@cat-factory/orchestration 0.185.2 → 0.187.0

package/dist/modules/execution/run-binary-output.js

@@ -1,5 +1,5 @@
 import { BINARY_OUTPUT_TRAIT, hasTrait } from '@cat-factory/agents';
-import { noopLogger, parseBinaryOutputDeclaration, runBestEffort } from '@cat-factory/kernel';
+import { dispatchBinaryGenerators, noopLogger, parseBinaryOutputDeclaration, resolveBinaryGeneratorSelection, runBestEffort, } from '@cat-factory/kernel';
 /**
  * The `.cat-context/binary-output/` files this dispatch gets: the brief naming the selected
  * storage + context services plus their contract documents, for a kind carrying the
@@ -10,6 +10,12 @@ import { noopLogger, parseBinaryOutputDeclaration, runBestEffort } from '@cat-fa
  * trait guidance names the ABSENT brief as meaningful ("the platform could not provide
  * storage — do not attempt any upload; report it"), so the failure degrades into a stated
  * refusal rather than a guessed storage endpoint. The failure itself is logged with its cause.
+ *
+ * That disposition is what lets the GENERATIVE source be remote too. On a mothership-mode node
+ * its read can throw, and the absent brief already means "the platform could not provide" —
+ * which is true of an unreachable integration set exactly as it is of an unreachable catalog.
+ * What must never happen is a brief that RESOLVES and reports the step's integrations as
+ * unregistered, which is why the source throws instead of answering empty.
  */
 export async function resolveBinaryOutputContext(input) {
     const resolver = input.foundationalServiceResolver;
@@ -17,9 +23,37 @@ export async function resolveBinaryOutputContext(input) {
         return [];
     if (!hasTrait(input.agentKind, BINARY_OUTPUT_TRAIT, input.agentKindRegistry))
         return [];
-    const files = await runBestEffort(input.logger ?? noopLogger, 'binaryOutput.context', () => resolver.binaryOutputContextFilesFor(input.workspaceId, input.step.stepOptions?.binaryOutput), { workspaceId: input.workspaceId, agentKind: input.agentKind });
+    const files = await runBestEffort(input.logger ?? noopLogger, 'binaryOutput.context', () => resolver.binaryOutputContextFilesFor(input.workspaceId, input.step.stepOptions?.binaryOutput, input.binaryGeneratorSource), { workspaceId: input.workspaceId, agentKind: input.agentKind });
     return files ?? [];
 }
+/**
+ * The GENERATIVE INTEGRATIONS this dispatch carries on its `AgentRunContext` — the non-secret
+ * projection (ids, content types, the credential's KEY NAME) the container executor needs to
+ * resolve each declared credential onto the job body.
+ *
+ * Gated on the SAME condition as the brief — the effective kind carries the trait — because the
+ * two are two halves of one hand-off: the brief tells the agent to read `$RD_TOKEN`, and this is
+ * what puts a value there. A kind that gets one without the other is either an agent told to use
+ * a credential nobody delivered, or a credential delivered to an agent with no idea it exists.
+ *
+ * BEST-EFFORT and independently of the brief, which is safe in BOTH directions precisely because
+ * each half already defines its own absence. A brief with no credentials behind it is the state
+ * the brief itself describes ("an unset variable means the platform could not provide the key —
+ * report rather than call"); credentials with no brief reach an agent that was never told the
+ * integrations exist and so never calls them. Sharing one read between the two would buy
+ * consistency the failure modes do not need, at the price of a cache with no invalidation path.
+ */
+export async function dispatchBinaryGeneratorsFor(input) {
+    const source = input.binaryGeneratorSource;
+    if (!source)
+        return [];
+    if (!hasTrait(input.agentKind, BINARY_OUTPUT_TRAIT, input.agentKindRegistry))
+        return [];
+    const views = await runBestEffort(input.logger ?? noopLogger, 'binaryOutput.generators', () => source.views(), { agentKind: input.agentKind });
+    if (!views)
+        return [];
+    return dispatchBinaryGenerators(resolveBinaryGeneratorSelection(input.step.stepOptions?.binaryOutput, views));
+}
 /**
  * Whether a SETTLED step may carry a binary-output declaration worth reading back — the
  * read-back's counterpart to {@link resolveBinaryOutputContext}'s trait check.
@@ -45,16 +79,50 @@ export function stepMayDeclareBinaryOutputs(step, agentKindRegistry) {
         return true;
     return hasTrait(step.agentKind, BINARY_OUTPUT_TRAIT, agentKindRegistry);
 }
+/**
+ * The registered generator ids for a settlement read-back, as the three states
+ * `parseBinaryOutputDeclaration` distinguishes: a real set, a real EMPTY set (no source wired —
+ * this deployment registers none), or UNVERIFIED (the source is remote and could not be read).
+ *
+ * Kept apart from the caller so the failure is caught at the exact read that can fail, rather
+ * than by a wrapper that would also swallow the catalog read and the parse beside it. The read
+ * is best-effort with the outage logged; the flag it returns is what carries the fact onto the
+ * step, where a human reviewing the run's artifacts can see it.
+ */
+async function readGenerativeIds(deps) {
+    const source = deps.binaryGeneratorSource;
+    if (!source)
+        return { generators: [] };
+    const views = await runBestEffort(deps.logger ?? noopLogger, 'binaryOutput.generatorIds', () => source.views());
+    if (!views)
+        return { generators: [], generatorsUnverified: true };
+    return { generators: views.map((view) => view.id) };
+}
 /** Bind a {@link BinaryOutputDeclarationRecorder} to the dispatcher's collaborators. */
 export function createBinaryOutputDeclarationRecorder(deps) {
     return async (workspaceId, step, output) => {
         if (!stepMayDeclareBinaryOutputs(step, deps.agentKindRegistry))
             return;
         await runBestEffort(deps.logger ?? noopLogger, 'binaryOutput.recordDeclaration', async () => {
-            const known = deps.foundationalServiceResolver
+            const services = deps.foundationalServiceResolver
                 ? await deps.foundationalServiceResolver.catalogIdsFor(workspaceId)
                 : [];
-            step.binaryOutputs = parseBinaryOutputDeclaration(output, known);
+            // The generative ids resolve through the same source the dispatch did, so a run on a
+            // mothership-mode node classifies its declaration against the set the mothership
+            // registers rather than whatever this node's build happens to hold. An UNWIRED source
+            // checks against an EMPTY set — the honest answer on a deployment that registers no
+            // integrations, where every claimed id lands in `unknownGenerators` rather than being
+            // quietly accepted.
+            //
+            // An UNREACHABLE one is a third state and gets its own disposition, caught HERE rather
+            // than left to the wrapper below. Letting it abort the record would have discarded the
+            // whole report — the artifacts the agent stored and the STORAGE half's verdict, which
+            // resolves against the workspace catalog and was never in doubt — over a question about
+            // the generative half nobody could answer. So the report is written with what IS known
+            // and says the rest was unverified: the run's evidence survives an outage, and the one
+            // claim that cannot be made is not made.
+            const generative = await readGenerativeIds(deps);
+            step.binaryOutputs = parseBinaryOutputDeclaration(output, { services, ...generative });
         }, { workspaceId, agentKind: step.agentKind });
     };
 }

package/dist/modules/execution/run-binary-output.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-binary-output.js","sourceRoot":"","sources":["../../../src/modules/execution/run-binary-output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,4BAA4B,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AA2B7F;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAA;IACvF,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,sBAAsB,EACtB,GAAG,EAAE,CACH,QAAQ,CAAC,2BAA2B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAC/F,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/D,CAAA;IACD,OAAO,KAAK,IAAI,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAkB,EAClB,iBAAoC;IAEpC,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAA;AACzE,CAAC;AAuBD,wFAAwF;AACxF,MAAM,UAAU,qCAAqC,CAAC,IAIrD;IACC,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC;YAAE,OAAM;QACtE,MAAM,aAAa,CACjB,IAAI,CAAC,MAAM,IAAI,UAAU,EACzB,gCAAgC,EAChC,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,IAAI,CAAC,2BAA2B;gBAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,WAAW,CAAC;gBACnE,CAAC,CAAC,EAAE,CAAA;YACN,IAAI,CAAC,aAAa,GAAG,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAClE,CAAC,EACD,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC3C,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"run-binary-output.js","sourceRoot":"","sources":["../../../src/modules/execution/run-binary-output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AASnE,OAAO,EACL,wBAAwB,EACxB,UAAU,EACV,4BAA4B,EAC5B,+BAA+B,EAC/B,aAAa,GACd,MAAM,qBAAqB,CAAA;AA6B5B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAA;IACvF,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,sBAAsB,EACtB,GAAG,EAAE,CACH,QAAQ,CAAC,2BAA2B,CAClC,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EACpC,KAAK,CAAC,qBAAqB,CAC5B,EACH,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/D,CAAA;IACD,OAAO,KAAK,IAAI,EAAE,CAAA;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAMjD;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAA;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAA;IACvF,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,yBAAyB,EACzB,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EACpB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/B,CAAA;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,OAAO,wBAAwB,CAC7B,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,CAC7E,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAkB,EAClB,iBAAoC;IAEpC,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAA;AACzE,CAAC;AAuBD;;;;;;;;;GASG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAGhC;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,2BAA2B,EAAE,GAAG,EAAE,CAC7F,MAAM,CAAC,KAAK,EAAE,CACf,CAAA;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAA;IACjE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;AACrD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qCAAqC,CAAC,IAKrD;IACC,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC;YAAE,OAAM;QACtE,MAAM,aAAa,CACjB,IAAI,CAAC,MAAM,IAAI,UAAU,EACzB,gCAAgC,EAChC,KAAK,IAAI,EAAE;YACT,MAAM,QAAQ,GAAG,IAAI,CAAC,2BAA2B;gBAC/C,CAAC,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,WAAW,CAAC;gBACnE,CAAC,CAAC,EAAE,CAAA;YACN,qFAAqF;YACrF,iFAAiF;YACjF,sFAAsF;YACtF,oFAAoF;YACpF,sFAAsF;YACtF,oBAAoB;YACpB,EAAE;YACF,uFAAuF;YACvF,uFAAuF;YACvF,sFAAsF;YACtF,wFAAwF;YACxF,uFAAuF;YACvF,uFAAuF;YACvF,yCAAyC;YACzC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAChD,IAAI,CAAC,aAAa,GAAG,4BAA4B,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;QACxF,CAAC,EACD,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC3C,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/modules/execution/run-catalog-context.d.ts

@@ -1,10 +1,27 @@
 import type { AgentKindRegistry } from '@cat-factory/agents';
 import type { PipelineStep } from '@cat-factory/contracts';
-import type { ExecutionInstance, InjectedContextFile, Logger } from '@cat-factory/kernel';
+import type { BinaryGeneratorSource, ExecutionInstance, InjectedContextFile, Logger, ResolvedBinaryGenerator } from '@cat-factory/kernel';
 import { type FoundationalServiceResolver } from './run-foundational-services.js';
+/**
+ * Everything one dispatch takes from the CATALOG side, as {@link CatalogRunContext.sliceFor}
+ * returns it: the two injected-file groups the agent reads, and the structured integration
+ * projection the container executor turns into credentials on the job body.
+ */
+export interface CatalogRunSlice {
+    foundationalContextFiles: InjectedContextFile[];
+    binaryOutputContextFiles: InjectedContextFile[];
+    binaryGenerators: ResolvedBinaryGenerator[];
+}
 export interface CatalogRunContextDeps {
     agentKindRegistry: AgentKindRegistry;
     foundationalServiceResolver?: FoundationalServiceResolver;
+    /**
+     * The deployment's generative binary integrations. It rides HERE, beside the catalog resolver,
+     * because the binary-output brief describes both halves of one selection and the declaration
+     * read-back resolves ids against both — keeping them apart would be two places for a dispatch
+     * and its settlement to disagree about which integrations existed.
+     */
+    binaryGeneratorSource?: BinaryGeneratorSource;
     logger?: Logger;
 }
 export declare class CatalogRunContext {
@@ -18,28 +35,46 @@ export declare class CatalogRunContext {
     private readonly recordBinaryOutput;
     constructor(deps: CatalogRunContextDeps);
     /**
-     * The FOUNDATIONAL SERVICES slice of a dispatch's `.cat-context/` — the catalog for a design
-     * kind, the declared services' contracts for a consumer kind, nothing for anything else. Reads
-     * only the steps BEFORE the one being dispatched, so a re-dispatched design cannot read its
-     * own prior round.
-     */
-    foundationalContextFor(workspaceId: string, agentKind: string, instance: ExecutionInstance): Promise<InjectedContextFile[]>;
-    /**
-     * The BINARY-OUTPUT slice of a dispatch's `.cat-context/` — the storage/context brief +
-     * contract files for a kind carrying the `binary-output` trait, resolved off the step's own
-     * `stepOptions.binaryOutput` selection. Sibling of {@link foundationalContextFor}, off the
-     * same resolver and failure policy.
+     * ALL THREE catalog-backed reads of one dispatch, resolved concurrently — the ONE entry the
+     * context read wave takes, so the builder holds a single wave slot rather than three:
+     *
+     * - the FOUNDATIONAL SERVICES files (the catalog for a design kind, the declared services' API
+     *   contracts for a consumer kind, nothing for anything else), read only from the steps BEFORE
+     *   the one being dispatched so a re-dispatched design cannot read its own prior round;
+     * - the BINARY-OUTPUT brief for a kind carrying the trait, off the step's own selection;
+     * - the GENERATIVE INTEGRATIONS that selection names — the non-secret projection the container
+     *   executor turns into credentials on the job body.
+     *
+     * They belong together rather than merely being adjacent: all three go through this
+     * collaborator, all three are BEST-EFFORT inside (each gap has a stated rendering — an
+     * `unavailable` catalog file, an absent brief the trait guidance already defines as "do not
+     * attempt any upload", no integrations to hand credentials for), and on a mothership-mode node
+     * all three can cross the machine API. That last point is why the generative half belongs in
+     * the wave at all rather than after it, where it would serialise a round trip behind the
+     * others for nothing.
+     *
+     * Exposed as the WHOLE slice rather than three per-read methods, because the sharing below is
+     * only correct within one dispatch: a caller that could take the halves separately could take
+     * them at different times, which is the drift this collaborator exists to prevent.
+     *
+     * The two halves of the binary-output selection share ONE `views()` read
+     * ({@link memoizeBinaryGeneratorViews}), scoped to this call and discarded with it. The brief
+     * that tells an agent which integrations it has and the projection that puts a credential
+     * behind each are answers about the same set, so reading it twice bought a second round trip
+     * and a window in which they could disagree. Sharing costs no coherence: on a failure both
+     * degrade, which is the pair's coherent state (an agent told nothing, handed nothing), and
+     * each still applies its own disposition rather than one failing the other.
      */
-    binaryOutputContextFor(workspaceId: string, agentKind: string, step: PipelineStep): Promise<InjectedContextFile[]>;
+    sliceFor(workspaceId: string, agentKind: string, step: PipelineStep, instance: ExecutionInstance): Promise<CatalogRunSlice>;
     /**
      * Read back what a settled DESIGN step declared, and record it on the step — the counterpart
-     * of {@link foundationalContextFor}, so the completion hub takes no dependency of its own for
+     * of the catalog half of {@link sliceFor}, so the completion hub takes no dependency of its own for
      * it.
      */
     recordFoundationalDeclaration(workspaceId: string, step: PipelineStep, output: string | undefined): Promise<void>;
     /**
      * Read back what a settled BINARY-GENERATING step declared it stored, and record it on the
-     * step — the counterpart of {@link binaryOutputContextFor}.
+     * step — the counterpart of the binary-output half of {@link sliceFor}.
      */
     recordBinaryOutputDeclaration(workspaceId: string, step: PipelineStep, output: string | undefined): Promise<void>;
 }

package/dist/modules/execution/run-catalog-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-catalog-context.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-catalog-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACzF,OAAO,EAEL,KAAK,2BAA2B,EAGjC,MAAM,gCAAgC,CAAA;AAiBvC,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,iBAAiB;IAShB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiC;IACpE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiC;IAEpE,YAA6B,IAAI,EAAE,qBAAqB,EAGvD;IAED;;;;;OAKG;IACH,sBAAsB,CACpB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAOhC;IAED;;;;;OAKG;IACH,sBAAsB,CACpB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAEhC;IAED;;;;OAIG;IACH,6BAA6B,CAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,IAAI,CAAC,CAEf;IAED;;;OAGG;IACH,6BAA6B,CAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,IAAI,CAAC,CAEf;CACF"}
+{"version":3,"file":"run-catalog-context.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-catalog-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,MAAM,EACN,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAEL,KAAK,2BAA2B,EAGjC,MAAM,gCAAgC,CAAA;AAkBvC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB,EAAE,mBAAmB,EAAE,CAAA;IAC/C,wBAAwB,EAAE,mBAAmB,EAAE,CAAA;IAC/C,gBAAgB,EAAE,uBAAuB,EAAE,CAAA;CAC5C;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,iBAAiB;IAShB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiC;IACpE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiC;IAEpE,YAA6B,IAAI,EAAE,qBAAqB,EAGvD;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,QAAQ,CACZ,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAmB1B;IAED;;;;OAIG;IACH,6BAA6B,CAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,IAAI,CAAC,CAEf;IAED;;;OAGG;IACH,6BAA6B,CAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,IAAI,CAAC,CAEf;CACF"}

package/dist/modules/execution/run-catalog-context.js

@@ -1,5 +1,6 @@
+import { memoizeBinaryGeneratorViews } from '@cat-factory/kernel';
 import { createFoundationalDeclarationRecorder, resolveFoundationalContext, } from './run-foundational-services.js';
-import { createBinaryOutputDeclarationRecorder, resolveBinaryOutputContext, } from './run-binary-output.js';
+import { createBinaryOutputDeclarationRecorder, dispatchBinaryGeneratorsFor, resolveBinaryOutputContext, } from './run-binary-output.js';
 export class CatalogRunContext {
     deps;
     /**
@@ -15,31 +16,58 @@ export class CatalogRunContext {
         this.recordBinaryOutput = createBinaryOutputDeclarationRecorder(deps);
     }
     /**
-     * The FOUNDATIONAL SERVICES slice of a dispatch's `.cat-context/` — the catalog for a design
-     * kind, the declared services' contracts for a consumer kind, nothing for anything else. Reads
-     * only the steps BEFORE the one being dispatched, so a re-dispatched design cannot read its
-     * own prior round.
+     * ALL THREE catalog-backed reads of one dispatch, resolved concurrently — the ONE entry the
+     * context read wave takes, so the builder holds a single wave slot rather than three:
+     *
+     * - the FOUNDATIONAL SERVICES files (the catalog for a design kind, the declared services' API
+     *   contracts for a consumer kind, nothing for anything else), read only from the steps BEFORE
+     *   the one being dispatched so a re-dispatched design cannot read its own prior round;
+     * - the BINARY-OUTPUT brief for a kind carrying the trait, off the step's own selection;
+     * - the GENERATIVE INTEGRATIONS that selection names — the non-secret projection the container
+     *   executor turns into credentials on the job body.
+     *
+     * They belong together rather than merely being adjacent: all three go through this
+     * collaborator, all three are BEST-EFFORT inside (each gap has a stated rendering — an
+     * `unavailable` catalog file, an absent brief the trait guidance already defines as "do not
+     * attempt any upload", no integrations to hand credentials for), and on a mothership-mode node
+     * all three can cross the machine API. That last point is why the generative half belongs in
+     * the wave at all rather than after it, where it would serialise a round trip behind the
+     * others for nothing.
+     *
+     * Exposed as the WHOLE slice rather than three per-read methods, because the sharing below is
+     * only correct within one dispatch: a caller that could take the halves separately could take
+     * them at different times, which is the drift this collaborator exists to prevent.
+     *
+     * The two halves of the binary-output selection share ONE `views()` read
+     * ({@link memoizeBinaryGeneratorViews}), scoped to this call and discarded with it. The brief
+     * that tells an agent which integrations it has and the projection that puts a credential
+     * behind each are answers about the same set, so reading it twice bought a second round trip
+     * and a window in which they could disagree. Sharing costs no coherence: on a failure both
+     * degrade, which is the pair's coherent state (an agent told nothing, handed nothing), and
+     * each still applies its own disposition rather than one failing the other.
      */
-    foundationalContextFor(workspaceId, agentKind, instance) {
-        return resolveFoundationalContext({
-            ...this.deps,
-            workspaceId,
-            agentKind,
-            priorSteps: instance.steps.slice(0, instance.currentStep),
-        });
-    }
-    /**
-     * The BINARY-OUTPUT slice of a dispatch's `.cat-context/` — the storage/context brief +
-     * contract files for a kind carrying the `binary-output` trait, resolved off the step's own
-     * `stepOptions.binaryOutput` selection. Sibling of {@link foundationalContextFor}, off the
-     * same resolver and failure policy.
-     */
-    binaryOutputContextFor(workspaceId, agentKind, step) {
-        return resolveBinaryOutputContext({ ...this.deps, workspaceId, agentKind, step });
+    async sliceFor(workspaceId, agentKind, step, instance) {
+        const deps = this.deps.binaryGeneratorSource
+            ? {
+                ...this.deps,
+                binaryGeneratorSource: memoizeBinaryGeneratorViews(this.deps.binaryGeneratorSource),
+            }
+            : this.deps;
+        const [foundationalContextFiles, binaryOutputContextFiles, binaryGenerators] = await Promise.all([
+            resolveFoundationalContext({
+                ...deps,
+                workspaceId,
+                agentKind,
+                priorSteps: instance.steps.slice(0, instance.currentStep),
+            }),
+            resolveBinaryOutputContext({ ...deps, workspaceId, agentKind, step }),
+            dispatchBinaryGeneratorsFor({ ...deps, agentKind, step }),
+        ]);
+        return { foundationalContextFiles, binaryOutputContextFiles, binaryGenerators };
     }
     /**
      * Read back what a settled DESIGN step declared, and record it on the step — the counterpart
-     * of {@link foundationalContextFor}, so the completion hub takes no dependency of its own for
+     * of the catalog half of {@link sliceFor}, so the completion hub takes no dependency of its own for
      * it.
      */
     recordFoundationalDeclaration(workspaceId, step, output) {
@@ -47,7 +75,7 @@ export class CatalogRunContext {
     }
     /**
      * Read back what a settled BINARY-GENERATING step declared it stored, and record it on the
-     * step — the counterpart of {@link binaryOutputContextFor}.
+     * step — the counterpart of the binary-output half of {@link sliceFor}.
      */
     recordBinaryOutputDeclaration(workspaceId, step, output) {
         return this.recordBinaryOutput(workspaceId, step, output);

package/dist/modules/execution/run-catalog-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-catalog-context.js","sourceRoot":"","sources":["../../../src/modules/execution/run-catalog-context.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAEL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,wBAAwB,CAAA;AAkB/B,MAAM,OAAO,iBAAiB;IASC,IAAI;IARjC;;;;OAIG;IACc,kBAAkB,CAAiC;IACnD,kBAAkB,CAAiC;IAEpE,YAA6B,IAA2B;oBAA3B,IAAI;QAC/B,IAAI,CAAC,kBAAkB,GAAG,qCAAqC,CAAC,IAAI,CAAC,CAAA;QACrE,IAAI,CAAC,kBAAkB,GAAG,qCAAqC,CAAC,IAAI,CAAC,CAAA;IACvE,CAAC;IAED;;;;;OAKG;IACH,sBAAsB,CACpB,WAAmB,EACnB,SAAiB,EACjB,QAA2B;QAE3B,OAAO,0BAA0B,CAAC;YAChC,GAAG,IAAI,CAAC,IAAI;YACZ,WAAW;YACX,SAAS;YACT,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC;SAC1D,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,sBAAsB,CACpB,WAAmB,EACnB,SAAiB,EACjB,IAAkB;QAElB,OAAO,0BAA0B,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnF,CAAC;IAED;;;;OAIG;IACH,6BAA6B,CAC3B,WAAmB,EACnB,IAAkB,EAClB,MAA0B;QAE1B,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAC3B,WAAmB,EACnB,IAAkB,EAClB,MAA0B;QAE1B,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;CACF"}
+{"version":3,"file":"run-catalog-context.js","sourceRoot":"","sources":["../../../src/modules/execution/run-catalog-context.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EAGL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAEL,qCAAqC,EACrC,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAA;AAoC/B,MAAM,OAAO,iBAAiB;IASC,IAAI;IARjC;;;;OAIG;IACc,kBAAkB,CAAiC;IACnD,kBAAkB,CAAiC;IAEpE,YAA6B,IAA2B;oBAA3B,IAAI;QAC/B,IAAI,CAAC,kBAAkB,GAAG,qCAAqC,CAAC,IAAI,CAAC,CAAA;QACrE,IAAI,CAAC,kBAAkB,GAAG,qCAAqC,CAAC,IAAI,CAAC,CAAA;IACvE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,KAAK,CAAC,QAAQ,CACZ,WAAmB,EACnB,SAAiB,EACjB,IAAkB,EAClB,QAA2B;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB;YAC1C,CAAC,CAAC;gBACE,GAAG,IAAI,CAAC,IAAI;gBACZ,qBAAqB,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC;aACpF;YACH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;QACb,MAAM,CAAC,wBAAwB,EAAE,wBAAwB,EAAE,gBAAgB,CAAC,GAC1E,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,0BAA0B,CAAC;gBACzB,GAAG,IAAI;gBACP,WAAW;gBACX,SAAS;gBACT,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC;aAC1D,CAAC;YACF,0BAA0B,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACrE,2BAA2B,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC1D,CAAC,CAAA;QACJ,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,CAAA;IACjF,CAAC;IAED;;;;OAIG;IACH,6BAA6B,CAC3B,WAAmB,EACnB,IAAkB,EAClB,MAA0B;QAE1B,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAC3B,WAAmB,EACnB,IAAkB,EAClB,MAA0B;QAE1B,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;CACF"}

package/dist/modules/execution/run-context-admission.d.ts

@@ -17,7 +17,7 @@ import type { ExecutionServiceDependencies } from './ExecutionService.js';
  * value the constructor passed inline, so the two collaborators are built from an identical
  * input to before.
  */
-export type RunContextAdmissionDeps = Pick<ExecutionServiceDependencies, 'workspaceRepository' | 'blockRepository' | 'executionRepository' | 'accountRepository' | 'agentKindRegistry' | 'initiativePresetRegistry' | 'agentPromptRepository' | 'consensusGroupRepository' | 'documentRepository' | 'documentUrlResolver' | 'taskRepository' | 'requirementReviewRepository' | 'docInterviewRepository' | 'clarityReviewRepository' | 'brainstormSessionRepository' | 'initiativeRepository' | 'environmentProvisioning' | 'resolveTestSecretRefs' | 'resolveValidationChecks' | 'fragmentResolver' | 'skillResolver' | 'spendService' | 'workspaceSettingsService' | 'resolveBinaryArtifactStore' | 'resolveProviderCapabilities' | 'inlineHarnessRef' | 'resolveWorkspaceModelDefault' | 'assertAgentBackendConfigured' | 'logger' | 'workspaceAgentSettingsRepository' | 'foundationalServiceResolver'>;
+export type RunContextAdmissionDeps = Pick<ExecutionServiceDependencies, 'workspaceRepository' | 'blockRepository' | 'executionRepository' | 'accountRepository' | 'agentKindRegistry' | 'initiativePresetRegistry' | 'agentPromptRepository' | 'consensusGroupRepository' | 'documentRepository' | 'documentUrlResolver' | 'taskRepository' | 'requirementReviewRepository' | 'docInterviewRepository' | 'clarityReviewRepository' | 'brainstormSessionRepository' | 'initiativeRepository' | 'environmentProvisioning' | 'resolveTestSecretRefs' | 'resolveValidationChecks' | 'fragmentResolver' | 'skillResolver' | 'spendService' | 'workspaceSettingsService' | 'resolveBinaryArtifactStore' | 'resolveProviderCapabilities' | 'inlineHarnessRef' | 'resolveWorkspaceModelDefault' | 'assertAgentBackendConfigured' | 'logger' | 'workspaceAgentSettingsRepository' | 'foundationalServiceResolver' | 'binaryGeneratorSource'>;
 export declare function buildRunContextAndAdmission(deps: RunContextAdmissionDeps): {
     contextBuilder: AgentContextBuilder;
     admission: RunAdmission;

package/dist/modules/execution/run-context-admission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-context-admission.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AAEzE;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,4BAA4B,EAC1B,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,6BAA6B,GAC7B,wBAAwB,GACxB,yBAAyB,GACzB,6BAA6B,GAC7B,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,kBAAkB,GAClB,eAAe,GACf,cAAc,GACd,0BAA0B,GAC1B,4BAA4B,GAC5B,6BAA6B,GAC7B,kBAAkB,GAClB,8BAA8B,GAC9B,8BAA8B,GAC9B,QAAQ,GACR,kCAAkC,GAClC,6BAA6B,CAChC,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,uBAAuB,GAAG;IAC1E,cAAc,EAAE,mBAAmB,CAAA;IACnC,SAAS,EAAE,YAAY,CAAA;CACxB,CA6CA"}
+{"version":3,"file":"run-context-admission.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AAEzE;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,4BAA4B,EAC1B,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,6BAA6B,GAC7B,wBAAwB,GACxB,yBAAyB,GACzB,6BAA6B,GAC7B,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,kBAAkB,GAClB,eAAe,GACf,cAAc,GACd,0BAA0B,GAC1B,4BAA4B,GAC5B,6BAA6B,GAC7B,kBAAkB,GAClB,8BAA8B,GAC9B,8BAA8B,GAC9B,QAAQ,GACR,kCAAkC,GAClC,6BAA6B,GAC7B,uBAAuB,CAC1B,CAAA;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,uBAAuB,GAAG;IAC1E,cAAc,EAAE,mBAAmB,CAAA;IACnC,SAAS,EAAE,YAAY,CAAA;CACxB,CA+CA"}

package/dist/modules/execution/run-context-admission.js

@@ -35,6 +35,7 @@ export function buildRunContextAndAdmission(deps) {
         fragmentResolver: deps.fragmentResolver,
         skillResolver: deps.skillResolver,
         foundationalServiceResolver: deps.foundationalServiceResolver,
+        binaryGeneratorSource: deps.binaryGeneratorSource,
         logger: deps.logger,
     });
     // The run-admission preflights (the shared start/retry/restart `assert*` gate family).
@@ -50,6 +51,7 @@ export function buildRunContextAndAdmission(deps) {
         workspaceSettingsService: deps.workspaceSettingsService,
         resolveBinaryArtifactStore: deps.resolveBinaryArtifactStore,
         foundationalServiceResolver: deps.foundationalServiceResolver,
+        binaryGeneratorSource: deps.binaryGeneratorSource,
         resolveProviderCapabilities: deps.resolveProviderCapabilities,
         inlineHarnessRef: deps.inlineHarnessRef,
         resolveWorkspaceModelDefault: deps.resolveWorkspaceModelDefault,

package/dist/modules/execution/run-context-admission.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-context-admission.js","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AA2ChD,MAAM,UAAU,2BAA2B,CAAC,IAA6B;IAIvE,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,YAAY,EAAE,IAAI,CAAC,qBAAqB;QACxC,aAAa,EAAE,IAAI,CAAC,gCAAgC;QACpD,eAAe,EAAE,IAAI,CAAC,wBAAwB;QAC9C,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,KAAK,EAAE,IAAI,CAAC,cAAc;QAC1B,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,aAAa,EAAE,IAAI,CAAC,sBAAsB;QAC1C,cAAc,EAAE,IAAI,CAAC,uBAAuB;QAC5C,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,WAAW,EAAE,IAAI,CAAC,oBAAoB;QACtC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,KAAK,EAAE,IAAI,CAAC,YAAY;QACxB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;QAC/D,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAA;AACtC,CAAC"}
+{"version":3,"file":"run-context-admission.js","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AA4ChD,MAAM,UAAU,2BAA2B,CAAC,IAA6B;IAIvE,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,YAAY,EAAE,IAAI,CAAC,qBAAqB;QACxC,aAAa,EAAE,IAAI,CAAC,gCAAgC;QACpD,eAAe,EAAE,IAAI,CAAC,wBAAwB;QAC9C,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,KAAK,EAAE,IAAI,CAAC,cAAc;QAC1B,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,aAAa,EAAE,IAAI,CAAC,sBAAsB;QAC1C,cAAc,EAAE,IAAI,CAAC,uBAAuB;QAC5C,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,WAAW,EAAE,IAAI,CAAC,oBAAoB;QACtC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,KAAK,EAAE,IAAI,CAAC,YAAY;QACxB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;QAC/D,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAA;AACtC,CAAC"}

package/dist/modules/execution/run-foundational-services.d.ts

@@ -1,6 +1,6 @@
 import type { AgentKindRegistry } from '@cat-factory/agents';
 import type { BinaryOutputConfig, FoundationalServiceSelection, PipelineStep } from '@cat-factory/contracts';
-import type { AgentKind, FoundationalCatalogView, InjectedContextFile, Logger } from '@cat-factory/kernel';
+import type { AgentKind, BinaryGeneratorSource, FoundationalCatalogView, InjectedContextFile, Logger } from '@cat-factory/kernel';
 /**
  * The engine-facing seam over the catalog, implemented by
  * `FoundationalServiceRunResolver` (`@cat-factory/agents`) and wired only when the catalog is
@@ -21,8 +21,15 @@ export interface FoundationalServiceResolver {
      * generating step's own selection (`stepOptions.binaryOutput`). On this interface rather
      * than its own seam because it is the same catalog behind the same tier merge and cache —
      * two resolvers would be two places for a workspace override to win differently.
+     *
+     * The GENERATIVE half of that selection resolves against the deployment's own integrations,
+     * passed in rather than held by the resolver: they are a different kind of fact from the
+     * workspace catalog (deployment code, no tenancy), so binding them to a catalog service would
+     * misplace them. Absent ⇒ no integration resolves, and the brief states that rather than
+     * implying the step has one. On a mothership-mode node the source is remote and can THROW,
+     * which the caller's best-effort wrapper turns into an absent brief.
      */
-    binaryOutputContextFilesFor(workspaceId: string, config: BinaryOutputConfig | undefined): Promise<InjectedContextFile[]>;
+    binaryOutputContextFilesFor(workspaceId: string, config: BinaryOutputConfig | undefined, generatorSource?: BinaryGeneratorSource): Promise<InjectedContextFile[]>;
 }
 export interface ResolveFoundationalContextInput {
     workspaceId: string;

package/dist/modules/execution/run-foundational-services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-foundational-services.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-foundational-services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAM5D,OAAO,KAAK,EACV,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACb,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EACV,SAAS,EACT,uBAAuB,EACvB,mBAAmB,EACnB,MAAM,EACP,MAAM,qBAAqB,CAAA;AAwB5B;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;IACnE;;;;;OAKG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACrD,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,4BAA4B,GAAG,SAAS,GAClD,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACjC;;;;;OAKG;IACH,2BAA2B,CACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACrC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,6FAA6F;IAC7F,SAAS,EAAE,SAAS,CAAA;IACpB,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,oEAAoE;IACpE,UAAU,EAAE,YAAY,EAAE,CAAA;IAC1B,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAwDhC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,YAAY,EAAE,GACzB,4BAA4B,GAAG,SAAS,CAM1C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAC5C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY;AAClB;sEACsE;AACtE,MAAM,EAAE,MAAM,GAAG,SAAS,KACvB,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB;;;;GAIG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE;IAC1D,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,GAAG,+BAA+B,CAelC"}
+{"version":3,"file":"run-foundational-services.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/run-foundational-services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAM5D,OAAO,KAAK,EACV,kBAAkB,EAClB,4BAA4B,EAC5B,YAAY,EACb,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EACV,SAAS,EACT,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,MAAM,EACP,MAAM,qBAAqB,CAAA;AAwB5B;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;IACnE;;;;;OAKG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACrD,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,4BAA4B,GAAG,SAAS,GAClD,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACjC;;;;;;;;;;;;OAYG;IACH,2BAA2B,CACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,eAAe,CAAC,EAAE,qBAAqB,GACtC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,6FAA6F;IAC7F,SAAS,EAAE,SAAS,CAAA;IACpB,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,oEAAoE;IACpE,UAAU,EAAE,YAAY,EAAE,CAAA;IAC1B,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAwDhC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,YAAY,EAAE,GACzB,4BAA4B,GAAG,SAAS,CAM1C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAC5C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,YAAY;AAClB;sEACsE;AACtE,MAAM,EAAE,MAAM,GAAG,SAAS,KACvB,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB;;;;GAIG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE;IAC1D,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAA;IACzD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,GAAG,+BAA+B,CAelC"}

package/dist/modules/execution/run-foundational-services.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-foundational-services.js","sourceRoot":"","sources":["../../../src/modules/execution/run-foundational-services.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,QAAQ,GACT,MAAM,qBAAqB,CAAA;AAY5B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,UAAU,EACV,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,aAAa,GACd,MAAM,qBAAqB,CAAA;AAwD5B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxB,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAA;IAC9C,IAAI,QAAQ,CAAC,SAAS,EAAE,0BAA0B,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,8BAA8B,EAC9B,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAC5D,mFAAmF;YACnF,sFAAsF;YACtF,kFAAkF;YAClF,kDAAkD;YAClD,OAAO;gBACL;oBACE,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,yBAAyB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;iBAC9E;aACF,CAAA;QACH,CAAC,EACD,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAC9C,CAAA;QACD,yFAAyF;QACzF,yFAAyF;QACzF,gBAAgB;QAChB,OAAO,CACL,KAAK,IAAI;YACP;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,yBAAyB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;aAC9D;SACF,CACF,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,4BAA4B,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,gCAAgC,EAChC,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EACtF,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAC9C,CAAA;QACD,yFAAyF;QACzF,oFAAoF;QACpF,uFAAuF;QACvF,iFAAiF;QACjF,OAAO,CACL,KAAK,IAAI;YACP;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;aAC5D;SACF,CACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA0B;IAE1B,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAA;QACrD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAsBD;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAIrD;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,2BAA2B,CAAA;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,IAAI,EAAE,GAAE,CAAC,CAAA;IACpC,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,EAAE,IAAI,CAAC,iBAAiB,CAAC;YAAE,OAAM;QACzF,MAAM,aAAa,CACjB,IAAI,CAAC,MAAM,IAAI,UAAU,EACzB,wCAAwC,EACxC,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;YACvD,IAAI,CAAC,oBAAoB,GAAG,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACzE,CAAC,EACD,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC3C,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"run-foundational-services.js","sourceRoot":"","sources":["../../../src/modules/execution/run-foundational-services.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,QAAQ,GACT,MAAM,qBAAqB,CAAA;AAa5B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,UAAU,EACV,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,aAAa,GACd,MAAM,qBAAqB,CAAA;AAgE5B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAsC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IACxB,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAA;IAC9C,IAAI,QAAQ,CAAC,SAAS,EAAE,0BAA0B,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,8BAA8B,EAC9B,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAC5D,mFAAmF;YACnF,sFAAsF;YACtF,kFAAkF;YAClF,kDAAkD;YAClD,OAAO;gBACL;oBACE,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,yBAAyB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;iBAC9E;aACF,CAAA;QACH,CAAC,EACD,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAC9C,CAAA;QACD,yFAAyF;QACzF,yFAAyF;QACzF,gBAAgB;QAChB,OAAO,CACL,KAAK,IAAI;YACP;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,yBAAyB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;aAC9D;SACF,CACF,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,4BAA4B,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,KAAK,CAAC,MAAM,IAAI,UAAU,EAC1B,gCAAgC,EAChC,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EACtF,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAC9C,CAAA;QACD,yFAAyF;QACzF,oFAAoF;QACpF,uFAAuF;QACvF,iFAAiF;QACjF,OAAO,CACL,KAAK,IAAI;YACP;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;aAC5D;SACF,CACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA0B;IAE1B,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAA;QACrD,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAsBD;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAIrD;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,2BAA2B,CAAA;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,IAAI,EAAE,GAAE,CAAC,CAAA;IACpC,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,EAAE,IAAI,CAAC,iBAAiB,CAAC;YAAE,OAAM;QACzF,MAAM,aAAa,CACjB,IAAI,CAAC,MAAM,IAAI,UAAU,EACzB,wCAAwC,EACxC,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;YACvD,IAAI,CAAC,oBAAoB,GAAG,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACzE,CAAC,EACD,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC3C,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/modules/observability/operationalMetricsFlush.d.ts

@@ -0,0 +1,32 @@
+import type { Logger, OperationalCounterSample, OperationalGaugeSample, OperationalMetricsCollector } from '@cat-factory/kernel';
+/** Where a flush pushes its operational samples (the OTLP platform-metrics exporter). */
+export interface OperationalMetricsSink {
+    exportOperational(counters: OperationalCounterSample[], gauges: OperationalGaugeSample[], at: number): Promise<void>;
+}
+export interface OperationalMetricsFlushDeps {
+    /** The process/isolate-local accumulator to drain. */
+    collector: OperationalMetricsCollector;
+    sink: OperationalMetricsSink;
+    /**
+     * Read the point-in-time gauges this runtime can answer (queue depth). OMITTED where the
+     * runtime genuinely cannot read them — Cloudflare Queues expose no backlog to the Worker
+     * that consumes them — in which case nothing is emitted for those series. That is
+     * deliberate: an absent data point says "nobody could look", where a zero would say "the
+     * queue is empty", and those are opposite facts about a wedged queue.
+     */
+    probeGauges?: () => Promise<OperationalGaugeSample[]>;
+    /** The flush clock (injected, so this module reads no wall clock of its own). */
+    now: number;
+    logger?: Logger;
+}
+/**
+ * Drain the collector, probe the gauges, and export both. Returns the number of samples sent
+ * (0 when there was nothing to say, in which case no request is made at all).
+ *
+ * A gauge probe that THROWS costs only its gauges: the drained counters are already out of
+ * the collector by then, and dropping them because an unrelated `COUNT(*)` failed would lose
+ * events nothing can recover. A failing SINK loses the whole flush — that is the accepted
+ * cost of an in-memory accumulator, and it is why the drop is logged rather than swallowed.
+ */
+export declare function flushOperationalMetrics(deps: OperationalMetricsFlushDeps): Promise<number>;
+//# sourceMappingURL=operationalMetricsFlush.d.ts.map

package/dist/modules/observability/operationalMetricsFlush.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationalMetricsFlush.d.ts","sourceRoot":"","sources":["../../../src/modules/observability/operationalMetricsFlush.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EACN,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC5B,MAAM,qBAAqB,CAAA;AAmB5B,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,CACf,QAAQ,EAAE,wBAAwB,EAAE,EACpC,MAAM,EAAE,sBAAsB,EAAE,EAChC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,sDAAsD;IACtD,SAAS,EAAE,2BAA2B,CAAA;IACtC,IAAI,EAAE,sBAAsB,CAAA;IAC5B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAA;IACrD,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BhG"}

package/dist/modules/observability/operationalMetricsFlush.js

@@ -0,0 +1,40 @@
+/**
+ * Drain the collector, probe the gauges, and export both. Returns the number of samples sent
+ * (0 when there was nothing to say, in which case no request is made at all).
+ *
+ * A gauge probe that THROWS costs only its gauges: the drained counters are already out of
+ * the collector by then, and dropping them because an unrelated `COUNT(*)` failed would lose
+ * events nothing can recover. A failing SINK loses the whole flush — that is the accepted
+ * cost of an in-memory accumulator, and it is why the drop is logged rather than swallowed.
+ */
+export async function flushOperationalMetrics(deps) {
+    const counters = deps.collector.drain();
+    let gauges = [];
+    if (deps.probeGauges) {
+        try {
+            gauges = await deps.probeGauges();
+        }
+        catch (err) {
+            deps.logger?.warn('operational-metrics: gauge probe failed; exporting counters only', {
+                scope: 'operational-metrics',
+                err: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    if (counters.length === 0 && gauges.length === 0)
+        return 0;
+    try {
+        await deps.sink.exportOperational(counters, gauges, deps.now);
+    }
+    catch (err) {
+        deps.logger?.warn('operational-metrics: export failed; the drained deltas are lost', {
+            scope: 'operational-metrics',
+            counters: counters.length,
+            gauges: gauges.length,
+            err: err instanceof Error ? err.message : String(err),
+        });
+        return 0;
+    }
+    return counters.length + gauges.length;
+}
+//# sourceMappingURL=operationalMetricsFlush.js.map

package/dist/modules/observability/operationalMetricsFlush.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationalMetricsFlush.js","sourceRoot":"","sources":["../../../src/modules/observability/operationalMetricsFlush.ts"],"names":[],"mappings":"AAkDA;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAiC;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;IACvC,IAAI,MAAM,GAA6B,EAAE,CAAA;IACzC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kEAAkE,EAAE;gBACpF,KAAK,EAAE,qBAAqB;gBAC5B,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,iEAAiE,EAAE;YACnF,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAA;QACF,OAAO,CAAC,CAAA;IACV,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;AACxC,CAAC"}

package/dist/modules/observability/platform-health.logic.d.ts

@@ -16,6 +16,32 @@ export interface PlatformAlertThresholds {
     maxP99DurationMs: number;
     /** Live running/blocked/paused/pending depth at or above which `backlog_high` fires. */
     maxBacklog: number;
+    /**
+     * How many TRAILING trend buckets must be completely empty before `throughput_stalled` can
+     * fire. Expressed in buckets rather than hours so the condition scales with the configured
+     * window: the projection buckets `1h` far more finely than `7d`, and a fixed hour count
+     * would be a hair trigger on one and useless on the other.
+     */
+    stalledBuckets: number;
+    /**
+     * Runs that must have been created in the EARLIER part of the same window before a stall
+     * counts as one. Without it, a deployment that is merely idle overnight — genuinely nothing
+     * to do — pages exactly like one that is wedged, and the alert gets muted, which costs the
+     * signal on the night it matters.
+     */
+    minStalledPriorRuns: number;
+    /**
+     * Share (0..1) of the window's failures that ONE kind must account for before
+     * `failure_kind_dominant` fires. Gated by {@link minRuns} like the failure rate, so a
+     * single early failure is never "100% evicted".
+     */
+    maxFailureKindShare: number;
+    /**
+     * Consecutive failed passes of ONE sweeper before `sweep_degraded` fires. Counted by the
+     * caller (the sweep observes its own history; this logic stays pure), so a transient
+     * hiccup on a single tick is not an alert.
+     */
+    maxSweepFailures: number;
 }
 /** Conservative defaults: quiet unless the deployment is genuinely unhealthy. */
 export declare const DEFAULT_PLATFORM_ALERT_THRESHOLDS: PlatformAlertThresholds;
@@ -26,7 +52,17 @@ export declare const DEFAULT_PLATFORM_ALERT_THRESHOLDS: PlatformAlertThresholds;
  * dedup on the reason SET only (see {@link platformAlertReasons}); the fluctuating values here
  * are intentionally not carried on the card (they'd re-toast the inbox every sweep).
  */
-export declare function evaluatePlatformHealth(snapshot: PlatformObservability, thresholds: PlatformAlertThresholds): PlatformAlert[];
+export declare function evaluatePlatformHealth(snapshot: PlatformObservability, thresholds: PlatformAlertThresholds, 
+/**
+ * The worst consecutive-failure streak across the deployment's sweepers, and which sweeper
+ * it belongs to. Supplied by the CALLER because it is history rather than a property of the
+ * snapshot — this function stays pure. Omitted ⇒ `sweep_degraded` cannot fire, which is the
+ * right answer for a caller that does not track it rather than a claim that nothing failed.
+ */
+sweepFailures?: {
+    sweep: string;
+    consecutive: number;
+}): PlatformAlert[];
 /**
  * The SORTED set of reason codes from a list of fired alerts — the platform-health card's
  * stable dedup identity. Sorted so the card content is a pure function of WHICH conditions

package/dist/modules/observability/platform-health.logic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-health.logic.d.ts","sourceRoot":"","sources":["../../../src/modules/observability/platform-health.logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,wBAAwB,CAAA;AAc/B;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAA;IACf,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,gBAAgB,EAAE,MAAM,CAAA;IACxB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,iFAAiF;AACjF,eAAO,MAAM,iCAAiC,EAAE,uBAK/C,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,qBAAqB,EAC/B,UAAU,EAAE,uBAAuB,GAClC,aAAa,EAAE,CAiCjB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,mBAAmB,EAAE,CAEnF;AAeD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,EAAE,EAC9B,MAAM,EAAE,2BAA2B,GAClC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUjC"}
+{"version":3,"file":"platform-health.logic.d.ts","sourceRoot":"","sources":["../../../src/modules/observability/platform-health.logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,wBAAwB,CAAA;AAc/B;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAA;IACf,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,gBAAgB,EAAE,MAAM,CAAA;IACxB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAA;IACtB;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,iFAAiF;AACjF,eAAO,MAAM,iCAAiC,EAAE,uBAa/C,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,qBAAqB,EAC/B,UAAU,EAAE,uBAAuB;AACnC;;;;;GAKG;AACH,aAAa,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACrD,aAAa,EAAE,CAyEjB;AA6CD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,mBAAmB,EAAE,CAEnF;AAkBD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,EAAE,EAC9B,MAAM,EAAE,2BAA2B,GAClC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUjC"}