@stigmer/runner 3.15.3-dev.20260914121148 → 3.16.0

package/dist/activities/execute-deep-agent/turn-setup.d.ts

@@ -25,14 +25,14 @@
  * knows are reported through the sink exactly as the orchestrator reported
  * them (the resolution labels are the runtime's).
  *
- * One root for everything (Q-S3-8): the deepagents backend, the CAS
+ * One root for everything: the deepagents backend, the CAS
  * observer, the gate's path normalization and the publisher are all rooted
  * at `workspace.primaryDir` — the same tree the runtime locks, links and
  * captures. For zero or one workspace entry this is byte-identical to the
  * orchestrator's `workspaceBackend.rootDir`.
  *
  * Moved from `setup.ts` `performSetup` (the LangGraph half; the resolution
- * half is the runtime's twelve phases) at S3 M2a; the step bodies are the
+ * half is the runtime's twelve phases) in #1096; the step bodies are the
  * orchestrator's, verbatim where nothing changed.
  */
 import type { BaseCheckpointSaver } from "@langchain/langgraph-checkpoint";
@@ -52,7 +52,7 @@ import { CasCaptureObserver } from "./cas-capture-observer.js";
  * (`execute-cursor/turn-setup.ts` `CursorAdapterConfig` is the idiom): a
  * whole `Config` satisfies it, a test constructs these fields and nothing
  * else. Smaller than the orchestrator's reach — the synthesized attachments'
- * endpoints it read are the runtime's now (S3 M2a, F-M2a-10).
+ * endpoints it read are the runtime's now (since #1096).
  */
 export type DeepAgentAdapterConfig = Pick<Config, "checkpointerType" | "checkpointerProxyEndpoint" | "stigmerToken" | "proxyEndpoint" | "mode">;
 /** The deepagents graph as this module holds it; deepagents exports no stable type for the compiled agent. */
@@ -109,8 +109,8 @@ export type DeepAgentGraphInput = {
  * spec named none — the one reader of `spec.executionConfig.modelName`, which
  * the Cursor adapter reads too), or the registry's default for `"default"`.
  * The same reading the runtime's attachment phase made for the vision budget,
- * so the model that sees the images is the model that runs. (Until S3 M5 this
- * read the spec field beside the runtime's resolved copy; F-M3-P7.)
+ * so the model that sees the images is the model that runs. (Until #1096 this
+ * read the spec field beside the runtime's resolved copy.)
  */
 export declare function resolveModelName(input: TurnInput): Promise<string>;
 /**
@@ -122,7 +122,7 @@ export declare function resolveModelName(input: TurnInput): Promise<string>;
 export declare function openCheckpointer(input: TurnInput, sink: TurnSink, config: DeepAgentAdapterConfig): Promise<BaseCheckpointSaver>;
 /**
  * The workspace as the engine sees it, rooted at the runtime's primary tree
- * (Q-S3-8). The platform dir the shared provision ensured rides along so
+ * (the one root). The platform dir the shared provision ensured rides along so
  * the backend routes `.stigmer/…` reads to it.
  *
  * CAS capture (design docs 08/11/12): the single per-turn observer owns the
@@ -143,7 +143,7 @@ export declare function buildDeepAgentWorkspace(input: TurnInput): DeepAgentWork
  * refuses an empty config, which is what the orchestrator's MCP gate
  * (`mcp-gate.ts`) guarded against beside its channel-only reason; the
  * runtime resolves unconditionally, so the one remaining question is
- * "anything to connect?" (S3 M2a, F-M2a-17).
+ * "anything to connect?" (since #1096).
  */
 export declare function connectTools(input: TurnInput, sink: TurnSink): Promise<DeepAgentTools>;
 /**
@@ -186,7 +186,7 @@ export declare function composeSystemPrompt(input: TurnInput, recalledMemories:
  * stop on the invoke config and the budget middleware's ~80% advisory, so
  * the warning and the enforcement can never disagree.
  *
- * Nothing in the middleware stack stops the run (Q-S3-3, landed at S3 M2b):
+ * Nothing in the middleware stack stops the run (since #1096):
  * the runtime's abort is the platform's one stop, and its TERMINATED arm the
  * one enforcement of `max_cost_usd`; the cost advisory warns the model at
  * ~80% of the cap the way the budget middleware warns at ~80% of the

package/dist/activities/execute-deep-agent/turn-setup.js

@@ -25,14 +25,14 @@
  * knows are reported through the sink exactly as the orchestrator reported
  * them (the resolution labels are the runtime's).
  *
- * One root for everything (Q-S3-8): the deepagents backend, the CAS
+ * One root for everything: the deepagents backend, the CAS
  * observer, the gate's path normalization and the publisher are all rooted
  * at `workspace.primaryDir` — the same tree the runtime locks, links and
  * captures. For zero or one workspace entry this is byte-identical to the
  * orchestrator's `workspaceBackend.rootDir`.
  *
  * Moved from `setup.ts` `performSetup` (the LangGraph half; the resolution
- * half is the runtime's twelve phases) at S3 M2a; the step bodies are the
+ * half is the runtime's twelve phases) in #1096; the step bodies are the
  * orchestrator's, verbatim where nothing changed.
  */
 import { createDeepAgent } from "deepagents";
@@ -71,8 +71,8 @@ import { modelHasNativeThinking, transformAndCompileSubagents } from "./subagent
  * spec named none — the one reader of `spec.executionConfig.modelName`, which
  * the Cursor adapter reads too), or the registry's default for `"default"`.
  * The same reading the runtime's attachment phase made for the vision budget,
- * so the model that sees the images is the model that runs. (Until S3 M5 this
- * read the spec field beside the runtime's resolved copy; F-M3-P7.)
+ * so the model that sees the images is the model that runs. (Until #1096 this
+ * read the spec field beside the runtime's resolved copy.)
  */
 export async function resolveModelName(input) {
     return input.model.requested === "default" ? await getDefaultModel() : input.model.requested;
@@ -95,7 +95,7 @@ export async function openCheckpointer(input, sink, config) {
 }
 /**
  * The workspace as the engine sees it, rooted at the runtime's primary tree
- * (Q-S3-8). The platform dir the shared provision ensured rides along so
+ * (the one root). The platform dir the shared provision ensured rides along so
  * the backend routes `.stigmer/…` reads to it.
  *
  * CAS capture (design docs 08/11/12): the single per-turn observer owns the
@@ -129,7 +129,7 @@ export function buildDeepAgentWorkspace(input) {
  * refuses an empty config, which is what the orchestrator's MCP gate
  * (`mcp-gate.ts`) guarded against beside its channel-only reason; the
  * runtime resolves unconditionally, so the one remaining question is
- * "anything to connect?" (S3 M2a, F-M2a-17).
+ * "anything to connect?" (since #1096).
  */
 export async function connectTools(input, sink) {
     if (input.mcp.servers.length === 0) {
@@ -231,7 +231,7 @@ export function composeSystemPrompt(input, recalledMemories) {
  * stop on the invoke config and the budget middleware's ~80% advisory, so
  * the warning and the enforcement can never disagree.
  *
- * Nothing in the middleware stack stops the run (Q-S3-3, landed at S3 M2b):
+ * Nothing in the middleware stack stops the run (since #1096):
  * the runtime's abort is the platform's one stop, and its TERMINATED arm the
  * one enforcement of `max_cost_usd`; the cost advisory warns the model at
  * ~80% of the cap the way the budget middleware warns at ~80% of the

package/dist/activities/execute-deep-agent/turn-stream.d.ts

@@ -9,7 +9,7 @@
  * runtime's stall watchdog measures the engine; `reportUsage()` per parent
  * `message_finish`, priced here at the registry's rates for the model the
  * turn runs on (`shared/model-pricing.ts`), so the runtime accounts and
- * enforces the cost cap and writes `streamingUsage` (Q-M2a-2); `requestPersist()`
+ * enforces the cost cap and writes `streamingUsage`; `requestPersist()`
  * where a discrete change or the streaming cadence says so
  * (`shared/persist-decision.ts` over the builder's one dirty flag), AWAITED,
  * so a platform STOP the runtime reads from that write aborts the signal
@@ -19,7 +19,7 @@
  * this loop never does). An error the aborted run throws is the abort itself
  * and settles `interrupted`, never `failed`.
  *
- * WHEN the run is aborted (S3 M2a, F-M2a-18): on the arrival of the next
+ * WHEN the run is aborted: on the arrival of the next
  * event — the graph's own step boundary — or after {@link STOP_GRACE_MS} if
  * no event arrives. A LangGraph run aborted while a step is in flight leaves
  * `@langchain/core` with an orphaned rejection (`AsyncGeneratorWithSetup`
@@ -34,7 +34,7 @@
  * here) is forced, and that one orphan is the price of unblocking it — the
  * contract's bound on settling `interrupted` is what wins.
  *
- * Until S3 M2a this loop (`streaming-v3.ts`) armed its own 120 s stall
+ * Until #1096 this loop (`streaming-v3.ts`) armed its own 120 s stall
  * check, pulsed the Temporal heartbeat every 2 s, read STOP from its own
  * persist and activated a graceful-stop middleware on it, told a pause from
  * the activity's cancellation signal, and wrote PAUSED, COMPLETED and
@@ -47,7 +47,7 @@
 import type { TurnInput, TurnSink } from "../../harness/types.js";
 import { InlinePublisher } from "./inline-publisher.js";
 import { type V3ProtocolEvent } from "./v3-event-recorder.js";
-import { V3StatusBuilder } from "./v3-status-builder.js";
+import { DeepAgentTranslator } from "./translator.js";
 import type { DeepAgentEngine, DeepAgentGraphInput, DeepAgentWorkspace } from "./turn-setup.js";
 /**
  * The subset of the v3 `GraphRunStream` this loop consumes. Kept structural
@@ -71,14 +71,17 @@ export interface DeepAgentStreamResult {
     readonly pendingPublishPromises: readonly Promise<void>[];
 }
 /**
- * The transcript writers of one turn: the builder over `sink.status` and the
- * publisher that writes artifacts through it (so a published artifact still
- * forces the next persist). Built by the adapter's turn once and shared by
- * the stream and the settle; the builder reports usage into the sink, priced
- * for the model the turn runs on.
+ * This harness's transcript writers for one turn: the translator that turns
+ * the engine's events into canonical ones (over the gate's posture, so every
+ * tool start carries its attribution and gate answer), and the publisher
+ * that registers artifacts on the runtime's builder (`sink.transcript`, so
+ * a published artifact still dirties the next persist). The builder itself
+ * is the runtime's, one per turn, and is read from the sink where it is
+ * needed. Built by the adapter's turn once and shared by the stream and the
+ * settle.
  */
 export interface DeepAgentTranscript {
-    readonly builder: V3StatusBuilder;
+    readonly translator: DeepAgentTranslator;
     readonly publisher: InlinePublisher;
 }
 export declare function createDeepAgentTranscript(input: TurnInput, sink: TurnSink, engine: DeepAgentEngine, workspace: DeepAgentWorkspace): DeepAgentTranscript;

package/dist/activities/execute-deep-agent/turn-stream.js

@@ -9,7 +9,7 @@
  * runtime's stall watchdog measures the engine; `reportUsage()` per parent
  * `message_finish`, priced here at the registry's rates for the model the
  * turn runs on (`shared/model-pricing.ts`), so the runtime accounts and
- * enforces the cost cap and writes `streamingUsage` (Q-M2a-2); `requestPersist()`
+ * enforces the cost cap and writes `streamingUsage`; `requestPersist()`
  * where a discrete change or the streaming cadence says so
  * (`shared/persist-decision.ts` over the builder's one dirty flag), AWAITED,
  * so a platform STOP the runtime reads from that write aborts the signal
@@ -19,7 +19,7 @@
  * this loop never does). An error the aborted run throws is the abort itself
  * and settles `interrupted`, never `failed`.
  *
- * WHEN the run is aborted (S3 M2a, F-M2a-18): on the arrival of the next
+ * WHEN the run is aborted: on the arrival of the next
  * event — the graph's own step boundary — or after {@link STOP_GRACE_MS} if
  * no event arrives. A LangGraph run aborted while a step is in flight leaves
  * `@langchain/core` with an orphaned rejection (`AsyncGeneratorWithSetup`
@@ -34,7 +34,7 @@
  * here) is forced, and that one orphan is the price of unblocking it — the
  * contract's bound on settling `interrupted` is what wins.
  *
- * Until S3 M2a this loop (`streaming-v3.ts`) armed its own 120 s stall
+ * Until #1096 this loop (`streaming-v3.ts`) armed its own 120 s stall
  * check, pulsed the Temporal heartbeat every 2 s, read STOP from its own
  * persist and activated a graceful-stop middleware on it, told a pause from
  * the activity's cancellation signal, and wrote PAUSED, COMPLETED and
@@ -51,8 +51,7 @@ import { TimeoutError, withTimeout } from "../../shared/with-timeout.js";
 import { InlinePublisher } from "./inline-publisher.js";
 import { StreamingSideEffects } from "./streaming-side-effects.js";
 import { createV3EventRecorder } from "./v3-event-recorder.js";
-import { normalize } from "./v3-protocol-normalizer.js";
-import { V3StatusBuilder } from "./v3-status-builder.js";
+import { DeepAgentTranslator, usageOf } from "./translator.js";
 /**
  * How long the loop waits for `run.output` after the stream ended before
  * proceeding without the final state (the structured response rides it).
@@ -65,41 +64,39 @@ const RUN_OUTPUT_TIMEOUT_MS = 30_000;
  */
 const STOP_GRACE_MS = 1_000;
 export function createDeepAgentTranscript(input, sink, engine, workspace) {
-    const builder = new V3StatusBuilder(input.executionId, sink.status, {
-        onUsage: (usage) => {
-            // LangChain's `input_tokens` already INCLUDES the cache buckets (the
-            // Anthropic adapter folds them in; the cost advisory reads them the
-            // same way), so the counts are reported as delivered and the price
-            // is computed over the disjoint buckets.
-            const inputTokens = usage.input_tokens ?? 0;
-            const outputTokens = usage.output_tokens ?? 0;
-            const cacheReadTokens = usage.input_token_details?.cache_read ?? 0;
-            const cacheWriteTokens = usage.input_token_details?.cache_creation ?? 0;
-            const uncachedInput = Math.max(inputTokens - cacheReadTokens - cacheWriteTokens, 0);
-            sink.reportUsage({
-                inputTokens,
-                outputTokens,
-                cacheReadTokens,
-                cacheWriteTokens,
-                estimatedCostUsd: computeTurnCost(engine.pricing, uncachedInput, outputTokens, cacheWriteTokens, cacheReadTokens),
-                model: engine.modelName,
-            });
-        },
-    });
-    builder.setApprovalProvider({
-        policies: engine.gate.policies,
-        toolServerMap: engine.gate.toolServerMap,
-        leasedCategories: engine.gate.leasedCategories,
-        globalBypass: engine.gate.globalBypass,
-        unattended: engine.gate.unattended,
-    });
+    const translator = new DeepAgentTranslator(engine.gate);
     const publisher = new InlinePublisher({
         workspaceBackend: workspace.backend,
         artifactStorage: input.artifactStorage,
-        statusWriter: builder,
+        artifacts: sink.transcript,
         executionId: input.executionId,
     });
-    return { builder, publisher };
+    return { translator, publisher };
+}
+/**
+ * Price one `message-finish`'s usage at the engine's rates and report it to
+ * the sink, which accounts, enforces the cost cap and writes `streamingUsage`
+ * (one writer of the summary). LangChain's `input_tokens` already INCLUDES the cache buckets
+ * (the Anthropic adapter folds them in; the cost advisory reads them the same
+ * way), so the counts are reported as delivered and the price is computed
+ * over the disjoint buckets. A sub-agent on its own model is priced at the
+ * parent's rate, as the in-graph cost cap always did (per-sub-agent pricing
+ * is #1121).
+ */
+function reportUsage(sink, engine, usage) {
+    const inputTokens = usage.input_tokens ?? 0;
+    const outputTokens = usage.output_tokens ?? 0;
+    const cacheReadTokens = usage.input_token_details?.cache_read ?? 0;
+    const cacheWriteTokens = usage.input_token_details?.cache_creation ?? 0;
+    const uncachedInput = Math.max(inputTokens - cacheReadTokens - cacheWriteTokens, 0);
+    sink.reportUsage({
+        inputTokens,
+        outputTokens,
+        cacheReadTokens,
+        cacheWriteTokens,
+        estimatedCostUsd: computeTurnCost(engine.pricing, uncachedInput, outputTokens, cacheWriteTokens, cacheReadTokens),
+        model: engine.modelName,
+    });
 }
 /**
  * Start the graph run and consume it to the end, folding every event into
@@ -109,7 +106,8 @@ export function createDeepAgentTranscript(input, sink, engine, workspace) {
 export async function consumeDeepAgentStream(deps) {
     const { input, sink, engine, graphInput, transcript } = deps;
     const { executionId } = input;
-    const { builder, publisher } = transcript;
+    const { translator, publisher } = transcript;
+    const builder = sink.transcript;
     const scheduler = new StreamingUpdateScheduler(loadStreamingConfig());
     const recorder = createV3EventRecorder(executionId, process.env.V3_EVENT_RECORD_DIR);
     const sideEffects = new StreamingSideEffects({ inlinePublisher: publisher });
@@ -152,18 +150,23 @@ export async function consumeDeepAgentStream(deps) {
                     return interrupted();
                 recorder?.record(event, eventsProcessed);
                 let detail;
-                for (const normalized of normalize(event)) {
-                    builder.processEvent(normalized);
+                for (const normalized of translator.translate(event)) {
+                    builder.apply(normalized);
+                    sideEffects.onEvent(normalized);
                     if (normalized.kind === "tool_started")
                         detail = normalized.name;
                 }
-                sideEffects.onProtocolEvent(event);
+                const usage = usageOf(event);
+                if (usage)
+                    reportUsage(sink, engine, usage);
                 eventsProcessed++;
                 sink.recordActivity(detail);
-                const persist = shouldPersistStreamingStatus({ deltaEnricherDirty: false, todosDirty: false, contentDirty: builder.forceNextUpdate }, scheduler, eventsProcessed);
+                const persist = shouldPersistStreamingStatus(builder.dirty, scheduler, eventsProcessed);
                 if (!persist)
                     continue;
-                builder.clearForceFlag();
+                // Cleared as the write is requested, not after it lands: a change
+                // that folds while the write is in flight must dirty the next one.
+                builder.markPersisted();
                 // The runtime attaches the mid-run file-change progress on this write
                 // (the chokepoint's step 2), as it does on every write. Awaited so a platform STOP the runtime reads from this write has
                 // aborted the signal by the time the next event arrives — where the

package/dist/activities/execute-deep-agent/turn-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"turn-stream.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/turn-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAWzD;;;GAGG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,aAAa,GAAG,KAAK,CAAC;AA8B5B,MAAM,UAAU,yBAAyB,CACvC,KAAgB,EAChB,IAAc,EACd,MAAuB,EACvB,SAA6B;IAE7B,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;QAClE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,yCAAyC;YACzC,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;YAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;YAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,mBAAmB,EAAE,UAAU,IAAI,CAAC,CAAC;YACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,cAAc,IAAI,CAAC,CAAC;YACxE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,eAAe,GAAG,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,WAAW,CAAC;gBACf,WAAW;gBACX,YAAY;gBACZ,eAAe;gBACf,gBAAgB;gBAChB,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC;gBACjH,KAAK,EAAE,MAAM,CAAC,SAAS;aACxB,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,OAAO,CAAC,mBAAmB,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;QACxC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;QAC9C,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,gBAAgB,EAAE,SAAS,CAAC,OAAO;QACnC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyB;IACpE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC7D,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAE1C,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,IAAI,UAAqD,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,UAAU,GAAG,SAAS,CAAC;QACvB,eAAe,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,mEAAmE;IACnE,MAAM,WAAW,GAAG,GAA0B,EAAE;QAC9C,QAAQ,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,eAAe;YACf,SAAS,EAAE,SAAS;YACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;SAC3D,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QAElD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAC1C,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EACpE,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAC7E,CAAkB,CAAC;QACpB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,+DAA+D;QAC/D,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,OAAO,WAAW,EAAE,CAAC;gBAElD,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBACzC,IAAI,MAA0B,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1C,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;oBACjC,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc;wBAAE,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;gBACnE,CAAC;gBACD,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBACnC,eAAe,EAAE,CAAC;gBAClB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAE5B,MAAM,OAAO,GAAG,4BAA4B,CAC1C,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,EACvF,SAAS,EACT,eAAe,CAChB,CAAC;gBACF,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,OAAO,CAAC,cAAc,EAAE,CAAC;gBACzB,sEAAsE;gBACtE,yHAAyH;gBACzH,oEAAoE;gBACpE,kDAAkD;gBAClD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,SAAS,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,6CAA6C;YAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO,WAAW,EAAE,CAAC;YAClD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kDAAkD;gBAClD,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,4CAA4C,CAAC,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,mBAAmB;gBAC3B,eAAe;gBACf,SAAS,EAAE,SAAS;gBACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;aAC3D,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,gCAAgC,eAAe,SAAS,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,CAAC,sBAAsB,EAAE,CAAC;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,WAAmB;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAClC,qBAAqB,EACrB,qCAAqC,qBAAqB,IAAI,EAC9D,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CACjB,CAAC;QACF,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,OAAO,CAAC,GAAG,CACT,2BAA2B,WAAW,0BAA0B;YAChE,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,EAAE,kBAAkB,KAAK,SAAS,EAAE,CACrH,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,MAAM,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"turn-stream.js","sourceRoot":"","sources":["../../../src/activities/execute-deep-agent/turn-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAuB,MAAM,iBAAiB,CAAC;AAWpF;;;GAGG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,aAAa,GAAG,KAAK,CAAC;AAiC5B,MAAM,UAAU,yBAAyB,CACvC,KAAgB,EAChB,IAAc,EACd,MAAuB,EACvB,SAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,gBAAgB,EAAE,SAAS,CAAC,OAAO;QACnC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,IAAc,EAAE,MAAuB,EAAE,KAAqB;IACjF,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,mBAAmB,EAAE,UAAU,IAAI,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,cAAc,IAAI,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,eAAe,GAAG,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,WAAW,CAAC;QACf,WAAW;QACX,YAAY;QACZ,eAAe;QACf,gBAAgB;QAChB,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,CAAC;QACjH,KAAK,EAAE,MAAM,CAAC,SAAS;KACxB,CAAC,CAAC;AACL,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAyB;IACpE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC7D,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;IAEhC,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,IAAI,UAAqD,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,UAAU,GAAG,SAAS,CAAC;QACvB,eAAe,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,mEAAmE;IACnE,MAAM,WAAW,GAAG,GAA0B,EAAE;QAC9C,QAAQ,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,eAAe;YACf,SAAS,EAAE,SAAS;YACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;SAC3D,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QAElD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAC1C,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EACpE,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAC7E,CAAkB,CAAC;QACpB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,+DAA+D;QAC/D,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,OAAO,WAAW,EAAE,CAAC;gBAElD,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBACzC,IAAI,MAA0B,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC1B,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBAChC,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc;wBAAE,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;gBACnE,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,KAAK;oBAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC5C,eAAe,EAAE,CAAC;gBAClB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAE5B,MAAM,OAAO,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;gBACxF,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,kEAAkE;gBAClE,mEAAmE;gBACnE,OAAO,CAAC,aAAa,EAAE,CAAC;gBACxB,sEAAsE;gBACtE,yHAAyH;gBACzH,oEAAoE;gBACpE,kDAAkD;gBAClD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,SAAS,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,6CAA6C;YAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;gBAAE,OAAO,WAAW,EAAE,CAAC;YAClD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,kDAAkD;gBAClD,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,4CAA4C,CAAC,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,mBAAmB;gBAC3B,eAAe;gBACf,SAAS,EAAE,SAAS;gBACpB,sBAAsB,EAAE,WAAW,CAAC,sBAAsB;aAC3D,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,gCAAgC,eAAe,SAAS,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,CAAC,sBAAsB,EAAE,CAAC;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,WAAmB;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAClC,qBAAqB,EACrB,qCAAqC,qBAAqB,IAAI,EAC9D,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CACjB,CAAC;QACF,MAAM,MAAM,GAAG,UAAqC,CAAC;QACrD,OAAO,CAAC,GAAG,CACT,2BAA2B,WAAW,0BAA0B;YAChE,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,EAAE,kBAAkB,KAAK,SAAS,EAAE,CACrH,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,MAAM,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,2BAA2B,WAAW,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/activities/execute-deep-agent/turn.d.ts

@@ -24,7 +24,7 @@
  * other exception — a provider error unwrapped from LangChain's middleware
  * wrapper, an MCP connect failure, an empty stream — is `failed` on the
  * `internal` surface with `describeExecutionError`'s sentence as
- * `status.error` whole (Q-M2a-9). Never branches on why `stopSignal`
+ * `status.error` whole. Never branches on why `stopSignal`
  * aborted, never writes a phase or a terminal copy, never imports
  * `@temporalio/*` (`__tests__/adapter-is-temporal-free.test.ts`).
  *
@@ -33,9 +33,9 @@
  * are connected and closed per turn. Both are closed on EVERY exit path in
  * the `finally`, before the runtime removes the link and releases the lock.
  *
- * Extracted from `index.ts` `createDeepAgentActivities` at S3 M2a; the
+ * Extracted from `index.ts` `createDeepAgentActivities` in #1096; the
  * hermetic goldens under `__tests__/hermetic/` pin the result byte for
- * byte, with the ruled alignments quoted in their headers.
+ * byte, with that move's deliberate alignments quoted in their headers.
  */
 import type { TurnInput, TurnOutcome, TurnSink } from "../../harness/types.js";
 import { type DeepAgentAdapterConfig } from "./turn-setup.js";

package/dist/activities/execute-deep-agent/turn.js

@@ -24,7 +24,7 @@
  * other exception — a provider error unwrapped from LangChain's middleware
  * wrapper, an MCP connect failure, an empty stream — is `failed` on the
  * `internal` surface with `describeExecutionError`'s sentence as
- * `status.error` whole (Q-M2a-9). Never branches on why `stopSignal`
+ * `status.error` whole. Never branches on why `stopSignal`
  * aborted, never writes a phase or a terminal copy, never imports
  * `@temporalio/*` (`__tests__/adapter-is-temporal-free.test.ts`).
  *
@@ -33,9 +33,9 @@
  * are connected and closed per turn. Both are closed on EVERY exit path in
  * the `finally`, before the runtime removes the link and releases the lock.
  *
- * Extracted from `index.ts` `createDeepAgentActivities` at S3 M2a; the
+ * Extracted from `index.ts` `createDeepAgentActivities` in #1096; the
  * hermetic goldens under `__tests__/hermetic/` pin the result byte for
- * byte, with the ruled alignments quoted in their headers.
+ * byte, with that move's deliberate alignments quoted in their headers.
  */
 import { tryInferProvider } from "../../shared/llm-proxy.js";
 import { describeExecutionError } from "../../shared/model-error.js";

package/dist/activities/generate-session-subject.d.ts

@@ -23,12 +23,24 @@
  * here degrades to a heuristic title (the first words of the user message):
  * a title is worth having even when no model is reachable.
  *
- * Activity contract (the Go stub dispatches exactly ONE argument — the cloud
- * Java signature carries a second, invokerIdentityAccountId, that never
- * crosses this wire):
+ * Activity contract — exactly ONE argument, in one of two shapes:
  *   Name:   "GenerateSessionSubject"
  *   Input:  (executionId: string)
+ *           | ({ execution_id, execution_context_token? }: GenerateSessionSubjectInput)
  *   Output: void
+ *
+ * The object is what a server sends when the dispatch carries the run's
+ * credential (shared/run-credential.ts), so that this activity reads the
+ * run and titles the session AS THE RUN'S HUMAN — with sign-in on, the
+ * operator's key the process holds cannot read a member's run. The string
+ * is what every server sent before, and what a server whose dispatch carries
+ * no credential still sends (the cloud's, whose desktop runners in the field
+ * must keep titling sessions). Both shapes are accepted — the dual-shape
+ * posture the turn activities take (shared/activity-input.ts); the
+ * credential itself is entered by the activity boundary
+ * (interceptors/run-credential-activity.ts), never read here. The cloud's
+ * Java signature carries a second argument, invokerIdentityAccountId, that
+ * never crosses this wire.
  */
 import type { Config } from "../config.js";
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
@@ -75,6 +87,15 @@ export declare function heuristicSubject(userMessage: string): string;
  * lockstep with the cloud activity.
  */
 export declare function cleanSubject(raw: string): string;
+/**
+ * The typed wire shape of the activity's argument (snake_case keys, the
+ * polyglot workflow-input convention). `execution_context_token` is the run
+ * credential, present exactly when the dispatch carried one.
+ */
+export interface GenerateSessionSubjectInput {
+    readonly execution_id: string;
+    readonly execution_context_token?: string;
+}
 export declare function createGenerateSessionSubjectActivities(config: Config): {
-    GenerateSessionSubject: (executionId: string) => Promise<void>;
+    GenerateSessionSubject: (input: GenerateSessionSubjectInput | string) => Promise<void>;
 };

package/dist/activities/generate-session-subject.js

@@ -23,12 +23,24 @@
  * here degrades to a heuristic title (the first words of the user message):
  * a title is worth having even when no model is reachable.
  *
- * Activity contract (the Go stub dispatches exactly ONE argument — the cloud
- * Java signature carries a second, invokerIdentityAccountId, that never
- * crosses this wire):
+ * Activity contract — exactly ONE argument, in one of two shapes:
  *   Name:   "GenerateSessionSubject"
  *   Input:  (executionId: string)
+ *           | ({ execution_id, execution_context_token? }: GenerateSessionSubjectInput)
  *   Output: void
+ *
+ * The object is what a server sends when the dispatch carries the run's
+ * credential (shared/run-credential.ts), so that this activity reads the
+ * run and titles the session AS THE RUN'S HUMAN — with sign-in on, the
+ * operator's key the process holds cannot read a member's run. The string
+ * is what every server sent before, and what a server whose dispatch carries
+ * no credential still sends (the cloud's, whose desktop runners in the field
+ * must keep titling sessions). Both shapes are accepted — the dual-shape
+ * posture the turn activities take (shared/activity-input.ts); the
+ * credential itself is entered by the activity boundary
+ * (interceptors/run-credential-activity.ts), never read here. The cloud's
+ * Java signature carries a second argument, invokerIdentityAccountId, that
+ * never crosses this wire.
  */
 import { SystemMessage, HumanMessage } from "@langchain/core/messages";
 import { ConnectError, Code } from "@connectrpc/connect";
@@ -253,9 +265,6 @@ function message(err) {
 function log(msg) {
     console.log(`[GenerateSessionSubject] ${msg}`);
 }
-// ─────────────────────────────────────────────────────────────────────────────
-// Temporal Activity Factory
-// ─────────────────────────────────────────────────────────────────────────────
 export function createGenerateSessionSubjectActivities(config) {
     const client = new StigmerClient({
         endpoint: config.stigmerBackendEndpoint,
@@ -264,7 +273,8 @@ export function createGenerateSessionSubjectActivities(config) {
         runnerTokenRef: config.stigmerRunnerTokenRef,
     });
     return {
-        GenerateSessionSubject: async (executionId) => {
+        GenerateSessionSubject: async (input) => {
+            const executionId = typeof input === "string" ? input : input.execution_id;
             activityStarted();
             try {
                 log(`started: execution=${executionId}`);

package/dist/activities/generate-session-subject.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate-session-subject.js","sourceRoot":"","sources":["../../src/activities/generate-session-subject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,yEAAyE;AACzE,MAAM,aAAa,GAAG;;;;;;;;;;sCAUgB,CAAC;AAsBvC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,MAA4B,EAC5B,OAAsC;IAEtC,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,EACtC,wBAAwB,WAAW,EAAE,CACtC,CAAC;IACF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IAEpC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,GAAG,CAAC,8BAA8B,WAAW,YAAY,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,gCAAgC,WAAW,YAAY,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAClC,sBAAsB,SAAS,EAAE,CAClC,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD,IAAI,cAAc,KAAK,EAAE,IAAI,cAAc,KAAK,oBAAoB,EAAE,CAAC;QACrE,GAAG,CAAC,eAAe,cAAc,2BAA2B,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,yCAAyC,WAAW,YAAY,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC9B,oBAAoB,OAAO,EAAE,CAC9B,CAAC;IACF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAEhC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QACrC,gBAAgB,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;QAC/C,WAAW;QACX,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,yCAAyC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,GAAG,CAAC,mBAAmB,SAAS,gBAAgB,OAAO,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAyB,EACzB,OAAgB,EAChB,MAAsD;IAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EACzC,6BAA6B,UAAU,EAAE,CAC1C,CAAC;IACF,OAAO,QAAQ,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;AACvC,CAAC;AAUD;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,MAA2B;IACtD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAElF,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEhE,4EAA4E;IAC5E,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CACD,gBAAgB,KAAK,MAAM,QAAQ,6BAA6B;gBAChE,6BAA6B,OAAO,EAAE,CACvC,CAAC;YACF,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC;YAC1C,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,SAAS;YACjD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;YAC/C,WAAW,EAAE,EAAE,WAAW,EAAE;YAC5B,SAAS,EAAE,qBAAqB;YAChC,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,aAAa,CAAC,aAAa,CAAC;YAChC,IAAI,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;SAC5E,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,sDAAsD,CAAC,CAAC;YAC5D,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0DAA0D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,SAAiB,EACjB,gBAAwB;IAExB,IAAI,MAAM,GAAG,2BAA2B,WAAW,OAAO,CAAC;IAC3D,MAAM,IAAI,UAAU,SAAS,IAAI,CAAC;IAClC,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,gBAAgB,IAAI,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,uBAAuB,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,KAAuB,EACvB,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;YACzD,CAAC,CAAC,MAAM,CAAE,IAA0B,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,EAAE,CACP;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,MAAM,UAAU,sCAAsC,CAAC,MAAc;IACnE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;QAC1B,QAAQ,EAAE,MAAM,CAAC,eAAe;QAChC,cAAc,EAAE,MAAM,CAAC,qBAAqB;KAC7C,CAAC,CAAC;IAEH,OAAO;QACL,sBAAsB,EAAE,KAAK,EAAE,WAAmB,EAAiB,EAAE;YACnE,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;gBACzC,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE;oBAChD,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"generate-session-subject.js","sourceRoot":"","sources":["../../src/activities/generate-session-subject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,yEAAyE;AACzE,MAAM,aAAa,GAAG;;;;;;;;;;sCAUgB,CAAC;AAsBvC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,MAA4B,EAC5B,OAAsC;IAEtC,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,EACtC,wBAAwB,WAAW,EAAE,CACtC,CAAC;IACF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IAEpC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,GAAG,CAAC,8BAA8B,WAAW,YAAY,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,GAAG,CAAC,gCAAgC,WAAW,YAAY,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAClC,sBAAsB,SAAS,EAAE,CAClC,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAElC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD,IAAI,cAAc,KAAK,EAAE,IAAI,cAAc,KAAK,oBAAoB,EAAE,CAAC;QACrE,GAAG,CAAC,eAAe,cAAc,2BAA2B,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,yCAAyC,WAAW,YAAY,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC9B,oBAAoB,OAAO,EAAE,CAC9B,CAAC;IACF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAEhC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QACrC,gBAAgB,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;QAC/C,WAAW;QACX,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,yCAAyC,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,GAAG,CAAC,mBAAmB,SAAS,gBAAgB,OAAO,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAyB,EACzB,OAAgB,EAChB,MAAsD;IAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EACzC,6BAA6B,UAAU,EAAE,CAC1C,CAAC;IACF,OAAO,QAAQ,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;AACvC,CAAC;AAUD;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,MAA2B;IACtD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAElF,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEhE,4EAA4E;IAC5E,sEAAsE;IACtE,0EAA0E;IAC1E,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CACD,gBAAgB,KAAK,MAAM,QAAQ,6BAA6B;gBAChE,6BAA6B,OAAO,EAAE,CACvC,CAAC;YACF,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,CAAC;YAC1C,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,SAAS;YACjD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;YAC/C,WAAW,EAAE,EAAE,WAAW,EAAE;YAC5B,SAAS,EAAE,qBAAqB;YAChC,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,aAAa,CAAC,aAAa,CAAC;YAChC,IAAI,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;SAC5E,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,sDAAsD,CAAC,CAAC;YAC5D,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0DAA0D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,SAAiB,EACjB,gBAAwB;IAExB,IAAI,MAAM,GAAG,2BAA2B,WAAW,OAAO,CAAC;IAC3D,MAAM,IAAI,UAAU,SAAS,IAAI,CAAC;IAClC,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,gBAAgB,IAAI,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,uBAAuB,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,KAAuB,EACvB,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;YACzD,CAAC,CAAC,MAAM,CAAE,IAA0B,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,EAAE,CACP;aACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAgBD,MAAM,UAAU,sCAAsC,CAAC,MAAc;IACnE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;QAC1B,QAAQ,EAAE,MAAM,CAAC,eAAe;QAChC,cAAc,EAAE,MAAM,CAAC,qBAAqB;KAC7C,CAAC,CAAC;IAEH,OAAO;QACL,sBAAsB,EAAE,KAAK,EAC3B,KAA2C,EAC5B,EAAE;YACjB,MAAM,WAAW,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;YAC3E,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;gBACzC,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE;oBAChD,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/stigmer-client.d.ts

@@ -178,11 +178,16 @@ export declare class StigmerClient {
      * The call authenticates with the runner credential (see the interceptor).
      * Cloud verifies it is an embedded_runner token and that its identity can
      * view the named execution, then mints the same session/execution-scoped
-     * sandbox token a cloud sandbox runner receives at provisioning. OSS mints
-     * an execution-scoped token for any caller (oss#535 — a lane discriminator
-     * on a single-user server, not a trust boundary). Returns undefined when
-     * the server does not mint (pre-oss#535 OSS, or an unserved scope arm) —
-     * presence-based, like the bootstrap token fields.
+     * sandbox token a cloud sandbox runner receives at provisioning. An
+     * open-source server with sign-in off mints an execution-scoped token for
+     * any caller (oss#535 — there it only unlocks the ExecutionContext decrypt
+     * lane); with sign-in on the same token admits its bearer as the run's
+     * human, so the exchange mints only for the run's own person (a missing
+     * run NOT_FOUND, anyone else PERMISSION_DENIED). Runs normally receive
+     * their credential from the dispatch itself (shared/run-credential.ts);
+     * this exchange is the fallback. Returns undefined when the server does
+     * not mint (pre-oss#535 OSS, or an unserved scope arm) — presence-based,
+     * like the bootstrap token fields.
      *
      * `callerToken` authenticates the exchange per-call instead of the
      * process-wide runner credential. The warm-pool attach uses it: a pool
@@ -194,7 +199,13 @@ export declare class StigmerClient {
      * Acquire a scoped runner token for an ExecutionContext read, if this
      * runner's credential situation calls for one.
      *
-     * The gate is the credential itself, three ways:
+     * When the activity this call belongs to carries a run credential (the
+     * server minted it for this very execution at dispatch —
+     * shared/run-credential.ts), that IS the scoped token: it is answered
+     * without an RPC, and the exchange below serves only a dispatch that
+     * carried none — an older server, or the cloud's provisioned runner.
+     *
+     * Otherwise the gate is the credential itself, three ways:
      *
      * 1. An unscoped embedded_runner bootstrap token MUST be exchanged, and a
      *    failed exchange is a hard error, not a fallback: since the #156