Expose entity-aware owner oplog attribution

cli/golem-cli/command-output-schema/command-output.schema.json

@@ -1782,6 +1782,7 @@
       "required": [
         "$type",
         "index",
+        "attribution",
         "entry"
       ],
       "properties": {
@@ -1792,6 +1793,9 @@
           "type": "integer",
           "minimum": 0
         },
+        "attribution": {
+          "$ref": "#/definitions/PublicOplogEntryAttribution"
+        },
         "entry": {
           "$ref": "#/definitions/PublicOplogEntry"
         }
@@ -4572,6 +4576,78 @@
       },
       "additionalProperties": false
     },
+    "PublicOplogEntryAttribution": {
+      "oneOf": [
+        {
+          "type": "object",
+          "required": ["type"],
+          "properties": {
+            "type": { "const": "Agent" }
+          },
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "required": ["type", "invocation", "ancestors"],
+          "properties": {
+            "type": { "const": "Entity" },
+            "invocation": { "$ref": "#/definitions/PublicEntityInvocation" },
+            "ancestors": {
+              "type": "array",
+              "items": { "$ref": "#/definitions/PublicEntityInvocation" }
+            }
+          },
+          "additionalProperties": false
+        }
+      ]
+    },
+    "PublicEntityInvocation": {
+      "type": "object",
+      "required": ["entity", "startIndex", "callMode", "operation"],
+      "properties": {
+        "entity": { "$ref": "#/definitions/PublicAgentEntity" },
+        "startIndex": { "type": "integer", "minimum": 1 },
+        "callMode": { "type": "string", "enum": ["synchronous", "asynchronous", "fireAndForget"] },
+        "operation": {
+          "oneOf": [
+            { "$ref": "#/definitions/PublicEntityInvocationOperation" },
+            { "type": "null" }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "PublicAgentEntity": {
+      "type": "object",
+      "required": ["kind", "name"],
+      "properties": {
+        "kind": { "type": "string", "enum": ["tool", "toolMiddleware"] },
+        "name": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "PublicEntityInvocationOperation": {
+      "oneOf": [
+        {
+          "type": "object",
+          "required": ["type", "commandPath", "hasStdin", "hasStdout", "declaresStdout"],
+          "properties": {
+            "type": { "const": "Tool" },
+            "commandPath": { "type": "array", "items": { "type": "string" } },
+            "hasStdin": { "type": "boolean" },
+            "hasStdout": {
+              "type": "boolean",
+              "description": "Whether a live stdout attachment was requested. Stdout bytes are not recorded in the oplog."
+            },
+            "declaresStdout": {
+              "type": "boolean",
+              "description": "Whether the tool declares stdout support. Stdout bytes are not recorded in the oplog."
+            }
+          },
+          "additionalProperties": false
+        }
+      ]
+    },
     "PublicOplogEntry": {
       "oneOf": [
         { "$ref": "#/definitions/PublicOplogEntryCreate" },
@@ -7799,6 +7875,7 @@
     },
     "SecretValuePayload": {
       "type": "object",
+      "description": "Secret handle identity and resolution metadata. Plaintext secret material is never included.",
       "required": ["secretId", "version", "resolvedAt"],
       "properties": {
         "secretId": { "type": "string" },

cli/golem-cli/src/command_handler/agent/mod.rs

@@ -70,7 +70,7 @@ use golem_common::model::component::ComponentName;
 use golem_common::model::component::{ComponentId, ComponentRevision};
 use golem_common::model::component_metadata::{ParsedFunctionName, ParsedFunctionSite};
 use golem_common::model::environment::EnvironmentName;
-use golem_common::model::oplog::{OplogCursor, PublicOplogEntry};
+use golem_common::model::oplog::{OplogCursor, PublicOplogEntryWithIndex};
 use golem_common::model::worker::{
     AgentConfigEntryDto, RevertLastInvocations, RevertToOplogIndex, UpdateRecord,
 };
@@ -782,7 +782,7 @@ impl AgentCommandHandler {
         let mut cursor = Option::<OplogCursor>::None;
         let mut had_entries = false;
         loop {
-            let mut entries = Vec::<(u64, PublicOplogEntry)>::new();
+            let mut entries = Vec::<PublicOplogEntryWithIndex>::new();
             cursor = {
                 let clients = self.ctx.golem_clients().await?;
 
@@ -799,21 +799,18 @@ impl AgentCommandHandler {
                     .await
                     .map_service_error()?;
 
-                entries.extend(
-                    result
-                        .entries
-                        .into_iter()
-                        .map(|entry| (entry.oplog_index.as_u64(), entry.entry)),
-                );
+                entries.extend(result.entries);
                 result.next
             };
 
             if !entries.is_empty() {
                 had_entries = true;
-                for (index, entry) in entries {
-                    self.ctx
-                        .log_handler()
-                        .log_output(AgentOplogEntryView { index, entry })?;
+                for entry in entries {
+                    self.ctx.log_handler().log_output(AgentOplogEntryView {
+                        index: entry.oplog_index.as_u64(),
+                        attribution: entry.attribution,
+                        entry: entry.entry,
+                    })?;
                 }
             }