@proagentstore/cli 0.4.104 → 0.4.105

package/dist/browser-runner/coding/headless.js

@@ -104,6 +104,8 @@ export class HeadlessSession {
     turnInputId = null;
     /** Ids of inputs a COMPLETED turn consumed, newest last and bounded (#1019). See {@link consumedInputs}. */
     consumed = [];
+    /** Ids of inputs handed to the engine, newest last and bounded (#1019): what a retry is reconciled against. */
+    accepted = [];
     /**
      * The engine's own last output line of the turn in flight (#545).
      *
@@ -321,6 +323,10 @@ export class HeadlessSession {
     get consumedInputs() {
         return this.consumed;
     }
+    /** Inputs this session accepted — handed to the engine, whether or not a turn has finished on them. */
+    get acceptedInputs() {
+        return this.accepted;
+    }
     credit(id) {
         if (!id)
             return;
@@ -506,6 +512,11 @@ export class HeadlessSession {
      * session-start brief, being the same record composed later.
      */
     input(text, opts = {}) {
+        if (opts.inputId) {
+            this.accepted.push(opts.inputId);
+            if (this.accepted.length > MAX_CONSUMED_INPUTS)
+                this.accepted.shift();
+        }
         // The Engine reads the preamble, the pane the short marker; the instruction stays evidence.
         const sent = authoredTurn(text, opts.author);
         // The brief leads the turn and is spent in the reading (#693). It goes to the ENGINE only:

package/dist/browser-runner/coding/run-objective.js

@@ -1,16 +1,39 @@
 // The run's objective, delivered verbatim with a turn and attributed to the platform (#1019).
+const ORIGIN_KINDS = new Set(["account", "supervisor", "trigger", "unverified"]);
 /** A run objective as the cloud sent it, or undefined — narrowed, because any caller can POST here (#1019). */
 export function runObjective(raw) {
     const o = raw;
-    return o && typeof o.runId === "string" && o.runId.length <= 128 && typeof o.text === "string" && o.text.trim() ? { runId: o.runId, text: o.text } : undefined;
+    if (!(o && typeof o.runId === "string" && o.runId.length <= 128 && typeof o.text === "string" && o.text.trim()))
+        return undefined;
+    const origin = o.origin;
+    const kind = typeof origin?.kind === "string" && ORIGIN_KINDS.has(origin.kind) ? origin.kind : "unverified";
+    // A label longer than a label is not shortened into a different claim — it is dropped.
+    const label = typeof origin?.by === "string" ? origin.by.replace(/\s+/g, " ").trim() : "";
+    const by = label.length <= 128 ? label : "";
+    return { runId: o.runId, text: o.text, origin: by ? { kind, by } : { kind } };
+}
+/** The attribution sentence: only what the platform verified about the author, never more. */
+function attribution(runId, origin) {
+    const by = origin.by ? ` (${origin.by})` : "";
+    switch (origin.kind) {
+        case "account":
+            return `the objective submitted for run ${runId} through the owner's authenticated account${by}, exactly as ProAgentStore accepted it. Who composed the text is not verified.`;
+        case "supervisor":
+            return `the objective a supervising agent${by} delegated for run ${runId}, exactly as ProAgentStore accepted it. A supervisor's goal is not an instruction from the owner.`;
+        case "trigger":
+            return `the objective a trigger${by} composed for run ${runId}, exactly as ProAgentStore accepted it — standing wiring plus facts about another run, not a message from the owner.`;
+        default:
+            return `the objective ProAgentStore accepted for run ${runId}. Who wrote it is not verified.`;
+    }
 }
 /**
- * The run's objective as the engine reads it (#1019): verbatim, fenced, and attributed to the platform —
- * the Pilot's instruction that follows is its own turn, and owner directives sent later outrank both.
+ * The run's objective as the engine reads it (#1019): verbatim, fenced, attributed only as far as the
+ * platform verified — the Pilot's instruction that follows is its own turn, and owner directives sent
+ * later outrank both.
  */
 export function runObjectiveBlock(o) {
     return [
-        `[pags] RUN OBJECTIVE — the owner's objective for run ${o.runId}, exactly as ProAgentStore accepted it. It was not written by the Pilot. Owner instructions sent later in this run take precedence over it.`,
+        `[pags] RUN OBJECTIVE — ${attribution(o.runId, o.origin ?? { kind: "unverified" })} It is not the Pilot's instruction, which follows as its own turn. Instructions the owner sends later in this run take precedence over it.`,
         "<<<OBJECTIVE",
         o.text,
         "OBJECTIVE>>>",

package/dist/browser-runner/coding/runtime.js

@@ -67,8 +67,11 @@ export class CodingRuntime {
         // cloud still never trusts it, because an older runner simply 404s and the policy reports
         // that it asked and was not answered.
         // `coding.run-objective` (#1019): a message may carry the run's objective, delivered verbatim and
-        // attributed to the platform. Advertised so the cloud never claims delivery to a runner without it.
-        return ["coding.sessions", "coding.stream", "human.takeover", "coding.inspect", "coding.repo-write", "coding.run-objective"];
+        // attributed to the platform. `.v2`: attributed by its VERIFIED origin (run-objective.ts) — a cloud
+        // sends the objective only to a v2 runner, so an older one is never made to call it the owner's.
+        // `coding.input-idempotent`: a message whose inputId this session already accepted is not run again,
+        // and every snapshot lists the accepted ids, so a retry after a lost reply can be reconciled.
+        return ["coding.sessions", "coding.stream", "human.takeover", "coding.inspect", "coding.repo-write", "coding.run-objective", "coding.run-objective.v2", "coding.input-idempotent"];
     }
     /**
      * Resolve the workDir for a read-only inspection. Prefer the tracked session's real
@@ -244,6 +247,7 @@ export class CodingRuntime {
             // the omitted-when-null shape keeps "not measured" distinguishable from a verdict.
             ...(session.lastTurn ? { lastTurn: session.lastTurn } : {}),
             ...(session.consumedInputs.length ? { consumedInputs: [...session.consumedInputs] } : {}),
+            acceptedInputs: [...session.acceptedInputs],
             ...(opts.drainUsage ? { usage: session.takeUsage(), acts: session.takeActs() } : {}),
         };
     }
@@ -251,16 +255,21 @@ export class CodingRuntime {
     act(sessionId, action) {
         const session = this.require(sessionId);
         switch (action.kind) {
-            case "message":
+            case "message": {
+                const inputId = typeof action.inputId === "string" && action.inputId.length <= 128 ? action.inputId : undefined;
+                // The same input twice is a retry after a lost reply, not a second instruction (#1019).
+                if (inputId && session.acceptedInputs.includes(inputId))
+                    return { ...this.snapshot(sessionId), duplicateInput: inputId };
                 // Narrowed rather than trusted: this runner is a published package any caller can
                 // POST to, and an unrecognised author must read as "unstated", not become a label.
                 session.input(action.text, {
                     author: asTurnAuthor(action.author),
                     replay: typeof action.replay === "string" ? action.replay : undefined,
-                    inputId: typeof action.inputId === "string" && action.inputId.length <= 128 ? action.inputId : undefined,
+                    inputId,
                     objective: runObjective(action.objective),
                 });
                 break;
+            }
             case "keys": {
                 // A snapshot is no longer the whole answer (#448). `key()` records the attempt and
                 // reports that it was not delivered; answering 200 with a pane that simply did not

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.104",
+  "version": "0.4.105",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",