@stigmer/runner 3.15.1 → 3.15.2-dev.20260913223433

package/dist/harness/capture.d.ts

@@ -0,0 +1,144 @@
+/**
+ * The runtime's file-review capture — apply-then-review for every harness,
+ * written once: the baseline pinned before the engine runs, the mid-run
+ * progress the chokepoint refreshes on every write, the candidate captured
+ * after the engine's turn, the DD-28 approved-command provenance, the flowed
+ * transcript rows stamped with the change set, and the one question the
+ * outcome table asks afterwards: is a review pending?
+ *
+ * ONE CAPTURE, ONE MOMENT, ONE OWNER
+ * ----------------------------------
+ * A turn's reviewable change is a property of the TREE, not of the engine:
+ * whatever sits on the working tree when the engine's turn is over is what
+ * the user reviews, whoever wrote it — the engine, a sub-agent, a recovery
+ * retry, a stdio MCP server the engine spawned. So the runtime pins the
+ * baseline as its LAST act before `adapter.runTurn` (after its own writes
+ * into the tree — the reconcile, the skill and attachment mounts — so they
+ * cancel out of the diff) and captures ONCE after `runTurn` returns, over
+ * the whole turn. Anything written into the tree after the pin is the
+ * turn's change. An adapter needs neither the baseline nor the change-set
+ * id and never learns whether a review is pending; the one fact it holds
+ * that the runtime cannot read is what its engine observed touching
+ * CAS-owned paths (`TurnSink.bindCasObservations`).
+ *
+ * Until S3 M4 both adapters carried this whole act (Cursor in its
+ * `turn-boundary.ts` between the stream and `run.wait()`, the deep-agent in
+ * its `turn-settle.ts`), each with its own evidence source and its own
+ * scoping rules for the provenance and the stamp. The two rules here are the
+ * one reading both engines already produce:
+ *
+ *  - PROVENANCE (DD-28, `shared/filereview/command-provenance.ts` is the
+ *    rule; this is its two inputs). "This turn's commands" are the top-level
+ *    rows whose id had not SETTLED before the engine ran — never a message
+ *    position, because on BOTH engines an approved command executes on the
+ *    row the runtime seeded for it (the deep-agent's builder and Cursor's
+ *    translator both reconcile the re-attempt onto the seeded WAITING row),
+ *    at its prior position; a positional scope misses it (F-M4-P3: Cursor's
+ *    did, so its auto-keep never qualified a gated-then-approved command).
+ *    "Executed" is a COMPLETED row. "Consented" is the row's own
+ *    server-authored `approval_action` — the seeded row keeps its id and its
+ *    verdict when it executes on resume, so the executed command IS its
+ *    consent row. Any sub-agent activity fails closed (DD-28 D1).
+ *  - THE STAMP (`shared/tool-row.ts` `stampFlowedFileEditRows`). A write or
+ *    delete row created this turn that reached COMPLETED flowed onto the
+ *    tree and is badged with the change set; a WAITING (denied, gated) or
+ *    FAILED row did not and is not. The row's own status is the evidence,
+ *    not a ledger of denial tokens.
+ *
+ * WHAT IS NOT HERE
+ * ----------------
+ * The substrate and the ledger authoring (`shared/filereview/capture.ts`,
+ * `cas-touched.ts`, `progress.ts`); the resume-time reconcile
+ * (`turn-context.ts` `reconcileReinvocation`, already the runtime's since
+ * S2); the outcome matrix that turns "a review is pending" into a phase
+ * (`run-turn.ts`, through `terminal-table.ts` `awaitingReviewArm`).
+ *
+ * TWO GAPS THIS MODULE DOES NOT CLOSE (recorded for S5, S3 M4 F-M4-P-gaps)
+ * ----------------------------------------------------------------------
+ * A turn that ends `interrupted` is not captured (a stop fired; the tree may
+ * be mid-edit). So a platform STOP returns COMPLETED with unreviewed edits
+ * on the tree, and a pause or worker shutdown reinvokes the same turn, whose
+ * new pin absorbs the pre-pause edits into its baseline and authors a second
+ * BASELINE for the same change set. Both predate the lift on both harnesses.
+ */
+import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { TurnCommandProvenance } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/filereview_pb";
+import type { ArtifactStorage } from "../shared/artifact-storage.js";
+import { type CasTouchedReader } from "../shared/filereview/cas-touched.js";
+import { type ProgressCaptureState, type ProgressSubstrate } from "../shared/filereview/progress.js";
+import type { FileReviewIdentity } from "./capabilities.js";
+import type { TurnWorkspace } from "./types.js";
+/** The mid-run progress the chokepoint refreshes on every write: the substrate and the floor it throttles by. */
+export interface TurnProgress {
+    readonly changeSetId: string;
+    readonly substrate: ProgressSubstrate;
+    readonly state: ProgressCaptureState;
+}
+/**
+ * One turn's capture as the runtime holds it between the pin and the
+ * boundary — a `runTurn` closure value beside the usage accumulator and the
+ * watchdog, on neither `TurnInput` (the adapter needs none of it) nor the
+ * frame (nothing here is a resource to release). Absent outside capture
+ * mode.
+ */
+export interface TurnCapture {
+    readonly changeSetId: string;
+    /** The pre-turn tree on a git work tree; `""` on a non-git one (the CAS manifest is the baseline there). */
+    readonly baselineTree: string;
+    readonly progress: TurnProgress;
+    /** Top-level rows already settled before the engine ran: the complement is "this turn's" (the provenance scope). */
+    readonly priorSettledToolCallIds: ReadonlySet<string>;
+    /** Sub-agent rows present before the engine ran: the stamp's scope, and any growth fails provenance closed. */
+    readonly priorSubAgentToolCallIds: ReadonlySet<string>;
+    /**
+     * What the engine observed touching CAS-owned paths, once the adapter has
+     * bound it (`TurnSink.bindCasObservations`); read at each progress capture
+     * and at the boundary. Unbound reads as nothing observed: git-only capture.
+     */
+    casObservations: CasTouchedReader | undefined;
+}
+/**
+ * Turn start, in capture mode: snapshot the pre-turn ids, pin the pre-turn
+ * tree behind the baseline ref and author BASELINE_CAPTURED under the
+ * harness's identity (the event rides the next persist), and build the
+ * progress substrate for this workspace shape — the git slice over the
+ * baseline and the harness's excluded paths, the CAS slice over whatever
+ * observations the adapter later binds (a delegating reader, since the bind
+ * happens inside `runTurn`), hybrid when both apply. The CAS slice exists
+ * only when artifact storage does: without it a gitignored write is
+ * deny-gated by the harness (`captureIgnored`), never captured, and the
+ * ledger could not store its blobs anyway.
+ *
+ * Returns `undefined` outside capture mode: nothing to pin, nothing to
+ * capture, the classic deny-gate governs writes.
+ */
+export declare function pinCaptureBaseline(args: {
+    readonly status: AgentExecutionStatus;
+    readonly executionId: string;
+    readonly workspace: TurnWorkspace;
+    readonly fileReview: FileReviewIdentity;
+    readonly artifactStorage: ArtifactStorage | undefined;
+}): Promise<TurnCapture | undefined>;
+/**
+ * Turn end: compose the CAS captures from the bound observations, derive the
+ * approved-command provenance, author CANDIDATE_CAPTURED (the seam authors
+ * nothing for a turn that changed nothing), and — iff a candidate exists —
+ * stamp the flowed rows. The working tree is LEFT applied: the user reviews
+ * the real change, and a reject snaps files back on the resume
+ * (`reconcileReinvocation`). Returns whether a review is now pending.
+ */
+export declare function captureCandidate(args: {
+    readonly status: AgentExecutionStatus;
+    readonly executionId: string;
+    readonly workspace: TurnWorkspace;
+    readonly fileReview: FileReviewIdentity;
+    readonly artifactStorage: ArtifactStorage | undefined;
+    readonly capture: TurnCapture;
+    /** `spec.auto_approve_all`, the one whole-run bypass: qualifies every executed command as consented (DD-28). */
+    readonly globalBypass: boolean;
+}): Promise<boolean>;
+/**
+ * The runtime's two inputs to the shared DD-28 rule (see the header). Pure
+ * over the status and the pre-turn snapshots; exported for its own tests.
+ */
+export declare function deriveCommandProvenance(status: AgentExecutionStatus, capture: Pick<TurnCapture, "priorSettledToolCallIds" | "priorSubAgentToolCallIds">, globalBypass: boolean): TurnCommandProvenance | undefined;

package/dist/harness/capture.js

@@ -0,0 +1,219 @@
+/**
+ * The runtime's file-review capture — apply-then-review for every harness,
+ * written once: the baseline pinned before the engine runs, the mid-run
+ * progress the chokepoint refreshes on every write, the candidate captured
+ * after the engine's turn, the DD-28 approved-command provenance, the flowed
+ * transcript rows stamped with the change set, and the one question the
+ * outcome table asks afterwards: is a review pending?
+ *
+ * ONE CAPTURE, ONE MOMENT, ONE OWNER
+ * ----------------------------------
+ * A turn's reviewable change is a property of the TREE, not of the engine:
+ * whatever sits on the working tree when the engine's turn is over is what
+ * the user reviews, whoever wrote it — the engine, a sub-agent, a recovery
+ * retry, a stdio MCP server the engine spawned. So the runtime pins the
+ * baseline as its LAST act before `adapter.runTurn` (after its own writes
+ * into the tree — the reconcile, the skill and attachment mounts — so they
+ * cancel out of the diff) and captures ONCE after `runTurn` returns, over
+ * the whole turn. Anything written into the tree after the pin is the
+ * turn's change. An adapter needs neither the baseline nor the change-set
+ * id and never learns whether a review is pending; the one fact it holds
+ * that the runtime cannot read is what its engine observed touching
+ * CAS-owned paths (`TurnSink.bindCasObservations`).
+ *
+ * Until S3 M4 both adapters carried this whole act (Cursor in its
+ * `turn-boundary.ts` between the stream and `run.wait()`, the deep-agent in
+ * its `turn-settle.ts`), each with its own evidence source and its own
+ * scoping rules for the provenance and the stamp. The two rules here are the
+ * one reading both engines already produce:
+ *
+ *  - PROVENANCE (DD-28, `shared/filereview/command-provenance.ts` is the
+ *    rule; this is its two inputs). "This turn's commands" are the top-level
+ *    rows whose id had not SETTLED before the engine ran — never a message
+ *    position, because on BOTH engines an approved command executes on the
+ *    row the runtime seeded for it (the deep-agent's builder and Cursor's
+ *    translator both reconcile the re-attempt onto the seeded WAITING row),
+ *    at its prior position; a positional scope misses it (F-M4-P3: Cursor's
+ *    did, so its auto-keep never qualified a gated-then-approved command).
+ *    "Executed" is a COMPLETED row. "Consented" is the row's own
+ *    server-authored `approval_action` — the seeded row keeps its id and its
+ *    verdict when it executes on resume, so the executed command IS its
+ *    consent row. Any sub-agent activity fails closed (DD-28 D1).
+ *  - THE STAMP (`shared/tool-row.ts` `stampFlowedFileEditRows`). A write or
+ *    delete row created this turn that reached COMPLETED flowed onto the
+ *    tree and is badged with the change set; a WAITING (denied, gated) or
+ *    FAILED row did not and is not. The row's own status is the evidence,
+ *    not a ledger of denial tokens.
+ *
+ * WHAT IS NOT HERE
+ * ----------------
+ * The substrate and the ledger authoring (`shared/filereview/capture.ts`,
+ * `cas-touched.ts`, `progress.ts`); the resume-time reconcile
+ * (`turn-context.ts` `reconcileReinvocation`, already the runtime's since
+ * S2); the outcome matrix that turns "a review is pending" into a phase
+ * (`run-turn.ts`, through `terminal-table.ts` `awaitingReviewArm`).
+ *
+ * TWO GAPS THIS MODULE DOES NOT CLOSE (recorded for S5, S3 M4 F-M4-P-gaps)
+ * ----------------------------------------------------------------------
+ * A turn that ends `interrupted` is not captured (a stop fired; the tree may
+ * be mid-edit). So a platform STOP returns COMPLETED with unreviewed edits
+ * on the tree, and a pause or worker shutdown reinvokes the same turn, whose
+ * new pin absorbs the pre-pause edits into its baseline and authors a second
+ * BASELINE for the same change set. Both predate the lift on both harnesses.
+ */
+import { ApprovalAction, FileCaptureClass, ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { captureBaselineToLedger, captureCandidateToLedger } from "../shared/filereview/capture.js";
+import { createCasProgressSubstrate } from "../shared/filereview/cas-progress.js";
+import { buildCasTurnCaptures } from "../shared/filereview/cas-touched.js";
+import { qualifyTurnCommandProvenance } from "../shared/filereview/command-provenance.js";
+import { hasCandidateCaptured } from "../shared/filereview/events.js";
+import { createGitProgressSubstrate, createHybridProgressSubstrate, newProgressCaptureState, } from "../shared/filereview/progress.js";
+import { collectSettledToolCallIds, collectSubAgentToolCallIds, stampFlowedFileEditRows, stampFlowedSubAgentFileEditRows } from "../shared/tool-row.js";
+const NOTHING_OBSERVED = { before: new Map(), blockedSecretPaths: new Set() };
+/**
+ * Turn start, in capture mode: snapshot the pre-turn ids, pin the pre-turn
+ * tree behind the baseline ref and author BASELINE_CAPTURED under the
+ * harness's identity (the event rides the next persist), and build the
+ * progress substrate for this workspace shape — the git slice over the
+ * baseline and the harness's excluded paths, the CAS slice over whatever
+ * observations the adapter later binds (a delegating reader, since the bind
+ * happens inside `runTurn`), hybrid when both apply. The CAS slice exists
+ * only when artifact storage does: without it a gitignored write is
+ * deny-gated by the harness (`captureIgnored`), never captured, and the
+ * ledger could not store its blobs anyway.
+ *
+ * Returns `undefined` outside capture mode: nothing to pin, nothing to
+ * capture, the classic deny-gate governs writes.
+ */
+export async function pinCaptureBaseline(args) {
+    const { status, executionId, workspace, fileReview, artifactStorage } = args;
+    if (!workspace.captureMode)
+        return undefined;
+    const { primaryDir, gitWorkspace, changeSetId } = workspace;
+    const priorSettledToolCallIds = collectSettledToolCallIds(status.messages);
+    const priorSubAgentToolCallIds = collectSubAgentToolCallIds(status.subAgentExecutions);
+    const baselineTree = await captureBaselineToLedger({
+        status,
+        gitRoot: primaryDir,
+        executionId,
+        changeSetId,
+        harnessId: fileReview.harnessId,
+        excludePaths: fileReview.excludePaths,
+        gitWorkspace,
+    });
+    const capture = {
+        changeSetId,
+        baselineTree,
+        progress: {
+            changeSetId,
+            state: newProgressCaptureState(),
+            substrate: buildProgressSubstrate({
+                executionId,
+                workspace,
+                baselineTree,
+                excludePaths: fileReview.excludePaths,
+                casSlice: artifactStorage !== undefined,
+                // Delegates to whatever the adapter binds later; `capture` is
+                // assigned before any capture() can run.
+                readObservations: () => capture.casObservations?.() ?? NOTHING_OBSERVED,
+            }),
+        },
+        priorSettledToolCallIds,
+        priorSubAgentToolCallIds,
+        casObservations: undefined,
+    };
+    return capture;
+}
+/**
+ * The progress substrate for this workspace shape (DD-32 / DD-33): a git
+ * tree diffs its tracked paths by `--numstat` against the baseline; the CAS
+ * slice reads the engine's observations for the gitignored (git tree) or
+ * every (non-git) path; a git tree with storage composes both. The truth
+ * table is `deriveCaptureMode`'s: capture mode holds only for a git tree or
+ * a workspace with storage, so the fourth cell is unreachable and says so.
+ */
+function buildProgressSubstrate(args) {
+    const { executionId, workspace, baselineTree, excludePaths, casSlice, readObservations } = args;
+    const git = workspace.gitWorkspace
+        ? createGitProgressSubstrate({ workspaceRoot: workspace.primaryDir, executionId, baselineTree, excludePaths })
+        : undefined;
+    const cas = casSlice ? createCasProgressSubstrate({ workspaceRoot: workspace.primaryDir, read: readObservations }) : undefined;
+    if (git && cas)
+        return createHybridProgressSubstrate(git, cas);
+    const one = git ?? cas;
+    if (!one)
+        throw new Error(`capture: capture mode on a non-git tree without storage (execution=${executionId}); deriveCaptureMode forbids this`);
+    return one;
+}
+/**
+ * Turn end: compose the CAS captures from the bound observations, derive the
+ * approved-command provenance, author CANDIDATE_CAPTURED (the seam authors
+ * nothing for a turn that changed nothing), and — iff a candidate exists —
+ * stamp the flowed rows. The working tree is LEFT applied: the user reviews
+ * the real change, and a reject snaps files back on the resume
+ * (`reconcileReinvocation`). Returns whether a review is now pending.
+ */
+export async function captureCandidate(args) {
+    const { status, executionId, workspace, fileReview, artifactStorage, capture, globalBypass } = args;
+    const { primaryDir, gitWorkspace } = workspace;
+    const { changeSetId } = capture;
+    const casCaptureClass = gitWorkspace ? FileCaptureClass.GIT_IGNORED_CAPTURED : FileCaptureClass.NON_GIT_CAS;
+    const observed = artifactStorage && capture.casObservations ? await capture.casObservations() : NOTHING_OBSERVED;
+    const { casCaptures, unreviewablePaths } = await buildCasTurnCaptures(observed, primaryDir, casCaptureClass);
+    const commandProvenance = deriveCommandProvenance(status, capture, globalBypass);
+    if (commandProvenance) {
+        console.log(`capture: turn qualifies for approved-command auto-keep ` +
+            `(consent rows: ${commandProvenance.consentToolCallIds.join(",") || "(auto_approve_all)"}); ` +
+            `attaching provenance to candidate (execution=${executionId})`);
+    }
+    await captureCandidateToLedger({
+        status,
+        gitRoot: primaryDir,
+        executionId,
+        changeSetId,
+        baselineTree: capture.baselineTree,
+        harnessId: fileReview.harnessId,
+        excludePaths: fileReview.excludePaths,
+        casCaptures,
+        storage: artifactStorage,
+        unreviewablePaths,
+        unreviewableCaptureClass: casCaptureClass,
+        gitWorkspace,
+        commandProvenance,
+    });
+    const pending = hasCandidateCaptured(status, changeSetId);
+    if (pending) {
+        // A row must never reference a change set that does not exist, so the
+        // stamp is gated on the authored candidate.
+        stampFlowedFileEditRows(status.messages, changeSetId, { flowed: isCompletedRow });
+        stampFlowedSubAgentFileEditRows(status.subAgentExecutions, changeSetId, capture.priorSubAgentToolCallIds, isCompletedRow);
+        console.log(`capture: change set ${changeSetId} authored to the file_review ledger; working tree left applied for review (execution=${executionId})`);
+    }
+    return pending;
+}
+/** The row's own evidence that its effect landed on the tree. */
+function isCompletedRow(tc) {
+    return tc.status === ToolCallStatus.TOOL_CALL_COMPLETED;
+}
+/**
+ * The runtime's two inputs to the shared DD-28 rule (see the header). Pure
+ * over the status and the pre-turn snapshots; exported for its own tests.
+ */
+export function deriveCommandProvenance(status, capture, globalBypass) {
+    // DD-28 D1: any sub-agent activity this turn disqualifies — a sub-agent
+    // that ran contributes at least one row id absent from the pre-turn set,
+    // and its writes fold into this change set without a consented command.
+    for (const id of collectSubAgentToolCallIds(status.subAgentExecutions)) {
+        if (!capture.priorSubAgentToolCallIds.has(id))
+            return undefined;
+    }
+    const turnToolCalls = status.messages.flatMap((m) => m.toolCalls).filter((tc) => !capture.priorSettledToolCallIds.has(tc.id));
+    return qualifyTurnCommandProvenance({
+        turnToolCalls,
+        messages: status.messages,
+        isExecutedCommand: isCompletedRow,
+        resolveDirectConsent: (tc) => tc.approvalAction === ApprovalAction.APPROVE || tc.approvalAction === ApprovalAction.APPROVE_ALL ? tc.id : undefined,
+        globalBypass,
+    });
+}
+//# sourceMappingURL=capture.js.map

package/dist/harness/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../src/harness/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAMhI,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAkD,MAAM,qCAAqC,CAAC;AAC3H,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,GAGxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AAmCxJ,MAAM,gBAAgB,GAAuB,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAElG;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAMxC;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAC7E,IAAI,CAAC,SAAS,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAE5D,MAAM,uBAAuB,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,wBAAwB,GAAG,0BAA0B,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAEvF,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC;QACjD,MAAM;QACN,OAAO,EAAE,UAAU;QACnB,WAAW;QACX,WAAW;QACX,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,YAAY;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,GAAgB;QAC3B,WAAW;QACX,YAAY;QACZ,QAAQ,EAAE;YACR,WAAW;YACX,KAAK,EAAE,uBAAuB,EAAE;YAChC,SAAS,EAAE,sBAAsB,CAAC;gBAChC,WAAW;gBACX,SAAS;gBACT,YAAY;gBACZ,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,QAAQ,EAAE,eAAe,KAAK,SAAS;gBACvC,8DAA8D;gBAC9D,yCAAyC;gBACzC,gBAAgB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,gBAAgB;aACxE,CAAC;SACH;QACD,uBAAuB;QACvB,wBAAwB;QACxB,eAAe,EAAE,SAAS;KAC3B,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,IAO/B;IACC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAChG,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY;QAChC,CAAC,CAAC,0BAA0B,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;QAC9G,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/H,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,6BAA6B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,WAAW,mCAAmC,CAAC,CAAC;IAChJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAStC;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACpG,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IAC5G,MAAM,QAAQ,GAAG,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACjH,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAE7G,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IACjF,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,yDAAyD;YACvD,kBAAkB,iBAAiB,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,KAAK;YAC7F,gDAAgD,WAAW,GAAG,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,wBAAwB,CAAC;QAC7B,MAAM;QACN,OAAO,EAAE,UAAU;QACnB,WAAW;QACX,WAAW;QACX,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,WAAW;QACX,OAAO,EAAE,eAAe;QACxB,iBAAiB;QACjB,wBAAwB,EAAE,eAAe;QACzC,YAAY;QACZ,iBAAiB;KAClB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,CAAC;QACZ,sEAAsE;QACtE,4CAA4C;QAC5C,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAClF,+BAA+B,CAAC,MAAM,CAAC,kBAAkB,EAAE,WAAW,EAAE,OAAO,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC;QAC1H,OAAO,CAAC,GAAG,CAAC,uBAAuB,WAAW,wFAAwF,WAAW,GAAG,CAAC,CAAC;IACxJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iEAAiE;AACjE,SAAS,cAAc,CAAC,EAAY;IAClC,OAAO,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,mBAAmB,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,OAAkF,EAClF,YAAqB;IAErB,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,KAAK,MAAM,EAAE,IAAI,0BAA0B,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;IAClE,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9H,OAAO,4BAA4B,CAAC;QAClC,aAAa;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,cAAc;QACjC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3B,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACtH,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/harness/persist-chokepoint.d.ts

@@ -10,13 +10,21 @@
  *     any built-in write row targeting a secret-like path, top-level and
  *     sub-agent. The single airtight choke point for a deny-gate harness and
  *     the only guarantee under `auto_approve_all`. Idempotent.
- *  2. `streaming_usage` is refreshed from the accumulator when it has turns,
+ *  2. `file_change_progress` is refreshed from the turn's capture (the "N
+ *     files changed so far" strip, DD-32) when the turn is in capture mode:
+ *     the tree is read at most once per floor interval and only re-attached
+ *     when it moved (`shared/filereview/progress.ts`), so a write that
+ *     changed nothing on disk carries the snapshot it already had. Before
+ *     S3 M4 each adapter's stream loop did this before its own persists; the
+ *     runtime owns the capture now, so the display field it derives is
+ *     refreshed where every other runtime-owned field is — here.
+ *  3. `streaming_usage` is refreshed from the accumulator when it has turns,
  *     so the summary the UI shows is the one the write carries.
- *  3. `persistStatus` (`shared/status.ts`): tool-output offload, the
+ *  4. `persistStatus` (`shared/status.ts`): tool-output offload, the
  *     aggregate size cap, transient retry, oversize recovery. Never rejects.
- *  4. A Temporal heartbeat, so a long streaming turn's liveness is proven by
+ *  5. A Temporal heartbeat, so a long streaming turn's liveness is proven by
  *     the writes it makes (Q-S2-10).
- *  5. The control plane's answer: STOP becomes the runtime's platform-stop
+ *  6. The control plane's answer: STOP becomes the runtime's platform-stop
  *     cause on the stop controller, which aborts the adapter's signal.
  *
  * Single-flight with coalescing: an adapter's `requestPersist()` while a
@@ -35,6 +43,7 @@
 import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import type { StigmerClient } from "../client/stigmer-client.js";
 import type { ToolOutputOffloadContext } from "../shared/status-offload.js";
+import type { TurnProgress } from "./capture.js";
 import type { UsageAccumulator } from "./usage-accumulator.js";
 export interface PersistChokepointDeps {
     readonly client: StigmerClient;
@@ -48,6 +57,12 @@ export interface PersistChokepointDeps {
      * and is `undefined` for a write made before then (no usage yet anyway).
      */
     readonly usage: () => UsageAccumulator | undefined;
+    /**
+     * The turn's mid-run progress, read at WRITE time for the same reason as
+     * `usage`: it exists only once the runtime has pinned the capture baseline,
+     * after resolution, and is `undefined` outside capture mode.
+     */
+    readonly progress: () => TurnProgress | undefined;
     /** The Temporal heartbeat, pulsed after each write. */
     readonly heartbeat: () => void;
     /** The control plane answered STOP to this write. */

package/dist/harness/persist-chokepoint.js

@@ -10,13 +10,21 @@
  *     any built-in write row targeting a secret-like path, top-level and
  *     sub-agent. The single airtight choke point for a deny-gate harness and
  *     the only guarantee under `auto_approve_all`. Idempotent.
- *  2. `streaming_usage` is refreshed from the accumulator when it has turns,
+ *  2. `file_change_progress` is refreshed from the turn's capture (the "N
+ *     files changed so far" strip, DD-32) when the turn is in capture mode:
+ *     the tree is read at most once per floor interval and only re-attached
+ *     when it moved (`shared/filereview/progress.ts`), so a write that
+ *     changed nothing on disk carries the snapshot it already had. Before
+ *     S3 M4 each adapter's stream loop did this before its own persists; the
+ *     runtime owns the capture now, so the display field it derives is
+ *     refreshed where every other runtime-owned field is — here.
+ *  3. `streaming_usage` is refreshed from the accumulator when it has turns,
  *     so the summary the UI shows is the one the write carries.
- *  3. `persistStatus` (`shared/status.ts`): tool-output offload, the
+ *  4. `persistStatus` (`shared/status.ts`): tool-output offload, the
  *     aggregate size cap, transient retry, oversize recovery. Never rejects.
- *  4. A Temporal heartbeat, so a long streaming turn's liveness is proven by
+ *  5. A Temporal heartbeat, so a long streaming turn's liveness is proven by
  *     the writes it makes (Q-S2-10).
- *  5. The control plane's answer: STOP becomes the runtime's platform-stop
+ *  6. The control plane's answer: STOP becomes the runtime's platform-stop
  *     cause on the stop controller, which aborts the adapter's signal.
  *
  * Single-flight with coalescing: an adapter's `requestPersist()` while a
@@ -35,6 +43,7 @@
 import { create } from "@bufbuild/protobuf";
 import { ExecutionControlSignal } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import { StreamingUsageSummarySchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/usage_pb";
+import { captureFileChangeProgress } from "../shared/filereview/progress.js";
 import { persistStatus } from "../shared/status.js";
 import { withholdSecretContentFromMessages } from "../shared/tool-row.js";
 export class PersistChokepoint {
@@ -74,6 +83,10 @@ export class PersistChokepoint {
     async write() {
         const { client, executionId, status, offload, heartbeat } = this.deps;
         withholdSecretContentFromMessages(status.messages, status.subAgentExecutions);
+        const progress = this.deps.progress();
+        if (progress) {
+            await captureFileChangeProgress({ status, changeSetId: progress.changeSetId, substrate: progress.substrate, state: progress.state });
+        }
         const usage = this.deps.usage();
         if (usage?.hasTurns) {
             status.streamingUsage = create(StreamingUsageSummarySchema, usage.snapshot());

package/dist/harness/persist-chokepoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"persist-chokepoint.js","sourceRoot":"","sources":["../../src/harness/persist-chokepoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AACtG,OAAO,EAAE,2BAA2B,EAAE,MAAM,+DAA+D,CAAC;AAG5G,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAqB1E,MAAM,OAAO,iBAAiB;IAIC;IAHrB,QAAQ,CAA4B;IACpC,QAAQ,CAA4B;IAE5C,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;IAAG,CAAC;IAE5D;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;gBAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACtE,iCAAiC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,KAAK,EAAE,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,2BAA2B,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,SAAS,EAAE,CAAC;QACZ,IAAI,MAAM,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"persist-chokepoint.js","sourceRoot":"","sources":["../../src/harness/persist-chokepoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AACtG,OAAO,EAAE,2BAA2B,EAAE,MAAM,+DAA+D,CAAC;AAG5G,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AA4B1E,MAAM,OAAO,iBAAiB;IAIC;IAHrB,QAAQ,CAA4B;IACpC,QAAQ,CAA4B;IAE5C,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;IAAG,CAAC;IAE5D;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;gBAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACtE,iCAAiC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,yBAAyB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,KAAK,EAAE,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,2BAA2B,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,SAAS,EAAE,CAAC;QACZ,IAAI,MAAM,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;CACF"}