@cat-factory/server 0.325.1 → 0.326.0

package/dist/agents/DelegatedAgentExecutor.js

@@ -0,0 +1,537 @@
+import { ConflictError, UnavailableError, describeError, getErrorMessage, stepJobId, } from '@cat-factory/kernel';
+import { delegatedExecutorFor } from '@cat-factory/agents';
+import { resolveAprioriWorkingBranch } from '@cat-factory/contracts';
+import { composeDelegationBrief, briefRepoProvider } from './brief.js';
+import { ensureDelegatedWorkBranch } from './delegationWorkBranch.js';
+import { recordAgentContextSnapshot } from './agentContextRecord.js';
+import { resolveDelegationCredentials } from './delegationCredentials.js';
+/**
+ * Runs a `delegated`-surface step on a registered external executor.
+ *
+ * Async by construction: an external run is polled, never awaited, which is the same shape the
+ * container executor has and the reason both durable drivers already know how to drive it.
+ */
+export class DelegatedAgentExecutor {
+    deps;
+    log;
+    /**
+     * Built executors, memoised per id for the life of this instance.
+     *
+     * A definition's `create` may build a client, and this executor is constructed once per app
+     * (per isolate on the Worker), so building per dispatch would discard whatever an executor
+     * warmed. Memoising on the INSTANCE rather than a module map is what keeps it out of the
+     * module-global trap every registry in this codebase is built to avoid.
+     */
+    built = new Map();
+    constructor(deps) {
+        this.deps = deps;
+        this.log = deps.logger.child({ component: 'delegatedAgent' });
+    }
+    /** Every delegated step is polled: an external run outlives any request of ours. */
+    runsAsync(_context) {
+        return true;
+    }
+    /**
+     * A delegated step resolves NO model, and that is the honest answer rather than a gap.
+     *
+     * The external executor picks its own, through its own credentials, and the platform never sees
+     * it. Returning a guess would put a model on the board that nothing ran, and every reader
+     * downstream (the run card, the spend rollup, the debug overview) would treat it as the thing
+     * that spent the tokens it also cannot see.
+     */
+    resolveModel(_context) {
+        return Promise.resolve(undefined);
+    }
+    /**
+     * Not quota-based. A delegated run spends nothing of OURS: no pooled subscription token is
+     * leased and no proxy call is metered, so it is neither quota nor budget.
+     */
+    isQuotaBased(_context) {
+        return Promise.resolve(false);
+    }
+    /**
+     * Start (or RE-ATTACH to) this step's external work.
+     *
+     * Idempotent per correlation key, which is what the port asks of every executor and what the
+     * engine's claim-before-effect makes possible on this side: the key is derived from the run, the
+     * kind and the dispatch epoch, so a replayed dispatch produces the same key and the executor is
+     * asked to recognise its own run rather than start another.
+     */
+    async startJob(context) {
+        const { workspaceId, executionId, blockId } = requireIds(context);
+        const definition = this.requireDefinition(context.agentKind);
+        const executor = this.executorFor(definition);
+        const correlationKey = stepJobId(executionId, context.agentKind, context.dispatchEpoch);
+        const { brief, aprioriWork } = await this.composeBrief(context, {
+            workspaceId,
+            executionId,
+            blockId,
+            correlationKey,
+        });
+        const jobLog = this.log.child({
+            workspaceId,
+            executionId,
+            jobId: correlationKey,
+            agentKind: context.agentKind,
+            executor: definition.id,
+        });
+        const credentials = await resolveDelegationCredentials({
+            definition,
+            workspaceId,
+            blockId,
+            resolveToolSecrets: this.deps.resolveToolSecrets,
+            logger: jobLog,
+        });
+        // After everything the platform can refuse on its own (the repo, the brief, the credentials),
+        // so a step that was never going to dispatch leaves no ref behind. It cannot move later: a CI
+        // system handed a branch that is not there fails at checkout rather than reporting anything
+        // this platform can act on, so `start` must find it already made. What that ordering does NOT
+        // buy is a ref-free failure INSIDE the dispatch; a create followed by an executor that refuses
+        // leaves the branch, and the next attempt re-uses it.
+        await this.prepareWorkBranch(definition, brief, aprioriWork, jobLog);
+        let started;
+        try {
+            started = await executor.start(brief, credentials);
+        }
+        catch (error) {
+            jobLog.warn('delegated executor refused the dispatch', describeError(error));
+            throw new UnavailableError(`The "${definition.id}" executor could not start this step: ${getErrorMessage(error)}`, 'delegated_executor_failed', { executor: definition.id });
+        }
+        if (!started.externalId) {
+            // Refused rather than recorded, because a dispatch with no external id can never be polled:
+            // the step would park on a job nothing can settle and fail hours later on its poll budget,
+            // naming a timeout instead of the contract the executor broke.
+            throw new UnavailableError(`The "${definition.id}" executor started this step and returned no external id, so the ` +
+                'platform has nothing to poll. An executor whose system reports no id at start is ' +
+                "expected to recover one by the brief's correlation key before returning.", 'delegated_executor_failed', { executor: definition.id });
+        }
+        jobLog.info('delegated work started', {
+            externalId: started.externalId,
+            ...(started.url ? { externalUrl: started.url } : {}),
+        });
+        // The same snapshot a container dispatch files, from the same allow-list: what the agent was
+        // told is auditable through `/api/v1/debug/runs/:runId/agent-context` whoever ran it. The
+        // credentials resolved above are deliberately not in scope of the body handed to it.
+        await recordAgentContextSnapshot(this.deps.agentContextObservability, jobLog, {
+            context,
+            body: snapshotBody(brief),
+            // There is no model to name: the executor chose one we never saw. Naming the EXECUTOR under
+            // a provider of `delegated` says exactly that, where a blank would read as a dispatch that
+            // resolved nothing and a borrowed default would name a model that ran nowhere.
+            model: `delegated:${definition.id}`,
+            workspaceId,
+            executionId,
+        });
+        return {
+            jobId: correlationKey,
+            runId: executionId,
+            workspaceId,
+            // The block, so the POLL resolves this executor's credentials in the scope the dispatch
+            // did. The engine re-supplies it from the run, but a handle that answers for itself is
+            // what keeps a non-durable caller (`run()`'s own drive, a test) on the same path.
+            blockId,
+            agentKind: context.agentKind,
+            ...(context.initiatedByUserId ? { initiatedByUserId: context.initiatedByUserId } : {}),
+            repo: {
+                owner: brief.repo.owner,
+                name: brief.repo.name,
+                baseBranch: brief.branches.base,
+                provider: brief.repo.provider,
+            },
+            delegated: {
+                executor: definition.id,
+                externalId: started.externalId,
+                ...(started.url ? { url: started.url } : {}),
+                // What a later poll cannot derive: a handle carries the run, and the work branch is named
+                // from the BLOCK. An executor reading back what its own system produced needs it, and
+                // guessing puts the wrong pull request on the block.
+                branches: brief.branches,
+                // The repo the WORK targets, for the same reason and with a sharper edge: it is routinely
+                // not the repo the executor's own job lives in (an automation repo dispatching against many
+                // product repos is the ordinary shape), so an executor reading back what it produced from
+                // its OWN configured repository finds nothing on every such deployment.
+                repo: { owner: brief.repo.owner, name: brief.repo.name },
+            },
+        };
+    }
+    /**
+     * Poll the external work, re-resolving the executor's credentials FIRST.
+     *
+     * Re-resolved rather than carried on the handle, and that is not a caching miss: a delegated
+     * poll can run hours after the dispatch, a GitHub App token lives one hour, and a credential
+     * frozen at dispatch would be dead exactly on the long runs this executor class exists for.
+     */
+    async pollJob(handle) {
+        const delegated = handle.delegated;
+        if (!delegated) {
+            throw new ConflictError('A delegated poll arrived with no delegation on its handle, so there is nothing to ' +
+                'address. The step records which executor it dispatched to; a handle without it was ' +
+                'rebuilt from a step that never claimed one.', 
+            // The fault is in THIS RUN's state, not in what the deployment registers, so it does not
+            // borrow `delegated_executor_unwired`: that copy would send an operator to inspect a
+            // registration with nothing wrong in it.
+            'delegated_claim_missing');
+        }
+        const scope = requireHandleScope(handle);
+        const definition = this.requireDefinition(scope.agentKind, delegated.executor);
+        const executor = this.executorFor(definition);
+        const jobLog = this.log.child({
+            workspaceId: scope.workspaceId,
+            executionId: scope.runId,
+            jobId: handle.jobId,
+            agentKind: scope.agentKind,
+            executor: definition.id,
+        });
+        const target = {
+            executor: definition.id,
+            correlationKey: handle.jobId,
+            externalId: delegated.externalId,
+            ...(delegated.url ? { url: delegated.url } : {}),
+            ...(delegated.branches ? { branches: delegated.branches } : {}),
+            ...(delegated.repo ? { repo: delegated.repo } : {}),
+            ...scope,
+        };
+        const credentials = await resolveDelegationCredentials({
+            definition,
+            workspaceId: scope.workspaceId,
+            // The SAME scope the dispatch resolved in. Dropped here, a deployment whose credential
+            // store is per service resolves an empty bag on every poll of a run it started perfectly
+            // well, and the step dies on an unreadable status while the external work carries on.
+            blockId: scope.blockId,
+            resolveToolSecrets: this.deps.resolveToolSecrets,
+            logger: jobLog,
+        });
+        const update = await executor.poll(target, credentials);
+        return toJobUpdate(update, definition, this.deps.clock.now());
+    }
+    /**
+     * Stop every delegated unit this run holds, and REPORT what that achieved.
+     *
+     * The report is the point. An executor that declares no `cancel` leaves its run alive: it will
+     * finish, open its pull request and bill its tokens long after the platform recorded this run as
+     * stopped, and the person who stopped it is the one who needs to know to go and stop it there.
+     * Best-effort throughout (a teardown must never propagate) but never SILENT: a failure to
+     * cancel is reported as "not cancelled" with its cause, which is a different fact from a clean
+     * stop and renders differently on the step.
+     */
+    async reclaimRun(target) {
+        const handles = target.delegations ?? [];
+        if (handles.length === 0)
+            return;
+        const delegations = await Promise.all(handles.map((handle) => this.cancelOne(handle)));
+        return { delegations };
+    }
+    /**
+     * A delegated step cannot be run SYNCHRONOUSLY: `run()` exists for non-durable callers and
+     * tests, and an external system that answers in hours is exactly what that shape cannot serve.
+     * Refused loudly rather than looped in-process, which would hold a request open for the duration
+     * of somebody else's CI.
+     */
+    run(context) {
+        return Promise.reject(new ConflictError(`The \`${context.agentKind}\` step runs on an external executor, which is polled rather ` +
+            'than awaited. Drive it through the async path (`startJob` / `pollJob`).', 
+        // NOT `delegated_executor_unwired`: the executor here is registered and correct, and that
+        // reason's copy tells an operator to go and register it. What is wrong is the drive path
+        // the caller chose.
+        'delegated_step_async_only'));
+    }
+    async cancelOne(handle) {
+        const definition = this.deps.delegatedExecutorRegistry.get(handle.executor);
+        if (!definition) {
+            return {
+                correlationKey: handle.correlationKey,
+                cancelled: false,
+                note: `This deployment no longer registers the "${handle.executor}" executor, so the external work could not be stopped.`,
+            };
+        }
+        const executor = this.executorFor(definition);
+        if (!executor.cancel) {
+            return {
+                correlationKey: handle.correlationKey,
+                cancelled: false,
+                note: `The "${definition.id}" executor declares no cancel, so the external work was left running.`,
+            };
+        }
+        const jobLog = this.log.child({
+            workspaceId: handle.workspaceId,
+            executionId: handle.runId,
+            jobId: handle.correlationKey,
+            executor: definition.id,
+        });
+        try {
+            const credentials = await resolveDelegationCredentials({
+                definition,
+                workspaceId: handle.workspaceId,
+                // Scoped like the dispatch and the poll: a cancel resolving an empty bag reports work as
+                // possibly-still-running that this executor could have stopped.
+                blockId: handle.blockId,
+                resolveToolSecrets: this.deps.resolveToolSecrets,
+                logger: jobLog,
+            });
+            await executor.cancel(handle, credentials);
+            return { correlationKey: handle.correlationKey, cancelled: true };
+        }
+        catch (error) {
+            jobLog.warn('delegated cancel failed; the external work may still be running', {
+                ...describeError(error),
+            });
+            return {
+                correlationKey: handle.correlationKey,
+                cancelled: false,
+                note: `Stopping the external work failed (${getErrorMessage(error)}); it may still be running.`,
+            };
+        }
+    }
+    /** The registered definition for a kind, refusing the two ways it can be missing. */
+    requireDefinition(agentKind, knownExecutor) {
+        const id = knownExecutor ?? delegatedExecutorFor(agentKind, this.deps.agentKindRegistry);
+        if (!id) {
+            throw new ConflictError(`The \`${agentKind}\` step was routed to the delegated executor and declares none.`, 'delegated_executor_unwired');
+        }
+        const definition = this.deps.delegatedExecutorRegistry.get(id);
+        if (!definition) {
+            throw new ConflictError(`The \`${agentKind}\` step runs on the delegated executor "${id}", which this ` +
+                `deployment does not register` +
+                (this.deps.delegatedExecutorRegistry.size > 0
+                    ? ` (registered: ${this.deps.delegatedExecutorRegistry.ids().join(', ')}).`
+                    : '.'), 'delegated_executor_unwired');
+        }
+        return definition;
+    }
+    executorFor(definition) {
+        const existing = this.built.get(definition.id);
+        if (existing)
+            return existing;
+        const built = definition.create(this.deps.executorDeps);
+        this.built.set(definition.id, built);
+        return built;
+    }
+    /**
+     * Honour the executor's {@link DelegatedExecutorDefinition.workBranch} declaration.
+     *
+     * `executor-creates` writes nothing and probes nothing, which is what keeps a run whose external
+     * work never landed from leaving an empty ref behind.
+     */
+    async prepareWorkBranch(definition, brief, aprioriWork, jobLog) {
+        if (definition.workBranch !== 'platform-creates')
+            return;
+        await ensureDelegatedWorkBranch({ resolveRepoFiles: this.deps.resolveRepoFiles, logger: jobLog }, brief, { executorId: definition.id, apriori: aprioriWork });
+    }
+    /**
+     * Resolve the repo + branches this dispatch targets, then compose the brief over them.
+     *
+     * `aprioriWork` rides back out because the brief carries the branch NAME and not who is allowed
+     * to create it, and only this method knows which of the two answers produced the name.
+     */
+    async composeBrief(context, ids) {
+        const repo = await this.deps.resolveRepoTarget(ids.workspaceId, ids.blockId);
+        if (!repo) {
+            throw new ConflictError(`No connected repository found for workspace '${ids.workspaceId}'. A delegated step is ` +
+                'still work on a repository: link one to this service before running it.', 'github_not_connected');
+        }
+        const origin = this.deps.resolveRepoOrigin(repo);
+        const trackerRef = await this.resolveTrackerRef(ids.workspaceId, ids.blockId);
+        // The task's own WORKING branch when it declared one, through the shared rule the container
+        // dispatch and the repo-ops controller resolve it with, so the three cannot drift on which
+        // branch a run builds inside (it also refuses a working branch equal to the base). Delegating
+        // the step changes nothing about that choice: the pull request, the `ci` gate and the merger
+        // all ride the branch the task named, so a dispatch onto `cat-factory/<blockId>` instead would
+        // land the external work on a ref nothing downstream looks at.
+        const aprioriWork = resolveAprioriWorkingBranch(context.aprioriBranches, repo.baseBranch);
+        const brief = composeDelegationBrief(context, this.deps.agentKindRegistry, {
+            correlationKey: ids.correlationKey,
+            workspaceId: ids.workspaceId,
+            blockId: ids.blockId,
+            runId: ids.executionId,
+            stepIndex: context.stepIndex ?? 0,
+            target: {
+                repo: {
+                    owner: repo.owner,
+                    name: repo.name,
+                    cloneUrl: origin.cloneUrl,
+                    provider: briefRepoProvider(repo.provider ?? origin.provider),
+                    ...(repo.serviceDirectory ? { directory: repo.serviceDirectory } : {}),
+                },
+                branches: {
+                    base: repo.baseBranch,
+                    // The task's declared working branch, else the deterministic per-task branch every step
+                    // of this run's pipeline shares: the same name the container path resolves, so a
+                    // delegated producer and a later container fixer work on ONE branch. Whether the REF
+                    // exists when the executor is called is its own `workBranch` declaration, honoured just
+                    // before `start`.
+                    work: aprioriWork ?? `cat-factory/${ids.blockId}`,
+                },
+                ...(trackerRef ? { trackerRef } : {}),
+            },
+        });
+        return { brief, aprioriWork: aprioriWork !== undefined };
+    }
+    /**
+     * Where the work came from, when it came from a tracker: ONE batch read of the block's linked
+     * issues, and the first live one.
+     *
+     * First rather than all, because the brief names the ticket the work is FOR and a block carries
+     * one such link by construction (`claimBlockLink` makes "one task per ticket" an invariant). Any
+     * further attachments are reference material, and they already reach the agent as context files.
+     */
+    async resolveTrackerRef(workspaceId, blockId) {
+        const repository = this.deps.taskRepository;
+        if (!repository)
+            return undefined;
+        const linked = await repository.listByBlock(workspaceId, blockId);
+        const first = linked[0];
+        if (!first)
+            return undefined;
+        return {
+            provider: first.source,
+            key: first.externalId,
+            ...(first.url ? { url: first.url } : {}),
+        };
+    }
+}
+/**
+ * The four run facts a poll addresses by, refused rather than defaulted when the handle carries
+ * none.
+ *
+ * They are optional on {@link AgentJobHandle} because the container executor does not need them
+ * all, and REQUIRED on {@link DelegationHandle} because a delegated call does. Filling the gap
+ * with `''` is what makes that requirement a lie, and every consequence of it is silent:
+ * credentials resolved without the block come back empty on a per-service store, so a poll of a
+ * perfectly healthy external run cannot read its status and the step dies hours later reporting a
+ * timeout; and a deployment whose executor picks which workflow to address from the scope it is
+ * handed (its repository, its agent kind) would dispatch against one and then poll another,
+ * reporting a live run as one that never appeared. The engine supplies all four at the one place
+ * a handle is rebuilt (`pollHandleFor`), so an absent one is a new call site rather than a state a
+ * deployment can reach.
+ */
+function requireHandleScope(handle) {
+    const { workspaceId, blockId, runId, agentKind } = handle;
+    if (!workspaceId || !blockId || !runId || !agentKind) {
+        throw new ConflictError('A delegated poll arrived with an incomplete handle (it needs the workspace, the block, ' +
+            'the run and the agent kind), so neither the credentials this executor declares nor the ' +
+            'external work it addresses can be resolved in the scope its dispatch used. The engine ' +
+            'supplies all four from the run; a handle without them was built somewhere that does not.', 'delegated_claim_missing', { missing: missingScopeFields(handle) });
+    }
+    return { workspaceId, blockId, runId, agentKind };
+}
+/** Which of the four a handle was short, so the refusal names the call site's actual gap. */
+function missingScopeFields(handle) {
+    return ['workspaceId', 'blockId', 'runId', 'agentKind'].filter((field) => !handle[field]);
+}
+/** The delegated dispatch's ids, refused together so a caller cannot proceed on half of them. */
+function requireIds(context) {
+    const { workspaceId, executionId } = context;
+    const blockId = context.block.id;
+    if (!workspaceId || !executionId || !blockId) {
+        throw new Error('DelegatedAgentExecutor requires workspaceId, executionId and block.id');
+    }
+    return { workspaceId, executionId, blockId };
+}
+/**
+ * The brief, shaped as the agent-context snapshot's allow-list reads it.
+ *
+ * It reuses that allow-list rather than adding a second projection, because the rule it enforces
+ * (copy the prompts, the fragment bodies and the context files; never a credential) is exactly as
+ * binding here. `mode: 'delegated'` is what tells a reader of the snapshot that no container ran.
+ */
+function snapshotBody(brief) {
+    return {
+        mode: 'delegated',
+        systemPrompt: brief.systemPrompt,
+        userPrompt: brief.userPrompt,
+        contextFiles: brief.contextFiles,
+        repo: { owner: brief.repo.owner, name: brief.repo.name, baseBranch: brief.branches.base },
+        branch: brief.branches.work,
+    };
+}
+/**
+ * Map an executor's own answer into the engine's poll vocabulary.
+ *
+ * The four places this is NOT a rename:
+ *
+ * - `retryable` decides whether a failure is re-driven on the job-failure budget or is terminal.
+ *   An executor that says nothing means TERMINAL, because a verdict its own system called final is
+ *   not something a second dispatch improves on, and the alternative spends the budget re-running
+ *   somebody else's CI to reach the same answer. It travels on the DELEGATED channel, under a name
+ *   that describes a delegated step, never on the container path's `harnessShutdown`.
+ * - `usage` rides straight through, and its ABSENCE is the honest state for an executor that does
+ *   not report it. Nothing here invents a zero: a zero would be summed into the run's total and
+ *   read as work that cost nothing.
+ * - `externalId` and `url` are the two facts a poll can LEARN, for a system that answers its
+ *   dispatch with neither (`workflow_dispatch` replies 204). Carried back so the record stops
+ *   addressing the run by the correlation key: left uncarried, every later poll re-ran the bounded
+ *   scan that recovered it, and on a busy repository the run scrolls off that page mid-flight and
+ *   a live external run reads as one that never appeared.
+ * - `lastActivityAt` gains a FLOOR the executor did not report, because the poll itself is the
+ *   evidence. This is the one field where "the executor said nothing" and "nothing is happening"
+ *   are different facts and only one of them is true.
+ * - `branch` is carried rather than dropped: it is the entire product of an executor that pushes
+ *   without opening a pull request, a case the port names as legitimate.
+ *
+ * `polledAt` is a parameter rather than a captured clock so this stays a pure mapping the tests can
+ * drive at a fixed instant.
+ */
+function toJobUpdate(update, definition, polledAt) {
+    if (update.state === 'running') {
+        const learned = {
+            ...(update.externalId ? { externalId: update.externalId } : {}),
+            ...(update.url ? { url: update.url } : {}),
+        };
+        return {
+            state: 'running',
+            ...(update.phase ? { phase: update.phase } : {}),
+            // A successful poll IS the sign of life, so the poll's own clock is the floor when the
+            // executor reports no timestamp of its own. Without it a long, quiet external run (an Actions
+            // run sitting at `in_progress` reports an identical answer every time) folds no change at all,
+            // nothing persists, the step's `lastActivityAt` and the run's `updated_at` freeze at the first
+            // poll, and the stale-run sweeper re-collects a run that is perfectly alive. The engine's
+            // existing throttle decides how often that actually lands.
+            lastActivityAt: update.lastActivityAt ?? polledAt,
+            ...(Object.keys(learned).length > 0 ? { delegated: learned } : {}),
+            // The executor's own name, so the run diagnostics say where the step ran rather than
+            // reporting the container backend a delegated step never had.
+            backend: `delegated:${definition.id}`,
+        };
+    }
+    if (update.state === 'failed') {
+        // A NON-retryable failure is TERMINAL: the driver must not spend a recovery budget re-running
+        // somebody else's CI to reach the verdict it already reached. A retryable one buys exactly one
+        // fresh dispatch (`MAX_DELEGATED_RETRIES`). Reported on the DELEGATED channel rather than as
+        // `harnessShutdown`, which is the container path's signal for the same disposition under a
+        // name that misdescribes this one: a delegated step never had a harness, and the operator was
+        // shown "Harness shut down" for an external workflow that simply failed.
+        return {
+            state: 'failed',
+            error: update.error,
+            ...(update.detail ? { detail: update.detail } : {}),
+            delegated: {
+                ...(update.url ? { url: update.url } : {}),
+                // Stated on every delegated failure, both ways round. Read as "absent means retryable"
+                // the engine had one flag with an unstated default and no re-drive behind it, so an
+                // executor's `retryable: true` was silently the same as a final verdict.
+                disposition: update.retryable === true ? 'retryable' : 'terminal',
+            },
+            backend: `delegated:${definition.id}`,
+        };
+    }
+    const result = update.result;
+    return {
+        state: 'done',
+        result: {
+            output: result.summary,
+            ...(result.pullRequest ? { pullRequest: result.pullRequest } : {}),
+            ...(result.custom !== undefined ? { custom: result.custom } : {}),
+            // Tagged `subscription`, never `metered`. The tokens were spent on the EXECUTOR's own
+            // account, so counting them against this workspace's budget would pause runs over money the
+            // platform did not spend. `subscription` is the disposition that already means exactly this:
+            // recorded for the usage report, excluded from every spend rollup.
+            ...(result.usage ? { usage: result.usage, usageBilling: 'subscription' } : {}),
+        },
+        // The branch the work LANDED on, when the executor pushed without opening a pull request. The
+        // port names that case as legitimate, and the engine settles it onto the delegation record:
+        // dropped here, such a run reports done with no product anywhere, which reads exactly like a
+        // run that produced nothing.
+        ...(result.branch ? { delegated: { branch: result.branch } } : {}),
+    };
+}
+//# sourceMappingURL=DelegatedAgentExecutor.js.map

package/dist/agents/DelegatedAgentExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegatedAgentExecutor.js","sourceRoot":"","sources":["../../src/agents/DelegatedAgentExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,SAAS,GAqBV,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AAmEzE;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAYJ,IAAI;IAXhB,GAAG,CAAQ;IAC5B;;;;;;;OAOG;IACc,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAA;IAE7D,YAA6B,IAAwC;oBAAxC,IAAI;QAC/B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,oFAAoF;IACpF,SAAS,CAAC,QAAyB;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,QAAyB;QACpC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,QAAyB;QACpC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;QACvF,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;YAC9D,WAAW;YACX,WAAW;YACX,OAAO;YACP,cAAc;SACf,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAC5B,WAAW;YACX,WAAW;YACX,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,MAAM,4BAA4B,CAAC;YACrD,UAAU;YACV,WAAW;YACX,OAAO;YACP,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAChD,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;QACF,8FAA8F;QAC9F,8FAA8F;QAC9F,4FAA4F;QAC5F,8FAA8F;QAC9F,+FAA+F;QAC/F,sDAAsD;QACtD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;QACpE,IAAI,OAAO,CAAA;QACX,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;YAC5E,MAAM,IAAI,gBAAgB,CACxB,QAAQ,UAAU,CAAC,EAAE,yCAAyC,eAAe,CAAC,KAAK,CAAC,EAAE,EACtF,2BAA2B,EAC3B,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAC5B,CAAA;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,4FAA4F;YAC5F,2FAA2F;YAC3F,+DAA+D;YAC/D,MAAM,IAAI,gBAAgB,CACxB,QAAQ,UAAU,CAAC,EAAE,mEAAmE;gBACtF,mFAAmF;gBACnF,0EAA0E,EAC5E,2BAA2B,EAC3B,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAC5B,CAAA;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAA;QACF,6FAA6F;QAC7F,0FAA0F;QAC1F,qFAAqF;QACrF,MAAM,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,EAAE;YAC5E,OAAO;YACP,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC;YACzB,4FAA4F;YAC5F,2FAA2F;YAC3F,+EAA+E;YAC/E,KAAK,EAAE,aAAa,UAAU,CAAC,EAAE,EAAE;YACnC,WAAW;YACX,WAAW;SACZ,CAAC,CAAA;QACF,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE,WAAW;YAClB,WAAW;YACX,wFAAwF;YACxF,uFAAuF;YACvF,kFAAkF;YAClF,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,IAAI,EAAE;gBACJ,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;gBACvB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACrB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;gBAC/B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;aAC9B;YACD,SAAS,EAAE;gBACT,QAAQ,EAAE,UAAU,CAAC,EAAE;gBACvB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,0FAA0F;gBAC1F,sFAAsF;gBACtF,qDAAqD;gBACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,0FAA0F;gBAC1F,4FAA4F;gBAC5F,0FAA0F;gBAC1F,wEAAwE;gBACxE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;aACzD;SACF,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,MAAsB;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CACrB,oFAAoF;gBAClF,qFAAqF;gBACrF,6CAA6C;YAC/C,yFAAyF;YACzF,qFAAqF;YACrF,yCAAyC;YACzC,yBAAyB,CAC1B,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,KAAK;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,UAAU,CAAC,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,MAAM,GAAqB;YAC/B,QAAQ,EAAE,UAAU,CAAC,EAAE;YACvB,cAAc,EAAE,MAAM,CAAC,KAAK;YAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,KAAK;SACT,CAAA;QACD,MAAM,WAAW,GAAG,MAAM,4BAA4B,CAAC;YACrD,UAAU;YACV,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,uFAAuF;YACvF,yFAAyF;YACzF,sFAAsF;YACtF,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAChD,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACvD,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,UAAU,CAAC,MAAwB;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAA;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAChC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACtF,OAAO,EAAE,WAAW,EAAE,CAAA;IACxB,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,OAAwB;QAC1B,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,aAAa,CACf,SAAS,OAAO,CAAC,SAAS,+DAA+D;YACvF,yEAAyE;QAC3E,0FAA0F;QAC1F,yFAAyF;QACzF,oBAAoB;QACpB,2BAA2B,CAC5B,CACF,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,MAAwB;QAExB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,4CAA4C,MAAM,CAAC,QAAQ,wDAAwD;aAC1H,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO;gBACL,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,QAAQ,UAAU,CAAC,EAAE,uEAAuE;aACnG,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,KAAK,EAAE,MAAM,CAAC,cAAc;YAC5B,QAAQ,EAAE,UAAU,CAAC,EAAE;SACxB,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,4BAA4B,CAAC;gBACrD,UAAU;gBACV,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,yFAAyF;gBACzF,gEAAgE;gBAChE,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAChD,MAAM,EAAE,MAAM;aACf,CAAC,CAAA;YACF,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,iEAAiE,EAAE;gBAC7E,GAAG,aAAa,CAAC,KAAK,CAAC;aACxB,CAAC,CAAA;YACF,OAAO;gBACL,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,sCAAsC,eAAe,CAAC,KAAK,CAAC,6BAA6B;aAChG,CAAA;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IAC7E,iBAAiB,CACvB,SAAiB,EACjB,aAAsB;QAEtB,MAAM,EAAE,GAAG,aAAa,IAAI,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACxF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,aAAa,CACrB,SAAS,SAAS,iEAAiE,EACnF,4BAA4B,CAC7B,CAAA;QACH,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CACrB,SAAS,SAAS,2CAA2C,EAAE,gBAAgB;gBAC7E,8BAA8B;gBAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,GAAG,CAAC;oBAC3C,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC3E,CAAC,CAAC,GAAG,CAAC,EACV,4BAA4B,CAC7B,CAAA;QACH,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAEO,WAAW,CAAC,UAAuC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAC9C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACpC,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAC7B,UAAuC,EACvC,KAAsB,EACtB,WAAoB,EACpB,MAAc;QAEd,IAAI,UAAU,CAAC,UAAU,KAAK,kBAAkB;YAAE,OAAM;QACxD,MAAM,yBAAyB,CAC7B,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,EAChE,KAAK,EACL,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CACpD,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CACxB,OAAwB,EACxB,GAA0F;QAE1F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,CACrB,gDAAgD,GAAG,CAAC,WAAW,yBAAyB;gBACtF,yEAAyE,EAC3E,sBAAsB,CACvB,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAChD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QAC7E,4FAA4F;QAC5F,2FAA2F;QAC3F,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,+DAA+D;QAC/D,MAAM,WAAW,GAAG,2BAA2B,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACzE,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,WAAW;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC;YACjC,MAAM,EAAE;gBACN,IAAI,EAAE;oBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;oBAC7D,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvE;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,IAAI,CAAC,UAAU;oBACrB,wFAAwF;oBACxF,iFAAiF;oBACjF,qFAAqF;oBACrF,wFAAwF;oBACxF,kBAAkB;oBAClB,IAAI,EAAE,WAAW,IAAI,eAAe,GAAG,CAAC,OAAO,EAAE;iBAClD;gBACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC;SACF,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,KAAK,SAAS,EAAE,CAAA;IAC1D,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,iBAAiB,CAC7B,WAAmB,EACnB,OAAe;QAEf,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAA;QAC3C,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QACjC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAA;QAC5B,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAA;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,kBAAkB,CAAC,MAAsB;IAMhD,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IACzD,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,aAAa,CACrB,yFAAyF;YACvF,yFAAyF;YACzF,wFAAwF;YACxF,0FAA0F,EAC5F,yBAAyB,EACzB,EAAE,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CACxC,CAAA;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AACnD,CAAC;AAED,6FAA6F;AAC7F,SAAS,kBAAkB,CAAC,MAAsB;IAChD,OAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAW,CAAC,MAAM,CACvE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAC1B,CAAA;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,UAAU,CAAC,OAAwB;IAK1C,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAA;IAChC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAMrB;IACC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;QACzF,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;KAC5B,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAS,WAAW,CAClB,MAAwB,EACxB,UAAuC,EACvC,QAAgB;IAEhB,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAA;QACD,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,uFAAuF;YACvF,8FAA8F;YAC9F,+FAA+F;YAC/F,+FAA+F;YAC/F,0FAA0F;YAC1F,2DAA2D;YAC3D,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ;YACjD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,qFAAqF;YACrF,8DAA8D;YAC9D,OAAO,EAAE,aAAa,UAAU,CAAC,EAAE,EAAE;SACtC,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,8FAA8F;QAC9F,+FAA+F;QAC/F,6FAA6F;QAC7F,2FAA2F;QAC3F,8FAA8F;QAC9F,yEAAyE;QACzE,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,SAAS,EAAE;gBACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,uFAAuF;gBACvF,oFAAoF;gBACpF,yEAAyE;gBACzE,WAAW,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAE,WAAqB,CAAC,CAAC,CAAE,UAAoB;aACxF;YACD,OAAO,EAAE,aAAa,UAAU,CAAC,EAAE,EAAE;SACtC,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,OAAO;QACL,KAAK,EAAE,MAAM;QACb,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,sFAAsF;YACtF,4FAA4F;YAC5F,6FAA6F;YAC7F,mEAAmE;YACnE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,cAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF;QACD,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,6BAA6B;QAC7B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/agents/brief.d.ts

@@ -0,0 +1,61 @@
+import type { AgentDispatchContext, AgentRunContext, DelegationBrief, InjectedContextFile, VcsProvider } from '@cat-factory/kernel';
+import { type AgentKindRegistry } from '@cat-factory/agents';
+/** The half of an agent's instructions that is the same whatever executes the step. */
+export interface AgentBriefCore {
+    /**
+     * The role prompt with the workspace's override applied, the block's best-practice standards
+     * folded at this kind's verbosity, and its trait guidance. NOT the finished container system
+     * prompt: the container-dispatch directives, the follow-up sentinel, the skills fold and the
+     * tool-server section are layered onto this at the container chokepoint.
+     */
+    roleSystemPrompt: string;
+    /** The generic block-context prompt (or the kind's own), with its wrappers already applied. */
+    userPrompt: string;
+    /** The `.cat-context/` files this dispatch was prepared with. */
+    contextFiles: InjectedContextFile[];
+}
+/**
+ * Compose the executor-independent half of a dispatch's instructions.
+ *
+ * `dispatch` carries the resolved checkout facts for the kinds whose own prompt names a branch.
+ * Both callers have one (a delegated executor gets a checkout too: its own), which is the
+ * difference between this and an inline caller, and it is why the parameter is required here
+ * rather than optional as it is on `userPromptFor`.
+ */
+export declare function composeAgentBriefCore(context: AgentRunContext, registry: AgentKindRegistry, dispatch: AgentDispatchContext): AgentBriefCore;
+/**
+ * The role prompt for one dispatch: the workspace's override (or the shipped track prompt), the
+ * block's resolved standards at this kind's verbosity, and its trait guidance.
+ *
+ * Its own exported function because two dispatch paths must produce the identical string from one
+ * context. It is the piece a workspace actually EDITS, so a drift here is the failure that matters
+ * most: the standards a team agreed on reaching one executor and not the other, with nothing
+ * anywhere reporting it.
+ */
+export declare function composeRoleSystemPrompt(context: AgentRunContext, registry: AgentKindRegistry): string;
+/** The repo + branch facts a delegated dispatch resolved, as the brief names them. */
+export interface DelegationBriefTarget {
+    repo: DelegationBrief['repo'];
+    branches: DelegationBrief['branches'];
+    /** Where the work came from, when it came from a tracker. */
+    trackerRef?: NonNullable<DelegationBrief['task']['trackerRef']>;
+}
+/**
+ * Build the {@link DelegationBrief} for one delegated dispatch.
+ *
+ * `ownService` is FILLED IN rather than forwarded optionally: the brief's contract is a
+ * discriminated result, and an omitted one reads to a model exactly like a task whose product is
+ * obvious. A context that carries none genuinely does not know which system the work belongs to,
+ * and `not-under-a-service` is what says so.
+ */
+export declare function composeDelegationBrief(context: AgentRunContext, registry: AgentKindRegistry, args: {
+    correlationKey: string;
+    workspaceId: string;
+    blockId: string;
+    runId: string;
+    stepIndex: number;
+    target: DelegationBriefTarget;
+}): DelegationBrief;
+/** Narrow a repo projection's stored provider to the union, defaulting to the pre-column value. */
+export declare function briefRepoProvider(provider: VcsProvider | undefined): VcsProvider;
+//# sourceMappingURL=brief.d.ts.map

package/dist/agents/brief.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brief.d.ts","sourceRoot":"","sources":["../../src/agents/brief.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EAEnB,WAAW,EACZ,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,iBAAiB,EAMvB,MAAM,qBAAqB,CAAA;AAqB5B,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAA;IACxB,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAA;IAClB,iEAAiE;IACjE,YAAY,EAAE,mBAAmB,EAAE,CAAA;CACpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,oBAAoB,GAC7B,cAAc,CAYhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,iBAAiB,GAC1B,MAAM,CAQR;AAED,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;IAC7B,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAA;IACrC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;CAChE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE;IACJ,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,qBAAqB,CAAA;CAC9B,GACA,eAAe,CAyCjB;AAOD,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAEhF"}