@jungjaehoon/mama-os 0.49.2 → 0.50.0

package/dist/cli/commands/start.js

@@ -113,8 +113,6 @@ const shutdown_js_1 = require("../runtime/shutdown.js");
 const envelope_bootstrap_js_1 = require("../runtime/envelope-bootstrap.js");
 const config_loader_js_1 = require("../../connectors/config-loader.js");
 const connector_bootstrap_js_1 = require("../runtime/connector-bootstrap.js");
-const private_connector_policy_js_1 = require("../../connectors/private-connector-policy.js");
-const wiki_continuity_js_1 = require("../../operator/wiki-continuity.js");
 const message_router_config_js_1 = require("../runtime/message-router-config.js");
 const reactive_config_js_1 = require("../../envelope/reactive-config.js");
 const scope_context_js_1 = require("../../memory/scope-context.js");
@@ -133,6 +131,7 @@ const operational_issues_js_1 = require("../../observability/operational-issues.
 const repair_request_js_1 = require("../../operator/repair-request.js");
 const agent_loop_init_js_2 = require("../runtime/agent-loop-init.js");
 const workorder_publishers_js_1 = require("../../operator/workorder-publishers.js");
+const owner_action_effects_js_1 = require("../../operator/owner-action-effects.js");
 const owner_event_effects_js_1 = require("../../operator/owner-event-effects.js");
 const owner_event_loop_js_1 = require("../../operator/owner-event-loop.js");
 const board_pipeline_render_js_1 = require("../../operator/board-pipeline-render.js");
@@ -154,11 +153,6 @@ const principalRegistryLogger = new DebugLogger('PrincipalRegistry');
 function workOrderActivityDetails(event) {
     return event.briefHash ? { brief_hash: event.briefHash } : undefined;
 }
-const DISABLED_PRIVATE_CONNECTOR_POLICY = (0, private_connector_policy_js_1.resolvePrivateConnectorPolicy)({
-    ok: true,
-    config: {},
-    enabledNames: [],
-});
 function createCorePrincipalRegistry(adapter) {
     const { createPrincipalRepository } = mamaCore;
     return createPrincipalRepository(adapter);
@@ -393,19 +387,10 @@ function causeEventIdsFromPayload(payload) {
     return batch.filter((id) => typeof id === 'string' && id.trim().length > 0);
 }
 function workOrderEnvelopeScope(input) {
-    const isTemporal = input.workKind === 'temporal';
-    // One principal for every turn; what differs per kind is WHICH connectors the run
-    // may read, and that is data: a recheck reads its task's connector or nothing, a
-    // wiki turn reads no PRIVATE connector (personal channels never feed public pages),
-    // the board and curation turns keep the lane's configured connectors.
+    // The trusted owner grant decides readable connectors. Work kind and temporal binding
+    // remain selection and receipt metadata; neither attenuates ordinary read authority.
     const surface = exports.ONE_AGENT_TURN_POLICY.roleName;
-    const candidateConnectors = isTemporal
-        ? input.temporalBinding
-            ? [input.temporalBinding.connector]
-            : []
-        : input.workKind === 'wiki'
-            ? (0, wiki_continuity_js_1.publicWikiConnectorScope)(input.laneConnectors, input.privateConnectorPolicy.enabledPrivateConnectors)
-            : input.laneConnectors;
+    const candidateConnectors = input.laneConnectors;
     return {
         project_refs: [{ kind: 'project', id: input.projectId }],
         // A temporal run reads its task's connector or nothing. Every other lane keeps the
@@ -425,25 +410,15 @@ function workOrderEnvelopeScope(input) {
             // mama_save's write binding, so issuing the mirror here re-opened
             // per-channel raw isolation and bound every saved memory to every
             // granted channel (PR #217 review, blocking #2/#3).
-            ...(input.temporalBinding
-                ? [
-                    {
-                        kind: 'channel',
-                        id: `${input.temporalBinding.connector}:${input.temporalBinding.channel}`,
-                    },
-                ]
-                : []),
-            // Same rule for a board reconcile: the run is bound to the channel whose delta it
-            // judges, and connector memories are scoped by the canonical channel key.
-            ...(input.workKind === 'board' && input.reconcileChannelKey
-                ? [{ kind: 'channel', id: input.reconcileChannelKey }]
-                : []),
         ],
         allowed_destinations: [],
     };
 }
 function temporalTaskBinding(ledger, taskId) {
-    const sourceChannel = ledger.getById(taskId)?.sourceChannel;
+    const task = ledger.getById(taskId);
+    const sourceChannel = task?.status === 'review'
+        ? (task.reviewAnchorSourceChannel ?? task.sourceChannel)
+        : task?.sourceChannel;
     if (typeof sourceChannel !== 'string')
         return null;
     const separator = sourceChannel.indexOf(':');
@@ -510,37 +485,7 @@ exports.TURN_KIND_REQUIRED_TOOLS = {
  * that is advertised but never injected is a hallucinated-call generator. Member data and
  * workspace file reads are owner-conversation material with no use in a scheduled turn.
  */
-exports.SCHEDULED_TURN_BLOCKED_TOOLS = new Set([
-    // Records and tasks are SEPARATE (owner policy). An unattended turn reads connector
-    // evidence, and connector observations, principles and open questions are records -
-    // letting a scheduled turn mint owner rows is what filled the board with non-tasks.
-    // Only an owner CONVERSATION creates a task; unattended turns recorrect with
-    // task_reclassify instead.
-    'task_create',
-    // workspace file reads, the shell and the file writer are owner-conversation tools;
-    // no unattended turn section instructs one
-    'Read',
-    'Bash',
-    'Write',
-    // every outbound channel, not only Telegram: the grant is derived from the owner's
-    // (editable) role config, so a send tool added there must still never run unattended
-    'telegram_send',
-    'discord_send',
-    'slack_send',
-    'webchat_send',
-    'drive_upload',
-    'drive_list_drives',
-    'drive_browse',
-    'drive_find_folder',
-    'drive_download',
-    'ocr_image',
-    'create_fb_overlay',
-    'translate_conti',
-    'drive_translate_conti',
-    'member_candidates',
-    'member_list',
-    'member_scope_list',
-]);
+exports.SCHEDULED_TURN_BLOCKED_TOOLS = exports.ADMINISTRATION_TOOLS;
 /**
  * Per-turn-kind blocked lists, projected by the HOST. One principal and one brief do
  * not mean one grant for every trigger: an unattended board or wiki turn has no owner
@@ -548,61 +493,11 @@ exports.SCHEDULED_TURN_BLOCKED_TOOLS = new Set([
  * artifact. Each entry names the artifact it protects.
  */
 exports.TURN_KIND_BLOCKED_TOOLS = {
-    // board writes judgment slots and recorrects existing task lifecycle through
-    // task_update/task_reclassify; it does not create rows, touch memory, or touch the
-    // vault (obsidian is the wiki lane's write path)
-    board: new Set([
-        'wiki_publish',
-        'obsidian',
-        'mama_save',
-        'mama_update',
-        'task_temporal_reconcile',
-    ]),
-    // wiki writes pages; the ledger, the board and memory are not its artifact
-    wiki: new Set([
-        'report_publish',
-        'mama_save',
-        'mama_update',
-        'task_create',
-        'task_update',
-        'task_reclassify',
-        'task_temporal_reconcile',
-        'obsidian',
-    ]),
-    // curation writes memory; nothing else
-    'memory-curation': new Set([
-        'report_publish',
-        'wiki_publish',
-        'task_create',
-        'task_update',
-        'task_reclassify',
-        'task_temporal_reconcile',
-        'obsidian',
-    ]),
-    // recheck resolves ONE task through task_temporal_reconcile; generic mutation is out
-    // self-check triages the system's own failures; it files repair requests and closes
-    // issues, and touches nothing the owner or another turn owns
-    'self-check': new Set([
-        'report_publish',
-        'wiki_publish',
-        'mama_save',
-        'mama_update',
-        'task_create',
-        'task_update',
-        'task_reclassify',
-        'task_temporal_reconcile',
-        'obsidian',
-    ]),
-    temporal: new Set([
-        'report_publish',
-        'wiki_publish',
-        'mama_save',
-        'mama_update',
-        'task_create',
-        'task_update',
-        'task_reclassify',
-        'obsidian',
-    ]),
+    board: new Set(),
+    wiki: new Set(),
+    'memory-curation': new Set(),
+    'self-check': new Set(),
+    temporal: new Set(),
 };
 /** Progressive evidence primitives for a scheduled owner-runtime report turn. */
 exports.OPERATOR_REPORT_TOOL_POLICY = {
@@ -704,17 +599,12 @@ function buildTurnAgentPolicy(kind, model, backend, privateConnectorPolicy, rawC
     }
     // Same downgrade the event turn applies: a run with no private binding advertises
     // no private connector tools and gets the disabled brief projection.
-    const scopedSurface = requiredPrivatePolicy.enabledPrivateConnectors.some((name) => rawConnectorScope.includes(name))
-        ? exports.ONE_AGENT_TURN_POLICY.roleName
-        : 'multi-agent-generic';
+    const scopedSurface = exports.ONE_AGENT_TURN_POLICY.roleName;
     const blockedSet = new Set([
         ...exports.ADMINISTRATION_TOOLS,
         ...exports.SCHEDULED_TURN_BLOCKED_TOOLS,
         ...kindBlocked,
         ...(ownerRole.blockedTools ?? []),
-        // Shape rule on top of the named lists: the role config is owner-editable, so a
-        // send or upload tool that appears there tomorrow is still never unattended.
-        ...ownerRole.allowedTools.filter((tool) => isOutboundToolName(tool)),
     ]);
     const projectedRole = buildProjectedLaneRole(scopedSurface, uniqueToolList([...ownerRole.allowedTools, ...exports.TURN_KIND_REQUIRED_TOOLS[kind]]).filter((tool) => !blockedSet.has(tool)), requiredPrivatePolicy);
     const blockedTools = [...new Set([...(projectedRole.blockedTools ?? []), ...blockedSet])];
@@ -733,15 +623,13 @@ function buildTurnAgentPolicy(kind, model, backend, privateConnectorPolicy, rawC
         },
         capabilities: allowedTools,
         limitations: blockedTools.map((tool) => `Cannot use ${tool}`),
-        tier: 2,
+        tier: 1,
         backend,
     };
     return {
         agentContext,
         gatewayToolsPrompt: buildProjectedLanePrompt(innerTools, scopedSurface, requiredPrivatePolicy),
-        briefProjectionPolicy: scopedSurface === 'multi-agent-generic'
-            ? DISABLED_PRIVATE_CONNECTOR_POLICY
-            : requiredPrivatePolicy,
+        briefProjectionPolicy: requiredPrivatePolicy,
     };
 }
 function bindCodeActParentModelRun(adapter, executionContext, options) {
@@ -803,7 +691,8 @@ function resolveOwnerEventTerminalReceipt(batch, deps) {
     const confirmedEffects = deps.ownerEventEffectLedger
         .confirmedKinds(batch.id)
         .filter((kind) => kind !== 'telegram_send');
-    const durable = [...new Set([...ledgerEffects, ...confirmedEffects])];
+    const genericEffects = deps.ownerActionEffectLedger?.confirmedKindsForOccurrence(`owner-event:${batch.id}`) ?? [];
+    const durable = [...new Set([...ledgerEffects, ...confirmedEffects, ...genericEffects])];
     if (durable.length > 0) {
         return { status: 'acted', tools: durable, ownerDecisionRequested: false };
     }
@@ -1322,6 +1211,7 @@ async function runAgentLoop(config, options = {}) {
             sessionKey: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
             source: 'operator',
             channelId,
+            sourceMessageRef: `owner-stimulus:${channelId}:${(0, node_crypto_1.randomUUID)()}`,
             agentContext: backgroundOwnerContext,
             sessionPolicyRole: ownerRole,
             prepareEnvelope: async () => {
@@ -1393,8 +1283,11 @@ async function runAgentLoop(config, options = {}) {
     (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(operatorDbPath), { recursive: true });
     const operatorDb = new sqlite_js_1.default(operatorDbPath);
     let taskLedger;
+    const refreshTaskBoard = { current: null };
     try {
-        taskLedger = new task_ledger_js_1.TaskLedger(operatorDb);
+        taskLedger = new task_ledger_js_1.TaskLedger(operatorDb, {
+            onOwnerTaskChangeCommitted: () => refreshTaskBoard.current?.(),
+        });
         toolExecutor.setTaskLedger(taskLedger);
     }
     catch (err) {
@@ -1414,6 +1307,8 @@ async function runAgentLoop(config, options = {}) {
     const boardRefreshGate = new board_refresh_gate_js_1.BoardRefreshGate({ initialGeneration: Date.now() });
     const ownerEventEffectLedger = new owner_event_effects_js_1.OwnerEventEffectLedger(operatorDb);
     toolExecutor.setOwnerEventEffectLedger(ownerEventEffectLedger);
+    const ownerActionEffectLedger = new owner_action_effects_js_1.OwnerActionEffectLedger(operatorDb);
+    toolExecutor.setOwnerActionEffectLedger(ownerActionEffectLedger);
     let stopOwnerEventRuntime = null;
     // S2: leg cadence watchdog - its OWN timer, deliberately outside the
     // trigger loop (a watchdog inside the thing it watches dies with it).
@@ -1557,9 +1452,6 @@ async function runAgentLoop(config, options = {}) {
     resolveWorkerRequestTimeoutMs();
     let workOrderConsumer = null;
     const boardRepairNudge = { current: null };
-    const pipelineSlotPublisher = {
-        current: null,
-    };
     const learningBlockRef = { current: null };
     let temporalRuntime = null;
     gateways.push({
@@ -1623,6 +1515,8 @@ async function runAgentLoop(config, options = {}) {
             },
         };
         workOrderConsumer = new WorkOrderConsumer({
+            hasUnsettledEffects: (wo) => ownerActionEffectLedger.hasUnsettledEffects(`workorder:${wo.idempotencyKey}`),
+            hasUnsafeReplayEffects: (wo) => ownerActionEffectLedger.hasUnsafeReplayEffects(`workorder:${wo.idempotencyKey}`),
             ledger: taskLedger,
             runner: workerRunner,
             loadOwnerBrief: () => (0, console_brief_js_1.loadConsoleBrief)(),
@@ -1664,14 +1558,11 @@ async function runAgentLoop(config, options = {}) {
                 noUpdateScope: `self-check:${new Date().toLocaleDateString('sv-SE')}`,
             }),
             publishPipelineSlot: () => {
-                const publish = pipelineSlotPublisher.current;
-                if (!publish)
-                    throw new Error('pipeline slot publisher is not bound yet');
-                const page = taskLedger.listPage({
-                    includeTerminal: false,
-                    order: 'deadline_priority',
-                });
-                publish({ pipeline: (0, board_pipeline_render_js_1.renderPipelineSlot)(page.tasks, Date.now(), page.total) });
+                const refresh = refreshTaskBoard.current;
+                if (!refresh) {
+                    throw new Error('task board projection is not bound yet');
+                }
+                refresh();
             },
             noticeOwner: (summary) => messageRouter.enqueueOperatorNotice(summary),
             opsAlarm,
@@ -1708,19 +1599,8 @@ async function runAgentLoop(config, options = {}) {
                     sessionPolicyRole: ownerRole,
                     workOrderBriefProjectionPolicy: workOrderPolicy.briefProjectionPolicy,
                 }, wo.id);
-                // A temporal run is bound to ONE task on ONE channel, and the packet check
-                // (temporalPacketRawSourcesWithinBoundSource) enforces exactly that: every raw ref
-                // must match the task's connector:channel or the reconcile is refused.
-                //
-                // While raw reads returned nothing that check was vacuous. Once the channel grant
-                // makes them return rows it stops being vacuous, and a lane-wide envelope hands
-                // the compile every configured channel of every granted connector - so every
-                // raw-backed temporal run would fail a check it cannot satisfy. The envelope has
-                // to say what the run is actually bound to.
-                //
-                // A task with no source channel gets no connector at all, which is the same answer
-                // from the other direction: the check requires zero raw refs for those, so the
-                // grant must be empty rather than merely narrow.
+                // Temporal identity and the required review anchor remain host-bound. Additional
+                // corroboration is selected by the owner and checked against current exact grants.
                 // A reconcile carries the channel's delta batch. Handing it to the run makes every
                 // durable change the run produces rest on it WITHOUT the agent restating anything -
                 // the system knew the batch before the run began. This is the whole difference
@@ -2120,8 +2000,11 @@ async function runAgentLoop(config, options = {}) {
                     },
                     issueEnvelope: ownerEventIssueEnvelope,
                     getNoUpdateMaxId: (scope) => taskLedger.maxNoUpdateId(scope),
+                    hasUnsafeReplayEffects: (batch) => ownerActionEffectLedger.hasUnsafeReplayEffects(`owner-event:${batch.id}`),
+                    hasUnsettledEffects: (batch) => ownerActionEffectLedger.hasUnsettledEffects(`owner-event:${batch.id}`),
                     getTerminalReceipt: (batch) => resolveOwnerEventTerminalReceipt(batch, {
                         ownerEventEffectLedger,
+                        ownerActionEffectLedger,
                         taskLedger,
                     }),
                     recordTriggerOutcome: (triggerId, outcome) => triggerRegistry.recordOutcome(triggerId, outcome),
@@ -2219,8 +2102,17 @@ async function runAgentLoop(config, options = {}) {
     });
     boardRepairNudge.current = apiRoutesHandle.requestBoardRepair;
     {
-        const { createReportPublisher } = await import('../../api/report-handler.js');
-        pipelineSlotPublisher.current = createReportPublisher(apiServer.reportStore, apiServer.reportSseClients);
+        const { broadcastReportUpdate } = await import('../../api/report-handler.js');
+        apiServer.reportStore.setTaskProjectionProvider(() => operatorDb.transaction(() => {
+            const page = taskLedger.listPage({ includeTerminal: false, order: 'deadline_priority' });
+            return {
+                basisRevision: taskLedger.readGeneration(),
+                html: (0, board_pipeline_render_js_1.renderPipelineSlot)(page.tasks, Date.now(), page.total),
+            };
+        })(), (slots) => broadcastReportUpdate(apiServer.reportSseClients, { slots }));
+        refreshTaskBoard.current = () => {
+            apiServer.reportStore.refreshTaskProjection();
+        };
     }
     gateways.push({ stop: async () => apiRoutesHandle.stop() });
     // ── Stage-2 boot pass (plan S2-T3): runtime assembly registered hooks;