@stigmer/runner 3.15.3-dev.20260914121148 → 3.16.0

package/src/shared/synthesized-attachment.ts

@@ -28,9 +28,14 @@ export interface SynthesizedAttachmentOptions {
    */
   bridgeEndpoint: string | null;
   /**
-   * The execution's session-scoped credential (the sandbox token a
-   * cloud runner holds, or the desktop runner's exchanged scoped
-   * token). Null attaches no Authorization header (OSS/local).
+   * The credential of the RUN this attachment serves — the run's own
+   * credential the server minted at dispatch (the OSS shape), or the
+   * session-scoped sandbox token a cloud runner holds. Both connection
+   * shapes present it: as the Bearer on the bridge's per-request path,
+   * and as the stdio child's startup credential (`stdioCredentialEnv`),
+   * so what the child writes on the person's behalf is stamped as that
+   * person and not refused as nobody's on a server that signs people in.
+   * Null presents nothing (a run whose dispatch carried no credential).
    */
   credential: string | null;
   /**
@@ -40,6 +45,36 @@ export interface SynthesizedAttachmentOptions {
   backendEndpoint: string;
 }
 
+/**
+ * The mcp-server's startup-credential variable — the ONE name the stdio
+ * child reads its bearer from (mcp-server/src/config.ts `STIGMER_API_KEY`;
+ * the value is any bearer the server honours, an `stk_` key for an IDE
+ * client, the run's credential here). Cross-repo string, pinned on both
+ * sides (the TOOL_CALL_LIMIT precedent).
+ */
+export const STDIO_CREDENTIAL_ENV = "STIGMER_API_KEY";
+
+/**
+ * The stdio child's startup-credential entry: `{ STIGMER_API_KEY }` when the
+ * attachment holds a credential, nothing when it holds none — so a
+ * credential-less run's child environment is byte-for-byte today's, and
+ * the two stdio shapes cannot disagree on the carrier.
+ *
+ * The exposure, stated once: the credential sits in a first-party child's
+ * process environment on the runner host, readable by the same OS user.
+ * That is the runner's own trust boundary (the runner process holds the
+ * same credential), and the child is `stigmer mcp-server`, never a
+ * third-party server — those receive only their declared env (oss#256,
+ * mcp-manager.ts). The alternative was the operator's API key.
+ */
+export function stdioCredentialEnv(
+  credential: string | null,
+): Record<string, string> {
+  return credential !== null && credential !== ""
+    ? { [STDIO_CREDENTIAL_ENV]: credential }
+    : {};
+}
+
 /**
  * Inject a synthesized attachment into a resolved server list — AFTER
  * resolve + backfill (see the module header). A user server shadowing

package/src/shared/todos.ts

@@ -1,12 +1,12 @@
 /**
- * Todo-list projection shared by every harness's status writer.
+ * Todo-list projection the one transcript builder applies for every harness.
  *
  * All harnesses expose an agent to-do tool — the Cursor SDK emits `TodoWrite`
  * (legacy) / `updateTodos` (current), the native deepagents harness emits
  * `write_todos` — and each writes the SAME `AgentExecutionStatus.todos` proto
  * map that the clients (React `TodoCard`, CLI) render. This module is the single
- * place that maps a raw tool payload into that map, so the Cursor `TodoTracker`
- * and the native v2/v3 status builders cannot drift in how they build todos.
+ * place that maps a raw tool payload into that map, so the one transcript builder
+ * (`harness/transcript/builder.ts`, both harnesses since #1097) has one mapping.
  *
  * The mapping is a superset of what any one harness emits: the Cursor SDK sends
  * per-item `id`/`created_at` and can send a `merge` flag and camelCase statuses;

package/src/shared/tool-row.ts

@@ -17,7 +17,7 @@
  * shape of legacy (pre-stamping) sessions whose flowed edit rows were hidden.
  */
 
-import { ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { ApprovalAction, ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 import type { AgentMessage, ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
 import type { SubAgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/subagent_pb";
 import { extractFilePath } from "./file-tools.js";
@@ -80,7 +80,7 @@ export function stampFileEditRow(tc: ToolCall, changeSetId: string): void {
  *    (the Cursor deny-gate's ledger tokens; a status rule). Omit to stamp
  *    every write/delete row, the deep-agent posture where every such row flowed.
  *
- * One pass for every harness (S3 M4; until then each adapter carried a copy
+ * One pass for every harness (since #1096; until then each adapter carried a copy
  * differing only in the `flowed` predicate).
  */
 export function stampFlowedFileEditRows(
@@ -294,3 +294,39 @@ export function collectSettledToolCallIds(
   }
   return ids;
 }
+
+/**
+ * Whether the server has already adjudicated this row — the user decided its
+ * gate (`approval_action`, the server's field; the runner never writes it).
+ *
+ * Such a row belongs to a gate that is CLOSED: approved and executed, or
+ * declined, in an earlier invocation of this execution. No reconciliation of
+ * the CURRENT turn may rewrite it — not the denial overlay (a new denial of the
+ * same identity is a NEW act and gets its own row), not the twin collapse (the
+ * executed row is the transcript's record). Before this rule the overlay matched
+ * a denial to the FIRST same-identity row in the whole transcript, flipped a
+ * completed, approved row back to WAITING_APPROVAL with its APPROVE still on
+ * it, and the next invocation read that as the decision for the new, undecided
+ * proposal — an approval bleeding to a later identical act (found by the
+ * harness contract kit's invariant 3 against this adapter, #1070).
+ */
+export function isAdjudicatedRow(tc: ToolCall): boolean {
+  return tc.approvalAction !== ApprovalAction.UNSPECIFIED;
+}
+
+/** Adjudicated with a decision that does NOT execute: the user declined this gate. */
+export function isDeclinedRow(tc: ToolCall): boolean {
+  switch (tc.approvalAction) {
+    case ApprovalAction.SKIP:
+    case ApprovalAction.REJECT:
+      return true;
+    case ApprovalAction.UNSPECIFIED:
+    case ApprovalAction.APPROVE:
+    case ApprovalAction.APPROVE_ALL:
+      return false;
+    default: {
+      const exhaustive: never = tc.approvalAction;
+      throw new Error(`isDeclinedRow: unknown approval action ${String(exhaustive)}`);
+    }
+  }
+}

package/src/shared/worker-shutdown.ts

@@ -107,7 +107,7 @@ export type TurnInterruption = "worker-shutdown" | "pause" | "infrastructure" |
  * already aborted and nothing actually interrupted. Shutdown requires a
  * delivered cancellation alongside the signal.
  *
- * Until S2 M3 the evidence also carried two flags from the periodic
+ * Until #1070 the evidence also carried two flags from the periodic
  * heartbeat ("it threw `CancelledFailure`"), and a delivered cancellation
  * without them read as "none". `Context.heartbeat()` never throws in the
  * Temporal TypeScript SDK (it enqueues to the worker's heartbeat subject;

package/src/shared/workspace/__tests__/git-source.test.ts

@@ -1,7 +1,7 @@
 import { describe, it, expect, vi, beforeEach } from "vitest";
 import { mockWorkspaceBackend } from "../../../__test-utils__/mock-workspace.js";
 import { provisionGit } from "../sources/git.js";
-import { SourceType, WorkspaceProvisionError } from "../types.js";
+import { WorkspaceProvisionError } from "../types.js";
 
 /**
  * Command-routing mock for `backend.execute`.
@@ -55,7 +55,7 @@ describe("provisionGit", () => {
 
   it("returns GIT_REPO source type", async () => {
     const result = await provisionGit(makeOptions());
-    expect(result.sourceType).toBe(SourceType.GIT_REPO);
+    expect(result.sourceType).toBe("git_repo");
   });
 
   it("clones in place (init/remote/fetch/checkout) instead of git clone", async () => {
@@ -119,7 +119,7 @@ describe("provisionGit", () => {
     });
 
     const result = await provisionGit(makeOptions({ backend }));
-    expect(result.sourceType).toBe(SourceType.GIT_REPO);
+    expect(result.sourceType).toBe("git_repo");
     expect(result.workspaceDescription).toContain("existing repo detected");
 
     expect(calls(backend).some((c) => c.includes("git init"))).toBe(false);

package/src/shared/workspace/__tests__/provisioner.test.ts

@@ -3,7 +3,7 @@ import { mkdtempSync, mkdirSync, writeFileSync, existsSync, readlinkSync } from
 import { join } from "node:path";
 import { tmpdir } from "node:os";
 import { WorkspaceProvisioner } from "../provisioner.js";
-import { SourceType, WorkspaceProvisionError } from "../types.js";
+import { WorkspaceProvisionError } from "../types.js";
 import { LocalWorkspaceBackend } from "../local-backend.js";
 
 function makeTempDir(): string {
@@ -22,7 +22,7 @@ describe("WorkspaceProvisioner", () => {
       const root = makeTempDir();
       const backend = new LocalWorkspaceBackend(root);
       const result = await provisioner.provision(undefined, backend, {}, true);
-      expect(result.sourceType).toBe(SourceType.EMPTY);
+      expect(result.sourceType).toBe("empty");
       expect(result.rootDir).toBe(root);
       expect(result.consumedKeys).toEqual([]);
     });
@@ -34,7 +34,7 @@ describe("WorkspaceProvisioner", () => {
         { source: { case: undefined, value: undefined } },
         backend, {}, true,
       );
-      expect(result.sourceType).toBe(SourceType.EMPTY);
+      expect(result.sourceType).toBe("empty");
     });
   });
 
@@ -47,7 +47,7 @@ describe("WorkspaceProvisioner", () => {
         { source: { case: "localPath", value: { path: projectDir } } },
         backend, {}, true,
       );
-      expect(result.sourceType).toBe(SourceType.LOCAL_PATH);
+      expect(result.sourceType).toBe("local_path");
       expect(result.rootDir).toBe(projectDir);
     });
 
@@ -102,7 +102,7 @@ describe("WorkspaceProvisioner", () => {
       );
       expect(results).toHaveLength(1);
       expect(results[0].entryName).toBe("app");
-      expect(results[0].sourceType).toBe(SourceType.EMPTY);
+      expect(results[0].sourceType).toBe("empty");
     });
   });
 

package/src/shared/workspace/__tests__/session-provision.test.ts

@@ -2,8 +2,8 @@
  * Pins session workspace provisioning: git-repo workspace entries are cloned
  * locally (never delegated to a cloud agent), local-path entries are
  * mounted, and a session with no entries gets its own empty per-session root.
- * Harness-agnostic; the Cursor activity is today's only caller and the turn
- * runtime takes it over in S2 M3.
+ * Harness-agnostic; the Cursor activity was its only caller until the turn
+ * runtime took it over in #1070.
  *
  * Uses a real, hermetic local git repository (no network, no harness API) so
  * the clone is deterministic.

package/src/shared/workspace/__tests__/writeback-coordinator.integration.test.ts

@@ -20,9 +20,8 @@ import { WorkspaceWriteBackPhase } from "@stigmer/protos/ai/stigmer/agentic/agen
 import { GitWriteBackMode } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
 import { WriteBackCoordinator } from "../writeback-coordinator.js";
 import { LocalWorkspaceBackend } from "../local-backend.js";
-import { statusProtoWriter, type ExecutionStatusWriter } from "../../execution-status-writer.js";
+import { TranscriptBuilder } from "../../../harness/transcript/builder.js";
 import type { ProvisionResult } from "../types.js";
-import { SourceType } from "../types.js";
 import { AGENT_GIT_AUTHOR_EMAIL } from "../git-identity.js";
 
 const SESSION_ID = "ses-int-01";
@@ -52,11 +51,11 @@ function git(cwd: string, args: string[]): string {
 
 function makeCoordinator(
   executionId: string,
-  writer: ExecutionStatusWriter,
+  writeBacks: TranscriptBuilder,
 ): WriteBackCoordinator {
   const provisionResult: ProvisionResult = {
     rootDir: workDir,
-    sourceType: SourceType.GIT_REPO,
+    sourceType: "git_repo",
     consumedKeys: [],
     workspaceDescription: "integration",
     entryName: "repo",
@@ -68,7 +67,7 @@ function makeCoordinator(
     },
   };
   return new WriteBackCoordinator({
-    statusWriter: writer,
+    writeBacks,
     executionId,
     sessionId: SESSION_ID,
     githubToken: "ghp_test",
@@ -139,7 +138,7 @@ describe("WriteBackCoordinator against real git", () => {
       // ── Turn 1: the agent created a file; the review kept it. ──
       writeFileSync(join(workDir, "notes.md"), "approved content\n");
       const status1 = create(AgentExecutionStatusSchema, {});
-      const coord1 = makeCoordinator("exec-turn-1", statusProtoWriter(status1));
+      const coord1 = makeCoordinator("exec-turn-1", new TranscriptBuilder("exec-int", status1));
       await coord1.finalize();
 
       const wb1 = status1.workspaceWriteBacks[0];
@@ -163,7 +162,7 @@ describe("WriteBackCoordinator against real git", () => {
       rmSync(join(workDir, "rejected.md")); // the reconcile's snap-back
 
       const status2 = create(AgentExecutionStatusSchema, {});
-      const coord2 = makeCoordinator("exec-turn-2", statusProtoWriter(status2));
+      const coord2 = makeCoordinator("exec-turn-2", new TranscriptBuilder("exec-int", status2));
       await coord2.finalize();
 
       const wb2 = status2.workspaceWriteBacks[0];
@@ -200,7 +199,7 @@ describe("WriteBackCoordinator against real git", () => {
       writeFileSync(join(workDir, "notes.md"), "turn one\n");
       const coord1 = makeCoordinator(
         "exec-a",
-        statusProtoWriter(create(AgentExecutionStatusSchema, {})),
+        new TranscriptBuilder("exec-int", create(AgentExecutionStatusSchema, {})),
       );
       await coord1.finalize();
 
@@ -214,7 +213,7 @@ describe("WriteBackCoordinator against real git", () => {
       // new one from main (which would orphan turn 1's commit).
       writeFileSync(join(workDir, "more.md"), "turn two\n");
       const status2 = create(AgentExecutionStatusSchema, {});
-      const coord2 = makeCoordinator("exec-b", statusProtoWriter(status2));
+      const coord2 = makeCoordinator("exec-b", new TranscriptBuilder("exec-int", status2));
       await coord2.finalize();
 
       expect(status2.workspaceWriteBacks[0].branchName).toBe(SESSION_BRANCH);

package/src/shared/workspace/__tests__/writeback-coordinator.test.ts

@@ -1,18 +1,14 @@
 import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 import { create } from "@bufbuild/protobuf";
-import { AgentExecutionStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { type AgentExecutionStatus, AgentExecutionStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import { WorkspaceWriteBackPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/writeback_pb";
 import { GitWriteBackMode } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
-import {
-  statusProtoWriter,
-  type ExecutionStatusWriter,
-} from "../../execution-status-writer.js";
+import { TranscriptBuilder } from "../../../harness/transcript/builder.js";
 import {
   WriteBackCoordinator,
   parseGithubRepo,
 } from "../writeback-coordinator.js";
 import type { WorkspaceBackend, ProvisionResult } from "../types.js";
-import { SourceType } from "../types.js";
 import {
   AGENT_GIT_AUTHOR_NAME,
   AGENT_GIT_AUTHOR_EMAIL,
@@ -21,16 +17,19 @@ import {
 const SESSION_ID = "ses-01test";
 const SESSION_BRANCH = `stigmer/${SESSION_ID}`;
 
-// The shared proto-backed writer — the same implementation the Cursor harness
-// wires in, and upsert-compatible with the deep-agent V3StatusBuilder.
-function makeStatusBuilder(): ExecutionStatusWriter {
-  return statusProtoWriter(create(AgentExecutionStatusSchema, {}));
+// The writer production wires in: the turn's transcript builder, whose
+// `addWriteBack` owns the upsert-by-entry rule these arms read the result of
+// (the coordinator itself only registers records through `WriteBackSink`).
+/** A builder and the status it builds into: the test writes through `sb` and reads `status`, as production reads `TurnSink.status`. */
+function makeStatusBuilder(): { sb: TranscriptBuilder; status: AgentExecutionStatus } {
+  const status = create(AgentExecutionStatusSchema, {});
+  return { sb: new TranscriptBuilder("exec-test", status), status };
 }
 
 function makeProvisionResult(overrides: Partial<ProvisionResult> = {}): ProvisionResult {
   return {
     rootDir: "/workspace/my-app",
-    sourceType: SourceType.GIT_REPO,
+    sourceType: "git_repo",
     consumedKeys: [],
     workspaceDescription: "test",
     entryName: "my-app",
@@ -92,7 +91,7 @@ function mockWorkspaceBackend(responses: Record<string, string> = {}): Workspace
 }
 
 function makeCoordinator(opts: {
-  sb: ExecutionStatusWriter;
+  sb: TranscriptBuilder;
   backend?: WorkspaceBackend;
   executionId?: string;
   sessionId?: string;
@@ -101,7 +100,7 @@ function makeCoordinator(opts: {
   workspaceEntries?: any[];
 }): WriteBackCoordinator {
   return new WriteBackCoordinator({
-    statusWriter: opts.sb,
+    writeBacks: opts.sb,
     executionId: opts.executionId ?? "exec-12345678rest",
     sessionId: opts.sessionId ?? SESSION_ID,
     githubToken: opts.githubToken ?? "ghp_plumbed_token",
@@ -139,10 +138,11 @@ function mockGithubApi(opts: {
 const originalFetch = globalThis.fetch;
 
 describe("WriteBackCoordinator", () => {
-  let sb: ExecutionStatusWriter;
+  let sb: TranscriptBuilder;
+  let status: AgentExecutionStatus;
 
   beforeEach(() => {
-    sb = makeStatusBuilder();
+    ({ sb, status } = makeStatusBuilder());
     mockGithubApi();
   });
 
@@ -155,7 +155,7 @@ describe("WriteBackCoordinator", () => {
   it("filters out non-git workspace entries", () => {
     const coord = makeCoordinator({
       sb,
-      provisionResults: [makeProvisionResult({ sourceType: SourceType.LOCAL_PATH })],
+      provisionResults: [makeProvisionResult({ sourceType: "local_path" })],
     });
     expect(coord.hasEligibleEntries).toBe(false);
   });
@@ -186,7 +186,7 @@ describe("WriteBackCoordinator", () => {
   // ── Full cycle ──────────────────────────────────────────────────────
 
   // Every cycle below runs through `finalize()`, the coordinator's one entry
-  // point since S3 M2b (Q-M1-1; the per-file `onFileModified` went with the
+  // point since #1096 (the per-file `onFileModified` went with the
   // native stream loop that called it). The mechanics it pins are the same.
   it("performs full cycle on the SESSION branch: branch -> commit -> push -> PR", async () => {
     const backend = mockWorkspaceBackend();
@@ -194,7 +194,7 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    const wbs = sb.currentStatus.workspaceWriteBacks;
+    const wbs = status.workspaceWriteBacks;
     expect(wbs).toHaveLength(1);
     expect(wbs[0].branchName).toBe(SESSION_BRANCH);
     expect(wbs[0].baseBranch).toBe("main");
@@ -238,7 +238,7 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    expect(sb.currentStatus.workspaceWriteBacks).toHaveLength(0);
+    expect(status.workspaceWriteBacks).toHaveLength(0);
   });
 
   // ── Session-branch idempotency ──────────────────────────────────────
@@ -317,7 +317,7 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    const wbs = sb.currentStatus.workspaceWriteBacks;
+    const wbs = status.workspaceWriteBacks;
     expect(wbs[0].pullRequestNumber).toBe(7);
     expect(wbs[0].pullRequestUrl).toBe("https://github.com/acme/my-app/pull/7");
     expect(wbs[0].phase).toBe(WorkspaceWriteBackPhase.WORKSPACE_WRITE_BACK_PR_CREATED);
@@ -355,7 +355,7 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    const wbs = sb.currentStatus.workspaceWriteBacks;
+    const wbs = status.workspaceWriteBacks;
     expect(wbs).toHaveLength(1);
     expect(wbs[0].phase).toBe(WorkspaceWriteBackPhase.WORKSPACE_WRITE_BACK_FAILED);
     expect(wbs[0].error).toContain("commit failed");
@@ -369,7 +369,7 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    const wbs = sb.currentStatus.workspaceWriteBacks;
+    const wbs = status.workspaceWriteBacks;
     expect(wbs).toHaveLength(1);
     expect(wbs[0].phase,
       "a pushed branch must never be reported FAILED for a PR-step error",
@@ -386,7 +386,7 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    const wbs = sb.currentStatus.workspaceWriteBacks;
+    const wbs = status.workspaceWriteBacks;
     expect(wbs).toHaveLength(1);
     expect(wbs[0].phase).toBe(WorkspaceWriteBackPhase.WORKSPACE_WRITE_BACK_PUSHED);
     expect(wbs[0].error).toContain("No GitHub token");
@@ -401,8 +401,8 @@ describe("WriteBackCoordinator", () => {
 
     await coord.finalize();
 
-    expect(sb.currentStatus.workspaceWriteBacks).toHaveLength(1);
-    expect(sb.currentStatus.workspaceWriteBacks[0].phase).toBe(
+    expect(status.workspaceWriteBacks).toHaveLength(1);
+    expect(status.workspaceWriteBacks[0].phase).toBe(
       WorkspaceWriteBackPhase.WORKSPACE_WRITE_BACK_PR_CREATED,
     );
   });

package/src/shared/workspace/provisioner.ts

@@ -15,7 +15,7 @@
  */
 
 import type { ProvisionResult, WorkspaceBackend } from "./types.js";
-import { SourceType, WorkspaceProvisionError } from "./types.js";
+import { WorkspaceProvisionError } from "./types.js";
 import { provisionEmpty } from "./sources/empty.js";
 import { provisionLocalPath } from "./sources/local-path.js";
 import { provisionGit } from "./sources/git.js";

package/src/shared/workspace/session-provision.ts

@@ -3,7 +3,7 @@
  *
  * Harness-agnostic: the turn runtime's workspace phase, serving both
  * adapters (the native orchestrator's twin, `provisionWorkspace`, retired
- * with it at S3 M2b; Q-S3-8 carried its one difference). Agents run LOCAL
+ * with it in #1096, which also carried its one difference). Agents run LOCAL
  * (cloud is disabled — see execute-cursor/cursor-mode.ts), so the runner
  * must clone git-repo workspace entries itself and mount local-path entries
  * before the agent runs. Cloud agents previously cloned git repos

package/src/shared/workspace/sources/empty.ts

@@ -5,12 +5,12 @@
  * This handler simply records the fact and returns the existing root.
  */
 
-import { SourceType, type ProvisionResult, type WorkspaceBackend } from "../types.js";
+import type { ProvisionResult, WorkspaceBackend } from "../types.js";
 
 export function provisionEmpty(backend: WorkspaceBackend): ProvisionResult {
   return {
     rootDir: backend.rootDir,
-    sourceType: SourceType.EMPTY,
+    sourceType: "empty",
     consumedKeys: [],
     workspaceDescription:
       "Your workspace is empty. " +

package/src/shared/workspace/sources/git.ts

@@ -12,7 +12,6 @@
 
 import { join } from "node:path";
 import {
-  SourceType,
   WorkspaceProvisionError,
   type ProvisionResult,
   type GitMetadata,
@@ -63,7 +62,7 @@ export async function provisionGit(options: GitProvisionOptions): Promise<Provis
       ? message.replaceAll(githubToken, "***")
       : message;
     throw new WorkspaceProvisionError(
-      SourceType.GIT_REPO,
+      "git_repo",
       `Git clone failed: ${sanitized}`,
       { cause: err instanceof Error ? err : undefined, transient: true },
     );
@@ -82,7 +81,7 @@ export async function provisionGit(options: GitProvisionOptions): Promise<Provis
 
   return {
     rootDir: cloneDir,
-    sourceType: SourceType.GIT_REPO,
+    sourceType: "git_repo",
     consumedKeys,
     workspaceDescription:
       `Your workspace is a git clone of ${url}` +
@@ -113,7 +112,7 @@ async function reuseExistingRepo(
 
   return {
     rootDir: cloneDir,
-    sourceType: SourceType.GIT_REPO,
+    sourceType: "git_repo",
     consumedKeys: [],
     workspaceDescription:
       `Your workspace is a git clone of ${url}` +

package/src/shared/workspace/sources/local-path.ts

@@ -12,7 +12,6 @@ import { existsSync, statSync, symlinkSync, readlinkSync, unlinkSync, mkdirSync
 import { join, isAbsolute } from "node:path";
 import { realpathSync } from "node:fs";
 import {
-  SourceType,
   WorkspaceProvisionError,
   type ProvisionResult,
 } from "../types.js";
@@ -29,7 +28,7 @@ export function provisionLocalPath(options: LocalPathProvisionOptions): Provisio
 
   if (!isLocalMode) {
     throw new WorkspaceProvisionError(
-      SourceType.LOCAL_PATH,
+      "local_path",
       "LocalPathSource is only supported in local mode. " +
       "Use git_repo for cloud deployments.",
     );
@@ -37,21 +36,21 @@ export function provisionLocalPath(options: LocalPathProvisionOptions): Provisio
 
   if (!isAbsolute(path)) {
     throw new WorkspaceProvisionError(
-      SourceType.LOCAL_PATH,
+      "local_path",
       `Path must be absolute, got relative path: '${path}'`,
     );
   }
 
   if (!existsSync(path)) {
     throw new WorkspaceProvisionError(
-      SourceType.LOCAL_PATH,
+      "local_path",
       `Path does not exist: '${path}'`,
     );
   }
 
   if (!statSync(path).isDirectory()) {
     throw new WorkspaceProvisionError(
-      SourceType.LOCAL_PATH,
+      "local_path",
       `Path is not a directory: '${path}'`,
     );
   }
@@ -62,7 +61,7 @@ export function provisionLocalPath(options: LocalPathProvisionOptions): Provisio
 
   return {
     rootDir: path,
-    sourceType: SourceType.LOCAL_PATH,
+    sourceType: "local_path",
     consumedKeys: [],
     workspaceDescription:
       `Your workspace is the user's project directory: ${path}\n` +

package/src/shared/workspace/stigmer-link.ts

@@ -17,7 +17,7 @@
  *   working-tree mutation, and re-pointing it while another session's turn is
  *   running on a shared tree would redirect that turn's reads mid-flight.
  *   the turn runtime creates it in its skill and attachment phases (which
- *   run after lock acquisition), for both harnesses; until S3 M2a the native
+ *   run after lock acquisition), for both harnesses; until #1096 the native
  *   orchestrator created it unconditionally right after the lock.
  * - Removed at turn end ({@link removeStigmerSymlink} in the activity's
  *   cleanup), so a real repo is left untouched once the turn ends; a

package/src/shared/workspace/types.ts

@@ -5,11 +5,8 @@
  * harness-agnostic and used by both ExecuteCursor and ExecuteDeepAgent.
  */
 
-export enum SourceType {
-  GIT_REPO = "git_repo",
-  LOCAL_PATH = "local_path",
-  EMPTY = "empty",
-}
+/** Where a provisioned workspace came from; the same strings the error prefix and the prompt builder read. */
+export type SourceType = "git_repo" | "local_path" | "empty";
 
 export interface GitMetadata {
   readonly repoUrl: string;