@cat-factory/executor-harness 1.124.0 → 1.127.1

package/dist/agent.js

@@ -246,7 +246,7 @@ export async function handleAgent(job, opts = {}) {
         // mode check here would be that decision made twice, in the half that cannot see the registry.
         const scoped = withAgentEnv(opts, {
             ...registryEnv,
-            ...secretEnv(job.generatorSecrets),
+            ...secretEnv(job.capabilitySecrets),
             ...artifactUploadEnv(job.artifactUpload),
         });
         if (job.mode === 'preview')

package/dist/job-env.d.ts

@@ -35,7 +35,7 @@ export interface TestSecretSpec {
 }
 /**
  * Validate a `{ key, value }` env-pair list under `field`. Shared by the tester's `testSecrets`
- * and by `generatorSecrets` (the credentials of a step's generative binary integrations), because
+ * and by `capabilitySecrets` (the credentials of a step's generative binary integrations), because
  * both are secret values the harness turns into environment variables of the agent's own process
  * and both owe the same guarantees: valid env-var names, no toolchain-critical
  * ({@link isReservedEnvName}) names, no duplicates. A second copy of these rules would be a second

package/dist/job-env.js

@@ -1,6 +1,6 @@
 // The primitive VALUE rules of the untrusted job body: what counts as a required string, which
 // environment-variable names a body may never set, and how the two env-bearing fields (the
-// tester's `testSecrets`, a generative integration's `generatorSecrets`, and a frontend binding's
+// tester's `testSecrets`, a generative integration's `capabilitySecrets`, and a frontend binding's
 // `env`) are parsed against those rules.
 //
 // Extracted from `job.ts` when the generative-integration credentials arrived (the file-size
@@ -77,7 +77,7 @@ export function parseInfraEnv(raw) {
 const ENV_VAR_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
 /**
  * Validate a `{ key, value }` env-pair list under `field`. Shared by the tester's `testSecrets`
- * and by `generatorSecrets` (the credentials of a step's generative binary integrations), because
+ * and by `capabilitySecrets` (the credentials of a step's generative binary integrations), because
  * both are secret values the harness turns into environment variables of the agent's own process
  * and both owe the same guarantees: valid env-var names, no toolchain-critical
  * ({@link isReservedEnvName}) names, no duplicates. A second copy of these rules would be a second

package/dist/job.d.ts

@@ -404,7 +404,7 @@ export interface AgentJob extends HarnessAuthFields {
      * registration resolved per dispatch. Absent ⇒ no integration declared a credential, or none
      * resolved (which the agent is told to report rather than work around).
      */
-    generatorSecrets?: TestSecretSpec[];
+    capabilitySecrets?: TestSecretSpec[];
     /**
      * Explore mode: stand the service's dependencies up before the agent runs (the
      * tester). Brings the docker-compose infra up on localhost for the duration of the

package/dist/job.js

@@ -489,7 +489,7 @@ export function parseAgentJob(input) {
         skills: parseSkillSpecs(o.skills),
         mcpServers: parseMcpServerSpecs(o.mcpServers),
         testSecrets: parseSecretEnvPairs(o.testSecrets, 'testSecrets'),
-        generatorSecrets: parseSecretEnvPairs(o.generatorSecrets, 'generatorSecrets'),
+        capabilitySecrets: parseSecretEnvPairs(o.capabilitySecrets, 'capabilitySecrets'),
         guardLimits: parseGuardLimits(o.guardLimits),
         validation: parseValidationSpec(o.validation),
         validationChecks: parseValidationChecksSpec(o.validationChecks),
@@ -551,7 +551,7 @@ function parseAgentPrSpec(raw) {
  * literal doesn't blow the complexity budget; behaviour is byte-identical (spread order preserved).
  */
 function assembleAgentJob(o, mode, agentField, parts) {
-    const { output, pr, infra, peerRepos, referenceRepos, referenceBranches, bootstrap, contextFiles, referenceScreenshots, designImages, artifactUpload, packageRegistries, skills, mcpServers, testSecrets, guardLimits, validation, validationChecks, reproduction, dependencyInstall, reviewPrNumber, generatorSecrets, } = parts;
+    const { output, pr, infra, peerRepos, referenceRepos, referenceBranches, bootstrap, contextFiles, referenceScreenshots, designImages, artifactUpload, packageRegistries, skills, mcpServers, testSecrets, guardLimits, validation, validationChecks, reproduction, dependencyInstall, reviewPrNumber, capabilitySecrets, } = parts;
     const repo = (o.repo ?? {});
     return {
         jobId: str(o.jobId, 'jobId'),
@@ -574,7 +574,7 @@ function assembleAgentJob(o, mode, agentField, parts) {
         ...(skills ? { skills } : {}),
         ...(mcpServers ? { mcpServers } : {}),
         ...(testSecrets.length ? { testSecrets } : {}),
-        ...(generatorSecrets.length ? { generatorSecrets } : {}),
+        ...(capabilitySecrets.length ? { capabilitySecrets } : {}),
         ...(infra ? { infra } : {}),
         ...(pr ? { pr } : {}),
         ...(peerRepos.length ? { peerRepos } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/executor-harness",
-  "version": "1.124.0",
+  "version": "1.127.1",
   "description": "Container payload: a thin TypeScript wrapper that runs the Pi coding agent against a cloned repo and opens a PR. Runs in the Cloudflare Container (and, in local native mode, as a host process); carries no secrets.",
   "repository": {
     "type": "git",
@@ -25,14 +25,14 @@
     "access": "public"
   },
   "devDependencies": {
-    "@hono/node-server": "^2.1.0",
+    "@hono/node-server": "^2.1.1",
     "@types/node": "^26.2.0",
-    "hono": "^4.13.1",
+    "hono": "^4.13.3",
     "typescript": "7.0.2",
-    "vitest": "^4.1.10",
-    "@cat-factory/kernel": "0.307.0",
-    "@cat-factory/server": "0.292.0",
-    "@cat-factory/spend": "0.15.101"
+    "vitest": "^4.1.11",
+    "@cat-factory/kernel": "0.314.1",
+    "@cat-factory/server": "0.299.1",
+    "@cat-factory/spend": "0.16.7"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",

package/src/agent.ts

@@ -323,7 +323,7 @@ export async function handleAgent(job: AgentJob, opts: RunOptions = {}): Promise
     // mode check here would be that decision made twice, in the half that cannot see the registry.
     const scoped = withAgentEnv(opts, {
       ...registryEnv,
-      ...secretEnv(job.generatorSecrets),
+      ...secretEnv(job.capabilitySecrets),
       ...artifactUploadEnv(job.artifactUpload),
     })
     if (job.mode === 'preview') return await runPreviewMode(job, scoped)

package/src/job-env.ts

@@ -1,6 +1,6 @@
 // The primitive VALUE rules of the untrusted job body: what counts as a required string, which
 // environment-variable names a body may never set, and how the two env-bearing fields (the
-// tester's `testSecrets`, a generative integration's `generatorSecrets`, and a frontend binding's
+// tester's `testSecrets`, a generative integration's `capabilitySecrets`, and a frontend binding's
 // `env`) are parsed against those rules.
 //
 // Extracted from `job.ts` when the generative-integration credentials arrived (the file-size
@@ -93,7 +93,7 @@ const ENV_VAR_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/
 
 /**
  * Validate a `{ key, value }` env-pair list under `field`. Shared by the tester's `testSecrets`
- * and by `generatorSecrets` (the credentials of a step's generative binary integrations), because
+ * and by `capabilitySecrets` (the credentials of a step's generative binary integrations), because
  * both are secret values the harness turns into environment variables of the agent's own process
  * and both owe the same guarantees: valid env-var names, no toolchain-critical
  * ({@link isReservedEnvName}) names, no duplicates. A second copy of these rules would be a second

package/src/job.ts

@@ -801,7 +801,7 @@ export interface AgentJob extends HarnessAuthFields {
    * registration resolved per dispatch. Absent ⇒ no integration declared a credential, or none
    * resolved (which the agent is told to report rather than work around).
    */
-  generatorSecrets?: TestSecretSpec[]
+  capabilitySecrets?: TestSecretSpec[]
   /**
    * Explore mode: stand the service's dependencies up before the agent runs (the
    * tester). Brings the docker-compose infra up on localhost for the duration of the
@@ -1263,7 +1263,7 @@ export function parseAgentJob(input: unknown): AgentJob {
     skills: parseSkillSpecs(o.skills),
     mcpServers: parseMcpServerSpecs(o.mcpServers),
     testSecrets: parseSecretEnvPairs(o.testSecrets, 'testSecrets'),
-    generatorSecrets: parseSecretEnvPairs(o.generatorSecrets, 'generatorSecrets'),
+    capabilitySecrets: parseSecretEnvPairs(o.capabilitySecrets, 'capabilitySecrets'),
     guardLimits: parseGuardLimits(o.guardLimits),
     validation: parseValidationSpec(o.validation),
     validationChecks: parseValidationChecksSpec(o.validationChecks),
@@ -1308,7 +1308,7 @@ interface ParsedAgentJobParts {
   skills: ReturnType<typeof parseSkillSpecs>
   mcpServers: ReturnType<typeof parseMcpServerSpecs>
   testSecrets: ReturnType<typeof parseSecretEnvPairs>
-  generatorSecrets: ReturnType<typeof parseSecretEnvPairs>
+  capabilitySecrets: ReturnType<typeof parseSecretEnvPairs>
   guardLimits: ReturnType<typeof parseGuardLimits>
   validation: ReturnType<typeof parseValidationSpec>
   validationChecks: ReturnType<typeof parseValidationChecksSpec>
@@ -1374,7 +1374,7 @@ function assembleAgentJob(
     reproduction,
     dependencyInstall,
     reviewPrNumber,
-    generatorSecrets,
+    capabilitySecrets,
   } = parts
   const repo = (o.repo ?? {}) as Record<string, unknown>
   return {
@@ -1398,7 +1398,7 @@ function assembleAgentJob(
     ...(skills ? { skills } : {}),
     ...(mcpServers ? { mcpServers } : {}),
     ...(testSecrets.length ? { testSecrets } : {}),
-    ...(generatorSecrets.length ? { generatorSecrets } : {}),
+    ...(capabilitySecrets.length ? { capabilitySecrets } : {}),
     ...(infra ? { infra } : {}),
     ...(pr ? { pr } : {}),
     ...(peerRepos.length ? { peerRepos } : {}),