@stigmer/runner 3.15.3-dev.20260914100347 → 3.15.3-dev.20260916211208

package/dist/activities/execute-cursor/approval-state.js

@@ -129,6 +129,71 @@ export function contentToken(key, salient, contentDigest) {
 export function primaryToken(key, salient, contentDigest) {
     return contentDigest ? contentToken(key, salient, contentDigest) : grantToken(key, salient);
 }
+/**
+ * Compute a streamed tool call's identity token in the same canonical space the
+ * preToolUse hook records denials in (see {@link toolIdentity} / primaryToken).
+ * The token keys on the cross-taxonomy category + salient resource PLUS, for a
+ * file edit/write, the {@link contentDigest} of the edit content — so a stream
+ * `edit` correlates to the hook's `Write` deny for the same path AND content,
+ * and an approval of one edit does not match a DIFFERENT edit to the same file.
+ *
+ * The digest is read from the persisted `approval_content_digest` field when
+ * present (a seeded gate carries it, stable even if `args` was elided), and is
+ * recomputed from the call's args otherwise (a freshly-streamed call). For a
+ * shell/delete/MCP call (no content) it falls back to the coarse token, exactly
+ * as before — so those identities are unchanged.
+ *
+ * Exported so the resume-grant round-trip can be locked against it: the grant a
+ * resume mints for an approved tool (buildApprovalGrants -> primaryToken) must
+ * equal THIS denial/overlay identity, or the re-issued call is re-gated forever
+ * (the dual-path drift the approval-state round-trip suite guards against).
+ */
+export function toolCallIdentityToken(tc) {
+    const id = toolIdentity(tc.name, tc.mcpServerSlug, toolCallArgs(tc));
+    const digest = tc.approvalContentDigest || contentDigest(toolCallArgs(tc));
+    return primaryToken(id.key, id.salient, digest);
+}
+/**
+ * Decode a primary token back into its (key, salient, digest) for the synthesis
+ * fallback. The token is `base64(key \n salient)` (coarse) or
+ * `base64(key \n salient \n digest)` (content-exact); the digest is the optional
+ * third segment. salient never contains a newline (a path or shell command), so
+ * splitting on the first two newlines is unambiguous.
+ */
+export function decodeIdentityToken(token) {
+    try {
+        const decoded = Buffer.from(token, "base64").toString("utf-8");
+        const first = decoded.indexOf("\n");
+        if (first < 0)
+            return undefined;
+        const key = decoded.slice(0, first);
+        const rest = decoded.slice(first + 1);
+        const second = rest.indexOf("\n");
+        if (second < 0)
+            return { key, salient: rest, digest: "" };
+        return { key, salient: rest.slice(0, second), digest: rest.slice(second + 1) };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Best-effort args record for a tool call (proto struct, else parsed preview). */
+export function toolCallArgs(tc) {
+    if (tc.args && typeof tc.args === "object") {
+        return tc.args;
+    }
+    if (tc.argsPreview) {
+        try {
+            const parsed = JSON.parse(tc.argsPreview);
+            if (parsed && typeof parsed === "object")
+                return parsed;
+        }
+        catch {
+            // fall through
+        }
+    }
+    return {};
+}
 /**
  * The shared HMAC coarse fingerprint of an approval grant.
  *

package/dist/activities/execute-cursor/approval-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-state.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AAIzG,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,yBAAyB,GAE1B,MAAM,sCAAsC,CAAC;AA8B9C,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,aAAqB,EACrB,IAAyC;IAEzC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,8EAA8E;IAC9E,+EAA+E;IAC/E,OAAO,EAAE,GAAG,EAAE,QAAQ,IAAI,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AAmHD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,OAAe;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,aAAqB;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,KAAK,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,aAAqB;IAC9E,OAAO,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,KAAoB;IACxE,OAAO,yBAAyB,CAAC,GAAG,EAAE;QACpC,IAAI,EAAE,KAAK,CAAC,GAAG;QACf,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC,EAChC,cAA8B,EAC9B,WAAmB;IAEnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,yBAAyB;YACzB,IAAI,CAAC,SAAS,CAAC;gBACb,WAAW;gBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;gBACtC,aAAa,EAAE,UAAU;gBACzB,mBAAmB,EAAE,qBAAqB;gBAC1C,WAAW,EAAE,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChD,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,KAAK;aAChB,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,gBAAmC,EACnC,SAA8C,EAC9C,cAAoC;IAEpC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClC,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,cAAc,CAAC,OAAO,IAAI,QAAQ,KAAK,cAAc,CAAC,WAAW;YAAE,SAAS;QAE7F,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,oCAAoC;YACpC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YACvD,gBAAgB,EAAE,EAAE,CAAC,UAAU;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAqD,EACrD,YAAqB,EACrB,gBAA+C,EAC/C,MAAwB,EACxB,WAAW,GAAG,KAAK,EACnB,cAAc,GAAG,KAAK,EACtB,YAAY,GAAG,IAAI,EACnB,cAAc,GAAG,KAAK,EACtB,wBAAkD,EAAE;IAEpD,MAAM,cAAc,GAAG,MAAM,IAAI,EAAE,CAAC;IAEpC,MAAM,eAAe,GAAuC,EAAE,CAAC;IAC/D,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,OAAO,EAAE,MAAM,CAAC,eAAe;SAChC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,cAAc,EAAE,YAAY;QAC5B,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC;QACvC,eAAe;QACf,qBAAqB;QACrB,cAAc;QACd,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,mBAAmB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QAC/F,WAAW;QACX,cAAc;QACd,YAAY;QACZ,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,KAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAiC3C,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAe,UAAU,CAAC;AAE3D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAe,YAAY,CAAC;AAE/D,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAe,UAAU,CAAC;AA+B3D,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,OAAO,KAAK,CAAC,IAAI,IAAI,oBAAoB,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAqC;IACnE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAqC;IACrE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAmB;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;YACtD,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,kBAAkB;gBAAE,OAAO,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,qEAAqE;QACrE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe;IAEf,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAK7B,CAAC;YACF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;oBAC9D,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,+DAA+D;oBAC/D,sCAAsC;oBACtC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACrE,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAwB1C,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,OAA0B;IAE1B,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;AACH,CAAC;AAmCD,MAAM,UAAU,+BAA+B,CAC7C,QAAwB;IAExB,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B;gBAAE,SAAS;YACtE,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;gBAAE,SAAS;YAE/D,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;YACxC,sEAAsE;YACtE,qEAAqE;YACrE,qCAAqC;YACrC,cAAc,CAAC,GAAG,CAChB,EAAE,CAAC,EAAE,EACL,EAAE,CAAC,qBAAqB;gBACtB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,IAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACrE,CAAC;YACF,gBAAgB,CAAC,IAAI,CACnB,MAAM,CAAC,qBAAqB,EAAE;gBAC5B,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,QAAQ,EAAE,EAAE,CAAC,IAAI;gBACjB,OAAO,EAAE,EAAE,CAAC,eAAe;gBAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,WAAW,EAAE,EAAE,CAAC,mBAAmB;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AACzD,CAAC"}
+{"version":3,"file":"approval-state.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AAIzG,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,yBAAyB,GAE1B,MAAM,sCAAsC,CAAC;AA8B9C,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,aAAqB,EACrB,IAAyC;IAEzC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,8EAA8E;IAC9E,+EAA+E;IAC/E,OAAO,EAAE,GAAG,EAAE,QAAQ,IAAI,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AAmHD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,OAAe;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,aAAqB;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,KAAK,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,aAAqB;IAC9E,OAAO,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAY;IAChD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,EAAE,CAAC,qBAAqB,IAAI,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,EAAY;IACvC,IAAI,EAAE,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,IAA+B,CAAC;IAC5C,CAAC;IACD,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;YAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAAiC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,KAAoB;IACxE,OAAO,yBAAyB,CAAC,GAAG,EAAE;QACpC,IAAI,EAAE,KAAK,CAAC,GAAG;QACf,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC,EAChC,cAA8B,EAC9B,WAAmB;IAEnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,yBAAyB;YACzB,IAAI,CAAC,SAAS,CAAC;gBACb,WAAW;gBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;gBACtC,aAAa,EAAE,UAAU;gBACzB,mBAAmB,EAAE,qBAAqB;gBAC1C,WAAW,EAAE,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChD,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,KAAK;aAChB,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,gBAAmC,EACnC,SAA8C,EAC9C,cAAoC;IAEpC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClC,yEAAyE;QACzE,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,cAAc,CAAC,OAAO,IAAI,QAAQ,KAAK,cAAc,CAAC,WAAW;YAAE,SAAS;QAE7F,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,oCAAoC;YACpC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;YACvD,gBAAgB,EAAE,EAAE,CAAC,UAAU;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAqD,EACrD,YAAqB,EACrB,gBAA+C,EAC/C,MAAwB,EACxB,WAAW,GAAG,KAAK,EACnB,cAAc,GAAG,KAAK,EACtB,YAAY,GAAG,IAAI,EACnB,cAAc,GAAG,KAAK,EACtB,wBAAkD,EAAE;IAEpD,MAAM,cAAc,GAAG,MAAM,IAAI,EAAE,CAAC;IAEpC,MAAM,eAAe,GAAuC,EAAE,CAAC;IAC/D,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,OAAO,EAAE,MAAM,CAAC,eAAe;SAChC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,cAAc,EAAE,YAAY;QAC5B,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC;QACvC,eAAe;QACf,qBAAqB;QACrB,cAAc;QACd,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,mBAAmB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QAC/F,WAAW;QACX,cAAc;QACd,YAAY;QACZ,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,KAAwB;IAExB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAiC3C,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAe,UAAU,CAAC;AAE3D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAe,YAAY,CAAC;AAE/D,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAe,UAAU,CAAC;AA+B3D,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,OAAO,KAAK,CAAC,IAAI,IAAI,oBAAoB,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAqC;IACnE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAqC;IACrE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAmB;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;YACtD,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,kBAAkB;gBAAE,OAAO,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,qEAAqE;QACrE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe;IAEf,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAK7B,CAAC;YACF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;oBAC9D,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,+DAA+D;oBAC/D,sCAAsC;oBACtC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACrE,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAwB1C,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,OAA0B;IAE1B,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;AACH,CAAC;AAmCD,MAAM,UAAU,+BAA+B,CAC7C,QAAwB;IAExB,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B;gBAAE,SAAS;YACtE,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW;gBAAE,SAAS;YAE/D,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC;YACxC,sEAAsE;YACtE,qEAAqE;YACrE,qCAAqC;YACrC,cAAc,CAAC,GAAG,CAChB,EAAE,CAAC,EAAE,EACL,EAAE,CAAC,qBAAqB;gBACtB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,IAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACrE,CAAC;YACF,gBAAgB,CAAC,IAAI,CACnB,MAAM,CAAC,qBAAqB,EAAE;gBAC5B,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,QAAQ,EAAE,EAAE,CAAC,IAAI;gBACjB,OAAO,EAAE,EAAE,CAAC,eAAe;gBAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,WAAW,EAAE,EAAE,CAAC,mBAAmB;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AACzD,CAAC"}

package/dist/activities/execute-cursor/{message-translator.d.ts → boundary-rows.d.ts}

@@ -1,329 +1,39 @@
 /**
- * Translates Cursor SDK streaming events into Stigmer AgentMessage protos.
- *
- * The Cursor SDK emits SDKMessage events during a Run. This module provides
- * both stateless translation (translateEvent) and stateful accumulation
- * (MessageAccumulator) for building coherent messages from token-level
- * streaming events.
- *
- * The Cursor SDK emits one SDKAssistantMessage per token chunk — a single
- * LLM turn produces dozens of events. MessageAccumulator merges them into
- * a single AgentMessage per turn, matching the Python agent-runner's
- * proven pattern (see chat_model.py handle_chat_model_stream).
- *
- * Tool calls are attached to the most recent MESSAGE_AI message rather
- * than emitted as standalone MESSAGE_TOOL messages. This matches:
- *   - The proto model (AgentMessage.tool_calls repeated field)
- *   - The Python agent-runner's StatusBuilder pattern
- *   - The UI's MessageThread expectation (tool calls on AI messages)
- *
- * Task (sub-agent) tool calls additionally produce SubAgentExecution
- * protos accessible via MessageAccumulator.subAgentExecutions.
- *
- * MCP tool enrichment:
- * Cursor reports MCP tool calls with name="mcp" and the actual details
- * (providerIdentifier, toolName, args) inside event.args. This module
- * extracts those details to populate the ToolCall proto with:
- * - name: the actual MCP tool name (e.g., "search_services")
- * - mcpServerSlug: the MCP server identifier (e.g., "planton")
- * - requiresApproval: from the merged policy chain
- * - approvalMessage: from the policy, with placeholder resolution
+ * The Cursor harness's boundary rows — the post-stream settlements that turn
+ * the deny-and-retry primitive's evidence into transcript rows the runtime's
+ * review surfaces read: the denial overlay (a hook-denied call becomes the
+ * turn's one WAITING_APPROVAL gate), the same-identity twin collapse, the
+ * one-gate-per-turn collapse of non-anchor denials, the provisional-narration
+ * redaction, the #205 foreign-hook-block detector, the #965 unresolved-row
+ * settle, and the unattended-mode SKIPPED stamp.
+ *
+ * Moved verbatim from the boundary half of `message-translator.ts` in #1097,
+ * so that module's folding half — the Cursor accumulator, the
+ * second copy of the transcript folding rule — could be deleted whole at the
+ * swap and replaced by `translator.ts` over the shared
+ * `TranscriptBuilder`. Nothing here folds engine events: every function
+ * AMENDS rows the stream already created, by identity (the token the hook and
+ * the runner share); the one row this module ever needs CREATED — the gate for
+ * a denial no streamed call matched — and the one it REOPENS — the streamed
+ * call the hook denied — go through the shared `TranscriptBuilder` as
+ * `approval_proposed`, the one post-stream fact both harnesses produce
+ * (#1097). `isTerminalToolStatus` below is the twin
+ * collapse's own settled set (`shared/tool-row.ts` explains why INTERRUPTED is
+ * not in it).
+ *
+ * The identity this module correlates on lives in `approval-state.ts`
+ * (`toolCallIdentityToken` beside `toolIdentity`/`primaryToken`, the same
+ * space the hook records denials in); the row predicates it shares with the
+ * runtime (`isAdjudicatedRow`, `isDeclinedRow`) in `shared/tool-row.ts`.
+ * The pipeline that calls these, and its ordering rationale, is
+ * `turn-boundary.ts`.
  */
 import type { AgentMessage, ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
-import { type SubAgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/subagent_pb";
-import type { SDKMessage } from "@cursor/sdk";
+import type { SubAgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/subagent_pb";
+import type { TranscriptBuilder } from "../../harness/transcript/builder.js";
 import type { MergedToolPolicy } from "./approval-policy.js";
 import { type DeniedLedgerEntry } from "./approval-state.js";
-import { utcTimestamp } from "../../shared/status.js";
-import { type ToolApprovalCategory } from "../../shared/tool-kind.js";
 import type { WorkspaceBackend } from "../../shared/workspace/types.js";
-export { utcTimestamp };
-/**
- * Details extracted from an MCP tool call event's args.
- *
- * When Cursor invokes an MCP tool, the SDK stream reports event.name as
- * "mcp" and packs the real tool identity into event.args:
- * { providerIdentifier: "planton", toolName: "search_services", args: {...} }
- */
-export interface McpToolDetails {
-    providerIdentifier: string;
-    toolName: string;
-    innerArgs: Record<string, unknown>;
-}
-/**
- * Try to extract MCP tool details from a tool_call event.
- * Returns undefined if the event is not an MCP tool call.
- */
-export declare function extractMcpToolDetails(event: Extract<SDKMessage, {
-    type: "tool_call";
-}>): McpToolDetails | undefined;
-/**
- * Translate a single Cursor SDKMessage into zero or more Stigmer AgentMessages.
- *
- * Most events produce exactly one message. Some (like system init) are
- * informational and produce none.
- *
- * Note: for production streaming, use MessageAccumulator instead — it
- * merges token-level events and attaches tool calls to their parent AI
- * messages. This stateless function is retained for unit testing and
- * simple single-event translation.
- */
-export declare function translateEvent(event: SDKMessage): AgentMessage[];
-/**
- * Build a ToolCall proto from a Cursor SDK tool_call event.
- *
- * For MCP tools (event.name === "mcp"), extracts the actual tool name
- * and server slug from event.args. For built-in tools, uses the event
- * name directly.
- *
- * Approval fields are populated when mergedPolicies are provided.
- * Without policies, only basic fields are set (backward compatible).
- *
- * When mergedPolicies are provided, the tool call also carries its authorization
- * provenance (approval_policy_source) — which policy layer gated or cleared it —
- * derived from the same merged policy chain the gate uses, so the Cursor
- * reconstruction is as auditable as the native harness. `provenance` supplies the
- * run-scoped context (global bypass, active leases) the per-tool map cannot.
- */
-export declare function buildToolCallProto(event: Extract<SDKMessage, {
-    type: "tool_call";
-}>, mergedPolicies?: ReadonlyMap<string, MergedToolPolicy>, provenance?: ApprovalProvenanceContext): ToolCall;
-/**
- * Run-scoped approval context the Cursor reconstruction needs to attribute a tool
- * call's provenance beyond the per-tool merged policy map: the pre-armed global
- * bypass and the built-in categories holding a run-lifetime lease.
- */
-export interface ApprovalProvenanceContext {
-    readonly globalBypass: boolean;
-    readonly leasedCategories: ReadonlySet<ToolApprovalCategory>;
-}
-/**
- * Normalize a tool_call event result into a string for the ToolCall proto.
- * Returns "" for an absent result so callers can treat "no result yet" and
- * "empty result" uniformly (e.g. to avoid clobbering a captured result).
- *
- * The one non-passthrough case is a multimodal MCP result (e.g. a computer-use
- * screenshot): see {@link canonicalizeImageResult}. Everything else is the
- * string as-is, or a whole-value JSON.stringify — byte-identical to before.
- */
-export declare function toResultString(result: unknown): string;
-/**
- * Re-emit a Cursor MCP result that carries an image block as the canonical
- * top-level content-block array the persist-time offload understands.
- *
- * The Cursor SDK wraps an MCP tool result as `{ status, value: { content: [...] } }`
- * (or a bare `{ content: [...] }`), where an image block is
- * `{ image: { data, mimeType } }` and `data` is a Node Buffer-JSON
- * (`{ type:"Buffer", data:number[] }`). Persisting that envelope verbatim buries
- * the image where `detectImagePayload`/`contentBlocks` (shared/status-offload.ts)
- * cannot see it, so the screenshot lands as `text/plain` instead of a renderable
- * `ToolCallOutputRef`.
- *
- * This mirrors `serializeToolContent` in the deep-agent path
- * (execute-deep-agent/status-builder-shared.ts): the harness adapter normalizes
- * its own wire shape into the canonical array
- *   `[{ type:"text", text }, { type:"image", data:<base64>, mimeType }]`
- * so the shared offload stays harness-agnostic (its envelope handling is
- * documented there as insurance, not the primary path). Buffer-JSON is decoded
- * to base64 here so the bloated byte-array never propagates into the status.
- *
- * Returns undefined when there is no content array or no image block, so the
- * caller falls back to its existing serialization (no change for text/error
- * results).
- */
-export declare function canonicalizeImageResult(result: unknown): string | undefined;
-/**
- * Parse the task tool's completed result into AgentMessages.
- *
- * The Cursor SDK returns sub-agent work as a blob in the task tool's
- * completed event (not as streaming events with a distinct agent_id).
- * Re-verified 2026-08-23 on the pinned SDK (1.0.13) AND the latest (1.0.28),
- * this time including the write side (stigmer/stigmer#839): an injected
- * platform.eventStore/eventNotifier receives parent events only on 1.0.13 and
- * is bypassed entirely on 1.0.28 (persistence moved into the executor daemon's
- * own state dir); zero events reach the parent's run.stream() mid-task; the
- * agentId in the task args is not a platform-store agent id at all, so it can
- * never be addressable via Agent.listRuns / Agent.getRun (this is WHY the
- * 2026-07-02 read-side polls all returned not-found). On 1.0.28 the child
- * transcript lands at a deterministic path knowable at spawn
- * (~/.cursor/projects/<slug>/agent-transcripts/<parentId>/subagents/<argsAgentId>.jsonl)
- * but is flushed only at completion — verified with 200ms sampling across a
- * full sub-agent run. Live nested visibility is therefore still an upstream
- * SDK limitation — do not try to fake it here; the UI shows an elapsed-time
- * affordance instead (SubAgentSection). Probe scripts and recordings:
- * stigmer-cloud _projects/2026-08/20260823.03.cursor-subagent-live-progress.
- * The result shape is:
- *
- *   { status: "success", value: { conversationSteps: ConversationStep[] } }
- *
- * where each ConversationStep is a protobuf-oneof object keyed DIRECTLY by its
- * kind (there is NO `{ type, message }` envelope — verified against production
- * sub-agent blobs; see the `buildSubAgentToolCall` note):
- *   - { thinkingMessage: { text, thinkingDurationMs? } }
- *   - { assistantMessage: { text } }
- *   - { toolCall: { toolCallId, <kind>ToolCall: { args, result } } }
- *
- * This function defensively parses whatever steps are present and
- * appends corresponding AgentMessage protos to the output array.
- * Unknown step types are silently skipped for forward compatibility.
- */
-export declare function extractConversationSteps(result: unknown, out: AgentMessage[]): void;
-/**
- * Options for creating a MessageAccumulator with policy awareness.
- */
-export interface MessageAccumulatorOptions {
-    mergedPolicies?: ReadonlyMap<string, MergedToolPolicy>;
-    /**
-     * Run-scoped approval context (global bypass + active leases) so reconstructed
-     * tool calls carry their authorization provenance. Omitted in unit tests that
-     * only assert basic translation; provenance then stays UNSPECIFIED.
-     */
-    provenance?: ApprovalProvenanceContext;
-    /**
-     * Absolute workspace root, used to render file-change paths relative to the
-     * workspace (with the absolute path retained). Omitted in unit tests, in
-     * which case raw tool-arg paths are used verbatim.
-     */
-    workspaceRoot?: string;
-    /**
-     * The status's own `subAgentExecutions` array, wrapped BY REFERENCE exactly
-     * as `messages` is: the accumulator upserts into it in place, so the rows
-     * the runtime seeded on a resume (`harness/turn-context.ts`
-     * `seedFromPersistedStatus`) are indexed by id at construction and a
-     * resumed sub-agent's lifecycle updates merge onto its seeded row instead
-     * of producing a duplicate. Omitted in unit tests that only assert basic
-     * translation; the accumulator then owns a private array.
-     */
-    subAgentExecutions?: SubAgentExecution[];
-}
-/**
- * Stateful accumulator that merges per-token SDK events into coherent
- * AgentMessages.
- *
- * The Cursor SDK emits one `assistant` event per token chunk (validated:
- * a 2-sentence response produces ~41 events). Without accumulation each
- * chunk becomes a separate AgentMessage, causing the UI to render each
- * word on its own line.
- *
- * MessageAccumulator tracks the active AI and thinking messages per
- * run_id. Consecutive assistant events for the same run_id append to
- * the existing message's content instead of creating new ones.
- *
- * Tool calls are attached to the most recent MESSAGE_AI message's
- * toolCalls array — matching the Python agent-runner's StatusBuilder
- * pattern and the UI's MessageThread expectations.
- *
- * Tool call lifecycle is tracked via a `toolCallIndex` map (keyed by
- * call_id), mirroring the native harness's `ExecutionState.toolCalls`.
- * This ensures completion events always find the correct ToolCall proto
- * regardless of which AI message it was originally attached to — the
- * index stores the same object reference that lives in the message's
- * `toolCalls[]` array, so mutations propagate directly to the proto.
- *
- * Task (sub-agent) tool calls additionally produce SubAgentExecution
- * protos, accessible via the subAgentExecutions getter.
- */
-export declare class MessageAccumulator {
-    private readonly messages;
-    private activeAiByRunId;
-    private activeThinkingByRunId;
-    private readonly _subAgentExecutions;
-    private readonly subAgentMap;
-    private readonly mergedPolicies?;
-    private readonly provenance?;
-    private readonly workspaceRoot?;
-    private readonly toolCallIndex;
-    private _dirty;
-    constructor(messages: AgentMessage[], options?: MessageAccumulatorOptions);
-    /** Index every sub-agent row already present in the (seeded) array by its id, so upserts land on it. */
-    private rebuildSubAgentIndex;
-    /**
-     * Index every tool call already present in the (seeded) transcript by its
-     * call_id. Called once at construction: on a first run the transcript is empty
-     * (no-op); on a resume it lets re-emitted lifecycle events for a previously
-     * committed call_id reconcile onto the existing proto instead of duplicating.
-     */
-    private rebuildToolCallIndex;
-    get subAgentExecutions(): SubAgentExecution[];
-    /**
-     * True when a discrete, user-visible state change has accumulated since the
-     * last markPersisted(): a tool call created or transitioned to a terminal
-     * status, or a sub-agent execution created or updated. The streaming loop
-     * treats this as a force-flush signal so the live UI surfaces a tool call the
-     * instant it starts and completes, and a sub-agent's IN_PROGRESS state the
-     * instant delegation begins — instead of waiting for the scheduler's time
-     * cadence or the parent finalizing.
-     *
-     * High-frequency token deltas (assistant text, model thinking) deliberately do
-     * NOT set this flag; they ride the StreamingUpdateScheduler's time cadence so
-     * we avoid a per-token persist storm — matching the native harness, which only
-     * force-flushes on discrete tool start/end events.
-     */
-    get isDirty(): boolean;
-    /** Clears the dirty flag after the latest status has been persisted. */
-    markPersisted(): void;
-    /**
-     * Transition any non-terminal sub-agent (IN_PROGRESS or PENDING) to CANCELLED.
-     *
-     * Called when the parent run is aborted (pause / cancel / worker shutdown):
-     * the Cursor SDK run stops, so a delegated sub-agent is no longer executing.
-     * Without this, the final snapshot would show a permanent "Running" zombie
-     * sub-agent. Mirrors the native harness's cancelSubAgents().
-     */
-    cancelInProgressSubAgents(): void;
-    processEvent(event: SDKMessage): void;
-    finalize(): void;
-    /**
-     * Attach a tool call to the current AI message, upserting by `call_id` so a
-     * single call maps to at most ONE ToolCall across all messages.
-     *
-     * The Cursor SDK can emit the lifecycle for one `call_id` more than once —
-     * observed in production as two "running" events ~0.5s apart for task/edit
-     * tools, which previously appended a duplicate ToolCall (the same call
-     * rendered two or three times in the UI). We therefore index by `call_id`
-     * and merge subsequent events into the existing proto, mirroring how
-     * trackSubAgentExecution() upserts via subAgentMap. The first event for a
-     * `call_id` (running or terminal) creates the proto on the last AI message;
-     * the index keeps pointing at it even after later assistant text starts a
-     * new AI message, so cross-message completions still land on the original.
-     */
-    private attachToolCallToLastAi;
-    /**
-     * Find a seeded, still-gated tool call this resumed event should reconcile
-     * onto: the first tool call in the index that is still WAITING_APPROVAL and
-     * shares the candidate's canonical identity token. "First" (Map iteration =
-     * transcript order) mirrors the v2 deep-agent's ordered first-unreconciled
-     * match — once reconciled a call leaves WAITING_APPROVAL, so a second co-
-     * pending call with the same identity naturally reconciles onto the next one.
-     * Tool calls created during this turn are not WAITING_APPROVAL until the
-     * post-stream denial reconciliation runs, so they can never be matched here.
-     *
-     * Only a row whose decision EXECUTES is resumable: the re-issue after an
-     * APPROVE is the approved act itself, landing on its row. A row the user
-     * declined (SKIP / REJECT) is a closed gate — a later same-identity call is a
-     * NEW act the model was told not to perform, and it gets its own row so the
-     * hook's denial gates it afresh instead of landing on the declined row and
-     * inheriting its decision (S2 M4 finding F9, the accumulator's half; the
-     * denial overlay's half is {@link isAdjudicatedRow}).
-     */
-    private findResumableSeededToolCall;
-    /**
-     * Merge a repeated tool_call event into the ToolCall already tracked for this
-     * `call_id`. The merge is defensive because a re-emitted event may carry less
-     * information than an earlier one (a late "running" after "completed", or a
-     * completion with an empty result): status only advances toward terminal,
-     * timestamps are stamped once, and a populated result/args is never clobbered
-     * by an empty one.
-     */
-    private mergeToolCallEvent;
-    private findOrCreateLastAiMessage;
-    trackSubAgentExecution(event: Extract<SDKMessage, {
-        type: "tool_call";
-    }>): SubAgentExecution | undefined;
-    private accumulateAssistant;
-    private accumulateThinking;
-    private finalizeStreaming;
-}
 /**
  * Reconcile the denial ledger written by the preToolUse hook against the tool
  * calls accumulated from the stream, marking each denied call as
@@ -396,10 +106,24 @@ export declare class MessageAccumulator {
  * sibling edit. A missing capture (the hook's grep fallback) degrades to the
  * prior behavior.
  *
+ * Every gate this function opens goes through the transcript builder as an
+ * `approval_proposed` (since #1097): a known row REOPENS
+ * (WAITING, the outcome the stream wrote cleared, the hook's captured input as
+ * its args and preview), an unknown one gets a WAITING row on the message
+ * whose text proposed it. The builder is the one writer of a WAITING row on
+ * both harnesses; this module supplies the fact and reads the row back.
+ *
+ * Two handles, one object: `messages` is the root transcript's own array
+ * (`status.messages`, the rows this function reads and matches against) and
+ * `transcript` is the builder that creates rows INTO that same array — it
+ * pushes and never replaces, so a row proposed through the builder is found
+ * in `messages` on the next line. Rows to read, a builder to create through:
+ * the sink's ownership rule, stated in the signature.
+ *
  * Returns the tool calls now marked WAITING_APPROVAL — the single anchor gate
  * for the turn (overlaid or, rarely, synthesized).
  */
-export declare function reconcileDeniedToolCalls(messages: AgentMessage[], ledger: DeniedLedgerEntry[], mergedPolicies?: ReadonlyMap<string, MergedToolPolicy>, workspaceBackend?: WorkspaceBackend): Promise<ToolCall[]>;
+export declare function reconcileDeniedToolCalls(messages: AgentMessage[], transcript: TranscriptBuilder, ledger: DeniedLedgerEntry[], mergedPolicies?: ReadonlyMap<string, MergedToolPolicy>, workspaceBackend?: WorkspaceBackend): Promise<ToolCall[]>;
 /**
  * Collapse redundant same-identity tool-call twins to a single visible row.
  *
@@ -653,23 +377,3 @@ export declare function settleUnresolvedToolCalls(messages: readonly AgentMessag
  * Returns how many tool calls were stamped.
  */
 export declare function stampUnattendedSkippedToolCalls(messages: readonly AgentMessage[], subAgentExecutions: readonly SubAgentExecution[], unattendedLedger: readonly DeniedLedgerEntry[], workspaceRoot?: string): number;
-/**
- * Compute a streamed tool call's identity token in the same canonical space the
- * preToolUse hook records denials in (see {@link toolIdentity} / primaryToken).
- * The token keys on the cross-taxonomy category + salient resource PLUS, for a
- * file edit/write, the {@link contentDigest} of the edit content — so a stream
- * `edit` correlates to the hook's `Write` deny for the same path AND content,
- * and an approval of one edit does not match a DIFFERENT edit to the same file.
- *
- * The digest is read from the persisted `approval_content_digest` field when
- * present (a seeded gate carries it, stable even if `args` was elided), and is
- * recomputed from the call's args otherwise (a freshly-streamed call). For a
- * shell/delete/MCP call (no content) it falls back to the coarse token, exactly
- * as before — so those identities are unchanged.
- *
- * Exported so the resume-grant round-trip can be locked against it: the grant a
- * resume mints for an approved tool (buildApprovalGrants -> primaryToken) must
- * equal THIS denial/overlay identity, or the re-issued call is re-gated forever
- * (the dual-path drift the approval-state round-trip suite guards against).
- */
-export declare function toolCallIdentityToken(tc: ToolCall): string;