@sjawhar/opencode-legion-envoy 1.46.0 → 1.47.0

package/dist/src/server.js

@@ -13552,6 +13552,13 @@ function date4(params) {
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
 // ../contracts/src/dispatch-api.ts
+function serviceSubjectLabel(subject) {
+  const parts = subject.split(":");
+  if (parts.length === 4 && parts[0] === "system" && parts[1] === "serviceaccount" && parts[2] !== "" && parts[3] !== "") {
+    return `${parts[2]}/${parts[3]}`;
+  }
+  return subject;
+}
 var ASK_TURNS = ["human", "agent"];
 var DELIVERY_CAPABILITIES = ["aside", "btw", "steer"];
 var DispatchEventSchema = object({
@@ -13952,7 +13959,7 @@ var dispatchToolSpecs = [
     },
     description: "Edit an open question in place. Use it to correct or refine the same decision; retract the " + "old ask and open a new one when the decision itself changes. Previous text remains in the " + "event log. Only the asking session can edit it; answered or resolved asks cannot be edited.",
     arguments: (z) => ({
-      ask: z.string().describe("Ask id to edit."),
+      ask: z.string().describe("Ask id (uuid); an 8+ hex prefix unique among this session's own open asks works too."),
       question: z.string({ max: ASK_QUESTION_MAX }).describe(`Replacement decision question, at most ${ASK_QUESTION_MAX} characters.`).optional(),
       options: z.array(z.object({
         label: z.string().describe("Selectable option label."),
@@ -13978,7 +13985,7 @@ var dispatchToolSpecs = [
     },
     description: "Retract an open question that is moot or resolve one after finding the answer. This closes the question without answering it.",
     arguments: (z) => ({
-      ask: z.string().describe("Ask id to close."),
+      ask: z.string().describe("Ask id (uuid) to close; an 8+ hex prefix unique among this session's own open asks " + "works too."),
       kind: z.enum(["retracted", "resolved"]).describe("Whether the ask is retracted or self-resolved."),
       reason: z.string({ min: 1 }).describe("Why the open ask no longer needs a human answer.")
     })
@@ -13997,7 +14004,7 @@ var dispatchToolSpecs = [
     example: { ask: "01234567-0000-4000-8000-000000000001", action: "follow" },
     description: "Follow or unfollow an ask. Every session that opens or replies to an ask follows it: its answer, " + "edits, resolution, and replies reach that session directly. Unfollow to stop; follow to rejoin or " + "to hear an ask you never wrote to. Whole-issue subscription is separate: envoy_subscribe " + "notifications.dispatch.issue.<KEY>.>",
     arguments: (z) => ({
-      ask: z.string().describe("Full ask id (uuid)."),
+      ask: z.string().describe("Ask id (uuid); an 8+ hex prefix unique among this session's own open asks works too."),
       action: z.enum(["follow", "unfollow"]).describe("follow | unfollow")
     }),
     strict: true
@@ -15688,24 +15695,51 @@ function messageIdOf(value) {
   return id === undefined ? undefined : normalizeUUID(id);
 }
 var idPrefixPattern = /^[0-9a-f][0-9a-f-]{7,}$/i;
-async function resolveIdPrefix(tool, kind, ref, list) {
-  const fullID = normalizeUUID(ref.id);
+function refOwnerName(ref) {
+  return ref.owner.kind === "issue" ? ref.owner.issue : `${ref.owner.project}/${ref.artifact}`;
+}
+async function resolveIdPrefix(tool, kind, id, ownerName, list) {
+  const fullID = normalizeUUID(id);
   if (fullID !== undefined)
     return fullID;
-  const ownerName = ref.owner.kind === "issue" ? ref.owner.issue : `${ref.owner.project}/${ref.artifact}`;
-  if (!idPrefixPattern.test(ref.id)) {
+  if (!idPrefixPattern.test(id)) {
     throw new ToolInputError(tool, [
-      `${kind} id ${ref.id} must be a full uuid or a prefix of at least 8 hex characters`
+      `${kind} id ${id} must be a full uuid or a prefix of at least 8 hex characters`
     ]);
   }
-  const prefix = ref.id.toLowerCase();
+  const prefix = id.toLowerCase();
   const matches = (await list()).filter((item) => item.id.toLowerCase().startsWith(prefix));
   if (matches.length === 1 && matches[0] !== undefined)
     return matches[0].id;
   throw new ToolInputError(tool, [
-    matches.length === 0 ? `${kind} id ${ref.id} matches none of the ${kind}s on ${ownerName}; use the full id` : `${kind} id ${ref.id} matches ${matches.length} ${kind}s on ${ownerName}; use the full id`
+    matches.length === 0 ? `${kind} id ${id} matches none of the ${kind}s on ${ownerName}; use the full id` : `${kind} id ${id} matches ${matches.length} ${kind}s on ${ownerName}; use the full id`
   ]);
 }
+var askIdShapeProblem = "ask ids are uuids (a prefix of at least 8 hex characters works)";
+async function sessionOpenAsks(client, sessionId) {
+  const session = sessionId?.trim();
+  if (!session)
+    throw new Error("host session id is required to read this session's open asks");
+  return (await client.openAsks(session)).asks;
+}
+function openAskHints(asks) {
+  if (asks.length === 0)
+    return "you have no open asks";
+  const hints = asks.slice(0, askHintLimit).map((ask) => `${ask.id.slice(0, 8)} \u2014 ${textHead(ask.question)}`);
+  return `your open asks: ${hints.join("; ")}`;
+}
+async function resolveAskArgument(tool, args, client, sessionId) {
+  const id = askId(args);
+  if (normalizeUUID(id) === undefined && !idPrefixPattern.test(id)) {
+    const asks = await sessionOpenAsks(client, sessionId).catch(() => {
+      return;
+    });
+    throw new ToolInputError(tool, [
+      asks === undefined ? askIdShapeProblem : `${askIdShapeProblem}; ${openAskHints(asks)}`
+    ]);
+  }
+  return resolveIdPrefix(tool, "ask", id, "this session", () => sessionOpenAsks(client, sessionId));
+}
 function messageInReplyTo(args) {
   const inReplyTo = optionalString(args, "in_reply_to");
   return inReplyTo === undefined ? undefined : messageIdOf(inReplyTo);
@@ -15724,7 +15758,8 @@ function argumentProblems(tool, args) {
       break;
     }
     case "dispatch_edit_ask":
-    case "dispatch_resolve_ask": {
+    case "dispatch_resolve_ask":
+    case "dispatch_follow": {
       const ask = optionalString(args, "ask");
       if (ask?.startsWith("dispatch://") && parseDispatchRef(ask)?.kind !== "ask") {
         problems.push(askIdProblem);
@@ -16117,9 +16152,16 @@ function eventHead(event) {
       return;
   }
 }
+function actorText(actor) {
+  const service = actor.kind === "session" ? actor.service : undefined;
+  if (service === undefined) {
+    return `${actor.kind} ${actor.id}`;
+  }
+  return `${actor.kind} ${actor.id} (as ${serviceSubjectLabel(service)})`;
+}
 function eventLine(event) {
   const head = eventHead(event);
-  return `- #${event.seq} ${event.type} \xB7 ${event.actor.kind} ${event.actor.id} \xB7 ${event.created_at}${head === undefined || head === "" ? "" : ` \xB7 ${head}`}`;
+  return `- #${event.seq} ${event.type} \xB7 ${actorText(event.actor)} \xB7 ${event.created_at}${head === undefined || head === "" ? "" : ` \xB7 ${head}`}`;
 }
 function childrenSummary(issue) {
   return [
@@ -16132,7 +16174,7 @@ function childrenSummary(issue) {
 function askSummary({ ask, replies }, graph) {
   const answer = ask.answer;
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     `Body: ${reply.body}`
   ]);
   return [
@@ -16199,12 +16241,12 @@ function formatOpenAsksSummary(response, baseUrl) {
 }
 function commentSummary({ comment, replies }, graph) {
   const root = [
-    `${comment.id} \xB7 ${comment.author.kind} ${comment.author.id}`,
+    `${comment.id} \xB7 ${actorText(comment.author)}`,
     ...comment.anchor?.quote === undefined ? [] : [`> ${comment.anchor.quote}`],
     `Body: ${comment.body}`
   ];
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     ...reply.anchor?.quote === undefined ? [] : [`> ${reply.anchor.quote}`],
     `Body: ${reply.body}`
   ]);
@@ -16218,12 +16260,9 @@ function commentSummary({ comment, replies }, graph) {
 `);
 }
 function messageSummary({ message, replies }, graph) {
-  const root = [
-    `${message.id} \xB7 ${message.author.kind} ${message.author.id}`,
-    `Body: ${message.body}`
-  ];
+  const root = [`${message.id} \xB7 ${actorText(message.author)}`, `Body: ${message.body}`];
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     `Body: ${reply.body}`
   ]);
   return [
@@ -16305,9 +16344,11 @@ async function executeDispatchTool(input) {
     const client = dispatchClient();
     const identity = await client.whoami();
     const owner = identity.kind === "agent" ? identity.owner : identity.login.toLowerCase();
+    const service = identity.kind === "agent" ? identity.service ?? null : null;
+    const unowned = "no owner, so issues you create without an assignee are unassigned (or inherit their parent's).";
     return {
-      text: owner === null ? `Session ${sessionId} runs under the shared token: no owner, so issues you create without an assignee are unassigned (or inherit their parent's).` : `Session ${sessionId} acts for ${owner}: issues you create without an assignee are assigned to ${owner}.`,
-      details: { session: sessionId, owner }
+      text: owner !== null ? `Session ${sessionId} acts for ${owner}: issues you create without an assignee are assigned to ${owner}.` : service !== null ? `Session ${sessionId} runs as service ${serviceSubjectLabel(service)}: ${unowned}` : `Session ${sessionId} runs under the shared token: ${unowned}`,
+      details: { session: sessionId, owner, service }
     };
   }
   const args = parsed.success ? parsed.data : ownerArguments.args;
@@ -16518,7 +16559,8 @@ async function executeDispatchTool(input) {
     }
     case "dispatch_resolve_ask": {
       const kind = stringArg(args, "kind");
-      const ask = await client.resolveAsk(stringArg(args, "ask"), {
+      const id = await resolveAskArgument(input.tool, args, client, input.sessionId);
+      const ask = await client.resolveAsk(id, {
         kind,
         reason: stringArg(args, "reason"),
         actor
@@ -16537,11 +16579,11 @@ async function executeDispatchTool(input) {
       let document;
       if (ref?.owner.kind === "issue") {
         const issueKey = ref.owner.issue;
-        id = await resolveIdPrefix(input.tool, "comment", ref, () => client.getComments(issueKey));
+        id = await resolveIdPrefix(input.tool, "comment", ref.id, refOwnerName(ref), () => client.getComments(issueKey));
       } else if (ref !== null) {
         const artifact = (await resolveArtifact(client, ref.owner, ref.artifact)).artifact;
         document = artifact;
-        id = await resolveIdPrefix(input.tool, "comment", ref, () => client.getArtifactComments(artifact.id));
+        id = await resolveIdPrefix(input.tool, "comment", ref.id, refOwnerName(ref), () => client.getArtifactComments(artifact.id));
       }
       const comment = await client.resolveComment(id, actor);
       const { label, details } = await commentOwnerResult(client, comment, document);
@@ -16585,7 +16627,8 @@ ${followsAsk(askOwner)}`,
       const options = args.options;
       const multiple = optionalBoolean(args, "multiple");
       const urgency = askUrgency(args);
-      const ask = await client.editAsk(askId(args), {
+      const id = await resolveAskArgument(input.tool, args, client, input.sessionId);
+      const ask = await client.editAsk(id, {
         ...question === undefined ? {} : { question },
         ...Array.isArray(options) ? { options } : {},
         ...multiple === undefined ? {} : { multiple },
@@ -16812,7 +16855,7 @@ ${trailer.join(`
       const sessionId = input.sessionId?.trim();
       if (!sessionId)
         throw new Error("host session id is required for dispatch_follow");
-      const ask = askId(args);
+      const ask = await resolveAskArgument(input.tool, args, client, sessionId);
       const action = stringArg(args, "action");
       if (action === "unfollow") {
         await client.unfollowAsk(ask, sessionId, actor);
@@ -16828,7 +16871,7 @@ ${trailer.join(`
     case "dispatch_read": {
       if (ownerArguments.ref?.kind === "ask") {
         const ref = ownerArguments.ref;
-        const id = await resolveIdPrefix(input.tool, "ask", ref, async () => ref.owner.kind === "issue" ? client.listIssueAsks(ref.owner.issue) : client.getArtifactAsks((await resolveArtifact(client, ref.owner, ref.artifact)).artifact.id, "all"));
+        const id = await resolveIdPrefix(input.tool, "ask", ref.id, refOwnerName(ref), async () => ref.owner.kind === "issue" ? client.listIssueAsks(ref.owner.issue) : client.getArtifactAsks((await resolveArtifact(client, ref.owner, ref.artifact)).artifact.id, "all"));
         const askRead = await client.getAsk(id);
         const askRef = refTarget(ref, "ask", id);
         return {
@@ -16838,7 +16881,7 @@ ${trailer.join(`
       }
       if (ownerArguments.ref?.kind === "comment") {
         const ref = ownerArguments.ref;
-        const id = await resolveIdPrefix(input.tool, "comment", ref, async () => ref.owner.kind === "issue" ? client.getComments(ref.owner.issue) : client.getArtifactComments((await resolveArtifact(client, ref.owner, ref.artifact)).artifact.id));
+        const id = await resolveIdPrefix(input.tool, "comment", ref.id, refOwnerName(ref), async () => ref.owner.kind === "issue" ? client.getComments(ref.owner.issue) : client.getArtifactComments((await resolveArtifact(client, ref.owner, ref.artifact)).artifact.id));
         const comment = await client.getComment(id);
         const commentRef = refTarget(ref, "comment", id);
         return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/opencode-legion-envoy",
-  "version": "1.46.0",
+  "version": "1.47.0",
   "type": "module",
   "main": "dist/src/server.js",
   "exports": {

package/skills/dispatch/SKILL.md

@@ -148,7 +148,7 @@ An ask goes to the issue's assignee: their Inbox opens on **Mine**, which lists
 ```ts
 dispatch_whoami({})
 ```
-It returns `details` `{ session, owner }`: `owner` is the lowercase login of the human whose personal token you run under, or `null` under the shared token. An issue you create without `assignee` goes to your owner; under the shared token it inherits its parent's assignee, or stays unassigned without a parent. If an issue you are asking on is unassigned and the answer matters, assign it to your owner (`PATCH /api/v1/issues/{key}` with `{"assignee": "<login>"}`; any authenticated caller may reassign, and an unlisted login is refused with `ASSIGNEE_NOT_ALLOWED`) or name in the question who should answer it. Never reassign an issue a human holds to get an answer faster: that is the human's call.
+It returns `details` `{ session, owner, service }`: `owner` is the lowercase login of the human whose personal token you run under, or `null` under the shared token or a verified service token, in which case `service` is that token's subject (`system:serviceaccount:<namespace>:<name>`, `null` otherwise) and every write you make is rendered `(as <namespace>/<name>)` — the namespace is kept because every namespace has a `default` service account, and a subject that is not a Kubernetes one is shown whole. An issue you create without `assignee` goes to your owner; with no owner it inherits its parent's assignee, or stays unassigned without a parent. If an issue you are asking on is unassigned and the answer matters, assign it to your owner (`PATCH /api/v1/issues/{key}` with `{"assignee": "<login>"}`; any authenticated caller may reassign, and an unlisted login is refused with `ASSIGNEE_NOT_ALLOWED`) or name in the question who should answer it. Never reassign an issue a human holds to get an answer faster: that is the human's call.
 
 Architects create newly tracked child work with:
 ```ts
@@ -708,7 +708,9 @@ the host tells you once per ask. Leave a thread you no longer need, or rejoin on
 dispatch_follow({ ask, action: "follow" | "unfollow" })
 ```
 
-`ask` is the full ask id or a `dispatch://KEY/ask/<id>` reference. A human may also remove you from the ask card; either way you are
+`ask` is the full ask id or a `dispatch://KEY/ask/<id>` reference; `dispatch_follow`, `dispatch_edit_ask`, and
+`dispatch_resolve_ask` also take an 8+ hex prefix that is unique among your own open asks, and refuse anything shorter by naming
+those asks. A human may also remove you from the ask card; either way you are
 told with an `ask.follower_removed` notice, and a human adding you arrives as `ask.follower_added`.
 
 No write subscribes you to an issue or document. Following covers your own asks and the threads you joined; everything else on the