Agent Run Commit Attribution

[michaeljguarino]

Noticed the agent run initiator isn't getting marked as committer currently, this hopefully fixes.

Test Plan

Test environment: https://console.plrldemo.onplural.sh/cd/clusters/a1748282-ce8b-48ab-ae7e-326e74fce04e/services/f3f89a54-d1a7-4bc8-9152-daa07ede918d/components

Checklist

• I have added a meaningful title and summary to convey the impact of this PR to a user.
• If required, I have updated the Plural documentation accordingly.
• I have added tests to cover my changes.
• I have deployed the agent to a test environment and verified that it works as expected (required only when changing agent code).

Plural Flow: console

[soffi-ai]

Soffi AI Summary

This PR bundles several largely independent improvements across the AI workbench, SCM integrations, and CI infrastructure under the headline fix of attributing the correct initiator as the Git committer on agent runs.

Agent Run Commit Attribution (primary fix): The agent run initiator was not being recorded as the Git committer when the agent pushed changes. This PR wires the actor/initiator identity through so that commits produced by AI agent runs are properly attributed.

AI Workbench enhancements:

• Added project-level disablement of AI features, giving operators a kill-switch without touching individual resources.
• Improved "babysit mode" behavior for more reliable agent supervision.
• Added skill autodiscovery so the workbench can find and surface available tools automatically.
• Implemented model/mode selection on reprompts, letting users switch LLM models or interaction modes mid-session.
• Added workbench cost recommendations so users can see the cost impact of their AI sessions.
• Added explanatory annotations to function-call and Kubernetes-update activities in the agent timeline.
• Implemented an exec activity type and full frontend support for command execution in the workbench, including better responsiveness for pod exec interactions and proper handling of exec failures.

PubSub / polling improvements: Activity delivery and agent-run poll successes are now pushed via PubSub rather than polled, significantly improving UI responsiveness when agents are running.

SCM credentials refresh: Implemented automatic refresh of SCM (source control manager) credentials so long-lived agent sessions don't fail due to expired tokens.

Cloud connection management UI: Added in-UI management of cloud connections, allowing operators to configure and update cloud provider connections without leaving the Console.

CI infrastructure — revert Blacksmith CI migration: All GitHub Actions workflows that had been migrated to Blacksmith-hosted runners (blacksmith-*vcpu-ubuntu-* runners and useblacksmith/* actions) are reverted back to standard ubuntu-latest runners with docker/setup-buildx-action and docker/build-push-action, using GitHub Actions cache (type=gha) instead of Blacksmith's build cache. This affects the deployment operator harness (base, terraform, terragrunt, pulumi, ansible), cloud-query, kubernetes-agent, agentk, controller, datastore, ai-proxy, and deployment operator CD/CI workflows.

Commits

Commit	Summary
132b9de	Fix agent run commit attribution: wire the run initiator's identity through as the Git committer so that commits pushed by AI agent runs are properly attributed to the correct user.
2801cce	Add project-level disablement of AI features, giving operators a coarse kill-switch to turn off AI capabilities for an entire project without modifying individual resources.
38613cc	Fix a database migration error introduced alongside the AI disablement feature.
4981dbb	Add explanatory annotations to function-call and Kubernetes-update activity entries in the agent run timeline for better observability.
5f8a951	Enable model and mode updates when the agent is reprompted, so users can switch LLM models or interaction modes mid-session.
8c1cbd1	Implement automatic SCM credential refresh so long-lived agent sessions do not fail due to expired source control tokens.
3c903aa	Expose model/mode selection in the reprompt UI so users can change the active LLM or interaction mode directly from the frontend.
437d4d3	Add in-UI cloud connection management, allowing operators to configure and update cloud provider connections without leaving the Console.
0270481	Implement the 'exec' activity type in the agent run model to represent command execution steps in the workbench timeline.
1c09f4b	Deliver activity events and agent-run poll successes via PubSub instead of polling, significantly improving UI responsiveness during active agent runs.
65eaada	Add frontend support for displaying and interacting with command execution (exec) activities in the workbench UI.
b8984aa	Improve pod exec responsiveness in the workbench terminal integration.
d6d2f6f	Add skill autodiscovery so the workbench can automatically surface available tools and capabilities to the agent.
6f98105	Revert the Blacksmith CI migration: replace all Blacksmith-hosted runners and build actions with standard ubuntu-latest runners, docker/setup-buildx-action, and GitHub Actions cache across all affected workflows.
de0240a	Improve 'babysit mode' supervision behavior for more reliable agent oversight and intervention.
e395845	Add workbench cost recommendations so users can see the cost impact of their AI agent sessions.
02c8a53	Properly surface and handle exec failures in the workbench so errors during command execution are reported correctly rather than silently swallowed.

Deploy in Soffi

---

Updated: 2026-08-14 02:28 UTC

[greptile-apps]

Greptile Summary

This PR propagates an agent run's initiating user into the harness and uses that identity for repository-local Git commit attribution, while retaining the existing service-account and SCM fallbacks.

• Adds the initiating user to the harness AgentRun representation and fragment mapping.
• Resolves commit identity before handling either existing or newly cloned repositories.
• Adds unit coverage for user propagation and identity fallback behavior.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete regressions identified in the commit-attribution flow.

The AgentRun query already selects the initiating user, the mapping handles a nullable user safely, and both repository setup paths receive an identity while preserving established fallbacks.

Important Files Changed

Filename	Overview
go/deployment-operator/pkg/agentrun-harness/agentrun/v1/types.go	Adds a nullable initiating-user representation and safely maps it from the existing GraphQL fragment.
go/deployment-operator/pkg/agentrun-harness/agentrun/v1/types_test.go	Verifies that the initiating user's name and email are copied into the harness model.
go/deployment-operator/pkg/agentrun-harness/environment/environment.go	Centralizes Git identity resolution and applies it consistently to existing and newly cloned repositories.
go/deployment-operator/pkg/agentrun-harness/environment/environment_test.go	Covers preference for the initiating user and fallback to SCM credentials and the default email.

_{Reviews (1): Last reviewed commit: "Agent Run Commit Attribution" | Re-trigger Greptile}

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2572

Promotes the console image to sha-a449881, built from source head a44988186549da6c2fe2aac6673c5a868b504b30.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR created: https://github.com/pluralsh/plrl-up-demos/pull/2573 — pins the demo console image to sha-6b5a35e and is annotated with Plural Service: mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

Requested GitOps deployment PR created: https://github.com/pluralsh/plrl-up-demos/pull/2574

[michaeljguarino]

plural deploy this

[plural-copilot]

Created the GitOps deployment PR for this request: https://github.com/pluralsh/plrl-up-demos/pull/2575 (console image tag: sha-db4e98c).

Triggered by: #3991 (comment)

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2578

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR: https://github.com/pluralsh/plrl-up-demos/pull/2579

This deploys sha-d2f2b7d from commit d2f2b7da4e86512df72caf1e79a8dcb390c4f29f; reconciliation is associated with mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2580

Pins the demo console deployment to sha-1639400.

Triggered by: #3991 (comment)

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR: https://github.com/pluralsh/plrl-up-demos/pull/2593 — pins the demo console image to sha-d6d2f6f.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2599

Image tag: sha-de0240a
Annotation: Plural Service: mgmt/apps

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR created: https://github.com/pluralsh/plrl-up-demos/pull/2600 — pins console to sha-4401dc3 and annotates Plural Service: mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

Deployment PR: https://github.com/pluralsh/plrl-up-demos/pull/2601 — updates the demo console image to sha-b01a4b4. Attributed to Plural Service: mgmt/apps.

[michaeljguarino]

plural deploy this

[plural-copilot]

The deployment GitOps PR has been created: https://github.com/pluralsh/plrl-up-demos/pull/2602