@coreplane/switchboard 1.203.0 → 1.204.0

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.203.0",
+  "version": "1.204.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.203.0",
+      "version": "1.204.0",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -18806,7 +18806,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.203.0",
+      "version": "1.204.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.124.0",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.203.0",
+  "version": "1.204.0",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",

package/dist/assets/project.json

@@ -212,7 +212,7 @@
       "when": "Part of `check:consistency`."
     },
     "load": {
-      "does": "Load harness: `-- history|resident|sandbox|e2e|cards|provider`.",
+      "does": "Load harness: `-- history|resident|sandbox|e2e|cards|provider|pi`.",
       "when": "Capacity receipts (docs/reference/specs/load-harness.md)."
     }
   }

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.203.0",
-  "commit": "e3f155d00ca4b1131eb3bbe4d9274a825afa4e9e",
-  "builtAt": "2026-09-11T23:34:59.316Z"
+  "version": "1.204.0",
+  "commit": "7182e104a894723453ad1c0ea5005ffea44b80e0",
+  "builtAt": "2026-09-12T01:46:35.879Z"
 }

package/dist/cli.js

@@ -1485,6 +1485,9 @@ var init_contract = __esm({
 });
 
 // ../../src/agents/registry.ts
+function machineNeedsRepo(machine) {
+  return machine === "repo-cold" || machine === "repo-resident";
+}
 function getAgent(name) {
   const a = AGENTS[name];
   if (!a) {
@@ -1654,12 +1657,13 @@ You cannot run commands, clone repositories, edit code, or review pull requests,
         description: "Default assistant on the configured model: answers directly, reads the org's repos and manages their issues over GitHub, reads URLs. No workspace or shell.",
         system: GENERAL_SYSTEM,
         toolset: "assistant",
+        // The GitHub tools are REST in the bot process, so a general ask never
+        // provisions a workspace or sandbox (docs/reference/specs/agent-general.md item 4).
+        machine: "none",
         maxTurns: 8,
         // a repo read is 2-3 calls (repos → tree → file); an issue action 1-2; still fast
         maxTokens: 16e3,
         maxMinutes: 5
-        // No `resources`: the GitHub tools are REST in the bot process, so a
-        // general ask still never provisions a workspace or sandbox (item 4).
       },
       coding: {
         name: "coding",
@@ -1677,7 +1681,7 @@ You cannot run commands, clone repositories, edit code, or review pull requests,
         cacheTtl: "1h",
         // No built-in effort: the deployment decides (`defaults.efforts.coding`,
         // `config set channel efforts.coding=…`, or `effort:` per request).
-        resources: { repo: "required" }
+        machine: "repo-resident"
       },
       review: {
         name: "review",
@@ -1685,7 +1689,7 @@ You cannot run commands, clone repositories, edit code, or review pull requests,
         system: REVIEW_SYSTEM,
         residentSystem: REVIEW_SYSTEM_RESIDENT,
         toolset: "readonly",
-        resources: { repo: "required" },
+        machine: "repo-resident",
         maxTurns: 30,
         // backstop only; wall clock is the real budget (12 bound at ~4 min in practice)
         maxTokens: 64e3,
@@ -1701,22 +1705,22 @@ You cannot run commands, clone repositories, edit code, or review pull requests,
         // pipeline orchestrator (src/core/shipPipeline.ts), whose child rounds run
         // on the coding/review defs above — runAgent is never called with THIS def.
         system: "You are Switchboard's ship pipeline. This prompt is never sent to a model \u2014 the pipeline orchestrates coding and review child runs on their own definitions.",
-        // Full toolset so a ship thread provisions a writable workspace class like
-        // coding; placeholder budgets — the pipeline is bounded by the `ship` config
-        // caps and by each child's own budgets clipped to the remaining wall clock,
-        // never by these numbers.
+        // Full toolset and the coding machine class, so repo and PR resolution
+        // gate a ship thread like a coding one; placeholder budgets — the pipeline
+        // is bounded by the `ship` config caps and by each child's own budgets
+        // clipped to the remaining wall clock, never by these numbers.
         toolset: "full",
+        machine: "repo-resident",
         maxTurns: 1,
         maxTokens: 16e3,
-        maxMinutes: 5,
-        resources: { repo: "required" }
+        maxMinutes: 5
       },
       research: {
         name: "research",
         description: "Answers questions with web search, URL reading, and read access to the org's repos and issues over GitHub. No workspace.",
         system: RESEARCH_SYSTEM,
         toolset: "web",
-        resources: { repo: "none" },
+        machine: "none",
         // web I/O only; no workspace is provisioned
         maxTurns: 12,
         maxTokens: 24e3,
@@ -8901,9 +8905,19 @@ var init_residentState = __esm({
 import { resolve as resolve7 } from "node:path";
 import { mkdirSync as mkdirSync7 } from "node:fs";
 async function makeExecutor(opts, ctx, span) {
-  if (ctx.agent.resources?.repo !== "required") {
+  const machine = ctx.agent.machine;
+  if (machine === "none") {
     return { executor: new NullExecutor(ctx.agent.name), backend: "local" };
   }
+  if (machine === "blank") {
+    return {
+      executor: await makePerThreadExecutor(opts, { threadKey: ctx.threadKey, resolveEnvs: async () => ({}) }),
+      backend: perThreadBackend(opts)
+    };
+  }
+  if (machine === "repo-cold") {
+    return { executor: await makePerThreadExecutor(opts, perThreadCheckout(ctx)), backend: perThreadBackend(opts) };
+  }
   let note;
   let failedAttach;
   if (ctx.repo && opts.execution?.resident) {
@@ -8946,7 +8960,7 @@ async function makeExecutor(opts, ctx, span) {
     }
   }
   return {
-    executor: await makePerThreadExecutor(opts, ctx),
+    executor: await makePerThreadExecutor(opts, perThreadCheckout(ctx)),
     note,
     backend: perThreadBackend(opts),
     ...failedAttach ? { trace: failedAttach.steps } : {}
@@ -9041,8 +9055,11 @@ function localWorkspaceDir(baseDir, threadKey) {
   const safe = threadKey.replace(/[^a-zA-Z0-9_.-]/g, "_");
   return resolve7(baseDir, safe);
 }
-async function makePerThreadExecutor(opts, ctx) {
-  const { threadKey } = ctx;
+function perThreadCheckout(ctx) {
+  return { threadKey: ctx.threadKey, repo: ctx.repo, ref: ctx.ref, resolveEnvs: () => githubEnvs(ctx.agent) };
+}
+async function makePerThreadExecutor(opts, input) {
+  const { threadKey } = input;
   const type = opts.execution?.type ?? "local";
   if (type === "local") {
     const dir = localWorkspaceDir(opts.workspaceDir, threadKey);
@@ -9058,9 +9075,9 @@ async function makePerThreadExecutor(opts, ctx) {
       threadKey,
       timeoutMs: (opts.execution?.timeoutMinutes ?? 30) * 6e4,
       statePath: resolve7(opts.dataDir, "sandboxes.json"),
-      resolveEnvs: () => githubEnvs(ctx.agent),
-      repo: ctx.repo,
-      ref: ctx.ref
+      resolveEnvs: input.resolveEnvs,
+      repo: input.repo,
+      ref: input.ref
     });
   }
   if (type === "cloudflare") {
@@ -9074,16 +9091,18 @@ async function makePerThreadExecutor(opts, ctx) {
       url: opts.execution.url,
       token: token.reveal(),
       threadKey,
-      resolveEnvs: () => githubEnvs(ctx.agent),
-      repo: ctx.repo,
-      ref: ctx.ref
+      resolveEnvs: input.resolveEnvs,
+      repo: input.repo,
+      ref: input.ref
     });
   }
   throw new Error(`Unknown execution.type "${type}" (valid: local, e2b, cloudflare)`);
 }
+function githubTokenScopeFor(agent) {
+  return agent.toolset === "readonly" ? "read" : "write";
+}
 async function githubEnvs(agent) {
-  const scope = agent.toolset === "readonly" ? "read" : "write";
-  const token = await resolveGithubToken(scope);
+  const token = await resolveGithubToken(githubTokenScopeFor(agent));
   return token ? { GH_TOKEN: token } : {};
 }
 function perThreadBackend(opts) {
@@ -9113,7 +9132,7 @@ var init_factory = __esm({
       agentName;
       fail() {
         throw new Error(
-          `Agent "${this.agentName}" declares no repo resource, so it has no execution workspace. Declare resources: { repo: "required" } on the agent if its tools need one.`
+          `Agent "${this.agentName}" runs on machine class "none", so it has no execution workspace. Declare a machine class that provisions one (\`repo-resident\`, \`repo-cold\` or \`blank\`) if its tools need one.`
         );
       }
       async exec() {
@@ -20442,10 +20461,10 @@ function safePredicate(isResident, slug) {
     return false;
   }
 }
-async function safeProbe(isResident, slug) {
-  if (!isResident) return true;
+async function safeProbe(probe, slug) {
+  if (!probe) return true;
   try {
-    const answer = await isResident(slug);
+    const answer = await probe(slug);
     return answer === true || answer === "unreachable" ? answer : false;
   } catch {
     return "unreachable";
@@ -20454,7 +20473,7 @@ async function safeProbe(isResident, slug) {
 function repoFromThread(history, isResident) {
   return threadSignals(history, isResident).repo;
 }
-async function resolveRepoContext(msg, history = [], isResident, residentSlugs) {
+async function resolveRepoContext(msg, history = [], probe, residentSlugs) {
   const s = extractSignals(msg.text);
   const thread = threadSignals(history);
   let rejected;
@@ -20463,7 +20482,7 @@ async function resolveRepoContext(msg, history = [], isResident, residentSlugs)
   const vet = async (cand) => {
     let p = vetted.get(cand);
     if (!p) {
-      p = safeProbe(isResident, cand);
+      p = safeProbe(probe, cand);
       vetted.set(cand, p);
     }
     const answer = await p;
@@ -20479,7 +20498,7 @@ async function resolveRepoContext(msg, history = [], isResident, residentSlugs)
     return slugsOnce;
   };
   const resolveAddressed = async (a) => {
-    if (a.slug !== void 0) return isResident && await vet(a.slug) ? a.slug : void 0;
+    if (a.slug !== void 0) return probe && await vet(a.slug) ? a.slug : void 0;
     const matches = (await listSlugs() ?? []).filter((slug) => slug.split("/")[1] === a.name);
     return matches.length === 1 ? matches[0] : void 0;
   };
@@ -25111,6 +25130,44 @@ var init_directives = __esm({
   }
 });
 
+// ../../src/execution/githubRepoProbe.ts
+function githubRepoProbe(opts) {
+  const fetchImpl = opts.fetch ?? fetch;
+  const token = opts.token ?? ((scope) => resolveGithubToken(scope));
+  return async (slug) => {
+    if (!SLUG.test(slug)) return false;
+    let bearer;
+    try {
+      bearer = await token(opts.scope);
+    } catch {
+      return "unreachable";
+    }
+    const headers = { accept: "application/vnd.github+json", "user-agent": "switchboard" };
+    if (bearer) headers.authorization = `Bearer ${bearer}`;
+    let res;
+    try {
+      res = await fetchImpl(`https://api.github.com/repos/${slug}`, {
+        headers,
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS6)
+      });
+    } catch {
+      return "unreachable";
+    }
+    if (res.ok) return true;
+    if (res.status === 404) return false;
+    return "unreachable";
+  };
+}
+var REQUEST_TIMEOUT_MS6, SLUG;
+var init_githubRepoProbe = __esm({
+  "../../src/execution/githubRepoProbe.ts"() {
+    "use strict";
+    init_githubApp();
+    REQUEST_TIMEOUT_MS6 = 1e4;
+    SLUG = /^[A-Za-z0-9][A-Za-z0-9-]*\/[A-Za-z0-9._-]+$/;
+  }
+});
+
 // ../../src/core/dispatch/resolve.ts
 async function readRequest(ctx) {
   const { msg, io, root } = ctx;
@@ -25136,28 +25193,29 @@ function resolveTarget(deps, ctx) {
   const { msg, history, agent, resolved, resume, root } = ctx;
   const { provider: providerName, model } = parseModelRef(resolved.modelRef);
   const provider = deps.providers.get(providerName);
-  const needsRepo = agent.resources?.repo === "required";
+  const needsRepo = machineNeedsRepo(agent.machine);
   const repoCtxP = root.span(
     "dispatch.repo_context",
     () => resume ? Promise.resolve(resume.repoCtx) : needsRepo ? Promise.resolve(
-      deps.resolveRepoContext ? deps.resolveRepoContext(msg, history) : resolveRepoContext(
-        msg,
-        history,
-        residentOnboardedProbe(deps.config.config.execution?.resident),
-        residentSlugsLister(deps.config.config.execution?.resident)
-      )
+      deps.resolveRepoContext ? deps.resolveRepoContext(msg, history) : resolveRepoContext(msg, history, ...repoVetFor(agent, deps.config.config.execution?.resident))
     ).then((ctx2) => ctx2 ?? {}) : Promise.resolve({})
   );
   repoCtxP.catch(() => {
   });
   return { provider, model, needsRepo, repoCtxP };
 }
+function repoVetFor(agent, resident) {
+  if (agent.machine === "repo-cold") return [githubRepoProbe({ scope: githubTokenScopeFor(agent) }), void 0];
+  return [residentOnboardedProbe(resident), residentSlugsLister(resident)];
+}
 var init_resolve = __esm({
   "../../src/core/dispatch/resolve.ts"() {
     "use strict";
+    init_registry();
     init_directives();
     init_types3();
     init_factory();
+    init_githubRepoProbe();
     init_repoContext();
   }
 });
@@ -25178,6 +25236,41 @@ async function authorizeAgent(deps, ctx) {
 }
 async function authorizeRepo(deps, ctx) {
   const { msg, io, refuse: refuse3, card, shell, closeLines, clock: clock2, agent, needsRepo, repoCtx } = ctx;
+  if (agent.machine === "repo-cold" && needsRepo && !repoCtx.repo) {
+    if (repoCtx.rejectedRepo) {
+      const slug = repoCtx.rejectedRepo;
+      console.log(`[dispatch] ${msg.threadKey} not started: repo not visible (${slug}: GitHub answered 404)`);
+      await refuse3("repo_not_visible", async () => {
+        await card.done(
+          shell.close({ kind: "not_started", icon: "\u{1F4E6}", reason: "repo not visible", ...closeLines(clock2(), false) })
+        );
+        await io.reply(
+          `\u{1F4E6} \`${slug}\` is not a repository this installation can see \u2014 GitHub answered 404 \u2014 so I did not start ${aRun(agent.name)} for it. The repository is outside the Switchboard GitHub App installation (\`github_repos\` lists the reachable ones), or the name is wrong.`
+        );
+      });
+      return { kind: "refused", reason: "repo_not_visible" };
+    }
+    if (repoCtx.unverifiedRepo) {
+      const slug = repoCtx.unverifiedRepo;
+      console.log(
+        `[dispatch] ${msg.threadKey} not started: repo could not be verified (${slug}: GitHub did not answer)`
+      );
+      await refuse3("repo_unverified", async () => {
+        await card.done(
+          shell.close({
+            kind: "not_started",
+            icon: "\u{1F4E6}",
+            reason: "repo could not be verified",
+            ...closeLines(clock2(), false)
+          })
+        );
+        await io.reply(
+          `\u26A0\uFE0F I couldn't verify \`${slug}\` against GitHub \u2014 it didn't answer \u2014 so I did not start ${aRun(agent.name)} rather than guess which repository you meant. Try again in a minute.`
+        );
+      });
+      return { kind: "refused", reason: "repo_unverified" };
+    }
+  }
   if (deps.capabilities.residents && needsRepo && !repoCtx.repo && repoCtx.rejectedRepo) {
     const slug = repoCtx.rejectedRepo;
     console.log(`[dispatch] ${msg.threadKey} not started: repo not onboarded (${slug})`);
@@ -25226,6 +25319,9 @@ async function authorizeRepo(deps, ctx) {
   }
   return { kind: "allowed" };
 }
+function aRun(agentName) {
+  return `${/^[aeiou]/i.test(agentName) ? "an" : "a"} *${agentName}* run`;
+}
 async function authorizePrHead(ctx) {
   const { msg, io, refuse: refuse3, card, shell, closeLines, clock: clock2, agent, directives, repoCtx } = ctx;
   const preflight = checkPrHeadPreflight({ agent, requestText: directives.text, repoCtx });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreplane/switchboard",
-  "version": "1.203.0",
+  "version": "1.204.0",
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
   "homepage": "https://openswitchboard.dev",