@sjawhar/opencode-legion-envoy 1.46.1 → 1.48.0

package/dist/src/server.js

@@ -13552,6 +13552,13 @@ function date4(params) {
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v4/classic/external.js
 config(en_default());
 // ../contracts/src/dispatch-api.ts
+function serviceSubjectLabel(subject) {
+  const parts = subject.split(":");
+  if (parts.length === 4 && parts[0] === "system" && parts[1] === "serviceaccount" && parts[2] !== "" && parts[3] !== "") {
+    return `${parts[2]}/${parts[3]}`;
+  }
+  return subject;
+}
 var ASK_TURNS = ["human", "agent"];
 var DELIVERY_CAPABILITIES = ["aside", "btw", "steer"];
 var DispatchEventSchema = object({
@@ -15046,6 +15053,9 @@ class DispatchClient {
   async syncArchitectureSource(project) {
     return this.#json("POST", ["api", "v1", "projects", project, "architecture-source", "sync"]);
   }
+  async getArchitectureSource(project) {
+    return this.#json("GET", ["api", "v1", "projects", project, "architecture-source"]);
+  }
   async resolveAsk(id, input) {
     return this.#json("POST", ["api", "v1", "asks", id, "resolve"], input);
   }
@@ -15564,6 +15574,20 @@ function componentsChange(input, after) {
       return "components -> inherit";
   }
 }
+var architectureComponentsAction = 'Review the `dispatch` skill, "Architecture components", to attach it to the parts it changes or mark it as non-architectural with a reason.';
+async function architectureGuidance(client, project, components) {
+  if (components.mode === "none" || components.ids.length > 0)
+    return;
+  try {
+    await client.getArchitectureSource(project);
+    return `Project ${project} has an architecture model, but this issue is not linked to any of its current components. ${architectureComponentsAction}`;
+  } catch (error) {
+    if (error instanceof DispatchServiceError && error.status === 404 && error.code === "SOURCE_NOT_FOUND") {
+      return;
+    }
+    return `Could not check whether project ${project} has an architecture model: ${messageFor(error)}. ${architectureComponentsAction}`;
+  }
+}
 function isDuplicateCandidate(value) {
   if (typeof value !== "object" || value === null)
     return false;
@@ -16145,9 +16169,16 @@ function eventHead(event) {
       return;
   }
 }
+function actorText(actor) {
+  const service = actor.kind === "session" ? actor.service : undefined;
+  if (service === undefined) {
+    return `${actor.kind} ${actor.id}`;
+  }
+  return `${actor.kind} ${actor.id} (as ${serviceSubjectLabel(service)})`;
+}
 function eventLine(event) {
   const head = eventHead(event);
-  return `- #${event.seq} ${event.type} \xB7 ${event.actor.kind} ${event.actor.id} \xB7 ${event.created_at}${head === undefined || head === "" ? "" : ` \xB7 ${head}`}`;
+  return `- #${event.seq} ${event.type} \xB7 ${actorText(event.actor)} \xB7 ${event.created_at}${head === undefined || head === "" ? "" : ` \xB7 ${head}`}`;
 }
 function childrenSummary(issue) {
   return [
@@ -16160,7 +16191,7 @@ function childrenSummary(issue) {
 function askSummary({ ask, replies }, graph) {
   const answer = ask.answer;
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     `Body: ${reply.body}`
   ]);
   return [
@@ -16227,12 +16258,12 @@ function formatOpenAsksSummary(response, baseUrl) {
 }
 function commentSummary({ comment, replies }, graph) {
   const root = [
-    `${comment.id} \xB7 ${comment.author.kind} ${comment.author.id}`,
+    `${comment.id} \xB7 ${actorText(comment.author)}`,
     ...comment.anchor?.quote === undefined ? [] : [`> ${comment.anchor.quote}`],
     `Body: ${comment.body}`
   ];
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     ...reply.anchor?.quote === undefined ? [] : [`> ${reply.anchor.quote}`],
     `Body: ${reply.body}`
   ]);
@@ -16246,12 +16277,9 @@ function commentSummary({ comment, replies }, graph) {
 `);
 }
 function messageSummary({ message, replies }, graph) {
-  const root = [
-    `${message.id} \xB7 ${message.author.kind} ${message.author.id}`,
-    `Body: ${message.body}`
-  ];
+  const root = [`${message.id} \xB7 ${actorText(message.author)}`, `Body: ${message.body}`];
   const chain = replies.flatMap((reply) => [
-    `${reply.id} \xB7 ${reply.author.kind} ${reply.author.id}`,
+    `${reply.id} \xB7 ${actorText(reply.author)}`,
     `Body: ${reply.body}`
   ]);
   return [
@@ -16333,9 +16361,11 @@ async function executeDispatchTool(input) {
     const client = dispatchClient();
     const identity = await client.whoami();
     const owner = identity.kind === "agent" ? identity.owner : identity.login.toLowerCase();
+    const service = identity.kind === "agent" ? identity.service ?? null : null;
+    const unowned = "no owner, so issues you create without an assignee are unassigned (or inherit their parent's).";
     return {
-      text: owner === null ? `Session ${sessionId} runs under the shared token: no owner, so issues you create without an assignee are unassigned (or inherit their parent's).` : `Session ${sessionId} acts for ${owner}: issues you create without an assignee are assigned to ${owner}.`,
-      details: { session: sessionId, owner }
+      text: owner !== null ? `Session ${sessionId} acts for ${owner}: issues you create without an assignee are assigned to ${owner}.` : service !== null ? `Session ${sessionId} runs as service ${serviceSubjectLabel(service)}: ${unowned}` : `Session ${sessionId} runs under the shared token: ${unowned}`,
+      details: { session: sessionId, owner, service }
     };
   }
   const args = parsed.success ? parsed.data : ownerArguments.args;
@@ -16381,9 +16411,13 @@ async function executeDispatchTool(input) {
           ...Array.isArray(labels) ? { labels } : {},
           actor
         });
-        const adviceLines = renderAdvice(input.tool, created.key, created.advice, {
-          isPrimarySpec: spec !== undefined
-        });
+        const componentGuidance = await architectureGuidance(client, created.project, created.components);
+        const adviceLines = [
+          ...renderAdvice(input.tool, created.key, created.advice, {
+            isPrimarySpec: spec !== undefined
+          }),
+          ...componentGuidance === undefined ? [] : [componentGuidance]
+        ];
         return {
           text: [
             `Created ${created.key}: ${created.title} ${notSubscribed(issueTopic(created.key))}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/opencode-legion-envoy",
-  "version": "1.46.1",
+  "version": "1.48.0",
   "type": "module",
   "main": "dist/src/server.js",
   "exports": {

package/skills/dispatch/SKILL.md

@@ -148,7 +148,7 @@ An ask goes to the issue's assignee: their Inbox opens on **Mine**, which lists
 ```ts
 dispatch_whoami({})
 ```
-It returns `details` `{ session, owner }`: `owner` is the lowercase login of the human whose personal token you run under, or `null` under the shared token. An issue you create without `assignee` goes to your owner; under the shared token it inherits its parent's assignee, or stays unassigned without a parent. If an issue you are asking on is unassigned and the answer matters, assign it to your owner (`PATCH /api/v1/issues/{key}` with `{"assignee": "<login>"}`; any authenticated caller may reassign, and an unlisted login is refused with `ASSIGNEE_NOT_ALLOWED`) or name in the question who should answer it. Never reassign an issue a human holds to get an answer faster: that is the human's call.
+It returns `details` `{ session, owner, service }`: `owner` is the lowercase login of the human whose personal token you run under, or `null` under the shared token or a verified service token, in which case `service` is that token's subject (`system:serviceaccount:<namespace>:<name>`, `null` otherwise) and every write you make is rendered `(as <namespace>/<name>)` — the namespace is kept because every namespace has a `default` service account, and a subject that is not a Kubernetes one is shown whole. An issue you create without `assignee` goes to your owner; with no owner it inherits its parent's assignee, or stays unassigned without a parent. If an issue you are asking on is unassigned and the answer matters, assign it to your owner (`PATCH /api/v1/issues/{key}` with `{"assignee": "<login>"}`; any authenticated caller may reassign, and an unlisted login is refused with `ASSIGNEE_NOT_ALLOWED`) or name in the question who should answer it. Never reassign an issue a human holds to get an answer faster: that is the human's call.
 
 Architects create newly tracked child work with:
 ```ts
@@ -302,7 +302,9 @@ that follow from it:
 the question carries `dispatch://KEY/artifact/<slug>` (or `ref`), never just its filename. Text
 they must read to decide belongs in the spec in the first place — see [Artifacts](#artifacts).
 
-Attach an issue to the architecture components it changes, before decomposing it — children inherit the parent's attachment unless they choose their own, so attaching the root once classifies the whole tree:
+## Architecture components
+
+Attach every architectural issue to the components it changes. Attach the root before decomposing it: children inherit the root's effective attachment unless they deliberately set their own, so one root attachment classifies the whole tree.
 
 ```
 dispatch_issue({ project: "CORE", title: "...", components: { mode: "explicit", ids: ["dispatch-server", "web"] } })
@@ -311,7 +313,9 @@ dispatch_issue_update({ issue: "CORE-13", components: { mode: "none", reason: "h
 dispatch_issue_update({ issue: "CORE-14", components: { mode: "inherit" } })                  // back to the parent chain's attachment
 ```
 
-Component ids are the file names under the repository's `.dispatch/architecture/` (`web.md` → `web`); an id the model lacks, or an `external` component, is refused with `COMPONENTS_INPUT`. A closed issue can be classified without reopening. Two rules: declare and attach before decomposing work, and change code and its architecture description (`.dispatch/architecture/<id>.md`) in the same review — the tree at `GET /api/v1/projects/{key}/architecture` counts every issue whose effective set names a component or anything it contains.
+No native Dispatch tool lists component ids. Read the configured model with `GET /api/v1/projects/{key}/architecture` and use each non-external `components[].id`; when its source repository is your checkout, those ids are the file names under `.dispatch/architecture/` (`web.md` → `web`). An id absent from the model, or an `external` component, is refused with `COMPONENTS_INPUT`.
+
+Use `mode: "none"` with a concrete reason only when the work is genuinely non-architectural (for example hiring, process, or operations work). A closed issue can be classified without reopening. Change code and its architecture description (`.dispatch/architecture/<id>.md`) in the same review.
 
 Import a project's architecture model from its configured source repository now (a human configures the source in Settings):
 ```ts