Agent Run Commit Attribution

[michaeljguarino]

Noticed the agent run initiator isn't getting marked as committer currently, this hopefully fixes.

Test Plan

Test environment: https://console.plrldemo.onplural.sh/cd/clusters/a1748282-ce8b-48ab-ae7e-326e74fce04e/services/f3f89a54-d1a7-4bc8-9152-daa07ede918d/components

Checklist

• I have added a meaningful title and summary to convey the impact of this PR to a user.
• If required, I have updated the Plural documentation accordingly.
• I have added tests to cover my changes.
• I have deployed the agent to a test environment and verified that it works as expected (required only when changing agent code).

Plural Flow: console

[soffi-ai]

Soffi AI Summary

This PR bundles several independent improvements and fixes across the Plural Console platform, with the primary focus being agent run commit attribution — ensuring the agent run initiator is properly recorded as the committer. Beyond that, it introduces project-level AI disablement, significant AI workbench/babysit-mode enhancements, SCM credential refresh, cloud connection UI management, a more responsive pod exec experience, and a broad CI migration away from Blacksmith back to standard GitHub Actions runners.

Key change groups:

1. Agent Run Commit Attribution (title fix): The agent run initiator was not being marked as the committer on Git commits produced by agent runs. This PR wires the initiating actor through so commits are correctly attributed.

2. Project-Level AI Disablement: Admins can now disable AI features at the project level, giving operators fine-grained control over where AI capabilities are exposed.

3. AI Workbench / Babysit Mode Improvements: Multiple enhancements to the AI workbench UX — including mode/model selection on reprompts, workbench cost recommendations, skill autodiscovery, better explanation of function calls and Kubernetes updates, and babysit mode refinements.

4. Command Exec Activity & Responsive Pod Exec: A new exec activity type is introduced for agent runs. The pod exec experience is made more responsive via PubSub-based delivery of activity/agent run poll successes, and exec failures are handled more gracefully.

5. SCM Credentials Refresh: SCM credentials are now refreshed periodically, ensuring long-lived agent sessions don't fail due to stale tokens.

6. Cloud Connection Management UI: Introduces in-UI management of cloud connections, allowing users to view and manage cloud provider integrations directly from the Console.

7. CI: Revert Blacksmith CI Migration: All CI/CD workflows are reverted from Blacksmith-hosted runners (blacksmith-*vcpu-ubuntu-*) back to standard ubuntu-latest GitHub Actions runners, with docker/setup-buildx-action replacing useblacksmith/setup-docker-builder and docker/build-push-action replacing useblacksmith/build-push-action. GitHub Actions cache (type=gha) is added to maintain build performance.

8. Cursor Skill: A new .cursor/skills/console-graphql-codegen/SKILL.md is added to document and automate the GraphQL codegen workflow for AI-assisted development.

Commits

Commit	Summary
132b9de	Fix agent run commit attribution so the run initiator is correctly recorded as the committer on Git commits produced by agent runs.
2801cce	Implement project-level disablement of AI features, giving operators control over where AI capabilities are exposed within the platform.
38613cc	Fix a database migration error.
4981dbb	Add explanatory context to AI function call results and Kubernetes resource update events in the workbench UI.
5f8a951	Support mode and model updates when an AI agent is reprompted mid-session.
8c1cbd1	Implement periodic SCM credentials refresh to prevent stale tokens from breaking long-lived agent run sessions.
3c903aa	Expose mode and model selection controls in the reprompt UI of the AI workbench.
437d4d3	Add in-UI cloud connection management, allowing users to view and manage cloud provider integrations directly from the Console.
0270481	Implement a new 'exec' activity type for agent runs, enabling command execution events to be tracked and surfaced in the run timeline.
1c09f4b	Deliver activity and agent run poll results via PubSub for significantly improved responsiveness in the workbench and exec views.
65eaada	Add frontend UI for command execution within agent run sessions.
b8984aa	Improve pod exec responsiveness by reducing latency in the terminal streaming path.
d6d2f6f	Add skill autodiscovery so AI agents can automatically detect and register available tools/skills without manual configuration.
6f98105	Revert Blacksmith CI migration across all workflows, replacing Blacksmith runners and build actions with standard ubuntu-latest runners and docker/build-push-action with GHA caching.
de0240a	Multiple improvements to babysit mode in the AI workbench, refining how the agent autonomously monitors and responds to ongoing situations.
e395845	Add cost recommendations to the AI workbench, surfacing infrastructure cost insights within the agent session context.
88ac925	Properly handle exec failures in agent run command execution, preventing silent errors from being swallowed.

Deploy in Soffi

---

Updated: 2026-08-14 03:24 UTC

[greptile-apps]

Greptile Summary

This PR propagates an agent run's initiating user into the harness and uses that identity for repository-local Git commit attribution, while retaining the existing service-account and SCM fallbacks.

• Adds the initiating user to the harness AgentRun representation and fragment mapping.
• Resolves commit identity before handling either existing or newly cloned repositories.
• Adds unit coverage for user propagation and identity fallback behavior.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete regressions identified in the commit-attribution flow.

The AgentRun query already selects the initiating user, the mapping handles a nullable user safely, and both repository setup paths receive an identity while preserving established fallbacks.

Important Files Changed

Filename	Overview
go/deployment-operator/pkg/agentrun-harness/agentrun/v1/types.go	Adds a nullable initiating-user representation and safely maps it from the existing GraphQL fragment.
go/deployment-operator/pkg/agentrun-harness/agentrun/v1/types_test.go	Verifies that the initiating user's name and email are copied into the harness model.
go/deployment-operator/pkg/agentrun-harness/environment/environment.go	Centralizes Git identity resolution and applies it consistently to existing and newly cloned repositories.
go/deployment-operator/pkg/agentrun-harness/environment/environment_test.go	Covers preference for the initiating user and fallback to SCM credentials and the default email.

_{Reviews (1): Last reviewed commit: "Agent Run Commit Attribution" | Re-trigger Greptile}

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2572

Promotes the console image to sha-a449881, built from source head a44988186549da6c2fe2aac6673c5a868b504b30.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR created: https://github.com/pluralsh/plrl-up-demos/pull/2573 — pins the demo console image to sha-6b5a35e and is annotated with Plural Service: mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

Requested GitOps deployment PR created: https://github.com/pluralsh/plrl-up-demos/pull/2574

[michaeljguarino]

plural deploy this

[plural-copilot]

Created the GitOps deployment PR for this request: https://github.com/pluralsh/plrl-up-demos/pull/2575 (console image tag: sha-db4e98c).

Triggered by: #3991 (comment)

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2578

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR: https://github.com/pluralsh/plrl-up-demos/pull/2579

This deploys sha-d2f2b7d from commit d2f2b7da4e86512df72caf1e79a8dcb390c4f29f; reconciliation is associated with mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2580

Pins the demo console deployment to sha-1639400.

Triggered by: #3991 (comment)

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2593 — pins the demo console image to sha-d6d2f6f.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2599

Image tag: sha-de0240a
Annotation: Plural Service: mgmt/apps

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR created: https://github.com/pluralsh/plrl-up-demos/pull/2600 — pins console to sha-4401dc3 and annotates Plural Service: mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR: https://github.com/pluralsh/plrl-up-demos/pull/2601 — updates the demo console image to sha-b01a4b4. Attributed to Plural Service: mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

The deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2602

[michaeljguarino]

plural deploy this

[plural-copilot]

The requested deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2603

It pins the demo console image to sha-02c8a53.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2604

Console is configured to deploy sha-ce1294d.