@stigmer/runner 3.15.3-dev.20260914100347 → 3.15.3-dev.20260916211208

package/dist/activities/execute-deep-agent/turn-setup.d.ts

@@ -25,14 +25,14 @@
  * knows are reported through the sink exactly as the orchestrator reported
  * them (the resolution labels are the runtime's).
  *
- * One root for everything (Q-S3-8): the deepagents backend, the CAS
+ * One root for everything: the deepagents backend, the CAS
  * observer, the gate's path normalization and the publisher are all rooted
  * at `workspace.primaryDir` — the same tree the runtime locks, links and
  * captures. For zero or one workspace entry this is byte-identical to the
  * orchestrator's `workspaceBackend.rootDir`.
  *
  * Moved from `setup.ts` `performSetup` (the LangGraph half; the resolution
- * half is the runtime's twelve phases) at S3 M2a; the step bodies are the
+ * half is the runtime's twelve phases) in #1096; the step bodies are the
  * orchestrator's, verbatim where nothing changed.
  */
 import type { BaseCheckpointSaver } from "@langchain/langgraph-checkpoint";
@@ -52,7 +52,7 @@ import { CasCaptureObserver } from "./cas-capture-observer.js";
  * (`execute-cursor/turn-setup.ts` `CursorAdapterConfig` is the idiom): a
  * whole `Config` satisfies it, a test constructs these fields and nothing
  * else. Smaller than the orchestrator's reach — the synthesized attachments'
- * endpoints it read are the runtime's now (S3 M2a, F-M2a-10).
+ * endpoints it read are the runtime's now (since #1096).
  */
 export type DeepAgentAdapterConfig = Pick<Config, "checkpointerType" | "checkpointerProxyEndpoint" | "stigmerToken" | "proxyEndpoint" | "mode">;
 /** The deepagents graph as this module holds it; deepagents exports no stable type for the compiled agent. */
@@ -109,8 +109,8 @@ export type DeepAgentGraphInput = {
  * spec named none — the one reader of `spec.executionConfig.modelName`, which
  * the Cursor adapter reads too), or the registry's default for `"default"`.
  * The same reading the runtime's attachment phase made for the vision budget,
- * so the model that sees the images is the model that runs. (Until S3 M5 this
- * read the spec field beside the runtime's resolved copy; F-M3-P7.)
+ * so the model that sees the images is the model that runs. (Until #1096 this
+ * read the spec field beside the runtime's resolved copy.)
  */
 export declare function resolveModelName(input: TurnInput): Promise<string>;
 /**
@@ -122,7 +122,7 @@ export declare function resolveModelName(input: TurnInput): Promise<string>;
 export declare function openCheckpointer(input: TurnInput, sink: TurnSink, config: DeepAgentAdapterConfig): Promise<BaseCheckpointSaver>;
 /**
  * The workspace as the engine sees it, rooted at the runtime's primary tree
- * (Q-S3-8). The platform dir the shared provision ensured rides along so
+ * (the one root). The platform dir the shared provision ensured rides along so
  * the backend routes `.stigmer/…` reads to it.
  *
  * CAS capture (design docs 08/11/12): the single per-turn observer owns the
@@ -143,7 +143,7 @@ export declare function buildDeepAgentWorkspace(input: TurnInput): DeepAgentWork
  * refuses an empty config, which is what the orchestrator's MCP gate
  * (`mcp-gate.ts`) guarded against beside its channel-only reason; the
  * runtime resolves unconditionally, so the one remaining question is
- * "anything to connect?" (S3 M2a, F-M2a-17).
+ * "anything to connect?" (since #1096).
  */
 export declare function connectTools(input: TurnInput, sink: TurnSink): Promise<DeepAgentTools>;
 /**
@@ -186,7 +186,7 @@ export declare function composeSystemPrompt(input: TurnInput, recalledMemories:
  * stop on the invoke config and the budget middleware's ~80% advisory, so
  * the warning and the enforcement can never disagree.
  *
- * Nothing in the middleware stack stops the run (Q-S3-3, landed at S3 M2b):
+ * Nothing in the middleware stack stops the run (since #1096):
  * the runtime's abort is the platform's one stop, and its TERMINATED arm the
  * one enforcement of `max_cost_usd`; the cost advisory warns the model at
  * ~80% of the cap the way the budget middleware warns at ~80% of the

package/dist/activities/execute-deep-agent/turn-setup.js

@@ -25,14 +25,14 @@
  * knows are reported through the sink exactly as the orchestrator reported
  * them (the resolution labels are the runtime's).
  *
- * One root for everything (Q-S3-8): the deepagents backend, the CAS
+ * One root for everything: the deepagents backend, the CAS
  * observer, the gate's path normalization and the publisher are all rooted
  * at `workspace.primaryDir` — the same tree the runtime locks, links and
  * captures. For zero or one workspace entry this is byte-identical to the
  * orchestrator's `workspaceBackend.rootDir`.
  *
  * Moved from `setup.ts` `performSetup` (the LangGraph half; the resolution
- * half is the runtime's twelve phases) at S3 M2a; the step bodies are the
+ * half is the runtime's twelve phases) in #1096; the step bodies are the
  * orchestrator's, verbatim where nothing changed.
  */
 import { createDeepAgent } from "deepagents";
@@ -71,8 +71,8 @@ import { modelHasNativeThinking, transformAndCompileSubagents } from "./subagent
  * spec named none — the one reader of `spec.executionConfig.modelName`, which
  * the Cursor adapter reads too), or the registry's default for `"default"`.
  * The same reading the runtime's attachment phase made for the vision budget,
- * so the model that sees the images is the model that runs. (Until S3 M5 this
- * read the spec field beside the runtime's resolved copy; F-M3-P7.)
+ * so the model that sees the images is the model that runs. (Until #1096 this
+ * read the spec field beside the runtime's resolved copy.)
  */
 export async function resolveModelName(input) {
     return input.model.requested === "default" ? await getDefaultModel() : input.model.requested;
@@ -95,7 +95,7 @@ export async function openCheckpointer(input, sink, config) {
 }
 /**
  * The workspace as the engine sees it, rooted at the runtime's primary tree
- * (Q-S3-8). The platform dir the shared provision ensured rides along so
+ * (the one root). The platform dir the shared provision ensured rides along so
  * the backend routes `.stigmer/…` reads to it.
  *
  * CAS capture (design docs 08/11/12): the single per-turn observer owns the
@@ -129,7 +129,7 @@ export function buildDeepAgentWorkspace(input) {
  * refuses an empty config, which is what the orchestrator's MCP gate
  * (`mcp-gate.ts`) guarded against beside its channel-only reason; the
  * runtime resolves unconditionally, so the one remaining question is
- * "anything to connect?" (S3 M2a, F-M2a-17).
+ * "anything to connect?" (since #1096).
  */
 export async function connectTools(input, sink) {
     if (input.mcp.servers.length === 0) {
@@ -231,7 +231,7 @@ export function composeSystemPrompt(input, recalledMemories) {
  * stop on the invoke config and the budget middleware's ~80% advisory, so
  * the warning and the enforcement can never disagree.
  *
- * Nothing in the middleware stack stops the run (Q-S3-3, landed at S3 M2b):
+ * Nothing in the middleware stack stops the run (since #1096):
  * the runtime's abort is the platform's one stop, and its TERMINATED arm the
  * one enforcement of `max_cost_usd`; the cost advisory warns the model at
  * ~80% of the cap the way the budget middleware warns at ~80% of the

package/dist/activities/execute-deep-agent/turn-stream.d.ts

@@ -9,7 +9,7 @@
  * runtime's stall watchdog measures the engine; `reportUsage()` per parent
  * `message_finish`, priced here at the registry's rates for the model the
  * turn runs on (`shared/model-pricing.ts`), so the runtime accounts and
- * enforces the cost cap and writes `streamingUsage` (Q-M2a-2); `requestPersist()`
+ * enforces the cost cap and writes `streamingUsage`; `requestPersist()`
  * where a discrete change or the streaming cadence says so
  * (`shared/persist-decision.ts` over the builder's one dirty flag), AWAITED,
  * so a platform STOP the runtime reads from that write aborts the signal
@@ -19,7 +19,7 @@
  * this loop never does). An error the aborted run throws is the abort itself
  * and settles `interrupted`, never `failed`.
  *
- * WHEN the run is aborted (S3 M2a, F-M2a-18): on the arrival of the next
+ * WHEN the run is aborted: on the arrival of the next
  * event — the graph's own step boundary — or after {@link STOP_GRACE_MS} if
  * no event arrives. A LangGraph run aborted while a step is in flight leaves
  * `@langchain/core` with an orphaned rejection (`AsyncGeneratorWithSetup`
@@ -34,7 +34,7 @@
  * here) is forced, and that one orphan is the price of unblocking it — the
  * contract's bound on settling `interrupted` is what wins.
  *
- * Until S3 M2a this loop (`streaming-v3.ts`) armed its own 120 s stall
+ * Until #1096 this loop (`streaming-v3.ts`) armed its own 120 s stall
  * check, pulsed the Temporal heartbeat every 2 s, read STOP from its own
  * persist and activated a graceful-stop middleware on it, told a pause from
  * the activity's cancellation signal, and wrote PAUSED, COMPLETED and
@@ -47,7 +47,7 @@
 import type { TurnInput, TurnSink } from "../../harness/types.js";
 import { InlinePublisher } from "./inline-publisher.js";
 import { type V3ProtocolEvent } from "./v3-event-recorder.js";
-import { V3StatusBuilder } from "./v3-status-builder.js";
+import { DeepAgentTranslator } from "./translator.js";
 import type { DeepAgentEngine, DeepAgentGraphInput, DeepAgentWorkspace } from "./turn-setup.js";
 /**
  * The subset of the v3 `GraphRunStream` this loop consumes. Kept structural
@@ -71,14 +71,17 @@ export interface DeepAgentStreamResult {
     readonly pendingPublishPromises: readonly Promise<void>[];
 }
 /**
- * The transcript writers of one turn: the builder over `sink.status` and the
- * publisher that writes artifacts through it (so a published artifact still
- * forces the next persist). Built by the adapter's turn once and shared by
- * the stream and the settle; the builder reports usage into the sink, priced
- * for the model the turn runs on.
+ * This harness's transcript writers for one turn: the translator that turns
+ * the engine's events into canonical ones (over the gate's posture, so every
+ * tool start carries its attribution and gate answer), and the publisher
+ * that registers artifacts on the runtime's builder (`sink.transcript`, so
+ * a published artifact still dirties the next persist). The builder itself
+ * is the runtime's, one per turn, and is read from the sink where it is
+ * needed. Built by the adapter's turn once and shared by the stream and the
+ * settle.
  */
 export interface DeepAgentTranscript {
-    readonly builder: V3StatusBuilder;
+    readonly translator: DeepAgentTranslator;
     readonly publisher: InlinePublisher;
 }
 export declare function createDeepAgentTranscript(input: TurnInput, sink: TurnSink, engine: DeepAgentEngine, workspace: DeepAgentWorkspace): DeepAgentTranscript;

package/dist/activities/execute-deep-agent/turn-stream.js

@@ -9,7 +9,7 @@
  * runtime's stall watchdog measures the engine; `reportUsage()` per parent
  * `message_finish`, priced here at the registry's rates for the model the
  * turn runs on (`shared/model-pricing.ts`), so the runtime accounts and
- * enforces the cost cap and writes `streamingUsage` (Q-M2a-2); `requestPersist()`
+ * enforces the cost cap and writes `streamingUsage`; `requestPersist()`
  * where a discrete change or the streaming cadence says so
  * (`shared/persist-decision.ts` over the builder's one dirty flag), AWAITED,
  * so a platform STOP the runtime reads from that write aborts the signal
@@ -19,7 +19,7 @@
  * this loop never does). An error the aborted run throws is the abort itself
  * and settles `interrupted`, never `failed`.
  *
- * WHEN the run is aborted (S3 M2a, F-M2a-18): on the arrival of the next
+ * WHEN the run is aborted: on the arrival of the next
  * event — the graph's own step boundary — or after {@link STOP_GRACE_MS} if
  * no event arrives. A LangGraph run aborted while a step is in flight leaves
  * `@langchain/core` with an orphaned rejection (`AsyncGeneratorWithSetup`
@@ -34,7 +34,7 @@
  * here) is forced, and that one orphan is the price of unblocking it — the
  * contract's bound on settling `interrupted` is what wins.
  *
- * Until S3 M2a this loop (`streaming-v3.ts`) armed its own 120 s stall
+ * Until #1096 this loop (`streaming-v3.ts`) armed its own 120 s stall
  * check, pulsed the Temporal heartbeat every 2 s, read STOP from its own
  * persist and activated a graceful-stop middleware on it, told a pause from
  * the activity's cancellation signal, and wrote PAUSED, COMPLETED and
@@ -51,8 +51,7 @@ import { TimeoutError, withTimeout } from "../../shared/with-timeout.js";
 import { InlinePublisher } from "./inline-publisher.js";
 import { StreamingSideEffects } from "./streaming-side-effects.js";
 import { createV3EventRecorder } from "./v3-event-recorder.js";
-import { normalize } from "./v3-protocol-normalizer.js";
-import { V3StatusBuilder } from "./v3-status-builder.js";
+import { DeepAgentTranslator, usageOf } from "./translator.js";
 /**
  * How long the loop waits for `run.output` after the stream ended before
  * proceeding without the final state (the structured response rides it).
@@ -65,41 +64,39 @@ const RUN_OUTPUT_TIMEOUT_MS = 30_000;
  */
 const STOP_GRACE_MS = 1_000;
 export function createDeepAgentTranscript(input, sink, engine, workspace) {
-    const builder = new V3StatusBuilder(input.executionId, sink.status, {
-        onUsage: (usage) => {
-            // LangChain's `input_tokens` already INCLUDES the cache buckets (the
-            // Anthropic adapter folds them in; the cost advisory reads them the
-            // same way), so the counts are reported as delivered and the price
-            // is computed over the disjoint buckets.
-            const inputTokens = usage.input_tokens ?? 0;
-            const outputTokens = usage.output_tokens ?? 0;
-            const cacheReadTokens = usage.input_token_details?.cache_read ?? 0;
-            const cacheWriteTokens = usage.input_token_details?.cache_creation ?? 0;
-            const uncachedInput = Math.max(inputTokens - cacheReadTokens - cacheWriteTokens, 0);
-            sink.reportUsage({
-                inputTokens,
-                outputTokens,
-                cacheReadTokens,
-                cacheWriteTokens,
-                estimatedCostUsd: computeTurnCost(engine.pricing, uncachedInput, outputTokens, cacheWriteTokens, cacheReadTokens),
-                model: engine.modelName,
-            });
-        },
-    });
-    builder.setApprovalProvider({
-        policies: engine.gate.policies,
-        toolServerMap: engine.gate.toolServerMap,
-        leasedCategories: engine.gate.leasedCategories,
-        globalBypass: engine.gate.globalBypass,
-        unattended: engine.gate.unattended,
-    });
+    const translator = new DeepAgentTranslator(engine.gate);
     const publisher = new InlinePublisher({
         workspaceBackend: workspace.backend,
         artifactStorage: input.artifactStorage,
-        statusWriter: builder,
+        artifacts: sink.transcript,
         executionId: input.executionId,
     });
-    return { builder, publisher };
+    return { translator, publisher };
+}
+/**
+ * Price one `message-finish`'s usage at the engine's rates and report it to
+ * the sink, which accounts, enforces the cost cap and writes `streamingUsage`
+ * (one writer of the summary). LangChain's `input_tokens` already INCLUDES the cache buckets
+ * (the Anthropic adapter folds them in; the cost advisory reads them the same
+ * way), so the counts are reported as delivered and the price is computed
+ * over the disjoint buckets. A sub-agent on its own model is priced at the
+ * parent's rate, as the in-graph cost cap always did (per-sub-agent pricing
+ * is #1121).
+ */
+function reportUsage(sink, engine, usage) {
+    const inputTokens = usage.input_tokens ?? 0;
+    const outputTokens = usage.output_tokens ?? 0;
+    const cacheReadTokens = usage.input_token_details?.cache_read ?? 0;
+    const cacheWriteTokens = usage.input_token_details?.cache_creation ?? 0;
+    const uncachedInput = Math.max(inputTokens - cacheReadTokens - cacheWriteTokens, 0);
+    sink.reportUsage({
+        inputTokens,
+        outputTokens,
+        cacheReadTokens,
+        cacheWriteTokens,
+        estimatedCostUsd: computeTurnCost(engine.pricing, uncachedInput, outputTokens, cacheWriteTokens, cacheReadTokens),
+        model: engine.modelName,
+    });
 }
 /**
  * Start the graph run and consume it to the end, folding every event into
@@ -109,7 +106,8 @@ export function createDeepAgentTranscript(input, sink, engine, workspace) {
 export async function consumeDeepAgentStream(deps) {
     const { input, sink, engine, graphInput, transcript } = deps;
     const { executionId } = input;
-    const { builder, publisher } = transcript;
+    const { translator, publisher } = transcript;
+    const builder = sink.transcript;
     const scheduler = new StreamingUpdateScheduler(loadStreamingConfig());
     const recorder = createV3EventRecorder(executionId, process.env.V3_EVENT_RECORD_DIR);
     const sideEffects = new StreamingSideEffects({ inlinePublisher: publisher });
@@ -152,18 +150,23 @@ export async function consumeDeepAgentStream(deps) {
                     return interrupted();
                 recorder?.record(event, eventsProcessed);
                 let detail;
-                for (const normalized of normalize(event)) {
-                    builder.processEvent(normalized);
+                for (const normalized of translator.translate(event)) {
+                    builder.apply(normalized);
+                    sideEffects.onEvent(normalized);
                     if (normalized.kind === "tool_started")
                         detail = normalized.name;
                 }
-                sideEffects.onProtocolEvent(event);
+                const usage = usageOf(event);
+                if (usage)
+                    reportUsage(sink, engine, usage);
                 eventsProcessed++;
                 sink.recordActivity(detail);
-                const persist = shouldPersistStreamingStatus({ deltaEnricherDirty: false, todosDirty: false, contentDirty: builder.forceNextUpdate }, scheduler, eventsProcessed);
+                const persist = shouldPersistStreamingStatus(builder.dirty, scheduler, eventsProcessed);
                 if (!persist)
                     continue;
-                builder.clearForceFlag();
+                // Cleared as the write is requested, not after it lands: a change
+                // that folds while the write is in flight must dirty the next one.
+                builder.markPersisted();
                 // The runtime attaches the mid-run file-change progress on this write
                 // (the chokepoint's step 2), as it does on every write. Awaited so a platform STOP the runtime reads from this write has
                 // aborted the signal by the time the next event arrives — where the

package/dist/activities/execute-deep-agent/turn-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"turn-stream.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/turn-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAWzD;;;GAGG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,aAAa,GAAG,KAAK,CAAC;AA8B5B,MAAM,UAAU,yBAAyB,CACvC,KAAgB,EAChB,IAAc,EACd,MAAuB,EACvB,SAA6B;IAE7B,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;QAClE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,yCAAyC;YACzC,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;YAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;YAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,mBAAmB,EAAE,UAAU,IAAI,CAAC,CAAC;YACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,cAAc,IAAI,CAAC,CAAC;YACxE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,eAAe,GAAG,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,WAAW,CAAC;gBACf,WAAW;gBACX,YAAY;gBACZ,eAAe;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC;gBACjH,KAAK,EAAE,MAAM,CAAC,SAAS;aACxB,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,OAAO,CAAC,mBAAmB,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;QACxC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;QAC9C,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,gBAAgB,EAAE,SAAS,CAAC,OAAO;QACnC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyB;IACpE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC7D,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAE1C,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,IAAI,UAAqD,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,UAAU,GAAG,SAAS,CAAC;QACvB,eAAe,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,mEAAmE;IACnE,MAAM,WAAW,GAAG,GAA0B,EAAE;QAC9C,QAAQ,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,eAAe;YACf,SAAS,EAAE,SAAS;YACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;SAC3D,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QAElD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAC1C,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EACpE,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAC7E,CAAkB,CAAC;QACpB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,+DAA+D;QAC/D,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,OAAO,WAAW,EAAE,CAAC;gBAElD,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBACzC,IAAI,MAA0B,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1C,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;oBACjC,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc;wBAAE,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;gBACnE,CAAC;gBACD,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBACnC,eAAe,EAAE,CAAC;gBAClB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAE5B,MAAM,OAAO,GAAG,4BAA4B,CAC1C,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,EACvF,SAAS,EACT,eAAe,CAChB,CAAC;gBACF,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,OAAO,CAAC,cAAc,EAAE,CAAC;gBACzB,sEAAsE;gBACtE,yHAAyH;gBACzH,oEAAoE;gBACpE,kDAAkD;gBAClD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,SAAS,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,6CAA6C;YAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO,WAAW,EAAE,CAAC;YAClD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kDAAkD;gBAClD,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,4CAA4C,CAAC,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,mBAAmB;gBAC3B,eAAe;gBACf,SAAS,EAAE,SAAS;gBACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;aAC3D,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,gCAAgC,eAAe,SAAS,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,CAAC,sBAAsB,EAAE,CAAC;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,WAAmB;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAClC,qBAAqB,EACrB,qCAAqC,qBAAqB,IAAI,EAC9D,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CACjB,CAAC;QACF,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,OAAO,CAAC,GAAG,CACT,2BAA2B,WAAW,0BAA0B;YAChE,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,EAAE,kBAAkB,KAAK,SAAS,EAAE,CACrH,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,MAAM,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"turn-stream.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/turn-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAuB,MAAM,iBAAiB,CAAC;AAWpF;;;GAGG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,aAAa,GAAG,KAAK,CAAC;AAiC5B,MAAM,UAAU,yBAAyB,CACvC,KAAgB,EAChB,IAAc,EACd,MAAuB,EACvB,SAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,gBAAgB,EAAE,SAAS,CAAC,OAAO;QACnC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,IAAc,EAAE,MAAuB,EAAE,KAAqB;IACjF,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,mBAAmB,EAAE,UAAU,IAAI,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,cAAc,IAAI,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,eAAe,GAAG,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,WAAW,CAAC;QACf,WAAW;QACX,YAAY;QACZ,eAAe;QACf,gBAAgB;QAChB,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC;QACjH,KAAK,EAAE,MAAM,CAAC,SAAS;KACxB,CAAC,CAAC;AACL,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyB;IACpE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC7D,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;IAEhC,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,IAAI,UAAqD,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,UAAU,GAAG,SAAS,CAAC;QACvB,eAAe,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,mEAAmE;IACnE,MAAM,WAAW,GAAG,GAA0B,EAAE;QAC9C,QAAQ,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,eAAe;YACf,SAAS,EAAE,SAAS;YACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;SAC3D,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QAElD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAC1C,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EACpE,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAC7E,CAAkB,CAAC;QACpB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,+DAA+D;QAC/D,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,OAAO,WAAW,EAAE,CAAC;gBAElD,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBACzC,IAAI,MAA0B,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC1B,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBAChC,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc;wBAAE,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;gBACnE,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,KAAK;oBAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC5C,eAAe,EAAE,CAAC;gBAClB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAE5B,MAAM,OAAO,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;gBACxF,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,kEAAkE;gBAClE,mEAAmE;gBACnE,OAAO,CAAC,aAAa,EAAE,CAAC;gBACxB,sEAAsE;gBACtE,yHAAyH;gBACzH,oEAAoE;gBACpE,kDAAkD;gBAClD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,SAAS,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,6CAA6C;YAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO,WAAW,EAAE,CAAC;YAClD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kDAAkD;gBAClD,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,4CAA4C,CAAC,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,mBAAmB;gBAC3B,eAAe;gBACf,SAAS,EAAE,SAAS;gBACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;aAC3D,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,gCAAgC,eAAe,SAAS,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,CAAC,sBAAsB,EAAE,CAAC;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,WAAmB;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAClC,qBAAqB,EACrB,qCAAqC,qBAAqB,IAAI,EAC9D,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CACjB,CAAC;QACF,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,OAAO,CAAC,GAAG,CACT,2BAA2B,WAAW,0BAA0B;YAChE,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,EAAE,kBAAkB,KAAK,SAAS,EAAE,CACrH,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,MAAM,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/activities/execute-deep-agent/turn.d.ts

@@ -24,7 +24,7 @@
  * other exception — a provider error unwrapped from LangChain's middleware
  * wrapper, an MCP connect failure, an empty stream — is `failed` on the
  * `internal` surface with `describeExecutionError`'s sentence as
- * `status.error` whole (Q-M2a-9). Never branches on why `stopSignal`
+ * `status.error` whole. Never branches on why `stopSignal`
  * aborted, never writes a phase or a terminal copy, never imports
  * `@temporalio/*` (`__tests__/adapter-is-temporal-free.test.ts`).
  *
@@ -33,9 +33,9 @@
  * are connected and closed per turn. Both are closed on EVERY exit path in
  * the `finally`, before the runtime removes the link and releases the lock.
  *
- * Extracted from `index.ts` `createDeepAgentActivities` at S3 M2a; the
+ * Extracted from `index.ts` `createDeepAgentActivities` in #1096; the
  * hermetic goldens under `__tests__/hermetic/` pin the result byte for
- * byte, with the ruled alignments quoted in their headers.
+ * byte, with that move's deliberate alignments quoted in their headers.
  */
 import type { TurnInput, TurnOutcome, TurnSink } from "../../harness/types.js";
 import { type DeepAgentAdapterConfig } from "./turn-setup.js";

package/dist/activities/execute-deep-agent/turn.js

@@ -24,7 +24,7 @@
  * other exception — a provider error unwrapped from LangChain's middleware
  * wrapper, an MCP connect failure, an empty stream — is `failed` on the
  * `internal` surface with `describeExecutionError`'s sentence as
- * `status.error` whole (Q-M2a-9). Never branches on why `stopSignal`
+ * `status.error` whole. Never branches on why `stopSignal`
  * aborted, never writes a phase or a terminal copy, never imports
  * `@temporalio/*` (`__tests__/adapter-is-temporal-free.test.ts`).
  *
@@ -33,9 +33,9 @@
  * are connected and closed per turn. Both are closed on EVERY exit path in
  * the `finally`, before the runtime removes the link and releases the lock.
  *
- * Extracted from `index.ts` `createDeepAgentActivities` at S3 M2a; the
+ * Extracted from `index.ts` `createDeepAgentActivities` in #1096; the
  * hermetic goldens under `__tests__/hermetic/` pin the result byte for
- * byte, with the ruled alignments quoted in their headers.
+ * byte, with that move's deliberate alignments quoted in their headers.
  */
 import { tryInferProvider } from "../../shared/llm-proxy.js";
 import { describeExecutionError } from "../../shared/model-error.js";

package/dist/config.d.ts

@@ -142,8 +142,8 @@ export interface Config {
      * provides the proxy credential and mints no other, so
      * `proxyTokenRef === stigmerTokenRef`), the manager binds the minted runner
      * token (`proxyTokenRef === stigmerRunnerTokenRef`). Reading either sibling
-     * directly would send the wrong credential from one of the two roots
-     * (Q-S2-7). Required whenever `proxyEndpoint` is set; the Cursor adapter's
+     * directly would send the wrong credential from one of the two roots.
+     * Required whenever `proxyEndpoint` is set; the Cursor adapter's
      * boot refuses a proxy without it.
      */
     readonly proxyTokenRef?: {

package/dist/harness/approval-decisions.d.ts

@@ -34,7 +34,7 @@
  *
  * This is the contract as of stigmer#197: REJECT denies the tool and the run
  * CONTINUES; it never fails the execution. The native harness proved it
- * (`hitl.ts` `reconcileNonExecutingDecisions`, moved here at S3 M1) and the
+ * (`hitl.ts` `reconcileNonExecutingDecisions`, moved here in #1096) and the
  * conformance suite (`agentexecution-approval.conformance.test.ts`) is its
  * arbiter for both harnesses.
  */

package/dist/harness/approval-decisions.js

@@ -34,7 +34,7 @@
  *
  * This is the contract as of stigmer#197: REJECT denies the tool and the run
  * CONTINUES; it never fails the execution. The native harness proved it
- * (`hitl.ts` `reconcileNonExecutingDecisions`, moved here at S3 M1) and the
+ * (`hitl.ts` `reconcileNonExecutingDecisions`, moved here in #1096) and the
  * conformance suite (`agentexecution-approval.conformance.test.ts`) is its
  * arbiter for both harnesses.
  */

package/dist/harness/capabilities.d.ts

@@ -15,8 +15,8 @@
  * the Cursor builder renders the session's first user message), and the
  * shared prompt glue (`shared/prompt-sections.ts`) is written so that
  * placement stays each adapter's. The runtime would branch on it only if it
- * ever composed prompts itself — the S4/S5 unification question, not a phase
- * that exists (S3 M5, Q-M5-6).
+ * ever composed prompts itself — an open unification question (#1135), not a
+ * phase that exists.
  *
  * The matrix the contract was designed against (2026-09; Claude and Codex are
  * the surveyed SDKs, not built harnesses):
@@ -51,12 +51,22 @@ import type { VisionProfile } from "../shared/attachment-vision.js";
  *  - `deny-and-retry`: an out-of-process hook denies the tool, the adapter
  *    records the denial, cancels the run, and re-runs with grants on the next
  *    invocation.
- *  - `callback`: an in-process callback decides per tool; the runtime still
- *    returns `awaiting_approval` and reinvokes, so the adapter answers the
- *    callback with "deny, stop" and resumes with the decisions.
- *  - `none`: the engine offers no gate; the runtime confines it to
- *    capture-only work (a read-only sandbox) and gated actions never reach
- *    the engine.
+ *  - `callback`: an in-process callback decides per tool. The intended shape
+ *    is the `interrupt` one seen from the runtime: the turn still ends
+ *    `awaiting_approval` and reinvokes, and the adapter answers the callback
+ *    with "deny, stop" and resumes with the decisions.
+ *  - `none`: the engine offers no gate. The intended shape is that the
+ *    runtime confines such a harness to capture-only work (a read-only
+ *    sandbox) so a gated action never reaches the engine.
+ *
+ * Two of the four are built and two are reserved. `interrupt` (native) and
+ * `deny-and-retry` (Cursor) each have a real adapter and the contract kit
+ * runs under both. `callback` and `none` come from the 2026-09 survey of the
+ * Claude and Codex SDKs: the type carries them so an adapter can declare
+ * them, but no adapter does, and the runtime reads `pausePrimitive` in one
+ * place only (`turn-context.ts` `regeneratesApprovedWrites`, which returns
+ * false for `none`). The capture-only confinement for `none` is design
+ * still to be done before the first gate-less harness lands.
  */
 export type PausePrimitive = "interrupt" | "deny-and-retry" | "callback" | "none";
 /**
@@ -74,9 +84,9 @@ export type StateIdSource = "deterministic" | "engine-minted";
  * workspace-relative paths the harness writes into the repo that a turn's
  * diff must never show (Cursor's transient `.cursor/hooks.json`). Declared
  * once per adapter, read by `harness/capture.ts` (the pin, the progress
- * slice, the candidate) and `turn-context.ts` (the reconcile). Ruled Q-M2-6
- * as an argument, homed here at S2 M3; the capture joined the reconcile as a
- * reader at S3 M4.
+ * slice, the candidate) and `turn-context.ts` (the reconcile). First passed
+ * as an argument, then homed here as a capability (#1070); the capture joined
+ * the reconcile as a reader in #1096.
  */
 export interface FileReviewIdentity {
     readonly harnessId: string;

package/dist/harness/capabilities.js

@@ -15,8 +15,8 @@
  * the Cursor builder renders the session's first user message), and the
  * shared prompt glue (`shared/prompt-sections.ts`) is written so that
  * placement stays each adapter's. The runtime would branch on it only if it
- * ever composed prompts itself — the S4/S5 unification question, not a phase
- * that exists (S3 M5, Q-M5-6).
+ * ever composed prompts itself — an open unification question (#1135), not a
+ * phase that exists.
  *
  * The matrix the contract was designed against (2026-09; Claude and Codex are
  * the surveyed SDKs, not built harnesses):

package/dist/harness/capture.d.ts

@@ -21,7 +21,7 @@
  * that the runtime cannot read is what its engine observed touching
  * CAS-owned paths (`TurnSink.bindCasObservations`).
  *
- * Until S3 M4 both adapters carried this whole act (Cursor in its
+ * Until #1096 both adapters carried this whole act (Cursor in its
  * `turn-boundary.ts` between the stream and `run.wait()`, the deep-agent in
  * its `turn-settle.ts`), each with its own evidence source and its own
  * scoping rules for the provenance and the stamp. The two rules here are the
@@ -33,7 +33,7 @@
  *    position, because on BOTH engines an approved command executes on the
  *    row the runtime seeded for it (the deep-agent's builder and Cursor's
  *    translator both reconcile the re-attempt onto the seeded WAITING row),
- *    at its prior position; a positional scope misses it (F-M4-P3: Cursor's
+ *    at its prior position; a positional scope misses it (Cursor's
  *    did, so its auto-keep never qualified a gated-then-approved command).
  *    "Executed" is a COMPLETED row. "Consented" is the row's own
  *    server-authored `approval_action` — the seeded row keeps its id and its
@@ -50,10 +50,10 @@
  * The substrate and the ledger authoring (`shared/filereview/capture.ts`,
  * `cas-touched.ts`, `progress.ts`); the resume-time reconcile
  * (`turn-context.ts` `reconcileReinvocation`, already the runtime's since
- * S2); the outcome matrix that turns "a review is pending" into a phase
+ * #1070); the outcome matrix that turns "a review is pending" into a phase
  * (`run-turn.ts`, through `terminal-table.ts` `awaitingReviewArm`).
  *
- * TWO GAPS THIS MODULE DOES NOT CLOSE (recorded for S5, S3 M4 F-M4-P-gaps)
+ * TWO GAPS THIS MODULE DOES NOT CLOSE (recorded as #1115)
  * ----------------------------------------------------------------------
  * A turn that ends `interrupted` is not captured (a stop fired; the tree may
  * be mid-edit). So a platform STOP returns COMPLETED with unreviewed edits

package/dist/harness/capture.js

@@ -21,7 +21,7 @@
  * that the runtime cannot read is what its engine observed touching
  * CAS-owned paths (`TurnSink.bindCasObservations`).
  *
- * Until S3 M4 both adapters carried this whole act (Cursor in its
+ * Until #1096 both adapters carried this whole act (Cursor in its
  * `turn-boundary.ts` between the stream and `run.wait()`, the deep-agent in
  * its `turn-settle.ts`), each with its own evidence source and its own
  * scoping rules for the provenance and the stamp. The two rules here are the
@@ -33,7 +33,7 @@
  *    position, because on BOTH engines an approved command executes on the
  *    row the runtime seeded for it (the deep-agent's builder and Cursor's
  *    translator both reconcile the re-attempt onto the seeded WAITING row),
- *    at its prior position; a positional scope misses it (F-M4-P3: Cursor's
+ *    at its prior position; a positional scope misses it (Cursor's
  *    did, so its auto-keep never qualified a gated-then-approved command).
  *    "Executed" is a COMPLETED row. "Consented" is the row's own
  *    server-authored `approval_action` — the seeded row keeps its id and its
@@ -50,10 +50,10 @@
  * The substrate and the ledger authoring (`shared/filereview/capture.ts`,
  * `cas-touched.ts`, `progress.ts`); the resume-time reconcile
  * (`turn-context.ts` `reconcileReinvocation`, already the runtime's since
- * S2); the outcome matrix that turns "a review is pending" into a phase
+ * #1070); the outcome matrix that turns "a review is pending" into a phase
  * (`run-turn.ts`, through `terminal-table.ts` `awaitingReviewArm`).
  *
- * TWO GAPS THIS MODULE DOES NOT CLOSE (recorded for S5, S3 M4 F-M4-P-gaps)
+ * TWO GAPS THIS MODULE DOES NOT CLOSE (recorded as #1115)
  * ----------------------------------------------------------------------
  * A turn that ends `interrupted` is not captured (a stop fired; the tree may
  * be mid-edit). So a platform STOP returns COMPLETED with unreviewed edits

package/dist/harness/persist-chokepoint.d.ts

@@ -15,7 +15,7 @@
  *     the tree is read at most once per floor interval and only re-attached
  *     when it moved (`shared/filereview/progress.ts`), so a write that
  *     changed nothing on disk carries the snapshot it already had. Before
- *     S3 M4 each adapter's stream loop did this before its own persists; the
+ *     #1096 each adapter's stream loop did this before its own persists; the
  *     runtime owns the capture now, so the display field it derives is
  *     refreshed where every other runtime-owned field is — here.
  *  3. `streaming_usage` is refreshed from the accumulator when it has turns,
@@ -23,7 +23,7 @@
  *  4. `persistStatus` (`shared/status.ts`): tool-output offload, the
  *     aggregate size cap, transient retry, oversize recovery. Never rejects.
  *  5. A Temporal heartbeat, so a long streaming turn's liveness is proven by
- *     the writes it makes (Q-S2-10).
+ *     the writes it makes.
  *  6. The control plane's answer: STOP becomes the runtime's platform-stop
  *     cause on the stop controller, which aborts the adapter's signal.
  *
@@ -34,7 +34,7 @@
  * and resolves when that follow-up has. The promise it returns therefore
  * always means "the state as of my request is on the control plane", which
  * is what lets the Cursor loop await it and see a STOP before it pulls the
- * next event, exactly as its own inline persist did (Q-M3-2).
+ * next event, exactly as its own inline persist did.
  *
  * The runtime's terminal writes use the same path (`write()`), so the
  * secret backstop and the usage summary ride the final status too, as they

package/dist/harness/persist-chokepoint.js

@@ -15,7 +15,7 @@
  *     the tree is read at most once per floor interval and only re-attached
  *     when it moved (`shared/filereview/progress.ts`), so a write that
  *     changed nothing on disk carries the snapshot it already had. Before
- *     S3 M4 each adapter's stream loop did this before its own persists; the
+ *     #1096 each adapter's stream loop did this before its own persists; the
  *     runtime owns the capture now, so the display field it derives is
  *     refreshed where every other runtime-owned field is — here.
  *  3. `streaming_usage` is refreshed from the accumulator when it has turns,
@@ -23,7 +23,7 @@
  *  4. `persistStatus` (`shared/status.ts`): tool-output offload, the
  *     aggregate size cap, transient retry, oversize recovery. Never rejects.
  *  5. A Temporal heartbeat, so a long streaming turn's liveness is proven by
- *     the writes it makes (Q-S2-10).
+ *     the writes it makes.
  *  6. The control plane's answer: STOP becomes the runtime's platform-stop
  *     cause on the stop controller, which aborts the adapter's signal.
  *
@@ -34,7 +34,7 @@
  * and resolves when that follow-up has. The promise it returns therefore
  * always means "the state as of my request is on the control plane", which
  * is what lets the Cursor loop await it and see a STOP before it pulls the
- * next event, exactly as its own inline persist did (Q-M3-2).
+ * next event, exactly as its own inline persist did.
  *
  * The runtime's terminal writes use the same path (`write()`), so the
  * secret backstop and the usage summary ride the final status too, as they