D;YAC3D,MAAM,EAAE,iCAAiC,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACvF,iCAAiC,EAAE,CAAC;YACpC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,GAAG,EAAE,MAAM,EAAE,sBAAsB,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC5E,CAAC;QAED,qDAAqD;QACrD,KAAK,CAAC,QAAQ,KAAmB,CAAC;QAElC,gGAAgG;QAChG,KAAK,CAAC,cAAc,CAAC,UAAkB,IAAkB,CAAC;QAE1D,KAAK,CAAC,OAAO,CAAC,KAAgB,EAAE,IAAc;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;YACxH,CAAC;YACD,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/execute-deep-agent/cas-capture-observer.d.ts

@@ -36,6 +36,7 @@
  * @since File-Change HITL Redesign (Phase 3 — CAS deep-agent wiring); sub-agent
  * gitignored capture parity (Session 26, DD-19)
  */
+import type { CasTouchedSnapshot } from "../../shared/filereview/cas-touched.js";
 /**
  * Pre-turn bytes of each first-touched gitignored path, keyed by workspace-root-
  * relative path. `null` means the path did not exist before the turn (an ADD).
@@ -60,6 +61,13 @@ export declare class CasCaptureObserver {
     });
     /** Gitignored paths the gate refused as secret-like, read at the turn boundary. */
     get blockedSecretPaths(): ReadonlySet<string>;
+    /**
+     * An atomic copy of what has been observed so far — the shape the progress
+     * slice and the turn-boundary capture read (`shared/filereview/cas-touched.ts`).
+     * Copied synchronously, so a sub-agent's concurrent `recordBefore` landing
+     * mid-capture cannot mutate a snapshot a reader is walking.
+     */
+    snapshot(): CasTouchedSnapshot;
     /**
      * Record the pre-turn bytes of `rawPath` when it is a first-touched gitignored
      * path. First-touch-wins across ALL backends sharing this observer: the slot is

package/dist/activities/execute-deep-agent/cas-capture-observer.js

@@ -58,6 +58,15 @@ export class CasCaptureObserver {
     get blockedSecretPaths() {
         return this.blocked;
     }
+    /**
+     * An atomic copy of what has been observed so far — the shape the progress
+     * slice and the turn-boundary capture read (`shared/filereview/cas-touched.ts`).
+     * Copied synchronously, so a sub-agent's concurrent `recordBefore` landing
+     * mid-capture cannot mutate a snapshot a reader is walking.
+     */
+    snapshot() {
+        return { before: new Map(this.before), blockedSecretPaths: new Set(this.blocked) };
+    }
     /**
      * Record the pre-turn bytes of `rawPath` when it is a first-touched gitignored
      * path. First-touch-wins across ALL backends sharing this observer: the slot is

package/dist/activities/execute-deep-agent/cas-capture-observer.js.map

@@ -1 +1 @@
-{"version":3,"file":"cas-capture-observer.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/cas-capture-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAQnE,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAAS;IACjC,wFAAwF;IACvE,YAAY,CAAwC;IAErE,mFAAmF;IAC1E,MAAM,GAAiB,IAAI,GAAG,EAAE,CAAC;IAE1C,+EAA+E;IAC9D,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,kFAAkF;IACjE,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3D,oFAAoF;IACnE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,YAAY,IAIX;QACC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,mFAAmF;IACnF,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YACjD,qEAAqE;YACrE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO;YACrC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,OAAe;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAe;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,sEAAsE;AACtE,KAAK,UAAU,eAAe,CAAC,YAAoB;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"cas-capture-observer.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/cas-capture-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AASnE,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAAS;IACjC,wFAAwF;IACvE,YAAY,CAAwC;IAErE,mFAAmF;IAC1E,MAAM,GAAiB,IAAI,GAAG,EAAE,CAAC;IAE1C,+EAA+E;IAC9D,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,kFAAkF;IACjE,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3D,oFAAoF;IACnE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,YAAY,IAIX;QACC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,mFAAmF;IACnF,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACrF,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YACjD,qEAAqE;YACrE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO;YACrC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,OAAe;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAe;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,sEAAsE;AACtE,KAAK,UAAU,eAAe,CAAC,YAAoB;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/activities/execute-deep-agent/deep-agent-capabilities.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The native deep-agent harness's capability flags — the facts about the
+ * LangGraph engine the turn runtime branches on, declared once
+ * (`harness/capabilities.ts` has the matrix and the meaning of each flag).
+ *
+ *  - `interrupt`: the approval gate (`middleware/approval-gate.ts`) calls
+ *    LangGraph's `interrupt()` at a gated tool; the graph checkpoints and
+ *    stops, and the adapter resumes it with a `Command(resume)` carrying
+ *    the decisions (`hitl.ts`). No engine re-run, no exact-apply.
+ *  - `deterministic`: the thread id is the runtime's, minted from the
+ *    session before the first turn (`ensure-thread.ts`), so the adapter
+ *    never binds a state id and the runtime's reinvocation fact is the
+ *    persisted transcript.
+ *  - A system prompt: instructions, skills, input files and standing context
+ *    ride `createDeepAgent`'s `systemPrompt` (`prompt-builder.ts`).
+ *  - Sub-agents as compiled sub-graphs (`subagent-transformer.ts`), each
+ *    with its own mounted skills from the runtime (`TurnSkills.bySubAgent`).
+ *  - Tool restriction by tool list: an MCP server's `enabled_tools` is
+ *    honoured at connect time, so the engine never sees a disabled tool.
+ *  - PNG, JPEG, WebP and GIF inline (`shared/attachment-vision.ts`).
+ *  - File review under the `deep-agent` harness id with nothing excluded:
+ *    this harness writes no transient file into the repo (the `.stigmer`
+ *    link is the runtime's, created before its baseline pin and git-excluded
+ *    at provision). The capture is the runtime's (`harness/capture.ts`, S3
+ *    M4); this harness binds its `CasCaptureObserver`'s snapshot as the
+ *    runtime's CAS observations (`turn.ts`).
+ */
+import type { HarnessCapabilities } from "../../harness/capabilities.js";
+/** The harness id stamped on the deep-agent's file-review ledger events. */
+export declare const DEEP_AGENT_HARNESS_ID = "deep-agent";
+export declare const DEEP_AGENT_CAPABILITIES: HarnessCapabilities;

package/dist/activities/execute-deep-agent/deep-agent-capabilities.js

@@ -0,0 +1,40 @@
+/**
+ * The native deep-agent harness's capability flags — the facts about the
+ * LangGraph engine the turn runtime branches on, declared once
+ * (`harness/capabilities.ts` has the matrix and the meaning of each flag).
+ *
+ *  - `interrupt`: the approval gate (`middleware/approval-gate.ts`) calls
+ *    LangGraph's `interrupt()` at a gated tool; the graph checkpoints and
+ *    stops, and the adapter resumes it with a `Command(resume)` carrying
+ *    the decisions (`hitl.ts`). No engine re-run, no exact-apply.
+ *  - `deterministic`: the thread id is the runtime's, minted from the
+ *    session before the first turn (`ensure-thread.ts`), so the adapter
+ *    never binds a state id and the runtime's reinvocation fact is the
+ *    persisted transcript.
+ *  - A system prompt: instructions, skills, input files and standing context
+ *    ride `createDeepAgent`'s `systemPrompt` (`prompt-builder.ts`).
+ *  - Sub-agents as compiled sub-graphs (`subagent-transformer.ts`), each
+ *    with its own mounted skills from the runtime (`TurnSkills.bySubAgent`).
+ *  - Tool restriction by tool list: an MCP server's `enabled_tools` is
+ *    honoured at connect time, so the engine never sees a disabled tool.
+ *  - PNG, JPEG, WebP and GIF inline (`shared/attachment-vision.ts`).
+ *  - File review under the `deep-agent` harness id with nothing excluded:
+ *    this harness writes no transient file into the repo (the `.stigmer`
+ *    link is the runtime's, created before its baseline pin and git-excluded
+ *    at provision). The capture is the runtime's (`harness/capture.ts`, S3
+ *    M4); this harness binds its `CasCaptureObserver`'s snapshot as the
+ *    runtime's CAS observations (`turn.ts`).
+ */
+import { DEEP_AGENT_VISION_PROFILE } from "../../shared/attachment-vision.js";
+/** The harness id stamped on the deep-agent's file-review ledger events. */
+export const DEEP_AGENT_HARNESS_ID = "deep-agent";
+export const DEEP_AGENT_CAPABILITIES = {
+    pausePrimitive: "interrupt",
+    stateIdSource: "deterministic",
+    systemPrompt: true,
+    subAgents: true,
+    toolRestriction: true,
+    visionProfile: DEEP_AGENT_VISION_PROFILE,
+    fileReview: { harnessId: DEEP_AGENT_HARNESS_ID, excludePaths: [] },
+};
+//# sourceMappingURL=deep-agent-capabilities.js.map

package/dist/activities/execute-deep-agent/deep-agent-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-agent-capabilities.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/deep-agent-capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD,MAAM,CAAC,MAAM,uBAAuB,GAAwB;IAC1D,cAAc,EAAE,WAAW;IAC3B,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,IAAI;IAClB,SAAS,EAAE,IAAI;IACf,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,yBAAyB;IACxC,UAAU,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,YAAY,EAAE,EAAE,EAAE;CACnE,CAAC"}

package/dist/activities/execute-deep-agent/execution-state.d.ts

@@ -1,13 +1,11 @@
 /**
- * Mutable execution state for the StatusBuilder.
+ * Mutable execution state for `V3StatusBuilder`.
  *
  * Holds the AgentExecutionStatus proto being progressively built and
  * O(1) lookup indexes into its repeated fields. Mutations to indexed
  * references (ToolCall, AgentMessage) propagate directly to the proto
- * because they share the same object reference.
- *
- * Phase 3b-i scope: core indexes for main-agent streaming.
- * Sub-agent routing maps and approval tracking are added in Phase 3c.
+ * because they share the same object reference. Sub-agent transcripts are
+ * `SubAgentTracker`'s, keyed by namespace beside this state.
  */
 import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import type { AgentMessage, ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
@@ -36,11 +34,6 @@ export declare class ExecutionState {
      * is created rather than appending to the existing one.
      */
     readonly lastLlmRunId: Map<string, string>;
-    /**
-     * Tool run_id -> monotonic start time (ms) for duration calculation.
-     * Set on on_tool_start, consumed and removed on on_tool_end.
-     */
-    readonly toolStartTimes: Map<string, number>;
     constructor(proto: AgentExecutionStatus);
     /**
      * Reset all ephemeral indexes. The proto itself is not cleared —
@@ -52,7 +45,7 @@ export declare class ExecutionState {
     /**
      * Rebuild the toolCalls index from the proto's messages.
      *
-     * Used on the resume path where the StatusBuilder is initialized
+     * Used on the resume path where the V3StatusBuilder is initialized
      * with a persisted AgentExecutionStatus that already contains
      * messages and tool calls. Only proto-derivable indexes are rebuilt;
      * ephemeral runtime state starts fresh.

package/dist/activities/execute-deep-agent/execution-state.js

@@ -1,13 +1,11 @@
 /**
- * Mutable execution state for the StatusBuilder.
+ * Mutable execution state for `V3StatusBuilder`.
  *
  * Holds the AgentExecutionStatus proto being progressively built and
  * O(1) lookup indexes into its repeated fields. Mutations to indexed
  * references (ToolCall, AgentMessage) propagate directly to the proto
- * because they share the same object reference.
- *
- * Phase 3b-i scope: core indexes for main-agent streaming.
- * Sub-agent routing maps and approval tracking are added in Phase 3c.
+ * because they share the same object reference. Sub-agent transcripts are
+ * `SubAgentTracker`'s, keyed by namespace beside this state.
  */
 export class ExecutionState {
     /** The protobuf projection being built. */
@@ -34,11 +32,6 @@ export class ExecutionState {
      * is created rather than appending to the existing one.
      */
     lastLlmRunId = new Map();
-    /**
-     * Tool run_id -> monotonic start time (ms) for duration calculation.
-     * Set on on_tool_start, consumed and removed on on_tool_end.
-     */
-    toolStartTimes = new Map();
     constructor(proto) {
         this.proto = proto;
     }
@@ -52,12 +45,11 @@ export class ExecutionState {
         this.messagesByRun.clear();
         this.currentAiMessage.clear();
         this.lastLlmRunId.clear();
-        this.toolStartTimes.clear();
     }
     /**
      * Rebuild the toolCalls index from the proto's messages.
      *
-     * Used on the resume path where the StatusBuilder is initialized
+     * Used on the resume path where the V3StatusBuilder is initialized
      * with a persisted AgentExecutionStatus that already contains
      * messages and tool calls. Only proto-derivable indexes are rebuilt;
      * ephemeral runtime state starts fresh.

package/dist/activities/execute-deep-agent/execution-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution-state.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/execution-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,OAAO,cAAc;IACzB,2CAA2C;IAClC,KAAK,CAAuB;IAErC;;;OAGG;IACM,SAAS,GAA0B,IAAI,GAAG,EAAE,CAAC;IAEtD;;;OAGG;IACM,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;IAE9D;;;;OAIG;IACM,gBAAgB,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEjE;;;;OAIG;IACM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEvD;;;OAGG;IACM,cAAc,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEzD,YAAY,KAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB;QAClB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;oBACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"execution-state.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/execution-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,OAAO,cAAc;IACzB,2CAA2C;IAClC,KAAK,CAAuB;IAErC;;;OAGG;IACM,SAAS,GAA0B,IAAI,GAAG,EAAE,CAAC;IAEtD;;;OAGG;IACM,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;IAE9D;;;;OAIG;IACM,gBAAgB,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEjE;;;;OAIG;IACM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEvD,YAAY,KAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB;QAClB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC1C,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;oBACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/activities/execute-deep-agent/hitl.d.ts

@@ -1,24 +1,31 @@
 /**
- * HITL (human-in-the-loop) resume infrastructure for ExecuteDeepAgent.
+ * HITL (human-in-the-loop) resume infrastructure for the native deep-agent
+ * harness — the LangGraph side of an approval round trip.
  *
- * On reinvocation after an approval signal, this module:
- * 1. Reads the persisted execution status from the database
- * 2. Queries the LangGraph checkpoint for pending interrupts
- * 3. Matches each interrupt's tool_call_id to the user's approval decision
- * 4. Builds a `Command(resume={...})` payload for LangGraph
- * 5. Reconciles tool call statuses in the StatusBuilder
+ * The runtime reads the user's decisions off the persisted rows
+ * (`harness/approval-decisions.ts` `approvalDecisionsOf`, on `TurnInput`)
+ * and settles the rows that never run (SKIP, REJECT) after the turn; what is
+ * this harness's is how those decisions reach the ENGINE: the graph
+ * checkpoint's un-resumed interrupts, keyed by the interrupt's own id, become
+ * a `Command(resume)` map ({@link resolveResumeInput}), and after a stream the
+ * interrupts still pending become WAITING_APPROVAL rows
+ * ({@link detectPendingInterrupts}). {@link reconcileUnattendedSkips} is the
+ * one settlement that stays here because its evidence — the gate's registry
+ * of auto-skipped call ids — exists only inside this harness.
  *
- * DB-driven resume: Approval decisions are read from the persisted
- * execution status (via `client.getExecution()`), NOT passed as Temporal
- * activity arguments. This matches the Go workflow contract.
+ * Until S3 M2a this module also read the decisions from the execution itself
+ * and carried the SKIP/REJECT settlement; both are the runtime's now, one
+ * copy for every harness (S3 M1, Q-S3-2).
  */
 import { Command } from "@langchain/langgraph";
-import type { AgentExecution, AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ApprovalAction } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { type PolicySource } from "../../shared/approval-policy.js";
 /**
  * Either a genuine approval resume carrying the `Command(resume)` payload, or
- * not one — in which case the caller uses `setup.langgraphInput` (the single
- * construction site of the turn's user message; this module deliberately does
- * NOT build a second copy that could drift from it).
+ * not one — in which case the caller sends the turn's user message (its
+ * single construction site; this module deliberately does NOT build a second
+ * copy that could drift from it).
  */
 export type ResumeResult = {
     readonly isResumeFromApproval: true;
@@ -53,43 +60,20 @@ export interface InterruptValue {
  *
  * Returns a `Command(resume=...)` if there are pending interrupts with
  * matching approval decisions; otherwise reports "not a resume" and the
- * caller falls back to `setup.langgraphInput`.
+ * caller sends the turn's user message.
  *
- * The graph checkpoint snapshot is read once by the caller and passed in: the
- * same snapshot also decides whether status must be seeded from the persisted
- * transcript (see `index.ts`), and on the durable (http) saver an extra
- * `getState` is a network round-trip best avoided.
+ * `decisions` is the runtime's reading of the adjudicated rows
+ * (`TurnInput.approvalDecisions`, keyed by tool-call id) — the one
+ * projection both harnesses agree on; this module never re-derives the
+ * verdict from the rows. The graph checkpoint snapshot is read once by the
+ * caller and passed in: on the durable (http) saver an extra `getState` is a
+ * network round-trip best avoided.
  */
-export declare function resolveResumeInput(execution: AgentExecution, graphState: GraphStateSnapshot): ResumeResult;
-/**
- * Terminalize tool calls whose approval decision is non-executing — SKIP or
- * REJECT — so a denied or skipped call is never left stuck at WAITING_APPROVAL.
- *
- * This is the single, authoritative, checkpointer-independent reconciliation of
- * the two decisions that never run the tool: their outcome is fully determined
- * by the recorded decision (ToolCall.approval_action), not by any graph event.
- * APPROVE / APPROVE_ALL are intentionally NOT handled here — the tool actually
- * executes, and real tool events (v3 tool_started → tool_finished) terminalize
- * it in place.
- *
- * Why a decision-derived reconciler rather than the resumed stream: on the
- * durable path (sqlite local / http cloud) the gate returns a denial/skip
- * ToolMessage WITHOUT an on_tool_start/on_tool_end pair, and on the memory path
- * the graph replays without ever re-driving the gate — so in both cases the
- * seeded WAITING_APPROVAL row is never flipped by the stream and would persist
- * on a COMPLETED execution. Folding the recorded decision into a terminal status
- * makes every checkpointer backend behave identically by construction.
- *
- * REJECT and SKIP share TOOL_CALL_SKIPPED as the terminal status (the tool did
- * not run); they stay distinguishable by ToolCall.approval_action and by the
- * append-only approval-event stream (REJECTED vs SKIPPED). Idempotent: a row
- * already resolved carries the same decision and re-resolves identically.
- */
-export declare function reconcileNonExecutingDecisions(status: AgentExecutionStatus): void;
+export declare function resolveResumeInput(decisions: ReadonlyMap<string, ApprovalAction>, graphState: GraphStateSnapshot): ResumeResult;
 /**
  * Terminalize every tool call the approval gate auto-skipped under UNATTENDED
- * approval mode — the sibling of {@link reconcileNonExecutingDecisions} for
- * skips that have no human decision behind them.
+ * approval mode — the sibling of the runtime's `terminalizeNonExecutingDecisions`
+ * for skips that have no human decision behind them.
  *
  * The gate (the single writer of the registry) records each auto-skipped
  * tool-call id at the moment it returns the skip ToolMessage; this reconciler
@@ -111,3 +95,21 @@ export declare function reconcileNonExecutingDecisions(status: AgentExecutionSta
  * the parent's registry instance.
  */
 export declare function reconcileUnattendedSkips(status: AgentExecutionStatus, unattendedSkips: ReadonlySet<string> | undefined): void;
+/** A pending LangGraph approval interrupt, normalized from the graph checkpoint. */
+export interface PendingInterrupt {
+    readonly toolCallId: string;
+    readonly toolName: string;
+    readonly mcpServerSlug: string;
+    readonly message: string;
+    /** Gate provenance carried through the interrupt; undefined → UNSPECIFIED. */
+    readonly policySource: PolicySource | undefined;
+}
+/**
+ * Normalize the graph checkpoint's un-resumed interrupts into pending
+ * approvals — what a stream that ended on a gate left for the user. The
+ * caller seeds one WAITING_APPROVAL row per entry and ends the turn awaiting
+ * approval; the interrupt carries only `tool_call_id` and `message` beside
+ * the gate's own facts, so the row's args are read from the AI message in
+ * graph state, never from a second copy here.
+ */
+export declare function detectPendingInterrupts(graphState: GraphStateSnapshot): PendingInterrupt[];