@stigmer/runner 3.15.3-dev.20260914121148 → 3.16.0

package/dist/activities/execute-deep-agent/streaming-side-effects.d.ts

@@ -1,17 +1,25 @@
 /**
- * The inline-publish trigger of the native stream: a v3 `tools` event carries
- * the tool INPUT on `tool-started` and the OUTPUT on `tool-finished`, so the
- * two are correlated by `tool_call_id` and a file-modifying tool's target
- * path is published (`InlinePublisher`) once the call has finished — the
- * artifact appears on the status mid-turn, not at the end.
+ * The inline-publish trigger of the native stream: a `tool_started` carries
+ * the tool's INPUT and a `tool_finished` its completion, so the two are
+ * correlated by `callId` and a file-modifying tool's target path is published
+ * (`InlinePublisher`) once the call has finished — the artifact appears on
+ * the status mid-turn, not at the end.
  *
- * Until S3 M2b (Q-M1-1) the same correlation also fed the write-back
+ * Reads the canonical `TranscriptEvent`s the translator emits, never the raw
+ * v3 wire (since #1097): until then this trigger re-implemented the
+ * translator's field parsers (`tool_call_id`/`toolCallId`, the input as a
+ * string or an object) to read the same two facts off the raw event, a
+ * second parser of the wire that could drift from the first. Since then the
+ * raw event has two readers in the loop — the recorder, which records it
+ * raw by design, and `usageOf` — and everything else reads the translation.
+ *
+ * Until #1096 the same correlation also fed the write-back
  * coordinator's per-file commit (`onFileModified`); write-back is
  * finalize-only now, the turn runtime's, so publishing is this trigger's one
  * effect. The loop (`turn-stream.ts`) drains {@link pendingPublishPromises}
  * in the settle.
  */
-import type { V3ProtocolEvent } from "./v3-event-recorder.js";
+import type { TranscriptEvent } from "../../harness/transcript/events.js";
 import type { InlinePublisher } from "./inline-publisher.js";
 export declare class StreamingSideEffects {
     private readonly inputCache;
@@ -20,5 +28,5 @@ export declare class StreamingSideEffects {
     constructor(opts: {
         inlinePublisher?: InlinePublisher;
     });
-    onProtocolEvent(event: V3ProtocolEvent): void;
+    onEvent(event: TranscriptEvent): void;
 }

package/dist/activities/execute-deep-agent/streaming-side-effects.js

@@ -1,11 +1,19 @@
 /**
- * The inline-publish trigger of the native stream: a v3 `tools` event carries
- * the tool INPUT on `tool-started` and the OUTPUT on `tool-finished`, so the
- * two are correlated by `tool_call_id` and a file-modifying tool's target
- * path is published (`InlinePublisher`) once the call has finished — the
- * artifact appears on the status mid-turn, not at the end.
+ * The inline-publish trigger of the native stream: a `tool_started` carries
+ * the tool's INPUT and a `tool_finished` its completion, so the two are
+ * correlated by `callId` and a file-modifying tool's target path is published
+ * (`InlinePublisher`) once the call has finished — the artifact appears on
+ * the status mid-turn, not at the end.
  *
- * Until S3 M2b (Q-M1-1) the same correlation also fed the write-back
+ * Reads the canonical `TranscriptEvent`s the translator emits, never the raw
+ * v3 wire (since #1097): until then this trigger re-implemented the
+ * translator's field parsers (`tool_call_id`/`toolCallId`, the input as a
+ * string or an object) to read the same two facts off the raw event, a
+ * second parser of the wire that could drift from the first. Since then the
+ * raw event has two readers in the loop — the recorder, which records it
+ * raw by design, and `usageOf` — and everything else reads the translation.
+ *
+ * Until #1096 the same correlation also fed the write-back
  * coordinator's per-file commit (`onFileModified`); write-back is
  * finalize-only now, the turn runtime's, so publishing is this trigger's one
  * effect. The loop (`turn-stream.ts`) drains {@link pendingPublishPromises}
@@ -19,37 +27,16 @@ export class StreamingSideEffects {
     constructor(opts) {
         this.inlinePublisher = opts.inlinePublisher;
     }
-    onProtocolEvent(event) {
-        if (event.method !== "tools")
-            return;
+    onEvent(event) {
         if (!this.inlinePublisher)
             return;
-        const data = event.params.data;
-        if (!data)
-            return;
-        const eventType = (data.event ?? data.type);
-        const callId = (data.tool_call_id ?? data.toolCallId);
-        if (!callId)
-            return;
-        if (eventType === "tool-started") {
-            const toolName = (data.tool_name ?? data.toolName ?? data.name ?? "");
-            const rawInput = data.input;
-            let input = {};
-            if (typeof rawInput === "string") {
-                try {
-                    input = JSON.parse(rawInput);
-                }
-                catch { /* leave empty */ }
-            }
-            else if (rawInput && typeof rawInput === "object" && !Array.isArray(rawInput)) {
-                input = rawInput;
-            }
-            this.inputCache.set(callId, { toolName, input });
+        if (event.kind === "tool_started") {
+            this.inputCache.set(event.callId, { toolName: event.name, input: event.input });
             return;
         }
-        if (eventType === "tool-finished") {
-            const cached = this.inputCache.get(callId);
-            this.inputCache.delete(callId);
+        if (event.kind === "tool_finished") {
+            const cached = this.inputCache.get(event.callId);
+            this.inputCache.delete(event.callId);
             if (!cached)
                 return;
             if (!isFileModifyingTool(cached.toolName))

package/dist/activities/execute-deep-agent/streaming-side-effects.js.map

@@ -1 +1 @@
-{"version":3,"file":"streaming-side-effects.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/streaming-side-effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAOlF,MAAM,OAAO,oBAAoB;IACd,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,eAAe,CAA8B;IACrD,sBAAsB,GAAoB,EAAE,CAAC;IAEtD,YAAY,IAA2C;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED,eAAe,CAAC,KAAsB;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO;QACrC,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAElC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAA2C,CAAC;QACtE,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAuB,CAAC;QAClE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,CAAuB,CAAC;QAC5E,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAW,CAAC;YAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;YAC5B,IAAI,KAAK,GAA4B,EAAE,CAAC;YACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACnE,CAAC;iBAAM,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChF,KAAK,GAAG,QAAmC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAElD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"streaming-side-effects.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/streaming-side-effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAOlF,MAAM,OAAO,oBAAoB;IACd,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,eAAe,CAA8B;IAErD,sBAAsB,GAAoB,EAAE,CAAC;IAEtD,YAAY,IAA2C;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,KAAsB;QAC5B,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAElC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAClD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF"}

package/dist/activities/execute-deep-agent/subagent-transformer.d.ts

@@ -54,8 +54,8 @@ export interface SubagentTransformOptions {
     /**
      * Each sub-agent's mounted skills, keyed by the sub-agent's name — the
      * runtime's `TurnSkills.bySubAgent` (resolved and mounted by its skills
-     * phase, S3 M1 Q-S3-5). A sub-agent with no entry renders no skills
-     * section. Until S3 M2a this module fetched and mounted them itself with
+     * phase, since #1096). A sub-agent with no entry renders no skills
+     * section. Until then this module fetched and mounted them itself with
      * a control-plane client; the compile step is client-free now.
      */
     readonly skills: ReadonlyMap<string, readonly SkillMetadata[]>;
@@ -172,7 +172,7 @@ export declare function resolveSubagentSkillPrompt(subAgent: SubAgent, skills: R
  * Heuristic check for native extended thinking support. Models with thinking
  * support don't need the explicit think tool. Read for the parent (does its
  * graph carry `think`?) and inherited by every sub-agent that names no model
- * of its own. Moved from `setup.ts` at S3 M2a: the compile step is where it
+ * of its own. Moved from `setup.ts` in #1096: the compile step is where it
  * is consumed, and the adapter's setup reads it from here too.
  */
 export declare function modelHasNativeThinking(modelId: string): boolean;

package/dist/activities/execute-deep-agent/subagent-transformer.js

@@ -266,7 +266,7 @@ export function resolveSubagentSkillPrompt(subAgent, skills) {
  * Heuristic check for native extended thinking support. Models with thinking
  * support don't need the explicit think tool. Read for the parent (does its
  * graph carry `think`?) and inherited by every sub-agent that names no model
- * of its own. Moved from `setup.ts` at S3 M2a: the compile step is where it
+ * of its own. Moved from `setup.ts` in #1096: the compile step is where it
  * is consumed, and the adapter's setup reads it from here too.
  */
 export function modelHasNativeThinking(modelId) {

package/dist/activities/execute-deep-agent/translator.d.ts

@@ -0,0 +1,134 @@
+/**
+ * DeepAgentTranslator — the native harness's translator: LangGraph's v3
+ * protocol events in, the canonical `TranscriptEvent` union out
+ * (`harness/transcript/events.ts`).
+ *
+ * The one module that knows LangGraph's wire shape:
+ * the shared builder folds what comes out of here and nothing of the engine
+ * reaches it otherwise. Every engine fact the builder used to read is
+ * answered on this side now (since #1097):
+ *
+ *   - the tool's result, rendered to the string the row carries — the
+ *     LangChain ToolMessage envelope and the LangGraph Command unwrapped;
+ *   - the tool's attribution (`mcpServerSlug`) and authorization provenance,
+ *     from the gate's posture (`resolveApprovalProvenance`, the gate's
+ *     read-side twin);
+ *   - the SCOPE of every event — the root's transcript or one sub-agent's —
+ *     from LangGraph's namespace grammar, and the sub-agent's own lifecycle
+ *     (`sub_agent_started/finished/failed`) from deepagents' `task` tool
+ *     Until #1097 the builder read the namespace and the
+ *     tool's name itself, and kept a second copy of every handler for the
+ *     sub-agents' transcripts.
+ *
+ * What this translator deliberately does NOT answer: whether the gate holds
+ * a call. On native it never has to. LangGraph's `interrupt()` runs inside
+ * the gate middleware BEFORE the tool handler, so a held call emits no
+ * `tool-started` at all; the `tool-started` that does arrive is the engine's
+ * own word that the call was authorized — capture mode let the file write
+ * flow, a lease or the policy chain cleared it, or the user approved it on a
+ * resume. The gate's decision has arms this side cannot evaluate (capture
+ * mode asks the workspace's git state, asynchronously;
+ * `middleware/approval-gate.ts`), and duplicating them would be a second copy
+ * of the decision — exactly the drift one writer per fact exists to end. So
+ * native emits no `tool_started.gate`; the held call reaches the transcript
+ * as `approval_proposed` from the post-stream seed. Until #1097 the builder
+ * carried a copy of the decision that gated MCP tools only, a path
+ * production never took.
+ *
+ * Attribution and provenance are answered for ROOT-scope calls only: a
+ * sub-agent's rows carry none on either harness today (#1133), and one
+ * handler set would otherwise stamp them as a side effect.
+ *
+ * The scope, in LangGraph 1.3.2's grammar (mirrors deepagents'
+ * `createSubagentTransformer`): the root's model events arrive under
+ * `["model_request:<uuid>"]` and its tool events under `["tools:<uuid>"]`
+ * (one segment); a `task` tool start at that depth opens a sub-agent, and
+ * the segment it arrived under is the prefix every event of that sub-agent's
+ * graph carries first (`["tools:<uuid>", "model_request:<inner>"]`, two or
+ * more segments). An event with a REGISTERED first segment and two or more
+ * segments is the sub-agent's; everything else is the root's — including a
+ * nested namespace whose prefix nobody registered, which folds into the
+ * root as it always did (a sub-agent resumed inside its own gate
+ * with no re-emitted `task` start is the production case). A `task` inside
+ * a sub-agent is an ordinary row of that sub-agent's transcript: one level
+ * of delegation is tracked, as before.
+ *
+ * Beside the transcript, {@link usageOf} answers the loop's one
+ * non-transcript question about the wire — the usage a
+ * `message-finish` carries — so the loop never parses a raw event itself.
+ * What the wire carries that the transcript does not: `lifecycle` and
+ * `provider` events, the standalone `usage` event, each event's `seq` and
+ * `node`. None of it was ever folded; the recorder keeps the raw event for
+ * a replay.
+ *
+ * The file was `v3-protocol-normalizer.ts` (a stateless `normalize`) until
+ * #1097 made it stateful — the same word as `execute-cursor/translator.ts`,
+ * so a third harness's author finds one shape in both.
+ *
+ * Defensive parsing: handles both snake_case and camelCase field names
+ * for tool IDs/names (protocol spec uses camelCase but recordings show
+ * snake_case). Uses `data.event` as canonical discriminator, with
+ * `data.type` as fallback (CP04 finding).
+ */
+import type { V3ProtocolEvent } from "./v3-event-recorder.js";
+import type { TranscriptEvent } from "../../harness/transcript/events.js";
+import type { DeepAgentGateState } from "./turn-setup.js";
+export declare class DeepAgentTranslator {
+    private readonly gate;
+    /** First namespace segment → the sub-agent (its `task` call id) whose graph runs under it. */
+    private readonly subAgentByPrefix;
+    /** The `task` call ids whose completion closes a sub-agent. */
+    private readonly taskCalls;
+    /**
+     * @param gate the turn's gate posture, for attribution and provenance;
+     *   `null` where a turn runs with none (the unit arms that drive the
+     *   builder bare), and then every call is unattributed.
+     */
+    constructor(gate: DeepAgentGateState | null);
+    /** One raw event to its canonical events — `translate(raw)` is the one signature every harness's translator shares. */
+    translate(raw: V3ProtocolEvent): TranscriptEvent[];
+    /** The sub-agent an event belongs to, or `undefined` for the root (see the header for the grammar). */
+    private scopeOf;
+    /**
+     * A `task` start at the root opens a sub-agent keyed by the call id, with
+     * the segment it arrived under as the routing prefix (a depth-0 start —
+     * tests — gets a synthetic one so its children can still name it).
+     */
+    private openSubAgent;
+    /** The attribution and provenance for one root-scope tool start. */
+    private attribute;
+}
+/**
+ * The stateless core: one raw event to its canonical events, root-scoped
+ * (no `subAgentId`) and unattributed (`mcpServerSlug: ""`, no provenance, no
+ * gate). The translator layers scope and the gate's answers on top; the arms
+ * that pin the wire's shape read this directly.
+ */
+export declare function normalize(event: V3ProtocolEvent): TranscriptEvent[];
+/**
+ * The token usage as LangChain's v3 protocol delivers it on a
+ * `message-finish`. `input_tokens` already INCLUDES the cache buckets (the
+ * Anthropic adapter folds them in); the loop prices over the disjoint parts.
+ */
+export interface V3UsagePayload {
+    readonly input_tokens?: number;
+    readonly output_tokens?: number;
+    readonly total_tokens?: number;
+    readonly input_token_details?: {
+        readonly cache_creation?: number;
+        readonly cache_read?: number;
+    };
+}
+/**
+ * The usage one raw event carries, or `undefined`. Read from `message-finish`
+ * ONLY — v3 also emits a standalone `usage` event for the same turn, and
+ * reading both would double-count. Every namespace's finish counts: a
+ * sub-agent's spend is the execution's spend (since #1096), and the cost
+ * cap the runtime enforces reads the whole execution.
+ *
+ * A loop concern, deliberately NOT a `TranscriptEvent`:
+ * usage is neither a row nor a message, and `translate`'s return type stays
+ * the one signature every harness's translator shares. The Cursor loop reads
+ * its usage from the SDK's `turn-ended` delta — the same division.
+ */
+export declare function usageOf(event: V3ProtocolEvent): V3UsagePayload | undefined;