kairos-chain 3.76.0 → 3.78.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 83162bcb26c033c10413fe1f25ffed382031dfebc115aa7041438d807177ef8c
-  data.tar.gz: eacc1ed007ad60d8429954c1d0e0bca228048a5a0438f177df892e72aae3e599
+  metadata.gz: 3bdf5a0932b91258ccacf0520ca20eb252b7080c7ef3682f87edb8fdb07144c6
+  data.tar.gz: '09f911f59d0aba91f246f5ec6721cc4ee11f8534bd96ed73fc31edd3df1a78ff'
 SHA512:
-  metadata.gz: e6e311e80bc090726582d7032aa87a0ac1a97ffea387b300306d609f19b0a38c4dbe2cd6a84dd36e924e66c3e9f579b56f91c1c25602cc2afdae21e8f8e2005c
-  data.tar.gz: 0ffddbff73ac05f8804b343e597495517b3872a0ceed500ef1370aab8f034a866b20585a5a03c46db179fbacfd18aff3862a70fc40c093f66389a69f2afdc4c2
+  metadata.gz: 884fe864157b0c5ea27cc9249de0378f4c8e53d0b724ef6c92e9adc85dd1a092e8c7291c1e0e778a20d3edf4058da92801968733f38017a73df60eb7b552ade3
+  data.tar.gz: c9061d247bee27b8525dae1d14f4acd1036e27d2c024b74228c43bc23211329285d418689aa6314c70f2e5f6060b9df4ad68e118870b680f6c411ab5d2de5cc7

data/CHANGELOG.md

@@ -4,6 +4,83 @@ All notable changes to the `kairos-chain` gem will be documented in this file.
 
 This project follows [Semantic Versioning](https://semver.org/).
 
+## [3.78.0] - 2026-08-26
+
+### Fixed
+
+- **`readable_gate` — a failed note write no longer leaves an earlier turn's
+  note in place.** The carry-over note (shipped in 3.77.0) records which
+  record the gate blocked, so the recheck measures only what came after it. A
+  leftover note from an interrupted turn — 28 of 240 blocks draw no recheck —
+  survived the next block's failed note write, checked out as valid, and the
+  recheck judged the message that block had just made. A record with no uuid
+  was input enough. Every write failure now spends the leftover: deleted, or —
+  when deletion is refused — truncated in place, since deletion needs
+  directory-write while truncation needs only file-write, and an emptied note
+  fails the parse on every later read whatever the directory permits by then.
+  Only a leftover refusing both deletion and truncation survives, and the
+  design declares that state rather than claiming it closed. Found by
+  conformance review rounds 2-4: six reading contexts per round answering a
+  fixed claim list (21 → 4 → 2 → 1 claims), each finding reproduced end-to-end
+  before its fix, and round 4 closing with zero claims disputed. 133 tests /
+  815 assertions; 54 mutations killed 54/54; first-read stdout byte-identical
+  to the 3.74.0 baseline across up to 2,520 inputs measured by four
+  independent contexts.
+
+## [3.77.0] - 2026-08-26
+
+### Added
+
+- **`operator_report` — the agent SkillSet's first tool for handing a
+  deliverable to a human.** Three runs produced documents no one could receive;
+  the loop concluded "there is no way to deliver this" and it was right. The
+  tool writes the report body to a file under `.kairos/log/agent_reports/` and
+  returns only the path, because the executor truncates tool output at 500
+  characters. It is registered `low` in the risk table — an unlisted tool would
+  be marked by norm (d) and the report itself would wait for human
+  confirmation. Two norms ship with it: (e) an irreversible step is marked and
+  deferred, not a reason to halt the plan; (f) a delivery tool exists — do not
+  conclude there is no way to hand the result over.
+
+- **`test_agent_human_mark_gate.rb`** — 39 tests, 87 assertions, covering the
+  deferred-mark path, halt-kind classification, and the cumulative cycle
+  ledger.
+
+### Changed
+
+- **Seven fixes surfaced by running the loop, not by reviewing it.** The goal
+  text never reached the DECIDE prompt — the loop was judging without its goal;
+  it is now included, truncated at 6,000 characters with the cut declared in
+  the text. Halt kinds were hardcoded to one kind, so tool errors were recorded
+  as "waiting for human"; the kind now reads from each step's own status, and
+  the seven-site refactor a prior design round estimated for this turned out
+  unnecessary. A plan halted at its first human-marked step; `human_mark_mode:
+  'defer'` sets marked steps and their dependents aside, runs the rest, and
+  returns the deferred list at the cycle's end (the default remains `halt`).
+  The completed-cycle count was per call; the ledger now accumulates across the
+  run. Norm (d) pulled read-only tools into confirmation waits; it now names
+  writing, recording, sending, and deleting tools only, and its counter is
+  renamed `unlisted_writing_tool_unmarked` with the old name's counts folded
+  in. Report titles doubled when the body already opened with a heading; they
+  no longer do.
+
+### Removed
+
+- **The 300-second wall clock and `max_cycles`.** The clock was shorter than
+  one measured cycle (823 seconds for a 13-step cycle); both caps are gone.
+  What still stops a run: the call budget (`max_total_llm_calls`, default 60 —
+  about 15 cycles at the measured 4 calls per cycle), two consecutive errors,
+  loop detection, self-declared completion at confidence ≥ 0.9, and the
+  `checkpoint_every` return, where continuing is decided by whether the
+  operator calls the next `agent_step`. The uncapped run that validated this
+  went three cycles: the first drafted a priority list, the second found and
+  corrected six errors in it, the third declined to write a third version,
+  declared the second canonical, and returned four open items — zero norm
+  violations, confidence never reaching the self-completion threshold. Mutation
+  testing covers the session's first half (11 mutants, 11 killed); the latter
+  eight fixes ship unmutated by operator decision — this release exists to find
+  their defects in use.
+
 ## [3.76.0] - 2026-08-22
 
 ### Changed

data/lib/kairos_mcp/version.rb

@@ -1,4 +1,4 @@
 module KairosMcp
-  VERSION = "3.76.0"
+  VERSION = "3.78.0"
   CHANGELOG_URL = "https://github.com/masaomi/KairosChain_2026/blob/main/CHANGELOG.md"
 end

data/templates/skillsets/agent/config/agent.yml

@@ -30,6 +30,10 @@ tool_blacklist:
   - "skills_rollback"
   - "skills_promote"
   - "instructions_update"
+  # The norms the agent is held to live in L1. A run with risk_budget: medium
+  # would otherwise reach knowledge_update (medium in TOOL_RISK) and let the
+  # constrained side rewrite what constrains it.
+  - "knowledge_update"
   - "token_manage"
   - "system_upgrade"
   - "chain_import"
@@ -82,8 +86,15 @@ orient_tools_extra: []
 
 # Autonomous mode limits
 autonomous:
-  max_total_llm_calls: 60        # across all cycles in one batch
-  max_duration_seconds: 300      # wall-clock timeout per batch (5 min)
+  # The cost bound, and the one that actually stops a runaway. At the ~4 calls
+  # per cycle measured on 2026-08-26 this is about 15 cycles.
+  max_total_llm_calls: 60
+  # Wall-clock bound, off. Blank or 0 means no bound: the loop runs until it is
+  # done rather than until the clock says so. It never interrupted a running
+  # cycle — it only refused to start the next — so at 300 against a measured
+  # 823-second cycle it just made max_cycles above 1 unreachable. Withdrawn
+  # 2026-08-26; put a number back only if a run is seen to go on too long.
+  max_duration_seconds:
   min_cycles_before_exit: 2      # confidence exit disabled for first N cycles
   confidence_exit_threshold: 0.9 # minimum confidence for early exit
 

data/templates/skillsets/agent/lib/agent/mandate_adapter.rb

@@ -6,13 +6,37 @@ module KairosMcp
       # Bridges agent structures to Autonomos::Mandate API shapes.
       # Input: string keys (from JSON.parse). Output: symbol keys (for Mandate API).
       module MandateAdapter
+        # Tools whose presence routes the whole plan to the agent_execute
+        # subcontractor instead of in-process autoexec.
+        #
+        # Defined here rather than in agent_step because the risk gate and the
+        # ACT router must agree on the route. If they disagree, a plan can be
+        # granted the human-mark exemption below and then run under the
+        # subcontractor, which formats steps as prose and never reads the mark
+        # — the marked step would be delegated rather than halted on.
+        FILE_TOOL_NAMES = %w[Edit Write Read Bash file_edit file_write file_read].freeze
+
+        def self.routes_to_subcontractor?(task_json)
+          steps = task_json && task_json['steps']
+          Array(steps).any? { |s| FILE_TOOL_NAMES.include?(s['tool_name']) }
+        end
+
         # Convert decision_payload to Mandate-compatible proposal
         # for Mandate.risk_exceeds_budget? and Mandate.loop_detected?
+        #
+        # enforce_human_marks declares that this caller halts before a marked
+        # step at execution time. It lives inside autoexec_task, beside the
+        # steps it qualifies, because risk_exceeds_budget? reads that hash and a
+        # declaration written elsewhere than it is read is the whole defect.
         def self.to_mandate_proposal(decision_payload)
+          task_json = decision_payload['task_json']
           {
             autoexec_task: {
-              steps: (decision_payload.dig('task_json', 'steps') || []).map { |s|
-                { risk: s['risk'] || 'low', tool_name: s['tool_name'] }
+              enforce_human_marks: !routes_to_subcontractor?(task_json),
+              steps: Array(task_json && task_json['steps']).map { |s|
+                { risk: s['risk'] || 'low',
+                  tool_name: s['tool_name'],
+                  requires_human_cognition: s['requires_human_cognition'] == true }
               }
             },
             selected_gap: {

data/templates/skillsets/agent/skillset.json

@@ -14,7 +14,8 @@
     "KairosMcp::SkillSets::Agent::Tools::AgentStep",
     "KairosMcp::SkillSets::Agent::Tools::AgentStatus",
     "KairosMcp::SkillSets::Agent::Tools::AgentStop",
-    "KairosMcp::SkillSets::Agent::Tools::AgentWait"
+    "KairosMcp::SkillSets::Agent::Tools::AgentWait",
+    "KairosMcp::SkillSets::Agent::Tools::OperatorReport"
   ],
   "config_files": ["config/agent.yml"],
   "knowledge_dirs": ["knowledge/agent_guide"],

data/templates/skillsets/agent/test/test_agent_complexity_review.rb

@@ -69,7 +69,7 @@ module Autonomos
   end
 end
 
-require File.expand_path('../../../../.kairos/skillsets/autonomos/lib/autonomos/mandate',
+require File.expand_path('../autonomos/lib/autonomos/mandate',
   File.dirname(__dir__))
 
 Session = KairosMcp::SkillSets::Agent::Session

data/templates/skillsets/agent/test/test_agent_halt_semantics.rb

@@ -67,10 +67,10 @@ module Autonomos
   end
 end
 
-require File.expand_path('../../../../.kairos/skillsets/autonomos/lib/autonomos/mandate',
+require File.expand_path('../autonomos/lib/autonomos/mandate',
                          File.dirname(__dir__))
 # The autonomous loop reaches Ooda for goal loading and COMPLEX_KEYWORDS.
-require File.expand_path('../../../../.kairos/skillsets/autonomos/lib/autonomos/ooda',
+require File.expand_path('../autonomos/lib/autonomos/ooda',
                          File.dirname(__dir__))
 
 Session = KairosMcp::SkillSets::Agent::Session