@proagentstore/cli 0.4.103 → 0.4.105

package/dist/browser-runner/coding/headless.js

@@ -1,3 +1,4 @@
+import { runObjectiveBlock } from "./run-objective.js";
 import { spawn } from "node:child_process";
 import { classifyCommand, commandFromToolInput, fillTargetFromResult, toolCallOk, toolResultMark } from "./engine-acts.js";
 import { parseEngineUsage } from "./engine-usage.js";
@@ -103,6 +104,8 @@ export class HeadlessSession {
     turnInputId = null;
     /** Ids of inputs a COMPLETED turn consumed, newest last and bounded (#1019). See {@link consumedInputs}. */
     consumed = [];
+    /** Ids of inputs handed to the engine, newest last and bounded (#1019): what a retry is reconciled against. */
+    accepted = [];
     /**
      * The engine's own last output line of the turn in flight (#545).
      *
@@ -320,6 +323,10 @@ export class HeadlessSession {
     get consumedInputs() {
         return this.consumed;
     }
+    /** Inputs this session accepted — handed to the engine, whether or not a turn has finished on them. */
+    get acceptedInputs() {
+        return this.accepted;
+    }
     credit(id) {
         if (!id)
             return;
@@ -505,6 +512,11 @@ export class HeadlessSession {
      * session-start brief, being the same record composed later.
      */
     input(text, opts = {}) {
+        if (opts.inputId) {
+            this.accepted.push(opts.inputId);
+            if (this.accepted.length > MAX_CONSUMED_INPUTS)
+                this.accepted.shift();
+        }
         // The Engine reads the preamble, the pane the short marker; the instruction stays evidence.
         const sent = authoredTurn(text, opts.author);
         // The brief leads the turn and is spent in the reading (#693). It goes to the ENGINE only:
@@ -521,6 +533,10 @@ export class HeadlessSession {
             this.push("[pags] this engine keeps no memory between turns, so ProAgentStore's record of the conversation so far was delivered with this turn — a reconstruction, not the engine's own memory");
         else if (seed)
             this.push("[pags] a context brief from ProAgentStore's record was delivered with this turn — a reconstruction, not the previous conversation");
+        // The run's objective (#1019): to the ENGINE in full, the pane a one-line marker (same budget as the brief).
+        const objective = opts.objective ? runObjectiveBlock(opts.objective) : null;
+        if (opts.objective)
+            this.push(`[pags] the run's objective (${opts.objective.text.length} characters, verbatim) was delivered with this turn`);
         this.push(`\n❯ [${stamp()}] ${authorTag(opts.author)}${text}`); // ❯ — your turn, timestamped
         this.run = "thinking";
         const now = Date.now();
@@ -531,7 +547,8 @@ export class HeadlessSession {
         try {
             // Brief first, instruction second, and never the other way round: it is background for
             // the request, and an engine that reads the request last acts on the request.
-            const withSeed = seed ? `${seed}\n\n${sent}` : sent;
+            // The objective sits between them: background like the brief, and above the instruction it frames.
+            const withSeed = [seed, objective, sent].filter(Boolean).join("\n\n");
             if (this.adapter.persistent) {
                 // `role` stays "user" — the only role this protocol accepts, which is why the
                 // disambiguation rides in the text instead (#505).

package/dist/browser-runner/coding/run-objective.js

@@ -0,0 +1,41 @@
+// The run's objective, delivered verbatim with a turn and attributed to the platform (#1019).
+const ORIGIN_KINDS = new Set(["account", "supervisor", "trigger", "unverified"]);
+/** A run objective as the cloud sent it, or undefined — narrowed, because any caller can POST here (#1019). */
+export function runObjective(raw) {
+    const o = raw;
+    if (!(o && typeof o.runId === "string" && o.runId.length <= 128 && typeof o.text === "string" && o.text.trim()))
+        return undefined;
+    const origin = o.origin;
+    const kind = typeof origin?.kind === "string" && ORIGIN_KINDS.has(origin.kind) ? origin.kind : "unverified";
+    // A label longer than a label is not shortened into a different claim — it is dropped.
+    const label = typeof origin?.by === "string" ? origin.by.replace(/\s+/g, " ").trim() : "";
+    const by = label.length <= 128 ? label : "";
+    return { runId: o.runId, text: o.text, origin: by ? { kind, by } : { kind } };
+}
+/** The attribution sentence: only what the platform verified about the author, never more. */
+function attribution(runId, origin) {
+    const by = origin.by ? ` (${origin.by})` : "";
+    switch (origin.kind) {
+        case "account":
+            return `the objective submitted for run ${runId} through the owner's authenticated account${by}, exactly as ProAgentStore accepted it. Who composed the text is not verified.`;
+        case "supervisor":
+            return `the objective a supervising agent${by} delegated for run ${runId}, exactly as ProAgentStore accepted it. A supervisor's goal is not an instruction from the owner.`;
+        case "trigger":
+            return `the objective a trigger${by} composed for run ${runId}, exactly as ProAgentStore accepted it — standing wiring plus facts about another run, not a message from the owner.`;
+        default:
+            return `the objective ProAgentStore accepted for run ${runId}. Who wrote it is not verified.`;
+    }
+}
+/**
+ * The run's objective as the engine reads it (#1019): verbatim, fenced, attributed only as far as the
+ * platform verified — the Pilot's instruction that follows is its own turn, and owner directives sent
+ * later outrank both.
+ */
+export function runObjectiveBlock(o) {
+    return [
+        `[pags] RUN OBJECTIVE — ${attribution(o.runId, o.origin ?? { kind: "unverified" })} It is not the Pilot's instruction, which follows as its own turn. Instructions the owner sends later in this run take precedence over it.`,
+        "<<<OBJECTIVE",
+        o.text,
+        "OBJECTIVE>>>",
+    ].join("\n");
+}

package/dist/browser-runner/coding/runtime.js

@@ -1,3 +1,4 @@
+import { runObjective } from "./run-objective.js";
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 import { RunnerInputError } from "../errors.js";
@@ -65,7 +66,12 @@ export class CodingRuntime {
         // a reader of the registration can see which machines can restore a branch invariant; the
         // cloud still never trusts it, because an older runner simply 404s and the policy reports
         // that it asked and was not answered.
-        return ["coding.sessions", "coding.stream", "human.takeover", "coding.inspect", "coding.repo-write"];
+        // `coding.run-objective` (#1019): a message may carry the run's objective, delivered verbatim and
+        // attributed to the platform. `.v2`: attributed by its VERIFIED origin (run-objective.ts) — a cloud
+        // sends the objective only to a v2 runner, so an older one is never made to call it the owner's.
+        // `coding.input-idempotent`: a message whose inputId this session already accepted is not run again,
+        // and every snapshot lists the accepted ids, so a retry after a lost reply can be reconciled.
+        return ["coding.sessions", "coding.stream", "human.takeover", "coding.inspect", "coding.repo-write", "coding.run-objective", "coding.run-objective.v2", "coding.input-idempotent"];
     }
     /**
      * Resolve the workDir for a read-only inspection. Prefer the tracked session's real
@@ -241,6 +247,7 @@ export class CodingRuntime {
             // the omitted-when-null shape keeps "not measured" distinguishable from a verdict.
             ...(session.lastTurn ? { lastTurn: session.lastTurn } : {}),
             ...(session.consumedInputs.length ? { consumedInputs: [...session.consumedInputs] } : {}),
+            acceptedInputs: [...session.acceptedInputs],
             ...(opts.drainUsage ? { usage: session.takeUsage(), acts: session.takeActs() } : {}),
         };
     }
@@ -248,15 +255,21 @@ export class CodingRuntime {
     act(sessionId, action) {
         const session = this.require(sessionId);
         switch (action.kind) {
-            case "message":
+            case "message": {
+                const inputId = typeof action.inputId === "string" && action.inputId.length <= 128 ? action.inputId : undefined;
+                // The same input twice is a retry after a lost reply, not a second instruction (#1019).
+                if (inputId && session.acceptedInputs.includes(inputId))
+                    return { ...this.snapshot(sessionId), duplicateInput: inputId };
                 // Narrowed rather than trusted: this runner is a published package any caller can
                 // POST to, and an unrecognised author must read as "unstated", not become a label.
                 session.input(action.text, {
                     author: asTurnAuthor(action.author),
                     replay: typeof action.replay === "string" ? action.replay : undefined,
-                    inputId: typeof action.inputId === "string" && action.inputId.length <= 128 ? action.inputId : undefined,
+                    inputId,
+                    objective: runObjective(action.objective),
                 });
                 break;
+            }
             case "keys": {
                 // A snapshot is no longer the whole answer (#448). `key()` records the attempt and
                 // reports that it was not delivered; answering 200 with a pane that simply did not

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.103",
+  "version": "0.4.105",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",