@cat-factory/server 0.316.0 → 0.318.0

package/dist/agents/containerJobAuth.d.ts

@@ -0,0 +1,146 @@
+import type { HarnessKind, ModelRef, SubscriptionVendor } from '@cat-factory/kernel';
+import type { ContainerSessionService } from '../containers/ContainerSessionService.js';
+/** A subscription token leased from the workspace's pool for a vendor. */
+export interface LeasedSubscriptionToken {
+    tokenId: string;
+    secret: string;
+}
+/** Lease the least-loaded subscription token for a vendor, or throw if none. */
+export type LeaseSubscriptionToken = (workspaceId: string, vendor: SubscriptionVendor) => Promise<LeasedSubscriptionToken>;
+/**
+ * Lease the run-initiator's OWN activated personal credential for an individual-usage
+ * vendor (Claude). Scoped to the run + user (not pooled); throws a
+ * `CredentialRequiredError` when the run has no live activation (the user must re-enter
+ * their password). Returns just the raw secret and no token id, since there is no pool
+ * rotation/usage to attribute for a single-user credential.
+ */
+export type LeasePersonalSubscriptionToken = (executionId: string, userId: string, vendor: SubscriptionVendor) => Promise<{
+    secret: string;
+}>;
+export interface ContainerJobAuthDependencies {
+    /** Mints the signed LLM-proxy session token the container uses (Pi harness). */
+    sessionService: ContainerSessionService;
+    /**
+     * Public base URL of the facade's OpenAI-compatible LLM proxy, including the
+     * `/v1` suffix: Pi posts to `${proxyBaseUrl}/chat/completions`.
+     */
+    proxyBaseUrl: string;
+    /**
+     * Resolve a workspace's owning account id, signed into the proxy session token so the
+     * proxy can lease an account-scoped API key from the merged pool. Optional; absent ⇒
+     * only the workspace + initiator scopes are leased.
+     */
+    resolveAccountId?: (workspaceId: string) => Promise<string | null | undefined>;
+    /**
+     * Lease a pooled subscription token for a vendor. Required for the Claude Code /
+     * Codex subscription harnesses; absent ⇒ those harnesses are unavailable and a
+     * subscription-only model fails loudly at dispatch.
+     */
+    leaseSubscriptionToken?: LeaseSubscriptionToken;
+    /**
+     * Lease the run-initiator's personal (individual-usage) credential for a vendor like
+     * Claude. Required to run an individual-usage model; absent ⇒ such models fail loudly
+     * at dispatch (the per-user personal store isn't wired on this deployment).
+     */
+    leasePersonalSubscriptionToken?: LeasePersonalSubscriptionToken;
+    /**
+     * Whether the WORKSPACE holds a pooled token for a vendor, and whether the USER holds their own
+     * personal one. Optional; absent ⇒ {@link ContainerJobAuthResolver.describeAuthGap} reports no
+     * gap it cannot see, and the lease itself is still the authority.
+     *
+     * They sit here as well as on the model router because they answer the same question at two
+     * moments, and only this module can turn the answer into a REFUSAL: the router asks "should a
+     * dual-mode model switch to its subscription flavour?", the gap check asks "is there a credential
+     * to open the harness this model already names?". A subscription-ONLY model (Codex) carries its
+     * harness whatever the pool holds, so nothing in the routing can notice the missing token: it
+     * surfaces as a throw from the lease, which on a dry run costs a branch, a provision and a
+     * teardown to reach.
+     */
+    hasSubscriptionToken?: (workspaceId: string, vendor: SubscriptionVendor) => Promise<boolean>;
+    hasPersonalSubscription?: (userId: string, vendor: SubscriptionVendor) => Promise<boolean>;
+    /**
+     * NATIVE LOCAL EXECUTION (local facade only, opt-in via `LOCAL_NATIVE_AGENTS`): when this
+     * returns true for a resolved subscription harness + vendor, the job carries
+     * `ambientAuth: true` INSTEAD of a leased credential. The harness (run as a host process)
+     * drives the developer's OWN installed `claude` / `codex` CLI with its ambient login. No
+     * token is leased and no personal-credential gate applies. It is passed the resolved
+     * `vendor` precisely so it can refuse a non-native vendor that merely REUSES the
+     * `claude-code` harness (GLM/Kimi/DeepSeek): those carry an Anthropic-compatible
+     * `subscriptionBaseUrl`, which ambient auth would silently drop, running the step on the
+     * developer's own Anthropic login instead of the pinned vendor. Default off everywhere
+     * else, so the Cloudflare/Node leasing paths are untouched.
+     */
+    nativeAmbientAuth?: (harness: HarnessKind, vendor: SubscriptionVendor | undefined) => boolean;
+}
+/**
+ * WHICH credential channel a dispatch needs: the harness the resolved model names, the vendor
+ * behind it, and whose it would be.
+ *
+ * Split out of {@link ContainerJobAuthRequest} because {@link
+ * ContainerJobAuthResolver.describeAuthGap} answers from exactly this much and no more. Asking it
+ * for a whole request would have an admission check invent an `executionId` for a run that does not
+ * exist yet, and a fabricated id is a thing later code reads as one.
+ */
+export interface ContainerJobAuthSubject {
+    harness: HarnessKind;
+    subscriptionVendor: SubscriptionVendor | undefined;
+    workspaceId: string;
+    /**
+     * Whoever started the work. An individual-usage credential belongs to one person, so its lease
+     * cannot be resolved without one.
+     */
+    initiatedByUserId?: string | null;
+}
+/** One dispatch's identity, as the auth channels need it. */
+export interface ContainerJobAuthRequest extends ContainerJobAuthSubject {
+    ref: ModelRef;
+    /**
+     * The correlation id the container's model calls are metered under. A pipeline step passes its
+     * run id; a single-job flow passes the id of the row that IS its run, which is also the id its
+     * personal-credential activation was minted against.
+     */
+    executionId: string;
+    /** The kind the spend is filed under, signed into the proxy session token. */
+    agentKind: string;
+}
+/** What a dispatch spreads into its job body, plus the pooled token id it must attribute back. */
+export interface ContainerJobAuth {
+    auth: Record<string, unknown>;
+    subscriptionTokenId?: string;
+}
+/**
+ * Resolve the per-job auth the harness carries: the proxy session token for Pi, or a
+ * leased subscription token for Claude Code / Codex. Spread into every job body so the
+ * per-kind bodies (and the single-job flows) can't drift on which auth they forward.
+ */
+export declare class ContainerJobAuthResolver {
+    private readonly deps;
+    constructor(deps: ContainerJobAuthDependencies);
+    /**
+     * Why this dispatch's credential could not be resolved, or `null` when it can be, WITHOUT
+     * leasing anything.
+     *
+     * For a flow that can be refused before it spends: the environment dry run asks it at admission,
+     * where "this deployment has no Codex subscription connected" is a sentence an operator can act
+     * on, rather than at the dispatch, where the same fact arrives as a failed run with a branch and
+     * a provisioned environment behind it.
+     *
+     * It lives beside {@link resolve} rather than in the caller so the two cannot disagree: every
+     * refusal below is one `resolve` would have thrown, in the same words. It is deliberately NOT a
+     * guarantee (a token can be revoked between the check and the lease, and a personal activation
+     * is minted after it), so the lease stays the authority and this is only the cheap early no.
+     */
+    describeAuthGap(subject: ContainerJobAuthSubject): Promise<string | null>;
+    /**
+     * The three refusals {@link describeAuthGap} and {@link resolve} share, worded ONCE.
+     *
+     * Shared because the whole value of the gap check is that admission refuses for the reason the
+     * dispatch would have: two spellings of "no Codex subscription connected" is how an operator
+     * comes to fix the thing the earlier message named and hit the later one.
+     */
+    private harnessUnconfigured;
+    private personalStoreUnconfigured;
+    private noIdentifiedInitiator;
+    resolve(request: ContainerJobAuthRequest): Promise<ContainerJobAuth>;
+}
+//# sourceMappingURL=containerJobAuth.d.ts.map

package/dist/agents/containerJobAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerJobAuth.d.ts","sourceRoot":"","sources":["../../src/agents/containerJobAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAMpF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAA;AAiBvF,0EAA0E;AAC1E,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,gFAAgF;AAChF,MAAM,MAAM,sBAAsB,GAAG,CACnC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,KACvB,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,8BAA8B,GAAG,CAC3C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,kBAAkB,KACvB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAEhC,MAAM,WAAW,4BAA4B;IAC3C,gFAAgF;IAChF,cAAc,EAAE,uBAAuB,CAAA;IACvC;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAC9E;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAA;IAC/C;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,8BAA8B,CAAA;IAC/D;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5F,uBAAuB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1F;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,GAAG,SAAS,KAAK,OAAO,CAAA;CAC9F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,WAAW,CAAA;IACpB,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,6DAA6D;AAC7D,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,GAAG,EAAE,QAAQ,CAAA;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,kGAAkG;AAClG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,4BAA4B,EAAI;IAEnE;;;;;;;;;;;;;OAaG;IACG,eAAe,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoC9E;IAED;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,qBAAqB;IAIvB,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4FzE;CACF"}

package/dist/agents/containerJobAuth.js

@@ -0,0 +1,171 @@
+import { CredentialRequiredError, SUBSCRIPTION_VENDORS, isIndividualVendor, } from '@cat-factory/kernel';
+/**
+ * Resolve the per-job auth the harness carries: the proxy session token for Pi, or a
+ * leased subscription token for Claude Code / Codex. Spread into every job body so the
+ * per-kind bodies (and the single-job flows) can't drift on which auth they forward.
+ */
+export class ContainerJobAuthResolver {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Why this dispatch's credential could not be resolved, or `null` when it can be, WITHOUT
+     * leasing anything.
+     *
+     * For a flow that can be refused before it spends: the environment dry run asks it at admission,
+     * where "this deployment has no Codex subscription connected" is a sentence an operator can act
+     * on, rather than at the dispatch, where the same fact arrives as a failed run with a branch and
+     * a provisioned environment behind it.
+     *
+     * It lives beside {@link resolve} rather than in the caller so the two cannot disagree: every
+     * refusal below is one `resolve` would have thrown, in the same words. It is deliberately NOT a
+     * guarantee (a token can be revoked between the check and the lease, and a personal activation
+     * is minted after it), so the lease stays the authority and this is only the cheap early no.
+     */
+    async describeAuthGap(subject) {
+        const { harness, subscriptionVendor, workspaceId } = subject;
+        // The Pi harness mints its own proxy session token, so there is nothing to be short of.
+        if (harness === 'pi')
+            return null;
+        if (this.deps.nativeAmbientAuth?.(harness, subscriptionVendor))
+            return null;
+        if (!subscriptionVendor)
+            return this.harnessUnconfigured(harness);
+        if (isIndividualVendor(subscriptionVendor)) {
+            if (!this.deps.leasePersonalSubscriptionToken) {
+                return this.personalStoreUnconfigured(subscriptionVendor);
+            }
+            const userId = subject.initiatedByUserId ?? undefined;
+            if (!userId)
+                return this.noIdentifiedInitiator(subscriptionVendor);
+            // The password-backed ACTIVATION is minted per run and cannot exist yet; what is checkable
+            // now is whether this person has the subscription at all.
+            if (this.deps.hasPersonalSubscription &&
+                !(await this.deps.hasPersonalSubscription(userId, subscriptionVendor))) {
+                return (`Running a ${subscriptionVendor} model needs your own personal ${subscriptionVendor} ` +
+                    `subscription, and none is connected to your account.`);
+            }
+            return null;
+        }
+        if (!this.deps.leaseSubscriptionToken)
+            return this.harnessUnconfigured(harness);
+        if (this.deps.hasSubscriptionToken &&
+            !(await this.deps.hasSubscriptionToken(workspaceId, subscriptionVendor))) {
+            return (`This model runs on a ${subscriptionVendor} subscription, and this workspace has no ` +
+                `${subscriptionVendor} subscription token connected. Connect one, or pick a different model.`);
+        }
+        return null;
+    }
+    /**
+     * The three refusals {@link describeAuthGap} and {@link resolve} share, worded ONCE.
+     *
+     * Shared because the whole value of the gap check is that admission refuses for the reason the
+     * dispatch would have: two spellings of "no Codex subscription connected" is how an operator
+     * comes to fix the thing the earlier message named and hit the later one.
+     */
+    harnessUnconfigured(harness) {
+        return (`The ${harness} harness is not configured on this deployment; connect a ` +
+            `subscription token or pick a different model.`);
+    }
+    personalStoreUnconfigured(vendor) {
+        return (`Personal ${vendor} subscriptions are not configured on this ` +
+            `deployment (no ENCRYPTION_KEY); pick a different model.`);
+    }
+    noIdentifiedInitiator(vendor) {
+        return `Running a ${vendor} model requires a signed-in user with a personal subscription.`;
+    }
+    async resolve(request) {
+        const { harness, ref, subscriptionVendor, workspaceId, executionId, agentKind } = request;
+        const initiatedByUserId = request.initiatedByUserId ?? undefined;
+        if (harness === 'pi') {
+            const accountId = this.deps.resolveAccountId
+                ? await this.deps.resolveAccountId(workspaceId)
+                : undefined;
+            const sessionToken = await this.deps.sessionService.mint({
+                workspaceId,
+                accountId: accountId ?? undefined,
+                userId: initiatedByUserId,
+                executionId,
+                agentKind,
+                provider: ref.provider,
+                model: ref.model,
+            });
+            // `proxyPhasePath` states what THIS backend serves: the phase-tagged completions route
+            // the harness tags Pi's base URL with, so each call is attributed to the run phase that
+            // spent it (`docs/initiatives/token-burn-instrumentation.md`). Unconditional: the route
+            // is part of `llmProxyController`, so any backend running this code has it. It is the
+            // harness that may be older or newer, and telling it what we serve is what keeps an
+            // image pinned by a runner pool (or `LOCAL_HARNESS_IMAGE`) from posting every model call
+            // to a 404. Same shape as `webSearch` on the step path: the backend declares, the harness
+            // points.
+            return {
+                auth: {
+                    harness,
+                    proxyBaseUrl: this.deps.proxyBaseUrl,
+                    proxyPhasePath: true,
+                    sessionToken,
+                },
+            };
+        }
+        // Native local execution: the harness runs the developer's own CLI with its ambient
+        // login, so we lease NOTHING and gate NOTHING, and only flag ambient auth for the harness.
+        // Passed the vendor so it can refuse a non-native vendor reusing the `claude-code`
+        // harness (GLM/Kimi/DeepSeek), whose subscriptionBaseUrl ambient auth would drop.
+        if (this.deps.nativeAmbientAuth?.(harness, subscriptionVendor)) {
+            return { auth: { harness, ambientAuth: true } };
+        }
+        if (!subscriptionVendor)
+            throw new Error(this.harnessUnconfigured(harness));
+        // Individual-usage vendors (Claude) are NOT pooled: lease the run-initiator's OWN
+        // activated personal credential. Pooled vendors (GLM/Kimi/DeepSeek/Codex) lease
+        // from the workspace pool. Either path hands the RAW credential to the resolved
+        // runner transport (see the trust note below).
+        let secret;
+        let subscriptionTokenId;
+        if (isIndividualVendor(subscriptionVendor)) {
+            if (!this.deps.leasePersonalSubscriptionToken) {
+                throw new Error(this.personalStoreUnconfigured(subscriptionVendor));
+            }
+            if (!initiatedByUserId) {
+                // No identified initiator (auth-disabled/local dev): an individual-usage
+                // credential is owned by a specific user and can't be resolved without one.
+                throw new CredentialRequiredError(this.noIdentifiedInitiator(subscriptionVendor), {
+                    vendor: subscriptionVendor,
+                    reason: 'no_subscription',
+                });
+            }
+            // Throws CredentialRequiredError(password_required) when the run has no live
+            // activation: the dispatch path surfaces it as a clear, retriable failure.
+            const leased = await this.deps.leasePersonalSubscriptionToken(executionId, initiatedByUserId, subscriptionVendor);
+            secret = leased.secret;
+        }
+        else {
+            if (!this.deps.leaseSubscriptionToken)
+                throw new Error(this.harnessUnconfigured(harness));
+            const leased = await this.deps.leaseSubscriptionToken(workspaceId, subscriptionVendor);
+            subscriptionTokenId = leased.tokenId;
+            secret = leased.secret;
+        }
+        // SECURITY/TRUST: unlike the Pi harness (short-lived, model-locked proxy session
+        // token) this hands the RAW, long-lived subscription credential (a Claude OAuth
+        // token or a full ChatGPT auth.json) to the resolved runner transport. For the
+        // Cloudflare backend that is an ephemeral, managed per-run container. For a
+        // self-hosted runner pool it is the WORKSPACE'S OWN BYO infra (it connected the
+        // pool), so the credential stays within the workspace's trust domain, but a
+        // workspace should only point its subscription-harness steps at a runner pool it
+        // operates, since the credential leaves the backend to reach it.
+        // Non-Anthropic Claude-Code vendors (GLM/Kimi/DeepSeek) need their Anthropic-
+        // compatible base URL; Anthropic itself uses the OAuth token against api.anthropic.com.
+        const baseUrl = SUBSCRIPTION_VENDORS[subscriptionVendor].baseUrl;
+        return {
+            auth: {
+                harness,
+                subscriptionToken: secret,
+                ...(baseUrl ? { subscriptionBaseUrl: baseUrl } : {}),
+            },
+            ...(subscriptionTokenId ? { subscriptionTokenId } : {}),
+        };
+    }
+}
+//# sourceMappingURL=containerJobAuth.js.map

package/dist/agents/containerJobAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerJobAuth.js","sourceRoot":"","sources":["../../src/agents/containerJobAuth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AA0I5B;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IACN,IAAI;IAAjC,YAA6B,IAAkC;oBAAlC,IAAI;IAAiC,CAAC;IAEnE;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,eAAe,CAAC,OAAgC;QACpD,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC5D,wFAAwF;QACxF,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3E,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;QACjE,IAAI,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC,yBAAyB,CAAC,kBAAkB,CAAC,CAAA;YAC3D,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,IAAI,SAAS,CAAA;YACrD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;YAClE,2FAA2F;YAC3F,0DAA0D;YAC1D,IACE,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBACjC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,EACtE,CAAC;gBACD,OAAO,CACL,aAAa,kBAAkB,kCAAkC,kBAAkB,GAAG;oBACtF,sDAAsD,CACvD,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAC/E,IACE,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,EACxE,CAAC;YACD,OAAO,CACL,wBAAwB,kBAAkB,2CAA2C;gBACrF,GAAG,kBAAkB,wEAAwE,CAC9F,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CAAC,OAAoB;QAC9C,OAAO,CACL,OAAO,OAAO,2DAA2D;YACzE,+CAA+C,CAChD,CAAA;IACH,CAAC;IAEO,yBAAyB,CAAC,MAA0B;QAC1D,OAAO,CACL,YAAY,MAAM,4CAA4C;YAC9D,yDAAyD,CAC1D,CAAA;IACH,CAAC;IAEO,qBAAqB,CAAC,MAA0B;QACtD,OAAO,aAAa,MAAM,gEAAgE,CAAA;IAC5F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAgC;QAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;QACzF,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,SAAS,CAAA;QAChE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAC1C,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,SAAS,CAAA;YACb,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBACvD,WAAW;gBACX,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,MAAM,EAAE,iBAAiB;gBACzB,WAAW;gBACX,SAAS;gBACT,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAA;YACF,uFAAuF;YACvF,wFAAwF;YACxF,wFAAwF;YACxF,sFAAsF;YACtF,oFAAoF;YACpF,yFAAyF;YACzF,0FAA0F;YAC1F,UAAU;YACV,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO;oBACP,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;oBACpC,cAAc,EAAE,IAAI;oBACpB,YAAY;iBACb;aACF,CAAA;QACH,CAAC;QACD,oFAAoF;QACpF,2FAA2F;QAC3F,mFAAmF;QACnF,kFAAkF;QAClF,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3E,kFAAkF;QAClF,gFAAgF;QAChF,gFAAgF;QAChF,+CAA+C;QAC/C,IAAI,MAAc,CAAA;QAClB,IAAI,mBAAuC,CAAA;QAC3C,IAAI,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,kBAAkB,CAAC,CAAC,CAAA;YACrE,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,yEAAyE;gBACzE,4EAA4E;gBAC5E,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,EAAE;oBAChF,MAAM,EAAE,kBAAkB;oBAC1B,MAAM,EAAE,iBAAiB;iBAC1B,CAAC,CAAA;YACJ,CAAC;YACD,6EAA6E;YAC7E,2EAA2E;YAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAC3D,WAAW,EACX,iBAAiB,EACjB,kBAAkB,CACnB,CAAA;YACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;YACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAA;YACtF,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAA;YACpC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QACxB,CAAC;QACD,iFAAiF;QACjF,gFAAgF;QAChF,+EAA+E;QAC/E,4EAA4E;QAC5E,gFAAgF;QAChF,4EAA4E;QAC5E,iFAAiF;QACjF,iEAAiE;QACjE,8EAA8E;QAC9E,wFAAwF;QACxF,MAAM,OAAO,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAA;QAChE,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO;gBACP,iBAAiB,EAAE,MAAM;gBACzB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD;YACD,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;CACF"}

package/dist/agents/dispatchPromptContext.d.ts

@@ -0,0 +1,30 @@
+import type { AgentRunContext } from '@cat-factory/kernel';
+import type { DesignImageDelivery } from '@cat-factory/kernel';
+import type { ResolvedToolServers } from './toolServers.js';
+import type { ResolvedTestCredentials } from './testCredentials.js';
+/**
+ * The context the dispatch's PROMPTS are rendered from: the run context the engine built, plus
+ * the facts only the dispatch knows.
+ *
+ * Its own function because the list keeps growing and each entry is there for the same reason: the
+ * value depends on the RESOLVED harness, model or credential store, none of which the engine has
+ * in hand when it builds the context. The prompt and the agent-context snapshot must both describe
+ * the container that was actually started, so this is the one place a dispatch-level fact is
+ * layered on, rather than each consumer re-deriving it and one of them forgetting.
+ */
+export declare function buildDispatchPromptContext(context: AgentRunContext, resolved: {
+    /** What MCP the resolved harness could actually be given, and what could not be wired. */
+    tools: ResolvedToolServers;
+    /** Whether the design pictures were attached, and the reason when they were not. */
+    designImageDelivery?: DesignImageDelivery | undefined;
+    /**
+     * The frame's test credentials as resolved HERE, from the read that produced the values this
+     * job carries. It overrides the engine's own earlier read of the same store, and normally says
+     * the same thing. When it does not, only this one describes the container the prompt is for,
+     * and the divergence is the one that matters: a store that answered at admission and failed at
+     * dispatch would otherwise advertise `$API_TOKEN` to an agent whose shell has no such
+     * variable, which the agent reads as a service rejecting a credential it was given.
+     */
+    testCredentials?: ResolvedTestCredentials | undefined;
+}): AgentRunContext;
+//# sourceMappingURL=dispatchPromptContext.d.ts.map

package/dist/agents/dispatchPromptContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchPromptContext.d.ts","sourceRoot":"","sources":["../../src/agents/dispatchPromptContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAEnE;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE;IACR,0FAA0F;IAC1F,KAAK,EAAE,mBAAmB,CAAA;IAC1B,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAA;IACrD;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAA;CACtD,GACA,eAAe,CAWjB"}

package/dist/agents/dispatchPromptContext.js

@@ -0,0 +1,23 @@
+/**
+ * The context the dispatch's PROMPTS are rendered from: the run context the engine built, plus
+ * the facts only the dispatch knows.
+ *
+ * Its own function because the list keeps growing and each entry is there for the same reason: the
+ * value depends on the RESOLVED harness, model or credential store, none of which the engine has
+ * in hand when it builds the context. The prompt and the agent-context snapshot must both describe
+ * the container that was actually started, so this is the one place a dispatch-level fact is
+ * layered on, rather than each consumer re-deriving it and one of them forgetting.
+ */
+export function buildDispatchPromptContext(context, resolved) {
+    const { tools, designImageDelivery, testCredentials } = resolved;
+    return {
+        ...context,
+        ...(tools.toolServers.length ? { toolServers: tools.toolServers } : {}),
+        ...(tools.unavailableToolServers.length
+            ? { unavailableToolServers: tools.unavailableToolServers }
+            : {}),
+        ...(designImageDelivery ? { designImageDelivery } : {}),
+        ...(testCredentials ? { testSecrets: testCredentials.brief } : {}),
+    };
+}
+//# sourceMappingURL=dispatchPromptContext.js.map

package/dist/agents/dispatchPromptContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchPromptContext.js","sourceRoot":"","sources":["../../src/agents/dispatchPromptContext.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAwB,EACxB,QAcC;IAED,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAA;IAChE,OAAO;QACL,GAAG,OAAO;QACV,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM;YACrC,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE;YAC1D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/agents/singleKindModel.d.ts

@@ -0,0 +1,46 @@
+import type { BlockRepository, HarnessKind, LocalModelDeclarations, ModelFlavor, ModelRef, SubscriptionVendor } from '@cat-factory/kernel';
+import { type ModelRouterDependencies } from './ModelRouter.js';
+/** What one single-job dispatch runs: the model, the harness for it, and the vendor it leases. */
+export interface SingleKindModel {
+    ref: ModelRef;
+    harness: HarnessKind;
+    subscriptionVendor?: SubscriptionVendor;
+}
+/** Resolve {@link SingleKindModel} for one dispatch. */
+export type ResolveSingleKindModel = (input: {
+    workspaceId: string;
+    /** The frame (board block) the job runs against: whatever it pins, and its preset. */
+    blockId: string;
+    /** The kind whose preset entry decides the model, and whose spend the calls are filed under. */
+    agentKind: string;
+    /** Whoever started it: whose personal (individual-usage) subscription may be leased. */
+    initiatedByUserId?: string | null;
+}) => Promise<SingleKindModel>;
+export interface SingleKindModelResolverDependencies extends ModelRouterDependencies {
+    /** Read the frame's own model pins. `null` (a deleted frame) ⇒ nothing is pinned. */
+    blockRepository: Pick<BlockRepository, 'get'>;
+    /**
+     * The route ORDER the preset in force states. Resolved beside the model rather than left out,
+     * because the two come from one row: a preset that puts Bedrock ahead of a direct key means it
+     * for every dispatch its model reaches, and a single-job flow that skipped it would run the
+     * preset's model over a route the preset ranked last.
+     */
+    resolvePresetProviderPreference?: (workspaceId: string, modelPresetId?: string) => Promise<readonly ModelFlavor[] | undefined>;
+    /**
+     * The INITIATOR's local-runner declarations, folded onto a resolved local ref by the shared
+     * resolver (a local model has no catalog entry to carry its modality). Threaded for the reason
+     * {@link import('./ModelRouter.js').ModelRouter.resolveRef} documents: ONE resolution serves
+     * every path, so a workspace preset naming an Ollama model must not resolve to a ref with the
+     * modality folded on for a pipeline step and left off for a single-job dispatch at the same
+     * frame. Absent ⇒ no local runners are consulted, which is the honest answer for a flow with no
+     * identified initiator.
+     */
+    resolveLocalModelDeclarations?: (userId: string) => Promise<readonly LocalModelDeclarations[] | undefined>;
+}
+/**
+ * Build the shared single-job model resolution: the frame's pins and the preset in force, folded
+ * through the same {@link ModelRouter} the pipeline dispatch uses, so a dry run and a coder step on
+ * the same frame cannot disagree about which model the workspace chose.
+ */
+export declare function buildSingleKindModelResolver(deps: SingleKindModelResolverDependencies): ResolveSingleKindModel;
+//# sourceMappingURL=singleKindModel.d.ts.map

package/dist/agents/singleKindModel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleKindModel.d.ts","sourceRoot":"","sources":["../../src/agents/singleKindModel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,sBAAsB,EACtB,WAAW,EACX,QAAQ,EACR,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAe,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAwB5E,kGAAkG;AAClG,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,QAAQ,CAAA;IACb,OAAO,EAAE,WAAW,CAAA;IACpB,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC;AAED,wDAAwD;AACxD,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAA;IACf,gGAAgG;IAChG,SAAS,EAAE,MAAM,CAAA;IACjB,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;AAE9B,MAAM,WAAW,mCAAoC,SAAQ,uBAAuB;IAClF,qFAAqF;IACrF,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAC7C;;;;;OAKG;IACH,+BAA+B,CAAC,EAAE,CAChC,WAAW,EAAE,MAAM,EACnB,aAAa,CAAC,EAAE,MAAM,KACnB,OAAO,CAAC,SAAS,WAAW,EAAE,GAAG,SAAS,CAAC,CAAA;IAChD;;;;;;;;OAQG;IACH,6BAA6B,CAAC,EAAE,CAC9B,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,SAAS,sBAAsB,EAAE,GAAG,SAAS,CAAC,CAAA;CAC5D;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,mCAAmC,GACxC,sBAAsB,CA0BxB"}

package/dist/agents/singleKindModel.js

@@ -0,0 +1,59 @@
+import { describeError } from '@cat-factory/kernel';
+import { ModelRouter } from './ModelRouter.js';
+import { logger } from '../observability/logger.js';
+/**
+ * Build the shared single-job model resolution: the frame's pins and the preset in force, folded
+ * through the same {@link ModelRouter} the pipeline dispatch uses, so a dry run and a coder step on
+ * the same frame cannot disagree about which model the workspace chose.
+ */
+export function buildSingleKindModelResolver(deps) {
+    const router = new ModelRouter(deps);
+    return async (input) => {
+        const block = await readFrame(deps, input.workspaceId, input.blockId);
+        const providerPreference = deps.resolvePresetProviderPreference
+            ? await deps.resolvePresetProviderPreference(input.workspaceId, block?.modelPresetId)
+            : undefined;
+        const localModelDeclarations = deps.resolveLocalModelDeclarations && input.initiatedByUserId
+            ? await deps.resolveLocalModelDeclarations(input.initiatedByUserId)
+            : undefined;
+        return router.resolveDispatchRef({
+            agentKind: input.agentKind,
+            workspaceId: input.workspaceId,
+            ...(input.initiatedByUserId ? { initiatedByUserId: input.initiatedByUserId } : {}),
+            ...(providerPreference?.length ? { providerPreference } : {}),
+            ...(localModelDeclarations?.length ? { localModelDeclarations } : {}),
+            block: {
+                ...(block?.modelId ? { modelId: block.modelId } : {}),
+                ...(block?.modelPresetId ? { modelPresetId: block.modelPresetId } : {}),
+            },
+        }, input.workspaceId);
+    };
+}
+/**
+ * The frame, or NOTHING, on any answer this read can give.
+ *
+ * A frame that cannot be read pins nothing, which is the same statement as a frame that pins
+ * nothing: the workspace's default preset then decides. Deliberately not an error, and swallowed
+ * on a THROW as well as on a `null`: the two are the same fact through different channels, and in
+ * mothership mode this read crosses `/internal/persistence`, so a transient RPC failure is the
+ * likelier of the pair. The read is here to HONOUR a pin; refusing a diagnostic because a
+ * projection lagged (or a repository blinked) would trade a resolvable model for a run that failed
+ * at `probing` with an environment already standing.
+ *
+ * Logged rather than silent, because a pin that stopped being honoured is otherwise invisible: the
+ * dispatch succeeds on the preset's model and nothing says the frame asked for another.
+ */
+async function readFrame(deps, workspaceId, blockId) {
+    try {
+        return await deps.blockRepository.get(workspaceId, blockId);
+    }
+    catch (error) {
+        logger.warn('single-job dispatch: the frame could not be read, so its model pin is ignored', {
+            workspaceId,
+            blockId,
+            ...describeError(error),
+        });
+        return null;
+    }
+}
+//# sourceMappingURL=singleKindModel.js.map

package/dist/agents/singleKindModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleKindModel.js","sourceRoot":"","sources":["../../src/agents/singleKindModel.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,WAAW,EAAgC,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAoEnD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAA;IACpC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACrE,MAAM,kBAAkB,GAAG,IAAI,CAAC,+BAA+B;YAC7D,CAAC,CAAC,MAAM,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC;YACrF,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,sBAAsB,GAC1B,IAAI,CAAC,6BAA6B,IAAI,KAAK,CAAC,iBAAiB;YAC3D,CAAC,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACnE,CAAC,CAAC,SAAS,CAAA;QACf,OAAO,MAAM,CAAC,kBAAkB,CAC9B;YACE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK,EAAE;gBACL,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;SACF,EACD,KAAK,CAAC,WAAW,CAClB,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,SAAS,CACtB,IAAyC,EACzC,WAAmB,EACnB,OAAe;IAEf,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,+EAA+E,EAAE;YAC3F,WAAW;YACX,OAAO;YACP,GAAG,aAAa,CAAC,KAAK,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/agents/testCredentials.d.ts

@@ -0,0 +1,25 @@
+import type { Logger, TestCredentialBrief, TestSecretEntry } from '@cat-factory/kernel';
+/** What one dispatch needs: the values for the container, and the state for the prompt. */
+export interface ResolvedTestCredentials {
+    /** The pairs the harness turns into environment variables of this one job's agent process. */
+    env: {
+        key: string;
+        value: string;
+    }[];
+    /** The same read, as the state the prompt states. Never carries a value. */
+    brief: TestCredentialBrief;
+}
+/**
+ * Resolve a frame's test credentials for a dispatch that is entitled to them.
+ *
+ * `resolve` absent ⇒ this deployment has no sealed store wired at all, which is a DEPLOYMENT fact
+ * (`unwired`) rather than an empty list: no service on the board can be handed credentials, so
+ * telling a human to configure this one is the wrong instruction.
+ */
+export declare function resolveTestCredentials(args: {
+    resolve?: (workspaceId: string, blockId: string) => Promise<TestSecretEntry[]>;
+    workspaceId: string;
+    blockId: string;
+    logger: Logger;
+}): Promise<ResolvedTestCredentials>;
+//# sourceMappingURL=testCredentials.d.ts.map

package/dist/agents/testCredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testCredentials.d.ts","sourceRoot":"","sources":["../../src/agents/testCredentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAsBvF,2FAA2F;AAC3F,MAAM,WAAW,uBAAuB;IACtC,8FAA8F;IAC9F,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACrC,4EAA4E;IAC5E,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IAC9E,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAanC"}

package/dist/agents/testCredentials.js

@@ -0,0 +1,23 @@
+import { runBestEffort } from '@cat-factory/kernel';
+/**
+ * Resolve a frame's test credentials for a dispatch that is entitled to them.
+ *
+ * `resolve` absent ⇒ this deployment has no sealed store wired at all, which is a DEPLOYMENT fact
+ * (`unwired`) rather than an empty list: no service on the board can be handed credentials, so
+ * telling a human to configure this one is the wrong instruction.
+ */
+export async function resolveTestCredentials(args) {
+    if (!args.resolve)
+        return { env: [], brief: { status: 'unwired' } };
+    const entries = await runBestEffort(args.logger, 'resolve the frame test credentials', () => args.resolve(args.workspaceId, args.blockId));
+    if (!entries)
+        return { env: [], brief: { status: 'unreadable' } };
+    return {
+        env: entries.map((entry) => ({ key: entry.key, value: entry.value })),
+        brief: {
+            status: 'resolved',
+            refs: entries.map((entry) => ({ key: entry.key, description: entry.description })),
+        },
+    };
+}
+//# sourceMappingURL=testCredentials.js.map

package/dist/agents/testCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testCredentials.js","sourceRoot":"","sources":["../../src/agents/testCredentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AA6BnD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAK5C;IACC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAA;IACnE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,oCAAoC,EAAE,GAAG,EAAE,CAC1F,IAAI,CAAC,OAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAC9C,CAAA;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAA;IACjE,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,KAAK,EAAE;YACL,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;SACnF;KACF,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -45,6 +45,9 @@ export { bedrockAllowListFromEnv, bedrockRegionFromEnv, type BedrockEnv } from '
 export { ContainerRepoBootstrapper, type ContainerRepoBootstrapperDependencies, } from './agents/ContainerRepoBootstrapper.js';
 export { ContainerEnvConfigRepairer, type ContainerEnvConfigRepairerDependencies, } from './agents/ContainerEnvConfigRepairer.js';
 export { ContainerEnvironmentProbeAgent, type ContainerEnvironmentProbeAgentDependencies, } from './agents/ContainerEnvironmentProbeAgent.js';
+export { ContainerJobAuthResolver, type ContainerJobAuth, type ContainerJobAuthDependencies, type ContainerJobAuthRequest, type ContainerJobAuthSubject, type LeasePersonalSubscriptionToken, type LeaseSubscriptionToken, } from './agents/containerJobAuth.js';
+export { ContainerJobAccounting, type ContainerJobAccountingDeps, } from './agents/containerJobAccounting.js';
+export { buildSingleKindModelResolver, type ResolveSingleKindModel, type SingleKindModel, type SingleKindModelResolverDependencies, } from './agents/singleKindModel.js';
 export { buildResolveRepoTarget, buildResolveRepoTargets, buildListWorkspaceRunRepos, type ResolveRepoTargetDependencies, type ResolveRepoTargetsDependencies, type ResolveRepoTargets, type ResolvedRepoTargets, type RepoCheckout, type ListWorkspaceRunRepos, type ListWorkspaceRunReposDependencies, type WorkspaceRunRepo, } from './agents/resolveRepoTarget.js';
 export { makeRepoFiles, makeResolveDeployCloneTarget, makeResolveRepoFiles, makeResolveRepoFilesForCoords, makeResolveRunRepoContext, runRepoOps, } from './agents/repoFiles.js';
 export { makePreviewJobBuilder, type PreviewJobBuilderDependencies, } from './preview/previewJobBuilder.js';