@hyperdrive.bot/paseo-server 0.3.9 → 0.3.11

package/dist/server/server/bootstrap.js

@@ -91,6 +91,10 @@ import { getCaptureStreamWs } from "./meetings/capture-stream-ws.js";
 import { createSpeechService } from "./speech/speech-runtime.js";
 import { AgentManager } from "./agent/agent-manager.js";
 import { scheduleSessionDigestRefresh } from "./agent/session-digest-generator.js";
+import { CardMoveLog } from "./agent/card-move-log.js";
+import { BlockerLog } from "./agent/blocker-log.js";
+import { JudgeRelayGate } from "./agent/judge-relay-gate.js";
+import { JarvisJudge } from "./agent/jarvis-judge.js";
 import { registerAgentRoutes } from "./agent/agent-routes.js";
 import { AgentStorage } from "./agent/agent-storage.js";
 import { attachAgentStoragePersistence } from "./persistence-hooks.js";
@@ -560,11 +564,33 @@ export async function createPaseoDaemon(config, rootLogger) {
         isDev: config.isDev === true,
         extraClients: config.agentClients,
     });
+    // Jarvis substrate (JARVIS-V1-SPEC §3.2). Append-only kanban move history.
+    // Prospective only: nothing before this ships is recoverable, which is why the
+    // spec sequences it ahead of every other piece.
+    const cardMoveLog = new CardMoveLog({ dir: config.paseoHome, logger });
+    // Blocker history. Same prospective-only property as the move log, and it
+    // answers a different question: not "how often was this deferred" but "who or
+    // what has kept blocking it". mergeDigest overwrites digest.blockers on every
+    // derivation, so without this the signal is destroyed on each idle.
+    const blockerLog = new BlockerLog({ dir: config.paseoHome, logger });
+    // Jarvis judge config (§5, §9.1). Env-driven in v1 to avoid protocol churn
+    // while the feature is still being shaped.
+    // Gate for the judge's one mutating capability. Enabled only when the judge
+    // itself is, so an unconfigured deployment cannot expose relay_to_agent.
+    const judgeRelayGate = new JudgeRelayGate({
+        enabled: Boolean(process.env.PASEO_JARVIS_AGENT_ID?.trim()),
+    });
+    const jarvisJudgeConfig = {
+        agentId: process.env.PASEO_JARVIS_AGENT_ID?.trim() || null,
+        shadow: process.env.PASEO_JARVIS_SHADOW === "1",
+    };
     const initialAgentManagerState = providerSnapshotManager.getAgentManagerProviderState();
     const agentManager = new AgentManager({
         clients: initialAgentManagerState.clients,
         providerDefinitions: initialAgentManagerState.providerDefinitions,
         registry: agentStorage,
+        cardMoveLog,
+        blockerLog,
         appendSystemPrompt: config.appendSystemPrompt,
         onWorkspaceStateMayHaveChanged: ({ cwd }) => {
             workspaceGitService.onWorkspaceStateMayHaveChanged(cwd);
@@ -577,14 +603,49 @@ export async function createPaseoDaemon(config, rootLogger) {
     // and regenerate summary/accomplishments via the borrowed-provider rail (the
     // same one auto-title uses; the daemon holds no API key of its own). Debounced +
     // coalesced inside the scheduler; internal agents never broadcast attention.
+    // Jarvis judge (JARVIS-V1-SPEC §5.1). Constructed before the attention
+    // listener because the listener has to ORDER the two: see below.
+    const jarvisJudge = new JarvisJudge({
+        agentManager,
+        agentStorage,
+        cardMoveLog,
+        blockerLog,
+        relayGate: judgeRelayGate,
+        config: jarvisJudgeConfig,
+        logger,
+    });
+    if (jarvisJudge.enabled) {
+        logger.info({ judgeAgentId: jarvisJudgeConfig.agentId, shadow: jarvisJudgeConfig.shadow }, "Jarvis judge enabled");
+    }
     agentManager.addAgentAttentionListener((params) => {
+        // Never let a judge failure take down attention handling for everyone else.
+        const wakeJudge = () => {
+            void jarvisJudge.handleAttention({ agentId: params.agentId, reason: params.reason });
+        };
+        // `error` and `permission` have no derivation step, so nothing to wait for.
         if (params.reason !== "finished") {
+            if (jarvisJudge.enabled) {
+                wakeJudge();
+            }
             return;
         }
         const agent = agentManager.getAgent(params.agentId);
         if (!agent || agent.internal) {
             return;
         }
+        // ORDERING IS LOAD-BEARING, and getting it wrong is invisible.
+        //
+        // The digest refresh and the judge both hang off this one `finished` event.
+        // Fired in parallel, the judge wins the race every time and reads a digest
+        // that has not been written yet, so its briefing carries no summary, no
+        // blockers and no deadline. It then correctly concludes there is nothing
+        // worth saying and answers "quiet" forever. No error is raised anywhere: the
+        // feature looks healthy and delivers nothing. Verified live in the docker lab
+        // before this chaining existed.
+        //
+        // So the judge is woken from onSettled, which fires on success, skip AND
+        // failure. A judge that only ran on the happy path would go quiet exactly
+        // when something broke.
         scheduleSessionDigestRefresh({
             agentManager,
             agentId: params.agentId,
@@ -597,6 +658,7 @@ export async function createPaseoDaemon(config, rootLogger) {
                 thinkingOptionId: agent.runtimeInfo?.thinkingOptionId ?? agent.config.thinkingOptionId ?? null,
             },
             logger,
+            onSettled: jarvisJudge.enabled ? wakeJudge : undefined,
         });
     });
     // Epic 1, Story 1.2 — first-class workflow entity. WorkflowManager orchestrates
@@ -849,6 +911,17 @@ export async function createPaseoDaemon(config, rootLogger) {
         callerAgentId: runtime.callerAgentId,
         enableVoiceTools: runtime.enableVoiceTools,
         voiceOnly: runtime.voiceOnly,
+        // JARVIS-V1-SPEC §6, HARD REQUIREMENT. The judge reads untrusted transcripts,
+        // so it must not hold a mutating tool. Keyed on identity rather than on a
+        // mode, because a mode is something the agent itself could change.
+        readOnly: runtime.readOnly ||
+            (jarvisJudgeConfig.agentId !== null && runtime.callerAgentId === jarvisJudgeConfig.agentId),
+        // Only the judge's own tool sessions get the relay tool, and even then its
+        // handler refuses unless a human turn is driving. Identity-keyed, like the
+        // read-only surface, so the agent cannot grant it to itself.
+        judgeRelayGate: jarvisJudgeConfig.agentId !== null && runtime.callerAgentId === jarvisJudgeConfig.agentId
+            ? judgeRelayGate
+            : undefined,
         resolveSpeakHandler: (agentId) => wsServer?.resolveVoiceSpeakHandler(agentId) ?? null,
         resolveCallerContext: (agentId) => wsServer?.resolveVoiceCallerContext(agentId) ?? null,
         logger,