@stigmer/runner 3.15.3-dev.20260914121148 → 3.16.0

package/dist/worker.js

@@ -15,7 +15,8 @@
  */
 import { createRequire } from "node:module";
 import { NativeConnection, Worker } from "@temporalio/worker";
-import { resolveWorkflowSource, OTEL_WORKFLOW_INTERCEPTOR_MODULE } from "./workflow-source.js";
+import { resolveWorkflowSource, runCredentialWorkflowInterceptorModule, OTEL_WORKFLOW_INTERCEPTOR_MODULE, } from "./workflow-source.js";
+import { runCredentialActivityInterceptor } from "./interceptors/run-credential-activity.js";
 export async function startWorker(opts) {
     const { config, activities, payloadCodecs } = opts;
     const connection = await NativeConnection.connect({
@@ -23,9 +24,15 @@ export async function startWorker(opts) {
     });
     const { createWorkflowMetricsSinks } = await import("./interceptors/workflow-metrics-sink.js");
     const workflowSource = resolveWorkflowSource();
-    const activityInterceptors = [];
+    // The run credential's two ends (shared/run-credential.ts): the workflow
+    // side lifts a run's credential onto every activity it schedules, the
+    // activity side enters it for the client to present. Always on; inert
+    // without a credential. Workflow-side modules must live INSIDE the
+    // workflow bundle — a pre-built bundle has it baked in
+    // (scripts/bundle-slim.mjs); only the runtime path registers it here.
+    const activityInterceptors = [runCredentialActivityInterceptor];
     let sinks = { ...createWorkflowMetricsSinks() };
-    const workflowInterceptorModules = [];
+    const workflowInterceptorModules = workflowSource.kind === "runtime" ? [runCredentialWorkflowInterceptorModule()] : [];
     if (process.env.OTEL_EXPORTER_OTLP_ENDPOINT) {
         const { OpenTelemetryActivityInboundInterceptor, makeWorkflowExporter, } = await import("@temporalio/interceptors-opentelemetry");
         const { OTLPTraceExporter } = await import("@opentelemetry/exporter-trace-otlp-grpc");

package/dist/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAwD,MAAM,oBAAoB,CAAC;AAGpH,OAAO,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAa/F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAEnD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC;QAChD,OAAO,EAAE,MAAM,CAAC,eAAe;KAChC,CAAC,CAAC;IAEH,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;IAE/F,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAE/C,MAAM,oBAAoB,GAAkC,EAAE,CAAC;IAC/D,IAAI,KAAK,GAAuB,EAAE,GAAG,0BAA0B,EAAE,EAAE,CAAC;IACpE,MAAM,0BAA0B,GAAa,EAAE,CAAC;IAEhD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;QAC5C,MAAM,EACJ,uCAAuC,EACvC,oBAAoB,GACrB,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;QAC3D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACtF,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE5E,oBAAoB,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,uCAAuC,CAAC,GAAG,CAAC,EAAE,CAAC,CACzE,CAAC;QAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YACrC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;SAC7C,CAAC,CAAC;QACH,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAe,EAAE,QAAe,CAAkC,CAAC;QAC1G,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAEnC,0EAA0E;QAC1E,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,0BAA0B,CAAC,IAAI,CAC7B,UAAU,CAAC,OAAO,CAAC,gCAAgC,CAAC,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;QACjC,UAAU;QACV,SAAS,EAAE,MAAM,CAAC,iBAAiB;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU;QACV,GAAG,CAAC,cAAc,CAAC,IAAI,KAAK,UAAU;YACpC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE;YAC3D,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,mCAAmC,EAAE,MAAM,CAAC,uBAAuB;QACnE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;QACpE,KAAK;QACL,YAAY,EAAE;YACZ,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClG;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAwD,MAAM,oBAAoB,CAAC;AAGpH,OAAO,EACL,qBAAqB,EACrB,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAa7F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAEnD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC;QAChD,OAAO,EAAE,MAAM,CAAC,eAAe;KAChC,CAAC,CAAC;IAEH,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;IAE/F,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAE/C,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,mEAAmE;IACnE,uDAAuD;IACvD,sEAAsE;IACtE,MAAM,oBAAoB,GAAkC,CAAC,gCAAgC,CAAC,CAAC;IAC/F,IAAI,KAAK,GAAuB,EAAE,GAAG,0BAA0B,EAAE,EAAE,CAAC;IACpE,MAAM,0BAA0B,GAC9B,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;QAC5C,MAAM,EACJ,uCAAuC,EACvC,oBAAoB,GACrB,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;QAC3D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACtF,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE5E,oBAAoB,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,uCAAuC,CAAC,GAAG,CAAC,EAAE,CAAC,CACzE,CAAC;QAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YACrC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;SAC7C,CAAC,CAAC;QACH,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAe,EAAE,QAAe,CAAkC,CAAC;QAC1G,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAEnC,0EAA0E;QAC1E,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,0BAA0B,CAAC,IAAI,CAC7B,UAAU,CAAC,OAAO,CAAC,gCAAgC,CAAC,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;QACjC,UAAU;QACV,SAAS,EAAE,MAAM,CAAC,iBAAiB;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU;QACV,GAAG,CAAC,cAAc,CAAC,IAAI,KAAK,UAAU;YACpC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE;YAC3D,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,mCAAmC,EAAE,MAAM,CAAC,uBAAuB;QACnE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;QACpE,KAAK;QACL,YAAY,EAAE;YACZ,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClG;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/workflow-source.d.ts

@@ -35,4 +35,14 @@ export type WorkflowSource = {
  * with the workflow bundle.
  */
 export declare const OTEL_WORKFLOW_INTERCEPTOR_MODULE = "@temporalio/interceptors-opentelemetry/lib/workflow-interceptors";
+/**
+ * Path of the runner's own workflow interceptor — the one that carries a
+ * run's credential from the workflow input to every activity it schedules
+ * (`workflows/interceptors/run-credential.ts`). Always registered, unlike
+ * the OTel module: it is inert without a credential and load-bearing with
+ * one. Resolved beside this module so the tsc dist and the slim artifact
+ * both find their own compiled copy; the build script names the source
+ * file itself.
+ */
+export declare function runCredentialWorkflowInterceptorModule(): string;
 export declare function resolveWorkflowSource(): WorkflowSource;

package/dist/workflow-source.js

@@ -28,6 +28,18 @@ import { fileURLToPath } from "node:url";
  * with the workflow bundle.
  */
 export const OTEL_WORKFLOW_INTERCEPTOR_MODULE = "@temporalio/interceptors-opentelemetry/lib/workflow-interceptors";
+/**
+ * Path of the runner's own workflow interceptor — the one that carries a
+ * run's credential from the workflow input to every activity it schedules
+ * (`workflows/interceptors/run-credential.ts`). Always registered, unlike
+ * the OTel module: it is inert without a credential and load-bearing with
+ * one. Resolved beside this module so the tsc dist and the slim artifact
+ * both find their own compiled copy; the build script names the source
+ * file itself.
+ */
+export function runCredentialWorkflowInterceptorModule() {
+    return fileURLToPath(new URL("./workflows/interceptors/run-credential.js", import.meta.url));
+}
 export function resolveWorkflowSource() {
     const explicit = process.env.STIGMER_WORKFLOW_BUNDLE;
     if (explicit) {

package/dist/workflow-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-source.js","sourceRoot":"","sources":["../src/workflow-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAczC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,kEAAkE,CAAC;AAErE,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,0DAA0D,QAAQ,EAAE,CACrE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workflow-source.js","sourceRoot":"","sources":["../src/workflow-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAczC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,kEAAkE,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,UAAU,sCAAsC;IACpD,OAAO,aAAa,CAClB,IAAI,GAAG,CAAC,4CAA4C,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,0DAA0D,QAAQ,EAAE,CACrE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC"}

package/dist/workflows/execute-from-execution.d.ts

@@ -20,6 +20,14 @@
  * SANDBOX RULES: This file runs inside the Temporal deterministic V8
  * isolate. No Node.js built-ins, no non-deterministic operations.
  */
+/**
+ * The Temporal workflow type this function is exported as in `index.ts` — the
+ * server's `CHILD_WORKFLOW_TYPE`, byte-pinned on both sides. Named here so
+ * the run-credential interceptor can gate on it without a second literal; a
+ * test pins it to the barrel's export alias (an ES2022 export alias must be a
+ * literal, so the barrel cannot import this).
+ */
+export declare const EXECUTE_FROM_EXECUTION_WORKFLOW_TYPE = "stigmer/workflow/execute-from-execution";
 export interface ExecuteFromExecutionInput {
     execution_id: string;
     workflow_instance_id: string;
@@ -28,5 +36,12 @@ export interface ExecuteFromExecutionInput {
     callback_token?: Uint8Array | null;
     invoker_identity_account_id?: string;
     recovery_mode?: boolean;
+    /**
+     * The run credential the server minted for this execution at dispatch —
+     * absent from an older server's dispatch. This workflow never reads it: the
+     * interceptor in `interceptors/run-credential.ts` lifts it onto every
+     * activity this workflow schedules, as a header (`shared/run-credential.ts`).
+     */
+    execution_context_token?: string;
 }
 export declare function executeFromExecution(input: ExecuteFromExecutionInput): Promise<void>;

package/dist/workflows/execute-from-execution.js

@@ -33,6 +33,17 @@ const hydrateProxy = proxyActivities({
     },
 });
 // ─────────────────────────────────────────────────────────────────────────────
+// Workflow Input Type (Temporal wire contract with Java/Go orchestrators)
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * The Temporal workflow type this function is exported as in `index.ts` — the
+ * server's `CHILD_WORKFLOW_TYPE`, byte-pinned on both sides. Named here so
+ * the run-credential interceptor can gate on it without a second literal; a
+ * test pins it to the barrel's export alias (an ES2022 export alias must be a
+ * literal, so the barrel cannot import this).
+ */
+export const EXECUTE_FROM_EXECUTION_WORKFLOW_TYPE = "stigmer/workflow/execute-from-execution";
+// ─────────────────────────────────────────────────────────────────────────────
 // Workflow Function
 // ─────────────────────────────────────────────────────────────────────────────
 export async function executeFromExecution(input) {

package/dist/workflows/execute-from-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute-from-execution.js","sourceRoot":"","sources":["../../src/workflows/execute-from-execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAUjE,MAAM,YAAY,GAAG,eAAe,CAAoB;IACtD,mBAAmB,EAAE,IAAI;IACzB,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,KAAK;KACvB;CACF,CAAC,CAAC;AAgBH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,EAAE,UAAU,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAElD,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;QACrD,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,kBAAkB,EAAE,KAAK,CAAC,oBAAoB;QAC9C,KAAK,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,wBAAwB,CAAC;QAC/D,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE;QAC9C,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;QAC9C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,iBAAiB,CAAC,YAAY,EAAE;YACpC,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK;SAC3C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBACvD,WAAW,EAAE,KAAK,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"execute-from-execution.js","sourceRoot":"","sources":["../../src/workflows/execute-from-execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAUjE,MAAM,YAAY,GAAG,eAAe,CAAoB;IACtD,mBAAmB,EAAE,IAAI;IACzB,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,KAAK;KACvB;CACF,CAAC,CAAC;AAEH,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,yCAAyC,CAAC;AAmB5C,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,EAAE,UAAU,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAElD,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;QACrD,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,kBAAkB,EAAE,KAAK,CAAC,oBAAoB;QAC9C,KAAK,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,wBAAwB,CAAC;QAC/D,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE;QAC9C,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;QAC9C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,iBAAiB,CAAC,YAAY,EAAE;YACpC,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK;SAC3C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBACvD,WAAW,EAAE,KAAK,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/workflows/index.d.ts

@@ -13,9 +13,11 @@
  * us map TypeScript function names to the slash-delimited Temporal
  * workflow type names that the backend expects.
  *
- * OTel workflow interceptors are registered at bundle time — not
- * imported here. Pre-built bundles (scripts/bundle-slim.mjs) bake them
- * in; the runtime-bundling fallback passes them to the bundler (see
+ * Workflow interceptors are registered at bundle time — not imported
+ * here: the runner's own run-credential interceptor
+ * (./interceptors/run-credential.ts, always) and OTel's (when the host
+ * configures the sink). Pre-built bundles (scripts/bundle-slim.mjs) bake
+ * them in; the runtime-bundling fallback passes them to the bundler (see
  * src/workflow-source.ts).
  */
 export { connectMcpServer as "stigmer/mcp-server/connect", discoverMcpServerLegacy as "stigmer/mcp-server/discover", } from "./connect-mcp-server.js";

package/dist/workflows/index.js

@@ -13,9 +13,11 @@
  * us map TypeScript function names to the slash-delimited Temporal
  * workflow type names that the backend expects.
  *
- * OTel workflow interceptors are registered at bundle time — not
- * imported here. Pre-built bundles (scripts/bundle-slim.mjs) bake them
- * in; the runtime-bundling fallback passes them to the bundler (see
+ * Workflow interceptors are registered at bundle time — not imported
+ * here: the runner's own run-credential interceptor
+ * (./interceptors/run-credential.ts, always) and OTel's (when the host
+ * configures the sink). Pre-built bundles (scripts/bundle-slim.mjs) bake
+ * them in; the runtime-bundling fallback passes them to the bundler (see
  * src/workflow-source.ts).
  */
 export { connectMcpServer as "stigmer/mcp-server/connect", discoverMcpServerLegacy as "stigmer/mcp-server/discover", } from "./connect-mcp-server.js";

package/dist/workflows/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workflows/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,gBAAgB,IAAI,4BAA4B,EAChD,uBAAuB,IAAI,6BAA6B,GACzD,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,IAAI,0BAA0B,GACxD,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,oBAAoB,IAAI,yCAAyC,GAClE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workflows/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,gBAAgB,IAAI,4BAA4B,EAChD,uBAAuB,IAAI,6BAA6B,GACzD,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,IAAI,0BAA0B,GACxD,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,oBAAoB,IAAI,yCAAyC,GAClE,MAAM,6BAA6B,CAAC"}

package/dist/workflows/interceptors/run-credential.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Workflow-side interceptors that carry a run's credential from the workflow
+ * input to every activity the workflow schedules — as a Temporal activity
+ * header, the SDK's channel for context that crosses the isolate boundary
+ * without being anybody's argument (`shared/run-credential.ts` has the
+ * whole story; `interceptors/run-credential-activity.ts` is the other end).
+ *
+ * Gated by WORKFLOW TYPE, not by input shape. The connect workflow's input
+ * carries the same key for a different token — a clocked decrypt-lane token
+ * bound to a synthetic id that no verifier admits as a run — and stamping it
+ * onto that lane's activities would present it where it does not belong.
+ * The gate is the positive list below: the workflow types whose input
+ * carries a RUN credential. One entry today; a test pins each entry to an
+ * export of `workflows/index.ts`, so the list cannot name a type that does
+ * not exist.
+ *
+ * Per-run state lives on this factory's closure: the SDK instantiates the
+ * factory once per workflow run, which is the documented contract. The
+ * header is a pure function of the input, so replay recomputes exactly what
+ * was recorded, and a credential-less input stamps nothing — an in-flight
+ * run from before the credential existed replays byte for byte.
+ *
+ * TEMPORAL SANDBOX: this file is bundled into the workflow isolate. No Node
+ * built-ins. It is baked into the pre-built bundle by
+ * `scripts/bundle-slim.mjs` and passed to the runtime bundler by both worker
+ * roots (`src/workflow-source.ts` names it beside the OTel module).
+ */
+import type { WorkflowInterceptorsFactory } from "@temporalio/workflow";
+/**
+ * The workflow types whose input carries a run credential. Byte-pinned wire
+ * names; each must be an export alias of `workflows/index.ts`.
+ */
+export declare const RUN_WORKFLOW_TYPES: readonly string[];
+export declare const interceptors: WorkflowInterceptorsFactory;

package/dist/workflows/interceptors/run-credential.js

@@ -0,0 +1,71 @@
+/**
+ * Workflow-side interceptors that carry a run's credential from the workflow
+ * input to every activity the workflow schedules — as a Temporal activity
+ * header, the SDK's channel for context that crosses the isolate boundary
+ * without being anybody's argument (`shared/run-credential.ts` has the
+ * whole story; `interceptors/run-credential-activity.ts` is the other end).
+ *
+ * Gated by WORKFLOW TYPE, not by input shape. The connect workflow's input
+ * carries the same key for a different token — a clocked decrypt-lane token
+ * bound to a synthetic id that no verifier admits as a run — and stamping it
+ * onto that lane's activities would present it where it does not belong.
+ * The gate is the positive list below: the workflow types whose input
+ * carries a RUN credential. One entry today; a test pins each entry to an
+ * export of `workflows/index.ts`, so the list cannot name a type that does
+ * not exist.
+ *
+ * Per-run state lives on this factory's closure: the SDK instantiates the
+ * factory once per workflow run, which is the documented contract. The
+ * header is a pure function of the input, so replay recomputes exactly what
+ * was recorded, and a credential-less input stamps nothing — an in-flight
+ * run from before the credential existed replays byte for byte.
+ *
+ * TEMPORAL SANDBOX: this file is bundled into the workflow isolate. No Node
+ * built-ins. It is baked into the pre-built bundle by
+ * `scripts/bundle-slim.mjs` and passed to the runtime bundler by both worker
+ * roots (`src/workflow-source.ts` names it beside the OTel module).
+ */
+import { workflowInfo } from "@temporalio/workflow";
+import { defaultPayloadConverter } from "@temporalio/common";
+import { RUN_CREDENTIAL_HEADER, readRunCredentialFromInput, } from "../../shared/run-credential.js";
+import { EXECUTE_FROM_EXECUTION_WORKFLOW_TYPE } from "../execute-from-execution.js";
+/**
+ * The workflow types whose input carries a run credential. Byte-pinned wire
+ * names; each must be an export alias of `workflows/index.ts`.
+ */
+export const RUN_WORKFLOW_TYPES = [
+    EXECUTE_FROM_EXECUTION_WORKFLOW_TYPE,
+];
+export const interceptors = () => {
+    let credential;
+    const inbound = {
+        async execute(input, next) {
+            if (RUN_WORKFLOW_TYPES.includes(workflowInfo().workflowType)) {
+                credential = readRunCredentialFromInput(input.args[0]);
+            }
+            return next(input);
+        },
+    };
+    const outbound = {
+        async scheduleActivity(input, next) {
+            return next(stamped(input));
+        },
+        async scheduleLocalActivity(input, next) {
+            return next(stamped(input));
+        },
+    };
+    function stamped(input) {
+        if (credential === undefined) {
+            return input;
+        }
+        return {
+            ...input,
+            headers: {
+                ...input.headers,
+                [RUN_CREDENTIAL_HEADER]: defaultPayloadConverter.toPayload(credential),
+            },
+        };
+    }
+    return { inbound: [inbound], outbound: [outbound] };
+};
+//# sourceMappingURL=run-credential.js.map

package/dist/workflows/interceptors/run-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-credential.js","sourceRoot":"","sources":["../../../src/workflows/interceptors/run-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAUpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oCAAoC,EAAE,MAAM,8BAA8B,CAAC;AAEpF;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,oCAAoC;CACrC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAgC,GAAG,EAAE;IAC5D,IAAI,UAA8B,CAAC;IAEnC,MAAM,OAAO,GAAoC;QAC/C,KAAK,CAAC,OAAO,CACX,KAA2B,EAC3B,IAAsD;YAEtD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7D,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;IAEF,MAAM,QAAQ,GAAqC;QACjD,KAAK,CAAC,gBAAgB,CACpB,KAAoB,EACpB,IAAgE;YAEhE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,qBAAqB,CACzB,KAAyB,EACzB,IAAqE;YAErE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;IAEF,SAAS,OAAO,CACd,KAAQ;QAER,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE;gBACP,GAAG,KAAK,CAAC,OAAO;gBAChB,CAAC,qBAAqB,CAAC,EAAE,uBAAuB,CAAC,SAAS,CAAC,UAAU,CAAC;aACvE;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtD,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/runner",
-  "version": "3.15.3-dev.20260914121148",
+  "version": "3.16.0",
   "description": "Embeddable Temporal worker for the Stigmer AI agent platform — handles agent execution, workflow orchestration, and MCP server management",
   "license": "Apache-2.0",
   "type": "module",
@@ -104,9 +104,9 @@
     "@opentelemetry/sdk-metrics": "^2.0.0",
     "@opentelemetry/sdk-trace-base": "^2.0.0",
     "@opentelemetry/sdk-trace-node": "^2.0.0",
-    "@stigmer/protos": "3.15.3-dev.20260914121148",
-    "@stigmer/temporal-codecs": "3.15.3-dev.20260914121148",
-    "@stigmer/zip-structure": "3.15.3-dev.20260914121148",
+    "@stigmer/protos": "3.16.0",
+    "@stigmer/temporal-codecs": "3.16.0",
+    "@stigmer/zip-structure": "3.16.0",
     "@temporalio/activity": "1.16.2",
     "@temporalio/common": "1.16.2",
     "@temporalio/interceptors-opentelemetry": "1.16.2",

package/src/__test-utils__/__tests__/execution-record-barrier.test.ts

@@ -0,0 +1,70 @@
+/**
+ * `ExecutionRecord.whenToolCallsSettled` — the barrier the hermetic scripted
+ * model waits on before it ticks (since #1097): resolves once every named row is
+ * persisted settled, across the root and the sub-agent transcripts; resolves
+ * at once when there is nothing to wait for; fails naming the open ids rather
+ * than hanging when no persist ever carries them.
+ */
+import { describe, expect, it } from "vitest";
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ExecutionPhase, MessageType, ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { deepAgentExecutionRecord } from "../../activities/execute-deep-agent/__test-utils__/hermetic-deep-agent.js";
+
+function statusWith(rows: Array<{ id: string; status: ToolCallStatus; subAgent?: boolean }>) {
+  const message = (ids: typeof rows) => ({
+    type: MessageType.MESSAGE_AI,
+    content: "",
+    toolCalls: ids.map((r) => ({ id: r.id, name: "probe", status: r.status })),
+  });
+  return create(AgentExecutionStatusSchema, {
+    phase: ExecutionPhase.EXECUTION_IN_PROGRESS,
+    messages: [message(rows.filter((r) => !r.subAgent))],
+    subAgentExecutions: rows.some((r) => r.subAgent)
+      ? [{ id: "task-1", name: "helper", messages: [message(rows.filter((r) => r.subAgent))] }]
+      : [],
+  });
+}
+
+describe("ExecutionRecord.whenToolCallsSettled", () => {
+  it("resolves at once for no ids, and for ids already persisted settled", async () => {
+    const record = deepAgentExecutionRecord({ message: "go" });
+    await expect(record.whenToolCallsSettled([])).resolves.toBeUndefined();
+
+    record.applyStatusUpdate(statusWith([{ id: "c-1", status: ToolCallStatus.TOOL_CALL_COMPLETED }]));
+    await expect(record.whenToolCallsSettled(["c-1"])).resolves.toBeUndefined();
+  });
+
+  it("waits through a RUNNING persist and releases on the persist that settles the row", async () => {
+    const record = deepAgentExecutionRecord({ message: "go" });
+    let released = false;
+    const barrier = record.whenToolCallsSettled(["c-1"]).then(() => {
+      released = true;
+    });
+
+    record.applyStatusUpdate(statusWith([{ id: "c-1", status: ToolCallStatus.TOOL_CALL_RUNNING }]));
+    await Promise.resolve();
+    expect(released, "a RUNNING row is not settled").toBe(false);
+
+    record.applyStatusUpdate(statusWith([{ id: "c-1", status: ToolCallStatus.TOOL_CALL_WAITING_APPROVAL }]));
+    await barrier;
+    expect(released).toBe(true);
+  });
+
+  it("finds a sub-agent's rows in its own transcript", async () => {
+    const record = deepAgentExecutionRecord({ message: "go" });
+    record.applyStatusUpdate(
+      statusWith([
+        { id: "task-1", status: ToolCallStatus.TOOL_CALL_RUNNING },
+        { id: "sub-1", status: ToolCallStatus.TOOL_CALL_COMPLETED, subAgent: true },
+      ]),
+    );
+    await expect(record.whenToolCallsSettled(["sub-1"])).resolves.toBeUndefined();
+  });
+
+  it("fails naming the ids still open when no persist ever settles them, instead of hanging", async () => {
+    const record = deepAgentExecutionRecord({ message: "go" });
+    record.applyStatusUpdate(statusWith([{ id: "c-1", status: ToolCallStatus.TOOL_CALL_RUNNING }]));
+    await expect(record.whenToolCallsSettled(["c-1", "c-2"], 20)).rejects.toThrow(/c-1, c-2 never settled/);
+  });
+});

package/src/__test-utils__/__tests__/harness-contract-self-check.test.ts

@@ -27,7 +27,9 @@
 
 import { describe, it, expect } from "vitest";
 import { CancelledFailure } from "@temporalio/activity";
+import { create } from "@bufbuild/protobuf";
 import { ApprovalAction, ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { SubAgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/subagent_pb";
 
 import type { HarnessAdapter, TurnInput, TurnOutcome, TurnSink } from "../../harness/types.js";
 import {
@@ -41,11 +43,12 @@ import {
   assertStopSignalInterrupts,
   assertUsageReachesSinkAsDeltas,
 } from "../harness-contract/contract.js";
+import { assertTranscriptStreamsNothing } from "../harness-contract/runtime-contract.js";
 import { scriptedSubject } from "../harness-contract/scripted-adapter.js";
 import type { ScriptedSubject } from "../harness-contract/scripted-adapter.js";
 import { scenario } from "../harness-contract/types.js";
 import type { EngineView, HarnessContractSubject, TurnScenario } from "../harness-contract/types.js";
-import { findToolCallRow } from "../proto-helpers.js";
+import { aiMessage, emptyStatus, findToolCallRow, toolCall } from "../proto-helpers.js";
 
 /** Short enough to keep this file fast; long enough that an honest microtask settle never trips it. */
 const SHORT_BOUND_MS = 100;
@@ -75,6 +78,7 @@ function adapterOver(inner: HarnessAdapter, name: string, patch: Partial<Harness
 function sinkOver(inner: TurnSink, patch: Partial<TurnSink>): TurnSink {
   return {
     status: inner.status,
+    transcript: inner.transcript,
     stopSignal: inner.stopSignal,
     setupTiming: inner.setupTiming,
     requestPersist: () => inner.requestPersist(),
@@ -324,3 +328,33 @@ describe("harness contract kit self-check — the driver stands in for the runti
     expect(turn.sink.status.messages.map((m) => m.content), "the stop landed in the hang, after the setup step and before the step after it").toEqual(["setting up"]);
   });
 });
+
+// ── The runtime half's transcript fact ──────────────────────────────────────
+
+describe("harness contract kit self-check — the settled-transcript assertion can fail", () => {
+  it("passes a transcript with every flag off", () => {
+    const status = emptyStatus();
+    const message = aiMessage("done");
+    message.toolCalls.push(toolCall("t-1", "read", ToolCallStatus.TOOL_CALL_COMPLETED));
+    status.messages.push(message);
+    expect(() => assertTranscriptStreamsNothing("honest", status)).not.toThrow();
+  });
+
+  it("names a message left streaming", () => {
+    const status = emptyStatus();
+    const message = aiMessage("still typing");
+    message.isStreaming = true;
+    status.messages.push(message);
+    expect(() => assertTranscriptStreamsNothing("broken:streams", status)).toThrow(/broken:streams: a settled turn's transcript is still streaming at messages\[0\]/);
+  });
+
+  it("names a tool-call row left streaming, inside a sub-agent's transcript", () => {
+    const status = emptyStatus();
+    const row = toolCall("t-2", "shell");
+    row.isStreaming = true;
+    const message = aiMessage("");
+    message.toolCalls.push(row);
+    status.subAgentExecutions.push(create(SubAgentExecutionSchema, { id: "sub-1", messages: [message] }));
+    expect(() => assertTranscriptStreamsNothing("broken:streams", status)).toThrow(/subAgentExecutions\[sub-1\]\.messages\[0\]\.toolCalls\[t-2\]/);
+  });
+});

package/src/__test-utils__/approval-contract/contract.ts

@@ -90,7 +90,7 @@ export function describeGatewayContract(substrate: GatewaySubstrate): void {
     // effect is always auditable to the policy layer that governed it. Gated to
     // substrates that decide the source at the gate (the deep-agent gate); the
     // Cursor substrate projects provenance at reconstruction time and is covered
-    // by the message-translator + corpus suites.
+    // by the translator + boundary-rows + corpus suites.
     if (substrate.capabilities.surfacesGatePolicySource) {
       it("tags every gated side effect with a non-UNSPECIFIED policy source", async () => {
         for (const action of [WRITE_A, SHELL, DELETE]) {

package/src/__test-utils__/approval-contract/types.ts

@@ -137,7 +137,7 @@ export interface SubstrateCapabilities {
    * and stamps the source at interrupt time (`true`); the Cursor substrate's
    * provenance is a reconstruction-time projection over the persisted tool call,
    * not a property of the hook's deny decision, so it is `false` here and is
-   * covered instead by the message-translator and corpus suites.
+   * covered instead by the translator, boundary-rows and corpus suites.
    */
   readonly surfacesGatePolicySource: boolean;
 }

package/src/__test-utils__/harness-boot-order-child.ts

@@ -15,7 +15,7 @@
  *    a bound token ref. Success means the pre-boot graph was connect-free,
  *    both interceptors installed, `assertHttp2ConnectPatched` passed, the
  *    Cursor SDK slice loaded from inside its `boot`, and the native
- *    deep-agent adapter (the table's second row since S3 M2b) registered its
+ *    deep-agent adapter (the table's second row since #1096) registered its
  *    profiles and loaded LangChain after the patch. That neither engine is
  *    on the table's STATIC graph is each adapter's own fence
  *    (`adapter-graph-is-sdk-free.test.ts`); this child proves the boot

package/src/__test-utils__/harness-contract/contract.ts

@@ -38,7 +38,7 @@
  *     is carried to COMPLETED; with REJECT or SKIP → never executes and the
  *     turn continues (the row's SKIPPED status is the runtime's to write,
  *     `harness/approval-decisions.ts`, proven in the runtime half — the
- *     driver stands in for that write between turns, Q-M1-3); reinvoked again
+ *     driver stands in for that write between turns); reinvoked again
  *     after the approval → still once, never re-gated.
  *  4. Aborting `stopSignal` mid-hang settles `runTurn` as `interrupted` within
  *     {@link INTERRUPT_SETTLE_BOUND_MS} and nothing after the stop executes or
@@ -48,8 +48,8 @@
  *     executes on the resumed turn is the pause primitive's business — an
  *     interrupt engine completes the pending task before its model speaks,
  *     a deny-and-retry engine re-reaches it whenever its model does — so it
- *     is below the contract line (S3 M3 Q-M3-2; each harness's own kit file
- *     observes its order).
+ *     is below the contract line (each harness's own kit file observes its
+ *     order).
  *  5. Usage reaches the sink as non-negative deltas summing to what the engine
  *     emitted.
  *  6. Capability and behaviour agree on the state id: an `engine-minted`
@@ -154,7 +154,7 @@ export class ExecutionDriver {
 
   /** Start a turn without awaiting it, for invariants about turns in flight. */
   begin(turn: TurnScenario, options: TurnOptions = {}): TurnInFlight {
-    const sink = options.sink ?? new RecordingTurnSink({ status: this.seedStatus() });
+    const sink = options.sink ?? new RecordingTurnSink({ status: this.seedStatus(), executionId: this.executionId });
     // The engine's view and the record's copy both derive from the status
     // this turn folds into, so a prepared sink's status is honoured too.
     const view: EngineView = {
@@ -297,7 +297,7 @@ export async function assertEveryExitIsAnOutcome(subject: HarnessContractSubject
     driver.recordTurn(sink);
   }
 
-  const preAborted = new RecordingTurnSink({ status: driver.seedStatus() });
+  const preAborted = new RecordingTurnSink({ status: driver.seedStatus(), executionId: driver.executionId });
   preAborted.abort("kit: aborted before the turn");
   const { settled } = driver.begin([scenario.say("never")], { sink: preAborted });
   await settleAsOutcome(subject, settleWithinBound(subject, settled, "under a pre-aborted signal", boundMs), "under a pre-aborted signal");
@@ -335,8 +335,8 @@ export async function assertProposalIsWaitingAndUnexecuted(subject: HarnessContr
  * turn continues — the row's terminal status is NOT asserted here because
  * it is not the adapter's to write (the decision is the server's field and
  * the WAITING → SKIPPED transition follows from it with no engine knowledge,
- * so it is the runtime's — `terminalizeNonExecutingDecisions`, landed at
- * S3 M1 and pinned by the runtime half's REJECT / SKIP arms; S2 M4 Q-M4-1).
+ * so it is the runtime's — `terminalizeNonExecutingDecisions`, landed in
+ * #1096 and pinned by the runtime half's REJECT / SKIP arms).
  * The reinvocation sees a CLONE of the persisted status, as it would from
  * the server.
  */
@@ -391,7 +391,7 @@ export async function assertStopSignalInterrupts(subject: HarnessContractSubject
   expect(findToolCallRow(hanging.sink.status, id), `${subject.name}: nothing after the stop may even reach the gate — the proposal after the hang has no row`).toBeUndefined();
   driver.recordTurn(hanging.sink);
 
-  const preAborted = new RecordingTurnSink({ status: driver.seedStatus() });
+  const preAborted = new RecordingTurnSink({ status: driver.seedStatus(), executionId: driver.executionId });
   preAborted.abort("kit: aborted before the turn");
   const early = driver.begin([scenario.propose(id, WRITE_ALPHA)], { sink: preAborted });
   const earlyOutcome = await settleWithinBound(subject, early.settled, "under a pre-aborted signal", boundMs);

package/src/__test-utils__/harness-contract/recording-sink.ts

@@ -20,6 +20,7 @@
 
 import type { AgentExecutionStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 
+import { TranscriptBuilder } from "../../harness/transcript/builder.js";
 import type { TurnSink, UsageDelta } from "../../harness/types.js";
 import type { CasTouchedReader } from "../../shared/filereview/cas-touched.js";
 import { TimingRecorder } from "../../shared/cold-start-timing.js";
@@ -35,14 +36,22 @@ export type SinkEvent =
   | { readonly kind: "cas-observations" };
 
 export interface RecordingTurnSinkOptions {
-  /** The status this turn folds into; a fresh empty one when omitted. */
+  /**
+   * The status this turn folds into; a fresh empty one when omitted. A
+   * reinvocation's clone arrives already carrying last turn's rows, and the
+   * builder indexes them as the runtime's would after its seed.
+   */
   readonly status?: AgentExecutionStatus;
+  /** The execution the builder names in its log lines; the kit's driver passes its own. */
+  readonly executionId?: string;
   /** When set, `bindHarnessState` rejects with this error (a failed session write). */
   readonly bindRejectsWith?: Error;
 }
 
 export class RecordingTurnSink implements TurnSink {
   readonly status: AgentExecutionStatus;
+  /** The one builder over `status`, as the runtime hands every adapter; the fake creates its rows through it. */
+  readonly transcript: TranscriptBuilder;
   readonly stopSignal: AbortSignal;
   readonly setupTiming = new TimingRecorder();
 
@@ -52,6 +61,7 @@ export class RecordingTurnSink implements TurnSink {
 
   constructor(options: RecordingTurnSinkOptions = {}) {
     this.status = options.status ?? emptyStatus();
+    this.transcript = new TranscriptBuilder(options.executionId ?? "kit-exec", this.status);
     this.stopSignal = this.controller.signal;
     this.bindRejectsWith = options.bindRejectsWith;
   }