@jungjaehoon/mama-os 0.22.0 → 0.23.0

package/dist/observability/code-audit.js

@@ -0,0 +1,403 @@
+"use strict";
+/**
+ * Deterministic code-based system audit.
+ *
+ * Lands the 2026-04-22 owner decision (mama_conductor_audit_code_based_read_only):
+ * the hourly audit is fact collection and recording, executed by code - no LLM
+ * invocation, no auto-fix, no filesystem access beyond explicit read-only checks.
+ * The previous LLM audit loop once exfiltrated a credential when its report
+ * path failed; this module removes that class of failure structurally.
+ *
+ * Every check here is read-only and local. MAJOR findings are alerted through
+ * a caller-provided callback subject to the 24h dedup contract the checklist
+ * established (alert only NEW / ESCALATED / older-than-24h re-alerts). MINOR
+ * and INFO findings are recorded in the state file, never alerted.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCodeAudit = runCodeAudit;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const yaml = __importStar(require("js-yaml"));
+const CHECKLIST_VERSION = 'code-2026-07-17';
+const REALERT_INTERVAL_MS = 24 * 60 * 60 * 1000;
+const MEMORY_WAL_LIMIT = 10 * 1024 * 1024;
+const METRICS_WAL_LIMIT = 5 * 1024 * 1024;
+const DAEMON_LOG_LIMIT = 50 * 1024 * 1024;
+const SEVERITY_RANK = { INFO: 0, MINOR: 1, MAJOR: 2 };
+function fileSize(path) {
+    try {
+        return (0, node_fs_1.statSync)(path).size;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * First line of a parse error only, length-capped. js-yaml's YAMLException
+ * message embeds a source snippet of the malformed file; config files hold
+ * tokens, so the snippet must never travel into alert payloads.
+ */
+function sanitizeParseError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.split('\n')[0].slice(0, 200);
+}
+function checkParseable(path, kind, findings, passes) {
+    const name = (0, node_path_1.basename)(path);
+    if (!(0, node_fs_1.existsSync)(path)) {
+        passes.push(`${name}: absent (nothing to validate)`);
+        return;
+    }
+    try {
+        const raw = (0, node_fs_1.readFileSync)(path, 'utf8');
+        if (kind === 'yaml') {
+            yaml.load(raw);
+        }
+        else {
+            JSON.parse(raw);
+        }
+        passes.push(`${name}: valid ${kind.toUpperCase()}`);
+    }
+    catch (error) {
+        findings.push({
+            id: `config-parse-${name}`,
+            severity: 'MAJOR',
+            summary: `${name} is not valid ${kind.toUpperCase()}`,
+            detail: sanitizeParseError(error),
+        });
+    }
+}
+function checkFileSizeLimit(id, path, limit, severity, findings, passes) {
+    const size = fileSize(path);
+    const name = (0, node_path_1.basename)(path);
+    if (size === null) {
+        passes.push(`${name}: absent`);
+        return;
+    }
+    const mb = (size / 1024 / 1024).toFixed(1);
+    const limitMb = (limit / 1024 / 1024).toFixed(0);
+    if (size < limit) {
+        passes.push(`${name}: ${mb}MB < ${limitMb}MB limit`);
+    }
+    else {
+        findings.push({
+            id,
+            severity,
+            summary: `${name} is ${mb}MB (limit ${limitMb}MB)`,
+        });
+    }
+}
+async function checkHealthEndpoint(url, findings, passes) {
+    let outcome;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 3_000);
+    try {
+        const res = await fetch(url, { signal: controller.signal });
+        const body = await res.text();
+        let structurallyOk = false;
+        try {
+            const parsed = JSON.parse(body);
+            structurallyOk = parsed.status === 'ok';
+        }
+        catch {
+            structurallyOk = false;
+        }
+        outcome = {
+            ok: res.status === 200 && structurallyOk,
+            detail: `HTTP ${res.status} ${body.slice(0, 120)}`,
+        };
+    }
+    catch (error) {
+        const aborted = error instanceof Error && error.name === 'AbortError';
+        outcome = {
+            ok: false,
+            detail: aborted ? 'timeout after 3s' : error instanceof Error ? error.message : String(error),
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (outcome.ok) {
+        passes.push(`health endpoint: ${outcome.detail}`);
+    }
+    else {
+        findings.push({
+            id: 'health-endpoint',
+            severity: 'MAJOR',
+            summary: 'Local /health endpoint is not answering ok',
+            detail: outcome.detail,
+        });
+    }
+}
+function expandHome(p) {
+    return p.startsWith('~') ? (0, node_path_1.join)((0, node_os_1.homedir)(), p.slice(1)) : p;
+}
+async function readState(stateFilePath) {
+    let raw;
+    try {
+        raw = await (0, promises_1.readFile)(stateFilePath, 'utf8');
+    }
+    catch (error) {
+        // Missing file is the normal first run. Anything else (EACCES, EIO) is a
+        // real system problem: fail the audit run loudly instead of silently
+        // resetting dedup history - the subsequent state write would fail anyway.
+        if (error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed.findings) ? parsed.findings : [];
+    }
+    catch (error) {
+        // Corrupt state is NOT silent: dedup history is lost, so every current
+        // MAJOR re-alerts as new. Over-alerting is the safe direction, but the
+        // owner must be able to see why.
+        console.warn(`[code-audit] audit state file is corrupt, resetting dedup history (${stateFilePath}): ${error instanceof Error ? error.message : String(error)}`);
+        return [];
+    }
+}
+async function runCodeAudit(options = {}) {
+    const startedAt = Date.now();
+    const now = options.now ? options.now() : new Date();
+    const nowIso = now.toISOString();
+    const mamaDir = options.mamaDir || (0, node_path_1.join)((0, node_os_1.homedir)(), '.mama');
+    const stateFilePath = options.stateFilePath || (0, node_path_1.join)(mamaDir, 'state', 'audit-findings.json');
+    const daemonLogPath = options.daemonLogPath || (0, node_path_1.join)(mamaDir, 'logs', 'daemon.log');
+    const healthUrl = options.healthUrl ?? 'http://127.0.0.1:3847/health';
+    const findings = [];
+    const passes = [];
+    // Config parse checks
+    checkParseable((0, node_path_1.join)(mamaDir, 'config.yaml'), 'yaml', findings, passes);
+    checkParseable((0, node_path_1.join)(mamaDir, 'config.json'), 'json', findings, passes);
+    checkParseable((0, node_path_1.join)(mamaDir, 'connectors.json'), 'json', findings, passes);
+    // Size limits
+    checkFileSizeLimit('memory-db-wal', (0, node_path_1.join)(mamaDir, 'mama-memory.db-wal'), MEMORY_WAL_LIMIT, 'MINOR', findings, passes);
+    checkFileSizeLimit('metrics-db-wal', (0, node_path_1.join)(mamaDir, 'mama-metrics.db-wal'), METRICS_WAL_LIMIT, 'MINOR', findings, passes);
+    checkFileSizeLimit('daemon-log-size', daemonLogPath, DAEMON_LOG_LIMIT, 'MINOR', findings, passes);
+    // Health endpoint (self-check through the real server socket)
+    if (healthUrl) {
+        await checkHealthEndpoint(healthUrl, findings, passes);
+    }
+    // Persona files referenced by multi-agent config
+    const agents = options.config?.multi_agent?.agents || {};
+    const multiAgentEnabled = options.config?.multi_agent?.enabled === true;
+    for (const [agentId, agent] of Object.entries(agents)) {
+        if (!agent?.persona_file) {
+            continue;
+        }
+        const personaPath = expandHome(agent.persona_file);
+        if ((0, node_fs_1.existsSync)(personaPath)) {
+            passes.push(`persona ${agentId}: file exists`);
+        }
+        else {
+            findings.push({
+                id: `persona-missing-${agentId}`,
+                severity: multiAgentEnabled ? 'MINOR' : 'INFO',
+                summary: `Persona file for agent "${agentId}" is missing`,
+                detail: personaPath,
+            });
+        }
+    }
+    // Security hygiene
+    if (options.securityAlertConfigured === false) {
+        findings.push({
+            id: 'security-alert-channel-missing',
+            severity: 'MINOR',
+            summary: 'No security alert channel configured (MAMA_SECURITY_ALERT_CHANNELS or gateway default)',
+        });
+    }
+    else if (options.securityAlertConfigured === true) {
+        passes.push('security alert channel configured');
+    }
+    const telegram = options.config?.telegram;
+    if (telegram?.enabled) {
+        if (Array.isArray(telegram.allowed_chats) && telegram.allowed_chats.length > 0) {
+            passes.push(`telegram inbound allowlist: ${telegram.allowed_chats.length} chat(s)`);
+        }
+        else {
+            findings.push({
+                id: 'telegram-open-inbound',
+                severity: 'MAJOR',
+                summary: 'Telegram gateway accepts messages from ANY chat (allowed_chats unset)',
+                detail: 'Set telegram.allowed_chats in config.yaml to the owner chat id(s).',
+            });
+        }
+    }
+    // owner_console must ONLY resolve via trust-conditional escalation (locked
+    // allowlist + private DM). A static sourceMapping grants the owner surface
+    // to unverified inbound - that is the open-console failure class.
+    const sourceMapping = options.config?.roles?.sourceMapping ?? {};
+    const staticOwnerSources = Object.entries(sourceMapping)
+        .filter(([, roleName]) => roleName === 'owner_console')
+        .map(([source]) => source);
+    if (staticOwnerSources.length > 0) {
+        findings.push({
+            id: 'owner-console-static-mapping',
+            severity: 'MAJOR',
+            summary: `owner_console statically mapped to source(s): ${staticOwnerSources.join(', ')}`,
+            detail: 'Remove the mapping; owner_console is granted per-message by RoleManager trust checks only.',
+        });
+    }
+    else {
+        passes.push('owner_console has no static source mapping');
+    }
+    // The trust escalation silently no-ops when the owner_console definition is
+    // missing from the RESOLVED roles config (an older persisted roles section
+    // that skipped the additive merge). Locked allowlist + missing definition =
+    // the flagship console is dead without a sound (review B1 class).
+    if (Array.isArray(telegram?.allowed_chats) &&
+        telegram.allowed_chats.length > 0 &&
+        options.config?.roles?.definitions &&
+        !('owner_console' in options.config.roles.definitions)) {
+        findings.push({
+            id: 'owner-console-definition-missing',
+            severity: 'MAJOR',
+            summary: 'telegram allowlist is locked but roles.definitions lacks owner_console',
+            detail: 'Trust escalation falls through to chat_bot silently. The config loader should merge default definitions; check for a stale roles section.',
+        });
+    }
+    // Stage-2 (plan B7): a CUSTOMIZED persisted owner_console definition freezes
+    // its allowedTools at save time - new default tools (workorder_request/
+    // status class) silently never reach it. Observe-only: warn the owner, no
+    // forced merge (observability over restriction).
+    const persistedOwnerConsole = options.config?.roles?.definitions?.owner_console;
+    if (persistedOwnerConsole?.allowedTools && !persistedOwnerConsole.allowedTools.includes('*')) {
+        // Wildcard allowlists cover everything - flagging them for "missing"
+        // default tools would be a false positive (PR bot round).
+        const { DEFAULT_ROLES } = await import('../cli/config/types.js');
+        const defaultTools = DEFAULT_ROLES.definitions?.owner_console?.allowedTools ?? [];
+        const missing = defaultTools.filter((tool) => !persistedOwnerConsole.allowedTools?.includes(tool));
+        if (missing.length > 0) {
+            findings.push({
+                id: 'owner-console-stale-allowlist',
+                severity: 'MAJOR',
+                summary: `persisted owner_console.allowedTools lacks current default tool(s): ${missing.join(', ')}`,
+                detail: 'A customized owner_console definition does not receive new default tools. ' +
+                    'Add them to the persisted definition (or delete it to re-adopt defaults).',
+            });
+        }
+        else {
+            passes.push('owner_console allowlist covers all current default tools');
+        }
+    }
+    // Telegram group/supergroup ids are negative. An allowlisted group does not
+    // escalate (RoleManager requires chatType private) but signals a config
+    // misunderstanding worth flagging.
+    const groupChats = (telegram?.allowed_chats ?? []).filter((id) => String(id).startsWith('-'));
+    if (groupChats.length > 0) {
+        findings.push({
+            id: 'telegram-allowlist-group-chat',
+            severity: 'MINOR',
+            summary: `telegram.allowed_chats contains group chat id(s): ${groupChats.join(', ')}`,
+            detail: 'Group members are third parties; groups never receive owner_console, but review whether the allowlist entry is intended.',
+        });
+    }
+    // Dedup + alert per the 24h contract
+    const previous = await readState(stateFilePath);
+    const previousById = new Map(previous.map((f) => [f.id, f]));
+    const alerted = [];
+    const alertDeliveryFailures = [];
+    const stored = [];
+    for (const finding of findings) {
+        const prior = previousById.get(finding.id);
+        const firstSeen = prior?.first_seen || nowIso;
+        let lastAlertedAt = prior?.last_alerted_at ?? null;
+        if (finding.severity === 'MAJOR') {
+            let reason = null;
+            if (!prior) {
+                reason = 'new';
+            }
+            else if (SEVERITY_RANK[finding.severity] > SEVERITY_RANK[prior.severity]) {
+                // Reachable across checklist_version upgrades: when a check's grading
+                // changes (e.g. a MINOR becomes MAJOR in a new release), the stored
+                // lower severity escalates and must alert immediately instead of
+                // waiting out a 24h window stamped under the old grading.
+                reason = 'escalated';
+            }
+            else if (!prior.last_alerted_at ||
+                now.getTime() - Date.parse(prior.last_alerted_at) >= REALERT_INTERVAL_MS) {
+                reason = 're-alert';
+            }
+            if (reason && options.alert) {
+                try {
+                    await options.alert(finding, reason);
+                    alerted.push(finding.id);
+                    lastAlertedAt = nowIso;
+                }
+                catch (error) {
+                    // Fail loud in the report; the finding stays un-alerted so the next
+                    // run retries instead of silently swallowing delivery failure.
+                    alertDeliveryFailures.push(`${finding.id}: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+        }
+        stored.push({
+            id: finding.id,
+            severity: finding.severity,
+            summary: finding.summary,
+            detail: finding.detail,
+            first_seen: firstSeen,
+            last_seen: nowIso,
+            last_alerted_at: lastAlertedAt,
+        });
+    }
+    const currentIds = new Set(findings.map((f) => f.id));
+    const resolved = previous.filter((f) => !currentIds.has(f.id)).map((f) => f.id);
+    const state = {
+        audit_date: nowIso.slice(0, 10),
+        audit_timestamp: nowIso,
+        checklist_version: CHECKLIST_VERSION,
+        findings: stored,
+        resolved_since_last_run: resolved,
+        pass_items: passes,
+    };
+    await (0, promises_1.mkdir)((0, node_path_1.dirname)(stateFilePath), { recursive: true });
+    await (0, promises_1.writeFile)(stateFilePath, `${JSON.stringify(state, null, 2)}\n`, 'utf8');
+    return {
+        mode: 'code',
+        timestamp: nowIso,
+        duration_ms: Date.now() - startedAt,
+        findings,
+        pass_items: passes,
+        alerted,
+        alert_delivery_failures: alertDeliveryFailures,
+        resolved_since_last_run: resolved,
+    };
+}
+//# sourceMappingURL=code-audit.js.map

package/dist/observability/code-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-audit.js","sourceRoot":"","sources":["../../src/observability/code-audit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8OH,oCAwPC;AApeD,qCAA6D;AAC7D,+CAA8D;AAC9D,qCAAkC;AAClC,yCAAoD;AACpD,8CAAgC;AA0EhC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,aAAa,GAAkC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAErF,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,IAAqB,EACrB,QAAwB,EACxB,MAAgB;IAEhB,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,gBAAgB,IAAI,EAAE;YAC1B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,IAAI,iBAAiB,IAAI,CAAC,WAAW,EAAE,EAAE;YACrD,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,EAAU,EACV,IAAY,EACZ,KAAa,EACb,QAAuB,EACvB,QAAwB,EACxB,MAAgB;IAEhB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,QAAQ,OAAO,UAAU,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE;YACF,QAAQ;YACR,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,aAAa,OAAO,KAAK;SACnD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,GAAW,EACX,QAAwB,EACxB,MAAgB;IAEhB,IAAI,OAAwC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;YACxD,cAAc,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,GAAG;YACR,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc;YACxC,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACnD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QACtE,OAAO,GAAG;YACR,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9F,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,iBAAiB;YACrB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,4CAA4C;YACrD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,aAAqB;IAC5C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,qEAAqE;QACrE,0EAA0E;QAC1E,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmC,CAAC;QACjE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,uEAAuE;QACvE,iCAAiC;QACjC,OAAO,CAAC,IAAI,CACV,sEAAsE,aAAa,MACjF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,UAA4B,EAAE;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAA,gBAAI,EAAC,OAAO,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAA,gBAAI,EAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,8BAA8B,CAAC;IAEtE,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,sBAAsB;IACtB,cAAc,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvE,cAAc,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvE,cAAc,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE3E,cAAc;IACd,kBAAkB,CAChB,eAAe,EACf,IAAA,gBAAI,EAAC,OAAO,EAAE,oBAAoB,CAAC,EACnC,gBAAgB,EAChB,OAAO,EACP,QAAQ,EACR,MAAM,CACP,CAAC;IACF,kBAAkB,CAChB,gBAAgB,EAChB,IAAA,gBAAI,EAAC,OAAO,EAAE,qBAAqB,CAAC,EACpC,iBAAiB,EACjB,OAAO,EACP,QAAQ,EACR,MAAM,CACP,CAAC;IACF,kBAAkB,CAAC,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElG,8DAA8D;IAC9D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,iDAAiD;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC;IACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;IACxE,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,eAAe,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,mBAAmB,OAAO,EAAE;gBAChC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAC9C,OAAO,EAAE,2BAA2B,OAAO,cAAc;gBACzD,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,uBAAuB,KAAK,KAAK,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,gCAAgC;YACpC,QAAQ,EAAE,OAAO;YACjB,OAAO,EACL,wFAAwF;SAC3F,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1C,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,aAAa,CAAC,MAAM,UAAU,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,uBAAuB;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,uEAAuE;gBAChF,MAAM,EAAE,oEAAoE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC;IACjE,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;SACrD,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,eAAe,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,8BAA8B;YAClC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,iDAAiD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzF,MAAM,EACJ,4FAA4F;SAC/F,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,kEAAkE;IAClE,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACjC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW;QAClC,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EACtD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,kCAAkC;YACtC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,wEAAwE;YACjF,MAAM,EACJ,2IAA2I;SAC9I,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,wEAAwE;IACxE,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,aAErD,CAAC;IACd,IAAI,qBAAqB,EAAE,YAAY,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7F,qEAAqE;QACrE,0DAA0D;QAC1D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,IAAI,EAAE,CAAC;QAClF,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAC9D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,+BAA+B;gBACnC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,uEAAuE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpG,MAAM,EACJ,4EAA4E;oBAC5E,2EAA2E;aAC9E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,wEAAwE;IACxE,mCAAmC;IACnC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,+BAA+B;YACnC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,qDAAqD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACrF,MAAM,EACJ,0HAA0H;SAC7H,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,qBAAqB,GAAa,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,KAAK,EAAE,UAAU,IAAI,MAAM,CAAC;QAC9C,IAAI,aAAa,GAAG,KAAK,EAAE,eAAe,IAAI,IAAI,CAAC;QAEnD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,GAA4B,IAAI,CAAC;YAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3E,sEAAsE;gBACtE,oEAAoE;gBACpE,iEAAiE;gBACjE,0DAA0D;gBAC1D,MAAM,GAAG,WAAW,CAAC;YACvB,CAAC;iBAAM,IACL,CAAC,KAAK,CAAC,eAAe;gBACtB,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,mBAAmB,EACxE,CAAC;gBACD,MAAM,GAAG,UAAU,CAAC;YACtB,CAAC;YAED,IAAI,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACzB,aAAa,GAAG,MAAM,CAAC;gBACzB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,oEAAoE;oBACpE,+DAA+D;oBAC/D,qBAAqB,CAAC,IAAI,CACxB,GAAG,OAAO,CAAC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEhF,MAAM,KAAK,GAAmB;QAC5B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/B,eAAe,EAAE,MAAM;QACvB,iBAAiB,EAAE,iBAAiB;QACpC,QAAQ,EAAE,MAAM;QAChB,uBAAuB,EAAE,QAAQ;QACjC,UAAU,EAAE,MAAM;KACnB,CAAC;IAEF,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,IAAA,oBAAS,EAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9E,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,QAAQ;QACR,UAAU,EAAE,MAAM;QAClB,OAAO;QACP,uBAAuB,EAAE,qBAAqB;QAC9C,uBAAuB,EAAE,QAAQ;KAClC,CAAC;AACJ,CAAC"}

package/dist/operator/briefs.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Brief files - the procedural knowledge of the Stage-2 workers.
+ *
+ * Location: ~/.mama/briefs/brief-<kind>.md - a DEDICATED directory, not
+ * ~/.mama/skills/ (plan A5/F5: skills-root flat files leak into the chat
+ * system prompt, the skills UI, and PromptEnhancer keyword injection; the
+ * consumer reads by path, so loader invisibility is the desired property).
+ *
+ * Missing brief -> the caller fails the workorder loudly (never a silent
+ * skip). Seeding of packaged defaults is ensureBriefs() (S2-T5).
+ */
+import { type WorkOrderKind } from './task-ledger.js';
+export declare function briefsDir(homeDir?: string): string;
+export declare function briefPath(kind: WorkOrderKind, homeDir?: string): string;
+/** null = missing (caller fails the workorder); read errors propagate loudly. */
+export declare function loadBrief(kind: WorkOrderKind, homeDir?: string): string | null;
+export declare function buildDefaultBrief(kind: WorkOrderKind): string;
+/**
+ * Boot seeding (plan B2/C6/E9): write packaged defaults for MISSING briefs
+ * only - user/agent edits always win (existsSync guard). DELIBERATE deviation
+ * from the persona managed-marker pattern: briefs have NO auto-upgrade; after
+ * seeding they are agent/user-owned (Stage-3 self-improvement substrate), so
+ * packaged default changes do not propagate to existing installs.
+ */
+export declare function ensureBriefs(homeDir?: string): WorkOrderKind[];
+//# sourceMappingURL=briefs.d.ts.map

package/dist/operator/briefs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"briefs.d.ts","sourceRoot":"","sources":["../../src/operator/briefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMvE,wBAAgB,SAAS,CAAC,OAAO,GAAE,MAAkB,GAAG,MAAM,CAE7D;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,GAAE,MAAkB,GAAG,MAAM,CAElF;AAED,iFAAiF;AACjF,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,GAAE,MAAkB,GAAG,MAAM,GAAG,IAAI,CAIzF;AA6DD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAS7D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,MAAkB,GAAG,aAAa,EAAE,CAgBzE"}

package/dist/operator/briefs.js

@@ -0,0 +1,128 @@
+"use strict";
+/**
+ * Brief files - the procedural knowledge of the Stage-2 workers.
+ *
+ * Location: ~/.mama/briefs/brief-<kind>.md - a DEDICATED directory, not
+ * ~/.mama/skills/ (plan A5/F5: skills-root flat files leak into the chat
+ * system prompt, the skills UI, and PromptEnhancer keyword injection; the
+ * consumer reads by path, so loader invisibility is the desired property).
+ *
+ * Missing brief -> the caller fails the workorder loudly (never a silent
+ * skip). Seeding of packaged defaults is ensureBriefs() (S2-T5).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.briefsDir = briefsDir;
+exports.briefPath = briefPath;
+exports.loadBrief = loadBrief;
+exports.buildDefaultBrief = buildDefaultBrief;
+exports.ensureBriefs = ensureBriefs;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const task_ledger_js_1 = require("./task-ledger.js");
+// Persona constants are generic procedure text (no personal content); they
+// relocate INTO this file when the persona modules are deleted at cutover.
+const dashboard_agent_persona_js_1 = require("../multi-agent/dashboard-agent-persona.js");
+const wiki_agent_persona_js_1 = require("../multi-agent/wiki-agent-persona.js");
+function briefsDir(homeDir = (0, node_os_1.homedir)()) {
+    return (0, node_path_1.join)(homeDir, '.mama', 'briefs');
+}
+function briefPath(kind, homeDir = (0, node_os_1.homedir)()) {
+    return (0, node_path_1.join)(briefsDir(homeDir), `brief-${kind}.md`);
+}
+/** null = missing (caller fails the workorder); read errors propagate loudly. */
+function loadBrief(kind, homeDir = (0, node_os_1.homedir)()) {
+    const path = briefPath(kind, homeDir);
+    if (!(0, node_fs_1.existsSync)(path))
+        return null;
+    return (0, node_fs_1.readFileSync)(path, 'utf-8');
+}
+const stripManagedMarker = (persona) => persona.replace(/^<!-- MAMA managed [^\n]*-->\n*/, '');
+const BOARD_WORKORDER_CONTRACT = `
+## Work order contract (Stage 2)
+Your work order input is a JSON object:
+- mode: "full" | "reconcile"
+- force: true when the owner explicitly requested a fresh board - do NOT reply
+  NO_UPDATE; rebuild and publish even if nothing changed.
+- channelKey + deltaLines: present in reconcile mode only.
+- attempts: retry counter (informational).
+
+mode "full" = the scheduled board rewrite. Before writing, check whether an
+update is needed: agent_notices({limit: 100}) for the last board publish
+boundary, then a recency check (mama_search({limit: 30}) with NO query,
+compare created_at). If nothing substantive is newer and force is not set,
+respond NO_UPDATE and stop. Otherwise follow "How to Write" and publish ALL
+FOUR slots in ONE report_publish call.
+
+mode "reconcile" = a single-channel delta reconcile for input.channelKey using
+input.deltaLines. Apply the RECONCILE RUN rules from this brief (the mode
+field replaces the "RECONCILE RUN" message sentinel): judge affected slots,
+publish ONLY those, use task_create/task_update with source_channel and
+source_event_id from the delta, or contract_no_update({reason, scope:
+"reconcile:<channelKey>"}) when nothing is affected. Finish with exactly one
+line: RECONCILED <comma-separated slots or none>.
+`;
+const WIKI_WORKORDER_CONTRACT = `
+## Work order contract (Stage 2)
+Your work order input is a JSON object: { batchId, events, attempts }.
+The events array names what triggered this compile (extraction:completed,
+memory:promoted, boot, manual) - provenance only, it carries no content.
+Follow the MANDATORY Workflow exactly; the novelty check decides NO_UPDATE.
+`;
+const PROMOTION_BRIEF = `You are curating durable business memory from recent data (PROMOTION RUN).
+
+## Work order contract (Stage 2)
+Your work order input is a JSON object: { scheduledAt, attempts }. Use
+scheduledAt as the current time reference.
+
+## Procedure
+1. agent_notices({limit: 100}): find your latest promotion notice (action
+   "promoted" or "no_update") and treat it as the boundary; default to the
+   last 24h when absent.
+2. kagemusha_entities({activeOnly: true}) to find the rooms active since the
+   boundary, then kagemusha_messages({channelId, since: <boundary ISO>}) on
+   the busiest 3-4 rooms.
+3. For each candidate judgment, mama_search first to find the existing topic;
+   reuse it so the evolution chain stays intact.
+4. Promote at most 5 durable judgments per run via mama_save: pricing/scope
+   agreements, standing client preferences, process rules, recurring risk
+   patterns. NEVER task lifecycle states, greetings, or logistics. Include
+   scopes (the source channel, and the project when identifiable) and
+   event_date.
+5. Finish with exactly PROMOTED <n> or NO_UPDATE.
+`;
+function buildDefaultBrief(kind) {
+    switch (kind) {
+        case 'board':
+            return `${stripManagedMarker(dashboard_agent_persona_js_1.DASHBOARD_AGENT_PERSONA)}\n${BOARD_WORKORDER_CONTRACT}`;
+        case 'wiki':
+            return `${stripManagedMarker(wiki_agent_persona_js_1.WIKI_AGENT_PERSONA)}\n${WIKI_WORKORDER_CONTRACT}`;
+        case 'memory-curation':
+            return PROMOTION_BRIEF;
+    }
+}
+/**
+ * Boot seeding (plan B2/C6/E9): write packaged defaults for MISSING briefs
+ * only - user/agent edits always win (existsSync guard). DELIBERATE deviation
+ * from the persona managed-marker pattern: briefs have NO auto-upgrade; after
+ * seeding they are agent/user-owned (Stage-3 self-improvement substrate), so
+ * packaged default changes do not propagate to existing installs.
+ */
+function ensureBriefs(homeDir = (0, node_os_1.homedir)()) {
+    (0, node_fs_1.mkdirSync)(briefsDir(homeDir), { recursive: true });
+    const seeded = [];
+    for (const kind of task_ledger_js_1.WORKORDER_KINDS) {
+        const path = briefPath(kind, homeDir);
+        if (!(0, node_fs_1.existsSync)(path)) {
+            // tmp+rename (PR bot round): a partial direct write would read as a
+            // user-owned brief on the next boot and never be repaired.
+            const tmpPath = `${path}.tmp`;
+            (0, node_fs_1.writeFileSync)(tmpPath, buildDefaultBrief(kind), 'utf-8');
+            (0, node_fs_1.renameSync)(tmpPath, path);
+            seeded.push(kind);
+            console.log(`[stage2] seeded default brief: ${path}`);
+        }
+    }
+    return seeded;
+}
+//# sourceMappingURL=briefs.js.map

package/dist/operator/briefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"briefs.js","sourceRoot":"","sources":["../../src/operator/briefs.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAWH,8BAEC;AAED,8BAEC;AAGD,8BAIC;AA6DD,8CASC;AASD,oCAgBC;AArHD,qCAAyF;AACzF,qCAAkC;AAClC,yCAAiC;AACjC,qDAAuE;AACvE,2EAA2E;AAC3E,2EAA2E;AAC3E,0FAAoF;AACpF,gFAA0E;AAE1E,SAAgB,SAAS,CAAC,UAAkB,IAAA,iBAAO,GAAE;IACnD,OAAO,IAAA,gBAAI,EAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,SAAS,CAAC,IAAmB,EAAE,UAAkB,IAAA,iBAAO,GAAE;IACxE,OAAO,IAAA,gBAAI,EAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,iFAAiF;AACjF,SAAgB,SAAS,CAAC,IAAmB,EAAE,UAAkB,IAAA,iBAAO,GAAE;IACxE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAU,EAAE,CACrD,OAAO,CAAC,OAAO,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC;AAEzD,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBhC,CAAC;AAEF,MAAM,uBAAuB,GAAG;;;;;;CAM/B,CAAC;AAEF,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBvB,CAAC;AAEF,SAAgB,iBAAiB,CAAC,IAAmB;IACnD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,GAAG,kBAAkB,CAAC,oDAAuB,CAAC,KAAK,wBAAwB,EAAE,CAAC;QACvF,KAAK,MAAM;YACT,OAAO,GAAG,kBAAkB,CAAC,0CAAkB,CAAC,KAAK,uBAAuB,EAAE,CAAC;QACjF,KAAK,iBAAiB;YACpB,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,UAAkB,IAAA,iBAAO,GAAE;IACtD,IAAA,mBAAS,EAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,gCAAe,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,oEAAoE;YACpE,2DAA2D;YAC3D,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;YAC9B,IAAA,uBAAa,EAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACzD,IAAA,oBAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/operator/operator-trigger-loop.d.ts

@@ -37,6 +37,13 @@ export interface TriggerLoopConfig {
      * ms later (Kagemusha fast-flush port). Default 15000. 0 == tick immediately on nudge.
      */
     nudgeDebounceMs?: number;
+    /**
+     * Scheduled full-report suppression window (ms, default 30min): if the last
+     * SUCCESSFUL full report (usually an on-demand one) is younger than this,
+     * the scheduled fire skips and consumes its hour instead of sending a
+     * near-empty duplicate.
+     */
+    fullReportMinIntervalMs?: number;
 }
 export interface TriggerLoopDeps {
     delta: DeltaSource;
@@ -74,6 +81,8 @@ export interface TriggerLoopDeps {
     onChannelDelta?: (channelKey: string, lines: string[]) => void;
     /** Kagemusha dual output: FULL report also publishes the operator board slots. */
     fullReportBoardLines?: string[];
+    /** Context carry (plan v6 S1-T4): persist the delivered FULL report text. */
+    persistLastFullReport?: (deliveredAtIso: string, text: string) => void;
     config: TriggerLoopConfig;
     log: (line: string) => void;
 }
@@ -108,6 +117,21 @@ export declare class OperatorTriggerLoop {
      * uncommitted deltas simply wait for the next tick. Pure timing assist: it only changes WHEN an
      * existing tick runs, never WHAT it does.
      */
+    /**
+     * On-demand full report (plan v6 S1-T3): the owner's "give me the full
+     * report" intent routed to the SAME machinery as the scheduled leg - same
+     * reporter, same anchor semantics, same serial guard. Host-code entry
+     * (gateway forwarder hook); the run itself is fire-and-forget so the chat
+     * turn that triggered it is never blocked (and never nests lane runs).
+     *
+     * Consume semantics: success marks the current hourKey fired, so a
+     * scheduled fire in the same hour does not duplicate; markSuccess advances
+     * the delta anchor exactly like a scheduled run.
+     */
+    startFullReport(): {
+        accepted: boolean;
+        reason?: 'busy' | 'unavailable';
+    };
     nudge(): void;
     /**
      * Start ticking on the configured interval. Returns a stop function.

package/dist/operator/operator-trigger-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operator-trigger-loop.d.ts","sourceRoot":"","sources":["../../src/operator/operator-trigger-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACX,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAAC;IAChD,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,sGAAsG;IACtG,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,4DAA4D;IAC5D,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACrF,uFAAuF;IACvF,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClC,0FAA0F;IAC1F,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,MAAM,EAAE,CAAC,CAAC;IACzF;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAC/D,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,YAAY,CAAoB;gBAE5B,IAAI,EAAE,eAAe;IAmC3B,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAuJjC;;;;;;;;;;;OAWG;IACH,KAAK,IAAI,IAAI;IA6Bb;;;;OAIG;IACH,KAAK,IAAI,MAAM,IAAI;CA6BpB"}
+{"version":3,"file":"operator-trigger-loop.d.ts","sourceRoot":"","sources":["../../src/operator/operator-trigger-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACX,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAAC;IAChD,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,sGAAsG;IACtG,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,4DAA4D;IAC5D,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACrF,uFAAuF;IACvF,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClC,0FAA0F;IAC1F,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,MAAM,EAAE,CAAC,CAAC;IACzF;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAC/D,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACvE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,IAAI,CAAkB;IAC9B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,YAAY,CAAoB;gBAE5B,IAAI,EAAE,eAAe;IAoC3B,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAuKjC;;;;;;;;;;;OAWG;IACH;;;;;;;;;;OAUG;IACH,eAAe,IAAI;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAAA;KAAE;IAuCzE,KAAK,IAAI,IAAI;IA6Bb;;;;OAIG;IACH,KAAK,IAAI,MAAM,IAAI;CA6BpB"}