@frockbot/cloudflare 0.7.295 → 0.7.297

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/cloudflare",
-  "version": "0.7.295",
+  "version": "0.7.297",
   "private": false,
   "license": "MIT",
   "type": "module",
@@ -23,12 +23,12 @@
     "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.access.json && tsc --noEmit -p test/tsconfig.json && tsc --noEmit -p e2e/tsconfig.json"
   },
   "dependencies": {
-    "@frockbot/app": "0.7.295",
-    "@frockbot/applets": "0.7.295",
-    "@frockbot/computer": "0.7.295",
-    "@frockbot/core": "0.7.295",
-    "@frockbot/frock-compose": "0.7.295",
-    "@frockbot/providers": "0.7.295",
+    "@frockbot/app": "0.7.297",
+    "@frockbot/applets": "0.7.297",
+    "@frockbot/computer": "0.7.297",
+    "@frockbot/core": "0.7.297",
+    "@frockbot/frock-compose": "0.7.297",
+    "@frockbot/providers": "0.7.297",
     "@rive-app/flutter-native-wasm": "44.0.0",
     "agents": "0.24.0",
     "ai": "^7.0.107",

package/src/bot-state.ts

@@ -231,6 +231,7 @@ import {
   type ClientRunLookupQueryV1,
   type ClientRunStopCommandV1,
 } from "@frockbot/app/shell/run-protocol";
+import { decodeWorkLogQueryV1 } from "@frockbot/app/shell/work-log";
 import {
   decodeBotUnreadCommandV1,
   type BotUnreadCommandV1,
@@ -364,6 +365,8 @@ import { createMemoryEmbedder } from "@frockbot/app/memory/embeddings";
 import { MemoryRecordsV1 } from "@frockbot/app/memory/owner";
 import { createVectorMemorySearchV1 } from "@frockbot/app/memory/semantic";
 import { createHostedMemoryExtractorV1 } from "@frockbot/app/memory/extraction-host";
+import { hostedJevClientV1 } from "@frockbot/app/supervision";
+import { judgeMemoryWriteV1 } from "@frockbot/app/supervision/memory-write";
 import {
   createBotMemoryEngineV1,
   createUserMemoryRecordsRemoteV1,
@@ -1171,12 +1174,18 @@ export class BotState
         : {}),
       ...(this.backendEnv.BILLING ? { billing: this.backendEnv.BILLING } : {}),
     });
+    const jev = hostedJevClientV1(
+      this.backendEnv as unknown as Record<string, string | undefined>,
+    );
     await drainDurableMemoryV1(this.memoryEngine(), {
       ...(this.env.MEMORY_INDEX
         ? { vectors: this.env.MEMORY_INDEX as MemoryVectorIndex }
         : {}),
       ...(this.env.AI ? { ai: this.env.AI as MemoryAiBinding } : {}),
       ...(extract ? { extract } : {}),
+      ...(jev
+        ? { judgeWrite: (evidence) => judgeMemoryWriteV1(jev, evidence) }
+        : {}),
     });
   }
 
@@ -3806,6 +3815,22 @@ export class BotState
     return shell.listRuns(request.query as ClientRunListQueryV1);
   }
 
+  /** The Work log: a page of this Bot's Turns, every step of each. */
+  async workLog(input: unknown) {
+    const request = decodeRpcEnvelopeV1(input, {
+      userId: rpcIdentifier,
+      botId: rpcBotId,
+      query: rpcDecoded(decodeWorkLogQueryV1),
+    });
+    const identity = {
+      userId: request.userId as string,
+      botId: request.botId as string,
+    };
+    const { shell } = await this.materialized(identity);
+    await shell.validateIdentity(identity);
+    return shell.workLog(request.query);
+  }
+
   /**
    * The operator snapshot behind `/api/debug`. Bot-scoped like every other
    * Bot RPC — the debug token authorizes the *caller*, it does not widen what

package/src/contracts.ts

@@ -20,6 +20,7 @@ import type {
   SettingsFrame,
   ConnectionsFrame,
   SettingsChangeCommand,
+  WorkLogPage,
 } from "@frockbot/core/protocol-schemas";
 import {
   type AuthPackageV1,
@@ -28,6 +29,7 @@ import {
   type SessionEvent,
 } from "@frockbot/core/contracts";
 import type { MachineResultDeliveryV1 } from "@frockbot/app/machine/delivery";
+import type { WorkLogQueryV1 } from "@frockbot/app/shell/work-log";
 import type { DebugGatewaySurface } from "./debug.js";
 import type { BotTurnCommandRequestV1 } from "./durable-rpc.js";
 import type {
@@ -275,6 +277,12 @@ export interface UserBotStateBinding {
     botId: string;
     query: ClientRunListQueryV1;
   }): Promise<ClientRunListV1>;
+  /** Everything the Bot did, a page of Turns at a time. */
+  workLog(input: {
+    schemaVersion: 1;
+    botId: string;
+    query: WorkLogQueryV1;
+  }): Promise<WorkLogPage>;
   lookupRun(input: {
     schemaVersion: 1;
     botId: string;

package/src/index.ts

@@ -59,6 +59,11 @@ import {
   type ClientRunStopCommandV1,
   type ClientRunStopReceiptV1,
 } from "@frockbot/app/shell/run-protocol";
+import {
+  decodeWorkLogQueryV1,
+  type WorkLogQueryV1,
+} from "@frockbot/app/shell/work-log";
+import type { WorkLogPage } from "@frockbot/core/protocol-schemas";
 import {
   decodeBotNotificationDirectoryViewV1,
   decodeBotUnreadDirectoryViewV1,
@@ -504,6 +509,7 @@ interface BotStateRpc extends BotConfigurationBinding {
     command: BotTurnCommandRequestV1<OwnedBotTurnCommand>,
   ): Promise<{ schemaVersion: 1; runId: string }>;
   listRuns(query: ClientRunListQueryV1): Promise<ClientRunListV1>;
+  workLog(query: WorkLogQueryV1): Promise<WorkLogPage>;
   debugSnapshot(query: BotDebugQueryV1): Promise<unknown>;
   lookupRun(query: ClientRunLookupQueryV1): Promise<ClientRunLookupV1>;
   runQuestions(query: ClientRunLookupQueryV1): Promise<ClientRunQuestionsV1>;
@@ -691,6 +697,7 @@ function botStateStub(env: Env, userId: string, botId: string): BotStateRpc {
     admitRun: (command) => rpc.admitRun(botTurnRpcV1(command)),
     listRuns: (query) =>
       rpc.listRuns({ schemaVersion: 1, userId, botId, query }),
+    workLog: (query) => rpc.workLog({ schemaVersion: 1, userId, botId, query }),
     debugSnapshot: (query) =>
       rpc.debugSnapshot({ schemaVersion: 1, userId, botId, query }),
     lookupRun: (query) =>
@@ -1296,6 +1303,18 @@ export class UserBotState extends WorkerEntrypoint<Env, UserScopedProps> {
     ).listRuns(request.query as ClientRunListQueryV1);
   }
 
+  async workLog(input: unknown): Promise<WorkLogPage> {
+    const request = decodeRpcEnvelopeV1(input, {
+      botId: rpcBotId,
+      query: rpcDecoded(decodeWorkLogQueryV1),
+    });
+    return botStateStub(
+      this.env,
+      this.ctx.props.userId,
+      request.botId as string,
+    ).workLog(request.query as WorkLogQueryV1);
+  }
+
   async lookupRun(input: unknown): Promise<ClientRunLookupV1> {
     const request = decodeUserBotRunLookupRpcV1(input);
     return botStateStub(

package/src/memory-records.ts

@@ -167,6 +167,8 @@ export interface DurableMemoryIndexBindingsV1 {
   ai?: MemoryAiBinding;
   /** What a Turn's words hold worth remembering; absent, extraction waits. */
   extract?: MemoryProcessingAdaptersV1["extract"];
+  /** The write judgment each extracted fact goes through. */
+  judgeWrite?: MemoryProcessingAdaptersV1["judgeWrite"];
 }
 
 export async function drainDurableMemoryV1(
@@ -177,5 +179,6 @@ export async function drainDurableMemoryV1(
   if (bindings.vectors) adapters.vectors = bindings.vectors;
   if (bindings.ai) adapters.embed = createMemoryEmbedder(bindings.ai);
   if (bindings.extract) adapters.extract = bindings.extract;
+  if (bindings.judgeWrite) adapters.judgeWrite = bindings.judgeWrite;
   return drainMemoryProcessingV1(engine, adapters);
 }

package/src/user-application.ts

@@ -29,6 +29,10 @@ import {
   type ClientTurnRefusalV1,
 } from "@frockbot/app/shell/run-protocol";
 import { decodeApprovalDecisionCommandV1 } from "@frockbot/app/shell/approvals";
+import {
+  decodeWorkLogQueryV1,
+  type WorkLogQueryV1,
+} from "@frockbot/app/shell/work-log";
 import {
   decodeSecretSubmitCommandV1,
   isSecretRequestIdV1,
@@ -726,6 +730,7 @@ function createUserApplicationRoute() {
     }
 
     const skillsMatch = url.pathname.match(/^\/api\/bots\/([^/]+)\/skills$/);
+    const workLogMatch = url.pathname.match(/^\/api\/bots\/([^/]+)\/work-log$/);
     const workspaceFileMatch = url.pathname.match(
       /^\/api\/bots\/([^/]+)\/workspace\/file$/,
     );
@@ -744,6 +749,7 @@ function createUserApplicationRoute() {
     );
     if (
       !skillsMatch &&
+      !workLogMatch &&
       !workspaceFileMatch &&
       !turnMatch &&
       !lookupMatch &&
@@ -757,6 +763,7 @@ function createUserApplicationRoute() {
     try {
       const matched =
         skillsMatch ??
+        workLogMatch ??
         workspaceFileMatch ??
         turnMatch ??
         lookupMatch ??
@@ -776,7 +783,7 @@ function createUserApplicationRoute() {
       env,
       botId,
       request.method === "GET" &&
-        Boolean(turnMatch || lookupMatch || questionsMatch),
+        Boolean(turnMatch || lookupMatch || questionsMatch || workLogMatch),
     );
     if (missingBot) return missingBot;
     // An installed client older than protocol 3 refuses a Run it does not
@@ -800,6 +807,37 @@ function createUserApplicationRoute() {
       }
     }
 
+    if (workLogMatch) {
+      if (request.method !== "GET") return jsonError(405, "method not allowed");
+      let query: WorkLogQueryV1;
+      try {
+        const keys = [...url.searchParams.keys()];
+        if (
+          keys.some((key) => key !== "before") ||
+          url.searchParams.getAll("before").length > 1
+        ) {
+          throw new Error("work log query is invalid");
+        }
+        const before = url.searchParams.get("before");
+        query = decodeWorkLogQueryV1({
+          schemaVersion: 1,
+          ...(before === null ? {} : { before }),
+        });
+      } catch (error) {
+        return jsonError(
+          400,
+          error instanceof Error ? error.message : "invalid work log page",
+        );
+      }
+      try {
+        return Response.json(
+          await env.BOT_STATE.workLog({ schemaVersion: 1, botId, query }),
+        );
+      } catch (error) {
+        return botFailure(error, "work log failed");
+      }
+    }
+
     if (workspaceFileMatch) {
       // Read-only, and the durable root and path arrive as one encoded
       // `WorkspacePathV1` so the route cannot assemble a root the decoder