@stigmer/runner 3.5.3 → 3.7.0

package/dist/workflow-engine/tasks/call-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent.js","sourceRoot":"","sources":["../../../src/workflow-engine/tasks/call-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAWH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,MAAuB;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAE1B,OAAO;QACL,GAAG,MAAM;QACT,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;QAC9E,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC;QACrC,aAAa,EAAE,CAAC;KACE,CAAC;AACvB,CAAC;AAED,MAAM,OAAO,oBAAoB;IACtB,QAAQ,CAAS;IACjB,OAAO,CAAmB;IAEnC,YAAY,QAAgB,EAAE,OAAyB;QACrD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK;QACH,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAErC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,UAAgD,EAChD,KAAK,EACL,KAAK,EACL,GAAG,CAAC,mBAAmB,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,QAAsC,CAAC;YAEtD,MAAM,WAAW,GACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAwB,IAAI,EAAE,CAAC;YAErE,MAAM,QAAQ,GAAG;gBACf,gBAAgB,EACb,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAwB,IAAI,EAAE;gBAC1E,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,mBAAmB,EAAE,WAAW;aACjC,CAAC;YAEF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;YACzC,MAAM,UAAU,GAAG,cAAc,EAAE,WAAW,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,UAA2B,CAAC;YAEhC,GAAG,CAAC;gBACF,MAAM,eAAe,GACnB,QAAQ,KAAK,CAAC;oBACZ,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,iCAAiC,CAAC,MAAM,EAAE,UAAW,CAAC,CAAC;gBAE7D,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACtC,eAAe,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAC1C,CAAC;gBACF,QAAQ,EAAE,CAAC;gBAEX,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;oBAC5B,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,UAAU,GAAG,uBAAuB,CACxC,UAAU,EACV,cAAc,CAAC,MAAM,CACtB,CAAC;gBAEF,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;oBACrB,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,IAAI,iBAAiB,CAAC;gBAEjE,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,QAAQ,KAAK;wBAC9D,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClC,CAAC;gBACJ,CAAC;gBAED,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;oBACxC,OAAO;wBACL,kBAAkB,EAAE,cAAc,CAAC,aAAa,IAAI,UAAU;wBAC9D,iBAAiB,EAAE,UAAU,CAAC,MAAM;wBACpC,eAAe,EAAE,UAAU;qBAC5B,CAAC;gBACJ,CAAC;YACH,CAAC,QAAQ,QAAQ,IAAI,UAAU,EAAE;YAEjC,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,YAAY;gBAC5D,aAAa,IAAI,CAAC,QAAQ,oCAAoC,CAC/D,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAuB,EACvB,GAA4B,EAC5B,QAA2B,EAC3B,GAAyB;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAE5D,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;oBACpB,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,gBAAgB,EAAE,EAAE;oBACpB,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;oBAC7B,cAAc;iBACf,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,gBAAgB,GAAG,GAAG,YAAY,cAAc;gBACpD,CAAC,CAAC,GAAG,CAAC,gBAAgB;gBACtB,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;wBACpB,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACpC,gBAAgB,EAAE,gBAAgB;wBAClC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;wBACpC,cAAc,EAAE,CAAC;wBACjB,UAAU,EAAE,CAAC;wBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC,CAAC;YACN,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;YACnC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;oBACpB,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;oBACjD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;oBACpC,cAAc,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC;oBACxC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,kBAAkB,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;oBACpE,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,iCAAiC,CACxC,MAAuB,EACvB,cAA+B;IAE/B,MAAM,iBAAiB,GACrB,gFAAgF;QAChF,sBAAsB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI;QAChG,yEAAyE,CAAC;IAE5E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,iBAAiB;KAC5C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"call-agent.js","sourceRoot":"","sources":["../../../src/workflow-engine/tasks/call-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,MAAuB;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAE1B,OAAO;QACL,GAAG,MAAM;QACT,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;QAC9E,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC;QACrC,aAAa,EAAE,CAAC;KACE,CAAC;AACvB,CAAC;AAED,MAAM,OAAO,oBAAoB;IACtB,QAAQ,CAAS;IACjB,OAAO,CAAmB;IAEnC,YAAY,QAAgB,EAAE,OAAyB;QACrD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK;QACH,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAErC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC7C,UAAgD,EAChD,KAAK,EACL,KAAK,EACL,GAAG,CAAC,mBAAmB,CACxB,CAAC;YAEF,MAAM,MAAM,GAAG,QAAsC,CAAC;YAEtD,MAAM,WAAW,GACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAwB,IAAI,EAAE,CAAC;YAErE,MAAM,QAAQ,GAAG;gBACf,gBAAgB,EACb,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAwB,IAAI,EAAE;gBAC1E,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,mBAAmB,EAAE,WAAW;aACjC,CAAC;YAEF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;YACzC,MAAM,UAAU,GAAG,cAAc,EAAE,WAAW,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,UAA2B,CAAC;YAEhC,GAAG,CAAC;gBACF,MAAM,eAAe,GACnB,QAAQ,KAAK,CAAC;oBACZ,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,iCAAiC,CAAC,MAAM,EAAE,UAAW,CAAC,CAAC;gBAE7D,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACtC,eAAe,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAC1C,CAAC;gBACF,QAAQ,EAAE,CAAC;gBAEX,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;oBAC5B,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,UAAU,GAAG,uBAAuB,CACxC,UAAU,EACV,cAAc,CAAC,MAAM,CACtB,CAAC;gBAEF,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;oBACrB,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,IAAI,iBAAiB,CAAC;gBAEjE,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,QAAQ,KAAK;wBAC9D,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClC,CAAC;gBACJ,CAAC;gBAED,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;oBACxC,OAAO;wBACL,kBAAkB,EAAE,cAAc,CAAC,aAAa,IAAI,UAAU;wBAC9D,iBAAiB,EAAE,UAAU,CAAC,MAAM;wBACpC,eAAe,EAAE,UAAU;qBAC5B,CAAC;gBACJ,CAAC;YACH,CAAC,QAAQ,QAAQ,IAAI,UAAU,EAAE;YAEjC,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,YAAY;gBAC5D,aAAa,IAAI,CAAC,QAAQ,oCAAoC,CAC/D,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAuB,EACvB,GAA4B,EAC5B,QAA2B,EAC3B,GAAyB;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAE5D,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;oBACpB,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,gBAAgB,EAAE,EAAE;oBACpB,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;oBAC7B,cAAc;iBACf,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,gBAAgB,GAAG,GAAG,YAAY,cAAc;gBACpD,CAAC,CAAC,GAAG,CAAC,gBAAgB;gBACtB,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;wBACpB,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACpC,gBAAgB,EAAE,gBAAgB;wBAClC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;wBACpC,cAAc,EAAE,CAAC;wBACjB,UAAU,EAAE,CAAC;wBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC,CAAC;YACN,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;YACnC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;oBACpB,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;oBACjD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;oBACpC,cAAc,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC;oBACxC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,kBAAkB,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;oBACpE,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,iCAAiC,CACxC,MAAuB,EACvB,cAA+B;IAE/B,MAAM,iBAAiB,GACrB,gFAAgF;QAChF,sBAAsB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI;QAChG,yEAAyE,CAAC;IAE5E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,iBAAiB;KAC5C,CAAC;AACJ,CAAC"}

package/dist/workflow-engine/types.d.ts

@@ -525,21 +525,53 @@ export type CallAgentFn = (config: AgentCallConfig, runtimeEnv: Record<string, u
 /**
  * Agent call configuration — mirrors the proto `AgentCallTaskConfig`.
  * Parsed from the YAML `with:` block of a `call: agent` task.
+ *
+ * The agent may be referenced as "slug" (workflow's org) or "org/slug"
+ * (explicit org); there is no separate org field.
  */
 export interface AgentCallConfig {
     readonly agent: string;
     readonly message: string;
-    readonly org?: string;
     readonly env?: Record<string, string>;
-    readonly config?: AgentExecutionCallConfig;
+    readonly run_config?: AgentCallRunConfig;
     readonly output?: AgentCallOutputContract;
     readonly harness?: string;
+    readonly workspace_entries?: readonly AgentCallWorkspaceEntry[];
 }
-export interface AgentExecutionCallConfig {
-    readonly model?: string;
-    readonly timeout?: number;
-    readonly temperature?: number;
-    readonly max_cost_micros?: number;
+/**
+ * Mirrors the shared `ai.stigmer.agentic.session.v1.WorkspaceEntry` in its
+ * git-only form — the workflow surface rejects local_path sources at write
+ * time (no client is connected to serve one when a task fires), so by the
+ * time YAML reaches the runner only git_repo entries exist.
+ *
+ * The task's `environment_refs` sibling never appears in execution YAML:
+ * the server resolves it from the Workflow row at execution create.
+ */
+export interface AgentCallWorkspaceEntry {
+    readonly name?: string;
+    readonly source: {
+        readonly git_repo: {
+            readonly url: string;
+            readonly branch?: string;
+        };
+    };
+}
+/**
+ * Mirrors the shared `ai.stigmer.agentic.agentexecution.v1.RunConfig`
+ * (issue #358) — the same run-bound vocabulary schedules embed. Every
+ * field maps onto its `ExecutionConfig` namesake and is enforced by the
+ * runner's generic cost/tool-round guards; nothing here is decorative.
+ */
+export interface AgentCallRunConfig {
+    readonly model_name?: string;
+    readonly max_cost_usd?: number;
+    readonly max_tool_rounds?: number;
+    /**
+     * Canonical ServiceTier enum name ("SERVICE_TIER_STANDARD" /
+     * "SERVICE_TIER_FAST"); the loader maps the YAML shorthands
+     * ("standard"/"fast") to these, mirroring harness.
+     */
+    readonly service_tier?: string;
 }
 export interface AgentCallOutputContract {
     readonly schema: Record<string, unknown>;

package/dist/workflow-engine/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/workflow-engine/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA6LH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC;AAEhC,MAAM,UAAU,aAAa,CAAC,SAAwB;IACpD,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAwB;IACvD,OAAO,CACL,SAAS,KAAK,aAAa;QAC3B,SAAS,KAAK,QAAQ;QACtB,SAAS,KAAK,SAAS,CACxB,CAAC;AACJ,CAAC;AAwrBD,wEAAwE;AACxE,cAAc;AACd,wEAAwE;AAExE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,gBAAgB,CAAS;IAElC,YAAY,OAAe,EAAE,gBAAwB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/workflow-engine/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA6LH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC;AAEhC,MAAM,UAAU,aAAa,CAAC,SAAwB;IACpD,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAwB;IACvD,OAAO,CACL,SAAS,KAAK,aAAa;QAC3B,SAAS,KAAK,QAAQ;QACtB,SAAS,KAAK,SAAS,CACxB,CAAC;AACJ,CAAC;AAytBD,wEAAwE;AACxE,cAAc;AACd,wEAAwE;AAExE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,gBAAgB,CAAS;IAElC,YAAY,OAAe,EAAE,gBAAwB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;CACF"}

package/dist/workflows/call-agent-orchestrator.d.ts

@@ -8,8 +8,9 @@
  * 4. Updating workflow approval status via local activities
  * 5. Returning the agent result when the activity completes
  *
- * The kernel's CallAgentTaskBuilder calls `ctx.callAgent()`, which
- * is wired to `orchestrateAgentCall()` in execute-serverless-workflow.ts.
+ * The workflow engine's CallAgentTaskBuilder (workflow-engine/tasks/
+ * call-agent.ts) calls `ctx.callAgent()`, which is wired to
+ * `orchestrateAgentCall()` in execute-serverless-workflow.ts.
  *
  * SANDBOX RULES: Only @temporalio/workflow imports, type-only imports,
  * and pure logic. No Node.js built-ins.

package/dist/workflows/call-agent-orchestrator.js

@@ -8,8 +8,9 @@
  * 4. Updating workflow approval status via local activities
  * 5. Returning the agent result when the activity completes
  *
- * The kernel's CallAgentTaskBuilder calls `ctx.callAgent()`, which
- * is wired to `orchestrateAgentCall()` in execute-serverless-workflow.ts.
+ * The workflow engine's CallAgentTaskBuilder (workflow-engine/tasks/
+ * call-agent.ts) calls `ctx.callAgent()`, which is wired to
+ * `orchestrateAgentCall()` in execute-serverless-workflow.ts.
  *
  * SANDBOX RULES: Only @temporalio/workflow imports, type-only imports,
  * and pure logic. No Node.js built-ins.
@@ -22,6 +23,11 @@ import { AgentCallError } from "../workflow-engine/types.js";
 export const childApprovalRequired = defineSignal("child_approval_required");
 /** Sent by the platform immediately after the child AgentExecution starts. */
 export const childExecutionStarted = defineSignal("child_execution_started");
+// The 1h ceiling is a deliberate platform constant, not a user knob: the
+// old AgentCallTaskConfig declared a per-task `timeout` that nothing ever
+// read, and #358 deleted it rather than declaring what isn't honored. The
+// real per-run bound is run_config.max_cost_usd, enforced inside the
+// agent execution itself.
 const agentProxy = proxyActivities({
     startToCloseTimeout: "1h",
     retry: {

package/dist/workflows/call-agent-orchestrator.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent-orchestrator.js","sourceRoot":"","sources":["../../src/workflows/call-agent-orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,GAAG,EAEH,cAAc,GACf,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAG7D,wEAAwE;AACxE,qBAAqB;AACrB,wEAAwE;AAExE,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,yBAAyB,CAC1B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,yBAAyB,CAC1B,CAAC;AAUF,MAAM,UAAU,GAAG,eAAe,CAAkB;IAClD,mBAAmB,EAAE,IAAI;IACzB,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;KACnB;CACF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,oBAAoB,CAAmB;IACzD,mBAAmB,EAAE,KAAK;IAC1B,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,CAAC;KACtB;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,oBAAoB,CAAkB;IACvD,mBAAmB,EAAE,KAAK;IAC1B,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,OAAO;KACzB;CACF,CAAC,CAAC;AAcH;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkC;IAElC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,cAAc,GAAoB,EAAE,CAAC;IACzC,IAAI,aAAa,GAAY,SAAS,CAAC;IACvC,IAAI,mBAA0D,CAAC;IAC/D,IAAI,WAA+B,CAAC;IACpC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IAEnC,UAAU,CAAC,qBAAqB,EAAE,CAAC,YAAuC,EAAE,EAAE;QAC5E,mBAAmB,GAAG,YAAY,CAAC;QACnC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7C,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,qBAAqB,EAAE,CAAC,OAAyC,EAAE,EAAE;QAC9E,yEAAyE;QACzE,iFAAiF;QACjF,0DAA0D;QAC1D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC;aAAM,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;YAC9E,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG;QACrB,GAAG,KAAK,CAAC,MAAM;QACf,UAAU,EAAE,KAAK,CAAC,QAAQ;QAC1B,UAAU,EAAE,KAAK,CAAC,mBAAmB;KACtC,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,cAAc,CAAC,MAAM,KAAK,SAAS;QAC9C,eAAe,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS;QAC5D,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU;KACzC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,UAAU;SAC/B,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC;SACnE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACf,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoB,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,CAAC,MAAM,IAAI,EAAE,CAAoB,CAAC;QACrD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,+CAA+C,EAAE;YACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,cAAc,CAAC,UAAU,KAAK,SAAS;YACtD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;QACH,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO;QACT,CAAC;QACD,aAAa,GAAG,GAAG,CAAC;QACpB,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,gFAAgF;IAChF,kFAAkF;IAClF,+DAA+D;IAC/D,IAAI,iBAAqC,CAAC;IAE1C,kFAAkF;IAClF,gFAAgF;IAChF,gFAAgF;IAChF,KAAK,UAAU,eAAe,CAAC,OAAe;QAC5C,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,WAAW,CAAC,iCAAiC,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAC/D,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,iBAAiB;YAAE,OAAO;QACtC,iBAAiB,GAAG,GAAG,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,8BAA8B,CAAC,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE;gBACnE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,YAAY,EAAE,CAAC;QACrB,oFAAoF;QACpF,6EAA6E;QAC7E,MAAM,YAAY,GAAG,MAAM,SAAS,CAClC,GAAG,EAAE,CAAC,YAAY,IAAI,mBAAmB,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,sBAAsB,CAAC,EACrG,sBAAsB,CACvB,CAAC;QAEF,IAAI,YAAY;YAAE,MAAM;QAExB,oEAAoE;QACpE,IAAI,WAAW,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3C,sBAAsB,GAAG,IAAI,CAAC;YAC9B,MAAM,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,QAAQ,GAAgC,IAAI,CAAC;YACjD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,WAAW,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBACrD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;oBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,oCAAoC;QACpC,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACzC,mBAAmB,GAAG,SAAS,CAAC;YAEhC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,gCAAgC,CAChD,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,QAAQ,EACd,YAAY,CACb,CAAC;YACJ,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE;oBAChE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;oBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,gFAAgF;IAChF,IAAI,WAAW,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC3C,MAAM,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,8CAA8C;IAC9C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAC/D,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,8BAA8B,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBAClE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,aAAa,YAAY,KAAK;gBACxC,CAAC,CAAC,aAAa,CAAC,OAAO;gBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC1B,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,aAAa,CAAC;IACtB,CAAC;IAED,mEAAmE;IACnE,8DAA8D;IAC9D,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;QACtD,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAkC,EAClC,WAAmB,EACnB,QAAqC;IAErC,IAAI,CAAC;QACH,MAAM,aAAa,GAA4B;YAC7C,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,gBAAgB,EAAE,WAAW;YAC7B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YACnC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,CAAC;YACrC,eAAe,EAAE,QAAQ,EAAE,eAAe,IAAI,EAAE;YAChD,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,CAAC;YAC7C,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,CAAC;YAC3C,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,CAAC;SAC9C,CAAC;QACF,MAAM,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE;YACzD,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
+{"version":3,"file":"call-agent-orchestrator.js","sourceRoot":"","sources":["../../src/workflows/call-agent-orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,GAAG,EAEH,cAAc,GACf,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAG7D,wEAAwE;AACxE,qBAAqB;AACrB,wEAAwE;AAExE,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,yBAAyB,CAC1B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,yBAAyB,CAC1B,CAAC;AAUF,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,qEAAqE;AACrE,0BAA0B;AAC1B,MAAM,UAAU,GAAG,eAAe,CAAkB;IAClD,mBAAmB,EAAE,IAAI;IACzB,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;KACnB;CACF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,oBAAoB,CAAmB;IACzD,mBAAmB,EAAE,KAAK;IAC1B,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,CAAC;KACtB;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,oBAAoB,CAAkB;IACvD,mBAAmB,EAAE,KAAK;IAC1B,KAAK,EAAE;QACL,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,OAAO;KACzB;CACF,CAAC,CAAC;AAcH;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAkC;IAElC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,cAAc,GAAoB,EAAE,CAAC;IACzC,IAAI,aAAa,GAAY,SAAS,CAAC;IACvC,IAAI,mBAA0D,CAAC;IAC/D,IAAI,WAA+B,CAAC;IACpC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IAEnC,UAAU,CAAC,qBAAqB,EAAE,CAAC,YAAuC,EAAE,EAAE;QAC5E,mBAAmB,GAAG,YAAY,CAAC;QACnC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7C,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,qBAAqB,EAAE,CAAC,OAAyC,EAAE,EAAE;QAC9E,yEAAyE;QACzE,iFAAiF;QACjF,0DAA0D;QAC1D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC;aAAM,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;YAC9E,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG;QACrB,GAAG,KAAK,CAAC,MAAM;QACf,UAAU,EAAE,KAAK,CAAC,QAAQ;QAC1B,UAAU,EAAE,KAAK,CAAC,mBAAmB;KACtC,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,cAAc,CAAC,MAAM,KAAK,SAAS;QAC9C,eAAe,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS;QAC5D,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU;KACzC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,UAAU;SAC/B,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC;SACnE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACf,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoB,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,CAAC,MAAM,IAAI,EAAE,CAAoB,CAAC;QACrD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,+CAA+C,EAAE;YACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,cAAc,CAAC,UAAU,KAAK,SAAS;YACtD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;QACH,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO;QACT,CAAC;QACD,aAAa,GAAG,GAAG,CAAC;QACpB,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,gFAAgF;IAChF,kFAAkF;IAClF,+DAA+D;IAC/D,IAAI,iBAAqC,CAAC;IAE1C,kFAAkF;IAClF,gFAAgF;IAChF,gFAAgF;IAChF,KAAK,UAAU,eAAe,CAAC,OAAe;QAC5C,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,WAAW,CAAC,iCAAiC,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAC/D,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,iBAAiB;YAAE,OAAO;QACtC,iBAAiB,GAAG,GAAG,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,8BAA8B,CAAC,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE;gBACnE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,YAAY,EAAE,CAAC;QACrB,oFAAoF;QACpF,6EAA6E;QAC7E,MAAM,YAAY,GAAG,MAAM,SAAS,CAClC,GAAG,EAAE,CAAC,YAAY,IAAI,mBAAmB,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,sBAAsB,CAAC,EACrG,sBAAsB,CACvB,CAAC;QAEF,IAAI,YAAY;YAAE,MAAM;QAExB,oEAAoE;QACpE,IAAI,WAAW,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3C,sBAAsB,GAAG,IAAI,CAAC;YAC9B,MAAM,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,QAAQ,GAAgC,IAAI,CAAC;YACjD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,WAAW,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBACrD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;oBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,oCAAoC;QACpC,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACzC,mBAAmB,GAAG,SAAS,CAAC;YAEhC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,gCAAgC,CAChD,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,QAAQ,EACd,YAAY,CACb,CAAC;YACJ,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE;oBAChE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;oBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,gFAAgF;IAChF,IAAI,WAAW,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC3C,MAAM,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,8CAA8C;IAC9C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAC/D,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,8BAA8B,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBAClE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,aAAa,YAAY,KAAK;gBACxC,CAAC,CAAC,aAAa,CAAC,OAAO;gBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC1B,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,aAAa,CAAC;IACtB,CAAC;IAED,mEAAmE;IACnE,8DAA8D;IAC9D,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;QACtD,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAkC,EAClC,WAAmB,EACnB,QAAqC;IAErC,IAAI,CAAC;QACH,MAAM,aAAa,GAA4B;YAC7C,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,gBAAgB,EAAE,WAAW;YAC7B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YACnC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,CAAC;YACrC,eAAe,EAAE,QAAQ,EAAE,eAAe,IAAI,EAAE;YAChD,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,CAAC;YAC7C,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,CAAC;YAC3C,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,CAAC;SAC9C,CAAC;QACF,MAAM,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE;YACzD,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/runner",
-  "version": "3.5.3",
+  "version": "3.7.0",
   "description": "Embeddable Temporal worker for the Stigmer AI agent platform — handles agent execution, workflow orchestration, and MCP server management",
   "license": "Apache-2.0",
   "type": "module",
@@ -85,7 +85,7 @@
     "@opentelemetry/sdk-metrics": "^2.0.0",
     "@opentelemetry/sdk-trace-base": "^2.0.0",
     "@opentelemetry/sdk-trace-node": "^2.0.0",
-    "@stigmer/protos": "3.5.3",
+    "@stigmer/protos": "3.7.0",
     "@temporalio/activity": "^1.11.0",
     "@temporalio/client": "^1.11.0",
     "@temporalio/common": "^1.11.0",

package/src/__test-utils__/mock-client.ts

@@ -26,6 +26,10 @@ export function mockStigmerClient(overrides: MockMethods = {}): StigmerClient {
     getRunnerScopedToken: vi.fn().mockResolvedValue(undefined),
     getSession: vi.fn().mockResolvedValue({}),
     updateSession: vi.fn().mockResolvedValue({}),
+    // No proactive channels by default — the everyday answer for most
+    // agents (DD-006 D2); tests opt in to a channel-bound agent.
+    listMessagingChannels: vi.fn().mockResolvedValue([]),
+    listChannelTemplates: vi.fn().mockResolvedValue([]),
     getAgent: vi.fn().mockResolvedValue({}),
     getAgentInstance: vi.fn().mockResolvedValue({}),
     getMcpServer: vi.fn().mockResolvedValue({}),

package/src/__tests__/sandbox-token-renewal.test.ts

@@ -0,0 +1,174 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import {
+  isRenewableSandboxToken,
+  startSandboxTokenRenewal,
+} from "../sandbox-token-renewal.js";
+import type { SandboxTokenRenewal } from "../sandbox-token-renewal.js";
+
+/** Build an unsigned JWT carrying exactly the claims under test. */
+function fakeJwt(claims: Record<string, unknown>): string {
+  const b64 = (o: object) => Buffer.from(JSON.stringify(o)).toString("base64url");
+  return `${b64({ alg: "RS256", typ: "JWT" })}.${b64(claims)}.fake-signature`;
+}
+
+function nowSeconds(): number {
+  return Math.floor(Date.now() / 1000);
+}
+
+/** A sandbox token issued now with the given lifetime. */
+function sandboxToken(ttlSeconds: number, tokenType = "sandbox"): string {
+  const iat = nowSeconds();
+  return fakeJwt({ token_type: tokenType, iat, exp: iat + ttlSeconds });
+}
+
+describe("isRenewableSandboxToken", () => {
+  it("accepts sandbox and workflow_sandbox tokens with an expiry", () => {
+    expect(isRenewableSandboxToken(sandboxToken(3600))).toBe(true);
+    expect(isRenewableSandboxToken(sandboxToken(3600, "workflow_sandbox"))).toBe(true);
+  });
+
+  it("rejects every non-sandbox credential class", () => {
+    expect(isRenewableSandboxToken(sandboxToken(3600, "embedded_runner"))).toBe(false);
+    expect(isRenewableSandboxToken(sandboxToken(3600, "pool_sandbox"))).toBe(false);
+    expect(isRenewableSandboxToken(fakeJwt({ iat: 1, exp: 2 }))).toBe(false);
+  });
+
+  it("rejects a renewable class without an expiry (renew-before-expiry is undefined)", () => {
+    expect(isRenewableSandboxToken(fakeJwt({ token_type: "sandbox" }))).toBe(false);
+  });
+
+  it("rejects absent and undecodable tokens", () => {
+    expect(isRenewableSandboxToken(null)).toBe(false);
+    expect(isRenewableSandboxToken(undefined)).toBe(false);
+    expect(isRenewableSandboxToken("not-a-jwt")).toBe(false);
+    expect(isRenewableSandboxToken("a.%%%.c")).toBe(false);
+  });
+});
+
+describe("startSandboxTokenRenewal", () => {
+  const silentLog = { log: vi.fn(), warn: vi.fn() };
+  let handle: SandboxTokenRenewal | undefined;
+
+  beforeEach(() => {
+    vi.useFakeTimers();
+    silentLog.log.mockClear();
+    silentLog.warn.mockClear();
+  });
+
+  afterEach(() => {
+    handle?.stop();
+    handle = undefined;
+    vi.useRealTimers();
+  });
+
+  it("renews at 80% of the issued lifetime and applies the fresh token", async () => {
+    const initial = sandboxToken(1000);
+    let current = initial;
+    // Mint lazily so the renewed token's iat reflects the (fake) clock at
+    // renewal time, exactly like the real server would stamp it.
+    const renew = vi.fn().mockImplementation(
+      async () => ({ token: sandboxToken(1000), expiresInSeconds: 1000 }),
+    );
+    const applyToken = vi.fn((t: string) => { current = t; });
+
+    handle = startSandboxTokenRenewal({
+      getToken: () => current, renew, applyToken, log: silentLog,
+    });
+
+    // Just before the 80% point: nothing has fired.
+    await vi.advanceTimersByTimeAsync(790_000);
+    expect(renew).not.toHaveBeenCalled();
+
+    // Crossing 80% of the 1000s lifetime triggers the renewal.
+    await vi.advanceTimersByTimeAsync(20_000);
+    expect(renew).toHaveBeenCalledWith(initial);
+    expect(applyToken).toHaveBeenCalledTimes(1);
+    expect(current).not.toBe(initial);
+
+    // The next renewal is scheduled from the FRESH token's own lifetime:
+    // nothing re-fires within the first half of it.
+    renew.mockClear();
+    await vi.advanceTimersByTimeAsync(400_000);
+    expect(renew).not.toHaveBeenCalled();
+  });
+
+  it("parks on a non-renewable credential and picks up a renewable swap (pool claim)", async () => {
+    let current = sandboxToken(86_400, "pool_sandbox");
+    const renew = vi.fn().mockResolvedValue({ token: sandboxToken(1000) });
+    const applyToken = vi.fn();
+
+    handle = startSandboxTokenRenewal({
+      getToken: () => current, renew, applyToken, log: silentLog,
+    });
+
+    // Parked: rechecks but never renews the pool credential.
+    await vi.advanceTimersByTimeAsync(300_000);
+    expect(renew).not.toHaveBeenCalled();
+
+    // The claim swaps in a session token (attach-session's updateToken).
+    current = sandboxToken(1000);
+
+    // Next recheck sees the renewable class and schedules from its lifetime.
+    await vi.advanceTimersByTimeAsync(60_000 + 800_000);
+    expect(renew).toHaveBeenCalled();
+  });
+
+  it("retries a failed renewal and succeeds on a later attempt", async () => {
+    const initial = sandboxToken(100);
+    const renewed = sandboxToken(1000);
+    let current = initial;
+    const renew = vi.fn()
+      .mockRejectedValueOnce(new Error("control plane unreachable"))
+      .mockResolvedValueOnce(undefined) // server minted nothing
+      .mockResolvedValue({ token: renewed });
+    const applyToken = vi.fn((t: string) => { current = t; });
+
+    handle = startSandboxTokenRenewal({
+      getToken: () => current, renew, applyToken, log: silentLog,
+    });
+
+    // 80% of 100s is past MIN_DELAY, first attempt at ~80s, then two 60s retries.
+    await vi.advanceTimersByTimeAsync(80_000 + 60_000 + 60_000 + 5_000);
+    expect(renew).toHaveBeenCalledTimes(3);
+    expect(applyToken).toHaveBeenCalledWith(renewed);
+  });
+
+  it("attempts immediately when the pod boots with a token already past its renewal point", async () => {
+    // Issued 900s ago with a 1000s lifetime: 80% point long past.
+    const iat = nowSeconds() - 900;
+    const stale = fakeJwt({ token_type: "sandbox", iat, exp: iat + 1000 });
+    const renew = vi.fn().mockResolvedValue({ token: sandboxToken(1000) });
+
+    handle = startSandboxTokenRenewal({
+      getToken: () => stale, renew, applyToken: vi.fn(), log: silentLog,
+    });
+
+    await vi.advanceTimersByTimeAsync(0);
+    expect(renew).toHaveBeenCalledWith(stale);
+  });
+
+  it("stop() cancels the loop", async () => {
+    const renew = vi.fn().mockResolvedValue({ token: sandboxToken(1000) });
+
+    handle = startSandboxTokenRenewal({
+      getToken: () => sandboxToken(100), renew, applyToken: vi.fn(), log: silentLog,
+    });
+    handle.stop();
+
+    await vi.advanceTimersByTimeAsync(600_000);
+    expect(renew).not.toHaveBeenCalled();
+  });
+
+  it("parks (never spins) on a renewable-class token without an expiry", async () => {
+    const renew = vi.fn();
+
+    handle = startSandboxTokenRenewal({
+      getToken: () => fakeJwt({ token_type: "sandbox" }),
+      renew, applyToken: vi.fn(), log: silentLog,
+    });
+
+    await vi.advanceTimersByTimeAsync(300_000);
+    expect(renew).not.toHaveBeenCalled();
+    expect(silentLog.warn).toHaveBeenCalled();
+  });
+});

package/src/activities/__tests__/call-agent-contracts.test.ts

@@ -400,7 +400,7 @@ describe("CallAgent server contract compliance", () => {
     it("sets structuredOutputSchema when output.schema is present", async () => {
       await exerciseCallAgent({
         output: { schema: cohortSchema, on_invalid: "ON_INVALID_FAIL" },
-        config: { model: "claude-sonnet-4" },
+        run_config: { model_name: "claude-sonnet-4" },
       });
       const execConfig = capturedCreateExecution.spec.executionConfig;
       expect(execConfig).toBeDefined();
@@ -414,7 +414,7 @@ describe("CallAgent server contract compliance", () => {
     it("sets both modelName and structuredOutputSchema when both are present", async () => {
       await exerciseCallAgent({
         output: { schema: cohortSchema },
-        config: { model: "claude-sonnet-4" },
+        run_config: { model_name: "claude-sonnet-4" },
       });
       const execConfig = capturedCreateExecution.spec.executionConfig;
       expect(execConfig.modelName).toBe("claude-sonnet-4");
@@ -433,7 +433,7 @@ describe("CallAgent server contract compliance", () => {
     });
 
     it("does not set structuredOutputSchema when output is absent", async () => {
-      await exerciseCallAgent({ config: { model: "claude-sonnet-4" } });
+      await exerciseCallAgent({ run_config: { model_name: "claude-sonnet-4" } });
       const execConfig = capturedCreateExecution.spec.executionConfig;
       expect(execConfig).toBeDefined();
       expect(execConfig.modelName).toBe("claude-sonnet-4");
@@ -459,7 +459,7 @@ describe("CallAgent server contract compliance", () => {
       await exerciseCallAgent(
         {
           output: { schema: cohortSchema, on_invalid: "ON_INVALID_FAIL" },
-          config: { model: "claude-sonnet-4", timeout: 300 },
+          run_config: { model_name: "claude-sonnet-4" },
           harness: "HARNESS_CURSOR",
           __taskName: "analyze_player_data",
         } as any,

package/src/activities/__tests__/call-agent.test.ts

@@ -1,5 +1,6 @@
 import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ServiceTier } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 
 let mockGetAgentByReference: ReturnType<typeof vi.fn>;
 let mockCreateSession: ReturnType<typeof vi.fn>;
@@ -93,11 +94,11 @@ describe("callAgentAction", () => {
       expect(ref.slug).toBe("my-agent");
     });
 
-    it("uses config.org over __stigmer_org_id when both are present", async () => {
+    it("org/slug agent reference overrides the workflow org for lookup only", async () => {
       await expect(
         callAgentAction(
-          { agent: "my-agent", message: "Hello", org: "explicit-org" },
-          { __stigmer_org_id: "fallback-org" },
+          { agent: "explicit-org/my-agent", message: "Hello" },
+          { __stigmer_org_id: "workflow-org" },
           "wfl_parent789",
         ),
       ).rejects.toThrow("CompleteAsyncError");
@@ -106,6 +107,11 @@ describe("callAgentAction", () => {
       expect(ref.org).toBe("explicit-org");
       expect(ref.slug).toBe("my-agent");
       expect(ref.kind).toBe(ApiResourceKind.agent);
+
+      // The execution itself is still created in the workflow's org — the
+      // cross-org reference changes agent lookup, never the billing org.
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(execution.metadata?.org).toBe("workflow-org");
     });
   });
 
@@ -120,7 +126,7 @@ describe("callAgentAction", () => {
       ).rejects.toThrow("call:agent requires an organization context");
     });
 
-    it("falls back to __stigmer_org_id from runtime env", async () => {
+    it("uses __stigmer_org_id from runtime env", async () => {
       await expect(
         callAgentAction(
           { agent: "my-agent", message: "Hello" },
@@ -260,4 +266,213 @@ describe("callAgentAction", () => {
       expect(execution.spec.activityTaskQueue).toBe("");
     });
   });
+
+  describe("run_config → ExecutionConfig mapping (#358)", () => {
+    it("maps model_name, max_cost_usd, and max_tool_rounds onto ExecutionConfig", async () => {
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            run_config: {
+              model_name: "claude-sonnet-4-6",
+              max_cost_usd: 0.75,
+              max_tool_rounds: 15,
+            },
+          },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(execution.spec.executionConfig).toBeDefined();
+      expect(execution.spec.executionConfig.modelName).toBe("claude-sonnet-4-6");
+      expect(execution.spec.executionConfig.maxCostUsd).toBe(0.75);
+      expect(execution.spec.executionConfig.maxToolRounds).toBe(15);
+    });
+
+    it("maps a canonical service_tier onto ExecutionConfig.serviceTier (#357)", async () => {
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            run_config: { service_tier: "SERVICE_TIER_FAST" },
+          },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(execution.spec.executionConfig).toBeDefined();
+      expect(execution.spec.executionConfig.serviceTier).toBe(ServiceTier.FAST);
+    });
+
+    it("fails loudly on a service_tier value with no proto mapping", async () => {
+      // The loader canonicalizes tiers; an unmapped value reaching the
+      // activity means loader/activity drift. A pricing directive must
+      // never be silently dropped.
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            run_config: { service_tier: "SERVICE_TIER_TURBO" },
+          },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow(
+        "call:agent run_config.service_tier 'SERVICE_TIER_TURBO' has no proto mapping",
+      );
+    });
+
+    it("omits ExecutionConfig entirely when run_config and output are absent", async () => {
+      await expect(
+        callAgentAction(
+          { agent: "my-agent", message: "Hello" },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(execution.spec.executionConfig).toBeUndefined();
+    });
+
+    it("treats zero bounds as no override", async () => {
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            run_config: { model_name: "claude-sonnet-4-6", max_cost_usd: 0, max_tool_rounds: 0 },
+          },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(execution.spec.executionConfig.modelName).toBe("claude-sonnet-4-6");
+      // Proto zero values: unset numerics read back as 0, but nothing was
+      // deliberately written — the guards must not have set them from a
+      // zero "no override" input.
+      expect(execution.spec.executionConfig.maxCostUsd).toBe(0);
+      expect(execution.spec.executionConfig.maxToolRounds).toBe(0);
+    });
+  });
+
+  describe("workspace entries and workflow provenance (#358 Phase 2)", () => {
+    it("maps git workspace entries onto the created session's spec", async () => {
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            workspace_entries: [
+              { name: "app", source: { git_repo: { url: "https://github.com/acme/app", branch: "main" } } },
+              { source: { git_repo: { url: "https://github.com/acme/lib" } } },
+            ],
+          },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const session = mockCreateSession.mock.calls[0][0];
+      const entries = session.spec.workspaceEntries;
+      expect(entries).toHaveLength(2);
+      expect(entries[0].name).toBe("app");
+      expect(entries[0].source.source.case).toBe("gitRepo");
+      expect(entries[0].source.source.value.url).toBe("https://github.com/acme/app");
+      expect(entries[0].source.source.value.branch).toBe("main");
+      expect(entries[1].source.source.value.url).toBe("https://github.com/acme/lib");
+    });
+
+    it("creates sessions without workspace entries when none are configured", async () => {
+      await expect(
+        callAgentAction(
+          { agent: "my-agent", message: "Hello" },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const session = mockCreateSession.mock.calls[0][0];
+      expect(session.spec.workspaceEntries).toHaveLength(0);
+    });
+
+    it("stamps workflow provenance labels the server keys environment resolution on", async () => {
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            __wfExecId: "wex_prov1",
+            __taskName: "triage",
+          } as any,
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(execution.metadata.labels["stigmer.ai/workflow-execution-id"]).toBe("wex_prov1");
+      expect(execution.metadata.labels["stigmer.ai/workflow-task"]).toBe("triage");
+    });
+
+    it("stamps no provenance labels without workflow context", async () => {
+      await expect(
+        callAgentAction(
+          { agent: "my-agent", message: "Hello" },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      expect(Object.keys(execution.metadata.labels ?? {})).toHaveLength(0);
+    });
+  });
+
+  describe("env secret marking", () => {
+    it("preserves the agent-declared secret flag when a task env override supplies the value", async () => {
+      // The agent declares API_TOKEN as secret. A task-level env override
+      // provides the value — the secret marking must survive (#358: the
+      // override used to hardcode isSecret:false, a redaction downgrade).
+      mockGetAgentByReference.mockResolvedValue({
+        metadata: { id: "agt_test123" },
+        status: { defaultInstanceId: "ain_default456" },
+        spec: {
+          env: {
+            API_TOKEN: { isSecret: true },
+            REGION: { isSecret: false },
+          },
+        },
+      });
+
+      await expect(
+        callAgentAction(
+          {
+            agent: "my-agent",
+            message: "Hello",
+            env: { API_TOKEN: "resolved-secret-value", REGION: "us-east-1", EXTRA: "plain" },
+          },
+          { __stigmer_org_id: "test-org" },
+          "wfl_parent",
+        ),
+      ).rejects.toThrow("CompleteAsyncError");
+
+      const execution = mockCreateAgentExecution.mock.calls[0][0];
+      const runtimeEnv = execution.spec.runtimeEnv;
+      expect(runtimeEnv.API_TOKEN.value).toBe("resolved-secret-value");
+      expect(runtimeEnv.API_TOKEN.isSecret).toBe(true);
+      expect(runtimeEnv.REGION.isSecret).toBe(false);
+      // Keys the agent never declared stay non-secret.
+      expect(runtimeEnv.EXTRA.isSecret).toBe(false);
+    });
+  });
 });