@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agentexecution/stream-broker.js

@@ -0,0 +1,87 @@
+/**
+ * Go's channel buffer size: bursts up to this many undelivered frames per
+ * subscriber are absorbed; beyond it, broadcasts drop for that subscriber
+ * (stream_broker.go's `make(chan ..., 100)` + non-blocking send).
+ */
+export const SUBSCRIBER_BUFFER_CAPACITY = 100;
+export class StreamBroker {
+    logger;
+    subscribers = new Map();
+    constructor(logger) {
+        this.logger = logger;
+    }
+    /**
+     * Registers a new subscriber for the execution. The caller MUST
+     * unsubscribe when done (the subscribe generator's `finally`) — Go's
+     * "caller MUST call Unsubscribe" contract, enforced there by defer.
+     */
+    subscribe(executionId) {
+        const subscription = {
+            queue: [],
+            notify: undefined,
+            closed: false,
+        };
+        const set = this.subscribers.get(executionId) ?? new Set();
+        set.add(subscription);
+        this.subscribers.set(executionId, set);
+        this.logger.debug("New subscriber registered", {
+            executionId,
+            totalSubscribers: set.size,
+        });
+        return subscription;
+    }
+    /** Removes and closes a subscription; idempotent (Go Unsubscribe). */
+    unsubscribe(executionId, subscription) {
+        const set = this.subscribers.get(executionId);
+        if (set === undefined || !set.has(subscription)) {
+            return;
+        }
+        set.delete(subscription);
+        subscription.closed = true;
+        subscription.notify?.();
+        subscription.notify = undefined;
+        this.logger.debug("Subscriber unregistered", {
+            executionId,
+            remainingSubscribers: set.size,
+        });
+        if (set.size === 0) {
+            this.subscribers.delete(executionId);
+        }
+    }
+    /**
+     * Delivers an execution update to every active subscriber of its id.
+     * Non-blocking by construction: a subscriber at buffer capacity drops
+     * THIS frame (it catches up on the next broadcast) — Go's select/default
+     * arm, warn included.
+     */
+    broadcast(execution) {
+        const executionId = execution.metadata?.id ?? "";
+        if (executionId === "") {
+            return;
+        }
+        const set = this.subscribers.get(executionId);
+        if (set === undefined || set.size === 0) {
+            return;
+        }
+        this.logger.debug("Broadcasting execution update", {
+            executionId,
+            subscribers: set.size,
+        });
+        for (const subscription of set) {
+            if (subscription.queue.length >= SUBSCRIBER_BUFFER_CAPACITY) {
+                this.logger.warn("Subscriber channel full, dropping update", {
+                    executionId,
+                });
+                continue;
+            }
+            subscription.queue.push(execution);
+            subscription.notify?.();
+            subscription.notify = undefined;
+        }
+    }
+    /** Active subscriber count for an execution (Go GetSubscriberCount). */
+    getSubscriberCount(executionId) {
+        return this.subscribers.get(executionId)?.size ?? 0;
+    }
+}
+//# sourceMappingURL=stream-broker.js.map

package/dist/domain/agentexecution/stream-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-broker.js","sourceRoot":"","sources":["../../../src/domain/agentexecution/stream-broker.ts"],"names":[],"mappings":"AAyBA;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAc9C,MAAM,OAAO,YAAY;IAGM;IAFZ,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IAE1E,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C;;;;OAIG;IACH,SAAS,CAAC,WAAmB;QAC3B,MAAM,YAAY,GAAuB;YACvC,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK;SACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;YAC7C,WAAW;YACX,gBAAgB,EAAE,GAAG,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,sEAAsE;IACtE,WAAW,CAAC,WAAmB,EAAE,YAAgC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACzB,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC;QAC3B,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QACxB,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YAC3C,WAAW;YACX,oBAAoB,EAAE,GAAG,CAAC,IAAI;SAC/B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,SAAyB;QACjC,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACjD,WAAW;YACX,WAAW,EAAE,GAAG,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,YAAY,IAAI,GAAG,EAAE,CAAC;YAC/B,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBAC3D,WAAW;iBACZ,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACxB,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,kBAAkB,CAAC,WAAmB;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/domain/agentexecution/submit-approval.d.ts

@@ -0,0 +1,41 @@
+import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { SubmitApprovalInput } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import type { ToolCall } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ResolvedGateSteps } from "../../extensions/gate-slots.js";
+import type { AgentExecutionStatusObserver } from "../../extensions/status-hooks.js";
+import type { CallerIdentity } from "../../extensions/identity.js";
+import type { Store } from "../../store/interface.js";
+import type { ExecutionEngineStateProvider } from "./engine.js";
+import type { StreamBroker } from "./stream-broker.js";
+export interface SubmitApprovalDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    readonly broker: StreamBroker;
+    readonly engineState: ExecutionEngineStateProvider;
+    /** The composed slot registrations — this chain's approval gate slot (O4). */
+    readonly gateSteps: ResolvedGateSteps;
+    /** O4: the stale-workflow reconcile's →FAILED stamp is a notified transition. */
+    readonly statusObservers: ReadonlyArray<AgentExecutionStatusObserver>;
+}
+export declare function submitApproval(deps: SubmitApprovalDeps, input: SubmitApprovalInput, identity: CallerIdentity): Promise<AgentExecution>;
+/**
+ * The gate-resolving half of an APPROVE_ALL decision, SCOPED to the
+ * clicked tool's lease class (Go bulkApproveCoPendingToolCalls): every
+ * co-pending call (still WAITING_APPROVAL, no decision) of the SAME lease
+ * scope is set to a plain APPROVE (the audit trail stays unambiguous —
+ * exactly one tool carries APPROVE_ALL, the user's escalation point);
+ * calls of a DIFFERENT class stay WAITING_APPROVAL so the gate keeps
+ * waiting for them. Returns the calls it approved so the caller authors a
+ * decision event for each.
+ */
+export declare function bulkApproveCoPendingToolCalls(execution: AgentExecution, clickedToolCallId: string, decidedAt: string, decidedBy: string): ToolCall[];
+/**
+ * Searches for a ToolCall by ID in messages (root and sub-agent). Tool
+ * calls live exclusively in messages[].tool_calls.
+ */
+export declare function findToolCallInExecution(execution: AgentExecution, toolCallId: string): ToolCall | undefined;
+//# sourceMappingURL=submit-approval.d.ts.map

package/dist/domain/agentexecution/submit-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-approval.d.ts","sourceRoot":"","sources":["../../../src/domain/agentexecution/submit-approval.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAelG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACtG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iEAAiE,CAAC;AAKhG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AASrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAQtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAKhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,4BAA4B,CAAC,CAAC;CACvE;AASD,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,cAAc,CAAC,CA4SzB;AAkFD;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,cAAc,EACzB,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,QAAQ,EAAE,CA+CZ;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,cAAc,EACzB,UAAU,EAAE,MAAM,GACjB,QAAQ,GAAG,SAAS,CAkBtB"}

package/dist/domain/agentexecution/submit-approval.js

@@ -0,0 +1,393 @@
+/**
+ * SubmitApproval — ports controller/submit_approval.go: the HITL approval
+ * decision writer.
+ *
+ * Chain per Go: ValidateProto → LoadExisting → ValidateApproval →
+ * RecordApprovalDecision → SignalWorkflow → BuildResponse.
+ *
+ * Behavior by action: APPROVE executes the tool; SKIP feeds a skip
+ * message to the LLM; REJECT denies ONE tool call and continues the run
+ * (never fails it — the runner feeds the objection back to the model);
+ * APPROVE_ALL approves the clicked tool AND auto-approves co-pending
+ * calls of the SAME lease class (the clicked tool's built-in category or
+ * its MCP server — deriveLeaseScope), leaving other classes gated.
+ *
+ * The decision recording is one atomic read-modify-write under the store
+ * write lock, with a TOCTOU re-check (a concurrent submit that won the
+ * race surfaces as Internal, exactly Go's closure error). Idempotency: a
+ * repeated identical submit is a no-op answering current state.
+ *
+ * The approvalGateResolved signal fires ONLY when the unified HITL gate
+ * fully clears — no pending approval AND no change set awaiting review.
+ * With the engine disconnected (pre-#18) the signal is skipped with a
+ * WARN and the decision still persists (Go's nil-creator arm).
+ */
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionSchema, AgentExecutionStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { AgentExecutionCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/command_pb";
+import { ApprovalAction, ApprovalActionSchema, ExecutionPhase, ExecutionPhaseSchema, MessageType, ToolCallStatus, ToolCallStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { AgentMessageSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/message_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { enumToJson } from "@bufbuild/protobuf";
+import { stepsForSlot } from "../../extensions/gate-slots.js";
+import { failedPreconditionError, internalError, invalidArgumentError, notFoundError, unavailableError, } from "../../pipeline/errors.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newAuthorizeStep } from "../../pipeline/steps/authorize.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+import { ensureApprovalRequests, recordDecisionEvent, } from "./approval/author.js";
+import { deriveLeaseScope, sameLeaseScope } from "./approval/lease-scope.js";
+import { projectPendingApprovals } from "./approval/project.js";
+import { EngineWorkflowNotFoundError } from "./engine.js";
+import { countAwaitingReview } from "./filereview/gate.js";
+import { notifyStatusObservers } from "./status-observers.js";
+import { settleInterruptedToolCalls } from "./tool-call-settle.js";
+// Context keys for inter-step communication — Go's key strings, verbatim.
+const IS_IDEMPOTENT_REQUEST_KEY = "isIdempotentRequest";
+const TARGET_RESOURCE_KEY = "targetResource";
+export async function submitApproval(deps, input, identity) {
+    const reqCtx = new RequestContext(AgentExecutionCommandController.method.submitApproval.input, input, identity, ApiResourceKind.agent_execution);
+    const builder = newPipeline("agent-execution-submit-approval", deps.logger)
+        .addStep(newAuthorizeStep(AgentExecutionCommandController.method.submitApproval, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep({
+        name: "LoadExisting",
+        async execute(ctx) {
+            const executionId = ctx.input.agentExecutionId;
+            if (executionId === "") {
+                throw invalidArgumentError("agent_execution_id is required");
+            }
+            let execution;
+            try {
+                execution = await deps.store.getResource(ApiResourceKind.agent_execution, executionId, AgentExecutionSchema);
+            }
+            catch (error) {
+                if (error instanceof ResourceNotFoundError) {
+                    throw notFoundError("agent_execution", executionId);
+                }
+                throw internalError(error, "failed to load agent execution");
+            }
+            ctx.set(TARGET_RESOURCE_KEY, execution);
+        },
+    })
+        .addStep({
+        name: "ValidateApproval",
+        execute(ctx) {
+            const execution = ctx.get(TARGET_RESOURCE_KEY);
+            const executionId = execution.metadata?.id ?? "";
+            const requestedToolCallId = ctx.input.toolCallId;
+            const requestedAction = ctx.input.action;
+            const currentPhase = execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+            // Approval is accepted during active execution phases where tool
+            // calls may await decisions; terminal and pre-start phases refuse.
+            if (currentPhase !== ExecutionPhase.EXECUTION_WAITING_FOR_APPROVAL &&
+                currentPhase !== ExecutionPhase.EXECUTION_IN_PROGRESS) {
+                throw failedPreconditionError(`execution ${executionId} is in phase ${protoName(ExecutionPhaseSchema, currentPhase)}, approval requires EXECUTION_WAITING_FOR_APPROVAL or EXECUTION_IN_PROGRESS`);
+            }
+            // The ToolCall in messages is the single source of truth.
+            const tc = findToolCallInExecution(execution, requestedToolCallId);
+            if (tc === undefined) {
+                throw invalidArgumentError(`tool_call_id ${requestedToolCallId} not found in messages for execution ${executionId}`);
+            }
+            // Idempotency: a decision already recorded on the ToolCall.
+            const existingAction = tc.approvalAction;
+            if (existingAction !== ApprovalAction.UNSPECIFIED) {
+                if (existingAction === requestedAction) {
+                    deps.logger.info("IDEMPOTENT: ToolCall already has matching approval action", {
+                        executionId,
+                        toolCallId: requestedToolCallId,
+                        action: protoName(ApprovalActionSchema, requestedAction),
+                    });
+                    ctx.set(IS_IDEMPOTENT_REQUEST_KEY, true);
+                    return;
+                }
+                throw failedPreconditionError(`tool call ${requestedToolCallId} already has approval action ${protoName(ApprovalActionSchema, existingAction)}, cannot change to ${protoName(ApprovalActionSchema, requestedAction)}`);
+            }
+            if (tc.status !== ToolCallStatus.TOOL_CALL_WAITING_APPROVAL) {
+                throw failedPreconditionError(`tool call ${requestedToolCallId} has status ${protoName(ToolCallStatusSchema, tc.status)}, expected TOOL_CALL_WAITING_APPROVAL`);
+            }
+        },
+    });
+    // The ratified approval gate slot (blueprint 03 §3a; O4): after
+    // ValidateApproval, before the approval side effects (the record is the
+    // atomic read-modify-write). Empty in OSS.
+    for (const step of stepsForSlot(deps.gateSteps, "agent-execution-submit-approval:gate")) {
+        builder.addStep(step);
+    }
+    await builder
+        .addStep({
+        name: "RecordApprovalDecision",
+        async execute(ctx) {
+            if (ctx.get(IS_IDEMPOTENT_REQUEST_KEY) === true) {
+                deps.logger.debug("Skipping approval decision recording for idempotent request");
+                return;
+            }
+            const executionId = ctx.input.agentExecutionId;
+            const toolCallId = ctx.input.toolCallId;
+            const action = ctx.input.action;
+            const comment = ctx.input.comment;
+            const now = new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
+            // Decider identity for the approval ledger. OSS is single-user
+            // with no multi-tenant auth context, so the principal is empty;
+            // the Cloud edition populates it from the authenticated caller.
+            const decidedBy = "";
+            let updated;
+            try {
+                updated = await deps.store.updateResource(ApiResourceKind.agent_execution, executionId, AgentExecutionSchema, (execution) => {
+                    // Re-check under the write lock: TOCTOU guard against a
+                    // concurrent request that recorded a decision between our
+                    // validation step and this locked update.
+                    const tc = findToolCallInExecution(execution, toolCallId);
+                    if (tc === undefined) {
+                        throw new Error(`tool call ${toolCallId} no longer exists in execution ${executionId}`);
+                    }
+                    if (tc.approvalAction !== ApprovalAction.UNSPECIFIED) {
+                        throw new Error(`tool call ${toolCallId} already has approval action ${protoName(ApprovalActionSchema, tc.approvalAction)} (concurrent approval won the race)`);
+                    }
+                    if (execution.status === undefined) {
+                        execution.status = create(AgentExecutionStatusSchema);
+                    }
+                    // Author REQUESTED events BEFORE recording the decision,
+                    // while every gated tool call is still WAITING — seeds the
+                    // stream for executions predating the field, so a decision
+                    // event always has a preceding request.
+                    ensureApprovalRequests(execution.status, executionId);
+                    tc.approvalAction = action;
+                    tc.approvalDecidedAt = now;
+                    tc.approvedBy = decidedBy;
+                    // The rich decision event (decided_by + the user's comment)
+                    // in the same locked write that records the decision on the
+                    // scan, so it can never be duplicated or clobbered.
+                    recordDecisionEvent(execution.status, tc, decidedBy, comment);
+                    // APPROVE_ALL grants a run-lifetime lease scoped to the
+                    // clicked tool's class; co-pending calls of the SAME class
+                    // are auto-approved with a plain APPROVE and no comment (the
+                    // escalation comment belongs to the clicked tool).
+                    if (action === ApprovalAction.APPROVE_ALL) {
+                        for (const bulkTc of bulkApproveCoPendingToolCalls(execution, toolCallId, now, decidedBy)) {
+                            recordDecisionEvent(execution.status, bulkTc, decidedBy, "");
+                        }
+                    }
+                    // Recompute pending_approvals — the approved entry
+                    // disappears because its approval_action is now set.
+                    execution.status.pendingApprovals = projectPendingApprovals(execution.status.phase, execution.status.messages, execution.status.subAgentExecutions, execution.status.approvalEventStream, deps.logger);
+                });
+            }
+            catch (error) {
+                if (error instanceof ResourceNotFoundError) {
+                    throw notFoundError("agent_execution", executionId);
+                }
+                throw internalError(error, "failed to persist approval decision");
+            }
+            deps.logger.info("Recorded approval decision on ToolCall, recomputed pending_approvals", {
+                executionId,
+                toolCallId,
+                action: protoName(ApprovalActionSchema, action),
+                pendingApprovalsRemaining: updated.status?.pendingApprovals.length ?? 0,
+            });
+            deps.broker.broadcast(updated);
+            ctx.set(TARGET_RESOURCE_KEY, updated);
+        },
+    })
+        .addStep({
+        name: "SignalWorkflow",
+        async execute(ctx) {
+            if (ctx.get(IS_IDEMPOTENT_REQUEST_KEY) === true) {
+                deps.logger.debug("Skipping workflow signal for idempotent request");
+                return;
+            }
+            const engine = deps.engineState();
+            if (!engine.connected) {
+                // Go's nil-creator arm: the decision persists; the signal is
+                // skipped until #18 connects an engine.
+                deps.logger.warn("Workflow creator not available - skipping Temporal signal");
+                return;
+            }
+            const execution = ctx.get(TARGET_RESOURCE_KEY);
+            const executionId = execution.metadata?.id ?? "";
+            const pendingRemaining = execution.status?.pendingApprovals.length ?? 0;
+            const awaitingReview = countAwaitingReview(execution.status?.fileChangeSets ?? []);
+            // The HITL gate is unified: a turn resumes only when BOTH
+            // sub-gates clear. Clearing the last approval while file review is
+            // still pending must NOT resume the turn. REJECT is not special:
+            // it resolves exactly one gate, like SKIP.
+            if (!(pendingRemaining === 0 && awaitingReview === 0)) {
+                deps.logger.info("Approval recorded, HITL gate not yet resolved — waiting", {
+                    executionId,
+                    toolCallId: ctx.input.toolCallId,
+                    pendingApprovalsRemaining: pendingRemaining,
+                    changeSetsAwaitingReview: awaitingReview,
+                });
+                return;
+            }
+            try {
+                await engine.engine.signalApprovalGateResolved(executionId);
+            }
+            catch (error) {
+                if (error instanceof EngineWorkflowNotFoundError) {
+                    deps.logger.warn("Workflow not found - reconciling stale execution status to FAILED", { executionId });
+                    await reconcileStaleExecution(deps, execution);
+                    throw failedPreconditionError(`workflow not running for execution ${executionId} - the backing workflow has terminated unexpectedly and the execution has been marked as failed`);
+                }
+                throw unavailableError(`failed to signal workflow: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            deps.logger.info("Successfully sent approvalGateResolved signal to workflow", { executionId });
+        },
+    })
+        .addStep({
+        name: "BuildResponse",
+        execute(ctx) {
+            const execution = ctx.get(TARGET_RESOURCE_KEY);
+            // Audit log the approval decision (caller identity arrives with
+            // the cloud edition's auth context).
+            const tc = findToolCallInExecution(execution, ctx.input.toolCallId);
+            deps.logger.info("AUDIT: Approval decision submitted", {
+                executionId: execution.metadata?.id ?? "",
+                org: execution.metadata?.org ?? "",
+                toolCallId: ctx.input.toolCallId,
+                toolName: tc?.name ?? "unknown",
+                action: protoName(ApprovalActionSchema, ctx.input.action),
+                comment: ctx.input.comment,
+            });
+        },
+    })
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+/**
+ * Terminalizes an execution stuck in WAITING_FOR_APPROVAL because the
+ * backing workflow no longer runs (Go reconcileStaleExecution).
+ * Best-effort: a failed persist is logged and the caller still surfaces
+ * the WorkflowNotFound refusal. The approval-event ledger is preserved
+ * verbatim for the audit trail; pending_approvals is deliberately left
+ * empty (a FAILED execution has no actionable approvals). Whole-resource
+ * save is intentional: this writes a TERMINAL state with no live appender
+ * racing the stream.
+ */
+async function reconcileStaleExecution(deps, execution) {
+    const executionId = execution.metadata?.id ?? "";
+    const reconciled = create(AgentExecutionSchema, {
+        apiVersion: execution.apiVersion,
+        kind: execution.kind,
+        metadata: execution.metadata,
+        spec: execution.spec,
+        status: {
+            phase: ExecutionPhase.EXECUTION_FAILED,
+            error: "Workflow backing this execution is no longer running. Execution has been marked as failed.",
+            messages: execution.status?.messages ?? [],
+            audit: execution.status?.audit,
+            approvalEventStream: execution.status?.approvalEventStream,
+        },
+    });
+    // A system message explaining what happened.
+    reconciled.status?.messages.push(create(AgentMessageSchema, {
+        type: MessageType.MESSAGE_SYSTEM,
+        content: "The workflow backing this execution is no longer running. This can happen due to infrastructure issues or manual termination. The execution has been marked as failed.",
+    }));
+    // The gated call that brought the user here — plus any other in-flight
+    // call — is still non-terminal; this write terminalizes the execution,
+    // so settle them (issue #207).
+    settleInterruptedToolCalls(reconciled.status, new Date().toISOString().replace(/\.\d{3}Z$/, "Z"));
+    try {
+        await deps.store.saveResource(ApiResourceKind.agent_execution, executionId, AgentExecutionSchema, reconciled);
+    }
+    catch (error) {
+        deps.logger.error("Failed to reconcile stale execution status - execution will remain in WAITING_FOR_APPROVAL until next attempt", {
+            executionId,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return;
+    }
+    deps.logger.info("RECONCILIATION: Updated stale execution status to FAILED", {
+        executionId,
+    });
+    // O4 site 4 of 5 (status-observers.ts): the reconcile's →FAILED stamp
+    // is a persisted terminal transition.
+    await notifyStatusObservers(deps, reconciled, execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED, ExecutionPhase.EXECUTION_FAILED);
+}
+/**
+ * The gate-resolving half of an APPROVE_ALL decision, SCOPED to the
+ * clicked tool's lease class (Go bulkApproveCoPendingToolCalls): every
+ * co-pending call (still WAITING_APPROVAL, no decision) of the SAME lease
+ * scope is set to a plain APPROVE (the audit trail stays unambiguous —
+ * exactly one tool carries APPROVE_ALL, the user's escalation point);
+ * calls of a DIFFERENT class stay WAITING_APPROVAL so the gate keeps
+ * waiting for them. Returns the calls it approved so the caller authors a
+ * decision event for each.
+ */
+export function bulkApproveCoPendingToolCalls(execution, clickedToolCallId, decidedAt, decidedBy) {
+    const clicked = findToolCallInExecution(execution, clickedToolCallId);
+    if (clicked === undefined) {
+        return [];
+    }
+    const clickedScope = deriveLeaseScope(clicked);
+    if (clickedScope === undefined) {
+        // The clicked tool has no leasable scope (an unknown/ungated name
+        // that somehow carried APPROVE_ALL). Nothing else can match it.
+        // Defensive — a gated tool always has a scope.
+        return [];
+    }
+    const approved = [];
+    const approveIfWaitingInScope = (tc) => {
+        if (tc.id === clickedToolCallId) {
+            return;
+        }
+        if (tc.status !== ToolCallStatus.TOOL_CALL_WAITING_APPROVAL) {
+            return;
+        }
+        if (tc.approvalAction !== ApprovalAction.UNSPECIFIED) {
+            return;
+        }
+        const scope = deriveLeaseScope(tc);
+        if (scope === undefined || !sameLeaseScope(scope, clickedScope)) {
+            return;
+        }
+        tc.approvalAction = ApprovalAction.APPROVE;
+        tc.approvalDecidedAt = decidedAt;
+        tc.approvedBy = decidedBy;
+        approved.push(tc);
+    };
+    for (const msg of execution.status?.messages ?? []) {
+        for (const tc of msg.toolCalls) {
+            approveIfWaitingInScope(tc);
+        }
+    }
+    for (const sa of execution.status?.subAgentExecutions ?? []) {
+        for (const msg of sa.messages) {
+            for (const tc of msg.toolCalls) {
+                approveIfWaitingInScope(tc);
+            }
+        }
+    }
+    return approved;
+}
+/**
+ * Searches for a ToolCall by ID in messages (root and sub-agent). Tool
+ * calls live exclusively in messages[].tool_calls.
+ */
+export function findToolCallInExecution(execution, toolCallId) {
+    for (const msg of execution.status?.messages ?? []) {
+        for (const tc of msg.toolCalls) {
+            if (tc.id === toolCallId) {
+                return tc;
+            }
+        }
+    }
+    for (const sa of execution.status?.subAgentExecutions ?? []) {
+        for (const msg of sa.messages) {
+            for (const tc of msg.toolCalls) {
+                if (tc.id === toolCallId) {
+                    return tc;
+                }
+            }
+        }
+    }
+    return undefined;
+}
+/** The full proto enum value name — Go's .String() rendering. */
+function protoName(schema, value) {
+    return enumToJson(schema, value);
+}
+//# sourceMappingURL=submit-approval.js.map

package/dist/domain/agentexecution/submit-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-approval.js","sourceRoot":"","sources":["../../../src/domain/agentexecution/submit-approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,+BAA+B,EAAE,MAAM,iEAAiE,CAAC;AAClH,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,oBAAoB,GACrB,MAAM,8DAA8D,CAAC;AAGtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iEAAiE,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKhD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAmBnE,0EAA0E;AAC1E,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AACxD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,KAA0B,EAC1B,QAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,+BAA+B,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAC3D,KAAK,EACL,QAAQ,EACR,eAAe,CAAC,eAAe,CAChC,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CACzB,iCAAiC,EACjC,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,+BAA+B,CAAC,MAAM,CAAC,cAAc,EACrD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC;QACP,IAAI,EAAE,cAAc;QACpB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC/C,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;gBACvB,MAAM,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,SAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACtC,eAAe,CAAC,eAAe,EAC/B,WAAW,EACX,oBAAoB,CACrB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,MAAM,aAAa,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;YAC/D,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,kBAAkB;QACxB,OAAO,CAAC,GAAG;YACT,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAmB,CAAC;YACjE,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YACjD,MAAM,mBAAmB,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YACzC,MAAM,YAAY,GAChB,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,CAAC,2BAA2B,CAAC;YAExE,iEAAiE;YACjE,mEAAmE;YACnE,IACE,YAAY,KAAK,cAAc,CAAC,8BAA8B;gBAC9D,YAAY,KAAK,cAAc,CAAC,qBAAqB,EACrD,CAAC;gBACD,MAAM,uBAAuB,CAC3B,aAAa,WAAW,gBAAgB,SAAS,CAAC,oBAAoB,EAAE,YAAY,CAAC,6EAA6E,CACnK,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,MAAM,EAAE,GAAG,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YACnE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,MAAM,oBAAoB,CACxB,gBAAgB,mBAAmB,wCAAwC,WAAW,EAAE,CACzF,CAAC;YACJ,CAAC;YAED,4DAA4D;YAC5D,MAAM,cAAc,GAAG,EAAE,CAAC,cAAc,CAAC;YACzC,IAAI,cAAc,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;gBAClD,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;oBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2DAA2D,EAC3D;wBACE,WAAW;wBACX,UAAU,EAAE,mBAAmB;wBAC/B,MAAM,EAAE,SAAS,CAAC,oBAAoB,EAAE,eAAe,CAAC;qBACzD,CACF,CAAC;oBACF,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;oBACzC,OAAO;gBACT,CAAC;gBACD,MAAM,uBAAuB,CAC3B,aAAa,mBAAmB,gCAAgC,SAAS,CAAC,oBAAoB,EAAE,cAAc,CAAC,sBAAsB,SAAS,CAAC,oBAAoB,EAAE,eAAe,CAAC,EAAE,CACxL,CAAC;YACJ,CAAC;YAED,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B,EAAE,CAAC;gBAC5D,MAAM,uBAAuB,CAC3B,aAAa,mBAAmB,eAAe,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,uCAAuC,CACjI,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACL,gEAAgE;IAChE,wEAAwE;IACxE,2CAA2C;IAC3C,KAAK,MAAM,IAAI,IAAI,YAAY,CAC7B,IAAI,CAAC,SAAS,EACd,sCAAsC,CACvC,EAAE,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO;SACV,OAAO,CAAC;QACP,IAAI,EAAE,wBAAwB;QAC9B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,IAAI,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6DAA6D,CAC9D,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACxC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YAChC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC/D,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,MAAM,SAAS,GAAG,EAAE,CAAC;YAErB,IAAI,OAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CACvC,eAAe,CAAC,eAAe,EAC/B,WAAW,EACX,oBAAoB,EACpB,CAAC,SAAS,EAAE,EAAE;oBACZ,wDAAwD;oBACxD,0DAA0D;oBAC1D,0CAA0C;oBAC1C,MAAM,EAAE,GAAG,uBAAuB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;oBAC1D,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;wBACrB,MAAM,IAAI,KAAK,CACb,aAAa,UAAU,kCAAkC,WAAW,EAAE,CACvE,CAAC;oBACJ,CAAC;oBACD,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;wBACrD,MAAM,IAAI,KAAK,CACb,aAAa,UAAU,gCAAgC,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,cAAc,CAAC,qCAAqC,CAC/I,CAAC;oBACJ,CAAC;oBAED,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBACnC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;oBACxD,CAAC;oBAED,yDAAyD;oBACzD,2DAA2D;oBAC3D,2DAA2D;oBAC3D,wCAAwC;oBACxC,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;oBAEtD,EAAE,CAAC,cAAc,GAAG,MAAM,CAAC;oBAC3B,EAAE,CAAC,iBAAiB,GAAG,GAAG,CAAC;oBAC3B,EAAE,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC1B,4DAA4D;oBAC5D,4DAA4D;oBAC5D,oDAAoD;oBACpD,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;oBAE9D,wDAAwD;oBACxD,2DAA2D;oBAC3D,6DAA6D;oBAC7D,mDAAmD;oBACnD,IAAI,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;wBAC1C,KAAK,MAAM,MAAM,IAAI,6BAA6B,CAChD,SAAS,EACT,UAAU,EACV,GAAG,EACH,SAAS,CACV,EAAE,CAAC;4BACF,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;wBAC/D,CAAC;oBACH,CAAC;oBAED,mDAAmD;oBACnD,qDAAqD;oBACrD,SAAS,CAAC,MAAM,CAAC,gBAAgB,GAAG,uBAAuB,CACzD,SAAS,CAAC,MAAM,CAAC,KAAK,EACtB,SAAS,CAAC,MAAM,CAAC,QAAQ,EACzB,SAAS,CAAC,MAAM,CAAC,kBAAkB,EACnC,SAAS,CAAC,MAAM,CAAC,mBAAmB,EACpC,IAAI,CAAC,MAAM,CACZ,CAAC;gBACJ,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,MAAM,aAAa,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sEAAsE,EACtE;gBACE,WAAW;gBACX,UAAU;gBACV,MAAM,EAAE,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC;gBAC/C,yBAAyB,EACvB,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,CAAC;aAC/C,CACF,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,IAAI,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,wCAAwC;gBACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2DAA2D,CAC5D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAmB,CAAC;YACjE,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YACjD,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,CAAC,CAAC;YACxE,MAAM,cAAc,GAAG,mBAAmB,CACxC,SAAS,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CACvC,CAAC;YAEF,0DAA0D;YAC1D,mEAAmE;YACnE,iEAAiE;YACjE,2CAA2C;YAC3C,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yDAAyD,EACzD;oBACE,WAAW;oBACX,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU;oBAChC,yBAAyB,EAAE,gBAAgB;oBAC3C,wBAAwB,EAAE,cAAc;iBACzC,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mEAAmE,EACnE,EAAE,WAAW,EAAE,CAChB,CAAC;oBACF,MAAM,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAC/C,MAAM,uBAAuB,CAC3B,sCAAsC,WAAW,iGAAiG,CACnJ,CAAC;gBACJ,CAAC;gBACD,MAAM,gBAAgB,CACpB,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2DAA2D,EAC3D,EAAE,WAAW,EAAE,CAChB,CAAC;QACJ,CAAC;KACF,CAAC;SACD,OAAO,CAAC;QACP,IAAI,EAAE,eAAe;QACrB,OAAO,CAAC,GAAG;YACT,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAmB,CAAC;YACjE,gEAAgE;YAChE,qCAAqC;YACrC,MAAM,EAAE,GAAG,uBAAuB,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACrD,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;gBACzC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;gBAClC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU;gBAChC,QAAQ,EAAE,EAAE,EAAE,IAAI,IAAI,SAAS;gBAC/B,MAAM,EAAE,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBACzD,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO;aAC3B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;SACD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAmB,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAwB,EACxB,SAAyB;IAEzB,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,EAAE;QAC9C,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE;YACN,KAAK,EAAE,cAAc,CAAC,gBAAgB;YACtC,KAAK,EACH,4FAA4F;YAC9F,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE;YAC1C,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK;YAC9B,mBAAmB,EAAE,SAAS,CAAC,MAAM,EAAE,mBAAmB;SAC3D;KACF,CAAC,CAAC;IAEH,6CAA6C;IAC7C,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAC9B,MAAM,CAAC,kBAAkB,EAAE;QACzB,IAAI,EAAE,WAAW,CAAC,cAAc;QAChC,OAAO,EACL,wKAAwK;KAC3K,CAAC,CACH,CAAC;IAEF,uEAAuE;IACvE,uEAAuE;IACvE,+BAA+B;IAC/B,0BAA0B,CACxB,UAAU,CAAC,MAAM,EACjB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CACnD,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAC3B,eAAe,CAAC,eAAe,EAC/B,WAAW,EACX,oBAAoB,EACpB,UAAU,CACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+GAA+G,EAC/G;YACE,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE;QAC3E,WAAW;KACZ,CAAC,CAAC;IAEH,sEAAsE;IACtE,sCAAsC;IACtC,MAAM,qBAAqB,CACzB,IAAI,EACJ,UAAU,EACV,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,CAAC,2BAA2B,EACrE,cAAc,CAAC,gBAAgB,CAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAyB,EACzB,iBAAyB,EACzB,SAAiB,EACjB,SAAiB;IAEjB,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,kEAAkE;QAClE,gEAAgE;QAChE,+CAA+C;QAC/C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,uBAAuB,GAAG,CAAC,EAAY,EAAQ,EAAE;QACrD,IAAI,EAAE,CAAC,EAAE,KAAK,iBAAiB,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,0BAA0B,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;YAChE,OAAO;QACT,CAAC;QACD,EAAE,CAAC,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC;QAC3C,EAAE,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACjC,EAAE,CAAC,UAAU,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QACnD,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAC5D,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,uBAAuB,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAyB,EACzB,UAAkB;IAElB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QACnD,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAC5D,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,IAAI,EAAE,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;oBACzB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,SAAS,SAAS,CAChB,MAAwC,EACxC,KAAa;IAEb,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,CAAW,CAAC;AAC7C,CAAC"}

package/dist/domain/agentexecution/submit-file-decision.d.ts

@@ -0,0 +1,21 @@
+import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import type { SubmitFileDecisionInput } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { AgentExecutionStatusObserver } from "../../extensions/status-hooks.js";
+import type { CallerIdentity } from "../../extensions/identity.js";
+import type { Store } from "../../store/interface.js";
+import type { ExecutionEngineStateProvider } from "./engine.js";
+import type { StreamBroker } from "./stream-broker.js";
+export interface SubmitFileDecisionDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    readonly broker: StreamBroker;
+    readonly engineState: ExecutionEngineStateProvider;
+    /** O4: the stale-workflow reconcile's →FAILED stamp is a notified transition. */
+    readonly statusObservers: ReadonlyArray<AgentExecutionStatusObserver>;
+}
+export declare function submitFileDecision(deps: SubmitFileDecisionDeps, input: SubmitFileDecisionInput, identity: CallerIdentity): Promise<AgentExecution>;
+//# sourceMappingURL=submit-file-decision.d.ts.map

package/dist/domain/agentexecution/submit-file-decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit-file-decision.d.ts","sourceRoot":"","sources":["../../../src/domain/agentexecution/submit-file-decision.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAiBlG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAK1G,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AASrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAehE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,iFAAiF;IACjF,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,4BAA4B,CAAC,CAAC;CACvE;AASD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,cAAc,CAAC,CAwNzB"}