@sjawhar/opencode-legion-envoy 1.46.1 → 1.47.0

package/dist/src/server.js

@@ -13552,6 +13552,13 @@ function date4(params) {
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
 // ../contracts/src/dispatch-api.ts
+function serviceSubjectLabel(subject) {
+  const parts = subject.split(":");
+  if (parts.length === 4 && parts[0] === "system" && parts[1] === "serviceaccount" && parts[2] !== "" && parts[3] !== "") {
+    return `${parts[2]}/${parts[3]}`;
+  }
+  return subject;
+}
 var ASK_TURNS = ["human", "agent"];
 var DELIVERY_CAPABILITIES = ["aside", "btw", "steer"];
 var DispatchEventSchema = object({
@@ -16145,9 +16152,16 @@ function eventHead(event) {
       return;
   }
 }
+function actorText(actor) {
+  const service = actor.kind === "session" ? actor.service : undefined;
+  if (service === undefined) {
+    return `${actor.kind} ${actor.id}`;
+  }
+  return `${actor.kind} ${actor.id} (as ${serviceSubjectLabel(service)})`;
+}
 function eventLine(event) {
   const head = eventHead(event);
-  return `- #${event.seq} ${event.type} \xB7 ${event.actor.kind} ${event.actor.id} \xB7 ${event.created_at}${head === undefined || head === "" ? "" : ` \xB7 ${head}`}`;
+  return `- #${event.seq} ${event.type} \xB7 ${actorText(event.actor)} \xB7 ${event.created_at}${head === undefined || head === "" ? "" : ` \xB7 ${head}`}`;
 }
 function childrenSummary(issue) {
   return [
@@ -16160,7 +16174,7 @@ function childrenSummary(issue) {
 function askSummary({ ask, replies }, graph) {
   const answer = ask.answer;
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     `Body: ${reply.body}`
   ]);
   return [
@@ -16227,12 +16241,12 @@ function formatOpenAsksSummary(response, baseUrl) {
 }
 function commentSummary({ comment, replies }, graph) {
   const root = [
-    `${comment.id} \xB7 ${comment.author.kind} ${comment.author.id}`,
+    `${comment.id} \xB7 ${actorText(comment.author)}`,
     ...comment.anchor?.quote === undefined ? [] : [`> ${comment.anchor.quote}`],
     `Body: ${comment.body}`
   ];
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     ...reply.anchor?.quote === undefined ? [] : [`> ${reply.anchor.quote}`],
     `Body: ${reply.body}`
   ]);
@@ -16246,12 +16260,9 @@ function commentSummary({ comment, replies }, graph) {
 `);
 }
 function messageSummary({ message, replies }, graph) {
-  const root = [
-    `${message.id} \xB7 ${message.author.kind} ${message.author.id}`,
-    `Body: ${message.body}`
-  ];
+  const root = [`${message.id} \xB7 ${actorText(message.author)}`, `Body: ${message.body}`];
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     `Body: ${reply.body}`
   ]);
   return [
@@ -16333,9 +16344,11 @@ async function executeDispatchTool(input) {
     const client = dispatchClient();
     const identity = await client.whoami();
     const owner = identity.kind === "agent" ? identity.owner : identity.login.toLowerCase();
+    const service = identity.kind === "agent" ? identity.service ?? null : null;
+    const unowned = "no owner, so issues you create without an assignee are unassigned (or inherit their parent's).";
     return {
-      text: owner === null ? `Session ${sessionId} runs under the shared token: no owner, so issues you create without an assignee are unassigned (or inherit their parent's).` : `Session ${sessionId} acts for ${owner}: issues you create without an assignee are assigned to ${owner}.`,
-      details: { session: sessionId, owner }
+      text: owner !== null ? `Session ${sessionId} acts for ${owner}: issues you create without an assignee are assigned to ${owner}.` : service !== null ? `Session ${sessionId} runs as service ${serviceSubjectLabel(service)}: ${unowned}` : `Session ${sessionId} runs under the shared token: ${unowned}`,
+      details: { session: sessionId, owner, service }
     };
   }
   const args = parsed.success ? parsed.data : ownerArguments.args;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/opencode-legion-envoy",
-  "version": "1.46.1",
+  "version": "1.47.0",
   "type": "module",
   "main": "dist/src/server.js",
   "exports": {

package/skills/dispatch/SKILL.md

@@ -148,7 +148,7 @@ An ask goes to the issue's assignee: their Inbox opens on **Mine**, which lists
 ```ts
 dispatch_whoami({})
 ```
-It returns `details` `{ session, owner }`: `owner` is the lowercase login of the human whose personal token you run under, or `null` under the shared token. An issue you create without `assignee` goes to your owner; under the shared token it inherits its parent's assignee, or stays unassigned without a parent. If an issue you are asking on is unassigned and the answer matters, assign it to your owner (`PATCH /api/v1/issues/{key}` with `{"assignee": "<login>"}`; any authenticated caller may reassign, and an unlisted login is refused with `ASSIGNEE_NOT_ALLOWED`) or name in the question who should answer it. Never reassign an issue a human holds to get an answer faster: that is the human's call.
+It returns `details` `{ session, owner, service }`: `owner` is the lowercase login of the human whose personal token you run under, or `null` under the shared token or a verified service token, in which case `service` is that token's subject (`system:serviceaccount:<namespace>:<name>`, `null` otherwise) and every write you make is rendered `(as <namespace>/<name>)` — the namespace is kept because every namespace has a `default` service account, and a subject that is not a Kubernetes one is shown whole. An issue you create without `assignee` goes to your owner; with no owner it inherits its parent's assignee, or stays unassigned without a parent. If an issue you are asking on is unassigned and the answer matters, assign it to your owner (`PATCH /api/v1/issues/{key}` with `{"assignee": "<login>"}`; any authenticated caller may reassign, and an unlisted login is refused with `ASSIGNEE_NOT_ALLOWED`) or name in the question who should answer it. Never reassign an issue a human holds to get an answer faster: that is the human's call.
 
 Architects create newly tracked child work with:
 ```ts