@cat-factory/orchestration 0.123.3 → 0.123.5

package/dist/modules/execution/review-kinds.js

@@ -0,0 +1,241 @@
+import { assertFound, ConflictError } from '@cat-factory/kernel';
+import { bugInvestigation } from '@cat-factory/agents';
+import { BUG_INVESTIGATOR_AGENT_KIND, CLARITY_REVIEW_AGENT_KIND, REQUIREMENTS_REVIEW_AGENT_KIND, } from './ci.logic.js';
+/**
+ * The requirements subject for the review gate: closures over the requirements reviewer
+ * service. The service-not-configured guard preserves the exact 409 the inline reviewer
+ * raised before this extraction.
+ */
+export function buildRequirementsKind(deps) {
+    const require = () => {
+        if (!deps.requirementReviewService?.enabled) {
+            throw new ConflictError('The requirements reviewer is not configured');
+        }
+        return deps.requirementReviewService;
+    };
+    return {
+        agentKind: REQUIREMENTS_REVIEW_AGENT_KIND,
+        entityName: 'Requirement review',
+        enabled: () => !!deps.requirementReviewService?.enabled,
+        getForBlock: (ws, blockId) => require().getForBlock(ws, blockId),
+        review: (ws, block, preset) => require().review(ws, block.id, {
+            maxIterations: preset.maxRequirementIterations,
+            concernThreshold: preset.maxRequirementConcernAllowed,
+        }),
+        reReview: (ws, reviewId, preset) => require().reReview(ws, reviewId, { concernThreshold: preset.maxRequirementConcernAllowed }),
+        incorporate: async (ws, _blockId, reviewId, feedback) => {
+            await require().incorporate(ws, reviewId, { feedback });
+        },
+        markIncorporated: (ws, reviewId) => require().markIncorporated(ws, reviewId),
+        markReReviewing: (ws, reviewId) => require().markReReviewing(ws, reviewId),
+        markIncorporating: (ws, reviewId) => require().markIncorporating(ws, reviewId),
+        grantExtraRound: (ws, reviewId) => require().grantExtraRound(ws, reviewId),
+        prepareRecommendations: (ws, reviewId, items) => require().prepareRecommendations(ws, reviewId, items),
+        markRecommendationPending: (ws, reviewId, recId, note) => require().markRecommendationPending(ws, reviewId, recId, note),
+        fillRecommendations: async (ws, blockId) => {
+            const svc = require();
+            const review = assertFound(await svc.getForBlock(ws, blockId), 'Requirement review', blockId);
+            await svc.fillPendingRecommendations(ws, review.id, {
+                onProgress: (r) => deps.events.requirementReviewChanged?.(ws, r) ?? Promise.resolve(),
+            });
+            return assertFound(await svc.getForBlock(ws, blockId), 'Requirement review', blockId);
+        },
+        autoRecommend: async (ws, blockId) => {
+            const svc = require();
+            const review = assertFound(await svc.getForBlock(ws, blockId), 'Requirement review', blockId);
+            await svc.autoRecommend(ws, review.id, {
+                onProgress: (r) => deps.events.requirementReviewChanged?.(ws, r) ?? Promise.resolve(),
+            });
+        },
+        emit: (ws, review) => deps.events.requirementReviewChanged?.(ws, review) ?? Promise.resolve(),
+    };
+}
+/**
+ * The clarity (bug-report triage) subject for the review gate: threads any upstream
+ * `bug-investigator` output into the reviewer/incorporation context, otherwise identical to
+ * the requirements kind.
+ */
+export function buildClarityKind(deps) {
+    const require = () => {
+        if (!deps.clarityReviewService) {
+            throw new ConflictError('The clarity reviewer is not configured');
+        }
+        return deps.clarityReviewService;
+    };
+    return {
+        agentKind: CLARITY_REVIEW_AGENT_KIND,
+        // Enabled whenever the clarity STORE is wired — the bug-triage seed/auto-pass path is
+        // deterministic (driven by the upstream investigator's structured triage) and needs no
+        // reviewer model, so the gate must activate even with no model configured. The LLM
+        // review/incorporate/re-review paths still resolve their own model (and degrade gracefully
+        // when unwired: no investigation + no model ⇒ the review closure auto-passes).
+        entityName: 'Clarity review',
+        enabled: () => !!deps.clarityReviewService,
+        getForBlock: (ws, blockId) => require().getForBlock(ws, blockId),
+        review: async (ws, block, preset) => {
+            const svc = require();
+            const structured = await structuredInvestigationForBlock(deps, ws, block.id);
+            let review;
+            if (structured) {
+                // An upstream structured `bug-investigator`: seed the gate from its triage — NO reviewer
+                // LLM. `clear` → auto-pass; `needs_clarification` → one blocking finding per question.
+                // The investigator explicitly asked for clarification, so those questions ALWAYS park
+                // for a human — the requirements-review concern tolerance (`maxRequirementConcernAllowed`,
+                // which governs the requirements reviewer, not bug triage) must not silently auto-pass
+                // them — hence a fixed `none` threshold here rather than the preset's.
+                review = await svc.seedReview(ws, block.id, {
+                    clarity: structured.clarity,
+                    questions: structured.questions,
+                    maxIterations: preset.maxRequirementIterations,
+                    concernThreshold: 'none',
+                });
+            }
+            else if (!svc.enabled) {
+                // No structured investigation and no reviewer model: nothing to review against, so
+                // auto-pass (equivalent to the old pass-through when the reviewer wasn't configured).
+                review = await svc.seedReview(ws, block.id, {
+                    clarity: 'clear',
+                    questions: [],
+                    maxIterations: preset.maxRequirementIterations,
+                    concernThreshold: preset.maxRequirementConcernAllowed,
+                });
+            }
+            else {
+                review = await svc.review(ws, block.id, {
+                    maxIterations: preset.maxRequirementIterations,
+                    concernThreshold: preset.maxRequirementConcernAllowed,
+                    investigation: await investigationForBlock(deps, ws, block.id),
+                });
+            }
+            // Whenever the gate parks with open questions — from the deterministic seed OR the LLM
+            // reviewer — best-effort echo them onto the linked tracker issue (answers still arrive
+            // in-app). A settled/auto-passed review echoes nothing; a tracker outage never fails the run.
+            await echoClarityQuestions(deps, ws, block.id, review);
+            return review;
+        },
+        reReview: async (ws, reviewId, preset) => {
+            const svc = require();
+            // No reviewer model wired: a re-review can't run, so settle the loop (converge) instead of
+            // throwing — the deterministic seed path can reach a park with no model configured.
+            if (!svc.enabled)
+                return svc.markIncorporated(ws, reviewId);
+            return svc.reReview(ws, reviewId, { concernThreshold: preset.maxRequirementConcernAllowed });
+        },
+        incorporate: async (ws, blockId, reviewId, feedback) => {
+            const svc = require();
+            // No reviewer model: can't LLM-fold the answers into a clarified report, so settle the
+            // review as-is (the run advances on the raw report + the recorded answers) instead of
+            // throwing — keeps the model-free seed path resolvable.
+            if (!svc.enabled) {
+                await svc.markIncorporated(ws, reviewId);
+                return;
+            }
+            const investigation = await investigationForBlock(deps, ws, blockId);
+            await svc.incorporate(ws, reviewId, { feedback, investigation });
+        },
+        markIncorporated: (ws, reviewId) => require().markIncorporated(ws, reviewId),
+        markReReviewing: (ws, reviewId) => require().markReReviewing(ws, reviewId),
+        markIncorporating: (ws, reviewId) => require().markIncorporating(ws, reviewId),
+        grantExtraRound: (ws, reviewId) => require().grantExtraRound(ws, reviewId),
+        emit: (ws, review) => deps.events.clarityReviewChanged?.(ws, review) ?? Promise.resolve(),
+    };
+}
+/**
+ * A brainstorm (structured-dialogue) subject for the review gate, parameterised by stage.
+ * Otherwise identical to the requirements kind — the service handles its own upstream context
+ * (the architecture stage seeds from the refined requirements). The brainstorm services
+ * resolve their model exactly like the requirements reviewer, so the cap knobs are reused.
+ */
+export function buildBrainstormKind(stage, agentKind, deps) {
+    const require = () => {
+        const svc = deps.brainstormServices?.[stage];
+        if (!svc?.enabled)
+            throw new ConflictError('The brainstorm agent is not configured');
+        return svc;
+    };
+    return {
+        agentKind,
+        entityName: 'Brainstorm session',
+        enabled: () => !!deps.brainstormServices?.[stage]?.enabled,
+        getForBlock: (ws, blockId) => require().getForBlock(ws, blockId),
+        review: (ws, block, preset) => require().review(ws, block.id, {
+            maxIterations: preset.maxRequirementIterations,
+            concernThreshold: preset.maxRequirementConcernAllowed,
+        }),
+        reReview: (ws, reviewId, preset) => require().reReview(ws, reviewId, { concernThreshold: preset.maxRequirementConcernAllowed }),
+        incorporate: async (ws, _blockId, reviewId, feedback) => {
+            await require().incorporate(ws, reviewId, { feedback });
+        },
+        markIncorporated: (ws, reviewId) => require().markIncorporated(ws, reviewId),
+        markReReviewing: (ws, reviewId) => require().markReReviewing(ws, reviewId),
+        markIncorporating: (ws, reviewId) => require().markIncorporating(ws, reviewId),
+        grantExtraRound: (ws, reviewId) => require().grantExtraRound(ws, reviewId),
+        emit: (ws, session) => deps.events.brainstormSessionChanged?.(ws, session) ?? Promise.resolve(),
+    };
+}
+// ---- clarity-review context helpers (bug-report triage) ------------------
+// The clarity gate triages a block's bug report — optionally enriched by an upstream
+// `bug-investigator` step's prose output — through the SAME ReviewGateController flow as
+// requirements; these helpers resolve that investigator output as the triage subject,
+// threaded into the clarity {@link ReviewKind}.
+/** The latest `bug-investigator` step output on a run (the triage subject), or undefined. */
+function investigationFor(instance) {
+    for (let i = instance.steps.length - 1; i >= 0; i--) {
+        const s = instance.steps[i];
+        if (s.agentKind === BUG_INVESTIGATOR_AGENT_KIND && s.output)
+            return s.output;
+    }
+    return undefined;
+}
+/** Resolve a block's investigator output via its current execution (off the gate path). */
+async function investigationForBlock(deps, workspaceId, blockId) {
+    const block = await deps.blockRepository.get(workspaceId, blockId);
+    if (!block?.executionId)
+        return undefined;
+    const instance = await deps.executionRepository.get(workspaceId, block.executionId);
+    return instance ? investigationFor(instance) : undefined;
+}
+/**
+ * The latest `bug-investigator` step's STRUCTURED triage on a run — its `clarity` verdict +
+ * `questions` — parsed leniently from `step.custom`. Drives the clarity gate's seed/auto-pass
+ * (see {@link buildClarityKind}): a structured investigator upstream means the gate seeds its
+ * findings from `questions` (or auto-passes on `clarity === 'clear'`) instead of running its
+ * own reviewer LLM. Undefined when no investigator ran or its result wasn't structured (an
+ * older prose investigator, or an unparseable reply) — the gate then falls back to the LLM path.
+ */
+function structuredInvestigationFor(instance) {
+    for (let i = instance.steps.length - 1; i >= 0; i--) {
+        const s = instance.steps[i];
+        if (s.agentKind !== BUG_INVESTIGATOR_AGENT_KIND || s.custom === undefined)
+            continue;
+        const parsed = bugInvestigation.safeParse(s.custom);
+        if (!parsed)
+            return undefined;
+        return { clarity: parsed.clarity, questions: parsed.questions };
+    }
+    return undefined;
+}
+/** Resolve a block's structured investigator triage via its current execution. */
+async function structuredInvestigationForBlock(deps, workspaceId, blockId) {
+    const block = await deps.blockRepository.get(workspaceId, blockId);
+    if (!block?.executionId)
+        return undefined;
+    const instance = await deps.executionRepository.get(workspaceId, block.executionId);
+    return instance ? structuredInvestigationFor(instance) : undefined;
+}
+/**
+ * Best-effort echo of a parked clarity review's open questions onto the block's linked tracker
+ * issue (see {@link IssueWritebackProvider.postQuestions}). Fires for BOTH the deterministic
+ * investigator seed and the LLM reviewer, so identical human-parked states behave the same. A
+ * settled/auto-passed review (status `incorporated`) or one with no open items echoes nothing,
+ * and a tracker outage never fails the run.
+ */
+async function echoClarityQuestions(deps, workspaceId, blockId, review) {
+    if (!deps.issueWriteback || review.status === 'incorporated')
+        return;
+    const questions = review.items.filter((i) => i.status === 'open').map((i) => i.detail);
+    if (questions.length === 0)
+        return;
+    await deps.issueWriteback.postQuestions(workspaceId, blockId, questions).catch(() => { });
+}
+//# sourceMappingURL=review-kinds.js.map

package/dist/modules/execution/review-kinds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-kinds.js","sourceRoot":"","sources":["../../../src/modules/execution/review-kinds.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAKtD,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,eAAe,CAAA;AAmBtB;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,MAAM,OAAO,GAAG,GAA6B,EAAE;QAC7C,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,OAAO,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,wBAAwB,CAAA;IACtC,CAAC,CAAA;IACD,OAAO;QACL,SAAS,EAAE,8BAA8B;QACzC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,EAAE,OAAO;QACvD,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC;QAChE,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;YAC7B,aAAa,EAAE,MAAM,CAAC,wBAAwB;YAC9C,gBAAgB,EAAE,MAAM,CAAC,4BAA4B;SACtD,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CACjC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,4BAA4B,EAAE,CAAC;QAC7F,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACtD,MAAM,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,gBAAgB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC5E,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC1E,iBAAiB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC9E,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC1E,sBAAsB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAC9C,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;QACvD,yBAAyB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACvD,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;QAChE,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAA;YAC7F,MAAM,GAAG,CAAC,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;gBAClD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;aACtF,CAAC,CAAA;YACF,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAA;QACvF,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAA;YAC7F,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;gBACrC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;aACtF,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;KAC9F,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,OAAO,GAAG,GAAyB,EAAE;QACzC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAA;QACnE,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC,CAAA;IACD,OAAO;QACL,SAAS,EAAE,yBAAyB;QACpC,sFAAsF;QACtF,uFAAuF;QACvF,mFAAmF;QACnF,2FAA2F;QAC3F,+EAA+E;QAC/E,UAAU,EAAE,gBAAgB;QAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB;QAC1C,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC;QAChE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAClC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YAC5E,IAAI,MAAqB,CAAA;YACzB,IAAI,UAAU,EAAE,CAAC;gBACf,yFAAyF;gBACzF,uFAAuF;gBACvF,sFAAsF;gBACtF,2FAA2F;gBAC3F,uFAAuF;gBACvF,uEAAuE;gBACvE,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;oBAC1C,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,aAAa,EAAE,MAAM,CAAC,wBAAwB;oBAC9C,gBAAgB,EAAE,MAAM;iBACzB,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACxB,mFAAmF;gBACnF,sFAAsF;gBACtF,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;oBAC1C,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,MAAM,CAAC,wBAAwB;oBAC9C,gBAAgB,EAAE,MAAM,CAAC,4BAA4B;iBACtD,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;oBACtC,aAAa,EAAE,MAAM,CAAC,wBAAwB;oBAC9C,gBAAgB,EAAE,MAAM,CAAC,4BAA4B;oBACrD,aAAa,EAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;iBAC/D,CAAC,CAAA;YACJ,CAAC;YACD,uFAAuF;YACvF,uFAAuF;YACvF,8FAA8F;YAC9F,MAAM,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACtD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,2FAA2F;YAC3F,oFAAoF;YACpF,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YAC3D,OAAO,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,4BAA4B,EAAE,CAAC,CAAA;QAC9F,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACrD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,uFAAuF;YACvF,sFAAsF;YACtF,wDAAwD;YACxD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;gBACxC,OAAM;YACR,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;YACpE,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,gBAAgB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC5E,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC1E,iBAAiB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC9E,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC1E,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;KAC1F,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,SAAiB,EACjB,IAAoB;IAEpB,MAAM,OAAO,GAAG,GAAsB,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,GAAG,EAAE,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAA;QACpF,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IACD,OAAO;QACL,SAAS;QACT,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO;QAC1D,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC;QAChE,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;YAC7B,aAAa,EAAE,MAAM,CAAC,wBAAwB;YAC9C,gBAAgB,EAAE,MAAM,CAAC,4BAA4B;SACtD,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CACjC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,4BAA4B,EAAE,CAAC;QAC7F,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACtD,MAAM,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,gBAAgB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC5E,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC1E,iBAAiB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC9E,eAAe,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC1E,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;KAChG,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,qFAAqF;AACrF,yFAAyF;AACzF,sFAAsF;AACtF,gDAAgD;AAEhD,6FAA6F;AAC7F,SAAS,gBAAgB,CAAC,QAA2B;IACnD,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAC5B,IAAI,CAAC,CAAC,SAAS,KAAK,2BAA2B,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,CAAA;IAC9E,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,qBAAqB,CAClC,IAAoB,EACpB,WAAmB,EACnB,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,EAAE,WAAW;QAAE,OAAO,SAAS,CAAA;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACnF,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CACjC,QAA2B;IAE3B,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAC5B,IAAI,CAAC,CAAC,SAAS,KAAK,2BAA2B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAQ;QACnF,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;IACjE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,+BAA+B,CAC5C,IAAoB,EACpB,WAAmB,EACnB,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,EAAE,WAAW;QAAE,OAAO,SAAS,CAAA;IACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IACnF,OAAO,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACpE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CACjC,IAAoB,EACpB,WAAmB,EACnB,OAAe,EACf,MAAqB;IAErB,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;QAAE,OAAM;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACtF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAClC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AAC1F,CAAC"}

package/dist/modules/observability/AgentContextObservabilityService.d.ts

@@ -16,6 +16,14 @@ export declare const MAX_AGENT_CONTEXT_CHARS: number;
  * prompts first), so the most useful context survives when the budget is reached.
  */
 export declare const MAX_AGENT_CONTEXT_TOTAL_CHARS: number;
+/**
+ * Stored in place of a secret-bearing file's body. A file whose NAME marks it as a raw
+ * credential store (`.env`, `*.pem`, an SSH key, `.npmrc`, …) has no field-name/URL
+ * scaffolding for {@link redactSecrets}'s pattern rules to latch onto — a bare PEM block or
+ * a `KEY=value` dump would pass through the shape scrub verbatim — so its whole body is
+ * dropped rather than persisted.
+ */
+export declare const SECRET_FILE_PLACEHOLDER = "[REDACTED: secret-shaped file omitted from snapshot]";
 export interface AgentContextObservabilityServiceDependencies {
     agentContextSnapshotRepository: AgentContextSnapshotRepository;
     workspaceSettingsRepository: WorkspaceSettingsRepository;
@@ -53,8 +61,22 @@ export declare class AgentContextObservabilityService implements AgentContextRec
     /**
      * Persist one dispatch's context, assigning its id + timestamp. Returns without
      * storing when prompt recording is disabled deployment-wide or the workspace has
-     * turned `storeAgentContext` off. Bodies are clamped so an oversized prompt/file
-     * never drops the whole snapshot.
+     * turned `storeAgentContext` off.
+     *
+     * Every stored body is a defence-in-depth SECRET SCRUB before it lands in the telemetry
+     * store: prompts, fragment bodies and injected file contents run through
+     * {@link redactSecrets} (a value the dispatch site's allow-list can't fully guarantee is
+     * clean — a task description, a linked doc, or an injected file may embed a token), and a
+     * file whose NAME marks it as a raw credential store ({@link isSecretShapedFilename}) has
+     * its whole body dropped ({@link SECRET_FILE_PLACEHOLDER}), since a bare PEM/`.env` body
+     * has no scaffolding for the shape rules to catch. Scrub happens BEFORE the size budget so
+     * truncation can never split a secret across the cap and defeat the pattern match. Bodies
+     * are then clamped so an oversized prompt/file never drops the whole snapshot.
+     *
+     * The `extras` bag is deep-scrubbed too ({@link redactSecretsDeep}): several of its values
+     * are human-authored free text (the run's decisions, revision feedback) — the SAME token-
+     * in-prose risk as a task description — so every string it carries at any depth is scrubbed
+     * rather than trusting the dispatch-site allow-list to have kept it clean.
      */
     record(input: RecordAgentContextInput): Promise<void>;
     /** Snapshots recorded for a run, newest first (for the observability drill-down). */

package/dist/modules/observability/AgentContextObservabilityService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AgentContextObservabilityService.d.ts","sourceRoot":"","sources":["../../../src/modules/observability/AgentContextObservabilityService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,EAC9B,KAAK,EACL,WAAW,EACX,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,qBAAqB,CAAA;AAG5B;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAa,CAAA;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,QAAkB,CAAA;AA4B5D,MAAM,WAAW,4CAA4C;IAC3D,8BAA8B,EAAE,8BAA8B,CAAA;IAC9D,2BAA2B,EAAE,2BAA2B,CAAA;IACxD,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,gCAAiC,YAAW,oBAAoB;IAC3E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,EACV,8BAA8B,EAC9B,2BAA2B,EAC3B,WAAW,EACX,KAAK,EACL,aAAoB,GACrB,EAAE,4CAA4C,EAM9C;IAED;;;;;OAKG;IACG,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1D;IAED,qFAAqF;IACrF,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAEzF;YAEa,YAAY;CAI3B"}
+{"version":3,"file":"AgentContextObservabilityService.d.ts","sourceRoot":"","sources":["../../../src/modules/observability/AgentContextObservabilityService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,EAC9B,KAAK,EACL,WAAW,EACX,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,qBAAqB,CAAA;AAQ5B;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAa,CAAA;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,QAAkB,CAAA;AAO5D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,yDAAyD,CAAA;AAuB7F,MAAM,WAAW,4CAA4C;IAC3D,8BAA8B,EAAE,8BAA8B,CAAA;IAC9D,2BAA2B,EAAE,2BAA2B,CAAA;IACxD,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,gCAAiC,YAAW,oBAAoB;IAC3E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,EACV,8BAA8B,EAC9B,2BAA2B,EAC3B,WAAW,EACX,KAAK,EACL,aAAoB,GACrB,EAAE,4CAA4C,EAM9C;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACG,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B1D;IAED,qFAAqF;IACrF,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAEzF;YAEa,YAAY;CAI3B"}

package/dist/modules/observability/AgentContextObservabilityService.js

@@ -1,4 +1,4 @@
-import { DEFAULT_WORKSPACE_SETTINGS } from '@cat-factory/kernel';
+import { DEFAULT_WORKSPACE_SETTINGS, isSecretShapedFilename, redactSecrets, redactSecretsDeep, } from '@cat-factory/kernel';
 /**
  * Defensive upper bound (characters) on any single stored body — a prompt or one
  * injected file. Real agent context sits far below this; the cap exists only so a
@@ -21,6 +21,14 @@ function clamp(text) {
         return text;
     return `${text.slice(0, MAX_AGENT_CONTEXT_CHARS)}\n…[truncated ${text.length - MAX_AGENT_CONTEXT_CHARS} chars]`;
 }
+/**
+ * Stored in place of a secret-bearing file's body. A file whose NAME marks it as a raw
+ * credential store (`.env`, `*.pem`, an SSH key, `.npmrc`, …) has no field-name/URL
+ * scaffolding for {@link redactSecrets}'s pattern rules to latch onto — a bare PEM block or
+ * a `KEY=value` dump would pass through the shape scrub verbatim — so its whole body is
+ * dropped rather than persisted.
+ */
+export const SECRET_FILE_PLACEHOLDER = '[REDACTED: secret-shaped file omitted from snapshot]';
 /**
  * A shared character budget for one snapshot. Each call first applies the per-body cap,
  * then trims against the remaining aggregate budget — so the bodies passed earlier (the
@@ -71,8 +79,22 @@ export class AgentContextObservabilityService {
     /**
      * Persist one dispatch's context, assigning its id + timestamp. Returns without
      * storing when prompt recording is disabled deployment-wide or the workspace has
-     * turned `storeAgentContext` off. Bodies are clamped so an oversized prompt/file
-     * never drops the whole snapshot.
+     * turned `storeAgentContext` off.
+     *
+     * Every stored body is a defence-in-depth SECRET SCRUB before it lands in the telemetry
+     * store: prompts, fragment bodies and injected file contents run through
+     * {@link redactSecrets} (a value the dispatch site's allow-list can't fully guarantee is
+     * clean — a task description, a linked doc, or an injected file may embed a token), and a
+     * file whose NAME marks it as a raw credential store ({@link isSecretShapedFilename}) has
+     * its whole body dropped ({@link SECRET_FILE_PLACEHOLDER}), since a bare PEM/`.env` body
+     * has no scaffolding for the shape rules to catch. Scrub happens BEFORE the size budget so
+     * truncation can never split a secret across the cap and defeat the pattern match. Bodies
+     * are then clamped so an oversized prompt/file never drops the whole snapshot.
+     *
+     * The `extras` bag is deep-scrubbed too ({@link redactSecretsDeep}): several of its values
+     * are human-authored free text (the run's decisions, revision feedback) — the SAME token-
+     * in-prose risk as a task description — so every string it carries at any depth is scrubbed
+     * rather than trusting the dispatch-site allow-list to have kept it clean.
      */
     async record(input) {
         if (!this.recordPrompts)
@@ -82,14 +104,24 @@ export class AgentContextObservabilityService {
         // One shared budget per snapshot, consumed prompts-first so the most useful context
         // survives if a dispatch injects an unusual amount of file content.
         const budget = makeBudget();
+        // Scrub credentials, THEN clamp — a truncated body must never hide a half-cut secret.
+        const scrub = (text) => budget(redactSecrets(text) ?? '');
         const snapshot = {
             ...input,
             id: this.idGenerator.next('ctx'),
             createdAt: this.clock.now(),
-            systemPrompt: budget(input.systemPrompt),
-            userPrompt: budget(input.userPrompt),
-            fragments: input.fragments.map((f) => ({ id: f.id, body: budget(f.body) })),
-            contextFiles: input.contextFiles.map((f) => ({ ...f, content: budget(f.content) })),
+            systemPrompt: scrub(input.systemPrompt),
+            userPrompt: scrub(input.userPrompt),
+            fragments: input.fragments.map((f) => ({ id: f.id, body: scrub(f.body) })),
+            contextFiles: input.contextFiles.map((f) => ({
+                ...f,
+                content: isSecretShapedFilename(f.path)
+                    ? budget(SECRET_FILE_PLACEHOLDER)
+                    : scrub(f.content),
+            })),
+            // Structural bits, but some values (decisions, revision feedback) are free-text prose
+            // that can embed a token — scrub every string in the bag, not just the known bodies.
+            extras: redactSecretsDeep(input.extras),
         };
         await this.repository.record(snapshot);
     }

package/dist/modules/observability/AgentContextObservabilityService.js.map

@@ -1 +1 @@
-{"version":3,"file":"AgentContextObservabilityService.js","sourceRoot":"","sources":["../../../src/modules/observability/AgentContextObservabilityService.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAA;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAE5D,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,IAAI,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,IAAI,CAAA;IACvD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,iBAAiB,IAAI,CAAC,MAAM,GAAG,uBAAuB,SAAS,CAAA;AACjH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAAK,GAAG,6BAA6B;IACvD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,OAAO,CAAC,IAAY,EAAU,EAAE;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,SAAS,IAAI,MAAM,CAAC,MAAM,CAAA;YAC1B,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACrD,SAAS,GAAG,CAAC,CAAA;QACb,OAAO,GAAG,KAAK,8CAA8C,CAAA;IAC/D,CAAC,CAAA;AACH,CAAC;AAgBD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,gCAAgC;IAC1B,UAAU,CAAgC;IAC1C,QAAQ,CAA6B;IACrC,WAAW,CAAa;IACxB,KAAK,CAAO;IACZ,aAAa,CAAS;IAEvC,YAAY,EACV,8BAA8B,EAC9B,2BAA2B,EAC3B,WAAW,EACX,KAAK,EACL,aAAa,GAAG,IAAI,GACyB;QAC7C,IAAI,CAAC,UAAU,GAAG,8BAA8B,CAAA;QAChD,IAAI,CAAC,QAAQ,GAAG,2BAA2B,CAAA;QAC3C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAM;QAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAE,OAAM;QACzD,oFAAoF;QACpF,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,QAAQ,GAAyB;YACrC,GAAG,KAAK;YACR,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YACxC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3E,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACpF,CAAA;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,qFAAqF;IACrF,eAAe,CAAC,WAAmB,EAAE,WAAmB;QACtD,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAClE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,WAAmB;QAC5C,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,0BAA0B,CAAA;QACrF,OAAO,QAAQ,CAAC,iBAAiB,CAAA;IACnC,CAAC;CACF"}
+{"version":3,"file":"AgentContextObservabilityService.js","sourceRoot":"","sources":["../../../src/modules/observability/AgentContextObservabilityService.ts"],"names":[],"mappings":"AASA,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,aAAa,EACb,iBAAiB,GAClB,MAAM,qBAAqB,CAAA;AAE5B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAA;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAE5D,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,IAAI,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO,IAAI,CAAA;IACvD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,iBAAiB,IAAI,CAAC,MAAM,GAAG,uBAAuB,SAAS,CAAA;AACjH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sDAAsD,CAAA;AAE7F;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAAK,GAAG,6BAA6B;IACvD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,OAAO,CAAC,IAAY,EAAU,EAAE;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,SAAS,IAAI,MAAM,CAAC,MAAM,CAAA;YAC1B,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACrD,SAAS,GAAG,CAAC,CAAA;QACb,OAAO,GAAG,KAAK,8CAA8C,CAAA;IAC/D,CAAC,CAAA;AACH,CAAC;AAgBD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,gCAAgC;IAC1B,UAAU,CAAgC;IAC1C,QAAQ,CAA6B;IACrC,WAAW,CAAa;IACxB,KAAK,CAAO;IACZ,aAAa,CAAS;IAEvC,YAAY,EACV,8BAA8B,EAC9B,2BAA2B,EAC3B,WAAW,EACX,KAAK,EACL,aAAa,GAAG,IAAI,GACyB;QAC7C,IAAI,CAAC,UAAU,GAAG,8BAA8B,CAAA;QAChD,IAAI,CAAC,QAAQ,GAAG,2BAA2B,CAAA;QAC3C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAM;QAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAE,OAAM;QACzD,oFAAoF;QACpF,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,sFAAsF;QACtF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACzE,MAAM,QAAQ,GAAyB;YACrC,GAAG,KAAK;YACR,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAChC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;YACvC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1E,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,GAAG,CAAC;gBACJ,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;oBACrC,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC;oBACjC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;aACrB,CAAC,CAAC;YACH,sFAAsF;YACtF,qFAAqF;YACrF,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;SACxC,CAAA;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,qFAAqF;IACrF,eAAe,CAAC,WAAmB,EAAE,WAAmB;QACtD,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAClE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,WAAmB;QAC5C,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,0BAA0B,CAAA;QACrF,OAAO,QAAQ,CAAC,iBAAiB,CAAA;IACnC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/orchestration",
-  "version": "0.123.3",
+  "version": "0.123.5",
   "description": "Delivery-workflow engine for the Agent Architecture Board (execution, bootstrap, pipelines, board, boardScan, requirements, and composition root).",
   "repository": {
     "type": "git",
@@ -25,20 +25,20 @@
   },
   "dependencies": {
     "ai": "^6.0.230",
-    "@cat-factory/agents": "0.62.11",
-    "@cat-factory/caching": "0.10.8",
-    "@cat-factory/contracts": "0.148.0",
-    "@cat-factory/integrations": "0.86.3",
-    "@cat-factory/kernel": "0.139.3",
-    "@cat-factory/prompt-fragments": "0.13.38",
-    "@cat-factory/sandbox": "0.9.102",
-    "@cat-factory/spend": "0.12.52",
-    "@cat-factory/workspaces": "0.16.5"
+    "@cat-factory/agents": "0.62.12",
+    "@cat-factory/caching": "0.10.9",
+    "@cat-factory/contracts": "0.148.1",
+    "@cat-factory/integrations": "0.86.4",
+    "@cat-factory/kernel": "0.140.0",
+    "@cat-factory/prompt-fragments": "0.13.39",
+    "@cat-factory/sandbox": "0.9.103",
+    "@cat-factory/spend": "0.12.53",
+    "@cat-factory/workspaces": "0.16.6"
   },
   "devDependencies": {
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
-    "@cat-factory/sandbox-fixtures": "0.7.173"
+    "@cat-factory/sandbox-fixtures": "0.7.174"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",