@cat-factory/orchestration 0.177.1 → 0.179.0

package/dist/modules/execution/dispatchPromptSettings.d.ts

@@ -0,0 +1,43 @@
+import type { AgentPromptRepository, Logger, PipelineStep, WorkspaceAgentSettingsRepository } from '@cat-factory/kernel';
+import type { AgentKindRegistry } from '@cat-factory/agents';
+/** The narrow slice of the builder's dependencies these two resolvers need. */
+export interface DispatchPromptSettingsDeps {
+    agentKindRegistry: AgentKindRegistry;
+    /** The append-only per-workspace prompt log. Absent ⇒ the override feature is not wired. */
+    agentPrompts?: AgentPromptRepository;
+    /** The per-workspace, per-kind generation settings. Absent ⇒ the feature is not wired. */
+    agentSettings?: WorkspaceAgentSettingsRepository;
+    logger?: Logger;
+}
+/**
+ * The base system prompt this dispatch replaces the shipped one with, or undefined to run the
+ * shipped one. Two tiers converge here — the deployment's registered agent-kind VARIANT for this
+ * step and the WORKSPACE's edited prompt for the kind — because they are the same unit of text.
+ *
+ * The head revision's `text` is `null` when the workspace deliberately went BACK to the built-in —
+ * a real state, distinct from never having edited the kind, which is why it is recorded rather than
+ * deleted. Both resolve to "no override" here, so a revert keeps tracking the shipped prompt as the
+ * product bumps it instead of pinning a stale copy.
+ *
+ * MUTATES the step to pin what it resolved (`promptRevision`, `promptVariant`), because neither can
+ * be re-derived afterwards: the prompt log is append-only, so re-reading it at any later point — a
+ * Kaizen grading, a debug read, a post-mortem — would answer about whatever landed since. The
+ * VARIANT is pinned for a second reason: `stepOptions.agentVariantId` is what the pipeline ASKED
+ * for, and a workspace override or a withdrawal can mean the variant's text never reached the
+ * prompt, so only a pin taken HERE can answer what the step actually ran under.
+ */
+export declare function resolveDispatchSystemPrompt(deps: DispatchPromptSettingsDeps, workspaceId: string, agentKind: string, step: PipelineStep): Promise<{
+    systemPromptOverride?: string;
+}>;
+/**
+ * The output-token ceiling this dispatch runs under, or undefined to run the deployment routing
+ * default.
+ *
+ * NARROWEST TIER WINS: the step's own `stepOptions.maxOutputTokens` beats the workspace's per-kind
+ * setting, which beats the deployment routing ceiling. The step value is read WITHOUT touching the
+ * repository, so a pipeline that pins its own budget costs no query.
+ */
+export declare function resolveDispatchMaxOutputTokens(deps: DispatchPromptSettingsDeps, workspaceId: string, agentKind: string, step: PipelineStep): Promise<{
+    maxOutputTokens?: number;
+}>;
+//# sourceMappingURL=dispatchPromptSettings.d.ts.map

package/dist/modules/execution/dispatchPromptSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchPromptSettings.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/dispatchPromptSettings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,MAAM,EACN,YAAY,EACZ,gCAAgC,EACjC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAsB5D,+EAA+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,4FAA4F;IAC5F,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,0FAA0F;IAC1F,aAAa,CAAC,EAAE,gCAAgC,CAAA;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,0BAA0B,EAChC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC;IAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+C5C;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,0BAA0B,EAChC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAKvC"}

package/dist/modules/execution/dispatchPromptSettings.js

@@ -0,0 +1,76 @@
+import { applyAgentVariant, shippedBasePromptFor } from '@cat-factory/agents';
+/**
+ * The base system prompt this dispatch replaces the shipped one with, or undefined to run the
+ * shipped one. Two tiers converge here — the deployment's registered agent-kind VARIANT for this
+ * step and the WORKSPACE's edited prompt for the kind — because they are the same unit of text.
+ *
+ * The head revision's `text` is `null` when the workspace deliberately went BACK to the built-in —
+ * a real state, distinct from never having edited the kind, which is why it is recorded rather than
+ * deleted. Both resolve to "no override" here, so a revert keeps tracking the shipped prompt as the
+ * product bumps it instead of pinning a stale copy.
+ *
+ * MUTATES the step to pin what it resolved (`promptRevision`, `promptVariant`), because neither can
+ * be re-derived afterwards: the prompt log is append-only, so re-reading it at any later point — a
+ * Kaizen grading, a debug read, a post-mortem — would answer about whatever landed since. The
+ * VARIANT is pinned for a second reason: `stepOptions.agentVariantId` is what the pipeline ASKED
+ * for, and a workspace override or a withdrawal can mean the variant's text never reached the
+ * prompt, so only a pin taken HERE can answer what the step actually ran under.
+ */
+export async function resolveDispatchSystemPrompt(deps, workspaceId, agentKind, step) {
+    const head = await deps.agentPrompts?.head(workspaceId, agentKind);
+    // Cleared, not left stale: a re-dispatch after the workspace reverted must not keep reporting
+    // the revision the previous attempt ran under.
+    step.promptRevision = head?.text ? head.revision : undefined;
+    // The variant applies only when the kind being dispatched IS the step's own — a helper dispatched
+    // off this step (a gate's fixer, the fork proposer) is a different agent and must not inherit the
+    // step's alternate prompt. Same rule as `followUpCompanion`.
+    const variantId = agentKind === step.agentKind ? step.stepOptions?.agentVariantId : undefined;
+    const variant = variantId ? deps.agentKindRegistry.variant(variantId) : undefined;
+    // A variant the deployment has since withdrawn: the step runs the SHIPPED prompt, which is the
+    // safe disposition, but it is not what the pipeline asked for — so say so rather than let a step
+    // quietly stop being the variation someone configured.
+    if (variantId && !variant) {
+        deps.logger?.warn('Agent kind variant is not registered; running the shipped prompt', {
+            agentKind,
+            variantId,
+        });
+    }
+    const { prompt, applied, fingerprint } = applyAgentVariant(
+    // Only paid for when a variant is actually selected; the shipped prompt is what its addition
+    // folds onto and what its replacement is measured against.
+    variant ? shippedBasePromptFor(agentKind, deps.agentKindRegistry) : '', variant, head?.text ?? undefined);
+    // The workspace out-ranks the deployment on the same unit of text, so its edit DISPLACES a
+    // variant's replacement. That is the intended precedence, but it is a silent loss of something a
+    // deployment configured in code — the one disposition here with no other symptom — so it is
+    // reported at the fold, exactly as a withdrawal is above.
+    if (applied === 'superseded' || applied === 'addition-only') {
+        deps.logger?.warn("Workspace prompt override displaced the agent variant's own prompt for this dispatch", { agentKind, variantId, promptRevision: step.promptRevision, applied });
+    }
+    // What the dispatch DID with the step's selected variant, so a later reader is never told a step
+    // ran a variation whose text never reached it. Cleared, not left stale, for the same reason
+    // `promptRevision` is: a re-dispatch resolves it afresh.
+    step.promptVariant = variantId
+        ? {
+            id: variantId,
+            applied: variant ? applied : 'withdrawn',
+            ...(fingerprint ? { fingerprint } : {}),
+        }
+        : undefined;
+    return prompt ? { systemPromptOverride: prompt } : {};
+}
+/**
+ * The output-token ceiling this dispatch runs under, or undefined to run the deployment routing
+ * default.
+ *
+ * NARROWEST TIER WINS: the step's own `stepOptions.maxOutputTokens` beats the workspace's per-kind
+ * setting, which beats the deployment routing ceiling. The step value is read WITHOUT touching the
+ * repository, so a pipeline that pins its own budget costs no query.
+ */
+export async function resolveDispatchMaxOutputTokens(deps, workspaceId, agentKind, step) {
+    const fromStep = step.stepOptions?.maxOutputTokens;
+    if (fromStep != null)
+        return { maxOutputTokens: fromStep };
+    const configured = await deps.agentSettings?.get(workspaceId, agentKind);
+    return configured?.maxOutputTokens != null ? { maxOutputTokens: configured.maxOutputTokens } : {};
+}
+//# sourceMappingURL=dispatchPromptSettings.js.map

package/dist/modules/execution/dispatchPromptSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchPromptSettings.js","sourceRoot":"","sources":["../../../src/modules/execution/dispatchPromptSettings.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AA+B7E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAgC,EAChC,WAAmB,EACnB,SAAiB,EACjB,IAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAClE,8FAA8F;IAC9F,+CAA+C;IAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,kGAAkG;IAClG,kGAAkG;IAClG,6DAA6D;IAC7D,MAAM,SAAS,GAAG,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7F,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACjF,+FAA+F;IAC/F,iGAAiG;IACjG,uDAAuD;IACvD,IAAI,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kEAAkE,EAAE;YACpF,SAAS;YACT,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB;IACxD,6FAA6F;IAC7F,2DAA2D;IAC3D,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EACtE,OAAO,EACP,IAAI,EAAE,IAAI,IAAI,SAAS,CACxB,CAAA;IACD,2FAA2F;IAC3F,iGAAiG;IACjG,4FAA4F;IAC5F,0DAA0D;IAC1D,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,sFAAsF,EACtF,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CACvE,CAAA;IACH,CAAC;IACD,iGAAiG;IACjG,4FAA4F;IAC5F,yDAAyD;IACzD,IAAI,CAAC,aAAa,GAAG,SAAS;QAC5B,CAAC,CAAC;YACE,EAAE,EAAE,SAAS;YACb,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YACxC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,IAAgC,EAChC,WAAmB,EACnB,SAAiB,EACjB,IAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAA;IAClD,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAA;IAC1D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IACxE,OAAO,UAAU,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACnG,CAAC"}

package/dist/modules/execution/job-facts.d.ts

@@ -0,0 +1,12 @@
+import type { PipelineStep } from '@cat-factory/contracts';
+import type { AgentRunResult, Clock, ExecutionInstance } from '@cat-factory/kernel';
+import type { SpendService } from '@cat-factory/spend';
+import type { AgentContextBuilder } from './AgentContextBuilder.js';
+export interface JobFactsDeps {
+    clock: Clock;
+    spend: SpendService;
+    contextBuilder: AgentContextBuilder;
+}
+/** Record the facts the just-settled job reported. See the module note for the ordering rule. */
+export declare function recordJobFacts(deps: JobFactsDeps, workspaceId: string, instance: ExecutionInstance, step: PipelineStep, result: AgentRunResult): Promise<void>;
+//# sourceMappingURL=job-facts.d.ts.map

package/dist/modules/execution/job-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-facts.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/job-facts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAiBnE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,YAAY,CAAA;IACnB,cAAc,EAAE,mBAAmB,CAAA;CACpC;AAED,iGAAiG;AACjG,wBAAsB,cAAc,CAClC,IAAI,EAAE,YAAY,EAClB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAgDf"}

package/dist/modules/execution/job-facts.js

@@ -0,0 +1,50 @@
+import { applyValidationReport } from './validation.logic.js';
+import { recordReproductionOutcome } from './reproductionProof.logic.js';
+/** Record the facts the just-settled job reported. See the module note for the ordering rule. */
+export async function recordJobFacts(deps, workspaceId, instance, step, result) {
+    // The container agent's effort self-assessment (how hard the work was, what reduced its
+    // effectiveness, the obstacles it hit) describes the JOB THAT JUST RAN, so record it before
+    // any of the paths below can return early — exactly like the usage metering under it. It
+    // used to sit with the normal completion further down, which meant every kind whose verdict
+    // drives run flow silently dropped it: a `pr-reviewer` parking on its findings, a container
+    // companion applying its verdict, the fork proposer, a Tester withholding its greenlight, a
+    // step raising a human decision. Those are the runs whose self-assessment is most worth
+    // reading, and none of them ever reaches the normal completion with the result in hand.
+    if (result.effortReport)
+        step.effortReport = result.effortReport;
+    // The FOUNDATIONAL SERVICES this step's design declared, read out of the reply it just
+    // returned. Recorded HERE, beside the effort report, for the same reason: every path below can
+    // return early (a raised decision, a companion applying a rework loop), and a design step that
+    // parks would otherwise lose its declaration — every consumer then reads "nothing was checked".
+    // Read back by the context BUILDER, which handed the design its catalog and already holds the
+    // resolver + registry, so the completion hub takes no dependency of its own for it.
+    await deps.contextBuilder.recordFoundationalDeclaration(workspaceId, step, result.output);
+    // The pre-PR validation report of a coding step whose service configured checks — recorded
+    // here for the same reason as the effort report above: it describes the JOB THAT JUST RAN,
+    // so it must land before any early-returning path below. On this (successful) path it is
+    // the captured proof the checkout was green BEFORE the PR opened; the failed path records
+    // it in `PollCompletionController.handleFailedPoll`.
+    applyValidationReport(step, result.validationReport);
+    // The BUGFIX REPRODUCTION PROOF of a coding step — the harness's verdict, or (for a run whose
+    // reproduction step conceded, which dispatches no proof at all) the structural infeasibility
+    // declaration the engine mints itself. Recorded here for the same reason as the validation
+    // report above: it describes the JOB THAT JUST RAN, so it must land before any early return.
+    recordReproductionOutcome(step, result.reproductionReport, instance, deps.clock.now());
+    // Meter the LLM call into the usage ledger. Recorded whether the step completed or
+    // raised a decision — both consumed tokens. A subscription-harness result is tagged
+    // `'subscription'` so it's counted for the usage report but EXCLUDED from the budget
+    // rollups (a flat-rate quota plan costs nothing per token); an inline metered call
+    // defaults to `'metered'` and is summed by the spend gate as before.
+    if (result.usage) {
+        await deps.spend.record({
+            workspaceId,
+            executionId: instance.id,
+            agentKind: step.agentKind,
+            model: result.model ?? 'unknown',
+            usage: result.usage,
+            billing: result.usageBilling ?? 'metered',
+            vendor: result.usageVendor ?? null,
+        });
+    }
+}
+//# sourceMappingURL=job-facts.js.map

package/dist/modules/execution/job-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-facts.js","sourceRoot":"","sources":["../../../src/modules/execution/job-facts.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAqBxE,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAkB,EAClB,WAAmB,EACnB,QAA2B,EAC3B,IAAkB,EAClB,MAAsB;IAEtB,wFAAwF;IACxF,4FAA4F;IAC5F,yFAAyF;IACzF,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,wFAAwF;IACxF,wFAAwF;IACxF,IAAI,MAAM,CAAC,YAAY;QAAE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;IAEhE,uFAAuF;IACvF,+FAA+F;IAC/F,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,oFAAoF;IACpF,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAEzF,2FAA2F;IAC3F,2FAA2F;IAC3F,yFAAyF;IACzF,0FAA0F;IAC1F,qDAAqD;IACrD,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEpD,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,6FAA6F;IAC7F,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IAEtF,mFAAmF;IACnF,oFAAoF;IACpF,qFAAqF;IACrF,mFAAmF;IACnF,qEAAqE;IACrE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW;YACX,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,SAAS;YACzC,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;SACnC,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}

package/dist/modules/execution/run-context-admission.d.ts

@@ -17,7 +17,7 @@ import type { ExecutionServiceDependencies } from './ExecutionService.js';
  * value the constructor passed inline, so the two collaborators are built from an identical
  * input to before.
  */
-export type RunContextAdmissionDeps = Pick<ExecutionServiceDependencies, 'workspaceRepository' | 'blockRepository' | 'executionRepository' | 'accountRepository' | 'agentKindRegistry' | 'initiativePresetRegistry' | 'agentPromptRepository' | 'consensusGroupRepository' | 'documentRepository' | 'documentUrlResolver' | 'taskRepository' | 'requirementReviewRepository' | 'docInterviewRepository' | 'clarityReviewRepository' | 'brainstormSessionRepository' | 'initiativeRepository' | 'environmentProvisioning' | 'resolveTestSecretRefs' | 'resolveValidationChecks' | 'fragmentResolver' | 'skillResolver' | 'spendService' | 'workspaceSettingsService' | 'resolveBinaryArtifactStore' | 'resolveProviderCapabilities' | 'inlineHarnessRef' | 'resolveWorkspaceModelDefault' | 'assertAgentBackendConfigured' | 'logger' | 'workspaceAgentSettingsRepository'>;
+export type RunContextAdmissionDeps = Pick<ExecutionServiceDependencies, 'workspaceRepository' | 'blockRepository' | 'executionRepository' | 'accountRepository' | 'agentKindRegistry' | 'initiativePresetRegistry' | 'agentPromptRepository' | 'consensusGroupRepository' | 'documentRepository' | 'documentUrlResolver' | 'taskRepository' | 'requirementReviewRepository' | 'docInterviewRepository' | 'clarityReviewRepository' | 'brainstormSessionRepository' | 'initiativeRepository' | 'environmentProvisioning' | 'resolveTestSecretRefs' | 'resolveValidationChecks' | 'fragmentResolver' | 'skillResolver' | 'spendService' | 'workspaceSettingsService' | 'resolveBinaryArtifactStore' | 'resolveProviderCapabilities' | 'inlineHarnessRef' | 'resolveWorkspaceModelDefault' | 'assertAgentBackendConfigured' | 'logger' | 'workspaceAgentSettingsRepository' | 'foundationalServiceResolver'>;
 export declare function buildRunContextAndAdmission(deps: RunContextAdmissionDeps): {
     contextBuilder: AgentContextBuilder;
     admission: RunAdmission;

package/dist/modules/execution/run-context-admission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-context-admission.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AAEzE;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,4BAA4B,EAC1B,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,6BAA6B,GAC7B,wBAAwB,GACxB,yBAAyB,GACzB,6BAA6B,GAC7B,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,kBAAkB,GAClB,eAAe,GACf,cAAc,GACd,0BAA0B,GAC1B,4BAA4B,GAC5B,6BAA6B,GAC7B,kBAAkB,GAClB,8BAA8B,GAC9B,8BAA8B,GAC9B,QAAQ,GACR,kCAAkC,CACrC,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,uBAAuB,GAAG;IAC1E,cAAc,EAAE,mBAAmB,CAAA;IACnC,SAAS,EAAE,YAAY,CAAA;CACxB,CA2CA"}
+{"version":3,"file":"run-context-admission.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AAEzE;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,4BAA4B,EAC1B,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,6BAA6B,GAC7B,wBAAwB,GACxB,yBAAyB,GACzB,6BAA6B,GAC7B,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,kBAAkB,GAClB,eAAe,GACf,cAAc,GACd,0BAA0B,GAC1B,4BAA4B,GAC5B,6BAA6B,GAC7B,kBAAkB,GAClB,8BAA8B,GAC9B,8BAA8B,GAC9B,QAAQ,GACR,kCAAkC,GAClC,6BAA6B,CAChC,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,uBAAuB,GAAG;IAC1E,cAAc,EAAE,mBAAmB,CAAA;IACnC,SAAS,EAAE,YAAY,CAAA;CACxB,CA4CA"}

package/dist/modules/execution/run-context-admission.js

@@ -34,6 +34,7 @@ export function buildRunContextAndAdmission(deps) {
         resolveValidationChecks: deps.resolveValidationChecks,
         fragmentResolver: deps.fragmentResolver,
         skillResolver: deps.skillResolver,
+        foundationalServiceResolver: deps.foundationalServiceResolver,
         logger: deps.logger,
     });
     // The run-admission preflights (the shared start/retry/restart `assert*` gate family).

package/dist/modules/execution/run-context-admission.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-context-admission.js","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AA0ChD,MAAM,UAAU,2BAA2B,CAAC,IAA6B;IAIvE,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,YAAY,EAAE,IAAI,CAAC,qBAAqB;QACxC,aAAa,EAAE,IAAI,CAAC,gCAAgC;QACpD,eAAe,EAAE,IAAI,CAAC,wBAAwB;QAC9C,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,KAAK,EAAE,IAAI,CAAC,cAAc;QAC1B,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,aAAa,EAAE,IAAI,CAAC,sBAAsB;QAC1C,cAAc,EAAE,IAAI,CAAC,uBAAuB;QAC5C,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,WAAW,EAAE,IAAI,CAAC,oBAAoB;QACtC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,KAAK,EAAE,IAAI,CAAC,YAAY;QACxB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;QAC/D,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAA;AACtC,CAAC"}
+{"version":3,"file":"run-context-admission.js","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AA2ChD,MAAM,UAAU,2BAA2B,CAAC,IAA6B;IAIvE,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,YAAY,EAAE,IAAI,CAAC,qBAAqB;QACxC,aAAa,EAAE,IAAI,CAAC,gCAAgC;QACpD,eAAe,EAAE,IAAI,CAAC,wBAAwB;QAC9C,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,KAAK,EAAE,IAAI,CAAC,cAAc;QAC1B,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,aAAa,EAAE,IAAI,CAAC,sBAAsB;QAC1C,cAAc,EAAE,IAAI,CAAC,uBAAuB;QAC5C,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,WAAW,EAAE,IAAI,CAAC,oBAAoB;QACtC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,KAAK,EAAE,IAAI,CAAC,YAAY;QACxB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;QAC/D,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAA;AACtC,CAAC"}

package/dist/modules/execution/run-foundational-services.d.ts

@@ -0,0 +1,83 @@
+import type { AgentKindRegistry } from '@cat-factory/agents';
+import type { FoundationalServiceSelection, PipelineStep } from '@cat-factory/contracts';
+import type { AgentKind, FoundationalCatalogView, InjectedContextFile, Logger } from '@cat-factory/kernel';
+/**
+ * The engine-facing seam over the catalog, implemented by
+ * `FoundationalServiceRunResolver` (`@cat-factory/agents`) and wired only when the catalog is
+ * configured. Absent ⇒ nothing is injected, which is exactly the prior behaviour.
+ */
+export interface FoundationalServiceResolver {
+    catalogFor(workspaceId: string): Promise<FoundationalCatalogView[]>;
+    /**
+     * Just the ids in the merged catalog — what a settled design's declaration is checked
+     * against. Its own method rather than a `catalogFor().map()` at the call site because the
+     * completion path has no use for the rest of a catalog entry, and reading the ids is what
+     * lets an invented id be reported as unknown instead of silently accepted.
+     */
+    catalogIdsFor(workspaceId: string): Promise<string[]>;
+    contextFilesFor(workspaceId: string, selection: FoundationalServiceSelection | undefined): Promise<InjectedContextFile[]>;
+}
+export interface ResolveFoundationalContextInput {
+    workspaceId: string;
+    /** The EFFECTIVE dispatched kind (a gate helper dispatches its own kind, not the step's). */
+    agentKind: AgentKind;
+    agentKindRegistry: AgentKindRegistry;
+    /** The run's steps BEFORE the one being dispatched, newest-last. */
+    priorSteps: PipelineStep[];
+    foundationalServiceResolver?: FoundationalServiceResolver;
+    logger?: Logger;
+}
+/**
+ * The `.cat-context/` files this dispatch gets from the foundational-services catalog:
+ *
+ * - a kind carrying `foundational-catalog` (the architect) gets the CATALOG — identity,
+ *   capabilities and operation names for every registered service, no document bodies;
+ * - a kind carrying `foundational-contracts` (the researcher, the coder) gets the full API
+ *   CONTRACTS, for exactly the ids a prior design step declared;
+ * - anything else gets nothing, and pays for nothing.
+ *
+ * BEST-EFFORT as a whole: the catalog is enrichment, and an unreachable store must not fail a
+ * run that would otherwise proceed exactly as it did before the feature existed. A failure is
+ * logged with its cause rather than swallowed.
+ */
+export declare function resolveFoundationalContext(input: ResolveFoundationalContextInput): Promise<InjectedContextFile[]>;
+/**
+ * The declaration a consumer dispatch reads: the LAST prior step that recorded one.
+ *
+ * "Last" rather than "first" because a run can design more than once — a companion that bounces
+ * the architect for rework re-runs it, and the rework's declaration is the current one. Reading
+ * the persisted STEP (rather than re-parsing outputs here) is what makes this survive a durable
+ * replay: the parse happened once, when the step settled.
+ *
+ * Returns `undefined` when no prior step declared anything at all, which the renderer states
+ * as "nothing was checked" — distinct from an empty selection, which is a design that ran and
+ * concluded no shared service applies.
+ */
+export declare function declaredSelection(priorSteps: PipelineStep[]): FoundationalServiceSelection | undefined;
+/**
+ * Read a settled design step's declaration out of the reply it just produced and record it on
+ * the step. Called by the engine when a step whose kind carries `foundational-catalog` finishes.
+ *
+ * Recorded even when the agent declared NOTHING (an empty selection), because that is a real
+ * and different answer from "no design step ran" — the two are what the consumer's index file
+ * distinguishes, and only a written row can tell them apart later.
+ *
+ * BEST-EFFORT: the declaration is enrichment on top of a step that already succeeded, so a
+ * catalog read that fails leaves the step unannotated (⇒ consumers read "nothing was checked")
+ * rather than failing a completed design.
+ */
+export type FoundationalDeclarationRecorder = (workspaceId: string, step: PipelineStep, 
+/** The reply the job just returned. Read from the RESULT, not `step.output`, which the
+ *  completion paths downstream of this hook have not assigned yet. */
+output: string | undefined) => Promise<void>;
+/**
+ * Bind a {@link FoundationalDeclarationRecorder} to the dispatcher's collaborators, so the
+ * completion hub calls one function instead of restating the trait check, the catalog read and
+ * the failure policy at its call site. An unwired catalog binds to a no-op.
+ */
+export declare function createFoundationalDeclarationRecorder(deps: {
+    agentKindRegistry: AgentKindRegistry;
+    foundationalServiceResolver?: FoundationalServiceResolver;
+    logger?: Logger;
+}): FoundationalDeclarationRecorder;
+//# sourceMappingURL=run-foundational-services.d.ts.map

package/dist/modules/execution/run-foundational-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-foundational-services.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-foundational-services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAM5D,OAAO,KAAK,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACxF,OAAO,KAAK,EACV,SAAS,EACT,uBAAuB,EACvB,mBAAmB,EACnB,MAAM,EACP,MAAM,qBAAqB,CAAA;AAsB5B;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;IACnE;;;;;OAKG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACrD,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,4BAA4B,GAAG,SAAS,GAClD,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,6FAA6F;IAC7F,SAAS,EAAE,SAAS,CAAA;IACpB,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,oEAAoE;IACpE,UAAU,EAAE,YAAY,EAAE,CAAA;IAC1B,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA8BhC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,YAAY,EAAE,GACzB,4BAA4B,GAAG,SAAS,CAM1C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAC5C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY;AAClB;sEACsE;AACtE,MAAM,EAAE,MAAM,GAAG,SAAS,KACvB,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB;;;;GAIG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE;IAC1D,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,GAAG,+BAA+B,CAelC"}

package/dist/modules/execution/run-foundational-services.js

@@ -0,0 +1,76 @@
+import { FOUNDATIONAL_CATALOG_TRAIT, FOUNDATIONAL_CONTRACTS_TRAIT, hasTrait, } from '@cat-factory/agents';
+import { FOUNDATIONAL_CATALOG_FILE, noopLogger, parseFoundationalDeclaration, renderFoundationalCatalog, runBestEffort, } from '@cat-factory/kernel';
+/**
+ * The `.cat-context/` files this dispatch gets from the foundational-services catalog:
+ *
+ * - a kind carrying `foundational-catalog` (the architect) gets the CATALOG — identity,
+ *   capabilities and operation names for every registered service, no document bodies;
+ * - a kind carrying `foundational-contracts` (the researcher, the coder) gets the full API
+ *   CONTRACTS, for exactly the ids a prior design step declared;
+ * - anything else gets nothing, and pays for nothing.
+ *
+ * BEST-EFFORT as a whole: the catalog is enrichment, and an unreachable store must not fail a
+ * run that would otherwise proceed exactly as it did before the feature existed. A failure is
+ * logged with its cause rather than swallowed.
+ */
+export async function resolveFoundationalContext(input) {
+    const resolver = input.foundationalServiceResolver;
+    if (!resolver)
+        return [];
+    const { agentKind, agentKindRegistry } = input;
+    if (hasTrait(agentKind, FOUNDATIONAL_CATALOG_TRAIT, agentKindRegistry)) {
+        const files = await runBestEffort(input.logger ?? noopLogger, 'foundationalServices.catalog', async () => {
+            const catalog = await resolver.catalogFor(input.workspaceId);
+            // Rendered even when EMPTY: the catalog file then states that none are registered,
+            // which is the answer the design guidance asks the agent to act on. Omitting the file
+            // would leave the prompt pointing at a path that does not exist, which reads as a
+            // platform fault rather than as "there are none".
+            return [{ path: FOUNDATIONAL_CATALOG_FILE, content: renderFoundationalCatalog(catalog) }];
+        }, { workspaceId: input.workspaceId, agentKind });
+        return files ?? [];
+    }
+    if (hasTrait(agentKind, FOUNDATIONAL_CONTRACTS_TRAIT, agentKindRegistry)) {
+        const files = await runBestEffort(input.logger ?? noopLogger, 'foundationalServices.contracts', () => resolver.contextFilesFor(input.workspaceId, declaredSelection(input.priorSteps)), { workspaceId: input.workspaceId, agentKind });
+        return files ?? [];
+    }
+    return [];
+}
+/**
+ * The declaration a consumer dispatch reads: the LAST prior step that recorded one.
+ *
+ * "Last" rather than "first" because a run can design more than once — a companion that bounces
+ * the architect for rework re-runs it, and the rework's declaration is the current one. Reading
+ * the persisted STEP (rather than re-parsing outputs here) is what makes this survive a durable
+ * replay: the parse happened once, when the step settled.
+ *
+ * Returns `undefined` when no prior step declared anything at all, which the renderer states
+ * as "nothing was checked" — distinct from an empty selection, which is a design that ran and
+ * concluded no shared service applies.
+ */
+export function declaredSelection(priorSteps) {
+    for (let i = priorSteps.length - 1; i >= 0; i--) {
+        const selection = priorSteps[i]?.foundationalServices;
+        if (selection)
+            return selection;
+    }
+    return undefined;
+}
+/**
+ * Bind a {@link FoundationalDeclarationRecorder} to the dispatcher's collaborators, so the
+ * completion hub calls one function instead of restating the trait check, the catalog read and
+ * the failure policy at its call site. An unwired catalog binds to a no-op.
+ */
+export function createFoundationalDeclarationRecorder(deps) {
+    const resolver = deps.foundationalServiceResolver;
+    if (!resolver)
+        return async () => { };
+    return async (workspaceId, step, output) => {
+        if (!hasTrait(step.agentKind, FOUNDATIONAL_CATALOG_TRAIT, deps.agentKindRegistry))
+            return;
+        await runBestEffort(deps.logger ?? noopLogger, 'foundationalServices.recordDeclaration', async () => {
+            const known = await resolver.catalogIdsFor(workspaceId);
+            step.foundationalServices = parseFoundationalDeclaration(output, known);
+        }, { workspaceId, agentKind: step.agentKind });
+    };
+}
+//# sourceMappingURL=run-foundational-services.js.map

package/dist/modules/execution/run-foundational-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-foundational-services.js","sourceRoot":"","sources":["../../../src/modules/execution/run-foundational-services.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,QAAQ,GACT,MAAM,qBAAqB,CAAA;AAQ5B,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,GACd,MAAM,qBAAqB,CAAA;AA8C5B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxB,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAA;IAC9C,IAAI,QAAQ,CAAC,SAAS,EAAE,0BAA0B,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,8BAA8B,EAC9B,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAC5D,mFAAmF;YACnF,sFAAsF;YACtF,kFAAkF;YAClF,kDAAkD;YAClD,OAAO,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3F,CAAC,EACD,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAC9C,CAAA;QACD,OAAO,KAAK,IAAI,EAAE,CAAA;IACpB,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,4BAA4B,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,gCAAgC,EAChC,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EACtF,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAC9C,CAAA;QACD,OAAO,KAAK,IAAI,EAAE,CAAA;IACpB,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA0B;IAE1B,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAA;QACrD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAsBD;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAIrD;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,2BAA2B,CAAA;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,IAAI,EAAE,GAAE,CAAC,CAAA;IACpC,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,EAAE,IAAI,CAAC,iBAAiB,CAAC;YAAE,OAAM;QACzF,MAAM,aAAa,CACjB,IAAI,CAAC,MAAM,IAAI,UAAU,EACzB,wCAAwC,EACxC,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;YACvD,IAAI,CAAC,oBAAoB,GAAG,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACzE,CAAC,EACD,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC3C,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/modules/execution/runStart.d.ts

@@ -0,0 +1,50 @@
+import type { Block, ExecutionInstance } from '@cat-factory/kernel';
+export interface RunStartDeps {
+    /** `ExecutionRepository.insertLive` — the atomic one-live-run-per-block claim. */
+    insertLive: (workspaceId: string, instance: ExecutionInstance, options: {
+        replaceId?: string;
+    }) => Promise<boolean>;
+    /** Hand the run to the durable runner (`WorkRunner.startRun`). */
+    startRun: (workspaceId: string, executionId: string) => Promise<void>;
+    /** Push the run to the SPA (`RunStateMachine.emitInstance`). */
+    emitInstance: (workspaceId: string, instance: ExecutionInstance) => Promise<void>;
+    /** Announce `run.started` outward (`RunStateMachine.publishRunStarted`). */
+    publishRunStarted: (workspaceId: string, instance: ExecutionInstance, block: Block | null | undefined) => Promise<void>;
+}
+/**
+ * Insert a freshly-built run, enforcing the one-live-run-per-block invariant at the DB in a single
+ * atomic write (see `ExecutionRepository.insertLive`). Callers must NOT `deleteByBlock` first:
+ * `insertLive` itself clears the block's terminal rows (and `replaceId`, the specific prior run a
+ * `retry`/`restart` is knowingly superseding) in the SAME transaction as the insert.
+ *
+ * A `false` return means a genuinely-concurrent start (double click, recurring-vs-manual,
+ * notification-vs-human retry) already created the block's live run — so we REFUSE this duplicate
+ * rather than materialise a second driver + container on the same branch. The winning run is
+ * untouched (the losing transaction only deletes terminal rows / its own `replaceId`, never the
+ * winner). Surfaces as a 409 the SPA shows as a toast.
+ *
+ * Nothing else belongs in here. This is the run's atomic claim, and an external call placed
+ * between it and the caller's block write is a fault that can strand a live run on a block never
+ * marked `in_progress` and never handed to a driver — see {@link handOffLiveRun}.
+ */
+export declare function claimLiveRunOrConflict(deps: RunStartDeps, workspaceId: string, instance: ExecutionInstance, replaceId?: string): Promise<void>;
+/**
+ * The ONE hand-off every start path ends with, once the run is claimed and the block committed:
+ * give the run to the durable runner, push it to the SPA, then announce `run.started` outward.
+ *
+ * The order is the point. The outbound announcement is LAST because it is the only step that
+ * leaves the deployment — the platform's rule is to commit local state first and run the external
+ * call behind it, so a slow or black-holing receiver costs the announcement and never the run.
+ *
+ * `run.started` is still exactly once per run: {@link claimLiveRunOrConflict} is what mints a live
+ * run, so a concurrent double-start has already lost by the time we get here. A start path added
+ * later inherits the announcement because skipping this funnel would also skip `startRun` — a run
+ * that never progresses, not an event that silently never fires. `retry`/`restartFrom` each mint a
+ * FRESH run id, so they announce genuinely new runs; otherwise a receiver would see `run.failed`
+ * for one id and later `run.completed` for another it never learned about.
+ *
+ * The block is threaded through because every caller already holds it — re-reading it here would
+ * be an extra round trip per run start (a NETWORK one on a mothership deployment).
+ */
+export declare function handOffLiveRun(deps: RunStartDeps, workspaceId: string, instance: ExecutionInstance, block: Block | null | undefined): Promise<void>;
+//# sourceMappingURL=runStart.d.ts.map

package/dist/modules/execution/runStart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runStart.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/runStart.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAgBnE,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,UAAU,EAAE,CACV,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACrB,kEAAkE;IAClE,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,gEAAgE;IAChE,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjF,4EAA4E;IAC5E,iBAAiB,EAAE,CACjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,KAC5B,OAAO,CAAC,IAAI,CAAC,CAAA;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,YAAY,EAClB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,YAAY,EAClB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,GAC9B,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/modules/execution/runStart.js

@@ -0,0 +1,53 @@
+import { ConflictError } from '@cat-factory/kernel';
+/**
+ * Insert a freshly-built run, enforcing the one-live-run-per-block invariant at the DB in a single
+ * atomic write (see `ExecutionRepository.insertLive`). Callers must NOT `deleteByBlock` first:
+ * `insertLive` itself clears the block's terminal rows (and `replaceId`, the specific prior run a
+ * `retry`/`restart` is knowingly superseding) in the SAME transaction as the insert.
+ *
+ * A `false` return means a genuinely-concurrent start (double click, recurring-vs-manual,
+ * notification-vs-human retry) already created the block's live run — so we REFUSE this duplicate
+ * rather than materialise a second driver + container on the same branch. The winning run is
+ * untouched (the losing transaction only deletes terminal rows / its own `replaceId`, never the
+ * winner). Surfaces as a 409 the SPA shows as a toast.
+ *
+ * Nothing else belongs in here. This is the run's atomic claim, and an external call placed
+ * between it and the caller's block write is a fault that can strand a live run on a block never
+ * marked `in_progress` and never handed to a driver — see {@link handOffLiveRun}.
+ */
+export async function claimLiveRunOrConflict(deps, workspaceId, instance, replaceId) {
+    const inserted = await deps.insertLive(workspaceId, instance, { replaceId });
+    if (!inserted) {
+        // No machine `reason`: this is a rare double-start edge, not a distinct client-handled
+        // conflict, so the human message drives the SPA's generic 409 toast (no new
+        // ConflictReason + exhaustive-Record/i18n cascade for a transient race).
+        throw new ConflictError('A run is already active for this block.');
+    }
+}
+/**
+ * The ONE hand-off every start path ends with, once the run is claimed and the block committed:
+ * give the run to the durable runner, push it to the SPA, then announce `run.started` outward.
+ *
+ * The order is the point. The outbound announcement is LAST because it is the only step that
+ * leaves the deployment — the platform's rule is to commit local state first and run the external
+ * call behind it, so a slow or black-holing receiver costs the announcement and never the run.
+ *
+ * `run.started` is still exactly once per run: {@link claimLiveRunOrConflict} is what mints a live
+ * run, so a concurrent double-start has already lost by the time we get here. A start path added
+ * later inherits the announcement because skipping this funnel would also skip `startRun` — a run
+ * that never progresses, not an event that silently never fires. `retry`/`restartFrom` each mint a
+ * FRESH run id, so they announce genuinely new runs; otherwise a receiver would see `run.failed`
+ * for one id and later `run.completed` for another it never learned about.
+ *
+ * The block is threaded through because every caller already holds it — re-reading it here would
+ * be an extra round trip per run start (a NETWORK one on a mothership deployment).
+ */
+export async function handOffLiveRun(deps, workspaceId, instance, block) {
+    // Hand the run off to the durable runner so it progresses server-side without a browser open.
+    // With the no-op runner (tests) this does nothing and the run is advanced directly via
+    // advanceInstance.
+    await deps.startRun(workspaceId, instance.id);
+    await deps.emitInstance(workspaceId, instance);
+    await deps.publishRunStarted(workspaceId, instance, block);
+}
+//# sourceMappingURL=runStart.js.map

package/dist/modules/execution/runStart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runStart.js","sourceRoot":"","sources":["../../../src/modules/execution/runStart.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAkCnD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAkB,EAClB,WAAmB,EACnB,QAA2B,EAC3B,SAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,uFAAuF;QACvF,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAA;IACpE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAkB,EAClB,WAAmB,EACnB,QAA2B,EAC3B,KAA+B;IAE/B,8FAA8F;IAC9F,uFAAuF;IACvF,mBAAmB;IACnB,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7C,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC9C,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;AAC5D,CAAC"}

package/dist/modules/kaizen/KaizenService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KaizenService.d.ts","sourceRoot":"","sources":["../../../src/modules/kaizen/KaizenService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EACf,KAAK,EACL,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,6BAA6B,EAE7B,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,QAAQ,EAER,2BAA2B,EAC5B,MAAM,qBAAqB,CAAA;AAa5B,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,sDAAsD,CAAA;AAS5G,MAAM,WAAW,yBAAyB;IACxC,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,6BAA6B,EAAE,6BAA6B,CAAA;IAC5D,eAAe,EAAE,eAAe,CAAA;IAChC,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,6FAA6F;IAC7F,yBAAyB,EAAE,gCAAgC,CAAA;IAC3D,gFAAgF;IAChF,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,qFAAqF;IACrF,MAAM,CAAC,EAAE,uBAAuB,CAAA;IAChC,qFAAqF;IACrF,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,kFAAkF;IAClF,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,QAAQ,GAAG,SAAS,CAAA;IACzE;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAA;IACvC,+EAA+E;IAC/E,4BAA4B,CAAC,EAAE,CAC7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,KACnB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CACjC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,yBAAyB,EAAI;IAEhE,qFAAqF;IACrF,IAAI,OAAO,IAAI,OAAO,CAErB;IAID;;;;OAIG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6CpF;IAID;;;OAGG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBpE;IAED,+FAA+F;IACzF,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0E3E;IAID,8EAA8E;IACxE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAM3E;IAED,8EAA8E;IAC9E,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAEnF;YAIa,aAAa;IAM3B,yFAAyF;IACzF,OAAO,CAAC,WAAW;YAIL,eAAe;YAef,YAAY;IAe1B;;;;;;OAMG;YACW,QAAQ;YAmBR,WAAW;YAaX,IAAI;YAWJ,IAAI;CAOnB"}
+{"version":3,"file":"KaizenService.d.ts","sourceRoot":"","sources":["../../../src/modules/kaizen/KaizenService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EACf,KAAK,EACL,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,6BAA6B,EAE7B,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,QAAQ,EAER,2BAA2B,EAC5B,MAAM,qBAAqB,CAAA;AAa5B,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,sDAAsD,CAAA;AAS5G,MAAM,WAAW,yBAAyB;IACxC,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,6BAA6B,EAAE,6BAA6B,CAAA;IAC5D,eAAe,EAAE,eAAe,CAAA;IAChC,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,6FAA6F;IAC7F,yBAAyB,EAAE,gCAAgC,CAAA;IAC3D,gFAAgF;IAChF,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,qFAAqF;IACrF,MAAM,CAAC,EAAE,uBAAuB,CAAA;IAChC,qFAAqF;IACrF,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,kFAAkF;IAClF,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,QAAQ,GAAG,SAAS,CAAA;IACzE;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAA;IACvC,+EAA+E;IAC/E,4BAA4B,CAAC,EAAE,CAC7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,KACnB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CACjC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,yBAAyB,EAAI;IAEhE,qFAAqF;IACrF,IAAI,OAAO,IAAI,OAAO,CAErB;IAID;;;;OAIG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDpF;IAID;;;OAGG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBpE;IAED,+FAA+F;IACzF,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0E3E;IAID,8EAA8E;IACxE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAM3E;IAED,8EAA8E;IAC9E,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAEnF;YAIa,aAAa;IAM3B,yFAAyF;IACzF,OAAO,CAAC,WAAW;YAIL,eAAe;YAef,YAAY;IAe1B;;;;;;OAMG;YACW,QAAQ;YAmBR,WAAW;YAaX,IAAI;YAWJ,IAAI;CAOnB"}

package/dist/modules/kaizen/KaizenService.js

@@ -45,11 +45,13 @@ export class KaizenService {
                 continue;
             const model = step.model;
             const promptVersion = promptVersionForKind(step.agentKind);
-            // `promptRevision` is the workspace's own prompt for this kind, pinned onto the step at
-            // dispatch (absent ⇒ it ran the shipped prompt). Read off the STEP rather than the prompt
-            // log, which is append-only: a later revision would otherwise re-key gradings of text the
-            // step never saw.
-            const comboKey = comboKeyFor(step.agentKind, model, promptVersion, step.promptRevision);
+            // Both prompt-text facts are read off the STEP, where the dispatch pinned them, rather than
+            // re-resolved here: the prompt log is append-only, so a later revision would re-key
+            // gradings of text the step never saw, and the variant registry can have moved on too.
+            // `promptVariant` is deliberately the PIN and not `stepOptions.agentVariantId` — the option
+            // is what the pipeline asked for, while the pin says what actually reached the prompt, and
+            // keying on the ask would credit a variant whose text a workspace override displaced.
+            const comboKey = comboKeyFor(step.agentKind, model, promptVersion, step.promptRevision, step.promptVariant);
             const combo = await this.deps.kaizenVerifiedComboRepository.getByKey(workspaceId, comboKey);
             if (isVerified(combo))
                 continue;