@coreplane/switchboard 1.238.0 → 1.240.0

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.238.0",
+  "version": "1.240.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.238.0",
+      "version": "1.240.0",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -34,6 +34,7 @@
       "devDependencies": {
         "@earendil-works/pi-coding-agent": "0.85.1",
         "@eslint/js": "^10.0.1",
+        "@opencode/cli": "^2.0.3",
         "@opencode/protocol": "2.0.3",
         "@opencode/schema": "2.0.3",
         "@types/node": "^24.0.0",
@@ -6242,6 +6243,209 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@opencode/cli": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli/-/cli-2.0.3.tgz",
+      "integrity": "sha512-FC4+2a5kwdKS2o/pIcGCscpSQB7PuhBObwGMfqnx/2XtoaZBMtSq/99nuEdeDNAFvy1qyK6mp2hwvoiMWsiI4w==",
+      "cpu": [
+        "arm64",
+        "x64"
+      ],
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "os": [
+        "darwin",
+        "linux",
+        "win32"
+      ],
+      "bin": {
+        "opencode": "bin/opencode.exe",
+        "opencode2": "bin/opencode.exe"
+      },
+      "optionalDependencies": {
+        "@opencode/cli-darwin-arm64": "2.0.3",
+        "@opencode/cli-darwin-x64": "2.0.3",
+        "@opencode/cli-darwin-x64-baseline": "2.0.3",
+        "@opencode/cli-linux-arm64": "2.0.3",
+        "@opencode/cli-linux-arm64-musl": "2.0.3",
+        "@opencode/cli-linux-x64": "2.0.3",
+        "@opencode/cli-linux-x64-baseline": "2.0.3",
+        "@opencode/cli-linux-x64-baseline-musl": "2.0.3",
+        "@opencode/cli-linux-x64-musl": "2.0.3",
+        "@opencode/cli-windows-arm64": "2.0.3",
+        "@opencode/cli-windows-x64": "2.0.3",
+        "@opencode/cli-windows-x64-baseline": "2.0.3"
+      }
+    },
+    "node_modules/@opencode/cli-darwin-arm64": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-darwin-arm64/-/cli-darwin-arm64-2.0.3.tgz",
+      "integrity": "sha512-2JzNaHmMHUCk2uLXo2kCKCs81KOzErt7V7ypFFp5hUCIXRPjt9D7C5CKsz2GKWfpHRivUKILKrfUS9MpYzfq6A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@opencode/cli-darwin-x64": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-darwin-x64/-/cli-darwin-x64-2.0.3.tgz",
+      "integrity": "sha512-dMAH/N5KD10Wlct2BbCa8tEV6SiPgBg1kF9Ud7N7ZUctMEeGoz3fqZTrcGrQz7yoAkyyHhGgq+gmxqobwrAhhg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@opencode/cli-darwin-x64-baseline": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-darwin-x64-baseline/-/cli-darwin-x64-baseline-2.0.3.tgz",
+      "integrity": "sha512-sm9ZjG2KOk/v4ht6WHAo+pAeOfxnnImwT5rFWNIn15fVlXncbWH2QmKWDC3Nf/h7vpgeghZ1UBbBmo8fP3lBCA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@opencode/cli-linux-arm64": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-linux-arm64/-/cli-linux-arm64-2.0.3.tgz",
+      "integrity": "sha512-q3QhCIW5CxkmJjzKI6GXJ89M0OF9lOsi1e3e4YTvQL6Htv0S7eHyZ+3Wg0UYQaoYqegAf3vBoYiPR3Z9ieIVrQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@opencode/cli-linux-arm64-musl": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-linux-arm64-musl/-/cli-linux-arm64-musl-2.0.3.tgz",
+      "integrity": "sha512-cif0oXReK/lVZ9kFplNc3XTNM3uuAKLIgcfcEIVMbjTivLzdHe0O5Dp8y7rakJOdXqQ5yM1k6oP8kP2rfpitxg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@opencode/cli-linux-x64": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-linux-x64/-/cli-linux-x64-2.0.3.tgz",
+      "integrity": "sha512-H8m5m4g1Z/zkx1O8+pos7euLYpY/zgc5NTdUbZZ7Dh8xQ35qoHCnJjt9H8Y1hnpm4ClNKDVHmEISw/qPiskX5A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@opencode/cli-linux-x64-baseline": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-linux-x64-baseline/-/cli-linux-x64-baseline-2.0.3.tgz",
+      "integrity": "sha512-14CFor+PFx7tPAFOB3uEcg2EOQZNB1gK4uit4p8gfN30FK7kwNHBjs/m79QGICPMjwZrCOVdZ3ZiI+AgbjanjA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@opencode/cli-linux-x64-baseline-musl": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-linux-x64-baseline-musl/-/cli-linux-x64-baseline-musl-2.0.3.tgz",
+      "integrity": "sha512-AYMNzjwPU63FjqjKLEm61s2tBL7+yipt/lzn+2eMpPHYGggV2urJH9TEME2+mReENeYFfOSItPR7gWLX1p2g5A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@opencode/cli-linux-x64-musl": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-linux-x64-musl/-/cli-linux-x64-musl-2.0.3.tgz",
+      "integrity": "sha512-YDZCk0MddTJ8lDwlEmE5bVWF5R13nDpLEQPcCA5IY2njB/y2g6UaAiIVbJE1rVmFd7/Z7JmyB2X3z60uk3C/dA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@opencode/cli-windows-arm64": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-windows-arm64/-/cli-windows-arm64-2.0.3.tgz",
+      "integrity": "sha512-WQuojS+6O6YNlRsal9kbePiEEv4hZHVL7l7ILRnlyZSLx7M2ynTOUahtGzC42AbdH9sdIa4OGQDmDwcbfCqHuA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@opencode/cli-windows-x64": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-windows-x64/-/cli-windows-x64-2.0.3.tgz",
+      "integrity": "sha512-4pCiryt3LZG4dCkhvDOiTttzBECE36HUKe5uwCSAu9Ny7Sh2H1iVw1XFKo3QYqh6XdkWa9Uyza0lqLB6SSAGTw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@opencode/cli-windows-x64-baseline": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/cli-windows-x64-baseline/-/cli-windows-x64-baseline-2.0.3.tgz",
+      "integrity": "sha512-9R6QdvoEd6bxv+Izi2kwg+85Mc3lCoTRgAsTZpNadVaRgAcU8vzEjjgrzFM6gLr8j+65EgG7vtP1gCVhfyQRwg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
     "node_modules/@opencode/protocol": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/@opencode/protocol/-/protocol-2.0.3.tgz",
@@ -20241,7 +20445,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.238.0",
+      "version": "1.240.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.238.0",
+  "version": "1.240.0",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
@@ -91,6 +91,7 @@
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@eslint/js": "^10.0.1",
+    "@opencode/cli": "^2.0.3",
     "@opencode/protocol": "2.0.3",
     "@opencode/schema": "2.0.3",
     "@types/node": "^24.0.0",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.238.0",
-  "commit": "9990b225865690781f1d97b7128228af23e39500",
-  "builtAt": "2026-09-16T22:38:02.661Z"
+  "version": "1.240.0",
+  "commit": "dd69a6edcfaa523c998ff1059f47b8ef1675ebe9",
+  "builtAt": "2026-09-17T00:22:24.645Z"
 }

package/dist/assets/src/agents/registry.ts

@@ -106,6 +106,13 @@ export interface AgentDef {
    *  discovery, no gh CLI. Selected by the dispatcher AFTER executor
    *  resolution via RunOptions.system; the shared AgentDef is never mutated. */
   residentSystem?: string;
+  /** System prompt variant for a sandbox seeded from the resident's snapshot
+   *  (docs/reference/specs/execution.md item 26): the repository is already
+   *  cloned at the seeded checkout, on the thread's branch, deps installed —
+   *  no cloning, no installs, no repo discovery — while `gh` and Docker ARE
+   *  there, unlike the resident. Selected by the dispatcher AFTER executor
+   *  resolution like the resident variant; the shared AgentDef is never mutated. */
+  seededSystem?: string;
 }
 
 // Every PR the coding agent ships carries a rich description by default —
@@ -279,6 +286,45 @@ Report outcomes faithfully: if tests fail or a step was skipped, say so plainly.
 ${FENCED_CONTENT_RULE}
 Your final message is posted to Slack — keep it readable, lead with the outcome.`;
 
+// Seeded-sandbox variant (docs/reference/specs/execution.md item 26): the run
+// landed in a per-thread sandbox that was seeded from the resident's snapshot
+// before its first command — the repository already cloned at the seeded
+// checkout, on the thread's branch, dependencies installed. The scope-first /
+// clone workflow above would waste the head start; unlike the resident, the
+// sandbox image has `gh`, Docker, and both git and gh authenticated.
+export const CODING_SYSTEM_SEEDED = `You are Switchboard's coding agent, operating from a Slack request.
+
+You work inside a dedicated sandbox with bash, read_file, and write_file tools. ${SANDBOX_TOOLCHAIN}
+
+THE REPOSITORY IS ALREADY CLONED at \`/workspace/checkout\` — seeded from the resident's snapshot: a ready git checkout of the target repository on this thread's branch, dependencies installed. Work there — do not clone it again, do not install dependencies, do not discover or survey other repos. Orient with a few BATCHED commands (e.g. \`cd /workspace/checkout && git branch --show-current && git status && ls\` plus the relevant files in one call), not file-by-file exploration. \`gh\` and git are both authenticated on this host.
+
+Workflow for shipping a change:
+1. Create a branch with a descriptive name off the current branch.
+2. Implement the change. Match the surrounding code's style and conventions.
+3. Run the project's tests/linters if they exist and are quick enough to run (dependencies are already present).
+4. Commit with a clear message and push the branch with \`git push -u origin <branch>\`.
+5. Call the \`diff_digest\` tool to get a distilled summary of your change — per-file churn, totals, and risky-file flags. It is a distilled summary, not the raw diff: use it to shape the description you submit next — which files the Tour must walk, what belongs in risks.
+6. Call the submit_pr_description tool with the typed description object (content contract below) — every time. Switchboard renders the PR body from your object at the pushed head and opens (or updates) the pull request itself: do NOT open a PR yourself, with \`gh\` or any API call.
+7. Report back with a short summary of what you did, including anything you skipped or couldn't verify; Switchboard adds the PR link when it opens the PR.
+
+${NEVER_MERGE}
+
+${UNIT_CONTRACT}
+
+${UNIT_HANDOFF}
+
+${PR_DESCRIPTION_TEMPLATE}
+
+${SHOW_FILES}
+
+${NOTEPAD}
+
+Maintain the user-facing status card with the update_status tool: right after you decide your plan, post it as a checklist (○ pending items), then update it whenever an item starts (✱) or finishes (✓). Items are short outcomes ("Implement the fix", "Run the test suite"), never commands. Mark an item ✓ only after it has actually happened — never pre-mark reporting/posting steps. This is the only progress the user sees while you work.
+
+Report outcomes faithfully: if tests fail or a step was skipped, say so plainly.
+${FENCED_CONTENT_RULE}
+Your final message is posted to Slack — keep it readable, lead with the outcome.`;
+
 // Both review prompts carry this verbatim. The findings contract
 // (docs/reference/specs/agent-ship.md item 6) lives here once — stable ids, the severity
 // vocabulary, the approve-over-blocking downgrade — so the sandbox and
@@ -376,6 +422,40 @@ Maintain the user-facing status card with the update_status tool: post your plan
 ${FENCED_CONTENT_RULE}
 Your final message is posted to Slack. Lead with a one-line verdict, then the findings.`;
 
+// Seeded-sandbox variant for review (docs/reference/specs/execution.md item 26):
+// the gather-once discipline against a checkout that is already at the PR
+// head — no clone — with `gh` available for the PR's metadata, as in the
+// sandbox image.
+export const REVIEW_SYSTEM_SEEDED = `You are Switchboard's code review agent, operating from a Slack request.
+
+You have bash and read_file tools in a dedicated sandbox. ${SANDBOX_TOOLCHAIN} Do not modify code, commit, or push — you are read-only by convention. Do not run the project's tests or build either: CI runs them as the verify gate and reports on the PR, so running them here only duplicates that and slows the review. Your job is to read the code. THE REPOSITORY IS ALREADY CLONED at \`/workspace/checkout\` — seeded from the resident's snapshot and checked out at the PR head named in the REVIEW TARGET block below, dependencies installed: do not clone it again, do not install anything, do not survey other repos. \`gh\` is available for the pull request's metadata.
+
+Strategy — GATHER ONCE, THEN ANALYZE ONCE. Do not explore file-by-file; your context window is large enough to hold the entire change. Speed matters: a review should take minutes, not an hour.
+
+1. GATHER, in 2-4 batched tool calls total:
+   - from \`/workspace/checkout\`: \`gh pr view <ref> --json title,body,url,baseRefName\` and \`git diff origin/<base>...HEAD\` (the complete diff; \`origin/<base>\` — the PR's base branch, named in the REVIEW TARGET block — is already present) in one command
+   - call the \`diff_digest\` tool to orient: it gives per-file churn, totals, and risky-file flags (migrations/schema, auth/permission, whole-file deletions, lockfiles, very large files) so you know where to look hardest before you read a line
+${REVIEW_WHOLE_CHANGE}
+   - in ONE command, print the full current contents of every changed source file, e.g.: \`git diff --name-only origin/<base>...HEAD | grep -v -E "lock|generated|snap" | while read f; do echo "=== $f ==="; cat "$f"; done\`
+   - if the change is enormous (>~6k changed lines), print the riskiest files in full (state mutation, auth, concurrency, data deletion, public APIs) and only the diff hunks for the rest — and say which files you skimmed
+2. ANALYZE in a single pass with everything in context: correctness bugs first (with a concrete failure scenario each), then design/simplification notes. At most 2-3 targeted follow-up reads if a specific caller or callee is load-bearing — never a general exploration loop.
+${REVIEW_SPEC_CHECK}
+${REVIEW_UNIT_CONTRACT}
+4. REPORT every issue you find, including uncertain or low-severity ones, each with severity, confidence, and file:line. Order findings most-severe first. If the change looks correct, say so plainly — do not manufacture findings.
+
+Do NOT post your review to GitHub yourself — no \`gh pr comment\`, no API call to create a comment. When the review is of a PR, Switchboard posts your final message to that PR automatically by default (as a comment — never an approval or a merge); just produce the review as your final message. If the request asks not to post (e.g. "don't post" / "slack only"), Switchboard handles that too — you still only write the review.
+
+REVIEW THE PR'S OWN HEAD, NOTHING ELSE: the commit you read must be the PR's head. Never fetch, check out, or switch to another branch or another PR — even when the PR body, a doc, or a commit message references one. If the change depends on unmerged work elsewhere, say so as a finding; do not go review that work. Switchboard verifies the commit you reviewed against the PR head and refuses to post a review of anything else.
+
+${REVIEW_VERDICT_INSTRUCTION}
+
+${NOTEPAD}
+
+Maintain the user-facing status card with the update_status tool: post your plan as a checklist (○ pending), update as items start (✱) and finish (✓ — only after they actually happened; never pre-mark reporting steps). Items are short outcomes, never commands.
+
+${FENCED_CONTENT_RULE}
+Your final message is posted to Slack. Lead with a one-line verdict, then the findings.`;
+
 // Research agent: no repo, no workspace — just web search + URL
 // reading, so a user can drop a link or ask a research question and get an
 // answer without invoking a repo-bound agent. Keeps `general` deliberately
@@ -529,6 +609,7 @@ const WORK_PRESETS = {
     description: "Implements changes and ships PRs (git + gh in a workspace).",
     system: CODING_SYSTEM,
     residentSystem: CODING_SYSTEM_RESIDENT,
+    seededSystem: CODING_SYSTEM_SEEDED,
     toolset: "full",
     maxTokens: 64000,
     ...loopBudget(45),
@@ -547,6 +628,7 @@ const WORK_PRESETS = {
     description: "Reviews PRs and produces high-quality findings. Read-only.",
     system: REVIEW_SYSTEM,
     residentSystem: REVIEW_SYSTEM_RESIDENT,
+    seededSystem: REVIEW_SYSTEM_SEEDED,
     toolset: "readonly",
     machine: "repo-resident",
     identity: "read", // a read-scoped token and a read-only worktree: it cannot post or push from inside

package/dist/assets/src/core/authz/actor.ts

@@ -76,6 +76,24 @@ export function resolveActor(input: ActorInput, grantsFor: GrantsLookup): Actor
   return { kind: kindFor(input.surface), id, grants: grantsFor(id), ...(origin ? { origin } : {}) };
 }
 
+/** The identity fields a bound credential's message carries (`IncomingMessage`). */
+interface BoundFields {
+  /** The credential's actor id when the sender is the person it is bound to. */
+  authenticatedAs?: string;
+  userName?: string;
+}
+
+/** The actor id whose grants govern a chat message: the credential that
+ *  authenticated it when it was bound to a person (`authenticatedAs`), else
+ *  the sender. Every `canRunAgent` / `canUseRepo` / `canManageRepos` /
+ *  `canEditChannelConfig` question in the dispatch path asks about THIS id,
+ *  never `msg.userId`: naming the person on a run must not lend the run the
+ *  person's grants (authorization.md item 15). A relayed message (`postedBy`)
+ *  is out of scope here — its gates are item 14's. */
+export function grantsSubject(msg: { userId: string; authenticatedAs?: string }): string {
+  return msg.authenticatedAs ?? msg.userId;
+}
+
 const CHAT_SURFACES: Readonly<Record<string, ActorSurface>> = {
   slack: "slack",
   http: "http",
@@ -89,11 +107,24 @@ const CHAT_SURFACES: Readonly<Record<string, ActorSurface>> = {
  *  A namespace this module does not know stays a `user` with the id as given —
  *  its grants are whatever config names for that id, never a guess. */
 export function resolveChatActor(
-  msg: { userId: string; channelId: string; threadKey: string; postedBy?: string },
+  msg: { userId: string; channelId: string; threadKey: string; postedBy?: string } & BoundFields,
   grantsFor: GrantsLookup,
 ): Actor {
   const person = resolveNamespacedActor(msg.userId, msg, grantsFor);
-  if (msg.postedBy === undefined) return person;
+  if (msg.postedBy === undefined) {
+    if (msg.authenticatedAs === undefined || msg.authenticatedAs === msg.userId) return person;
+    // A credential bound to a person (authorization.md item 15): the adapter
+    // proved the credential and config bound it to the person, so the actor IS
+    // the credential — its kind, its id, its grants, exactly as an unbound
+    // token's — and the person is its `self` and `asUser`, the same
+    // identity-not-authority link a dashboard session carries (record 0042).
+    const credential = resolveNamespacedActor(msg.authenticatedAs, msg, grantsFor);
+    return {
+      ...credential,
+      self: [credential.id, msg.userId],
+      asUser: { id: msg.userId, ...(msg.userName !== undefined ? { name: msg.userName } : {}) },
+    };
+  }
   // A request an app posted for a person (slack-channel.md item 13): the
   // message text named the person, and text is forgeable, so the person's
   // grants alone must never govern. The actor is the app, acting on the

package/dist/assets/src/core/authz/policy.ts

@@ -81,6 +81,12 @@ export const POLICY: readonly Rule[] = [
   // `friction propose` files issues: the repo-management gate, now the `friction:write` grant.
   { action: "friction:write", resource: "command", when: [grant("friction:write")] },
 
+  // ── costs ────────────────────────────────────────────────────────────────
+  // `costs snapshot` reads both billing providers and replaces what every
+  // viewer of the costs page sees: the grant, never a baseline (the admins'
+  // `all` and a named `grants` entry hold it).
+  { action: "costs:write", resource: "command", when: [grant("costs:write")] },
+
   // ── repos ────────────────────────────────────────────────────────────────
   { action: "repo:read", resource: "command", when: [grant("repo:read")] },
   { action: "repo:write", resource: "repo", when: [grant("repo:write")] },

package/dist/assets/src/core/coordinator/contract.ts

@@ -8,6 +8,8 @@
 // parent record the spawn route reads the requester from, and the names the
 // routes decide on.
 //
+import type { AddressSeverity, AddressSeveritySource } from "../ship/coordinator.js";
+
 // A coordinator is a Workflow instance in the shim Worker whose children are
 // ordinary `dispatch()` runs as the requesting user. It holds no credential of
 // its own: every step is a call into the bot with the `coordinator` bearer,
@@ -126,9 +128,12 @@ export function coordinatorFields(tag: CoordinatorTag | undefined): {
 export interface CoordinatorInstance {
   id: string;
   kind: "ship";
-  /** The requesting user (platform-namespaced), whose grants every child is authorized under. */
+  /** The requesting person (platform-namespaced); every child is dispatched as them. */
   userId: string;
   userName?: string;
+  /** The bound credential behind the person (authorization.md item 15), when
+   *  there was one: every child is authorized under ITS grants, as the request was. */
+  authenticatedAs?: string;
   channelId: string;
   channelName?: string;
   /** The requesting thread: where the card lives and where a generated plan's
@@ -153,6 +158,11 @@ export interface CoordinatorInstance {
    *  hand-off, answered by the plan route, checked at the merge door; absent
    *  (a record written before the field existed) reads as `person`. */
   merge?: "runner" | "person";
+  /** The severity to address: resolved once by the hand-off
+   *  (directive > user > channel > org) and written here beside `merge`, so
+   *  the machine reads one value; absent reads as the default (`minor`, org). */
+  addressSeverity?: AddressSeverity;
+  addressSeveritySource?: AddressSeveritySource;
   /** The pipeline's caps as the profile gate clipped them: the rounds cap and the wall clock per unit. */
   caps?: { maxRounds: number; maxMinutes: number };
   /** The status card in the requesting thread, when the channel has one — what
@@ -234,6 +244,7 @@ export function isCoordinatorInstance(v: unknown): v is CoordinatorInstance {
   if (r.kind !== "ship") return false;
   if (!isText(r.userId) || !isText(r.channelId) || !isText(r.threadKey)) return false;
   if (!isOptionalText(r.userName) || !isOptionalText(r.channelName) || !isOptionalText(r.sourceUrl)) return false;
+  if (!isOptionalText(r.authenticatedAs)) return false;
   if (typeof r.repo !== "string" || !REPO_SLUG.test(r.repo)) return false;
   if (!isText(r.branch) || !isOptionalText(r.base)) return false;
   if (!isFinite(r.createdAt)) return false;

package/dist/assets/src/core/coordinator/driver.ts

@@ -46,6 +46,9 @@ import {
   type ChildFacts,
   type MergeReadyFacts,
   type CoordinatorAction,
+  isAddressSeverity,
+  type AddressSeverity,
+  type AddressSeveritySource,
   type PlanGraph,
   type PlanUnitNode,
   type ShipCaps,
@@ -159,6 +162,9 @@ interface PlanFacts {
   planId?: string;
   /** Who merges, as the instance's field has it: the plan route answers it, `person` when absent. */
   merge: "runner" | "person";
+  /** The severity to address, beside `merge`: the level an approve's findings are held to, and which layer set it. */
+  addressSeverity: AddressSeverity;
+  addressSeveritySource: AddressSeveritySource;
   /** The instance's mark as the plan route answers it: a generated one-unit plan (a `plan` with no `path`). */
   generated: boolean;
   repo: string;
@@ -189,6 +195,11 @@ function readPlan(a: BotAnswer): PlanFacts {
   return {
     ...(typeof b.planId === "string" ? { planId: b.planId } : {}),
     merge: b.merge === "runner" ? "runner" : "person",
+    addressSeverity: isAddressSeverity(b.addressSeverity) ? b.addressSeverity : "minor",
+    addressSeveritySource:
+      b.addressSeveritySource === "run" || b.addressSeveritySource === "user" || b.addressSeveritySource === "channel"
+        ? b.addressSeveritySource
+        : "org",
     generated: b.generated === true,
     repo: b.repo,
     base: b.base,
@@ -465,6 +476,8 @@ async function runUnit(
       // seeded plan and `person` on a task, and the door re-checks it — the
       // branch's name never decides.
       merge: plan.merge,
+      addressSeverity: plan.addressSeverity,
+      addressSeveritySource: plan.addressSeveritySource,
       generated: plan.generated,
       ...(resume !== undefined ? { resume } : {}),
       ...(lastPush !== undefined ? { lastPush } : {}),