@jungjaehoon/mama-os 0.28.5 → 0.29.0

package/dist/operator/workorder-hooks.js

@@ -14,14 +14,75 @@
  * - buildWikiAfterHook: outcome reading only.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.LANE_WRITE_TOOLS = exports.LANE_OBLIGATED_TOOLS = void 0;
 exports.buildWorkerTraceQueries = buildWorkerTraceQueries;
+exports.readLaneClaim = readLaneClaim;
+exports.reconcileClaimAgainstTraces = reconcileClaimAgainstTraces;
 exports.buildPromotionAfterHook = buildPromotionAfterHook;
 exports.buildWikiAfterHook = buildWikiAfterHook;
 exports.buildTemporalWorkOrderHook = buildTemporalWorkOrderHook;
 const action_verifier_js_1 = require("./action-verifier.js");
 const action_verifier_js_2 = require("./action-verifier.js");
-const TRACE_TOOL_LIST = action_verifier_js_1.OBLIGATED_TOOLS.map((t) => `'${t}'`).join(',');
-function buildWorkerTraceQueries(sessionsDb, workerChannelId) {
+/**
+ * The tools whose execution proves a lane did its job, per lane.
+ *
+ * The board lane already verified this way: a run counts as verified when a NEW
+ * gateway_tool_call trace row appears past the snapshot, naming an obligated tool. That is
+ * a measurement - the trace row is written by the executor when the call runs, so an agent
+ * cannot produce one by describing a call it never made.
+ *
+ * The wiki and promotion lanes were reading the agent's PROSE instead, and the gap that
+ * opened is measurable: 59 wiki work orders reached 'done' while wiki_page_index last moved
+ * on 2026-07-04. The tools themselves are honest - wiki_publish writes the page and index
+ * synchronously and throws on failure - but nothing downstream required the call to have
+ * happened.
+ *
+ * `contract_no_update` is obligated everywhere: a run that legitimately found nothing must
+ * still say so through a tool, or "nothing to do" and "did nothing" stay indistinguishable.
+ */
+exports.LANE_OBLIGATED_TOOLS = {
+    board: action_verifier_js_1.OBLIGATED_TOOLS,
+    // `obsidian` first, because it is what the lane actually calls: measured on the live
+    // install, worker:wiki has 928 obsidian traces and ZERO wiki_publish ones. The vault it
+    // writes to is the one the owner has open, NOT the configured wiki dir - which is why
+    // `wiki_page_index` looks frozen since 2026-07-04 while the vault took writes minutes ago.
+    // 07-04 is when the LEGACY system:wiki-agent path stopped; the Stage-2 worker replaced it
+    // and moved to a different write path. `wiki_publish` stays obligated so the index route
+    // counts if anything revives it.
+    //
+    // KNOWN LIMIT, stated rather than hidden: `obsidian` is one tool for search, read, create,
+    // append, move and delete, and the trace row records only the tool NAME - not the
+    // sub-command. So a wiki run that only READ the vault produces an obligated trace. This
+    // lane's verdict therefore means "the lane exercised the vault", which is strictly weaker
+    // than "the lane wrote", and the log wording says so. Closing the gap needs the
+    // sub-command on the trace row; until then do not read wiki `verified` as proof of a write.
+    wiki: ['obsidian', 'wiki_publish', 'contract_no_update'],
+    'memory-curation': ['mama_save', 'contract_no_update'],
+};
+/**
+ * The subset that proves the lane WROTE, as opposed to merely acting.
+ *
+ * `contract_no_update` is obligated so an empty run has a way to say so - but counting it as
+ * a write is how the first version of this hook reported "promotion run: 1 saved" for a run
+ * that honestly saved nothing, and woke the wiki compiler on it. Found in review. Two
+ * questions, two counts: did the lane act, and did it write.
+ */
+exports.LANE_WRITE_TOOLS = {
+    wiki: ['obsidian', 'wiki_publish'],
+    'memory-curation': ['mama_save'],
+};
+function traceToolList(tools) {
+    for (const tool of tools) {
+        // These are interpolated into SQL. Nothing outside this module supplies them today, and
+        // this keeps that true if something ever does.
+        if (!/^[a-z][a-z0-9_]*$/.test(tool)) {
+            throw new Error(`[workorder-hooks] invalid obligated tool name: ${JSON.stringify(tool)}`);
+        }
+    }
+    return tools.map((t) => `'${t}'`).join(',');
+}
+function buildWorkerTraceQueries(sessionsDb, workerChannelId, obligatedTools = action_verifier_js_1.OBLIGATED_TOOLS) {
+    const TRACE_TOOL_LIST = traceToolList(obligatedTools);
     return {
         getTraceMaxId: () => {
             if (!sessionsDb)
@@ -37,36 +98,107 @@ function buildWorkerTraceQueries(sessionsDb, workerChannelId) {
             if (!sessionsDb)
                 return 0;
             const row = sessionsDb
-                .prepare(`SELECT COUNT(*) AS n FROM agent_activity
+                .prepare(
+            // execution_status = 'completed' is load-bearing, not hygiene. The executor writes
+            // a trace row on its FAILURE paths too (gateway-tool-executor sets 'failed' when the
+            // call errored or returned success:false), so without this predicate a `mama_save`
+            // refused by the secret filter counted as proof the lane saved something - and the
+            // promotion hook would then emit memory:promoted on it and wake the wiki compiler.
+            // "Ran but changed nothing" is exactly the case this measurement exists to catch.
+            `SELECT COUNT(*) AS n FROM agent_activity
            WHERE type = 'gateway_tool_call'
              AND json_extract(details, '$.channel_id') = ?
+             AND execution_status = 'completed'
              AND id > ? AND (normalized_tool_name IN (${TRACE_TOOL_LIST}) OR input_summary IN (${TRACE_TOOL_LIST}))`)
                 .get(workerChannelId, maxId);
             return row.n;
         },
     };
 }
-/** The wiki ingress chain's second link: losing this parse severs memory:promoted. */
-function buildPromotionAfterHook(events) {
-    return (_wo, response) => {
-        const promotedMatch = response.match(/PROMOTED\s+(\d+)/);
-        const saved = promotedMatch ? Number(promotedMatch[1]) : 0;
-        const noUpdate = response.includes('NO_UPDATE');
-        events.emitAgentAction(noUpdate || saved === 0 ? 'no_update' : 'promoted', `promotion run: ${saved} saved`);
-        if (saved > 0) {
-            events.emitMemoryPromoted(saved);
-            events.log?.(`[stage2] promotion worker: promoted ${saved} durable judgments`);
-        }
+function readLaneClaim(response) {
+    const match = response.match(/PROMOTED\s+(\d+)/);
+    return {
+        claimed: match ? Number(match[1]) : 0,
+        noUpdate: response.includes('NO_UPDATE'),
     };
 }
-function buildWikiAfterHook(log) {
-    return (_wo, response) => {
-        if (response.includes('NO_UPDATE')) {
-            log('[stage2] wiki worker: no changes detected');
+/**
+ * Compare a lane's claim against its obligated-tool traces.
+ *
+ * Observe, never block - the same rule the board verifier states, and for the same reason:
+ * a run that overstates has still done whatever it did, and failing it here would retry work
+ * that may have partly landed. The falsehood becomes visible instead of authoritative.
+ */
+function reconcileClaimAgainstTraces(claim, traceCount) {
+    if (traceCount > 0) {
+        const overstated = claim.claimed > traceCount;
+        return {
+            verified: true,
+            note: overstated
+                ? `claimed ${claim.claimed}, ${traceCount} obligated tool trace(s) - CLAIM EXCEEDS TRACES`
+                : `${traceCount} obligated tool trace(s)`,
+        };
+    }
+    // No trace at all. A claim of work is then unsupported; a claim of no work is merely
+    // unrecorded, because the run was supposed to say so through contract_no_update.
+    return {
+        verified: false,
+        note: claim.claimed > 0
+            ? `claimed ${claim.claimed} but NO obligated tool ran - claim unsupported`
+            : claim.noUpdate
+                ? 'said NO_UPDATE without recording it through contract_no_update'
+                : 'no obligated tool ran and nothing was claimed',
+    };
+}
+/**
+ * The wiki ingress chain's second link: losing the parse severs memory:promoted, so the
+ * claim is still read - but `emitMemoryPromoted` now carries the measured count, not the
+ * asserted one, so a lane that writes nothing can no longer wake the wiki compiler.
+ */
+function buildPromotionAfterHook(events, deps) {
+    return (_wo, response, before) => {
+        const claim = readLaneClaim(response);
+        if (!deps) {
+            // No trace source wired (tests, or a daemon without the sessions DB): fall back to
+            // the claim and say so, rather than silently reporting it as measured.
+            events.emitAgentAction(claim.noUpdate || claim.claimed === 0 ? 'no_update' : 'promoted', `promotion run: ${claim.claimed} claimed (unverified)`);
+            if (claim.claimed > 0)
+                events.emitMemoryPromoted(claim.claimed);
+            return;
         }
-        else {
-            log('[stage2] wiki worker: compilation complete');
+        const anchor = typeof before === 'number' ? before : 0;
+        const traceCount = deps.traces.countObligatedTraceRowsSince(anchor);
+        // The promoted count comes from the WRITE tools only. Using the obligated count here
+        // reported "1 saved" for a run whose only obligated call was contract_no_update, and
+        // that number is what wakes the wiki compiler.
+        const savedCount = deps.writeTraces
+            ? deps.writeTraces.countObligatedTraceRowsSince(anchor)
+            : traceCount;
+        const verdict = reconcileClaimAgainstTraces(claim, traceCount);
+        events.emitAgentAction(savedCount > 0 ? 'promoted' : 'no_update', `promotion run: ${savedCount} saved, ${traceCount} obligated trace(s) (${verdict.note})`);
+        deps.log(`[stage2] promotion worker: ${verdict.verified ? 'verified' : 'UNVERIFIED'} - ${verdict.note}`);
+        if (!verdict.verified)
+            deps.onUnverified?.(verdict.note);
+        // Only a measured WRITE wakes the wiki compiler.
+        if (savedCount > 0)
+            events.emitMemoryPromoted(savedCount);
+    };
+}
+function buildWikiAfterHook(log, deps) {
+    return (_wo, response, before) => {
+        const claim = readLaneClaim(response);
+        if (!deps) {
+            log(`[stage2] wiki worker: ${claim.noUpdate ? 'no changes claimed' : 'completion claimed'}`);
+            return;
         }
+        const traceCount = deps.traces.countObligatedTraceRowsSince(typeof before === 'number' ? before : 0);
+        const verdict = reconcileClaimAgainstTraces(claim, traceCount);
+        // "vault exercised", not "verified": the obligated `obsidian` tool covers reads as well
+        // as writes and the trace records only its name, so this cannot claim a write happened.
+        // See the KNOWN LIMIT on LANE_OBLIGATED_TOOLS.wiki.
+        log(`[stage2] wiki worker: ${verdict.verified ? 'vault exercised' : 'UNVERIFIED'} - ${verdict.note}`);
+        if (!verdict.verified)
+            deps.onUnverified?.(verdict.note);
     };
 }
 function buildTemporalWorkOrderHook(deps) {

package/dist/operator/workorder-hooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"workorder-hooks.js","sourceRoot":"","sources":["../../src/operator/workorder-hooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAoBH,0DA6BC;AASD,0DAgBC;AAED,gDAUC;AAED,gEAsBC;AA3GD,6DAAuD;AAEvD,6DAK8B;AAG9B,MAAM,eAAe,GAAG,oCAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAOvE,SAAgB,uBAAuB,CACrC,UAAsC,EACtC,eAAuB;IAEvB,OAAO;QACL,aAAa,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,UAAU;iBACnB,OAAO,CACN;;2DAEiD,CAClD;iBACA,GAAG,CAAC,eAAe,CAA8B,CAAC;YACrD,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,4BAA4B,EAAE,CAAC,KAAa,EAAE,EAAE;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,UAAU;iBACnB,OAAO,CACN;;;wDAG8C,eAAe,0BAA0B,eAAe,IAAI,CAC3G;iBACA,GAAG,CAAC,eAAe,EAAE,KAAK,CAAkB,CAAC;YAChD,OAAO,GAAG,CAAC,CAAC,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAQD,sFAAsF;AACtF,SAAgB,uBAAuB,CACrC,MAA2B;IAE3B,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CACpB,QAAQ,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAClD,kBAAkB,KAAK,QAAQ,CAChC,CAAC;QACF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,EAAE,CAAC,uCAAuC,KAAK,oBAAoB,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,GAA2B;IAE3B,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,4CAA4C,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,IAA0B;IACnE,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,kDAA6B,EAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACxE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;YAC3C,IACE,OAAO,WAAW,KAAK,QAAQ;gBAC/B,WAAW,KAAK,IAAI;gBACpB,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,EAC7B,CAAC;gBACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;YAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,WAAqC,CAAC;YACvD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;gBACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;YACtF,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,yCAAoB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,QAAQ;gBACpB,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE;gBAC7B,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workorder-hooks.js","sourceRoot":"","sources":["../../src/operator/workorder-hooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AA+EH,0DAsCC;AAsBD,sCAMC;AASD,kEAwBC;AAoBD,0DAoCC;AAED,gDAsBC;AAED,gEAsBC;AAvRD,6DAAuD;AAEvD,6DAK8B;AAG9B;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,oBAAoB,GAAG;IAClC,KAAK,EAAE,oCAAe;IACtB,qFAAqF;IACrF,wFAAwF;IACxF,sFAAsF;IACtF,2FAA2F;IAC3F,0FAA0F;IAC1F,yFAAyF;IACzF,iCAAiC;IACjC,EAAE;IACF,2FAA2F;IAC3F,kFAAkF;IAClF,wFAAwF;IACxF,0FAA0F;IAC1F,gFAAgF;IAChF,4FAA4F;IAC5F,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,oBAAoB,CAAC;IACxD,iBAAiB,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC;CACF,CAAC;AAEvD;;;;;;;GAOG;AACU,QAAA,gBAAgB,GAAG;IAC9B,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;IAClC,iBAAiB,EAAE,CAAC,WAAW,CAAC;CACoB,CAAC;AAEvD,SAAS,aAAa,CAAC,KAAwB;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,wFAAwF;QACxF,+CAA+C;QAC/C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAOD,SAAgB,uBAAuB,CACrC,UAAsC,EACtC,eAAuB,EACvB,iBAAoC,oCAAe;IAEnD,MAAM,eAAe,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IACtD,OAAO;QACL,aAAa,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,UAAU;iBACnB,OAAO,CACN;;2DAEiD,CAClD;iBACA,GAAG,CAAC,eAAe,CAA8B,CAAC;YACrD,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,4BAA4B,EAAE,CAAC,KAAa,EAAE,EAAE;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,UAAU;iBACnB,OAAO;YACN,mFAAmF;YACnF,qFAAqF;YACrF,mFAAmF;YACnF,mFAAmF;YACnF,mFAAmF;YACnF,kFAAkF;YAClF;;;;wDAI8C,eAAe,0BAA0B,eAAe,IAAI,CAC3G;iBACA,GAAG,CAAC,eAAe,EAAE,KAAK,CAAkB,CAAC;YAChD,OAAO,GAAG,CAAC,CAAC,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,SAAgB,aAAa,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACjD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,2BAA2B,CACzC,KAAgB,EAChB,UAAkB;IAElB,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC;QAC9C,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,UAAU;gBACd,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,KAAK,UAAU,iDAAiD;gBAC1F,CAAC,CAAC,GAAG,UAAU,0BAA0B;SAC5C,CAAC;IACJ,CAAC;IACD,qFAAqF;IACrF,iFAAiF;IACjF,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,IAAI,EACF,KAAK,CAAC,OAAO,GAAG,CAAC;YACf,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,gDAAgD;YAC1E,CAAC,CAAC,KAAK,CAAC,QAAQ;gBACd,CAAC,CAAC,gEAAgE;gBAClE,CAAC,CAAC,+CAA+C;KACxD,CAAC;AACJ,CAAC;AAeD;;;;GAIG;AACH,SAAgB,uBAAuB,CACrC,MAA2B,EAC3B,IAAwB;IAExB,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,mFAAmF;YACnF,uEAAuE;YACvE,MAAM,CAAC,eAAe,CACpB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAChE,kBAAkB,KAAK,CAAC,OAAO,uBAAuB,CACvD,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;gBAAE,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACpE,qFAAqF;QACrF,qFAAqF;QACrF,+CAA+C;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;YACjC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAAC,MAAM,CAAC;YACvD,CAAC,CAAC,UAAU,CAAC;QACf,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,CAAC,eAAe,CACpB,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EACzC,kBAAkB,UAAU,WAAW,UAAU,wBAAwB,OAAO,CAAC,IAAI,GAAG,CACzF,CAAC;QACF,IAAI,CAAC,GAAG,CACN,8BAA8B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,MAAM,OAAO,CAAC,IAAI,EAAE,CAC/F,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,iDAAiD;QACjD,IAAI,UAAU,GAAG,CAAC;YAAE,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,GAA2B,EAC3B,IAAqC;IAErC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,yBAAyB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,CACzD,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CACxC,CAAC;QACF,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,wFAAwF;QACxF,wFAAwF;QACxF,oDAAoD;QACpD,GAAG,CACD,yBAAyB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,MAAM,OAAO,CAAC,IAAI,EAAE,CACjG,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,IAA0B;IACnE,OAAO;QACL,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,kDAA6B,EAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACxE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;YAC3C,IACE,OAAO,WAAW,KAAK,QAAQ;gBAC/B,WAAW,KAAK,IAAI;gBACpB,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,EAC7B,CAAC;gBACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;YAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,WAAqC,CAAC;YACvD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;gBACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;YACtF,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,yCAAoB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,QAAQ;gBACpB,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE;gBAC7B,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/operator/workorder-publishers.d.ts

@@ -31,6 +31,8 @@ export interface BoardPayload {
     force?: boolean;
     channelKey?: string;
     deltaLines?: string[];
+    /** The delta batch this reconcile rests on; becomes the cause of what it changes. */
+    eventIds?: string[];
 }
 export interface WikiPayload {
     batchId: string;

package/dist/operator/workorder-publishers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workorder-publishers.d.ts","sourceRoot":"","sources":["../../src/operator/workorder-publishers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,eAAO,MAAM,eAAe,2BAA2B,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAQrF;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;qEACqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOzE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAiBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAsEN"}
+{"version":3,"file":"workorder-publishers.d.ts","sourceRoot":"","sources":["../../src/operator/workorder-publishers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,eAAO,MAAM,eAAe,2BAA2B,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAQrF;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;qEACqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOzE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAiBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAiFN"}

package/dist/operator/workorder-publishers.js

@@ -66,7 +66,7 @@ function promotionManualKey(now) {
     return `promotion:manual:${now}`;
 }
 const PAYLOAD_KEYS = {
-    board: ['mode', 'force', 'channelKey', 'deltaLines'],
+    board: ['mode', 'force', 'channelKey', 'deltaLines', 'eventIds'],
     wiki: ['batchId', 'events'],
     'memory-curation': ['scheduledAt'],
     temporal: [
@@ -109,6 +109,13 @@ function validateWorkOrderPayload(kind, payload) {
             if (!Array.isArray(payload.deltaLines) || payload.deltaLines.length === 0) {
                 throw new Error(`workorder payload (board reconcile): non-empty deltaLines[] required`);
             }
+            // Not required: a reconcile whose batch could not be determined still has to run.
+            // But a malformed one must not reach the ledger as a cause.
+            if (payload.eventIds !== undefined &&
+                (!Array.isArray(payload.eventIds) ||
+                    payload.eventIds.some((id) => typeof id !== 'string' || id.trim().length === 0))) {
+                throw new Error(`workorder payload (board reconcile): eventIds[] must be non-empty strings`);
+            }
         }
         else if (payload.channelKey !== undefined || payload.deltaLines !== undefined) {
             // Reconcile-only fields on a full run signal a caller bug - loud.

package/dist/operator/workorder-publishers.js.map

@@ -1 +1 @@
-{"version":3,"file":"workorder-publishers.js","sourceRoot":"","sources":["../../src/operator/workorder-publishers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAYH,gEAQC;AAUD,oCAEC;AAID,wCAEC;AAED,8CAOC;AAED,oCAEC;AAED,oCAEC;AAED,gDAEC;AAoDD,4DAyEC;AApLY,QAAA,eAAe,GAAG,wBAAwB,CAAC;AAExD;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7E,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,uBAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO;IACvC,MAAM,IAAI,KAAK,CACb,GAAG,uBAAe,KAAK,GAAG,2DAA2D;QACnF,gFAAgF;QAChF,6BAA6B,CAChC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,oEAAoE;AAEpE,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;qEACqE;AACrE,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,gBAAgB,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,wCAAwC;IACxC,OAAO,mBAAmB,UAAU,IAAI,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe,EAAE,GAAW;IACvD,OAAO,QAAQ,GAAG,IAAI,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,aAAa,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,iBAAiB,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,OAAO,oBAAoB,GAAG,EAAE,CAAC;AACnC,CAAC;AAgCD,MAAM,YAAY,GAA6C;IAC7D,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC;IACpD,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC3B,iBAAiB,EAAE,CAAC,aAAa,CAAC;IAClC,QAAQ,EAAE;QACR,eAAe;QACf,QAAQ;QACR,eAAe;QACf,eAAe;QACf,SAAS;QACT,eAAe;QACf,eAAe;KAChB;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAgB,wBAAwB,CACtC,IAAmB,EACnB,OAAgC;IAEhC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,+BAA+B,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,qBAAqB,GAAG,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,oEAAoE,MAAM,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChF,kEAAkE;YAClE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,CAAC,KAAwC,EAAE,GAAW,EAAQ,EAAE;YACpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,mBAAmB,GAAG,aAAa,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC,CAAC;QACF,aAAa,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACpC,aAAa,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAK,OAAO,CAAC,MAAiB,GAAG,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,IAAK,OAAO,CAAC,aAAwB,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,eAAe,CAAU,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,mCAAmC,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"workorder-publishers.js","sourceRoot":"","sources":["../../src/operator/workorder-publishers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAYH,gEAQC;AAUD,oCAEC;AAID,wCAEC;AAED,8CAOC;AAED,oCAEC;AAED,oCAEC;AAED,gDAEC;AAsDD,4DAoFC;AAjMY,QAAA,eAAe,GAAG,wBAAwB,CAAC;AAExD;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7E,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,uBAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO;IACvC,MAAM,IAAI,KAAK,CACb,GAAG,uBAAe,KAAK,GAAG,2DAA2D;QACnF,gFAAgF;QAChF,6BAA6B,CAChC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,oEAAoE;AAEpE,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;qEACqE;AACrE,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,gBAAgB,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,wCAAwC;IACxC,OAAO,mBAAmB,UAAU,IAAI,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe,EAAE,GAAW;IACvD,OAAO,QAAQ,GAAG,IAAI,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,aAAa,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,iBAAiB,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,OAAO,oBAAoB,GAAG,EAAE,CAAC;AACnC,CAAC;AAkCD,MAAM,YAAY,GAA6C;IAC7D,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC;IAChE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC3B,iBAAiB,EAAE,CAAC,aAAa,CAAC;IAClC,QAAQ,EAAE;QACR,eAAe;QACf,QAAQ;QACR,eAAe;QACf,eAAe;QACf,SAAS;QACT,eAAe;QACf,eAAe;KAChB;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAgB,wBAAwB,CACtC,IAAmB,EACnB,OAAgC;IAEhC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,+BAA+B,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,qBAAqB,GAAG,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,oEAAoE,MAAM,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;YACD,kFAAkF;YAClF,4DAA4D;YAC5D,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAC9B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAClF,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChF,kEAAkE;YAClE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,CAAC,KAAwC,EAAE,GAAW,EAAQ,EAAE;YACpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,mBAAmB,GAAG,aAAa,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC,CAAC;QACF,aAAa,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACpC,aAAa,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAK,OAAO,CAAC,MAAiB,GAAG,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,IAAK,OAAO,CAAC,aAAwB,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,eAAe,CAAU,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,mCAAmC,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/utils/untrusted-content.d.ts

@@ -7,6 +7,17 @@
  * This is a mitigation, not a guarantee: the real blast-radius control stays
  * with role-based gateway tool permissions and envelope destination scoping.
  */
+/**
+ * Whether a tool's OUTPUT is untrusted external evidence.
+ *
+ * The invariant: anything that reads an external system directly returns text other
+ * people wrote. That includes every direct connector reader, so this derives from the
+ * same map the envelope scope uses rather than keeping a second hand-maintained list -
+ * a reader registered for scope but forgotten here would reach a prompt unfenced.
+ *
+ * Uploading is excluded: it sends our own content outward and returns no foreign text.
+ */
+export declare function isUntrustedExternalEvidenceTool(toolName: string): boolean;
 export declare const UNTRUSTED_EXTERNAL_EVIDENCE_INSTRUCTION: string;
 /**
  * Wrap external text in untrusted-content delimiters.

package/dist/utils/untrusted-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"untrusted-content.d.ts","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,eAAO,MAAM,uCAAuC,QAGzC,CAAC;AAEZ;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW5E;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAO,GAC/C,MAAM,CA+BR"}
+{"version":3,"file":"untrusted-content.d.ts","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CASzE;AAKD,eAAO,MAAM,uCAAuC,QAGzC,CAAC;AAEZ;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW5E;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAO,GAC/C,MAAM,CA+BR"}

package/dist/utils/untrusted-content.js

@@ -10,8 +10,28 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UNTRUSTED_EXTERNAL_EVIDENCE_INSTRUCTION = void 0;
+exports.isUntrustedExternalEvidenceTool = isUntrustedExternalEvidenceTool;
 exports.wrapUntrustedContent = wrapUntrustedContent;
 exports.stripUntrustedBlocks = stripUntrustedBlocks;
+const tool_connector_scope_js_1 = require("../envelope/tool-connector-scope.js");
+/**
+ * Whether a tool's OUTPUT is untrusted external evidence.
+ *
+ * The invariant: anything that reads an external system directly returns text other
+ * people wrote. That includes every direct connector reader, so this derives from the
+ * same map the envelope scope uses rather than keeping a second hand-maintained list -
+ * a reader registered for scope but forgotten here would reach a prompt unfenced.
+ *
+ * Uploading is excluded: it sends our own content outward and returns no foreign text.
+ */
+function isUntrustedExternalEvidenceTool(toolName) {
+    if ((0, tool_connector_scope_js_1.directConnectorReadForTool)(toolName) !== null) {
+        return true;
+    }
+    return ((toolName.startsWith('drive_') && toolName !== 'drive_upload') ||
+        toolName === 'ocr_image' ||
+        toolName === 'translate_conti');
+}
 const OPEN_MARKER = '<<<UNTRUSTED-CONTENT';
 const END_MARKER = '<<<END-UNTRUSTED-CONTENT>>>';
 exports.UNTRUSTED_EXTERNAL_EVIDENCE_INSTRUCTION = [

package/dist/utils/untrusted-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"untrusted-content.js","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAiBH,oDAWC;AAYD,oDAkCC;AAxED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEpC,QAAA,uCAAuC,GAAG;IACrD,gGAAgG;IAChG,2GAA2G;CAC5G,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,WAAW,WAAW,UAAU,KAAK;QACxC,8EAA8E;QAC9E,kFAAkF;QAClF,yDAAyD;QACzD,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAClC,IAAY,EACZ,UAA8C,EAAE;IAEhD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC;IACpD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,wEAAwE;YACxE,sEAAsE;YACtE,iEAAiE;YACjE,wEAAwE;YACxE,mCAAmC;YACnC,qEAAqE;YACrE,iDAAiD;YACjD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"untrusted-content.js","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAcH,0EASC;AAiBD,oDAWC;AAYD,oDAkCC;AA/FD,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,SAAgB,+BAA+B,CAAC,QAAgB;IAC9D,IAAI,IAAA,oDAA0B,EAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,cAAc,CAAC;QAC9D,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,iBAAiB,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEpC,QAAA,uCAAuC,GAAG;IACrD,gGAAgG;IAChG,2GAA2G;CAC5G,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,WAAW,WAAW,UAAU,KAAK;QACxC,8EAA8E;QAC9E,kFAAkF;QAClF,yDAAyD;QACzD,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAClC,IAAY,EACZ,UAA8C,EAAE;IAEhD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC;IACpD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,wEAAwE;YACxE,sEAAsE;YACtE,iEAAiE;YACjE,wEAAwE;YACxE,mCAAmC;YACnC,qEAAqE;YACrE,iDAAiD;YACjD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jungjaehoon/mama-os",
-  "version": "0.28.5",
+  "version": "0.29.0",
   "description": "MAMA OS - Local AI Runtime. Your scattered knowledge, organized by AI agents that never sleep.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -63,10 +63,10 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.71.2",
-    "@jungjaehoon/mama-core": "^1.9.0",
-    "better-sqlite3": "^12.8.0",
+    "@jungjaehoon/mama-core": "^2.0.0",
     "@slack/socket-mode": "^2.0.5",
     "@slack/web-api": "^7.13.0",
+    "better-sqlite3": "^12.8.0",
     "commander": "^12.0.0",
     "cron-parser": "^4.9.0",
     "discord.js": "^14.25.1",
@@ -92,6 +92,7 @@
     "@types/node-cron": "^3.0.11",
     "@types/supertest": "^6.0.3",
     "@types/ws": "^8.5.10",
+    "@vitest/coverage-v8": "1.6.1",
     "supertest": "^7.2.2",
     "tsx": "^4.20.6",
     "typescript": "^5.4.0",