@stigmer/runner 3.15.3-dev.20260914100347 → 3.15.3-dev.20260916211208

package/dist/shared/approval-policy.d.ts

@@ -242,3 +242,56 @@ export declare function lookupMcpToolPolicy(toolName: string, mcpServerSlug: str
  * - Missing fields are replaced with "<unknown>"
  */
 export declare function resolveApprovalMessage(template: string, toolName: string, args: Record<string, unknown>): string;
+/**
+ * THE approval-message template per mutating built-in category — the one
+ * table both harnesses word their approval cards from (since #1097).
+ * Keyed by category (not raw tool name) so every alias of a mutation renders
+ * one message; placeholders resolve against the stream arg shape
+ * (`path`/`command`; `resolveApprovalMessage`). The native gate decides with
+ * it (`resolveToolApproval`), the Cursor translator words its `gate` from it
+ * (`execute-cursor/approval-policy.ts` `getBuiltInApprovalMessage`), and the
+ * Cursor boundary resolves a denied call's message through the same path.
+ *
+ * Until then the Cursor harness carried a table of its own and the two differed
+ * by a word — `shell` read "Run command" there and "Execute command" here.
+ * Unified on the plainer word: a user reads "Run command" and knows
+ * what is being asked. Known and deliberately left (#1112):
+ * `write` resolves `{{args.path}}`, while deepagents' file tools send
+ * `file_path`, so a gated native write reads "Write file: <unknown>".
+ */
+export declare const CATEGORY_APPROVAL_MESSAGE: Record<ToolApprovalCategory, string>;
+/** What the gate decides for one call: whether it waits, the message the card shows, and which layer said so. */
+export interface ApprovalRequirement {
+    readonly requiresApproval: boolean;
+    readonly message: string;
+    /** Which policy layer determined this verdict — stamped on the shadow receipt. */
+    readonly source: PolicySource;
+}
+/**
+ * THE approval decision for one tool call — the same function the native gate
+ * (`middleware/approval-gate.ts`) interrupts on and the native translator
+ * reports as `tool_started.gate`, so the row can never disagree with the gate
+ * about whether a call waits (since #1097; until then the transcript
+ * builder carried its own weaker copy that gated MCP tools only). Its
+ * read-side twin is {@link resolveApprovalProvenance}, which answers "which
+ * layer governs this call" for EVERY call, gated or not.
+ *
+ * MCP tools stay governed by the connect-flow classifier + four-level policy
+ * chain. The policy map carries only the tools that REQUIRE approval, so an
+ * absent entry means the classifier already auto-approved it — fail-OPEN is
+ * correct here (a fail-closed default would re-gate everything the classifier
+ * cleared). A server-scoped lease surfaces as an absent entry too: the leased
+ * server's tools are dropped from `policies` upstream (`mergeApprovalPolicies`),
+ * so a lease-cleared MCP tool takes the same auto-approve path (its receipt
+ * therefore reads classifier_default rather than approval_lease; a faithful
+ * per-server lease provenance would need the lease set threaded here and is
+ * deferred with the rest of the persisted-receipt work).
+ *
+ * Built-in/platform tools: gate exactly the mutating categories through the
+ * shared classifier — fail-CLOSED for the mutating set (write/edit/delete/shell
+ * require approval), fail-open for read-only and unclassified built-ins. A
+ * run-lifetime category lease (the user chose "approve all <category>" earlier
+ * in this run) auto-approves every built-in of that category for the rest of
+ * the run — the scoped successor to auto-approve-all.
+ */
+export declare function resolveToolApproval(toolName: string, serverSlug: string, args: Record<string, unknown>, policies: ReadonlyMap<string, MergedToolPolicy>, leasedCategories: ReadonlySet<ToolApprovalCategory>): ApprovalRequirement;

package/dist/shared/approval-policy.js

@@ -348,4 +348,80 @@ export function resolveApprovalMessage(template, toolName, args) {
         return JSON.stringify(value);
     });
 }
+// ── The gate's decision ─────────────────────────────────────────────
+/**
+ * THE approval-message template per mutating built-in category — the one
+ * table both harnesses word their approval cards from (since #1097).
+ * Keyed by category (not raw tool name) so every alias of a mutation renders
+ * one message; placeholders resolve against the stream arg shape
+ * (`path`/`command`; `resolveApprovalMessage`). The native gate decides with
+ * it (`resolveToolApproval`), the Cursor translator words its `gate` from it
+ * (`execute-cursor/approval-policy.ts` `getBuiltInApprovalMessage`), and the
+ * Cursor boundary resolves a denied call's message through the same path.
+ *
+ * Until then the Cursor harness carried a table of its own and the two differed
+ * by a word — `shell` read "Run command" there and "Execute command" here.
+ * Unified on the plainer word: a user reads "Run command" and knows
+ * what is being asked. Known and deliberately left (#1112):
+ * `write` resolves `{{args.path}}`, while deepagents' file tools send
+ * `file_path`, so a gated native write reads "Write file: <unknown>".
+ */
+export const CATEGORY_APPROVAL_MESSAGE = {
+    write: "Write file: {{args.path}}",
+    delete: "Delete: {{args.path}}",
+    shell: "Run command: {{args.command}}",
+};
+/**
+ * THE approval decision for one tool call — the same function the native gate
+ * (`middleware/approval-gate.ts`) interrupts on and the native translator
+ * reports as `tool_started.gate`, so the row can never disagree with the gate
+ * about whether a call waits (since #1097; until then the transcript
+ * builder carried its own weaker copy that gated MCP tools only). Its
+ * read-side twin is {@link resolveApprovalProvenance}, which answers "which
+ * layer governs this call" for EVERY call, gated or not.
+ *
+ * MCP tools stay governed by the connect-flow classifier + four-level policy
+ * chain. The policy map carries only the tools that REQUIRE approval, so an
+ * absent entry means the classifier already auto-approved it — fail-OPEN is
+ * correct here (a fail-closed default would re-gate everything the classifier
+ * cleared). A server-scoped lease surfaces as an absent entry too: the leased
+ * server's tools are dropped from `policies` upstream (`mergeApprovalPolicies`),
+ * so a lease-cleared MCP tool takes the same auto-approve path (its receipt
+ * therefore reads classifier_default rather than approval_lease; a faithful
+ * per-server lease provenance would need the lease set threaded here and is
+ * deferred with the rest of the persisted-receipt work).
+ *
+ * Built-in/platform tools: gate exactly the mutating categories through the
+ * shared classifier — fail-CLOSED for the mutating set (write/edit/delete/shell
+ * require approval), fail-open for read-only and unclassified built-ins. A
+ * run-lifetime category lease (the user chose "approve all <category>" earlier
+ * in this run) auto-approves every built-in of that category for the rest of
+ * the run — the scoped successor to auto-approve-all.
+ */
+export function resolveToolApproval(toolName, serverSlug, args, policies, leasedCategories) {
+    if (serverSlug) {
+        const key = `${serverSlug}/${toolName}`;
+        const policy = policies.get(key);
+        if (policy) {
+            return {
+                requiresApproval: policy.requiresApproval,
+                message: resolveApprovalMessage(policy.approvalMessage, toolName, args),
+                source: policy.source,
+            };
+        }
+        return { requiresApproval: false, message: "", source: "classifier_default" };
+    }
+    const category = toolApprovalCategory(toolName);
+    if (category) {
+        if (leasedCategories.has(category)) {
+            return { requiresApproval: false, message: "", source: "approval_lease" };
+        }
+        return {
+            requiresApproval: true,
+            message: resolveApprovalMessage(CATEGORY_APPROVAL_MESSAGE[category], toolName, args),
+            source: "builtin_category",
+        };
+    }
+    return { requiresApproval: false, message: "", source: "builtin_category" };
+}
 //# sourceMappingURL=approval-policy.js.map

package/dist/shared/approval-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../src/shared/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AAClI,OAAO,EAAE,oBAAoB,EAA6B,MAAM,gBAAgB,CAAC;AA8CjF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,aAAqB;IAErB,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAyB;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,MAAM,QAAQ,GAAG,CAAC,EAIjB,EAAQ,EAAE;QACT,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;YAAE,OAAO;QAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS;gBAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC3C,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;gBAClC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS;oBAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,cAAc,IAAI,KAAK;QAC/C,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAyB;IAChE,OAAO,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,YAAY,KAAK,YAAY,CAAC,UAAU,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,CACL,SAAS,QAAQ,kDAAkD;QACnE,mEAAmE;QACnE,kEAAkE;QAClE,iEAAiE;QACjE,2DAA2D;QAC3D,YAAY,CACb,CAAC;AACJ,CAAC;AA4BD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgC;IAClE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,oBAAoB;YACvB,OAAO,oBAAoB,CAAC,kBAAkB,CAAC;QACjD,KAAK,iBAAiB;YACpB,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAC9C,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,cAAc,CAAC;QAC7C,KAAK,kBAAkB;YACrB,OAAO,oBAAoB,CAAC,gBAAgB,CAAC;QAC/C,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,cAAc,CAAC;QAC7C,KAAK,kBAAkB;YACrB,OAAO,oBAAoB,CAAC,gBAAgB,CAAC;QAC/C,KAAK,gCAAgC;YACnC,OAAO,oBAAoB,CAAC,8BAA8B,CAAC;QAC7D,KAAK,iBAAiB;YACpB,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAC9C,KAAK,cAAc;YACjB,2EAA2E;YAC3E,wEAAwE;YACxE,mEAAmE;YACnE,OAAO,oBAAoB,CAAC,WAAW,CAAC;QAC1C,KAAK,SAAS;YACZ,OAAO,oBAAoB,CAAC,WAAW,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,UAAkB,EAClB,QAA+C,EAC/C,gBAAmD,EACnD,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,kBAAkB,CAAC;IAE5C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACjC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC5D,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAoC,EACpC,MAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAEjC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,iDAAiD;QACjD,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QAE9C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgF,CAAC;QAE/G,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;gBAC7D,MAAM,EAAE,MAAM,CAAC,mBAAmB;oBAChC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,oBAAoB;aACzB,CAAC,CAAC;QACL,CAAC;QAED,+EAA+E;QAC/E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;gBAC7G,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,mEAAmE;QACnE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,QAAQ;QACR,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;gBACtD,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC;gBACnC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBACtC,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACrC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;oBACpC,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iBAAiB,QAAQ,CAAC,QAAQ,EAAE;oBACjE,MAAM,EAAE,gBAAgB;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,QAAQ;gBACR,aAAa,EAAE,MAAM,CAAC,IAAI;gBAC1B,gBAAgB,EAAE,IAAI;gBACtB,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,aAAqB,EACrB,QAA+C;IAE/C,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAgB,EAChB,IAA6B;IAE7B,OAAO,QAAQ;SACZ,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC;SACvC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../src/shared/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AAClI,OAAO,EAAE,oBAAoB,EAA6B,MAAM,gBAAgB,CAAC;AA8CjF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,aAAqB;IAErB,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAyB;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,MAAM,QAAQ,GAAG,CAAC,EAIjB,EAAQ,EAAE;QACT,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;YAAE,OAAO;QAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS;gBAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC3C,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;gBAClC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS;oBAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,cAAc,IAAI,KAAK;QAC/C,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAyB;IAChE,OAAO,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,YAAY,KAAK,YAAY,CAAC,UAAU,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,CACL,SAAS,QAAQ,kDAAkD;QACnE,mEAAmE;QACnE,kEAAkE;QAClE,iEAAiE;QACjE,2DAA2D;QAC3D,YAAY,CACb,CAAC;AACJ,CAAC;AA4BD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgC;IAClE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,oBAAoB;YACvB,OAAO,oBAAoB,CAAC,kBAAkB,CAAC;QACjD,KAAK,iBAAiB;YACpB,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAC9C,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,cAAc,CAAC;QAC7C,KAAK,kBAAkB;YACrB,OAAO,oBAAoB,CAAC,gBAAgB,CAAC;QAC/C,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,cAAc,CAAC;QAC7C,KAAK,kBAAkB;YACrB,OAAO,oBAAoB,CAAC,gBAAgB,CAAC;QAC/C,KAAK,gCAAgC;YACnC,OAAO,oBAAoB,CAAC,8BAA8B,CAAC;QAC7D,KAAK,iBAAiB;YACpB,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAC9C,KAAK,cAAc;YACjB,2EAA2E;YAC3E,wEAAwE;YACxE,mEAAmE;YACnE,OAAO,oBAAoB,CAAC,WAAW,CAAC;QAC1C,KAAK,SAAS;YACZ,OAAO,oBAAoB,CAAC,WAAW,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,UAAkB,EAClB,QAA+C,EAC/C,gBAAmD,EACnD,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,kBAAkB,CAAC;IAE5C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACjC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC5D,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAoC,EACpC,MAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAEjC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,iDAAiD;QACjD,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QAE9C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgF,CAAC;QAE/G,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;gBAC7D,MAAM,EAAE,MAAM,CAAC,mBAAmB;oBAChC,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,oBAAoB;aACzB,CAAC,CAAC;QACL,CAAC;QAED,+EAA+E;QAC/E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;gBAC7G,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,mEAAmE;QACnE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,QAAQ;QACR,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;gBACtD,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC;gBACnC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBACtC,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACrC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;oBACpC,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iBAAiB,QAAQ,CAAC,QAAQ,EAAE;oBACjE,MAAM,EAAE,gBAAgB;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,QAAQ;gBACR,aAAa,EAAE,MAAM,CAAC,IAAI;gBAC1B,gBAAgB,EAAE,IAAI;gBACtB,eAAe,EAAE,MAAM,CAAC,OAAO;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,aAAqB,EACrB,QAA+C;IAE/C,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAgB,EAChB,IAA6B;IAE7B,OAAO,QAAQ;SACZ,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC;SACvC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyC;IAC7E,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,uBAAuB;IAC/B,KAAK,EAAE,+BAA+B;CACvC,CAAC;AAUF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,UAAkB,EAClB,IAA6B,EAC7B,QAA+C,EAC/C,gBAAmD;IAEnD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC;gBACvE,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO;YACL,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE,sBAAsB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;YACpF,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;AAC9E,CAAC"}

package/dist/shared/args-preview.d.ts

@@ -8,51 +8,74 @@
  * JSON: the per-tool offload does not touch it, and the aggregate size backstop
  * would replace an oversized preview with an unparseable marker.
  *
- * This module is the single home for arg sanitization shared by both harnesses
- * (native re-exports {@link sanitizeArgsPreview} from its status builders; the
- * Cursor gate path uses {@link buildElidedArgsPreview}).
+ * ONE preview rule for every row (since #1097): the transcript builder
+ * stamps every tool row's preview through {@link buildElidedArgsPreview} over
+ * {@link SALIENT_ARG_FIELDS}, as `message.proto` promises — sanitized,
+ * redacted, at creation, for inline visibility. Until then there were two
+ * rules: native stamped a whole-string-truncating `sanitizeArgsPreview` on
+ * gated rows only (a preview that could truncate to invalid JSON, acceptable
+ * only because native's resume never re-parsed it), and Cursor's stream path
+ * stamped `JSON.stringify(args)` unredacted. Both are
+ * gone; this module holds the one builder and the one salient list.
+ *
+ * THE PREVIEW NEVER CARRIES A VALUE IT CANNOT CARRY WHOLE. A non-salient
+ * string over the per-value cap is left out of the preview — not replaced by
+ * an in-band marker. The marker this module wrote until #1097 (`"[381
+ * chars]"`) was a string no reader could tell from content: the approval gate
+ * rendered it as the file the user was asked to approve (stigmer#1107). An
+ * absent key is the out-of-band signal every reader already handles — a
+ * surface that needs the whole value reads the row's `args`, the way the
+ * gate does now; the codebase's precedent for "content not included" is a
+ * typed fact on the wire (file review's `FileReviewBlockReason`), never a
+ * display string, and the approval projection gaining such a fact is a
+ * follow-up of its own. The cost, named: the CLI's and ink's one-line preview
+ * loses the value's size, and Cursor's recovery digest reads `tool({})` for
+ * an MCP tool whose only argument is oversized.
  */
 /**
  * Argument keys whose values are secrets and must never appear in a preview.
  * Matched case-insensitively against the top-level key name.
  */
 export declare const SENSITIVE_ARG_KEYS: ReadonlySet<string>;
-/** Whole-preview length cap for {@link sanitizeArgsPreview} (native). */
-export declare const MAX_ARGS_PREVIEW_LENGTH = 500;
 /**
- * Sanitize args into a compact preview string (native harness behavior).
- *
- * Redacts sensitive keys, then truncates the whole JSON to a fixed length. The
- * truncation can yield invalid JSON, which is acceptable for the native harness
- * (its resume model keys on `tool_call_id`, never on a re-parsed preview). The
- * Cursor gate path must instead use {@link buildElidedArgsPreview}, which keeps
- * the JSON valid and preserves the salient identity fields.
+ * Top-level tool-argument fields, in priority order, that identify the specific
+ * resource a built-in tool acts on — the values a preview must carry VERBATIM,
+ * however long, because an identity is parsed back out of them. The list
+ * deliberately spans BOTH taxonomies' arg shapes: Cursor's hook input names a
+ * file `file_path` and its stream names it `path`; deepagents' file tools send
+ * `file_path`; both name a shell command `command`. Extracting the same
+ * resource VALUE on both sides (the absolute path / the command string) is
+ * what lets the Cursor hook-recorded denial token equal the stream-computed
+ * token. Authored here once (moved from `execute-cursor/approval-policy.ts`
+ * in #1097) and injected into the generated preToolUse hook script
+ * so the runner and the hook never disagree on which field to match.
  */
+export declare const SALIENT_ARG_FIELDS: readonly ["file_path", "path", "target_notebook", "command"];
 /**
  * Redact secret-keyed values (see {@link SENSITIVE_ARG_KEYS}), preserving every
- * other entry verbatim. The shared first step of both preview builders, and the
- * shape stamped as `args` on interrupt-placeholder tool calls (issue #754's
- * header fix): full enough for the UI's path/primary-arg extraction, never
- * carrying a secret value.
+ * other entry verbatim. The first step of the preview builder, and the shape
+ * stamped as `args` on a proposed row the harness recovered from its engine's
+ * state (issue #754's header fix): full enough for the UI's path/primary-arg
+ * extraction, never carrying a secret value.
  */
 export declare function redactSensitiveArgs(args: Record<string, unknown>): Record<string, unknown>;
-export declare function sanitizeArgsPreview(args: Record<string, unknown>): string;
 /**
  * Build a compact, ALWAYS-VALID `args_preview` from a tool call's full,
  * authoritative arguments.
  *
- * Unlike {@link sanitizeArgsPreview} (which truncates the whole string, possibly
- * to invalid JSON), this elides oversized string *values* in place — preserving
- * every key and the JSON structure. Two invariants make it safe for the Cursor
- * gate path:
+ * Leaves oversized string *values* out — every other key and the JSON
+ * structure kept — rather than truncating the whole string. Two invariants
+ * make it safe for the Cursor gate path:
  *  - It NEVER elides a salient field (the resume grant's identity — the file
  *    path or shell command — is parsed back out of this preview, so it must
  *    survive verbatim).
  *  - It redacts secret keys.
  *
+ * For short, secret-free args the output is exactly `JSON.stringify(args)`.
  * The heavy content (a whole-file body, a large diff) lives on `file_changes`
  * (offloaded to a ref when large) and `args` (bounded by the size backstop), so
- * the preview itself stays small even for a multi-MB write.
+ * the preview itself stays small even for a multi-MB write. Unserializable
+ * args (a cycle) yield `""`, never a thrown row.
  *
  * @param args the full tool arguments
  * @param salientFields keys whose values must be preserved verbatim (identity)

package/dist/shared/args-preview.js

@@ -8,9 +8,29 @@
  * JSON: the per-tool offload does not touch it, and the aggregate size backstop
  * would replace an oversized preview with an unparseable marker.
  *
- * This module is the single home for arg sanitization shared by both harnesses
- * (native re-exports {@link sanitizeArgsPreview} from its status builders; the
- * Cursor gate path uses {@link buildElidedArgsPreview}).
+ * ONE preview rule for every row (since #1097): the transcript builder
+ * stamps every tool row's preview through {@link buildElidedArgsPreview} over
+ * {@link SALIENT_ARG_FIELDS}, as `message.proto` promises — sanitized,
+ * redacted, at creation, for inline visibility. Until then there were two
+ * rules: native stamped a whole-string-truncating `sanitizeArgsPreview` on
+ * gated rows only (a preview that could truncate to invalid JSON, acceptable
+ * only because native's resume never re-parsed it), and Cursor's stream path
+ * stamped `JSON.stringify(args)` unredacted. Both are
+ * gone; this module holds the one builder and the one salient list.
+ *
+ * THE PREVIEW NEVER CARRIES A VALUE IT CANNOT CARRY WHOLE. A non-salient
+ * string over the per-value cap is left out of the preview — not replaced by
+ * an in-band marker. The marker this module wrote until #1097 (`"[381
+ * chars]"`) was a string no reader could tell from content: the approval gate
+ * rendered it as the file the user was asked to approve (stigmer#1107). An
+ * absent key is the out-of-band signal every reader already handles — a
+ * surface that needs the whole value reads the row's `args`, the way the
+ * gate does now; the codebase's precedent for "content not included" is a
+ * typed fact on the wire (file review's `FileReviewBlockReason`), never a
+ * display string, and the approval projection gaining such a fact is a
+ * follow-up of its own. The cost, named: the CLI's and ink's one-line preview
+ * loses the value's size, and Cursor's recovery digest reads `tool({})` for
+ * an MCP tool whose only argument is oversized.
  */
 /**
  * Argument keys whose values are secrets and must never appear in a preview.
@@ -20,23 +40,26 @@ export const SENSITIVE_ARG_KEYS = new Set([
     "password", "token", "secret", "api_key", "apikey",
     "credentials", "auth", "authorization",
 ]);
-/** Whole-preview length cap for {@link sanitizeArgsPreview} (native). */
-export const MAX_ARGS_PREVIEW_LENGTH = 500;
 /**
- * Sanitize args into a compact preview string (native harness behavior).
- *
- * Redacts sensitive keys, then truncates the whole JSON to a fixed length. The
- * truncation can yield invalid JSON, which is acceptable for the native harness
- * (its resume model keys on `tool_call_id`, never on a re-parsed preview). The
- * Cursor gate path must instead use {@link buildElidedArgsPreview}, which keeps
- * the JSON valid and preserves the salient identity fields.
+ * Top-level tool-argument fields, in priority order, that identify the specific
+ * resource a built-in tool acts on — the values a preview must carry VERBATIM,
+ * however long, because an identity is parsed back out of them. The list
+ * deliberately spans BOTH taxonomies' arg shapes: Cursor's hook input names a
+ * file `file_path` and its stream names it `path`; deepagents' file tools send
+ * `file_path`; both name a shell command `command`. Extracting the same
+ * resource VALUE on both sides (the absolute path / the command string) is
+ * what lets the Cursor hook-recorded denial token equal the stream-computed
+ * token. Authored here once (moved from `execute-cursor/approval-policy.ts`
+ * in #1097) and injected into the generated preToolUse hook script
+ * so the runner and the hook never disagree on which field to match.
  */
+export const SALIENT_ARG_FIELDS = ["file_path", "path", "target_notebook", "command"];
 /**
  * Redact secret-keyed values (see {@link SENSITIVE_ARG_KEYS}), preserving every
- * other entry verbatim. The shared first step of both preview builders, and the
- * shape stamped as `args` on interrupt-placeholder tool calls (issue #754's
- * header fix): full enough for the UI's path/primary-arg extraction, never
- * carrying a secret value.
+ * other entry verbatim. The first step of the preview builder, and the shape
+ * stamped as `args` on a proposed row the harness recovered from its engine's
+ * state (issue #754's header fix): full enough for the UI's path/primary-arg
+ * extraction, never carrying a secret value.
  */
 export function redactSensitiveArgs(args) {
     const redacted = {};
@@ -45,36 +68,25 @@ export function redactSensitiveArgs(args) {
     }
     return redacted;
 }
-export function sanitizeArgsPreview(args) {
-    const sanitized = redactSensitiveArgs(args);
-    try {
-        const json = JSON.stringify(sanitized);
-        return json.length > MAX_ARGS_PREVIEW_LENGTH
-            ? json.slice(0, MAX_ARGS_PREVIEW_LENGTH) + "…"
-            : json;
-    }
-    catch {
-        return "";
-    }
-}
 /** Per-string-value cap for {@link buildElidedArgsPreview}. */
 const MAX_PREVIEW_VALUE_LENGTH = 200;
 /**
  * Build a compact, ALWAYS-VALID `args_preview` from a tool call's full,
  * authoritative arguments.
  *
- * Unlike {@link sanitizeArgsPreview} (which truncates the whole string, possibly
- * to invalid JSON), this elides oversized string *values* in place — preserving
- * every key and the JSON structure. Two invariants make it safe for the Cursor
- * gate path:
+ * Leaves oversized string *values* out — every other key and the JSON
+ * structure kept — rather than truncating the whole string. Two invariants
+ * make it safe for the Cursor gate path:
  *  - It NEVER elides a salient field (the resume grant's identity — the file
  *    path or shell command — is parsed back out of this preview, so it must
  *    survive verbatim).
  *  - It redacts secret keys.
  *
+ * For short, secret-free args the output is exactly `JSON.stringify(args)`.
  * The heavy content (a whole-file body, a large diff) lives on `file_changes`
  * (offloaded to a ref when large) and `args` (bounded by the size backstop), so
- * the preview itself stays small even for a multi-MB write.
+ * the preview itself stays small even for a multi-MB write. Unserializable
+ * args (a cycle) yield `""`, never a thrown row.
  *
  * @param args the full tool arguments
  * @param salientFields keys whose values must be preserved verbatim (identity)
@@ -84,15 +96,13 @@ export function buildElidedArgsPreview(args, salientFields) {
     for (const [key, value] of Object.entries(args)) {
         if (SENSITIVE_ARG_KEYS.has(key.toLowerCase())) {
             out[key] = "[REDACTED]";
+            continue;
         }
-        else if (!salientFields.includes(key) &&
-            typeof value === "string" &&
-            value.length > MAX_PREVIEW_VALUE_LENGTH) {
-            out[key] = `[${value.length} chars]`;
-        }
-        else {
-            out[key] = value;
-        }
+        const oversized = typeof value === "string" && value.length > MAX_PREVIEW_VALUE_LENGTH;
+        // An oversized non-salient value is left out, never marked (see the header).
+        if (oversized && !salientFields.includes(key))
+            continue;
+        out[key] = value;
     }
     try {
         return JSON.stringify(out);

package/dist/shared/args-preview.js.map

@@ -1 +1 @@
-{"version":3,"file":"args-preview.js","sourceRoot":"","sources":["../../src/shared/args-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IAClD,aAAa,EAAE,MAAM,EAAE,eAAe;CACvC,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA6B;IAE7B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC/D,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,GAAG,uBAAuB;YAC1C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,GAAG;YAC9C,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAA6B,EAC7B,aAAgC;IAEhC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC1B,CAAC;aAAM,IACL,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5B,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,GAAG,wBAAwB,EACvC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"args-preview.js","sourceRoot":"","sources":["../../src/shared/args-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IAClD,aAAa,EAAE,MAAM,EAAE,eAAe;CACvC,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAU,CAAC;AAE/F;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA6B;IAE7B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAA6B,EAC7B,aAAgC;IAEhC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YACxB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB,CAAC;QACvF,6EAA6E;QAC7E,IAAI,SAAS,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACxD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/shared/attachment-resolver.d.ts

@@ -24,7 +24,7 @@
  * written into the user's own tree would be committed to the session's
  * write-back branch on completion (`git add -A`), and every real producer —
  * the CLI's directory attachments, the approved plan the console mounts —
- * already stays inside `inputs/` (S3 M1, Q-M1-2; the proto's `/workspace/…`
+ * already stays inside `inputs/` (since #1096; the proto's `/workspace/…`
  * example is a doc issue). The prompt's `<input_files>` section and every
  * path-derived directive are built from the RESOLVED paths, so prompt and
  * filesystem can never disagree.
@@ -52,9 +52,9 @@
  * {@link AttachmentResolutionError}; an archive that fails its guards
  * aborts with the guard's own `AttachmentValidationError`.
  *
- * Until S3 M1 this resolver ignored `mountPath` and could not extract; the
- * native harness's `attachment-injector.ts` did both and was retired at S3
- * M2b for this one pipeline (Q-S3-14).
+ * Until #1096 this resolver ignored `mountPath` and could not extract; the
+ * native harness's `attachment-injector.ts` did both and was retired in that
+ * PR for this one pipeline.
  */
 import type { Attachment } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/spec_pb";
 import type { ArtifactStorage } from "./artifact-storage.js";

package/dist/shared/attachment-resolver.js

@@ -24,7 +24,7 @@
  * written into the user's own tree would be committed to the session's
  * write-back branch on completion (`git add -A`), and every real producer —
  * the CLI's directory attachments, the approved plan the console mounts —
- * already stays inside `inputs/` (S3 M1, Q-M1-2; the proto's `/workspace/…`
+ * already stays inside `inputs/` (since #1096; the proto's `/workspace/…`
  * example is a doc issue). The prompt's `<input_files>` section and every
  * path-derived directive are built from the RESOLVED paths, so prompt and
  * filesystem can never disagree.
@@ -52,9 +52,9 @@
  * {@link AttachmentResolutionError}; an archive that fails its guards
  * aborts with the guard's own `AttachmentValidationError`.
  *
- * Until S3 M1 this resolver ignored `mountPath` and could not extract; the
- * native harness's `attachment-injector.ts` did both and was retired at S3
- * M2b for this one pipeline (Q-S3-14).
+ * Until #1096 this resolver ignored `mountPath` and could not extract; the
+ * native harness's `attachment-injector.ts` did both and was retired in that
+ * PR for this one pipeline.
  */
 import { mkdir, copyFile, readFile, stat, writeFile } from "node:fs/promises";
 import { join, basename, dirname, posix } from "node:path";

package/dist/shared/attachment-vision.d.ts

@@ -95,7 +95,8 @@ export type VisionOutcome = {
 /**
  * What a harness can actually display inline. The split exists because the
  * Cursor local transport re-sniffs magic bytes and recognizes ONLY PNG and
- * JPEG (verified against @cursor/sdk 1.0.13 dist — the declared mimeType is
+ * JPEG (verified against the @cursor/sdk dist at 1.0.13 and again at 1.0.31:
+ * the attachment sniff map is exactly JPEG and PNG; the declared mimeType is
  * discarded), while the LangChain providers accept all four types.
  */
 export interface VisionProfile {

package/dist/shared/attachment-vision.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-vision.js","sourceRoot":"","sources":["../../src/shared/attachment-vision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,8EAA8E;AAC9E,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA+DpC,MAAM,CAAC,MAAM,qBAAqB,GAAkB;IAClD,YAAY,EAAE,IAAI,GAAG,CAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAkB;IACtD,YAAY,EAAE,IAAI,GAAG,CAAiB;QACpC,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,WAAW;KACZ,CAAC;CACH,CAAC;AAEF,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,WAAW,CAAC;IACtF,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO,YAAY,CAAC;IACzF,IACE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;QACjE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EACjE,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,sDAAsD;IACtD,IACE,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;QAC3C,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAC5C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,QAAgB;IACtE,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IACN,OAAO,CAAgB;IACvB,aAAa,CAAS;IACtB,aAAa,CAAS;IACtB,SAAS,CAAS;IACnC;;;;;;;OAOG;IACc,WAAW,CAAW;IAC/B,UAAU,GAAG,CAAC,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IAEvB,YACE,OAAsB,EACtB,OAKC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,sBAAsB,CAAC;QACtE,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,sBAAsB,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,iBAAiB,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;IAC1C,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,eAAe,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAExE,uEAAuE;QACvE,wEAAwE;QACxE,8DAA8D;QAC9D,gEAAgE;QAChE,6DAA6D;QAC7D,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,OAAO,KAAK,SAAS,IAAI,eAAe;gBAC7C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE;gBACjD,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,wEAAwE;YACxE,uEAAuE;YACvE,oCAAoC;YACpC,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE;gBACL,QAAQ;gBACR,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAChC,QAAQ,EAAE,KAAK,CAAC,MAAM;aACvB;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,SAAiB;QAC/B,OAAO,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACzD,CAAC;CACF;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA8B;IAE9B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AASD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA8B;IAE9B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,QAAQ,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE;SAChE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAaD,SAAS,WAAW,CAAC,MAA4B;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC;QACrB,KAAK,oBAAoB;YACvB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,eAAe;YAClB,OAAO,yBAAyB,CAAC;QACnC,KAAK,iBAAiB;YACpB,OAAO,0BAA0B,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAkC,EAClC,WAAwC;IAExC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,iDAAiD,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,OAAO,GAAG,CAAC,CAAC;QAC/C,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,eAAe;QACf,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;QAC7E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CACR,yEAAyE;gBACvE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CACR,oEAAoE;gBAClE,oEAAoE;gBACpE,mEAAmE;gBACnE,QAAQ,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,iEAAiE;YAC/D,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"attachment-vision.js","sourceRoot":"","sources":["../../src/shared/attachment-vision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,8EAA8E;AAC9E,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,kDAAkD;AAClD,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAgEpC,MAAM,CAAC,MAAM,qBAAqB,GAAkB;IAClD,YAAY,EAAE,IAAI,GAAG,CAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAkB;IACtD,YAAY,EAAE,IAAI,GAAG,CAAiB;QACpC,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,WAAW;KACZ,CAAC;CACH,CAAC;AAEF,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,WAAW,CAAC;IACtF,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,OAAO,YAAY,CAAC;IACzF,IACE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;QACjE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EACjE,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,sDAAsD;IACtD,IACE,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;QAC3C,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAC5C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,QAAgB;IACtE,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IACN,OAAO,CAAgB;IACvB,aAAa,CAAS;IACtB,aAAa,CAAS;IACtB,SAAS,CAAS;IACnC;;;;;;;OAOG;IACc,WAAW,CAAW;IAC/B,UAAU,GAAG,CAAC,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IAEvB,YACE,OAAsB,EACtB,OAKC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,sBAAsB,CAAC;QACtE,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,sBAAsB,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,iBAAiB,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;IAC1C,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,eAAe,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAExE,uEAAuE;QACvE,wEAAwE;QACxE,8DAA8D;QAC9D,gEAAgE;QAChE,6DAA6D;QAC7D,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,OAAO,KAAK,SAAS,IAAI,eAAe;gBAC7C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE;gBACjD,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,wEAAwE;YACxE,uEAAuE;YACvE,oCAAoC;YACpC,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE;gBACL,QAAQ;gBACR,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAChC,QAAQ,EAAE,KAAK,CAAC,MAAM;aACvB;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,SAAiB;QAC/B,OAAO,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACzD,CAAC;CACF;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA8B;IAE9B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AASD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA8B;IAE9B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,QAAQ,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE;SAChE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAaD,SAAS,WAAW,CAAC,MAA4B;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC;QACrB,KAAK,oBAAoB;YACvB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,eAAe;YAClB,OAAO,yBAAyB,CAAC;QACnC,KAAK,iBAAiB;YACpB,OAAO,0BAA0B,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAkC,EAClC,WAAwC;IAExC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,iDAAiD,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,OAAO,GAAG,CAAC,CAAC;QAC/C,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,eAAe;QACf,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;QAC7E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CACR,yEAAyE;gBACvE,2BAA2B,CAC9B,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CACR,oEAAoE;gBAClE,oEAAoE;gBACpE,mEAAmE;gBACnE,QAAQ,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,iEAAiE;YAC/D,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/shared/attachment-zip.d.ts

@@ -25,8 +25,8 @@
  * "the manifest promised a file extraction cannot find" is unrepresentable.
  * The WRITE of an extracted entry is the caller's: the attachment resolver
  * writes under the session's platform dir (`attachment-resolver.ts`), the
- * one caller since S3 M2b retired the native injector. Moved here from that
- * injector at S3 M1 (Q-S3-14) so the guards have one home.
+ * one caller since #1096 retired the native injector. Moved here from that
+ * injector in the same PR so the guards have one home.
  */
 export declare const MAX_ZIP_FILES = 1000;
 export declare const MAX_ZIP_EXTRACTED_SIZE: number;

package/dist/shared/attachment-zip.js

@@ -25,8 +25,8 @@
  * "the manifest promised a file extraction cannot find" is unrepresentable.
  * The WRITE of an extracted entry is the caller's: the attachment resolver
  * writes under the session's platform dir (`attachment-resolver.ts`), the
- * one caller since S3 M2b retired the native injector. Moved here from that
- * injector at S3 M1 (Q-S3-14) so the guards have one home.
+ * one caller since #1096 retired the native injector. Moved here from that
+ * injector in the same PR so the guards have one home.
  */
 import { createInflateRaw } from "node:zlib";
 import { posix } from "node:path";

package/dist/shared/cost-guard.d.ts

@@ -1,8 +1,8 @@
 /**
  * ExecutionConfig.max_cost_usd enforcement as a hard stop on a harness turn.
  *
- * Harness-agnostic: the Cursor activity is today's only caller and the turn
- * runtime takes it over in S2 M3. The rationale below is Cursor's, and it is
+ * Harness-agnostic: the Cursor activity was its only caller until the turn
+ * runtime took it over in #1070. The rationale below is Cursor's, and it is
  * why the module is shaped as a hard stop rather than a middleware.
  *
  * The native harness enforces the cap in middleware (cost-cap.ts): tools are

package/dist/shared/cost-guard.js

@@ -1,8 +1,8 @@
 /**
  * ExecutionConfig.max_cost_usd enforcement as a hard stop on a harness turn.
  *
- * Harness-agnostic: the Cursor activity is today's only caller and the turn
- * runtime takes it over in S2 M3. The rationale below is Cursor's, and it is
+ * Harness-agnostic: the Cursor activity was its only caller until the turn
+ * runtime took it over in #1070. The rationale below is Cursor's, and it is
  * why the module is shaped as a hard stop rather than a middleware.
  *
  * The native harness enforces the cap in middleware (cost-cap.ts): tools are

package/dist/shared/exact-apply.d.ts

@@ -28,7 +28,7 @@
  *
  * SOURCE OF TRUTH — the approved whole-file bytes and target path are read from
  * the gated tool call's `args` (the authoritative proposed content the deny-gate
- * stamped from the hook input; see execute-cursor/message-translator.ts
+ * stamped from the hook input; see execute-cursor/boundary-rows.ts
  * `applyGateInput`). This is the single copy — there is no separate captured
  * `file_changes` mirror — so "what was shown == what is applied" holds by
  * construction. (Phase 5 Slice 4 removed the redundant `ToolCall.file_changes`

package/dist/shared/exact-apply.js

@@ -28,7 +28,7 @@
  *
  * SOURCE OF TRUTH — the approved whole-file bytes and target path are read from
  * the gated tool call's `args` (the authoritative proposed content the deny-gate
- * stamped from the hook input; see execute-cursor/message-translator.ts
+ * stamped from the hook input; see execute-cursor/boundary-rows.ts
  * `applyGateInput`). This is the single copy — there is no separate captured
  * `file_changes` mirror — so "what was shown == what is applied" holds by
  * construction. (Phase 5 Slice 4 removed the redundant `ToolCall.file_changes`

package/dist/shared/execution-context.d.ts

@@ -15,8 +15,8 @@
  * `setInterceptorExecutionId`) is whichever turn set it last; this store is
  * what makes concurrent turns not overwrite each other's headers.
  *
- * Moved from `activities/execute-cursor/fetch-interceptor.ts` (S2 M3,
- * Q-M3-12) so `harness/run-turn.ts` can enter it without importing the
+ * Moved from `activities/execute-cursor/fetch-interceptor.ts` (#1070)
+ * so `harness/run-turn.ts` can enter it without importing the
  * adapter; the interceptors import it from here. No harness enters it: the
  * contract lists it among the things deliberately NOT on `TurnSink`.
  */

package/dist/shared/execution-context.js

@@ -15,8 +15,8 @@
  * `setInterceptorExecutionId`) is whichever turn set it last; this store is
  * what makes concurrent turns not overwrite each other's headers.
  *
- * Moved from `activities/execute-cursor/fetch-interceptor.ts` (S2 M3,
- * Q-M3-12) so `harness/run-turn.ts` can enter it without importing the
+ * Moved from `activities/execute-cursor/fetch-interceptor.ts` (#1070)
+ * so `harness/run-turn.ts` can enter it without importing the
  * adapter; the interceptors import it from here. No harness enters it: the
  * contract lists it among the things deliberately NOT on `TurnSink`.
  */

package/dist/shared/extract-structured-output.d.ts

@@ -3,8 +3,8 @@
  *
  * Harness-agnostic, and called from one place: the turn runtime's epilogue
  * (`harness/run-turn.ts` `extractStructuredOutputFromText`), so both
- * harnesses have it — Cursor since S2 M3, native since S3 M2a (pinned by the
- * native hermetic `structured-output` tier-2 arm since M2b, Q-S3-7).
+ * harnesses have it — Cursor since #1070, native since #1096 (pinned by the
+ * native hermetic `structured-output` tier-2 arm).
  *
  * When tier-1 text extraction (shared/extract-json.ts) cannot find JSON in
  * the agent's free-text response, this tier asks an economy-tier LLM to