@stigmer/runner 3.15.3-dev.20260914100347 → 3.15.3-dev.20260916211208

package/dist/activities/execute-cursor/__test-utils__/scripted-sdk.d.ts

@@ -1,11 +1,16 @@
 /**
  * The `@cursor/sdk` module a hermetic `ExecuteCursor` run imports — every
- * runtime surface the activity path touches, backed by scripted agents.
+ * runtime surface the activity path touches, backed by scripted agents — and
+ * the `@cursor/sdk/sqlite` module beside it, backed by a store that holds
+ * nothing.
  *
- * The activity reaches the SDK at three runtime sites and nowhere else:
+ * The activity reaches the SDK at four runtime sites and nowhere else:
  *
- *  - `session-lifecycle.ts`: `Agent.create(options)`, `Agent.resume(id, options)`,
- *    `Agent.archive(id, ...)` — the agent handle.
+ *  - `session-lifecycle.ts`: `Agent.create(options)`, `Agent.resume(id, options)`
+ *    — the agent handle.
+ *  - `session-store.ts`: `SqliteLocalAgentStore.open({ workspaceRef, stateRoot })`
+ *    from `@cursor/sdk/sqlite` — the session's store the handle is created and
+ *    resumed over (`local.store`).
  *  - `service-tier.ts`: `Cursor.models.list({ apiKey })` — the catalog the
  *    variant params (`fast`, `thinking`) are pinned from.
  *  - `index.ts` outer catch: `import("@cursor/sdk")` for `CursorSdkError`, the
@@ -13,34 +18,41 @@
  *
  * Neither the SDK nor the client is injectable into the activity (the real
  * seam arrives with the harness contract; parent Q1/Q2), so — exactly as the
- * native activity tests already do for their boundary modules — the module is
- * substituted with `vi.mock`. Three existing tests each mock ONE of these
+ * native activity tests already do for their boundary modules — the modules
+ * are substituted with `vi.mock`. Three existing tests each mock ONE of these
  * surfaces (`session-lifecycle.test.ts`, `service-tier.test.ts`,
- * `sdk-warmup.test.ts`); a whole-activity run needs all three at once, which is
- * what this module is.
+ * `sdk-warmup.test.ts`); a whole-activity run needs all of them at once, which
+ * is what this module is.
  *
- * `vi.mock` is hoisted and must appear in the test file; the factory can
- * `await import()` this module and return {@link scriptedCursorSdkModule}. The
- * module's statics read the {@link ScriptedCursorSdk} bound for the current
+ * `vi.mock` is hoisted and must appear in the test file, once per module id
+ * (a subpath is its own module id, so `@cursor/sdk/sqlite` needs its own
+ * `vi.mock`); the factories `await import()` this module and return
+ * {@link scriptedCursorSdkModule} and {@link scriptedCursorSqliteModule}. The
+ * modules' statics read the {@link ScriptedCursorSdk} bound for the current
  * scenario ({@link bindScriptedSdk}), so one test file can run several
- * scenarios with different agents against the same mocked module.
+ * scenarios with different agents against the same mocked modules.
  *
  * Resolution rules a scenario declares, mirroring what the real SDK does:
  *  - `Agent.create` hands out the agent declared for the session it is asked
- *    for (`agentForSession`, when the scenario resolves agents per session —
- *    the harness contract kit runs several sessions concurrently on one
- *    adapter, and the order their creates arrive in is real I/O timing), else
- *    the NEXT unclaimed agent in `agents` (turn 1 of a fresh session; the fresh
- *    agent of a poisoned-handle recovery) — unless the scenario declared a
- *    `createFailure`, which the FIRST create throws instead (the SDK refusing
+ *    for (`agentForWorkspaceRef`, when the scenario resolves agents per
+ *    session — the harness contract kit runs several sessions concurrently on
+ *    one adapter, and the order their creates arrive in is real I/O timing),
+ *    else the NEXT unclaimed agent in `agents` (turn 1 of a fresh session; the
+ *    fresh agent of a poisoned-handle recovery) — unless the scenario declared
+ *    a `createFailure`, which the FIRST create throws instead (the SDK refusing
  *    to mint an agent: a 401 on the key, a validation error).
  *  - `Agent.resume(id)` hands back the agent with that id if the scenario
  *    declared it (in `agents` or `resumableAgents`, or handed out for a
  *    session), else throws — `resolveAgent` then falls back to `create`, which
  *    is the production shape of a lost handle.
  *  - `Cursor.models.list` answers the scenario's catalog.
+ *  - `SqliteLocalAgentStore.open` hands out a {@link ScriptedLocalAgentStore}
+ *    carrying the ref and root it was asked for, and records the open; its
+ *    `dispose()` is recorded too, so a scenario can assert the adapter's
+ *    session-store lifetime (`releaseSession`, `shutdown`).
  */
 import type { AgentOptions, ModelListItem, SDKAgent } from "@cursor/sdk";
+import type { SqliteLocalAgentStoreOptions } from "@cursor/sdk/sqlite";
 import type { ScriptedCursorAgent } from "./scripted-agent.js";
 export interface ScriptedSdkOptions {
     /** Agents handed out by `Agent.create`, in order. Also resumable by id. */
@@ -48,12 +60,12 @@ export interface ScriptedSdkOptions {
     /**
      * The agent `Agent.create` hands out for the session the create names,
      * consulted before the ordered list. The SDK's create options carry the
-     * session as `platform.workspaceRef` (`session-lifecycle.ts`
-     * `resolvePlatformOptions`: `stigmer-session:<sessionId>`), so the resolver
-     * is keyed by that ref — a scenario computes the ref the same way the
-     * adapter does. `undefined` falls through to the list. Consulted live on
-     * every create, so a scenario may mint the session's agent only when it
-     * learns of the session.
+     * session as the store's `workspaceRef` (`local.store`, opened by
+     * `session-store.ts`: `stigmer-session:<sessionId>`), so the resolver is
+     * keyed by that ref — a scenario computes the ref the same way the adapter
+     * does (`resolveSessionStoreLocation`). `undefined` falls through to the
+     * list. Consulted live on every create, so a scenario may mint the session's
+     * agent only when it learns of the session.
      */
     readonly agentForWorkspaceRef?: (workspaceRef: string) => ScriptedCursorAgent | undefined;
     /**
@@ -77,17 +89,32 @@ export interface RecordedResolution {
     readonly agentId: string | undefined;
     readonly options: Partial<AgentOptions> | undefined;
 }
+/**
+ * The `@cursor/sdk/sqlite` store the adapter opens per session, holding
+ * nothing: the scripted agents carry their own state, so the store only has
+ * to be the thing `Agent.create` / `Agent.resume` are handed and the thing
+ * `releaseSession` / `shutdown` dispose. `open` and `dispose` are recorded on
+ * the bound {@link ScriptedCursorSdk} for lifetime assertions.
+ */
+export declare class ScriptedLocalAgentStore {
+    readonly workspaceRef: string;
+    readonly stateRoot: string;
+    disposeCalls: number;
+    constructor(workspaceRef: string, stateRoot: string);
+    static open(options: SqliteLocalAgentStoreOptions): Promise<ScriptedLocalAgentStore>;
+    dispose(): Promise<void>;
+}
 export declare class ScriptedCursorSdk {
     private readonly options;
     readonly resolutions: RecordedResolution[];
-    readonly archived: string[];
+    /** Every store `SqliteLocalAgentStore.open` handed out, in order. */
+    readonly stores: ScriptedLocalAgentStore[];
     private nextCreate;
     private createFailurePending;
     private readonly byId;
     constructor(options: ScriptedSdkOptions);
     create(options: AgentOptions): SDKAgent;
     resume(agentId: string, options: Partial<AgentOptions> | undefined): SDKAgent;
-    archive(agentId: string): void;
     listModels(): readonly ModelListItem[];
 }
 /** The construction options of the SDK's `CursorSdkError` (`errors.d.ts`), minus `cause`. */
@@ -136,3 +163,20 @@ export declare function bindScriptedSdk(sdk: ScriptedCursorSdk): void;
  * here rather than silently stubbed.
  */
 export declare function scriptedCursorSdkModule(): Record<string, unknown>;
+/**
+ * The factory a test passes to `vi.mock("@cursor/sdk/sqlite", ...)`, beside
+ * the one above:
+ *
+ * ```ts
+ * vi.mock("@cursor/sdk/sqlite", async () =>
+ *   (await import("../../__test-utils__/scripted-sdk.js")).scriptedCursorSqliteModule(),
+ * );
+ * ```
+ *
+ * The one export the runner reads from that entry (`session-store.ts`). The
+ * class is exported under the SDK's name so `session-store.ts`'s dynamic
+ * import destructures it unchanged; its type is the SDK's, which is why
+ * {@link ScriptedLocalAgentStore} carries `workspaceRef`, `stateRoot` and
+ * `dispose()` — the members the runner touches — and nothing else.
+ */
+export declare function scriptedCursorSqliteModule(): Record<string, unknown>;

package/dist/activities/execute-cursor/__test-utils__/scripted-sdk.js

@@ -1,11 +1,16 @@
 /**
  * The `@cursor/sdk` module a hermetic `ExecuteCursor` run imports — every
- * runtime surface the activity path touches, backed by scripted agents.
+ * runtime surface the activity path touches, backed by scripted agents — and
+ * the `@cursor/sdk/sqlite` module beside it, backed by a store that holds
+ * nothing.
  *
- * The activity reaches the SDK at three runtime sites and nowhere else:
+ * The activity reaches the SDK at four runtime sites and nowhere else:
  *
- *  - `session-lifecycle.ts`: `Agent.create(options)`, `Agent.resume(id, options)`,
- *    `Agent.archive(id, ...)` — the agent handle.
+ *  - `session-lifecycle.ts`: `Agent.create(options)`, `Agent.resume(id, options)`
+ *    — the agent handle.
+ *  - `session-store.ts`: `SqliteLocalAgentStore.open({ workspaceRef, stateRoot })`
+ *    from `@cursor/sdk/sqlite` — the session's store the handle is created and
+ *    resumed over (`local.store`).
  *  - `service-tier.ts`: `Cursor.models.list({ apiKey })` — the catalog the
  *    variant params (`fast`, `thinking`) are pinned from.
  *  - `index.ts` outer catch: `import("@cursor/sdk")` for `CursorSdkError`, the
@@ -13,50 +18,78 @@
  *
  * Neither the SDK nor the client is injectable into the activity (the real
  * seam arrives with the harness contract; parent Q1/Q2), so — exactly as the
- * native activity tests already do for their boundary modules — the module is
- * substituted with `vi.mock`. Three existing tests each mock ONE of these
+ * native activity tests already do for their boundary modules — the modules
+ * are substituted with `vi.mock`. Three existing tests each mock ONE of these
  * surfaces (`session-lifecycle.test.ts`, `service-tier.test.ts`,
- * `sdk-warmup.test.ts`); a whole-activity run needs all three at once, which is
- * what this module is.
+ * `sdk-warmup.test.ts`); a whole-activity run needs all of them at once, which
+ * is what this module is.
  *
- * `vi.mock` is hoisted and must appear in the test file; the factory can
- * `await import()` this module and return {@link scriptedCursorSdkModule}. The
- * module's statics read the {@link ScriptedCursorSdk} bound for the current
+ * `vi.mock` is hoisted and must appear in the test file, once per module id
+ * (a subpath is its own module id, so `@cursor/sdk/sqlite` needs its own
+ * `vi.mock`); the factories `await import()` this module and return
+ * {@link scriptedCursorSdkModule} and {@link scriptedCursorSqliteModule}. The
+ * modules' statics read the {@link ScriptedCursorSdk} bound for the current
  * scenario ({@link bindScriptedSdk}), so one test file can run several
- * scenarios with different agents against the same mocked module.
+ * scenarios with different agents against the same mocked modules.
  *
  * Resolution rules a scenario declares, mirroring what the real SDK does:
  *  - `Agent.create` hands out the agent declared for the session it is asked
- *    for (`agentForSession`, when the scenario resolves agents per session —
- *    the harness contract kit runs several sessions concurrently on one
- *    adapter, and the order their creates arrive in is real I/O timing), else
- *    the NEXT unclaimed agent in `agents` (turn 1 of a fresh session; the fresh
- *    agent of a poisoned-handle recovery) — unless the scenario declared a
- *    `createFailure`, which the FIRST create throws instead (the SDK refusing
+ *    for (`agentForWorkspaceRef`, when the scenario resolves agents per
+ *    session — the harness contract kit runs several sessions concurrently on
+ *    one adapter, and the order their creates arrive in is real I/O timing),
+ *    else the NEXT unclaimed agent in `agents` (turn 1 of a fresh session; the
+ *    fresh agent of a poisoned-handle recovery) — unless the scenario declared
+ *    a `createFailure`, which the FIRST create throws instead (the SDK refusing
  *    to mint an agent: a 401 on the key, a validation error).
  *  - `Agent.resume(id)` hands back the agent with that id if the scenario
  *    declared it (in `agents` or `resumableAgents`, or handed out for a
  *    session), else throws — `resolveAgent` then falls back to `create`, which
  *    is the production shape of a lost handle.
  *  - `Cursor.models.list` answers the scenario's catalog.
+ *  - `SqliteLocalAgentStore.open` hands out a {@link ScriptedLocalAgentStore}
+ *    carrying the ref and root it was asked for, and records the open; its
+ *    `dispose()` is recorded too, so a scenario can assert the adapter's
+ *    session-store lifetime (`releaseSession`, `shutdown`).
  */
 /**
- * The `platform.workspaceRef` a create names, read defensively: the platform
- * option's type re-exports from the unshipped `@anysphere/cursor-sdk-local-runtime`
- * and resolves to `any` under `skipLibCheck` (the same gap `scripted-agent.ts`
- * records for the delta channel), so the shape is checked here, not assumed.
+ * The session a create names: the `workspaceRef` of the store it passes as
+ * `local.store`. In a hermetic run that store is the one this module's sqlite
+ * double opened; anything else (a test that mocks `@cursor/sdk` with its own
+ * stub and passes no store) names no session and falls through to the list.
  */
 function workspaceRefOf(options) {
-    const platform = options.platform;
-    if (typeof platform !== "object" || platform === null)
-        return undefined;
-    const ref = platform.workspaceRef;
-    return typeof ref === "string" ? ref : undefined;
+    const store = options.local?.store;
+    return store instanceof ScriptedLocalAgentStore ? store.workspaceRef : undefined;
+}
+/**
+ * The `@cursor/sdk/sqlite` store the adapter opens per session, holding
+ * nothing: the scripted agents carry their own state, so the store only has
+ * to be the thing `Agent.create` / `Agent.resume` are handed and the thing
+ * `releaseSession` / `shutdown` dispose. `open` and `dispose` are recorded on
+ * the bound {@link ScriptedCursorSdk} for lifetime assertions.
+ */
+export class ScriptedLocalAgentStore {
+    workspaceRef;
+    stateRoot;
+    disposeCalls = 0;
+    constructor(workspaceRef, stateRoot) {
+        this.workspaceRef = workspaceRef;
+        this.stateRoot = stateRoot;
+    }
+    static async open(options) {
+        const store = new ScriptedLocalAgentStore(options.workspaceRef, options.stateRoot ?? "");
+        current().stores.push(store);
+        return store;
+    }
+    async dispose() {
+        this.disposeCalls++;
+    }
 }
 export class ScriptedCursorSdk {
     options;
     resolutions = [];
-    archived = [];
+    /** Every store `SqliteLocalAgentStore.open` handed out, in order. */
+    stores = [];
     nextCreate = 0;
     createFailurePending;
     byId = new Map();
@@ -101,9 +134,6 @@ export class ScriptedCursorSdk {
             agent.model = options.model;
         return agent;
     }
-    archive(agentId) {
-        this.archived.push(agentId);
-    }
     listModels() {
         return this.options.catalog;
     }
@@ -178,7 +208,6 @@ export function scriptedCursorSdkModule() {
         Agent: {
             create: async (options) => current().create(options),
             resume: async (agentId, options) => current().resume(agentId, options),
-            archive: async (agentId) => current().archive(agentId),
         },
         Cursor: {
             models: {
@@ -188,4 +217,25 @@ export function scriptedCursorSdkModule() {
         CursorSdkError: ScriptedCursorSdkError,
     };
 }
+/**
+ * The factory a test passes to `vi.mock("@cursor/sdk/sqlite", ...)`, beside
+ * the one above:
+ *
+ * ```ts
+ * vi.mock("@cursor/sdk/sqlite", async () =>
+ *   (await import("../../__test-utils__/scripted-sdk.js")).scriptedCursorSqliteModule(),
+ * );
+ * ```
+ *
+ * The one export the runner reads from that entry (`session-store.ts`). The
+ * class is exported under the SDK's name so `session-store.ts`'s dynamic
+ * import destructures it unchanged; its type is the SDK's, which is why
+ * {@link ScriptedLocalAgentStore} carries `workspaceRef`, `stateRoot` and
+ * `dispose()` — the members the runner touches — and nothing else.
+ */
+export function scriptedCursorSqliteModule() {
+    return {
+        SqliteLocalAgentStore: ScriptedLocalAgentStore,
+    };
+}
 //# sourceMappingURL=scripted-sdk.js.map

package/dist/activities/execute-cursor/__test-utils__/scripted-sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"scripted-sdk.js","sourceRoot":"","sources":["../../../../src/activities/execute-cursor/__test-utils__/scripted-sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AA0CH;;;;;GAKG;AACH,SAAS,cAAc,CAAC,OAAqB;IAC3C,MAAM,QAAQ,GAAa,OAAkC,CAAC,QAAQ,CAAC;IACvE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,GAAG,GAAI,QAAuC,CAAC,YAAY,CAAC;IAClE,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,iBAAiB;IAOC;IANpB,WAAW,GAAyB,EAAE,CAAC;IACvC,QAAQ,GAAa,EAAE,CAAC;IACzB,UAAU,GAAG,CAAC,CAAC;IACf,oBAAoB,CAAU;IACrB,IAAI,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE/D,YAA6B,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;QACtD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,OAAqB;QAC1B,IAAI,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5D,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QACnC,CAAC;QACD,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9C,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAChF,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,UAAU,GAAG,CAAC,gBAAgB;gBACvE,0BAA0B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,OAAe,EAAE,OAA0C;QAChE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAAC,SAAS,OAAO,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,OAAO,EAAE,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,CAAC;CACF;AAYD;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,WAAW,CAAU;IACrB,IAAI,CAAqB;IACzB,MAAM,CAAqB;IAC3B,QAAQ,CAAqB;IAC7B,SAAS,CAAqB;IAC9B,SAAS,CAAqB;IACvC,YAAY,OAAe,EAAE,OAAsC,EAAE;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF;AAED,IAAI,KAAoC,CAAC;AAEzC,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,KAAK,GAAG,GAAG,CAAC;AACd,CAAC;AAED,SAAS,OAAO;IACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,KAAK,EAAE;YACL,MAAM,EAAE,KAAK,EAAE,OAAqB,EAAqB,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,MAAM,EAAE,KAAK,EAAE,OAAe,EAAE,OAA+B,EAAqB,EAAE,CACpF,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,OAAe,EAAiB,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;SAC9E;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,KAAK,IAAuC,EAAE,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;aAC5E;SACF;QACD,cAAc,EAAE,sBAAsB;KACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"scripted-sdk.js","sourceRoot":"","sources":["../../../../src/activities/execute-cursor/__test-utils__/scripted-sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AA2CH;;;;;GAKG;AACH,SAAS,cAAc,CAAC,OAAqB;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;IACnC,OAAO,KAAK,YAAY,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAIvB;IACA;IAJX,YAAY,GAAG,CAAC,CAAC;IAEjB,YACW,YAAoB,EACpB,SAAiB;QADjB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,cAAS,GAAT,SAAS,CAAQ;IACzB,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAqC;QACrD,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACzF,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAQC;IAPpB,WAAW,GAAyB,EAAE,CAAC;IAChD,qEAAqE;IAC5D,MAAM,GAA8B,EAAE,CAAC;IACxC,UAAU,GAAG,CAAC,CAAC;IACf,oBAAoB,CAAU;IACrB,IAAI,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE/D,YAA6B,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;QACtD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,OAAqB;QAC1B,IAAI,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5D,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QACnC,CAAC;QACD,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9C,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAChF,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,UAAU,GAAG,CAAC,gBAAgB;gBACvE,0BAA0B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,OAAe,EAAE,OAA0C;QAChE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAAC,SAAS,OAAO,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,OAAO,EAAE,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,CAAC;CACF;AAYD;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,WAAW,CAAU;IACrB,IAAI,CAAqB;IACzB,MAAM,CAAqB;IAC3B,QAAQ,CAAqB;IAC7B,SAAS,CAAqB;IAC9B,SAAS,CAAqB;IACvC,YAAY,OAAe,EAAE,OAAsC,EAAE;QACnE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF;AAED,IAAI,KAAoC,CAAC;AAEzC,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,KAAK,GAAG,GAAG,CAAC;AACd,CAAC;AAED,SAAS,OAAO;IACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,KAAK,EAAE;YACL,MAAM,EAAE,KAAK,EAAE,OAAqB,EAAqB,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,MAAM,EAAE,KAAK,EAAE,OAAe,EAAE,OAA+B,EAAqB,EAAE,CACpF,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;SACrC;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,KAAK,IAAuC,EAAE,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;aAC5E;SACF;QACD,cAAc,EAAE,sBAAsB;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,qBAAqB,EAAE,uBAEtB;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/execute-cursor/adapter.d.ts

@@ -5,9 +5,10 @@
  * module boots, releases, and delegates.
  *
  * What this adapter owns: the proxy interceptors and the parked-agent cache
- * (worker lifetime), the parked agent per session (session lifetime), and one
- * engine turn (`runTurn`, through `turn.ts`). Everything else about a turn is
- * the runtime's (`harness/run-turn.ts`).
+ * (worker lifetime), the parked agent and the SDK store per session (session
+ * lifetime; `agent-session-cache.ts`, `session-store.ts`), and one engine turn
+ * (`runTurn`, through `turn.ts`). Everything else about a turn is the
+ * runtime's (`harness/run-turn.ts`).
  *
  * THIS MODULE'S STATIC GRAPH IS SDK-FREE, ON PURPOSE. The composition roots
  * import it (through `src/harness-adapters.ts`) BEFORE they boot it, and
@@ -27,7 +28,7 @@
  * The interceptors read the proxy credential from `Config.proxyTokenRef` per
  * request; which credential that is (the static root's control-plane token,
  * the manager's minted runner token) is the root's decision, not this
- * module's (Q-S2-7).
+ * module's.
  *
  * What this adapter never does: throw out of `runTurn` (an SDK failure is
  * `failed` with the classifier's sentence; an unexpected exception is
@@ -39,14 +40,14 @@
  *
  * The turn boundary (`turn-boundary.ts`) runs inside `turn.ts` and reads
  * this harness's deny-and-retry evidence — the denial ledger — into WAITING
- * rows and settled rows. The file-review capture is NOT here since S3 M4:
+ * rows and settled rows. The file-review capture is NOT here since #1096:
  * the runtime pins the baseline before this adapter runs and captures the
  * whole turn's tree after it returns (`harness/capture.ts`); what this
  * adapter contributes is the hook sidecar it binds as the runtime's CAS
  * observations (`turn-setup.ts` `installGate`).
  *
- * Extracted from `index.ts` `createCursorActivities` at S2 M3b; split from
- * the turn body at S2 M5. The seventeen hermetic goldens under
+ * Extracted from `index.ts` `createCursorActivities` in #1070, which also
+ * split it from the turn body. The seventeen hermetic goldens under
  * `__tests__/hermetic/` pin the result byte for byte.
  */
 import type { Config } from "../../config.js";

package/dist/activities/execute-cursor/adapter.js

@@ -5,9 +5,10 @@
  * module boots, releases, and delegates.
  *
  * What this adapter owns: the proxy interceptors and the parked-agent cache
- * (worker lifetime), the parked agent per session (session lifetime), and one
- * engine turn (`runTurn`, through `turn.ts`). Everything else about a turn is
- * the runtime's (`harness/run-turn.ts`).
+ * (worker lifetime), the parked agent and the SDK store per session (session
+ * lifetime; `agent-session-cache.ts`, `session-store.ts`), and one engine turn
+ * (`runTurn`, through `turn.ts`). Everything else about a turn is the
+ * runtime's (`harness/run-turn.ts`).
  *
  * THIS MODULE'S STATIC GRAPH IS SDK-FREE, ON PURPOSE. The composition roots
  * import it (through `src/harness-adapters.ts`) BEFORE they boot it, and
@@ -27,7 +28,7 @@
  * The interceptors read the proxy credential from `Config.proxyTokenRef` per
  * request; which credential that is (the static root's control-plane token,
  * the manager's minted runner token) is the root's decision, not this
- * module's (Q-S2-7).
+ * module's.
  *
  * What this adapter never does: throw out of `runTurn` (an SDK failure is
  * `failed` with the classifier's sentence; an unexpected exception is
@@ -39,14 +40,14 @@
  *
  * The turn boundary (`turn-boundary.ts`) runs inside `turn.ts` and reads
  * this harness's deny-and-retry evidence — the denial ledger — into WAITING
- * rows and settled rows. The file-review capture is NOT here since S3 M4:
+ * rows and settled rows. The file-review capture is NOT here since #1096:
  * the runtime pins the baseline before this adapter runs and captures the
  * whole turn's tree after it returns (`harness/capture.ts`); what this
  * adapter contributes is the hook sidecar it binds as the runtime's CAS
  * observations (`turn-setup.ts` `installGate`).
  *
- * Extracted from `index.ts` `createCursorActivities` at S2 M3b; split from
- * the turn body at S2 M5. The seventeen hermetic goldens under
+ * Extracted from `index.ts` `createCursorActivities` in #1070, which also
+ * split it from the turn body. The seventeen hermetic goldens under
  * `__tests__/hermetic/` pin the result byte for byte.
  */
 import { markBoot } from "../../shared/cold-start-timing.js";
@@ -54,6 +55,7 @@ import { closeAllCachedAgents, evictSessionAgent } from "./agent-session-cache.j
 import { CURSOR_CAPABILITIES } from "./cursor-capabilities.js";
 import { installFetchInterceptor } from "./fetch-interceptor.js";
 import { assertHttp2ConnectPatched, installHttp2Interceptor } from "./http2-interceptor.js";
+import { releaseAllSessionStores, releaseSessionStore } from "./session-store.js";
 /** The config slice this adapter reads per turn, taken at `boot`; a whole `Config` satisfies it. */
 export function resolveCursorConfig(config) {
     return {
@@ -102,13 +104,15 @@ export function createCursorAdapter() {
             const { runCursorTurn } = await import("./turn.js");
             booted = { config: resolveCursorConfig(bootConfig), runCursorTurn };
         },
-        /** Close every parked agent (their executor leases and MCP subprocesses). */
+        /** Close every parked agent (their executor leases and MCP subprocesses), then every session's SDK store. */
         async shutdown() {
             closeAllCachedAgents();
+            await releaseAllSessionStores();
         },
-        /** The session is done on this host: close the agent parked for it, if any (#215). */
+        /** The session is done on this host: close the agent parked for it, if any (#215), then its SDK store (#1053). */
         async releaseSession(sessionId) {
             evictSessionAgent(sessionId);
+            await releaseSessionStore(sessionId);
         },
         async runTurn(input, sink) {
             if (booted === undefined) {

package/dist/activities/execute-cursor/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAG5F,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;KACpD,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,mBAAmB;IACjC,IAAI,MAAuC,CAAC;IAE5C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,mBAAmB;QAEjC;;;;;;WAMG;QACH,KAAK,CAAC,IAAI,CAAC,UAAkB;YAC3B,IAAI,UAAU,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,uBAAuB,CAAC;gBACtB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;gBACpD,aAAa,EAAE,UAAU,CAAC,aAAa;aACxC,CAAC,CAAC;YACH,uBAAuB,CAAC;gBACtB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;gBACpD,aAAa,EAAE,UAAU,CAAC,aAAa;aACxC,CAAC,CAAC;YACH,QAAQ,CAAC,wBAAwB,CAAC,CAAC;YACnC,yEAAyE;YACzE,sEAAsE;YACtE,mDAAmD;YACnD,MAAM,yBAAyB,EAAE,CAAC;YAElC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,GAAG,EAAE,MAAM,EAAE,mBAAmB,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QACtE,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,QAAQ;YACZ,oBAAoB,EAAE,CAAC;QACzB,CAAC;QAED,sFAAsF;QACtF,KAAK,CAAC,cAAc,CAAC,SAAiB;YACpC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAgB,EAAE,IAAc;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGlF,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;KACpD,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,mBAAmB;IACjC,IAAI,MAAuC,CAAC;IAE5C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,mBAAmB;QAEjC;;;;;;WAMG;QACH,KAAK,CAAC,IAAI,CAAC,UAAkB;YAC3B,IAAI,UAAU,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,uBAAuB,CAAC;gBACtB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;gBACpD,aAAa,EAAE,UAAU,CAAC,aAAa;aACxC,CAAC,CAAC;YACH,uBAAuB,CAAC;gBACtB,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;gBACpD,aAAa,EAAE,UAAU,CAAC,aAAa;aACxC,CAAC,CAAC;YACH,QAAQ,CAAC,wBAAwB,CAAC,CAAC;YACnC,yEAAyE;YACzE,sEAAsE;YACtE,mDAAmD;YACnD,MAAM,yBAAyB,EAAE,CAAC;YAElC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,GAAG,EAAE,MAAM,EAAE,mBAAmB,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QACtE,CAAC;QAED,6GAA6G;QAC7G,KAAK,CAAC,QAAQ;YACZ,oBAAoB,EAAE,CAAC;YACvB,MAAM,uBAAuB,EAAE,CAAC;QAClC,CAAC;QAED,kHAAkH;QAClH,KAAK,CAAC,cAAc,CAAC,SAAiB;YACpC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC7B,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAgB,EAAE,IAAc;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/execute-cursor/approval-policy.d.ts

@@ -37,16 +37,14 @@ export type { MergedToolPolicy, PolicySource } from "../../shared/approval-polic
 export type ApprovalCategory = ToolApprovalCategory;
 export declare const approvalCategory: typeof toolApprovalCategory;
 /**
- * Top-level tool-argument fields, in priority order, that identify the specific
- * resource a built-in tool acts on. The list deliberately spans BOTH taxonomies'
- * arg shapes: the hook input names a file `file_path` and the stream names it
- * `path`; both name a shell command `command`. Extracting the same resource
- * VALUE on both sides (the absolute path / the command string) is what lets the
- * hook-recorded denial token equal the stream-computed token. Authored here once
- * and injected into the generated preToolUse hook script so the runner and the
- * hook never disagree on which field to match.
+ * The salient argument fields — the resource a built-in acts on — are the
+ * platform's one list, `shared/args-preview.ts` `SALIENT_ARG_FIELDS` (moved
+ * there in #1097: the transcript builder previews every row over it for
+ * both harnesses). Re-exported here for this harness's identity code and the
+ * generated hook script, which inject it so the runner and the hook never
+ * disagree on which field to match.
  */
-export declare const SALIENT_ARG_FIELDS: readonly ["file_path", "path", "target_notebook", "command"];
+export { SALIENT_ARG_FIELDS } from "../../shared/args-preview.js";
 /**
  * Check whether a built-in (non-MCP) Cursor tool requires user approval.
  *
@@ -88,7 +86,9 @@ export declare function getBuiltInGatedCategories(): Array<[string, ApprovalCate
  * Approval-message template for a gated built-in tool (either taxonomy), or
  * undefined when the tool is not gated. Resolved via {@link approvalCategory}
  * so stream-side names (`edit`/`shell`/`delete`) and hook-side names
- * (`Write`/`Shell`/`Delete`) both map to the same template. Callers resolve the
+ * (`Write`/`Shell`/`Delete`) both map to the same template — the platform's
+ * ONE table, `shared/approval-policy.ts` `CATEGORY_APPROVAL_MESSAGE`, shared
+ * with the native gate since #1097. Callers resolve the
  * placeholders against the tool args via resolveApprovalMessage.
  */
 export declare function getBuiltInApprovalMessage(toolName: string): string | undefined;

package/dist/activities/execute-cursor/approval-policy.js

@@ -22,6 +22,7 @@ import { toolApprovalCategory } from "../../shared/tool-kind.js";
 // (`from "./approval-policy.js"`) keep working unchanged. This module now owns
 // only the Cursor-specific built-in-tool gating helpers below.
 export { mergeApprovalPolicies, lookupMcpToolPolicy, resolveApprovalMessage, POLICY_ENGINE_VERSION, } from "../../shared/approval-policy.js";
+import { CATEGORY_APPROVAL_MESSAGE } from "../../shared/approval-policy.js";
 /**
  * Built-in Cursor tools the preToolUse hook gates, named as the hook receives
  * them.
@@ -43,29 +44,15 @@ const BUILT_IN_GATED = new Set([
 ]);
 export const approvalCategory = toolApprovalCategory;
 /**
- * Human-readable approval-message template per canonical category. Keyed by
- * category (not raw tool name) so a denial surfaced from either taxonomy renders
- * the same message. Placeholders resolve against the tool args via
- * {@link resolveApprovalMessage}; `{{args.path}}` and `{{args.command}}` are the
- * stream-side field names (the runner builds the approval surface from the
- * streamed tool call, whose args use `path`/`command`).
+ * The salient argument fields — the resource a built-in acts on — are the
+ * platform's one list, `shared/args-preview.ts` `SALIENT_ARG_FIELDS` (moved
+ * there in #1097: the transcript builder previews every row over it for
+ * both harnesses). Re-exported here for this harness's identity code and the
+ * generated hook script, which inject it so the runner and the hook never
+ * disagree on which field to match.
  */
-const CATEGORY_APPROVAL_MESSAGE = {
-    write: "Write file: {{args.path}}",
-    delete: "Delete: {{args.path}}",
-    shell: "Run command: {{args.command}}",
-};
-/**
- * Top-level tool-argument fields, in priority order, that identify the specific
- * resource a built-in tool acts on. The list deliberately spans BOTH taxonomies'
- * arg shapes: the hook input names a file `file_path` and the stream names it
- * `path`; both name a shell command `command`. Extracting the same resource
- * VALUE on both sides (the absolute path / the command string) is what lets the
- * hook-recorded denial token equal the stream-computed token. Authored here once
- * and injected into the generated preToolUse hook script so the runner and the
- * hook never disagree on which field to match.
- */
-export const SALIENT_ARG_FIELDS = ["file_path", "path", "target_notebook", "command"];
+export { SALIENT_ARG_FIELDS } from "../../shared/args-preview.js";
+import { SALIENT_ARG_FIELDS } from "../../shared/args-preview.js";
 /**
  * Check whether a built-in (non-MCP) Cursor tool requires user approval.
  *
@@ -119,7 +106,9 @@ export function getBuiltInGatedCategories() {
  * Approval-message template for a gated built-in tool (either taxonomy), or
  * undefined when the tool is not gated. Resolved via {@link approvalCategory}
  * so stream-side names (`edit`/`shell`/`delete`) and hook-side names
- * (`Write`/`Shell`/`Delete`) both map to the same template. Callers resolve the
+ * (`Write`/`Shell`/`Delete`) both map to the same template — the platform's
+ * ONE table, `shared/approval-policy.ts` `CATEGORY_APPROVAL_MESSAGE`, shared
+ * with the native gate since #1097. Callers resolve the
  * placeholders against the tool args via resolveApprovalMessage.
  */
 export function getBuiltInApprovalMessage(toolName) {

package/dist/activities/execute-cursor/approval-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAE5F,+EAA+E;AAC/E,iFAAiF;AACjF,+DAA+D;AAC/D,+EAA+E;AAC/E,+DAA+D;AAC/D,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAGzC;;;;;;;;;;;GAWG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,OAAO;IACP,YAAY;IACZ,cAAc;IACd,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAoBH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAqC;IAClE,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,uBAAuB;IAC/B,KAAK,EAAE,+BAA+B;CACvC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAU,CAAC;AAE/F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAyC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAE5F,+EAA+E;AAC/E,iFAAiF;AACjF,+DAA+D;AAC/D,+EAA+E;AAC/E,+DAA+D;AAC/D,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG5E;;;;;;;;;;;GAWG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,OAAO;IACP,YAAY;IACZ,cAAc;IACd,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAoBH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAErD;;;;;;;GAOG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAyC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/activities/execute-cursor/approval-state.d.ts

@@ -81,7 +81,7 @@
  */
 import { ApprovalAction } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import type { PendingApproval } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/approval_pb";
-import type { AgentMessage } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+import type { AgentMessage, ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
 import type { MergedToolPolicy, ApprovalCategory } from "./approval-policy.js";
 import { type FingerprintKey } from "../../shared/approval-fingerprint.js";
 export interface McpToolPolicyEntry {
@@ -248,6 +248,40 @@ export declare function contentToken(key: string, salient: string, contentDigest
  * reinvoke-time identities can never drift.
  */
 export declare function primaryToken(key: string, salient: string, contentDigest: string): string;
+/**
+ * Compute a streamed tool call's identity token in the same canonical space the
+ * preToolUse hook records denials in (see {@link toolIdentity} / primaryToken).
+ * The token keys on the cross-taxonomy category + salient resource PLUS, for a
+ * file edit/write, the {@link contentDigest} of the edit content — so a stream
+ * `edit` correlates to the hook's `Write` deny for the same path AND content,
+ * and an approval of one edit does not match a DIFFERENT edit to the same file.
+ *
+ * The digest is read from the persisted `approval_content_digest` field when
+ * present (a seeded gate carries it, stable even if `args` was elided), and is
+ * recomputed from the call's args otherwise (a freshly-streamed call). For a
+ * shell/delete/MCP call (no content) it falls back to the coarse token, exactly
+ * as before — so those identities are unchanged.
+ *
+ * Exported so the resume-grant round-trip can be locked against it: the grant a
+ * resume mints for an approved tool (buildApprovalGrants -> primaryToken) must
+ * equal THIS denial/overlay identity, or the re-issued call is re-gated forever
+ * (the dual-path drift the approval-state round-trip suite guards against).
+ */
+export declare function toolCallIdentityToken(tc: ToolCall): string;
+/**
+ * Decode a primary token back into its (key, salient, digest) for the synthesis
+ * fallback. The token is `base64(key \n salient)` (coarse) or
+ * `base64(key \n salient \n digest)` (content-exact); the digest is the optional
+ * third segment. salient never contains a newline (a path or shell command), so
+ * splitting on the first two newlines is unambiguous.
+ */
+export declare function decodeIdentityToken(token: string): {
+    key: string;
+    salient: string;
+    digest: string;
+} | undefined;
+/** Best-effort args record for a tool call (proto struct, else parsed preview). */
+export declare function toolCallArgs(tc: ToolCall): Record<string, unknown>;
 /**
  * The shared HMAC coarse fingerprint of an approval grant.
  *