@kybernesis/dispatch 0.3.2 → 0.5.0

package/dist/governed-peers.js

@@ -33,15 +33,40 @@ async function discover(options) {
         return hit?.peers ?? [];
     }
 }
+/**
+ * Who is asking, from the verified session principal.
+ *
+ * The agent's own door authenticated this; the model did not choose it and
+ * cannot set it, which is the only reason it is worth sending at all. Undefined
+ * for an unattended turn — a schedule, a webhook — where there is no person.
+ *
+ * This travels to the peer as an ASSERTION, not as authentication. The peer
+ * learns who prompted the call and can address them by name or decline work
+ * that is not theirs to do, but the call still carries this agent's authority,
+ * not the person's. A peer must never widen what it will do because of this
+ * value: the caller could claim anything, and the control plane only records
+ * the claim. Reaching a peer AS the person is a different mechanism.
+ */
+function askedBy(ctx) {
+    const current = ctx?.session?.auth?.current;
+    const id = current?.principalId;
+    if (!id)
+        return undefined;
+    const attributes = current?.attributes ?? {};
+    const label = ["email", "user_name", "name"]
+        .map((key) => attributes[key])
+        .find((value) => typeof value === "string" && value.length > 0);
+    return label ? { id, label } : { id };
+}
 /** Mint a short-lived token for one callee, then hold the conversation. */
-async function ask(options, peer, message) {
+async function ask(options, peer, message, asker) {
     const { issuer, credential } = config(options);
     if (!credential)
         throw new Error("This agent has no control-plane credential, so it cannot call another agent.");
     const minted = await fetch(`${issuer}/api/agent/session`, {
         method: "POST",
         headers: { "content-type": "application/json", authorization: `Bearer ${credential}` },
-        body: JSON.stringify({ callee: peer.name }),
+        body: JSON.stringify({ callee: peer.name, ...(asker ? { onBehalfOf: asker } : {}) }),
         signal: AbortSignal.timeout(20_000),
     });
     if (!minted.ok) {
@@ -176,7 +201,7 @@ export function governedPeers(options = {}) {
                                 .string()
                                 .describe("What to ask it. Write it as you would to a colleague — it has no view of this conversation."),
                         }),
-                        execute: (input) => ask(options, peer, input.message),
+                        execute: (input, ctx) => ask(options, peer, input.message, askedBy(ctx)),
                     });
                 }
                 return tools;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/dispatch",
-  "version": "0.3.2",
+  "version": "0.5.0",
   "description": "Agent-to-agent dispatch for eve agents: declared remote-peer edges with principal forwarding on by default, and a receiver channel that makes trusting the wrong caller hard to express.",
   "license": "Apache-2.0",
   "type": "module",
@@ -32,11 +32,11 @@
   },
   "devDependencies": {
     "@types/node": "24.x",
-    "eve": "0.30.8",
+    "eve": "0.38.3",
     "typescript": "7.0.2"
   },
   "peerDependencies": {
-    "eve": ">=0.30.0 <0.31.0",
+    "eve": ">=0.38.0 <0.39.0",
     "@kybernesis/enterprise": ">=0.2.0"
   },
   "engines": {