@jungjaehoon/mama-os 0.29.2 → 0.30.0

package/dist/agent/gateway-tool-executor.js

@@ -70,13 +70,9 @@ const untrusted_content_js_1 = require("../utils/untrusted-content.js");
 const types_js_1 = require("./types.js");
 const sqlite_js_1 = __importDefault(require("../sqlite.js"));
 const mama_tool_handlers_js_1 = require("./mama-tool-handlers.js");
-const browser_tool_js_1 = require("../tools/browser-tool.js");
 const role_manager_js_1 = require("./role-manager.js");
 const config_manager_js_1 = require("../cli/config/config-manager.js");
 const agent_store_js_1 = require("../db/agent-store.js");
-const types_js_2 = require("../cli/config/types.js");
-const managed_agent_runtime_sync_js_1 = require("./managed-agent-runtime-sync.js");
-const managed_agent_validation_js_1 = require("./managed-agent-validation.js");
 const index_js_1 = require("../envelope/index.js");
 const wiki_publish_adapter_js_1 = require("../wiki-artifacts/wiki-publish-adapter.js");
 const changes_projection_js_1 = require("../operator/changes-projection.js");
@@ -140,14 +136,6 @@ const { DebugLogger } = debugLogger;
 const securityLogger = new DebugLogger('SecurityAudit');
 const TRUTHY_ENV_VALUES = new Set(['1', 'true', 'yes', 'on']);
 let trustedProvenanceRuntime = null;
-const AGENT_DETAIL_TABS = new Set([
-    'config',
-    'persona',
-    'tools',
-    'activity',
-    'validation',
-    'history',
-]);
 const RECALL_TEXT_REDACTION_PATTERNS = [
     /MAMA_SYNTHETIC_[A-Z0-9_]+_DO_NOT_LEAK/g,
     /synthetic:\/\/raw[^\s"']*/g,
@@ -166,7 +154,6 @@ const RECALL_TEXT_REDACTION_PATTERNS = [
 ];
 const MAX_RECALL_TEXT_LENGTH = 280;
 const RECALL_TEXT_REDACTION_SCAN_LIMIT = MAX_RECALL_TEXT_LENGTH + 2048;
-const managedAgentMutationTails = new Map();
 const MEMORY_SCOPE_AUDIT_TOOLS = new Set([
     'mama_save',
     'mama_search',
@@ -174,15 +161,11 @@ const MEMORY_SCOPE_AUDIT_TOOLS = new Set([
     'mama_provenance',
     'context_compile',
     'mama_update',
-    'mama_add',
-    'mama_ingest',
 ]);
 const TEMPORAL_WRITE_TOOLS = new Set([
     'mama_save',
     'context_compile',
     'mama_update',
-    'mama_add',
-    'mama_ingest',
     'report_publish',
     'report_request',
     'workorder_request',
@@ -198,25 +181,7 @@ const TEMPORAL_WRITE_TOOLS = new Set([
     'slack_send',
     'telegram_send',
     'webchat_send',
-    'os_add_bot',
-    'os_set_permissions',
-    'os_set_model',
-    'os_restart_bot',
-    'os_stop_bot',
-    'agent_update',
-    'agent_create',
-    'viewer_navigate',
-    'viewer_notify',
     'save_integration_token',
-    'browser_navigate',
-    'browser_screenshot',
-    'browser_click',
-    'browser_type',
-    'browser_scroll',
-    'browser_evaluate',
-    'browser_pdf',
-    'browser_close',
-    'agent_test',
 ]);
 const MEMORY_READ_PERMISSION_BEFORE_ENVELOPE_TOOLS = new Set([
     'mama_save',
@@ -342,25 +307,6 @@ function sanitizeMamaRecallBundle(bundle) {
         },
     };
 }
-async function withManagedAgentMutationLock(agentId, fn) {
-    const previous = managedAgentMutationTails.get(agentId) ?? Promise.resolve();
-    let release;
-    const current = new Promise((resolve) => {
-        release = resolve;
-    });
-    const tail = previous.then(() => current);
-    managedAgentMutationTails.set(agentId, tail);
-    await previous;
-    try {
-        return await fn();
-    }
-    finally {
-        release();
-        if (managedAgentMutationTails.get(agentId) === tail) {
-            managedAgentMutationTails.delete(agentId);
-        }
-    }
-}
 function sanitizeCommandForAudit(command) {
     const commandHash = (0, crypto_1.createHash)('sha256').update(command).digest('hex');
     const commandPreview = command
@@ -413,7 +359,6 @@ class GatewayToolExecutor {
     discordGateway = null;
     slackGateway = null;
     telegramGateway = null;
-    browserTool;
     roleManager;
     executionContextStorage = new async_hooks_1.AsyncLocalStorage();
     envelopeEnforcer = new index_js_1.EnvelopeEnforcer();
@@ -462,18 +407,6 @@ class GatewayToolExecutor {
      *  The setter stays because its callers are live - delete both together when a second
      *  reader appears or the callers do not. */
     setRawStore(_store) { }
-    uiCommandQueue = null;
-    setUICommandQueue(queue) {
-        this.uiCommandQueue = queue;
-    }
-    applyMultiAgentConfig = null;
-    setApplyMultiAgentConfig(fn) {
-        this.applyMultiAgentConfig = fn;
-    }
-    restartMultiAgentAgent = null;
-    setRestartMultiAgentAgent(fn) {
-        this.restartMultiAgentAgent = fn;
-    }
     /** Same as setRawStore: the only reader was the delegation executor. */
     setValidationService(_svc) { }
     setMemoryAgent(processManager) {
@@ -554,15 +487,6 @@ class GatewayToolExecutor {
     getActiveContext() {
         return this.getExecutionState().agentContext;
     }
-    /** Who and where the active turn is. Was typed by the delegation executor; now local. */
-    getActiveRouting() {
-        const state = this.getExecutionState();
-        return {
-            agentId: state.agentId,
-            source: state.source,
-            channelId: state.channelId,
-        };
-    }
     async withExecutionContext(executionContext, fn) {
         if (!executionContext) {
             return fn();
@@ -612,74 +536,6 @@ class GatewayToolExecutor {
     setDisallowedGatewayTools(tools) {
         this.disallowedGatewayTools = new Set(tools);
     }
-    getPreferredViewerAgentTab() {
-        if (!this.uiCommandQueue) {
-            return 'activity';
-        }
-        const { channelId } = this.getActiveRouting();
-        const currentPageContext = this.uiCommandQueue.getPageContext(channelId || undefined);
-        if (!currentPageContext || currentPageContext.currentRoute !== 'agents') {
-            return 'activity';
-        }
-        const pageData = currentPageContext.pageData;
-        const activeTab = pageData?.activeTab;
-        if (typeof activeTab === 'string' && AGENT_DETAIL_TABS.has(activeTab)) {
-            return activeTab;
-        }
-        return 'activity';
-    }
-    syncViewerToAgentDetail(agentId, preferredTab) {
-        if (!this.uiCommandQueue) {
-            return;
-        }
-        const { source, channelId } = this.getActiveRouting();
-        if (source !== 'viewer') {
-            return;
-        }
-        const desiredTab = preferredTab && AGENT_DETAIL_TABS.has(preferredTab)
-            ? preferredTab
-            : this.getPreferredViewerAgentTab();
-        const currentPageContext = this.uiCommandQueue.getPageContext(channelId || undefined);
-        const currentPageData = currentPageContext?.pageData;
-        if (currentPageContext?.currentRoute === 'agents' &&
-            currentPageContext.selectedItem?.type === 'agent' &&
-            currentPageContext.selectedItem.id === agentId &&
-            currentPageData?.pageType === 'agent-detail' &&
-            currentPageData?.activeTab === desiredTab) {
-            return;
-        }
-        this.uiCommandQueue.push({
-            type: 'navigate',
-            payload: {
-                route: 'agents',
-                params: {
-                    id: agentId,
-                    tab: desiredTab,
-                },
-            },
-        });
-    }
-    resolveManagedAgentId(agentId) {
-        if (!this.sessionsDb) {
-            return agentId;
-        }
-        const normalized = agentId
-            .trim()
-            .toLowerCase()
-            .replace(/[_\s]+/g, '-');
-        const candidates = Array.from(new Set([
-            agentId,
-            agentId.trim(),
-            normalized,
-            normalized.endsWith('-agent') ? normalized.slice(0, -6) : `${normalized}-agent`,
-        ])).filter(Boolean);
-        for (const candidate of candidates) {
-            if ((0, agent_store_js_1.getLatestVersion)(this.sessionsDb, candidate)) {
-                return candidate;
-            }
-        }
-        return agentId;
-    }
     setReportPublisher(fn) {
         this.reportPublisher = fn;
     }
@@ -732,9 +588,6 @@ class GatewayToolExecutor {
                     };
                 });
         this.wikiPublishAdapter = options.wikiPublishAdapter ?? null;
-        this.browserTool = (0, browser_tool_js_1.getBrowserTool)({
-            screenshotDir: (0, path_1.join)(privateWorkspaceRoot, 'media', 'outbound'),
-        });
         // Pass rolesConfig from config.yaml to RoleManager
         this.roleManager = (0, role_manager_js_1.getRoleManager)(options.rolesConfig ? { rolesConfig: options.rolesConfig } : undefined);
         if (options.mamaApi) {
@@ -838,8 +691,6 @@ class GatewayToolExecutor {
                 listDecisions: mama.list.bind(mama), // Note: mama exports listDecisions as 'list'
                 suggest: mama.suggest.bind(mama),
                 recallMemory: mama.recallMemory?.bind(mama),
-                ingestMemory: mama.ingestMemory?.bind(mama),
-                ingestWithTrustedProvenance: mama.ingestWithTrustedProvenance?.bind(mama),
                 saveMemoryWithTrustedProvenance: mama.saveMemoryWithTrustedProvenance?.bind(mama),
                 ingestConversationWithTrustedProvenance: mama.ingestConversationWithTrustedProvenance?.bind(mama),
                 getMemoryProvenance: mama.getMemoryProvenance?.bind(mama),
@@ -1248,7 +1099,7 @@ class GatewayToolExecutor {
             return { requestedScopes: null, envelopeScopesSnapshot: null, mismatch: 0 };
         }
         const envelopeScopesSnapshot = ctx?.envelope?.scope.memory_scopes ?? null;
-        const requestedScopes = this.resolveAuditMemoryScopes(toolName, input, ctx);
+        const requestedScopes = this.resolveAuditMemoryScopes(toolName, input);
         if (!ctx?.envelope || !envelopeScopesSnapshot) {
             return { requestedScopes, envelopeScopesSnapshot, mismatch: 0 };
         }
@@ -1270,7 +1121,7 @@ class GatewayToolExecutor {
             mismatch: hasOutOfEnvelopeScope ? 1 : 0,
         };
     }
-    resolveAuditMemoryScopes(toolName, input, ctx) {
+    resolveAuditMemoryScopes(toolName, input) {
         if (toolName === 'mama_save') {
             return normalizeMemoryScopes(input.scopes);
         }
@@ -1283,17 +1134,6 @@ class GatewayToolExecutor {
         if (toolName === 'mama_update') {
             return null;
         }
-        if (toolName === 'mama_add') {
-            return this.deriveMemoryScopesFromActiveContext(ctx);
-        }
-        if (toolName === 'mama_ingest') {
-            const fallbackScopes = this.deriveMemoryScopesFromActiveContext(ctx) ?? [];
-            const inputScopes = normalizeMemoryScopes(input.scopes);
-            if (inputScopes && inputScopes.length > 0) {
-                return inputScopes;
-            }
-            return fallbackScopes.length > 0 ? fallbackScopes : null;
-        }
         return null;
     }
     deriveMemoryScopesFromActiveContext(ctx) {
@@ -1445,9 +1285,6 @@ class GatewayToolExecutor {
             contextPacketScopes,
         };
     }
-    supportsTrustedIngest(api) {
-        return Boolean(api.ingestWithTrustedProvenance);
-    }
     supportsTrustedSave(api) {
         return Boolean(api.saveWithTrustedProvenance);
     }
@@ -1577,6 +1414,8 @@ class GatewayToolExecutor {
             }
         }
         try {
+            // Lazy MAMA API init — only for tools that need it
+            const getApi = () => this.initializeMAMAApi();
             // Handle non-MAMA tools first
             switch (toolName) {
                 case 'Read':
@@ -1668,46 +1507,8 @@ class GatewayToolExecutor {
                         result: (0, drive_tools_js_1.asUntrustedDriveEvidence)(await this.driveTools.upload(input)),
                     };
                 // Browser tools
-                case 'browser_navigate':
-                    return await this.executeBrowserNavigate(input);
-                case 'browser_screenshot':
-                    return await this.executeBrowserScreenshot(input);
-                case 'browser_click':
-                    return await this.executeBrowserClick(input);
-                case 'browser_type':
-                    return await this.executeBrowserType(input);
-                case 'browser_get_text':
-                    return await this.executeBrowserGetText();
-                case 'browser_scroll':
-                    return await this.executeBrowserScroll(input);
-                case 'browser_wait_for':
-                    return await this.executeBrowserWaitFor(input);
-                case 'browser_evaluate':
-                    return await this.executeBrowserEvaluate(input);
-                case 'browser_pdf':
-                    return await this.executeBrowserPdf(input);
-                case 'browser_close':
-                    return await this.executeBrowserClose();
-                // OS Management tools (viewer-only)
-                case 'os_add_bot':
-                    return await this.executeAddBot(input);
-                case 'os_set_permissions':
-                    return await this.executeSetPermissions(input);
                 case 'os_get_config':
                     return await this.executeGetConfig(input);
-                case 'os_set_model':
-                    return await this.executeSetModel(input);
-                // OS Monitoring tools
-                case 'os_list_bots':
-                    return await this.executeListBots(input);
-                case 'os_restart_bot':
-                    return await this.executeRestartBot(input);
-                case 'os_stop_bot':
-                    return await this.executeStopBot(input);
-                // PR Review tools
-                case 'pr_review_threads':
-                    return await this.executePrReviewThreads(input);
-                // Webchat tools
                 case 'webchat_send':
                     return await this.executeWebchatSend(input // session_id omitted: all files use shared outbound dir
                     );
@@ -1717,207 +1518,6 @@ class GatewayToolExecutor {
                 // Obsidian vault management via CLI
                 case 'obsidian':
                     return await this.executeObsidian(input);
-                // Agent management tools (Managed Agents pattern)
-                case 'agent_get': {
-                    if (!this.sessionsDb) {
-                        return { success: false, error: 'Sessions DB not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const agentId = this.resolveManagedAgentId(input.agent_id);
-                    const latestVer = (0, agent_store_js_1.getLatestVersion)(this.sessionsDb, agentId);
-                    if (!latestVer) {
-                        return { success: false, error: `Agent '${agentId}' not found` };
-                    }
-                    this.syncViewerToAgentDetail(agentId);
-                    return {
-                        success: true,
-                        agent_id: latestVer.agent_id,
-                        version: latestVer.version,
-                        config: JSON.parse(latestVer.snapshot),
-                        system: latestVer.persona_text,
-                        change_note: latestVer.change_note,
-                        created_at: latestVer.created_at,
-                    };
-                }
-                case 'agent_activity': {
-                    if (!this.sessionsDb) {
-                        return { success: false, error: 'Sessions DB not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const args = input;
-                    const agentId = this.resolveManagedAgentId(args.agent_id);
-                    const rawLimit = Number.parseInt(String(args.limit ?? 20), 10);
-                    const limit = Number.isFinite(rawLimit) && rawLimit > 0 ? Math.min(rawLimit, 100) : 20;
-                    const latestVer = (0, agent_store_js_1.getLatestVersion)(this.sessionsDb, agentId);
-                    if (!latestVer) {
-                        return { success: false, error: `Agent '${args.agent_id}' not found` };
-                    }
-                    this.syncViewerToAgentDetail(agentId, 'activity');
-                    return {
-                        success: true,
-                        agent_id: agentId,
-                        activity: (0, agent_store_js_1.getActivity)(this.sessionsDb, agentId, limit, {
-                            includeTrace: args.include_trace === true,
-                        }),
-                    };
-                }
-                case 'agent_update': {
-                    if (!this.sessionsDb) {
-                        return { success: false, error: 'Sessions DB not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const updateArgs = input;
-                    const updateError = (0, managed_agent_validation_js_1.validateManagedAgentChanges)(updateArgs.changes);
-                    if (updateError) {
-                        return { success: false, error: updateError };
-                    }
-                    const agentId = this.resolveManagedAgentId(updateArgs.agent_id);
-                    const initialLatest = (0, agent_store_js_1.getLatestVersion)(this.sessionsDb, agentId);
-                    if (!initialLatest) {
-                        return { success: false, error: `Agent '${updateArgs.agent_id}' not found` };
-                    }
-                    return withManagedAgentMutationLock(agentId, async () => {
-                        const updateLatest = (0, agent_store_js_1.getLatestVersion)(this.sessionsDb, agentId);
-                        if (!updateLatest) {
-                            return { success: false, error: `Agent '${updateArgs.agent_id}' not found` };
-                        }
-                        if (updateLatest.version !== updateArgs.version) {
-                            return {
-                                success: false,
-                                error: `Version conflict: current v${updateLatest.version}, sent v${updateArgs.version}`,
-                            };
-                        }
-                        const synced = await (0, managed_agent_runtime_sync_js_1.updateManagedAgentRuntime)({
-                            agentId,
-                            changes: updateArgs.changes,
-                        }, {
-                            loadConfig: config_manager_js_1.loadConfig,
-                            saveConfig: config_manager_js_1.saveConfig,
-                            applyMultiAgentConfig: this.applyMultiAgentConfig,
-                            restartMultiAgentAgent: this.restartMultiAgentAgent,
-                        });
-                        const updatedV = (0, agent_store_js_1.createAgentVersion)(this.sessionsDb, {
-                            agent_id: agentId,
-                            snapshot: synced.snapshot,
-                            persona_text: synced.personaText ?? updateLatest.persona_text,
-                            change_note: updateArgs.change_note,
-                        });
-                        return {
-                            success: true,
-                            new_version: updatedV.version,
-                            runtime_reloaded: synced.runtimeReloaded,
-                        };
-                    });
-                }
-                case 'agent_create': {
-                    if (!this.sessionsDb) {
-                        return { success: false, error: 'Sessions DB not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const createArgs = input;
-                    const createError = (0, managed_agent_validation_js_1.validateManagedAgentCreateInput)(createArgs);
-                    if (createError) {
-                        return { success: false, error: createError };
-                    }
-                    return withManagedAgentMutationLock(createArgs.id, async () => {
-                        const existingAgent = (0, agent_store_js_1.getLatestVersion)(this.sessionsDb, createArgs.id);
-                        if (existingAgent) {
-                            return { success: false, error: `Agent '${createArgs.id}' already exists` };
-                        }
-                        const synced = await (0, managed_agent_runtime_sync_js_1.createManagedAgentRuntime)({
-                            id: createArgs.id,
-                            name: createArgs.name,
-                            model: createArgs.model,
-                            tier: createArgs.tier,
-                            backend: createArgs.backend,
-                            system: createArgs.system,
-                        }, {
-                            loadConfig: config_manager_js_1.loadConfig,
-                            saveConfig: config_manager_js_1.saveConfig,
-                            applyMultiAgentConfig: this.applyMultiAgentConfig,
-                            restartMultiAgentAgent: this.restartMultiAgentAgent,
-                        });
-                        const createdV = (0, agent_store_js_1.createAgentVersion)(this.sessionsDb, {
-                            agent_id: createArgs.id,
-                            snapshot: synced.snapshot,
-                            persona_text: synced.personaText,
-                            change_note: 'Created via agent_create tool',
-                        });
-                        return {
-                            success: true,
-                            id: createArgs.id,
-                            version: createdV.version,
-                            runtime_reloaded: synced.runtimeReloaded,
-                        };
-                    });
-                }
-                case 'agent_compare': {
-                    if (!this.sessionsDb) {
-                        return { success: false, error: 'Sessions DB not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const cmpArgs = input;
-                    const agentId = this.resolveManagedAgentId(cmpArgs.agent_id);
-                    const cmpResult = (0, agent_store_js_1.compareVersionMetrics)(this.sessionsDb, agentId, cmpArgs.version_a, cmpArgs.version_b);
-                    this.syncViewerToAgentDetail(agentId, 'validation');
-                    return { success: true, agent_id: agentId, ...cmpResult };
-                }
-                // Viewer control tools (SmartStore pattern)
-                case 'viewer_state': {
-                    if (!this.uiCommandQueue) {
-                        return { success: false, error: 'UI command queue not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const { channelId } = this.getActiveRouting();
-                    const ctx = this.uiCommandQueue.getPageContext(channelId || undefined);
-                    return { success: true, context: ctx || { currentRoute: 'unknown', pageData: null } };
-                }
-                case 'viewer_navigate': {
-                    if (!this.uiCommandQueue) {
-                        return { success: false, error: 'UI command queue not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const navArgs = input;
-                    this.uiCommandQueue.push({ type: 'navigate', payload: navArgs });
-                    return { success: true, navigated: navArgs.route };
-                }
-                case 'viewer_notify': {
-                    if (!this.uiCommandQueue) {
-                        return { success: false, error: 'UI command queue not available' };
-                    }
-                    const permError = this.checkViewerOnly();
-                    if (permError) {
-                        return { success: false, error: permError };
-                    }
-                    const args = input;
-                    this.uiCommandQueue.push({ type: 'notify', payload: args });
-                    return { success: true, notified: true };
-                }
-            }
-            // Lazy MAMA API init — only for tools that need it
-            const getApi = () => this.initializeMAMAApi();
-            switch (toolName) {
                 case 'mama_save': {
                     const saveInput = input;
                     // Secret inviolability (plan v6 S1-T7): a secret saved as a
@@ -2015,36 +1615,6 @@ class GatewayToolExecutor {
                 }
                 case 'mama_load_checkpoint':
                     return await (0, mama_tool_handlers_js_1.handleLoadCheckpoint)(await getApi(), input);
-                case 'mama_add': {
-                    const addSecretScan = (0, secret_filter_js_1.scanMemoryWriteInput)(input);
-                    if (!addSecretScan.clean) {
-                        console.warn(`[Security] mama_add refused: secret-shaped content (${addSecretScan.matches.join(', ')})`);
-                        return {
-                            success: false,
-                            code: 'secret_material_refused',
-                            error: `Refusing to add: content matches secret pattern(s): ${addSecretScan.matches.join(', ')}. Secrets must never enter memory.`,
-                        };
-                    }
-                    const api = await getApi();
-                    return await this.handleMamaAdd(input, this.supportsTrustedIngest(api)
-                        ? (await this.buildTrustedMemoryWriteOptions('mama_add', gatewayCallId)).options
-                        : undefined);
-                }
-                case 'mama_ingest': {
-                    const ingestSecretScan = (0, secret_filter_js_1.scanMemoryWriteInput)(input);
-                    if (!ingestSecretScan.clean) {
-                        console.warn(`[Security] mama_ingest refused: secret-shaped content (${ingestSecretScan.matches.join(', ')})`);
-                        return {
-                            success: false,
-                            code: 'secret_material_refused',
-                            error: `Refusing to ingest: content matches secret pattern(s): ${ingestSecretScan.matches.join(', ')}. Secrets must never enter memory.`,
-                        };
-                    }
-                    const api = await getApi();
-                    return await this.handleMamaIngest(input, this.supportsTrustedIngest(api)
-                        ? (await this.buildTrustedMemoryWriteOptions('mama_ingest', gatewayCallId)).options
-                        : undefined);
-                }
                 case 'report_publish': {
                     const slotsInput = input.slots;
                     if (!slotsInput || typeof slotsInput !== 'object') {
@@ -2920,282 +2490,6 @@ class GatewayToolExecutor {
             return { success: false, error: `Failed to send to Telegram: ${err}` };
         }
     }
-    // ============================================================================
-    // Browser Tool Execution
-    // ============================================================================
-    /**
-     * Navigate to a URL
-     */
-    async executeBrowserNavigate(input) {
-        try {
-            const result = await this.browserTool.navigate(input.url);
-            return { success: true, title: result.title, url: result.url };
-        }
-        catch (err) {
-            return { success: false, error: `Navigation failed: ${err}` };
-        }
-    }
-    /**
-     * Take a screenshot
-     */
-    async executeBrowserScreenshot(input) {
-        try {
-            const result = input.full_page
-                ? await this.browserTool.screenshotFullPage(input.filename, this.getExecutionState().signal)
-                : await this.browserTool.screenshot(input.filename, this.getExecutionState().signal);
-            return { success: true, path: result.path };
-        }
-        catch (err) {
-            return { success: false, error: `Screenshot failed: ${err}` };
-        }
-    }
-    /**
-     * Click an element
-     */
-    async executeBrowserClick(input) {
-        try {
-            await this.browserTool.click(input.selector);
-            return { success: true };
-        }
-        catch (err) {
-            return { success: false, error: `Click failed: ${err}` };
-        }
-    }
-    /**
-     * Type text into an element
-     */
-    async executeBrowserType(input) {
-        try {
-            await this.browserTool.type(input.selector, input.text);
-            return { success: true };
-        }
-        catch (err) {
-            return { success: false, error: `Type failed: ${err}` };
-        }
-    }
-    /**
-     * Get page text content
-     */
-    async executeBrowserGetText() {
-        try {
-            const result = await this.browserTool.getText();
-            return { success: true, text: result.text };
-        }
-        catch (err) {
-            return { success: false, error: `Get text failed: ${err}` };
-        }
-    }
-    /**
-     * Scroll the page
-     */
-    async executeBrowserScroll(input) {
-        try {
-            await this.browserTool.scroll(input.direction, input.amount);
-            return { success: true };
-        }
-        catch (err) {
-            return { success: false, error: `Scroll failed: ${err}` };
-        }
-    }
-    /**
-     * Wait for element
-     */
-    async executeBrowserWaitFor(input) {
-        try {
-            await this.browserTool.waitFor(input.selector, input.timeout);
-            return { success: true };
-        }
-        catch (err) {
-            return { success: false, error: `Wait failed: ${err}` };
-        }
-    }
-    /**
-     * Evaluate JavaScript in page
-     */
-    async executeBrowserEvaluate(input) {
-        try {
-            const result = await this.browserTool.evaluate(input.script);
-            return { success: true, result: result.result };
-        }
-        catch (err) {
-            return { success: false, error: `Evaluate failed: ${err}` };
-        }
-    }
-    /**
-     * Generate PDF of page
-     */
-    async executeBrowserPdf(input) {
-        try {
-            const result = await this.browserTool.pdf(input.filename);
-            return { success: true, path: result.path };
-        }
-        catch (err) {
-            return { success: false, error: `PDF failed: ${err}` };
-        }
-    }
-    /**
-     * Close the browser
-     */
-    async executeBrowserClose() {
-        try {
-            await this.browserTool.close();
-            return { success: true };
-        }
-        catch (err) {
-            return { success: false, error: `Close failed: ${err}` };
-        }
-    }
-    // ============================================================================
-    // OS Management Tools (viewer-only)
-    // ============================================================================
-    /**
-     * Check if current context is from viewer (OS agent)
-     * Returns error message if not allowed
-     */
-    checkViewerOnly() {
-        const context = this.getActiveContext();
-        if (!context) {
-            // No context = backward compatibility, allow
-            return null;
-        }
-        if (context.source !== 'viewer') {
-            return `Permission denied: This operation is only available from MAMA OS Viewer. Current source: ${context.source}`;
-        }
-        if (!context.role.systemControl) {
-            return `Permission denied: Role "${context.roleName}" does not have system control permissions`;
-        }
-        return null;
-    }
-    /**
-     * Execute os_add_bot tool - Add a new bot to config
-     * Viewer-only: requires systemControl permission
-     */
-    async executeAddBot(input) {
-        // Check viewer-only permission
-        const permError = this.checkViewerOnly();
-        if (permError) {
-            return { success: false, error: permError };
-        }
-        const { platform, token, bot_token, app_token, default_channel_id, allowed_chats, room_ids } = input;
-        if (!platform) {
-            return { success: false, error: 'Platform is required (discord, telegram, slack, chatwork)' };
-        }
-        try {
-            const config = await (0, config_manager_js_1.loadConfig)();
-            switch (platform) {
-                case 'discord':
-                    if (!token) {
-                        return { success: false, error: 'Discord bot token is required' };
-                    }
-                    config.discord = {
-                        enabled: true,
-                        token,
-                        default_channel_id,
-                    };
-                    break;
-                case 'telegram':
-                    if (!token) {
-                        return { success: false, error: 'Telegram bot token is required' };
-                    }
-                    config.telegram = {
-                        enabled: true,
-                        token,
-                        allowed_chats,
-                    };
-                    break;
-                case 'slack':
-                    if (!bot_token || !app_token) {
-                        return { success: false, error: 'Slack requires both bot_token and app_token' };
-                    }
-                    config.slack = {
-                        enabled: true,
-                        bot_token,
-                        app_token,
-                    };
-                    break;
-                case 'chatwork':
-                    if (!token) {
-                        return { success: false, error: 'Chatwork API token is required' };
-                    }
-                    config.chatwork = {
-                        enabled: true,
-                        api_token: token,
-                        room_ids,
-                    };
-                    break;
-                default:
-                    return { success: false, error: `Unknown platform: ${platform}` };
-            }
-            await (0, config_manager_js_1.saveConfig)(config);
-            return {
-                success: true,
-                message: `${platform} bot added successfully. Restart MAMA to apply changes.`,
-            };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to add bot: ${err}` };
-        }
-    }
-    /**
-     * Execute os_set_permissions tool - Modify role permissions
-     * Viewer-only: requires systemControl permission
-     */
-    async executeSetPermissions(input) {
-        // Check viewer-only permission
-        const permError = this.checkViewerOnly();
-        if (permError) {
-            return { success: false, error: permError };
-        }
-        const { role, allowedTools, blockedTools, allowedPaths, systemControl, sensitiveAccess, mapSource, } = input;
-        if (!role) {
-            return { success: false, error: 'Role name is required' };
-        }
-        try {
-            const config = await (0, config_manager_js_1.loadConfig)();
-            // Initialize roles if not present
-            if (!config.roles) {
-                config.roles = { ...types_js_2.DEFAULT_ROLES };
-            }
-            // Get or create role definition
-            const existingRole = config.roles.definitions[role] || {
-                allowedTools: ['mama_*', 'Read'],
-            };
-            // Update role properties
-            const updatedRole = {
-                allowedTools: allowedTools ?? existingRole.allowedTools,
-                blockedTools: blockedTools ?? existingRole.blockedTools,
-                allowedPaths: allowedPaths ?? existingRole.allowedPaths,
-                systemControl: systemControl ?? existingRole.systemControl,
-                sensitiveAccess: sensitiveAccess ?? existingRole.sensitiveAccess,
-            };
-            // Clean up undefined values
-            if (!updatedRole.blockedTools?.length)
-                delete updatedRole.blockedTools;
-            if (!updatedRole.allowedPaths?.length)
-                delete updatedRole.allowedPaths;
-            if (updatedRole.systemControl === undefined)
-                delete updatedRole.systemControl;
-            if (updatedRole.sensitiveAccess === undefined)
-                delete updatedRole.sensitiveAccess;
-            config.roles.definitions[role] = updatedRole;
-            // Map source to role if specified
-            if (mapSource) {
-                config.roles.sourceMapping[mapSource] = role;
-            }
-            await (0, config_manager_js_1.saveConfig)(config);
-            // Update RoleManager with new config (trust anchor included: telegram
-            // allowed_chats may have changed alongside roles in the saved config)
-            this.roleManager.updateRolesConfig(config.roles);
-            this.roleManager.setTelegramTrust(config.telegram?.allowed_chats);
-            return {
-                success: true,
-                message: `Role "${role}" updated successfully.${mapSource ? ` Source "${mapSource}" now maps to this role.` : ''}`,
-            };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to set permissions: ${err}` };
-        }
-    }
     /**
      * Execute os_get_config tool - Get current configuration
      * Masks sensitive data for non-viewer sources
@@ -3243,7 +2537,19 @@ class GatewayToolExecutor {
                 // Show only length hint for debugging without revealing content
                 masked[key] = `***[${value.length} chars]***`;
             }
-            else if (typeof value === 'object' && !Array.isArray(value)) {
+            else if (isSensitive && typeof value !== 'object') {
+                // Non-string sensitive scalars (numbers, booleans) must not pass
+                // through either - the key marked them secret.
+                masked[key] = '***';
+            }
+            else if (Array.isArray(value)) {
+                // Arrays must be descended: a token inside multi_agent.agents[] or a
+                // bots[] entry would otherwise return in clear text (review).
+                masked[key] = value.map((item) => item !== null && typeof item === 'object' && !Array.isArray(item)
+                    ? this.maskSensitiveData(item, showSensitive)
+                    : item);
+            }
+            else if (typeof value === 'object') {
                 masked[key] = this.maskSensitiveData(value, showSensitive);
             }
             else {
@@ -3252,361 +2558,6 @@ class GatewayToolExecutor {
         }
         return masked;
     }
-    /**
-     * Execute os_set_model tool - Set model configuration for a role or globally
-     * Viewer-only: requires systemControl permission
-     *
-     * Usage:
-     * - Set role-specific model: { role: 'chat_bot', model: 'claude-3-haiku-20240307' }
-     * - Set global model: { model: 'claude-sonnet-4-6' }
-     */
-    async executeSetModel(input) {
-        // Check viewer-only permission
-        const permError = this.checkViewerOnly();
-        if (permError) {
-            return { success: false, error: permError };
-        }
-        const { role, model, maxTurns, timeout } = input;
-        if (!model) {
-            return { success: false, error: 'Model name is required' };
-        }
-        // Validate model name format - Claude/Anthropic models only
-        // Valid formats per Anthropic API docs:
-        // - Pinned snapshots: claude-sonnet-4-20250514, claude-3-5-sonnet-20241022
-        // - Rolling aliases: claude-3-7-sonnet-latest, claude-opus-4-latest
-        // - Family aliases: claude-opus-4-5, claude-sonnet-4-0
-        const claudeModelPattern = /^claude-(?:opus|sonnet|haiku|3|3-5|3-7)-?[a-z0-9-]*(?:-\d{8}|-latest)?$/i;
-        const isValidModel = claudeModelPattern.test(model);
-        if (!isValidModel) {
-            return {
-                success: false,
-                error: `Invalid model name format: ${model}. Expected Claude model format (e.g., claude-sonnet-4-6, claude-opus-4-latest)`,
-            };
-        }
-        if (maxTurns !== undefined && (maxTurns < 1 || maxTurns > 100)) {
-            return { success: false, error: 'maxTurns must be between 1 and 100' };
-        }
-        if (timeout !== undefined && (timeout < 10000 || timeout > 600000)) {
-            return { success: false, error: 'timeout must be between 10000ms and 600000ms (10s-10min)' };
-        }
-        try {
-            const config = await (0, config_manager_js_1.loadConfig)();
-            // If role is specified, update that role's model
-            if (role) {
-                // Initialize roles if not present
-                if (!config.roles) {
-                    config.roles = { ...types_js_2.DEFAULT_ROLES };
-                }
-                // Check if role exists
-                if (!config.roles.definitions[role]) {
-                    return {
-                        success: false,
-                        error: `Role "${role}" not found. Available roles: ${Object.keys(config.roles.definitions).join(', ')}`,
-                    };
-                }
-                // Update role-specific settings
-                config.roles.definitions[role].model = model;
-                if (maxTurns !== undefined) {
-                    config.roles.definitions[role].maxTurns = maxTurns;
-                }
-                await (0, config_manager_js_1.saveConfig)(config);
-                // Update RoleManager with new config (trust anchor included)
-                this.roleManager.updateRolesConfig(config.roles);
-                this.roleManager.setTelegramTrust(config.telegram?.allowed_chats);
-                const changes = [`model: ${model}`];
-                if (maxTurns !== undefined)
-                    changes.push(`maxTurns: ${maxTurns}`);
-                return {
-                    success: true,
-                    message: `Role "${role}" updated: ${changes.join(', ')}. New conversations for this role will use these settings.`,
-                };
-            }
-            // No role specified - update global agent config
-            if (!config.agent) {
-                config.agent = {
-                    backend: 'claude',
-                    model: 'claude-sonnet-4-6',
-                    max_turns: 10,
-                    timeout: 300000,
-                };
-            }
-            config.agent.model = model;
-            if (maxTurns !== undefined) {
-                config.agent.max_turns = maxTurns;
-            }
-            if (timeout !== undefined) {
-                config.agent.timeout = timeout;
-            }
-            await (0, config_manager_js_1.saveConfig)(config);
-            const changes = [`model: ${model}`];
-            if (maxTurns !== undefined)
-                changes.push(`maxTurns: ${maxTurns}`);
-            if (timeout !== undefined)
-                changes.push(`timeout: ${timeout}ms`);
-            return {
-                success: true,
-                message: `Global agent settings updated: ${changes.join(', ')}. New conversations will use these settings.`,
-            };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to set model: ${err}` };
-        }
-    }
-    // ============================================================================
-    // OS Monitoring Tools (viewer-only)
-    // ============================================================================
-    /**
-     * Callback to get bot status from running gateways
-     * Set by the main application when gateways are initialized
-     */
-    botStatusCallback = null;
-    /**
-     * Callback to control bots
-     * Set by the main application when gateways are initialized
-     */
-    botControlCallback = null;
-    /**
-     * Set the bot status callback (called by main app)
-     */
-    setBotStatusCallback(callback) {
-        this.botStatusCallback = callback;
-    }
-    /**
-     * Set the bot control callback (called by main app)
-     */
-    setBotControlCallback(callback) {
-        this.botControlCallback = callback;
-    }
-    /**
-     * Execute os_list_bots tool - List all configured bots and their status
-     */
-    async executeListBots(input) {
-        const { platform } = input;
-        try {
-            const config = await (0, config_manager_js_1.loadConfig)();
-            const platforms = ['discord', 'telegram', 'slack', 'chatwork'];
-            const bots = [];
-            // Get runtime status if callback is available
-            const runtimeStatus = this.botStatusCallback?.() ?? new Map();
-            for (const p of platforms) {
-                // Skip if filtering by platform
-                if (platform && p !== platform)
-                    continue;
-                const platformConfig = config[p];
-                const configured = !!platformConfig;
-                const enabled = configured && platformConfig.enabled === true;
-                const runtime = runtimeStatus.get(p);
-                let status;
-                if (!configured) {
-                    status = 'not_configured';
-                }
-                else if (runtime?.running) {
-                    status = 'running';
-                }
-                else if (runtime?.error) {
-                    status = 'error';
-                }
-                else if (enabled) {
-                    status = 'stopped';
-                }
-                else {
-                    status = 'stopped';
-                }
-                bots.push({
-                    platform: p,
-                    enabled,
-                    configured,
-                    status,
-                    error: runtime?.error,
-                });
-            }
-            return { success: true, bots };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to list bots: ${err}` };
-        }
-    }
-    /**
-     * Execute os_restart_bot tool - Restart a bot
-     * Viewer-only: requires systemControl permission
-     */
-    async executeRestartBot(input) {
-        // Check viewer-only permission
-        const permError = this.checkViewerOnly();
-        if (permError) {
-            return { success: false, error: permError };
-        }
-        const { platform } = input;
-        if (!platform) {
-            return { success: false, error: 'Platform is required' };
-        }
-        if (!this.botControlCallback) {
-            return {
-                success: false,
-                error: 'Bot control not available. Please restart MAMA server to apply configuration changes.',
-            };
-        }
-        try {
-            // Stop then start
-            const stopResult = await this.botControlCallback(platform, 'stop');
-            if (!stopResult.success && stopResult.error !== 'Bot not running') {
-                return { success: false, error: `Failed to stop bot: ${stopResult.error}` };
-            }
-            // Small delay
-            await new Promise((resolve) => setTimeout(resolve, 1000));
-            const startResult = await this.botControlCallback(platform, 'start');
-            if (!startResult.success) {
-                return { success: false, error: `Failed to start bot: ${startResult.error}` };
-            }
-            return { success: true, message: `${platform} bot restarted successfully` };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to restart bot: ${err}` };
-        }
-    }
-    /**
-     * Execute os_stop_bot tool - Stop a bot
-     * Viewer-only: requires systemControl permission
-     */
-    async executeStopBot(input) {
-        // Check viewer-only permission
-        const permError = this.checkViewerOnly();
-        if (permError) {
-            return { success: false, error: permError };
-        }
-        const { platform } = input;
-        if (!platform) {
-            return { success: false, error: 'Platform is required' };
-        }
-        if (!this.botControlCallback) {
-            return {
-                success: false,
-                error: 'Bot control not available. Manually disable the bot in config.yaml and restart MAMA.',
-            };
-        }
-        try {
-            const result = await this.botControlCallback(platform, 'stop');
-            if (!result.success) {
-                return { success: false, error: `Failed to stop bot: ${result.error}` };
-            }
-            return { success: true, message: `${platform} bot stopped successfully` };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to stop bot: ${err}` };
-        }
-    }
-    // ============================================================================
-    // PR Review Tools
-    // ============================================================================
-    parsePRUrl(url) {
-        const match = url.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+)\/pull\/(\d+)\/?$/);
-        if (!match)
-            return null;
-        return { owner: match[1], repo: match[2], prNumber: parseInt(match[3], 10) };
-    }
-    async executePrReviewThreads(input) {
-        let owner;
-        let repo;
-        let prNumber;
-        if (input.pr_url) {
-            const parsed = this.parsePRUrl(input.pr_url);
-            if (!parsed)
-                return { success: false, error: `Invalid PR URL: ${input.pr_url}` };
-            ({ owner, repo, prNumber } = parsed);
-        }
-        else if (input.owner && input.repo && input.pr_number) {
-            owner = input.owner;
-            repo = input.repo;
-            prNumber = input.pr_number;
-        }
-        else {
-            return { success: false, error: 'Provide pr_url or (owner, repo, pr_number)' };
-        }
-        try {
-            const query = `
-        query($owner: String!, $repo: String!, $prNumber: Int!) {
-          repository(owner: $owner, name: $repo) {
-            pullRequest(number: $prNumber) {
-              reviewThreads(last: 100) {
-                nodes {
-                  id
-                  isResolved
-                  comments(first: 10) {
-                    nodes { path line body author { login } }
-                  }
-                }
-              }
-            }
-          }
-        }
-      `;
-            const { stdout } = await execFileAsync('gh', [
-                'api',
-                'graphql',
-                '-f',
-                `query=${query}`,
-                '-F',
-                `owner=${owner}`,
-                '-F',
-                `repo=${repo}`,
-                '-F',
-                `prNumber=${prNumber}`,
-            ], { timeout: 30000 });
-            let data;
-            try {
-                data = JSON.parse(stdout);
-            }
-            catch {
-                return {
-                    success: false,
-                    error: `Failed to parse GitHub API response: ${stdout.substring(0, 200)}`,
-                };
-            }
-            const threads = data.data?.repository?.pullRequest?.reviewThreads?.nodes ?? [];
-            const unresolved = threads
-                .filter((thread) => !thread.isResolved)
-                .map((thread) => ({
-                id: thread.id,
-                comments: thread.comments.nodes.map((comment) => ({
-                    path: comment.path,
-                    line: comment.line,
-                    body: comment.body,
-                    author: comment.author?.login ?? 'unknown',
-                })),
-            }));
-            // Build summary grouped by file
-            const byFile = new Map();
-            for (const t of unresolved) {
-                const first = t.comments[0];
-                if (!first)
-                    continue;
-                const file = first.path || '(general)';
-                const list = byFile.get(file) || [];
-                list.push({ line: first.line, body: first.body, author: first.author });
-                byFile.set(file, list);
-            }
-            const summaryLines = [
-                `${unresolved.length} unresolved thread(s) across ${byFile.size} file(s)`,
-                '',
-            ];
-            for (const [file, items] of byFile) {
-                summaryLines.push(`**${file}** (${items.length})`);
-                for (const item of items) {
-                    const lineRef = item.line ? `L${item.line} ` : '';
-                    const body = item.body.length > 300 ? item.body.substring(0, 300) + '…' : item.body;
-                    summaryLines.push(`  • ${lineRef}@${item.author}: ${body}`);
-                }
-                summaryLines.push('');
-            }
-            if (byFile.size > 1) {
-                summaryLines.push(`💡 ${byFile.size} independent files — delegate fixes in parallel (DELEGATE_BG)`);
-            }
-            return { success: true, threads: unresolved, summary: summaryLines.join('\n') };
-        }
-        catch (err) {
-            return { success: false, error: `Failed to fetch PR threads: ${err}` };
-        }
-    }
     // ============================================================================
     // ============================================================================
     // Webchat Tools
@@ -3889,101 +2840,6 @@ class GatewayToolExecutor {
                 : `Code-Act error: ${result.error?.message || 'Unknown error'}`,
         };
     }
-    /**
-     * Handle mama_add — auto-extract facts from conversation content with derived memory scopes.
-     */
-    async handleMamaAdd(input, options) {
-        const context = this.getActiveContext();
-        if (!context) {
-            return {
-                success: false,
-                error: 'mama_add requires an active agent context',
-            };
-        }
-        const scopes = (0, scope_context_js_1.deriveMemoryScopes)({
-            source: context.source,
-            channelId: context.session.channelId,
-            userId: context.session.userId,
-            projectId: process.env.MAMA_WORKSPACE || process.cwd(),
-        });
-        return this.handleMamaIngest({
-            ...input,
-            scopes,
-        }, options);
-    }
-    async handleMamaIngest(input, options) {
-        const { content } = input;
-        if (!content || typeof content !== 'string') {
-            return {
-                success: false,
-                error: 'content is required and must be a string',
-            };
-        }
-        try {
-            const api = await this.initializeMAMAApi();
-            if (options && !api.ingestWithTrustedProvenance) {
-                return {
-                    success: false,
-                    error: 'Trusted memory ingest API not available.',
-                };
-            }
-            if (!options && !api.ingestMemory) {
-                return {
-                    success: false,
-                    error: 'Memory ingest API not available.',
-                };
-            }
-            const activeState = this.getExecutionState();
-            const context = activeState.agentContext;
-            const envelopeScopes = activeState.envelope?.scope.memory_scopes ?? null;
-            const fallbackScopes = envelopeScopes && envelopeScopes.length > 0
-                ? envelopeScopes
-                : context
-                    ? (0, scope_context_js_1.deriveMemoryScopes)({
-                        source: context.source,
-                        channelId: context.session.channelId,
-                        userId: context.session.userId,
-                        projectId: process.env.MAMA_WORKSPACE || process.cwd(),
-                    })
-                    : [];
-            let scopes = fallbackScopes;
-            if (Array.isArray(input.scopes) && input.scopes.length > 0) {
-                const derivedIds = new Set(fallbackScopes.map((s) => `${s.kind}:${s.id}`));
-                const allInDerived = input.scopes.every((s) => derivedIds.has(`${s.kind}:${s.id}`));
-                scopes = allInDerived ? input.scopes : fallbackScopes;
-            }
-            if (scopes.length === 0) {
-                return {
-                    success: false,
-                    error: 'mama_ingest requires scopes (provide via input or active agent context)',
-                };
-            }
-            const payload = {
-                content: content.substring(0, 10_000),
-                scopes,
-                source: {
-                    package: 'standalone',
-                    source_type: 'gateway_tool_executor',
-                    source: context?.source || null,
-                },
-            };
-            const result = options
-                ? await api.ingestWithTrustedProvenance(payload, options)
-                : await api.ingestMemory(payload);
-            return {
-                success: true,
-                extracted: 1,
-                saved: 1,
-                result,
-            };
-        }
-        catch (err) {
-            return {
-                success: false,
-                error: `Ingest failed: ${err instanceof Error ? err.message : String(err)}`,
-            };
-        }
-    }
     /**
      * Answer what a stored claim rests on.
      *